last executing test programs: 3.857992861s ago: executing program 1 (id=4465): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffef0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280100002f00010000000000fcdbdf250801f2800c00180008ac0f000010000014000100fc00000000000000000000000000000008004400", @ANYRES32=0x0, @ANYBLOB="d90062802400328008004100b20000000800ca00ac1e000108003d00fcffffff0400c58004008a800800a18004000f80c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb07a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26000000100002800c0001"], 0x128}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x201d, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x140c, 0x400, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x844}, 0x4890) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xa, 0x2, 0x1, 0x0, 'wlan1\x00'}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004810) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000000000000c7c800e00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffdc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) unshare(0x20000a00) 3.473730964s ago: executing program 4 (id=4467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002c00)={0xadfa, 0x0}, 0x8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x88, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x4, [@float={0x1, 0x0, 0x0, 0x10, 0xc}, @union={0x7, 0x1, 0x0, 0x5, 0x1, 0x2, [{0xb, 0x2, 0x80000000}]}, @const={0x3, 0x0, 0x0, 0xa, 0x1}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @float={0x1, 0x0, 0x0, 0x10, 0x8}, @float={0x5, 0x0, 0x0, 0x10, 0xc}, @struct={0x1, 0x2, 0x0, 0x4, 0x1, 0xeba5, [{0xa, 0x4, 0x5}, {0x10, 0x4}]}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000500)=""/81, 0x94, 0x51, 0x0, 0x3}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x1, '\x00', r3, r4, 0x2, 0x1, 0x4}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x40400a0}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3000004, 0x11, r5, 0x9040d000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000200008409010000040000000400000001000000000000000001000009000000003000002e"], &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x8}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7}, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newchain={0x4c, 0x64, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff2, 0xd}, {0xb, 0xfff1}, {0x4, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x7}}, @TCA_RATE={0x6, 0x5, {0x9}}, @TCA_RATE={0x6, 0x5, {0x2, 0xf}}, @TCA_RATE={0x6, 0x5, {0x11, 0xc}}]}, 0x4c}}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000800)={0x2e4, r10, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fccf3fc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bd06d77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ff729fc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6888aaf5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44e9d5fd}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xaa2f22b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54f67603}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65c90897}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d337898}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ed141bb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x461f5924}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37302469}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5ce2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x460bc592}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd29e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x995e}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2deecca5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3cb6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74cc7a9e}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xfc, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3889c878}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b0e0e88}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a56a617}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1140a8be}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ff8f619}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7268d995}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xde47c01}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1256d50e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x443eea6f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fa057ef}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b73a0a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13ba735c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64a03195}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cb93257}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52cfaa81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d98a0bd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x306eb3a8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xcc, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cc75b3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x83b7afd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x205c2bce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2cb6a0ed}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f3a6ef2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71a3b873}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fd57206}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3816bad1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a2652ae}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a27a8e8}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000805) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002c40)=r1, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.375716512s ago: executing program 0 (id=4469): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x31b, 0x2}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_SCRUBV_METADATA(r4, 0xc0285840, &(0x7f0000000380)={0x9, 0x80000000, 0x1000, 0x0, 0x3, 0x2, 0x0, &(0x7f0000000200)=[{0x1b, 0x101, 0x2}, {0x13, 0xfe, 0x4}]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5, 0x0, r2}, 0x10) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, r2, 0x100000000) splice(r0, 0x0, r1, 0x0, 0x10000008ebc, 0x4) close(0x4) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) r6 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r7 = socket(0x1, 0x803, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000000000ffff050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000002c0004802800018008000100667764001c00028008000340000000020800"], 0xc8}, 0x1, 0x0, 0x0, 0x2}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvfrom$llc(r6, &(0x7f00000007c0)=""/238, 0xee, 0x80002063, &(0x7f00000008c0)={0x1a, 0x110, 0x1, 0x2, 0x51, 0x6a}, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000018c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0xfe, r9}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) 3.367609059s ago: executing program 1 (id=4470): socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000100)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x6, 0x84) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_crypto(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="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", @ANYBLOB="655f787447be178cae5eff39c2a3a12d8712d6b6b3ddb8fb5ba5ab9ce847bab54c7342eb9b61498d04bd6c232b14976d919e9bf2910e9928791bada462c60bf89d59e1606139942b82552e4c3cfbed8c904b233ae007eb91c36006ff074c9b0a9ce4a97db7fef4d2d70f96428d1a0d0a1b019805e818ac1c6146bcf2b9722d6b9afc62670ead5310", @ANYRESOCT=r6, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB, @ANYRESHEX=r8], 0xf0}, 0x1, 0x0, 0x0, 0xc891}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a010100000000000000000a0000010900030073797a320000000083df0a63f183422e4215036c08a6377775327d731a22565a505990290b084f38d7af564b530c79f51a3b1c74ad86292d882cae"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$bt_hci(r9, &(0x7f0000000040), 0x6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @empty}], 0x10) listen(r5, 0x3) sendmsg$inet6(r4, &(0x7f0000001dc0)={&(0x7f0000000840)={0xa, 0x4e22, 0x906, @loopback, 0x7}, 0x1c, &(0x7f0000001d40)=[{&(0x7f0000000880)="fa", 0x1}], 0x1}, 0x40085) socket$netlink(0x10, 0x3, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sendfile(r0, r3, 0x0, 0x20000000002) 3.170318883s ago: executing program 4 (id=4471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r1, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r7, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', r7, 0x40, 0x700, 0x7, 0x7, {{0x1e, 0x4, 0x1, 0xc, 0x78, 0x67, 0x0, 0x9, 0x2f, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x24, 0xa4, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc4}, {@dev={0xac, 0x14, 0x14, 0x25}, 0xffff7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x3}]}, @rr={0x7, 0x27, 0xf7, [@loopback, @local, @loopback, @empty, @private=0xa010102, @multicast2, @rand_addr=0x64010101, @loopback, @multicast1]}, @lsrr={0x83, 0x17, 0xa3, [@rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote]}]}}}}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008011}, 0x4880) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r14, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r12, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r14], 0x3c}}, 0x8000) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2402b11d5204c24faaa8dbf7e45dedb6e8ebc94b000074ef13ffa0cb8b2f417640f029224ca1958c26d07ba54adb3d407930afdc1062941351e6c312e8b641ecee9956cd762db12716a0721f5d02674fe61b372e7f7e709c688942a20e97565fe5e11549f09b5dcf970116653b937b7ef171c386b8d3073db903734ae0a748ae655de896d5a9586678aaac21f935dc43bd52e2ebc492f16f5104558cf17851090c6c6ab04a1e49a47f8260903842f164276b", @ANYRES16=r9, @ANYBLOB="01002dbd7000fddbdf2511000000000300f2f8abfdcaea50255f9715f21a5901d65da3cae0dd36f5aed9ee59efd64089952c29f0b66e2f3ff0e8c53824c1b0e99e19eafd364b7adb6a9cf492d68bcc9086d20461d937", @ANYRES32=r11, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 2.860824367s ago: executing program 4 (id=4472): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20005, 0x4) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x16, 0x0, "a1873b93b3cfcd06eb539ec08a31701341c4cbc95e72725f8cb4d3e062cfbca0e2f948772be305b9cdf57387e4d1af1630d46f6aa5d2e5a5e6cebac5c58f2bb310057db2d80d50ca891462a59e1900"}, 0xd8) sendto$inet(r3, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) (async) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000004c0)) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) r6 = socket$inet6_sctp(0xa, 0xf, 0x84) (async) socketpair(0x26, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) close(r8) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r10], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000040)={r10, 0x40}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000000)={r10, 0x400, 0x600}, &(0x7f0000000040)=0x8) 2.642389955s ago: executing program 4 (id=4474): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$unix(r3, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0x8}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x6, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[], 0x6) close(r9) write(r7, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r10, 0x0) r12 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r12, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) getpeername$qrtr(r9, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x800) 2.417409647s ago: executing program 2 (id=4475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendto(r1, 0x0, 0x0, 0x1, 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f0000000000)) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/mnt\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)={0x2d4, 0x3e, 0x400, 0x70bd29, 0x25dfdbfc, {0x7}, [@typed={0x0, 0x107, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x7, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="20ad94fb", @nested={0xb1, 0x95, 0x0, 0x1, [@generic="8bee72d8a212d5fb5489114ded59126ef46750455a6eae9f566ed846ed1a58f54a380c30903c92d04a1890e7960671e44f22e4ab353b74b25c177938d64b6152641856167703c7366a8b7e6395e9093250b4f286102a2c9ed027d88408c27b72623b369d6582e4ccd8e46d93407a1fd40b87369500ddc18558a41b9a3c24bf062a417ea6fe2127b26337781ff7f6acf8420e148066c14fb061170da705d2044c008862b5ce621a0634", @generic="5c2a6ce01955028bec42b69e0982a2e078ccf8652a81b30b002350239062f6c6dbbca9cde9b6b5b0e2dacedebe9c88ef8743b0adddb71d1fe2310e7a98af0f70a25f889ec74dcae7ef0c44fb7c53f55dcf753878c195c96535107b2a56aa12a589e4058be63a022dc2272776a1844479ea2b31fdcde8dfd406d574db827f98cbf195e0ebeb9a7c106049d65ad6c81aff0332a508007e4a7d47c190e2ddbfe6ff91ae8b7ad4017aa996d613"]}]}, 0x18f}, 0x1, 0x0, 0x0, 0x880}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x61, 0x2e, 0x61, 0x57c5d7d3bc6d8a13]}}, 0x0, 0x2a, 0x0, 0x1, 0xfffffffb}, 0x28) 2.295866995s ago: executing program 0 (id=4476): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x20}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x9, 0x3, 0x0, 0x1, [@generic="f9f91f547c"]}]}, 0x28}}, 0xc010) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd700001dcdf2507000000", @ANYRES32=r1, @ANYBLOB="ffffffff8f0200000000a9fd9301bd7400"/26], 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x4040000) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='\x00', 0x0, 0x4030, r2}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed000007030000030000001d44000000000000620a00ff040400007203020100200000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) ioctl$OCFS2_IOC_GROUP_ADD(r5, 0x40186f02, &(0x7f0000000200)={0x2, 0x9, 0x6, 0x823}) 2.158071588s ago: executing program 2 (id=4477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x1a0}}, 0x0) 2.157073004s ago: executing program 1 (id=4478): r0 = socket$inet(0x10, 0x4, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) 2.053128419s ago: executing program 2 (id=4479): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x8, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x10c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff9}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x58, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x561a6531}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x3e, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f"}]}], {0x14}}, 0xa8}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r10, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000b00)={'ip_vti0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x7, 0x4, {{0x1b, 0x4, 0x1, 0x0, 0x6c, 0x68, 0x0, 0x70, 0x4, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x14, 0x83, 0x3, 0x7, [{@rand_addr=0x5, 0x5}, {@multicast1, 0x10000}]}, @cipso={0x86, 0x2d, 0x3, [{0x6, 0x10, "d03097f0f0bfa1b1c5b5eb084f2a"}, {0x2, 0x9, "012fd25ab19612"}, {0x6, 0xe, "d205e62040f1933ebaff4936"}]}, @generic={0x0, 0xc, "0c5b813aa2cf69c0b73b"}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000cc0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x114, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xfffffffb}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x99}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000540)={r2, &(0x7f0000000180)='wpan3\x00', 0x0, &(0x7f00000001c0)={@align=0x800, {0x3b8, 0x8, 0x4ba000, 0x6}}, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0xea}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000780)={0x6, &(0x7f00000005c0)=[{0x8, 0x6, 0x2, 0x6}, {0xc, 0x8, 0xde, 0xf84}, {0x1, 0x1, 0x9, 0x80000001}, {0x1, 0x6, 0x7, 0x6}, {0xf4ae, 0x9, 0x2, 0x4}, {0x400, 0x7, 0x2, 0x10}]}, 0x10) sendmsg$tipc(r12, &(0x7f0000000740)={&(0x7f0000000580)=@name={0x1e, 0x2, 0x0, {{0x43, 0x3}, 0x1}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000005c0)}], 0x1, &(0x7f0000000640)="e859ab72ca0177515caefcebf9e38c381a05de7203612b5b1a0bc813727de15039b540ab2cee79fc01e0e871c961bc594687ac6b31bcc47f11ff64969db43c468002ff7f92c5a6ad3ad4916b20aedff513aadc35d9087d66f8e243ae6bdd81a11e58ee18c679e358dde63d247e0857ed82e3cce03dad43f6c98ecb80803681bb4ac63a25b863b38ffa133b32fc8e3aca835add1025d8b903f16d73cacc4d73c2508a0628586d29a67156a816be17c2857124d06c728f23956f3bd601bde21146da84355555dc79488159b9600a0ec382772d1952d74789706469582f577e3863c92272227388e2fe2f58de3b6584653431", 0xf1, 0x4048000}, 0x80) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x12, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$NFT_BATCH(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) 1.866080098s ago: executing program 0 (id=4481): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0x2, 0xe) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x30, 0xa, 0x2, {0x1, @esp_ip4_spec={@broadcast, @loopback, 0x2, 0x5}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, 0x4, 0x3fc0, [0x8, 0x6]}, @tcp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0xa}, @private1, 0x4e22, 0x4e23, 0x1}, {0x0, @random="c6e16a0f641e", 0x3, 0x3, [0x6, 0x1]}, 0x5f9, 0x2}}}) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x40000) recvfrom$phonet(r4, &(0x7f0000000200)=""/15, 0xf, 0x40002162, &(0x7f0000000240)={0x23, 0x4, 0xf, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a312000000038000000030a01040000000000000000010000010900010073797a30000000000c000240000000000000000109000300030000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bind$xdp(r5, &(0x7f0000000140)={0x2c, 0x0, r6, 0x0, r7}, 0x10) 1.807323096s ago: executing program 2 (id=4482): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x20001000000, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$OCFS2_IOC_GROUP_ADD64(0xffffffffffffffff, 0x40186f03, 0x0) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000000)="82d903bfcb8484b98931c6c599ed9cf57c", 0x11}, {&(0x7f0000000600)="6cf03a70aba485af", 0x8}], 0x3}}], 0x1, 0x24000800) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYRESDEC=r2], 0x40}, 0x1, 0x0, 0x0, 0xc0000}, 0x40) 1.734110061s ago: executing program 1 (id=4484): close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881) (async) socket$kcm(0x21, 0x2, 0x2) (async) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) close(0x3) (async) 1.460931687s ago: executing program 3 (id=4486): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x8000, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001880)={0x2, [0x0, 0x0]}, &(0x7f00000018c0)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r1, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) pread64(r3, 0x0, 0x0, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x3, 0x3, 0xc, 0x100, 0x1ff}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vxcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], 0x0, 0xaf, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000600), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r8, &(0x7f00000002c0), 0x0}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c000000010000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xe, 0xf, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x0, 0x9, 0x8, 0x8, 0x3f4e3ed6bbfe6504}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], &(0x7f00000001c0)='syzkaller\x00', 0x412b, 0xb2, &(0x7f0000000280)=""/178, 0x40f00, 0x10, '\x00', r6, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x0, 0x3, 0x7, 0xba8}, 0x10, r7, 0xffffffffffffffff, 0xa, &(0x7f00000007c0)=[r8, 0x1, r9], &(0x7f0000000800)=[{0x0, 0x3, 0xf, 0x6}, {0x1, 0x4, 0xf, 0x6}, {0x3, 0x3, 0x9, 0xa}, {0x5, 0x2, 0x9, 0x2}, {0x4, 0x5, 0x0, 0xb}, {0x1, 0x4, 0x0, 0xc}, {0x2, 0x4, 0x0, 0x9}, {0x0, 0x5, 0xc, 0xb}, {0x0, 0x4, 0x6, 0x5}, {0x0, 0x4, 0x7, 0x78723f8a3ab1984e}], 0x10, 0xe}, 0x94) r10 = socket(0x2, 0x80805, 0x0) unshare(0x24060400) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000044c00000400000009"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r11, 0x500}, 0x38) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'dh\x00', 0x0, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000000)={{0x84, @dev={0xac, 0x14, 0x14, 0x28}, 0x4f29, 0x3, 'wrr\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0x1, 0x1}}, 0x44) 1.453691257s ago: executing program 1 (id=4487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="00000000811ba675a5c1d94104e41c8798bf9005e4fa19882d36789debd3b4fd622a545ee652756f8cfec248d4768ab454e2464bce13981c174c883dc7e1021456a40179bbf516712b34b1b9a4", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000000000000c4100000003001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010000008000000000000400200a0800010001000027"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2404c010) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001000010000000000fedbdf000c00000008001ac9a6764b1044769b36c4000000080003c41998e5e710000004001a80ca40ec4cf2c25e5721989fe42a3a999ebb6c60ce2cb7965137f4f8f936ff150888dfd277f63c70ff2b8012a02b87a9cac6449b7bd9f103"], 0x30}], 0x1, 0x0, 0x0, 0x4044801}, 0x8000) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000203010100000000000000000300000a08000100110000299ff88aaeb29ebc4245dc73fbfb069ebfc0497079cfdac86d5a3e9fccbce392cd76d4edd7b91e58366e587f7beca28fc398e84cda07326323ce3501362857ecec15cd95429297665b914273975387659760170868cfc3ef2411328682a7c19e62922561c94a28e88cc6884745f95b010967cd2d3bbcc014d097b8552d25249c1ca9c2bd64c839ec73a2955e37d187d55720f8f3e54951483dada3f6d4bd0b74f6e5f72d8840b829f83c939b7166330778a60093b220aab4c49bc2822e8f37dfce"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000002, 0x4104912, r0, 0x56b7000) r5 = socket(0x10, 0x803, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) r7 