last executing test programs: 4.576703064s ago: executing program 3 (id=1174): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000000c0)=0x6, 0x4) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="110000000400000004000000f9ffffff00000000", @ANYRES32, @ANYBLOB="0000001000000000af4b10429aca000000000000000000009eba4882114fecd418c8bf4b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newtaction={0x488, 0x30, 0x2d, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x762c]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4, 0x101}}}]]}, {0x4}, {0xc, 0xa}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x4044844}, 0x0) sendmmsg$inet6(r1, &(0x7f0000001bc0)=[{{&(0x7f0000000240)={0xa, 0x4f21, 0x400, @private0, 0x3}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000080)="9265e0", 0x3}], 0x1}}], 0x2, 0x931766f6319eed40) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x3, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000140)={{0x2, 0x0, @local}, {0x0, @remote}, 0x0, {0x2, 0x0, @local}, 'lo\x00'}) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040)=0x26, 0xe) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000001c0)={0x0, 'ip_vti0\x00', {0x1}, 0xffac}) shutdown(0xffffffffffffffff, 0x1) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x12}, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x10}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x13a8}}, 0x0) write$tun(r6, &(0x7f00000000c0)={@void, @val={0x3, 0x1, 0xc, 0x4, 0x4, 0xcac}, @llc={@llc={0x80, 0xff, "ac", "b83b49e13259c7e102949c6aa2ed2f778435540d402fb4fccf2a142ff5468255cc0f1d7e8a95388f452e94aee8ef30429a555c6a50020b67d921dee379a147c9cfd181631cd4db11d52f"}}}, 0x57) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0x98}}, 0x0) 4.226663632s ago: executing program 3 (id=1180): recvmmsg(0xffffffffffffffff, &(0x7f0000001d00), 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0x5, 0x4) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x104aa) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="8484", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x80}}, 0x24000010) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='pids.max\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x40000000000004) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) epoll_create1(0x80000) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0xe429, @none, 0x401}, 0xe) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000000a03000000000000000000070000020900010073797a30000000000c000440000000000000000508000240000000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000293c0000001e0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c000080080003"], 0xe0}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="040000bd7000fcdbdf251200000008f3484f5757000300", @ANYRES32=r9, @ANYRES8=r4], 0x50}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) openat$cgroup_type(r5, &(0x7f0000000180), 0x2, 0x0) 3.113039765s ago: executing program 3 (id=1191): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x1, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x101d0, 0x0) 2.748111054s ago: executing program 4 (id=1194): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = accept4(r4, 0x0, 0x0, 0x0) ioctl$int_in(r5, 0x5452, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000140)={0x20000015}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_getaddr={0x18, 0x16, 0x205, 0x0, 0x0, {0x9}}, 0x18}}, 0x50) r8 = socket$netlink(0x10, 0x3, 0x10) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2.604144728s ago: executing program 3 (id=1196): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000280)={@empty, @local, @private=0xa010102}, 0xffffffffffffff3d) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x1c) 1.952444186s ago: executing program 3 (id=1202): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) sendto$inet6(r0, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) r3 = socket$inet6(0x10, 0x2, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a578401f000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x6a3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x88}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_modinfo={0x42, 0x3, 0x1}}) unshare(0x26000400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) accept4(r4, 0x0, &(0x7f0000000140), 0x800) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) r11 = bpf$ITER_CREATE(0x21, &(0x7f00000009c0)={r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000240)=@raw=[@alu={0x7, 0x1, 0x6, 0x6, 0x8, 0x50, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ldst={0xcd1a283faffb3b2a, 0x2, 0x2, 0x4, 0x4, 0x8}], &(0x7f0000000280)='GPL\x00', 0x4, 0x5a, &(0x7f0000000640)=""/90, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xc, 0x2, 0x559}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r11], &(0x7f0000000a40)=[{0x3, 0x3, 0xc, 0x9}], 0x10, 0x4, @void, @value}, 0x94) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r7, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xa5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x44) close(r5) 1.951743644s ago: executing program 4 (id=1203): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x2, 0x3}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad", 0x1) 1.466021876s ago: executing program 0 (id=1208): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381893308a609c6cc5340dbd121e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r1) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@newqdisc={0x200, 0x24, 0x200, 0x200000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @qdisc_kind_options=@q_gred={{0x9}, {0x170, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x400000, 0xfffffffe, 0x200, 0xd, 0x3, 0x3, 0x2, 0x2, 0x4dc, 0x4, 0x15, 0x1c, 0xd, 0x9, 0x0, 0x4}}, @TCA_GRED_MAX_P={0x8}, @TCA_GRED_DPS={0x10, 0x3, {0xe, 0x6, 0x1, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x1, 0xe, 0x3}}, @TCA_GRED_MAX_P={0x8, 0x4, 0xfff}]}}, @qdisc_kind_options=@q_drr={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fff}, @TCA_RATE={0x6, 0x5, {0xa, 0xb}}, @TCA_RATE={0x6, 0x5, {0x40, 0xf0}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}, @qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0xc763}]}}]}, 0x200}, 0x1, 0x0, 0x0, 0x4054}, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) close(r3) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000140)={r4}) (async) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0xc08, 0x3, 0x398, 0xd8, 0x5002004a, 0x10030000, 0x0, 0xc203007a, 0x300, 0x3c8, 0x3c8, 0x300, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0xb8, 0xd8, 0x0, {0x0, 0x1200}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@ipv4=@dev, [], @ipv4=@private}, {@ipv4, [], @ipv4=@remote}, {@ipv6=@loopback, [], @ipv6=@mcast1}], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) (async) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0xffffffffffffff0a, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], 0x3}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.461569314s ago: executing program 4 (id=1209): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x48, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 1.228449326s ago: executing program 2 (id=1210): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0x2, 0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r3, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[], 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) pwritev(r4, 0x0, 0x0, 0x1, 0xf597) r5 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x8000400) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x1ff) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70500000000000079105c000000000005000000000000009500000000000000045deb497403e574cbc2452a08546d06f98c930d8e572b73415d11c0717dbb9620625647e8a04f951e768a659cbc1451eee1c437e0d5440a4994b4742c33358d626e74c92eca7b0ec92b0c5f6a1dae3c6c0071b2b5d7e188daca43cee12b6581d6a7b1691e9e5c35bb0352ef52f367f01c31bbe26d4228c6f3bf372099eba19fd12fbf718e4ae5ab7d6af0cc3445634d99c2461ea0ac21ca579f75af9a8b45b0ca5f91121c569919e991bc00f9c53b5239baa54df300c663229c6a22d1bf6533"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) 1.226739129s ago: executing program 1 (id=1211): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf25070000000c0017000200aaaaaaaaaaaa08000300", @ANYRES32=r2, @ANYBLOB="0a0004"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000004ec0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xf, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000600)="92", 0x1}], 0x1}}], 0x1, 0x20000800) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) 1.198885532s ago: executing program 0 (id=1212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES8=r0, @ANYRESHEX=r0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.181669167s ago: executing program 4 (id=1213): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x15, 0x5, 0x0) connect$netrom(r1, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) getsockname$tipc(r1, 0x0, &(0x7f0000000080)) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x61, 0x0, 0x2}, {0x6}]}, 0x10) (async) r2 = socket(0x200000000000011, 0x2, 0xd) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x200, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x20048090) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r4 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syz_tun\x00'}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80fe) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}]}, 0x1c}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) 1.044100276s ago: executing program 1 (id=1214): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="03002dbd7000fddbdf2502000000050002"], 0x20}, 0x1, 0x0, 0x0, 0x4000110}, 0x4000400) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xfffffffffffffc5e, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}]}]}}]}, 0xb8}, 0x1, 0x7a00}, 0x0) 1.022294038s ago: executing program 2 (id=1215): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) shutdown(r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000140)={0x2000200b}) 991.785085ms ago: executing program 0 (id=1216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a030200000000000000000200fffb09000209000000300000000009ffff0073797a300000000054000380080001400000000008000240004000004000038014000100776732000000000000000000000000001400010074756e6c30000000000000000000000014000100b61a6e6c300000000000000000000000140000001100010000000000000000000500000aa14b18102d9894c4a2c134990e438053e43cf40c642661609cb5e04296a1fcce890d60ead02d43ca63a5"], 0xa8}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x7800, 0x1, 0x9, 0xef, {{0x1c, 0x4, 0x3, 0x3, 0x70, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast2, @remote, {[@generic={0x0, 0x3, 'S'}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x60, [@dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010100, @remote, @multicast1, @remote]}, @noop, @ssrr={0x89, 0x13, 0x8e, [@local, @multicast1, @rand_addr=0x64010100, @multicast2]}, @cipso={0x86, 0x13, 0x0, [{0x0, 0xd, "cb6239b231146941371b55"}]}, @timestamp_addr={0x44, 0x14, 0xe0, 0x1, 0x9, [{@private=0xa010100, 0xb8d}, {@rand_addr=0x64010100}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x364, 0x30, 0x1, 0x0, 0x0, {}, [{0x350, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x92, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x401, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_skbmod={0x3c, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}]}, {0x7, 0x6, "1653ee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0xf0, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ca, 0x0, 0xffffffffffffffff, 0x7, 0x1}, 0x3, r2}}]}, {0xa4, 0x6, "9d5ee1d1737465cea9a6e0f81b1e3f8cd190b44bbb73dba9669a750d77c318f5ef0f8274e05bd7cd71a4bf78cea11c1ca7df77174cc416a2a2b7b81bd2e51e7eff1a79a6f1c7e1aa30ce34bb69e368bef5ee237a85d0dd08eb62d8c8509aa03072e0c3e2854fbc5eac10cff51745d62f12eca7b62fe68cd44b6f745e93f4f9a1c611c0bd6d875f197d3fa21472d9b36137e25b04e76191e3c48ad8d96804f489"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x98, 0xc, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc, 0xeaf0, 0x7, 0x8, 0x8}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe1c, 0x9, 0x4, 0x2, 0x8}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffff80, 0x40, 0x10000000, 0x6, 0x2}, 0xb}}]}, {0x12, 0x6, "731477f6aec2528d58cf87734b53"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0xfc, 0x1, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xb, 0x0, 0xc, 0x10}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_PROTO={0x6, 0x4, 0xf6}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6b597}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x6, 0x9, 0xfffffffffffffff8, 0x9, 0x7}, 0x3}}, @TCA_MPLS_BOS={0x5}]}, {0x70, 0x6, "1109972e2f8226cc04c4ea06dcb35b37431d7dd12603ab7707a127e93ea73d7f3cfc4cf3804ccc169356eb8363e2819beb4e7de3d3d6cf69e369b2fdea8e39236081355882c50a036136f9382d6a61e10747edda598d004fedd870c75cff5ca3567b20f07bcca656eface188"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x364}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0000000101010200000000000000060a00fffe0c00198008000100ad0600003c0001802c0001"], 0x5c}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x3, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r6, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206050000000000000000000500000014000780080008000000004008000640000000020900020073797a32000000000500040000000000050005000a00000005000100060000000d0003006c6973743a736574"], 0x64}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x181101, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f00000002c0)={'gretap0\x00', @remote}) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x1a, 0x0, &(0x7f0000004e00)=0x4c) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000180000001801000020ff642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ff000000000099308d35a2c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r15 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r15, 0x890b, &(0x7f00000000c0)={@rand_addr=' \x01\x00', @mcast1, @private1, 0x0, 0x0, 0x0, 0x500, 0x3, 0x20224, r14}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r9], 0x4c}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 896.124338ms ago: executing program 4 (id=1217): ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x1000, 0x1ff, 0x7, 0x4eae, 0x5, 0x0, [{0x4, 0x3, 0xffffffffffffff7f, '\x00', 0x2200}, {0xa587, 0x2, 0x0, '\x00', 0x804}, {0x6, 0x5, 0xc982, '\x00', 0x880}, {0x78, 0x9, 0x0, '\x00', 0x120a}, {0x2, 0x4, 0x84d, '\x00', 0x2802}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r3 = accept4(r2, &(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x80, 0x80000) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0xdc3a, @local, 0x1a7}, 0x1c) listen(r3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000300)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x1404, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r3, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000004c0)="ee88405b76eccf34bab677f7949d2e69b8a44d669200f4bde7d381e6a9d38abd657c6d41f35a26a1996db76f03fab6a99e0957ab876af6e4b37eb6d9201a805307eba35f7e02d5999a0be42d", 0x4c}, {&(0x7f0000000540)="ede61800d3261e03a1e5d6582a18449b4c34b1bf43da4d205123310678f657c35e669e03e02e9b816d771076f6cab2ca04d895081b9203272b65896141b2ba89823e497b3a2b80af874e3f5899bb95f6ea5141274b298971bc65afcae99bb995661a95d233f026c40f06c8635797e5a7da10b83da607ce92b08f27462b", 0x7d}, {&(0x7f00000005c0)="7d3ecad6efdb4482c98ccaa0e9f51b2fa03168693619488ca346c6f1733ba3c5f4be27f68cc861889b69e7307d113a70db9403b32e5b242c6b7a64d2eff5e1b520da4a75ee24f427dfb35936580da04548652d04ea34fa48cdcf4f6cea8d87c28b86900354252edcb9d597cfba931c2e6f7f008ae29cd76cd8d4564b4cab9b1799d6feb7ebdf04d0459b77f3905793d6cc99299b5961b5029b4f7b9884789c9495d14a14", 0xa4}, {&(0x7f0000000680)="9118a5d8d4e01fa9fea7a1cfe86713a735ea79df7799bc499732fa7af3ff551cd36b8092f1ff4a5435a633bfc6512818511586b427428ad382189988e0ec7ec5baf53a2148f24ce7b6519e169e915c58ec793d9c590351c412c634fc40256f2b47519b9d12d69cc3a3472edd9f5ab992bf12ed6f5cd381d99476debbb9a1cff85be20b86d11228ecd099d1d0a4d42ca56558cd4fe1a3cac076972b3a12805d6b8fa1624fb44dc633a1632da494d1934a79cda9173ab9302a03bab5da22f1769c378b8cb4b7855e4dc5205e567eccd783f846b7cc30292d3b201cdbdd1f8ac1302b58637b6533df96e70622175a2dd8af388bfc126e872d", 0xf7}, {&(0x7f0000000780)="70e78f2d595673e96fd06242580259fa113f8b08f330982a865c48d8dad6529cb0f87b70d20a8be86830b897b43c9c9e1e9dda71012ab66e7765bff474c7411cbe3392ed702cba37ebdfde40862520b7c958ccbb399e16dd2641993f4a10451cefa1f7cd2dddc56489b39223b51cc9eb5c3c18d2289656acdbfcdfc4912545e190aa18cadb68190e524508186878", 0x8e}, {&(0x7f0000000840)="0507e22a41b5c192d6706dccbd52eb2ea30395faf1b56b2130a67988719b865069e0194eef1b1ec8a97a378a6bb1df2e049370161513069749002fd560cb35231e103c3a033f7d517e27f2282342834855e3472d601e622ee84942649e17b5208f0c7aafed9ca5bd366b5a1494b7c25097057e21ff8eebe4326b7c2873ce62bc75d1c427a2234239dbbbefca1a8ee08b1593b036d0ea6dc25517dbf40945d19d3bdb17473fe35f3eb47c6332cbd6729dd589ba76d17051", 0xb7}, {&(0x7f0000000900)="17874a93da45598df4a272c709b3836356dc1bbbf102def2d6b2cbb6bcb6fb21b9e848b7e7ebd8090b7462c73f43004d4e6c4d4ec366503c6deffc01d63fccfb2919c6cc79a157fb41e32c7da0c27a8793eceb905c6d98f185a7e436f0e2dac8bd54820ef001cd355fede66af2087a33f83d9b38cf83918e50459641b6bcda7f16fa2eb2dfbdcd5e4d02d5280175f41d820969d6a9f1dcbfe03595e64a04239150dff9bd1453ec290fed93b8ebb1108b1403da3542ef330f69e53e8efff47283328eb5f7e466e56998c99bcd38021feb9ba62c2d843ddf6748605f2daff6f060193d8f3bed3709e16a342f16a13af37f4417152621", 0xf5}], 0x7, &(0x7f0000000a80)=[{0x110, 0x10f, 0x6, "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"}, {0x1010, 0x109, 0x31, "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"}, {0x20, 0x114, 0x6, "2cfe9b273231bbc408690a"}, {0x18, 0x6, 0x3, "cf46684d5c5051de"}, {0x100, 0x118, 0x5, "0a98f78888c777b3737883696c7fff9d384fc237dccb2fb34ec19c6ef862d914cf4ee4a326c1da13723036238589a2549ba8b1b772c9c63e90c2a189f8d406c3b9de5d23910f140f8a606ea65f4a3ff469f02475fcb47bce553fe5ad5990c9b4cb070e26a29cd98120b6dec215a540867e78e57142e9447f8daeb4140eaafbd3be97ba0b07a54ca8e9feb938faa9e9bbdee9de057a8fb1a546298157be283a45d7502f3885af676d2caf55c8cb757ce9624e410a017e971cc73e54839860791f7b0a4b6c6c4ebe3cd9d38903a7a10e9c8a075f47c65371f43e51a7e98fac10fc462b7f9aaa51f21fe97470"}], 0x1258}, 0x0) pwritev(r1, &(0x7f0000002000)=[{&(0x7f0000001d40)="db5b577da9932f8ba45e607d8e2929961f5172272a05ccc71746fff6b1b5e96c0d65afeed063d77e278022a3bf9e65337a85a72f79dd9935db13005c3cb7d6c25be5806fa17b2dca2168127b18ea493361c8afcc4042975b6bcd78150c2db16235f1b76d52e0252e", 0x68}, {&(0x7f0000001dc0)="e7ff11512b9e63eeccb96c70d2b728cbe888c07c4627f8d940c2c7079b5a6aefdb1eebf309eb939cf8ec76b5135e09d469c5e08e0ec195d9b8bf3e37ef656786660de47734405e2eb584752ad16e13143338e8a58e8a70115b356be341451c63b036fc3841c8362baacfea1a6eb22b976637a09ea995459b1435ce64c0064363c21891efd22ff9936dc12bd33995090d5aa8acb9e7de48280be0cf39a1030b2c7b87fdfbaa44aca13259ef669b6f6a2043c3470cbdc4cc608926e834eef0ad22c619bb07ef9e8271dcec6b8a0ab0e2452b0cc9f1cda650ec53e4bc54bf97e3e346c48a1427143ac5", 0xe8}, {&(0x7f0000001ec0)="ce86379f1f06e311bd5f", 0xa}, {&(0x7f0000001f00)="9bd6d93a20e332452c8985b11bceb4f055a6a1a35d0a9ff89c36c1aebf23003c039c075014f97902de5bb9f79fccb19b2edc6b79be0d24302e6be08c7c02c09a5fb2cad3d8a46d1de4f3264f356e0bd4ce22af63acec1ae355bc4cca258ed128e3818b8350740aed9553eec768a430b197d9ae5054832f60e33de5b14d507331fe6967a526755877404f365ad6a33e2f57f31fad6a3b96f50908411247915733d944115b0bbe45707a87580182b353c4116d2e1143a382a24942c5517e42a526c0", 0xc1}], 0x4, 0x68, 0x5) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000002040), 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000002180)={'ip_vti0\x00', &(0x7f0000002080)={'syztnl0\x00', r4, 0x40, 0x700, 0x9c, 0x0, {{0x2a, 0x4, 0x0, 0x9, 0xa8, 0x67, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x2b, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@remote, 0x8}]}, @end, @rr={0x7, 0x23, 0x55, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @empty, @private=0xa010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x24, 0x5a, 0x1, 0x7, [{@loopback, 0x1000}, {@remote}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x73e9}, {@remote, 0x2}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x23, 0x0, 0x1, [0x10, 0xff, 0x2, 0xff]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0x2, [{@loopback, 0x1000}, {@rand_addr=0x64010100, 