last executing test programs: 3.223230469s ago: executing program 0 (id=1214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xf, 0x1, 0x7) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 3.007786491s ago: executing program 0 (id=1216): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x1, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000080)={0x3, 0x5, 0xf, 0x5, 0x1000, 0x7, 0x0, 0x80}, &(0x7f00000000c0)={0x38, 0xd, 0xffff, 0x7, 0x3ff, 0x9, 0x2b27a4b1, 0x1}, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 2.887647112s ago: executing program 0 (id=1218): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r1, 0xcb}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e23, @loopback}}, 0x7, 0x6, 0x3, 0x1000, 0x80, 0xcf9, 0x80}, 0x9c) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x61d8, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdf}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3e9a}]}, 0x28}, 0x1, 0x0, 0x0, 0x8008000}, 0x4000000) 2.03975436s ago: executing program 0 (id=1228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="14fe00fffffffffffede10"], 0x14}}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='xen_cpu_write_gdt_entry\x00', 0xffffffffffffffff, 0x0, 0x81}, 0x18) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000080)) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'lo\x00'}) r4 = socket(0x1e, 0x805, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x4}}}, 0x10) unshare(0x6a040000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="14000000380010002dbd7000fa5bdf2504000000"], 0x14}}, 0x40800) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f00000001c0)={'ipvlan0\x00', {0x2, 0x0, @broadcast}}) listen(r6, 0x7fff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e1f, @multicast1}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x98}}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb26", @ANYBLOB="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", @ANYRESHEX=r0], 0xa0}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES16=r3], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x8040) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 1.734304341s ago: executing program 3 (id=1229): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071123400ddff0f000000008000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000040)={'geneve0\x00', {0x2, 0x0, @loopback}}) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r2, 0x372) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f00000003c0)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x2, 0x0, 0x0, 0x6}, {0x4, 0x81, 0x25, 0x4a8f}]}, 0x10) sendto$inet6(r5, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@bridge_getneigh={0x38, 0x1e, 0x4, 0x70bd26, 0x25dfdbfd, {0x7, 0x0, 0x0, r7, 0x80, 0x49010}, [@IFLA_PHYS_PORT_ID={0xd, 0x22, "74d0f52358919e9505"}, @IFLA_WEIGHT={0x8, 0xf, 0x10000}]}, 0x38}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea2010000900e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f0000010000000000000000000000000000000032"], 0x23c}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x701}, 0x14}}, 0x0) 1.700495138s ago: executing program 4 (id=1230): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 1.548646103s ago: executing program 2 (id=1231): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7f}, 0x18) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="030000001000010000000000000000000500000a28000000000a030000000000000000883897375282111b40000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRES64=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x100, 0x400, {{0x20, 0x4, 0x1, 0x0, 0x80, 0x68, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102, {[@timestamp={0x44, 0x14, 0x95, 0x0, 0x2, [0xffffffff, 0x200, 0x0, 0x8c]}, @rr={0x7, 0x7, 0x80, [@local]}, @ssrr={0x89, 0x1b, 0x6, [@private=0xa010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @multicast1]}, @rr={0x7, 0x13, 0xde, [@remote, @empty, @local, @private=0xa010101]}, @generic={0x44, 0x6, "172da35a"}, @ssrr={0x89, 0x1b, 0x14, [@rand_addr=0x64010101, @loopback, @rand_addr=0x64010101, @loopback, @broadcast, @local]}]}}}}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="90050000120001002cbd7000fcdbdf25180503054e234e210000000001010000010000800700000000080000519e00000700000003000000", @ANYRES32=r2, @ANYBLOB="0600000000000000010000004b02000069000100808fc4c6c8a5f6c587f44b09b5dc7adc7797c32d4e1089bc5abeb4e96c9abd65966489c9d25e30a319fc1cbd8098941167df3fab1c43a1346724afb8ce4ac77c8275a95b54de33cb91b6737e2e7427286f6b41f2185f146edb7b694777503583b331b285e3000000b900010001a9744afd0076733ecd4c63d826b23e9b472dc72186be73075d0c12fb24f479d88822587b059393dfd49427b9c9a5a2edbbe195839d837c96c78a9504483831c125ca17b5833e148d77f746093b917397a132e9ad7e4d4a3558a8fc563c675ed225c70730ce47713a7a1c82691cbb5a38c0336dee869e5e849163c23a1cd485169addca868991d28e4115f09edc6c434632b70145f0a8cbdb0c7fe12e2224650dc9c7d3d12324bd6fe400000024000100a863c6e265318f7c8c331bca44b9d7e6e916996123783bbe98b5bce0980af00fd3000100e3d9ebdd26f4048e3d2267d561efd2df44de54edd4848ac7e9ce1aa28e011a8231c0bf24bf90f4f3516f0845710aeff94c6ee4aff300215af6a92089720ede4a0a27be306bdd8bbc86a5d6b81a9fec222ab32fc0e99cdc3d41807a3ec99f12aa69f5720f196b8a451ff64ae1dc4fe91f7d19c4cede569c45f7f84e8c5d5c2a4370a6a0dc2e25f59a09b03752c9055fec4b99038480e5552b4c4fc3ea74d6fc38ad3a3eaa5b19689a78e7e42f0fbd1ecd2a24842d5667ee939b3f3d04e7ef2624688a44e4d99752fd7bdc3e26cb116a0046000100c98b7aa23b92b0235d89ed1ea861fc0d22581185a885b146a7861919f69ef7cbdb9f831d9ed81284e20840ec3078e2f9e11e35fa725da7126a86d399c83e6c6ceabb0000ce000100adf987bbbebbcc8597b1d9d7738b746042ea871cee2656884959c651811322418dc87092e0804b8f32ab3d9d98de88ad22c7ad94d1a340a51439e09ab971676f8e1e1a9651dc9f2b2a8ff59d56ee55ba33e68afa9f782641cbf16ef1dd07ffb691519394c817c54452956a915bd1743e9cf7717138c8279aa22c52a71cab5c4743dee80ea314081813c529c073098c8f17c4b81a43bddc2ed8af2f240dec2c67407f439741da076c6bf5658be24979965b86c7575237c23223ccaba578337b8d29e48f249b4489044b270000bc000100542cd15e59237d7e773e146bbe69b91f352e25789e8802ba06f873083338b5dd0b6c99137b718dd297bd8a7840a515a9575a2e9f74d4be4e9a0ddf3141fdaec29cd11e442ba361d5d66851fa80d65157c5747a03a8224221cc0230ad3b97ac836406032e2b953c2c273d9c4c9656e4e650f1ab8680aec934a9a37602028fd357416e62f9eb3fb023b6f279c3b7f87d57d4b5184bbac438b635be42ddfa227809a68b9d0178770ac565ac8b14b2e443831de601992f683304d8000100c5fb3365089c3e64fda5f45106aa3bb2d32ca2c22ead8c52d747b91ecf266feec87c5160fd5c5b10b85d09b0ec5eda6ea6d5c09ff66ef82f65e727bed55bdccafd80ed162f282720c46e59767355fa8bdf30b58cd90c9c047f97e612b7fc4fed78763d02584afcccdf69a89994b3463820a4032fd52357604b2425953967b766702613a8739e44f71687da15af1ac4f2210b4c89f0c7a527b0832ee7eefa7f311df8dedf8d71a1a0ed1dc0501fce854e1c8f8ca5f333a60d8f1e4a5d370eaa3e694e6d238b73c4ed1bb4f076d8aae9f25a8151c84b000100d58fc9ec4e2c59bf415cd20671114c810ffc10c3f01d6305d1161e7e81c4073d71a34a24f23a92664bca7bd33c700e483e06f96c69e543541a4efc5978dd8f2835e9ef5d99906c002a000100b293a2392710ac2d6ea55acde4f5c57320540af37342472f4ead43cd32102f371fca07147a650000"], 0x590}, 0x1, 0x0, 0x0, 0x14}, 0x20008040) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @mcast1, 0x99f}, 0x1c) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e24, 0x3, @mcast1, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r4) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4c089000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x154, r5, 0x300, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x66, 0x3, "3632543e0c2e66f2924776e97cd76a95cfcbc67e185e1c5d79c9aa294154e4b916a1ec542e8bc9065bfb5b9be4efa9abe23574ef61f8bf6514ab37e94e2201fd64b7f99b13646da04ab093a63d7d644647d2fc267b3123f16d605d6a3afcd39f12a6"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "3aa199d48f89ea90e2ac3eb988c45639b16a9e2b2c8592b125c6601d8484b2"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x64}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r6, 0x5, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x28}, 0x1, 0x0, 0x0, 0x240400cc}, 0x0) r8 = socket(0x2a, 0x2, 0xffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r9, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f00000093c0)=[{&(0x7f0000007d40)="84", 0x1}], 0x1}}, {{&(0x7f0000008d40)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000009100)=[{&(0x7f0000008dc0)='Y)J', 0x3}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="100000000000000015010000090000003ab19b32f39a0aa3cd0ee2cdfb62aee04b50851fab75371ee74aea23a528c14352ac633850532603572cf9a35bf416345953063a2b27fb25b86ea534e027dbd4d677b4bfe7c0a99cc20048"], 0x10}}], 0x2, 0x4008004) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_u32={{0x63}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x10}]}}]}, 0x38}}, 0x40808c4) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96, 0x1}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12}, 0x94) 1.496449471s ago: executing program 4 (id=1232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002900)=ANY=[@ANYBLOB="540000001000010428bd70000300000000000000", @ANYRES32=r4, @ANYBLOB="00000000051c0000340012800e00010069703665727370616e00000020000280040012000600180003000000050016000100000008000100", @ANYRES32=r2, @ANYBLOB="c295bb39b6c4c2e1018ea4417fbf69f20259db0ff462d4cadbbb80bd83537f6b8b1bff883fe7ca948e13b7305d059bcc7ec313dea4fcc8f08273c570282cbcd8dde77e953147df3fd03e0e41980a1605c622079f6f4d8fa53654104ed439edb18d9798b293d7ecb81fc7fe47"], 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x12) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x129, 0x129, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0xfffffff8}}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0x8, 0x1}, {0xd, 0x2}, {0xf}, {0x4, 0x4}, {0x8}]}, @float={0x2, 0x0, 0x0, 0x10, 0x2}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @datasec={0x2, 0x8, 0x0, 0xf, 0x1, [{0x1, 0x200, 0xbdd4}, {0x4, 0x50a2, 0x62}, {0x5, 0x4, 0x2}, {0x2, 0xe, 0x7}, {0x1, 0xffffffff, 0x9}, {0x5, 0x3, 0xd37}, {0x5, 0x3, 0x1}, {0x3, 0x10, 0x800}], "dc"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x1}}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x5}, @float={0x10, 0x0, 0x0, 0x10, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x3}, @var={0x3, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x30, 0x2e, 0x30, 0x61]}}, &(0x7f0000000340)=""/25, 0x14a, 0x19, 0x1, 0x9, 0xb620d19de1f3c793}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x19, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x2}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x1000, 0x29, &(0x7f0000000180)=""/41, 0x41000, 0x1, '\x00', r4, @fallback=0x1f, r6, 0x8, &(0x7f00000003c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xe, 0x28000, 0x3}, 0x10, 0x0, r1, 0x4, &(0x7f0000000440)=[r0, r0, r0], &(0x7f0000000640)=[{0x4, 0x3, 0x0, 0x4}, {0x4, 0x3, 0xb, 0xc}, {0x4, 0x2, 0x5, 0x3}, {0x2, 0x5, 0x9, 0x1}], 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x18) 1.303885425s ago: executing program 4 (id=1233): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="0906379e", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf258700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900cc0c00002e0000000a000600ffffffffffff000006004800450000000c002a007206030303030303a5002a00849b080940ffffffffffff07000000080211000000420040ffffffffffff020000000802110000000d0040ffffffffffff02000000080211000001300040ffffffffffff7f0000000802110000000a0040ffffffffffff000800000802110000010f0000080211000001080000003c0040080211000000010000000802110000013500000802110000010800000037000008021100000067dd00000d000602c90100000006004800270000000a0006000802110000010000"], 0x104}, 0x1, 0x0, 0x0, 0x4002801}, 0x4000810) (async) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newqdisc={0x470, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x444, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x3, 0x5, 0xf0, 0xab48, 0xe, 0x0, 0xffff, 0x1, 0x3, 0x1000000, 0x7, 0x1, 0x8, 0x18, 0x2, 0x3a, 0x7, 0xd96, 0x7, 0x7f, 0x3, 0x3, 0x8, 0x7fff, 0x1, 0xec, 0x9, 0x3, 0x100, 0x7, 0xffffffc2, 0x2, 0x645, 0x0, 0x4, 0x6, 0x7933, 0x7f, 0xb, 0xe5, 0x6a5faf41, 0x80, 0x9, 0x6, 0x6, 0x8001, 0x101, 0x0, 0x7, 0x8, 0xded, 0x80000000, 0x7, 0x8, 0xef, 0x3, 0x3, 0x8, 0x8, 0x80000001, 0x4, 0x988d, 0xb, 0x1, 0x2, 0xca8, 0x2, 0x1, 0x3, 0x7, 0x80000000, 0xfffffff7, 0x84, 0x4, 0x9, 0x0, 0x7, 0x9, 0x5, 0x6e224dcc, 0x4, 0x70, 0x4, 0x7fffffff, 0x86d, 0x4, 0x7, 0x6, 0x9d, 0x3, 0x19e4f54c, 0x3, 0x8, 0x7fffffff, 0x2, 0x1ff, 0x8, 0xf, 0x1000, 0x569c, 0x3, 0x2, 0x9, 0x7fffffff, 0x9, 0x9, 0x1, 0x2, 0xa, 0x1000, 0x2, 0x9, 0xa, 0x24d4, 0x5, 0x1000, 0x28752cdc, 0x8, 0x4, 0x7, 0xffff1d42, 0xbd6, 0x2, 0xffffffff, 0x80, 0xd93, 0x2, 0x1, 0x8, 0x7, 0x9, 0x7ff, 0xbd, 0xff, 0x1, 0x5, 0x3, 0x68, 0xf, 0x3, 0xcf, 0x7, 0x0, 0x8, 0x6, 0xffffffff, 0x2, 0xbe6, 0x8, 0x1, 0xffffffff, 0x0, 0x80000000, 0x8, 0xc, 0x4, 0x800, 0x401, 0x8001, 0x10001, 0x5, 0xffff, 0x3, 0xfffffff1, 0x42, 0x8, 0x8, 0x3, 0x5, 0x5, 0x80000000, 0x5, 0xffffff40, 0x8, 0x4, 0x10, 0x83a, 0x3800000, 0xceb, 0x3, 0x4, 0x5b3f, 0x6, 0xffffffff, 0x3, 0xb9, 0x81, 0x80, 0x0, 0xfffeffff, 0x2f, 0xfffffffd, 0xfdea, 0x0, 0x2, 0x5, 0x8, 0x5, 0x10000, 0xf, 0x6, 0x1, 0x7, 0xff, 0x8, 0x9, 0x0, 0x3, 0x3, 0x2, 0x6, 0x101, 0x1879, 0x8, 0xc47e, 0x800, 0x8, 0x8dd, 0x10, 0x80, 0x7, 0x8001, 0xa, 0xff, 0xf, 0x2, 0x6, 0xcbc4, 0x8000, 0x8d2, 0x3, 0x80000000, 0x30e2, 0x0, 0xb, 0xe, 0xb, 0x7, 0xffff, 0x6, 0xfffffffd, 0x80000001, 0x8, 0x7, 0x8, 0x6, 0x1ff, 0x8, 0x5, 0x9, 0x100, 0x9, 0x6, 0xf, 0xa10]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x470}}, 0x4000080) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f00000000c0)={0x8, 'wg0\x00', {'vlan0\x00'}, 0x100}) (async) connect$llc(r4, &(0x7f00000004c0)={0x1a, 0x118, 0x4a, 0xe3, 0xf, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, 0x10) (async) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@ipv6_getaddrlabel={0x38, 0x4a, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x10, 0x0, r6, 0x6}, [@IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 1.302898604s ago: executing program 2 (id=1234): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a0800064000000025090001"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071006400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x1b) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x200, 0x0, 0x1, 0xd, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0) (async) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000001bc0)={0x8, 'syz1\x00'}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000", @ANYRES8=r5], 0x30}}, 0x0) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r4) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x40, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x52a1d4cc}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4001) (async) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000001a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001cc0)={0x118c, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @mcast1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe2}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xad800000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9880}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x107c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbadb}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "9376fe1d1b9da3d5a7bcb93cd0218a5fea98016e329da86a5d565becebe6f4c9ef2c4b79"}}]}]}, 0x118c}, 0x1, 0x0, 0x0, 0x4008090}, 0x4400408c) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1}, 0x50) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x100000}, 0x50) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) (async) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000180)=0x4) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c80)={r7, 0x58, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYRES16=0x0], &(0x7f0000000740)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0xb9c81dd88d18668e, 0x3, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0xfffffffb, 0xe9, &(0x7f00000003c0)=""/233, 0x41100, 0x2, '\x00', r1, @fallback=0x21, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x3, 0xf, 0x58, 0xfffffff5}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000140)=[r11], &(0x7f00000004c0)=[{0x0, 0x1, 0xc, 0xa}, {0x2, 0x5, 0xc, 0x3}, {0x4, 0x5, 0x5}, {0x0, 0x5, 0x0, 0xb}, {0x4, 0x1, 0xa}, {0x3, 0x1, 0x1, 0xa}, {0x5, 0x1, 0x4, 0x3}], 0x10, 0x3}, 0x94) 1.25572601s ago: executing program 3 (id=1235): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @multicast2}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x80, 0x727, 0xf, 0x3, {{0x27, 0x4, 0x2, 0x1b, 0x9c, 0x66, 0x0, 0xe, 0x2f, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0xb, 0x32, [@multicast2, @multicast1]}, @cipso={0x86, 0x1a, 0x56b1e7c40ef4a2be, [{0x6, 0x8, "efdb6b2c62d5"}, {0x0, 0x3, "17"}, {0x0, 0x9, "9edc2affdfd774"}]}, @cipso={0x86, 0x3b, 0x3, [{0x7, 0xf, "21a1a9bc295e6142a2ee6a7628"}, {0x6, 0xa, "4f96f51f2a127b9e"}, {0x6, 0x5, "66df27"}, {0x1, 0x5, "626dd5"}, {0x5, 0x8, "b4e38e37b529"}, {0x0, 0x4, "cbb5"}, {0x7, 0x6, "e45e15a5"}]}, @timestamp_addr={0x44, 0x1c, 0xd9, 0x1, 0x2, [{@multicast2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x7}, {@broadcast, 0xffff}]}, @timestamp={0x44, 0xc, 0x8f, 0x0, 0x5, [0xf2, 0x1ff]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x1, 0x0, 0x3, {{0x31, 0x4, 0x0, 0x3, 0xc4, 0x66, 0x0, 0xb, 0x29, 0x0, @rand_addr=0x64010102, @loopback, {[@ssrr={0x89, 0x2b, 0xad, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xd}, @empty, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, @private=0xa010101, @multicast1, @loopback]}, @cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x5, 0x6, "264cd56a"}, {0x5, 0x10, "6c3c483a7f31f88e5c37e6f63023"}]}, @timestamp_addr={0x44, 0x1c, 0xd5, 0x1, 0x7, [{@multicast1, 0xfffffffd}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3c5880}]}, @timestamp_addr={0x44, 0x1c, 0x90, 0x1, 0x9, [{@multicast2, 0x7}, {@empty, 0x10000}, {@loopback, 0xfffffffa}]}, @lsrr={0x83, 0x7, 0x7a, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xc1, 0x0, 0x5, [0x10001, 0x7]}, @timestamp_prespec={0x44, 0x1c, 0x3d, 0x3, 0x3, [{@empty, 0x7}, {@remote, 0x10}, {@broadcast, 0x3ff}]}]}}}}}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000440)={@mcast1, 0x0}, &(0x7f0000000600)=0x14) sendmsg$nl_route(r3, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=@RTM_NEWMDB={0xf8, 0x54, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x3, {@ip4=@local, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x2, {@in6_addr=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x3, 0x3, {@in6_addr=@remote}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x3, {@in6_addr=@remote, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x0, {@in6_addr=@private2={0xfc, 0x2, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x2, 0x2, {@in6_addr=@private1}}}]}, 0xf8}}, 0x4000080) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xdc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) unshare(0x22020600) r12 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid_for_children\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r12, 0x8004b709, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x7, 0x4, 0x61, @mcast1, @rand_addr=' \x01\x00', 0x8000, 0x7, 0xad, 0xc9d}}) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r14, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x0, '\x00', r13, 0xffffffffffffffff, 0x3, 0x1}, 0x50) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r10, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 1.139972789s ago: executing program 4 (id=1237): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x800005, 0x1, 0xff, 0xc, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000001000000000000000000008500000053000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r8, &(0x7f0000000000)="2d000000010001", 0x7) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r9, 0x84, 0x78, 0x0, 0x0) (async) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) (async) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="1800ec000f14b9a02dbd7000fddbdf25080045006d616400d7c022b374c779510c56c463d39fabb49f0182e7ae1fbb999e638369824f2978570f88013d6fce36dd0fdb833c794dc5ebc73ed55a308bd271d4bd28816048842c2ce1d8ffffff7febaf75b1417901c38d1897c78fa98f711011c8e5e92cd1e65c942052576097b77997752a2fffa60456efd35613570d792957d4d7cb2f35"], 0x18}, 0x1, 0x0, 0x0, 0x24044000}, 0x41844) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) close(r1) 1.124055434s ago: executing program 0 (id=1238): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="db", 0x1}], 0x1, 0x8040000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r0, 0x100000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001a00)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001a40)={0x0, 0x0, 0x0}, &(0x7f0000001a80)=0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', 0x0, r2, 0x2, 0x5, 0x3}, 0x50) r6 = gettid() r7 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000080)=r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r8, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x20, 0x40844}}], 0x1, 0x1) r12 = accept$netrom(r0, &(0x7f0000002dc0)={{0x3, @default}, [@netrom, @remote, @netrom, @netrom, @remote, @remote, @null]}, &(0x7f0000002e40)=0x48) r13 = gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002e80)={0x0, 0x0, 0x0}, &(0x7f0000002ec0)=0xc) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002f00)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000002f40)={0x0, 0x0, 0x0}, &(0x7f0000002f80)=0xc) r17 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r18 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r17], 0x21c}}, 0x0) r19 = getpid() r20 = socket$nl_generic(0x10, 0x3, 0x10) r21 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r20, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r21, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r19}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) write$cgroup_pid(r17, &(0x7f00000006c0)=r19, 0x12) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000004200)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004240)={0x0, 0x0, 0x0}, &(0x7f0000004280)=0xc) sendmmsg$unix(r2, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000000)="2fd5003df9e037e63561bdc5b19020f50b8b2e83cf5175d9be73204b0704d2be24c8c00f3d2358dde01085774dc82b66d21c6098fba187fe59565bc768b4b737567db60691b0008bba6d690d08e72de6ae6d07322e5b7aa268f09bc7218f9ec9a7644939e93874a02da307907e5e02cfdc9ca39c64cad6f1eeadb97c65627e972d6455f4189c4987881596f1b1819db876851a7dbd36ca36c213f36deea279f04002b60f1ce5412f297f6a48d9b5cd5aa405a51d76b86c3ef3b9c3dbaca6f1c150f8d9d7223265bf67732036ec3203de", 