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) (async) close(0x4) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x26, "744e97db9afbb12414a6834af78cb3831712e2a2293e398b46cd813d5dd09cd1", "6b6f9b9f8372dd6625bde94e9edc7c35bb7c2c1ffb866b4b4dd789c42881c2a8", "a7695026e9086edf8ccef78410fc16bacb308ca6b200a3c8b84dbc322fd0b42b", "830600cb7a9ae29e5c81d91096bfa200", "29b1b2e5f114e8a8a9f1e200777acf7ef09dbb3c6fde217f4d4cf2e20859b560", "de07748767cdc8e5821ffd4a", 0x200, 0x0, 0x10001, 0x4c4, 0x101}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x81, 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, 0x0) (async) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) (async) close(0x3) (async) socket(0x10, 0x803, 0x0) 1.30236232s ago: executing program 1 (id=4488): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x100a, &(0x7f0000001e40)=""/4106, 0x0, 0xc}, 0x94) r2 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 1.093480698s ago: executing program 3 (id=4489): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r0, 0x0, 0xf, &(0x7f0000000000)=""/196, &(0x7f0000000100)=0xc4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)='%-010d \x00'}, 0x20) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000240), 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000380)={r0, &(0x7f0000000280)='%-010d \x00', 0x8080, &(0x7f00000002c0)={@_ha_fsid={[0x9, 0x2]}, {0x8, 0x3, 0x7, 0x1}}, 0x8, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x7}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xd}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x5c}}, 0x24000840) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x0, 0x1, 0x5, 0x7, {{0xe, 0x4, 0x1, 0x6, 0x38, 0x66, 0x0, 0x1, 0x29, 0x0, @remote, @multicast2, {[@cipso={0x86, 0x22, 0xfffffffffffffffc, [{0x7, 0xa, "c9a7e7e8acc1971a"}, {0x2, 0x12, "984105fc6b0c62946e89180589375645"}]}, @end]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r3, 0x25, 0x10, @val=@tracing={0xffffffffffffffff, 0xaa}}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r2, r3, 0x25, 0x8, @val=@perf_event={0x2}}, 0x18) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000640)=0x3, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000680), &(0x7f00000006c0)=0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r2) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000001a80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x84000200}, 0xc, &(0x7f0000001a40)={&(0x7f0000000780)={0x12a8, r4, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x4, 0x40}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4d, 0xfa, "9a4cbaa98851bd4738c81813d3aafa885e9ebc7b2f60eb0e9caca9ceed2e1ea297c10630b872ba079a23a19a5cee203c35362f3620aa805b18a70df3534c72e5892272be5073d6eb65"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "b4ab"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8000}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2229}, @NL80211_ATTR_FILS_ERP_RRK={0x31, 0xfc, "9a8c9210954ce5fadce1e0a6a2bb417f35188c9c06b6366007736c3dbeaa951acf45fd6cae12fa9ce2a11000d8"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "6c8eb9c95a18"}], @NL80211_ATTR_IE={0x10, 0x2a, [@ibss={0x6, 0x2, 0x5}, @mesh_chsw={0x76, 0x6, {0xf8, 0x7, 0x4, 0x40}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "33d9858191"}, @NL80211_ATTR_FILS_ERP_RRK={0x7, 0xfc, "dc99ed"}, @NL80211_ATTR_FILS_ERP_REALM={0xaa, 0xfa, "10e7226779498f50362b3e26d6f4c30e49849e74b0582803bb5e6ea3768a4c94a2e2e839dc623338ad9366d738b03b030ae729d0fa0b8cd120707eb3cb0cd4089e14f0e4168da142c0464d92f7acbc082804ab109799f29ba3b0eb9325dd063288113f249c63011d2ac029ad38ec9af3e5d9b50c444625c170a3b97c97b31439b2e9b9035323be4229511d92ddabfd9462a6f9cd89f105deba787f9d5bc1ce2a875312a82e3b"}, @NL80211_ATTR_FILS_ERP_REALM={0x65, 0xfa, "00b59e5cec55d32de60030d15da8637290f860043210536e09c59ffc4e2ab9c1f2495d4e7e70c3b58a0f847a79971166bd24508b4f6f884fa7306ea5ba401c7d209eecc638b29f084a387e3515651ea2ec5fffbbef7ffe5779ac9e4280042d0bc4"}, @NL80211_ATTR_FILS_ERP_REALM={0x93, 0xfa, "973b82d92961d2959347fbd182753214a9396acc5e9f92f98b6949c4c6d46324836ca958843b0142b0274c372770a493bfbb3c906bd0ced99d54702b3bdaa1ed44b3792bb01499046268d95450450c16aaa2772cd9a86f572b24d63618af72d51f678df5f1bb404537904d7cda80457b7d1d70e2c9d2c6698849c27a2637e07c65d1b83136d789d3fbf43baf702309"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}]]}, 0x12a8}}, 0x24008080) getsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) r5 = socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet(0x2, 0x5, 0x5d8d) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000001b40)="005a1724b7084adec46ea2831f958786e7afd4823b0b4e652b57c49c90ae0157af3a630a388cebae831ac6dbb3c7b59de2e190d1f50b2632a737c53b77ecba2aa5912ac0758aaccdc9b60769c388be1829592f7a2a7a34173c22fc08668d42c962db53bfdb562be79ed5e480c603ca7ae8381712cdb5716bd8fb97acb1819ac6a2", 0x81) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000002180)={&(0x7f0000001c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002040)=[{&(0x7f0000001c40)="27c493f373faf27c251ccba7b143d775cf19d55fe61a1925754dc7416ac7cdb6564e306f0a23a0b0b172a3bb11eebf308df95a3a98c7ce6cc065", 0x3a}, {&(0x7f0000001c80)="fde878635dccb808a557b20f17f31017e94cb9a4714d5085444c218c3c49bb11d0141f92f609d79fb59146fa5ada12908f39bf669c5442e30ddea8be8ab5af694f11d4c1118de43584d51269967584689de49c1b7a279f327bd0464bc9c85cdd76fdf3a31682e3365a5823fe0ef193f8ed6a59d7ce86b06aef400aafcdadd58a68bd48b55ee26f2700992d863b3fe8123fedfab29344e9676c2b3571e707d627ae5dd0e98dba31cf29197b31a27b167a383f3b1f1b185bd91f02a4c7d33eca1ff3c12b5569d0b2191611d213", 0xcc}, {&(0x7f0000001d80)="c059a5b9286b770c1f230f8b818784a4fc0189e38b7abb4c8cc0c2887ca0729e7782763f8b76b5bd64fbdfe0f6e803f138ec6e05ab0b16ca1c619994d648aebfe1f334c9f4c92f85ea3e7de1860a0c2ebf880d55f76a65cbc6facd07c3f0a0deffb6e73eb29efe104d8f3d57b1cad1d5ede76725d55a0f59a0ad13c70e714279e6f7fa6c4e565af01296765a28cdb0cb6e7b48886079f98c31dc887034450d6eeaa8f54bce", 0xa5}, {&(0x7f0000001e40)="da175a51fd5b0024e06180dac61981c1316a4a582f66d5f7b44ed660ccd4f46af60eb06eb0c2", 0x26}, {&(0x7f0000001e80)="3d97b1974242454016a68f3fa973f284aac924ac9c556fcfb20aaa4c26aea249216f04779707d2857eb02d643c5eeb98e9aac89518f18fca4270414d3e6803bcfc7ca1c28ef9bad681ff634b5cdd", 0x4e}, {&(0x7f0000001f00)="d66d64527e86c675f8da9b4a56e409507d0dec3cf85084078002f774d0cf42bfae181a2094c00b209bea0f0bddcc8bf92e5c8d88bca280dcbba2fd51b2bd7297fddd6eccca4ce5e02042548b310aa6cd6c3e8ce20e0933ee40efc95586e3c3ac17f51f2f94a7206e1ad42c0bd80f77cf705dc91b0e6396694986721bdec8b4ba34edf9adca7fd07efd15ac7e001e3efec78741d8157cdb6c5d55", 0x9a}, {&(0x7f0000001fc0)="90b41921e6761a5c65ce101308e2e4163f47c523987159b929efcb2119042646ae2b33dab22bbee275c1115df15807065069819e6c3b2f7f8bca27d509b93dbaa68fb47a46d2fd4871c2c6895ffa1111e85355315f27778719906470f67c8c267b42a9f72e350777602602b670", 0x6d}], 0x7, &(0x7f00000020c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x28}, @local}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x40}}}}], 0x90}, 0x40800) ioctl$XFS_IOC_GETBMAP(r5, 0xc0205826, &(0x7f00000021c0)={0xa, 0x6, 0x7, 0xfffffc7a, 0x1ff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, &(0x7f0000002200)="5e79907a9e85c1064c5c00d5263d792640e8630c18c30f1f7ead5a771c3ff6418674fc12e2d7217a255efc36413172eecc4accc0652549e7b5f1b52a73bb3a2c254b14514a8192376676f0f85ecc6cab17555aa22579d364", 0x58, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002300)={{r2, 0xffffffffffffffff}, &(0x7f0000002280), &(0x7f00000022c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000024c0)={0x18, 0x15, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x53}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit, @generic={0x5, 0x7, 0x9, 0x9}]}, &(0x7f0000002400)='syzkaller\x00', 0x5d5d, 0x32, &(0x7f0000002440)=""/50, 0x41100, 0x18, '\x00', r3, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002480)={0x2, 0x8, 0x7fffffff, 0xfffff642}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000002580)={0x0, 0x65, "c57da66f5e61b5e7f6a51c934e602e103784b4efc0e60e44c19430c7007a25abd24a16b328f6055cbcb98c89ee15009ddd0f518b5ac22758ee45d1494959d747007145a8938c874e54ec0ec9d4bfeafe200dae384e954847dddc597ad6c344790bd0495f6d"}, &(0x7f0000002600)=0x6d) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2120}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x8, 0x10001, 0x200, 0x3}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x41) socket$kcm(0x29, 0x2, 0x0) 908.624299ms ago: executing program 3 (id=4490): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl(r0, 0x8b21, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x6e23, 0x0, @empty, 0x7}, 0x1c) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000d8000001118006b05c6a8ce2", @ANYRES64, @ANYRES64=0x2710, @ANYRES64=r3, @ANYRES64=0x0, @ANYBLOB="00000080"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x802, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"}}, 0x80}}, 0x800) close(0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db", 0x1}], 0x1}}], 0x1, 0x24040015) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000440)='@\n', 0x2}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="9451", 0x2}], 0x1}}], 0x2, 0x8000) 850.368494ms ago: executing program 0 (id=4491): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_RULES={0x5c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x725}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x61}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80000001}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1e}]}, 0x78}}, 0x4000) (async, rerun: 64) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000180)=0x2, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000001c0)={0x0, 'wg2\x00'}, 0x18) (async) sendto$inet(r2, &(0x7f0000000200)="45bff57101d760a562c72d531a745d4fd56c3aaf7ab84583450e499e5c7398df7fb1d2404ba2316b05ae4adf134de67ffcc1cb23f53c6dbbb1d4b1fcfd6b24578b84237db9f6ee88d3844a458764e580dbd156e72b", 0x55, 0xc0c5, &(0x7f0000000280)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000002c0)={@remote, @multicast1, 0x0, 0x2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, 0x18) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x68, 0x6, 0x4, 0x25, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x60, 0x8, 0x4, 0xd935}}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000740)={r0, &(0x7f0000000640)='nl80211\x00', 0x0, &(0x7f0000000680)={@align=0x5, {0x2, 0x7, 0x0, 0xc}}, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x5}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%ps \x00'}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x3d2, 0x4}, 0xc) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x8, &(0x7f00000003c0)=@raw=[@generic={0x0, 0x2, 0x3, 0x3255, 0x6be7}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @alu={0x4, 0x1, 0x9, 0x237e8bdd7aaeb4a3, 0x1, 0x1, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000400)='GPL\x00', 0xfff, 0x0, &(0x7f0000000440), 0x41000, 0x75, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x4, 0x14000000, 0x684}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r5, r6, r7, r8, r10, r0], &(0x7f0000000900)=[{0x0, 0x2, 0x1, 0x1}, {0x3, 0x3, 0x3, 0xa}, {0x2, 0x3, 0xe, 0xa}, {0x2, 0x5, 0xb}], 0x10, 0x4a}, 0x94) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'dvmrp0\x00'}) (async) r11 = accept$phonet_pipe(r9, &(0x7f0000000a40), &(0x7f0000000a80)=0x10) (async) getsockopt$bt_BT_POWER(r9, 0x112, 0x9, &(0x7f0000000ac0)=0x7, &(0x7f0000000b00)=0x1) listen(r11, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = accept$unix(r9, &(0x7f0000000b40)=@abs, &(0x7f0000000bc0)=0x6e) ioctl$XFS_IOC_DIOINFO(r12, 0x800c581e, &(0x7f0000000c00)) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000c40)={0x7, 'dvmrp0\x00', {0xef}, 0x2}) (async) ioctl$SIOCX25SENDCALLACCPT(r6, 0x89e9) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000c80)) openat$cgroup_netprio_ifpriomap(r9, &(0x7f0000000cc0), 0x2, 0x0) (async) close(r11) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000d00), r0) 737.306177ms ago: executing program 2 (id=4492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r6, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r4, &(0x7f0000000580)='o', 0x5b4, 0x4, &(0x7f0000000180)={0x11, 0x8100, r6, 0x1, 0xe9, 0x6, @local}, 0x14) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008014}, 0x800) r7 = socket(0x15, 0x3, 0x2) bind$can_raw(r7, &(0x7f0000000100)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x4, 0x4}, {0x3, 0xfff3}}}, 0x24}}, 0x90) 639.452026ms ago: executing program 3 (id=4493): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c001e00190a030000000000000000000000ffff0900020073797a3200e8ff00090001e872f935c200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x800) sendmsg$unix(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, r6, 0x325, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000400010000000000000000000500000a70000000060a010400000000000000000a0000010900010073797a3100000000440004802c0001800e000100696d6d656469617465000000180002800c00028005000100fd0000000800014000000014140001800a0001007265646972000000040002800900020073797a3200000000140000001100010000000000000000000100000a"], 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) write(r3, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r8) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000440)=@ethtool_cmd={0x2b, 0xff, 0x622, 0x3, 0x8, 0x2, 0x4, 0xc4, 0x0, 0x7, 0x77ffffff, 0x7bffffff, 0xbb8d, 0x8, 0x6, 0x6, [0xe, 0xfb]}}) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYRES64=r11, @ANYRES64=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4000084}, 0x8042) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x30, r10, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x8048094}, 0x4000) socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x38, r15, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x482d, 0x4, 0x486f, 0x8, 0x5, 0x30, 0xc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f00000010c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001080)={&(0x7f0000000e80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00032dbd7000fbdbdf253b00000008000300", @ANYRES32=r16, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x24004010) 590.108175ms ago: executing program 0 (id=4494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000f40)=ANY=[@ANYBLOB="54040000160001000000000000000000fc000000000000000000000000000001ac1414bb0000000000000000000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x454}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="74000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c0002800500010000000000240002800c00028004000100000000001400018008000100ac1e0001080002"], 0x74}}, 0x0) 305.843085ms ago: executing program 4 (id=4495): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x5452, &(0x7f00000002c0)) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x2) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@generic={&(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) 205.628949ms ago: executing program 0 (id=4496): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="60000000ffff010300000000000000000700009219ae849000af0383a9f6b886000a8048000a8008000140000000013c0002800c000280050001002f0000000c00028005f6041d9f26bc6e72000340000000000c000280050001002100b0bf0c605603c1eaf2200002800500000000"], 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000530410002cac7000fcdbdf2556df9dada84d808a22ccfe1b7fe7192a09a5e5d7c8c60c8d28339346fb49db764caca401ef9a2493f405cd920f000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) (async) setsockopt$packet_tx_ring(r0, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000380)={r0}) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000640)={0x40, 0x6, 0x2, 0xe7bb}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xe, &(0x7f00000013c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffdb, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$XFS_IOC_FSINUMBERS(r6, 0xc0205867, &(0x7f0000000b40)={&(0x7f0000000580)=0x20000001, 0x9, &(0x7f0000000b80)=[{}, {}, {}], &(0x7f0000000440)}) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000080)) (async) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000100)=0xffff0000) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2, 0xfffffffe}, 0x1c) (async) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000680)=r5) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 32) writev(r7, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575b43f86dd6067", 0x14}, {&(0x7f00000001c0)="b7000018110058beef4ba0d598", 0xd}, {&(0x7f00000002c0)="37a0a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f3080000008c191f", 0x21}], 0x3) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 162.521557ms ago: executing program 4 (id=4497): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, 0x0, &(0x7f0000000580)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYRESDEC=r2, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r8, &(0x7f0000000140)={0x1a, 0x1b, 0x0, 0xff, 0x2, 0x9}, 0x10) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(r9, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r12 = socket$kcm(0x29, 0x2, 0x0) sendto(r12, 0x0, 0x0, 0x20000000, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@deltaction={0x24, 0x32, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r11, 0xc0385869, &(0x7f0000000200)={r14, &(0x7f00000000c0)='\x00', 0x200002, &(0x7f0000000100)={@_ha_fsid={[0xfffffffc, 0x5]}, {0x8000, 0xffff, 0x82, 0xdccd}}, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r16 = openat$cgroup_ro(r15, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) readv(r16, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r10, 0x0, 0xffffffff000) recvmmsg(r8, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10002, 0x0) 161.844729ms ago: executing program 3 (id=4498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={'macvtap0\x00', {0x2, 0x4e24, @multicast1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080100000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900010073797a300000000009ff020073797a300b00000074000000160a01040000000000000000020000030900020073797a30000000000900010073797a30000000000800074000000002400003"], 0xc8}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xf4, 0x0, 0x1, 0xe04, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0xf4}}, 0x880) 79.525064ms ago: executing program 2 (id=4499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xd, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @ldst={0x1, 0x1, 0x2, 0x2, 0xa, 0x1}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=4500): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f00000000c0)) (async) ioctl$TUNGETVNETLE(r7, 0x800454dd, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xff6d) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xff6d) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) kernel console output (not intermixed with test programs): interface batadv_slave_1 (retrying later): interface not active [ 472.728868][T19694] hsr_slave_0: entered promiscuous mode [ 472.762993][T19694] hsr_slave_1: entered promiscuous mode [ 472.790002][T19694] debugfs: 'hsr0' already exists in 'hsr' [ 472.820449][T19694] Cannot create hsr debugfs directory [ 472.865800][T19863] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.668922][T11454] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 473.762277][ T5636] Bluetooth: hci4: command tx timeout [ 474.172697][T11453] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 474.324258][ T6545] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 474.359077][T19920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3380'. [ 474.427030][T19920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3380'. [ 474.517049][T19921] netlink: 'syz.4.3381': attribute type 1 has an invalid length. [ 474.850169][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 475.050694][ T6545] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 475.116491][T19901] lo speed is unknown, defaulting to 1000 [ 475.346349][ T5293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.400437][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 475.562447][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 475.848425][ T5636] Bluetooth: hci4: command tx timeout [ 476.031317][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 476.251350][T11454] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 476.295078][T19694] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 476.357445][T19694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.388908][T19694] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 476.406825][T19959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 476.416335][T19959] IPv6: NLM_F_CREATE should be set when creating new route [ 476.451134][T19694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.552184][T19963] netlink: 'syz.1.3392': attribute type 1 has an invalid length. [ 476.646719][T19962] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.654504][T19962] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.838519][T19962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.858758][T19962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.039578][T19694] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 477.062505][T19694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.160816][ T6545] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.170969][ T6545] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.192662][T19694] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 