0xe339}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}]}}}}}) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000021c0)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000002200)=r8, 0x12) r9 = accept(r3, &(0x7f0000002240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000022c0)=0x80) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0x84, 0x0, 0x8, 0x1, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c0b4}, 0x80) ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f0000002480)) sendmsg$inet(r9, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000024c0)="637d72c94825d03219273fdcc2e44c769a5d09c30662f776c64d2fd1850ebcb51c5146d61da0aeac15d9e0dbd3617da618683fd283876dd1bdbb3966ccb41e42b7d0a4e6f3d5edecba98dbfc44ba02bbdcea740455f5569000b4c5e086f3ed0754", 0x61}], 0x1, &(0x7f0000002580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x62}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010101, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x78, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x9f, [@local, @rand_addr=0x64010100, @loopback, @broadcast, @local, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x24, 0x4d, 0x1, 0x6, [{@broadcast, 0x7}, {@rand_addr=0x64010102, 0xfffffffa}, {@multicast2, 0x9}, {@private=0xa010100, 0x7}]}, @noop, @lsrr={0x83, 0x13, 0xcc, [@broadcast, @remote, @rand_addr=0x64010100, @rand_addr=0x64010100]}, @end, @ra={0x94, 0x4}, @generic={0x7, 0x10, "dd79fc206b4b3933dbae2bb88f14"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @broadcast}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x148}, 0x4000) close(r9) recvmmsg(r9, &(0x7f0000004140)=[{{&(0x7f0000002740)=@l2tp6, 0x80, &(0x7f00000028c0)=[{&(0x7f00000027c0)=""/149, 0x95}, {&(0x7f0000002880)=""/19, 0x13}], 0x2, &(0x7f0000002900)=""/51, 0x33}, 0x5}, {{&(0x7f0000002940)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000029c0)=""/61, 0x3d}, {&(0x7f0000002a00)=""/69, 0x45}, {&(0x7f0000002a80)=""/239, 0xef}], 0x3, &(0x7f0000002bc0)=""/220, 0xdc}}, {{&(0x7f0000002cc0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000004080)=[{&(0x7f0000002d40)=""/172, 0xac}, {&(0x7f0000002e00)=""/243, 0xf3}, {&(0x7f0000002f00)=""/64, 0x40}, {&(0x7f0000002f40)=""/250, 0xfa}, {&(0x7f0000003040)=""/12, 0xc}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x6, &(0x7f0000004100)=""/2, 0x2}, 0x4}], 0x3, 0x40010100, &(0x7f0000004200)={0x0, 0x989680}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000042c0)={'tunl0\x00', &(0x7f0000004240)={'syztnl2\x00', r10, 0x40, 0x78ef, 0xd, 0xffffffff, {{0x11, 0x4, 0x0, 0x20, 0x44, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @remote, {[@rr={0x7, 0x13, 0x2e, [@rand_addr=0x64010102, @private=0xa010100, @multicast2, @rand_addr=0x64010101]}, @ssrr={0x89, 0x13, 0xd6, [@dev={0xac, 0x14, 0x14, 0x37}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @empty]}, @end, @ssrr={0x89, 0x7, 0x80, [@remote]}]}}}}}) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000004300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000004340), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000004380), r2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f00000043c0)={r5, 0x8001, 0x4, 0x4}) 895.257994ms ago: executing program 3 (id=1218): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f00000001c0)) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x8, 0x800000000000000}}}, 0xb8}}, 0x4c001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendfile(r1, r2, 0x0, 0x7) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000400000200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB="03000000030086ba9a74000001000000000000000000000000080000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) 846.632337ms ago: executing program 1 (id=1219): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pi6 \x00'}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x1f, 0x9, 0x1, 0x4, @empty, @private2, 0x10, 0xa9, 0x9, 0x5}}) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdb, 0xdb, 0x4, [@ptr={0x2, 0x0, 0x0, 0x2, 0x2}, @union={0x2, 0x5, 0x0, 0x5, 0x1, 0x0, [{0x1, 0x1, 0xffffff7f}, {0x7, 0x1, 0xf}, {0x2, 0x3, 0x8}, {0x0, 0x4, 0x81}, {0x7ff, 0x2, 0x1}]}, @datasec={0x10, 0x6, 0x0, 0xf, 0x3, [{0x1, 0x2, 0x9}, {0x1, 0x8, 0x2}, {0x3, 0x5, 0x6}, {0x4, 0x1, 0x4}, {0x2, 0x2, 0x3}, {0x5, 0xff, 0x51e}], "f3f6d0"}, @struct={0x7, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x5, 0x5, 0x7}]}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}, @func={0x7, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x0]}}, &(0x7f0000000480)=""/35, 0xf8, 0x23, 0x1, 0x7, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', r1, r2, 0x3, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) socket$inet6(0xa, 0x2, 0x3a) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20008}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r6}}]}, 0x28}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0xfffffe15, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYRESHEX=r7, @ANYBLOB="23d543b314c33fb6036fced6332864de50f2838ae5c0bd8b31310cfcec45fd"], 0x28}}, 0x0) 769.190085ms ago: executing program 4 (id=1220): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x62040200) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES16=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b15d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x2}}}}}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e, 0x3e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0xac, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x6}}, @TCA_U32_SEL={0x74, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0xc5, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x5, 0x2, 0x2, 0x2}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}]}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x40) connect$can_bcm(r3, &(0x7f0000000280)={0x1d, r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x80000000}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r11, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1, 0x7, @l2={'eth', 0x3a, 'vlan1\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc800}, 0x8005) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r10, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xe, 0x6c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x840d0) 704.752441ms ago: executing program 2 (id=1221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) r3 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={r1, r2, r3}, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd00fbffffff000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x1, 0x4, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x6}}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0xfffffff9, 0x2}}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x64}}, 0xc004) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000090) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000004c0)={r5, 0x7}, 0x8) 679.47878ms ago: executing program 0 (id=1222): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex=r2, 0xb, 0x0, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@cgroup, r0, 0x3, 0x21, r0, @void, @void, @void, @value=r1, r3}, 0x20) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) bind$ax25(r4, &(0x7f0000000540)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default]}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x400080, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000640), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const={0x5, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x2e]}}, &(0x7f00000008c0)=""/79, 0x27, 0x4f, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0x6, 0x0}, 0x8) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000a00)='./file0/file0\x00'}, 0x18) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@o_path={&(0x7f0000000a80)='./file1\x00', 0x0, 0x8, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x10, &(0x7f00000006c0)=@raw=[@ldst={0x0, 0x1, 0x6, 0x2, 0x1, 0x8}, @map_fd={0x18, 0x4, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xa}, @initr0, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}], &(0x7f0000000740)='syzkaller\x00', 0x1, 0xef, &(0x7f0000000780)=""/239, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, r8, 0x8, &(0x7f0000000980)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r10, 0x5, &(0x7f0000000bc0)=[r11, r12], &(0x7f0000000c00)=[{0x1, 0x3, 0x7, 0x6}, {0x2, 0x7ff, 0xd, 0x6}, {0x1, 0x1, 0x1, 0x3}, {0x1, 0x3, 0x7, 0x5}, {0x4, 0x3, 0x6, 0x6}], 0x10, 0x3, @void, @value}, 0x94) r13 = socket$unix(0x1, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x60, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40841}, 0x40) bind$unix(r13, &(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000f00)=0xffffffff, 0x4) setsockopt$sock_timeval(r13, 0x1, 0x14, &(0x7f0000000f40)={0x0, 0xea60}, 0x10) getsockopt(r4, 0x7, 0x1, &(0x7f0000000f80)=""/27, &(0x7f0000000fc0)=0x1b) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001000)={0x0}, &(0x7f0000001040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000001080)={r14, @in6={{0xa, 0x4e21, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}}}, &(0x7f0000001140)=0x84) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001180)={0xc0000000, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=r15, 0x4) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000001400)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000013c0)={&(0x7f0000001240)={0x150, 0x7, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_RULE_USERDATA={0xc7, 0x7, 0x1, 0x0, "626bca794286f0fb50ef5de76dc256358dceaf9d465b5bcf9681458cbbd0a0e49da8996860a3f54fe52a7f5d5567e6d744708461dfa6b07f2071e972264de2f61eeb85c79db6ad794c3bad6a0d5bec732302c7010f16e3d903c752b4fbb08a7c478fec15dec287e1018b8aeb9af420587090059ca39be54e55770e1be06491b9dc3449536690e1a963e3841c6bf17ca7c555b163105932585bf7cd67bd3903fd24912dbe9ca8abaea282dcf9e9f23948d420f034547eef9d76392852a060f96a8bd1ab"}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x46, 0x7, 0x1, 0x0, "50065c779d45a29120eefecc1cdd4d66be4aa115a1a1a4fe7483ee255f640d483ebf45f30f0520b53298e22f662692565570b6563fac7bba179a0f5b21d0f6980523"}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$alg(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001440)="6116aa478bff3d33fe0d96a0407423de1548bb558529c842278650c6f68e180f48b9d81efc938b6ed0dfaa74fe3802e052f217cdda4563b813ff73306f31d9b4ab27d8268def28cceeb1e1c73e505b248c43d5b12865c40775816ebf1b524614e9c301b48d3828b7fd7b4ddd223c3bd7f1645f4e0fd3c096e4059373ec6e99e45cc683e8c1debbefbdd596e418c2eed95cadc816190f1e121747e0469fd780d85718e1dee8aac64e18a6983a2c669329235e0c61a86fb687ca2c279f8a67d4f9ea5c2174d0a6d97ad2e672b74ddf17eeefc0ef5fdb21b9c48c5472d48e29184554b7", 0xe2}, {&(0x7f0000001540)="5c3832f345eb3eb0cad6ef9d0beb368fe7fcbb38255f0c79c36740a0cc324a49684d60bddfac6909d7a8c2d3", 0x2c}, {&(0x7f0000001580)="a4736dff8a349b6550deba7e39e5de3c9b11e598e30c24f9605feebc05979f029d5ae8f255a7231bf95f18a991d11388b74d6bb09a091d5fb536cf9061247314d4f7fc84b962d5e38f405f720765469d04dd617592f2c9feac3130089bcbc58c3e79d21dd856ecdee2bfe0d7bc3fb9d75d2bb325289ee1c7bc40d42ac6062a676ddd49ac6b659beb957bd2480bb508bfe480cd5815146b7273", 0x99}, {&(0x7f0000001640)}, {&(0x7f0000001680)="64bbe194b987607bb92b60bb1218c1d54689fb10168135b7f94b5ac1743d4db2efe8e4fa64130603f0dffd29ee4a3abe028c72e33c63e1d3faa23952c3f663d6bdb532b9b0d039e77c5e9fc8a20c7a5952f4da88125dd9c95d81fdb18d9f04da7a8908ae406fc3ff629ca2b9d828f9efbdef152ac33f36af557deaed16a00adb7742be719c83a7458c927afd92da7276a16cd34b5800ca8ea735da9d622c03149ed5ea2421fa98487bc5f11930a60c6bff13122bfb914f031658b3", 0xbb}], 0x5, &(0x7f00000017c0)=[@assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x10000}, @assoc={0x18, 0x117, 0x4, 0x200}], 0x48, 0x1}, 0x80c0) 654.717759ms ago: executing program 1 (id=1223): unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x35, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb196, @void, @value}, 0x94) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x34}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x4000000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, r1, 0x4, r1}, 0x10) unshare(0x4000000) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r8 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}}, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) sendmsg$IEEE802154_SCAN_REQ(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000000000000009000000050015000000000005001300000000000800140000000000"], 0x2c}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x14, r11, 0x300, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x20000851) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xa}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x4}, "0e88"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 572.585122ms ago: executing program 2 (id=1224): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) (async) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) 484.054887ms ago: executing program 0 (id=1225): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x4, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x7}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd600000000000000000000000ffff0a010102ff020000000000000000000000000001020090780000000005"], 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x1, 0x4, {{0x16, 0x4, 0x1, 0x4, 0x58, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @loopback, {[@lsrr={0x83, 0xb, 0xda, [@rand_addr=0x64010100, @rand_addr=0x64010100]}, @timestamp={0x44, 0x4, 0xd5, 0x0, 0x4}, @end, @timestamp={0x44, 0xc, 0x3a, 0x0, 0x7, [0x7, 0x4]}, @cipso={0x86, 0x26, 0x3, [{0x5, 0x3, "c3"}, {0x1, 0x9, "2fd7a1dab858cd"}, {0x0, 0x11, "3dfdecddd89238b35fb53a186dc092"}, {0x2, 0x3, '`'}]}, @end]}}}}}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000640), 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0x7, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x0, 0xe0b, 0x6}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'wg0\x00'}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)}, 0x80) syz_emit_ethernet(0x72, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv4={0x800, @icmp={{0x17, 0x4, 0x1, 0x25, 0x64, 0x66, 0x0, 0xd, 0x1, 0x0, @empty, @empty, {[@timestamp={0x44, 0x2c, 0x36, 0x0, 0x8, [0x8, 0x9, 0x0, 0x10001, 0x400, 0x5, 0x80, 0x4, 0x6, 0x8]}, @ssrr={0x89, 0x1b, 0xe1, [@dev={0xac, 0x14, 0x14, 0x3f}, @local, @remote, @multicast2, @broadcast, @broadcast]}, @noop]}}, @address_request={0x11, 0x0, 0x0, 0x43b}}}}}, &(0x7f0000000440)={0x1, 0x3, [0xe85, 0x47e, 0xac2, 0x3c]}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001800000129bd7000fedbdf250a141002fc06000900110000080017000700000093ff15000000000008000400", @ANYRES32=r1, @ANYBLOB="37290cb9aee9180e", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="08000600593a0000"], 0x50}}, 0x0) 444.679676ms ago: executing program 1 (id=1226): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x44}}, 0x4040) (async) r3 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010102}, 0x10) 304.779249ms ago: executing program 2 (id=1227): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000000018010000696c6c2500000020002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000000400000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 300.39097ms ago: executing program 1 (id=1228): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) syz_emit_ethernet(0x26, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, @empty, @val={@val={0x88a8, 0x3, 0x1}, {0x8100, 0x1, 0x0, 0x1}}, {@can={0xc, {{0x1, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "200217379173542a"}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000004972b56300000000000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r5, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r6}, &(0x7f00000008c0)=0xc00, &(0x7f0000000980)='%pB \x00'}, 0x20) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x87c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x2000005}]}}]}, 0xa8}}, 0x0) 118.598374ms ago: executing program 2 (id=1229): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYBLOB="4400000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32=r2], 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) (async) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000400)={0x80000005}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x15, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0xe, 0x5, 0x0, 0x3}, @exit, @generic={0x1, 0x1, 0x0, 0xbf, 0xff}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r12, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x1c, r7, 0xf25, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x404c040) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fcffffff000000003900000008000300", @ANYRES32=r5, @ANYBLOB="14005a80100001800400010006000200090f"], 0x30}, 0x1, 0x0, 0x0, 0x4000400}, 0x48000) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x44, r3, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x6f}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r14 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r14, 0x107, 0x5, &(0x7f0000001100)=@req={0x80, 0x704b, 0x10, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20200000000000160005003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff070067020000feffffff360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 0 (id=1230): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x0, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xfff, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x80000000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x66c, 0x762, 0x3, 0x0, 0xe, 0x2b11, 0x100, 0x2, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x7, 0x79c, 0x2, 0x1, 0x7f, 0x3ff, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa4860a, 0x7, 0xaa, 0xfff, 0x2, 0x180000, 0x7, 0x8b, 0x5, 0x2af, 0xf5, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xba27, 0x4, 0x100005, 0x8, 0x752, 0x5, 0x4, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x8, 0x8, 0xffffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0x8, 0x2, 0xd9a, 0x9, 0x2a2, 0x0, 0x10001, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x7, 0x4, 0x5, 0x401, 0xd, 0x0, 0x8, 0x1, 0x200, 0xc5d, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) kernel console output (not intermixed with test programs): slave_1 [ 77.704268][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.715743][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.747087][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.756557][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.766598][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.775627][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.811911][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.841300][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.861465][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.917227][ T5843] veth0_macvtap: entered promiscuous mode [ 77.967034][ T3484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.976212][ T5843] veth1_macvtap: entered promiscuous mode [ 77.982452][ T3484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.014507][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.028003][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.049394][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.078619][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.107244][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.117981][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.128122][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.141710][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.151656][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.162450][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.174931][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.221772][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.222003][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.245193][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.250258][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.263078][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.274256][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.284233][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.304543][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.318290][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.331660][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.343174][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.400660][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.429018][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.437765][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.450219][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.464040][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.485591][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.513462][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.522409][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.839712][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.859447][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.861736][ T5852] Bluetooth: hci0: command tx timeout [ 78.866862][ T5851] Bluetooth: hci1: command tx timeout [ 78.872722][ T5840] Bluetooth: hci2: command tx timeout [ 78.938671][ T5840] Bluetooth: hci4: command tx timeout [ 78.938746][ T5851] Bluetooth: hci3: command tx timeout [ 79.083774][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.111021][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.243105][ T5943] batadv_slave_1: entered promiscuous mode [ 79.283976][ T5942] batadv_slave_1: left promiscuous mode [ 79.293652][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 79.323322][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9'. [ 79.542841][ T5963] netlink: 'syz.3.12': attribute type 10 has an invalid length. [ 79.662312][ T5953] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.670366][ T5953] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.791580][ T5984] Zero length message leads to an empty skb [ 79.861519][ T5988] syz.2.13 uses obsolete (PF_INET,SOCK_PACKET) [ 79.879845][ T5987] netlink: 'syz.2.13': attribute type 2 has an invalid length. [ 79.897639][ T5987] netlink: 'syz.2.13': attribute type 2 has an invalid length. [ 79.985287][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.000071][ T5953] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.086088][ T5953] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.098518][ T5953] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.113877][ T5953] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.129588][ T5953] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.206258][ T5953] syz.0.9 (5953) used greatest stack depth: 18704 bytes left [ 80.240325][ T5963] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.254358][ T5963] bond0: (slave team0): Enslaving as an active interface with an up link [ 80.286164][ T5967] bridge0: port 3(gretap0) entered blocking state [ 80.306188][ T5967] bridge0: port 3(gretap0) entered disabled state [ 80.317524][ T5967] gretap0: entered allmulticast mode [ 80.324703][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.338640][ T5967] gretap0: entered promiscuous mode [ 80.338813][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 80.358168][ T5974] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:948c:feff:feb1:3e88 error=-28 [ 80.385959][ T5975] gretap0: left allmulticast mode [ 80.396558][ T5975] gretap0: left promiscuous mode [ 80.420148][ T5975] bridge0: port 3(gretap0) entered disabled state [ 80.531731][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.896858][ T5974] infiniband syz1: set active [ 80.913429][ T5974] infiniband syz1: added team_slave_0 [ 80.923107][ T5974] syz1: rxe_create_cq: returned err = -12 [ 80.940396][ T5851] Bluetooth: hci2: command tx timeout [ 80.940431][ T5852] Bluetooth: hci1: command tx timeout [ 80.952008][ T5840] Bluetooth: hci0: command tx timeout [ 80.983534][ T5974] infiniband syz1: Couldn't create ib_mad CQ [ 81.016678][ T5974] infiniband syz1: Couldn't open port 1 [ 81.018786][ T5852] Bluetooth: hci4: command tx timeout [ 81.028229][ T5840] Bluetooth: hci3: command tx timeout [ 81.132003][ T5974] RDS/IB: syz1: added [ 81.190465][ T5974] smc: adding ib device syz1 with port count 1 [ 81.206080][ T5974] smc: ib device syz1 port 1 has pnetid [ 81.309895][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 81.375285][ T6033] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.20'. [ 81.653871][ T6044] IPv6: sit1: Disabled Multicast RS [ 81.781813][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.789622][ T6040] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.117790][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.157426][ T6040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.226835][ T6053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'. [ 82.292812][ T6040] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.302364][ T6040] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.314658][ T6040] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.323773][ T6040] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.598723][ T6057] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20001 [ 82.607885][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 83.331823][ T6087] netlink: 48 bytes leftover after parsing attributes in process `syz.4.38'. [ 83.555450][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 83.588472][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.40'. [ 84.930172][ T6147] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 84.957924][ T6150] netlink: 'syz.2.56': attribute type 3 has an invalid length. [ 85.808693][ T6190] sctp: [Deprecated]: syz.1.70 (pid 6190) Use of int in max_burst socket option. [ 85.808693][ T6190] Use struct sctp_assoc_value instead [ 85.918800][ T6194] warning: `syz.3.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.903365][ T51] cfg80211: failed to load regulatory.db [ 87.363090][ T6226] __nla_validate_parse: 3 callbacks suppressed [ 87.363109][ T6226] netlink: 228 bytes leftover after parsing attributes in process `syz.1.82'. [ 87.572816][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 87.632384][ T6203] tipc: Enabling of bearer rejected, failed to enable media [ 87.862488][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 87.896028][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 87.983311][ T6239] bond1: entered promiscuous mode [ 88.008626][ T6239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.427736][ T6255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.89'. [ 88.552821][ T6259] ip6gretap1: entered promiscuous mode [ 88.578439][ T6259] ip6gretap1: entered allmulticast mode [ 88.775899][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.93'. [ 88.870068][ T6269] openvswitch: netlink: Missing valid actions attribute. [ 88.879414][ T6269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 89.274885][ T6284] netlink: 132 bytes leftover after parsing attributes in process `syz.4.95'. [ 89.586333][ T6292] bridge_slave_0: left allmulticast mode [ 89.612624][ T6292] bridge_slave_0: left promiscuous mode [ 89.634274][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.684603][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 89.696051][ T6292] bridge_slave_1: left allmulticast mode [ 89.721661][ T6292] bridge_slave_1: left promiscuous mode [ 89.727420][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.780172][ T6292] bond0: (slave bond_slave_0): Releasing backup interface [ 89.814370][ T6292] bond0: (slave bond_slave_1): Releasing backup interface [ 89.854830][ T6307] netlink: 'syz.4.102': attribute type 1 has an invalid length. [ 89.894526][ T6292] team0: Port device team_slave_0 removed [ 89.931303][ T6292] team0: Port device team_slave_1 removed [ 89.937286][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.018588][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.829898][ T6324] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.882773][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 90.921997][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 91.047017][ T6327] xt_CT: No such helper "snmp" [ 91.214988][ T6336] sctp: [Deprecated]: syz.2.108 (pid 6336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.214988][ T6336] Use struct sctp_sack_info instead [ 91.400989][ T6343] netlink: 'syz.3.112': attribute type 3 has an invalid length. [ 91.470911][ T6346] netlink: 'syz.2.113': attribute type 10 has an invalid length. [ 91.479275][ T6342] netlink: 'syz.2.113': attribute type 10 has an invalid length. [ 91.488604][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.496027][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.515728][ T6345] netlink: 'syz.0.114': attribute type 10 has an invalid length. [ 91.547709][ T6346] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.554863][ T6346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.562328][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.566789][ T6353] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 91.569459][ T6346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.593848][ T6346] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 91.621404][ T6345] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.639594][ T6345] bond0: (slave team0): Enslaving as an active interface with an up link [ 91.648662][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.655961][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.681970][ T6352] bridge_slave_1: left allmulticast mode [ 91.687704][ T6352] bridge_slave_1: left promiscuous mode [ 91.700447][ T6352] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.713276][ T6352] bridge_slave_0: left allmulticast mode [ 91.723740][ T6352] bridge_slave_0: left promiscuous mode [ 91.739344][ T6352] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.765531][ T6352] bond0: (slave bridge0): Releasing backup interface [ 92.439219][ T6400] xt_policy: too many policy elements [ 92.822262][ T6414] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.880389][ T6415] netlink: 'syz.3.134': attribute type 24 has an invalid length. [ 93.015591][ T6419] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20004 [ 93.186732][ T6425] tun0: tun_chr_ioctl cmd 1074025673 [ 93.221767][ T6428] __nla_validate_parse: 10 callbacks suppressed [ 93.221780][ T6428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.138'. [ 93.435144][ T6438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'. [ 93.455618][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 94.095067][ T6463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.146'. [ 94.096040][ T6464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.146'. [ 94.129239][ T6464] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.146'. [ 94.141066][ T6463] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.146'. [ 94.331564][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 94.452093][ T6475] netlink: 152 bytes leftover after parsing attributes in process `syz.3.150'. [ 94.515731][ T6478] can: request_module (can-proto-0) failed. [ 94.745226][ T6489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.154'. [ 94.811350][ T6494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.901929][ T6491] --map-set only usable from mangle table [ 94.916921][ T6500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.253573][ T6511] netlink: 'syz.4.160': attribute type 13 has an invalid length. [ 95.561986][ T6527] set match dimension is over the limit! [ 95.574943][ T6526] set match dimension is over the limit! [ 95.803658][ T6542] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 95.842197][ T6542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.898947][ T6542] bridge1: entered promiscuous mode [ 95.931955][ T6542] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 95.959345][ T3448] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 95.961262][ T6547] x_tables: duplicate underflow at hook 2 [ 95.979058][ T6549] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 96.078670][ T52] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 96.266208][ T6558] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.275620][ T6558] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.284791][ T6558] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.293865][ T6558] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.316679][ T6558] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.325940][ T6558] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.335013][ T6558] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.343945][ T6558] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 96.827209][ T6585] batadv1: entered promiscuous mode [ 96.835250][ T6585] batadv1: entered allmulticast mode [ 96.922461][ T6593] SET target dimension over the limit! [ 97.323428][ T6603] openvswitch: netlink: VXLAN extension 256 out of range max 1 [ 97.855861][ T6622] smc: net device bond0 applied user defined pnetid SYZ0 [ 97.882743][ T6622] smc: net device bond0 erased user defined pnetid SYZ0 [ 97.919132][ T6620] smc: net device bond0 applied user defined pnetid SYZ0 [ 98.181351][ T6641] xt_hashlimit: size too large, truncated to 1048576 [ 98.568797][ T6663] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.591484][ T6663] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 98.620358][ T6656] __nla_validate_parse: 13 callbacks suppressed [ 98.620373][ T6656] netlink: 160 bytes leftover after parsing attributes in process `syz.2.201'. [ 98.861871][ T6648] syz.0.197: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 98.862289][ T6677] netlink: 32 bytes leftover after parsing attributes in process `syz.3.207'. [ 98.881827][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.0.197 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 98.881854][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.881870][ T6648] Call Trace: [ 98.881877][ T6648] [ 98.881885][ T6648] dump_stack_lvl+0x241/0x360 [ 98.881924][ T6648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.881946][ T6648] ? __pfx__printk+0x10/0x10 [ 98.881971][ T6648] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 98.881999][ T6648] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 98.882027][ T6648] warn_alloc+0x278/0x410 [ 98.882053][ T6648] ? __pfx_warn_alloc+0x10/0x10 [ 98.882081][ T6648] ? __do_replace+0xcc/0xc40 [ 98.882109][ T6648] ? __get_vm_area_node+0x1c8/0x2d0 [ 98.882139][ T6648] ? __get_vm_area_node+0x25c/0x2d0 [ 98.882193][ T6648] __vmalloc_node_range_noprof+0x62f/0x1380 [ 98.882218][ T6648] ? mark_lock+0x9a/0x360 [ 98.882263][ T6648] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.882296][ T6648] ? __do_replace+0xcc/0xc40 [ 98.882326][ T6648] vzalloc_noprof+0x79/0x90 [ 98.882347][ T6648] ? __do_replace+0xcc/0xc40 [ 98.882377][ T6648] __do_replace+0xcc/0xc40 [ 98.882410][ T6648] ? __pfx_translate_table+0x10/0x10 [ 98.882448][ T6648] ? __pfx___do_replace+0x10/0x10 [ 98.882479][ T6648] ? __might_fault+0xaa/0x120 [ 98.882500][ T6648] ? __might_fault+0xc6/0x120 [ 98.882526][ T6648] ? copy_from_sockptr_offset+0x6b/0xb0 [ 98.882562][ T6648] do_arpt_set_ctl+0x10de/0x1650 [ 98.882609][ T6648] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 98.882644][ T6648] ? nf_setsockopt+0x240/0x2c0 [ 98.882674][ T6648] ? do_ip_setsockopt+0x2824/0x3ae0 [ 98.882699][ T6648] ? __pfx_lock_release+0x10/0x10 [ 98.882731][ T6648] ? rcu_is_watching+0x15/0xb0 [ 98.882768][ T6648] ? __mutex_unlock_slowpath+0x227/0x800 [ 98.882804][ T6648] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.882833][ T6648] ? aa_sk_perm+0x96d/0xab0 [ 98.882873][ T6648] ? __pfx_aa_sk_perm+0x10/0x10 [ 98.882906][ T6648] nf_setsockopt+0x295/0x2c0 [ 98.882944][ T6648] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 98.882975][ T6648] do_sock_setsockopt+0x3af/0x720 [ 98.883009][ T6648] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 98.883035][ T6648] ? __fget_files+0x395/0x410 [ 98.883065][ T6648] ? __fget_files+0x2a/0x410 [ 98.883104][ T6648] __x64_sys_setsockopt+0x1ee/0x280 [ 98.883133][ T6648] do_syscall_64+0xf3/0x230 [ 98.883160][ T6648] ? clear_bhb_loop+0x35/0x90 [ 98.883193][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.883225][ T6648] RIP: 0033:0x7f1e28d8d169 [ 98.883249][ T6648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.883265][ T6648] RSP: 002b:00007f1e29bc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.883287][ T6648] RAX: ffffffffffffffda RBX: 00007f1e28fa6080 RCX: 00007f1e28d8d169 [ 98.883303][ T6648] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000007 [ 98.883315][ T6648] RBP: 00007f1e28e0e2a0 R08: 0000000000000068 R09: 0000000000000000 [ 98.883329][ T6648] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000000 [ 98.883341][ T6648] R13: 0000000000000000 R14: 00007f1e28fa6080 R15: 00007ffd80972ae8 [ 98.883372][ T6648] [ 98.883455][ T6648] Mem-Info: [ 99.209910][ T6648] active_anon:6946 inactive_anon:0 isolated_anon:0 [ 99.209910][ T6648] active_file:1276 inactive_file:38304 isolated_file:0 [ 99.209910][ T6648] unevictable:768 dirty:180 writeback:0 [ 99.209910][ T6648] slab_reclaimable:10442 slab_unreclaimable:99069 [ 99.209910][ T6648] mapped:28356 shmem:1425 pagetables:791 [ 99.209910][ T6648] sec_pagetables:0 bounce:0 [ 99.209910][ T6648] kernel_misc_reclaimable:0 [ 99.209910][ T6648] free:1333127 free_pcp:791 free_cma:0 [ 99.261305][ T6648] Node 0 active_anon:27768kB inactive_anon:0kB active_file:5104kB inactive_file:153140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113408kB dirty:716kB writeback:0kB shmem:4164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11348kB pagetables:3092kB sec_pagetables:0kB all_unreclaimable? no [ 99.301759][ T6648] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 99.373173][ T6648] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.402107][ T6648] lowmem_reserve[]: 0 2489 2490 0 0 [ 99.407468][ T6648] Node 0 DMA32 free:1417796kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:27528kB inactive_anon:0kB active_file:5104kB inactive_file:152816kB unevictable:1536kB writepending:708kB present:3129332kB managed:2549736kB mlocked:0kB bounce:0kB free_pcp:1056kB local_pcp:620kB free_cma:0kB [ 99.471404][ T6648] lowmem_reserve[]: 0 0 0 0 0 [ 99.476189][ T6648] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:8kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.584880][ T6648] lowmem_reserve[]: 0 0 0 0 0 [ 99.589796][ T6648] Node 1 Normal free:3902416kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 99.624317][ T6648] lowmem_reserve[]: 0 0 0 0 0 [ 99.665232][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.3.208'. [ 99.695407][ T6648] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 99.728707][ T6648] Node 0 DMA32: 2*4kB (UE) 31*8kB (UM) 54*16kB (UME) 36*32kB (UME) 30*64kB (UME) 25*128kB (ME) 19*256kB (UM) 18*512kB (UM) 7*1024kB (UM) 4*2048kB (UME) 337*4096kB (UM) = 1417184kB [ 99.808764][ T6648] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 99.828352][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 99.844020][ T6648] Node 1 Normal: 212*4kB (UME) 48*8kB (UME) 38*16kB (UME) 231*32kB (UME) 95*64kB (UME) 32*128kB (UME) 16*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3902416kB [ 99.863546][ T6648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.873743][ T6648] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.883281][ T6648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.893366][ T6648] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.920706][ T6648] 41005 total pagecache pages [ 99.925705][ T6648] 0 pages in swap cache [ 99.929998][ T6648] Free swap = 124996kB [ 99.934264][ T6648] Total swap = 124996kB [ 99.938647][ T6648] 2097051 pages RAM [ 99.942552][ T6648] 0 pages HighMem/MovableOnly [ 99.947308][ T6648] 427895 pages reserved [ 99.971705][ T6648] 0 pages cma reserved [ 99.975881][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.213'. [ 99.975900][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz.4.213'. [ 100.130434][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.4.218'. [ 100.332064][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.217'. [ 100.345424][ T6719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.217'. [ 100.377870][ T6719] nbd: socks must be embedded in a SOCK_ITEM attr [ 100.777757][ T6720] syzkaller0: entered promiscuous mode [ 100.895528][ T6720] syzkaller0: entered allmulticast mode [ 101.231741][ T6735] netlink: 'syz.0.223': attribute type 1 has an invalid length. [ 101.266877][ T6735] netlink: 32 bytes leftover after parsing attributes in process `syz.0.223'. [ 101.835463][ T6747] netlink: 'syz.4.220': attribute type 1 has an invalid length. [ 102.743312][ T6747] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 102.744896][ T6748] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 102.812129][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 103.047754][ T6769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.197776][ T6781] xt_cgroup: invalid path, errno=-2 [ 103.222779][ T6782] sctp: [Deprecated]: syz.2.232 (pid 6782) Use of int in max_burst socket option. [ 