0xd0}, {&(0x7f0000000100)="1b9cb6f3b80008e9d365e917247e7f37b1ac501cbd2b2cd3099af14ab96db9a90df72a694ba8674382bca86d4d73ff8004374a2c874f4ba17cac03849391ac93df1b4d1e9b12d98be7960e3974646ecb55f180a52c09e9d8f2b004b9ab437026d1af9e583ae0170a9f3fdc", 0x6b}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000300)="3fb14aa2d096f04530e28d18b6ac770a4668308a5cf70591092f6aca3d7729bbcb22a1b7adc200a6247c66ef926bd7340e9ddbd4f05fee3c579386b40a04e00650ba0d48cda98e7412d33fcef9702a208d7aa7b88cb66a41724ac9a7653831fc940f9f5b8921c05f9aed5ca03c8f697e302db3f613d5c5b9c2c72699d2fa3f74bdeb065c952392a4da310f8f66d719e59e90cb15b56dcdc962e229f7a6281a2e90a1f657927e58a5529d01e71849df8232febc4ff9f56fdae7cdd07d5b0661ece20444ddd36f3e23fd8d4c6aad2ae3454e32cff5b6878fe45d23b9712f7eed9a2ae6b258d35610468923f1a16fc10fe1f68068b7d1e623", 0xf7}, {&(0x7f0000000240)="2a7243725c355b9eb687008bad1be4b90836d464c12a43f70f50855eb15fdf59d32fd059bd0970b9d90860235e6880d86a3a9907914f488897e4e14d555bc0ab5f4a14ef67e0912aec0f8b7732526ed3640993ebe08892d66ec3136aab92b41e192013d660e944827134dba309bbac70a77230471f", 0x75}, {&(0x7f0000000400)="ef4e9b7c8296db740040739a02a4bde660e8d81b22a8b286e1a7a7cb53d7f5629a9b031aa69f7db3e8019baa945dd2e2f263e9d9fe03a394a85b7803709309763093ecf8627bcc8f0ee00148bfb54b8b86e75d80e12f41a0c5c491332b78151e6b43bccabf1bc27fb0edc74066f2a4531abc1af76c221956e5412caee42115a0dfbd784ee77656057a2ebd084c324ccd0d3cca1b9b7866c533d9d7d31ac02b57346c9322f294", 0xa6}, {&(0x7f0000001500)="38385304920ed89215fb0e7ade85d1dc1dc4ad8897fd0878a7a30f5b04711de2815dbf624ca61e514318f74923e630ed36440d1284f7c64edd539cb4e9104eb30c91bde32039dc793e5a04afdc744137d0cd8ae1a652740dcd2be13412eb173ae5e95a02eacf725e9d119b23a613426393ac4bcf114298bb5048c7587a3c383bebac87d1a39103aa6744918fb873bc82e272c5cb21d8799a7e1a541b714e6d3c0d94aaff04a3a8d1b9b4ac57fd69282f4a706ac6f0e2fe819abd2339a3f6683997bed0a7e9641b", 0xc7}, {&(0x7f0000001600)="4e6e9a4cd20f17c5e12605826f69d02ae7c1ce05434e8c6947dd74c30bf7723bd1f43a1357ed92779c8a7e31091d073239f6824536438fdf39c0fdc56f3408dbd146f022839a74621c9853c4ddce499d8af3d8013e430b9cb147b27eaf604cfeb355e42863bf", 0x66}, {&(0x7f0000001680)="a158cd0ed523293bd8ca9910a330a8a0436d22ae4e4e6801b898a21984887053e82618492dff9d0b648e35487108298a9352602b7c6ef18a49b4ea5651d4ed7baa4b73665740eb66f7e452728d7782132b603b2ea847c87b19c64ea141ced78d106479ffc7bed2f02443d68c", 0x6c}, {&(0x7f0000001700)="d2af10a449ae76222310c8e2f5df6d54b357d0aa93f76d36374233716969a2e5730f84d642e65ab5e0ccec2ad810e16312a79d4cffb77e1c0ceeeb4d34d3aac1593ef8e775d253a929eb6563ad9fc790dadbe6ebf39ee36b9e4dc1c92138eeda3751d609b7f07b87146938220afad4c20bb2d61b31b2f1d29aed0870d27161b4c90f3ca7df9ae84109ad0c2ee78070ba80d35d535e6cd99be52aace9a2917c598f9fed26db4b9f3ec4b33e8fcce97a04c3616ec4571ae171", 0xb8}], 0xa, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x24, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, r0, r0]}}, @rights={{0x38, 0x1, 0x1, [r1, r2, r5, r2, r2, r1, r2, r2, r2, r0]}}], 0xc0, 0x20040084}}, {{&(0x7f0000001c00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000002c80)="7aa95b46292dc02b9f84b184d5a45162037ce10eb1dc85f90cfa01b50da7dd59e2637fff8f69e423904762d7d2b3565312ac407352321bfbe73c9e66ce2dc031eec099aa1eac4cb7a43b1ea4fb2942b00054", 0x52}, {&(0x7f0000002d00)="053c4408", 0x4}, {&(0x7f0000002d40)="128e6e3f3afe0e1ac59135fec47f83c240b52c05612a4860bb23b9ffe46b7d", 0x1f}], 0x4, &(0x7f0000002fc0)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee00, r11}}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r12, r0, r2, r0]}}, @rights={{0x1c, 0x1, 0x1, [r2, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xee00, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, r16}}}], 0xa8, 0x8000}}, {{&(0x7f0000003080)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000003100)="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", 0x1000}, {&(0x7f0000004100)="78325a1afd208f7b190f30d689fdeb1f1f7c4eff7fbf7df00aaea1ddc2471b5c73ff0a58467c8fd80aa47b6c63b6f90959dfce8be6494cca61093d6507fd9b0431a04b2ad0cf3aa105907abbcdd532c6d3c24344bf4e5058bc8d04763bd77705e48e40455bcea4a575e4b302e688a726c91adcd9f74671977d92d71b64826396f637335649c303eaf098ff73aa58ba11f8c250c5bd5c567297c5a4fc1630bd3bb5278059bf633ad38d113cb5", 0xac}], 0x2, &(0x7f0000001880)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r22, @ANYRES32=r23, @ANYBLOB="00007af63210647d9e3bf995ce4af0d8f4"], 0x50, 0x4000000}}], 0x3, 0x8814) 1.086515394s ago: executing program 2 (id=1240): unshare(0x22020600) preadv(0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x6) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x4, {0x2, 0x1df, 0x4}, 0xfe}, 0x18) sendmsg$inet(r0, 0x0, 0x4048081) sendmsg$can_j1939(r0, 0x0, 0x48001) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x29, 0xf, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r4, 0x1, {0x0, 0xf0, 0x7}, 0xff}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r4, 0x0, {0x0, 0xf0, 0x5}, 0xfe}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b40)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd27, 0x4, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x560, 0x0, 0x6c, 0x0, 0x8000, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x200800, 0x5, 0x7, 0x1}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 911.853714ms ago: executing program 1 (id=1241): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7ffc}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000600)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, "341517c1b7df60c7"}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c040000010905000000000000000000070000070800034000000021"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x53d5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 902.23954ms ago: executing program 4 (id=1242): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) 891.278537ms ago: executing program 3 (id=1243): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x90, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f0000000340), {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @multicast1, 0xff, 0xffffff00, 'pimreg\x00', 'dummy0\x00', {0xff}, {}, 0xc, 0x2, 0x25}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x200, 0x3, 0x3, 'syz1\x00', {0xb}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x30, r4, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x321, 0x4d}}}}, [@NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x0) recvmmsg(r7, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=""/93, 0x5d}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000001d00)=""/4101, 0x1005}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000000680)=""/90, 0x5a}], 0x5}}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x40010120, 0x0) 819.032186ms ago: executing program 1 (id=1244): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb010018000000010000000000000000000000020000000000"], 0x0, 0x1a, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000180), 0x8) 779.459025ms ago: executing program 1 (id=1245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x100000e, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141644089ffe4d2f87e5440c6aab845013f2325f1a39010703038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x1}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000f5ff000000000000000000000004f4ffffffffffff00000000000000000000000000000a00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r5, 0x7, 0x0, 0xddd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100), 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000140)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe926}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000001f80)="ca315ee71a4fe324b6179ccfceae081da72b2c1faf795cc641075627fd202f49893dd13f0d269f571b16637368cbc16dc9048df4ab92ee2f7e1ea96695d295661951943963ca363550fab9da42f28a2b623ea0085d6d308835af9c0b89e5e106d8233de6402d73d4d420a966472d69a026d7cb55916e1800d11123d04a16a89df3cac578885756eed098f2bc54a06825939264eb1279a11ce8fee87caad98ca72eede35a369ec6a1db4f6edf46d4485954a274ae6f99d2b29884984750b457dcadece4799f6ab89a74dfdb73600746484382a193777af5ab75cf6befc27e85858a2e6af2dcb368d8d618e2b087bd59b0b27b37c2584f49464c272e30ba7b20609566676582c90f5b11b30febfd7ab566acff8a47c313d4ba63a6e2391e149731d94e775fc9c833524bcde29f802986992aa0936d15500421ec40b081aee698da5826033244960407b563974129272310b27d9456c91db535467b3040d02f2ee16d8a9274f1587ce88cda0cfd2cda60068c8d2210ae70ea263600c0fd53cf955979a87e78e7da1a173a085edd83e7b55330ecc0b094e5c40da04814f7234c0e8ca53f66b36fee979b9dbcdb522551b26c2800cd7ddae6f12a1b1277f0273ccd923c589b07dc988ba0c8cf217c30ed5e73465006dcdd294aa51937762e8104bd906066eb67d21ba1a65db07425a02bc2db92506243ead687ef8466a88780ebc4442b1d0aa70177d39ecf959889a8fc74110efd22d44fc54627378a42886464b2943d0b0be7b31f20f2b66226dca0839552c86537af5600c8f5c5f4e10e4964e1c37eff638a27545b87e23c9ea2f282f30da97b3814b88955384d9ee37a5bb840ee411165afa5ad416b4ce34affefd84cd50d9aaa41ed4e1ebdefe201091d5c23e9445dcc2f374dc7063c9a7329c9143c5e5e079c2a0bd60a9936e46ef3b0184ecea5c425237bca1b1508592256eaad7771cb4548c421a077cd4b3ac7653806588a9065e60dab4dbbc64bc578be1d91dcf36a07ae2d76f4995cb1eca06b93d88b513e0cc98f3433181a3e0bf4cacee92a5022c552fee074388aa5462c1eff2dd2f0c876aa99e1b078623ff345ef5bc94418e69fcb7940d3296c2367dce83e00d821fdf276c13f0860bb0712fda390abacf616df9e8261a9cb95c22251e85a2609208133571463bfd89f0ea8a468cca214943eb6c2bbd9709ba7af116d581e13e2887411e0bbddc8e566eb5c8ae1f4101eecedcc5929c27a67a5112e1c6913870a252485f9730a20a06a8bd2828233a4f54e8ad8cbe27f3b6fb447ed1b211062ef9484613ae1c010debffccd25971ad429014b3a1bef4030ff61903899f386188fe5fb5db9391c9d8803a75737f43f980de417b276947e9673f2c60cc2cc8eb2ea569ce8809507900cd36410c92353482cbb3dfebc5d75f941b86252031717dd76cf908979c2ed780fd54680985170b199faf096f3857fd3db9475b7e36c2b295b817182a7a712cb74f23b44e40dd69c731f7104cf53eb8aae7af37d417ea74d3c0d5d0246719e034f28463647f1131c019b70e37641eaeaae5d05b62f245390e73fb1485dc432ad0f6b3c489b15559224f08596e6308124f01cf02ee5ef45a7a45cf8f8b30d48e36d1e07380bbdeda9d9d38b5c355073d215655e6ce0cbe61468734eed62f237dac351f0e5900ea3036f990fbd75f26a15482b5de04780505ac36b12b0e9c19c829c4c45db3788cbd2ee9d7fa69fa7873b5b78e5a861555063815142e4e1ade2469db08c39368be1ca11485e39128b6c112943b8d3037a3ca216d28063213827900e491185a9eec58f4f4115d84d9b6264455b100ee5d058c83b2960d7a49fd23b992659ed7601fd081dc5881faf1d9cab2826dedcb077e661eeb22b3b93038703a4ec86e7481067d19e5fd3af0126e5d68df46e7255461fe60cca111b7c58f2624ded504aa68bed98a9cdde7cc29d975c1932d21931d9162db322e3fc582638e1e0f72feed1769af29dbb3b967b15b613792f40592065e3f6c95b06e270980f4c72230e03d4ad6efaa8a62910a93c63d28273625e3eae21868ce4aaf07853bb4f7c3388e7c13c916e47b1376cd9ac3b0427ae7b61454a10d6f813227919a9c827a6e64a682b94f945b20b2a0dc661e952fbe49ea75a46edd05e96a9981ad39b4ad12610dd6b1e4e65a4620c9b53626927f29f82ab782f0655744a9fce126a39ea67ecb24703256866ad53dcd66c2335462d5f331bb904b4e85eb9ae09b5b7aea87f8d36a80004c0131d2cb0e89809fcc8bb063f8aff60eedda12ee84d71ee9ef5acd47507c4c5f8b8e1fd6005a0fc2bcdf6c2a534b7d2b4481a1a4f8624d4690c4e5577b72707758a4d2526b24f43b0e65cd375706c79c3d600fabe81081918053cbf65884b3482e5913a3e7d245b83bea977da3e27283d553959ef86d4dce9733dbfbbfd7393414676127a9020f977ab6c6d626ed606e335cb3faaeb79228fa8222fe6861f32f3e9a9837057c98d7cde8d05522b3311a861b900f98c00fd3baca4ecca2eb6fe4a5d6a6e531f8a84e8e4762e06585ebb7812d1b713f65cf0e50673377bb9344402f5f2f4f03e7699a594624d95139c5389eab8ef38be834f69d3f7b99869a79acec530bcf2c19422c9d8eb37603a223ca6d7e59d8fd220c0990b12cd8be878c4ef3d1fb60735e8d453e350bce35bd81d8e34e241d405a47337c4f44fb01b36b5dad20ea239fea3c08091322c31272f0d69643c7861bab6d74654d3e2babd81d44a6235d3aabfa7eef0a6faab32bace6a1a8eafa355bad517bdd0acfac181c915c1e62217d5b1236c3803a610d9ecd78ac0f5685a0ed2b659db57a29b5b33e471f980f106d62501303608d7628807eb0328bd45b066e0efd9d9ee029c0827d8a20b5008e211a3c863d0be20074a08ddd784d641145ecb7246d46517ff16c795ef2ac0c30923eda298f40cb4ee99c004441afa08146e0ae83ec14c7badb6c0a796993cf6e2fdff1f6ca164b79561f3b0956b2c5bda540c94306d9afefc15cc5871a24b39f238e2348ae88cab947904187f1a6488be8519a021bebad00303e68140843b87bf174128daba6423286b6a1fea9d398bbcaceeb55269ff1f69d4322cef208790ec60f9c3b29f025b136cb91d6fb2ec911e211bae46e49c7a6fb2f77fc723fc8c10a8f6b601e5b493512e78537e5edb01729efa868d7986581dc800f44d140e1b8f0d5e166740372b170cc8aca847f97baf87de3f193672c73dead43c6de8b9f7832d8b3c72978365dcda305016f844aaf868e67fb1d70e7ddb04be9b1f1dfbe9bca57fc5eaf141d27a6decce7825f5ff6df49d0f3141173c9b75b8f2f82ec47e796b3897651c4f51ced8ead14ff8523cef6ffdfc5b19455082c417f1faf3d69aaff9df917d14e3c805557487d18374024de895d31a905bc4264dae481a740c5979fdfbb345b621086516a03a0a2b3d2ac07d9a9091adb11ebc911305edb0cdf57e7e40107e2a553680a3f76fd3c606241fbf81ba5dbeb1d0e7fce47e0dadd1a2985409f0012935595eca8a150dfb063d61164d69edc5da04436c642d2e506c7e3a7041ba061eabb38a45f70d5eb151867c49c3355dbb141ae5d58e9cf70a7dcc256f2fcd2fbf301dfaf7b93e57fc985c4c3e02a2fa43437d275da44512fc1b5c7fa98c53b7b57d1f56c8dc485c148655f88e5cd9a14293dc2dad515dc7f917fbd593f6cd453a1879c5a360bb1bb57374e5595b1171531eeb5af5b18cdda001354e923761cd19394c9a8aa2ef76d134eaf97b6c2566e22ce3deccea63b291467d253a8a2ec726454a5de752f263157d21c783e53a749231cfbe26be37d447212027bf9c0731f665477faf41a9711a0ca84a8a12717d1828514b4cfb69121e00f85d02f40ba2ea69454aeb14639971368f28b2f42baebcfa385d454bcb994983c554a23e272352e90270ad8b4fcb67db292a29269324053d1588bc71e62ee5413de7760d76d5601627879ff3fe4ee39b9bee411d75b1cc3aa0d0f17780615389a80542f50387aed694aca0b122a3edfd8dfa7a3019cc3e0d9ae756bd295d6a2f156357a5c31ad86dabe9f559faa5c074c783b4d20f04b802556499dfcea4d5acf7a27096cea8f4b9fbc58a46c784224af99d3411e938db9615515825c10c71baf09079405617a7b4a650cb9b6389a790b472c24abc6fde63e0bf16da4a212893f68cff1b4b56c4e3ffa8a8f80e302783108f25bcf7217746e70b97a13b9c47b5bca22a1c908561e12ea7bfd3ccec86204ee0f2d60e9cfeae8f93f8342fd8a5caaf8d23663ae2d0c4604efd8056f6d7744342ef33d0d4d570a59384b37800995d59a76b3aa5be793cbdb8802b44ad340a61fc69306b348730fd236c1e00ab208634eff8311e9fe625996b5b06857c6790eabe52ace2c961b31a0011cedf72106c38fe3c34373878f198dfde641cdaaef1ac5f268d027f2ef3538077925104238d9936b28202cf34d5fc4d1ed736cb3c31f935a5139012eb72e15969cf58c49f7ecaa32a87c99eb5faecde2da182d593c7b37fed53e199ab84e253a229635ca0a36647689090f68858288420d1f500959c7850e8108c9f75af3ef55935d5ae315cd2a3c78689105bc3e171ad86180dd131ae370e508272b145c0fb9123865d330345896b219d35e1480b76e6eb974455c69133735edbcc13a083860c35559d17f79b03dff764c73a1cef55d42d24930d41a8e4badcb8bee7cb870ab4e93d62ae2c6764f175d2559dcc7be938d0b771e1b0aee7e323e0da991f82dfb726a0ceff2de48dfd79d035b36423c88b6099464e39976224d0583d768d7a5551c592021cebd8226c9c626296567af27375e134a0be7bdb542734cf0ad5a6eec49f398954e5373c2aa99a3ee87f1e810a8c7346c22d7944d4445307ac4fe2439b57feec05a82b0a24b16dba06566dd8ad9ccf23d167261a1a779449f9ddbdc263ee76caad8c3fe9e6b7b880587075c83c21baf7f82bfa06b5b0be65a7711539976f938ac8c2c228776567292758958b96f4ad2deee77508d427907c98c1082150310cbfd84c53914ebeb59faf13482c7e1a667c212887c1bfd618db0d212787f710ca6b48c9e3d2004a621a9f157247de81d5c482fd0d5a3aff11d1032c60741d67a85d3b913dd24d1d05b19ff96d805f0d1d7742436fd4c0ce4ea5a558f7a77b046132a3a8e1029dca8ed2793445fa819573c60c7de84252d7d1e9939379e711732101bbd5ae730c72c71bf5a34001f44a1ba11a3fa489e80d72fcf103802f50e9fe83b3fa2bb6790b7ccbf9452fc0a7b831acddb107519726309cae59d7e46bfea1f2b16b9ed99d1c47c91ff52bdc9a9abab2fca6c1e4fc76c9a4f33acadf9895e55a76c3ce248e7f4f7360934f42da194426527b42af7b59fe13ad0aac38b4f9514dd1542fde99641e18d5c14528f34531a25c509c3ca2db5d2a4eed08a26153c997d8f4cc4e4749e7749fef92d50d0f1d9b9df600f22383bd135f5f10046a64df09c7c886787bd834f2190ea3465fb5abfe24cdc4b03028e9195122807ab6b4ab356fde464ecb259588c195aeccd49f976e744b8c9cdf5588769d003efae3bff822f373e2d9b7252d6eb60e7db2b7c9e502b16abd9297ec4d603a7882f72895191bcefecda103b842256115cb0b90e9304dbd4a5d5086d248f259739a818639ba4e98b6d474eefa89c6f2284c4a5a4c3342b12d46f201d1ec519fc5e4f07bd3240f9733e2eb8d97b5b22411bcd46b0cdca787f007a2", 0x1000}, {&(0x7f00000001c0)="fbc342d6eb9ad9064acf7d856660e81405691be259d5841d22b5f76f49562ead17f69283a9176910de2e9b3a83f35a5cb69bc3b645c31c4bc2c3d3fa82fe05af8ee5b4292a45a099e65d5f1f78578bade46cf5eba7f81792cdf13dd15aa00b54ccb42230f4776c74844b785f136fe5c7992c994ffe951c31cd5ef69f0525e401a3a9e91ca6dd", 0x86}], 0x2}, 0x90) 706.692806ms ago: executing program 2 (id=1246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x21c, &(0x7f0000000080)=ANY=[@ANYRES32=r1], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94) 649.226778ms ago: executing program 4 (id=1247): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket(0x1d, 0x2, 0x6) getsockname$packet(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) listen(0xffffffffffffffff, 0x3) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) close(0x3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x916}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4000, 0x0, 0xb, 0x0, 0x0, 0x7ffffffb, 0x2}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x10000, 0x0, 0x0]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd090011000006001500020000001400168010000880"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) 585.959457ms ago: executing program 1 (id=1248): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="3b72ac4ce3b037e2c86e33a3d6a85f871aed4f72ce4a5a2edfa154e927d5690afb55f2681bcfd6481ef48fef69fb7fc8e6a4ee4c73e0524bd6a75d8e3118a913e70d34396a371131fa10a60af322876c4388a4c2a43835d3b5b93c9e8dc89cff2188107d84208ca020404c43f3a6ea0761203dac45eb373220c731045f91ac9e50cf2e626193c7ff54d121052cd011dc425cb0becadd6994caed135cdff8334c3b9883840a741c6af647a433", 0xac) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002b00)) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x64, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x59}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000340), 0x0}, 0x20) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "7a1d79", 0x0, 0x89, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], "cd1724a1ae97901c"}}}}}}}, 0x0) 585.567522ms ago: executing program 3 (id=1249): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x28012, r1, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a4b000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xffffc000) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000000)=0xb) 447.532306ms ago: executing program 2 (id=1250): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000400)={0x80002005}) (async) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x3b}]}}]}, 0xa4}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000020000000000000d0000000000005f"], 0x0, 0x34}, 0x28) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000007900030000000000180000000000000000000000000000009500000000000000d50a00000000000095000066485fe502"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x21) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvlan1\x00'}) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000000208030000000000000000050000020500030011000a000900010073797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x994}, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r8}, 0x10) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000800)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r7, 0x0) (async) unshare(0x480) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) (async) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) (async) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000000f5ff000000000000000000000004f4ffffffffffff00000000000000000000000000000a00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) 446.399792ms ago: executing program 3 (id=1251): unshare(0x2000000) unshare(0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x5, 0x4) unshare(0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000040)={r0, 0x4, 0x9, "49cb57b0025a6df9edd3a96cdc3119ef3681178cd13ff2a995aef25b1fabf838968017c0ba6f3182a8195be570474e095e0d7c16b5f64449b23bdf3ea1f6205955817c34e0ea08e908d3f9ba50cc035451786ef985fdbf37226ecf4f1c2ec1cfb7faf21f22ea5c35fcacac94f84ed115fb4702"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x24080, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x4, 0x9, 0xb, 0x7, 0x14, @dev={0xfe, 0x80, '\x00', 0x1f}, @empty, 0x7800, 0x700, 0x1, 0x5}}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000001c0)=r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettfilter={0x5c, 0x2e, 0x2, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x7, 0xffff}, {0xa}, {0x3, 0xe}}, [{0x8, 0xb, 0x1ff}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x81}, {0x8, 0xb, 0x9f}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xf2d}, {0x8, 0xb, 0x9ea2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000340)=0x180, 0x4) unshare(0x80) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000380)={0x5, 0xaa39, 0x4, 0x9f98, 0x2, 0x3ff}) r6 = socket(0x1d, 0x6, 0x3) ioctl$sock_inet_SIOCGIFDSTADDR(r6, 0x8917, &(0x7f00000003c0)={'dummy0\x00', {0x2, 0x0, @remote}}) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) write$cgroup_subtree(r7, &(0x7f0000000440)={[{0x2d, 'net_cls'}, {0x2d, 'net_cls'}, {0x2d, 'perf_event'}]}, 0x1e) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r8, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xf35638c7736793cf}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x140e, 0x300, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x80) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r7) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x41820000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r9, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendto$ax25(r6, &(0x7f0000000700)="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", 0x1000, 0x8004, &(0x7f0000001700)={{0x3, @default, 0x7}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default]}, 0x48) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000001780)={0x0, 0x10000, 0xecd, 0x2}, &(0x7f00000017c0)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000001800)=@assoc_value={r11, 0x10}, 0x8) sendmsg$IPSET_CMD_DEL(r6, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x64, 0xa, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6ef512a3}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4) bind$inet(r7, &(0x7f0000001980)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 402.61877ms ago: executing program 1 (id=1252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009a5ab6e10c00000000000000040000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000ffffffff0002000000000000000000000600000004010000"], 0xfc}}, 0x0) socket$inet6(0xa, 0x3, 0x3a) (async) r3 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x432, @loopback, 0xb}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x432, @loopback, 0xb}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000140)=0x5, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000140)=0x5, 0x4) sendto$inet6(r3, &(0x7f0000000040)="3898", 0x2, 0x1400c894, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 245.491398ms ago: executing program 2 (id=1253): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0xa2ec9000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x1de, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x1a8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], "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"}}}}}, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 139.839895ms ago: executing program 3 (id=1254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$FITHAW(r0, 0xc0045878) 118.791163ms ago: executing program 1 (id=1255): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd090011000006001500020000001400168010000880"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (fail_nth: 11) 0s ago: executing program 0 (id=1256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) (async) unshare(0x62040200) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) (async) listen(r1, 0x5) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000400)=0x7, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0x44, 0x0, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/74, 0xffffff78}], 0x1}, 0x10000) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="100000000400000008000000050000000000000068bc8dddf6100d106f75dc8c940c", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) socket$netlink(0x10, 0x3, 0x7) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0xb1, 0x0, 0x2, 0xffeffffe}, {0x16}]}, 0x10) (async) sendto$inet6(r5, &(0x7f00000001c0)="1c0000001200050f0c100006b52117238c2e0e5fd19bb2080001c000000001800c0fe2aaab69b21f00"/50, 0x32, 0x80, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={{r4}, 0x2a, 0x80000007ff, 0x2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3cb409bd1348f3cb6a4253289af7d9d391ef99e4ffbf39fce6d0590a0bb7639c8ae2f23cb501716405c811b0450c1e972b60d4cb2cb58fb49f90871c71b7ee7f0195470032f5101d00486591e84a0ab8869068f45e8181409a94d0f40d85fe893f214ba18443b123faa9b1be1c0ddebccf7dcdc08f1e4cc11cb0d4a87a5a2c617416d74a133909918dd367c5d882a292ab572145fd5f08b2fdefd852c3c8ccecd79d07b5c09cab0cb3d2c6dd76a7791664b5ff9976abab857f7635727b7c48884d1fb63c975847a6d8376d8fa12644e2c7e1af1b3977fcaa3de4524d607e3fab70b8137e4e496008527edf52b6fb0602701414c2881f2b", @ANYRES16=0x0, @ANYBLOB="020029bd7000fbdbdf251600000005000300010000000500020001000000050004000000000005000400010000000500040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000002000000edffffff02000000000c0000", @ANYRES32=r4, @ANYBLOB="0100"/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000000010000000c000100"/28], 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r8}, 0x20) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000d00), 0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000340)={r9, r9, 0x8, 0xf, 0x0, 0xc2, 0x47, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r10, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) kernel console output (not intermixed with test programs): (bridge_slave_0) entered blocking state [ 76.908074][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.915400][ T5851] bridge_slave_0: entered allmulticast mode [ 76.922340][ T5851] bridge_slave_0: entered promiscuous mode [ 76.929888][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.937335][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.944772][ T5847] bridge_slave_1: entered allmulticast mode [ 76.951688][ T5847] bridge_slave_1: entered promiscuous mode [ 76.959912][ T5839] team0: Port device team_slave_0 added [ 76.966579][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.973667][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.999609][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.020891][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.028116][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.035834][ T5851] bridge_slave_1: entered allmulticast mode [ 77.042996][ T5851] bridge_slave_1: entered promiscuous mode [ 77.062325][ T5839] team0: Port device team_slave_1 added [ 77.078699][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.127726][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.150957][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.197077][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.208734][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.218621][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.225625][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.251592][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.273526][ T5157] Bluetooth: hci0: command tx timeout [ 77.293143][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.312423][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.319434][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.346183][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.357173][ T5844] Bluetooth: hci1: command tx timeout [ 77.362982][ T5157] Bluetooth: hci2: command tx timeout [ 77.375003][ T5834] hsr_slave_0: entered promiscuous mode [ 77.381211][ T5834] hsr_slave_1: entered promiscuous mode [ 77.389872][ T5837] team0: Port device team_slave_0 added [ 77.423257][ T5837] team0: Port device team_slave_1 added [ 77.433248][ T5157] Bluetooth: hci3: command tx timeout [ 77.444462][ T5847] team0: Port device team_slave_0 added [ 77.452055][ T5851] team0: Port device team_slave_0 added [ 77.496592][ T5847] team0: Port device team_slave_1 added [ 77.512701][ T5157] Bluetooth: hci4: command tx timeout [ 77.520992][ T5851] team0: Port device team_slave_1 added [ 77.556664][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.563744][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.590455][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.618546][ T5839] hsr_slave_0: entered promiscuous mode [ 77.625203][ T5839] hsr_slave_1: entered promiscuous mode [ 77.631418][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 77.637551][ T5839] Cannot create hsr debugfs directory [ 77.666621][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.673861][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.700104][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.726936][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.734479][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.760504][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.779185][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.786258][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.812875][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.832304][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.839827][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.866312][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.902599][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.909560][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.937010][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.058847][ T5851] hsr_slave_0: entered promiscuous mode [ 78.065161][ T5851] hsr_slave_1: entered promiscuous mode [ 78.071316][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 78.078472][ T5851] Cannot create hsr debugfs directory [ 78.112742][ T5847] hsr_slave_0: entered promiscuous mode [ 78.118914][ T5847] hsr_slave_1: entered promiscuous mode [ 78.125127][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 78.130847][ T5847] Cannot create hsr debugfs directory [ 78.175437][ T5837] hsr_slave_0: entered promiscuous mode [ 78.181693][ T5837] hsr_slave_1: entered promiscuous mode [ 78.187957][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 78.193701][ T5837] Cannot create hsr debugfs directory [ 78.509609][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.556958][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.595311][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.630578][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.713400][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.729138][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.740007][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.766480][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.834215][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.846672][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.856809][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.867887][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.970703][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.994505][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.006685][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.017325][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.079785][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.135290][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.148686][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.159355][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.171759][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.251676][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.299967][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.307304][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.319348][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.326575][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.351699][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.358405][ T5157] Bluetooth: hci0: command tx timeout [ 79.369867][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.420473][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.433169][ T5157] Bluetooth: hci2: command tx timeout [ 79.433370][ T5844] Bluetooth: hci1: command tx timeout [ 79.454789][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.470420][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.510793][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.513440][ T5844] Bluetooth: hci3: command tx timeout [ 79.517963][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.537952][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.545113][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.556775][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.563940][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.574622][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.581755][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.593222][ T5844] Bluetooth: hci4: command tx timeout [ 79.600847][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.735460][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.766697][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.791559][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.798722][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.847577][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.900466][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.907665][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.949134][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.995486][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.002657][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.027287][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.034472][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.149477][ T5834] veth0_vlan: entered promiscuous mode [ 80.230935][ T5834] veth1_vlan: entered promiscuous mode [ 80.260058][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.349832][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.364488][ T5834] veth0_macvtap: entered promiscuous mode [ 80.426604][ T5834] veth1_macvtap: entered promiscuous mode [ 80.520519][ T5847] veth0_vlan: entered promiscuous mode [ 80.542330][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.579465][ T5847] veth1_vlan: entered promiscuous mode [ 80.610509][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.696711][ T1106] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.710094][ T1106] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.736088][ T1106] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.764972][ T1106] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.776999][ T5847] veth0_macvtap: entered promiscuous mode [ 80.825850][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.840827][ T5847] veth1_macvtap: entered promiscuous mode [ 80.871995][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.898869][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.930067][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.978819][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.997198][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.005748][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.014756][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.050461][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.059424][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.100216][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.108334][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.189950][ T5839] veth0_vlan: entered promiscuous mode [ 81.195145][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.215130][ T5837] veth0_vlan: entered promiscuous mode [ 81.255411][ T5851] veth0_vlan: entered promiscuous mode [ 81.322285][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.333755][ T5851] veth1_vlan: entered promiscuous mode [ 81.340416][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.357013][ T5839] veth1_vlan: entered promiscuous mode [ 81.368764][ T5837] veth1_vlan: entered promiscuous mode [ 81.386255][ T5956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.433270][ T5844] Bluetooth: hci0: command tx timeout [ 81.458582][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.467527][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.487867][ T5851] veth0_macvtap: entered promiscuous mode [ 81.509901][ T5851] veth1_macvtap: entered promiscuous mode [ 81.521278][ T5844] Bluetooth: hci1: command tx timeout [ 81.527313][ T5844] Bluetooth: hci2: command tx timeout [ 81.594505][ T5157] Bluetooth: hci3: command tx timeout [ 81.605593][ T5839] veth0_macvtap: entered promiscuous mode [ 81.625551][ T5837] veth0_macvtap: entered promiscuous mode [ 81.651642][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.663917][ T5839] veth1_macvtap: entered promiscuous mode [ 81.674162][ T5157] Bluetooth: hci4: command tx timeout [ 81.688069][ T5837] veth1_macvtap: entered promiscuous mode [ 81.700722][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.797294][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.809522][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.817733][ T1106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.853413][ T1106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.862148][ T1106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.908891][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.936178][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.955053][ T1106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.005810][ T1106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.030874][ T1106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.050542][ T1106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.088077][ T1106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.135537][ T1106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.170456][ T5970] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 82.195221][ T1106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.223741][ T1106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.258348][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.287643][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.302933][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.435889][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.449977][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.578366][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.613019][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.741036][ T5985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 82.751495][ T5985] netlink: 11 bytes leftover after parsing attributes in process `syz.0.14'. [ 82.760608][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.775107][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.776220][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.791358][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.896748][ T5988] gretap0: entered promiscuous mode [ 82.903400][ T5988] vlan2: entered promiscuous mode [ 82.920398][ T5983] Bluetooth: MGMT ver 1.23 [ 82.955195][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.984738][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.439832][ T6011] pim6reg99999999: entered allmulticast mode [ 83.512919][ T5157] Bluetooth: hci0: command tx timeout [ 83.587734][ T6028] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.596769][ T5157] Bluetooth: hci2: command tx timeout [ 83.596819][ T5157] Bluetooth: hci1: command tx timeout [ 83.672919][ T5844] Bluetooth: hci3: command tx timeout [ 83.685275][ T6032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.769857][ T5844] Bluetooth: hci4: command tx timeout [ 83.787040][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'. [ 83.799591][ T6034] bond0: ARP target 170.170.170.170 is already present [ 83.808541][ T6034] bond0: option arp_ip_target: invalid value (2863311530) [ 84.658070][ T6041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.763280][ T30] audit: type=1800 audit(1759475125.479:2): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23" name="memory.events" dev="tmpfs" ino=68 res=0 errno=0 [ 84.839686][ T30] audit: type=1804 audit(1759475125.479:3): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.23" name="/newroot/10/memory.events" dev="tmpfs" ino=68 res=1 errno=0 [ 85.205873][ T6041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.355487][ T6066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.27'. [ 85.416010][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 85.563221][ T6077] netlink: 52 bytes leftover after parsing attributes in process `syz.0.29'. [ 85.574875][ T6079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 85.633475][ T6072] bond1: option all_slaves_active: invalid value (13) [ 85.644708][ T6072] bond1 (unregistering): Released all slaves [ 85.721175][ T6074] bond1: option all_slaves_active: invalid value (13) [ 85.732679][ T6074] bond1 (unregistering): Released all slaves [ 85.763484][ T6077] batman_adv: batadv0: Adding interface: dummy0 [ 85.769825][ T6077] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.807380][ T6077] batman_adv: batadv0: Interface activated: dummy0 [ 85.863660][ T6081] batadv0: mtu less than device minimum [ 85.871015][ T6081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.883063][ T6081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.894988][ T6081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.907030][ T6081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.919013][ T6081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.930966][ T6081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.942827][ T6081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.954752][ T6081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.966645][ T6081] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 86.054896][ T6041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.275858][ T6041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.368379][ T6099] warning: `syz.3.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.449879][ T6099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.36'. [ 86.505340][ T6100] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 86.636891][ T1207] cfg80211: failed to load regulatory.db [ 86.898965][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.010041][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.029739][ T6131] syzkaller0: entered promiscuous mode [ 87.045853][ T6131] syzkaller0: entered allmulticast mode [ 87.160209][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.199641][ T6144] Zero length message leads to an empty skb [ 87.231457][ T1106] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.472024][ T6151] !: renamed from dummy0 (while UP) [ 87.768566][ T5885] hid-generic 0005:0007:0008.0001: unknown main item tag 0x0 [ 87.807796][ T5885] hid-generic 0005:0007:0008.