477.211917][T19694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.224037][ T6545] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.251855][ T6545] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.415753][T19980] sctp: [Deprecated]: syz.4.3394 (pid 19980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.415753][T19980] Use struct sctp_sack_info instead [ 477.490534][T11452] net_ratelimit: 2 callbacks suppressed [ 477.490552][T11452] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 477.516415][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3395'. [ 477.615454][T19982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3395'. [ 477.663339][T19982] ip6gre1: entered promiscuous mode [ 477.674638][T19982] ip6gre1: entered allmulticast mode [ 477.689515][T19986] netlink: 'syz.1.3395': attribute type 6 has an invalid length. [ 477.714091][T19986] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3395'. [ 477.780863][ T6545] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 477.869812][T19694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.040517][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3399'. [ 478.041287][T19694] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.105896][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.113182][ T6545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.186972][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.194190][ T6545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.264937][T11452] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 478.390936][T11455] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 478.530182][ T6545] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 478.666368][T20012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3403'. [ 478.682767][T11452] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 478.810463][ T6548] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 478.933296][T20021] netlink: 'syz.0.3404': attribute type 1 has an invalid length. [ 479.186268][T11455] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 479.310455][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 479.335479][T20036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3410'. [ 479.376687][T20036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3410'. [ 479.463125][T20036] erspan0: entered promiscuous mode [ 479.492393][T20036] gretap0: entered promiscuous mode [ 479.507959][T20036] debugfs: 'hsr0' already exists in 'hsr' [ 479.535627][T20036] Cannot create hsr debugfs directory [ 479.571392][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 479.709065][T19694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.769126][T20045] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 479.782989][T20045] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 480.027716][T19694] veth0_vlan: entered promiscuous mode [ 480.099010][T19694] veth1_vlan: entered promiscuous mode [ 480.305978][T20063] netlink: 'syz.4.3419': attribute type 1 has an invalid length. [ 480.318097][T19694] veth0_macvtap: entered promiscuous mode [ 480.404088][T20063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.415715][T19694] veth1_macvtap: entered promiscuous mode [ 480.439437][T19694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.452933][T19694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.542062][ T6542] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.636793][ T6542] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.687238][T20092] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3421'. [ 480.811046][ T6542] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.053484][ T6542] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.362191][T20111] xt_hashlimit: overflow, try lower: 6/0 [ 481.386350][T20105] netlink: 'syz.3.3423': attribute type 1 has an invalid length. [ 481.533908][ T6542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.574418][ T6542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.703914][T20126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'. [ 481.746912][T20126] syz_tun: left promiscuous mode [ 481.835219][T20126] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.845387][T20126] bond2: left promiscuous mode [ 481.852928][T20126] bridge1: left promiscuous mode [ 481.862192][T20126] bond2: entered allmulticast mode [ 481.867893][T20126] bridge1: entered allmulticast mode [ 481.883650][T20126] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 481.899113][T20126] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 481.917373][T20126] bridge1: entered promiscuous mode [ 481.925663][T20126] vlan2: left promiscuous mode [ 481.932547][T20126] geneve1: left promiscuous mode [ 481.958229][T20126] mac80211_hwsim hwsim46 wlan0: entered promiscuous mode [ 481.984842][T20126] 8021q: adding VLAN 0 to HW filter on device bond3 [ 481.993157][T20126] ip6gre1: left promiscuous mode [ 482.036809][T20125] macsec1: entered promiscuous mode [ 482.043330][T20125] veth1: entered promiscuous mode [ 482.049828][T20125] macsec1: entered allmulticast mode [ 482.066639][T20125] veth1: entered allmulticast mode [ 482.088396][T20125] veth1: left allmulticast mode [ 482.098258][T20125] veth1: left promiscuous mode [ 482.180993][ T6545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.192507][ T6545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.240316][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 482.275717][T11452] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.298545][T11452] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.349201][T11452] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.546264][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3434'. [ 482.710676][ T6540] net_ratelimit: 10 callbacks suppressed [ 482.710711][ T6540] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 482.739987][T20153] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 482.851749][ T6540] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 482.999717][T20158] bond1: option tlb_dynamic_lb: invalid value (115) [ 483.035777][T20158] bond1 (unregistering): Released all slaves [ 483.149162][T20169] netlink: 'syz.4.3438': attribute type 1 has an invalid length. [ 483.241610][T11452] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 483.266240][T20178] netlink: 'syz.0.3441': attribute type 4 has an invalid length. [ 483.423570][T20173] netlink: 'syz.0.3441': attribute type 4 has an invalid length. [ 483.461547][ T6540] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 483.587902][T20186] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3443'. [ 483.606250][ T6540] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 483.740931][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 483.900842][T11454] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 483.989780][T20196] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3448'. [ 484.016368][T20196] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3448'. [ 484.050642][T11452] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 484.226125][T20212] netlink: 'syz.4.3452': attribute type 1 has an invalid length. [ 484.357400][T20212] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.369714][T20213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3451'. [ 484.401097][T20215] bond3 (unregistering): Released all slaves [ 484.445849][T20220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3453'. [ 484.511327][ T6534] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 484.713065][T20226] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3456'. [ 484.823285][T20226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3456'. [ 484.905494][ T5636] block nbd2: Receive control failed (result -32) [ 484.984121][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3458'. [ 485.082960][T20238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 485.087807][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3458'. [ 485.092851][T20238] IPv6: NLM_F_CREATE should be set when creating new route [ 485.107800][T20238] IPv6: NLM_F_CREATE should be set when creating new route [ 485.119468][T20239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 485.160875][T20241] netlink: 'syz.1.3460': attribute type 3 has an invalid length. [ 485.179707][T20241] netlink: 'syz.1.3460': attribute type 16 has an invalid length. [ 485.203112][T20235] tipc: Started in network mode [ 485.220001][T20235] tipc: Node identity e605bc21c0f3, cluster identity 4096 [ 485.221467][T20243] netlink: 'syz.4.3462': attribute type 1 has an invalid length. [ 485.253579][T20235] tipc: Enabled bearer , priority 0 [ 485.282870][T20241] syzkaller0: entered promiscuous mode [ 485.309195][T20241] syzkaller0: entered allmulticast mode [ 485.375018][T20235] tipc: Resetting bearer [ 485.623874][T20235] tipc: Resetting bearer [ 485.699943][T20235] tipc: Disabling bearer [ 485.767869][T20208] lo speed is unknown, defaulting to 1000 [ 486.572478][T20290] dummy0: entered promiscuous mode [ 486.662685][T20290] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 486.754100][T20290] hsr1: entered allmulticast mode [ 486.769240][T20290] dummy0: entered allmulticast mode [ 486.780010][T20290] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 487.313945][T20317] syz_tun: entered allmulticast mode [ 487.801620][ T6537] net_ratelimit: 17 callbacks suppressed [ 487.801639][ T6537] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 487.961789][ T6540] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 488.082555][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 488.119094][T20344] netlink: 'syz.1.3487': attribute type 21 has an invalid length. [ 488.146665][T20344] netlink: 'syz.1.3487': attribute type 20 has an invalid length. [ 488.210760][ T6534] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 488.350865][ T6540] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 488.361548][T20350] __nla_validate_parse: 5 callbacks suppressed [ 488.361568][T20350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3491'. [ 488.512008][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 488.609458][T20365] tipc: Invalid UDP bearer configuration [ 488.609596][T20365] tipc: Enabling of bearer rejected, failed to enable media [ 488.643770][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 488.781410][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 488.920312][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 488.933344][T20373] IPVS: length: 15 != 54525960 [ 488.999150][T20388] batadv_slave_0: entered promiscuous mode [ 489.014009][T20388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3499'. [ 489.034956][T20388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.174357][T20388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.231034][ T6537] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 489.386779][T20387] batadv_slave_0: left promiscuous mode [ 489.505236][T20400] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.3502'. [ 489.556212][T20402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3504'. [ 489.590750][T20400] ipt_ECN: cannot use operation on non-tcp rule [ 489.875183][T20419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3509'. [ 489.916711][T20419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3509'. [ 490.099478][T20428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3512'. [ 490.239383][T20438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3514'. [ 490.542860][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3516'. [ 490.673024][T20446] 8021q: adding VLAN 0 to HW filter on device bond4 [ 490.691671][T20446] 8021q: adding VLAN 0 to HW filter on device bond6 [ 490.717638][T20446] 8021q: adding VLAN 0 to HW filter on device bond7 [ 492.010802][T20507] netlink: 'syz.1.3529': attribute type 1 has an invalid length. [ 492.147531][T20502] bond3: entered promiscuous mode [ 492.202657][T20517] netlink: 'syz.3.3530': attribute type 1 has an invalid length. [ 492.456316][T20529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3534'. [ 492.841323][ T6540] net_ratelimit: 38 callbacks suppressed [ 492.841341][ T6540] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 493.021297][ T6534] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 493.150681][ T6540] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 493.292165][ T6540] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 493.316364][T16962] udevd[16962]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 493.371641][T16965] udevd[16965]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 493.407043][T10495] IPVS: starting estimator thread 0... [ 493.417525][T20564] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 493.442079][ T6534] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 493.535369][T20570] IPVS: using max 28 ests per chain, 67200 per kthread [ 493.591113][ T6534] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 493.750546][ T6540] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 493.900172][ T6534] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 493.925632][T20540] lo speed is unknown, defaulting to 1000 [ 494.170592][T20588] __nla_validate_parse: 4 callbacks suppressed [ 494.170625][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3548'. [ 494.380440][ T6534] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 494.395739][T20595] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3549'. [ 494.500806][ T6542] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 494.697296][T20596] syz.0.3549 (20596) used obsolete PPPIOCDETACH ioctl [ 495.129373][T20599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.158924][T20599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.529945][T11454] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.552216][T11454] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.574023][T11454] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.619885][T11454] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.822725][T20608] netlink: 'syz.3.3553': attribute type 2 has an invalid length. [ 496.097823][T20622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3557'. [ 496.151476][T20622] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3557'. [ 496.194467][T20622] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3557'. [ 496.245642][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3559'. [ 496.306641][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3559'. [ 496.542837][T20639] netlink: 'syz.0.3562': attribute type 1 has an invalid length. [ 496.775072][T20646] netlink: 280 bytes leftover after parsing attributes in process `syz.3.3564'. [ 496.811564][T20639] 8021q: adding VLAN 0 to HW filter on device bond6 [ 496.865413][T20640] bond6: (slave veth3): Enslaving as an active interface with a down link [ 496.924751][T20650] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 496.993995][T20644] bond6: (slave veth5): Enslaving as an active interface with a down link [ 497.128677][T20639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3562'. [ 497.194248][T20639] bond6: (slave bridge2): Enslaving as an active interface with a down link [ 523.964894][T20659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3566'. [ 523.977443][T20659] netlink: 'syz.1.3566': attribute type 1 has an invalid length. [ 524.063937][T20659] bond4: (slave veth3): Enslaving as an active interface with a down link [ 524.148139][T20667] net_ratelimit: 2 callbacks suppressed [ 524.148158][T20667] netlink: set zone limit has 4 unknown bytes [ 524.162452][T20672] bond4: (slave veth5): Enslaving as an active interface with a down link [ 524.483238][T20693] openvswitch: netlink: IPv6 tunnel dst address is zero [ 524.738722][T20698] syzkaller0: entered promiscuous mode [ 524.758250][T20698] syzkaller0: entered allmulticast mode [ 525.169766][T20723] netlink: 'syz.3.3580': attribute type 1 has an invalid length. [ 525.256391][T20703] syzkaller0: entered promiscuous mode [ 525.282896][T20703] syzkaller0: entered allmulticast mode [ 525.695931][T20749] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3588'. [ 525.707499][T20749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3588'. [ 526.246924][T20766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3591'. [ 529.372162][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3598'. [ 529.526104][T20788] netlink: 'syz.0.3597': attribute type 1 has an invalid length. [ 529.589319][T20796] netlink: 960 bytes leftover after parsing attributes in process `syz.2.3601'. [ 529.624316][T20796] netlink: 46 bytes leftover after parsing attributes in process `syz.2.3601'. [ 529.799329][T20804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3603'. [ 530.378296][T20825] IPv4: Oversized IP packet from 127.202.26.0 [ 530.572422][T20836] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 530.616862][T20838] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3613'. [ 530.692322][T20838] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 530.764305][T20839] 8021q: VLANs not supported on ip_vti0 [ 530.904842][T20849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3615'. [ 530.918475][T20850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3615'. [ 531.056428][T20856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3617'. [ 531.317566][T20862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3618'. [ 531.447931][T20875] netlink: 'syz.3.3621': attribute type 1 has an invalid length. [ 531.719992][T20888] netlink: 'syz.2.3625': attribute type 1 has an invalid length. [ 531.937191][T20888] syzkaller0: entered promiscuous mode [ 531.943812][T20888] syzkaller0: entered allmulticast mode [ 531.991048][T20888] xt_hashlimit: max too large, truncated to 1048576 [ 532.016256][T20888] xt_ecn: cannot match TCP bits for non-tcp packets [ 532.413905][T20911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3629'. [ 534.265752][T20904] Bluetooth: hci5: command 0x0406 tx timeout [ 536.253569][T20907] vlan2: entered allmulticast mode [ 536.258787][T20907] bond0: entered allmulticast mode [ 536.264726][T20907] bond_slave_0: entered allmulticast mode [ 536.270786][T20907] bond_slave_1: entered allmulticast mode [ 536.285892][T20922] netlink: 'syz.3.3632': attribute type 4 has an invalid length. [ 536.585533][T20950] netlink: 'syz.2.3640': attribute type 1 has an invalid length. [ 536.589401][T20953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3641'. [ 537.109759][T20968] netlink: 'syz.1.3645': attribute type 2 has an invalid length. [ 537.151680][T20968] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3645'. [ 537.886095][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3647'. [ 537.982234][T20962] tipc: Resetting bearer [ 538.233721][T20917] lo speed is unknown, defaulting to 1000 [ 538.295034][T20981] erspan0: left promiscuous mode [ 538.318502][T20981] gretap0: left promiscuous mode [ 538.369377][T11452] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.409875][T11452] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.485822][T11452] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.519815][T11452] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.717224][T21001] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 538.835060][T20996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3649'. [ 538.869476][T20996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3649'. [ 539.222068][T21017] netlink: 'syz.1.3654': attribute type 1 has an invalid length. [ 539.366855][T20974] Bluetooth: hci0: command 0x0406 tx timeout [ 539.377564][T20974] Bluetooth: hci3: command 0x0406 tx timeout [ 539.578827][T21036] netlink: 'syz.2.3659': attribute type 16 has an invalid length. [ 539.651598][T21036] netlink: 'syz.2.3659': attribute type 17 has an invalid length. [ 539.750823][T21023] syzkaller1: entered promiscuous mode [ 539.757753][T21023] syzkaller1: entered allmulticast mode [ 539.838220][T21029] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.867738][T21029] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.032800][T21036] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.040127][T21036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.054555][T21036] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.061828][T21036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.216971][T21036] hsr1: left allmulticast mode [ 540.232744][T21036] dummy0: left allmulticast mode [ 540.250971][T21036] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 540.302282][T21036] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.317691][T21036] 8021q: adding VLAN 0 to HW filter on device bond2 [ 540.422354][T21045] netlink: 51 bytes leftover after parsing attributes in process `syz.3.3661'. [ 540.561438][T21051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3664'. [ 540.653877][T21052] gretap1: entered allmulticast mode [ 540.711885][T21065] netlink: 'syz.0.3666': attribute type 13 has an invalid length. [ 540.731680][T21051] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 540.874646][T21071] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3667'. [ 540.914441][T21070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'. [ 541.095796][T21065] netlink: 'syz.0.3666': attribute type 2 has an invalid length. [ 541.136065][T21065] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3666'. [ 541.261692][T21082] netlink: 'syz.2.3670': attribute type 1 has an invalid length. [ 541.985584][T21106] syzkaller1: entered promiscuous mode [ 541.996237][T21106] syzkaller1: entered allmulticast