103.222779][ T6782] Use struct sctp_assoc_value instead [ 103.246060][ T6782] netlink: 'syz.2.232': attribute type 10 has an invalid length. [ 103.623063][ T6782] veth0_vlan: left promiscuous mode [ 103.633399][ T6782] veth0_vlan: entered promiscuous mode [ 103.643271][ T6782] team0: Device veth0_vlan failed to register rx_handler [ 103.762781][ T6793] __nla_validate_parse: 3 callbacks suppressed [ 103.762799][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.236'. [ 103.780549][ T6793] netlink: 48 bytes leftover after parsing attributes in process `syz.3.236'. [ 104.120965][ T6800] SET target dimension over the limit! [ 104.226363][ T6803] netlink: 'syz.4.242': attribute type 4 has an invalid length. [ 104.349516][ T6813] netlink: 56 bytes leftover after parsing attributes in process `syz.0.243'. [ 104.463379][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.246'. [ 104.525962][ T6821] vlan0: entered allmulticast mode [ 104.534203][ T6821] gretap0: entered allmulticast mode [ 104.542088][ T6821] gretap0: left allmulticast mode [ 104.675431][ T6817] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.737499][ T6830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.249'. [ 104.815520][ T6817] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.908060][ T6844] sctp: [Deprecated]: syz.2.251 (pid 6844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.908060][ T6844] Use struct sctp_sack_info instead [ 104.971346][ T6817] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.050219][ T6846] ax25_connect(): syz.4.253 uses autobind, please contact jreuter@yaina.de [ 105.072197][ T6845] IPv6: Can't replace route, no match found [ 105.132879][ T6817] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.310611][ T6817] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.327529][ T6817] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.370780][ T6817] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.394365][ T6817] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.498919][ T6863] netlink: 'syz.0.255': attribute type 39 has an invalid length. [ 105.593023][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.604450][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.737331][ T6872] xt_HMARK: spi-set and port-set can't be combined [ 105.756546][ T6874] xt_HMARK: spi-set and port-set can't be combined [ 106.271375][ T6895] dccp_invalid_packet: P.Data Offset(102) too large [ 106.319819][ T6895] Driver unsupported XDP return value 0 on prog (id 205) dev N/A, expect packet loss! [ 106.333350][ T6878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.262'. [ 106.353047][ T51] IPVS: starting estimator thread 0... [ 106.367822][ T6900] ip6tnl1: entered promiscuous mode [ 106.438637][ T6882] netlink: 56 bytes leftover after parsing attributes in process `syz.2.262'. [ 106.458523][ T6899] IPVS: using max 23 ests per chain, 55200 per kthread [ 106.531372][ T6906] netlink: 'syz.1.271': attribute type 11 has an invalid length. [ 106.767174][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.270'. [ 106.829425][ T6912] nbd: socks must be embedded in a SOCK_ITEM attr [ 106.895762][ T6912] x_tables: duplicate underflow at hook 3 [ 107.077234][ T6889] dccp_close: ABORT with 60 bytes unread [ 107.155111][ T6918] netlink: 'syz.2.272': attribute type 10 has an invalid length. [ 107.206498][ T6919] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 107.353960][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.366011][ T6918] bond0: (slave team0): Enslaving as an active interface with an up link [ 107.809421][ T3484] IPVS: stop unused estimator thread 0... [ 108.118884][ T6943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.139344][ T6943] batadv_slave_0: entered promiscuous mode [ 108.157027][ T6943] batadv_slave_0: entered allmulticast mode [ 108.327299][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.280'. [ 108.349100][ T6949] vxcan0: Master is either lo or non-ether device [ 108.569273][ T6960] netlink: 32 bytes leftover after parsing attributes in process `syz.4.283'. [ 108.662430][ T6967] netlink: 'syz.2.286': attribute type 1 has an invalid length. [ 108.805018][ T6974] __nla_validate_parse: 1 callbacks suppressed [ 108.805036][ T6974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.288'. [ 108.953700][ T6984] netlink: 'syz.2.289': attribute type 10 has an invalid length. [ 109.014340][ T6984] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 109.097123][ T6988] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 109.123217][ T6988] pim6reg: entered allmulticast mode [ 109.144097][ T6988] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 109.161712][ T6988] netlink: 'syz.1.290': attribute type 2 has an invalid length. [ 109.180028][ T6988] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 109.227102][ T6997] netlink: 'syz.1.290': attribute type 2 has an invalid length. [ 109.253212][ T6997] netlink: 224 bytes leftover after parsing attributes in process `syz.1.290'. [ 109.550503][ T7015] netlink: 'syz.1.297': attribute type 10 has an invalid length. [ 109.554115][ T7018] netlink: 56 bytes leftover after parsing attributes in process `syz.3.296'. [ 109.596106][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.296'. [ 109.612627][ T7015] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.633843][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 109.645075][ T7022] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 109.681595][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.298'. [ 109.699510][ T7015] bond0: (slave team0): Enslaving as an active interface with an up link [ 109.865368][ T7029] netlink: 48 bytes leftover after parsing attributes in process `syz.3.299'. [ 109.876978][ T7029] netlink: 28 bytes leftover after parsing attributes in process `syz.3.299'. [ 109.919546][ T7031] Bluetooth: MGMT ver 1.23 [ 110.053471][ T7038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.302'. [ 110.072319][ T7039] FAULT_INJECTION: forcing a failure. [ 110.072319][ T7039] name failslab, interval 1, probability 0, space 0, times 1 [ 110.088090][ T7039] CPU: 1 UID: 0 PID: 7039 Comm: syz.3.303 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 110.088113][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.088124][ T7039] Call Trace: [ 110.088129][ T7039] [ 110.088137][ T7039] dump_stack_lvl+0x241/0x360 [ 110.088163][ T7039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.088182][ T7039] ? __pfx__printk+0x10/0x10 [ 110.088211][ T7039] should_fail_ex+0x40a/0x550 [ 110.088246][ T7039] should_failslab+0xac/0x100 [ 110.088271][ T7039] __kmalloc_cache_noprof+0x70/0x390 [ 110.088296][ T7039] ? __hw_addr_add_ex+0x1fb/0x760 [ 110.088319][ T7039] __hw_addr_add_ex+0x1fb/0x760 [ 110.088344][ T7039] dev_addr_init+0x157/0x240 [ 110.088366][ T7039] ? __pfx_dev_addr_init+0x10/0x10 [ 110.088403][ T7039] ? read_word_at_a_time+0xe/0x20 [ 110.088433][ T7039] alloc_netdev_mqs+0x307/0x1210 [ 110.088455][ T7039] ? __pfx_geneve_setup+0x10/0x10 [ 110.088484][ T7039] rtnl_create_link+0x2f9/0xc90 [ 110.088513][ T7039] rtnl_newlink_create+0x2e1/0xbd0 [ 110.088549][ T7039] ? __pfx_aa_get_newest_label+0x10/0x10 [ 110.088581][ T7039] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 110.088614][ T7039] ? __pfx___mutex_lock+0x10/0x10 [ 110.088646][ T7039] ? ns_capable+0x8a/0xf0 [ 110.088672][ T7039] rtnl_newlink+0x167a/0x1d90 [ 110.088701][ T7039] ? stack_depot_save_flags+0x37/0x940 [ 110.088742][ T7039] ? __pfx_rtnl_newlink+0x10/0x10 [ 110.088768][ T7039] ? __netlink_deliver_tap+0x561/0x7f0 [ 110.088794][ T7039] ? __pfx_validate_chain+0x10/0x10 [ 110.088823][ T7039] ? __sock_sendmsg+0x221/0x270 [ 110.088847][ T7039] ? ____sys_sendmsg+0x53a/0x860 [ 110.088865][ T7039] ? __sys_sendmsg+0x269/0x350 [ 110.088882][ T7039] ? do_syscall_64+0xf3/0x230 [ 110.088904][ T7039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.088950][ T7039] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 110.088981][ T7039] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.089017][ T7039] ? mark_lock+0x9a/0x360 [ 110.089039][ T7039] ? __lock_acquire+0x1397/0x2100 [ 110.089093][ T7039] ? __pfx_lock_release+0x10/0x10 [ 110.089135][ T7039] ? __pfx_rtnl_newlink+0x10/0x10 [ 110.089165][ T7039] rtnetlink_rcv_msg+0x791/0xcf0 [ 110.089190][ T7039] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 110.089221][ T7039] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 110.089255][ T7039] ? ref_tracker_free+0x643/0x7e0 [ 110.089280][ T7039] netlink_rcv_skb+0x206/0x480 [ 110.089307][ T7039] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 110.089336][ T7039] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.089385][ T7039] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.089414][ T7039] netlink_unicast+0x7f6/0x990 [ 110.089447][ T7039] ? __pfx_netlink_unicast+0x10/0x10 [ 110.089468][ T7039] ? __virt_addr_valid+0x45f/0x530 [ 110.089488][ T7039] ? __phys_addr_symbol+0x2f/0x70 [ 110.089505][ T7039] ? __check_object_size+0x47a/0x730 [ 110.089535][ T7039] netlink_sendmsg+0x8de/0xcb0 [ 110.089573][ T7039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.089615][ T7039] ? aa_sock_msg_perm+0x91/0x160 [ 110.089647][ T7039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.089671][ T7039] __sock_sendmsg+0x221/0x270 [ 110.089698][ T7039] ____sys_sendmsg+0x53a/0x860 [ 110.089726][ T7039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.089744][ T7039] ? __fget_files+0x2a/0x410 [ 110.089772][ T7039] ? __fget_files+0x2a/0x410 [ 110.089826][ T7039] __sys_sendmsg+0x269/0x350 [ 110.089868][ T7039] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.089902][ T7039] ? do_sys_openat2+0x17a/0x1d0 [ 110.089957][ T7039] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.089987][ T7039] ? do_syscall_64+0x100/0x230 [ 110.090014][ T7039] ? do_syscall_64+0xb6/0x230 [ 110.090040][ T7039] do_syscall_64+0xf3/0x230 [ 110.090064][ T7039] ? clear_bhb_loop+0x35/0x90 [ 110.090094][ T7039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.090120][ T7039] RIP: 0033:0x7f7fa738d169 [ 110.090136][ T7039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.090151][ T7039] RSP: 002b:00007f7fa8192038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.090171][ T7039] RAX: ffffffffffffffda RBX: 00007f7fa75a5fa0 RCX: 00007f7fa738d169 [ 110.090185][ T7039] RDX: 0000000000000080 RSI: 00004000000002c0 RDI: 0000000000000003 [ 110.090196][ T7039] RBP: 00007f7fa8192090 R08: 0000000000000000 R09: 0000000000000000 [ 110.090208][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.090219][ T7039] R13: 0000000000000000 R14: 00007f7fa75a5fa0 R15: 00007ffd4a8794b8 [ 110.090248][ T7039] [ 110.583409][ T7043] netpci0: tun_chr_ioctl cmd 1074025677 [ 110.589407][ T7043] netpci0: linktype set to 773 [ 110.598230][ T7047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.306'. [ 110.630343][ T7047] vlan2: entered allmulticast mode [ 110.635800][ T7047] bridge0: port 3(vlan2) entered blocking state [ 110.642515][ T7047] bridge0: port 3(vlan2) entered disabled state [ 111.051360][ T7074] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 111.253825][ T7087] FAULT_INJECTION: forcing a failure. [ 111.253825][ T7087] name failslab, interval 1, probability 0, space 0, times 0 [ 111.272219][ T7087] CPU: 0 UID: 0 PID: 7087 Comm: syz.4.316 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 111.272243][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.272254][ T7087] Call Trace: [ 111.272260][ T7087] [ 111.272268][ T7087] dump_stack_lvl+0x241/0x360 [ 111.272295][ T7087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.272316][ T7087] ? __pfx__printk+0x10/0x10 [ 111.272337][ T7087] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 111.272364][ T7087] ? __pfx___might_resched+0x10/0x10 [ 111.272388][ T7087] ? dev_addr_mod+0xf1/0x430 [ 111.272410][ T7087] should_fail_ex+0x40a/0x550 [ 111.272442][ T7087] should_failslab+0xac/0x100 [ 111.272468][ T7087] __kmalloc_node_noprof+0xe1/0x4d0 [ 111.272492][ T7087] ? __pfx_geneve_setup+0x10/0x10 [ 111.272512][ T7087] ? __kvmalloc_node_noprof+0x72/0x190 [ 111.272540][ T7087] ? __raw_spin_lock_init+0x45/0x100 [ 111.272566][ T7087] __kvmalloc_node_noprof+0x72/0x190 [ 111.272596][ T7087] alloc_netdev_mqs+0x92c/0x1210 [ 111.272626][ T7087] rtnl_create_link+0x2f9/0xc90 [ 111.272655][ T7087] rtnl_newlink_create+0x2e1/0xbd0 [ 111.272689][ T7087] ? __pfx_aa_get_newest_label+0x10/0x10 [ 111.272721][ T7087] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 111.272752][ T7087] ? __pfx___mutex_lock+0x10/0x10 [ 111.272784][ T7087] ? ns_capable+0x8a/0xf0 [ 111.272809][ T7087] rtnl_newlink+0x167a/0x1d90 [ 111.272835][ T7087] ? stack_depot_save_flags+0x37/0x940 [ 111.272874][ T7087] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.272897][ T7087] ? __netlink_deliver_tap+0x561/0x7f0 [ 111.272923][ T7087] ? __pfx_validate_chain+0x10/0x10 [ 111.272941][ T7087] ? __sock_sendmsg+0x221/0x270 [ 111.272963][ T7087] ? ____sys_sendmsg+0x53a/0x860 [ 111.272988][ T7087] ? __sys_sendmsg+0x269/0x350 [ 111.273005][ T7087] ? do_syscall_64+0xf3/0x230 [ 111.273026][ T7087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.273085][ T7087] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 111.273121][ T7087] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.273161][ T7087] ? mark_lock+0x9a/0x360 [ 111.273186][ T7087] ? __lock_acquire+0x1397/0x2100 [ 111.273250][ T7087] ? __pfx_lock_release+0x10/0x10 [ 111.273298][ T7087] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.273329][ T7087] rtnetlink_rcv_msg+0x791/0xcf0 [ 111.273357][ T7087] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 111.273391][ T7087] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.273429][ T7087] ? ref_tracker_free+0x643/0x7e0 [ 111.273456][ T7087] netlink_rcv_skb+0x206/0x480 [ 111.273486][ T7087] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.273517][ T7087] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.273571][ T7087] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.273603][ T7087] netlink_unicast+0x7f6/0x990 [ 111.273638][ T7087] ? __pfx_netlink_unicast+0x10/0x10 [ 111.273662][ T7087] ? __virt_addr_valid+0x45f/0x530 [ 111.273683][ T7087] ? __phys_addr_symbol+0x2f/0x70 [ 111.273702][ T7087] ? __check_object_size+0x47a/0x730 [ 111.273734][ T7087] netlink_sendmsg+0x8de/0xcb0 [ 111.273777][ T7087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.273811][ T7087] ? aa_sock_msg_perm+0x91/0x160 [ 111.273848][ T7087] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.273875][ T7087] __sock_sendmsg+0x221/0x270 [ 111.273907][ T7087] ____sys_sendmsg+0x53a/0x860 [ 111.273938][ T7087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.273959][ T7087] ? __fget_files+0x2a/0x410 [ 111.273999][ T7087] ? __fget_files+0x2a/0x410 [ 111.274038][ T7087] __sys_sendmsg+0x269/0x350 [ 111.274067][ T7087] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.274122][ T7087] ? do_sys_openat2+0x17a/0x1d0 [ 111.274182][ T7087] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.274228][ T7087] ? do_syscall_64+0x100/0x230 [ 111.274257][ T7087] ? do_syscall_64+0xb6/0x230 [ 111.274295][ T7087] do_syscall_64+0xf3/0x230 [ 111.274317][ T7087] ? clear_bhb_loop+0x35/0x90 [ 111.274346][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.274369][ T7087] RIP: 0033:0x7f347d38d169 [ 111.274385][ T7087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.274400][ T7087] RSP: 002b:00007f347e1bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.274419][ T7087] RAX: ffffffffffffffda RBX: 00007f347d5a5fa0 RCX: 00007f347d38d169 [ 111.274431][ T7087] RDX: 0000000000000080 RSI: 00004000000002c0 RDI: 0000000000000003 [ 111.274442][ T7087] RBP: 00007f347e1bb090 R08: 0000000000000000 R09: 0000000000000000 [ 111.274453][ T7087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.274480][ T7087] R13: 0000000000000000 R14: 00007f347d5a5fa0 R15: 00007ffcfc44c228 [ 111.274509][ T7087] [ 111.896312][ T7094] openvswitch: netlink: nsh attr 9472 is out of range max 3 [ 111.948208][ T7097] validate_nla: 2 callbacks suppressed [ 111.948228][ T7097] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 112.333196][ T7120] FAULT_INJECTION: forcing a failure. [ 112.333196][ T7120] name failslab, interval 1, probability 0, space 0, times 0 [ 112.382924][ T7120] CPU: 0 UID: 0 PID: 7120 Comm: syz.2.328 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 112.382951][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.382962][ T7120] Call Trace: [ 112.382968][ T7120] [ 112.382976][ T7120] dump_stack_lvl+0x241/0x360 [ 112.383004][ T7120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.383027][ T7120] ? __pfx__printk+0x10/0x10 [ 112.383065][ T7120] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 112.383095][ T7120] ? __pfx___might_resched+0x10/0x10 [ 112.383129][ T7120] should_fail_ex+0x40a/0x550 [ 112.383164][ T7120] should_failslab+0xac/0x100 [ 112.383193][ T7120] __kmalloc_node_noprof+0xe1/0x4d0 [ 112.383221][ T7120] ? __kvmalloc_node_noprof+0x72/0x190 [ 112.383259][ T7120] __kvmalloc_node_noprof+0x72/0x190 [ 112.383293][ T7120] alloc_netdev_mqs+0xac6/0x1210 [ 112.383327][ T7120] rtnl_create_link+0x2f9/0xc90 [ 112.383359][ T7120] rtnl_newlink_create+0x2e1/0xbd0 [ 112.383398][ T7120] ? __pfx_aa_get_newest_label+0x10/0x10 [ 112.383434][ T7120] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 112.383470][ T7120] ? __pfx___mutex_lock+0x10/0x10 [ 112.383506][ T7120] ? ns_capable+0x8a/0xf0 [ 112.383535][ T7120] rtnl_newlink+0x167a/0x1d90 [ 112.383566][ T7120] ? stack_depot_save_flags+0x37/0x940 [ 112.383612][ T7120] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.383638][ T7120] ? __netlink_deliver_tap+0x561/0x7f0 [ 112.383674][ T7120] ? __pfx_validate_chain+0x10/0x10 [ 112.383695][ T7120] ? __sock_sendmsg+0x221/0x270 [ 112.383721][ T7120] ? ____sys_sendmsg+0x53a/0x860 [ 112.383740][ T7120] ? __sys_sendmsg+0x269/0x350 [ 112.383759][ T7120] ? do_syscall_64+0xf3/0x230 [ 112.383782][ T7120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.383830][ T7120] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 112.383864][ T7120] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.383904][ T7120] ? mark_lock+0x9a/0x360 [ 112.383928][ T7120] ? __lock_acquire+0x1397/0x2100 [ 112.383992][ T7120] ? __pfx_lock_release+0x10/0x10 [ 112.384039][ T7120] ? __pfx_rtnl_newlink+0x10/0x10 [ 112.384071][ T7120] rtnetlink_rcv_msg+0x791/0xcf0 [ 112.384099][ T7120] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 112.384133][ T7120] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.384181][ T7120] ? ref_tracker_free+0x643/0x7e0 [ 112.384206][ T7120] netlink_rcv_skb+0x206/0x480 [ 112.384233][ T7120] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 112.384273][ T7120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.384319][ T7120] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.384346][ T7120] netlink_unicast+0x7f6/0x990 [ 112.384376][ T7120] ? __pfx_netlink_unicast+0x10/0x10 [ 112.384397][ T7120] ? __virt_addr_valid+0x45f/0x530 [ 112.384415][ T7120] ? __phys_addr_symbol+0x2f/0x70 [ 112.384432][ T7120] ? __check_object_size+0x47a/0x730 [ 112.384460][ T7120] netlink_sendmsg+0x8de/0xcb0 [ 112.384496][ T7120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.384524][ T7120] ? aa_sock_msg_perm+0x91/0x160 [ 112.384556][ T7120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.384579][ T7120] __sock_sendmsg+0x221/0x270 [ 112.384606][ T7120] ____sys_sendmsg+0x53a/0x860 [ 112.384633][ T7120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.384651][ T7120] ? __fget_files+0x2a/0x410 [ 112.384686][ T7120] ? __fget_files+0x2a/0x410 [ 112.384719][ T7120] __sys_sendmsg+0x269/0x350 [ 112.384743][ T7120] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.384773][ T7120] ? do_sys_openat2+0x17a/0x1d0 [ 112.384822][ T7120] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.384868][ T7120] ? do_syscall_64+0x100/0x230 [ 112.384898][ T7120] ? do_syscall_64+0xb6/0x230 [ 112.384923][ T7120] do_syscall_64+0xf3/0x230 [ 112.384948][ T7120] ? clear_bhb_loop+0x35/0x90 [ 112.384979][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.385004][ T7120] RIP: 0033:0x7f8b45f8d169 [ 112.385020][ T7120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.385036][ T7120] RSP: 002b:00007f8b46d75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.385056][ T7120] RAX: ffffffffffffffda RBX: 00007f8b461a5fa0 RCX: 00007f8b45f8d169 [ 112.385069][ T7120] RDX: 0000000000000080 RSI: 00004000000002c0 RDI: 0000000000000003 [ 112.385081][ T7120] RBP: 00007f8b46d75090 R08: 0000000000000000 R09: 