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 88.087183][ T6174] fido_id[6174]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 88.504919][ T6193] netlink: 224 bytes leftover after parsing attributes in process `syz.4.55'. [ 88.654018][ T6193] tipc: Started in network mode [ 88.694345][ T6193] tipc: Node identity d69d055dfe52, cluster identity 4711 [ 88.701874][ T6193] tipc: Enabled bearer , priority 0 [ 88.808988][ T6195] syzkaller0: entered promiscuous mode [ 88.820245][ T6195] syzkaller0: entered allmulticast mode [ 88.920809][ T6195] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 88.941081][ T6193] tipc: Resetting bearer [ 88.972783][ T6189] tipc: Resetting bearer [ 89.053523][ T6189] tipc: Disabling bearer [ 89.163761][ T6225] netlink: 96 bytes leftover after parsing attributes in process `syz.1.62'. [ 89.201077][ T6225] vlan2: entered allmulticast mode [ 89.214727][ T6225] gretap0: entered allmulticast mode [ 89.822345][ T6264] syzkaller1: entered promiscuous mode [ 89.874878][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.67'. [ 89.884686][ T6264] syzkaller1: entered allmulticast mode [ 89.992121][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 90.140868][ T6262] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 90.527322][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 90.560268][ T6288] veth0_to_bond: entered allmulticast mode [ 90.630617][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.76'. [ 91.166247][ T6315] sctp: [Deprecated]: syz.2.83 (pid 6315) Use of int in maxseg socket option. [ 91.166247][ T6315] Use struct sctp_assoc_value instead [ 91.199690][ T6315] netlink: 'syz.2.83': attribute type 1 has an invalid length. [ 91.209466][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.83'. [ 91.535014][ T6325] erspan0: entered promiscuous mode [ 91.553274][ T6325] erspan0: left promiscuous mode [ 91.840819][ T6339] netlink: 100 bytes leftover after parsing attributes in process `syz.1.91'. [ 92.073133][ T6337] nbd2: detected capacity change from 0 to 64 [ 92.097298][ T5844] block nbd2: Receive control failed (result -32) [ 92.105047][ T5852] block nbd2: Dead connection, failed to find a fallback [ 92.168201][ T5852] block nbd2: shutting down sockets [ 92.175252][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.185158][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 92.193151][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.202294][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 92.242377][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.284993][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 92.302488][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.334544][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 92.354491][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.389139][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 92.540610][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.583645][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 92.603526][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.642063][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 92.672468][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.710256][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 92.722760][ T5852] ldm_validate_partition_table(): Disk read failed. [ 92.729843][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.780534][ T24] IPVS: starting estimator thread 0... [ 92.787703][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 92.825884][ T5852] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 92.864346][ T5852] Buffer I/O error on dev nbd2, logical block 0, async page read [ 92.875277][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 92.890654][ T5852] Dev nbd2: unable to read RDB block 0 [ 92.897671][ T5852] nbd2: unable to read partition table [ 92.913665][ T6377] IPVS: using max 33 ests per chain, 79200 per kthread [ 92.935920][ T5852] ldm_validate_partition_table(): Disk read failed. [ 92.942977][ T6378] vlan2: entered allmulticast mode [ 92.953610][ T6378] batadv_slave_1: entered allmulticast mode [ 92.965327][ T5852] Dev nbd2: unable to read RDB block 0 [ 92.971713][ T5852] nbd2: unable to read partition table [ 93.543908][ T6401] netlink: 'syz.4.110': attribute type 4 has an invalid length. [ 93.606545][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 93.842355][ T6402] pim6reg: entered allmulticast mode [ 93.859302][ T6421] netlink: 14 bytes leftover after parsing attributes in process `syz.2.112'. [ 93.927365][ T6404] pim6reg: left allmulticast mode [ 94.231541][ T6403] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 94.239638][ T6403] team0: Device ipvlan2 is already an upper device of the team interface [ 94.283112][ T6421] hsr_slave_0: left promiscuous mode [ 94.291764][ T6421] hsr_slave_1: left promiscuous mode [ 94.353711][ T6424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.111'. [ 94.364083][ T6424] netlink: 32 bytes leftover after parsing attributes in process `syz.1.111'. [ 94.379859][ T6430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.113'. [ 94.754185][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 94.807376][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 94.831483][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.117'. [ 94.841626][ T6443] netlink: 48 bytes leftover after parsing attributes in process `syz.4.119'. [ 94.914855][ T6449] netlink: 'syz.1.117': attribute type 1 has an invalid length. [ 94.958227][ T6454] veth0_macvtap: left promiscuous mode [ 94.964851][ T6449] netlink: 208 bytes leftover after parsing attributes in process `syz.1.117'. [ 95.693370][ T6495] net_ratelimit: 3277 callbacks suppressed [ 95.693398][ T6495] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 95.857107][ T6498] syzkaller1: entered promiscuous mode [ 95.863323][ T6498] syzkaller1: entered allmulticast mode [ 96.921581][ T6529] syzkaller1: entered promiscuous mode [ 96.942772][ T6529] syzkaller1: entered allmulticast mode [ 97.308642][ T5502] veth0_macvtap: entered promiscuous mode [ 97.501941][ T6583] syzkaller0: entered promiscuous mode [ 97.521125][ T6583] syzkaller0: entered allmulticast mode [ 98.689207][ T6644] __nla_validate_parse: 12 callbacks suppressed [ 98.689224][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 99.380601][ T6668] ip6gre1: entered allmulticast mode [ 99.719582][ T6680] tipc: Enabled bearer , priority 0 [ 99.767836][ T6680] syzkaller0: entered promiscuous mode [ 99.784895][ T6680] syzkaller0: entered allmulticast mode [ 99.923055][ T6679] tipc: Resetting bearer [ 99.979175][ T6679] tipc: Disabling bearer [ 100.014747][ T6698] syz_tun: entered allmulticast mode [ 100.070390][ T6698] dvmrp8: entered allmulticast mode [ 100.139794][ T6698] netlink: 'syz.3.175': attribute type 23 has an invalid length. [ 100.250362][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 100.261891][ T6697] syz_tun: left allmulticast mode [ 100.276354][ T6697] dvmrp8: left allmulticast mode [ 100.301770][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.4.176'. [ 100.318019][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 100.328379][ T6716] netlink: 16 bytes leftover after parsing attributes in process `syz.4.176'. [ 100.406886][ T6705] bridge2: entered allmulticast mode [ 100.841174][ T6734] netlink: 72 bytes leftover after parsing attributes in process `syz.1.186'. [ 100.893833][ T6731] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 101.041854][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 101.261767][ T6754] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 101.270211][ T6754] netlink: 224 bytes leftover after parsing attributes in process `syz.2.192'. [ 101.467280][ T6765] netlink: 'syz.4.195': attribute type 15 has an invalid length. [ 101.477257][ T6761] netlink: 80 bytes leftover after parsing attributes in process `syz.3.196'. [ 101.491578][ T6761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.196'. [ 101.525644][ T6761] openvswitch: netlink: Flow actions attr not present in new flow. [ 102.660128][ T30] audit: type=1800 audit(1759475143.439:4): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.205" name="blkio.bfq.time_recursive" dev="tmpfs" ino=181 res=0 errno=0 [ 103.134718][ T6801] geneve2: entered promiscuous mode [ 103.207261][ T6824] netlink: 'syz.4.204': attribute type 2 has an invalid length. [ 103.245904][ T30] audit: type=1800 audit(1759475144.029:5): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.209" name="memory.events" dev="tmpfs" ino=230 res=0 errno=0 [ 103.499224][ T6832] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.550296][ T6836] bridge1: entered allmulticast mode [ 103.694789][ T5885] IPVS: starting estimator thread 0... [ 103.702458][ T6844] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 103.730987][ C0] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 103.802774][ T6847] IPVS: using max 29 ests per chain, 69600 per kthread [ 104.036417][ T6856] bridge0: port 3(vlan2) entered blocking state [ 104.050187][ T6856] bridge0: port 3(vlan2) entered disabled state [ 104.058816][ T6856] vlan2: entered allmulticast mode [ 104.065053][ T6856] bridge0: entered allmulticast mode [ 104.079311][ T6856] vlan2: left allmulticast mode [ 104.090113][ T6848] IPVS: Scheduler module ip_vs_sip not found [ 104.114225][ T6856] bridge0: left allmulticast mode [ 104.382270][ T6864] Bluetooth: MGMT ver 1.23 [ 105.002862][ T6883] __nla_validate_parse: 3 callbacks suppressed [ 105.002880][ T6883] netlink: 48 bytes leftover after parsing attributes in process `syz.4.222'. [ 105.107306][ T6885] netlink: 48 bytes leftover after parsing attributes in process `syz.4.222'. [ 105.707269][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.229'. [ 105.925657][ T6923] tipc: Enabled bearer , priority 0 [ 105.956923][ T6923] syzkaller0: entered promiscuous mode [ 105.989645][ T6923] syzkaller0: entered allmulticast mode [ 106.045976][ T6894] netlink: 'syz.1.225': attribute type 4 has an invalid length. [ 106.097794][ T6915] netlink: 'syz.1.225': attribute type 4 has an invalid length. [ 106.657895][ T6916] tipc: Resetting bearer [ 106.698695][ T6916] tipc: Disabling bearer [ 106.836618][ T6964] pim6reg: entered allmulticast mode [ 106.869745][ T6961] netlink: 320 bytes leftover after parsing attributes in process `syz.3.239'. [ 106.909165][ T6960] pim6reg: left allmulticast mode [ 107.131786][ T6980] netlink: 'syz.3.244': attribute type 5 has an invalid length. [ 107.272798][ T5157] Bluetooth: hci4: command 0x0405 tx timeout [ 107.390409][ T6993] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 107.528252][ T6997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.250'. [ 107.686302][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.252'. [ 107.728783][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 107.776864][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.251'. [ 107.794697][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 107.810407][ T7003] netlink: 136 bytes leftover after parsing attributes in process `syz.3.252'. [ 107.845860][ T7005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.875044][ T7005] bond0: (slave rose0): Enslaving as an active interface with an up link [ 108.249899][ T7015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.266975][ T7027] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 108.632864][ T5157] Bluetooth: hci0: command tx timeout [ 108.849264][ T7015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.207315][ T7015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.441338][ T7015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.519278][ T7070] block nbd0: Unsupported socket: should be TCP or UNIX. [ 109.634374][ T3524] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.661954][ T3524] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.996630][ T1106] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.045150][ T7090] netlink: 'syz.4.268': attribute type 6 has an invalid length. [ 110.048293][ T1106] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.111863][ T7087] syzkaller1: entered promiscuous mode [ 110.127312][ T7087] syzkaller1: entered allmulticast mode [ 110.250137][ T7094] netlink: 'syz.4.268': attribute type 12 has an invalid length. [ 110.258877][ T7094] __nla_validate_parse: 6 callbacks suppressed [ 110.258893][ T7094] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.268'. [ 110.339430][ T7089] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 110.608123][ T7105] netlink: 'syz.0.270': attribute type 10 has an invalid length. [ 110.679987][ T7105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.270'. [ 110.706264][ T7105] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 110.738538][ T7105] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 110.774342][ T7105] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 110.824623][ T7112] netlink: zone id is out of range [ 110.839829][ T7112] netlink: zone id is out of range [ 110.883455][ T7112] netlink: del zone limit has 8 unknown bytes [ 111.163379][ T7130] team0: Device gtp0 is of different type [ 111.290654][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'. [ 111.335800][ T7144] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 111.368283][ T7147] netlink: 'syz.3.277': attribute type 4 has an invalid length. [ 111.562160][ T7154] tipc: Enabled bearer , priority 0 [ 111.581713][ T7154] syzkaller0: entered promiscuous mode [ 111.618333][ T7154] syzkaller0: entered allmulticast mode [ 111.643587][ T7162] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 111.651000][ T7160] netlink: 'syz.1.284': attribute type 13 has an invalid length. [ 111.659627][ T7160] netlink: 'syz.1.284': attribute type 17 has an invalid length. [ 111.702173][ T7157] netlink: 'syz.0.283': attribute type 2 has an invalid length. [ 111.733445][ T7162] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 111.943871][ T7160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.976099][ T7167] netlink: 36 bytes leftover after parsing attributes in process `syz.2.285'. [ 112.015384][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.2.285'. [ 112.122401][ T7152] tipc: Resetting bearer [ 112.260091][ T7152] tipc: Disabling bearer [ 112.330339][ T7193] netlink: 136 bytes leftover after parsing attributes in process `syz.2.290'. [ 112.378460][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 112.384825][ T7191] Can't find ip_set type hash:ip$mec [ 112.775043][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.296'. [ 112.841350][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.296'. [ 112.944593][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 113.121622][ T7220] dummy0: entered promiscuous mode [ 113.167914][ T7220] dummy0: left promiscuous mode [ 113.819349][ T7254] !: renamed from dummy0 (while UP) [ 114.362442][ T7277] wg1: entered promiscuous mode [ 114.368428][ T7277] wg1: entered allmulticast mode [ 114.560674][ T7274] syz.4.309 (7274) used greatest stack depth: 17864 bytes left [ 114.970014][ T7299] syzkaller1: entered promiscuous mode [ 114.998627][ T7299] syzkaller1: entered allmulticast mode [ 115.637053][ T7344] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 115.860747][ T7353] Driver unsupported XDP return value 0 on prog (id 120) dev N/A, expect packet loss! [ 118.122236][ T7411] FAULT_INJECTION: forcing a failure. [ 118.122236][ T7411] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.136576][ T7411] CPU: 1 UID: 0 PID: 7411 Comm: syz.4.333 Not tainted syzkaller #0 PREEMPT(full) [ 118.136603][ T7411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 118.136621][ T7411] Call Trace: [ 118.136629][ T7411] [ 118.136637][ T7411] dump_stack_lvl+0x189/0x250 [ 118.136667][ T7411] ? __pfx____ratelimit+0x10/0x10 [ 118.136697][ T7411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.136720][ T7411] ? __pfx__printk+0x10/0x10 [ 118.136748][ T7411] ? __might_fault+0xb0/0x130 [ 118.136784][ T7411] should_fail_ex+0x414/0x560 [ 118.136815][ T7411] _copy_from_user+0x2d/0xb0 [ 118.136838][ T7411] __sys_bpf+0x1e3/0x860 [ 118.136875][ T7411] ? __pfx___sys_bpf+0x10/0x10 [ 118.136920][ T7411] ? ksys_write+0x22a/0x250 [ 118.136953][ T7411] ? __pfx_ksys_write+0x10/0x10 [ 118.136984][ T7411] __x64_sys_bpf+0x7c/0x90 [ 118.137010][ T7411] do_syscall_64+0xfa/0x3b0 [ 118.137028][ T7411] ? lockdep_hardirqs_on+0x9c/0x150 [ 118.137056][ T7411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.137075][ T7411] ? clear_bhb_loop+0x60/0xb0 [ 118.137098][ T7411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.137116][ T7411] RIP: 0033:0x7f0fe098eec9 [ 118.137133][ T7411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.137149][ T7411] RSP: 002b:00007f0fe1823038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 118.137170][ T7411] RAX: ffffffffffffffda RBX: 00007f0fe0be5fa0 RCX: 00007f0fe098eec9 [ 118.137184][ T7411] RDX: 0000000000000028 RSI: 0000200000000d00 RDI: 0000000000000012 [ 118.137199][ T7411] RBP: 00007f0fe1823090 R08: 0000000000000000 R09: 0000000000000000 [ 118.137211][ T7411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.137222][ T7411] R13: 00007f0fe0be6038 R14: 00007f0fe0be5fa0 R15: 00007ffd9522f328 [ 118.137254][ T7411] [ 118.798860][ T7422] __nla_validate_parse: 11 callbacks suppressed [ 118.798881][ T7422] netlink: 148 bytes leftover after parsing attributes in process `syz.4.336'. [ 119.064516][ T7425] FAULT_INJECTION: forcing a failure. [ 119.064516][ T7425] name failslab, interval 1, probability 0, space 0, times 1 [ 119.119363][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: syz.3.338 Not tainted syzkaller #0 PREEMPT(full) [ 119.119389][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.119400][ T7425] Call Trace: [ 119.119408][ T7425] [ 119.119416][ T7425] dump_stack_lvl+0x189/0x250 [ 119.119441][ T7425] ? __pfx____ratelimit+0x10/0x10 [ 119.119469][ T7425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.119487][ T7425] ? __pfx__printk+0x10/0x10 [ 119.119513][ T7425] ? __pfx___might_resched+0x10/0x10 [ 119.119533][ T7425] ? fs_reclaim_acquire+0x7d/0x100 [ 119.119562][ T7425] should_fail_ex+0x414/0x560 [ 119.119594][ T7425] should_failslab+0xa8/0x100 [ 119.119619][ T7425] __kmalloc_noprof+0xcb/0x4f0 [ 119.119641][ T7425] ? sock_kmalloc+0xd6/0x160 [ 119.119669][ T7425] sock_kmalloc+0xd6/0x160 [ 119.119695][ T7425] skcipher_recvmsg+0x571/0x11d0 [ 119.119743][ T7425] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 119.119766][ T7425] ? __lock_acquire+0xab9/0xd20 [ 119.119787][ T7425] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 119.119815][ T7425] ? security_socket_recvmsg+0x7e/0x2e0 [ 119.119834][ T7425] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 119.119866][ T7425] sock_recvmsg+0x22c/0x270 [ 119.119899][ T7425] ____sys_recvmsg+0x1c9/0x460 [ 119.119933][ T7425] ? __pfx_____sys_recvmsg+0x10/0x10 [ 119.119974][ T7425] ? import_iovec+0x74/0xa0 [ 119.120000][ T7425] ___sys_recvmsg+0x1b5/0x510 [ 119.120031][ T7425] ? __pfx____sys_recvmsg+0x10/0x10 [ 119.120083][ T7425] ? __fget_files+0x3a0/0x420 [ 119.120121][ T7425] do_recvmmsg+0x307/0x770 [ 119.120155][ T7425] ? __pfx_do_recvmmsg+0x10/0x10 [ 119.120192][ T7425] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 119.120233][ T7425] __x64_sys_recvmmsg+0x190/0x240 [ 119.120260][ T7425] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 119.120282][ T7425] ? rcu_is_watching+0x15/0xb0 [ 119.120309][ T7425] ? do_syscall_64+0xbe/0x3b0 [ 119.120333][ T7425] do_syscall_64+0xfa/0x3b0 [ 119.120351][ T7425] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.120379][ T7425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.120398][ T7425] ? clear_bhb_loop+0x60/0xb0 [ 119.120421][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.120440][ T7425] RIP: 0033:0x7f2e6e78eec9 [ 119.120457][ T7425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.120473][ T7425] RSP: 002b:00007f2e6f563038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 119.120493][ T7425] RAX: ffffffffffffffda RBX: 00007f2e6e9e5fa0 RCX: 00007f2e6e78eec9 [ 119.120507][ T7425] RDX: 0000000000000001 RSI: 0000200000001780 RDI: 0000000000000004 [ 119.120519][ T7425] RBP: 00007f2e6f563090 R08: 0000000000000000 R09: 0000000000000000 [ 119.120531][ T7425] R10: 0000000000010101 R11: 0000000000000246 R12: 0000000000000001 [ 119.120543][ T7425] R13: 00007f2e6e9e6038 R14: 00007f2e6e9e5fa0 R15: 00007fff8f2bc028 [ 119.120575][ T7425] [ 120.422275][ T7448] netlink: 132 bytes leftover after parsing attributes in process `syz.4.343'. [ 120.965519][ T7480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'. [ 120.977287][ T7479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.350'. [ 120.989398][ T7476] netlink: 'syz.3.351': attribute type 3 has an invalid length. [ 121.303735][ T7486] netlink: 'syz.3.353': attribute type 13 has an invalid length. [ 121.331758][ T7486] netlink: 'syz.3.353': attribute type 17 has an invalid length. [ 121.395704][ T7492] xfrm0: entered promiscuous mode [ 121.400764][ T7492] xfrm0: entered allmulticast mode [ 121.644441][ T7486] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.885308][ T7508] bond1: option resend_igmp: invalid value (2878) [ 121.891876][ T7508] bond1: option resend_igmp: allowed values 0 - 255 [ 121.916035][ T7508] bond1 (unregistering): Released all slaves [ 123.073979][ T7537] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 123.501261][ T7572] tipc: Started in network mode [ 123.518273][ T7572] tipc: Node identity 56e408a4e78b, cluster identity 4711 [ 123.552049][ T7572] tipc: Enabled bearer , priority 0 [ 123.624057][ T7578] syzkaller0: entered promiscuous mode [ 123.629549][ T7578] syzkaller0: entered allmulticast mode [ 123.710671][ T7584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.384'. [ 123.933858][ T7568] tipc: Resetting bearer [ 124.027208][ T7568] tipc: Disabling bearer [ 124.094072][ T7601] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 124.265428][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 124.278180][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 124.288821][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 124.300888][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 124.311102][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 124.321486][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 124.343944][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 124.380500][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 124.435416][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 124.455762][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 124.503495][ T7607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.736479][ T7614] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 126.175566][ T7642] netlink: 'syz.0.394': attribute type 4 has an invalid length. [ 126.242279][ T7642] netlink: 'syz.0.394': attribute type 4 has an invalid length. [ 126.528581][ T7656] tipc: Enabled bearer , priority 0 [ 126.551660][ T7656] syzkaller0: entered promiscuous mode [ 126.570218][ T7656] syzkaller0: entered allmulticast mode [ 126.679249][ T7653] tipc: Resetting bearer [ 126.751868][ T7653] tipc: Disabling bearer [ 126.986131][ T7679] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 127.005447][ T7679] netlink: 'syz.1.403': attribute type 4 has an invalid length. [ 127.803785][ T7706] netlink: 'syz.3.411': attribute type 3 has an invalid length. [ 127.830587][ T7706] syz_tun: entered allmulticast mode [ 127.842855][ T7704] netlink: 'syz.4.410': attribute type 1 has an invalid length. [ 127.868361][ T7706] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.896879][ T7706] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 128.003609][ T7709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.074379][ T5157] Bluetooth: hci4: command 0x0405 tx timeout [ 128.086113][ T7711] tipc: Started in network mode [ 128.090998][ T7711] tipc: Node identity 080211000001, cluster identity 4711 [ 128.101352][ T7711] tipc: Enabled bearer , priority 0 [ 128.121029][ T7711] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 