mode [ 542.893928][ T6542] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 542.927828][ T6542] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.948786][T21152] __nla_validate_parse: 1 callbacks suppressed [ 542.948802][T21152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3685'. [ 542.982229][T21152] smc: net device wg2 applied user defined pnetid SYZ0 [ 543.022323][T21157] nbd: must specify at least one socket [ 543.174403][T21164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3688'. [ 543.231338][T21169] netlink: 'syz.2.3688': attribute type 10 has an invalid length. [ 543.305687][T21174] netlink: 'syz.1.3689': attribute type 1 has an invalid length. [ 543.436831][T10534] hid-generic 0005:0007:0007.0001: item fetching failed at offset 0/1 [ 543.468415][T10534] hid-generic 0005:0007:0007.0001: probe with driver hid-generic failed with error -22 [ 543.496603][T21161] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.505499][T21161] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.732341][T21161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.888957][T21161] macvtap1: left allmulticast mode [ 543.902821][T21161] bond2: left allmulticast mode [ 543.908397][T21161] bridge1: left allmulticast mode [ 543.914744][T21161] bridge1: left promiscuous mode [ 543.921792][T21161] macvtap2: left allmulticast mode [ 543.935387][T21161] vlan2: left allmulticast mode [ 543.941629][T21161] geneve1: left allmulticast mode [ 543.960703][T21161] ip6gre1: left allmulticast mode [ 544.016429][T21169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.027026][T21169] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 544.036621][T21169] team0: Failed to send options change via netlink (err -105) [ 544.047012][T21169] team0: Port device netdevsim1 added [ 544.054374][T21174] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 544.084232][T21178] gretap1: entered allmulticast mode [ 544.163989][T21123] lo speed is unknown, defaulting to 1000 [ 544.188550][T21181] syzkaller1: entered promiscuous mode [ 544.195847][T21181] syzkaller1: entered allmulticast mode [ 544.209078][ T6534] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.219987][ T6534] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.254752][ T6534] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.283492][ T6534] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.371251][T21191] netlink: 'syz.1.3694': attribute type 1 has an invalid length. [ 544.379219][T21190] netlink: 'syz.1.3694': attribute type 1 has an invalid length. [ 544.395091][T21191] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3694'. [ 544.422336][T21190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3694'. [ 544.867211][T21202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3696'. [ 544.894139][T21202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3696'. [ 544.952581][T21202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3696'. [ 545.021729][T21198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 545.229591][T21209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3697'. [ 545.525918][T21171] lo speed is unknown, defaulting to 1000 [ 545.808615][T21221] bond4: entered promiscuous mode [ 545.957692][T21228] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 545.970705][T21228] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 545.981879][T21228] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 546.408008][T21234] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 546.493263][T21235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3705'. [ 546.750601][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'. [ 547.014206][T21241] hsr_slave_1 (unregistering): left promiscuous mode [ 547.662443][T21284] xt_hashlimit: size too large, truncated to 1048576 [ 547.711795][T21279] block nbd3: server does not support multiple connections per device. [ 547.745842][T21279] block nbd3: shutting down sockets [ 547.777289][T21294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.218973][T21305] netlink: 'syz.4.3724': attribute type 1 has an invalid length. [ 548.241931][T21305] netlink: 'syz.4.3724': attribute type 2 has an invalid length. [ 548.309489][T21312] batadv_slave_0: Caught tx_queue_len zero misconfig [ 548.472655][T21312] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 548.592392][T21312] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 548.664119][T21312] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 548.768950][T21336] netlink: 'syz.1.3732': attribute type 11 has an invalid length. [ 548.887250][T21341] __nla_validate_parse: 1 callbacks suppressed [ 548.887270][T21341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3734'. [ 548.912511][T21335] xt_CT: No such helper "syz0" [ 549.124758][T21354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3735'. [ 549.204916][T21360] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 549.605239][T21372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3740'. [ 549.615361][T21373] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3740'. [ 550.065066][T21381] netlink: 'syz.1.3743': attribute type 1 has an invalid length. [ 550.074914][T21381] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3743'. [ 550.141778][T21381] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3743'. [ 550.466804][T21394] veth0_macvtap: Caught tx_queue_len zero misconfig [ 550.516388][T21396] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3747'. [ 550.585691][T21396] syzkaller0: entered promiscuous mode [ 550.592260][T21396] syzkaller0: entered allmulticast mode [ 550.774214][T21406] tun0: tun_chr_ioctl cmd 1074025681 [ 550.861511][T21411] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3751'. [ 551.164391][T21424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3755'. [ 551.343719][T21430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3759'. [ 551.623957][T21441] block nbd4: not configured, cannot reconfigure [ 551.827309][T21450] IPv6: sit1: Disabled Multicast RS [ 552.642189][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 553.067121][T21481] netlink: 'syz.0.3771': attribute type 1 has an invalid length. [ 553.280645][T21481] bond8: entered promiscuous mode [ 553.307714][T21481] 8021q: adding VLAN 0 to HW filter on device bond8 [ 553.373514][T21493] tipc: Started in network mode [ 553.389778][T21493] tipc: Node identity 4a99974edca4, cluster identity 4711 [ 553.416080][T21493] tipc: Enabled bearer , priority 0 [ 553.441136][T21484] syzkaller0: entered promiscuous mode [ 553.451372][T21484] syzkaller0: entered allmulticast mode [ 553.544998][T21482] tipc: Resetting bearer [ 553.653008][T21482] tipc: Disabling bearer [ 554.668490][T21528] netlink: 'syz.3.3784': attribute type 1 has an invalid length. [ 554.777841][T21528] 8021q: adding VLAN 0 to HW filter on device bond10 [ 554.801549][T21532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.823937][T21529] __nla_validate_parse: 2 callbacks suppressed [ 554.823968][T21529] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3784'. [ 554.854484][T21528] bond10: (slave dummy0): making interface the new active one [ 554.879024][T21528] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 554.924371][T21524] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 554.959835][T21527] bond10: (slave veth3): Enslaving as an active interface with a down link [ 555.019927][T21529] bond10: (slave dummy0): Releasing active interface [ 555.039500][T21529] bond10: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 555.099314][T21548] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 555.164257][ T6548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.219810][ T6548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.336257][T21555] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3788'. [ 555.364590][T21555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.401770][T21556] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.453512][T21555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.491863][T21560] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3788'. [ 555.525945][T21555] bond0 (unregistering): Released all slaves [ 555.646513][T21555] netlink: 324 bytes leftover after parsing attributes in process `syz.3.3788'. [ 555.668903][T21572] netlink: 'syz.2.3792': attribute type 1 has an invalid length. [ 555.679631][T21571] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 555.693886][T21572] netlink: 'syz.2.3792': attribute type 2 has an invalid length. [ 555.704868][T21572] netlink: 'syz.2.3792': attribute type 3 has an invalid length. [ 555.715445][T21572] netlink: 'syz.2.3792': attribute type 1 has an invalid length. [ 555.724957][T21572] netlink: 'syz.2.3792': attribute type 2 has an invalid length. [ 555.734417][T21572] netlink: 'syz.2.3792': attribute type 3 has an invalid length. [ 555.772633][T21575] netlink: 'syz.0.3794': attribute type 4 has an invalid length. [ 555.807922][T21575] netlink: 'syz.0.3794': attribute type 4 has an invalid length. [ 556.064909][T21597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3799'. [ 556.084955][T21598] netlink: 'syz.1.3798': attribute type 4 has an invalid length. [ 556.115188][T21598] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3798'. [ 556.136094][T21597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3799'. [ 556.173212][T21598] .`: renamed from bond0 [ 556.234725][T21605] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3801'. [ 556.453372][T21605] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3801'. [ 556.496639][T21613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.563855][T21605] 8021q: adding VLAN 0 to HW filter on device bond11 [ 556.573705][T21605] bond0: (slave bond11): making interface the new active one [ 556.583879][T21605] bond0: (slave bond11): Enslaving as an active interface with an up link [ 556.963835][T21616] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.971537][T21616] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.444954][T21636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3808'. [ 557.523902][T21616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.563276][T21616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.275354][T21625] bond0: (slave bridge5): making interface the new active one [ 558.302776][T21625] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 558.497444][ T6556] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.541810][ T6556] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.618721][ T6556] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.672324][ T6556] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.685937][ T29] audit: type=1804 audit(1780810100.967:14): pid=21657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3813" name="/newroot/175/memory.events" dev="tmpfs" ino=911 res=1 errno=0 [ 558.785392][ T29] audit: type=1800 audit(1780810100.967:15): pid=21657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3813" name="memory.events" dev="tmpfs" ino=911 res=0 errno=0 [ 559.020560][T21665] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 560.384870][T21690] team0 (unregistering): Port device team_slave_0 removed [ 560.427734][T21690] team0 (unregistering): Port device team_slave_1 removed [ 560.643959][T21697] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 561.173788][T21711] __nla_validate_parse: 3 callbacks suppressed [ 561.173809][T21711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3828'. [ 561.531703][T21734] sctp: [Deprecated]: syz.1.3834 (pid 21734) Use of int in max_burst socket option. [ 561.531703][T21734] Use struct sctp_assoc_value instead [ 561.574711][T21733] validate_nla: 4 callbacks suppressed [ 561.574746][T21733] netlink: 'syz.0.3833': attribute type 1 has an invalid length. [ 561.616277][T21734] netlink: 'syz.1.3834': attribute type 1 has an invalid length. [ 561.684534][T21734] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3834'. [ 561.783135][T21744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3836'. [ 562.340776][ T5293] veth0_vlan: left promiscuous mode [ 562.394982][ T5293] veth0_vlan: entered promiscuous mode [ 562.637813][T21738] lo speed is unknown, defaulting to 1000 [ 563.472414][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3847'. [ 563.965514][T21746] lo speed is unknown, defaulting to 1000 [ 564.132368][T21817] netlink: 'syz.3.3850': attribute type 1 has an invalid length. [ 564.727575][T21832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3854'. [ 564.780373][T21834] lo: Caught tx_queue_len zero misconfig [ 565.585863][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3864'. [ 565.587868][T21867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3864'. [ 565.801523][T21881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3868'. [ 565.840677][T21881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3868'. [ 565.858169][T21887] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3871'. [ 565.879031][T21890] netlink: 'syz.3.3871': attribute type 1 has an invalid length. [ 565.913641][T21891] netlink: 'syz.4.3866': attribute type 1 has an invalid length. [ 566.022230][T21890] bond14: entered promiscuous mode [ 566.031918][T21890] 8021q: adding VLAN 0 to HW filter on device bond14 [ 566.361056][T21908] vlan0: Caught tx_queue_len zero misconfig [ 566.736568][T21922] __nla_validate_parse: 1 callbacks suppressed [ 566.736596][T21922] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3879'. [ 566.775971][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3878'. [ 566.977647][T21929] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3882'. [ 567.297224][T21941] syzkaller1: entered allmulticast mode [ 567.308904][T21944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3887'. [ 567.319781][T21941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3885'. [ 567.341386][T21941] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3885'. [ 567.438043][T21944] hsr_slave_1 (unregistering): left promiscuous mode [ 567.504831][T21944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3887'. [ 567.524592][T21944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3887'. [ 567.534351][T21944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3887'. [ 567.555395][T21944] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3887'. [ 567.855520][T21964] x_tables: duplicate underflow at hook 2 [ 568.269026][T21953] sctp: [Deprecated]: syz.2.3889 (pid 21953) Use of int in max_burst socket option. [ 568.269026][T21953] Use struct sctp_assoc_value instead [ 568.319700][T21953] netlink: 'syz.2.3889': attribute type 1 has an invalid length. [ 568.995999][T21953] lo speed is unknown, defaulting to 1000 [ 570.596866][T22047] netlink: 'syz.1.3914': attribute type 1 has an invalid length. [ 570.659662][T22047] 8021q: adding VLAN 0 to HW filter on device bond7 [ 570.813595][T22052] bond7: (slave veth7): Enslaving as an active interface with a down link [ 570.835947][T22057] FAULT_INJECTION: forcing a failure. [ 570.835947][T22057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.889314][T22057] CPU: 1 UID: 0 PID: 22057 Comm: syz.4.3917 Not tainted syzkaller #0 PREEMPT(full) [ 570.889347][T22057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.889363][T22057] Call Trace: [ 570.889374][T22057] [ 570.889382][T22057] dump_stack_lvl+0xe8/0x150 [ 570.889409][T22057] should_fail_ex+0x412/0x560 [ 570.889433][T22057] _copy_from_user+0x2d/0xb0 [ 570.889455][T22057] ___sys_sendmsg+0x1c6/0x360 [ 570.889474][T22057] ? __lock_acquire+0x6b5/0x2cf0 [ 570.889497][T22057] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.889545][T22057] ? __fget_files+0x2a/0x420 [ 570.889564][T22057] ? __fget_files+0x3a0/0x420 [ 570.889594][T22057] __x64_sys_sendmsg+0x1bd/0x2a0 [ 570.889616][T22057] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 570.889654][T22057] ? __pfx_ksys_write+0x10/0x10 [ 570.889685][T22057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.889704][T22057] do_syscall_64+0x174/0x580 [ 570.889726][T22057] ? clear_bhb_loop+0x40/0x90 [ 570.889747][T22057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.889766][T22057] RIP: 0033:0x7f605ed9ce59 [ 570.889783][T22057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.889798][T22057] RSP: 002b:00007f605cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.889816][T22057] RAX: ffffffffffffffda RBX: 00007f605f015fa0 RCX: 00007f605ed9ce59 [ 570.889826][T22057] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 570.889837][T22057] RBP: 00007f605cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 570.889848][T22057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.889858][T22057] R13: 00007f605f016038 R14: 00007f605f015fa0 R15: 00007ffc1b5f8858 [ 570.889887][T22057] [ 571.185784][T22072] netlink: 'syz.1.3921': attribute type 2 has an invalid length. [ 571.196096][T22072] netlink: 'syz.1.3921': attribute type 8 has an invalid length. [ 571.383641][T22084] netlink: 'syz.0.3925': attribute type 14 has an invalid length. [ 571.531888][T20904] Bluetooth: hci4: link tx timeout [ 571.539529][T20904] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 571.608358][T22090] syzkaller1: entered promiscuous mode [ 571.654286][T22090] syzkaller1: entered allmulticast mode [ 571.691085][T22096] 8021q: VLANs not supported on nlmon0 [ 571.805258][T22107] netlink: 'syz.4.3931': attribute type 1 has an invalid length. [ 571.820282][T22109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.906351][T22109] __nla_validate_parse: 67 callbacks suppressed [ 571.906370][T22109] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3932'. [ 572.137160][T21024] block nbd3: Receive control failed (result -22) [ 572.185949][T22120] nbd3: detected capacity change from 0 to 32 [ 572.264226][T20707] block nbd3: Dead connection, failed to find a fallback [ 572.340702][T20707] block nbd3: shutting down sockets [ 572.391565][T20707] blk_print_req_error: 138 callbacks suppressed [ 572.391582][T20707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.482053][T20707] buffer_io_error: 138 callbacks suppressed [ 572.482073][T20707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.540288][T20707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.583143][T20707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.615826][T20707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.648304][T22136] syzkaller0: entered promiscuous mode [ 572.654743][T20707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.661392][T22136] syzkaller0: entered allmulticast mode [ 572.697297][T20707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.708918][T22147] xt_hashlimit: overflow, rate too high: 0 [ 572.738720][T22141] TC_ACT_REPEAT abuse ? [ 572.779793][T20707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.837115][T20707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 572.948347][T20707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 572.978668][T20707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 573.019268][T20707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 573.063060][T20707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 573.106818][T20707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 573.146597][T20707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 573.192490][T20707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 573.230326][T20707] ldm_validate_partition_table(): Disk read failed. [ 573.254010][T20707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 573.308378][T20707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 573.316328][T20707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 573.325383][T20707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 573.333523][T20707] Dev nbd3: unable to read RDB block 0 [ 573.339660][T20707] nbd3: unable to read partition table [ 573.354149][T20707] ldm_validate_partition_table(): Disk read failed. [ 573.365474][T20707] Dev nbd3: unable to read RDB block 0 [ 573.371580][T20707] nbd3: unable to read partition table [ 573.546759][T11454] TC_ACT_REPEAT abuse ? [ 573.620075][T20974] Bluetooth: hci4: command 0x0406 tx timeout [ 573.629780][T22183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3947'. [ 573.777503][T22188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3947'. [ 573.818955][T22188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3947'. [ 573.924206][T22183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 574.064250][T22190] syzkaller0: entered promiscuous mode [ 574.069784][T22190] syzkaller0: entered allmulticast mode [ 574.429351][T22212] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3953'. [ 574.842120][T22232] dummy0: entered promiscuous mode [ 574.848876][T22232] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 574.858343][T22232] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 574.867256][T22232] dummy0: left promiscuous mode [ 574.896045][T22230] netlink: 'syz.0.3957': attribute type 3 has an invalid length. [ 575.133108][T22203] lo speed is unknown, defaulting to 1000 [ 575.280854][T20904] Bluetooth: hci2: command 0x0405 tx timeout [ 575.351488][T22245] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3960'. [ 575.364427][T22245] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3960'. [ 575.510561][T22243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3959'. [ 575.728337][T22252] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3961'. [ 576.438196][T22277] tipc: New replicast peer: 255.255.255.255 [ 576.444805][T22277] tipc: Enabled bearer , priority 10 [ 576.510135][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3964'. [ 576.522492][T22277] netlink: 'syz.0.3964': attribute type 1 has an invalid length. [ 576.582801][T22277] bond10: entered promiscuous mode [ 576.634211][T22287] netlink: 'syz.3.3965': attribute type 1 has an invalid length. [ 576.740290][T22277] 8021q: adding VLAN 0 to HW filter on device bond10 [ 577.758078][T22321] __nla_validate_parse: 1 callbacks suppressed [ 577.758097][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3974'. [ 578.645849][T22312] lo speed is unknown, defaulting to 1000 [ 579.036027][T22383] tipc: Enabling of bearer rejected, failed to enable media [ 579.060722][T22385] netlink: 'syz.1.3989': attribute type 83 has an invalid length. [ 579.135388][T22392] FAULT_INJECTION: forcing a failure. [ 579.135388][T22392] name failslab, interval 1, probability 0, space 0, times 0 [ 579.161758][T22392] CPU: 1 UID: 0 PID: 22392 Comm: syz.4.3992 Not tainted syzkaller #0 PREEMPT(full) [ 579.161784][T22392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 579.161793][T22392] Call Trace: [ 579.161800][T22392] [ 579.161808][T22392] dump_stack_lvl+0xe8/0x150 [ 579.161834][T22392] should_fail_ex+0x412/0x560 [ 579.161856][T22392] ? __d_alloc+0x37/0x6f0 [ 579.161880][T22392] should_failslab+0xa8/0x100 [ 579.161898][T22392] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 579.161931][T22392] __d_alloc+0x37/0x6f0 [ 579.161960][T22392] d_alloc+0x4b/0x190 [ 579.161979][T22392] ? lookup_one_qstr_excl+0xc4/0x360 [ 579.162004][T22392] lookup_one_qstr_excl+0xd8/0x360 [ 579.162027][T22392] ? lookup_noperm_common+0x245/0x430 [ 579.162051][T22392] start_dirop+0x5c/0x90 [ 579.162073][T22392] simple_start_creating+0xcc/0x110 [ 579.162096][T22392] ? __pfx_simple_start_creating+0x10/0x10 [ 579.162119][T22392] ? do_raw_spin_unlock+0xf5/0x210 [ 579.162143][T22392] ? mntput+0x65/0xc0 [ 579.162166][T22392] debugfs_start_creating+0xdb/0x1a0 [ 579.162189][T22392] __debugfs_create_file+0x6f/0x400 [ 579.162214][T22392] debugfs_create_file_full+0x3f/0x60 [ 579.162237][T22392] ref_tracker_dir_debugfs+0x197/0x360 [ 579.162258][T22392] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 579.162311][T22392] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 579.162336][T22392] ? alloc_netdev_mqs+0xa8/0x1210 [ 579.162362][T22392] ? __raw_spin_lock_init+0x45/0x100 [ 579.162387][T22392] alloc_netdev_mqs+0x274/0x1210 [ 579.162408][T22392] ? __pfx_hsr_dev_setup+0x10/0x10 [ 579.162438][T22392] rtnl_create_link+0x31f/0xd70 [ 579.162468][T22392] rtnl_newlink_create+0x277/0xb70 [ 579.162489][T22392] ? __pfx___nla_validate_parse+0x10/0x10 [ 579.162521][T22392] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 579.162544][T22392] ? __pfx___mutex_lock+0x10/0x10 [ 579.162574][T22392] ? ns_capable+0x89/0xe0 [ 579.162597][T22392] rtnl_newlink+0x166a/0x1bb0 [ 579.162630][T22392] ? __pfx_rtnl_newlink+0x10/0x10 [ 579.162651][T22392] ? __lock_acquire+0x6b5/0x2cf0 [ 579.162671][T22392] ? __lock_acquire+0x6b5/0x2cf0 [ 579.162700][T22392] ? unwind_next_frame+0xa6/0x2550 [ 579.162729][T22392] ? unwind_next_frame+0xa6/0x2550 [ 579.162753][T22392] ? is_bpf_text_address+0x26/0x2b0 [ 579.162782][T22392] ? is_bpf_text_address+0x26/0x2b0 [ 579.162805][T22392] ? __lock_acquire+0x6b5/0x2cf0 [ 579.162824][T22392] ? kernel_text_address+0xa5/0xe0 [ 579.162848][T22392] ? __kernel_text_address+0xd/0x30 [ 579.162871][T22392] ? unwind_get_return_address+0x4d/0x90 [ 579.162892][T22392] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 579.162917][T22392] ? arch_stack_walk+0xfb/0x150 [ 579.162949][T22392] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 579.162983][T22392] ? __pfx_rtnl_newlink+0x10/0x10 [ 579.163000][T22392] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 579.163017][T22392] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 579.163039][T22392] ? netlink_sendmsg+0x5d4/0xb40 [ 579.163062][T22392] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 579.163077][T22392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 579.163095][T22392] ? __lock_acquire+0x6b5/0x2cf0 [ 579.163125][T22392] netlink_rcv_skb+0x232/0x4b0 [ 579.163144][T22392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 579.163162][T22392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 579.163193][T22392] ? netlink_deliver_tap+0x2e/0x1b0 [ 579.163211][T22392] ? netlink_deliver_tap+0x2e/0x1b0 [ 579.163234][T22392] netlink_unicast+0x75c/0x8e0 [ 579.163262][T22392] netlink_sendmsg+0x813/0xb40 [ 579.163296][T22392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.163319][T22392] ? aa_sock_msg_perm+0xf1/0x1b0 [ 579.163345][T22392] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 579.163371][T22392] ____sys_sendmsg+0x972/0x9f0 [ 579.163388][T22392] ? __might_fault+0xaf/0x130 [ 579.163415][T22392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.163443][T22392] ? import_iovec+0x73/0xa0 [ 579.163467][T22392] ___sys_sendmsg+0x2a5/0x360 [ 579.163484][T22392] ? __lock_acquire+0x6b5/0x2cf0 [ 579.163506][T22392] ? __pfx____sys_sendmsg+0x10/0x10 [ 579.163560][T22392] ? __fget_files+0x2a/0x420 [ 579.163578][T22392] ? __fget_files+0x3a0/0x420 [ 579.163603][T22392] __x64_sys_sendmsg+0x1bd/0x2a0 [ 579.163623][T22392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 579.163655][T22392] ? __pfx_ksys_write+0x10/0x10 [ 579.163686][T22392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.163704][T22392] do_syscall_64+0x174/0x580 [ 579.163720][T22392] ? trace_irq_disable+0x3b/0x140 [ 579.163742][T22392] ? clear_bhb_loop+0x40/0x90 [ 579.163761][T22392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.163776][T22392] RIP: 0033:0x7f605ed9ce59 [ 579.163793][T22392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.163808][T22392] RSP: 002b:00007f605cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.163828][T22392] RAX: ffffffffffffffda RBX: 00007f605f015fa0 RCX: 00007f605ed9ce59 [ 579.163841][T22392] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 579.163852][T22392] RBP: 00007f605cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 579.163863][T22392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.163874][T22392] R13: 00007f605f016038 R14: 00007f605f015fa0 R15: 00007ffc1b5f8858 [ 579.163905][T22392] [ 579.832804][T22392] dummy0: entered promiscuous mode [ 579.839194][T22392] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 579.847761][T22392] debugfs: 'hsr1' already exists in 'hsr' [ 579.853536][T22392] Cannot create hsr debugfs directory [ 579.859128][T22392] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 579.869049][T22392] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 579.879410][T22392] hsr1: entered allmulticast mode [ 579.884465][T22392] dummy0: entered allmulticast mode [ 579.889682][T22392] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 579.898144][T22402] ip6gretap0: entered allmulticast mode [ 580.188921][T22416] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3999'. [ 580.191736][T22417] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.3997'. [ 580.224165][T22416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.272941][T22413] netlink: 'syz.3.4000': attribute type 62 has an invalid length. [ 580.302794][T22416] tipc: Started in network mode [ 580.318346][T22416] tipc: Node identity fef2d20000000000000000000000001, cluster identity 4711 [ 580.347866][T22416] tipc: Enabling of bearer rejected, failed to enable media [ 580.411284][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4002'. [ 580.488233][T22424] bond11 (unregistering): Released all slaves [ 580.543541][T22436] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 580.937676][T22452] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4010'. [ 580.949650][T22452] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4010'. [ 581.064389][T22463] netlink: 'syz.4.4015': attribute type 8 has an invalid length. [ 581.158158][T22468] netlink: 'syz.1.4016': attribute type 1 has an invalid length. [ 581.165939][T22468] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4016'. [ 581.233932][T22471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.346599][T22475] openvswitch: netlink: Message has 1 unknown bytes. [ 581.377121][T22475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.469305][T22476] geneve2: entered promiscuous mode [ 581.498662][ T6545] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 51884 - 0 [ 581.508876][T22480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4018'. [ 581.513855][ T6545] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 51884 - 0 [ 581.528188][ T6545] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 51884 - 0 [ 581.537359][ T6545] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 51884 - 0 [ 581.641629][T22482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4019'. [ 581.645263][T22486] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4020'. [ 581.724992][T22482] netlink: 'syz.0.4019': attribute type 1 has an invalid length. [ 581.754412][T22491] netlink: 'syz.4.4021': attribute type 1 has an invalid length. [ 581.757370][T22483] : entered promiscuous mode [ 581.930199][ T29] audit: type=1804 audit(1780810124.217:16): pid=22506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4024" name="/newroot/221/cgroup.controllers" dev="tmpfs" ino=1148 res=1 errno=0 [ 581.952689][ T29] audit: type=1800 audit(1780810124.217:17): pid=22506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4024" name="cgroup.controllers" dev="tmpfs" ino=1148 res=0 errno=0 [ 581.992918][T22490] bond6: (slave veth7): Enslaving as an active interface with a down link [ 582.040764][T22508] team0: No ports can be present during mode change [ 582.118306][T22515] FAULT_INJECTION: forcing a failure. [ 582.118306][T22515] name failslab, interval 1, probability 0, space 0, times 0 [ 582.132180][T22515] CPU: 0 UID: 0 PID: 22515 Comm: syz.4.4027 Not tainted syzkaller #0 PREEMPT(full) [ 582.132205][T22515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 582.132216][T22515] Call Trace: [ 582.132223][T22515] [ 582.132231][T22515] dump_stack_lvl+0xe8/0x150 [ 582.132258][T22515] should_fail_ex+0x412/0x560 [ 582.132284][T22515] should_failslab+0xa8/0x100 [ 582.132301][T22515] ? security_inode_alloc+0x39/0x310 [ 582.132326][T22515] kmem_cache_alloc_noprof+0x87/0x650 [ 582.132360][T22515] security_inode_alloc+0x39/0x310 [ 582.132388][T22515] inode_init_always_gfp+0x995/0xd50 [ 582.132416][T22515] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 582.132436][T22515] alloc_inode+0x82/0x1b0 [ 582.132458][T22515] new_inode+0x22/0x170 [ 582.132483][T22515] __debugfs_create_file+0xb8/0x400 [ 582.132508][T22515] debugfs_create_file_full+0x3f/0x60 [ 582.132535][T22515] ref_tracker_dir_debugfs+0x197/0x360 [ 582.132555][T22515] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 582.132602][T22515] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 582.132627][T22515] ? alloc_netdev_mqs+0xa8/0x1210 [ 582.132654][T22515] ? __raw_spin_lock_init+0x45/0x100 [ 582.132681][T22515] alloc_netdev_mqs+0x274/0x1210 [ 582.132702][T22515] ? __pfx_hsr_dev_setup+0x10/0x10 [ 582.132732][T22515] rtnl_create_link+0x31f/0xd70 [ 582.132762][T22515] rtnl_newlink_create+0x277/0xb70 [ 582.132783][T22515] ? __pfx___nla_validate_parse+0x10/0x10 [ 582.132815][T22515] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 582.132839][T22515] ? __pfx___mutex_lock+0x10/0x10 [ 582.132870][T22515] ? ns_capable+0x89/0xe0 [ 582.132894][T22515] rtnl_newlink+0x166a/0x1bb0 [ 582.132928][T22515] ? __pfx_rtnl_newlink+0x10/0x10 [ 582.132959][T22515] ? __lock_acquire+0x6b5/0x2cf0 [ 582.132981][T22515] ? __lock_acquire+0x6b5/0x2cf0 [ 582.133011][T22515] ? unwind_next_frame+0xa6/0x2550 [ 582.133040][T22515] ? unwind_next_frame+0xa6/0x2550 [ 582.133063][T22515] ? is_bpf_text_address+0x26/0x2b0 [ 582.133094][T22515] ? is_bpf_text_address+0x26/0x2b0 [ 582.133118][T22515] ? __lock_acquire+0x6b5/0x2cf0 [ 582.133141][T22515] ? kernel_text_address+0xa5/0xe0 [ 582.133166][T22515] ? __kernel_text_address+0xd/0x30 [ 582.133189][T22515] ? unwind_get_return_address+0x4d/0x90 [ 582.133209][T22515] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 582.133233][T22515] ? arch_stack_walk+0xfb/0x150 [ 582.133265][T22515] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 582.133299][T22515] ? __pfx_rtnl_newlink+0x10/0x10 [ 582.133317][T22515] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 582.133333][T22515] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 582.133357][T22515] ? netlink_sendmsg+0x5d4/0xb40 [ 582.133379][T22515] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 582.133396][T22515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 582.133416][T22515] ? __lock_acquire+0x6b5/0x2cf0 [ 582.133448][T22515] netlink_rcv_skb+0x232/0x4b0 [ 582.133470][T22515] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 582.133491][T22515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 582.133523][T22515] ? netlink_deliver_tap+0x2e/0x1b0 [ 582.133543][T22515] ? netlink_deliver_tap+0x2e/0x1b0 [ 582.133570][T22515] netlink_unicast+0x75c/0x8e0 [ 582.133601][T22515] netlink_sendmsg+0x813/0xb40 [ 582.133632][T22515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.133657][T22515] ? aa_sock_msg_perm+0xf1/0x1b0 [ 582.133685][T22515] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 582.133712][T22515] ____sys_sendmsg+0x972/0x9f0 [ 582.133733][T22515] ? __might_fault+0xaf/0x130 [ 582.133762][T22515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.133794][T22515] ? import_iovec+0x73/0xa0 [ 582.133820][T22515] ___sys_sendmsg+0x2a5/0x360 [ 582.133839][T22515] ? __lock_acquire+0x6b5/0x2cf0 [ 582.133862][T22515] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.133921][T22515] ? __fget_files+0x2a/0x420 [ 582.133948][T22515] ? __fget_files+0x3a0/0x420 [ 582.133981][T22515] __x64_sys_sendmsg+0x1bd/0x2a0 [ 582.134005][T22515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.134036][T22515] ? __pfx_ksys_write+0x10/0x10 [ 582.134070][T22515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.134090][T22515] do_syscall_64+0x174/0x580 [ 582.134108][T22515] ? trace_irq_disable+0x3b/0x140 [ 582.134131][T22515] ? clear_bhb_loop+0x40/0x90 [ 582.134152][T22515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.134168][T22515] RIP: 0033:0x7f605ed9ce59 [ 582.134185][T22515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.134199][T22515] RSP: 002b:00007f605cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.134218][T22515] RAX: ffffffffffffffda RBX: 00007f605f015fa0 RCX: 00007f605ed9ce59 [ 582.134231][T22515] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 582.134243][T22515] RBP: 00007f605cff6090 R08: 0000000000000000 R09: 0000000000000000 [ 582.134253][T22515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.134263][T22515] R13: 00007f605f016038 R14: 00007f605f015fa0 R15: 00007ffc1b5f8858 [ 582.134295][T22515] [ 582.134536][T22515] debugfs: out of free dentries, can not create file 'netdev@ffff8880553b4658' [ 582.242573][T22517] netlink: del zone limit has 8 unknown bytes [ 582.842406][T22531] __nla_validate_parse: 1 callbacks suppressed [ 582.842424][T22531] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4030'. [ 583.063899][T22548] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4036'. [ 583.097206][T22548] vti0: entered promiscuous mode [ 583.337811][T22567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4039'. [ 583.391303][T22572] netlink: 'syz.0.4039': attribute type 1 has an invalid length. [ 583.648136][T22551] openvswitch: netlink: IPv4 tun info is not correct [ 583.848923][T22587] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4044'. [ 583.865616][T22587] netlink: 470 bytes leftover after parsing attributes in process `syz.1.4044'. [ 583.906062][T22583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4043'. [ 584.057087][T22585] lo speed is unknown, defaulting to 1000 [ 584.148902][T22593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4045'. [ 584.363216][T22599] FAULT_INJECTION: forcing a failure. [ 584.363216][T22599] name failslab, interval 1, probability 0, space 0, times 0 [ 584.400737][T22599] CPU: 1 UID: 0 PID: 22599 Comm: syz.0.4047 Not tainted syzkaller #0 PREEMPT(full) [ 584.400764][T22599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 584.400774][T22599] Call Trace: [ 584.400781][T22599] [ 584.400790][T22599] dump_stack_lvl+0xe8/0x150 [ 584.400812][T22599] should_fail_ex+0x412/0x560 [ 584.400837][T22599] should_failslab+0xa8/0x100 [ 584.400855][T22599] ? security_inode_alloc+0x39/0x310 [ 584.400880][T22599] kmem_cache_alloc_noprof+0x87/0x650 [ 584.400910][T22599] security_inode_alloc+0x39/0x310 [ 584.400936][T22599] inode_init_always_gfp+0x995/0xd50 [ 584.400964][T22599] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 584.400985][T22599] alloc_inode+0x82/0x1b0 [ 584.401006][T22599] new_inode+0x22/0x170 [ 584.401030][T22599] __debugfs_create_file+0xb8/0x400 [ 584.401055][T22599] debugfs_create_file_full+0x3f/0x60 [ 584.401080][T22599] ref_tracker_dir_debugfs+0x197/0x360 [ 584.401101][T22599] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 584.401150][T22599] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 584.401176][T22599] ? alloc_netdev_mqs+0xa8/0x1210 [ 584.401202][T22599] ? __raw_spin_lock_init+0x45/0x100 [ 584.401239][T22599] alloc_netdev_mqs+0x274/0x1210 [ 584.401259][T22599] ? __pfx_hsr_dev_setup+0x10/0x10 [ 584.401285][T22599] rtnl_create_link+0x31f/0xd70 [ 584.401314][T22599] rtnl_newlink_create+0x277/0xb70 [ 584.401334][T22599] ? __pfx___nla_validate_parse+0x10/0x10 [ 584.401367][T22599] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 584.401392][T22599] ? __pfx___mutex_lock+0x10/0x10 [ 584.401422][T22599] ? ns_capable+0x89/0xe0 [ 584.401445][T22599] rtnl_newlink+0x166a/0x1bb0 [ 584.401480][T22599] ? __pfx_rtnl_newlink+0x10/0x10 [ 584.401505][T22599] ? __lock_acquire+0x6b5/0x2cf0 [ 584.401527][T22599] ? __lock_acquire+0x6b5/0x2cf0 [ 584.401557][T22599] ? unwind_next_frame+0xa6/0x2550 [ 584.401586][T22599] ? unwind_next_frame+0xa6/0x2550 [ 584.401610][T22599] ? is_bpf_text_address+0x26/0x2b0 [ 584.401641][T22599] ? is_bpf_text_address+0x26/0x2b0 [ 584.401665][T22599] ? __lock_acquire+0x6b5/0x2cf0 [ 584.401685][T22599] ? kernel_text_address+0xa5/0xe0 [ 584.401710][T22599] ? __kernel_text_address+0xd/0x30 [ 584.401732][T22599] ? unwind_get_return_address+0x4d/0x90 [ 584.401753][T22599] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 584.401778][T22599] ? arch_stack_walk+0xfb/0x150 [ 584.401811][T22599] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 584.401845][T22599] ? __pfx_rtnl_newlink+0x10/0x10 [ 584.401863][T22599] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 584.401880][T22599] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 584.401903][T22599] ? netlink_sendmsg+0x5d4/0xb40 [ 584.401926][T22599] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 584.401943][T22599] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.401963][T22599] ? __lock_acquire+0x6b5/0x2cf0 [ 584.401997][T22599] netlink_rcv_skb+0x232/0x4b0 [ 584.402019][T22599] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 584.402040][T22599] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 584.402074][T22599] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.402095][T22599] ? netlink_deliver_tap+0x2e/0x1b0 [ 584.402121][T22599] netlink_unicast+0x75c/0x8e0 [ 584.402152][T22599] netlink_sendmsg+0x813/0xb40 [ 584.402184][T22599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 584.402216][T22599] ? aa_sock_msg_perm+0xf1/0x1b0 [ 584.402245][T22599] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 584.402272][T22599] ____sys_sendmsg+0x972/0x9f0 [ 584.402293][T22599] ? __might_fault+0xaf/0x130 [ 584.402323][T22599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 584.402354][T22599] ? import_iovec+0x73/0xa0 [ 584.402379][T22599] ___sys_sendmsg+0x2a5/0x360 [ 584.402399][T22599] ? __lock_acquire+0x6b5/0x2cf0 [ 584.402422][T22599] ? __pfx____sys_sendmsg+0x10/0x10 [ 584.402482][T22599] ? __fget_files+0x2a/0x420 [ 584.402503][T22599] ? __fget_files+0x3a0/0x420 [ 584.402535][T22599] __x64_sys_sendmsg+0x1bd/0x2a0 [ 584.402559][T22599] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 584.402590][T22599] ? __pfx_ksys_write+0x10/0x10 [ 584.402624][T22599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.402644][T22599] do_syscall_64+0x174/0x580 [ 584.402663][T22599] ? trace_irq_disable+0x3b/0x140 [ 584.402687][T22599] ? clear_bhb_loop+0x40/0x90 [ 584.402709][T22599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.402726][T22599] RIP: 0033:0x7f320eb9ce59 [ 584.402745][T22599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.402760][T22599] RSP: 002b:00007f320fa37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.402780][T22599] RAX: ffffffffffffffda RBX: 00007f320ee15fa0 RCX: 00007f320eb9ce59 [ 584.402793][T22599] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 584.402805][T22599] RBP: 00007f320fa37090 R08: 0000000000000000 R09: 0000000000000000 [ 584.402815][T22599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.402825][T22599] R13: 00007f320ee16038 R14: 00007f320ee15fa0 R15: 00007fff3fb20e98 [ 584.402858][T22599] [ 584.402897][T22599] debugfs: out of free dentries, can not create file 'netdev@ffff8880816fc658' [ 584.620930][T22604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4048'. [ 584.634296][T22607] netlink: 'syz.2.4050': attribute type 10 has an invalid length. [ 