last executing test programs: 53.942677595s ago: executing program 3 (id=1476): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010", @ANYRES16=r0, @ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0xd}, 0x20000000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x24, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x48d4bbb78fa62195}, @TCA_TBF_RATE64={0xc, 0x4, 0x34e60190269464ff}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x50b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x1e}, {0x4, 0x2}, {0xa, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0xf081c69cc3893c60}, 0x4008000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x8, 0x1, 0x3f, @loopback, @private2, 0x8000, 0x700, 0x5, 0xfffffffe}}) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xaf, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x403, 0x6}, {0x6, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x5, 0x3ff}, {0x8, 0xb, 0x8, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x28bf, 0x20000000, 0xebb, 0x1, 0x2, {0x3, 0x2, 0x3, 0x2, 0x6}, {0xf3, 0x1, 0xfffb, 0x6f4, 0x6, 0x9}, 0x6, 0x0, 0xfafd}}]}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0xc040) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r11}, 0x10, &(0x7f0000000400)={&(0x7f00000006c0)=@canfd={{0x0, 0x0, 0x1}, 0x2f, 0x7, 0x0, 0x0, "547a554218d31077cc6be98a58a4026870f5c1ada3938667cdb9e4e27f04ec8e636570da8be1caba20ced287aaf26726c57ffaabeed1773346daa3eb4076d774"}, 0x93}, 0x1, 0x0, 0x0, 0x20004014}, 0x4004044) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fedbdf25130000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="2c0001801400020076657468305f746f5f6261746164760014000200627269646765300000000000000000002800018008000300010000000800030002000000140002006272696467655f736c6176655f3100002400018008000300010000000800030003000000080003000200000008000300030000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000000c00018008000300010000001c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000100000008000100", @ANYRES32=r4, @ANYBLOB="3000018014000200776c616e300000000000000000000000080003000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="340001800800eaef4a6b7582dd134517f009d10100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000080003000000000008000300010000000800030000000000"], 0x14c}, 0x1, 0x0, 0x0, 0x4008004}, 0x484) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r12, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="17b92a4f1da36764d69171ac79f2037bd7bce7e4aa286e8d6962f10a2280f7d2", @ANYRES16=r13, @ANYBLOB="01002dbd7000ffdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b0004000000060016000b0000000500120001000000060011008000000008000b0006000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r14, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r14, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r14, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r14) close(0x3) 53.612393017s ago: executing program 4 (id=1478): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x12}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x40000000015, 0x805, 0x0) accept$unix(r4, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010101}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 53.355457772s ago: executing program 2 (id=1480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000010401040000000000000000e8f5a46c06f7eb116c4723f6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000000) 53.315866486s ago: executing program 3 (id=1481): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000df250c00000020000580050002"], 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000540)=[{r9, 0xe000}, {r6, 0x1000}, {r3, 0x40a}, {r4}], 0x4, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x80]}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48010}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x0) 53.195449857s ago: executing program 2 (id=1483): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x48}}, 0x0) 53.194946828s ago: executing program 4 (id=1484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x26020480) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, &(0x7f0000000100)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xecbd5a155ab96c04}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x7, 0x52, &(0x7f0000000140)=""/82, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xb, 0x9, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x1, 0xffffffffffffffff, r3], &(0x7f0000000300)=[{0x5, 0x1, 0xc, 0x6}], 0x10, 0x73efed30}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r0, 0x3, 0x0, 0xfdf, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x25, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @tail_call, @alu={0x7, 0x0, 0x7, 0x0, 0x4, 0xc, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x0, 0x6, 0xb, 0x4, 0xc9c1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xd, 0x8, 0x81f}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[0xffffffffffffffff], &(0x7f0000000800)=[{0x2, 0x4, 0x1, 0xb}, {0x3, 0x3, 0xd, 0x1}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r7, r5, 0x12, 0x10, 0x0, @void, @value=r8, @void, @void, r6}, 0x20) close(r1) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000002280)={'macsec0\x00', @broadcast}) unshare(0x40040000) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000280)=""/83, 0x53, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xd8efb076b3815638, r9, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) 52.769969135s ago: executing program 2 (id=1486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@getchain={0x6c, 0x66, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0x4}, {0x3, 0x10}, {0x2, 0xfff2}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x145}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1000}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000009}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f0000000240)=""/131, 0x83}, {&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000500)=""/218, 0xd9}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000940)=""/232, 0xdf}, {&(0x7f0000001a40)=""/4103, 0x100a}, {&(0x7f0000001600)=""/189, 0xbd}, {&(0x7f00000016c0)=""/226, 0xe2}, {&(0x7f0000000700)=""/55, 0x37}], 0xa, 0x0, 0xffffffffffffff51}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0, 0xfffffffffffffef4}, 0xfff}], 0x3, 0x14161, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, 0x0, &(0x7f0000000240)) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff34000480050003000100000005000300020000000500030005000000050003000500000005000300050000008a55049d4983a6200800020002"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket(0x2, 0x80805, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60122d9200283aff00000000000000000000ffffe0000002ff020000000000000000000000000001890090780000000000000000000000000000000000000000fc0100"/94], 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c00001f", @ANYRES16=r4, @ANYBLOB="04002dbd7000fcdbdf250300000005000d000000000008001100000000000c001600070000000000000006001b00effd00000c001600090000000000000006001a004e20000008001700", @ANYRES32=r8, @ANYBLOB="0500130003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 52.459411583s ago: executing program 2 (id=1487): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}]}]}]}], {0x14}}, 0x94}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000160a01080000000000000000020000070900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f766c616e"], 0x84}}, 0x24040884) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r3, 0x5421, 0x0) connect$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) listen(r1, 0x1000) setsockopt$sock_int(r4, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRESOCT=r0, @ANYRESDEC=r4, @ANYRESDEC=r4], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x89fe, &(0x7f0000000000)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000400)=0x9) 52.334372186s ago: executing program 1 (id=1489): sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket(0x11, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$kcm(0x2, 0xa, 0x2) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x5, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000de0b0b7ee164fa9200"/28], 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 52.193903538s ago: executing program 4 (id=1490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x3, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x3, 0xfffffffffffffffa, 0x7, 0x100000}, {0x0, 0xfffffffffffffffe, 0xfffffffffffffff8}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)={0x13f0, 0x25, 0x1, 0xfffffffd, 0x25dfdbff, {0x5}, [@generic="51e0f85fb8d643c3a89e3324d326d07d2d4dd5a5be2cc1c2f461d6fb13d2738eac8722f0cbed242aa2f48d22487dd2024dca3f13c4b63f1b61f48bf8bcce1c35351036ee4fba2565a469c45b29a289c379", @nested={0x1338, 0x99, 0x0, 0x1, [@nested={0x8, 0x5f, 0x0, 0x1, [@nested={0x4, 0x51}]}, @typed={0x9, 0x47, 0x0, 0x0, @str='IPVS\x00'}, @nested={0x211, 0x14a, 0x0, 0x1, [@nested={0x4, 0x95}, @generic="c30d9a7621fea149fe4070e0f71bfe62da7f2d222122568f0dc4595a384d0af40cb365d787c7847adf92afe2ee2f720098051e9c8abf1c2e9949fdb581b644ba3df015bd2e60d9e63f0ff0dcdcef432c58fdcf34652a821475de7b51412d0022604a4192c73ab4a2fa55816563710521a8fc81af78d3abe63e68058714a62605f39ffda11bd2e8182d3d2a051c2cdd0212f241398527da5a0f427d65ea5914756b4a759cdd530dff1bb2e6078519d14bbc0996ae230229f471e1671e34c8c13f1f353ff2c1862872551a03a3e7472a5182920330d294db3f3a5692d6c9649b2b381efff87873eace6985372812c8e0", @generic="4cee83e87eecbb425b0dece2d17d99f1b69af48e54c5f396e2b8da1fd4217131b5deb0bd52b007de569d35c6242e973d5f72195b06e1166a9b6e0b1c3647b1d3939932f0d6", @typed={0x8, 0x26, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0x58}, @nested={0x4, 0x2b}, @generic="49361e36550bbaee9441971da3917458ce26424599fb94fe2bf581603f97d490071662c7a18d66863738d5e3a692f16d7e8f5b7323701b2482369d3fcdb3b913675ec3c51120106b376003f77358aaecc0d4e462ce67296c298473ecf6a577564f51c15be78e1c61e2cab4a510bd67ec9466efb26d3f962ce69f16dcf805be433d23f621b0b8f584a72c5f8035ca5686e4a90a214dc2b786ae85a9a0981d9ec09d01277a82ffbad7cea6e0a70077b03dfb2023b530160e2b627b1b51aeb15fb45a24dbad2e"]}, @generic="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", @generic="b7a2606cb125b1eeea7da797d59e8429ae48b00effdbc838f05c305f1676b63e81817d7fbe39f6dbb037ec270c80c3e9f8db0971a66632a1df385fd7e1d4c732fc71f3c0b4609208240e5e23cd430f42e20bf6bfc32b11d78bcca36a135776783f739edbd19c2f649edc48394ea949d3e9433192f74f2418151ddc27d65ab37e436066f409fd7127e31a3915254bbd36821eeebb2813fd5fed7aed050ab47fe073c41970519be0b14d812fd928b095d745ec9df9fe623f81401d899a8403e52a376578337fe6adfa28f29050af73be07", @nested={0x3c, 0x93, 0x0, 0x1, [@nested={0x4, 0xb8}, @typed={0x8, 0x92, 0x0, 0x0, @u32=0xb9557f6b}, @nested={0x4, 0x118}, @nested={0x4, 0x113}, @typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @typed={0x1b, 0x69, 0x0, 0x0, @binary="0a9c1fc07ba31ea0a7502c6b27332a6f84f8c64dc8a8e2"}, @generic]}]}, @generic="f3b874e1e9bd2c76e6ca6869667d5a65ea21a1f3afe51e83e14f1a3e84dcda037ceb9e2ae11400db9336cff3a623913863a3283167dbb3ddbd8737555d6b2184f6bc0a43905547ccc2bd309ec2293792fcd1"]}, 0x13f0}}, 0x48880) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000180)) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000000080), &(0x7f0000000140)=0x4) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r7}, 0x10) ppoll(&(0x7f00000002c0)=[{r6, 0x83}, {r9, 0x1100}, {r9, 0x4}, {r4, 0x420}, {r6, 0xc001}, {r8, 0x6404}, {r8, 0x190}, {r0, 0x10}], 0x8, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0xc9c0]}, 0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r4, @ANYRESDEC=r4, @ANYRES32, @ANYRES32=r4, @ANYRESDEC=r0, @ANYRES32=r7, @ANYRES64=r3, @ANYRES64=r3, @ANYRES64=r4], 0x58}}, 0x40041) 51.999244141s ago: executing program 1 (id=1491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00@\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fedbdf250900000008000500be0000001400038005000800ff0000000800010001"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getpid() getuid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x188, 0x12, 0x20, 0x2, 0x25dfdbfe, {0xa}, [@generic="113f7c2656ba6902adcb96e52ff3e2d2b1610dc88b30d3cabe08ce49ca4f12e0d5e8567d927384f869e95e0f911e32b9ccf35e366aaf002fa2f45a6d4573d1208799ef4ff62822843a1199aaf552b2714cc268c47ac320ea809b00009d32c9f56f2a51280c2159231aa39536a411c4f60f13e19682f78934ea6fe8fb5d687d4b9b0ad93df49ef739e95f6494bd47be8efe86fdf8a302667b4bd5f8c1821b367b5d02ab7745bb649c76ff9fc80341d8071c16be9a44803232f04d09cd3b91e9c16476e6462227f9e590a9cb3fba055a52665fe1a6bc57b16abad4ed54726aa124b3a752d35790901d1da02911fe193190b8104e7fd931a8227d78429599725066c419d62284a9409ec6ff953de8dd8d0fa2e58197b16447c5248d802f70101011f08addfb110a0000b0a3cc29da4a2a2397b41c7c3a080047fbbc891e7d4b6d5998160d4678606c24de94928bed892d1a1d87c2836f561e02dd216d25f058e2c58600b6d3bdc2a7e204a791b9518bfd59d72a27a6"]}, 0x188}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd70000000000067db000008000334", @ANYRES32=0x0, @ANYBLOB='\f'], 0x34}}, 0x8080) socket(0x1a, 0x5, 0x7fff0000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xffffff2a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) 51.950822078s ago: executing program 4 (id=1492): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x280}, @nested={0x15, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic='p']}]}, 0x34}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x280}, @nested={0x15, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic='p']}]}, 0x34}}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="23440400000000001c0012800b00010065727370616e00000c000280080007000000000024adbf3e263599991199cfea4f261f87b9641c9b7a7c80d422ff6b95a56f628284167e83fd2eb1e010a2e71beac5f0222a44fe25e38380d95f00000e0442d1576f4febc25f7623c82f4b954b12b3e3c749c209765cfba1cb567533ba8c613bcfb06ee89c12d9ed258ece61390c4edb662bd3ad9a87ec47abd3"], 0x3c}}, 0x4000) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="23440400000000001c0012800b00010065727370616e00000c000280080007000000000024adbf3e263599991199cfea4f261f87b9641c9b7a7c80d422ff6b95a56f628284167e83fd2eb1e010a2e71beac5f0222a44fe25e38380d95f00000e0442d1576f4febc25f7623c82f4b954b12b3e3c749c209765cfba1cb567533ba8c613bcfb06ee89c12d9ed258ece61390c4edb662bd3ad9a87ec47abd3"], 0x3c}}, 0x4000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000000)="5aa62d32aa43"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4, &(0x7f0000000000)="5aa62d32aa43"}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) sendto$inet(r6, &(0x7f0000000240)="3ad815ca66c343ab40654a1750612b825ed06682de72dd3bb127bf9479d93bad53db56a2d84e04156339e4b54d088b9ad75a234f9b85f09d71ed563fd272335e74149c0619ee7b8bb0f79d89fba0360382f03eb93dd8411a11bd2438c38ad7e39b922e440d972a98e486b23e072ad6e1e0ba43d1fda158cfdd7d7ad5dade054a3695553a54d93ab8048867499b5f846253bf5f71cb085de0a6dafad4390b76be504b05f825629885a203e4bb5b", 0xad, 0x4000000, &(0x7f0000000300)={0x2, 0x4e21, @multicast2}, 0x10) r7 = accept4(r3, 0x0, &(0x7f0000000080), 0x0) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x3, 0x0, {0xa, 0x4e21, 0x7c9, @local, 0x81}}}, 0x3a) pipe(&(0x7f0000002740)) (async) pipe(&(0x7f0000002740)) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 51.775327043s ago: executing program 2 (id=1494): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000300)=0x7fff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x400c050) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000002c0)) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0xff, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x7, 0x7fffffff, 0x7fffffff, 0xfffb, 0x8, 0x5, 0x9, [0xe, 0xfb]}}) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r4, 0x1, 0x6, @random="71b6f1cfbebc"}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="8d2206000000ff002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x20000645}, 0x0) 51.54443293s ago: executing program 1 (id=1495): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x4, 0x3db7}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0), &(0x7f0000000400)=@udp, 0x1}, 0x20) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x9, 0xd, 0xa, 0xd680}, 0x8) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x2c, r4, 0x921, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@ptr={0x5, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x4f, 0x30, 0x30, 0x0, 0x5f]}}, &(0x7f00000006c0)=""/262, 0x2b, 0x106, 0x9}, 0x28) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000001c0)={0x7, 0xc, 0x0, 0x1, 0x3, 0x9, 0x7, 0x1}, &(0x7f00000003c0)=0x20) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8, 0x10}, 0xc) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000400)={0x1, 0x5, 0x2, 0x80, 0xa, 0xfa, 0x2, 0x14, 0x70, 0xc, 0x1, 0x8, 0x3, 0xfe}, 0xe) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xcc, "8987061e38b6f9cf3a596b54758df90b6df6009f7551572a6324c996594065d23d1aaaeac1795a458fd5356c6242fc52c952f1ecc71b4505408f47f241c70987471c7213bb287be18e7f1b70931e4df556f942db3f052f3b41eaf61f03353b59b84bf113c1b9f258c4841b7f5916d447331bdfdccc27fb06f8ca3b966f285dda4c8781be9bb4930705595ad8ce406055f72524179042d690807e01c056d96eed4e0e89b35ad58ea2807d2529a840f137eeeb74a84884272c18810cd2ebb119b6d209a5e3dc4e7c21c2641c1c"}, &(0x7f0000000000)=0xd4) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r7, @in6={{0xa, 0x4e22, 0x2, @loopback, 0x80000001}}, 0x0, 0x0, 0x0, 0xfffffffe, 0x44, 0x6}, 0x9c) 51.467551053s ago: executing program 4 (id=1496): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xb4, 0x4, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x801}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x34c}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8001}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xd17}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x712}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff801}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc850}, 0x80) openat$cgroup_ro(r0, 0x0, 0x7a05, 0x1700) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r1, 0x0) socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r5, 0x0, 0x1843}, 0x18) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1100000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="000000000000000000008100000000000000000032ba4dc3dbcb5f1f9548111337f7884b85d9cc53cb9fdafadf781215e72d53452520a77dfd42037a2ab0bf62743355767237df6cc1ff4799727e09d53a2094d4d6873143f05f6d7369f1898c011f9c0b4ec38bfafa81762eeceb943567691f924d78610779bca1bfc67e1fe12427d236c79cc1731614998643dbf986178e2dc5badd85a6684629d46826ff13bfeb738d6130c37349f5f671b4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r8, &(0x7f0000000000)="8823a5", 0x0}, 0x20) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) accept(r1, 0x0, 0x0) 51.323394628s ago: executing program 3 (id=1497): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="6d000000000000000000003898ac7512b6edaf5e6ad51320cd45000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000000c0)=""/254, 0xfe}, {&(0x7f0000000240)=""/131, 0x83}, {&(0x7f0000001a00)=""/29, 0x1d}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000001a40)=""/4106, 0x100a}, {&(0x7f0000001600)=""/189, 0xbd}, {&(0x7f00000016c0)=""/226, 0xe2}, {&(0x7f00000017c0)=""/42, 0x2a}], 0xa}, 0x10001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfff}], 0x3, 0x40004122, 0x0) 51.320949018s ago: executing program 0 (id=1498): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80300001600010000000100fcffffff0a01010000000000000000000000000000000000000000000000ffff000000000000000000000000000080201d000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000080000000033000000ac1414450000000000000000000000000000000000000000010000000000000000000000000000000000000000000000fffffffffffffffff1ffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000feffffffffffffff00000000000000009607000000000000043d000000000000ef0000000000000000000000060000002c00130020010000000000000000000000000002ac141430000000000000000000000000000000000a000000e40006"], 0x3c8}}, 0x0) 51.309820776s ago: executing program 1 (id=1499): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0xd}]}}, &(0x7f0000000100)=""/141, 0x26, 0x8d, 0x1, 0x7}, 