128.151490][ T7711] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 128.251119][ T7705] syz_tun: left allmulticast mode [ 128.263381][ T7720] netlink: 'syz.1.416': attribute type 18 has an invalid length. [ 128.504433][ T7732] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 128.533220][ T7728] tun0: tun_chr_ioctl cmd 1074025675 [ 128.539017][ T7728] tun0: persist enabled [ 128.609597][ T7731] vlan2: entered promiscuous mode [ 128.633518][ T7731] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 128.731613][ T7734] tun0: tun_chr_ioctl cmd 2147767521 [ 128.748976][ T7742] tun0: tun_chr_ioctl cmd 1074025675 [ 128.763647][ T7742] tun0: persist disabled [ 128.771386][ T7745] tipc: Enabling of bearer rejected, already enabled [ 128.982960][ T7754] netlink: 'syz.4.425': attribute type 10 has an invalid length. [ 128.994165][ T7753] netlink: 'syz.3.427': attribute type 13 has an invalid length. [ 129.011703][ T7754] team0: Port device netdevsim0 added [ 129.096326][ T5920] tipc: Node number set to 134418688 [ 129.172056][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.180473][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.446406][ T7753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.477869][ T7753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.701226][ T7777] __nla_validate_parse: 18 callbacks suppressed [ 129.701245][ T7777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.430'. [ 130.119473][ T7783] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 130.134052][ T1207] syz0: Port: 1 Link DOWN [ 130.152476][ T6241] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.194522][ T6241] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.275477][ T6241] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.308783][ T6241] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.383953][ T7785] netlink: 'syz.4.432': attribute type 2 has an invalid length. [ 130.489192][ T7787] netlink: 256 bytes leftover after parsing attributes in process `syz.3.431'. [ 130.508822][ T7787] netlink: 48 bytes leftover after parsing attributes in process `syz.3.431'. [ 130.990909][ T7794] bond1: option miimon: invalid value (18446744073709551607) [ 131.029963][ T7794] bond1: option miimon: allowed values 0 - 2147483647 [ 131.057311][ T7794] bond1 (unregistering): Released all slaves [ 131.237543][ T7800] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 131.272939][ T7816] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.439'. [ 131.885290][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 131.923087][ T7839] tipc: Enabled bearer , priority 18 [ 132.130231][ T7846] netlink: 32 bytes leftover after parsing attributes in process `syz.4.446'. [ 132.156517][ T7850] syzkaller1: entered promiscuous mode [ 132.162253][ T7850] syzkaller1: entered allmulticast mode [ 132.502874][ T7855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 132.717177][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.866614][ T7855] bridge_slave_1: left allmulticast mode [ 132.872688][ T7855] bridge_slave_1: left promiscuous mode [ 132.879228][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.898253][ T7855] bridge_slave_0: left allmulticast mode [ 132.904864][ T7855] bridge_slave_0: left promiscuous mode [ 132.910672][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.310163][ T7877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.453'. [ 133.365725][ T7879] netlink: 52 bytes leftover after parsing attributes in process `syz.0.454'. [ 133.375074][ T7882] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16) [ 133.412946][ T7882] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 133.774438][ T7901] netlink: set zone limit has 8 unknown bytes [ 133.855542][ T7892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.456'. [ 134.653359][ T7943] validate_nla: 1 callbacks suppressed [ 134.653377][ T7943] netlink: 'syz.1.465': attribute type 13 has an invalid length. [ 134.737838][ T7943] netlink: 'syz.1.465': attribute type 17 has an invalid length. [ 135.029007][ T7943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 135.571162][ T7973] __nla_validate_parse: 4 callbacks suppressed [ 135.571180][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 135.619676][ T7974] tipc: Enabling of bearer rejected, failed to enable media [ 135.633287][ T7974] netlink: 'syz.0.470': attribute type 30 has an invalid length. [ 136.382319][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 136.561194][ T7996] bond1: entered promiscuous mode [ 136.573094][ T7996] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.686006][ T8004] delete_channel: no stack [ 137.209466][ T8019] bond1: Unable to set down delay as MII monitoring is disabled [ 137.224880][ T8019] bond1 (unregistering): Released all slaves [ 137.387972][ T8022] batman_adv: batadv0: Adding interface: macvtap1 [ 137.404794][ T8022] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.470536][ T8022] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 138.107175][ T8070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.490'. [ 138.517215][ T8081] netlink: 'syz.0.491': attribute type 64 has an invalid length. [ 138.687631][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 138.948220][ T8095] netlink: 'syz.1.497': attribute type 12 has an invalid length. [ 139.165011][ T8106] netlink: 48 bytes leftover after parsing attributes in process `syz.4.502'. [ 139.338016][ T8113] netlink: 24 bytes leftover after parsing attributes in process `syz.4.504'. [ 139.617575][ T8121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.506'. [ 139.795905][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 140.202946][ T8138] tipc: Enabled bearer , priority 0 [ 140.224315][ T8138] syzkaller0: entered promiscuous mode [ 140.237616][ T8138] syzkaller0: entered allmulticast mode [ 140.406050][ T8137] tipc: Resetting bearer [ 140.500577][ T8137] tipc: Disabling bearer [ 140.642163][ T8155] dvmrp8: entered allmulticast mode [ 140.667005][ T8154] syz_tun: entered allmulticast mode [ 140.882321][ T8149] netlink: 'syz.0.513': attribute type 23 has an invalid length. [ 141.100823][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.519'. [ 141.183660][ T8169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.259362][ T8169] syzkaller0: entered promiscuous mode [ 141.312854][ T8169] syzkaller0: entered allmulticast mode [ 141.374037][ T8148] syz_tun: left allmulticast mode [ 141.384578][ T8148] dvmrp8: left allmulticast mode [ 141.404526][ T8169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.519'. [ 142.189342][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.520'. [ 142.371791][ T8202] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 142.496679][ T8206] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 142.541538][ T8206] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20003 [ 142.715368][ T8215] netlink: 'syz.0.532': attribute type 8 has an invalid length. [ 142.740938][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 142.788638][ T8217] syzkaller1: entered promiscuous mode [ 142.795311][ T8217] syzkaller1: entered allmulticast mode [ 143.366288][ T8248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'. [ 143.531773][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.542'. [ 143.612113][ T8251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.733783][ T36] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 144.113952][ T8272] tun0: tun_chr_ioctl cmd 1074025675 [ 144.119277][ T8272] tun0: persist enabled [ 144.171899][ T8272] tun0: tun_chr_ioctl cmd 1074025675 [ 144.177475][ T8272] tun0: persist disabled [ 144.649369][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 144.704305][ T8281] team_slave_0: entered promiscuous mode [ 144.710204][ T8281] team_slave_1: entered promiscuous mode [ 144.760228][ T8281] macvtap1: entered promiscuous mode [ 144.795842][ T8281] team0: entered promiscuous mode [ 144.801531][ T8281] macvtap1: entered allmulticast mode [ 144.823819][ T8281] team0: entered allmulticast mode [ 144.830643][ T8281] team_slave_0: entered allmulticast mode [ 144.850911][ T8281] team_slave_1: entered allmulticast mode [ 144.868892][ T8281] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 145.090822][ T8298] bond2: option resend_igmp: invalid value (2878) [ 145.097567][ T8298] bond2: option resend_igmp: allowed values 0 - 255 [ 145.134700][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 145.156661][ T8298] bond2 (unregistering): Released all slaves [ 145.246656][ T8306] tipc: Resetting bearer [ 145.686018][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 145.863743][ T8336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.564'. [ 146.149334][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 146.296612][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.567'. [ 146.802158][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 146.991438][ T8379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.242174][ T8392] syzkaller1: entered promiscuous mode [ 147.247822][ T8392] syzkaller1: entered allmulticast mode [ 147.368380][ T8399] netlink: 'syz.3.576': attribute type 4 has an invalid length. [ 147.409334][ T8399] netlink: 'syz.3.576': attribute type 4 has an invalid length. [ 148.424226][ T8427] vxcan2: entered promiscuous mode [ 148.469847][ T8427] vxcan2: entered allmulticast mode [ 148.758142][ T8435] tipc: Enabling of bearer rejected, already enabled [ 149.460783][ T8455] netlink: 80 bytes leftover after parsing attributes in process `syz.1.589'. [ 149.501212][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.589'. [ 149.537261][ T8455] netlink: 20 bytes leftover after parsing attributes in process `syz.1.589'. [ 150.136390][ T8471] netlink: 'syz.3.591': attribute type 16 has an invalid length. [ 150.172806][ T8471] netlink: 'syz.3.591': attribute type 17 has an invalid length. [ 150.235521][ T8474] IPv6: NLM_F_REPLACE set, but no existing node found! [ 150.286347][ T8477] netlink: 104 bytes leftover after parsing attributes in process `syz.2.593'. [ 150.296815][ T8475] netlink: 'syz.1.592': attribute type 7 has an invalid length. [ 150.388113][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 150.940283][ T8499] !: renamed from dummy0 (while UP) [ 151.034087][ T8499] trusted_key: syz.1.598 sent an empty control message without MSG_MORE. [ 151.057277][ T8504] tipc: Enabling of bearer rejected, already enabled [ 151.329095][ T8510] xfrm1: entered allmulticast mode [ 151.383283][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.603'. [ 151.885098][ T8526] netlink: 'syz.2.607': attribute type 2 has an invalid length. [ 151.907108][ T8526] netlink: 'syz.2.607': attribute type 2 has an invalid length. [ 151.925425][ T8527] macsec0: entered promiscuous mode [ 151.932707][ T8527] macsec0: entered allmulticast mode [ 151.955319][ T8526] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 151.982841][ T8526] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 151.996356][ T8527] veth1_macvtap: entered allmulticast mode [ 152.011988][ T8527] macsec0: left promiscuous mode [ 152.034855][ T8526] netlink: 'syz.2.607': attribute type 1 has an invalid length. [ 152.057751][ T8527] macsec0: left allmulticast mode [ 152.068344][ T8527] veth1_macvtap: left allmulticast mode [ 153.219584][ T8561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.410872][ T8578] batadv0: entered promiscuous mode [ 154.433899][ T8578] macvtap0: entered promiscuous mode [ 154.455336][ T8578] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 154.486301][ T8578] batadv0: left promiscuous mode [ 154.703174][ T8582] tipc: Enabling of bearer rejected, already enabled [ 154.746095][ T8584] validate_nla: 1 callbacks suppressed [ 154.746113][ T8584] netlink: 'syz.1.623': attribute type 303 has an invalid length. [ 155.093527][ T8593] netlink: 44 bytes leftover after parsing attributes in process `syz.2.627'. [ 155.127697][ T8593] tipc: Enabling of bearer rejected, already enabled [ 155.205415][ T8376] Set syz1 is full, maxelem 65536 reached [ 155.555732][ T8612] netlink: 'syz.2.631': attribute type 2 has an invalid length. [ 155.585919][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 155.977084][ T8620] tipc: Enabled bearer , priority 0 [ 155.994451][ T8620] syzkaller0: entered promiscuous mode [ 156.005784][ T8620] syzkaller0: entered allmulticast mode [ 156.045431][ T8619] tipc: Resetting bearer [ 156.091709][ T8619] tipc: Disabling bearer [ 156.131087][ T8630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.637'. [ 156.196430][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 156.221158][ T8634] netlink: 80 bytes leftover after parsing attributes in process `syz.4.638'. [ 156.366207][ T8634] team0: Port device team_slave_0 removed [ 156.953539][ T8665] netlink: 11 bytes leftover after parsing attributes in process `syz.4.644'. [ 157.022076][ T8668] tipc: Started in network mode [ 157.028832][ T8668] tipc: Node identity 5ec166cb048e, cluster identity 4711 [ 157.038780][ T8668] tipc: Enabled bearer , priority 0 [ 157.048921][ T8668] syzkaller0: entered promiscuous mode [ 157.101435][ T8668] syzkaller0: entered allmulticast mode [ 157.289924][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.649'. [ 157.329363][ T8670] netlink: 'syz.2.647': attribute type 12 has an invalid length. [ 157.341999][ T8676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.649'. [ 157.373958][ T8667] tipc: Resetting bearer [ 157.422262][ T8667] tipc: Disabling bearer [ 157.523108][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 157.721011][ T8681] xt_limit: Overflow, try lower: 271964/0 [ 157.774007][ T8685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 157.786781][ T8684] pim6reg1: entered promiscuous mode [ 157.794026][ T8684] pim6reg1: entered allmulticast mode [ 157.955420][ T8685] bond2: entered promiscuous mode [ 157.979294][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 158.022500][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.650'. [ 158.329029][ T8695] unsupported nla_type 52263 [ 158.336205][ T8697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 158.388120][ T8701] netlink: 'syz.2.652': attribute type 1 has an invalid length. [ 158.545070][ T8707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.656'. [ 158.585232][ T8715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.658'. [ 159.166314][ T8737] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 159.187687][ T8740] netlink: 128 bytes leftover after parsing attributes in process `syz.2.665'. [ 159.603577][ T8749] netlink: 'syz.2.666': attribute type 4 has an invalid length. [ 160.204713][ T8762] syzkaller0: entered promiscuous mode [ 160.216127][ T8762] syzkaller0: entered allmulticast mode [ 161.596611][ T8794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.765033][ T8810] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20003 [ 161.914771][ T8811] syz.2.683 (8811) used obsolete PPPIOCDETACH ioctl [ 161.988217][ T8816] __nla_validate_parse: 7 callbacks suppressed [ 161.988235][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 162.000092][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 162.126439][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 162.172761][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'. [ 162.550539][ T8839] netlink: 68 bytes leftover after parsing attributes in process `syz.3.689'. [ 162.568739][ T6241] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.590636][ T6241] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.697314][ T6241] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.728025][ T6241] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.843912][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 162.909453][ T8848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 162.925995][ T8852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.691'. [ 163.107721][ T8852] nbd: socks must be embedded in a SOCK_ITEM attr [ 164.738489][ T8903] lo speed is unknown, defaulting to 1000 [ 164.753607][ T8906] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.794722][ T8907] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.801076][ T8907] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.874565][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 164.914533][ T8907] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.077188][ T8903] lo speed is unknown, defaulting to 1000 [ 165.138844][ T8903] lo speed is unknown, defaulting to 1000 [ 165.207717][ T8903] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 165.276339][ T8903] lo speed is unknown, defaulting to 1000 [ 165.288420][ T8903] lo speed is unknown, defaulting to 1000 [ 165.348665][ T8903] lo speed is unknown, defaulting to 1000 [ 165.376153][ T8924] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 165.377588][ T8903] lo speed is unknown, defaulting to 1000 [ 165.425471][ T8914] lo speed is unknown, defaulting to 1000 [ 165.486177][ T8903] lo speed is unknown, defaulting to 1000 [ 165.621415][ T8903] lo speed is unknown, defaulting to 1000 [ 165.657316][ T8903] lo speed is unknown, defaulting to 1000 [ 165.666651][ T8935] netlink: 'syz.0.705': attribute type 1 has an invalid length. [ 165.787538][ T8930] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 166.804659][ T8992] netlink: 56 bytes leftover after parsing attributes in process `syz.2.717'. [ 166.909949][ T8996] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:21 [ 167.062773][ T9001] tun0: tun_chr_ioctl cmd 1074025675 [ 167.081597][ T9001] tun0: persist enabled [ 167.089245][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.721'. [ 167.097282][ T9000] tun0: tun_chr_ioctl cmd 1074025675 [ 167.115989][ T9000] tun0: persist disabled [ 167.276566][ T9013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.294052][ T9013] batadv_slave_0: entered allmulticast mode [ 167.501210][ T9021] lo speed is unknown, defaulting to 1000 [ 167.850312][ T9032] netlink: 'syz.1.725': attribute type 12 has an invalid length. [ 167.906035][ T9032] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.725'. [ 168.223769][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 168.257979][ T9052] 8021q: VLANs not supported on vcan0 [ 168.299169][ T9044] lo speed is unknown, defaulting to 1000 [ 168.408903][ T9043] lo speed is unknown, defaulting to 1000 [ 168.694208][ T9051] team0: Device ipip0 is of different type [ 168.860210][ T9040] tipc: Enabled bearer , priority 0 [ 168.913950][ T9070] syzkaller0: entered promiscuous mode [ 168.919458][ T9070] syzkaller0: entered allmulticast mode [ 169.139124][ T9077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.733'. [ 169.340724][ T9040] tipc: Resetting bearer [ 169.358263][ T9036] tipc: Resetting bearer [ 169.418583][ T9036] tipc: Disabling bearer [ 169.617940][ T9090] netlink: 'syz.3.734': attribute type 27 has an invalid length. [ 169.715754][ T9092] netlink: 72 bytes leftover after parsing attributes in process `syz.1.736'. [ 169.846203][ T9094] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 169.968492][ T9092] netlink: 60 bytes leftover after parsing attributes in process `syz.1.736'. [ 170.282135][ T9116] netlink: 'syz.1.741': attribute type 13 has an invalid length. [ 170.331935][ T9116] netlink: 'syz.1.741': attribute type 17 has an invalid length. [ 170.668490][ T9101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.735345][ T9101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.900652][ T9116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.009463][ T9116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.144091][ T9101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.167687][ T9101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.451809][ T9101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.476133][ T9101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.522923][ T9132] lo speed is unknown, defaulting to 1000 [ 171.752133][ T9101] team0: Port device netdevsim0 removed [ 171.768473][ T9101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.796600][ T9101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.199576][ T9173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 172.212757][ T9173] netlink: 32 bytes leftover after parsing attributes in process `syz.2.748'. [ 172.287163][ T1158] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.326682][ T1158] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.348096][ T9175] veth0_to_bond: entered allmulticast mode [ 172.376256][ T9167] netlink: 60 bytes leftover after parsing attributes in process `syz.2.748'. [ 172.454187][ T9168] lo speed is unknown, defaulting to 1000 [ 172.514769][ T1158] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.532596][ T1158] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.578524][ T1158] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.592943][ T1158] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.657342][ T1158] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.672512][ T1158] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.250914][ T9196] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 173.456224][ T9220] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20002 [ 174.147720][ T9246] tipc: New replicast peer: 255.255.255.255 [ 174.179584][ T9246] tipc: Enabled bearer , priority 10 [ 174.448240][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 174.458914][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'. [ 174.785158][ T9267] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.792714][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.841801][ T9267] batman_adv: batadv0: Interface deactivated: dummy0 [ 174.974903][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.771'. [ 175.021605][ T9267] veth0_to_bond: left allmulticast mode [ 175.036975][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.771'. [ 175.123249][ T9267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.203193][ T9297] tipc: Node number set to 684655965 [ 175.221157][ T9267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.376108][ T9267] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 175.383828][ T9267] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 175.487416][ T9267] ip6gre1: left allmulticast mode [ 175.501564][ T9267] bond1: left promiscuous mode [ 175.511683][ T9276] netlink: 96 bytes leftover after parsing attributes in process `syz.3.770'. [ 