584.967641][T22607] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4050'. [ 585.105268][T22617] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 585.380477][T22622] syzkaller1: entered promiscuous mode [ 585.386272][T22622] syzkaller1: entered allmulticast mode [ 585.697010][T22638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4057'. [ 585.721324][T22638] netlink: 'syz.0.4057': attribute type 1 has an invalid length. [ 585.843135][T22619] lo speed is unknown, defaulting to 1000 [ 586.230571][T22645] lo speed is unknown, defaulting to 1000 [ 587.912654][T22695] __nla_validate_parse: 1 callbacks suppressed [ 587.912675][T22695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4073'. [ 588.326309][T22719] netlink: 'syz.4.4080': attribute type 4 has an invalid length. [ 588.328988][T22720] netlink: 'syz.4.4080': attribute type 4 has an invalid length. [ 588.561238][T22729] 8021q: VLANs not supported on ip6gre0 [ 588.819195][T22738] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 589.107786][T22750] FAULT_INJECTION: forcing a failure. [ 589.107786][T22750] name failslab, interval 1, probability 0, space 0, times 0 [ 589.123027][T22750] CPU: 1 UID: 0 PID: 22750 Comm: syz.0.4089 Not tainted syzkaller #0 PREEMPT(full) [ 589.123054][T22750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.123064][T22750] Call Trace: [ 589.123070][T22750] [ 589.123078][T22750] dump_stack_lvl+0xe8/0x150 [ 589.123105][T22750] should_fail_ex+0x412/0x560 [ 589.123129][T22750] should_failslab+0xa8/0x100 [ 589.123148][T22750] __kmalloc_cache_noprof+0x88/0x660 [ 589.123174][T22750] ? __hw_addr_create+0x60/0x250 [ 589.123197][T22750] __hw_addr_create+0x60/0x250 [ 589.123215][T22750] ? stack_depot_init+0x36/0x1a0 [ 589.123236][T22750] __hw_addr_add_ex+0x1c2/0x520 [ 589.123262][T22750] dev_addr_init+0x15e/0x240 [ 589.123287][T22750] ? __pfx_dev_addr_init+0x10/0x10 [ 589.123309][T22750] ? alloc_netdev_mqs+0xa8/0x1210 [ 589.123339][T22750] alloc_netdev_mqs+0x2b3/0x1210 [ 589.123357][T22750] ? __pfx_hsr_dev_setup+0x10/0x10 [ 589.123395][T22750] rtnl_create_link+0x31f/0xd70 [ 589.123424][T22750] rtnl_newlink_create+0x277/0xb70 [ 589.123445][T22750] ? __pfx___nla_validate_parse+0x10/0x10 [ 589.123470][T22750] ? irqentry_exit+0x218/0x8b0 [ 589.123493][T22750] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 589.123517][T22750] ? __pfx___mutex_lock+0x10/0x10 [ 589.123547][T22750] ? ns_capable+0x89/0xe0 [ 589.123570][T22750] rtnl_newlink+0x166a/0x1bb0 [ 589.123602][T22750] ? __pfx_rtnl_newlink+0x10/0x10 [ 589.123624][T22750] ? __lock_acquire+0x6b5/0x2cf0 [ 589.123645][T22750] ? __lock_acquire+0x6b5/0x2cf0 [ 589.123674][T22750] ? unwind_next_frame+0xa6/0x2550 [ 589.123702][T22750] ? unwind_next_frame+0xa6/0x2550 [ 589.123725][T22750] ? is_bpf_text_address+0x26/0x2b0 [ 589.123756][T22750] ? is_bpf_text_address+0x26/0x2b0 [ 589.123780][T22750] ? __lock_acquire+0x6b5/0x2cf0 [ 589.123804][T22750] ? irqentry_exit+0x218/0x8b0 [ 589.123823][T22750] ? lockdep_hardirqs_on+0x7a/0x110 [ 589.123841][T22750] ? irqentry_exit+0x218/0x8b0 [ 589.123859][T22750] ? trace_irq_disable+0x3b/0x140 [ 589.123896][T22750] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 589.123929][T22750] ? __pfx_rtnl_newlink+0x10/0x10 [ 589.123947][T22750] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 589.123964][T22750] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 589.123986][T22750] ? netlink_sendmsg+0x5d4/0xb40 [ 589.124009][T22750] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 589.124026][T22750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 589.124046][T22750] ? __lock_acquire+0x6b5/0x2cf0 [ 589.124078][T22750] netlink_rcv_skb+0x232/0x4b0 [ 589.124100][T22750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 589.124120][T22750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.124155][T22750] ? netlink_deliver_tap+0x2e/0x1b0 [ 589.124174][T22750] ? netlink_deliver_tap+0x2e/0x1b0 [ 589.124199][T22750] netlink_unicast+0x75c/0x8e0 [ 589.124227][T22750] netlink_sendmsg+0x813/0xb40 [ 589.124255][T22750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.124276][T22750] ? aa_sock_msg_perm+0xf1/0x1b0 [ 589.124302][T22750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 589.124324][T22750] ____sys_sendmsg+0x972/0x9f0 [ 589.124342][T22750] ? __might_fault+0xaf/0x130 [ 589.124378][T22750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.124404][T22750] ? import_iovec+0x73/0xa0 [ 589.124427][T22750] ___sys_sendmsg+0x2a5/0x360 [ 589.124444][T22750] ? __lock_acquire+0x6b5/0x2cf0 [ 589.124466][T22750] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.124514][T22750] ? __fget_files+0x2a/0x420 [ 589.124534][T22750] ? __fget_files+0x3a0/0x420 [ 589.124565][T22750] __x64_sys_sendmsg+0x1bd/0x2a0 [ 589.124587][T22750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.124615][T22750] ? __pfx_ksys_write+0x10/0x10 [ 589.124636][T22750] ? handle_softirqs+0x715/0x840 [ 589.124661][T22750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.124676][T22750] do_syscall_64+0x174/0x580 [ 589.124696][T22750] ? clear_bhb_loop+0x40/0x90 [ 589.124716][T22750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.124733][T22750] RIP: 0033:0x7f320eb9ce59 [ 589.124751][T22750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.124765][T22750] RSP: 002b:00007f320fa16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.124784][T22750] RAX: ffffffffffffffda RBX: 00007f320ee16090 RCX: 00007f320eb9ce59 [ 589.124796][T22750] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 589.124807][T22750] RBP: 00007f320fa16090 R08: 0000000000000000 R09: 0000000000000000 [ 589.124818][T22750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.124829][T22750] R13: 00007f320ee16128 R14: 00007f320ee16090 R15: 00007fff3fb20e98 [ 589.124860][T22750] [ 589.712446][T22757] netlink: 'syz.1.4091': attribute type 1 has an invalid length. [ 589.845368][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4093'. [ 589.854559][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4093'. [ 589.924662][T22766] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4095'. [ 589.948290][T22768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4096'. [ 589.977079][T22771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4095'. [ 590.021724][T22771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4095'. [ 590.036876][T22773] netlink: 'syz.0.4097': attribute type 12 has an invalid length. [ 590.051168][T22774] netlink: 'syz.0.4097': attribute type 12 has an invalid length. [ 590.099466][T22773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4097'. [ 590.128858][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4097'. [ 590.209325][T22771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4095'. [ 590.389477][T22792] netlink: 'syz.4.4103': attribute type 13 has an invalid length. [ 590.463584][ T6561] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 51884 - 0 [ 590.473426][ T6561] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 51884 - 0 [ 590.485002][ T6561] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 51884 - 0 [ 590.494725][ T6561] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 51884 - 0 [ 590.589116][T22797] FAULT_INJECTION: forcing a failure. [ 590.589116][T22797] name failslab, interval 1, probability 0, space 0, times 0 [ 590.602520][T22797] CPU: 0 UID: 0 PID: 22797 Comm: syz.3.4105 Not tainted syzkaller #0 PREEMPT(full) [ 590.602544][T22797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 590.602556][T22797] Call Trace: [ 590.602563][T22797] [ 590.602570][T22797] dump_stack_lvl+0xe8/0x150 [ 590.602595][T22797] should_fail_ex+0x412/0x560 [ 590.602618][T22797] should_failslab+0xa8/0x100 [ 590.602637][T22797] __kvmalloc_node_noprof+0x178/0x8a0 [ 590.602661][T22797] ? alloc_netdev_mqs+0x8fb/0x1210 [ 590.602693][T22797] alloc_netdev_mqs+0x8fb/0x1210 [ 590.602728][T22797] rtnl_create_link+0x31f/0xd70 [ 590.602756][T22797] rtnl_newlink_create+0x277/0xb70 [ 590.602774][T22797] ? __pfx___nla_validate_parse+0x10/0x10 [ 590.602804][T22797] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 590.602825][T22797] ? __pfx___mutex_lock+0x10/0x10 [ 590.602854][T22797] ? ns_capable+0x89/0xe0 [ 590.602876][T22797] rtnl_newlink+0x166a/0x1bb0 [ 590.602907][T22797] ? __pfx_rtnl_newlink+0x10/0x10 [ 590.602929][T22797] ? __lock_acquire+0x6b5/0x2cf0 [ 590.602951][T22797] ? __lock_acquire+0x6b5/0x2cf0 [ 590.602978][T22797] ? unwind_next_frame+0xa6/0x2550 [ 590.603006][T22797] ? unwind_next_frame+0xa6/0x2550 [ 590.603030][T22797] ? is_bpf_text_address+0x26/0x2b0 [ 590.603060][T22797] ? is_bpf_text_address+0x26/0x2b0 [ 590.603084][T22797] ? __lock_acquire+0x6b5/0x2cf0 [ 590.603105][T22797] ? kernel_text_address+0xa5/0xe0 [ 590.603129][T22797] ? __kernel_text_address+0xd/0x30 [ 590.603150][T22797] ? unwind_get_return_address+0x4d/0x90 [ 590.603169][T22797] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 590.603193][T22797] ? arch_stack_walk+0xfb/0x150 [ 590.603224][T22797] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 590.603254][T22797] ? __pfx_rtnl_newlink+0x10/0x10 [ 590.603270][T22797] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 590.603285][T22797] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 590.603306][T22797] ? netlink_sendmsg+0x5d4/0xb40 [ 590.603328][T22797] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 590.603344][T22797] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 590.603363][T22797] ? __lock_acquire+0x6b5/0x2cf0 [ 590.603394][T22797] netlink_rcv_skb+0x232/0x4b0 [ 590.603416][T22797] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 590.603436][T22797] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 590.603468][T22797] ? netlink_deliver_tap+0x2e/0x1b0 [ 590.603487][T22797] ? netlink_deliver_tap+0x2e/0x1b0 [ 590.603513][T22797] netlink_unicast+0x75c/0x8e0 [ 590.603543][T22797] netlink_sendmsg+0x813/0xb40 [ 590.603573][T22797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.603598][T22797] ? aa_sock_msg_perm+0xf1/0x1b0 [ 590.603625][T22797] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.603653][T22797] ____sys_sendmsg+0x972/0x9f0 [ 590.603673][T22797] ? __might_fault+0xaf/0x130 [ 590.603706][T22797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 590.603742][T22797] ? import_iovec+0x73/0xa0 [ 590.603766][T22797] ___sys_sendmsg+0x2a5/0x360 [ 590.603784][T22797] ? __lock_acquire+0x6b5/0x2cf0 [ 590.603807][T22797] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.603863][T22797] ? __fget_files+0x2a/0x420 [ 590.603884][T22797] ? __fget_files+0x3a0/0x420 [ 590.603915][T22797] __x64_sys_sendmsg+0x1bd/0x2a0 [ 590.603938][T22797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 590.603968][T22797] ? __pfx_ksys_write+0x10/0x10 [ 590.604002][T22797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.604021][T22797] do_syscall_64+0x174/0x580 [ 590.604039][T22797] ? trace_irq_disable+0x3b/0x140 [ 590.604063][T22797] ? clear_bhb_loop+0x40/0x90 [ 590.604085][T22797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.604102][T22797] RIP: 0033:0x7f78bc79ce59 [ 590.604120][T22797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.604135][T22797] RSP: 002b:00007f78bd6c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.604154][T22797] RAX: ffffffffffffffda RBX: 00007f78bca15fa0 RCX: 00007f78bc79ce59 [ 590.604168][T22797] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 590.604178][T22797] RBP: 00007f78bd6c2090 R08: 0000000000000000 R09: 0000000000000000 [ 590.604189][T22797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 590.604200][T22797] R13: 00007f78bca16038 R14: 00007f78bca15fa0 R15: 00007ffeb01ef668 [ 590.604229][T22797] [ 591.126629][T22803] netlink: 'syz.4.4104': attribute type 1 has an invalid length. [ 591.322915][T22819] bond9 (unregistering): Released all slaves [ 591.630630][T22837] FAULT_INJECTION: forcing a failure. [ 591.630630][T22837] name failslab, interval 1, probability 0, space 0, times 0 [ 591.661968][T22837] CPU: 1 UID: 0 PID: 22837 Comm: syz.1.4116 Not tainted syzkaller #0 PREEMPT(full) [ 591.661992][T22837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.662003][T22837] Call Trace: [ 591.662010][T22837] [ 591.662018][T22837] dump_stack_lvl+0xe8/0x150 [ 591.662044][T22837] should_fail_ex+0x412/0x560 [ 591.662069][T22837] should_failslab+0xa8/0x100 [ 591.662090][T22837] __kmalloc_cache_noprof+0x88/0x660 [ 591.662123][T22837] ? __hw_addr_create+0x60/0x250 [ 591.662149][T22837] __hw_addr_create+0x60/0x250 [ 591.662167][T22837] ? stack_depot_init+0x36/0x1a0 [ 591.662189][T22837] __hw_addr_add_ex+0x1c2/0x520 [ 591.662213][T22837] dev_addr_init+0x15e/0x240 [ 591.662236][T22837] ? __pfx_dev_addr_init+0x10/0x10 [ 591.662259][T22837] ? alloc_netdev_mqs+0xa8/0x1210 [ 591.662290][T22837] alloc_netdev_mqs+0x2b3/0x1210 [ 591.662309][T22837] ? __pfx_hsr_dev_setup+0x10/0x10 [ 591.662336][T22837] rtnl_create_link+0x31f/0xd70 [ 591.662366][T22837] rtnl_newlink_create+0x277/0xb70 [ 591.662386][T22837] ? __pfx___nla_validate_parse+0x10/0x10 [ 591.662417][T22837] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 591.662439][T22837] ? __pfx___mutex_lock+0x10/0x10 [ 591.662471][T22837] ? ns_capable+0x89/0xe0 [ 591.662495][T22837] rtnl_newlink+0x166a/0x1bb0 [ 591.662526][T22837] ? __pfx_rtnl_newlink+0x10/0x10 [ 591.662550][T22837] ? __lock_acquire+0x6b5/0x2cf0 [ 591.662572][T22837] ? __lock_acquire+0x6b5/0x2cf0 [ 591.662601][T22837] ? unwind_next_frame+0xa6/0x2550 [ 591.662630][T22837] ? unwind_next_frame+0xa6/0x2550 [ 591.662652][T22837] ? is_bpf_text_address+0x26/0x2b0 [ 591.662680][T22837] ? is_bpf_text_address+0x26/0x2b0 [ 591.662703][T22837] ? __lock_acquire+0x6b5/0x2cf0 [ 591.662724][T22837] ? kernel_text_address+0xa5/0xe0 [ 591.662748][T22837] ? __kernel_text_address+0xd/0x30 [ 591.662769][T22837] ? unwind_get_return_address+0x4d/0x90 [ 591.662790][T22837] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 591.662812][T22837] ? arch_stack_walk+0xfb/0x150 [ 591.662845][T22837] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 591.662877][T22837] ? __pfx_rtnl_newlink+0x10/0x10 [ 591.662894][T22837] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 591.662910][T22837] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 591.662932][T22837] ? netlink_sendmsg+0x5d4/0xb40 [ 591.662954][T22837] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 591.662970][T22837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 591.662987][T22837] ? __lock_acquire+0x6b5/0x2cf0 [ 591.663017][T22837] netlink_rcv_skb+0x232/0x4b0 [ 591.663036][T22837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 591.663054][T22837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 591.663083][T22837] ? netlink_deliver_tap+0x2e/0x1b0 [ 591.663102][T22837] ? netlink_deliver_tap+0x2e/0x1b0 [ 591.663139][T22837] netlink_unicast+0x75c/0x8e0 [ 591.663168][T22837] netlink_sendmsg+0x813/0xb40 [ 591.663198][T22837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.663222][T22837] ? aa_sock_msg_perm+0xf1/0x1b0 [ 591.663250][T22837] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.663277][T22837] ____sys_sendmsg+0x972/0x9f0 [ 591.663298][T22837] ? __might_fault+0xaf/0x130 [ 591.663327][T22837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.663354][T22837] ? import_iovec+0x73/0xa0 [ 591.663381][T22837] ___sys_sendmsg+0x2a5/0x360 [ 591.663400][T22837] ? __lock_acquire+0x6b5/0x2cf0 [ 591.663423][T22837] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.663482][T22837] ? __fget_files+0x2a/0x420 [ 591.663502][T22837] ? __fget_files+0x3a0/0x420 [ 591.663532][T22837] __x64_sys_sendmsg+0x1bd/0x2a0 [ 591.663556][T22837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 591.663585][T22837] ? __pfx_ksys_write+0x10/0x10 [ 591.663617][T22837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.663636][T22837] do_syscall_64+0x174/0x580 [ 591.663654][T22837] ? trace_irq_disable+0x3b/0x140 [ 591.663679][T22837] ? clear_bhb_loop+0x40/0x90 [ 591.663701][T22837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.663718][T22837] RIP: 0033:0x7f3621b9ce59 [ 591.663736][T22837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.663751][T22837] RSP: 002b:00007f3622a8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.663770][T22837] RAX: ffffffffffffffda RBX: 00007f3621e15fa0 RCX: 00007f3621b9ce59 [ 591.663782][T22837] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 591.663792][T22837] RBP: 00007f3622a8b090 R08: 0000000000000000 R09: 0000000000000000 [ 591.663801][T22837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.663811][T22837] R13: 00007f3621e16038 R14: 00007f3621e15fa0 R15: 00007ffc95f3e2a8 [ 591.663840][T22837] [ 592.222733][T22864] x_tables: duplicate underflow at hook 1 [ 592.594212][T22882] FAULT_INJECTION: forcing a failure. [ 592.594212][T22882] name failslab, interval 1, probability 0, space 0, times 0 [ 592.644485][T22882] CPU: 0 UID: 0 PID: 22882 Comm: syz.3.4129 Not tainted syzkaller #0 PREEMPT(full) [ 592.644518][T22882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.644529][T22882] Call Trace: [ 592.644536][T22882] [ 592.644544][T22882] dump_stack_lvl+0xe8/0x150 [ 592.644571][T22882] should_fail_ex+0x412/0x560 [ 592.644597][T22882] should_failslab+0xa8/0x100 [ 592.644618][T22882] __kmalloc_cache_noprof+0x88/0x660 [ 592.644642][T22882] ? __asan_memset+0x22/0x50 [ 592.644664][T22882] ? alloc_netdev_mqs+0xbf0/0x1210 [ 592.644686][T22882] ? __xdp_rxq_info_reg+0x171/0x280 [ 592.644712][T22882] alloc_netdev_mqs+0xbf0/0x1210 [ 592.644742][T22882] rtnl_create_link+0x31f/0xd70 [ 592.644772][T22882] rtnl_newlink_create+0x277/0xb70 [ 592.644793][T22882] ? __pfx___nla_validate_parse+0x10/0x10 [ 592.644826][T22882] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 592.644850][T22882] ? __pfx___mutex_lock+0x10/0x10 [ 592.644881][T22882] ? ns_capable+0x89/0xe0 [ 592.644905][T22882] rtnl_newlink+0x166a/0x1bb0 [ 592.644940][T22882] ? __pfx_rtnl_newlink+0x10/0x10 [ 592.644965][T22882] ? __lock_acquire+0x6b5/0x2cf0 [ 592.644988][T22882] ? __lock_acquire+0x6b5/0x2cf0 [ 592.645023][T22882] ? unwind_next_frame+0xa6/0x2550 [ 592.645052][T22882] ? unwind_next_frame+0xa6/0x2550 [ 592.645076][T22882] ? is_bpf_text_address+0x26/0x2b0 [ 592.645107][T22882] ? is_bpf_text_address+0x26/0x2b0 [ 592.645131][T22882] ? __lock_acquire+0x6b5/0x2cf0 [ 592.645154][T22882] ? kernel_text_address+0xa5/0xe0 [ 592.645180][T22882] ? __kernel_text_address+0xd/0x30 [ 592.645202][T22882] ? unwind_get_return_address+0x4d/0x90 [ 592.645223][T22882] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 592.645249][T22882] ? arch_stack_walk+0xfb/0x150 [ 592.645286][T22882] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 592.645320][T22882] ? __pfx_rtnl_newlink+0x10/0x10 [ 592.645342][T22882] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 592.645363][T22882] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 592.645386][T22882] ? netlink_sendmsg+0x5d4/0xb40 [ 592.645409][T22882] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 592.645427][T22882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 592.645447][T22882] ? __lock_acquire+0x6b5/0x2cf0 [ 592.645480][T22882] netlink_rcv_skb+0x232/0x4b0 [ 592.645502][T22882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 592.645535][T22882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 592.645568][T22882] ? netlink_deliver_tap+0x2e/0x1b0 [ 592.645586][T22882] ? netlink_deliver_tap+0x2e/0x1b0 [ 592.645612][T22882] netlink_unicast+0x75c/0x8e0 [ 592.645644][T22882] netlink_sendmsg+0x813/0xb40 [ 592.645675][T22882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.645700][T22882] ? aa_sock_msg_perm+0xf1/0x1b0 [ 592.645728][T22882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 592.645755][T22882] ____sys_sendmsg+0x972/0x9f0 [ 592.645777][T22882] ? __might_fault+0xaf/0x130 [ 592.645806][T22882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.645837][T22882] ? import_iovec+0x73/0xa0 [ 592.645862][T22882] ___sys_sendmsg+0x2a5/0x360 [ 592.645882][T22882] ? __lock_acquire+0x6b5/0x2cf0 [ 592.645904][T22882] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.645962][T22882] ? __fget_files+0x2a/0x420 [ 592.645982][T22882] ? __fget_files+0x3a0/0x420 [ 592.646012][T22882] __x64_sys_sendmsg+0x1bd/0x2a0 [ 592.646033][T22882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 592.646062][T22882] ? __pfx_ksys_write+0x10/0x10 [ 592.646090][T22882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.646107][T22882] do_syscall_64+0x174/0x580 [ 592.646124][T22882] ? trace_irq_disable+0x3b/0x140 [ 592.646147][T22882] ? clear_bhb_loop+0x40/0x90 [ 592.646168][T22882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.646185][T22882] RIP: 0033:0x7f78bc79ce59 [ 592.646202][T22882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.646217][T22882] RSP: 002b:00007f78bd6a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.646236][T22882] RAX: ffffffffffffffda RBX: 00007f78bca16090 RCX: 00007f78bc79ce59 [ 592.646247][T22882] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 592.646259][T22882] RBP: 00007f78bd6a1090 R08: 0000000000000000 R09: 0000000000000000 [ 592.646269][T22882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 592.646279][T22882] R13: 00007f78bca16128 R14: 00007f78bca16090 R15: 00007ffeb01ef668 [ 592.646309][T22882] [ 593.690466][T22923] netlink: 'syz.1.4138': attribute type 1 has an invalid length. [ 593.724836][T22922] IPVS: length: 125 != 8 [ 594.188731][T22953] __nla_validate_parse: 7 callbacks suppressed [ 594.188749][T22953] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4147'. [ 