0000000000000000 [ 112.385092][ T7120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 112.385103][ T7120] R13: 0000000000000000 R14: 00007f8b461a5fa0 R15: 00007ffd6a8c0a98 [ 112.385131][ T7120] [ 112.985619][ T7132] Bluetooth: MGMT ver 1.23 [ 113.001473][ T7126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.426339][ T7146] sctp: [Deprecated]: syz.4.337 (pid 7146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.426339][ T7146] Use struct sctp_sack_info instead [ 114.057854][ T7164] FAULT_INJECTION: forcing a failure. [ 114.057854][ T7164] name failslab, interval 1, probability 0, space 0, times 0 [ 114.073458][ T7164] CPU: 0 UID: 0 PID: 7164 Comm: syz.2.343 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 114.073484][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.073495][ T7164] Call Trace: [ 114.073502][ T7164] [ 114.073510][ T7164] dump_stack_lvl+0x241/0x360 [ 114.073538][ T7164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.073566][ T7164] ? __pfx__printk+0x10/0x10 [ 114.073588][ T7164] ? __kmalloc_cache_noprof+0x48/0x390 [ 114.073617][ T7164] ? __pfx___might_resched+0x10/0x10 [ 114.073648][ T7164] should_fail_ex+0x40a/0x550 [ 114.073681][ T7164] should_failslab+0xac/0x100 [ 114.073708][ T7164] __kmalloc_cache_noprof+0x70/0x390 [ 114.073734][ T7164] ? alloc_netdev_mqs+0xc1a/0x1210 [ 114.073756][ T7164] ? __xdp_rxq_info_reg+0x186/0x290 [ 114.073789][ T7164] alloc_netdev_mqs+0xc1a/0x1210 [ 114.073821][ T7164] rtnl_create_link+0x2f9/0xc90 [ 114.073851][ T7164] rtnl_newlink_create+0x2e1/0xbd0 [ 114.073886][ T7164] ? __pfx_aa_get_newest_label+0x10/0x10 [ 114.073919][ T7164] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 114.073953][ T7164] ? __pfx___mutex_lock+0x10/0x10 [ 114.073986][ T7164] ? ns_capable+0x8a/0xf0 [ 114.074012][ T7164] rtnl_newlink+0x167a/0x1d90 [ 114.074042][ T7164] ? stack_depot_save_flags+0x37/0x940 [ 114.074084][ T7164] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.074109][ T7164] ? __netlink_deliver_tap+0x561/0x7f0 [ 114.074136][ T7164] ? __pfx_validate_chain+0x10/0x10 [ 114.074156][ T7164] ? __sock_sendmsg+0x221/0x270 [ 114.074190][ T7164] ? ____sys_sendmsg+0x53a/0x860 [ 114.074206][ T7164] ? __sys_sendmsg+0x269/0x350 [ 114.074223][ T7164] ? do_syscall_64+0xf3/0x230 [ 114.074260][ T7164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.074315][ T7164] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.074345][ T7164] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.074381][ T7164] ? mark_lock+0x9a/0x360 [ 114.074402][ T7164] ? __lock_acquire+0x1397/0x2100 [ 114.074457][ T7164] ? __pfx_lock_release+0x10/0x10 [ 114.074498][ T7164] ? __pfx_rtnl_newlink+0x10/0x10 [ 114.074525][ T7164] rtnetlink_rcv_msg+0x791/0xcf0 [ 114.074549][ T7164] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 114.074586][ T7164] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.074619][ T7164] ? ref_tracker_free+0x643/0x7e0 [ 114.074642][ T7164] netlink_rcv_skb+0x206/0x480 [ 114.074668][ T7164] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.074694][ T7164] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.074738][ T7164] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.074766][ T7164] netlink_unicast+0x7f6/0x990 [ 114.074796][ T7164] ? __pfx_netlink_unicast+0x10/0x10 [ 114.074817][ T7164] ? __virt_addr_valid+0x45f/0x530 [ 114.074836][ T7164] ? __phys_addr_symbol+0x2f/0x70 [ 114.074852][ T7164] ? __check_object_size+0x47a/0x730 [ 114.074880][ T7164] netlink_sendmsg+0x8de/0xcb0 [ 114.074916][ T7164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.074946][ T7164] ? aa_sock_msg_perm+0x91/0x160 [ 114.074978][ T7164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.075001][ T7164] __sock_sendmsg+0x221/0x270 [ 114.075028][ T7164] ____sys_sendmsg+0x53a/0x860 [ 114.075055][ T7164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.075073][ T7164] ? __fget_files+0x2a/0x410 [ 114.075102][ T7164] ? __fget_files+0x2a/0x410 [ 114.075135][ T7164] __sys_sendmsg+0x269/0x350 [ 114.075159][ T7164] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.075191][ T7164] ? do_sys_openat2+0x17a/0x1d0 [ 114.075241][ T7164] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.075270][ T7164] ? do_syscall_64+0x100/0x230 [ 114.075294][ T7164] ? do_syscall_64+0xb6/0x230 [ 114.075318][ T7164] do_syscall_64+0xf3/0x230 [ 114.075339][ T7164] ? clear_bhb_loop+0x35/0x90 [ 114.075367][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.075391][ T7164] RIP: 0033:0x7f8b45f8d169 [ 114.075406][ T7164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.075420][ T7164] RSP: 002b:00007f8b46d75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.075439][ T7164] RAX: ffffffffffffffda RBX: 00007f8b461a5fa0 RCX: 00007f8b45f8d169 [ 114.075452][ T7164] RDX: 0000000000000080 RSI: 00004000000002c0 RDI: 0000000000000003 [ 114.075463][ T7164] RBP: 00007f8b46d75090 R08: 0000000000000000 R09: 0000000000000000 [ 114.075474][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.075484][ T7164] R13: 0000000000000000 R14: 00007f8b461a5fa0 R15: 00007ffd6a8c0a98 [ 114.075511][ T7164] [ 114.744118][ T7170] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.793337][ T7184] __nla_validate_parse: 8 callbacks suppressed [ 114.793355][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 114.851870][ T7170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.901561][ T7170] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.911400][ T7170] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.921068][ T7170] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.931904][ T7170] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.987018][ T7182] netlink: 'syz.0.349': attribute type 4 has an invalid length. [ 115.121494][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880286ed400: rx timeout, send abort [ 115.265115][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'. [ 115.305087][ T7198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.354'. [ 115.316617][ T7200] netlink: 248 bytes leftover after parsing attributes in process `syz.2.355'. [ 115.318473][ T7198] bridge_slave_1: left allmulticast mode [ 115.333509][ T7198] bridge_slave_1: left promiscuous mode [ 115.340842][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.351986][ T7198] bridge_slave_0: left allmulticast mode [ 115.357651][ T7198] bridge_slave_0: left promiscuous mode [ 115.364613][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.563402][ T7207] FAULT_INJECTION: forcing a failure. [ 115.563402][ T7207] name failslab, interval 1, probability 0, space 0, times 0 [ 115.578678][ T7207] CPU: 1 UID: 0 PID: 7207 Comm: syz.1.357 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 115.578711][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.578721][ T7207] Call Trace: [ 115.578727][ T7207] [ 115.578735][ T7207] dump_stack_lvl+0x241/0x360 [ 115.578762][ T7207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.578782][ T7207] ? __pfx__printk+0x10/0x10 [ 115.578803][ T7207] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 115.578829][ T7207] ? __pfx___might_resched+0x10/0x10 [ 115.578858][ T7207] should_fail_ex+0x40a/0x550 [ 115.578889][ T7207] should_failslab+0xac/0x100 [ 115.578914][ T7207] __kmalloc_node_noprof+0xe1/0x4d0 [ 115.578938][ T7207] ? __kvmalloc_node_noprof+0x72/0x190 [ 115.578971][ T7207] __kvmalloc_node_noprof+0x72/0x190 [ 115.579000][ T7207] alloc_netdev_mqs+0xce7/0x1210 [ 115.579030][ T7207] rtnl_create_link+0x2f9/0xc90 [ 115.579058][ T7207] rtnl_newlink_create+0x2e1/0xbd0 [ 115.579091][ T7207] ? __pfx_aa_get_newest_label+0x10/0x10 [ 115.579122][ T7207] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 115.579153][ T7207] ? __pfx___mutex_lock+0x10/0x10 [ 115.579184][ T7207] ? ns_capable+0x8a/0xf0 [ 115.579209][ T7207] rtnl_newlink+0x167a/0x1d90 [ 115.579237][ T7207] ? __lock_acquire+0x1397/0x2100 [ 115.579277][ T7207] ? __pfx_rtnl_newlink+0x10/0x10 [ 115.579303][ T7207] ? __pfx_validate_chain+0x10/0x10 [ 115.579341][ T7207] ? validate_chain+0x11e/0x5920 [ 115.579360][ T7207] ? __pfx_lock_acquire+0x10/0x10 [ 115.579390][ T7207] ? __pfx_lock_release+0x10/0x10 [ 115.579420][ T7207] ? __pfx_validate_chain+0x10/0x10 [ 115.579441][ T7207] ? mark_lock+0x9a/0x360 [ 115.579463][ T7207] ? __lock_acquire+0x1397/0x2100 [ 115.579520][ T7207] ? __pfx_lock_release+0x10/0x10 [ 115.579578][ T7207] ? __pfx_rtnl_newlink+0x10/0x10 [ 115.579607][ T7207] rtnetlink_rcv_msg+0x791/0xcf0 [ 115.579632][ T7207] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 115.579661][ T7207] ? __lock_acquire+0x1397/0x2100 [ 115.579696][ T7207] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 115.579741][ T7207] netlink_rcv_skb+0x206/0x480 [ 115.579769][ T7207] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 115.579798][ T7207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.579848][ T7207] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.579877][ T7207] netlink_unicast+0x7f6/0x990 [ 115.579909][ T7207] ? __pfx_netlink_unicast+0x10/0x10 [ 115.579931][ T7207] ? __virt_addr_valid+0x45f/0x530 [ 115.579950][ T7207] ? __phys_addr_symbol+0x2f/0x70 [ 115.579967][ T7207] ? __check_object_size+0x47a/0x730 [ 115.579998][ T7207] netlink_sendmsg+0x8de/0xcb0 [ 115.580037][ T7207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.580069][ T7207] ? aa_sock_msg_perm+0x91/0x160 [ 115.580103][ T7207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.580128][ T7207] __sock_sendmsg+0x221/0x270 [ 115.580168][ T7207] ____sys_sendmsg+0x53a/0x860 [ 115.580196][ T7207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.580214][ T7207] ? __fget_files+0x2a/0x410 [ 115.580242][ T7207] ? __fget_files+0x2a/0x410 [ 115.580275][ T7207] __sys_sendmsg+0x269/0x350 [ 115.580300][ T7207] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.580333][ T7207] ? do_sys_openat2+0x17a/0x1d0 [ 115.580385][ T7207] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.580432][ T7207] ? do_syscall_64+0x100/0x230 [ 115.580459][ T7207] ? do_syscall_64+0xb6/0x230 [ 115.580485][ T7207] do_syscall_64+0xf3/0x230 [ 115.580508][ T7207] ? clear_bhb_loop+0x35/0x90 [ 115.580538][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.580563][ T7207] RIP: 0033:0x7f8765d8d169 [ 115.580589][ T7207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.580603][ T7207] RSP: 002b:00007f8763bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.580622][ T7207] RAX: ffffffffffffffda RBX: 00007f8765fa5fa0 RCX: 00007f8765d8d169 [ 115.580635][ T7207] RDX: 0000000000000080 RSI: 00004000000002c0 RDI: 0000000000000003 [ 115.580645][ T7207] RBP: 00007f8763bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.580656][ T7207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.580666][ T7207] R13: 0000000000000000 R14: 00007f8765fa5fa0 R15: 00007fff82790838 [ 115.580698][ T7207] [ 115.622167][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805acfdc00: rx timeout, send abort [ 116.001346][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880286ed400: abort rx timeout. Force session deactivation [ 116.042993][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 116.052359][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 116.073019][ T7209] netlink: 'syz.1.359': attribute type 18 has an invalid length. [ 116.081669][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 116.105569][ T7215] netlink: 1296 bytes leftover after parsing attributes in process `syz.1.359'. [ 116.118412][ T7215] openvswitch: netlink: Flow key attr not present in new flow. [ 116.487963][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 116.500426][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805acfdc00: abort rx timeout. Force session deactivation [ 117.086199][ T7260] xt_hashlimit: size too large, truncated to 1048576 [ 117.148823][ T7260] syz.3.375: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 117.205440][ T7260] CPU: 0 UID: 0 PID: 7260 Comm: syz.3.375 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 117.205465][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.205476][ T7260] Call Trace: [ 117.205483][ T7260] [ 117.205490][ T7260] dump_stack_lvl+0x241/0x360 [ 117.205518][ T7260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.205538][ T7260] ? __pfx__printk+0x10/0x10 [ 117.205561][ T7260] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 117.205585][ T7260] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 117.205611][ T7260] warn_alloc+0x278/0x410 [ 117.205636][ T7260] ? __pfx_warn_alloc+0x10/0x10 [ 117.205661][ T7260] ? htable_create+0x102/0x880 [ 117.205688][ T7260] ? __get_vm_area_node+0x1c8/0x2d0 [ 117.205716][ T7260] ? __get_vm_area_node+0x25c/0x2d0 [ 117.205750][ T7260] __vmalloc_node_range_noprof+0x62f/0x1380 [ 117.205793][ T7260] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.205822][ T7260] ? htable_create+0x102/0x880 [ 117.205849][ T7260] vmalloc_noprof+0x79/0x90 [ 117.205866][ T7260] ? htable_create+0x102/0x880 [ 117.205894][ T7260] htable_create+0x102/0x880 [ 117.205928][ T7260] hashlimit_mt_check_common+0x710/0xa40 [ 117.205964][ T7260] hashlimit_mt_check_v1+0x2ea/0x540 [ 117.205995][ T7260] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 117.206021][ T7260] ? trace_contention_end+0x3c/0x120 [ 117.206046][ T7260] ? cpus_read_unlock+0xa6/0x140 [ 117.206069][ T7260] ? __mutex_unlock_slowpath+0x227/0x800 [ 117.206096][ T7260] xt_check_match+0x368/0xa40 [ 117.206124][ T7260] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.206147][ T7260] ? __pfx_xt_check_match+0x10/0x10 [ 117.206186][ T7260] ? xt_find_match+0x1df/0x230 [ 117.206219][ T7260] translate_table+0x1704/0x2490 [ 117.206268][ T7260] ? __pfx_translate_table+0x10/0x10 [ 117.206292][ T7260] ? __might_fault+0xaa/0x120 [ 117.206310][ T7260] ? __pfx_lock_release+0x10/0x10 [ 117.206342][ T7260] ? __virt_addr_valid+0x183/0x530 [ 117.206364][ T7260] ? __might_fault+0xc6/0x120 [ 117.206396][ T7260] ? copy_from_sockptr_offset+0x6b/0xb0 [ 117.206423][ T7260] do_ip6t_set_ctl+0xe4c/0x1270 [ 117.206452][ T7260] ? nf_setsockopt+0x240/0x2c0 [ 117.206477][ T7260] ? aa_label_sk_perm+0x4f3/0x6c0 [ 117.206503][ T7260] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 117.206527][ T7260] ? rcu_is_watching+0x15/0xb0 [ 117.206548][ T7260] ? trace_contention_end+0x3c/0x120 [ 117.206578][ T7260] ? __mutex_unlock_slowpath+0x227/0x800 [ 117.206612][ T7260] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.206650][ T7260] nf_setsockopt+0x295/0x2c0 [ 117.206682][ T7260] rawv6_setsockopt+0x2ac/0x690 [ 117.206711][ T7260] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 117.206737][ T7260] ? __pfx_lock_acquire+0x10/0x10 [ 117.206761][ T7260] ? aa_sock_opt_perm+0x79/0x120 [ 117.206787][ T7260] ? sock_common_setsockopt+0x37/0xc0 [ 117.206817][ T7260] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 117.206842][ T7260] do_sock_setsockopt+0x3af/0x720 [ 117.206866][ T7260] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 117.206889][ T7260] ? __fget_files+0x395/0x410 [ 117.206914][ T7260] ? __fget_files+0x2a/0x410 [ 117.206947][ T7260] __x64_sys_setsockopt+0x1ee/0x280 [ 117.206972][ T7260] do_syscall_64+0xf3/0x230 [ 117.206994][ T7260] ? clear_bhb_loop+0x35/0x90 [ 117.207023][ T7260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.207046][ T7260] RIP: 0033:0x7f7fa738d169 [ 117.207062][ T7260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.207076][ T7260] RSP: 002b:00007f7fa8192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 117.207094][ T7260] RAX: ffffffffffffffda RBX: 00007f7fa75a5fa0 RCX: 00007f7fa738d169 [ 117.207107][ T7260] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 117.207117][ T7260] RBP: 00007f7fa740e2a0 R08: 00000000000004c0 R09: 0000000000000000 [ 117.207128][ T7260] R10: 00004000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 117.207139][ T7260] R13: 0000000000000000 R14: 00007f7fa75a5fa0 R15: 00007ffd4a8794b8 [ 117.207166][ T7260] [ 117.207240][ T7260] Mem-Info: [ 117.265662][ T7268] netlink: 'syz.2.377': attribute type 7 has an invalid length. [ 117.273463][ T7260] active_anon:9344 inactive_anon:0 isolated_anon:0 [ 117.273463][ T7260] active_file:1410 inactive_file:38314 isolated_file:0 [ 117.273463][ T7260] unevictable:768 dirty:220 writeback:0 [ 117.273463][ T7260] slab_reclaimable:10729 slab_unreclaimable:99328 [ 117.273463][ T7260] mapped:31315 shmem:4290 pagetables:706 [ 117.273463][ T7260] sec_pagetables:0 bounce:0 [ 117.273463][ T7260] kernel_misc_reclaimable:0 [ 117.273463][ T7260] free:1338929 free_pcp:486 free_cma:0 [ 117.278147][ T7268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 117.287942][ T7260] Node 0 active_anon:37376kB inactive_anon:0kB active_file:5640kB inactive_file:153180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125260kB dirty:876kB writeback:0kB shmem:15624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11136kB pagetables:2824kB sec_pagetables:0kB all_unreclaimable? no [ 117.508836][ T7275] netlink: 'syz.4.378': attribute type 10 has an invalid length. [ 117.512849][ T7260] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 117.557889][ T7275] team0: Port device wlan1 added [ 117.592631][ T7260] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.817044][ T7260] lowmem_reserve[]: 0 2489 2490 0 0 [ 117.822686][ T7260] Node 0 DMA32 free:1439968kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:37436kB inactive_anon:0kB active_file:5640kB inactive_file:152856kB unevictable:1536kB writepending:876kB present:3129332kB managed:2549736kB mlocked:0kB bounce:0kB free_pcp:1736kB local_pcp:548kB free_cma:0kB [ 117.870215][ T7260] lowmem_reserve[]: 0 0 0 0 0 [ 117.881850][ T7260] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.930974][ T7260] lowmem_reserve[]: 0 0 0 0 0 [ 117.938407][ T7260] Node 1 Normal free:3902568kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.975134][ T7260] lowmem_reserve[]: 0 0 0 0 0 [ 117.984646][ T7260] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 117.997981][ T7260] Node 0 DMA32: 78*4kB (U) 356*8kB (UE) 10*16kB (UE) 424*32kB (UE) 184*64kB (U) 81*128kB (UE) 71*256kB (UM) 41*512kB (UME) 18*1024kB (UME) 4*2048kB (UM) 326*4096kB (UME) = 1440120kB [ 118.025926][ T7260] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 118.043389][ T7260] Node 1 Normal: 216*4kB (UME) 47*8kB (UME) 37*16kB (UME) 232*32kB (UME) 95*64kB (UME) 31*128kB (UME) 17*256kB (UME) 8*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 945*4096kB (M) = 3902568kB [ 118.072962][ T7260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.082862][ T7260] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.098095][ T7260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.114167][ T7260] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.123887][ T7260] 44019 total pagecache pages [ 118.134018][ T7260] 0 pages in swap cache [ 118.139041][ T7260] Free swap = 124996kB [ 118.143338][ T7260] Total swap = 124996kB [ 118.147756][ T7260] 2097051 pages RAM [ 118.198383][ T7260] 0 pages HighMem/MovableOnly [ 118.208357][ T7260] 427895 pages reserved [ 118.235232][ T7260] 0 pages cma reserved [ 118.457339][ T7290] bond_slave_0: entered promiscuous mode [ 118.463471][ T7290] bond_slave_1: entered promiscuous mode [ 118.469214][ T7290] team_slave_0: entered promiscuous mode [ 118.476363][ T7290] team_slave_1: entered promiscuous mode [ 118.494879][ T7290] vlan2: entered promiscuous mode [ 118.513605][ T7290] bond0: entered promiscuous mode [ 118.526090][ T7290] team0: entered promiscuous mode [ 118.560046][ T7290] bond0: left promiscuous mode [ 118.568714][ T7290] team0: left promiscuous mode [ 118.578901][ T7290] bond_slave_0: left promiscuous mode [ 118.584384][ T7290] bond_slave_1: left promiscuous mode [ 118.589905][ T7290] team_slave_0: left promiscuous mode [ 118.595336][ T7290] team_slave_1: left promiscuous mode [ 118.643955][ T7307] netlink: 'syz.2.388': attribute type 1 has an invalid length. [ 118.848803][ T7313] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 118.900798][ T7319] Cannot find add_set index 0 as target [ 119.022466][ T7322] xt_CT: No such helper "snmp" [ 119.225059][ T7330] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 119.714454][ T7341] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 119.722454][ T7342] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 119.762480][ T5852] Bluetooth: hci4: link tx timeout [ 119.768170][ T5852] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 119.846483][ T7341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.996873][ T7346] bond2: (slave veth3): Enslaving as an active interface with a down link [ 120.375546][ T7358] netlink: 