175.574106][ T49] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.626498][ T49] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.658753][ T49] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.700176][ T49] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.838240][ T9315] netlink: 'syz.3.776': attribute type 25 has an invalid length. [ 176.104077][ T9328] netlink: 'syz.3.776': attribute type 303 has an invalid length. [ 176.298030][ T9333] lo speed is unknown, defaulting to 1000 [ 176.353739][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 176.611276][ T9344] lo speed is unknown, defaulting to 1000 [ 177.053736][ T9359] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 177.518281][ T9369] netlink: 48 bytes leftover after parsing attributes in process `syz.0.790'. [ 177.733194][ T9365] geneve2: entered promiscuous mode [ 177.898365][ T9376] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 178.289442][ T9399] netlink: 16 bytes leftover after parsing attributes in process `syz.0.798'. [ 178.294929][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 178.310958][ T9393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.321931][ T9393] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.335244][ T9393] batman_adv: batadv0: Interface activated: dummy0 [ 178.342208][ T9393] batadv0: mtu less than device minimum [ 178.349756][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.361755][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.373732][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.380682][ T9406] netlink: 40 bytes leftover after parsing attributes in process `syz.4.801'. [ 178.385686][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.405366][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.416745][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.427913][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.439330][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.450564][ T9393] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 178.495098][ T9395] lo speed is unknown, defaulting to 1000 [ 178.691272][ T9410] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 178.705098][ T9413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.803'. [ 178.729286][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 178.749398][ T9416] batman_adv: batadv0: Adding interface: ipvlan2 [ 178.760576][ T9414] netlink: 'syz.1.805': attribute type 13 has an invalid length. [ 178.779325][ T9414] netlink: 'syz.1.805': attribute type 17 has an invalid length. [ 178.794588][ T9416] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.830893][ T9416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.848048][ T9416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.862760][ T9416] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 179.261307][ T9446] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.808'. [ 179.286440][ T9447] netlink: 44 bytes leftover after parsing attributes in process `syz.4.809'. [ 179.395282][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 179.434116][ T9456] netlink: 508 bytes leftover after parsing attributes in process `syz.1.813'. [ 179.443311][ T9450] netlink: 'syz.3.812': attribute type 5 has an invalid length. [ 179.523789][ T9457] netlink: 'syz.4.809': attribute type 29 has an invalid length. [ 179.614963][ T9443] lo speed is unknown, defaulting to 1000 [ 179.837919][ T9470] netlink: 'syz.2.816': attribute type 29 has an invalid length. [ 180.111396][ T9470] netlink: 'syz.2.816': attribute type 29 has an invalid length. [ 180.329696][ T9486] bridge_slave_0: left allmulticast mode [ 180.351146][ T9486] bridge_slave_0: left promiscuous mode [ 180.386242][ T9486] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.416638][ T9486] bridge_slave_1: left allmulticast mode [ 180.424601][ T9486] bridge_slave_1: left promiscuous mode [ 180.430383][ T9486] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.453480][ T9486] bond0: (slave bond_slave_0): Releasing backup interface [ 180.468880][ T9486] bond0: (slave bond_slave_1): Releasing backup interface [ 180.530636][ T9486] team0: Port device team_slave_0 removed [ 180.549306][ T9486] team0: Port device team_slave_1 removed [ 180.574363][ T9486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.611165][ T9486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.866097][ T9511] netlink: 'syz.1.828': attribute type 1 has an invalid length. [ 181.082443][ T9520] lo speed is unknown, defaulting to 1000 [ 181.321175][ T9536] netlink: 'syz.0.833': attribute type 10 has an invalid length. [ 181.493317][ T9536] team0: Port device geneve0 added [ 181.538800][ T3524] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.562106][ T3524] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.620382][ T9551] dvmrp0: entered allmulticast mode [ 181.625843][ T3524] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.642096][ T3524] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.082341][ T9561] tipc: Enabling of bearer rejected, failed to enable media [ 182.108708][ T9577] bridge0: entered promiscuous mode [ 182.126992][ T9551] syzkaller1: entered allmulticast mode [ 182.668894][ T9599] __nla_validate_parse: 10 callbacks suppressed [ 182.668911][ T9599] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.845'. [ 182.708680][ T9593] lo speed is unknown, defaulting to 1000 [ 182.734087][ T9600] netem: unknown loss type 0 [ 182.749248][ T9600] netem: change failed [ 183.031824][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 183.125657][ T9613] netlink: 108 bytes leftover after parsing attributes in process `syz.0.849'. [ 183.227060][ T9620] netlink: 'syz.4.850': attribute type 21 has an invalid length. [ 183.313544][ T9612] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 183.517673][ T9629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.852'. [ 183.571738][ T9629] netlink: 60 bytes leftover after parsing attributes in process `syz.3.852'. [ 184.083581][ T9659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 184.097180][ T9659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.388835][ T9665] netlink: 52 bytes leftover after parsing attributes in process `syz.0.861'. [ 184.399330][ T9663] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.860'. [ 184.416609][ T9667] lo speed is unknown, defaulting to 1000 [ 184.641210][ T9679] netlink: 'syz.0.863': attribute type 2 has an invalid length. [ 184.683896][ T9679] netlink: 'syz.0.863': attribute type 1 has an invalid length. [ 184.712062][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 184.737710][ T9677] lo speed is unknown, defaulting to 1000 [ 184.829795][ T9684] netlink: 60 bytes leftover after parsing attributes in process `syz.1.865'. [ 184.841711][ T9684] netlink: 'syz.1.865': attribute type 11 has an invalid length. [ 185.621093][ T5848] IPVS: starting estimator thread 0... [ 185.726805][ T9708] IPVS: using max 24 ests per chain, 57600 per kthread [ 186.008332][ T9722] tipc: Enabled bearer , priority 0 [ 186.020577][ T9722] syzkaller0: entered promiscuous mode [ 186.039374][ T9722] syzkaller0: entered allmulticast mode [ 186.096310][ T9727] tipc: Cannot configure node identity twice [ 186.132674][ T9718] tipc: Resetting bearer [ 186.245626][ T9731] FAULT_INJECTION: forcing a failure. [ 186.245626][ T9731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.267371][ T9731] CPU: 1 UID: 0 PID: 9731 Comm: syz.1.879 Not tainted syzkaller #0 PREEMPT(full) [ 186.267419][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.267441][ T9731] Call Trace: [ 186.267449][ T9731] [ 186.267458][ T9731] dump_stack_lvl+0x189/0x250 [ 186.267486][ T9731] ? __pfx____ratelimit+0x10/0x10 [ 186.267523][ T9731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.267548][ T9731] ? __pfx__printk+0x10/0x10 [ 186.267591][ T9731] should_fail_ex+0x414/0x560 [ 186.267624][ T9731] _copy_to_user+0x31/0xb0 [ 186.267649][ T9731] simple_read_from_buffer+0xe1/0x170 [ 186.267680][ T9731] proc_fail_nth_read+0x1b3/0x220 [ 186.267704][ T9731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.267728][ T9731] ? rw_verify_area+0x2a6/0x4d0 [ 186.267747][ T9731] ? __lock_acquire+0xab9/0xd20 [ 186.267762][ T9731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.267784][ T9731] vfs_read+0x1fd/0xa30 [ 186.267805][ T9731] ? fdget_pos+0x247/0x320 [ 186.267836][ T9731] ? __pfx___mutex_lock+0x10/0x10 [ 186.267857][ T9731] ? __pfx_vfs_read+0x10/0x10 [ 186.267881][ T9731] ? __fget_files+0x2a/0x420 [ 186.267912][ T9731] ? __fget_files+0x3a0/0x420 [ 186.267936][ T9731] ? __fget_files+0x2a/0x420 [ 186.267972][ T9731] ksys_read+0x145/0x250 [ 186.267997][ T9731] ? __pfx_ksys_read+0x10/0x10 [ 186.268017][ T9731] ? rcu_is_watching+0x15/0xb0 [ 186.268050][ T9731] ? do_syscall_64+0xbe/0x3b0 [ 186.268075][ T9731] do_syscall_64+0xfa/0x3b0 [ 186.268093][ T9731] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.268122][ T9731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.268141][ T9731] ? clear_bhb_loop+0x60/0xb0 [ 186.268165][ T9731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.268184][ T9731] RIP: 0033:0x7f5b7a98d8dc [ 186.268202][ T9731] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 186.268218][ T9731] RSP: 002b:00007f5b7b8a8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 186.268242][ T9731] RAX: ffffffffffffffda RBX: 00007f5b7abe5fa0 RCX: 00007f5b7a98d8dc [ 186.268256][ T9731] RDX: 000000000000000f RSI: 00007f5b7b8a80a0 RDI: 0000000000000005 [ 186.268268][ T9731] RBP: 00007f5b7b8a8090 R08: 0000000000000000 R09: 0000000000000000 [ 186.268279][ T9731] R10: 0000000000010101 R11: 0000000000000246 R12: 0000000000000001 [ 186.268291][ T9731] R13: 00007f5b7abe6038 R14: 00007f5b7abe5fa0 R15: 00007fff28c573c8 [ 186.268325][ T9731] [ 186.274884][ T9718] tipc: Disabling bearer [ 186.484660][ T9736] netlink: 'syz.1.880': attribute type 1 has an invalid length. [ 186.688802][ T9740] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 187.385554][ T9760] lo speed is unknown, defaulting to 1000 [ 187.858715][ T9773] __nla_validate_parse: 1 callbacks suppressed [ 187.858733][ T9773] netlink: 52 bytes leftover after parsing attributes in process `syz.3.888'. [ 187.998397][ T9778] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 188.057452][ T9778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.139920][ T9783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.148390][ T9783] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 188.161995][ T9783] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 188.221974][ T9782] tipc: Enabled bearer , priority 0 [ 188.259461][ T9778] veth3: entered promiscuous mode [ 188.285105][ T9778] bond2: (slave veth3): Enslaving as an active interface with a down link [ 188.857939][ T9811] netlink: 24 bytes leftover after parsing attributes in process `syz.4.899'. [ 188.887337][ T9808] bond3: option miimon: invalid value (18446744073709551607) [ 188.895729][ T9808] bond3: option miimon: allowed values 0 - 2147483647 [ 188.917707][ T9808] bond3 (unregistering): Released all slaves [ 189.084706][ T9585] net_ratelimit: 15 callbacks suppressed [ 189.084725][ T9585] Set syz1 is full, maxelem 65536 reached [ 189.285783][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 189.295201][ T9820] netlink: 'syz.1.903': attribute type 5 has an invalid length. [ 189.304074][ T9820] netlink: 'syz.1.903': attribute type 8 has an invalid length. [ 189.323032][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.903'. [ 189.333218][ T5931] tipc: Node number set to 2976843940 [ 189.395756][ T9820] geneve2: entered promiscuous mode [ 189.400991][ T9820] geneve2: entered allmulticast mode [ 189.448414][ T9840] FAULT_INJECTION: forcing a failure. [ 189.448414][ T9840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.486050][ T9835] bridge_slave_0: left allmulticast mode [ 189.500023][ T9840] CPU: 0 UID: 0 PID: 9840 Comm: syz.0.907 Not tainted syzkaller #0 PREEMPT(full) [ 189.500049][ T9840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.500059][ T9840] Call Trace: [ 189.500067][ T9840] [ 189.500075][ T9840] dump_stack_lvl+0x189/0x250 [ 189.500105][ T9840] ? __pfx____ratelimit+0x10/0x10 [ 189.500134][ T9840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.500163][ T9840] ? __pfx__printk+0x10/0x10 [ 189.500191][ T9840] ? __might_fault+0xb0/0x130 [ 189.500227][ T9840] should_fail_ex+0x414/0x560 [ 189.500258][ T9840] _copy_from_iter+0x1de/0x1790 [ 189.500275][ T9840] ? __lock_acquire+0xab9/0xd20 [ 189.500296][ T9840] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 189.500333][ T9840] ? policy_nodemask+0x27c/0x720 [ 189.500356][ T9840] ? __pfx__copy_from_iter+0x10/0x10 [ 189.500383][ T9840] ? set_page_refcounted+0xa0/0x1e0 [ 189.500407][ T9840] ? page_copy_sane+0x4e/0x280 [ 189.500428][ T9840] copy_page_from_iter+0xdd/0x170 [ 189.500454][ T9840] tun_get_user+0x1d7b/0x3e90 [ 189.500490][ T9840] ? tun_get_user+0x6f6/0x3e90 [ 189.500525][ T9840] ? aa_file_perm+0x44d/0x1550 [ 189.500553][ T9840] ? __pfx_tun_get_user+0x10/0x10 [ 189.500576][ T9840] ? _parse_integer_limit+0x1ae/0x1f0 [ 189.500614][ T9840] ? __lock_acquire+0xab9/0xd20 [ 189.500639][ T9840] ? ref_tracker_alloc+0x318/0x460 [ 189.500663][ T9840] ? __lock_acquire+0xab9/0xd20 [ 189.500683][ T9840] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 189.500718][ T9840] ? tun_get+0x1c/0x2f0 [ 189.500748][ T9840] ? tun_get+0x1c/0x2f0 [ 189.500772][ T9840] ? tun_get+0x1c/0x2f0 [ 189.500804][ T9840] tun_chr_write_iter+0x113/0x200 [ 189.500833][ T9840] vfs_write+0x5c6/0xb30 [ 189.500862][ T9840] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 189.500888][ T9840] ? __pfx_vfs_write+0x10/0x10 [ 189.500921][ T9840] ? __fget_files+0x2a/0x420 [ 189.500957][ T9840] ksys_write+0x145/0x250 [ 189.500983][ T9840] ? __pfx_ksys_write+0x10/0x10 [ 189.501002][ T9840] ? rcu_is_watching+0x15/0xb0 [ 189.501029][ T9840] ? do_syscall_64+0xbe/0x3b0 [ 189.501057][ T9840] do_syscall_64+0xfa/0x3b0 [ 189.501076][ T9840] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.501105][ T9840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.501126][ T9840] ? clear_bhb_loop+0x60/0xb0 [ 189.501156][ T9840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.501175][ T9840] RIP: 0033:0x7f44d278d97f [ 189.501192][ T9840] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 189.501208][ T9840] RSP: 002b:00007f44d3654000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 189.501228][ T9840] RAX: ffffffffffffffda RBX: 00007f44d29e5fa0 RCX: 00007f44d278d97f [ 189.501243][ T9840] RDX: 000000000000004e RSI: 0000200000000600 RDI: 00000000000000c8 [ 189.501255][ T9840] RBP: 00007f44d3654090 R08: 0000000000000000 R09: 0000000000000000 [ 189.501266][ T9840] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 189.501278][ T9840] R13: 00007f44d29e6038 R14: 00007f44d29e5fa0 R15: 00007ffc0357a148 [ 189.501310][ T9840] [ 189.807174][ T9835] bridge_slave_0: left promiscuous mode [ 189.813920][ T9835] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.917285][ T9835] bridge_slave_1: left allmulticast mode [ 189.927993][ T9847] netlink: 260 bytes leftover after parsing attributes in process `syz.0.909'. [ 189.949282][ T9835] bridge_slave_1: left promiscuous mode [ 189.955854][ T9835] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.019810][ T9835] bond0: (slave bond_slave_0): Releasing backup interface [ 190.045210][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 190.065775][ T9835] bond0: (slave bond_slave_1): Releasing backup interface [ 190.082467][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'. [ 190.094994][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 190.140604][ T9835] team0: Port device team_slave_0 removed [ 190.181259][ T9835] team0: Port device team_slave_1 removed [ 190.193610][ T9835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.201088][ T9835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.212113][ T9835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.220679][ T9835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.229750][ T9835] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.247052][ T6241] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 190.258370][ T6241] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 190.282967][ T1106] tipc: Resetting bearer [ 190.491344][ T6241] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 190.504787][ T6241] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 191.200652][ T9899] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.923'. [ 191.342315][ T9903] lo speed is unknown, defaulting to 1000 [ 191.377225][ T9912] netlink: 68 bytes leftover after parsing attributes in process `syz.1.928'. [ 191.738775][ T9921] FAULT_INJECTION: forcing a failure. [ 191.738775][ T9921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.763412][ T9921] CPU: 0 UID: 0 PID: 9921 Comm: syz.3.931 Not tainted syzkaller #0 PREEMPT(full) [ 191.763437][ T9921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.763448][ T9921] Call Trace: [ 191.763456][ T9921] [ 191.763464][ T9921] dump_stack_lvl+0x189/0x250 [ 191.763493][ T9921] ? __pfx____ratelimit+0x10/0x10 [ 191.763521][ T9921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.763542][ T9921] ? __pfx__printk+0x10/0x10 [ 191.763588][ T9921] should_fail_ex+0x414/0x560 [ 191.763616][ T9921] _copy_to_user+0x31/0xb0 [ 191.763640][ T9921] simple_read_from_buffer+0xe1/0x170 [ 191.763670][ T9921] proc_fail_nth_read+0x1b3/0x220 [ 191.763703][ T9921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.763723][ T9921] ? rw_verify_area+0x2a6/0x4d0 [ 191.763743][ T9921] ? __lock_acquire+0xab9/0xd20 [ 191.763759][ T9921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 191.763780][ T9921] vfs_read+0x1fd/0xa30 [ 191.763799][ T9921] ? fdget_pos+0x247/0x320 [ 191.763829][ T9921] ? __pfx___mutex_lock+0x10/0x10 [ 191.763848][ T9921] ? __pfx_vfs_read+0x10/0x10 [ 191.763870][ T9921] ? __fget_files+0x2a/0x420 [ 191.763896][ T9921] ? __fget_files+0x3a0/0x420 [ 191.763918][ T9921] ? __fget_files+0x2a/0x420 [ 191.763951][ T9921] ksys_read+0x145/0x250 [ 191.763976][ T9921] ? __pfx_ksys_read+0x10/0x10 [ 191.763994][ T9921] ? rcu_is_watching+0x15/0xb0 [ 191.764019][ T9921] ? do_syscall_64+0xbe/0x3b0 [ 191.764042][ T9921] do_syscall_64+0xfa/0x3b0 [ 191.764060][ T9921] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.764085][ T9921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.764101][ T9921] ? clear_bhb_loop+0x60/0xb0 [ 191.764124][ T9921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.764139][ T9921] RIP: 0033:0x7f2e6e78d8dc [ 191.764155][ T9921] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 191.764171][ T9921] RSP: 002b:00007f2e6f563030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.764190][ T9921] RAX: ffffffffffffffda RBX: 00007f2e6e9e5fa0 RCX: 00007f2e6e78d8dc [ 191.764202][ T9921] RDX: 000000000000000f RSI: 00007f2e6f5630a0 RDI: 0000000000000008 [ 191.764212][ T9921] RBP: 00007f2e6f563090 R08: 0000000000000000 R09: 0000000000000000 [ 191.764222][ T9921] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000001 [ 191.764233][ T9921] R13: 00007f2e6e9e6038 R14: 00007f2e6e9e5fa0 R15: 00007fff8f2bc028 [ 191.764263][ T9921] [ 192.658393][ T9943] lo speed is unknown, defaulting to 1000 [ 192.693714][ T9949] lo speed is unknown, defaulting to 1000 [ 193.019617][ T9979] __nla_validate_parse: 8 callbacks suppressed [ 193.019636][ T9979] netlink: 48 bytes leftover after parsing attributes in process `syz.4.947'. [ 193.267081][ T9994] netlink: 'syz.4.952': attribute type 8 has an invalid length. [ 193.278120][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.952'. [ 193.353807][ T9991] lo speed is unknown, defaulting to 1000 [ 193.885421][T10021] netlink: 48 bytes leftover after parsing attributes in process `syz.2.958'. [ 193.904540][T10009] bond2 (unregistering): Released all slaves [ 194.159703][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.269558][T10033] netlink: 'syz.3.964': attribute type 7 has an invalid length. [ 194.294228][T10033] netlink: 'syz.3.964': attribute type 8 has an invalid length. [ 194.425371][T10041] vlan3: entered promiscuous mode [ 194.444031][T10041] erspan0: entered promiscuous mode [ 194.610051][T10049] lo speed is unknown, defaulting to 1000 [ 194.817519][T10070] sctp: [Deprecated]: syz.1.973 (pid 10070) Use of int in max_burst socket option. [ 194.817519][T10070] Use struct sctp_assoc_value instead [ 195.182706][T10082] tipc: Enabling of bearer rejected, failed to enable media [ 195.204419][T10082] netlink: 16 bytes leftover after parsing attributes in process `syz.1.977'. [ 195.752938][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 195.820782][T10118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.986'. [ 195.946408][T10118] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.018658][T10127] lo speed is unknown, defaulting to 1000 [ 196.056037][T10118] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.151531][T10118] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.202266][T10145] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 196.236550][T10118] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.340459][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.992'. [ 196.363718][T10147] geneve2: entered promiscuous mode [ 196.370424][ T6241] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.387770][ T6241] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.424839][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.448910][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.458537][T10149] netlink: 56 bytes leftover after parsing attributes in process `syz.4.993'. [ 196.476344][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.993'. [ 196.504987][T10149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.993'. [ 196.619179][T10153] tipc: Enabled bearer , priority 0 [ 196.628753][T10153] syzkaller0: entered promiscuous mode [ 196.636555][T10153] syzkaller0: entered allmulticast mode [ 196.683479][T10153] tipc: Resetting bearer [ 196.744338][T10152] tipc: Resetting bearer [ 196.823310][T10152] tipc: Disabling bearer [ 196.894867][T10164] bridge0: port 3(erspan0) entered blocking state [ 196.901713][T10164] bridge0: port 3(erspan0) entered disabled state [ 196.923778][T10164] erspan0: entered allmulticast mode [ 196.954717][T10171] erspan0: left allmulticast mode [ 196.961208][T10171] bridge0: port 3(erspan0) entered disabled state [ 197.069532][T10167] batadv_slave_1: entered promiscuous mode [ 197.153216][T10167] batadv_slave_1: left promiscuous mode [ 197.400030][T10188] syzkaller1: entered promiscuous mode [ 197.418097][T10188] syzkaller1: entered allmulticast mode [ 197.475169][T10190] tipc: Started in network mode [ 197.480350][T10190] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 197.488256][T10190] tipc: Enabled bearer , priority 10 [ 197.886898][T10207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.925534][T10213] tipc: Enabling of bearer rejected, failed to enable media [ 198.049371][T10217] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.150043][T10216] bond0: (slave bond_slave_0): Releasing backup interface [ 198.193833][T10216] bond0: (slave bond_slave_1): Releasing backup interface [ 198.245389][T10216] team0: Port device team_slave_1 removed [ 198.252217][T10216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.274481][T10216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.291326][T10216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.303130][T10216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.328240][T10216] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.348348][ T1207] lo speed is unknown, defaulting to 1000 [ 198.384335][T10228] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 198.563835][T10239] netlink: 'syz.2.1021': attribute type 3 has an invalid length. [ 198.595601][T10239] netlink: 'syz.2.1021': attribute type 1 has an invalid length. [ 198.605006][ T5931] tipc: Node number set to 11578026 [ 198.616611][T10239] __nla_validate_parse: 6 callbacks suppressed [ 198.616627][T10239] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1021'. [ 198.638452][T10239] NCSI netlink: No device for ifindex 0 [ 198.761622][T10241] lo speed is unknown, defaulting to 1000 [ 199.528959][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 199.549100][T10267] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1028'. [ 199.793620][T10277] lo speed is unknown, defaulting to 1000 [ 199.834666][T10276] lo speed is unknown, defaulting to 1000 [ 199.878946][T10283] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 199.909379][T10282] lo speed is unknown, defaulting to 1000 [ 200.037851][T10285] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 200.049540][T10285] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 200.230543][T10283] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 200.252067][T10289] gretap1: entered promiscuous mode [ 200.259731][T10289] gretap1: entered allmulticast mode [ 200.271808][T10289] bond5: (slave gretap1): making interface the new active one [ 200.281888][T10289] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 200.378484][T10292] netlink: 'syz.1.1035': attribute type 16 has an invalid length. [ 200.463068][T10292] netlink: 'syz.1.1035': attribute type 17 has an invalid length. [ 201.038862][T10292] tipc: Resetting bearer [ 201.355085][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 201.361185][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 201.368148][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 201.639180][ T3524] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.654161][ T3524] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 201.686988][ T3524] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.713542][ T3524] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 201.811152][ T3524] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.829980][ T3524] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 201.848380][T10305] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 201.871792][ T3524] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.893487][ T3524] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 202.041549][T10315] FAULT_INJECTION: forcing a failure. [ 202.041549][T10315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.065465][T10315] CPU: 1 UID: 0 PID: 10315 Comm: syz.0.1042 Not tainted syzkaller #0 PREEMPT(full) [ 202.065490][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.065500][T10315] Call Trace: [ 202.065508][T10315] [ 202.065516][T10315] dump_stack_lvl+0x189/0x250 [ 202.065544][T10315] ? __pfx____ratelimit+0x10/0x10 [ 202.065574][T10315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.065597][T10315] ? __pfx__printk+0x10/0x10 [ 202.065641][T10315] should_fail_ex+0x414/0x560 [ 202.065674][T10315] _copy_to_user+0x31/0xb0 [ 202.065700][T10315] simple_read_from_buffer+0xe1/0x170 [ 202.065730][T10315] proc_fail_nth_read+0x1b3/0x220 [ 202.065753][T10315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.065777][T10315] ? rw_verify_area+0x2a6/0x4d0 [ 202.065798][T10315] ? __lock_acquire+0xab9/0xd20 [ 202.065814][T10315] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 202.065836][T10315] vfs_read+0x1fd/0xa30 [ 202.065857][T10315] ? fdget_pos+0x247/0x320 [ 202.065887][T10315] ? __pfx___mutex_lock+0x10/0x10 [ 202.065908][T10315] ? __pfx_vfs_read+0x10/0x10 [ 202.065933][T10315] ? __fget_files+0x2a/0x420 [ 202.065964][T10315] ? __fget_files+0x3a0/0x420 [ 202.065994][T10315] ? __fget_files+0x2a/0x420 [ 202.066030][T10315] ksys_read+0x145/0x250 [ 202.066056][T10315] ? __pfx_ksys_read+0x10/0x10 [ 202.066075][T10315] ? rcu_is_watching+0x15/0xb0 [ 202.066104][T10315] ? do_syscall_64+0xbe/0x3b0 [ 202.066128][T10315] do_syscall_64+0xfa/0x3b0 [ 202.066145][T10315] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.066174][T10315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.066193][T10315] ? clear_bhb_loop+0x60/0xb0 [ 202.066216][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.066234][T10315] RIP: 0033:0x7f44d278d8dc [ 202.066251][T10315] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 202.066267][T10315] RSP: 002b:00007f44d3654030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 202.066287][T10315] RAX: ffffffffffffffda RBX: 00007f44d29e5fa0 RCX: 00007f44d278d8dc [ 202.066301][T10315] RDX: 000000000000000f RSI: 00007f44d36540a0 RDI: 0000000000000004 [ 202.066313][T10315] RBP: 00007f44d3654090 R08: 0000000000000000 R09: 0000000000000010 [ 202.066325][T10315] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 202.066336][T10315] R13: 00007f44d29e6038 R14: 00007f44d29e5fa0 R15: 00007ffc0357a148 [ 202.066369][T10315] [ 202.630165][T10332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 202.685797][T10335] netlink: 'syz.1.1047': attribute type 21 has an invalid length. [ 202.699666][T10326] lo speed is unknown, defaulting to 1000 [ 202.704147][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 202.777097][T10332] netlink: 'syz.1.1047': attribute type 11 has an invalid length. [ 202.812946][T10332] netlink: 'syz.1.1047': attribute type 4 has an invalid length. [ 202.826446][T10332] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1047'. [ 203.288565][T10351] lo speed is unknown, defaulting to 1000 [ 203.400783][T10352] lo speed is unknown, defaulting to 1000 [ 203.914684][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 204.016623][T10376] lo speed is unknown, defaulting to 1000 [ 204.040666][T10377] raw_sendmsg: syz.2.1059 forgot to set AF_INET. Fix it! [ 204.053484][T10379] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1058'. [ 204.093439][T10379] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1058'. [ 204.380202][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 205.112245][T10399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.149449][T10384] lo speed is unknown, defaulting to 1000 [ 205.317810][T10389] lo speed is unknown, defaulting to 1000 [ 205.881919][T10432] team0 (unregistering): left allmulticast mode [ 205.888452][T10432] team_slave_0: left allmulticast mode [ 205.894605][T10432] team_slave_1: left allmulticast mode [ 205.900505][T10432] team0 (unregistering): left promiscuous mode [ 205.907563][T10432] team_slave_0: left promiscuous mode [ 205.923589][T10432] team_slave_1: left promiscuous mode [ 205.967312][T10432] team0 (unregistering): Port device team_slave_0 removed [ 205.985836][T10432] team0 (unregistering): Port device team_slave_1 removed [ 206.043776][T10454] tipc: Enabled bearer , priority 0 [ 206.073653][T10455] syzkaller0: entered promiscuous mode [ 206.079143][T10455] syzkaller0: entered allmulticast mode [ 206.196762][T10452] tipc: Resetting bearer [ 206.242816][T10450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 206.290034][T10469] netlink: 'syz.4.1074': attribute type 10 has an invalid length. [ 206.298020][T10469] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1074'. [ 206.319094][T10449] tipc: Resetting bearer [ 206.351716][T10449] tipc: Disabling bearer [ 206.386120][T10469] batadv_slave_1: entered promiscuous mode [ 206.577026][ T30] audit: type=1107 audit(1759475247.359:6): pid=10476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';ò‡sYcÂ-E™Ã|©a•€7âlç' [ 206.635091][T10481] netlink: 'syz.0.1077': attribute type 6 has an invalid length. [ 206.649851][T10481] netlink: 1876 bytes leftover after parsing attributes in process `syz.0.1077'. [ 206.777258][T10484] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1078'. [ 206.950463][T10491] syzkaller1: entered promiscuous mode [ 206.970580][T10491] syzkaller1: entered allmulticast mode [ 206.971615][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 207.061039][T10466] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 207.250774][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 207.314837][T10515] xfrm2: entered promiscuous mode [ 207.339044][T10515] xfrm2: entered allmulticast mode [ 207.339671][T10521] netlink: 'syz.3.1089': attribute type 23 has an invalid length. [ 207.505576][T10530] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1092'. [ 207.836014][T10551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1096'. [ 208.313773][ T5157] Bluetooth: hci4: command 0x0405 tx timeout [ 208.386546][T10580] macsec0: entered promiscuous mode [ 208.391786][T10580] bridge0: entered promiscuous mode [ 208.399185][T10580] bridge0: port 1(macsec0) entered blocking state [ 208.406898][T10580] bridge0: port 1(macsec0) entered disabled state [ 208.414167][T10580] macsec0: entered allmulticast mode [ 208.419462][T10580] bridge0: entered allmulticast mode [ 208.442214][T10580] macsec0: left allmulticast mode [ 208.449346][T10580] bridge0: left allmulticast mode [ 208.459638][T10580] bridge0: left promiscuous mode [ 208.810227][T10603] netlink: 'syz.1.1110': attribute type 13 has an invalid length. [ 209.689597][T10603] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 209.715005][T10593] lo speed is unknown, defaulting to 1000 [ 209.876836][T10628] __nla_validate_parse: 3 callbacks suppressed [ 209.876855][T10628] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1114'. [ 209.888844][T10610] lo speed is unknown, defaulting to 1000 [ 209.894359][T10628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1114'. [ 209.929870][T10630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1115'. [ 209.940630][T10630] netlink: 'syz.3.1115': attribute type 17 has an invalid length. [ 209.975406][T10630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.443450][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1118'. [ 210.466501][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1118'. [ 210.510617][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1118'. [ 210.523352][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1118'. [ 210.576568][T10650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1118'. [ 210.586269][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1118'. [ 210.586470][T10648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1118'. [ 210.777894][T10659] netlink: 'syz.3.1122': attribute type 12 has an invalid length. [ 210.909467][T10662] lo speed is unknown, defaulting to 1000 [ 211.947328][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.955849][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.977635][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.002940][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.016518][T10703] netlink: 'syz.1.1130': attribute type 1 has an invalid length. [ 212.236236][T10716] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 212.880817][T10759] batadv_slave_1: left promiscuous mode [ 212.911554][T10759] veth3: left promiscuous mode [ 212.917028][T10759] geneve2: left promiscuous mode [ 212.922890][T10759] gretap1: left promiscuous mode [ 212.991841][T10768] netlink: 'syz.1.1145': attribute type 9 has an invalid length. [ 213.168588][T10775] netlink: 'syz.1.1149': attribute type 13 has an invalid length. [ 213.179472][T10775] netlink: 'syz.1.1149': attribute type 17 has an invalid length. [ 213.220895][T10775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.236814][T10775] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.245276][T10775] tipc: Resetting bearer [ 213.255250][T10775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.317786][T10776] lo speed is unknown, defaulting to 1000 [ 213.427371][T10780] netlink: 'syz.4.1150': attribute type 1 has an invalid length. [ 213.499529][ T9284] IPVS: starting estimator thread 0... [ 213.603183][T10782] IPVS: using max 48 ests per chain, 115200 per kthread [ 255.596829][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.845632][T10784] bond5: Removing last ns target with arp_interval on [ 256.848414][T10797] __nla_validate_parse: 71 callbacks suppressed [ 256.848434][T10797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1152'. [ 256.883400][T10798] netlink: 'syz.2.1156': attribute type 33 has an invalid length. [ 256.883849][T10796] 8021q: VLANs not supported on caif0 [ 256.891399][T10798] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1156'. [ 256.969293][T10797] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1152'. [ 257.620347][T10839] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 257.704029][T10842] syzkaller1: entered promiscuous mode [ 257.709526][T10842] syzkaller1: entered allmulticast mode [ 257.914248][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1168'. [ 257.949545][T10852] tipc: Enabling of bearer rejected, already enabled [ 257.963185][T10852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1167'. [ 257.972157][T10852] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1167'. [ 258.298343][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 258.345461][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1173'. [ 258.765259][T10906] netlink: 'syz.0.1180': attribute type 30 has an invalid length. [ 259.035222][T10901] netlink: 'syz.1.1176': attribute type 1 has an invalid length. [ 259.043065][T10901] netlink: 17231 bytes leftover after parsing attributes in process `syz.1.1176'. [ 259.189095][T10912] dvmrp8: entered allmulticast mode [ 259.438905][T10911] dvmrp8: left allmulticast mode [ 259.587996][T10916] lo speed is unknown, defaulting to 1000 [ 259.744299][T10935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1187'. [ 259.795071][T10933] netlink: 'syz.3.1189': attribute type 10 has an invalid length. [ 259.954266][T10933] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 259.980313][T10933] team0: Failed to send options change via netlink (err -105) [ 260.005716][T10933] team0: Port device dummy0 added [ 260.428931][T10966] netlink: zone id is out of range [ 260.444430][T10966] netlink: zone id is out of range [ 260.459884][T10966] netlink: zone id is out of range [ 260.485997][T10966] netlink: zone id is out of range [ 260.491140][T10966] netlink: zone id is out of range [ 260.521637][T10966] netlink: zone id is out of range [ 260.550258][T10966] netlink: zone id is out of range [ 260.652627][T10966] netlink: zone id is out of range [ 260.672951][T10966] netlink: zone id is out of range [ 260.721528][T10966] netlink: zone id is out of range [ 260.902739][T10959] nbd3: detected capacity change from 0 to 63 [ 260.914494][ T5157] block nbd3: Receive control failed (result -32) [ 260.923759][T10801] block nbd3: Dead connection, failed to find a fallback [ 260.930861][T10801] block nbd3: shutting down sockets [ 260.959406][T10801] blk_print_req_error: 27 callbacks suppressed [ 260.959427][T10801] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.063009][T10801] buffer_io_error: 27 callbacks suppressed [ 261.063030][T10801] Buffer I/O error on dev nbd3, logical block 0, async page read [ 261.133211][T10801] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.142290][T10801] Buffer I/O error on dev nbd3, logical block 1, async page read [ 261.212847][T10801] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.221917][T10801] Buffer I/O error on dev nbd3, logical block 2, async page read [ 261.293202][T10801] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.302273][T10801] Buffer I/O error on dev nbd3, logical block 3, async page read [ 261.363271][T10801] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.372358][T10801] Buffer I/O error on dev nbd3, logical block 0, async page read [ 261.421803][T10801] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.453081][T10801] Buffer I/O error on dev nbd3, logical block 1, async page read [ 261.465740][T10801] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.503041][T10801] Buffer I/O error on dev nbd3, logical block 2, async page read [ 261.519950][T10801] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.553059][T10801] Buffer I/O error on dev nbd3, logical block 3, async page read [ 261.554907][T10992] bridge0: port 3(erspan0) entered blocking state [ 261.560979][T10801] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.613134][T10992] bridge0: port 3(erspan0) entered disabled state [ 261.621307][T10801] Buffer I/O error on dev nbd3, logical block 0, async page read [ 261.630467][T10992] erspan0: entered allmulticast mode [ 261.646882][T10992] erspan0: entered promiscuous mode [ 261.648249][T10997] netlink: 'syz.0.1205': attribute type 1 has an invalid length. [ 261.664567][T10992] bridge0: port 3(erspan0) entered blocking state [ 261.671084][T10992] bridge0: port 3(erspan0) entered forwarding state [ 261.683616][T10801] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.709677][T10997] netlink: 'syz.0.1205': attribute type 2 has an invalid length. [ 261.720119][T10801] Buffer I/O error on dev nbd3, logical block 1, async page read [ 261.743986][T10801] ldm_validate_partition_table(): Disk read failed. [ 261.754420][T10801] Dev nbd3: unable to read RDB block 0 [ 261.762186][T10801] nbd3: unable to read partition table [ 261.784658][T10801] ldm_validate_partition_table(): Disk read failed. [ 261.807702][T10801] Dev nbd3: unable to read RDB block 0 [ 261.818144][T10801] nbd3: unable to read partition table [ 261.978580][T11000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.998302][T11000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.011730][T11000] bond0 (unregistering): Released all slaves [ 262.066574][T10981] lo speed is unknown, defaulting to 1000 [ 262.244901][T11021] __nla_validate_parse: 10 callbacks suppressed [ 262.244921][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1211'. [ 262.321061][T11021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1211'. [ 262.391705][T11026] lo speed is unknown, defaulting to 1000 [ 262.549051][T11012] syzkaller0: entered promiscuous mode [ 262.564192][T11012] syzkaller0: entered allmulticast mode [ 262.716569][T11043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1217'. [ 262.916497][T11045] lo speed is unknown, defaulting to 1000 [ 262.993325][T11050] lo speed is unknown, defaulting to 1000 [ 263.099718][T11058] bond3: option arp_interval: invalid value (18446744073709551615) [ 263.110772][T11058] bond3: option arp_interval: allowed values 0 - 2147483647 [ 263.124094][T11058] bond3 (unregistering): Released all slaves [ 263.217832][T11064] syzkaller1: entered promiscuous mode [ 263.233536][T11064] syzkaller1: entered allmulticast mode [ 263.283366][T11064] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1219'. [ 263.327436][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1219'. [ 263.336904][T11064] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1219'. [ 263.348792][T11064] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1219'. [ 263.405948][T11041] mpoa:mpoad_close: () going down [ 263.688790][T11086] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1228'. [ 263.701220][T11082] lo speed is unknown, defaulting to 1000 [ 263.742027][T11084] batadv_slave_0: entered promiscuous mode [ 263.748657][T11084] batadv_slave_0: left allmulticast mode [ 263.758588][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1227'. [ 263.786511][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1227'. [ 263.951910][T11089] netlink: 'syz.3.1229': attribute type 4 has an invalid length. [ 264.335948][T11105] netlink: 'syz.2.1234': attribute type 1 has an invalid length. [ 264.574400][ T30] audit: type=1800 audit(1759475305.359:7): pid=11117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1238" name="memory.events" dev="tmpfs" ino=1200 res=0 errno=0 [ 264.610342][T11123] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 264.665686][T11117] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.701878][T11117] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.764778][T11117] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.797147][T11134] netlink: 'syz.3.1243': attribute type 3 has an invalid length. [ 264.815201][T11117] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.934810][T11117] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.951174][T11117] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.048611][T11117] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.059978][T11117] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.280056][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.298927][T11151] can: request_module (can-proto-3) failed. [ 265.305161][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.328817][ T6240] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.340398][ T6240] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.416188][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.425415][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.514936][ T6240] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.529040][ T6240] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.559276][T11167] FAULT_INJECTION: forcing a failure. [ 265.559276][T11167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.560590][T11167] [ 265.560598][T11167] ====================================================== [ 265.560605][T11167] WARNING: possible circular locking dependency detected [ 265.560618][T11167] syzkaller #0 Not tainted [ 265.560628][T11167] ------------------------------------------------------ [ 265.560635][T11167] syz.1.1255/11167 is trying to acquire lock: [ 265.560645][T11167] ffffffff8dd2e820 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 265.560698][T11167] [ 265.560698][T11167] but task is already holding lock: [ 265.560705][T11167] ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 265.560743][T11167] [ 265.560743][T11167] which lock already depends on the new lock. [ 265.560743][T11167] [ 265.560750][T11167] [ 265.560750][T11167] the existing dependency chain (in reverse order) is: [ 265.560758][T11167] [ 265.560758][T11167] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 265.560782][T11167] lock_acquire+0x120/0x360 [ 265.560797][T11167] _raw_spin_lock_nested+0x32/0x50 [ 265.560825][T11167] raw_spin_rq_lock_nested+0x2a/0x140 [ 265.560841][T11167] task_rq_lock+0xbc/0x470 [ 265.560857][T11167] cgroup_move_task+0x92/0x2a0 [ 265.560876][T11167] css_set_move_task+0x658/0x9e0 [ 265.560898][T11167] cgroup_post_fork+0x1ef/0x790 [ 265.560919][T11167] copy_process+0x3862/0x3c00 [ 265.560938][T11167] kernel_clone+0x21e/0x840 [ 265.560957][T11167] user_mode_thread+0xdd/0x140 [ 265.560977][T11167] rest_init+0x23/0x300 [ 265.560997][T11167] start_kernel+0x3ae/0x410 [ 265.561018][T11167] x86_64_start_reservations+0x24/0x30 [ 265.561036][T11167] x86_64_start_kernel+0x143/0x1c0 [ 265.561058][T11167] common_startup_64+0x13e/0x147 [ 265.561082][T11167] [ 265.561082][T11167] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 265.561106][T11167] lock_acquire+0x120/0x360 [ 265.561119][T11167] _raw_spin_lock_irqsave+0xa7/0xf0 [ 265.561141][T11167] try_to_wake_up+0x67/0x12b0 [ 265.561162][T11167] create_worker+0x503/0x720 [ 265.561186][T11167] workqueue_init+0x3f0/0x6a0 [ 265.561205][T11167] kernel_init_freeable+0x302/0x4b0 [ 265.561229][T11167] kernel_init+0x1d/0x1d0 [ 265.561249][T11167] ret_from_fork+0x436/0x7d0 [ 265.561267][T11167] ret_from_fork_asm+0x1a/0x30 [ 265.561291][T11167] [ 265.561291][T11167] -> #3 (&pool->lock){-.-.}-{2:2}: [ 265.561315][T11167] lock_acquire+0x120/0x360 [ 265.561330][T11167] _raw_spin_lock+0x2e/0x40 [ 265.561353][T11167] __queue_work+0x809/0xfb0 [ 265.561372][T11167] queue_work_on+0x181/0x270 [ 265.561390][T11167] rpm_suspend+0xe54/0x1720 [ 265.561413][T11167] __pm_runtime_idle+0x12f/0x1a0 [ 265.561436][T11167] __device_attach+0x342/0x400 [ 265.561461][T11167] bus_probe_device+0x185/0x260 [ 265.561479][T11167] device_add+0x7b6/0xb50 [ 265.561501][T11167] serial_base_port_add+0x2e3/0x410 [ 265.561523][T11167] serial_core_register_port+0x369/0x27c0 [ 265.561550][T11167] serial8250_register_8250_port+0x16db/0x2050 [ 265.561577][T11167] serial_pnp_probe+0x527/0x790 [ 265.561602][T11167] pnp_device_probe+0x30b/0x4c0 [ 265.561628][T11167] really_probe+0x26a/0x9e0 [ 265.561652][T11167] __driver_probe_device+0x18c/0x2f0 [ 265.561676][T11167] driver_probe_device+0x4f/0x430 [ 265.561702][T11167] __driver_attach+0x452/0x700 [ 265.561726][T11167] bus_for_each_dev+0x230/0x2b0 [ 265.561745][T11167] bus_add_driver+0x345/0x640 [ 265.561764][T11167] driver_register+0x23a/0x320 [ 265.561780][T11167] serial8250_init+0x8f/0x160 [ 265.561797][T11167] do_one_initcall+0x233/0x820 [ 265.561819][T11167] do_initcall_level+0x104/0x190 [ 265.561843][T11167] do_initcalls+0x59/0xa0 [ 265.561866][T11167] kernel_init_freeable+0x334/0x4b0 [ 265.561890][T11167] kernel_init+0x1d/0x1d0 [ 265.561910][T11167] ret_from_fork+0x436/0x7d0 [ 265.561927][T11167] ret_from_fork_asm+0x1a/0x30 [ 265.561951][T11167] [ 265.561951][T11167] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 265.561977][T11167] lock_acquire+0x120/0x360 [ 265.561991][T11167] _raw_spin_lock_irqsave+0xa7/0xf0 [ 265.562016][T11167] __pm_runtime_resume+0x10f/0x180 [ 265.562040][T11167] __uart_start+0x171/0x460 [ 265.562061][T11167] uart_write+0xdc/0x130 [ 265.562075][T11167] n_tty_write+0xd27/0x1200 [ 265.562096][T11167] file_tty_write+0x554/0xa20 [ 265.562123][T11167] vfs_write+0x5c6/0xb30 [ 265.562142][T11167] ksys_write+0x145/0x250 [ 265.562161][T11167] do_syscall_64+0xfa/0x3b0 [ 265.562179][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.562196][T11167] [ 265.562196][T11167] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 265.562219][T11167] lock_acquire+0x120/0x360 [ 265.562233][T11167] _raw_spin_lock_irqsave+0xa7/0xf0 [ 265.562256][T11167] serial8250_console_write+0x17e/0x1ba0 [ 265.562275][T11167] console_flush_all+0x728/0xc40 [ 265.562296][T11167] console_unlock+0xc4/0x270 [ 265.562315][T11167] vprintk_emit+0x5b7/0x7a0 [ 265.562334][T11167] _printk+0xcf/0x120 [ 265.562356][T11167] register_console+0xa8b/0xf90 [ 265.562378][T11167] univ8250_console_init+0x3a/0x70 [ 265.562393][T11167] console_init+0x10e/0x430 [ 265.562407][T11167] start_kernel+0x254/0x410 [ 265.562427][T11167] x86_64_start_reservations+0x24/0x30 [ 265.562441][T11167] x86_64_start_kernel+0x143/0x1c0 [ 265.562457][T11167] common_startup_64+0x13e/0x147 [ 265.562479][T11167] [ 265.562479][T11167] -> #0 (console_owner){-.-.}-{0:0}: [ 265.562502][T11167] validate_chain+0xb9b/0x2140 [ 265.562524][T11167] __lock_acquire+0xab9/0xd20 [ 265.562536][T11167] lock_acquire+0x120/0x360 [ 265.562549][T11167] console_flush_all+0x6d2/0xc40 [ 265.562569][T11167] console_unlock+0xc4/0x270 [ 265.562588][T11167] vprintk_emit+0x5b7/0x7a0 [ 265.562606][T11167] _printk+0xcf/0x120 [ 265.562629][T11167] should_fail_ex+0x3f5/0x560 [ 265.562651][T11167] strncpy_from_user+0x36/0x290 [ 265.562671][T11167] strncpy_from_user_nofault+0x72/0x150 [ 265.562687][T11167] bpf_probe_read_compat_str+0xe2/0x180 [ 265.562707][T11167] bpf_prog_90df569eec4aaf11+0x70/0x76 [ 265.562720][T11167] bpf_trace_run2+0x284/0x4b0 [ 265.562740][T11167] __bpf_trace_tlb_flush+0xf5/0x150 [ 265.562758][T11167] trace_tlb_flush+0x115/0x140 [ 265.562781][T11167] switch_mm_irqs_off+0x53e/0x7a0 [ 265.562803][T11167] __schedule+0x110e/0x4cc0 [ 265.562825][T11167] preempt_schedule_common+0x83/0xd0 [ 265.562846][T11167] preempt_schedule+0xae/0xc0 [ 265.562867][T11167] preempt_schedule_thunk+0x16/0x30 [ 265.562882][T11167] __local_bh_enable_ip+0x13e/0x1c0 [ 265.562900][T11167] __dev_queue_xmit+0x1d79/0x3b50 [ 265.562918][T11167] __netlink_deliver_tap+0x5ad/0x850 [ 265.562935][T11167] netlink_deliver_tap+0x19c/0x1b0 [ 265.562950][T11167] netlink_sendskb+0x68/0x140 [ 265.562974][T11167] netlink_unicast+0x397/0x9e0 [ 265.562997][T11167] netlink_rcv_skb+0x28c/0x470 [ 265.563013][T11167] netlink_unicast+0x82c/0x9e0 [ 265.563033][T11167] netlink_sendmsg+0x805/0xb30 [ 265.563055][T11167] __sock_sendmsg+0x21c/0x270 [ 265.563079][T11167] ____sys_sendmsg+0x52d/0x830 [ 265.563094][T11167] ___sys_sendmsg+0x21f/0x2a0 [ 265.563112][T11167] __sys_sendmmsg+0x227/0x430 [ 265.563129][T11167] __x64_sys_sendmmsg+0xa0/0xc0 [ 265.563146][T11167] do_syscall_64+0xfa/0x3b0 [ 265.563161][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.563177][T11167] [ 265.563177][T11167] other info that might help us debug this: [ 265.563177][T11167] [ 265.563183][T11167] Chain exists of: [ 265.563183][T11167] console_owner --> &p->pi_lock --> &rq->__lock [ 265.563183][T11167] [ 265.563211][T11167] Possible unsafe locking scenario: [ 265.563211][T11167] [ 265.563217][T11167] CPU0 CPU1 [ 265.563222][T11167] ---- ---- [ 265.563227][T11167] lock(&rq->__lock); [ 265.563239][T11167] lock(&p->pi_lock); [ 265.563253][T11167] lock(&rq->__lock); [ 265.563267][T11167] lock(console_owner); [ 265.563277][T11167] [ 265.563277][T11167] *** DEADLOCK *** [ 265.563277][T11167] [ 265.563281][T11167] 5 locks held by syz.1.1255/11167: [ 265.563292][T11167] #0: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: netlink_deliver_tap+0x2e/0x1b0 [ 265.563333][T11167] #1: ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 265.563374][T11167] #2: ffffffff8dd3a860 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 265.563418][T11167] #3: ffffffff8dd2e880 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 265.563460][T11167] #4: ffffffff8dc16150 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 265.563501][T11167] [ 265.563501][T11167] stack backtrace: [ 265.563510][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.1.1255 Not tainted syzkaller #0 PREEMPT(full) [ 265.563527][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 265.563546][T11167] Call Trace: [ 265.563552][T11167] [ 265.563558][T11167] dump_stack_lvl+0x189/0x250 [ 265.563583][T11167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.563605][T11167] ? __pfx__printk+0x10/0x10 [ 265.563630][T11167] ? print_lock_name+0xde/0x100 [ 265.563658][T11167] print_circular_bug+0x2ee/0x310 [ 265.563682][T11167] check_noncircular+0x134/0x160 [ 265.563708][T11167] validate_chain+0xb9b/0x2140 [ 265.563735][T11167] __lock_acquire+0xab9/0xd20 [ 265.563753][T11167] ? console_flush_all+0x13a/0xc40 [ 265.563774][T11167] lock_acquire+0x120/0x360 [ 265.563789][T11167] ? console_flush_all+0x13a/0xc40 [ 265.563815][T11167] ? do_raw_spin_unlock+0x122/0x240 [ 265.563839][T11167] ? console_flush_all+0x13a/0xc40 [ 265.563863][T11167] console_flush_all+0x6d2/0xc40 [ 265.563885][T11167] ? console_flush_all+0x13a/0xc40 [ 265.563908][T11167] ? console_flush_all+0x13a/0xc40 [ 265.563931][T11167] ? __pfx_console_flush_all+0x10/0x10 [ 265.563957][T11167] ? is_printk_cpu_sync_owner+0x32/0x40 [ 265.563982][T11167] console_unlock+0xc4/0x270 [ 265.564003][T11167] ? __pfx_console_unlock+0x10/0x10 [ 265.564026][T11167] ? is_printk_cpu_sync_owner+0x32/0x40 [ 265.564060][T11167] vprintk_emit+0x5b7/0x7a0 [ 265.564081][T11167] ? __pfx_vprintk_emit+0x10/0x10 [ 265.564100][T11167] ? trace_event_buffer_commit+0x264/0x7f0 [ 265.564129][T11167] _printk+0xcf/0x120 [ 265.564152][T11167] ? __pfx____ratelimit+0x10/0x10 [ 265.564180][T11167] ? __pfx__printk+0x10/0x10 [ 265.564207][T11167] ? rcu_is_watching+0x15/0xb0 [ 265.564227][T11167] ? trace_bpf_trace_printk+0x7a/0x1d0 [ 265.564244][T11167] ? bpf_bprintf_cleanup+0x7a/0xa0 [ 265.564270][T11167] should_fail_ex+0x3f5/0x560 [ 265.564297][T11167] strncpy_from_user+0x36/0x290 [ 265.564323][T11167] strncpy_from_user_nofault+0x72/0x150 [ 265.564342][T11167] bpf_probe_read_compat_str+0xe2/0x180 [ 265.564365][T11167] bpf_prog_90df569eec4aaf11+0x70/0x76 [ 265.564382][T11167] ? bpf_trace_run2+0x186/0x4b0 [ 265.564406][T11167] ? __pfx___cant_migrate+0x10/0x10 [ 265.564432][T11167] bpf_trace_run2+0x284/0x4b0 [ 265.564459][T11167] ? bpf_trace_run2+0x186/0x4b0 [ 265.564486][T11167] ? __pfx_bpf_trace_run2+0x10/0x10 [ 265.564515][T11167] ? __pfx_css_rstat_updated+0x10/0x10 [ 265.564536][T11167] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 265.564561][T11167] __bpf_trace_tlb_flush+0xf5/0x150 [ 265.564582][T11167] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 265.564608][T11167] ? psi_group_change+0xab8/0x1050 [ 265.564626][T11167] trace_tlb_flush+0x115/0x140 [ 265.564649][T11167] switch_mm_irqs_off+0x53e/0x7a0 [ 265.564679][T11167] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 265.564704][T11167] ? psi_task_switch+0x4e3/0x880 [ 265.564729][T11167] __schedule+0x110e/0x4cc0 [ 265.564758][T11167] ? dev_hard_start_xmit+0x2d7/0x830 [ 265.564782][T11167] ? netlink_deliver_tap+0x19c/0x1b0 [ 265.564800][T11167] ? netlink_rcv_skb+0x28c/0x470 [ 265.564816][T11167] ? netlink_unicast+0x82c/0x9e0 [ 265.564843][T11167] ? __sock_sendmsg+0x21c/0x270 [ 265.564868][T11167] ? ____sys_sendmsg+0x52d/0x830 [ 265.564888][T11167] ? ___sys_sendmsg+0x21f/0x2a0 [ 265.564908][T11167] ? __sys_sendmmsg+0x227/0x430 [ 265.564929][T11167] ? do_syscall_64+0xfa/0x3b0 [ 265.564947][T11167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.564971][T11167] ? __pfx___schedule+0x10/0x10 [ 265.565007][T11167] ? preempt_schedule+0xae/0xc0 [ 265.565033][T11167] ? __dev_queue_xmit+0x27b/0x3b50 [ 265.565069][T11167] preempt_schedule_common+0x83/0xd0 [ 265.565098][T11167] preempt_schedule+0xae/0xc0 [ 265.565125][T11167] ? __pfx_preempt_schedule+0x10/0x10 [ 265.565153][T11167] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 265.565175][T11167] preempt_schedule_thunk+0x16/0x30 [ 265.565196][T11167] __local_bh_enable_ip+0x13e/0x1c0 [ 265.565216][T11167] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 265.565239][T11167] ? __dev_queue_xmit+0x27b/0x3b50 [ 265.565262][T11167] ? __dev_queue_xmit+0x27b/0x3b50 [ 265.565285][T11167] ? __dev_queue_xmit+0x27b/0x3b50 [ 265.565310][T11167] __dev_queue_xmit+0x1d79/0x3b50 [ 265.565339][T11167] ? __dev_queue_xmit+0x27b/0x3b50 [ 265.565363][T11167] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 265.565384][T11167] ? do_syscall_64+0xfa/0x3b0 [ 265.565402][T11167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.565427][T11167] ? __pfx___dev_queue_xmit+0x10/0x10 [ 265.565459][T11167] ? __copy_skb_header+0xa7/0x550 [ 265.565479][T11167] ? __asan_memcpy+0x40/0x70 [ 265.565506][T11167] ? skb_clone+0x246/0x3a0 [ 265.565528][T11167] __netlink_deliver_tap+0x5ad/0x850 [ 265.565552][T11167] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.565571][T11167] netlink_deliver_tap+0x19c/0x1b0 [ 265.565591][T11167] netlink_sendskb+0x68/0x140 [ 265.565616][T11167] netlink_unicast+0x397/0x9e0 [ 265.565641][T11167] ? __asan_memcpy+0x40/0x70 [ 265.565663][T11167] ? __pfx_netlink_unicast+0x10/0x10 [ 265.565691][T11167] netlink_rcv_skb+0x28c/0x470 [ 265.565707][T11167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.565724][T11167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.565746][T11167] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.565767][T11167] netlink_unicast+0x82c/0x9e0 [ 265.565796][T11167] ? __pfx_netlink_unicast+0x10/0x10 [ 265.565823][T11167] ? netlink_sendmsg+0x642/0xb30 [ 265.565841][T11167] ? skb_put+0x11b/0x210 [ 265.565862][T11167] netlink_sendmsg+0x805/0xb30 [ 265.565885][T11167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.565905][T11167] ? aa_sock_msg_perm+0xf1/0x1d0 [ 265.565931][T11167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.565959][T11167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.565978][T11167] __sock_sendmsg+0x21c/0x270 [ 265.566010][T11167] ____sys_sendmsg+0x52d/0x830 [ 265.566033][T11167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.566064][T11167] ? import_iovec+0x74/0xa0 [ 265.566087][T11167] ___sys_sendmsg+0x21f/0x2a0 [ 265.566110][T11167] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.566150][T11167] ? __fget_files+0x2a/0x420 [ 265.566174][T11167] ? __fget_files+0x3a0/0x420 [ 265.566204][T11167] __sys_sendmmsg+0x227/0x430 [ 265.566228][T11167] ? __pfx___sys_sendmmsg+0x10/0x10 [ 265.566248][T11167] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 265.566279][T11167] ? ksys_write+0x22a/0x250 [ 265.566302][T11167] ? __pfx_ksys_write+0x10/0x10 [ 265.566322][T11167] ? rcu_is_watching+0x15/0xb0 [ 265.566346][T11167] __x64_sys_sendmmsg+0xa0/0xc0 [ 265.566368][T11167] do_syscall_64+0xfa/0x3b0 [ 265.566387][T11167] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.566415][T11167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.566433][T11167] ? clear_bhb_loop+0x60/0xb0 [ 265.566453][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.566470][T11167] RIP: 0033:0x7f5b7a98eec9 [ 265.566485][T11167] Code: Unable to access opcode bytes at 0x7f5b7a98ee9f. [ 265.566495][T11167] RSP: 002b:00007f5b7b8a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 265.566514][T11167] RAX: ffffffffffffffda RBX: 00007f5b7abe5fa0 RCX: 00007f5b7a98eec9 [ 265.566528][T11167] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 265.566541][T11167] RBP: 00007f5b7b8a8090 R08: 0000000000000000 R09: 0000000000000000 [ 265.566552][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 265.566562][T11167] R13: 00007f5b7abe6038 R14: 00007f5b7abe5fa0 R15: 00007fff28c573c8 [ 265.566583][T11167] [ 267.135316][T11167] CPU: 0 UID: 0 PID: 11167 Comm: syz.1.1255 Not tainted syzkaller #0 PREEMPT(full) [ 267.135331][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 267.135338][T11167] Call Trace: [ 267.135345][T11167] [ 267.135352][T11167] dump_stack_lvl+0x189/0x250 [ 267.135369][T11167] ? __pfx____ratelimit+0x10/0x10 [ 267.135385][T11167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.135397][T11167] ? __pfx__printk+0x10/0x10 [ 267.135412][T11167] ? rcu_is_watching+0x15/0xb0 [ 267.135424][T11167] ? trace_bpf_trace_printk+0x7a/0x1d0 [ 267.135433][T11167] ? bpf_bprintf_cleanup+0x7a/0xa0 [ 267.135449][T11167] should_fail_ex+0x414/0x560 [ 267.135464][T11167] strncpy_from_user+0x36/0x290 [ 267.135478][T11167] strncpy_from_user_nofault+0x72/0x150 [ 267.135490][T11167] bpf_probe_read_compat_str+0xe2/0x180 [ 267.135503][T11167] bpf_prog_90df569eec4aaf11+0x70/0x76 [ 267.135513][T11167] ? bpf_trace_run2+0x186/0x4b0 [ 267.135526][T11167] ? __pfx___cant_migrate+0x10/0x10 [ 267.135543][T11167] bpf_trace_run2+0x284/0x4b0 [ 267.135556][T11167] ? bpf_trace_run2+0x186/0x4b0 [ 267.135569][T11167] ? __pfx_bpf_trace_run2+0x10/0x10 [ 267.135584][T11167] ? __pfx_css_rstat_updated+0x10/0x10 [ 267.135597][T11167] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 267.135610][T11167] __bpf_trace_tlb_flush+0xf5/0x150 [ 267.135624][T11167] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 267.135638][T11167] ? psi_group_change+0xab8/0x1050 [ 267.135650][T11167] trace_tlb_flush+0x115/0x140 [ 267.135665][T11167] switch_mm_irqs_off+0x53e/0x7a0 [ 267.135683][T11167] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 267.135696][T11167] ? psi_task_switch+0x4e3/0x880 [ 267.135709][T11167] __schedule+0x110e/0x4cc0 [ 267.135725][T11167] ? dev_hard_start_xmit+0x2d7/0x830 [ 267.135738][T11167] ? netlink_deliver_tap+0x19c/0x1b0 [ 267.135748][T11167] ? netlink_rcv_skb+0x28c/0x470 [ 267.135757][T11167] ? netlink_unicast+0x82c/0x9e0 [ 267.135770][T11167] ? __sock_sendmsg+0x21c/0x270 [ 267.135788][T11167] ? ____sys_sendmsg+0x52d/0x830 [ 267.135799][T11167] ? ___sys_sendmsg+0x21f/0x2a0 [ 267.135809][T11167] ? __sys_sendmmsg+0x227/0x430 [ 267.135819][T11167] ? do_syscall_64+0xfa/0x3b0 [ 267.135829][T11167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.135841][T11167] ? __pfx___schedule+0x10/0x10 [ 267.135858][T11167] ? preempt_schedule+0xae/0xc0 [ 267.135871][T11167] ? __dev_queue_xmit+0x27b/0x3b50 [ 267.135884][T11167] preempt_schedule_common+0x83/0xd0 [ 267.135898][T11167] preempt_schedule+0xae/0xc0 [ 267.135912][T11167] ? __pfx_preempt_schedule+0x10/0x10 [ 267.135926][T11167] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 267.135937][T11167] preempt_schedule_thunk+0x16/0x30 [ 267.135952][T11167] __local_bh_enable_ip+0x13e/0x1c0 [ 267.135963][T11167] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 267.135974][T11167] ? __dev_queue_xmit+0x27b/0x3b50 [ 267.135986][T11167] ? __dev_queue_xmit+0x27b/0x3b50 [ 267.136000][T11167] ? __dev_queue_xmit+0x27b/0x3b50 [ 267.136012][T11167] __dev_queue_xmit+0x1d79/0x3b50 [ 267.136027][T11167] ? __dev_queue_xmit+0x27b/0x3b50 [ 267.136039][T11167] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 267.136049][T11167] ? do_syscall_64+0xfa/0x3b0 [ 267.136058][T11167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.136071][T11167] ? __pfx___dev_queue_xmit+0x10/0x10 [ 267.136086][T11167] ? __copy_skb_header+0xa7/0x550 [ 267.136098][T11167] ? __asan_memcpy+0x40/0x70 [ 267.136113][T11167] ? skb_clone+0x246/0x3a0 [ 267.136125][T11167] __netlink_deliver_tap+0x5ad/0x850 [ 267.136138][T11167] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.136148][T11167] netlink_deliver_tap+0x19c/0x1b0 [ 267.136158][T11167] netlink_sendskb+0x68/0x140 [ 267.136172][T11167] netlink_unicast+0x397/0x9e0 [ 267.136186][T11167] ? __asan_memcpy+0x40/0x70 [ 267.136197][T11167] ? __pfx_netlink_unicast+0x10/0x10 [ 267.136213][T11167] netlink_rcv_skb+0x28c/0x470 [ 267.136223][T11167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 267.136233][T11167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 267.136245][T11167] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.136256][T11167] netlink_unicast+0x82c/0x9e0 [ 267.136275][T11167] ? __pfx_netlink_unicast+0x10/0x10 [ 267.136290][T11167] ? netlink_sendmsg+0x642/0xb30 [ 267.136299][T11167] ? skb_put+0x11b/0x210 [ 267.136310][T11167] netlink_sendmsg+0x805/0xb30 [ 267.136322][T11167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.136333][T11167] ? aa_sock_msg_perm+0xf1/0x1d0 [ 267.136347][T11167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.136361][T11167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.136371][T11167] __sock_sendmsg+0x21c/0x270 [ 267.136385][T11167] ____sys_sendmsg+0x52d/0x830 [ 267.136398][T11167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.136411][T11167] ? import_iovec+0x74/0xa0 [ 267.136423][T11167] ___sys_sendmsg+0x21f/0x2a0 [ 267.136436][T11167] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.136455][T11167] ? __fget_files+0x2a/0x420 [ 267.136468][T11167] ? __fget_files+0x3a0/0x420 [ 267.136483][T11167] __sys_sendmmsg+0x227/0x430 [ 267.136495][T11167] ? __pfx___sys_sendmmsg+0x10/0x10 [ 267.136505][T11167] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 267.136521][T11167] ? ksys_write+0x22a/0x250 [ 267.136533][T11167] ? __pfx_ksys_write+0x10/0x10 [ 267.136543][T11167] ? rcu_is_watching+0x15/0xb0 [ 267.136555][T11167] __x64_sys_sendmmsg+0xa0/0xc0 [ 267.136567][T11167] do_syscall_64+0xfa/0x3b0 [ 267.136576][T11167] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.136591][T11167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.136601][T11167] ? clear_bhb_loop+0x60/0xb0 [ 267.136612][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.136621][T11167] RIP: 0033:0x7f5b7a98eec9 [ 267.136631][T11167] Code: Unable to access opcode bytes at 0x7f5b7a98ee9f. [ 267.136636][T11167] RSP: 002b:00007f5b7b8a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 267.136647][T11167] RAX: ffffffffffffffda RBX: 00007f5b7abe5fa0 RCX: 00007f5b7a98eec9 [ 267.136655][T11167] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 267.136662][T11167] RBP: 00007f5b7b8a8090 R08: 0000000000000000 R09: 0000000000000000 [ 267.136669][T11167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.136674][T11167] R13: 00007f5b7abe6038 R14: 00007f5b7abe5fa0 R15: 00007fff28c573c8 [ 267.136690][T11167] [ 267.764109][T11171] lo speed is unknown, defaulting to 1000