594.336931][T22963] smc: net device wlan0 applied user defined pnetid SYZ0 [ 594.357543][T22966] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4149'. [ 594.367651][T22967] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4149'. [ 594.434584][T22967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4149'. [ 594.455504][T22971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4149'. [ 594.487431][T22974] netlink: 'syz.4.4150': attribute type 2 has an invalid length. [ 594.496906][T22974] netlink: 'syz.4.4150': attribute type 8 has an invalid length. [ 594.505682][T22974] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4150'. [ 594.626000][T22979] tipc: Enabling of bearer rejected, failed to enable media [ 594.726591][T22984] SET target dimension over the limit! [ 594.743331][T22984] dummy0: entered promiscuous mode [ 594.751236][T22984] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 594.759870][T22984] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 594.767288][T22984] dummy0: left promiscuous mode [ 595.012186][T22993] netlink: zone id is out of range [ 595.027226][T22993] netlink: zone id is out of range [ 595.046677][T22993] netlink: zone id is out of range [ 595.057425][T22993] netlink: zone id is out of range [ 595.075470][T22993] netlink: zone id is out of range [ 595.090396][T22993] netlink: zone id is out of range [ 595.095566][T22993] netlink: zone id is out of range [ 595.100694][T22993] netlink: zone id is out of range [ 595.105818][T22993] netlink: zone id is out of range [ 595.110927][T22993] netlink: zone id is out of range [ 595.140224][T22996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4157'. [ 595.166980][T22996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4157'. [ 595.281372][T23009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4161'. [ 595.608588][T23014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4163'. [ 596.026917][T23019] lo speed is unknown, defaulting to 1000 [ 596.304033][T23045] ip6gretap1: entered promiscuous mode [ 596.411173][T23047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 596.411896][T23047] netlink: 'syz.2.4174': attribute type 10 has an invalid length. [ 596.485998][T23047] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.494823][T23047] bond0: (slave team0): Enslaving as an active interface with an up link [ 596.644962][T23052] 8021q: adding VLAN 0 to HW filter on device bond8 [ 598.084546][T23132] syzkaller0: entered promiscuous mode [ 598.110775][T23132] syzkaller0: entered allmulticast mode [ 598.139695][T23132] tipc: Started in network mode [ 598.169515][T23132] tipc: Node identity 624f04d399c7, cluster identity 4711 [ 598.198676][T23132] tipc: Enabled bearer , priority 0 [ 598.329996][T23131] tipc: Resetting bearer [ 598.399511][T23131] tipc: Disabling bearer [ 598.785233][T23166] bond16: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 598.800520][T23166] bond16 (unregistering): Released all slaves [ 599.083279][T23177] netlink: 'syz.0.4207': attribute type 16 has an invalid length. [ 599.096688][T23183] netlink: 'syz.3.4209': attribute type 10 has an invalid length. [ 599.104830][T23177] netlink: 'syz.0.4207': attribute type 17 has an invalid length. [ 599.207904][T23177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.216054][T23177] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.223675][T23177] tipc: Resetting bearer [ 599.229391][T23177] tipc: Resetting bearer [ 599.237882][T23177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.300142][T23177] batadv_slave_1: left promiscuous mode [ 599.311572][T23177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 599.313311][T23199] netlink: 'syz.3.4213': attribute type 1 has an invalid length. [ 599.327227][T23177] veth1_vlan: left promiscuous mode [ 599.336375][T23177] veth0_vlan: left promiscuous mode [ 599.342374][T23177] veth0_vlan: entered promiscuous mode [ 599.350495][T23177] veth1_vlan: entered promiscuous mode [ 599.358934][T23177] veth1_macvtap: left promiscuous mode [ 599.365316][T23177] veth0_macvtap: left promiscuous mode [ 599.371679][T23177] veth0_macvtap: entered promiscuous mode [ 599.378320][T23177] veth1_macvtap: entered promiscuous mode [ 599.389113][T23177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 599.406468][T23177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 599.415029][T23177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 599.423013][T23177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 599.432369][T23177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 599.445925][T23177] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.454346][T23177] geneve3: left promiscuous mode [ 599.459302][T23177] geneve3: left allmulticast mode [ 599.466444][T23177] 8021q: adding VLAN 0 to HW filter on device bond3 [ 599.474765][T23177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 599.483101][T23177] 8021q: adding VLAN 0 to HW filter on device bond5 [ 599.491214][T23177] 8021q: adding VLAN 0 to HW filter on device bond6 [ 599.535935][T23177] 8021q: adding VLAN 0 to HW filter on device bond7 [ 599.545129][T23177] bond8: left promiscuous mode [ 599.550471][T23177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 599.559222][T23177] 8021q: adding VLAN 0 to HW filter on device bond9 [ 599.568284][T23177] bond10: left promiscuous mode [ 599.573548][T23177] 8021q: adding VLAN 0 to HW filter on device bond10 [ 599.582382][T23177] 8021q: adding VLAN 0 to HW filter on device bond11 [ 599.599552][T23177] 8021q: adding VLAN 0 to HW filter on device bond12 [ 599.608273][T23177] 8021q: adding VLAN 0 to HW filter on device bond13 [ 599.626687][T23177] ip6gretap1: left promiscuous mode [ 599.835145][T23198] vlan4: entered promiscuous mode [ 599.926219][T23200] bond16 (unregistering): Released all slaves [ 599.957088][ T6545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.968819][ T6545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.982841][T23212] FAULT_INJECTION: forcing a failure. [ 599.982841][T23212] name failslab, interval 1, probability 0, space 0, times 0 [ 599.995531][T23212] CPU: 0 UID: 0 PID: 23212 Comm: syz.0.4215 Not tainted syzkaller #0 PREEMPT(full) [ 599.995547][T23212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.995554][T23212] Call Trace: [ 599.995559][T23212] [ 599.995564][T23212] dump_stack_lvl+0xe8/0x150 [ 599.995581][T23212] should_fail_ex+0x412/0x560 [ 599.995596][T23212] should_failslab+0xa8/0x100 [ 599.995608][T23212] __kmalloc_cache_noprof+0x88/0x660 [ 599.995623][T23212] ? __asan_memset+0x22/0x50 [ 599.995636][T23212] ? alloc_netdev_mqs+0xbf0/0x1210 [ 599.995650][T23212] ? __xdp_rxq_info_reg+0x171/0x280 [ 599.995664][T23212] alloc_netdev_mqs+0xbf0/0x1210 [ 599.995681][T23212] rtnl_create_link+0x31f/0xd70 [ 599.995704][T23212] rtnl_newlink_create+0x277/0xb70 [ 599.995717][T23212] ? __pfx___nla_validate_parse+0x10/0x10 [ 599.995733][T23212] ? __mutex_lock+0x608/0x1550 [ 599.995746][T23212] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 599.995759][T23212] ? __pfx___mutex_lock+0x10/0x10 [ 599.995776][T23212] ? ns_capable+0x89/0xe0 [ 599.995789][T23212] rtnl_newlink+0x166a/0x1bb0 [ 599.995807][T23212] ? __pfx_rtnl_newlink+0x10/0x10 [ 599.995816][T23212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.995846][T23212] ? kasan_quarantine_put+0xbb/0x1f0 [ 599.995860][T23212] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.995873][T23212] ? nlmon_xmit+0xb0/0x100 [ 599.995882][T23212] ? kmem_cache_free+0x182/0x650 [ 599.995903][T23212] ? __lock_acquire+0x6b5/0x2cf0 [ 599.995916][T23212] ? __dev_queue_xmit+0x2b6/0x3950 [ 599.995931][T23212] ? __local_bh_enable_ip+0xd0/0x130 [ 599.995942][T23212] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.995952][T23212] ? __dev_queue_xmit+0x2b6/0x3950 [ 599.995963][T23212] ? __local_bh_enable_ip+0xd0/0x130 [ 599.995972][T23212] ? __dev_queue_xmit+0x2b6/0x3950 [ 599.995988][T23212] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 599.996006][T23212] ? __pfx_rtnl_newlink+0x10/0x10 [ 599.996016][T23212] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 599.996028][T23212] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 599.996038][T23212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.996046][T23212] ? ref_tracker_free+0x693/0x840 [ 599.996060][T23212] ? __pfx_ref_tracker_free+0x10/0x10 [ 599.996076][T23212] netlink_rcv_skb+0x232/0x4b0 [ 599.996089][T23212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 599.996100][T23212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.996118][T23212] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.996129][T23212] ? netlink_deliver_tap+0x2e/0x1b0 [ 599.996143][T23212] netlink_unicast+0x75c/0x8e0 [ 599.996160][T23212] netlink_sendmsg+0x813/0xb40 [ 599.996177][T23212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.996193][T23212] ? aa_sock_msg_perm+0xf1/0x1b0 [ 599.996210][T23212] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.996227][T23212] ____sys_sendmsg+0x972/0x9f0 [ 599.996239][T23212] ? __might_fault+0xaf/0x130 [ 599.996256][T23212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.996273][T23212] ? import_iovec+0x73/0xa0 [ 599.996287][T23212] ___sys_sendmsg+0x2a5/0x360 [ 599.996298][T23212] ? __lock_acquire+0x6b5/0x2cf0 [ 599.996311][T23212] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.996342][T23212] ? __fget_files+0x2a/0x420 [ 599.996354][T23212] ? __fget_files+0x3a0/0x420 [ 599.996372][T23212] __x64_sys_sendmsg+0x1bd/0x2a0 [ 599.996385][T23212] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.996401][T23212] ? __pfx_ksys_write+0x10/0x10 [ 599.996421][T23212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.996431][T23212] do_syscall_64+0x174/0x580 [ 599.996442][T23212] ? trace_irq_disable+0x3b/0x140 [ 599.996457][T23212] ? clear_bhb_loop+0x40/0x90 [ 599.996470][T23212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.996480][T23212] RIP: 0033:0x7f320eb9ce59 [ 599.996491][T23212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.996500][T23212] RSP: 002b:00007f320fa16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.996512][T23212] RAX: ffffffffffffffda RBX: 00007f320ee16090 RCX: 00007f320eb9ce59 [ 599.996519][T23212] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 599.996525][T23212] RBP: 00007f320fa16090 R08: 0000000000000000 R09: 0000000000000000 [ 599.996531][T23212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.996537][T23212] R13: 00007f320ee16128 R14: 00007f320ee16090 R15: 00007fff3fb20e98 [ 599.996553][T23212] [ 600.423973][ T6537] bond6: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 600.433532][ T6537] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 600.442446][ T6537] bond6: (slave veth3): making interface the new active one [ 600.454220][ T6537] bond6: active interface up! [ 600.520017][T23218] __nla_validate_parse: 13 callbacks suppressed [ 600.526849][T23218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4218'. [ 600.536636][ T6545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.545433][ T6545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.129224][T23257] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4228'. [ 601.142880][T23257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4228'. [ 601.218178][T23257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4228'. [ 601.277250][T23264] xt_NFQUEUE: number of total queues is 0 [ 601.520551][T23271] syzkaller0: entered promiscuous mode [ 601.526083][T23271] syzkaller0: entered allmulticast mode [ 601.748965][T23276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4232'. [ 601.783031][T23280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4234'. [ 601.837442][T23271] tipc: Enabled bearer , priority 0 [ 601.883924][T23270] tipc: Resetting bearer [ 601.948117][T23270] tipc: Disabling bearer [ 602.005099][T23291] syzkaller0: entered promiscuous mode [ 602.010649][T23291] syzkaller0: entered allmulticast mode [ 602.022212][T23291] tipc: Enabled bearer , priority 0 [ 602.187788][T23297] netlink: 'syz.1.4236': attribute type 2 has an invalid length. [ 602.218121][T23297] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4236'. [ 602.432791][T23289] tipc: Resetting bearer [ 602.463141][T23289] tipc: Disabling bearer [ 602.963267][T10494] IPVS: starting estimator thread 0... [ 602.995177][T23325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.010087][T23325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.055301][T23332] IPVS: using max 29 ests per chain, 69600 per kthread [ 603.077084][T23325] wireguard: wg2: Could not create IPv4 socket [ 603.088505][T23325] net_ratelimit: 170 callbacks suppressed [ 603.088526][T23325] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 603.346605][T23341] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4246'. [ 603.746629][T23365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4253'. [ 603.763466][T23365] nbd: must specify a size in bytes for the device [ 604.089449][T23389] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4260'. [ 604.174543][T23394] syzkaller0: entered promiscuous mode [ 604.180059][T23394] syzkaller0: entered allmulticast mode [ 605.819287][T23461] __nla_validate_parse: 4 callbacks suppressed [ 605.819323][T23461] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4278'. [ 605.891957][T23466] xt_bpf: check failed: parse error [ 606.029625][T23474] vlan0: entered promiscuous mode [ 606.291795][T23489] netlink: 'syz.4.4284': attribute type 10 has an invalid length. [ 606.311709][T23482] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4282'. [ 607.380662][T23523] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 607.391383][T23523] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 607.401960][T23523] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 607.412665][T23523] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 607.432917][T23527] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 607.442718][T23523] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 607.453303][T23523] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 607.480466][T23523] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 607.507842][T23523] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 607.533161][T23523] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 607.571696][T23523] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 607.659747][T23538] xt_HMARK: spi-set and port-set can't be combined [ 607.740677][T23547] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 607.775889][T23547] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 607.862461][T23556] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4300'. [ 607.886857][T23555] dummy0: entered promiscuous mode [ 607.893833][T23555] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 607.902581][T23555] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 607.937631][T23555] dummy0: left promiscuous mode [ 607.957016][T23548] FAULT_INJECTION: forcing a failure. [ 607.957016][T23548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.970113][T23548] CPU: 1 UID: 0 PID: 23548 Comm: syz.0.4299 Not tainted syzkaller #0 PREEMPT(full) [ 607.970135][T23548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 607.970145][T23548] Call Trace: [ 607.970152][T23548] [ 607.970159][T23548] dump_stack_lvl+0xe8/0x150 [ 607.970186][T23548] should_fail_ex+0x412/0x560 [ 607.970211][T23548] _copy_to_user+0x31/0xb0 [ 607.970235][T23548] simple_read_from_buffer+0xe1/0x170 [ 607.970260][T23548] proc_fail_nth_read+0x1bb/0x230 [ 607.970284][T23548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.970308][T23548] ? rw_verify_area+0x2a6/0x4d0 [ 607.970331][T23548] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.970353][T23548] vfs_read+0x20c/0xa70 [ 607.970382][T23548] ? __pfx___mutex_lock+0x10/0x10 [ 607.970409][T23548] ? __pfx_vfs_read+0x10/0x10 [ 607.970432][T23548] ? __fget_files+0x2a/0x420 [ 607.970455][T23548] ? __fget_files+0x3a0/0x420 [ 607.970473][T23548] ? __fget_files+0x2a/0x420 [ 607.970500][T23548] ksys_read+0x150/0x270 [ 607.970525][T23548] ? __pfx_ksys_read+0x10/0x10 [ 607.970554][T23548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.970574][T23548] do_syscall_64+0x174/0x580 [ 607.970591][T23548] ? trace_irq_disable+0x3b/0x140 [ 607.970615][T23548] ? clear_bhb_loop+0x40/0x90 [ 607.970637][T23548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.970655][T23548] RIP: 0033:0x7f320eb5d68e [ 607.970672][T23548] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 607.970687][T23548] RSP: 002b:00007f320fa36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 607.970707][T23548] RAX: ffffffffffffffda RBX: 00007f320fa376c0 RCX: 00007f320eb5d68e [ 607.970720][T23548] RDX: 000000000000000f RSI: 00007f320fa370a0 RDI: 0000000000000005 [ 607.970732][T23548] RBP: 00007f320fa37090 R08: 0000000000000000 R09: 0000000000000000 [ 607.970742][T23548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.970753][T23548] R13: 00007f320ee16038 R14: 00007f320ee15fa0 R15: 00007fff3fb20e98 [ 607.970784][T23548] [ 608.406508][T23580] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4306'. [ 608.497763][T23587] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4307'. [ 608.507022][T23587] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4307'. [ 608.516789][T23586] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4307'. [ 608.526044][T23586] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4307'. [ 608.821815][T23592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4309'. [ 608.891417][T23602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4309'. [ 608.946346][T23606] netlink: 'syz.4.4314': attribute type 1 has an invalid length. [ 609.033964][T23592] bridge3: port 1(vlan3) entered blocking state [ 609.050447][T23592] bridge3: port 1(vlan3) entered disabled state [ 609.056989][T23592] vlan3: entered allmulticast mode [ 609.062130][T23592] bridge3: entered allmulticast mode [ 609.095364][T23592] vlan3: left allmulticast mode [ 609.100277][T23592] bridge3: left allmulticast mode [ 609.105606][T23609] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 609.258663][T23625] openvswitch: netlink: EtherType 50a is less than min 600 [ 609.354429][T23609] 8021q: adding VLAN 0 to HW filter on device bond10 [ 609.376153][T23609] bond9: (slave bond10): making interface the new active one [ 609.392690][T23609] bond9: (slave bond10): Enslaving as an active interface with an up link [ 609.428045][T23613] bond9: (slave gretap1): Enslaving as a backup interface with an up link [ 609.437626][T23616] syzkaller0: entered promiscuous mode [ 609.444167][T23616] syzkaller0: entered allmulticast mode [ 609.455679][T23621] bridge_slave_1: left allmulticast mode [ 609.461897][T23621] bridge_slave_1: left promiscuous mode [ 609.468355][T23621] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.494143][T23621] bridge_slave_0: left allmulticast mode [ 609.506585][T23621] bridge_slave_0: left promiscuous mode [ 609.520067][T23621] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.597857][T23608] tipc: Enabled bearer , priority 0 [ 609.615822][T23606] 8021q: adding VLAN 0 to HW filter on device bond9 [ 609.637148][T23635] bond0: (slave ip6tnl0): refused to change device type [ 609.718264][T23607] tipc: Resetting bearer [ 609.824200][T23607] tipc: Disabling bearer [ 610.998019][T23695] netlink: 'syz.0.4331': attribute type 8 has an invalid length. [ 611.201434][T23699] tap0: tun_chr_ioctl cmd 1074025677 [ 611.207119][T23699] tap0: linktype set to 2 [ 611.552633][T23710] __nla_validate_parse: 1 callbacks suppressed [ 611.552649][T23710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4338'. [ 612.909251][T23668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.221073][T23733] Bluetooth: MGMT ver 1.23 [ 613.310677][T10487] IPVS: starting estimator thread 0... [ 613.326718][T23737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4346'. [ 613.410615][T23738] IPVS: using max 33 ests per chain, 79200 per kthread [ 613.496227][T23742] syzkaller0: entered promiscuous mode [ 613.501759][T23742] syzkaller0: entered allmulticast mode [ 613.628583][T23744] netlink: 'syz.2.4348': attribute type 32 has an invalid length. [ 613.636725][T23744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4348'. [ 613.688458][T23744] bond5: option coupled_control: invalid value (12) [ 613.703085][T23744] bond5 (unregistering): Released all slaves [ 613.802809][T23751] vlan4: entered allmulticast mode [ 613.807992][T23751] bond0: entered allmulticast mode [ 613.813122][T23751] bond11: entered allmulticast mode [ 613.849519][T23753] sctp: [Deprecated]: syz.1.4352 (pid 23753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.849519][T23753] Use struct sctp_sack_info instead [ 613.874624][T23755] x_tables: duplicate underflow at hook 1 [ 613.895610][T23753] sctp: [Deprecated]: syz.1.4352 (pid 23753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.895610][T23753] Use struct sctp_sack_info instead [ 617.108361][T23763] IPv6: sit3: Disabled Multicast RS [ 617.124114][T23768] xfrm0: entered allmulticast mode [ 617.256176][T23779] netlink: 'syz.3.4359': attribute type 4 has an invalid length. [ 617.283091][T23781] netlink: 'syz.3.4359': attribute type 4 has an invalid length. [ 617.499396][T23796] syzkaller0: entered promiscuous mode [ 617.519207][T23796] syzkaller0: entered allmulticast mode [ 617.657944][T23804] xt_hl: Unknown Hop Limit match mode: 206 [ 618.269262][T23836] netlink: 'syz.2.4375': attribute type 21 has