0x28) (async) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) syz_emit_ethernet(0x37, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "540500", 0x1, 0x2c, 0x0, @local, @local, {[], "ca"}}}}}, 0x0) 51.268811541s ago: executing program 2 (id=1500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) r3 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600007009921daa2f63432e75d5ef55491761788e72f44e5eb4436492ccfba6e40beb7de8b3b55c6cfe2341cad63aa2dde9afac21d97933933bec9e3d705e7ccdfbc837088ae74718cd247644c9f8b4f62914f19a0ea1f462550a98c583e33b14c368cc66fe9f6cf4ddfd1d46fc25b29467db82c46059238067bdc94688c6201b98b11917d4944647fea3740d82ecfd382344ddd6e703732936504183994afdfbab2b424dd51b726ca55ec229066", @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="18b9ff0076008d0b00400003000071498df05ff6ed1c0000"], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x0) unshare(0x68040200) r5 = socket$inet(0x2, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112df000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x6, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac1414"], 0x0) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000000c0)="7ced950b36b9bbc50b6b7a52043967fc6bcae86c725694223cee9aae9061acffce670961338f81fa4428daa461607653f530", 0x32) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_netdev_private(r9, 0x891d, &(0x7f0000000100)="26a8415a54a6867f8a1e3a") recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x0, 0x0) 50.971184981s ago: executing program 0 (id=1501): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r0, 0x0, 0x8000) (async) close(0x4) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x2) (rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) (async, rerun: 64) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 64) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=@ipv4_getnexthop={0x20, 0x6a, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4058000}, 0x80) setsockopt$XDP_UMEM_FILL_RING(r13, 0x11b, 0x5, &(0x7f0000000240)=0x300121, 0x4) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 50.905506006s ago: executing program 1 (id=1502): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200040, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48804) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@loopback, @initdev, 0x0}, &(0x7f0000000240)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'netdevsim0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0xf7, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0xf7, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x118, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40010}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x80c0) r10 = socket$inet(0x2, 0x4, 0x10) setsockopt$inet_mreq(r10, 0x0, 0x20, &(0x7f0000000a00)={@local, @remote}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r11, &(0x7f0000000c00)={&(0x7f0000000a40), 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xd0, r12, 0x8, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24048000}, 0x4040000) r13 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000c40)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000c80)=0x1c, 0x0) ioctl$sock_inet6_SIOCDELRT(r13, 0x890c, &(0x7f0000000cc0)={@private2, @private1={0xfc, 0x1, '\x00', 0x20}, @private1, 0x2, 0x0, 0xffff, 0x500, 0x1, 0x200, r4}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r13, 0x84, 0x77, &(0x7f0000000d40)={0x0, 0xfff8, 0x9, [0x0, 0x3, 0x5, 0x81, 0x8, 0x4, 0x6, 0x9, 0x9]}, &(0x7f0000000d80)=0x1a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r13, 0x84, 0x70, &(0x7f0000000dc0)={r14, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}}, [0xf26, 0xfffffffffffffffd, 0x4, 0x1000, 0x4d4606a4, 0x40, 0x4, 0x9, 0x8, 0xd, 0x4, 0xfffffffffffffff7, 0xffffffffffffffff, 0x7fffffffffffffff, 0x2]}, &(0x7f0000000ec0)=0x100) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r13, 0x84, 0x70, &(0x7f0000000dc0)={r14, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0x9}}, [0xf26, 0xfffffffffffffffd, 0x4, 0x1000, 0x4d4606a4, 0x40, 0x4, 0x9, 0x8, 0xd, 0x4, 0xfffffffffffffff7, 0xffffffffffffffff, 0x7fffffffffffffff, 0x2]}, &(0x7f0000000ec0)=0x100) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000010c0)={0x1, &(0x7f0000000f00)="829f7e248c6b1cf206cac288b49fb9f43018457174f6877c45920a2480458d60aef0fc2da1c97eb8d8cf4149a2fe80c2f0f669f01d4175b859cc7ab273f9f6c9d6bcf83f74b8e9d10263899db664c7dafd73bc42612e04708dc0aa2754e7028f83b45f4ed9983cb26ff82cb5d289a0b682a4131c451425f8c3563606dfe1886cc2074cb8855628a6df3da1", &(0x7f0000000fc0)=""/225}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000010c0)={0x1, &(0x7f0000000f00)="829f7e248c6b1cf206cac288b49fb9f43018457174f6877c45920a2480458d60aef0fc2da1c97eb8d8cf4149a2fe80c2f0f669f01d4175b859cc7ab273f9f6c9d6bcf83f74b8e9d10263899db664c7dafd73bc42612e04708dc0aa2754e7028f83b45f4ed9983cb26ff82cb5d289a0b682a4131c451425f8c3563606dfe1886cc2074cb8855628a6df3da1", &(0x7f0000000fc0)=""/225}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000001140)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r11, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x54, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x114) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r11, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x54, r1, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x114) socket$inet6(0xa, 0xa, 0x5) (async) r16 = socket$inet6(0xa, 0xa, 0x5) ioctl$sock_SIOCINQ(r16, 0x541b, &(0x7f0000001280)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r17 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002300)=[{{&(0x7f0000001300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001380)="708c6660ce906abf94b4819f29e7dfb509dffe7efc3cad80688b5a1e7001f29a3d94b752d1e27f27d65c3cfa48a5d972582959baae24820ae1f4ae241dec351e6051d5ecb5d2fc9f19142a0cd2ddc666d88aa9f143523f0122feb4b712885f60f21237d8d0af41624e7ccbffc61d10d321e8cf1e7e8ea3ea0d84331f6dc0b1f1f8964ce9fa9d8eb219", 0x89}, {&(0x7f0000001440)="ea9224f5024d1d612a3b748856c5fd046ce567e4e1d671ac7b4d3c5ccca2d2f961b8dd71b87e907b29cc71ef8cbcc8d05aca201414d73b85fda087f87d2bb271dd1d4df6471119115df144a1", 0x4c}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r16, r10, r0, 0xffffffffffffffff, r16, r10, r11, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r11, r16, r11, 0xffffffffffffffff, r10]}}, @rights={{0x18, 0x1, 0x1, [r16, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000001b00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001b80)="ee339e9a7d702c2eea8069b8d62af54d", 0x10}, {&(0x7f0000001bc0)="768247506efabcb61ad5d867a3ca63e261ab15ed232de51685162de3861fc5f2b81ad4939c497a4dec8ea97e3848d225e6126fd7aaf51b7f95963ca9cc3364cfc3296b9550b2460c9a4e55c83d1209a1fcea40a0cdfec09f1bf99d49aeaf747650aa0e07ed3e43a5bab70ab4be987d18a2444f9232dd2fe8f5f0c06af219a15871a7209d0c2625a01d5a92b9d402e209c59aef5245eb38842856e4a1dcb5df3a44cc15a0836a77571cf242cb9492fe0c82a5f685c66ef2736b923b57375129e7e596f7a2e316e89ac85dce71ef6534ff83dcf8ab4180f74981ebf9b1b80361e9", 0xe0}], 0x2, &(0x7f00000021c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r13, r16, r17, r11, r17, r16]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r11, r16, r0, 0xffffffffffffffff, r11, r16]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r17, r16, r11, r11]}}, @rights={{0x34, 0x1, 0x1, [r10, r16, r13, r0, r17, r13, r16, r17, r11]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r13, r10, r16, r16, r11]}}], 0x140, 0xc0}}], 0x2, 0xd5) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002300)=[{{&(0x7f0000001300)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001380)="708c6660ce906abf94b4819f29e7dfb509dffe7efc3cad80688b5a1e7001f29a3d94b752d1e27f27d65c3cfa48a5d972582959baae24820ae1f4ae241dec351e6051d5ecb5d2fc9f19142a0cd2ddc666d88aa9f143523f0122feb4b712885f60f21237d8d0af41624e7ccbffc61d10d321e8cf1e7e8ea3ea0d84331f6dc0b1f1f8964ce9fa9d8eb219", 0x89}, {&(0x7f0000001440)="ea9224f5024d1d612a3b748856c5fd046ce567e4e1d671ac7b4d3c5ccca2d2f961b8dd71b87e907b29cc71ef8cbcc8d05aca201414d73b85fda087f87d2bb271dd1d4df6471119115df144a1", 0x4c}], 0x2, &(0x7f0000001a40)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r16, r10, r0, 0xffffffffffffffff, r16, r10, r11, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r11, r16, r11, 0xffffffffffffffff, r10]}}, @rights={{0x18, 0x1, 0x1, [r16, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000001b00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000001b80)="ee339e9a7d702c2eea8069b8d62af54d", 0x10}, {&(0x7f0000001bc0)="768247506efabcb61ad5d867a3ca63e261ab15ed232de51685162de3861fc5f2b81ad4939c497a4dec8ea97e3848d225e6126fd7aaf51b7f95963ca9cc3364cfc3296b9550b2460c9a4e55c83d1209a1fcea40a0cdfec09f1bf99d49aeaf747650aa0e07ed3e43a5bab70ab4be987d18a2444f9232dd2fe8f5f0c06af219a15871a7209d0c2625a01d5a92b9d402e209c59aef5245eb38842856e4a1dcb5df3a44cc15a0836a77571cf242cb9492fe0c82a5f685c66ef2736b923b57375129e7e596f7a2e316e89ac85dce71ef6534ff83dcf8ab4180f74981ebf9b1b80361e9", 0xe0}], 0x2, &(0x7f00000021c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r13, r16, r17, r11, r17, r16]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r11, r16, r0, 0xffffffffffffffff, r11, r16]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r17, r16, r11, r11]}}, @rights={{0x34, 0x1, 0x1, [r10, r16, r13, r0, r17, r13, r16, r17, r11]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r13, r10, r16, r16, r11]}}], 0x140, 0xc0}}], 0x2, 0xd5) 50.876564428s ago: executing program 3 (id=1503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x40, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000001f00000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100010000000000000000000000000af5802559d4d7c244a1259f7fae4f0b3924082a140f7c5dee98d973dc1095f35bcdfc"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 50.523390415s ago: executing program 1 (id=1504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b020007e03dd65193dfb6c575963f86dd", 0x12}, {&(0x7f0000000200)="b700000006000000000000f1dd0fccd5de059d3679f3", 0x16}, {&(0x7f0000000100)="db17965ef81708641d24e2fb401877cd898b39a2", 0x14}], 0x3) 50.360169906s ago: executing program 4 (id=1505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) (async, rerun: 64) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmsg$inet(r5, 0x0, 0x41) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 50.299464808s ago: executing program 0 (id=1506): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000033000b000000000000000000070000a551745caf6f70ef008848000013000400666175be4c007b6c745f7e086a656374"], 0x34}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 41.336391099s ago: executing program 3 (id=1507): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000001001000001000000dc0000000000000079ddf87a6fb3d45ac1383b9f9d6edae23406000000000000003c6de234f51a47928ddb022e4ad434cb99572b858bb59e38"], 0x18}, 0xfc00) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1002}, 0x28) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x1d0}, {r3, 0x80}, {r2}], 0x3, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0x86, 0xc1, &(0x7f0000000580)="45340c8c727786e54b91e248e8b1cf41f1ea91c80b98d1ce27dec79f11e27fb4c5155c6af658c0705d999b3c1016fd0ae365ae934d9093cb400e2f29cd0587c44d7bfc69e6e19bd132e4513038c907f654cf38cad12eeceb1c8bf151c7d627c8899cc47e98731d59c2b523184053c35e6c434ffa11fd7ff102809e446bec5c9240cba55141ef", &(0x7f0000000780)=""/193, 0x94, 0x0, 0x8, 0x5, &(0x7f00000001c0)="ecfc9bbae35bbe4d", &(0x7f0000000640)="e8ac8497c3", 0x1, 0x0, 0x9a77}, 0x50) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), 0x0}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x48, 0x2c, 0xd27, 0x78bd25, 0x8004, {0x0, 0x0, 0x0, 0x0, {0xf, 0x7}, {}, {0x2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xffffffffffffffd1, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x55}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f0000001640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001680)=0x14) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000240)="c65f3422f2e5ca8effebb909a55d239bddc223fbaa98b4a7b0bf197342b3", 0x1e}, {&(0x7f00000003c0)="4685aafba5116c6b3955dafb533efaeacf9c269afdf70e5b6e9494c1cccdaa9a269795bb20582bb5b219db810a09dbe67ef290fef8c83ee1ad020aedaf972ea60bdea097facbcd225c9bcdfec7aa39e38fb268fb3574871614a688c2a9f52f826c858d8279886b04c85934fa54717be9a6202dc2f07aeed13049478bbf80a4fe0cbd671e7f5515bfa55db15cf4220340a691cc508d97b6f246351764d637ff465683e077916e577cb9fbfba7938757934b377a241f6c8378143fc1a9422f5e376571aabe3287d69802d9e5c08bbe0a03138538df9c27cdc8b7", 0xd9}, {&(0x7f0000000680)="8b1b7fd98d5d905b029bfd0ffa112158b974771948255235b6c1fcb0113b91a2ed217e93e79bda17e0a0a754ffbceb50db046edcacbabd1aacf9d95da880a521eafee0ed33355e840ca446c4c3cb86cf286a8331a14b5c43cf703312c53559d91eecb8296fea642015eb7e7093f518dfdc02a24b86cf77e34b2c75cdb4a6b227233ea66f9d0cd07c7c96f5e08fe94adf913f36ac30333d7c906f204057fea5de682524c8c97d1b29894443d33ef39e7f7afe60ff1f9804b84ed419b3be078362c54bb3a9594d4c8b689e8af834e29fba81d68b7fe5", 0xd5}, {&(0x7f0000000a00)="22b554cde33ff898e6ccc43126610f94ed367834bdb93fde226b365ad995eaa84150de83294240e1de86fc83bbf4776b85e832da301d208e0bfa10c4ac7cd64c536d8c04ac1e5caccb99aa376ceecfc86b11015141a4f75686dcda2aa044751209269e6207ed339d2d1c1b8be85ab8a5093a83bbe10c89195f215ac28a9d84ed6c8ceb089f9bfc3ad84731e365c43d410d5e701ecbcfdbb6fdbaca7a4c6a94fdd4bc9b3d890738ccf918dce8d130ca1cf5b797af238ea106651e28750cc4a7ce738bf1637523", 0xc6}, {&(0x7f0000000900)="3bda5c44c5ee5ed4bb24d3593280b0e8440ba3bb5a7b14f1c725f1d549e04d17a9a56bddc030fe831bf6754f8c064b0cfe2e435cc1498100f0b49f9fbda548b0b159f7057218004e8eba1d26183a4d0a62b56a525324000edb08a97d0545fe5fc66a421740b36afd571084e1db9e3404e1c6a314874505033bda780f4881f6c60a4166488cf468bbaae945ffa8c5ef33222df56ee613ee35ee891690024e3986e4133f9c4b03a89ae0bfa03ced", 0xad}, {&(0x7f0000000bc0)="371f2e10213a54ccd7033b907ee21534dffbe7201af98689699ce61ac1f3b6ae50617908b8f9f302090e81595d72c8d87b4db1162682749d7c119bfa755714d067f488a28e4b7615cf15402fc9b08c04450b5bab6b49b372ba4fb52f", 0x5c}, {&(0x7f0000000c40)="81316d7ca7a008becf08cdea09b30b9e9da06d7a8d207a91ff7038b8e7ee29bd50b9f42b3a55a47b2bf9e9ab1c01b32a89b26ecc502c3dc617f5d04489e99d3688e65e892a43efa8706fce111bccf6a3722f2a7fe86e7dad4452ae469c1b85c0fdbfc68adb1cf8023f170bcf8b643e6480b78b1ff16113aea38e340f5baf0303cd518a26fccf52171e1078cd85f840acbbf85453577d7a0025ae2247cfcfe170a5bc3eecd587f345f87964e9e27ccf8d4459bbda23888cbf3dfeb23458b00ced0f44a4a764f7674cf3156e4805766ebf4f5987", 0xd3}, {&(0x7f0000000d40)="816405045b502650b3f8a4b2a6eef58b398b9b3cdf19892d138531ebf3dce35b3354b0998bf64cb8e210ae5e0896f92f58b53f5ec3ef512b36cb1bb214d340e5e1161c3f2699bae46a0858671bbae4221d4e4d9badc2c020ba23d52ca2c55b04719933c2a80c3abe081948b1287a90f7fab1510958456734014a716242a24f18a1c463944228439c7ddfe77ed2e5d964826f756a4384907d699c69a22aa44b0c1b7c1d368d5a5b92b04b63affae7e13ae3139e582dd3cd00f8b3b527488f9914cfa1a5d82d9fe5bf464b0e7163a6a77b7e89dc2d57a04c15", 0xd8}, {&(0x7f0000000300)="10ff562d88f2f19c09fd45c481b1d36f0bfcd062698d90fa1877c27cdaa7d2f851abec33585f23f7dc5b6df1cb66a2e17d4ff5b37bc7b7", 0x37}], 0x9}}, {{&(0x7f0000000540)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000f00)="d36b5adc1b0637eb6fbd501a03fd1db0ff2cb4d41b752ecd17f0a94629b0f2b5e11fdc44ddb145e1e51b7c2c1d8c39d9e4202b", 0x33}, {&(0x7f0000000f40)="2cac4284a61832e06796bacb5f37a83817358a8bcab54553a77b87694802d8d6eb4b0d5f540dd3e5daab6d6ca1be87415a08827bdedeea4358d671cc317f4bdc4f3a1a7f54f8600554f582dfad232b73b93bb9555ece65f9ef87467607e1a95c0fbc39fed27b4a141e01fa096f9cb6bd6a36809913b073d388bd3f1174ea496bdc62b97a38f04b152429c2db8b74f4bcd1d5cc00fe9adb72268a3108a7d889aa02e5318bfa2bed317517311e2f27d27180dd74248277a8bb85707e336faae0663277219a35d1a6732e7cec6576d6eabb34e530f61ba4c7c92d3d2c4ccf43bf97d5c530c8782b3e8b8adcedfedee82ccc811cdd5c9450aa", 0xf7}, {&(0x7f0000001040)="a9f68d2449541f04303ea34994f50d9edfe87b7be7d0ab2551f42a940dbe1af232f7aa78c0d54b9d66767ea798a087fb2b20f43f4f91b8fcfa6c67ea07023e", 0x3f}, {&(0x7f0000001080)="2f900fb27726233590b21fd0256ef3b0f2cb392f465893819b0edd8223a2421d8d70e34b2ddd11e6f8232a6a6a89bb081f141c68642905eb264d0c420fd0520461b504ebbeb5a7e3dcb6008c744c21d4539d2ee5e8bb49374c1ec9af97939e2c1f100572266e3f6e2ba2e5e78ea3a8689502341c5a4e49e086e20c281489b6894b02f5d26933929c6d1210bc8a271657610e8fa0ac7d8592fddc7822f1b85819bd1623ff8a751d40f672d24fbc1fd9354a15084049a9343cc5488da7191bd70575a165067354142e078083", 0xcb}, {&(0x7f0000001180)="368651fb1614bac1e5ae8e99fd0fbcc4f16e0367ce5c5be50208e66cce05f1ed5e8cd3c67ff8c1bb5ab79182a5b5518628dff50fb47e5fd0eca3b291", 0x3c}], 0x5, &(0x7f0000001240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x16, 0x0, 0xf, [0x4, 0x7ff, 0x80000000, 0x6, 0x6, 0x8, 0xf72, 0x1, 0xfff]}, @cipso={0x86, 0x28, 0x2, [{0x3, 0xe, "bfade0c39d3d909bd56fd419"}, {0x0, 0x7, "4c1b5cd1f6"}, {0x0, 0xd, "c05f08eacda64de0e5997a"}]}, @cipso={0x86, 0x2e, 0x2, [{0x5, 0x7, "f19d4bb493"}, {0x1, 0xd, "751cdbd1e5f8daee28810d"}, {0x6, 0x10, "67b37a03bf4a39062d4712e5e4e8"}, {0x5, 0x4, '02'}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x29}, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x44, 0x0, 0x7, {[@rr={0x7, 0xb, 0xf8, [@dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101]}, @timestamp={0x44, 0x8, 0xe5, 0x0, 0x0, [0x8]}, @rr={0x7, 0x1f, 0xd1, [@broadcast, @multicast2, @multicast2, @rand_addr=0x64010102, @broadcast, @empty, @loopback]}]}}}], 0x148}}, {{&(0x7f00000013c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000001600)=[{&(0x7f0000001400)="2e17b3003a92ed96af73a891584895b8d095e57709e4cfa16a76b45d75312d6adf5fd24088daab7217d3600a6779d6e415485e210ce5ae172a56adb385535a", 0x3f}, {&(0x7f0000001440)="ad595c4edbb4bc0cefec742f2a3c4442e1f61a246b1e6b634d55a633103f9e543d871a9c196ac0680d45675b89cd989c62efff8142d4da79d296b6ba98e603e5a08f1446c181c4d2b57a79c68f77392de3b596a7353361c0a957f2dedc830ddafad463bb6284d30bb8e7b9a97b37793edb747929ee8a2b44ffa670a2692d980df41cd42215", 0x85}, {&(0x7f0000001500)="9efa04978ad0992a60dca31f85d34f256448b08616dbb2bd01b73bf85de85bee315a34314204fb5f1a7e93613b1f55dd7ab7e686e7d81a413f250096755fe73a213f6fd48e68bfb41782a5977dceb18881dcca136f48dd182a17acf1023d07a54a29c8cea3be550a6e1370d8c1789bd542fe8069edf4f79d7ac7b831dbfe65bdcddff5dd0d138c486ff8b97f8d0476ac2813c888e36ca64c800026a1792c1551ce7ddceb3ff0795c06a151ca01806ba7b3b6e6e3d161b0861137579dfd39a58139713b52f621275823e5d7d95dcdac332f224a9c3a5dbcb37723c5", 0xdb}], 0x3, &(0x7f00000016c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010101, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xda, 0x3, 0x3, [{@local, 0xc}]}, @timestamp={0x44, 0x8, 0x56, 0x0, 0x4, [0x7]}, @generic={0x94, 0xc, "6e0786f940e699490825"}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x47, [@rand_addr=0x64010100, @local, @multicast1]}, @ra={0x94, 0x4}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_retopts={{0x30, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x14, 0x59, 0x3, 0xd, [{@multicast2, 0x9}, {@multicast2, 0x1}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop]}}}], 0xe0}}], 0x3, 0x9da69c8a3869f157) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r5, &(0x7f0000000380)='/', 0x0}, 0x20) recvmmsg(r4, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) r7 = socket(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$NFT_BATCH(r7, 0x0, 0x40) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) close(0x3) 40.411573561s ago: executing program 0 (id=1508): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x80) socket$alg(0x26, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) 33.37115409s ago: executing program 32 (id=1500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) r3 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600007009921daa2f63432e75d5ef55491761788e72f44e5eb4436492ccfba6e40beb7de8b3b55c6cfe2341cad63aa2dde9afac21d97933933bec9e3d705e7ccdfbc837088ae74718cd247644c9f8b4f62914f19a0ea1f462550a98c583e33b14c368cc66fe9f6cf4ddfd1d46fc25b29467db82c46059238067bdc94688c6201b98b11917d4944647fea3740d82ecfd382344ddd6e703732936504183994afdfbab2b424dd51b726ca55ec229066", @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040008000000080007000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="18b9ff0076008d0b00400003000071498df05ff6ed1c0000"], 0x18}, 0x1, 0x0, 