'syz.0.402': attribute type 39 has an invalid length. [ 120.716700][ T7376] x_tables: duplicate underflow at hook 1 [ 120.729422][ T7376] __nla_validate_parse: 3 callbacks suppressed [ 120.729438][ T7376] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.408'. [ 120.773324][ T7376] openvswitch: netlink: Flow actions attr not present in new flow. [ 121.399439][ T7392] Bluetooth: MGMT ver 1.23 [ 121.507854][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.414'. [ 121.769710][ T7408] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20002 [ 121.780459][ T7408] block nbd0: not configured, cannot reconfigure [ 121.818412][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 121.895557][ T7414] netlink: 'syz.3.419': attribute type 10 has an invalid length. [ 121.926077][ T7414] syz1: rxe_newlink: already configured on team_slave_0 [ 121.973165][ T7420] ip6tnl2: entered promiscuous mode [ 122.018670][ T7420] ip6tnl2: entered allmulticast mode [ 122.140112][ T7426] netlink: 132 bytes leftover after parsing attributes in process `syz.4.422'. [ 122.156556][ T7426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 122.893302][ T7468] ipt_REJECT: TCP_RESET invalid for non-tcp [ 123.651920][ T7498] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 123.894404][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.446'. [ 124.404608][ T7519] raw_sendmsg: syz.1.449 forgot to set AF_INET. Fix it! [ 124.641114][ T7525] openvswitch: netlink: Tunnel attr 52 out of range max 16 [ 124.728811][ T7527] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 125.673606][ T7535] team0 (unregistering): Port device team_slave_0 removed [ 125.684412][ T7535] team0 (unregistering): Port device team_slave_1 removed [ 125.703538][ T7535] team0 (unregistering): Port device wlan1 removed [ 125.734156][ T7538] batadv_slave_1: entered promiscuous mode [ 125.758590][ T7541] batadv_slave_1: left promiscuous mode [ 125.945268][ T7550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 126.116436][ T7554] netlink: 'syz.0.457': attribute type 10 has an invalid length. [ 126.171421][ T7557] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 126.235292][ T7563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.458'. [ 126.501411][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.463'. [ 126.560938][ T7580] netlink: 'syz.0.464': attribute type 10 has an invalid length. [ 126.589851][ T7578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.600651][ T7580] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 126.705485][ T7593] netlink: 'syz.0.467': attribute type 12 has an invalid length. [ 126.838750][ T7600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.867068][ T7600] netlink: zone id is out of range [ 126.990908][ T7605] netlink: 'syz.0.467': attribute type 2 has an invalid length. [ 127.290120][ T7605] Tq€!7: entered promiscuous mode [ 127.319086][ T7609] ax25_connect(): syz.2.471 uses autobind, please contact jreuter@yaina.de [ 127.356037][ T7600] netlink: set zone limit has 4 unknown bytes [ 127.385147][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 127.449682][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.471'. [ 128.297742][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.479'. [ 128.347979][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 128.367264][ T7636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.403026][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.482'. [ 128.428414][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 128.671263][ T7653] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 128.717072][ T7655] netlink: 'syz.3.487': attribute type 75 has an invalid length. [ 128.803902][ T7655] netlink: 'syz.3.487': attribute type 29 has an invalid length. [ 128.944339][ T7664] tc_dump_action: action bad kind [ 129.076378][ T7669] netlink: 'syz.1.491': attribute type 10 has an invalid length. [ 129.095167][ T7669] team0: Device hsr_slave_0 failed to register rx_handler [ 129.432242][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 129.619916][ T7696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.627236][ T7696] IPv6: NLM_F_CREATE should be set when creating new route [ 130.109855][ T7724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.318030][ T7727] netlink: 'syz.1.507': attribute type 1 has an invalid length. [ 130.377811][ T7727] bond2: entered promiscuous mode [ 130.397827][ T7727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.437748][ T7728] batadv1: entered promiscuous mode [ 130.457581][ T7728] batadv1: entered allmulticast mode [ 130.486358][ T7728] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 130.514903][ T7728] bond2: (slave batadv1): making interface the new active one [ 130.541639][ T7728] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 130.820764][ T7744] openvswitch: netlink: IP tunnel dst address not specified [ 131.014738][ T29] audit: type=1804 audit(1741804661.250:2): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.513" name="/newroot/112/cgroup.controllers" dev="tmpfs" ino=589 res=1 errno=0 [ 131.088454][ T29] audit: type=1800 audit(1741804661.250:3): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.513" name="cgroup.controllers" dev="tmpfs" ino=589 res=0 errno=0 [ 131.137963][ T7758] x_tables: duplicate underflow at hook 2 [ 131.154073][ T29] audit: type=1804 audit(1741804661.280:4): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.513" name="/newroot/112/cgroup.controllers" dev="tmpfs" ino=589 res=1 errno=0 [ 131.223204][ T29] audit: type=1804 audit(1741804661.280:5): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.513" name="/newroot/112/cgroup.controllers" dev="tmpfs" ino=589 res=1 errno=0 [ 131.279426][ T7763] __nla_validate_parse: 8 callbacks suppressed [ 131.279441][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.518'. [ 131.299603][ T7767] netlink: 'syz.1.516': attribute type 21 has an invalid length. [ 131.529746][ T7774] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.547345][ T7774] bridge0: port 1(bond1) entered blocking state [ 131.556861][ T7774] bridge0: port 1(bond1) entered disabled state [ 131.563558][ T7774] bond1: entered allmulticast mode [ 131.570804][ T7774] bond1: entered promiscuous mode [ 131.650691][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.523'. [ 131.714009][ T7783] netlink: 36 bytes leftover after parsing attributes in process `syz.3.525'. [ 132.057733][ T7791] netlink: 152 bytes leftover after parsing attributes in process `syz.3.527'. [ 132.256677][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 132.514403][ T7798] netlink: 24 bytes leftover after parsing attributes in process `syz.3.530'. [ 132.550749][ T7800] bridge: RTM_NEWNEIGH with invalid ether address [ 132.558163][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.530'. [ 132.577608][ T7798] netlink: 'syz.3.530': attribute type 7 has an invalid length. [ 132.608205][ T7798] netlink: 'syz.3.530': attribute type 8 has an invalid length. [ 132.628430][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 132.674091][ T7798] ip6gretap0: entered promiscuous mode [ 132.681050][ T7798] erspan0: entered promiscuous mode [ 132.686951][ T7798] gretap0: entered promiscuous mode [ 132.951989][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.963156][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.980787][ T7814] tipc: Started in network mode [ 132.998682][ T7814] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 133.007581][ T7814] tipc: Enabling of bearer rejected, failed to enable media [ 133.113937][ T7785] netlink: 312 bytes leftover after parsing attributes in process `syz.2.524'. [ 133.194126][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 133.441975][ T7830] pim6reg: entered allmulticast mode [ 133.567667][ T7829] bond2: entered promiscuous mode [ 133.618138][ T7829] bond2: entered allmulticast mode [ 133.633143][ T7829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.126593][ T7857] bridge0: port 3(hsr0) entered blocking state [ 134.133468][ T7857] bridge0: port 3(hsr0) entered disabled state [ 134.145310][ T7857] hsr0: entered allmulticast mode [ 134.154650][ T7857] hsr_slave_0: entered allmulticast mode [ 134.185036][ T7857] hsr_slave_1: entered allmulticast mode [ 134.196619][ T7857] hsr0: entered promiscuous mode [ 134.215789][ T7857] bridge0: port 3(hsr0) entered blocking state [ 134.222089][ T7857] bridge0: port 3(hsr0) entered forwarding state [ 134.662470][ T7880] syzkaller0: entered allmulticast mode [ 134.801337][ T7889] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 135.294415][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.700885][ T51] IPVS: starting estimator thread 0... [ 135.838565][ T7914] IPVS: using max 21 ests per chain, 50400 per kthread [ 135.885658][ T7908] bridge0: port 3(hsr0) entered disabled state [ 135.892013][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.899475][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.174373][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.201414][ T7908] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.289963][ T7908] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.298838][ T7908] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.307331][ T7908] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.316020][ T7908] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.478411][ T7908] bond2: left promiscuous mode [ 136.488831][ T7908] bond2: left allmulticast mode [ 137.123800][ T7938] C: renamed from team_slave_0 [ 137.137904][ T7938] netlink: 'syz.0.569': attribute type 1 has an invalid length. [ 137.148059][ T7938] netlink: 'syz.0.569': attribute type 2 has an invalid length. [ 137.163558][ T7938] __nla_validate_parse: 8 callbacks suppressed [ 137.163576][ T7938] netlink: 128 bytes leftover after parsing attributes in process `syz.0.569'. [ 137.186525][ T7938] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 137.307991][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 137.398478][ T7942] xt_socket: unknown flags 0x4 [ 137.515538][ T7945] tipc: Failed to obtain node identity [ 137.525527][ T7945] tipc: Enabling of bearer rejected, failed to enable media [ 137.694920][ T7951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.574'. [ 137.707364][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 137.738839][ T7957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 137.775507][ T7951] netlink: 148 bytes leftover after parsing attributes in process `syz.3.574'. [ 137.785613][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 137.803226][ T7951] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 137.820486][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 137.821472][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 137.832070][ T7957] netlink: 'syz.0.576': attribute type 14 has an invalid length. [ 138.057432][ T7980] netlink: 'syz.0.581': attribute type 1 has an invalid length. [ 138.298503][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 138.866821][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 138.896820][ T8028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.594'. [ 139.330924][ T8054] lo speed is unknown, defaulting to 1000 [ 139.347470][ T8054] lo speed is unknown, defaulting to 1000 [ 139.379809][ T8054] lo speed is unknown, defaulting to 1000 [ 139.397198][ T8054] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.407289][ T8053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.421877][ T8054] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 139.424696][ T8053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.484873][ T8054] lo speed is unknown, defaulting to 1000 [ 139.492736][ T8054] lo speed is unknown, defaulting to 1000 [ 139.506612][ T8054] lo speed is unknown, defaulting to 1000 [ 139.530529][ T8054] lo speed is unknown, defaulting to 1000 [ 139.537253][ T8054] lo speed is unknown, defaulting to 1000 [ 139.595965][ T8054] lo speed is unknown, defaulting to 1000 [ 139.609264][ T8054] lo speed is unknown, defaulting to 1000 [ 139.773946][ T8075] netlink: 'syz.1.608': attribute type 1 has an invalid length. [ 139.825967][ T8075] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 140.042298][ T8082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.060966][ T8082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.072497][ T8082] bond0 (unregistering): (slave team0): Releasing backup interface [ 140.082042][ T8082] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 140.094775][ T8082] bond0 (unregistering): Released all slaves [ 140.378522][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.378738][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 140.421613][ T8023] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 140.726371][ T8095] lo speed is unknown, defaulting to 1000 [ 141.608014][ T8110] lo speed is unknown, defaulting to 1000 [ 141.660682][ T8128] bridge1: left promiscuous mode [ 141.684901][ T8128] ip6tnl1: left promiscuous mode [ 141.717921][ T8128] ip6tnl2: left promiscuous mode [ 141.735520][ T8128] ip6tnl2: left allmulticast mode [ 142.297038][ T8143] netlink: 'syz.0.625': attribute type 21 has an invalid length. [ 142.511665][ T8160] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 142.519567][ T8160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.667315][ T8167] __nla_validate_parse: 7 callbacks suppressed [ 142.667333][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'. [ 142.691892][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.2.632'. [ 142.775264][ T8182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.636'. [ 142.817197][ T8173] netlink: 'syz.3.633': attribute type 1 has an invalid length. [ 142.875806][ T8184] netlink: 'syz.2.637': attribute type 1 has an invalid length. [ 142.884595][ T8184] netlink: 'syz.2.637': attribute type 3 has an invalid length. [ 142.899224][ T8184] netlink: 224 bytes leftover after parsing attributes in process `syz.2.637'. [ 143.081758][ T8182] team0 (unregistering): Port device C removed [ 143.096530][ T8182] team0 (unregistering): Port device team_slave_1 removed [ 143.520097][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.645'. [ 143.761093][ T8231] sctp: [Deprecated]: syz.3.650 (pid 8231) Use of int in max_burst socket option. [ 143.761093][ T8231] Use struct sctp_assoc_value instead [ 143.815021][ T8228] sctp: [Deprecated]: syz.3.650 (pid 8228) Use of int in max_burst socket option. [ 143.815021][ T8228] Use struct sctp_assoc_value instead [ 144.055493][ T8245] bridge4: entered promiscuous mode [ 144.074309][ T8245] bridge4: entered allmulticast mode [ 144.232305][ T8260] tun0: tun_chr_ioctl cmd 2147767520 [ 144.239891][ T8264] xt_TCPMSS: Only works on TCP SYN packets [ 144.249225][ T8260] netlink: 'syz.2.654': attribute type 33 has an invalid length. [ 144.261249][ T8260] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.654'. [ 145.051750][ T8303] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.079154][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 145.420401][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.671'. [ 145.469156][ T8312] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 145.868048][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.676'. [ 145.943773][ T8328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.677'. [ 146.217558][ T8354] netlink: 'syz.3.685': attribute type 9 has an invalid length. [ 146.516483][ T8345] lo speed is unknown, defaulting to 1000 [ 146.842084][ T8373] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 146.867125][ T8373] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 146.997745][ T8350] lo speed is unknown, defaulting to 1000 [ 147.957850][ T8403] lo speed is unknown, defaulting to 1000 [ 147.996421][ T8414] ax25_connect(): syz.4.704 uses autobind, please contact jreuter@yaina.de [ 148.090459][ T8418] __nla_validate_parse: 2 callbacks suppressed [ 148.090477][ T8418] netlink: 40 bytes leftover after parsing attributes in process `syz.0.706'. [ 148.153185][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.706'. [ 148.223263][ T8414] lo speed is unknown, defaulting to 1000 [ 148.449086][ T8432] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 148.599887][ T8434] netlink: 'syz.0.711': attribute type 9 has an invalid length. [ 148.661128][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 148.812601][ T8446] bond0: entered promiscuous mode [ 148.819401][ T8446] bond_slave_0: entered promiscuous mode [ 148.827446][ T8446] bond_slave_1: entered promiscuous mode [ 148.833516][ T8446] team0: entered promiscuous mode [ 148.846029][ T8446] team_slave_0: entered promiscuous mode [ 148.862737][ T8446] team_slave_1: entered promiscuous mode [ 149.066783][ T8461] netlink: 830 bytes leftover after parsing attributes in process `syz.1.720'. [ 149.187819][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 149.221570][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 149.564406][ T8486] xt_hashlimit: max too large, truncated to 1048576 [ 149.642016][ T8492] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 149.669402][ T8492] netlink: 'syz.0.731': attribute type 2 has an invalid length. [ 149.677086][ T8492] netlink: 128 bytes leftover after parsing attributes in process `syz.0.731'. [ 149.698995][ T8492] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 149.720892][ T8498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.885685][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 149.961581][ T8510] bond0: (slave team0): Releasing backup interface [ 149.976779][ T8510] team0 (unregistering): Port device team_slave_0 removed [ 149.986648][ T8510] team0 (unregistering): Port device team_slave_1 removed [ 150.013953][ T8512] gtp0: entered promiscuous mode [ 150.019275][ T8512] gtp0: entered allmulticast mode [ 150.192017][ T8521] netlink: 'syz.3.739': attribute type 10 has an invalid length. [ 150.228777][ T8521] syz1: rxe_newlink: already configured on team_slave_0 [ 150.344244][ T8531] netlink: 292 bytes leftover after parsing attributes in process `syz.0.744'. [ 150.539183][ T8545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.747'. [ 150.657177][ T8540] bond0: entered promiscuous mode [ 150.686208][ T8540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.698488][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 150.916359][ T8552] batman_adv: batadv0: Adding interface: dummy0 [ 150.922990][ T8552] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 151.111088][ T8567] netlink: 'syz.1.754': attribute type 12 has an invalid length. [ 151.175268][ T5847] IPVS: starting estimator thread 0... [ 151.223482][ T8557] netlink: 'syz.2.752': attribute type 1 has an invalid length. [ 151.239319][ T8556] lo speed is unknown, defaulting to 1000 [ 151.268387][ T8573] IPVS: using max 23 ests per chain, 55200 per kthread [ 151.295306][ T8578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.317437][ T8578] netlink: zone id is out of range [ 151.405808][ T8584] netlink: 'syz.1.754': attribute type 2 has an invalid length. [ 151.571842][ T8584] Tq€!7: entered promiscuous mode [ 151.687742][ T8578] netlink: set zone limit has 4 unknown bytes [ 151.757368][ T8607] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20001 [ 151.870042][ T8592] lo speed is unknown, defaulting to 1000 [ 152.176785][ T8620] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 152.442375][ T8631] netlink: 'syz.3.767': attribute type 29 has an invalid length. [ 153.045538][ T8647] xt_TCPMSS: Only works on TCP SYN packets [ 153.168393][ T8649] 8021q: VLANs not supported on caif0 [ 154.033139][ T8680] lo speed is unknown, defaulting to 1000 [ 154.524479][ T51] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 154.570089][ T51] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 154.581176][ T8699] x_tables: duplicate underflow at hook 2 [ 154.726315][ T8704] validate_nla: 1 callbacks suppressed [ 154.726331][ T8704] netlink: 'syz.0.792': attribute type 10 has an invalid length. [ 154.846222][ T8709] __nla_validate_parse: 10 callbacks suppressed [ 154.846240][ T8709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 154.941306][ T8709] netlink: 'syz.2.793': attribute type 3 has an invalid length. [ 155.011043][ T8712] netlink: 52 bytes leftover after parsing attributes in process `syz.4.794'. [ 155.516765][ T8736] netlink: 124 bytes leftover after parsing attributes in process `syz.1.801'. [ 155.644479][ T8737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'. [ 155.673229][ T8730] lo speed is unknown, defaulting to 1000 [ 156.020126][ T8751] netlink: 'syz.3.805': attribute type 10 has an invalid length. [ 156.044131][ T8751] syz1: rxe_newlink: already configured on team_slave_0 [ 156.054515][ T8748] xt_cgroup: invalid path, errno=-2 [ 156.686370][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 156.986029][ T8781] lo speed is unknown, defaulting to 1000 [ 157.389971][ T8798] lo speed is unknown, defaulting to 1000 [ 157.555855][ T5996] IPVS: starting estimator thread 0... [ 157.563985][ T8806] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 157.574278][ T8806] NCSI netlink: No device for ifindex 0 [ 157.683942][ T8807] IPVS: using max 29 ests per chain, 69600 per kthread [ 157.812884][ T8815] macvtap0: entered promiscuous mode [ 157.819280][ T8815] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 157.828542][ T8815] macvtap0: entered allmulticast mode [ 157.834263][ T8815] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 157.845049][ T8815] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 157.852719][ T8815] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 157.911282][ T8814] macvtap0: entered promiscuous mode [ 157.921723][ T8814] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 157.933234][ T8814] macvtap0: entered allmulticast mode [ 157.942860][ T8814] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 157.955960][ T8814] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 157.963243][ T8814] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 157.996348][ T8817] dvmrp0: entered allmulticast mode [ 158.116984][ T8823] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.289582][ T8835] ªªªªªª: renamed from lo [ 158.310519][ T8835] netlink: 5 bytes leftover after parsing attributes in process `syz.3.826'. [ 158.319897][ T8835] netlink: 5 bytes leftover after parsing attributes in process `syz.3.826'. [ 158.329980][ T8835] netlink: 5 bytes leftover after parsing attributes in process `syz.3.826'. [ 158.364732][ T35] IPVS: stop unused estimator thread 0... [ 158.605381][ T8845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.830'. [ 158.698103][ T8851] trusted_key: syz.3.831 sent an empty control message without MSG_MORE. [ 158.916899][ T8863] netlink: 2 bytes leftover after parsing attributes in process `syz.3.835'. [ 159.050671][ T8868] netlink: 'syz.4.837': attribute type 10 has an invalid length. [ 159.078913][ T8868] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 159.379038][ T8893] netlink: 'syz.2.845': attribute type 5 has an invalid length. [ 159.394846][ T8893] : entered promiscuous mode [ 159.415320][ T8895] netlink: 'syz.4.844': attribute type 2 has an invalid length. [ 159.610949][ T8903] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.866448][ T8922] tipc: Enabled bearer , priority 0 [ 159.882495][ T8924] syzkaller1: entered allmulticast mode [ 159.913774][ T8922] syzkaller0: entered promiscuous mode [ 159.919446][ T8922] syzkaller0: entered allmulticast mode [ 159.925429][ T8922] tipc: Resetting bearer [ 159.940906][ T8921] tipc: Resetting bearer [ 160.014525][ T8926] __nla_validate_parse: 3 callbacks suppressed [ 160.014541][ T8926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.852'. [ 160.057468][ T8926] nbd: socks must be embedded in a SOCK_ITEM attr [ 160.240307][ T8933] netlink: 'syz.3.855': attribute type 5 has an invalid length. [ 160.470014][ T8942] netlink: 48 bytes leftover after parsing attributes in process `syz.4.858'. [ 160.480729][ T8943] netlink: 'syz.4.858': attribute type 1 has an invalid length. [ 160.547539][ T8947] netlink: 'syz.3.859': attribute type 2 has an invalid length. [ 160.570846][ T8947] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.859'. [ 160.595480][ T8947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.859'. [ 160.604659][ T8947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.859'. [ 160.932859][ T5996] tipc: Node number set to 4269801642 [ 161.589969][ T8921] tipc: Disabling bearer [ 161.620243][ T8943] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 161.628510][ T8947] veth0: entered promiscuous mode [ 161.649917][ T8947] syz_tun: entered promiscuous mode [ 161.656281][ T8947] hsr2: Slave A (veth0) is not up; please bring it up to get a fully working HSR network [ 161.673145][ T8947] hsr2: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 161.722060][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.860'. [ 161.809957][ T8954] netlink: 'syz.4.862': attribute type 10 has an invalid length. [ 161.828625][ T8954] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 162.136585][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.869'. [ 162.168647][ T8958] lo speed is unknown, defaulting to 1000 [ 162.174945][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.866'. [ 162.184205][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.869'. [ 162.207668][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 162.295911][ T8979] syz.2.869 (8979) used greatest stack depth: 18104 bytes left [ 162.460800][ T8997] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.487808][ T8960] lo speed is unknown, defaulting to 1000 [ 162.515582][ T8995] netlink: 'syz.2.871': attribute type 4 has an invalid length. [ 162.779671][ T7872] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.795266][ T7872] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.808466][ T5992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 162.909201][ T9011] netlink: 'syz.0.877': attribute type 10 has an invalid length. [ 162.948698][ T5992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.111039][ T9023] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 163.118918][ T9024] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 163.156582][ T9024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.228410][ T5992] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.447575][ T9053] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 163.453576][ T9052] bond0: entered promiscuous mode [ 163.474830][ T9052] bond_slave_0: entered promiscuous mode [ 163.485492][ T9052] bond_slave_1: entered promiscuous mode [ 163.564638][ T9052] bond0: left promiscuous mode [ 163.575035][ T9052] bond_slave_0: left promiscuous mode [ 163.605295][ T9052] bond_slave_1: left promiscuous mode [ 167.098466][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 175.818682][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 193.748469][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 194.381796][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392389][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.462542][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 196.466532][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 196.468756][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 226.761416][ T9066] __nla_validate_parse: 1 callbacks suppressed [ 226.761436][ T9066] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.891'. [ 226.782245][ T9066] openvswitch: netlink: Message has 8 unknown bytes. [ 226.862361][ T9075] tipc: Started in network mode [ 226.889316][ T9075] tipc: Node identity ac14142f, cluster identity 4711 [ 226.917728][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.894'. [ 226.920436][ T9075] tipc: New replicast peer: 0.0.0.0 [ 226.942736][ T9075] tipc: Enabled bearer , priority 10 [ 226.959138][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.894'. [ 227.115086][ T9090] netlink: 108 bytes leftover after parsing attributes in process `syz.0.896'. [ 227.163731][ T9096] Bluetooth: MGMT ver 1.23 [ 227.230028][ T9100] netlink: 'syz.0.898': attribute type 10 has an invalid length. [ 227.312903][ T9103] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.319625][ T9102] ieee802154 phy0 wpan0: encryption failed: -22 [ 227.415700][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 227.869398][ T9138] netlink: 60 bytes leftover after parsing attributes in process `syz.3.908'. [ 227.948340][ T5996] tipc: Node number set to 2886997039 [ 228.111028][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 228.179579][ T9157] netlink: 20 bytes leftover after parsing attributes in process `syz.0.910'. [ 228.298499][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 228.357995][ T9157] nbd: socks must be embedded in a SOCK_ITEM attr [ 229.225998][ T9172] lo speed is unknown, defaulting to 1000 [ 229.435469][ T9204] netlink: 20 bytes leftover after parsing attributes in process `syz.4.919'. [ 229.458925][ T9204] netlink: 32 bytes leftover after parsing attributes in process `syz.4.919'. [ 229.487105][ T9204] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.640303][ T9202] lo speed is unknown, defaulting to 1000 [ 229.801168][ T9213] pimreg: entered allmulticast mode [ 229.881810][ T9215] dvmrp0: left allmulticast mode [ 229.914178][ T9215] pimreg: left allmulticast mode [ 230.068716][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 230.115859][ T9222] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 230.130492][ T9222] macsec2: entered promiscuous mode [ 230.146173][ T9222] macsec2: entered allmulticast mode [ 230.168425][ T9222] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 230.349871][ T9233] batadv_slave_1: entered promiscuous mode [ 230.469532][ T9231] batadv_slave_1: left promiscuous mode [ 231.082359][ T9256] netlink: 'syz.1.932': attribute type 27 has an invalid length. [ 231.317961][ T9262] syzkaller0: entered promiscuous mode [ 231.363371][ T9262] syzkaller0: entered allmulticast mode [ 232.286030][ T9297] __nla_validate_parse: 72 callbacks suppressed [ 232.286048][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 232.522428][ T9305] netlink: 104 bytes leftover after parsing attributes in process `syz.3.946'. [ 234.334020][ T9299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.942'. [ 234.380435][ T9305] netlink: 830 bytes leftover after parsing attributes in process `syz.3.946'. [ 234.744919][ T5996] hid-generic 0005:0458:0009.0002: unknown main item tag 0x0 [ 234.752288][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 234.760885][ T5996] hid-generic 0005:0458:0009.0002: unknown main item tag 0x0 [ 234.780930][ T5996] hid-generic 0005:0458:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 234.799124][ T9340] openvswitch: netlink: Actions may not be safe on all matching packets [ 235.009748][ T9343] FAULT_INJECTION: forcing a failure. [ 235.009748][ T9343] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 235.035064][ T9343] CPU: 0 UID: 0 PID: 9343 Comm: syz.0.953 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 235.035091][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.035103][ T9343] Call Trace: [ 235.035109][ T9343] [ 235.035117][ T9343] dump_stack_lvl+0x241/0x360 [ 235.035156][ T9343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.035176][ T9343] ? __pfx__printk+0x10/0x10 [ 235.035196][ T9343] ? __pfx_lock_release+0x10/0x10 [ 235.035225][ T9343] ? validate_chain+0x11e/0x5920 [ 235.035249][ T9343] should_fail_ex+0x40a/0x550 [ 235.035279][ T9343] _copy_from_user+0x2d/0xb0 [ 235.035303][ T9343] do_sys_poll+0x248/0x15d0 [ 235.035342][ T9343] ? _parse_integer_limit+0x1b5/0x200 [ 235.035371][ T9343] ? __pfx_do_sys_poll+0x10/0x10 [ 235.035393][ T9343] ? mark_lock+0x9a/0x360 [ 235.035413][ T9343] ? __lock_acquire+0x1397/0x2100 [ 235.035487][ T9343] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.035520][ T9343] ? ktime_get_ts64+0x9f/0x440 [ 235.035541][ T9343] ? seqcount_lockdep_reader_access+0x157/0x220 [ 235.035586][ T9343] ? __pfx_timespec64_add_safe+0x10/0x10 [ 235.035623][ T9343] __se_sys_poll+0x1c5/0x400 [ 235.035651][ T9343] ? __pfx___se_sys_poll+0x10/0x10 [ 235.035675][ T9343] ? do_syscall_64+0x100/0x230 [ 235.035701][ T9343] ? do_syscall_64+0xb6/0x230 [ 235.035725][ T9343] do_syscall_64+0xf3/0x230 [ 235.035746][ T9343] ? clear_bhb_loop+0x35/0x90 [ 235.035774][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.035798][ T9343] RIP: 0033:0x7f1e28d8d169 [ 235.035819][ T9343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.035833][ T9343] RSP: 002b:00007f1e29be1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 235.035858][ T9343] RAX: ffffffffffffffda RBX: 00007f1e28fa5fa0 RCX: 00007f1e28d8d169 [ 235.035871][ T9343] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000400000000000 [ 235.035881][ T9343] RBP: 00007f1e29be1090 R08: 0000000000000000 R09: 0000000000000000 [ 235.035891][ T9343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.035901][ T9343] R13: 0000000000000000 R14: 00007f1e28fa5fa0 R15: 00007ffd80972ae8 [ 235.035925][ T9343] [ 235.525155][ T9370] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.600828][ T9370] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.686443][ T9370] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.715553][ T9382] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 235.788107][ T9370] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.932806][ T9370] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.965936][ T9370] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.022538][ T9370] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.054321][ T9370] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.199056][ T9406] bridge_slave_0: left allmulticast mode [ 236.231350][ T9406] bridge_slave_0: left promiscuous mode [ 236.257077][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.316377][ T9406] bridge_slave_1: left allmulticast mode [ 236.338390][ T9406] bridge_slave_1: left promiscuous mode [ 236.344147][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.346240][ T9414] netlink: 3768 bytes leftover after parsing attributes in process `syz.1.977'. [ 236.384983][ T9406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.415045][ T9406] bond1: (slave bridge1): Removing an active aggregator [ 236.428996][ T9406] bond1: (slave bridge1): Releasing backup interface [ 236.456319][ T9406] bond2: (slave veth3): Releasing active interface [ 236.625774][ T9428] syz.1.979 uses old SIOCAX25GETINFO [ 236.715838][ T9432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.978'. [ 236.755729][ T9420] lo speed is unknown, defaulting to 1000 [ 236.768721][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.978'. [ 236.867058][ T9432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.978'. [ 236.909579][ T9432] netlink: 36 bytes leftover after parsing attributes in process `syz.4.978'. [ 237.107213][ T9453] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 237.187540][ T9453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.521067][ T9468] netlink: 'syz.4.988': attribute type 11 has an invalid length. [ 237.551934][ T9468] __nla_validate_parse: 7 callbacks suppressed [ 237.551952][ T9468] netlink: 232 bytes leftover after parsing attributes in process `syz.4.988'. [ 237.568303][ T9453] bond3: (slave veth7): Enslaving as an active interface with a down link [ 237.611576][ T9460] bond3: (slave veth9): Enslaving as an active interface with a down link [ 237.619357][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 237.629158][ T9466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.988'. [ 237.678256][ T9471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.990'. [ 237.701356][ T9471] gtp0: entered promiscuous mode [ 237.706440][ T9471] gtp0: entered allmulticast mode [ 237.854564][ T9473] 8021q: adding VLAN 0 to HW filter on device bond3 [ 237.913031][ T9482] macsec0: entered promiscuous mode [ 237.991061][ T9482] gretap0: entered promiscuous mode [ 238.008768][ T9482] gretap0: left promiscuous mode [ 238.416722][ T9496] lo speed is unknown, defaulting to 1000 [ 238.495363][ T9507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.804587][ T9510] netlink: 'syz.3.1001': attribute type 10 has an invalid length. [ 238.827123][ T9510] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 239.056670][ T9519] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1003'. [ 239.160344][ T9514] lo speed is unknown, defaulting to 1000 [ 239.236003][ T9521] pim6reg9: entered allmulticast mode [ 239.243094][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 239.387626][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 239.433845][ T9533] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1007'. [ 239.437940][ T9531] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1007'. [ 239.559349][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1006'. [ 239.976194][ T9550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.144870][ T9540] lo speed is unknown, defaulting to 1000 [ 240.210569][ T9556] ipip0: entered promiscuous mode [ 240.951293][ T9561] lo speed is unknown, defaulting to 1000 [ 241.369620][ T9586] IPVS: length: 78 != 8 [ 241.552047][ T9593] netlink: 'syz.3.1026': attribute type 10 has an invalid length. [ 241.611375][ T9597] syz1: rxe_newlink: already configured on team_slave_0 [ 241.652729][ T9592] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 241.680252][ T9596] netlink: 'syz.4.1027': attribute type 10 has an invalid length. [ 241.771804][ T9596] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 242.045928][ T9606] netlink: 'syz.0.1030': attribute type 10 has an invalid length. [ 242.076751][ T9606] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 242.286779][ T9617] FAULT_INJECTION: forcing a failure. [ 242.286779][ T9617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.307106][ T9617] CPU: 1 UID: 0 PID: 9617 Comm: syz.3.1035 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 242.307152][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.307165][ T9617] Call Trace: [ 242.307172][ T9617] [ 242.307181][ T9617] dump_stack_lvl+0x241/0x360 [ 242.307212][ T9617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.307236][ T9617] ? __pfx__printk+0x10/0x10 [ 242.307263][ T9617] ? snprintf+0xda/0x120 [ 242.307297][ T9617] should_fail_ex+0x40a/0x550 [ 242.307332][ T9617] _copy_to_user+0x31/0xb0 [ 242.307362][ T9617] simple_read_from_buffer+0xca/0x150 [ 242.307394][ T9617] proc_fail_nth_read+0x1e9/0x250 [ 242.307426][ T9617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.307459][ T9617] ? rw_verify_area+0x243/0x630 [ 242.307480][ T9617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.307511][ T9617] vfs_read+0x1f8/0xb40 [ 242.307541][ T9617] ? __pfx_vfs_read+0x10/0x10 [ 242.307568][ T9617] ? __pfx_timespec64_add_safe+0x10/0x10 [ 242.307615][ T9617] ksys_read+0x18f/0x2b0 [ 242.307639][ T9617] ? __pfx_ksys_read+0x10/0x10 [ 242.307662][ T9617] ? do_syscall_64+0x100/0x230 [ 242.307691][ T9617] ? do_syscall_64+0xb6/0x230 [ 242.307720][ T9617] do_syscall_64+0xf3/0x230 [ 242.307746][ T9617] ? clear_bhb_loop+0x35/0x90 [ 242.307780][ T9617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.307808][ T9617] RIP: 0033:0x7f7fa738bb7c [ 242.307826][ T9617] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 242.307844][ T9617] RSP: 002b:00007f7fa8192030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.307867][ T9617] RAX: ffffffffffffffda RBX: 00007f7fa75a5fa0 RCX: 00007f7fa738bb7c [ 242.307883][ T9617] RDX: 000000000000000f RSI: 00007f7fa81920a0 RDI: 0000000000000004 [ 242.307896][ T9617] RBP: 00007f7fa8192090 R08: 0000000000000000 R09: 0000000000000000 [ 242.307909][ T9617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.307921][ T9617] R13: 0000000000000000 R14: 00007f7fa75a5fa0 R15: 00007ffd4a8794b8 [ 242.307952][ T9617] [ 242.663611][ T9643] netlink: 'syz.3.1043': attribute type 10 has an invalid length. [ 242.672018][ T9643] syz1: rxe_newlink: already configured on team_slave_0 [ 242.782473][ T9641] ip6tnl1: entered promiscuous mode [ 242.787734][ T9641] ip6tnl1: entered allmulticast mode [ 242.996449][ T9649] lo speed is unknown, defaulting to 1000 [ 243.059214][ T9664] __nla_validate_parse: 11 callbacks suppressed [ 243.059234][ T9664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1050'. [ 243.502480][ T9680] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1055'. [ 243.614111][ T9681] sctp: [Deprecated]: syz.1.1055 (pid 9681) Use of int in max_burst socket option deprecated. [ 243.614111][ T9681] Use struct sctp_assoc_value instead [ 243.672013][ T9680] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1055'. [ 243.695438][ T9685] netlink: 'syz.0.1057': attribute type 10 has an invalid length. [ 243.843794][ T9692] netlink: 'syz.1.1059': attribute type 1 has an invalid length. [ 243.869514][ T9692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 243.882017][ T9692] macvlan0: entered promiscuous mode [ 243.887466][ T9692] macvlan0: entered allmulticast mode [ 243.914045][ T9692] bond0: entered allmulticast mode [ 243.939238][ T9692] team0: entered allmulticast mode [ 243.944485][ T9692] bond0: entered promiscuous mode [ 244.007547][ T9692] team0: entered promiscuous mode [ 244.019677][ T9697] netlink: 'syz.1.1059': attribute type 1 has an invalid length. [ 244.029329][ T9692] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 244.040321][ T9692] bond4: (slave macvlan0): making interface the new active one [ 244.059861][ T9692] bond4: (slave macvlan0): Enslaving as an active interface with an up link [ 244.072994][ T9702] tipc: Started in network mode [ 244.085132][ T9702] tipc: Node identity 4, cluster identity 4711 [ 244.103854][ T9702] tipc: Node number set to 4 [ 244.110212][ T9683] lo speed is unknown, defaulting to 1000 [ 244.132357][ T9702] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1062'. [ 244.344878][ T9717] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 244.537678][ T9729] netlink: 'syz.0.1069': attribute type 7 has an invalid length. [ 244.574249][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1069'. [ 244.697542][ T9734] netlink: 'syz.2.1071': attribute type 10 has an invalid length. [ 244.782963][ T9739] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 245.432643][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1083'. [ 245.448148][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 245.491699][ T9766] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1083'. [ 245.878094][ T9782] netlink: 'syz.4.1089': attribute type 10 has an invalid length. [ 245.956584][ T9778] lo speed is unknown, defaulting to 1000 [ 245.972005][ T9782] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 246.008411][ T9775] openvswitch: netlink: IP tunnel dst address not specified [ 246.262927][ T9797] ieee802154 phy0 wpan0: encryption failed: -22 [ 246.506647][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'. [ 246.670925][ T9819] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1098'. [ 246.948708][ T9828] netlink: 'syz.0.1101': attribute type 10 has an invalid length. [ 246.984776][ T9832] netlink: 'syz.1.1103': attribute type 7 has an invalid length. [ 247.006085][ T9832] netlink: 'syz.1.1103': attribute type 8 has an invalid length. [ 247.430235][ T9841] syzkaller0: entered promiscuous mode [ 247.442073][ T9841] syzkaller0: entered allmulticast mode [ 247.551130][ T9853] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 247.785579][ T9874] validate_nla: 1 callbacks suppressed [ 247.785596][ T9874] netlink: 'syz.3.1113': attribute type 3 has an invalid length. [ 248.430462][ T9896] __nla_validate_parse: 5 callbacks suppressed [ 248.430481][ T9896] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1118'. [ 249.352531][ T9850] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1108'. [ 249.362256][ T9844] lo speed is unknown, defaulting to 1000 [ 249.495793][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1122'. [ 249.730935][ T9926] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1125'. [ 250.087202][ T9945] x_tables: duplicate underflow at hook 3 [ 250.103381][ T9947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1130'. [ 250.522349][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 250.712202][ T9943] lo speed is unknown, defaulting to 1000 [ 251.076888][T10005] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 251.109495][T10014] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 251.354263][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1143'. [ 252.886636][ T9992] lo speed is unknown, defaulting to 1000 [ 252.899590][T10026] bridge4: entered promiscuous mode [ 252.904824][T10026] bridge4: entered allmulticast mode [ 252.923907][T10026] team0: Port device bridge4 added [ 252.936989][T10009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1140'. [ 253.087085][T10002] lo speed is unknown, defaulting to 1000 [ 253.171103][ T51] IPVS: starting estimator thread 0... [ 253.225947][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1149'. [ 253.258538][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 253.306382][T10046] IPVS: using max 24 ests per chain, 57600 per kthread [ 253.369981][T10041] openvswitch: netlink: IP tunnel TTL not specified. [ 253.440255][T10041] vlan3: entered allmulticast mode [ 253.471405][T10041] macvtap0: entered allmulticast mode [ 253.491226][T10041] veth0_macvtap: entered allmulticast mode [ 253.533074][T10041] macvtap0: left allmulticast mode [ 253.542199][T10041] veth0_macvtap: left allmulticast mode [ 253.590596][T10053] syzkaller1: entered promiscuous mode [ 253.596100][T10053] syzkaller1: entered allmulticast mode [ 254.223748][T10079] pimreg: entered allmulticast mode [ 254.259061][T10079] pimreg: left allmulticast mode [ 254.340255][T10084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1158'. [ 254.352672][T10084] 8021q: VLANs not supported on vxcan1 [ 254.470045][T10089] netlink: 'syz.2.1161': attribute type 2 has an invalid length. [ 254.492650][T10089] netlink: 'syz.2.1161': attribute type 9 has an invalid length. [ 254.513948][T10089] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1161'. [ 254.746088][T10079] lo speed is unknown, defaulting to 1000 [ 254.760123][T10101] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1165'. [ 255.038654][T10108] openvswitch: netlink: IP tunnel dst address not specified [ 255.070722][T10098] lo speed is unknown, defaulting to 1000 [ 255.255009][T10117] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 255.735525][T10133] netlink: 'syz.1.1172': attribute type 1 has an invalid length. [ 255.766950][T10133] netlink: 'syz.1.1172': attribute type 2 has an invalid length. [ 255.792126][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1172'. [ 255.820552][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.824033][T10137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1176'. [ 255.826841][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.841979][T10139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1175'. [ 255.851191][T10139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1175'. [ 255.864095][T10135] 8021q: VLANs not supported on ip_vti0 [ 255.873868][T10135] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.1174'. [ 255.888369][T10135] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.1174'. [ 255.912827][T10139] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 255.927276][T10137] netlink: 'syz.0.1176': attribute type 1 has an invalid length. [ 255.966368][T10137] batadv1: entered allmulticast mode [ 256.067160][T10149] netlink: 'syz.0.1176': attribute type 21 has an invalid length. [ 256.087693][T10148] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.094427][T10149] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1176'. [ 256.452931][T10170] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 256.498630][T10170] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 256.678411][T10146] lo speed is unknown, defaulting to 1000 [ 256.999652][T10186] lo speed is unknown, defaulting to 1000 [ 257.201064][T10181] lo speed is unknown, defaulting to 1000 [ 257.567618][T10211] batman_adv: batadv0: Removing interface: dummy0 [ 257.589944][T10211] bond0: (slave veth0_to_bond): Releasing backup interface [ 257.646719][T10211] bond0: (slave bond_slave_0): Releasing backup interface [ 257.692256][T10211] bond0: (slave bond_slave_1): Releasing backup interface [ 257.733094][T10211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.763197][T10211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.977635][T10218] gtp0: left promiscuous mode [ 257.982749][T10218] gtp0: left allmulticast mode [ 258.603243][T10237] "syz.4.1203" (10237) uses obsolete ecb(arc4) skcipher [ 259.155604][T10283] batadv_slave_0: left promiscuous mode [ 259.179629][T10283] batadv_slave_0: left allmulticast mode [ 259.196139][T10283] bond1: left promiscuous mode [ 259.209045][T10283] ipip0: left promiscuous mode [ 259.352467][T10295] __nla_validate_parse: 105 callbacks suppressed [ 259.352487][T10295] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1216'. [ 259.381656][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1216'. [ 259.390894][T10295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1216'. [ 259.415126][T10295] smc: net device bond0 erased user defined pnetid SYZ0 [ 259.424124][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 259.443519][T10298] netlink: 'syz.3.1218': attribute type 12 has an invalid length. [ 259.452397][T10298] netlink: 'syz.3.1218': attribute type 29 has an invalid length. [ 259.461020][T10298] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1218'. [ 260.314159][T10335] [ 260.316528][T10335] ====================================================== [ 260.323542][T10335] WARNING: possible circular locking dependency detected [ 260.330552][T10335] 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 Not tainted [ 260.337645][T10335] ------------------------------------------------------ [ 260.344648][T10335] syz.2.1229/10335 is trying to acquire lock: [ 260.350699][T10335] ffff88802e960d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: __dev_open+0x5cb/0x8a0 [ 260.360275][T10335] [ 260.360275][T10335] but task is already holding lock: [ 260.367624][T10335] ffff88805de30e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 260.377281][T10335] [ 260.377281][T10335] which lock already depends on the new lock. [ 260.377281][T10335] [ 260.387671][T10335] [ 260.387671][T10335] the existing dependency chain (in reverse order) is: [ 260.396672][T10335] [ 260.396672][T10335] -> #2 (team->team_lock_key#3){+.+.}-{4:4}: [ 260.404836][T10335] lock_acquire+0x1ed/0x550 [ 260.409862][T10335] __mutex_lock+0x19c/0x1010 [ 260.414970][T10335] team_set_mac_address+0x122/0x280 [ 260.420681][T10335] netif_set_mac_address+0x327/0x510 [ 260.426476][T10335] do_setlink+0xaa6/0x40f0 [ 260.431399][T10335] rtnl_newlink+0x15a6/0x1d90 [ 260.436607][T10335] rtnetlink_rcv_msg+0x791/0xcf0 [ 260.442058][T10335] netlink_rcv_skb+0x206/0x480 [ 260.447336][T10335] netlink_unicast+0x7f6/0x990 [ 260.452611][T10335] netlink_sendmsg+0x8de/0xcb0 [ 260.457889][T10335] __sock_sendmsg+0x221/0x270 [ 260.463084][T10335] __sys_sendto+0x363/0x4c0 [ 260.468117][T10335] __x64_sys_sendto+0xde/0x100 [ 260.473391][T10335] do_syscall_64+0xf3/0x230 [ 260.478415][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.484822][T10335] [ 260.484822][T10335] -> #1 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 260.493341][T10335] lock_acquire+0x1ed/0x550 [ 260.498373][T10335] __mutex_lock+0x19c/0x1010 [ 260.503478][T10335] dev_set_mac_address+0x2a/0x50 [ 260.508951][T10335] bond_set_mac_address+0x28e/0x830 [ 260.514665][T10335] netif_set_mac_address+0x327/0x510 [ 260.520460][T10335] do_setlink+0xaa6/0x40f0 [ 260.525392][T10335] rtnl_newlink+0x15a6/0x1d90 [ 260.530586][T10335] rtnetlink_rcv_msg+0x791/0xcf0 [ 260.536042][T10335] netlink_rcv_skb+0x206/0x480 [ 260.541320][T10335] netlink_unicast+0x7f6/0x990 [ 260.546604][T10335] netlink_sendmsg+0x8de/0xcb0 [ 260.551892][T10335] __sock_sendmsg+0x221/0x270 [ 260.557090][T10335] ____sys_sendmsg+0x53a/0x860 [ 260.562365][T10335] __sys_sendmsg+0x269/0x350 [ 260.567467][T10335] do_syscall_64+0xf3/0x230 [ 260.572500][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.578914][T10335] [ 260.578914][T10335] -> #0 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 260.587346][T10335] validate_chain+0x18ef/0x5920 [ 260.592712][T10335] __lock_acquire+0x1397/0x2100 [ 260.598084][T10335] lock_acquire+0x1ed/0x550 [ 260.603105][T10335] __mutex_lock+0x19c/0x1010 [ 260.608231][T10335] __dev_open+0x5cb/0x8a0 [ 260.613081][T10335] netif_open+0xae/0x1b0 [ 260.617862][T10335] dev_open+0x13e/0x260 [ 260.622547][T10335] team_add_slave+0xabe/0x28a0 [ 260.627824][T10335] do_set_master+0x579/0x730 [ 260.632925][T10335] rtnl_newlink_create+0x6e6/0xbd0 [ 260.638556][T10335] rtnl_newlink+0x167a/0x1d90 [ 260.643751][T10335] rtnetlink_rcv_msg+0x791/0xcf0 [ 260.649204][T10335] netlink_rcv_skb+0x206/0x480 [ 260.654481][T10335] netlink_unicast+0x7f6/0x990 [ 260.659756][T10335] netlink_sendmsg+0x8de/0xcb0 [ 260.665033][T10335] __sock_sendmsg+0x221/0x270 [ 260.670222][T10335] ____sys_sendmsg+0x53a/0x860 [ 260.675512][T10335] __sys_sendmsg+0x269/0x350 [ 260.680638][T10335] do_syscall_64+0xf3/0x230 [ 260.685660][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.692074][T10335] [ 260.692074][T10335] other info that might help us debug this: [ 260.692074][T10335] [ 260.702307][T10335] Chain exists of: [ 260.702307][T10335] &dev_instance_lock_key#2 --> &dev_instance_lock_key#12 --> team->team_lock_key#3 [ 260.702307][T10335] [ 260.717534][T10335] Possible unsafe locking scenario: [ 260.717534][T10335] [ 260.724969][T10335] CPU0 CPU1 [ 260.730322][T10335] ---- ---- [ 260.735673][T10335] lock(team->team_lock_key#3); [ 260.740618][T10335] lock(&dev_instance_lock_key#12); [ 260.748428][T10335] lock(team->team_lock_key#3); [ 260.755890][T10335] lock(&dev_instance_lock_key#2); [ 260.761093][T10335] [ 260.761093][T10335] *** DEADLOCK *** [ 260.761093][T10335] [ 260.769248][T10335] 3 locks held by syz.2.1229/10335: [ 260.774435][T10335] #0: ffffffff903d43a0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 260.783942][T10335] #1: ffffffff8fed6908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 260.793006][T10335] #2: ffff88805de30e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_add_slave+0xb3/0x28a0 [ 260.803119][T10335] [ 260.803119][T10335] stack backtrace: [ 260.808998][T10335] CPU: 0 UID: 0 PID: 10335 Comm: syz.2.1229 Not tainted 6.14.0-rc5-syzkaller-01188-g0ea09cbf8350 #0 [ 260.809016][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.809025][T10335] Call Trace: [ 260.809031][T10335] [ 260.809037][T10335] dump_stack_lvl+0x241/0x360 [ 260.809055][T10335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.809070][T10335] ? __pfx__printk+0x10/0x10 [ 260.809087][T10335] print_circular_bug+0x13a/0x1b0 [ 260.809105][T10335] check_noncircular+0x36a/0x4a0 [ 260.809123][T10335] ? __pfx_check_noncircular+0x10/0x10 [ 260.809139][T10335] ? lockdep_lock+0x123/0x2b0 [ 260.809163][T10335] validate_chain+0x18ef/0x5920 [ 260.809184][T10335] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 260.809200][T10335] ? __pfx_validate_chain+0x10/0x10 [ 260.809217][T10335] ? stack_depot_save_flags+0x7b4/0x940 [ 260.809241][T10335] ? kasan_save_track+0x51/0x80 [ 260.809256][T10335] ? kasan_save_track+0x3f/0x80 [ 260.809270][T10335] ? __kasan_kmalloc+0x98/0xb0 [ 260.809285][T10335] ? __kmalloc_noprof+0x285/0x4c0 [ 260.809304][T10335] ? bond_update_slave_arr+0x150/0xd50 [ 260.809318][T10335] ? bond_open+0xe36/0xfa0 [ 260.809333][T10335] ? __dev_open+0x45a/0x8a0 [ 260.809351][T10335] ? netif_open+0xae/0x1b0 [ 260.809369][T10335] ? dev_open+0x13e/0x260 [ 260.809389][T10335] ? team_add_slave+0xabe/0x28a0 [ 260.809405][T10335] ? do_set_master+0x579/0x730 [ 260.809416][T10335] ? rtnl_newlink_create+0x6e6/0xbd0 [ 260.809437][T10335] ? rtnl_newlink+0x167a/0x1d90 [ 260.809456][T10335] ? rtnetlink_rcv_msg+0x791/0xcf0 [ 260.809475][T10335] ? netlink_rcv_skb+0x206/0x480 [ 260.809493][T10335] ? netlink_unicast+0x7f6/0x990 [ 260.809509][T10335] ? netlink_sendmsg+0x8de/0xcb0 [ 260.809528][T10335] ? ____sys_sendmsg+0x53a/0x860 [ 260.809542][T10335] ? __sys_sendmsg+0x269/0x350 [ 260.809557][T10335] ? mark_lock+0x9a/0x360 [ 260.809571][T10335] __lock_acquire+0x1397/0x2100 [ 260.809597][T10335] lock_acquire+0x1ed/0x550 [ 260.809618][T10335] ? __dev_open+0x5cb/0x8a0 [ 260.809639][T10335] ? __pfx_lock_acquire+0x10/0x10 [ 260.809659][T10335] ? lockdep_rtnl_is_held+0x26/0x40 [ 260.809674][T10335] ? __pfx___might_resched+0x10/0x10 [ 260.809693][T10335] ? bond_update_slave_arr+0x844/0xd50 [ 260.809711][T10335] __mutex_lock+0x19c/0x1010 [ 260.809727][T10335] ? __dev_open+0x5cb/0x8a0 [ 260.809745][T10335] ? bond_alb_initialize+0x4c3/0x5f0 [ 260.809769][T10335] ? __dev_open+0x5cb/0x8a0 [ 260.809787][T10335] ? __pfx___mutex_lock+0x10/0x10 [ 260.809810][T10335] __dev_open+0x5cb/0x8a0 [ 260.809830][T10335] ? __pfx___dev_open+0x10/0x10 [ 260.809850][T10335] ? ref_tracker_alloc+0x332/0x490 [ 260.809877][T10335] netif_open+0xae/0x1b0 [ 260.809896][T10335] ? __pfx_netif_open+0x10/0x10 [ 260.809918][T10335] dev_open+0x13e/0x260 [ 260.809940][T10335] team_add_slave+0xabe/0x28a0 [ 260.809963][T10335] ? __pfx_team_add_slave+0x10/0x10 [ 260.809980][T10335] ? nlmsg_notify+0x14c/0x1c0 [ 260.810000][T10335] ? __dev_notify_flags+0x316/0x400 [ 260.810012][T10335] ? dev_set_rx_mode+0xb8/0x2e0 [ 260.810026][T10335] ? __pfx___dev_notify_flags+0x10/0x10 [ 260.810039][T10335] ? __dev_change_flags+0x515/0x6f0 [ 260.810053][T10335] ? mutex_is_locked+0x17/0x50 [ 260.810068][T10335] do_set_master+0x579/0x730 [ 260.810083][T10335] rtnl_newlink_create+0x6e6/0xbd0 [ 260.810109][T10335] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 260.810132][T10335] ? __pfx___mutex_lock+0x10/0x10 [ 260.810152][T10335] ? ns_capable+0x8a/0xf0 [ 260.810169][T10335] rtnl_newlink+0x167a/0x1d90 [ 260.810189][T10335] ? stack_depot_save_flags+0x37/0x940 [ 260.810214][T10335] ? __pfx_rtnl_newlink+0x10/0x10 [ 260.810233][T10335] ? __netlink_deliver_tap+0x561/0x7f0 [ 260.810252][T10335] ? __pfx_validate_chain+0x10/0x10 [ 260.810267][T10335] ? __sock_sendmsg+0x221/0x270 [ 260.810284][T10335] ? ____sys_sendmsg+0x53a/0x860 [ 260.810298][T10335] ? __sys_sendmsg+0x269/0x350 [ 260.810311][T10335] ? do_syscall_64+0xf3/0x230 [ 260.810327][T10335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.810352][T10335] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 260.810374][T10335] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.810398][T10335] ? mark_lock+0x9a/0x360 [ 260.810412][T10335] ? __lock_acquire+0x1397/0x2100 [ 260.810442][T10335] ? __pfx_lock_release+0x10/0x10 [ 260.810468][T10335] ? __pfx_rtnl_newlink+0x10/0x10 [ 260.810488][T10335] rtnetlink_rcv_msg+0x791/0xcf0 [ 260.810507][T10335] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 260.810528][T10335] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.810549][T10335] ? ref_tracker_free+0x643/0x7e0 [ 260.810564][T10335] netlink_rcv_skb+0x206/0x480 [ 260.810583][T10335] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 260.810604][T10335] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.810631][T10335] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.810651][T10335] netlink_unicast+0x7f6/0x990 [ 260.810671][T10335] ? __pfx_netlink_unicast+0x10/0x10 [ 260.810687][T10335] ? __virt_addr_valid+0x45f/0x530 [ 260.810701][T10335] ? __phys_addr_symbol+0x2f/0x70 [ 260.810713][T10335] ? __check_object_size+0x47a/0x730 [ 260.810733][T10335] netlink_sendmsg+0x8de/0xcb0 [ 260.810756][T10335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.810778][T10335] ? aa_sock_msg_perm+0x91/0x160 [ 260.810800][T10335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.810819][T10335] __sock_sendmsg+0x221/0x270 [ 260.810838][T10335] ____sys_sendmsg+0x53a/0x860 [ 260.810906][T10335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.810931][T10335] ? __fget_files+0x2a/0x410 [ 260.810953][T10335] ? __fget_files+0x2a/0x410 [ 260.810977][T10335] __sys_sendmsg+0x269/0x350 [ 260.810994][T10335] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.811023][T10335] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.811046][T10335] ? do_syscall_64+0x100/0x230 [ 260.811064][T10335] ? do_syscall_64+0xb6/0x230 [ 260.811082][T10335] do_syscall_64+0xf3/0x230 [ 260.811100][T10335] ? clear_bhb_loop+0x35/0x90 [ 260.811121][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.811141][T10335] RIP: 0033:0x7f8b45f8d169 [ 260.811155][T10335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.811168][T10335] RSP: 002b:00007f8b46d75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.811184][T10335] RAX: ffffffffffffffda RBX: 00007f8b461a5fa0 RCX: 00007f8b45f8d169 [ 260.811195][T10335] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000005 [ 260.811204][T10335] RBP: 00007f8b4600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 260.811214][T10335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.811223][T10335] R13: 0000000000000000 R14: 00007f8b461a5fa0 R15: 00007ffd6a8c0a98 [ 260.811238][T10335] [ 261.458963][T10335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.466094][T10335] bond2: entered promiscuous mode [ 261.471898][T10335] team0: Port device bond2 added [ 261.561085][T10306] netlink: 'syz.4.1220': attribute type 2 has an invalid length. [ 261.572101][T10338] lo speed is unknown, defaulting to 1000 [ 261.584608][T10306] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1220'.