an invalid length. [ 618.306304][T23836] netlink: 'syz.2.4375': attribute type 1 has an invalid length. [ 618.339049][T23836] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4375'. [ 618.721447][T23842] netlink: 'syz.2.4376': attribute type 13 has an invalid length. [ 618.767389][T23842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4376'. [ 618.816793][T23842] v: renamed from gre0 [ 619.153687][T23850] netlink: 'syz.0.4378': attribute type 2 has an invalid length. [ 619.224990][T23842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4376'. [ 619.246395][T23842] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check. [ 619.295490][T23832] lo speed is unknown, defaulting to 1000 [ 619.347499][T23858] sctp: [Deprecated]: syz.1.4379 (pid 23858) Use of int in max_burst socket option. [ 619.347499][T23858] Use struct sctp_assoc_value instead [ 619.466949][T23857] sctp: [Deprecated]: syz.1.4379 (pid 23857) Use of int in maxseg socket option. [ 619.466949][T23857] Use struct sctp_assoc_value instead [ 619.706547][T23872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4382'. [ 620.194547][T23893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4387'. [ 620.322980][T21024] block nbd4: Receive control failed (result -1) [ 620.344711][T23898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4389'. [ 620.656717][T23916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4391'. [ 620.719710][T23918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4391'. [ 620.879617][T23922] xt_cgroup: invalid path, errno=-2 [ 621.051969][T23932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4396'. [ 621.319065][T23946] netlink: 'syz.3.4400': attribute type 1 has an invalid length. [ 621.535431][T23955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4402'. [ 621.611201][T23959] sctp: [Deprecated]: syz.4.4403 (pid 23959) Use of int in maxseg socket option. [ 621.611201][T23959] Use struct sctp_assoc_value instead [ 621.634005][T23959] sctp: [Deprecated]: syz.4.4403 (pid 23959) Use of int in maxseg socket option. [ 621.634005][T23959] Use struct sctp_assoc_value instead [ 621.707649][T23969] netlink: 'syz.3.4405': attribute type 1 has an invalid length. [ 621.810685][T23976] syzkaller1: entered promiscuous mode [ 621.816265][T23976] syzkaller1: entered allmulticast mode [ 622.209643][T23989] netlink: 'syz.3.4413': attribute type 1 has an invalid length. [ 622.228149][T23992] netlink: 'syz.4.4411': attribute type 3 has an invalid length. [ 622.260436][T23996] netlink: 'syz.1.4415': attribute type 4 has an invalid length. [ 622.282790][T23989] 8021q: adding VLAN 0 to HW filter on device bond16 [ 622.291936][T23996] netlink: 'syz.1.4415': attribute type 4 has an invalid length. [ 622.347456][T24000] netlink: 'syz.1.4415': attribute type 22 has an invalid length. [ 622.360472][T23989] bond16: (slave veth5): Enslaving as an active interface with a down link [ 622.416781][T23989] netlink: 'syz.3.4413': attribute type 10 has an invalid length. [ 622.699546][T24019] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 622.857521][T24021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.888007][T24027] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 622.988004][T24033] netlink: 'syz.4.4428': attribute type 1 has an invalid length. [ 623.114303][T24041] netlink: 'syz.2.4430': attribute type 4 has an invalid length. [ 623.127554][T24041] netlink: 'syz.2.4430': attribute type 4 has an invalid length. [ 623.159632][T24041] veth0_vlan: left promiscuous mode [ 623.173199][T24038] 8021q: VLANs not supported on gre0 [ 623.471229][T24051] netlink: set zone limit has 4 unknown bytes [ 623.478372][T24050] __nla_validate_parse: 7 callbacks suppressed [ 623.478390][T24050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4434'. [ 623.508910][T24050] netlink: 'syz.0.4434': attribute type 21 has an invalid length. [ 623.554067][T24050] IPv6: NLM_F_CREATE should be specified when creating new route [ 623.557976][T24054] netlink: 'syz.4.4432': attribute type 1 has an invalid length. [ 623.604466][T24056] tipc: Can't bind to reserved service type 2 [ 623.797571][T24061] netlink: 'syz.0.4435': attribute type 4 has an invalid length. [ 623.898218][T24046] lo speed is unknown, defaulting to 1000 [ 624.147724][T24072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4437'. [ 624.191786][T24072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4437'. [ 624.522183][T24083] vlan0: left promiscuous mode [ 624.534975][T24083] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 624.838840][T24092] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4440'. [ 624.998373][T24094] bond9: option ad_user_port_key: invalid value (65535) [ 625.005405][T24094] bond9: option ad_user_port_key: allowed values 0 - 1023 [ 625.048823][T24094] bond9 (unregistering): Released all slaves [ 625.237982][T24104] kthread_run failed with err -4 [ 625.413548][T24109] netlink: 480 bytes leftover after parsing attributes in process `syz.0.4444'. [ 625.449293][T24109] netlink: 480 bytes leftover after parsing attributes in process `syz.0.4444'. [ 625.480731][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4444'. [ 625.534097][T24114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4446'. [ 625.561040][T24114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4446'. [ 625.896179][T24127] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20002 [ 625.996797][ T29] audit: type=1804 audit(1780810168.287:18): pid=24133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4451" name="/newroot/180/cgroup.controllers" dev="tmpfs" ino=941 res=1 errno=0 [ 626.039020][T24131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4452'. [ 626.134355][ T29] audit: type=1800 audit(1780810168.287:19): pid=24133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4451" name="cgroup.controllers" dev="tmpfs" ino=941 res=0 errno=0 [ 626.508877][T24158] sctp: [Deprecated]: syz.1.4455 (pid 24158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 626.508877][T24158] Use struct sctp_sack_info instead [ 626.825178][T24167] tipc: Enabled bearer , priority 2 [ 626.905940][T24173] syzkaller0: entered promiscuous mode [ 626.921533][T24173] syzkaller0: entered allmulticast mode [ 627.367400][T24194] validate_nla: 3 callbacks suppressed [ 627.367420][T24194] netlink: 'syz.1.4465': attribute type 1 has an invalid length. [ 627.421932][T24194] netlink: 'syz.1.4465': attribute type 1 has an invalid length. [ 627.532988][T24198] netlink: 'syz.0.4466': attribute type 1 has an invalid length. [ 627.909101][T24208] syzkaller0: entered promiscuous mode [ 627.917406][T21024] block nbd5: Receive control failed (result -1) [ 627.918473][T24208] syzkaller0: entered allmulticast mode [ 627.940573][ T5364] tipc: Node number set to 2520618830 [ 627.998977][T24208] tipc: Enabled bearer , priority 0 [ 628.069407][T24206] tipc: Resetting bearer [ 628.166963][T24206] tipc: Disabling bearer [ 629.693913][T24275] __nla_validate_parse: 9 callbacks suppressed [ 629.693931][T24275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4487'. [ 630.528266][T24298] bridge2: entered promiscuous mode [ 630.548193][T24298] bridge2: entered allmulticast mode [ 630.555481][T24300] netlink: 556 bytes leftover after parsing attributes in process `syz.0.4494'. [ 630.588383][T24300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4494'. [ 630.741217][T24305] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4492'. [ 630.762934][T24300] netlink: 'syz.0.4494': attribute type 1 has an invalid length. [ 630.995528][T24313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4498'. [ 631.004994][T24310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4497'. [ 631.029255][T24313] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4498'. [ 631.065217][T24310] [ 631.067592][T24310] ====================================================== [ 631.074636][T24310] WARNING: possible circular locking dependency detected [ 631.081683][T24310] syzkaller #0 Not tainted [ 631.086112][T24310] ------------------------------------------------------ [ 631.093141][T24310] syz.4.4497/24310 is trying to acquire lock: [ 631.099218][T24310] ffff88807dd32c18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300 [ 631.108134][T24310] [ 631.108134][T24310] but task is already holding lock: [ 631.115502][T24310] ffff88802af3bd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 631.124915][T24310] [ 631.124915][T24310] which lock already depends on the new lock. [ 631.124915][T24310] [ 631.135328][T24310] [ 631.135328][T24310] the existing dependency chain (in reverse order) is: [ 631.144337][T24310] [ 631.144337][T24310] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 631.152154][T24310] __mutex_lock+0x1a3/0x1550 [ 631.157263][T24310] elevator_change+0x1b3/0x450 [ 631.162548][T24310] elevator_set_none+0xb5/0x140 [ 631.167920][T24310] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 631.174247][T24310] nbd_start_device+0x17f/0xb10 [ 631.179614][T24310] nbd_genl_connect+0x165b/0x1cf0 [ 631.185155][T24310] genl_family_rcv_msg_doit+0x22a/0x330 [ 631.191218][T24310] genl_rcv_msg+0x61c/0x7a0 [ 631.196239][T24310] netlink_rcv_skb+0x232/0x4b0 [ 631.201514][T24310] genl_rcv+0x28/0x40 [ 631.206007][T24310] netlink_unicast+0x75c/0x8e0 [ 631.211289][T24310] netlink_sendmsg+0x813/0xb40 [ 631.216655][T24310] ____sys_sendmsg+0x972/0x9f0 [ 631.221929][T24310] ___sys_sendmsg+0x2a5/0x360 [ 631.227122][T24310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 631.232574][T24310] do_syscall_64+0x174/0x580 [ 631.237687][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.244129][T24310] [ 631.244129][T24310] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 631.252733][T24310] blk_alloc_queue+0x546/0x680 [ 631.258012][T24310] __blk_mq_alloc_disk+0x197/0x390 [ 631.263649][T24310] nbd_dev_add+0x499/0xb50 [ 631.268598][T24310] nbd_init+0x168/0x1f0 [ 631.273275][T24310] do_one_initcall+0x250/0x870 [ 631.278563][T24310] do_initcall_level+0x104/0x190 [ 631.284015][T24310] do_initcalls+0x59/0xa0 [ 631.288859][T24310] kernel_init_freeable+0x2a6/0x3e0 [ 631.294572][T24310] kernel_init+0x1d/0x1d0 [ 631.299415][T24310] ret_from_fork+0x514/0xb70 [ 631.304511][T24310] ret_from_fork_asm+0x1a/0x30 [ 631.309786][T24310] [ 631.309786][T24310] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 631.316989][T24310] fs_reclaim_acquire+0x71/0x100 [ 631.322447][T24310] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 631.328777][T24310] __alloc_skb+0x1d0/0x7d0 [ 631.333705][T24310] __ip6_append_data+0x2d3c/0x3f60 [ 631.339418][T24310] ip6_append_data+0x10f/0x280 [ 631.344692][T24310] rawv6_sendmsg+0x12d3/0x18e0 [ 631.349976][T24310] ____sys_sendmsg+0x80a/0x9f0 [ 631.355253][T24310] ___sys_sendmsg+0x2a5/0x360 [ 631.360442][T24310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 631.365944][T24310] do_syscall_64+0x174/0x580 [ 631.371063][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.377490][T24310] [ 631.377490][T24310] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 631.385236][T24310] lock_sock_nested+0x41/0x100 [ 631.390661][T24310] inet_shutdown+0x6a/0x390 [ 631.395677][T24310] nbd_mark_nsock_dead+0x2e9/0x560 [ 631.401309][T24310] recv_work+0x1c2e/0x1d40 [ 631.406237][T24310] process_scheduled_works+0xb5d/0x1860 [ 631.412291][T24310] worker_thread+0xa53/0xfc0 [ 631.417394][T24310] kthread+0x389/0x470 [ 631.422001][T24310] ret_from_fork+0x514/0xb70 [ 631.427107][T24310] ret_from_fork_asm+0x1a/0x30 [ 631.432390][T24310] [ 631.432390][T24310] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 631.440043][T24310] __mutex_lock+0x1a3/0x1550 [ 631.445213][T24310] nbd_queue_rq+0x37b/0x1100 [ 631.450336][T24310] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 631.456400][T24310] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 631.463260][T24310] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 631.469770][T24310] blk_mq_run_work_fn+0x16c/0x300 [ 631.475312][T24310] process_scheduled_works+0xb5d/0x1860 [ 631.481378][T24310] worker_thread+0xa53/0xfc0 [ 631.486492][T24310] kthread+0x389/0x470 [ 631.491081][T24310] ret_from_fork+0x514/0xb70 [ 631.496200][T24310] ret_from_fork_asm+0x1a/0x30 [ 631.501497][T24310] [ 631.501497][T24310] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 631.508721][T24310] __mutex_lock+0x1a3/0x1550 [ 631.513841][T24310] nbd_queue_rq+0xc6/0x1100 [ 631.518877][T24310] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 631.525017][T24310] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 631.531914][T24310] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 631.538427][T24310] blk_mq_run_work_fn+0x16c/0x300 [ 631.543985][T24310] process_scheduled_works+0xb5d/0x1860 [ 631.550059][T24310] worker_thread+0xa53/0xfc0 [ 631.555190][T24310] kthread+0x389/0x470 [ 631.559792][T24310] ret_from_fork+0x514/0xb70 [ 631.564909][T24310] ret_from_fork_asm+0x1a/0x30 [ 631.570203][T24310] [ 631.570203][T24310] -> #0 (set->srcu){.+.+}-{0:0}: [ 631.577331][T24310] __lock_acquire+0x15a5/0x2cf0 [ 631.582696][T24310] lock_sync+0x9d/0x120 [ 631.587361][T24310] __synchronize_srcu+0xca/0x300 [ 631.592803][T24310] elevator_switch+0x1e8/0x7a0 [ 631.598075][T24310] elevator_change+0x2cc/0x450 [ 631.603347][T24310] elevator_set_default+0x36c/0x430 [ 631.609056][T24310] blk_register_queue+0x3e9/0x4e0 [ 631.614598][T24310] __add_disk+0x677/0xd50 [ 631.619447][T24310] add_disk_fwnode+0xfb/0x480 [ 631.624642][T24310] nbd_dev_add+0x72c/0xb50 [ 631.629577][T24310] nbd_genl_connect+0x962/0x1cf0 [ 631.635031][T24310] genl_family_rcv_msg_doit+0x22a/0x330 [ 631.641095][T24310] genl_rcv_msg+0x61c/0x7a0 [ 631.646145][T24310] netlink_rcv_skb+0x232/0x4b0 [ 631.651420][T24310] genl_rcv+0x28/0x40 [ 631.655916][T24310] netlink_unicast+0x75c/0x8e0 [ 631.661186][T24310] netlink_sendmsg+0x813/0xb40 [ 631.666458][T24310] ____sys_sendmsg+0x972/0x9f0 [ 631.671739][T24310] ___sys_sendmsg+0x2a5/0x360 [ 631.676924][T24310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 631.682455][T24310] do_syscall_64+0x174/0x580 [ 631.687564][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.693971][T24310] [ 631.693971][T24310] other info that might help us debug this: [ 631.693971][T24310] [ 631.704198][T24310] Chain exists of: [ 631.704198][T24310] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 631.704198][T24310] [ 631.717842][T24310] Possible unsafe locking scenario: [ 631.717842][T24310] [ 631.725276][T24310] CPU0 CPU1 [ 631.730627][T24310] ---- ---- [ 631.735976][T24310] lock(&q->elevator_lock); [ 631.740557][T24310] lock(&q->q_usage_counter(io)#49); [ 631.748441][T24310] lock(&q->elevator_lock); [ 631.755549][T24310] sync(set->srcu); [ 631.759433][T24310] [ 631.759433][T24310] *** DEADLOCK *** [ 631.759433][T24310] [ 631.767562][T24310] 6 locks held by syz.4.4497/24310: [ 631.772748][T24310] #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 631.780934][T24310] #1: ffffffff8fe3a080 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 631.789896][T24310] #2: ffff88809dd749c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 631.800245][T24310] #3: ffff88802af3bdf0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x119/0x4e0 [ 631.810070][T24310] #4: ffff88802af3b878 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 631.820978][T24310] #5: ffff88802af3bd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 631.830801][T24310] [ 631.830801][T24310] stack backtrace: [ 631.836683][T24310] CPU: 1 UID: 0 PID: 24310 Comm: syz.4.4497 Not tainted syzkaller #0 PREEMPT(full) [ 631.836705][T24310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 631.836715][T24310] Call Trace: [ 631.836726][T24310] [ 631.836733][T24310] dump_stack_lvl+0xe8/0x150 [ 631.836753][T24310] print_circular_bug+0x2e1/0x300 [ 631.836775][T24310] check_noncircular+0x12e/0x150 [ 631.836796][T24310] __lock_acquire+0x15a5/0x2cf0 [ 631.836816][T24310] ? lockdep_unlock+0x5d/0xd0 [ 631.836829][T24310] ? __lock_acquire+0x146e/0x2cf0 [ 631.836846][T24310] ? __lock_acquire+0x146e/0x2cf0 [ 631.836866][T24310] ? __synchronize_srcu+0xb6/0x300 [ 631.836880][T24310] lock_sync+0x9d/0x120 [ 631.836895][T24310] ? __synchronize_srcu+0xb6/0x300 [ 631.836911][T24310] __synchronize_srcu+0xca/0x300 [ 631.836926][T24310] ? do_raw_spin_lock+0x12b/0x2f0 [ 631.836946][T24310] ? __pfx___synchronize_srcu+0x10/0x10 [ 631.836965][T24310] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 631.836994][T24310] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 631.837017][T24310] ? synchronize_srcu+0x20d/0x270 [ 631.837033][T24310] elevator_switch+0x1e8/0x7a0 [ 631.837050][T24310] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 631.837070][T24310] elevator_change+0x2cc/0x450 [ 631.837087][T24310] ? do_raw_spin_unlock+0xf5/0x210 [ 631.837109][T24310] elevator_set_default+0x36c/0x430 [ 631.837127][T24310] ? __pfx_elevator_set_default+0x10/0x10 [ 631.837149][T24310] ? disk_register_independent_access_ranges+0x2db/0x380 [ 631.837165][T24310] ? blk_crypto_sysfs_register+0x11c/0x170 [ 631.837182][T24310] blk_register_queue+0x3e9/0x4e0 [ 631.837205][T24310] __add_disk+0x677/0xd50 [ 631.837228][T24310] ? down_read+0x270/0x2e0 [ 631.837246][T24310] add_disk_fwnode+0xfb/0x480 [ 631.837269][T24310] nbd_dev_add+0x72c/0xb50 [ 631.837293][T24310] ? __pfx_nbd_dev_add+0x10/0x10 [ 631.837321][T24310] ? bpf_lsm_capable+0x9/0x20 [ 631.837335][T24310] ? security_capable+0x7e/0x2c0 [ 631.837356][T24310] ? radix_tree_lookup+0x25c/0x290 [ 631.837378][T24310] nbd_genl_connect+0x962/0x1cf0 [ 631.837398][T24310] ? __pfx___nla_validate_parse+0x10/0x10 [ 631.837421][T24310] ? __pfx_nbd_genl_connect+0x10/0x10 [ 631.837456][T24310] ? rcu_is_watching+0x15/0xb0 [ 631.837478][T24310] ? trace_kmalloc+0x2a/0xf0 [ 631.837500][T24310] ? __nla_parse+0x40/0x60 [ 631.837519][T24310] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 631.837542][T24310] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 631.837567][T24310] genl_family_rcv_msg_doit+0x22a/0x330 [ 631.837591][T24310] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 631.837616][T24310] ? __lock_acquire+0x6b5/0x2cf0 [ 631.837635][T24310] genl_rcv_msg+0x61c/0x7a0 [ 631.837658][T24310] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.837678][T24310] ? __pfx_nbd_genl_connect+0x10/0x10 [ 631.837703][T24310] netlink_rcv_skb+0x232/0x4b0 [ 631.837721][T24310] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.837741][T24310] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.837763][T24310] ? down_read+0x270/0x2e0 [ 631.837779][T24310] ? genl_rcv+0xd/0x40 [ 631.837799][T24310] genl_rcv+0x28/0x40 [ 631.837818][T24310] netlink_unicast+0x75c/0x8e0 [ 631.837836][T24310] netlink_sendmsg+0x813/0xb40 [ 631.837857][T24310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.837875][T24310] ? aa_sock_msg_perm+0xf1/0x1b0 [ 631.837898][T24310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.837919][T24310] ____sys_sendmsg+0x972/0x9f0 [ 631.837935][T24310] ? __might_fault+0xaf/0x130 [ 631.837957][T24310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.837978][T24310] ? import_iovec+0x73/0xa0 [ 631.837997][T24310] ___sys_sendmsg+0x2a5/0x360 [ 631.838013][T24310] ? __lock_acquire+0x6b5/0x2cf0 [ 631.838029][T24310] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.838048][T24310] ? futex_wait+0x2a2/0x390 [ 631.838078][T24310] ? __fget_files+0x2a/0x420 [ 631.838096][T24310] ? __fget_files+0x3a0/0x420 [ 631.838117][T24310] __x64_sys_sendmsg+0x1bd/0x2a0 [ 631.838135][T24310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.838155][T24310] ? rcu_is_watching+0x15/0xb0 [ 631.838174][T24310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.838190][T24310] do_syscall_64+0x174/0x580 [ 631.838206][T24310] ? trace_irq_disable+0x3b/0x140 [ 631.838228][T24310] ? clear_bhb_loop+0x40/0x90 [ 631.838244][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.838258][T24310] RIP: 0033:0x7f605ed9ce59 [ 631.838273][T24310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.838287][T24310] RSP: 002b:00007f605cff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.838302][T24310] RAX: ffffffffffffffda RBX: 00007f605f015fa0 RCX: 00007f605ed9ce59 [ 631.838313][T24310] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008 [ 631.838323][T24310] RBP: 00007f605ee32d6f R08: 0000000000000000 R09: 0000000000000000 [ 631.838333][T24310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.838342][T24310] R13: 00007f605f016038 R14: 00007f605f015fa0 R15: 00007ffc1b5f8858 [ 631.838360][T24310] [ 632.359408][T24321] netlink: 'syz.3.4500': attribute type 1 has an invalid length. [ 632.416524][T24321] 8021q: adding VLAN 0 to HW filter on device bond17 [ 632.434113][T24321] macvlan2: entered promiscuous mode [ 632.439543][T24321] macvlan2: entered allmulticast mode [ 632.445600][T24321] bond17: entered allmulticast mode [ 632.451469][T24321] bond17: entered promiscuous mode [ 632.457178][T24321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 632.466329][T24321] team0: Port device macvlan2 added [ 632.481174][T24322] bond17: (slave ip6gretap1): making interface the new active one [ 632.495051][T24322] ip6gretap1: entered promiscuous mode [ 632.503296][T24322] ip6gretap1: entered allmulticast mode [ 632.514242][T24322] bond17: (slave ip6gretap1): Enslaving as an active interface with an up link [ 632.552730][T24324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4497'. [ 632.568992][T24324] nbd: device at index 64 is going down [ 632.644671][T23766] udevd[23766]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory