last executing test programs: 2.025626664s ago: executing program 3 (id=4681): unshare(0xc040480) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, 0x0, &(0x7f0000000640)=0xfffffffffffffed6) syz_emit_ethernet(0x1263, &(0x7f0000001500)={@random="01008040000b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x122d, 0x3a, 0xfe, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9fff8fef50000000000a2"}, {0x1, 0x1, "fe906d26efe3"}, {0x5, 0x200, "9ee9d41c876176d7cdc1051f24f89e21eece8ed24f7a05008f970f8d5877f2b784237f6ae8e7a45287c2e19bc9fb478ad6848a660e863599f7f3135ae92a3554337292a0f3b71d80b8eb43046b7b9f5e408ef2ed6b440c8219438e57e918ddbc19e21f3866bae581a822f1ecdaa51c444efd2d06a3e04b45fbb94295ec68544385810112a6549b991a8f6c7927427964ea8b011d9be5ee27dcadf7c362ed317b06fa7ec7b2cde7b557cc7f25dac0d20255776770d57d2939719883347621cbdd53ab876496547212360d1cd6549455d5139154b9f6d796561868049d134fbb02aff3608ad4f5ba236b374191a9be00c663a8bf48baa95a3a61bde1fc7a98eb791121ee63bbd3835182eee19591b618d33d18361de66ce569d0672dea35414446d0fb996b3f30535e06b0c3d8fd99dd4287705d640e2fe850629df79a309cb2f2a4eaa81180e8f4ddba93719be32d4d24d6291967078f9a59fb89c133395962a87e12039b5ad882c1e9af50b5ef0011b90bc22b705a7afe796a34d7f60a733e250bde3de6e2615d658e4cd33ca3555ea1c576b0bd9f42e136cf1163f420a5a73dc4f8ffe514dab0ad89c15b4ac4557dc6d2ec30769acfb3fe52927309e1573937898d186b995531057b7b23f8b92549f67f8f030313f9f02c1b6f58009b467ed03f063fe5ebfe5a4c466bc6a03711974f0084a8be51787735f2baaee36875f23b9d1c19e344b6e4a6508b910a35a49ba73295c2c145294eb7ab63ec20c963274a5c5f1b966981f937f163f415b5afe1767a2a06323263522f6a4d096d507521e2cd33173a7616dd13eb802291781bd93d8bd4cb53473881a303a5f1186ef05ceb0dab46a1c87e66671a01a9e62bd87a50760ce553155fd81159f93da92ce1b796dc8a2d1358fecd863c4ccfa0f251fd15a995444c6c18fa5459a2a7bd66d8a991135717a374bdc39a211216ce6fbf03e8ccb7e66a29215dc9f118184563a21197a8f22596317f505b21437e4daffe9c8834b794bc4ce49b2cbebd100f610e69cf7880a1aa57ae930abc87e9804315ab695c4023dacad92636fa3e2e288d688d9d497f4c5a8c382dce0271e088a33b7748b2048cef606ef0553ed3bf082c0182ef52b9f95815b73c84c5c83a41b51f383adcb119126e00d7129ff501076571b1916adab5db27ec87bd67acdfb22b513b858a8d7cd1e3d0513ed0cc7d9c2a6395eb5e79388627cb8a0391e43a82cf86c4990444c92c0daee737cf48ebde28701e4b4b0f78248369bedfc21dd23a420a243e063aef3c43404e2f2334e6ff3da444a1ff51a7c53561f6b4e7ca3e8aebb3fd80bb2dbf1e320e17be23e3455028d16882fbcf524143abe3467941cd0745755b1c5ad36280112ff9bb90f93a89c1ee23a766729d771da94a2a7992fab464bfaf2e46283d41ec39e5621c1f7c0926eb5370615c2638b57a86b0f85689f37d0b2f608a79f5e62a3f378061767bc1e0dd7301d5cb70254592736bd061cc792e75f8017e56bd0d5205e357f31ec8d58834f078401c960411c84d1e7d66953819fcc0b216129906539f227a78158f48281e8cd8a1a471c188c776a1ca62d7b241c60ac780203b7eb0758336677e0504e5f6d121f91fda33ae07e6d99ac35ea18e09e699765242ab88d698292ccb8a22af63edf2721e74655321543ab046c65e1b17e1cf76cba5effeb604fa59d8e2ac7b479f0b2b01ce889d997632bfccca7028a221de8fe02368a01bbd3c40b6eafae9fc0b38a787e7bb7edeb535075f9a2ddabe03cd3dabbf0a8f17fea3cd204f608d0e50c3865dccb1feafd3077533eeebc82ad31f2748c74f5a124477c8109bec958fa2d752af1026657b9b59c4dfc42bc07c65a7b96a87bd0ae0be3229e1712d8897457081200015bce510a0dfdc9f0cea349d4db964f660de38ff475cab8f23a1a69a0931626d253f816e24eb599e32849f663fdd2d94d12f781db5758a6a03b4c3b55d817a795035ecf948fea1bfbb231d30aed212314833861985ce9ccbc312409b50732b2d69970f9300d50b7eb674eae9787feeef5835a46024072de2f1c2b1024049af52cdbb88ba95de945ab2333fe1a350f42edc3785d0457aababf2e147ed6dee0705a6d15ffa7f5a12f02c040d3b127296c42bfccd0ed86aed5fd7d21e60031fe570f46b86cbe66d0baa3a148b8e0cf1457cffc0156ef7eabb8316bc31accfef7a890afb3d58beb99518e061f1abfcabb52f22555e362b52fe698519e324cb1a56e1a466540b37c42396d6ed37c68b98be61ec4ea1472cbf5be5c5f73da4ffa9df9dacdb65e8f79ee69e0d2ed0062482264897657702cf9a671a7f0ff7a13c0a4d53d964a3e4ed1742049879acc434b33e88cb561943ed66c77648ef149671ca6917431181a496ec64d4e4c0d2f2b1630d328108b98a0c156553a6d500c38a1cf0b07720ac462a86dedf24b7cd798360842d02423ebe2114e49840a80460dac32a27dce31d5e6a09d84c39fcc7e064c030b28e7c6a89274be5359f90f1ffad30e7fb174c5007be1f304c7befb4eed7cfc5d46eaa708025be50b72682b496ba0dc0ce199837472dc3b52cabb8de0f3baf12e32a25b87a9874a38f02dd6d2952849270ae000b943d8bec2c43441cb16277d96070bb65f7d858148424e53efa4de86570609c22a8bd60ad47aeefcb5dcc47702ff7be20ddb00839d2349cd1a859d4934dae1300d0c6af5e92dafc759f5aa6920a5dba23d50dcf896f8c30be1c4554b35344b066b923c905d3617c8c614fd6c1caf67b10c901427b88758b5adb2314d032720376de7565b497d7463c3fa1b8b1c2dff03d62bcb4f1e293e76d2afafedad463ef3c86bdc2d39fbc5ed9b333edf5735b62fda32d06d49c5f799717548fee9a4a9d106b5e32ca9ca98a79697f9c203f31bbac740feb02220e2cf1f4378621928ff764065fb91902ea666357e6ae3c9c059e687dc2d96fa70df2a64bfe43b5b9b5892038d4ab64d0940f187f9ce848bd6c7c0fe4ff2beac4fe62a420d047e8cdccf6874b65e4034e98af734aec93656431750a199378e3c303df9b9a4d46d07b2a3417de9646211a342547ce530e04b5a20c492c23c518e4acbe2041b9b1873671b1c65b9a30655f5dc3f74ab504b5a0a2e6f893787eafcbcb9f208c0a2f736da65c640867e7e188b746927f5e495c6898e9054679dd8033a7cfe8794aef0b8a2782d42b79feb88a5c40aba2de3886a52b7c3329ed84391c8fd0f44b7d9c053885dc07938f91dbb95d316b497a61c26fa204281d80c4867071a94e0486704c985fde01d6fbedcb26dadca57555bbb424d4cdb6861a435259abefc63e1b11d6188022fcd3869b26a8a4d4d30a0c2ff5433620134783b9e00460860fc6b083e35f0abc83cd032f7765b3b2517bef951b56783d77ac0ab69b29d04c462e58ac617efc68bd38dd49a48f7ce2efd749602afaa1e2aeb05339d623f7a14f9952e57fb3b6aea187b70ff15c28c97082b89212f8f2d6a99fb3afb489449bbe44331a74153cc48eb5f326c55eba96fdecd37b5e6a2bc7391411a0ba152588eeeb53f1970a7b99baccf5d7705b2f1d6e431fdcf969454a58e1fa026e45ba1b5cf0f6918ccb56923556f3f3579b981c3244213e67fcb496a509d50a1a5144b80c8f5d4b94347319e29d83355b5eb7ade9efbc37332c889c40be8becd05f0d4706a0732f90171311547349eee30fb784a3fa2c1085317b7dc52ada5b3885223cec279afac940e1478b717a4d55898edaf08f63d0c2151bb63192b905528692a5a788021128ab4edd43d66623b8868f34a42ddc9448661d65e680124df0b282232eee1aff1adf84c11b825bb70a6a331020eb829ba3eb2fc592a0b2a2d4f0bfcce940caa060dfef7a220f83b6fe4d39b8e5aad8987fa58b47de222dd7e9c93e56304a33a4f6889f43a5cf5b32baee3b6c5641fa58a63a17c5c5dd910dbb1c1a505e27f4a7136b1a0ca5f3126062cb09b26512f5ac322eb14e25aed5a3be233bb9a83d7394ac0d58189e0cf1b693d197d7376bd9bab42c1d795f5b7b0369032e9f2634dec8c25aaf5dc8b9bc44762c9fb9eae4d9fad5bb94473a41f7830a73e0accf209632480a0e821155bcb51495b68e8567885c6a6b4409640c3601bec632dcde76ffaf6822f31d8d2c80842b2c62371afc44b635fd7905635e1ab97d63765672bf3eb3adc98919386d1b38f59486552e3a1d0f4250ff97099f3c3bbb6af042d7d06f66fbada8b29295d02a0788a21048d8d6e6f7d91c66272cc51fdfce9a7fe63e5639167b0e4980bc6bd26666ac2e2d7aab5d9f976b4ef3f8093156b28f8a06a927790b5ce8b84c7ded836ae4e58ad316ba06a00542c4ab58a3c7eaa766c7f7982d69c26ef3400419d49b0278b938a67cb8d1ffd8d4922cb0adabccb95985c38a5c70c430c5d8465533eb5f98209ce24610d83108a5073fc2bc2a893147fcaae07665c52c4dc99d2e344f1ea38f12f0f05ffd2efda0b38ce760d606594dc31de3b31d91dd8527a7e841915f75741ccb9bae32dcf1bf33db181851e4397369d88e2cd4ce490ecd78ad4cfec835e819509ed0c4e428474f4412c853bd18d0737dc834e75023988a0984ec91c44a45e0d13aa1317b1664d9454c9b22b19a2d49984beaff9145b6603d8d507da56f033eacc3d29f9f33e0f5c992095c84e889da1c4779c53d235986d14eb0139b8ac3b0768944ca653a227a59ff1fc17329b0cecb9db61be6908064d32e0ea11423604c72cf30ad0f4eb6d26331f0be6540cfea83d920af5a9f1b7a6188e3689a0726afc6bde303aadcf58ab5d763ef077ae97fc4d7ee24434c144afb51231ef592e3ad0f9f8da894777a737873d1f273595c374f63850c0b87153fc07d9ef4a79e30842ef69d6749af57e48222ecaa958d149b50aa64718d8b4e87ed975d8e7e83f25e4eb189028f6290480e70305771a8e1b73ae7d019cff3ab59a400c8dce973a656da06259e53942cfd963f85ab58f7262457d1ea09546f33f206c6d0c64e13d24846dc021ffc0b4b1abe5747cee11cc575feeb767f69294d1962e4cafff10b3eb7143a57bc163cbb63250d8a6c7e8bcc9a81e5ef3f780eedb510292927491639f9a7a283adf402f7a790994dee6faea3468ac90847281e97378ecf045624116ffc652e37bf47c5ed0e726bb9391a29922c58ed37ee6092944208a25bcdd3ed04bc957fdd8f2a8511bfa39e190dc55c5adb453d08501788b77f8c4d0ed36b2c9203b3083585e4df1941ef6e296aad0123f30f8b6662980e879d39b60d4b43b62af7e26182967a32938d4aa9c2e6c0c5809c3ec4164f2edd2c2e7643c04efa00bbd2a89ae4ff166fa7374005d6cf353637c4398d23b67cd8bbd3e5d8d1e520cd13f2c00504c6fa13a30e0b1e18b4ffc27daad772b1d0690ad8c4c70b551003c9361514cfb05ba8b078912c2a388717c27ebb804921a7dfaec7c5e7129f4eb6c46c9ed422176b56dde73301ab4bdbc17760d14491a115f3aa633435e117f35d72ed500a5d69a87a091360ca982b893faeec8c44dff474e3a04cbf5d237f54c3ded909b69db89d28820dee412763cff684bcd05a4b9ac41faaeae5eeb23f2d3126a8cdaa76ea189ece5a1ab17c0c74143a1715ddd3b78f25ff597bcad3d6c372d3b1eab0f28e113e8e993c759ca515c52c35efced185c6e38e7d8edf6dc8b778a4738f3bcc6dabc6a950a5a2483533a857370a362ea7f0862baf68b4def97e6d65bb65bbd7f56c65d4bd3ef6d18267733569649c2477"}, {0x4, 0x15, "68ad9638f220cb5b60754133fa53e735f762c6b9e58171fce5e87f4e530a1d91f40721fbbe1859c1a5e8743c0cac5e046cbef846dce8c370be2b6cda8acfeef9d1729aef93bfa6ae46b19d203ec5218c7caff81023e8ec3c81ddd3d2c823754594971d947d6501c69b9b0ab19f0372cce78ffee090785aefa5dd31ab15371d176b4eade52f7d6472ddf98ec617517b7e3ba0afdcd46c3297b3bd13363505e9e9b5d330858337"}, {0x0, 0x12, "fe55130ecce6830cf1ec05000ad7e8e1eea3d3d0a1ded06a7903cae8cb6eac60af4bf44e202df87a8e13d37fb8cc441c84337e28dcf2b01ca1603b5aeb126bb48bcf9f6d9fd6dd49a67f9159cbf122398e7bec71f7f5031dc61e9d2d4bc51fbaf1c4e4d7e53a684e6d5cb98e5f8f72b0a31e5f29ca2af5465dc774b82a0ce1e4feeff68a4a2268c43d58328352e6e55c644df8"}, {0x22, 0xe, "84267f7d99da0c1186725c6c3d97195f171ba8f9028c2de18cb3c24639fcbbecdc85844a5a4fa07e1cafdf1339e64ae8427bb97864ea856c3645c24d2f4c7c0711330f934838c963470f244501c2f614f3ed39294b865c952ffe22ca247790005c371c4a96cf82153e12de72107b5b3989779fa2"}]}}}}}}, 0x0) 1.868810822s ago: executing program 3 (id=4684): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0x25, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x81, @remote, 0x72ea}}, 0x0, 0x0, 0x4a, 0x0, "042f769c1583509786a1752ef58eefbbf87661ecaaf2bcc41cad50354af04429c8e421c366e225b6346991e3b85c4f4fea1cd596373d8cb077756e8516b1b8b4c7e698232f9b99fc3a902918d935a942"}, 0xd8) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000000300)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000680)={{{@in=@local, @in=@multicast2, 0x4e22, 0x8, 0x4e21, 0x9, 0x2, 0xa0, 0x20, 0x33, 0x0, r5}, {0x4, 0x56, 0x9, 0x101, 0x401, 0x721f, 0x9}, {0x100, 0x0, 0xc1, 0xd98}, 0x8, 0x6e6bb1, 0x1, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x4d6, 0x3c}, 0x3cccecaf81618f2a, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x3506, 0x2, 0x3, 0x9a, 0x5, 0x4, 0x27c}}, 0xe8) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000580), 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x2) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRESOCT=0x0, @ANYBLOB="3a000000a0010200140012800b0001006d616373656300000400028008000500", @ANYRESHEX=r0, @ANYBLOB="0a00e6ffaaaaaaaaaaaa00000a000200aa"], 0x54}}, 0x800) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000010000000000000000000008850000008700000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0xe, 0x0, &(0x7f00000000c0)="0ce34d61d19475fbfdaf7f406525", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000000c0)={r10, r0, 0x3ff, 0x1d, &(0x7f0000000040)="5f5e2a5551808aa374b6eb2f94b7a1d37079065b1d3edfdeeff1c2c028", 0x6, 0x40, 0x4, 0x4, 0x8, 0x1, 0xeac, 'syz1\x00'}) socket$inet(0x2, 0x2, 0x1000) 1.780987762s ago: executing program 3 (id=4686): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)=""/203, 0xcb}], 0x1}, 0x40012002) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8401000010"], 0x184}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r3, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$caif_seqpacket(0x25, 0x5, 0x2) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffff7fffffaaaaaaaaaabb86dd60122d9200103afffe8000000000000000000000000000bbff02000000000000000000000000000186009078010000000000000007000000"], 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="723d3082d7ba1e13668a2001000014002101000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000200ac141400"], 0x20}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}}, 0x18}}, 0x0) 1.734375161s ago: executing program 1 (id=4687): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) setsockopt$sock_int(r1, 0x28, 0x0, 0x0, 0x0) 1.715438385s ago: executing program 0 (id=4688): socket(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, 0x0, 0x0) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x4}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000800)=""/4096, &(0x7f0000000100)=0x1000) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050100000000008000000f00000008000300", @ANYRES32=0x0, @ANYBLOB='\ao@M'], 0x20}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r6) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x1, 0x0, 0x0, {{@in=@private=0xa000100, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2b}}}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) 1.586407931s ago: executing program 1 (id=4690): r0 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) (async) unshare(0x2c020400) clock_gettime(0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='cubic', 0x9) (async) socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000080)=[{r2, 0x692}, {r6, 0x5002}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f00000001c0), 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000200000000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) (async) r8 = socket$inet(0x2, 0x3, 0x6) (async) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000000000000000100", 0x58}], 0x1) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000580)={@private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x930311}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x3f}, @loopback, 0x6, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) (async) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000280), 0x8) 1.499662974s ago: executing program 3 (id=4692): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) 1.386174424s ago: executing program 1 (id=4694): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000012000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0x10}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000240)="63eced000000000a9f33c9f7b9e5", 0x0, 0xc698, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@o_path={0x0, 0x0, 0xc018}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000003ecf1e1826ee882c8928f6265d980b58831edb86ed07f220b6d65df92aa4fcc5d83c3e4d27937a9310000161c33d04e835bc1541e457c55eb8e9449a199169a14ad4098e2d2ebc2773b7ccabc2a3ba87d968c8a742eb80c13aa7c0a57dd2405311891d88396a869d08070dd4a289bd6e1f87b1394a03e4", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = socket$unix(0x1, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x118, 0x11, 0x148, 0x118, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x2, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000004000080270000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004044) syz_init_net_socket$rose(0xb, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@deltfilter={0x24, 0x2d, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xe}, {0xf, 0x2}, {0xffe0, 0xf}}}, 0x24}}, 0x4000) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x11e, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.339351114s ago: executing program 2 (id=4695): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @local}}, 0x2000, 0x0, 0x3f8, 0x0, 0x1, 0x7ff, 0xfd}, 0x9c) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3000000019000170c7ffffff001c140000fe03000100000000050012002900498eb9b3372d0000000000004000000000fab596a60d56c2cf11e1d7529d74c516f0ff01c426f0f742afbf69eb8b847c5297497cf9dc8a4d0c059b067bbe78745b22"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fcdbdf250100000008000100010000000800010000000000080002000200000008000200020000000800010000000000080002000200"], 0x64}, 0x1, 0x0, 0x0, 0x4000020}, 0x80) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x124, 0x18, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xe4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x14c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, 0x0, 0x0) (async) setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071112400000000008510000002000000850000000a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) r8 = accept4(r6, &(0x7f00000002c0)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000003c0)=0x80, 0x800) syz_genetlink_get_family_id$team(&(0x7f0000000100), r8) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r7, 0x0) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, 0x0, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r12, @ANYBLOB='\b\x00%'], 0x3c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 1.266366774s ago: executing program 3 (id=4696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x100000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000340)={r1, 0xffffffffffffffff, 0x7ff, 0x100}) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020026bd7000fbdbdf25020000004c00258005000100030000000500050006000000050001000900000006000200f40f00000600041003000000060004000180f60006000300000100000600030027ff000006000400020000006f5b22ec31d2e69f111dce96ac46dabd9890414566b816bb38910f660cb0c05261a7f289eb2693c9eef7e090e51a22b1af322803c8727ea29d8164e3b9413b58d697710af98f25f737850b9a84f1"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x800) close(r6) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x8, 0x8, 0x80, 0x19c0089f, {{0x18, 0x4, 0x0, 0x0, 0x60, 0x68, 0x0, 0x4, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x34, 0xee, 0x1, 0x7, [{@loopback, 0x7f1f096e}, {@local, 0x5}, {@local, 0x6}, {@loopback, 0x1}, {@multicast1, 0x2a45}, {@rand_addr=0x64010102, 0x6}]}, @rr={0x7, 0xf, 0xb8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @private=0xa010102]}, @generic={0x83, 0x8, "195d89975c8b"}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYRES16=r9, @ANYBLOB="1fd82abd7000000800040010ffffff08000100", @ANYRES32=r10, @ANYBLOB="0800020001000000002700e00000024dd69c500bf272866343f74fdc5f6bd8ef37d65d08a499295b79a302084f5d8fd4537f6690c1498600f862300000000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000811}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000580)={'vlan0\x00', @random="802b7c01943c"}) 1.266062708s ago: executing program 4 (id=4697): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'geneve1\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "9e10ca1c4bcb8d812a86f1aef52eba19719c78cfd7222b2639b90f7dc70f33eb", "9d51b95305302c62a6ebc6ceb3e740422abd24b41495e53e3b1cb422546c9a92", "5d766a42e23ee91a725598ba37e50e2670e5fd9cadaeccbd745b4a7c97d40b8f", "6a23d7463882fd0380ae3da81fc699f43ab8831af454930135ade949498e962c", "1519fc8065d640d2a08689c86d56f35fef67a66df1abfc781c3cf937784bcb5f", "d1e70cd786c3ea83209fec3b", 0x9, 0x6, 0x4, 0x2708}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x10000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 1.187488868s ago: executing program 4 (id=4698): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0x43, 0x22}, {0x20, 0x0, 0x3, 0x3}, {0x6, 0x0, 0xff, 0x2000003}]}, 0x10) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x1d, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="9dbaac999f69835fc48373a1ee57", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.158515618s ago: executing program 2 (id=4699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000000000000000000000800010054454500"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) 1.022360835s ago: executing program 1 (id=4700): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x7, 0x30}]}, &(0x7f0000000180)='syzkaller\x00', 0x6, 0x13, &(0x7f00000001c0)=""/221, 0x0, 0x20}, 0x94) 986.055634ms ago: executing program 0 (id=4701): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64=r2], &(0x7f0000000180)='syzkaller\x00', 0x480, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, &(0x7f00000000c0)="ff", 0x0}, 0x50) 936.345511ms ago: executing program 4 (id=4702): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x63}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00005100000071101a000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x8}, 0x94) 922.229738ms ago: executing program 2 (id=4703): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100006800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000240)="b8316b7f4ed0f075fe287b78d9eef9a8c1835f53d66eaa6de0f180abbbc62650000b20bf70ad13603a77f20f35906839bcdc88199149a45e6c5fadd808dd4056f8c48b69228a0190c9f2dec3380e9e8b9c037bc244ed5d2c988dfe907e606bf73301d13048e1df860c2a2461563c558601a7d4b3dea19c6aac850935af4854b65ce0bf8c89393f0c096de2c0b5fe84f1722831fbca130d6363d47ef624ffc3a7c48df4490254bfb11afe206e31d47ba2c3ee404a276c157d0948ba9e0ffae25290430a82ad03adfd46381efd8106dc5995a2a29b818557", &(0x7f0000000340)=""/236}, 0xfffffffffffffded) 870.768666ms ago: executing program 1 (id=4704): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x42804}, 0x24008004) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) (async) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x11e95000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[], &(0x7f0000000780)=""/241, 0x18, 0xf1, 0x2, 0x40}, 0x28) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[], &(0x7f0000000780)=""/241, 0x18, 0xf1, 0x2, 0x40}, 0x28) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001400)=ANY=[@ANYBLOB="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"]) (async) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000001400)=ANY=[@ANYBLOB="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"]) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x8, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}}}}}, 0x46) (async) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x8, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x2}]}}}}}}, 0x46) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x3, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) (async) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x40044}}], 0x1, 0x4) (async) sendmmsg$unix(r7, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}], 0x20, 0x40044}}], 0x1, 0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000f00)={0x0, 0x0, 0x0}, &(0x7f0000000f40)=0xc) r12 = socket$unix(0x1, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001080)={&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000900)="6fdd09aebf158d93147a75131d20df0400f017de4db048f7225fa1922be81107b6b45dde4740437943486e654b9e87432fe5a84dde88e0109a2b56fd800ae07ea040ea2357ed55416c1f46d10ed5d1e2037ffef0a3a40b1737c0fb7b3f4ddc7fe3027a561c9a695749ab1222e75f65ab20b1bef69c79784faec4e816732f9e04eaf4fa618546652158705bf607c0546f279f2cfe2f41ad6eee4a05d7230cc2785b61fca698c7bc3191f35060a86652f6b3ce663eea1ecb1b1ace1c99d9b78ed690a302d0bde8e3d6e4076c0ba14f205e1fe6ec3e7a1aa4b21de78817ad9aa15f", 0xe0}, {&(0x7f0000000a00)="7d7a9587efbf1efeabdcbc731c6172043a3236e40d98489612f49a357210febad682981a85437dea260922d1067300ca0da549b3385088a5a53290b6b548cef06fdfedabcbf19ce65eece2b2987bfc4f4af21184b316674442460d3c3162a62df3900f5e12a0e1ff1d377ef1f63e9f386b7e7047954ebf69988d7d09606d08914f7f8ab37bc9c08c63db769b7c0f3171d81d55e2e5cd4160134b450c6e1767b4d8", 0xa1}, {&(0x7f0000000ac0)="2840700b161de3f04619c22923a8e8ed2b0884ec74e46dea21831f29e2f9200a22fe684743a2c9d7ff3aef505afc066dd1a1f678da7f1eaf5df8764ec01961e3778ac2df93615046f0fbca0cfd38d29487bdbcb491fd7eb45bc1d84858bed4806867da17f2647db798162a054e2a3e0ea1d32320fcc26c9c5cc5c91a4c6e8fa7ea8c5ddc9e74c8263f7ee7a7bb241b7735a9360621812f038ab57bc31ee8dbae", 0xa0}, {&(0x7f0000000b80)="5f2e1cf24d53b978552912cd66018a2768a4eb2d511c33400c7e478d2d9d1b0b248604cd15fd8a6b11390f6f5e78fced0253ffed5f60d4484df8810b045b0fc4d287b86c82095085e6df00c882d6db6a53b84bed7e51316c0fb91860cf252e3ba6abb1d3893b53bfb49261f0823a53976d8c21fe61918604e58010fd2a5a4b4e56fa49b54feea08110cd86053742e3fae486907e49ba01b5466cf5655eb77cb4196039e5cad00eb76dea3a92b0913c73d852c3005531", 0xb6}, {&(0x7f0000000580)="92439df3edf819b3bb5152eddbfaedd7779a6b426eb26db13bfe27f512fa13d19e16e770a0942384c86314", 0x2b}, {&(0x7f00000006c0)="2b07056a3aabc2b9a8f7b555039fb7e381b865a408f15b3c1542a771a28d2270a2ba3d398d8dcc731fce0d", 0x2b}, {&(0x7f0000000c40)="a85f5bf5cfbf9abd252088d344605e4ab28f387a3eb52c9bc5e5b11e1820394025fc454294d22af5a1f5e6130c76d1f3d2619e55f242344454e4b46a05186f22cad841f5c6cdac947472c1c9409bfe86f9", 0x51}], 0x7, &(0x7f0000000f80)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="00000000dc1b0300000891f125009dc3c6601800", @ANYRES32=r12, @ANYRES32=r4, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0xa4, 0x800}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r14, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r15, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 869.32351ms ago: executing program 0 (id=4705): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r0, 0x8000000000000001, 0x88be, 0x5e1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="0375d284aaaaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b8100008500000043000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000d415bf48bf180bc19e1a724c743ff213432d2997c942c97f6c33db17c0a2a5c03e1c4a026df14c3b8686bffc3bd2497a6820a800b46d8b23f1f2763ca7eb53323eeff1a227579d029d635809000000b15f573ff5204c033b2f7d204f7ab713100902164896e88a3e743e6a0f76a093bf1fc0308798f2d1448b30386c0a5088443b910125017a03e4b24cf5b104ac22e5549496f85263852a128586473ed351954fe2cf3b", @ANYRES16=0x0, @ANYBLOB="22002cbd7000fbdbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004001) 809.159905ms ago: executing program 4 (id=4706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fbffffff0000000000000000850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x505, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x28b}]}}}]}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 749.767701ms ago: executing program 0 (id=4707): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001400030500008000ffdbdf25020751ff", @ANYRES32=r3, @ANYBLOB="080002007f00000108000400e09587a387d99a52be4a0a77e2a1b7f4af0dd048b00000021480030076657468305f746f5f627269646765008c203bbee23dec74c48fdc7a3151"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) 634.426242ms ago: executing program 2 (id=4708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x6e6bc0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0xfd, 0xb1, 0x3, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x8, 0x80, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000240)={'sit0\x00', r1, 0x20, 0x0, 0x8, 0x3, {{0xf, 0x4, 0x2, 0x6, 0x3c, 0x67, 0x0, 0x3, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@ssrr={0x89, 0x13, 0xc3, [@empty, @remote, @remote, @local]}, @generic={0x86, 0x2}, @generic={0x44, 0x10, "6d1cb0e6a97625de4d182210fb23"}]}}}}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 633.932546ms ago: executing program 1 (id=4709): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) socket(0x15, 0xa, 0xfffffc01) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x20004804) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x7, 0x4, 0x2400000, 0x4f9, 0x20}, 0x48) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000001380)={0x1, 0x0, 0x1000, 0xee, &(0x7f0000001480)="eecdafbd70b0d77d3b3617e611be4f4eb98f9257ec1c8380795e4d13af272deb8346a77931a9ef11f1a9c1af350652857a1637c4d1ec39c32de2552d455b232d633e616223834e7019f818c5a8b9b88a919a5a9ed9a26153de3db78c774f9011ab96d4aa8792a549395f21c7bbaab1c44757f85d21921efbc2e144dcea09f4f722fe5bab5f206378e51663b1a4fe57779824535d7e9376abbfff6347011a1e0667b561cffb6c90a480d3f11404214bda14afd5887e4a381148505b00538e411f091f78d7a4ea3d250238ec4250c73b2f06e520984d546baa2fc5c66dd0b327c8d88a45e5b24353cf57fd8bbfe469", 0x77, 0x0, &(0x7f00000012c0)="11ad8a92921801908fa70d6f928203370ec246f3df0cf1d079b0a8f45dc19354a90b07d6f7dc162dd8a205ec16327f8c77e61f886d9c332bbb019eb61182e0cd95f4047c29ea84bff3a08de41f82463727729bf9db0ee121c62d0c97e0849350c506837a9635f3fc421768b764fa7a060e0d7c4190994e"}) 567.629653ms ago: executing program 4 (id=4710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x9, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "df"}]}], {0x14}}, 0x70}}, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) (async) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000010006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36504001ac00800400004000500020000000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x58, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "96557917d5d82cebae9347436de1ace2fe62c079"}}, @TIPC_NLA_NODE_ID={0x4}]}]}, 0x58}}, 0x4004) (async) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x38, r8, 0x1, 0xffffffff, 0x0, {0x37}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000780)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd}, {0xfff1, 0xfff2}, {0x0, 0xe}}}, 0x24}}, 0x40000) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r12, 0x112, 0x4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/27, 0x1b}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) (async) accept$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) 545.312252ms ago: executing program 0 (id=4711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x10) (rerun: 64) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (rerun: 64) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x104, 0x10, 0x7, 0x20000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x2b}, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xfffffffffffffffd}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x7, 0x70}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) (async, rerun: 64) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 64) r5 = socket(0x10, 0x803, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0) (async) getsockname$packet(r5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, 0x2500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x5}, @IFLA_PHYS_PORT_ID={0x1f, 0x22, "6aee5773624bb1ead07d157140792b2478db094f312db47450b000"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) close(0x3) close(0xffffffffffffffff) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) (async) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) 290.380189ms ago: executing program 4 (id=4712): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x2, 0x1, 0x0, 0x13, 0x2, [{}]}, @var]}, {0x0, [0x1e, 0x61]}}, 0x0, 0x40}, 0x28) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) write$ppp(r2, &(0x7f0000001fc0)="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", 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x8100000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62c28}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x3}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="16a71e30", 0x4}], 0x1}}], 0x2, 0x20000000) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r6, @ANYRESHEX, @ANYRES32, @ANYBLOB="08e9abc9cd"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x2, 0x1, 0x0, 0x13, 0x2, [{}]}, @var]}, {0x0, [0x1e, 0x61]}}, 0x0, 0x40}, 0x28) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) (async) write$cgroup_int(r2, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) (async) write$ppp(r2, &(0x7f0000001fc0)="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", 0x1000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x801, 0xfffffffd, 0x8100000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x62c28}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x3}]}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0xa6, @loopback, 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="16a71e30", 0x4}], 0x1}}], 0x2, 0x20000000) (async) shutdown(r5, 0x1) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r6, @ANYRESHEX, @ANYRES32, @ANYBLOB="08e9abc9cd"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) 268.823404ms ago: executing program 2 (id=4713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) 36.220118ms ago: executing program 0 (id=4714): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32], 0x48) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000100)={0x0, 0x5}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160000030000000000000000fe880000000000000000000000000001000000000000000000000000000000010000000000000082000000003b"], 0xf8}}, 0x0) r1 = socket(0x23, 0x80805, 0x0) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000000)={'dummy0\x00', @ifru_mtu=0x80000001}) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000040)={'veth0_to_hsr\x00', @random="211900000600"}) r4 = socket$kcm(0x23, 0x3, 0x0) close(r4) 35.817022ms ago: executing program 3 (id=4715): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020500040e000000000000000000000005000600000000000a00000000000000ff01000000000000000000000000000100000000000200010000000000000000000100000005000500000000000a00000000000000fe80000000004000"/109], 0x70}, 0x1, 0x7}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r2, 0x89e2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000009b00000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x45) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) recvfrom(r4, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r7, 0x8912, &(0x7f0000000440)="e8783721672b8fce2379e631520ef3") ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 0s ago: executing program 2 (id=4716): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30d) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="fb66bb910793045698841c6295ae87dee5f174a79bec2c69a98eb6e6341cb3c1382bbc478ff21de243f31efbf32888303eeece8ace307f015f683861cfaf8d298a"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000040601040000000000000000070000050500010007000000050001000700000005000100070000000900020073797a32000000cb0900020073797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) socket$inet6_sctp(0xa, 0x1, 0x84) kernel console output (not intermixed with test programs): 0 bytes leftover after parsing attributes in process `syz.4.3365'. [ 534.126525][T19413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3367'. [ 534.183502][T19413] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.220916][T19415] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3368'. [ 534.271356][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3367'. [ 534.281439][T19413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3367'. [ 534.300745][T19429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3371'. [ 534.301190][T19424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.317263][T19424] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 534.328163][T19424] bond2: (slave sit1): Error -95 calling set_mac_address [ 534.353672][T19415] vxcan2: entered allmulticast mode [ 534.523150][T19436] xt_hashlimit: max too large, truncated to 1048576 [ 534.690204][T19446] tipc: Enabled bearer , priority 0 [ 534.702003][T19447] syzkaller0: entered allmulticast mode [ 534.709852][T19344] tipc: Node number set to 2886997007 [ 534.765672][T19447] tipc: Disabling bearer [ 534.971619][T19460] batadv_slave_1: entered promiscuous mode [ 535.247912][T19455] batadv_slave_1: left promiscuous mode [ 535.335702][T19482] validate_nla: 1 callbacks suppressed [ 535.335718][T19482] netlink: 'syz.4.3387': attribute type 1 has an invalid length. [ 535.571594][T19491] tipc: Enabled bearer , priority 0 [ 535.580933][T19492] syzkaller0: entered promiscuous mode [ 535.594568][T19492] syzkaller0: entered allmulticast mode [ 535.628356][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3389'. [ 535.741657][T19498] tipc: Resetting bearer [ 535.825256][T19498] tipc: Disabling bearer [ 535.886522][T19507] tipc: Started in network mode [ 535.901982][T19507] tipc: Node identity 02ae8f14c183, cluster identity 4711 [ 535.942314][T19507] tipc: Enabled bearer , priority 0 [ 535.963845][T19513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3395'. [ 535.993496][T19513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3395'. [ 536.003068][T19513] netlink: 'syz.4.3395': attribute type 4 has an invalid length. [ 536.023413][T19507] tipc: Disabling bearer [ 536.335316][T19523] veth1_macvtap: left promiscuous mode [ 536.355393][T19523] macsec0: entered promiscuous mode [ 536.385714][T19523] bridge: RTM_NEWNEIGH with invalid ether address [ 536.395278][T19523] veth1_macvtap: entered promiscuous mode [ 536.401404][T19523] macsec0: left promiscuous mode [ 537.178080][T19567] lo speed is unknown, defaulting to 1000 [ 537.194725][T19567] wg1 speed is unknown, defaulting to 1000 [ 537.202152][T19567] lo speed is unknown, defaulting to 1000 [ 537.264036][T19571] netlink: 'syz.0.3410': attribute type 10 has an invalid length. [ 537.349784][T19571] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.373546][T19571] bond0: (slave team0): Enslaving as an active interface with an up link [ 537.497643][T19591] lo: Caught tx_queue_len zero misconfig [ 537.839221][T19615] netlink: 'syz.0.3420': attribute type 3 has an invalid length. [ 537.897317][T19604] syzkaller1: entered promiscuous mode [ 537.902984][T19604] syzkaller1: entered allmulticast mode [ 537.983179][T19619] netlink: 'syz.0.3421': attribute type 29 has an invalid length. [ 537.993568][T19619] netlink: 'syz.0.3421': attribute type 29 has an invalid length. [ 538.999553][T19660] xt_TPROXY: Can be used only with -p tcp or -p udp [ 539.093145][T19664] netlink: 'syz.3.3435': attribute type 39 has an invalid length. [ 539.153877][T19662] netem: change failed [ 539.172341][T19669] __nla_validate_parse: 10 callbacks suppressed [ 539.172357][T19669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3437'. [ 539.188589][T19665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3435'. [ 539.188610][T19665] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3435'. [ 539.219296][T19669] ipvlan2: entered promiscuous mode [ 539.392418][T19680] syzkaller0: entered promiscuous mode [ 539.402162][T19680] syzkaller0: entered allmulticast mode [ 539.507233][T19688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3443'. [ 539.573464][T19685] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 539.797802][T19697] syzkaller0: entered promiscuous mode [ 539.803318][T19697] syzkaller0: entered allmulticast mode [ 539.953568][T19710] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3447'. [ 540.014951][T19718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3450'. [ 541.463375][T19708] tipc: Enabling of bearer rejected, failed to enable media [ 541.687672][T19745] bond3 (unregistering): Released all slaves [ 541.710535][T19753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3453'. [ 541.741571][T19750] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 541.748286][T19750] dvmrp1: linktype set to 270 [ 542.112740][T19771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3463'. [ 542.189773][T19769] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3461'. [ 542.209926][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3465'. [ 542.347212][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 542.566736][T19789] bond3: entered promiscuous mode [ 542.572284][T19789] 8021q: adding VLAN 0 to HW filter on device bond3 [ 542.704114][T19803] netlink: 'syz.1.3474': attribute type 4 has an invalid length. [ 542.829035][T19807] lo speed is unknown, defaulting to 1000 [ 542.855867][T19807] wg1 speed is unknown, defaulting to 1000 [ 542.926163][T19807] lo speed is unknown, defaulting to 1000 [ 543.355510][T19838] syzkaller0: entered promiscuous mode [ 543.361020][T19838] syzkaller0: entered allmulticast mode [ 543.434791][T19034] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.462964][T19034] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.494329][T19034] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.518680][T19034] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.557068][T19853] netlink: 'syz.0.3486': attribute type 1 has an invalid length. [ 543.654826][T19853] netlink: 'syz.0.3486': attribute type 4 has an invalid length. [ 543.859721][T19865] tipc: Enabled bearer , priority 0 [ 544.067164][T19878] lo speed is unknown, defaulting to 1000 [ 544.106827][T19878] wg1 speed is unknown, defaulting to 1000 [ 544.179728][T19878] lo speed is unknown, defaulting to 1000 [ 544.188364][T19864] tipc: Disabling bearer [ 544.430887][T19900] __nla_validate_parse: 9 callbacks suppressed [ 544.430904][T19900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3498'. [ 544.454966][T19900] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3498'. [ 544.466397][T19900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3498'. [ 544.475667][T19900] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3498'. [ 544.490229][T19906] tunl0: Caught tx_queue_len zero misconfig [ 544.513394][T19906] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 544.683215][T19919] veth1_macvtap: left promiscuous mode [ 544.689477][T19919] macsec0: entered allmulticast mode [ 544.795246][T19917] syzkaller1: entered promiscuous mode [ 544.800765][T19917] syzkaller1: entered allmulticast mode [ 544.826294][T19933] veth1_macvtap: entered promiscuous mode [ 544.874019][T19933] veth1_macvtap: entered allmulticast mode [ 544.914533][T19933] macsec0: left allmulticast mode [ 544.919610][T19933] veth1_macvtap: left allmulticast mode [ 545.971564][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3513'. [ 546.010711][T19967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3513'. [ 546.082116][T19945] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 546.198577][T19973] sctp: [Deprecated]: syz.4.3514 (pid 19973) Use of int in maxseg socket option. [ 546.198577][T19973] Use struct sctp_assoc_value instead [ 546.367672][T19981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3519'. [ 546.378096][T19981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3519'. [ 546.387350][T19981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3519'. [ 546.537766][T19984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.582728][T19984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.699514][T19984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.709943][T19984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.711266][T19995] netlink: 'syz.3.3524': attribute type 11 has an invalid length. [ 546.730709][T19995] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3524'. [ 546.776828][T19984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.787811][T19984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.910436][T19984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.922165][T19984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.933648][T20002] netlink: 'syz.3.3526': attribute type 5 has an invalid length. [ 546.947867][T20005] xt_hashlimit: overflow, try lower: 2341871806232657920/9 [ 547.038866][T20008] xt_TPROXY: Can be used only with -p tcp or -p udp [ 547.162745][T19032] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.204897][T19032] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.242188][T19032] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.251088][T19032] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.297748][T20022] batman_adv: batadv0: Adding interface: dummy0 [ 547.311908][T20022] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.373376][T20022] batman_adv: batadv0: Interface activated: dummy0 [ 547.398832][T19032] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.429711][T19032] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.478888][T20036] netlink: 'syz.4.3536': attribute type 13 has an invalid length. [ 547.492961][T20029] batadv0: mtu less than device minimum [ 547.502511][T20029] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.514737][T20029] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.526509][T20029] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.534622][T20040] syz.2.3538: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 547.538254][T20029] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.559690][T20040] CPU: 1 UID: 0 PID: 20040 Comm: syz.2.3538 Not tainted syzkaller #0 PREEMPT(full) [ 547.559715][T20040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.559726][T20040] Call Trace: [ 547.559733][T20040] [ 547.559741][T20040] dump_stack_lvl+0x189/0x250 [ 547.559768][T20040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 547.559786][T20040] ? __pfx__printk+0x10/0x10 [ 547.559807][T20040] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 547.559831][T20040] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 547.559856][T20040] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 547.559887][T20040] warn_alloc+0x214/0x310 [ 547.559909][T20040] ? stack_depot_save_flags+0x40/0x850 [ 547.559931][T20040] ? __pfx_warn_alloc+0x10/0x10 [ 547.559951][T20040] ? kasan_save_track+0x3e/0x80 [ 547.559970][T20040] ? __kasan_kmalloc+0x93/0xb0 [ 547.559990][T20040] ? xsk_setsockopt+0x4dc/0x8d0 [ 547.560007][T20040] ? do_sock_setsockopt+0x17c/0x1b0 [ 547.560026][T20040] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 547.560046][T20040] ? do_syscall_64+0xfa/0xf80 [ 547.560065][T20040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.560090][T20040] __vmalloc_node_range_noprof+0x125/0x12d0 [ 547.560139][T20040] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 547.560163][T20040] ? __kasan_kmalloc+0x93/0xb0 [ 547.560189][T20040] vmalloc_user_noprof+0xad/0xf0 [ 547.560209][T20040] ? xskq_create+0xbf/0x170 [ 547.560228][T20040] xskq_create+0xbf/0x170 [ 547.560248][T20040] xsk_init_queue+0xb0/0x110 [ 547.560268][T20040] xsk_setsockopt+0x4dc/0x8d0 [ 547.560288][T20040] ? __pfx_xsk_setsockopt+0x10/0x10 [ 547.560307][T20040] ? __pfx_aa_sk_perm+0x10/0x10 [ 547.560332][T20040] ? aa_sock_opt_perm+0xff/0x1a0 [ 547.560352][T20040] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 547.560372][T20040] ? __pfx_xsk_setsockopt+0x10/0x10 [ 547.560390][T20040] do_sock_setsockopt+0x17c/0x1b0 [ 547.560417][T20040] __x64_sys_setsockopt+0x13f/0x1b0 [ 547.560444][T20040] do_syscall_64+0xfa/0xf80 [ 547.560465][T20040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.560481][T20040] ? clear_bhb_loop+0x60/0xb0 [ 547.560501][T20040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.560516][T20040] RIP: 0033:0x7f366378f749 [ 547.560531][T20040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.560545][T20040] RSP: 002b:00007f36645df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 547.560567][T20040] RAX: ffffffffffffffda RBX: 00007f36639e5fa0 RCX: 00007f366378f749 [ 547.560579][T20040] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 547.560589][T20040] RBP: 00007f3663813f91 R08: 0000000000000004 R09: 0000000000000000 [ 547.560599][T20040] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.560608][T20040] R13: 00007f36639e6038 R14: 00007f36639e5fa0 R15: 00007ffc619a8be8 [ 547.560638][T20040] [ 547.560645][T20040] Mem-Info: [ 547.563344][T20029] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.583218][T20040] active_anon:4865 inactive_anon:0 isolated_anon:0 [ 547.583218][T20040] active_file:3081 inactive_file:40063 isolated_file:0 [ 547.583218][T20040] unevictable:768 dirty:98 writeback:0 [ 547.583218][T20040] slab_reclaimable:12911 slab_unreclaimable:122784 [ 547.583218][T20040] mapped:29182 shmem:1362 pagetables:1152 [ 547.583218][T20040] sec_pagetables:0 bounce:0 [ 547.583218][T20040] kernel_misc_reclaimable:0 [ 547.583218][T20040] free:1287512 free_pcp:23344 free_cma:0 [ 547.586103][T20029] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.588389][T20040] Node 0 active_anon:19460kB inactive_anon:0kB active_file:12324kB inactive_file:160048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116728kB dirty:392kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16632kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 547.594142][T20029] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.598160][T20040] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 547.603939][T20029] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 547.626452][T20040] Node 0 [ 547.689324][T19032] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.698117][T20040] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 547.708458][T19032] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.724688][T20040] lowmem_reserve[]: [ 547.925152][T20044] Cannot find add_set index 2 as target [ 547.930154][T20040] 0 2504 2504 2504 2504 [ 548.099160][T20040] Node 0 DMA32 free:1215936kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19324kB inactive_anon:0kB active_file:12324kB inactive_file:160048kB unevictable:1536kB writepending:392kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:70928kB local_pcp:38392kB free_cma:0kB [ 548.139189][T20040] lowmem_reserve[]: 0 0 0 0 0 [ 548.144053][T20040] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 548.196054][T20040] lowmem_reserve[]: 0 0 0 0 0 [ 548.208617][T20040] Node 1 Normal free:3896724kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13984kB local_pcp:5408kB free_cma:0kB [ 548.295265][T20040] lowmem_reserve[]: 0 0 0 0 0 [ 548.309284][T20040] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 548.341113][T20040] Node 0 DMA32: 1104*4kB (ME) 191*8kB (ME) 92*16kB (UME) 47*32kB (ME) 86*64kB (ME) 160*128kB (UM) 109*256kB (UME) 130*512kB (UME) 68*1024kB (UM) 13*2048kB (UM) 229*4096kB (UM) = 1163608kB [ 548.373086][T20040] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 548.385212][T20040] Node 1 Normal: 211*4kB (UME) 57*8kB (UME) 44*16kB (UME) 174*32kB (UME) 54*64kB (UME) 9*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 0*2048kB 947*4096kB (M) = 3896724kB [ 548.405302][T20040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 548.416519][T20040] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 548.428207][T20040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 548.438935][T20040] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 548.485307][T20040] 45952 total pagecache pages [ 548.490516][T20040] 0 pages in swap cache [ 548.495129][T20040] Free swap = 124996kB [ 548.500633][T20040] Total swap = 124996kB [ 548.506129][T20040] 2097051 pages RAM [ 548.509985][T20040] 0 pages HighMem/MovableOnly [ 548.517956][T20040] 424280 pages reserved [ 548.522117][T20040] 0 pages cma reserved [ 548.582784][T20047] vxcan3: entered allmulticast mode [ 548.792375][T19032] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.801530][T19032] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.812789][T20049] Cannot find set identified by id 0 to match [ 548.859033][T19032] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.890341][T19032] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 549.049159][T20092] netlink: 'syz.4.3552': attribute type 3 has an invalid length. [ 549.086058][T20092] netlink: 'syz.4.3552': attribute type 3 has an invalid length. [ 549.279899][T20101] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 549.336074][T20105] xt_connbytes: Forcing CT accounting to be enabled [ 549.493878][T20108] lo speed is unknown, defaulting to 1000 [ 549.523398][T20108] wg1 speed is unknown, defaulting to 1000 [ 549.532359][T20108] lo speed is unknown, defaulting to 1000 [ 550.448621][T20121] __nla_validate_parse: 12 callbacks suppressed [ 550.448642][T20121] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3558'. [ 550.784206][T20121] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3558'. [ 550.798262][T20136] netlink: 'syz.0.3560': attribute type 10 has an invalid length. [ 550.918296][T20136] team0: Port device netdevsim0 added [ 550.975784][T20139] xt_TPROXY: Can be used only with -p tcp or -p udp [ 550.990398][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 551.007581][T20141] bridge_slave_1: left allmulticast mode [ 551.016209][T20141] bridge_slave_1: left promiscuous mode [ 551.022059][T20141] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.034677][T20141] bridge_slave_0: left allmulticast mode [ 551.044826][T20141] bridge_slave_0: left promiscuous mode [ 551.056201][T20141] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.089185][T20117] delete_channel: no stack [ 551.220321][T20152] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 551.450199][T20159] smc: net device veth1_to_team applied user defined pnetid SYZ0 [ 551.487753][T20161] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.499982][T20161] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.615703][T20161] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.626127][T20161] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.721051][T20174] syzkaller1: entered promiscuous mode [ 551.730420][T20174] syzkaller1: entered allmulticast mode [ 551.816108][T20161] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.838092][T20161] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.934483][T20161] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 551.960416][T20161] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.129680][T20191] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 552.172705][T19032] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.189839][T19032] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.206634][T20187] net_ratelimit: 14 callbacks suppressed [ 552.206651][T20187] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 552.285872][T20199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3577'. [ 552.357486][T19030] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.370699][T19030] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.395273][T19030] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.413865][T20205] netlink: 'syz.0.3578': attribute type 1 has an invalid length. [ 552.415419][T20204] netlink: 'syz.3.3577': attribute type 30 has an invalid length. [ 552.431263][T19030] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.516904][T20211] bond3: (slave bridge3): making interface the new active one [ 552.525633][T20211] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 552.534598][T19010] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 552.542818][T19010] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.601455][T20213] netlink: 'syz.4.3580': attribute type 6 has an invalid length. [ 552.997493][T20230] lo speed is unknown, defaulting to 1000 [ 553.006474][T20230] wg1 speed is unknown, defaulting to 1000 [ 553.020098][T20230] lo speed is unknown, defaulting to 1000 [ 553.055439][T20236] lo speed is unknown, defaulting to 1000 [ 553.083241][T20236] wg1 speed is unknown, defaulting to 1000 [ 553.128383][T20236] lo speed is unknown, defaulting to 1000 [ 553.392990][T20230] lo speed is unknown, defaulting to 1000 [ 553.400717][T20230] wg1 speed is unknown, defaulting to 1000 [ 553.408615][T20230] lo speed is unknown, defaulting to 1000 [ 553.509949][T20247] netlink: 'syz.4.3587': attribute type 96 has an invalid length. [ 553.703181][T20252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3588'. [ 553.761175][T20255] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3588'. [ 553.888866][T20259] lo speed is unknown, defaulting to 1000 [ 553.913148][T20259] wg1 speed is unknown, defaulting to 1000 [ 553.931393][T20259] lo speed is unknown, defaulting to 1000 [ 554.125743][T20260] IPVS: set_ctl: invalid protocol: 4 172.20.20.27:20004 [ 554.180280][T20274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3595'. [ 554.248030][T20276] lo speed is unknown, defaulting to 1000 [ 554.282550][T20276] wg1 speed is unknown, defaulting to 1000 [ 554.300628][T20276] lo speed is unknown, defaulting to 1000 [ 554.595717][T20291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3599'. [ 554.778244][T20299] lo speed is unknown, defaulting to 1000 [ 554.791862][T20299] wg1 speed is unknown, defaulting to 1000 [ 554.953210][T20299] lo speed is unknown, defaulting to 1000 [ 555.068970][T20319] tipc: Can't bind to reserved service type 2 [ 555.518176][T20335] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 555.709427][T20343] netlink: 'syz.3.3611': attribute type 2 has an invalid length. [ 555.726090][T20343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3611'. [ 555.756993][T20343] lo speed is unknown, defaulting to 1000 [ 555.765403][T20343] wg1 speed is unknown, defaulting to 1000 [ 555.798340][T20343] lo speed is unknown, defaulting to 1000 [ 556.350585][T20383] xt_TCPMSS: Only works on TCP SYN packets [ 556.544918][T20394] macvtap1: entered allmulticast mode [ 556.566702][T20394] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 556.594598][T20394] mac80211_hwsim hwsim45 wlan0: left allmulticast mode [ 556.639127][T20401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.647997][T20401] batadv_slave_0: entered promiscuous mode [ 556.687971][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3629'. [ 556.897772][T20415] netlink: 'syz.1.3635': attribute type 21 has an invalid length. [ 556.907766][T20415] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3635'. [ 556.925532][T20415] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3635'. [ 556.930312][T20408] netlink: 'syz.2.3633': attribute type 22 has an invalid length. [ 556.974272][T20408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3633'. [ 557.020933][T20416] netlink: 'syz.2.3633': attribute type 22 has an invalid length. [ 557.059197][T20416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3633'. [ 557.072634][T20415] lo speed is unknown, defaulting to 1000 [ 557.080221][T20415] wg1 speed is unknown, defaulting to 1000 [ 557.089948][T20415] lo speed is unknown, defaulting to 1000 [ 557.183254][T20423] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 557.193686][T20423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3637'. [ 557.558863][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3643'. [ 557.595938][T20443] xt_l2tp: unknown flags: 51 [ 557.646469][T20448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3643'. [ 557.704149][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 558.050057][T20477] veth1_macvtap: left promiscuous mode [ 558.058161][T20477] macsec0: entered promiscuous mode [ 558.076905][T20477] veth1_macvtap: entered promiscuous mode [ 558.100161][T20477] macsec0: left promiscuous mode [ 558.116291][T20482] netlink: 'syz.0.3652': attribute type 1 has an invalid length. [ 558.148543][T20482] netlink: 'syz.0.3652': attribute type 2 has an invalid length. [ 558.173681][T20483] netlink: 'syz.0.3652': attribute type 1 has an invalid length. [ 558.197318][T20483] netlink: 'syz.0.3652': attribute type 2 has an invalid length. [ 558.207908][T20485] batadv_slave_0: entered promiscuous mode [ 558.235711][T20492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 558.239712][T20482] delete_channel: no stack [ 558.263280][T20485] batadv_slave_0: left promiscuous mode [ 558.778450][T20515] syz.1.3662: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 558.854058][T20515] CPU: 0 UID: 0 PID: 20515 Comm: syz.1.3662 Not tainted syzkaller #0 PREEMPT(full) [ 558.854085][T20515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 558.854095][T20515] Call Trace: [ 558.854102][T20515] [ 558.854110][T20515] dump_stack_lvl+0x189/0x250 [ 558.854157][T20515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.854174][T20515] ? __pfx__printk+0x10/0x10 [ 558.854195][T20515] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 558.854217][T20515] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 558.854242][T20515] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 558.854268][T20515] warn_alloc+0x214/0x310 [ 558.854300][T20515] ? __pfx_warn_alloc+0x10/0x10 [ 558.854331][T20515] ? __get_vm_area_node+0x28f/0x300 [ 558.854351][T20515] ? hash_net_create+0x358/0xfe0 [ 558.854370][T20515] __vmalloc_node_range_noprof+0x690/0x12d0 [ 558.854391][T20515] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 558.854441][T20515] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 558.854463][T20515] ? hash_net_create+0x358/0xfe0 [ 558.854480][T20515] ? rcu_is_watching+0x15/0xb0 [ 558.854499][T20515] ? hash_net_create+0x358/0xfe0 [ 558.854517][T20515] __kvmalloc_node_noprof+0x670/0x910 [ 558.854537][T20515] ? hash_net_create+0x358/0xfe0 [ 558.854553][T20515] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 558.854573][T20515] ? hash_net_create+0x2fe/0xfe0 [ 558.854596][T20515] hash_net_create+0x358/0xfe0 [ 558.854621][T20515] ? __nla_parse+0x40/0x60 [ 558.854643][T20515] ? __pfx_hash_net_create+0x10/0x10 [ 558.854662][T20515] ip_set_create+0xa97/0x1940 [ 558.854683][T20515] ? ip_set_create+0x4a2/0x1940 [ 558.854717][T20515] ? __pfx_ip_set_create+0x10/0x10 [ 558.854773][T20515] nfnetlink_rcv_msg+0xb4d/0x1130 [ 558.854795][T20515] ? unwind_get_return_address+0x4d/0x90 [ 558.854813][T20515] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 558.854835][T20515] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 558.854876][T20515] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 558.854946][T20515] netlink_rcv_skb+0x208/0x470 [ 558.854964][T20515] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 558.854986][T20515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.855011][T20515] ? bpf_lsm_capable+0x9/0x20 [ 558.855026][T20515] ? security_capable+0x7e/0x2e0 [ 558.855055][T20515] nfnetlink_rcv+0x282/0x2590 [ 558.855079][T20515] ? __local_bh_enable_ip+0x12d/0x1c0 [ 558.855095][T20515] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 558.855118][T20515] ? __dev_queue_xmit+0x289/0x3140 [ 558.855135][T20515] ? __dev_queue_xmit+0x289/0x3140 [ 558.855153][T20515] ? __dev_queue_xmit+0x1955/0x3140 [ 558.855169][T20515] ? do_syscall_64+0xfa/0xf80 [ 558.855196][T20515] ? __dev_queue_xmit+0x289/0x3140 [ 558.855219][T20515] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 558.855249][T20515] ? __pfx___dev_queue_xmit+0x10/0x10 [ 558.855275][T20515] ? ref_tracker_free+0x63a/0x7d0 [ 558.855295][T20515] ? __asan_memcpy+0x40/0x70 [ 558.855314][T20515] ? __pfx_ref_tracker_free+0x10/0x10 [ 558.855351][T20515] ? skb_clone+0x246/0x3a0 [ 558.855371][T20515] ? __netlink_deliver_tap+0x807/0x850 [ 558.855387][T20515] ? netlink_deliver_tap+0x2e/0x1b0 [ 558.855411][T20515] ? netlink_deliver_tap+0x2e/0x1b0 [ 558.855442][T20515] netlink_unicast+0x82f/0x9e0 [ 558.855475][T20515] ? __pfx_netlink_unicast+0x10/0x10 [ 558.855500][T20515] ? netlink_sendmsg+0x642/0xb30 [ 558.855515][T20515] ? skb_put+0x11b/0x210 [ 558.855540][T20515] netlink_sendmsg+0x805/0xb30 [ 558.855568][T20515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.855588][T20515] ? aa_sock_msg_perm+0xf1/0x1b0 [ 558.855605][T20515] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 558.855625][T20515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.855643][T20515] __sock_sendmsg+0x21c/0x270 [ 558.855666][T20515] ____sys_sendmsg+0x505/0x820 [ 558.855696][T20515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.855729][T20515] ? import_iovec+0x74/0xa0 [ 558.855755][T20515] ___sys_sendmsg+0x21f/0x2a0 [ 558.855781][T20515] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.855812][T20515] ? futex_wait+0x285/0x360 [ 558.855860][T20515] ? __fget_files+0x2a/0x420 [ 558.855874][T20515] ? __fget_files+0x3a0/0x420 [ 558.855900][T20515] __x64_sys_sendmsg+0x19b/0x260 [ 558.855927][T20515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 558.855968][T20515] ? do_syscall_64+0xbe/0xf80 [ 558.855992][T20515] do_syscall_64+0xfa/0xf80 [ 558.856013][T20515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.856030][T20515] ? clear_bhb_loop+0x60/0xb0 [ 558.856052][T20515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.856068][T20515] RIP: 0033:0x7fe59018f749 [ 558.856084][T20515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.856099][T20515] RSP: 002b:00007fe5910b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.856117][T20515] RAX: ffffffffffffffda RBX: 00007fe5903e6090 RCX: 00007fe59018f749 [ 558.856130][T20515] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 558.856140][T20515] RBP: 00007fe590213f91 R08: 0000000000000000 R09: 0000000000000000 [ 558.856151][T20515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.856161][T20515] R13: 00007fe5903e6128 R14: 00007fe5903e6090 R15: 00007fffa67b7218 [ 558.856192][T20515] [ 558.858572][T20515] Mem-Info: [ 559.382076][T20515] active_anon:6167 inactive_anon:0 isolated_anon:0 [ 559.382076][T20515] active_file:3081 inactive_file:40067 isolated_file:0 [ 559.382076][T20515] unevictable:768 dirty:121 writeback:0 [ 559.382076][T20515] slab_reclaimable:13145 slab_unreclaimable:150478 [ 559.382076][T20515] mapped:29213 shmem:2637 pagetables:1261 [ 559.382076][T20515] sec_pagetables:0 bounce:0 [ 559.382076][T20515] kernel_misc_reclaimable:0 [ 559.382076][T20515] free:1262294 free_pcp:18581 free_cma:0 [ 559.439445][T20515] Node 0 active_anon:25468kB inactive_anon:0kB active_file:12324kB inactive_file:160064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120852kB dirty:484kB writeback:0kB shmem:9712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16608kB pagetables:4896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 559.473236][T20515] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 559.523602][T20515] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 559.568084][T20515] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 559.611126][T20515] Node 0 DMA32 free:1136700kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28568kB inactive_anon:0kB active_file:12324kB inactive_file:160064kB unevictable:1536kB writepending:484kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:59236kB local_pcp:32320kB free_cma:0kB [ 559.672837][T20515] lowmem_reserve[]: 0 0 0 0 0 [ 559.756017][T20515] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 559.833982][T20515] lowmem_reserve[]: 0 0 0 0 0 [ 559.838761][T20515] Node 1 Normal free:3896724kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13984kB local_pcp:8576kB free_cma:0kB [ 559.881489][T20564] netlink: 'syz.4.3673': attribute type 32 has an invalid length. [ 559.899175][T20564] bond0: option arp_all_targets: invalid value (64) [ 559.911851][T20515] lowmem_reserve[]: 0 0 0 0 0 [ 559.919296][T19026] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 559.941209][T20515] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 559.972969][T20515] Node 0 DMA32: 662*4kB (UME) 990*8kB (UME) 479*16kB (UM) 226*32kB (UME) 172*64kB (UM) 176*128kB (UM) 155*256kB (UME) 137*512kB (UM) 72*1024kB (UM) 5*2048kB (M) 214*4096kB (UM) = 1129336kB [ 559.992607][T20515] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 560.004932][T20515] Node 1 Normal: 211*4kB (UME) 57*8kB (UME) 44*16kB (UME) 174*32kB (UME) 54*64kB (UME) 9*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 0*2048kB 947*4096kB (M) = 3896724kB [ 560.023658][T20515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.036755][T20515] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.046461][T20515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 560.061111][T20515] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 560.071933][T20515] 45367 total pagecache pages [ 560.077036][T20515] 0 pages in swap cache [ 560.081249][T20515] Free swap = 124996kB [ 560.085550][T20515] Total swap = 124996kB [ 560.089754][T20515] 2097051 pages RAM [ 560.093612][T20515] 0 pages HighMem/MovableOnly [ 560.105148][T20515] 424280 pages reserved [ 560.109432][T20515] 0 pages cma reserved [ 560.145792][T20572] veth0_macvtap: left promiscuous mode [ 560.209462][T20573] delete_channel: no stack [ 560.215329][T20573] delete_channel: no stack [ 560.285721][T20583] netlink: 'syz.1.3676': attribute type 4 has an invalid length. [ 560.927848][T20613] __nla_validate_parse: 10 callbacks suppressed [ 560.927866][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3689'. [ 560.975050][T20616] Cannot find del_set index 2 as target [ 560.992037][T20616] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3688'. [ 561.443679][T20639] IPVS: Scheduler module ip_vs_ not found [ 561.586906][T20645] validate_nla: 2 callbacks suppressed [ 561.586925][T20645] netlink: 'syz.1.3698': attribute type 1 has an invalid length. [ 561.627790][T20645] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3698'. [ 561.712840][T20645] vxcan2: entered allmulticast mode [ 561.914828][T20673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3702'. [ 561.923821][T20673] tc_dump_action: action bad kind [ 562.074262][T20676] lo speed is unknown, defaulting to 1000 [ 562.121439][T20676] wg1 speed is unknown, defaulting to 1000 [ 562.175771][T20676] lo speed is unknown, defaulting to 1000 [ 562.828535][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 562.839083][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.860632][T20692] netlink: 'syz.2.3709': attribute type 12 has an invalid length. [ 562.976187][T20699] x_tables: duplicate underflow at hook 2 [ 562.991579][T20700] x_tables: duplicate underflow at hook 1 [ 562.998717][T20699] x_tables: duplicate underflow at hook 2 [ 563.031554][T20695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.093472][T20695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.116455][T20695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 563.152121][T20710] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3715'. [ 563.309571][T20695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.353877][T20695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.371041][T20695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 563.438268][T20716] netlink: 'syz.1.3716': attribute type 1 has an invalid length. [ 563.717417][T20695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.739630][T20695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.807717][T20695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 563.931086][T20728] team_slave_0: entered promiscuous mode [ 563.936861][T20728] team_slave_1: entered promiscuous mode [ 563.976929][T20728] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 564.052528][T20742] x_tables: duplicate underflow at hook 1 [ 564.067126][T20695] team0: Port device netdevsim0 removed [ 564.196662][T20695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.244570][T20695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.274803][T20695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 564.356540][T20748] syzkaller1: entered promiscuous mode [ 564.362057][T20748] syzkaller1: entered allmulticast mode [ 564.588434][T20754] netlink: 'syz.1.3726': attribute type 21 has an invalid length. [ 564.596571][T20754] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3726'. [ 564.717150][T20755] bond4: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 564.754807][T20754] netlink: 'syz.1.3726': attribute type 4 has an invalid length. [ 564.762578][T20754] netlink: 'syz.1.3726': attribute type 5 has an invalid length. [ 564.827102][T20754] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3726'. [ 564.993172][T20767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3730'. [ 565.030983][T20766] geneve2: entered promiscuous mode [ 565.040117][T19010] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.056991][T19010] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 565.098862][T19010] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 565.152776][T19012] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.171402][T19012] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 565.237194][T19012] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 565.293437][T19012] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.316180][T19012] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 565.316814][T20786] IPVS: length: 35 != 26904 [ 565.344096][T19012] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 565.414871][T19012] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.459808][T19012] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 565.489868][T19012] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 565.596670][T20784] lo speed is unknown, defaulting to 1000 [ 565.610590][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3737'. [ 565.624543][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3737'. [ 565.635029][T20784] wg1 speed is unknown, defaulting to 1000 [ 565.646123][T20784] lo speed is unknown, defaulting to 1000 [ 565.894961][T20815] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 566.126870][T20826] __nla_validate_parse: 1 callbacks suppressed [ 566.126886][T20826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3745'. [ 566.149272][T20825] syzkaller0: entered promiscuous mode [ 566.158380][T20825] syzkaller0: entered allmulticast mode [ 566.525546][T20844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3749'. [ 566.678558][T20852] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3750'. [ 566.710244][T20852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3750'. [ 566.818072][T20866] tap0: tun_chr_ioctl cmd 1074025676 [ 566.823441][T20866] tap0: owner set to 0 [ 566.837508][T20865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 566.996781][T20873] xt_TCPMSS: Only works on TCP SYN packets [ 567.123067][T20879] netlink: 1244 bytes leftover after parsing attributes in process `syz.1.3760'. [ 567.154587][T20879] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3760'. [ 567.426041][T20905] netlink: 'syz.2.3766': attribute type 21 has an invalid length. [ 567.437086][T20905] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3766'. [ 567.450478][T20899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3764'. [ 567.480059][T20899] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.488955][T20905] netlink: 'syz.2.3766': attribute type 5 has an invalid length. [ 567.497513][T20905] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3766'. [ 567.656288][T20919] netlink: 'syz.2.3770': attribute type 13 has an invalid length. [ 567.775862][T20919] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.783676][T20919] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.812698][T20919] team_slave_0: left promiscuous mode [ 567.818711][T20919] team_slave_1: left promiscuous mode [ 567.905918][T20919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.921419][T20919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.058398][T19010] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.088296][T19010] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.098860][T19010] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.111924][T19010] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.122840][T19010] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.136437][T19010] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.145806][T19010] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.154318][T19010] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.247097][T20939] tipc: Enabled bearer , priority 0 [ 568.256765][T20939] syzkaller0: entered promiscuous mode [ 568.264842][T20939] syzkaller0: entered allmulticast mode [ 568.318148][T20939] tipc: Resetting bearer [ 568.347695][T20938] tipc: Resetting bearer [ 568.393308][T20938] tipc: Disabling bearer [ 568.693424][T20964] bond0: Caught tx_queue_len zero misconfig [ 568.919027][T20978] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 569.119191][T20981] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.313289][T20996] --map-set only usable from mangle table [ 570.047724][T20981] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.265187][T20981] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.296414][T21016] Cannot find set identified by id 0 to match [ 570.312350][T21039] xt_cgroup: invalid path, errno=-2 [ 570.489439][T20981] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.731704][T21060] vlan2: entered promiscuous mode [ 570.737194][T21060] hsr_slave_1: entered promiscuous mode [ 570.751449][T21060] vlan2: entered allmulticast mode [ 570.757103][T21060] hsr_slave_1: entered allmulticast mode [ 570.763566][T19016] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.780826][T19016] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.802311][T19016] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.829116][T19033] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.346542][T21069] netlink: 'syz.2.3817': attribute type 1 has an invalid length. [ 571.393603][T21069] __nla_validate_parse: 9 callbacks suppressed [ 571.393622][T21069] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3817'. [ 571.428327][T21073] workqueue: name exceeds WQ_NAME_LEN. Truncating to: .¿šØ ÕáÊÎí ÿìà´*žËî]æÌÔáÿÿÿÿÁ [ 571.665386][T21086] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 572.312049][T21104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3828'. [ 572.331439][T21104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3828'. [ 572.372059][T21104] netlink: 'syz.1.3828': attribute type 10 has an invalid length. [ 572.384386][T21105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3827'. [ 573.379120][T21163] IPVS: length: 56 != 24600 [ 573.430636][T21164] lo speed is unknown, defaulting to 1000 [ 573.456437][T21164] wg1 speed is unknown, defaulting to 1000 [ 573.476955][T21164] lo speed is unknown, defaulting to 1000 [ 573.779019][T21175] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3847'. [ 573.835823][T21174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3846'. [ 573.864565][T21174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3846'. [ 573.876157][T21174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.271686][T21186] lo speed is unknown, defaulting to 1000 [ 574.310305][T21186] wg1 speed is unknown, defaulting to 1000 [ 574.337495][T21186] lo speed is unknown, defaulting to 1000 [ 574.374988][ T30] audit: type=1804 audit(1765004870.506:11): pid=21193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3852" name="/newroot/154/cgroup.controllers" dev="tmpfs" ino=805 res=1 errno=0 [ 574.454391][ T30] audit: type=1800 audit(1765004870.516:12): pid=21193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3852" name="cgroup.controllers" dev="tmpfs" ino=805 res=0 errno=0 [ 574.524306][ T30] audit: type=1800 audit(1765004870.546:13): pid=21195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3852" name="cgroup.controllers" dev="tmpfs" ino=805 res=0 errno=0 [ 574.977605][T21225] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3862'. [ 575.156194][T21235] rdma_rxe: rxe_newlink: failed to add bond0 [ 575.165174][T21235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3865'. [ 575.257130][T21238] syzkaller0: entered promiscuous mode [ 575.283288][T21238] syzkaller0: entered allmulticast mode [ 575.298045][T21237] tipc: Enabled bearer , priority 0 [ 575.307590][T21241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3867'. [ 575.422424][T21237] tipc: Resetting bearer [ 575.457122][T21237] tipc: Disabling bearer [ 576.099560][T21266] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 576.115633][T21265] netlink: 'syz.0.3875': attribute type 12 has an invalid length. [ 576.123487][T21265] netlink: 'syz.0.3875': attribute type 11 has an invalid length. [ 577.034485][T21302] __nla_validate_parse: 10 callbacks suppressed [ 577.034504][T21302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3883'. [ 577.152692][T21304] netlink: 'syz.0.3884': attribute type 10 has an invalid length. [ 577.163625][T21309] netlink: 'syz.4.3886': attribute type 1 has an invalid length. [ 577.175821][T21310] netlink: 'syz.4.3886': attribute type 1 has an invalid length. [ 577.541211][T21321] bond4: ARP target 9.0.0.0 is already present [ 577.549727][T21321] bond4: option arp_ip_target: invalid value (9) [ 577.577412][T21321] bond4 (unregistering): Released all slaves [ 577.979244][T21336] lo speed is unknown, defaulting to 1000 [ 578.001737][T21339] Cannot find del_set index 1 as target [ 578.011756][T21336] wg1 speed is unknown, defaulting to 1000 [ 578.020279][T21336] lo speed is unknown, defaulting to 1000 [ 578.651766][T21364] lo speed is unknown, defaulting to 1000 [ 578.707095][T21364] wg1 speed is unknown, defaulting to 1000 [ 578.725141][T21364] lo speed is unknown, defaulting to 1000 [ 579.276052][T21385] 8021q: VLANs not supported on vcan0 [ 579.317583][T21387] lo speed is unknown, defaulting to 1000 [ 579.398564][T21387] wg1 speed is unknown, defaulting to 1000 [ 579.532092][T21387] lo speed is unknown, defaulting to 1000 [ 579.681216][T21392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3906'. [ 579.787120][T21395] tipc: Enabling of bearer rejected, failed to enable media [ 580.051793][T21407] batman_adv: batadv0: Interface deactivated: dummy0 [ 580.060118][T21407] batman_adv: batadv0: Removing interface: dummy0 [ 580.100311][T21407] bond0: (slave bond_slave_0): Releasing backup interface [ 580.140772][T21407] bond0: (slave bond_slave_1): Releasing backup interface [ 580.176909][T21407] team0: Port device team_slave_0 removed [ 580.211953][T21407] team0: Port device team_slave_1 removed [ 580.226250][T21407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.233836][T21407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.245996][T21407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.253541][T21407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.270622][T21407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 580.437357][T21431] ip6t_REJECT: ECHOREPLY is not supported [ 580.457690][T21434] lo speed is unknown, defaulting to 1000 [ 580.500935][T21434] wg1 speed is unknown, defaulting to 1000 [ 580.528900][T21434] lo speed is unknown, defaulting to 1000 [ 580.574638][T21448] netlink: 'syz.3.3917': attribute type 33 has an invalid length. [ 580.592723][T21448] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3917'. [ 580.678554][T21435] lo speed is unknown, defaulting to 1000 [ 580.722226][T21435] wg1 speed is unknown, defaulting to 1000 [ 580.742720][T21435] lo speed is unknown, defaulting to 1000 [ 580.909832][T21465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3924'. [ 580.914706][T21464] netlink: 'syz.0.3920': attribute type 13 has an invalid length. [ 580.927713][T21453] bond4: option arp_validate: invalid value (18446744073491447809) [ 580.940621][T21453] bond4 (unregistering): Released all slaves [ 580.997882][T21465] chnl_net:caif_netlink_parms(): no params data found [ 581.057104][T21469] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3925'. [ 581.372535][T21490] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3931'. [ 581.512522][T21464] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.520021][T21464] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.850890][T21464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.880938][T21464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.271158][T19344] lo speed is unknown, defaulting to 1000 [ 582.271163][T21488] tipc: Enabled bearer , priority 0 [ 582.285782][T19344] syz1: Port: 1 Link DOWN [ 582.350282][T21495] syzkaller0: entered promiscuous mode [ 582.368023][T21495] syzkaller0: entered allmulticast mode [ 582.403265][T21504] tipc: Resetting bearer [ 582.494253][T21513] netlink: 'syz.3.3934': attribute type 1 has an invalid length. [ 582.516945][T21518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3933'. [ 582.526993][T21518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3933'. [ 582.536501][T19034] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.554553][T19034] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 582.572059][T19034] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 582.601096][T21504] tipc: Resetting bearer [ 582.671259][T21527] openvswitch: netlink: IP tunnel dst address not specified [ 582.675124][T21504] tipc: Disabling bearer [ 582.685496][T21528] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3938'. [ 582.710488][T19055] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.719753][T19055] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 582.745477][T19055] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 582.773866][T19055] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.782925][T19055] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 582.802691][T19055] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 582.812738][T19055] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.821731][T19055] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 582.831630][T19055] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 582.862785][T21529] syzkaller1: entered promiscuous mode [ 582.885134][T21529] syzkaller1: entered allmulticast mode [ 582.903760][T21528] tipc: Enabled bearer , priority 0 [ 582.934713][T21535] syzkaller0: entered promiscuous mode [ 582.937513][T21542] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3943'. [ 582.961941][T21535] syzkaller0: entered allmulticast mode [ 582.976634][T21530] af_packet: tpacket_rcv: packet too big, clamped from 3960 to 3942. macoff=106 [ 582.987921][T21545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3942'. [ 583.010375][T21526] tipc: Resetting bearer [ 583.045310][T21526] tipc: Disabling bearer [ 583.153243][T21544] syzkaller0: entered promiscuous mode [ 583.165417][T21544] syzkaller0: entered allmulticast mode [ 583.444070][T19009] bridge_slave_0: left allmulticast mode [ 583.454304][T19009] bridge_slave_0: left promiscuous mode [ 583.461709][T19009] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.590019][T21569] netlink: 'syz.3.3949': attribute type 1 has an invalid length. [ 583.718149][T19009] bond9 (unregistering): (slave ip6gretap1): Releasing active interface [ 583.726678][T19009] bond9 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ce:4e:a2:74:d0:1e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 583.896424][T19009] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 583.932929][T19009] bond6 (unregistering): (slave gre1): Releasing backup interface [ 583.942853][T19009] gre1 (unregistering): left promiscuous mode [ 584.361425][T19009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.373152][T19009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.394108][T19009] bond0 (unregistering): (slave `): Releasing backup interface [ 584.406031][T19009] bond0 (unregistering): Released all slaves [ 584.542561][T19009] bond1 (unregistering): Released all slaves [ 584.561344][T19009] bond2 (unregistering): Released all slaves [ 584.689041][T19009] bond3 (unregistering): Released all slaves [ 584.792661][T19009] bond4 (unregistering): (slave bond5): Releasing backup interface [ 584.801119][T19009] bond5 (unregistering): left promiscuous mode [ 584.808622][T19009] bond4 (unregistering): Released all slaves [ 584.915416][T19009] bond5 (unregistering): Released all slaves [ 585.011032][T19009] bond6 (unregistering): Released all slaves [ 585.107876][T19009] bond7 (unregistering): Released all slaves [ 585.120732][T19009] bond8 (unregistering): Released all slaves [ 585.220084][T19009] bond9 (unregistering): (slave veth5): Releasing active interface [ 585.230176][T19009] bond9 (unregistering): Released all slaves [ 585.327578][T19009] bond10 (unregistering): Released all slaves [ 585.419036][T19009] bond11 (unregistering): Released all slaves [ 585.511860][T19009] bond12 (unregistering): Released all slaves [ 585.607987][T19009] bond13 (unregistering): (slave veth9): Releasing backup interface [ 585.616058][T19009] veth9: left promiscuous mode [ 585.622618][T19009] bond13 (unregistering): Released all slaves [ 585.636892][T21569] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 585.662221][T21589] mac80211_hwsim hwsim45 wlan0: left promiscuous mode [ 585.678056][T21589] vlan2: left promiscuous mode [ 585.682856][T21589] hsr_slave_1: left promiscuous mode [ 585.689315][T21589] vlan2: left allmulticast mode [ 585.698812][T21589] hsr_slave_1: left allmulticast mode [ 585.785771][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3955'. [ 585.798214][T19009] : left promiscuous mode [ 585.972672][T21601] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3956'. [ 585.982148][T21601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3956'. [ 585.991244][T21601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3956'. [ 586.000682][T19009] : left promiscuous mode [ 586.027047][T21612] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3959'. [ 586.085327][T21610] bond1 (unregistering): Released all slaves [ 586.136455][T21612] 0ªî{X¹¦: renamed from gretap0 [ 586.182459][T21612] 0ªî{X¹¦: entered allmulticast mode [ 586.196251][T21612] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 586.227599][T19009] tipc: Left network mode [ 586.287299][T19009] IPVS: stopping backup sync thread 9216 ... [ 586.872924][T19009] hsr_slave_0: left promiscuous mode [ 586.879186][T19009] hsr_slave_1: left promiscuous mode [ 586.885288][T19009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.892744][T19009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.905147][T19009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.912539][T19009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.938126][T19009] batman_adv: batadv0: Interface deactivated: dummy0 [ 586.945027][T19009] batman_adv: batadv0: Removing interface: dummy0 [ 586.978314][T19009] veth1_macvtap: left promiscuous mode [ 586.984739][T19009] veth0_macvtap: left promiscuous mode [ 586.990519][T19009] veth1_vlan: left promiscuous mode [ 587.213096][T21665] sctp: [Deprecated]: syz.4.3974 (pid 21665) Use of int in max_burst socket option. [ 587.213096][T21665] Use struct sctp_assoc_value instead [ 587.277611][T19009] pim6reg (unregistering): left allmulticast mode [ 587.511731][T21686] xt_hashlimit: max too large, truncated to 1048576 [ 587.629480][T21693] __nla_validate_parse: 1 callbacks suppressed [ 587.629497][T21693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3983'. [ 587.913450][T19009] team_slave_1 (unregistering): left promiscuous mode [ 587.922880][T19009] ` (unregistering): Port device team_slave_1 removed [ 587.958957][T19009] team_slave_0 (unregistering): left promiscuous mode [ 587.967623][T19009] ` (unregistering): Port device team_slave_0 removed [ 588.322567][T21657] bridge6: entered promiscuous mode [ 588.327966][T21657] bridge6: entered allmulticast mode [ 588.388806][T21713] tipc: Enabling of bearer rejected, already enabled [ 588.401633][T21713] netlink: 'syz.3.3986': attribute type 11 has an invalid length. [ 588.417086][T21708] lo speed is unknown, defaulting to 1000 [ 588.429443][T21708] wg1 speed is unknown, defaulting to 1000 [ 588.434415][T21713] netlink: 'syz.3.3986': attribute type 11 has an invalid length. [ 588.436985][T21708] lo speed is unknown, defaulting to 1000 [ 588.453065][T21713] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3986'. [ 588.542423][T21716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3986'. [ 588.640336][T21713] bridge2: entered promiscuous mode [ 588.654251][T21713] bridge2: entered allmulticast mode [ 588.970374][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3992'. [ 589.103572][T21744] hsr_slave_1 (unregistering): left promiscuous mode [ 589.165353][T19009] IPVS: stop unused estimator thread 0... [ 589.274984][T21755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3998'. [ 589.692712][T21791] xt_policy: too many policy elements [ 589.789604][T21802] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4011'. [ 589.815645][T21798] lo speed is unknown, defaulting to 1000 [ 589.836554][T21798] wg1 speed is unknown, defaulting to 1000 [ 589.871079][T21798] lo speed is unknown, defaulting to 1000 [ 589.949384][T21813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4012'. [ 589.956451][T21805] lo speed is unknown, defaulting to 1000 [ 589.964843][T21810] netlink: 'syz.4.4009': attribute type 5 has an invalid length. [ 590.010575][T21813] : entered promiscuous mode [ 590.027222][T21813] netlink: 'syz.1.4012': attribute type 1 has an invalid length. [ 590.050309][T21813] bond1: entered promiscuous mode [ 590.056140][T21810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4009'. [ 590.064889][T21813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.098952][T21805] wg1 speed is unknown, defaulting to 1000 [ 590.130064][T21820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4012'. [ 590.154535][T21813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.167404][T21821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4013'. [ 590.180303][T21813] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 590.205266][T21813] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 590.239702][T21813] bond1: (slave gre1): Opening slave failed [ 590.284068][T21805] lo speed is unknown, defaulting to 1000 [ 591.544814][T21898] netlink: 'syz.3.4033': attribute type 3 has an invalid length. [ 592.215417][T21920] netlink: 'syz.2.4039': attribute type 1 has an invalid length. [ 592.513685][T21942] netlink: 'syz.2.4045': attribute type 2 has an invalid length. [ 592.546890][T21942] !: entered promiscuous mode [ 592.713448][T21955] xt_hashlimit: size too large, truncated to 1048576 [ 592.789048][T21959] netlink: 'syz.2.4047': attribute type 2 has an invalid length. [ 592.838090][T21962] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 592.841826][T21955] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 592.859662][T21959] : entered promiscuous mode [ 592.960402][T21971] netlink: 'syz.1.4050': attribute type 1 has an invalid length. [ 593.017633][T21971] __nla_validate_parse: 9 callbacks suppressed [ 593.017651][T21971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4050'. [ 593.055909][T21975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.069873][T21972] netlink: 'syz.4.4048': attribute type 11 has an invalid length. [ 593.094872][T21974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.108234][T21972] netlink: 'syz.4.4048': attribute type 11 has an invalid length. [ 593.131653][T21972] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4048'. [ 593.400953][T21995] lo speed is unknown, defaulting to 1000 [ 593.408428][T21995] wg1 speed is unknown, defaulting to 1000 [ 593.416940][T21995] lo speed is unknown, defaulting to 1000 [ 593.536455][T22001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4058'. [ 593.719972][T22009] netlink: 'syz.3.4060': attribute type 1 has an invalid length. [ 593.728370][T22009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4060'. [ 593.846319][T22018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4061'. [ 594.002585][T22026] netlink: 'syz.4.4062': attribute type 1 has an invalid length. [ 594.219296][T22026] 8021q: adding VLAN 0 to HW filter on device bond6 [ 594.229139][T22026] bond5: (slave bond6): making interface the new active one [ 594.237194][T22026] bond5: (slave bond6): Enslaving as an active interface with an up link [ 594.439947][T22052] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4070'. [ 594.472921][T22052] sctp: [Deprecated]: syz.4.4070 (pid 22052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 594.472921][T22052] Use struct sctp_sack_info instead [ 594.762638][T22064] tipc: Enabled bearer , priority 0 [ 594.790334][T22063] syzkaller0: entered promiscuous mode [ 594.822337][T22063] syzkaller0: entered allmulticast mode [ 594.869834][T22063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4073'. [ 594.886388][T22064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4073'. [ 594.923154][T22062] tipc: Resetting bearer [ 594.955509][T22070] netlink: 'syz.1.4074': attribute type 1 has an invalid length. [ 594.965095][T22062] tipc: Disabling bearer [ 594.967586][T22072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4075'. [ 595.048562][T22070] bond2: entered promiscuous mode [ 595.054208][T22070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 595.383131][T22101] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4084'. [ 595.475401][T22100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.508388][T22114] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 595.693348][T22100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.840287][T22100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.970271][T22100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.052607][T22141] xt_TCPMSS: Only works on TCP SYN packets [ 596.070693][T22141] netlink: 'syz.0.4094': attribute type 13 has an invalid length. [ 596.311380][T19034] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.392805][T17604] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.423681][T17604] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.450039][T17604] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.549820][T22166] 8021q: adding VLAN 0 to HW filter on device bond4 [ 596.579558][T22177] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 596.590084][T22178] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 596.600959][T22177] bond4: (slave macvlan3): Enslaving as an active interface with an up link [ 596.722216][T22174] lo speed is unknown, defaulting to 1000 [ 596.785607][T22174] wg1 speed is unknown, defaulting to 1000 [ 596.812726][T22174] lo speed is unknown, defaulting to 1000 [ 597.100183][T22174] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 597.767068][T22239] netlink: 'syz.0.4120': attribute type 21 has an invalid length. [ 598.221949][T22267] x_tables: duplicate underflow at hook 1 [ 598.241988][T22264] xt_bpf: check failed: parse error [ 598.270808][T22274] lo speed is unknown, defaulting to 1000 [ 598.281344][T22274] wg1 speed is unknown, defaulting to 1000 [ 598.285931][T22264] __nla_validate_parse: 11 callbacks suppressed [ 598.285948][T22264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4128'. [ 598.289012][T22274] lo speed is unknown, defaulting to 1000 [ 598.365809][T22264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4128'. [ 598.614418][T22280] warn_alloc: 1 callbacks suppressed [ 598.614434][T22280] syz.0.4133: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 598.651191][T22280] CPU: 0 UID: 0 PID: 22280 Comm: syz.0.4133 Not tainted syzkaller #0 PREEMPT(full) [ 598.651214][T22280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 598.651224][T22280] Call Trace: [ 598.651230][T22280] [ 598.651239][T22280] dump_stack_lvl+0x189/0x250 [ 598.651263][T22280] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 598.651290][T22280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.651309][T22280] ? __pfx__printk+0x10/0x10 [ 598.651331][T22280] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 598.651355][T22280] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 598.651388][T22280] warn_alloc+0x214/0x310 [ 598.651422][T22280] ? __pfx_warn_alloc+0x10/0x10 [ 598.651454][T22280] ? __get_vm_area_node+0x28f/0x300 [ 598.651475][T22280] ? htable_create+0x101/0x7a0 [ 598.651501][T22280] __vmalloc_node_range_noprof+0x690/0x12d0 [ 598.651555][T22280] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 598.651575][T22280] ? htable_create+0x101/0x7a0 [ 598.651598][T22280] ? rcu_is_watching+0x15/0xb0 [ 598.651618][T22280] ? htable_create+0x101/0x7a0 [ 598.651640][T22280] __kvmalloc_node_noprof+0x670/0x910 [ 598.651662][T22280] ? htable_create+0x101/0x7a0 [ 598.651682][T22280] ? hashlimit_pernet+0x23/0x240 [ 598.651702][T22280] ? hashlimit_pernet+0x23/0x240 [ 598.651722][T22280] ? hashlimit_pernet+0x23/0x240 [ 598.651751][T22280] htable_create+0x101/0x7a0 [ 598.651781][T22280] hashlimit_mt_check_common+0x719/0xa10 [ 598.651814][T22280] hashlimit_mt_check_v1+0x221/0x360 [ 