0x0, 0x40010}, 0x0) unshare(0x68040200) r5 = socket$inet(0x2, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112df000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x6, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac1414"], 0x0) close(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r8, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000000c0)="7ced950b36b9bbc50b6b7a52043967fc6bcae86c725694223cee9aae9061acffce670961338f81fa4428daa461607653f530", 0x32) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_netdev_private(r9, 0x891d, &(0x7f0000000100)="26a8415a54a6867f8a1e3a") recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x0, 0x0) 30.802367426s ago: executing program 33 (id=1504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ad5ce39667bde4014c9745573838", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b020007e03dd65193dfb6c575963f86dd", 0x12}, {&(0x7f0000000200)="b700000006000000000000f1dd0fccd5de059d3679f3", 0x16}, {&(0x7f0000000100)="db17965ef81708641d24e2fb401877cd898b39a2", 0x14}], 0x3) 28.311940641s ago: executing program 34 (id=1505): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async, rerun: 64) unshare(0x62040200) (rerun: 64) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000e7ffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)}, 0x0) (async, rerun: 64) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) sendmsg$inet(r5, 0x0, 0x41) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x400, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0xd, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 27.102244016s ago: executing program 0 (id=1512): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x20}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) r1 = socket(0x22, 0xa, 0xa0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8004) 26.925626066s ago: executing program 3 (id=1513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x8}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x36) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000000c0)=""/254, 0xfe}, {&(0x7f0000000240)=""/131, 0x83}, {&(0x7f0000001a00)=""/29, 0x1d}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000001a40)=""/4106, 0x100a}, {&(0x7f0000001600)=""/189, 0xbd}, {&(0x7f00000016c0)=""/226, 0xe2}, {&(0x7f00000017c0)=""/42, 0x2a}], 0xa}, 0x10001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfff}], 0x3, 0x40004122, 0x0) 18.811208656s ago: executing program 0 (id=1514): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0x1000000, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0x7}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) 10.269246553s ago: executing program 35 (id=1513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x8}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x65, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x1}}}}, 0x36) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000008540)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000000c0)=""/254, 0xfe}, {&(0x7f0000000240)=""/131, 0x83}, {&(0x7f0000001a00)=""/29, 0x1d}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000500)=""/223, 0xdf}, {&(0x7f0000001a40)=""/4106, 0x100a}, {&(0x7f0000001600)=""/189, 0xbd}, {&(0x7f00000016c0)=""/226, 0xe2}, {&(0x7f00000017c0)=""/42, 0x2a}], 0xa}, 0x10001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfff}], 0x3, 0x40004122, 0x0) 0s ago: executing program 36 (id=1514): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0x1000000, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x1}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={r2, 0x7}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) kernel console output (not intermixed with test programs): uration, please check. [ 100.926296][ T6086] pim6reg1: entered promiscuous mode [ 100.934272][ T6086] pim6reg1: entered allmulticast mode [ 101.041898][ T6098] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 101.296269][ T6109] netlink: 'syz.0.23': attribute type 8 has an invalid length. [ 102.157156][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 102.426381][ T6131] atomic_op ffff88807f1a1198 conn xmit_atomic 0000000000000000 [ 103.339585][ T6151] ip6gre1: entered promiscuous mode [ 103.687332][ T6163] netlink: 'syz.1.36': attribute type 13 has an invalid length. [ 103.712202][ T6163] netlink: 'syz.1.36': attribute type 17 has an invalid length. [ 103.781927][ T6163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.814272][ T10] IPVS: starting estimator thread 0... [ 103.900914][ T6168] IPVS: using max 26 ests per chain, 62400 per kthread [ 104.871047][ T6186] netlink: 96 bytes leftover after parsing attributes in process `syz.3.44'. [ 105.103842][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 105.960081][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.45'. [ 106.585273][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 107.343257][ T6244] netlink: 264 bytes leftover after parsing attributes in process `syz.3.57'. [ 107.388977][ T6241] Driver unsupported XDP return value 0 on prog (id 27) dev N/A, expect packet loss! [ 107.403182][ T6241] netlink: 168 bytes leftover after parsing attributes in process `syz.4.56'. [ 107.415150][ T6244] netlink: 56 bytes leftover after parsing attributes in process `syz.3.57'. [ 107.420602][ T6242] wg1 speed is unknown, defaulting to 1000 [ 107.694482][ T6242] wg1 speed is unknown, defaulting to 1000 [ 107.910528][ T6242] wg1 speed is unknown, defaulting to 1000 [ 107.957086][ T6242] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.060055][ T6242] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 108.111422][ T6266] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 108.298721][ T6242] wg1 speed is unknown, defaulting to 1000 [ 108.316404][ T6278] ipvlan0: entered promiscuous mode [ 108.328474][ T6278] ipvlan0: left promiscuous mode [ 108.397651][ T6281] netlink: 36 bytes leftover after parsing attributes in process `syz.3.65'. [ 108.408616][ T6284] netlink: 36 bytes leftover after parsing attributes in process `syz.3.65'. [ 108.444587][ T6242] wg1 speed is unknown, defaulting to 1000 [ 108.453921][ T6279] tipc: Started in network mode [ 108.460106][ T6279] tipc: Node identity 8a5726f35f82, cluster identity 4711 [ 108.468568][ T6279] tipc: Enabled bearer , priority 0 [ 108.548858][ T6287] syzkaller0: entered promiscuous mode [ 108.557526][ T6287] syzkaller0: entered allmulticast mode [ 108.565911][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 108.585085][ T6242] wg1 speed is unknown, defaulting to 1000 [ 108.604534][ T6242] wg1 speed is unknown, defaulting to 1000 [ 108.631253][ T6242] wg1 speed is unknown, defaulting to 1000 [ 108.656075][ T6242] wg1 speed is unknown, defaulting to 1000 [ 108.816712][ T6274] tipc: Resetting bearer [ 108.894959][ T6274] tipc: Disabling bearer [ 109.111278][ T6311] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.212871][ T6310] wg1 speed is unknown, defaulting to 1000 [ 109.240141][ T6312] wg1 speed is unknown, defaulting to 1000 [ 109.689532][ T6307] wg1 speed is unknown, defaulting to 1000 [ 109.905155][ T6339] __nla_validate_parse: 5 callbacks suppressed [ 109.905174][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.0.81'. [ 109.930850][ T6339] netem: change failed [ 109.994164][ T6336] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.121118][ T5883] Bluetooth: hci4: command 0x0405 tx timeout [ 110.439569][ T6336] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.662530][ T6336] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.759419][ T6374] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.818281][ T6336] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.862405][ T6352] wg1 speed is unknown, defaulting to 1000 [ 111.206569][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.288678][ T3606] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.326605][ T35] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.362964][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.584521][ T6393] netlink: 64 bytes leftover after parsing attributes in process `syz.3.91'. [ 111.671031][ T6395] Bluetooth: MGMT ver 1.23 [ 111.818238][ T6398] Zero length message leads to an empty skb [ 112.294384][ T6427] wg1 speed is unknown, defaulting to 1000 [ 112.509898][ T6440] tipc: Started in network mode [ 112.524733][ T6440] tipc: Node identity b23aa46c6cab, cluster identity 4711 [ 112.541466][ T6440] tipc: Enabled bearer , priority 0 [ 112.583491][ T6444] syzkaller0: entered promiscuous mode [ 112.594951][ T6444] syzkaller0: entered allmulticast mode [ 112.633611][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 112.738231][ T6440] tipc: Resetting bearer [ 112.867964][ T6439] tipc: Resetting bearer [ 112.914984][ T6439] tipc: Disabling bearer [ 113.288354][ T6475] FAULT_INJECTION: forcing a failure. [ 113.288354][ T6475] name failslab, interval 1, probability 0, space 0, times 1 [ 113.322756][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 113.340519][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.0.113 Not tainted syzkaller #0 PREEMPT(full) [ 113.340549][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 113.340566][ T6475] Call Trace: [ 113.340578][ T6475] [ 113.340588][ T6475] dump_stack_lvl+0x189/0x250 [ 113.340623][ T6475] ? __pfx____ratelimit+0x10/0x10 [ 113.340648][ T6475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.340672][ T6475] ? __pfx__printk+0x10/0x10 [ 113.340707][ T6475] ? __pfx___might_resched+0x10/0x10 [ 113.340738][ T6475] ? fs_reclaim_acquire+0x7d/0x100 [ 113.340776][ T6475] should_fail_ex+0x414/0x560 [ 113.340813][ T6475] should_failslab+0xa8/0x100 [ 113.340846][ T6475] kmem_cache_alloc_noprof+0x73/0x3c0 [ 113.340873][ T6475] ? vm_area_dup+0x2b/0x680 [ 113.340909][ T6475] vm_area_dup+0x2b/0x680 [ 113.340945][ T6475] __split_vma+0x1a9/0xa00 [ 113.340971][ T6475] ? mas_next_slot+0xc20/0xcf0 [ 113.340999][ T6475] ? __pfx___split_vma+0x10/0x10 [ 113.341037][ T6475] ? mas_find+0xb0e/0xd30 [ 113.341066][ T6475] vms_gather_munmap_vmas+0x4ce/0x12f0 [ 113.341110][ T6475] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 113.341147][ T6475] ? mas_find+0xa7d/0xd30 [ 113.341176][ T6475] mmap_region+0x724/0x20c0 [ 113.341198][ T6475] ? __pfx___bpf_trace_mmap_lock_acquire_returned+0x10/0x10 [ 113.341262][ T6475] ? stack_map_get_build_id_offset+0x65a/0x6c0 [ 113.341300][ T6475] ? __pfx_mmap_region+0x10/0x10 [ 113.341324][ T6475] ? __pfx_get_perf_callchain+0x10/0x10 [ 113.341355][ T6475] ? validate_chain+0x897/0x2140 [ 113.341376][ T6475] ? __pfx_stack_map_get_build_id_offset+0x10/0x10 [ 113.341411][ T6475] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 113.341446][ T6475] ? __bpf_get_stack+0x9df/0xa60 [ 113.341534][ T6475] ? mm_get_unmapped_area+0xa7/0xd0 [ 113.341566][ T6475] ? shmem_get_unmapped_area+0x2cf/0x910 [ 113.341598][ T6475] ? cap_mmap_addr+0xb0/0x100 [ 113.341627][ T6475] ? bpf_lsm_mmap_addr+0x9/0x20 [ 113.341650][ T6475] ? security_mmap_addr+0x71/0x270 [ 113.341681][ T6475] ? shmem_mapping+0xd/0x50 [ 113.341700][ T6475] ? memfd_check_seals_mmap+0x165/0x200 [ 113.341726][ T6475] do_mmap+0xc45/0x10d0 [ 113.341767][ T6475] ? __pfx_do_mmap+0x10/0x10 [ 113.341789][ T6475] ? down_write_killable+0x178/0x230 [ 113.341828][ T6475] ? rcu_is_watching+0x15/0xb0 [ 113.341851][ T6475] vm_mmap_pgoff+0x2a6/0x4d0 [ 113.341885][ T6475] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 113.341912][ T6475] ? __fget_files+0x2a/0x420 [ 113.341949][ T6475] ? __fget_files+0x3a0/0x420 [ 113.341979][ T6475] ? __fget_files+0x2a/0x420 [ 113.342015][ T6475] ksys_mmap_pgoff+0x51f/0x760 [ 113.342050][ T6475] do_syscall_64+0xfa/0x3b0 [ 113.342073][ T6475] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.342096][ T6475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.342118][ T6475] ? clear_bhb_loop+0x60/0xb0 [ 113.342145][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.342166][ T6475] RIP: 0033:0x7f5489f8eec9 [ 113.342192][ T6475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.342210][ T6475] RSP: 002b:00007f548ae92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 113.342244][ T6475] RAX: ffffffffffffffda RBX: 00007f548a1e5fa0 RCX: 00007f5489f8eec9 [ 113.342260][ T6475] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000000000 [ 113.342274][ T6475] RBP: 00007f548ae92090 R08: 0000000000000008 R09: 0000000000000000 [ 113.342287][ T6475] R10: 0000000000010012 R11: 0000000000000246 R12: 0000000000000001 [ 113.342300][ T6475] R13: 00007f548a1e6038 R14: 00007f548a1e5fa0 R15: 00007ffcbce71398 [ 113.342336][ T6475] [ 113.408723][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'. [ 113.721594][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 113.728863][ T5883] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.945296][ T6498] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 113.966777][ T6491] wg1 speed is unknown, defaulting to 1000 [ 114.082175][ T6510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.120'. [ 114.127980][ T6506] netlink: 96 bytes leftover after parsing attributes in process `syz.2.119'. [ 114.154567][ T6510] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 114.166965][ T6510] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 114.407787][ T6522] scsi_nl_rcv_msg: discarding partial skb [ 114.512933][ T6527] netlink: 'syz.1.126': attribute type 7 has an invalid length. [ 114.538349][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 114.563757][ T6530] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 114.773038][ T6533] team0: Port device team_slave_0 removed [ 114.839713][ T6524] wg1 speed is unknown, defaulting to 1000 [ 115.037330][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 115.978981][ T6575] netlink: 'syz.2.138': attribute type 11 has an invalid length. [ 116.065923][ T6578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.139'. [ 116.076180][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 116.205442][ T6576] wg1 speed is unknown, defaulting to 1000 [ 116.273638][ T6584] wg1 speed is unknown, defaulting to 1000 [ 116.315848][ T6578] wg1 speed is unknown, defaulting to 1000 [ 116.330211][ T6587] team_slave_1: entered promiscuous mode [ 116.337261][ T6587] vlan0: entered promiscuous mode [ 116.342553][ T6587] team0: entered promiscuous mode [ 116.605107][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 117.168269][ T6628] netlink: 36 bytes leftover after parsing attributes in process `syz.3.150'. [ 117.669322][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.156'. [ 117.688996][ T6653] netlink: 5064 bytes leftover after parsing attributes in process `syz.2.156'. [ 117.699542][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 117.743057][ T6653] netlink: 5064 bytes leftover after parsing attributes in process `syz.2.156'. [ 117.871797][ T5883] Bluetooth: hci4: command 0x0405 tx timeout [ 118.028097][ T6667] veth0_to_team: entered promiscuous mode [ 118.073813][ T6667] veth0_to_team: entered allmulticast mode [ 118.288868][ T6672] wg1 speed is unknown, defaulting to 1000 [ 118.377088][ T6681] mac80211_hwsim hwsim10 ŞŞŞŞŞ;: renamed from wlan0 (while UP) [ 118.405767][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 118.507988][ T6669] wg1 speed is unknown, defaulting to 1000 [ 118.617509][ T6692] vxcan3: entered allmulticast mode [ 118.726332][ T6688] vxcan3: entered allmulticast mode [ 118.855666][ T6702] hsr_slave_0: left promiscuous mode [ 118.869556][ T6702] hsr_slave_1: left promiscuous mode [ 119.488013][ T6701] delete_channel: no stack [ 120.135126][ T6760] ľx9˙: renamed from bridge_slave_0 (while UP) [ 120.504415][ T6766] wg1 speed is unknown, defaulting to 1000 [ 120.953539][ T6772] wg1 speed is unknown, defaulting to 1000 [ 121.505198][ T6805] team0: Port device team_slave_0 removed [ 121.904565][ T6818] __nla_validate_parse: 7 callbacks suppressed [ 121.904585][ T6818] netlink: 48 bytes leftover after parsing attributes in process `syz.4.195'. [ 122.256245][ T6841] netlink: 'syz.0.201': attribute type 13 has an invalid length. [ 122.296799][ T6841] netlink: 'syz.0.201': attribute type 17 has an invalid length. [ 122.945298][ T6841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.989551][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.202'. [ 123.064713][ T6851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.202'. [ 123.146129][ T6846] wg1 speed is unknown, defaulting to 1000 [ 123.192323][ T6870] netlink: 44 bytes leftover after parsing attributes in process `syz.4.207'. [ 123.217044][ T6875] bond0: option packets_per_slave: invalid value (16779898) [ 123.240937][ T6875] bond0: option packets_per_slave: allowed values 0 - 65535 [ 123.485327][ T6883] warning: `syz.2.212' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.577190][ T6880] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.855918][ T6888] syzkaller1: entered promiscuous mode [ 123.867574][ T6888] syzkaller1: entered allmulticast mode [ 123.914523][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.217'. [ 124.345232][ T6928] netlink: 68 bytes leftover after parsing attributes in process `syz.4.223'. [ 124.441979][ T6928] netlink: 'syz.4.223': attribute type 4 has an invalid length. [ 124.449684][ T6928] netlink: 244 bytes leftover after parsing attributes in process `syz.4.223'. [ 124.500911][ T6941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 124.559364][ T6928] wg1 speed is unknown, defaulting to 1000 [ 125.068140][ T6949] tipc: Enabling of bearer rejected, failed to enable media [ 125.145460][ T6959] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 125.515653][ T6965] wg1 speed is unknown, defaulting to 1000 [ 125.759577][ T6976] syz.2.231 uses old SIOCAX25GETINFO [ 125.898063][ T6963] delete_channel: no stack [ 126.091462][ T6982] netlink: 'syz.1.232': attribute type 5 has an invalid length. [ 126.581646][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.237'. [ 126.684720][ T7002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'. [ 126.926741][ T7017] netlink: 'syz.2.240': attribute type 2 has an invalid length. [ 127.016986][ T7017] : entered promiscuous mode [ 127.095571][ T7022] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 127.105300][ T7022] dvmrp1: linktype set to 805 [ 127.299995][ T7034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.244'. [ 127.665288][ T7050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.250'. [ 127.690469][ T7050] tc_dump_action: action bad kind [ 127.724722][ T7055] : entered promiscuous mode [ 127.788524][ T7055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.251'. [ 127.888535][ T7061] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.252'. [ 128.724513][ T7095] wg1 speed is unknown, defaulting to 1000 [ 128.893385][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.262'. [ 129.435196][ T7125] wg1 speed is unknown, defaulting to 1000 [ 130.234094][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.278'. [ 130.995846][ T7186] wg1 speed is unknown, defaulting to 1000 [ 131.027233][ T7190] netlink: 96 bytes leftover after parsing attributes in process `syz.0.287'. [ 131.042209][ T7190] netlink: 32 bytes leftover after parsing attributes in process `syz.0.287'. [ 131.384550][ T7210] sctp: [Deprecated]: syz.3.292 (pid 7210) Use of int in maxseg socket option. [ 131.384550][ T7210] Use struct sctp_assoc_value instead [ 131.402617][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 131.417420][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 131.540810][ T7209] bridge2: port 1(veth3) entered blocking state [ 131.547492][ T7209] bridge2: port 1(veth3) entered disabled state [ 131.554120][ T7209] veth3: entered allmulticast mode [ 131.561760][ T7209] veth3: entered promiscuous mode [ 131.590572][ T7214] bridge2: port 2(veth0_to_bond) entered blocking state [ 131.597788][ T7214] bridge2: port 2(veth0_to_bond) entered disabled state [ 131.608928][ T7214] veth0_to_bond: entered allmulticast mode [ 131.617401][ T7214] veth0_to_bond: entered promiscuous mode [ 131.761006][ T7222] pimreg3: entered allmulticast mode [ 131.982289][ T7229] netlink: 'syz.0.301': attribute type 13 has an invalid length. [ 132.098788][ T7229] gretap0: refused to change device tx_queue_len [ 132.156608][ T7229] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 132.347675][ T7236] wg1 speed is unknown, defaulting to 1000 [ 132.357137][ T7244] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 132.400018][ T7244] __nla_validate_parse: 2 callbacks suppressed [ 132.400035][ T7244] netlink: 140 bytes leftover after parsing attributes in process `syz.3.304'. [ 132.434938][ T7244] netlink: 96 bytes leftover after parsing attributes in process `syz.3.304'. [ 132.569073][ T7250] netlink: 248 bytes leftover after parsing attributes in process `syz.1.306'. [ 132.571339][ T7246] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 132.669700][ T7246] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 132.821061][ T7255] veth1_to_batadv: entered allmulticast mode [ 132.827537][ T7255] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 133.301714][ T30] audit: type=1800 audit(1759076601.648:2): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.311" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=303 res=0 errno=0 [ 133.760539][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 134.002348][ T7305] netlink: 'syz.3.320': attribute type 13 has an invalid length. [ 134.013989][ T7305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.108757][ T7318] netlink: 56 bytes leftover after parsing attributes in process `syz.3.320'. [ 134.704056][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.327'. [ 134.715447][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 134.734963][ T7338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.327'. [ 134.786338][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.327'. [ 134.808431][ T7337] netlink: 36 bytes leftover after parsing attributes in process `syz.1.326'. [ 134.997724][ T35] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.018269][ T35] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.050971][ T7356] tipc: Started in network mode [ 135.056263][ T7356] tipc: Node identity 4e4b7e90f534, cluster identity 4711 [ 135.090757][ T7356] tipc: Enabled bearer , priority 0 [ 135.110174][ T35] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.155044][ T35] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.185579][ T7356] tipc: Disabling bearer [ 135.351961][ T7377] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 135.720758][ T7391] macvlan2: entered promiscuous mode [ 135.753485][ T7391] macvlan2: entered allmulticast mode [ 135.763892][ T7396] netlink: zone id is out of range [ 135.769079][ T7396] netlink: zone id is out of range [ 135.811144][ T7396] netlink: zone id is out of range [ 135.817788][ T7396] netlink: zone id is out of range [ 135.829207][ T7396] netlink: zone id is out of range [ 135.845108][ T7396] netlink: zone id is out of range [ 135.859334][ T7396] netlink: zone id is out of range [ 135.871409][ T7396] netlink: zone id is out of range [ 136.372762][ T7413] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 136.539024][ T7419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.560676][ T7419] bond_slave_0: entered promiscuous mode [ 136.566615][ T7419] bond_slave_1: entered promiscuous mode [ 136.573477][ T7419] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 136.583806][ T7419] bond1: (slave macvlan0): Enslaving as a backup interface with an up link [ 136.606141][ T7419] bridge_slave_0: left allmulticast mode [ 136.612393][ T7419] bridge_slave_0: left promiscuous mode [ 136.619102][ T7419] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.645444][ T7419] bridge_slave_1: left allmulticast mode [ 136.653849][ T7419] bridge_slave_1: left promiscuous mode [ 136.659818][ T7419] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.681558][ T7419] bond0: (slave bond_slave_0): Releasing backup interface [ 136.691471][ T7419] bond_slave_0: left promiscuous mode [ 136.713220][ T7419] bond0: (slave bond_slave_1): Releasing backup interface [ 136.746457][ T7419] bond_slave_1: left promiscuous mode [ 136.768130][ T7419] team_slave_1: left promiscuous mode [ 136.785241][ T7419] team0: Port device team_slave_1 removed [ 136.803006][ T7419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.823926][ T7419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.844630][ T7419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.866209][ T7419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.890490][ T3512] bond1: (slave macvlan0): speed changed to 0 on port 1 [ 136.972268][ T3512] bond1: (slave macvlan0): link status definitely down, disabling slave [ 137.461641][ T7449] __nla_validate_parse: 4 callbacks suppressed [ 137.461663][ T7449] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 137.668295][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'. [ 137.756868][ T7459] vlan3: entered promiscuous mode [ 137.771517][ T7459] gretap0: entered promiscuous mode [ 137.878484][ T7460] wg1 speed is unknown, defaulting to 1000 [ 138.266916][ T7468] wg1 speed is unknown, defaulting to 1000 [ 138.357205][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.372601][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.554981][ T7499] wg1 speed is unknown, defaulting to 1000 [ 139.660853][ T7519] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.371'. [ 139.742712][ T7517] wg1 speed is unknown, defaulting to 1000 [ 140.260752][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz.4.375'. [ 140.421480][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.3.377'. [ 140.474380][ T7539] netlink: 32 bytes leftover after parsing attributes in process `syz.4.378'. [ 140.539098][ T7543] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 140.724662][ T7543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.761467][ T7544] wg1 speed is unknown, defaulting to 1000 [ 140.803384][ T7552] netlink: 232 bytes leftover after parsing attributes in process `syz.1.380'. [ 141.131773][ T7564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.384'. [ 141.424487][ T7581] FAULT_INJECTION: forcing a failure. [ 141.424487][ T7581] name failslab, interval 1, probability 0, space 0, times 0 [ 141.480525][ T7581] CPU: 1 UID: 0 PID: 7581 Comm: syz.4.388 Not tainted syzkaller #0 PREEMPT(full) [ 141.480556][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.480569][ T7581] Call Trace: [ 141.480578][ T7581] [ 141.480587][ T7581] dump_stack_lvl+0x189/0x250 [ 141.480617][ T7581] ? __pfx____ratelimit+0x10/0x10 [ 141.480641][ T7581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.480666][ T7581] ? __pfx__printk+0x10/0x10 [ 141.480701][ T7581] ? __pfx___might_resched+0x10/0x10 [ 141.480734][ T7581] ? fs_reclaim_acquire+0x7d/0x100 [ 141.480772][ T7581] should_fail_ex+0x414/0x560 [ 141.480809][ T7581] should_failslab+0xa8/0x100 [ 141.480841][ T7581] kmem_cache_alloc_noprof+0x73/0x3c0 [ 141.480867][ T7581] ? can_rx_register+0x16d/0x790 [ 141.480902][ T7581] can_rx_register+0x16d/0x790 [ 141.480931][ T7581] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.480952][ T7581] ? __pfx_raw_rcv+0x10/0x10 [ 141.480987][ T7581] raw_enable_allfilters+0xe4/0x420 [ 141.481032][ T7581] raw_bind+0x2c9/0x7c0 [ 141.481072][ T7581] __sys_bind+0x2c3/0x3e0 [ 141.481098][ T7581] ? __pfx___sys_bind+0x10/0x10 [ 141.481136][ T7581] ? __pfx_ksys_write+0x10/0x10 [ 141.481160][ T7581] ? rcu_is_watching+0x15/0xb0 [ 141.481189][ T7581] __x64_sys_bind+0x7a/0x90 [ 141.481214][ T7581] do_syscall_64+0xfa/0x3b0 [ 141.481238][ T7581] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.481259][ T7581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.481281][ T7581] ? clear_bhb_loop+0x60/0xb0 [ 141.481308][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.481329][ T7581] RIP: 0033:0x7f3ce4b8eec9 [ 141.481348][ T7581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.481366][ T7581] RSP: 002b:00007f3ce5a98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 141.481387][ T7581] RAX: ffffffffffffffda RBX: 00007f3ce4de5fa0 RCX: 00007f3ce4b8eec9 [ 141.481403][ T7581] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 141.481416][ T7581] RBP: 00007f3ce5a98090 R08: 0000000000000000 R09: 0000000000000000 [ 141.481428][ T7581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.481439][ T7581] R13: 00007f3ce4de6038 R14: 00007f3ce4de5fa0 R15: 00007ffcbc3bb0d8 [ 141.481472][ T7581] [ 141.965667][ T7579] wg1 speed is unknown, defaulting to 1000 [ 142.073998][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 142.083875][ T7595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.392'. [ 142.455980][ T7604] netlink: 'syz.0.394': attribute type 8 has an invalid length. [ 142.512985][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 142.525673][ T7604] netlink: 'syz.0.394': attribute type 30 has an invalid length. [ 142.534323][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'. [ 142.545569][ T7608] netlink: 72 bytes leftover after parsing attributes in process `syz.2.395'. [ 142.560010][ T7608] netlink: 64 bytes leftover after parsing attributes in process `syz.2.395'. [ 142.576370][ T7609] netlink: 'syz.0.394': attribute type 1 has an invalid length. [ 142.586812][ T7609] netlink: 224 bytes leftover after parsing attributes in process `syz.0.394'. [ 143.330097][ T7627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.401'. [ 143.396412][ T7636] wireguard0: entered promiscuous mode [ 143.410621][ T7636] wireguard0: entered allmulticast mode [ 143.461471][ T7641] netlink: 448 bytes leftover after parsing attributes in process `syz.4.405'. [ 143.476073][ T7643] netlink: 'syz.0.406': attribute type 1 has an invalid length. [ 143.685231][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 143.738216][ T7654] net_ratelimit: 41 callbacks suppressed [ 143.738238][ T7654] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 143.963435][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.415'. [ 144.246277][ T7688] raw_sendmsg: syz.4.419 forgot to set AF_INET. Fix it! [ 144.399751][ T7690] netlink: 152 bytes leftover after parsing attributes in process `syz.3.420'. [ 144.453935][ T7692] bond2: entered promiscuous mode [ 144.574177][ T7699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.921793][ T7710] netlink: 'syz.1.425': attribute type 2 has an invalid length. [ 144.929512][ T7710] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 145.875075][ T7750] erspan0: entered promiscuous mode [ 146.130481][ T7756] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 147.807339][ T7805] netlink: 'syz.3.453': attribute type 12 has an invalid length. [ 148.031117][ T7825] __nla_validate_parse: 5 callbacks suppressed [ 148.031136][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 148.405493][ T7829] netlink: 'syz.4.456': attribute type 1 has an invalid length. [ 148.429561][ T7829] netlink: 144 bytes leftover after parsing attributes in process `syz.4.456'. [ 148.448372][ T7829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.456'. [ 148.945405][ T7851] netlink: 448 bytes leftover after parsing attributes in process `syz.3.467'. [ 149.401132][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.0.469'. [ 149.604344][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 149.726342][ T7863] syzkaller1: entered promiscuous mode [ 149.739803][ T7863] syzkaller1: entered allmulticast mode [ 149.788703][ T7866] netlink: 'syz.3.472': attribute type 12 has an invalid length. [ 149.837526][ T7863] netlink: 100 bytes leftover after parsing attributes in process `syz.4.471'. [ 149.890533][ T7863] netlink: 100 bytes leftover after parsing attributes in process `syz.4.471'. [ 150.031348][ T7873] syzkaller0: create flow: hash 2716555780 index 1 [ 150.195026][ T3512] syzkaller0: tun_net_xmit 76 [ 150.200370][ T3512] syzkaller0: tun_net_xmit 48 [ 150.223378][ T3090] syzkaller0: tun_net_xmit 76 [ 150.450605][ T3090] syzkaller0: tun_net_xmit 76 [ 150.570521][ T7862] syzkaller0: delete flow: hash 2716555780 index 1 [ 150.584581][ T7892] netlink: 448 bytes leftover after parsing attributes in process `syz.2.478'. [ 152.095084][ T59] bond1: (slave macvlan0): link status definitely down, disabling slave [ 152.237277][ T7910] netlink: 36 bytes leftover after parsing attributes in process `syz.0.485'. [ 152.458566][ T7916] wg1 speed is unknown, defaulting to 1000 [ 152.471530][ T7918] syzkaller1: entered promiscuous mode [ 152.477060][ T7918] syzkaller1: entered allmulticast mode [ 152.685527][ T7924] wg1 speed is unknown, defaulting to 1000 [ 153.086336][ T7930] __nla_validate_parse: 2 callbacks suppressed [ 153.086357][ T7930] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.490'. [ 153.501613][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.494'. [ 153.636830][ T7952] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 153.658782][ T7952] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 153.702239][ T7935] wg1 speed is unknown, defaulting to 1000 [ 153.734673][ T7947] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 153.878505][ T7956] veth0: entered promiscuous mode [ 153.908604][ T7955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.497'. [ 154.027552][ T7955] veth0: left promiscuous mode [ 154.083995][ T7961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.498'. [ 154.287620][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 154.698099][ T5920] udevd[5920]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 154.748447][ T5920] udevd[5920]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 154.939232][ T7993] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 154.959244][ T7993] netlink: 228 bytes leftover after parsing attributes in process `syz.0.505'. [ 154.984541][ T7993] netlink: 'syz.0.505': attribute type 1 has an invalid length. [ 155.838400][ T8027] bridge0: entered allmulticast mode [ 155.863093][ T8027] pim6reg: entered allmulticast mode [ 155.890812][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 155.904157][ T8026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.174544][ T8038] vlan0: entered promiscuous mode [ 156.179807][ T8038] geneve1: entered promiscuous mode [ 156.186018][ T8038] vlan0: entered allmulticast mode [ 156.193975][ T8038] geneve1: entered allmulticast mode [ 156.407637][ T8043] wg1 speed is unknown, defaulting to 1000 [ 156.565375][ T8053] netlink: 'syz.0.519': attribute type 4 has an invalid length. [ 156.895533][ T8056] netlink: zone id is out of range [ 156.925836][ T8056] netlink: set zone limit has 8 unknown bytes [ 156.941107][ T8071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.523'. [ 156.944795][ T8066] wg1 speed is unknown, defaulting to 1000 [ 157.496095][ T8088] nbd: must specify a size in bytes for the device [ 157.574542][ T8091] siw: device registration error -23 [ 157.587193][ T8090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.528'. [ 157.594001][ T8089] wg1 speed is unknown, defaulting to 1000 [ 157.630473][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 157.788910][ T8093] syz_tun: entered allmulticast mode [ 157.797093][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 157.814300][ T8093] syz_tun: left allmulticast mode [ 157.926984][ T8096] netlink: 'syz.3.532': attribute type 7 has an invalid length. [ 157.955358][ T8096] netlink: 'syz.3.532': attribute type 8 has an invalid length. [ 158.009681][ T8096] ip6gretap0: entered promiscuous mode [ 158.032083][ T8096] syz_tun: entered promiscuous mode [ 158.052927][ T8096] ip6gretap0: left promiscuous mode [ 158.084305][ T8096] syz_tun: left promiscuous mode [ 158.178385][ T8097] wg1 speed is unknown, defaulting to 1000 [ 158.189683][ T8106] netlink: 'syz.4.534': attribute type 1 has an invalid length. [ 158.387351][ T8109] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 158.414551][ T8109] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 158.571590][ T8106] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 158.626912][ T8119] macvlan2: entered promiscuous mode [ 158.641463][ T8119] macvlan2: entered allmulticast mode [ 158.668321][ T8119] bond1: entered promiscuous mode [ 158.681902][ T8119] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.692036][ T8119] bond1: left promiscuous mode [ 158.703925][ T8124] __nla_validate_parse: 2 callbacks suppressed [ 158.703943][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.536'. [ 158.761155][ T8124] bridge3: entered allmulticast mode [ 159.758667][ T8131] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 159.844273][ T8148] wg1 speed is unknown, defaulting to 1000 [ 159.993674][ T8150] wg1 speed is unknown, defaulting to 1000 [ 160.238404][ T8167] wg1 speed is unknown, defaulting to 1000 [ 161.006690][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.549'. [ 161.948399][ T8217] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 162.162646][ T8221] netlink: 'syz.1.558': attribute type 10 has an invalid length. [ 162.564864][ T8233] sctp: [Deprecated]: syz.0.561 (pid 8233) Use of int in max_burst socket option. [ 162.564864][ T8233] Use struct sctp_assoc_value instead [ 162.598327][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 162.662852][ T8234] wg1 speed is unknown, defaulting to 1000 [ 163.027619][ T8245] wg1 speed is unknown, defaulting to 1000 [ 163.588052][ T8253] wg1 speed is unknown, defaulting to 1000 [ 164.366322][ T8276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.571'. [ 165.346388][ T8310] netlink: 220 bytes leftover after parsing attributes in process `syz.1.578'. [ 165.479423][ T8311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 166.204047][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.580'. [ 166.213278][ T8329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.580'. [ 166.292469][ T8336] wg1 speed is unknown, defaulting to 1000 [ 166.462797][ T8341] netlink: 'syz.0.582': attribute type 14 has an invalid length. [ 166.700375][ T8353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.587'. [ 166.770523][ T8359] netlink: 248 bytes leftover after parsing attributes in process `syz.0.586'. [ 167.103254][ T8361] wg1 speed is unknown, defaulting to 1000 [ 167.180998][ T8365] syz.2.589 (8365) used greatest stack depth: 17864 bytes left [ 167.389481][ T8367] wg1 speed is unknown, defaulting to 1000 [ 167.536520][ T8385] netlink: 'syz.0.591': attribute type 6 has an invalid length. [ 167.631765][ T8389] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 168.011688][ T8396] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 168.846843][ T8441] team0: Device macvlan1 is already an upper device of the team interface [ 169.600036][ T8472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.627549][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 169.643320][ T8477] openvswitch: netlink: Message has 398 unknown bytes. [ 169.656219][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 169.675505][ T8476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.608'. [ 170.105748][ T8492] netlink: 'syz.1.613': attribute type 1 has an invalid length. [ 170.124241][ T8492] netlink: 224 bytes leftover after parsing attributes in process `syz.1.613'. [ 170.191477][ T8491] syzkaller1: entered promiscuous mode [ 170.206613][ T8491] syzkaller1: entered allmulticast mode [ 171.049761][ T8510] ipvlan0: entered promiscuous mode [ 171.068052][ T8510] ipvlan0: left promiscuous mode [ 171.141758][ T8518] netlink: 89 bytes leftover after parsing attributes in process `syz.3.619'. [ 171.153180][ T8519] netlink: 89 bytes leftover after parsing attributes in process `syz.3.619'. [ 171.270234][ T8514] wg1 speed is unknown, defaulting to 1000 [ 171.406026][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'. [ 171.417254][ T8524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'. [ 171.452611][ T8528] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 171.863808][ T8539] netlink: 'syz.3.623': attribute type 11 has an invalid length. [ 172.242993][ T8538] wg1 speed is unknown, defaulting to 1000 [ 172.593008][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 173.213505][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 173.239790][ T8580] netlink: 9 bytes leftover after parsing attributes in process `syz.4.633'. [ 173.633653][ T8595] tipc: Started in network mode [ 173.638610][ T8595] tipc: Node identity 66d256d2f4ef, cluster identity 4711 [ 173.649182][ T8595] tipc: Enabled bearer , priority 0 [ 173.676865][ T8594] syzkaller0: entered promiscuous mode [ 173.702415][ T8594] syzkaller0: entered allmulticast mode [ 173.820887][ T8595] tipc: Resetting bearer [ 173.962284][ T8607] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 173.962370][ T8606] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 173.994797][ T8605] netlink: 'syz.2.640': attribute type 12 has an invalid length. [ 174.057707][ T8604] wg1 speed is unknown, defaulting to 1000 [ 174.673222][ T3090] tipc: Node number set to 2453493458 [ 174.699285][ T8619] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 174.894242][ T8629] wg1 speed is unknown, defaulting to 1000 [ 175.030182][ T8647] wg1 speed is unknown, defaulting to 1000 [ 175.180391][ T8652] geneve2: entered promiscuous mode [ 175.219618][ T8648] __nla_validate_parse: 7 callbacks suppressed [ 175.219636][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 175.225120][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.650'. [ 175.646827][ T8663] netlink: 'syz.4.653': attribute type 13 has an invalid length. [ 175.673166][ T8666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.680881][ T8666] IPv6: NLM_F_CREATE should be set when creating new route [ 175.685952][ T8658] IPv6: sit1: Disabled Multicast RS [ 175.688259][ T8666] IPv6: NLM_F_CREATE should be set when creating new route [ 175.708631][ T8663] netlink: 'syz.4.653': attribute type 17 has an invalid length. [ 175.741725][ T8666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.934109][ T8674] netlink: 248 bytes leftover after parsing attributes in process `syz.0.659'. [ 175.996958][ T8663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.258553][ T8668] wg1 speed is unknown, defaulting to 1000 [ 176.415881][ T8674] tipc: Enabled bearer , priority 0 [ 176.610851][ T8674] syzkaller0: entered promiscuous mode [ 176.616523][ T8674] syzkaller0: entered allmulticast mode [ 176.623514][ T8674] tipc: Resetting bearer [ 176.683463][ T8687] wg1 speed is unknown, defaulting to 1000 [ 176.748696][ T8680] wg1 speed is unknown, defaulting to 1000 [ 176.775553][ T8671] tipc: Resetting bearer [ 177.500495][ T3090] tipc: Node number set to 3587516147 [ 178.841946][ T8671] tipc: Disabling bearer [ 179.763811][ T8734] bridge3: entered promiscuous mode [ 179.769104][ T8734] bridge3: entered allmulticast mode [ 179.857860][ T8742] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.669'. [ 179.871134][ T8742] siw: device registration error -23 [ 180.103653][ T8752] netlink: 'syz.3.674': attribute type 3 has an invalid length. [ 180.107821][ T8753] netlink: 260 bytes leftover after parsing attributes in process `syz.2.673'. [ 180.131215][ T8752] netlink: 'syz.3.674': attribute type 3 has an invalid length. [ 180.133829][ T8753] openvswitch: netlink: Flow key attr not present in new flow. [ 180.242102][ T8752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.674'. [ 180.296184][ T8755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.182925][ T8829] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20004 [ 182.798557][ T8841] tipc: Started in network mode [ 182.803700][ T8841] tipc: Node identity bac073904d6d, cluster identity 4711 [ 182.811612][ T8841] tipc: Enabled bearer , priority 0 [ 182.839772][ T8840] tipc: Enabling of bearer rejected, already enabled [ 182.861566][ T8841] syzkaller0: entered promiscuous mode [ 182.867381][ T8841] syzkaller0: entered allmulticast mode [ 182.902031][ T8840] netlink: 76 bytes leftover after parsing attributes in process `syz.1.695'. [ 182.914622][ T8841] netlink: 76 bytes leftover after parsing attributes in process `syz.1.695'. [ 182.944340][ T8840] tipc: Resetting bearer [ 182.966780][ T8839] tipc: Resetting bearer [ 183.030860][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.696'. [ 183.044504][ T8839] tipc: Disabling bearer [ 183.076854][ T8847] netlink: 136 bytes leftover after parsing attributes in process `syz.3.696'. [ 183.090543][ T8847] netlink: 180 bytes leftover after parsing attributes in process `syz.3.696'. [ 183.250213][ T8849] ipvlan0: entered promiscuous mode [ 183.278225][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 183.296038][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 183.351509][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 183.370721][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 183.400231][ T8851] netlink: 'syz.1.697': attribute type 18 has an invalid length. [ 183.895467][ T8865] wg1 speed is unknown, defaulting to 1000 [ 184.356063][ T8892] netlink: get zone limit has 4 unknown bytes [ 184.773810][ T8893] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 184.801489][ T8893] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 184.909443][ T8890] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 184.936721][ T8911] atomic_op ffff88802454b198 conn xmit_atomic 0000000000000000 [ 185.177714][ T8918] netlink: 'syz.3.713': attribute type 10 has an invalid length. [ 185.189996][ T8918] batadv0: entered promiscuous mode [ 185.203641][ T8918] batadv0: entered allmulticast mode [ 185.234028][ T8918] bridge0: port 1(batadv0) entered blocking state [ 185.255085][ T8918] bridge0: port 1(batadv0) entered disabled state [ 185.285512][ T8918] bridge0: port 1(batadv0) entered blocking state [ 185.292201][ T8918] bridge0: port 1(batadv0) entered forwarding state [ 185.319315][ T3512] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 185.329018][ T3512] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 185.594187][ T8930] pim6reg1: entered allmulticast mode [ 185.734626][ T8937] __nla_validate_parse: 5 callbacks suppressed [ 185.734656][ T8937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.718'. [ 185.780448][ T8937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.718'. [ 185.791019][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.717'. [ 186.215192][ T8955] tipc: Enabling of bearer rejected, failed to enable media [ 186.883924][ T8981] tun0: tun_chr_ioctl cmd 2147767507 [ 186.978150][ T8981] tun0: tun_chr_ioctl cmd 2148045848 [ 187.025940][ T8981] tun0: tun_chr_ioctl cmd 21731 [ 187.139734][ T8991] vlan0: entered promiscuous mode [ 187.149715][ T8991] vlan0: entered allmulticast mode [ 187.171974][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 187.190512][ T8991] hsr_slave_1: entered allmulticast mode [ 187.305802][ T8999] netlink: 36 bytes leftover after parsing attributes in process `syz.3.731'. [ 187.666678][ T9012] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 187.686398][ T9012] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 188.101541][ T9027] wg1 speed is unknown, defaulting to 1000 [ 188.477783][ T9062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.747'. [ 188.678446][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 189.084418][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 189.119321][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.752'. [ 189.239040][ T9088] wg1 speed is unknown, defaulting to 1000 [ 189.301068][ T9099] netlink: 'syz.3.756': attribute type 303 has an invalid length. [ 189.641907][ T9093] wg1 speed is unknown, defaulting to 1000 [ 190.473605][ T9139] netlink: 20 bytes leftover after parsing attributes in process `syz.3.762'. [ 190.683585][ T9144] Bluetooth: MGMT ver 1.23 [ 190.808691][ T9144] macsec1: entered promiscuous mode [ 190.814417][ T9144] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 190.827055][ T9144] macsec1: entered allmulticast mode [ 190.834924][ T9144] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 191.033395][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'. [ 191.108134][ T9153] xfrm1: entered promiscuous mode [ 191.126370][ T9153] xfrm1: entered allmulticast mode [ 191.144001][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'. [ 191.388579][ T9165] netlink: 'syz.4.772': attribute type 1 has an invalid length. [ 191.407357][ T9168] netlink: 'syz.4.772': attribute type 1 has an invalid length. [ 191.794551][ T9186] netlink: 156 bytes leftover after parsing attributes in process `syz.2.777'. [ 191.844081][ T9186] netlink: 'syz.2.777': attribute type 10 has an invalid length. [ 191.895305][ T9186] bond0: (slave wlan1): Opening slave failed [ 191.895992][ T9191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.777'. [ 192.047808][ T9196] sock: sock_timestamping_bind_phc: sock not bind to device [ 192.076567][ T9196] netlink: 'syz.3.781': attribute type 1 has an invalid length. [ 192.097765][ T9196] netlink: 36 bytes leftover after parsing attributes in process `syz.3.781'. [ 192.129873][ T9159] delete_channel: no stack [ 192.316014][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 192.578260][ T9220] netlink: 'syz.0.787': attribute type 1 has an invalid length. [ 192.675122][ T9220] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.693596][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.787'. [ 192.744389][ T9231] netlink: zone id is out of range [ 192.751603][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 192.757380][ T9231] netlink: zone id is out of range [ 192.763086][ T5883] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 192.763566][ T9231] netlink: del zone limit has 8 unknown bytes [ 193.012313][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 193.030728][ T9241] netlink: 'syz.2.793': attribute type 30 has an invalid length. [ 193.040973][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 193.073217][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 193.083918][ T9246] sctp: [Deprecated]: syz.2.793 (pid 9246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.083918][ T9246] Use struct sctp_sack_info instead [ 193.968566][ T9294] Bluetooth: MGMT ver 1.23 [ 194.598261][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.605966][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.936297][ T9279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.956759][ T9279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.233998][ T9339] sctp: [Deprecated]: syz.4.812 (pid 9339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.233998][ T9339] Use struct sctp_sack_info instead [ 195.355121][ T9287] veth0_vlan: left promiscuous mode [ 195.484442][ T9329] wg1 speed is unknown, defaulting to 1000 [ 195.492463][ T35] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.503621][ T9329] syz0: Port: 1 Link DOWN [ 195.508461][ T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.520140][ T35] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.532401][ T35] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.542068][ T35] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.552580][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.570192][ T9311] wg1 speed is unknown, defaulting to 1000 [ 195.591917][ T35] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.611565][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.083446][ T9355] wg1 speed is unknown, defaulting to 1000 [ 196.214427][ T9363] wg1 speed is unknown, defaulting to 1000 [ 196.922333][ T9393] __nla_validate_parse: 8 callbacks suppressed [ 196.922356][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.827'. [ 197.551000][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 198.199288][ T9437] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.239527][ T9449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.842'. [ 198.370983][ T9459] netlink: 32 bytes leftover after parsing attributes in process `syz.3.845'. [ 198.381421][ T9459] netlink: 32 bytes leftover after parsing attributes in process `syz.3.845'. [ 198.401116][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.845'. [ 198.448162][ T9437] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.647898][ T9437] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.713465][ T9468] netlink: 52 bytes leftover after parsing attributes in process `syz.3.848'. [ 198.756609][ T9468] unsupported nlmsg_type 40 [ 198.775423][ T9471] netlink: 68 bytes leftover after parsing attributes in process `syz.3.848'. [ 198.867939][ T9437] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.038429][ T9483] tipc: New replicast peer: 255.255.255.255 [ 199.052019][ T9483] tipc: Enabled bearer , priority 10 [ 199.243909][ T3481] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.348379][ T59] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.420024][ T59] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.505056][ T59] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.799608][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.015684][ T9534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.180983][ T9329] tipc: Node number set to 3145694864 [ 200.803116][ T9564] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 200.878301][ T9564] tipc: Enabled bearer , priority 0 [ 200.906282][ T9564] syzkaller0: entered promiscuous mode [ 200.935794][ T9564] syzkaller0: entered allmulticast mode [ 200.957504][ T9566] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 201.000735][ C0] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 201.019729][ T9571] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.048341][ T9568] tipc: Resetting bearer [ 201.182655][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.871'. [ 201.241382][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 201.274596][ T9564] wg1 speed is unknown, defaulting to 1000 [ 201.284398][ T9575] netlink: 'syz.2.871': attribute type 1 has an invalid length. [ 201.527485][ T9563] tipc: Resetting bearer [ 201.598557][ T9563] tipc: Disabling bearer [ 201.618252][ T9600] netlink: 'syz.0.876': attribute type 2 has an invalid length. [ 201.636752][ T9600] netlink: 'syz.0.876': attribute type 5 has an invalid length. [ 201.660170][ T9596] wg1 speed is unknown, defaulting to 1000 [ 202.152723][ T9625] __nla_validate_parse: 4 callbacks suppressed [ 202.152754][ T9625] netlink: 448 bytes leftover after parsing attributes in process `syz.2.883'. [ 202.234921][ T9629] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 202.392225][ T9634] netlink: 248 bytes leftover after parsing attributes in process `syz.4.886'. [ 202.418963][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.885'. [ 202.428820][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.885'. [ 202.455308][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'. [ 202.492126][ T9632] netlink: 76 bytes leftover after parsing attributes in process `syz.4.886'. [ 202.843112][ T9652] wg1 speed is unknown, defaulting to 1000 [ 202.931249][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'. [ 202.939870][ T9660] netlink: 20 bytes leftover after parsing attributes in process `syz.4.893'. [ 203.383017][ T9673] pimreg5001287: entered allmulticast mode [ 203.476138][ T9655] wg1 speed is unknown, defaulting to 1000 [ 203.850016][ T9694] netlink: 27 bytes leftover after parsing attributes in process `syz.4.897'. [ 204.134708][ T9702] netlink: 'syz.4.899': attribute type 2 has an invalid length. [ 204.211219][ T9702] netlink: 'syz.4.899': attribute type 2 has an invalid length. [ 204.226260][ T9676] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 204.247312][ T9702] netlink: 'syz.4.899': attribute type 2 has an invalid length. [ 204.268030][ T9702] netlink: 'syz.4.899': attribute type 1 has an invalid length. [ 204.779629][ T9732] netlink: 40 bytes leftover after parsing attributes in process `syz.3.904'. [ 205.122307][ T9744] netem: change failed [ 205.219043][ T9754] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 205.585198][ T9770] wg1 speed is unknown, defaulting to 1000 [ 205.761181][ T9783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.929976][ T9790] bridge_slave_1: left allmulticast mode [ 205.939952][ T9790] bridge_slave_1: left promiscuous mode [ 205.947724][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.960007][ T9790] bridge_slave_0: left allmulticast mode [ 205.966474][ T9790] bridge_slave_0: left promiscuous mode [ 205.972886][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.694431][ T9816] netlink: 'syz.3.928': attribute type 3 has an invalid length. [ 206.707511][ T9816] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 206.716801][ T9816] netlink: 'syz.3.928': attribute type 31 has an invalid length. [ 206.954686][ T9826] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 207.160814][ T9840] __nla_validate_parse: 8 callbacks suppressed [ 207.160836][ T9840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.935'. [ 207.201683][ T9840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.935'. [ 207.601456][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.941'. [ 207.669716][ T9867] veth0_to_bridge: entered promiscuous mode [ 207.688022][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 207.709625][ T9866] veth0_to_bridge: left promiscuous mode [ 207.898711][ T9877] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.938712][ T9882] tipc: Enabled bearer , priority 0 [ 207.950217][ T9882] syzkaller0: entered promiscuous mode [ 207.955954][ T9882] syzkaller0: entered allmulticast mode [ 208.136489][ T9897] netlink: 'syz.0.951': attribute type 1 has an invalid length. [ 208.253000][ T9897] 8021q: adding VLAN 0 to HW filter on device bond5 [ 208.271286][ T9899] tipc: Resetting bearer [ 208.315718][ T9903] bond5: (slave geneve2): making interface the new active one [ 208.324732][ T9911] netlink: 88 bytes leftover after parsing attributes in process `syz.2.952'. [ 208.352508][ T9903] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 208.352658][ T9911] netlink: 'syz.2.952': attribute type 4 has an invalid length. [ 208.408609][ T9907] bond5: entered promiscuous mode [ 208.449703][ T9907] geneve2: entered promiscuous mode [ 208.486374][ T9908] netlink: 6 bytes leftover after parsing attributes in process `syz.2.952'. [ 208.524232][ T9908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.546323][ T9881] tipc: Resetting bearer [ 208.568555][ T9881] tipc: Disabling bearer [ 208.764665][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.772489][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.786794][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'. [ 208.845362][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 209.087965][ T9922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.125418][ T9922] veth1_to_batadv: left allmulticast mode [ 209.149817][ T9922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.292841][ T9] IPVS: starting estimator thread 0... [ 209.401954][ T9922] bridge3: left promiscuous mode [ 209.412596][ T9952] IPVS: using max 27 ests per chain, 64800 per kthread [ 209.423624][ T9922] bridge3: left allmulticast mode [ 209.454194][ T9922] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 209.484200][ T9922] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 209.492240][ T9922] macsec1: left promiscuous mode [ 209.503687][ T9922] macsec1: left allmulticast mode [ 209.540170][ T9922] bond5: left promiscuous mode [ 209.577243][ T9922] geneve2: left promiscuous mode [ 209.621060][ T9937] hsr_slave_0: left promiscuous mode [ 209.636872][ T9937] hsr_slave_1: left promiscuous mode [ 209.737922][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.761780][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.781701][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.837353][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.076012][ T9985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.966'. [ 210.508767][T10009] netlink: 'syz.3.971': attribute type 1 has an invalid length. [ 210.518760][T10009] netlink: 208 bytes leftover after parsing attributes in process `syz.3.971'. [ 211.679345][T10061] wg1 speed is unknown, defaulting to 1000 [ 211.801368][T10068] 8021q: VLANs not supported on gre0 [ 212.060298][T10076] IPv6: Can't replace route, no match found [ 212.113226][ T5887] Bluetooth: hci1: command 0x0406 tx timeout [ 212.119569][ T5887] Bluetooth: hci3: command 0x0406 tx timeout [ 212.121365][ T5874] Bluetooth: hci2: command 0x0401 tx timeout [ 212.713582][T10104] netlink: 'syz.4.999': attribute type 10 has an invalid length. [ 213.094864][T10118] netlink: 'syz.4.1002': attribute type 11 has an invalid length. [ 213.228307][T10123] __nla_validate_parse: 2 callbacks suppressed [ 213.228326][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'. [ 213.266856][T10129] tipc: Enabled bearer , priority 10 [ 213.423364][T10134] tipc: Enabled bearer , priority 0 [ 213.522870][T10130] syzkaller0: entered promiscuous mode [ 213.528556][T10130] syzkaller0: entered allmulticast mode [ 213.549178][T10130] tipc: Resetting bearer [ 213.577042][T10122] tipc: Resetting bearer [ 215.551668][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 215.567397][T10169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1012'. [ 215.721725][T10122] tipc: Disabling bearer [ 215.754070][T10150] tipc: Enabling of bearer rejected, failed to enable media [ 215.989698][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 216.016499][T10184] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1017'. [ 216.049033][T10184] bond0: entered promiscuous mode [ 216.065733][T10184] bond_slave_0: entered promiscuous mode [ 216.089787][T10184] bond_slave_1: entered promiscuous mode [ 216.142466][T10184] bond0: left promiscuous mode [ 216.155331][T10184] bond_slave_0: left promiscuous mode [ 216.194393][T10184] bond_slave_1: left promiscuous mode [ 216.864417][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 216.889421][T10240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.901982][T10238] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1027'. [ 216.995014][T10240] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 217.011616][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 217.170686][ T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 217.482430][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 217.815648][T10252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.915235][T10259] wg1 speed is unknown, defaulting to 1000 [ 218.456014][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1038'. [ 218.471281][T10286] bond0: option miimon: invalid value (18446744072422816261) [ 218.489036][T10286] bond0: option miimon: allowed values 0 - 2147483647 [ 218.863008][T10302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1043'. [ 219.019675][T10309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1045'. [ 219.042032][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 219.074560][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1045'. [ 219.199137][T10293] wg1 speed is unknown, defaulting to 1000 [ 219.769622][T10330] netem: incorrect ge model size [ 219.776595][T10330] netem: change failed [ 220.007797][T10343] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1055'. [ 220.647005][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1063'. [ 220.740927][T10381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1065'. [ 220.841597][ T30] audit: type=1804 audit(1759076689.188:3): pid=10382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1065" name="/newroot/237/cgroup.controllers" dev="tmpfs" ino=1237 res=1 errno=0 [ 220.886261][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1066'. [ 220.902605][ T30] audit: type=1800 audit(1759076689.218:4): pid=10382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1065" name="cgroup.controllers" dev="tmpfs" ino=1237 res=0 errno=0 [ 221.281452][T10390] wg1 speed is unknown, defaulting to 1000 [ 221.415286][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 221.924828][T10418] lo: entered allmulticast mode [ 221.979369][T10421] dvmrp8: entered allmulticast mode [ 222.078934][T10421] lo: left allmulticast mode [ 222.088175][T10421] dvmrp8: left allmulticast mode [ 222.817705][T10453] wg1 speed is unknown, defaulting to 1000 [ 223.026657][T10470] bridge_slave_1: left allmulticast mode [ 223.034423][T10454] wg1 speed is unknown, defaulting to 1000 [ 223.040692][T10470] bridge_slave_1: left promiscuous mode [ 223.054545][T10470] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.075467][T10476] netlink: 'syz.2.1092': attribute type 1 has an invalid length. [ 223.091560][T10470] bridge_slave_0: left allmulticast mode [ 223.105989][T10470] bridge_slave_0: left promiscuous mode [ 223.125238][T10470] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.784992][T10500] __nla_validate_parse: 8 callbacks suppressed [ 223.785013][T10500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1099'. [ 223.825102][T10488] wg1 speed is unknown, defaulting to 1000 [ 223.982476][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1101'. [ 224.448239][T10524] veth3: entered promiscuous mode [ 224.715183][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 224.748063][T10539] netlink: 'syz.3.1108': attribute type 29 has an invalid length. [ 224.776057][T10544] netlink: 'syz.3.1108': attribute type 29 has an invalid length. [ 224.848581][T10546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 224.865336][T10542] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1108'. [ 225.096125][T10556] macvlan1: entered promiscuous mode [ 225.138371][T10556] batadv0: entered promiscuous mode [ 225.272653][T10563] gretap1: entered promiscuous mode [ 225.354533][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1116'. [ 225.595305][T10573] tipc: Enabled bearer , priority 0 [ 225.625248][T10573] syzkaller0: entered promiscuous mode [ 225.651114][T10573] syzkaller0: entered allmulticast mode [ 225.669192][T10575] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 225.681416][T10585] sctp: [Deprecated]: syz.2.1118 (pid 10585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.681416][T10585] Use struct sctp_sack_info instead [ 225.769363][T10590] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1121'. [ 225.815907][T10578] tipc: Resetting bearer [ 225.917771][T10572] tipc: Resetting bearer [ 226.068970][T10572] tipc: Disabling bearer [ 226.085941][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'. [ 226.487063][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'. [ 226.555530][T10629] vlan2: entered allmulticast mode [ 226.563670][T10629] batadv0: entered allmulticast mode [ 226.576012][T10629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1129'. [ 226.598906][T10629] vlan3: entered allmulticast mode [ 226.604839][T10629] dummy0: entered allmulticast mode [ 226.929604][T10640] wg1 speed is unknown, defaulting to 1000 [ 227.131938][T10648] macsec0: entered promiscuous mode [ 227.140126][T10648] macsec0: entered allmulticast mode [ 227.149318][T10647] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 227.501692][T10665] netlink: 'syz.2.1137': attribute type 10 has an invalid length. [ 227.537773][T10665] bond0: (slave wlan1): Opening slave failed [ 227.721604][T10656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.331895][ T972] bond1: (slave macvlan0): link status definitely down, disabling slave [ 228.528580][T10693] veth6: entered allmulticast mode [ 228.586887][T10699] netlink: 'syz.2.1148': attribute type 23 has an invalid length. [ 228.627554][T10697] bond3: entered promiscuous mode [ 228.677156][T10697] bond3: entered allmulticast mode [ 228.881298][T10710] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 228.940464][T10710] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 229.074397][T10721] wg1 speed is unknown, defaulting to 1000 [ 229.773235][T10743] __nla_validate_parse: 6 callbacks suppressed [ 229.773256][T10743] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1157'. [ 229.946842][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'. [ 229.981111][T10748] netlink: 'syz.4.1158': attribute type 1 has an invalid length. [ 230.213363][T10755] wg1 speed is unknown, defaulting to 1000 [ 230.293639][T10761] vlan1: entered promiscuous mode [ 230.317469][T10761] bond0: entered promiscuous mode [ 230.944598][T10771] vlan4: entered allmulticast mode [ 230.970489][T10771] bridge_slave_0: entered allmulticast mode [ 231.196987][ T3481] syzkaller0: tun_net_xmit 76 [ 231.221692][T10785] syzkaller0: create flow: hash 2716555780 index 1 [ 231.222459][ T3481] syzkaller0: tun_net_xmit 48 [ 231.233285][ T5861] syzkaller0: tun_net_xmit 76 [ 231.325719][T10784] tipc: Enabled bearer , priority 0 [ 231.357022][T10790] syzkaller1: entered promiscuous mode [ 231.379520][T10790] syzkaller1: entered allmulticast mode [ 231.393881][T10784] syzkaller0: entered promiscuous mode [ 231.411151][T10784] syzkaller0: entered allmulticast mode [ 231.452771][T10794] macsec2: entered promiscuous mode [ 231.469939][T10794] ip6gretap0: entered promiscuous mode [ 231.479373][T10794] macsec2: entered allmulticast mode [ 231.491342][T10794] ip6gretap0: entered allmulticast mode [ 231.700546][ T9312] syzkaller0: tun_net_xmit 76 [ 231.745694][T10802] tipc: Resetting bearer [ 231.771495][ T9327] syzkaller0: tun_net_xmit 76 [ 231.792368][T10780] syzkaller0: delete flow: hash 2716555780 index 1 [ 233.208481][T10783] tipc: Resetting bearer [ 233.225798][T10783] tipc: Disabling bearer [ 233.240075][T10815] vlan2: entered promiscuous mode [ 233.246275][T10815] bond0: entered promiscuous mode [ 233.439150][T10830] netlink: 'syz.3.1183': attribute type 1 has an invalid length. [ 233.964225][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 234.027094][T10856] macvtap1: entered promiscuous mode [ 234.051049][T10856] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 234.079397][T10857] wg1 speed is unknown, defaulting to 1000 [ 234.213329][T10862] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 234.772657][T10884] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 234.815519][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'. [ 234.865419][T10886] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1194'. [ 235.880169][T10937] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 235.905492][T10937] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1204'. [ 237.389420][T11001] : entered promiscuous mode [ 237.456792][T11001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1224'. [ 237.521090][T11006] sctp: [Deprecated]: syz.0.1226 (pid 11006) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.521090][T11006] Use struct sctp_sack_info instead [ 237.756020][T11014] syzkaller1: entered promiscuous mode [ 237.779746][T11014] syzkaller1: entered allmulticast mode [ 238.000494][T11026] netlink: 'syz.3.1232': attribute type 5 has an invalid length. [ 238.008296][T11026] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1232'. [ 238.055704][T11026] netlink: 384 bytes leftover after parsing attributes in process `syz.3.1232'. [ 238.258406][T11036] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1235'. [ 238.330185][T11036] ..0·: renamed from hsr0 (while UP) [ 238.340644][T11046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1233'. [ 238.372786][T11036] ..0·: entered allmulticast mode [ 238.381636][T11036] hsr_slave_0: entered allmulticast mode [ 238.387321][T11036] hsr_slave_1: entered allmulticast mode [ 238.442019][T11036] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 238.631616][T11055] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1238'. [ 238.688576][T11061] netlink: 'syz.3.1240': attribute type 1 has an invalid length. [ 238.812443][T11061] bond4: entered promiscuous mode [ 238.818467][T11061] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.882551][ T30] audit: type=1800 audit(1759076707.238:5): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1240" name="memory.events" dev="tmpfs" ino=1355 res=0 errno=0 [ 238.941440][T11061] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.953204][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 238.955228][T11061] bond4: (slave bond5): making interface the new active one [ 238.969850][T11061] bond5: entered promiscuous mode [ 238.977512][T11061] bond4: (slave bond5): Enslaving as an active interface with an up link [ 239.065978][T11071] wg1 speed is unknown, defaulting to 1000 [ 239.611144][T11095] caif0: entered promiscuous mode [ 239.657743][T11110] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 239.867180][T11117] nbd: must specify a device to reconfigure [ 240.594358][T11155] __nla_validate_parse: 1 callbacks suppressed [ 240.594380][T11155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1264'. [ 240.626464][T11156] tipc: Enabled bearer , priority 0 [ 240.663035][T11157] syzkaller0: entered promiscuous mode [ 240.668572][T11157] syzkaller0: entered allmulticast mode [ 240.773201][T11166] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1268'. [ 240.837106][T11166] : renamed from vlan0 [ 240.928672][T11167] tipc: Resetting bearer [ 241.037729][T11167] tipc: Disabling bearer [ 241.101475][T11186] netlink: 'syz.1.1274': attribute type 13 has an invalid length. [ 241.120645][T11187] team0: No ports can be present during mode change [ 241.223965][T11186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.238635][T11196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1276'. [ 241.285563][T11196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1276'. [ 241.385048][T11197] dvmrp0: entered allmulticast mode [ 241.711251][T11178] infiniband syz1: set active [ 241.716324][T11178] infiniband syz1: added bond0 [ 241.798516][T11178] RDS/IB: syz1: added [ 242.667188][T11219] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1283'. [ 242.692963][T11225] netlink: 'syz.0.1286': attribute type 16 has an invalid length. [ 242.731557][T11225] netlink: 'syz.0.1286': attribute type 17 has an invalid length. [ 242.775708][T11230] IPv6: NLM_F_REPLACE set, but no existing node found! [ 242.819667][T11228] netlink: 'syz.3.1287': attribute type 1 has an invalid length. [ 242.899608][T11223] batadv0: entered promiscuous mode [ 242.946793][T11223] debugfs: 'hsr1' already exists in 'hsr' [ 242.990378][T11223] Cannot create hsr debugfs directory [ 242.995957][T11223] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 243.046826][T11223] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 243.101214][ T3606] bond1: (slave macvlan0): link status definitely down, disabling slave [ 243.197901][T11240] wg1 speed is unknown, defaulting to 1000 [ 243.259735][T11249] tipc: Enabling of bearer rejected, failed to enable media [ 243.281492][T11242] wg1 speed is unknown, defaulting to 1000 [ 243.305118][T11249] gretap1: entered promiscuous mode [ 243.775067][T11258] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1296'. [ 243.791938][T11258] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1296'. [ 243.984986][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1298'. [ 244.006770][T11264] bridge5: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 244.268557][T11272] FAULT_INJECTION: forcing a failure. [ 244.268557][T11272] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 244.331388][T11272] CPU: 1 UID: 0 PID: 11272 Comm: syz.0.1300 Not tainted syzkaller #0 PREEMPT(full) [ 244.331419][T11272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.331443][T11272] Call Trace: [ 244.331451][T11272] [ 244.331462][T11272] dump_stack_lvl+0x189/0x250 [ 244.331493][T11272] ? __pfx____ratelimit+0x10/0x10 [ 244.331517][T11272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.331542][T11272] ? __pfx__printk+0x10/0x10 [ 244.331570][T11272] ? __might_fault+0xb0/0x130 [ 244.331612][T11272] should_fail_ex+0x414/0x560 [ 244.331649][T11272] _copy_to_iter+0x404/0x1790 [ 244.331678][T11272] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 244.331712][T11272] ? __pfx__copy_to_iter+0x10/0x10 [ 244.331734][T11272] ? __skb_try_recv_from_queue+0x58f/0x730 [ 244.331785][T11272] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 244.331841][T11272] __skb_datagram_iter+0xf8/0x990 [ 244.331874][T11272] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 244.331916][T11272] skb_copy_datagram_iter+0xc5/0x230 [ 244.331952][T11272] netlink_recvmsg+0x2ab/0xa30 [ 244.331989][T11272] ? __pfx_netlink_recvmsg+0x10/0x10 [ 244.332020][T11272] ? aa_sock_msg_perm+0xf1/0x1d0 [ 244.332057][T11272] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 244.332077][T11272] ? security_socket_recvmsg+0x7e/0x2e0 [ 244.332103][T11272] ? __pfx_netlink_recvmsg+0x10/0x10 [ 244.332137][T11272] sock_recvmsg+0x22c/0x270 [ 244.332163][T11272] ____sys_recvmsg+0x1c9/0x460 [ 244.332203][T11272] ? __pfx_____sys_recvmsg+0x10/0x10 [ 244.332251][T11272] ? import_iovec+0x74/0xa0 [ 244.332281][T11272] ___sys_recvmsg+0x1b5/0x510 [ 244.332326][T11272] ? __pfx____sys_recvmsg+0x10/0x10 [ 244.332383][T11272] ? __fget_files+0x3a0/0x420 [ 244.332426][T11272] do_recvmmsg+0x307/0x770 [ 244.332464][T11272] ? __pfx_do_recvmmsg+0x10/0x10 [ 244.332507][T11272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.332551][T11272] __x64_sys_recvmmsg+0x190/0x240 [ 244.332583][T11272] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 244.332619][T11272] ? do_syscall_64+0xbe/0x3b0 [ 244.332647][T11272] do_syscall_64+0xfa/0x3b0 [ 244.332668][T11272] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.332690][T11272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.332710][T11272] ? clear_bhb_loop+0x60/0xb0 [ 244.332736][T11272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.332756][T11272] RIP: 0033:0x7f5489f8eec9 [ 244.332774][T11272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.332791][T11272] RSP: 002b:00007f548ae71038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 244.332813][T11272] RAX: ffffffffffffffda RBX: 00007f548a1e6090 RCX: 00007f5489f8eec9 [ 244.332827][T11272] RDX: 0000000000000003 RSI: 0000200000008540 RDI: 0000000000000003 [ 244.332840][T11272] RBP: 00007f548ae71090 R08: 0000000000000000 R09: 0000000000000000 [ 244.332852][T11272] R10: 0000000040004122 R11: 0000000000000246 R12: 0000000000000001 [ 244.332864][T11272] R13: 00007f548a1e6128 R14: 00007f548a1e6090 R15: 00007ffcbce71398 [ 244.332897][T11272] [ 244.703493][T11280] netlink: 'syz.0.1303': attribute type 83 has an invalid length. [ 244.783071][T11283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1304'. [ 244.965900][T11286] syzkaller1: entered promiscuous mode [ 244.986493][T11286] syzkaller1: entered allmulticast mode [ 245.055229][T11287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.209345][T11291] syzkaller0: entered promiscuous mode [ 245.216286][T11293] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1308'. [ 245.226487][T11291] syzkaller0: entered allmulticast mode [ 245.351553][T11302] team0: Device macvlan2 is already an upper device of the team interface [ 245.667041][T11317] FAULT_INJECTION: forcing a failure. [ 245.667041][T11317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.684835][T11317] CPU: 0 UID: 0 PID: 11317 Comm: syz.3.1314 Not tainted syzkaller #0 PREEMPT(full) [ 245.684866][T11317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 245.684879][T11317] Call Trace: [ 245.684887][T11317] [ 245.684897][T11317] dump_stack_lvl+0x189/0x250 [ 245.684928][T11317] ? __pfx____ratelimit+0x10/0x10 [ 245.684952][T11317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.684977][T11317] ? __pfx__printk+0x10/0x10 [ 245.685005][T11317] ? __might_fault+0xb0/0x130 [ 245.685046][T11317] should_fail_ex+0x414/0x560 [ 245.685083][T11317] _copy_to_iter+0x589/0x1790 [ 245.685123][T11317] ? __pfx__copy_to_iter+0x10/0x10 [ 245.685144][T11317] ? __skb_try_recv_from_queue+0x58f/0x730 [ 245.685182][T11317] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 245.685220][T11317] __skb_datagram_iter+0xf8/0x990 [ 245.685253][T11317] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 245.685294][T11317] skb_copy_datagram_iter+0xc5/0x230 [ 245.685329][T11317] netlink_recvmsg+0x2ab/0xa30 [ 245.685366][T11317] ? __pfx_netlink_recvmsg+0x10/0x10 [ 245.685398][T11317] ? aa_sock_msg_perm+0xf1/0x1d0 [ 245.685434][T11317] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 245.685455][T11317] ? security_socket_recvmsg+0x7e/0x2e0 [ 245.685480][T11317] ? __pfx_netlink_recvmsg+0x10/0x10 [ 245.685506][T11317] sock_recvmsg+0x22c/0x270 [ 245.685532][T11317] ____sys_recvmsg+0x1c9/0x460 [ 245.685571][T11317] ? __pfx_____sys_recvmsg+0x10/0x10 [ 245.685618][T11317] ? import_iovec+0x74/0xa0 [ 245.685649][T11317] ___sys_recvmsg+0x1b5/0x510 [ 245.685691][T11317] ? __pfx____sys_recvmsg+0x10/0x10 [ 245.685748][T11317] ? __fget_files+0x3a0/0x420 [ 245.685798][T11317] do_recvmmsg+0x307/0x770 [ 245.685837][T11317] ? __pfx_do_recvmmsg+0x10/0x10 [ 245.685881][T11317] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 245.685926][T11317] __x64_sys_recvmmsg+0x190/0x240 [ 245.685959][T11317] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 245.685987][T11317] ? rcu_is_watching+0x15/0xb0 [ 245.686013][T11317] ? do_syscall_64+0xbe/0x3b0 [ 245.686042][T11317] do_syscall_64+0xfa/0x3b0 [ 245.686065][T11317] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.686088][T11317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.686109][T11317] ? clear_bhb_loop+0x60/0xb0 [ 245.686136][T11317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.686169][T11317] RIP: 0033:0x7f8f3ab8eec9 [ 245.686188][T11317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.686206][T11317] RSP: 002b:00007f8f3b9a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 245.686229][T11317] RAX: ffffffffffffffda RBX: 00007f8f3ade5fa0 RCX: 00007f8f3ab8eec9 [ 245.686244][T11317] RDX: 0000000000000003 RSI: 0000200000008540 RDI: 0000000000000003 [ 245.686257][T11317] RBP: 00007f8f3b9a5090 R08: 0000000000000000 R09: 0000000000000000 [ 245.686270][T11317] R10: 0000000040004122 R11: 0000000000000246 R12: 0000000000000001 [ 245.686283][T11317] R13: 00007f8f3ade6038 R14: 00007f8f3ade5fa0 R15: 00007fff6f242898 [ 245.686317][T11317] [ 247.002077][T11335] wg1 speed is unknown, defaulting to 1000 [ 247.135295][T11361] netlink: 'syz.3.1325': attribute type 4 has an invalid length. [ 247.155704][T11361] __nla_validate_parse: 3 callbacks suppressed [ 247.155724][T11361] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1325'. [ 247.193662][T11361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.231968][T11365] FAULT_INJECTION: forcing a failure. [ 247.231968][T11365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.247213][T11365] CPU: 1 UID: 0 PID: 11365 Comm: syz.2.1327 Not tainted syzkaller #0 PREEMPT(full) [ 247.247241][T11365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.247254][T11365] Call Trace: [ 247.247262][T11365] [ 247.247270][T11365] dump_stack_lvl+0x189/0x250 [ 247.247299][T11365] ? __pfx____ratelimit+0x10/0x10 [ 247.247322][T11365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.247346][T11365] ? __pfx__printk+0x10/0x10 [ 247.247373][T11365] ? __might_fault+0xb0/0x130 [ 247.247411][T11365] should_fail_ex+0x414/0x560 [ 247.247447][T11365] _copy_to_iter+0x589/0x1790 [ 247.247487][T11365] ? __pfx__copy_to_iter+0x10/0x10 [ 247.247507][T11365] ? __skb_try_recv_from_queue+0x58f/0x730 [ 247.247543][T11365] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 247.247580][T11365] __skb_datagram_iter+0xf8/0x990 [ 247.247611][T11365] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 247.247652][T11365] skb_copy_datagram_iter+0xc5/0x230 [ 247.247687][T11365] netlink_recvmsg+0x2ab/0xa30 [ 247.247724][T11365] ? __pfx_netlink_recvmsg+0x10/0x10 [ 247.247756][T11365] ? aa_sock_msg_perm+0xf1/0x1d0 [ 247.247792][T11365] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 247.247812][T11365] ? security_socket_recvmsg+0x7e/0x2e0 [ 247.247837][T11365] ? __pfx_netlink_recvmsg+0x10/0x10 [ 247.247871][T11365] sock_recvmsg+0x22c/0x270 [ 247.247897][T11365] ____sys_recvmsg+0x1c9/0x460 [ 247.247937][T11365] ? __pfx_____sys_recvmsg+0x10/0x10 [ 247.247983][T11365] ? import_iovec+0x74/0xa0 [ 247.248014][T11365] ___sys_recvmsg+0x1b5/0x510 [ 247.248050][T11365] ? __pfx____sys_recvmsg+0x10/0x10 [ 247.248107][T11365] ? __fget_files+0x3a0/0x420 [ 247.248154][T11365] do_recvmmsg+0x307/0x770 [ 247.248194][T11365] ? __pfx_do_recvmmsg+0x10/0x10 [ 247.248238][T11365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 247.248284][T11365] __x64_sys_recvmmsg+0x190/0x240 [ 247.248318][T11365] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 247.248355][T11365] ? do_syscall_64+0xbe/0x3b0 [ 247.248384][T11365] do_syscall_64+0xfa/0x3b0 [ 247.248408][T11365] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.248430][T11365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.248451][T11365] ? clear_bhb_loop+0x60/0xb0 [ 247.248478][T11365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.248498][T11365] RIP: 0033:0x7f2401d8eec9 [ 247.248517][T11365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.248534][T11365] RSP: 002b:00007f2402bc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 247.248557][T11365] RAX: ffffffffffffffda RBX: 00007f2401fe6090 RCX: 00007f2401d8eec9 [ 247.248573][T11365] RDX: 0000000000000003 RSI: 0000200000008540 RDI: 0000000000000003 [ 247.248586][T11365] RBP: 00007f2402bc7090 R08: 0000000000000000 R09: 0000000000000000 [ 247.248599][T11365] R10: 0000000040004122 R11: 0000000000000246 R12: 0000000000000001 [ 247.248612][T11365] R13: 00007f2401fe6128 R14: 00007f2401fe6090 R15: 00007ffd6a5ac5e8 [ 247.248645][T11365] [ 247.312535][T11364] wg1 speed is unknown, defaulting to 1000 [ 247.452136][T11371] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1328'. [ 248.288548][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 248.584708][T11389] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1333'. [ 248.862104][T11396] wg1 speed is unknown, defaulting to 1000 [ 249.028625][T11408] batman_adv: batadv0: Adding interface: dummy0 [ 249.039900][T11408] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.073286][T11408] batman_adv: batadv0: Interface activated: dummy0 [ 249.084842][T11412] netlink: 'syz.4.1337': attribute type 2 has an invalid length. [ 249.125857][T11412] 2÷: entered promiscuous mode [ 249.803659][T11429] IPVS: set_ctl: invalid protocol: 58 172.20.20.49:20000 [ 250.509822][T11464] tipc: Enabled bearer , priority 24 [ 250.518883][T11465] tipc: Enabling of bearer rejected, already enabled [ 250.859907][T11478] wg1 speed is unknown, defaulting to 1000 [ 250.942954][T11482] wg1 speed is unknown, defaulting to 1000 [ 251.259387][T11493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'. [ 251.419976][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'. [ 251.483124][T11493] bridge5: entered promiscuous mode [ 251.488409][T11493] bridge5: entered allmulticast mode [ 252.172498][T11520] netlink: zone id is out of range [ 252.200407][T11520] netlink: del zone limit has 8 unknown bytes [ 252.374015][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'. [ 252.446180][T11527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1366'. [ 252.850790][T11545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1369'. [ 252.925244][T11548] netlink: 'syz.3.1370': attribute type 22 has an invalid length. [ 252.944969][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 253.018945][ T35] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.029626][T11548] netlink: 'syz.3.1370': attribute type 22 has an invalid length. [ 253.067132][ T35] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.081018][T11548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 253.118113][ T35] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.171274][ T35] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.392560][T11557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1372'. [ 253.928406][T11573] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1376'. [ 253.962148][T11581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 253.973794][T11581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1377'. [ 254.016216][T11581] netlink: 'syz.2.1377': attribute type 61 has an invalid length. [ 254.094624][T11581] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1377'. [ 254.347032][T11594] wg1 speed is unknown, defaulting to 1000 [ 254.447487][T11604] macsec1: entered promiscuous mode [ 254.525972][T11604] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 254.589221][T11604] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 254.678939][T11616] netlink: 'syz.4.1385': attribute type 9 has an invalid length. [ 254.732883][T11616] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 254.938077][T11631] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 255.513940][T11655] veth0: entered promiscuous mode [ 255.889011][T11666] wg1 speed is unknown, defaulting to 1000 [ 255.941955][T11647] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.4.1396:11647 [ 256.676596][T11700] sctp: [Deprecated]: syz.2.1407 (pid 11700) Use of int in max_burst socket option deprecated. [ 256.676596][T11700] Use struct sctp_assoc_value instead [ 257.052585][T11720] netlink: 'syz.0.1411': attribute type 12 has an invalid length. [ 257.149717][T11727] veth1_macvtap: left promiscuous mode [ 257.211717][T11727] macsec0: entered allmulticast mode [ 257.289454][T11728] veth1_macvtap: entered promiscuous mode [ 257.295840][T11728] veth1_macvtap: entered allmulticast mode [ 257.329655][T11728] macsec0: left allmulticast mode [ 257.352879][T11728] veth1_macvtap: left allmulticast mode [ 257.599352][T11740] __nla_validate_parse: 8 callbacks suppressed [ 257.599375][T11740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1416'. [ 257.624303][T11746] netlink: 'syz.3.1418': attribute type 1 has an invalid length. [ 257.989532][T11746] bond6: entered promiscuous mode [ 257.996080][T11746] 8021q: adding VLAN 0 to HW filter on device bond6 [ 258.057393][T11756] bond6: (slave bridge2): making interface the new active one [ 258.070225][T11756] bridge2: entered promiscuous mode [ 258.083005][T11756] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 258.354747][T11778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1425'. [ 258.474680][T11789] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 259.112020][T11815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1434'. [ 259.137248][T11815] netlink: 'syz.0.1434': attribute type 5 has an invalid length. [ 259.283425][T11822] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1436'. [ 259.299754][T11822] batman_adv: batadv0: Interface deactivated: dummy0 [ 259.332866][T11822] batman_adv: batadv0: Removing interface: dummy0 [ 259.361644][T11826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1436'. [ 259.403069][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 259.413328][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 259.428574][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 259.446000][T11829] tipc: Enabled bearer , priority 0 [ 259.466639][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 259.479195][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1438'. [ 259.503741][T11835] tipc: Resetting bearer [ 259.514261][T11827] tipc: Disabling bearer [ 259.744140][T11849] trusted_key: syz.1.1443 sent an empty control message without MSG_MORE. [ 259.858348][T11854] netlink: 'syz.0.1445': attribute type 10 has an invalid length. [ 259.879572][T11854] bridge0: port 3(macsec0) entered blocking state [ 259.887429][T11854] bridge0: port 3(macsec0) entered disabled state [ 259.895018][T11854] macsec0: entered allmulticast mode [ 259.900808][T11854] veth1_macvtap: entered allmulticast mode [ 259.933368][T11854] macsec0: entered promiscuous mode [ 259.966551][T11857] FAULT_INJECTION: forcing a failure. [ 259.966551][T11857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.980220][T11857] CPU: 0 UID: 0 PID: 11857 Comm: syz.1.1447 Not tainted syzkaller #0 PREEMPT(full) [ 259.980257][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.980271][T11857] Call Trace: [ 259.980279][T11857] [ 259.980288][T11857] dump_stack_lvl+0x189/0x250 [ 259.980318][T11857] ? __pfx____ratelimit+0x10/0x10 [ 259.980342][T11857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.980367][T11857] ? __pfx__printk+0x10/0x10 [ 259.980397][T11857] ? __might_fault+0xb0/0x130 [ 259.980439][T11857] should_fail_ex+0x414/0x560 [ 259.980476][T11857] _copy_to_iter+0x589/0x1790 [ 259.980514][T11857] ? __pfx__copy_to_iter+0x10/0x10 [ 259.980536][T11857] ? __skb_try_recv_from_queue+0x58f/0x730 [ 259.980575][T11857] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 259.980613][T11857] __skb_datagram_iter+0xf8/0x990 [ 259.980646][T11857] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 259.980688][T11857] skb_copy_datagram_iter+0xc5/0x230 [ 259.980725][T11857] netlink_recvmsg+0x2ab/0xa30 [ 259.980762][T11857] ? __pfx_netlink_recvmsg+0x10/0x10 [ 259.980794][T11857] ? aa_sock_msg_perm+0xf1/0x1d0 [ 259.980831][T11857] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 259.980862][T11857] ? security_socket_recvmsg+0x7e/0x2e0 [ 259.980886][T11857] ? __pfx_netlink_recvmsg+0x10/0x10 [ 259.980912][T11857] sock_recvmsg+0x22c/0x270 [ 259.980938][T11857] ____sys_recvmsg+0x1c9/0x460 [ 259.980979][T11857] ? __pfx_____sys_recvmsg+0x10/0x10 [ 259.981027][T11857] ? import_iovec+0x74/0xa0 [ 259.981058][T11857] ___sys_recvmsg+0x1b5/0x510 [ 259.981094][T11857] ? __pfx____sys_recvmsg+0x10/0x10 [ 259.981154][T11857] ? __fget_files+0x3a0/0x420 [ 259.981198][T11857] do_recvmmsg+0x307/0x770 [ 259.981244][T11857] ? __pfx_do_recvmmsg+0x10/0x10 [ 259.981287][T11857] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 259.981336][T11857] __x64_sys_recvmmsg+0x190/0x240 [ 259.981370][T11857] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 259.981397][T11857] ? rcu_is_watching+0x15/0xb0 [ 259.981423][T11857] ? do_syscall_64+0xbe/0x3b0 [ 259.981453][T11857] do_syscall_64+0xfa/0x3b0 [ 259.981476][T11857] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.981498][T11857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.981518][T11857] ? clear_bhb_loop+0x60/0xb0 [ 259.981543][T11857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.981564][T11857] RIP: 0033:0x7fcdc918eec9 [ 259.981583][T11857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.981602][T11857] RSP: 002b:00007fcdc9f54038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 259.981625][T11857] RAX: ffffffffffffffda RBX: 00007fcdc93e5fa0 RCX: 00007fcdc918eec9 [ 259.981641][T11857] RDX: 0000000000000003 RSI: 0000200000008540 RDI: 0000000000000003 [ 259.981654][T11857] RBP: 00007fcdc9f54090 R08: 0000000000000000 R09: 0000000000000000 [ 259.981668][T11857] R10: 0000000040004122 R11: 0000000000000246 R12: 0000000000000001 [ 259.981681][T11857] R13: 00007fcdc93e6038 R14: 00007fcdc93e5fa0 R15: 00007ffe8a2f6dc8 [ 259.981716][T11857] [ 260.356543][T11869] netlink: 'syz.4.1452': attribute type 39 has an invalid length. [ 260.594176][T11882] netlink: 'syz.4.1454': attribute type 5 has an invalid length. [ 261.059754][T11913] netlink: 'syz.1.1463': attribute type 5 has an invalid length. [ 261.258697][T11927] bond0: entered allmulticast mode [ 261.559380][T11938] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 261.577165][T11938] netlink: 'syz.0.1472': attribute type 2 has an invalid length. [ 261.586717][T11938] netlink: 'syz.0.1472': attribute type 1 has an invalid length. [ 262.457156][T11977] syzkaller1: entered promiscuous mode [ 262.469141][T11977] syzkaller1: entered allmulticast mode [ 262.632177][T11985] __nla_validate_parse: 10 callbacks suppressed [ 262.632198][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1482'. [ 262.674148][T11989] ˙˙˙˙˙˙: renamed from macsec0 (while UP) [ 262.738386][T11989] wg1 speed is unknown, defaulting to 1000 [ 262.992609][T11996] tipc: Enabled bearer , priority 0 [ 263.002077][T11998] syzkaller0: entered promiscuous mode [ 263.015608][T11998] syzkaller0: entered allmulticast mode [ 263.188698][T11996] tipc: Resetting bearer [ 263.232366][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1486'. [ 263.289829][T11994] tipc: Resetting bearer [ 263.352792][T11994] tipc: Disabling bearer [ 263.487431][T12008] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1488'. [ 263.853156][T12020] netlink: 'syz.1.1491': attribute type 3 has an invalid length. [ 263.865241][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1491'. [ 264.007439][T12026] GUP no longer grows the stack in syz.4.1492 (12026): 200000002000-20000000a000 (200000001000) [ 264.019262][T12026] CPU: 0 UID: 0 PID: 12026 Comm: syz.4.1492 Not tainted syzkaller #0 PREEMPT(full) [ 264.019294][T12026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.019308][T12026] Call Trace: [ 264.019317][T12026] [ 264.019327][T12026] dump_stack_lvl+0x189/0x250 [ 264.019361][T12026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.019386][T12026] ? __pfx__printk+0x10/0x10 [ 264.019412][T12026] ? find_vma+0xe7/0x160 [ 264.019441][T12026] ? vma_is_secretmem+0xd/0x50 [ 264.019468][T12026] ? check_vma_flags+0x50d/0x580 [ 264.019501][T12026] __get_user_pages+0x24d0/0x2ce0 [ 264.019583][T12026] __gup_longterm_locked+0x3dc/0x1660 [ 264.019630][T12026] ? rcu_needs_cpu+0xa1/0xb0 [ 264.019657][T12026] pin_user_pages+0x9e/0xd0 [ 264.019687][T12026] xdp_umem_pin_pages+0x117/0x340 [ 264.019718][T12026] xdp_umem_create+0x677/0x8e0 [ 264.019754][T12026] xsk_setsockopt+0x7b0/0x8d0 [ 264.019791][T12026] ? __pfx_xsk_setsockopt+0x10/0x10 [ 264.019832][T12026] ? __fget_files+0x2a/0x420 [ 264.019860][T12026] ? aa_sock_opt_perm+0xff/0x1b0 [ 264.019886][T12026] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 264.019908][T12026] ? __pfx_xsk_setsockopt+0x10/0x10 [ 264.019944][T12026] do_sock_setsockopt+0x17c/0x1b0 [ 264.019978][T12026] __x64_sys_setsockopt+0x13f/0x1b0 [ 264.020013][T12026] do_syscall_64+0xfa/0x3b0 [ 264.020038][T12026] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.020062][T12026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.020083][T12026] ? clear_bhb_loop+0x60/0xb0 [ 264.020111][T12026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.020132][T12026] RIP: 0033:0x7f3ce4b8eec9 [ 264.020151][T12026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.020170][T12026] RSP: 002b:00007f3ce5a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 264.020194][T12026] RAX: ffffffffffffffda RBX: 00007f3ce4de6090 RCX: 00007f3ce4b8eec9 [ 264.020210][T12026] RDX: 0000000000000004 RSI: 000000000000011b RDI: 000000000000000d [ 264.020223][T12026] RBP: 00007f3ce4c11f91 R08: 000000000000001c R09: 0000000000000000 [ 264.020240][T12026] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 264.020252][T12026] R13: 00007f3ce4de6128 R14: 00007f3ce4de6090 R15: 00007ffcbc3bb0d8 [ 264.020286][T12026] [ 264.554216][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1496'. [ 264.675464][T12052] netlink: 448 bytes leftover after parsing attributes in process `syz.0.1498'. [ 264.676283][T12046] vlan3: entered promiscuous mode [ 264.695073][T12056] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1497'. [ 264.721327][T12046] team0: entered promiscuous mode [ 264.869978][T12059] geneve3: entered promiscuous mode [ 264.929312][T12059] geneve3: entered allmulticast mode [ 265.321533][T12055] wg1 speed is unknown, defaulting to 1000 [ 265.409350][T12091] syzkaller1: entered promiscuous mode [ 265.443140][T12091] syzkaller1: entered allmulticast mode [ 281.679323][T12097] wg1 speed is unknown, defaulting to 1000 [ 314.688334][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.408890][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.475669][ T5883] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 315.648351][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.698654][ T5883] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.118029][ T5883] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 316.396475][ T5883] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.439072][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.867446][ T5885] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 317.748974][ T5885] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 319.248472][ T51] Bluetooth: hci0: command tx timeout [ 321.328241][ T51] Bluetooth: hci0: command tx timeout [ 322.029357][ T5885] Bluetooth: hci5: command tx timeout [ 322.429171][T12121] syz.0.1514: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 322.578851][ T5874] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 322.660138][ T5874] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 322.748820][T12121] CPU: 1 UID: 0 PID: 12121 Comm: syz.0.1514 Not tainted syzkaller #0 PREEMPT(full) [ 322.748853][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.748868][T12121] Call Trace: [ 322.748878][T12121] [ 322.748889][T12121] dump_stack_lvl+0x189/0x250 [ 322.748927][T12121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.748960][T12121] ? __pfx__printk+0x10/0x10 [ 322.748991][T12121] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 322.749018][T12121] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 322.749045][T12121] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 322.749075][T12121] warn_alloc+0x214/0x310 [ 322.749116][T12121] ? __pfx_warn_alloc+0x10/0x10 [ 322.749162][T12121] ? __get_vm_area_node+0x28f/0x300 [ 322.749192][T12121] ? xskq_create+0xbf/0x170 [ 322.749220][T12121] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 322.749288][T12121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 322.749322][T12121] ? __kmalloc_cache_noprof+0x30a/0x3d0 [ 322.749355][T12121] ? __kasan_kmalloc+0x93/0xb0 [ 322.749389][T12121] vmalloc_user_noprof+0xad/0xf0 [ 322.749421][T12121] ? xskq_create+0xbf/0x170 [ 322.749456][T12121] xskq_create+0xbf/0x170 [ 322.749481][T12121] xsk_init_queue+0xb0/0x110 [ 322.749506][T12121] xsk_setsockopt+0x4dc/0x8d0 [ 322.749544][T12121] ? __pfx_xsk_setsockopt+0x10/0x10 [ 322.749579][T12121] ? __pfx_aa_sk_perm+0x10/0x10 [ 322.749616][T12121] ? aa_sock_opt_perm+0xff/0x1b0 [ 322.749640][T12121] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 322.749662][T12121] ? __pfx_xsk_setsockopt+0x10/0x10 [ 322.749700][T12121] do_sock_setsockopt+0x17c/0x1b0 [ 322.749734][T12121] __x64_sys_setsockopt+0x13f/0x1b0 [ 322.749768][T12121] do_syscall_64+0xfa/0x3b0 [ 322.749793][T12121] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.749816][T12121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.749839][T12121] ? clear_bhb_loop+0x60/0xb0 [ 322.749866][T12121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.749888][T12121] RIP: 0033:0x7f5489f8eec9 [ 322.749908][T12121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.749934][T12121] RSP: 002b:00007f548ae92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 322.749957][T12121] RAX: ffffffffffffffda RBX: 00007f548a1e5fa0 RCX: 00007f5489f8eec9 [ 322.749973][T12121] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000003 [ 322.749987][T12121] RBP: 00007f548a011f91 R08: 0000000000000004 R09: 0000000000000000 [ 322.750001][T12121] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 322.750015][T12121] R13: 00007f548a1e6038 R14: 00007f548a1e5fa0 R15: 00007ffcbce71398 [ 322.750051][T12121] [ 322.750071][T12121] Mem-Info: [ 323.058423][ T5874] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.405099][ T5874] Bluetooth: hci0: command tx timeout [ 323.617038][T12121] active_anon:7402 inactive_anon:0 isolated_anon:0 [ 323.617038][T12121] active_file:3410 inactive_file:39973 isolated_file:0 [ 323.617038][T12121] unevictable:768 dirty:26 writeback:0 [ 323.617038][T12121] slab_reclaimable:12044 slab_unreclaimable:137705 [ 323.617038][T12121] mapped:44861 shmem:2376 pagetables:1150 [ 323.617038][T12121] sec_pagetables:0 bounce:0 [ 323.617038][T12121] kernel_misc_reclaimable:0 [ 323.617038][T12121] free:1256479 free_pcp:10972 free_cma:0 [ 324.287895][ T5874] Bluetooth: hci5: command tx timeout [ 324.747295][ T5874] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 324.949777][T12121] Node 0 active_anon:29728kB inactive_anon:0kB active_file:13640kB inactive_file:159688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:179444kB dirty:108kB writeback:0kB shmem:7968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13072kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 325.068710][ T5874] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 325.486395][ T5874] Bluetooth: hci0: command tx timeout [ 325.609629][T12121] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 325.820132][T12121] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 326.035877][T12121] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 326.118332][T12121] Node 0 DMA32 free:1121232kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29712kB inactive_anon:0kB active_file:13640kB inactive_file:157880kB unevictable:1536kB writepending:136kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:32380kB local_pcp:14292kB free_cma:0kB [ 326.398887][ T51] Bluetooth: hci5: command tx timeout [ 326.537647][T12121] lowmem_reserve[]: 0 0 1 1 1 [ 326.878046][T12121] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1816kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 326.968336][T12121] lowmem_reserve[]: 0 0 0 0 0 [ 327.319853][T12121] Node 1 Normal free:3889304kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15712kB local_pcp:10016kB free_cma:0kB [ 327.747456][T12121] lowmem_reserve[]: 0 0 0 0 0 [ 328.058232][T12121] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 328.417805][T12121] Node 0 DMA32: 82*4kB (UME) 472*8kB (UME) 323*16kB (ME) 193*32kB (UM) 85*64kB (ME) 59*128kB (M) 17*256kB (UM) 11*512kB (ME) 3*1024kB (UME) 3*2048kB (UME) 261*4096kB (M) = 1116696kB [ 328.499105][ T51] Bluetooth: hci5: command tx timeout [ 328.597833][T12121] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 328.929280][T12121] Node 1 Normal: 186*4kB (UME) 54*8kB (UME) 48*16kB (UME) 156*32kB (UME) 60*64kB (UME) 11*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3889560kB [ 329.078942][ T51] Bluetooth: hci6: command tx timeout [ 329.490106][T12121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 329.798198][T12121] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 330.047930][T12121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 330.379040][T12121] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 330.778956][T12121] 45757 total pagecache pages [ 330.938872][T12121] 0 pages in swap cache [ 331.147322][T12121] Free swap = 124996kB [ 331.189247][ T51] Bluetooth: hci6: command tx timeout [ 331.408506][T12121] Total swap = 124996kB [ 331.609138][T12121] 2097051 pages RAM [ 331.848925][T12121] 0 pages HighMem/MovableOnly [ 332.108915][T12121] 424998 pages reserved [ 332.198454][T12121] 0 pages cma reserved [ 333.257722][ T51] Bluetooth: hci6: command tx timeout [ 335.349869][ T51] Bluetooth: hci6: command tx timeout [ 339.319572][ T972] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.878122][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.358242][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.459635][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.899300][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.300103][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.707540][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 350.819292][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 351.199647][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 351.797349][ T51] Bluetooth: hci4: command tx timeout [ 352.579014][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 352.899995][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 353.879738][ T5874] Bluetooth: hci4: command tx timeout [ 354.209787][ T972] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.969608][ T51] Bluetooth: hci4: command tx timeout [ 356.839310][ T51] Bluetooth: hci7: command tx timeout [ 358.059345][ T51] Bluetooth: hci4: command tx timeout [ 358.917785][ T51] Bluetooth: hci7: command tx timeout [ 360.999080][ T51] Bluetooth: hci7: command tx timeout [ 363.008868][T12126] wg1 speed is unknown, defaulting to 1000 [ 363.079114][ T51] Bluetooth: hci7: command tx timeout [ 364.849274][ T972] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.018703][T12129] wg1 speed is unknown, defaulting to 1000 [ 367.929200][ T972] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.087809][T12134] wg1 speed is unknown, defaulting to 1000 [ 380.359591][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.928000][T12141] wg1 speed is unknown, defaulting to 1000 [ 381.268868][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.435786][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.899263][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.149473][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.148698][T12140] wg1 speed is unknown, defaulting to 1000 [ 384.348719][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 384.908467][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 385.098229][ T5885] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 385.318405][ T5885] Bluetooth: hci3: command tx timeout [ 385.447396][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 385.619446][ T5885] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 385.807233][ T5885] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 386.128736][ T5885] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 386.258251][ T5885] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 386.409565][ T5883] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 387.168559][ T5874] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 387.397550][ T5883] Bluetooth: hci3: command tx timeout [ 387.887758][ T5885] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 388.418930][ T3606] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 389.479696][ T51] Bluetooth: hci8: command tx timeout [ 389.507687][ T5885] Bluetooth: hci3: command tx timeout [ 391.570088][ T51] Bluetooth: hci8: command tx timeout [ 391.598817][ T5885] Bluetooth: hci3: command tx timeout [ 392.529062][ T5885] Bluetooth: hci9: command tx timeout [ 393.669591][ T5885] Bluetooth: hci8: command tx timeout [ 394.598707][ T5885] Bluetooth: hci9: command tx timeout [ 395.190024][ T3512] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 395.717244][ T5885] Bluetooth: hci8: command tx timeout [ 396.686464][ T5885] Bluetooth: hci9: command tx timeout [ 398.769729][ T5885] Bluetooth: hci9: command tx timeout [ 398.929495][ T3481] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 20001 - 0 [ 405.947058][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 406.167324][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 406.279547][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 406.879016][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 407.128968][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 409.897144][ T5885] Bluetooth: hci10: command tx timeout [ 411.970160][ T5885] Bluetooth: hci10: command tx timeout [ 413.710088][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.839063][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.017710][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.039881][ T51] Bluetooth: hci10: command tx timeout [ 414.809056][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.109729][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 416.129380][ T5885] Bluetooth: hci10: command tx timeout [ 418.757504][ T51] Bluetooth: hci2: command tx timeout [ 420.847844][ T51] Bluetooth: hci2: command tx timeout [ 422.917191][ T51] Bluetooth: hci2: command tx timeout [ 425.038549][ T51] Bluetooth: hci2: command tx timeout [ 433.157390][ T5874] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 433.299368][ T5874] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 433.409600][ T5874] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 434.029850][ T5874] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 434.299456][ T5874] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 437.405528][ T5885] Bluetooth: hci11: command tx timeout [ 438.469333][ T51] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 438.740129][ T51] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 439.248076][ T5874] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 439.349427][ T5874] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 439.469871][ T5874] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 439.488989][ T5874] Bluetooth: hci11: command tx timeout [ 440.079842][ T5874] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 440.428462][ T5874] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 440.889198][T12190] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 441.038441][ T5886] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 441.379950][T12190] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 441.578987][T12190] Bluetooth: hci11: command tx timeout [ 442.598860][ T5885] Bluetooth: hci0: command 0x0406 tx timeout [ 442.638653][ T5886] Bluetooth: hci5: command 0x0406 tx timeout [ 443.649405][ T51] Bluetooth: hci11: command tx timeout [ 444.049327][ T51] Bluetooth: hci13: command tx timeout [ 444.268985][ T51] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 444.447561][ T51] Bluetooth: hci12: command tx timeout [ 444.637319][ T51] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 444.729245][ T51] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 445.488991][ T51] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 445.979421][ T51] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 446.118028][ T51] Bluetooth: hci13: command tx timeout [ 446.529965][ T5874] Bluetooth: hci12: command tx timeout [ 448.215384][ T51] Bluetooth: hci13: command tx timeout [ 448.597636][ T51] Bluetooth: hci12: command tx timeout [ 448.999470][ T51] Bluetooth: hci14: command tx timeout [ 450.299945][ T51] Bluetooth: hci13: command tx timeout [ 450.679242][ T51] Bluetooth: hci12: command tx timeout [ 451.079736][ T51] Bluetooth: hci14: command tx timeout [ 452.288768][ T5887] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 452.357878][ T5887] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 452.757306][ T5887] Bluetooth: hci6: command 0x0406 tx timeout [ 452.788967][ T5886] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 453.179512][ T5886] Bluetooth: hci14: command tx timeout [ 453.658223][ T5886] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 453.898187][ T5886] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 455.258446][ T51] Bluetooth: hci14: command tx timeout [ 456.837809][ T51] Bluetooth: hci15: command tx timeout [ 458.940117][ T51] Bluetooth: hci15: command tx timeout [ 461.008895][ T51] Bluetooth: hci15: command tx timeout [ 463.078697][ T51] Bluetooth: hci15: command tx timeout [ 465.289979][ T972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.149567][ T972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.719549][ T972] bond0 (unregistering): Released all slaves [ 468.449354][ T972] bond1 (unregistering): Released all slaves [ 473.258065][ T5874] Bluetooth: hci4: command 0x0406 tx timeout [ 478.378593][ T51] Bluetooth: hci7: command 0x0406 tx timeout [ 498.808528][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 499.028396][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 499.529858][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 500.149425][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 501.009045][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 504.119616][ T51] Bluetooth: hci10: command tx timeout [ 506.209102][ T51] Bluetooth: hci10: command tx timeout [ 508.297507][ T5874] Bluetooth: hci10: command tx timeout [ 509.077834][ T5874] Bluetooth: hci3: command 0x0406 tx timeout [ 510.330017][ T5886] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 510.369019][ T5886] Bluetooth: hci10: command tx timeout [ 511.205438][ T5886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 511.598929][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 513.057570][ T5885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 513.429208][ T5885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 514.319693][ T5874] Bluetooth: hci8: command 0x0406 tx timeout [ 514.337321][ T5874] Bluetooth: hci9: command 0x0406 tx timeout [ 516.309155][ T5885] Bluetooth: hci2: command tx timeout [ 518.009388][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 518.250119][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 518.429167][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 518.439707][ T5885] Bluetooth: hci2: command tx timeout [ 518.868417][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 519.278023][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 520.528831][ T51] Bluetooth: hci2: command tx timeout [ 522.058845][ T51] Bluetooth: hci11: command tx timeout [ 522.629531][ T51] Bluetooth: hci2: command tx timeout [ 524.119819][ T51] Bluetooth: hci11: command tx timeout [ 525.258375][ T5886] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 525.409632][ T5886] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 525.578575][ T5886] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 526.119869][ T5886] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 526.217870][ T5886] Bluetooth: hci11: command tx timeout [ 526.389256][ T5886] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 528.278414][ T5886] Bluetooth: hci11: command tx timeout [ 529.089224][ T5886] Bluetooth: hci12: command tx timeout [ 531.157242][ T5886] Bluetooth: hci12: command tx timeout [ 533.248367][ T5886] Bluetooth: hci12: command tx timeout [ 534.909070][ T31] INFO: task syz.4.1505:12097 blocked for more than 143 seconds. [ 535.177763][ T31] Not tainted syzkaller #0 [ 535.309865][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 535.368827][ T5886] Bluetooth: hci12: command tx timeout [ 535.435859][ T31] task:syz.4.1505 state:D stack:24544 pid:12097 tgid:12095 ppid:5869 task_flags:0x400140 flags:0x00004006 [ 535.455847][ T31] Call Trace: [ 535.459182][ T31] [ 535.465488][ T31] __schedule+0x1798/0x4cc0 [ 535.528960][ T31] ? __lock_acquire+0xab9/0xd20 [ 535.639721][ T31] ? __lock_acquire+0xab9/0xd20 [ 536.039992][ T31] ? __pfx___schedule+0x10/0x10 [ 536.197970][ T31] ? schedule+0x91/0x360 [ 536.368849][ T31] schedule+0x165/0x360 [ 536.607670][ T31] schedule_preempt_disabled+0x13/0x30 [ 536.648655][ T31] rwsem_down_write_slowpath+0x872/0xfe0 [ 536.708397][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 536.919359][ T51] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 536.958632][ T31] ? rwsem_down_write_slowpath+0x472/0xfe0 [ 537.049291][ T51] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 537.198901][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 537.208622][ T31] ? __lock_acquire+0xab9/0xd20 [ 537.218260][ T31] ? rdma_dev_exit_net+0x8c/0x340 [ 537.238936][ T51] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 537.616990][ T31] down_write+0x1ab/0x1f0 [ 537.679905][ T51] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 537.728923][ T31] ? __pfx_down_write+0x10/0x10 [ 537.827506][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 537.877671][ T31] ? rdma_net_to_dev_net+0x23/0x240 [ 537.969397][ T31] ? rdma_net_to_dev_net+0x1ed/0x240 [ 538.047286][ T31] rdma_dev_exit_net+0x8c/0x340 [ 538.157300][ T31] ? __pfx___might_resched+0x10/0x10 [ 538.288305][ T51] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 538.538983][ T31] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 538.957519][ T31] ? net_generic+0x1e/0x240 [ 539.118862][ T31] ? mutex_is_locked+0x17/0x50 [ 539.498105][ T31] ? rtnl_is_locked+0x15/0x20 [ 539.688561][ T31] ops_undo_list+0x49a/0x990 [ 539.829913][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 539.958648][ T31] ? ops_init+0x469/0x5c0 [ 540.078715][ T31] setup_net+0x2d3/0x320 [ 540.288495][ T31] ? __pfx_setup_net+0x10/0x10 [ 540.429635][ T31] ? copy_net_ns+0x304/0x4d0 [ 540.538504][ T31] ? down_read_killable+0x1d1/0x350 [ 540.747805][ T31] copy_net_ns+0x31b/0x4d0 [ 540.849218][ T31] create_new_namespaces+0x3f3/0x720 [ 541.238818][ T31] ? security_capable+0x7e/0x2e0 [ 541.347519][ T31] unshare_nsproxy_namespaces+0x11c/0x170 [ 541.408935][ T51] Bluetooth: hci16: command tx timeout [ 541.498562][ T31] ksys_unshare+0x4c8/0x8c0 [ 542.049511][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 542.167978][ T31] __x64_sys_unshare+0x38/0x50 [ 542.467127][ T31] do_syscall_64+0xfa/0x3b0 [ 542.737015][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 543.068511][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.377939][ T31] ? clear_bhb_loop+0x60/0xb0 [ 543.489067][ T51] Bluetooth: hci16: command tx timeout [ 543.489864][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.868248][ T31] RIP: 0033:0x7f3ce4b8eec9 [ 543.988942][ T31] RSP: 002b:00007f3ce5a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 544.629199][ T31] RAX: ffffffffffffffda RBX: 00007f3ce4de6090 RCX: 00007f3ce4b8eec9