598.651839][T22280] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 598.651869][T22280] ? xt_find_match+0x1f7/0x250 [ 598.651897][T22280] xt_check_match+0x3d1/0xab0 [ 598.651924][T22280] ? __pfx_xt_check_match+0x10/0x10 [ 598.651948][T22280] ? pcpu_alloc_noprof+0xf95/0x1750 [ 598.651980][T22280] ? xt_find_match+0x1f7/0x250 [ 598.652008][T22280] translate_table+0x150b/0x2000 [ 598.652053][T22280] ? __pfx_translate_table+0x10/0x10 [ 598.652077][T22280] ? __might_fault+0xb0/0x130 [ 598.652118][T22280] ? _copy_from_user+0x94/0xb0 [ 598.652145][T22280] do_ipt_set_ctl+0x967/0xcd0 [ 598.652169][T22280] ? rcu_is_watching+0x15/0xb0 [ 598.652189][T22280] ? trace_contention_end+0x39/0x100 [ 598.652209][T22280] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 598.652255][T22280] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 598.652287][T22280] ? __pfx_aa_sk_perm+0x10/0x10 [ 598.652316][T22280] nf_setsockopt+0x26f/0x290 [ 598.652339][T22280] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 598.652363][T22280] do_sock_setsockopt+0x17c/0x1b0 [ 598.652391][T22280] __x64_sys_setsockopt+0x13f/0x1b0 [ 598.652426][T22280] do_syscall_64+0xfa/0xf80 [ 598.652448][T22280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.652465][T22280] ? clear_bhb_loop+0x60/0xb0 [ 598.652487][T22280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.652503][T22280] RIP: 0033:0x7f17ed78f749 [ 598.652520][T22280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.652535][T22280] RSP: 002b:00007f17ee59f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 598.652554][T22280] RAX: ffffffffffffffda RBX: 00007f17ed9e5fa0 RCX: 00007f17ed78f749 [ 598.652566][T22280] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000005 [ 598.652578][T22280] RBP: 00007f17ed813f91 R08: 0000000000000448 R09: 0000000000000000 [ 598.652589][T22280] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 598.652600][T22280] R13: 00007f17ed9e6038 R14: 00007f17ed9e5fa0 R15: 00007ffdc92a2e18 [ 598.652632][T22280] [ 598.996971][T22280] Mem-Info: [ 599.000103][T22280] active_anon:4923 inactive_anon:0 isolated_anon:0 [ 599.000103][T22280] active_file:3081 inactive_file:40083 isolated_file:0 [ 599.000103][T22280] unevictable:768 dirty:114 writeback:0 [ 599.000103][T22280] slab_reclaimable:13189 slab_unreclaimable:153481 [ 599.000103][T22280] mapped:29179 shmem:1363 pagetables:1116 [ 599.000103][T22280] sec_pagetables:0 bounce:0 [ 599.000103][T22280] kernel_misc_reclaimable:0 [ 599.000103][T22280] free:1264712 free_pcp:15005 free_cma:0 [ 599.051064][T22280] Node 0 active_anon:19720kB inactive_anon:0kB active_file:12324kB inactive_file:160128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116640kB dirty:456kB writeback:0kB shmem:3984kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15912kB pagetables:4452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 599.085921][T22290] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 599.097723][T22280] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 599.144492][T22280] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.230958][T22280] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 599.272960][T22280] Node 0 DMA32 free:1147948kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19752kB inactive_anon:0kB active_file:12324kB inactive_file:160128kB unevictable:1536kB writepending:476kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:43564kB local_pcp:21596kB free_cma:0kB [ 599.308365][T22280] lowmem_reserve[]: 0 0 0 0 0 [ 599.313124][T22280] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.342894][T22280] lowmem_reserve[]: 0 0 0 0 0 [ 599.349122][T22280] Node 1 Normal free:3897548kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13152kB local_pcp:8032kB free_cma:0kB [ 599.423516][T22306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4141'. [ 599.442779][T22280] lowmem_reserve[]: 0 0 0 0 0 [ 599.447629][T22280] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 599.461311][T22280] Node 0 DMA32: 1835*4kB (UME) 864*8kB (UME) 864*16kB (UM) 801*32kB (UME) 294*64kB (UME) 216*128kB (UM) 245*256kB (UM) 142*512kB (UME) 75*1024kB (UME) 4*2048kB (UME) 202*4096kB (UM) = 1147980kB [ 599.481928][T22280] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 599.538865][T22307] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 599.557250][T22280] Node 1 Normal: 209*4kB (UME) 57*8kB (UME) 44*16kB (UME) 194*32kB (UME) 55*64kB (UME) 10*128kB (UME) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 0*2048kB 947*4096kB (M) = 3897548kB [ 599.580051][T22280] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.599137][T22312] FAULT_INJECTION: forcing a failure. [ 599.599137][T22312] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 599.614208][T22280] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.623515][T22280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.633255][T22312] CPU: 0 UID: 0 PID: 22312 Comm: syz.3.4144 Not tainted syzkaller #0 PREEMPT(full) [ 599.633275][T22312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 599.633284][T22312] Call Trace: [ 599.633290][T22312] [ 599.633296][T22312] dump_stack_lvl+0x189/0x250 [ 599.633320][T22312] ? __pfx____ratelimit+0x10/0x10 [ 599.633337][T22312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.633350][T22312] ? __pfx__printk+0x10/0x10 [ 599.633368][T22312] ? __might_fault+0xb0/0x130 [ 599.633391][T22312] should_fail_ex+0x414/0x560 [ 599.633411][T22312] _copy_from_user+0x2d/0xb0 [ 599.633429][T22312] ___sys_sendmsg+0x158/0x2a0 [ 599.633451][T22312] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.633474][T22312] ? rcu_read_lock_any_held+0xb3/0x120 [ 599.633510][T22312] ? __fget_files+0x2a/0x420 [ 599.633522][T22312] ? __fget_files+0x3a0/0x420 [ 599.633541][T22312] __x64_sys_sendmsg+0x19b/0x260 [ 599.633561][T22312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.633586][T22312] ? __pfx_ksys_write+0x10/0x10 [ 599.633604][T22312] ? do_syscall_64+0xbe/0xf80 [ 599.633623][T22312] do_syscall_64+0xfa/0xf80 [ 599.633639][T22312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.633652][T22312] ? clear_bhb_loop+0x60/0xb0 [ 599.633668][T22312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.633680][T22312] RIP: 0033:0x7fc0f778f749 [ 599.633692][T22312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.633704][T22312] RSP: 002b:00007fc0f8694038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.633719][T22312] RAX: ffffffffffffffda RBX: 00007fc0f79e5fa0 RCX: 00007fc0f778f749 [ 599.633728][T22312] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000000 [ 599.633736][T22312] RBP: 00007fc0f8694090 R08: 0000000000000000 R09: 0000000000000000 [ 599.633744][T22312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.633752][T22312] R13: 00007fc0f79e6038 R14: 00007fc0f79e5fa0 R15: 00007fff23947128 [ 599.633775][T22312] [ 599.839729][T22280] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.849453][T22280] 44572 total pagecache pages [ 599.854465][T22280] 0 pages in swap cache [ 599.858618][T22280] Free swap = 124996kB [ 599.862956][T22280] Total swap = 124996kB [ 599.867289][T22280] 2097051 pages RAM [ 599.871097][T22280] 0 pages HighMem/MovableOnly [ 599.875934][T22280] 424280 pages reserved [ 599.880159][T22280] 0 pages cma reserved [ 599.915967][T22320] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1356915332/1356915335 [ 599.957437][T22321] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1356915332/1356915335 [ 599.979832][T22321] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1356915332/1356915335 [ 600.049317][T22334] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4150'. [ 600.061126][T22334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4150'. [ 600.204240][T22345] netlink: 'syz.3.4152': attribute type 2 has an invalid length. [ 600.223803][T22345] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4152'. [ 600.351147][T22361] lo speed is unknown, defaulting to 1000 [ 600.368814][T22360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4154'. [ 600.373379][T22361] wg1 speed is unknown, defaulting to 1000 [ 600.455912][T22361] lo speed is unknown, defaulting to 1000 [ 600.661268][T22368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4157'. [ 600.690112][T22367] delete_channel: no stack [ 600.901785][T22380] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4161'. [ 600.909035][T22379] FAULT_INJECTION: forcing a failure. [ 600.909035][T22379] name failslab, interval 1, probability 0, space 0, times 1 [ 600.935218][T22379] CPU: 1 UID: 0 PID: 22379 Comm: syz.1.4160 Not tainted syzkaller #0 PREEMPT(full) [ 600.935251][T22379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 600.935262][T22379] Call Trace: [ 600.935269][T22379] [ 600.935276][T22379] dump_stack_lvl+0x189/0x250 [ 600.935299][T22379] ? __pfx____ratelimit+0x10/0x10 [ 600.935319][T22379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 600.935337][T22379] ? __pfx__printk+0x10/0x10 [ 600.935361][T22379] ? __pfx___might_resched+0x10/0x10 [ 600.935378][T22379] ? fs_reclaim_acquire+0x7d/0x100 [ 600.935404][T22379] should_fail_ex+0x414/0x560 [ 600.935428][T22379] should_failslab+0xa8/0x100 [ 600.935452][T22379] kmem_cache_alloc_node_noprof+0x77/0x710 [ 600.935472][T22379] ? __alloc_skb+0x255/0x430 [ 600.935491][T22379] ? napi_skb_cache_get+0x4a5/0x780 [ 600.935510][T22379] ? napi_skb_cache_get+0x151/0x780 [ 600.935533][T22379] __alloc_skb+0x255/0x430 [ 600.935554][T22379] ? __pfx___alloc_skb+0x10/0x10 [ 600.935582][T22379] alloc_skb_with_frags+0xca/0x890 [ 600.935606][T22379] ? filemap_map_pages+0x160/0x1fd0 [ 600.935639][T22379] sock_alloc_send_pskb+0x84d/0x980 [ 600.935675][T22379] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 600.935693][T22379] ? css_rstat_updated+0x23a/0x4f0 [ 600.935722][T22379] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 600.935749][T22379] unix_dgram_sendmsg+0x454/0x1840 [ 600.935785][T22379] ? __up_read+0x25d/0x670 [ 600.935809][T22379] ? __pfx___up_read+0x10/0x10 [ 600.935829][T22379] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 600.935850][T22379] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 600.935878][T22379] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 600.935900][T22379] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 600.935924][T22379] __sock_sendmsg+0x21c/0x270 [ 600.935947][T22379] ____sys_sendmsg+0x505/0x820 [ 600.935975][T22379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.936007][T22379] ? import_iovec+0x74/0xa0 [ 600.936032][T22379] ___sys_sendmsg+0x21f/0x2a0 [ 600.936057][T22379] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.936091][T22379] ? rcu_read_lock_any_held+0xb3/0x120 [ 600.936137][T22379] ? __fget_files+0x2a/0x420 [ 600.936151][T22379] ? __fget_files+0x3a0/0x420 [ 600.936177][T22379] __x64_sys_sendmsg+0x19b/0x260 [ 600.936203][T22379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.936242][T22379] ? __pfx_ksys_write+0x10/0x10 [ 600.936265][T22379] ? do_syscall_64+0xbe/0xf80 [ 600.936290][T22379] do_syscall_64+0xfa/0xf80 [ 600.936311][T22379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.936327][T22379] ? clear_bhb_loop+0x60/0xb0 [ 600.936347][T22379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.936362][T22379] RIP: 0033:0x7fe59018f749 [ 600.936377][T22379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.936391][T22379] RSP: 002b:00007fe5910d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.936409][T22379] RAX: ffffffffffffffda RBX: 00007fe5903e5fa0 RCX: 00007fe59018f749 [ 600.936421][T22379] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000000 [ 600.936432][T22379] RBP: 00007fe5910d7090 R08: 0000000000000000 R09: 0000000000000000 [ 600.936442][T22379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.936452][T22379] R13: 00007fe5903e6038 R14: 00007fe5903e5fa0 R15: 00007fffa67b7218 [ 600.936480][T22379] [ 601.396532][T22384] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 601.446807][T22393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4162'. [ 601.848611][T22417] syzkaller0: entered promiscuous mode [ 601.864756][T22417] syzkaller0: entered allmulticast mode [ 602.061168][T22434] FAULT_INJECTION: forcing a failure. [ 602.061168][T22434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.075196][T22434] CPU: 1 UID: 0 PID: 22434 Comm: syz.2.4176 Not tainted syzkaller #0 PREEMPT(full) [ 602.075220][T22434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 602.075230][T22434] Call Trace: [ 602.075238][T22434] [ 602.075245][T22434] dump_stack_lvl+0x189/0x250 [ 602.075268][T22434] ? __pfx____ratelimit+0x10/0x10 [ 602.075288][T22434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.075305][T22434] ? __pfx__printk+0x10/0x10 [ 602.075338][T22434] should_fail_ex+0x414/0x560 [ 602.075361][T22434] _copy_to_user+0x31/0xb0 [ 602.075384][T22434] simple_read_from_buffer+0xe1/0x170 [ 602.075412][T22434] proc_fail_nth_read+0x1b3/0x220 [ 602.075435][T22434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 602.075458][T22434] ? rw_verify_area+0x2a6/0x4d0 [ 602.075477][T22434] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 602.075497][T22434] vfs_read+0x200/0xa30 [ 602.075515][T22434] ? fdget_pos+0x247/0x320 [ 602.075534][T22434] ? __pfx___mutex_lock+0x10/0x10 [ 602.075555][T22434] ? __pfx_vfs_read+0x10/0x10 [ 602.075576][T22434] ? __fget_files+0x2a/0x420 [ 602.075595][T22434] ? __fget_files+0x3a0/0x420 [ 602.075608][T22434] ? __fget_files+0x2a/0x420 [ 602.075633][T22434] ksys_read+0x145/0x250 [ 602.075656][T22434] ? __pfx_ksys_read+0x10/0x10 [ 602.075679][T22434] ? do_syscall_64+0xbe/0xf80 [ 602.075703][T22434] do_syscall_64+0xfa/0xf80 [ 602.075724][T22434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.075740][T22434] ? clear_bhb_loop+0x60/0xb0 [ 602.075761][T22434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.075790][T22434] RIP: 0033:0x7f366378e15c [ 602.075806][T22434] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 602.075820][T22434] RSP: 002b:00007f36645df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 602.075839][T22434] RAX: ffffffffffffffda RBX: 00007f36639e5fa0 RCX: 00007f366378e15c [ 602.075851][T22434] RDX: 000000000000000f RSI: 00007f36645df0a0 RDI: 0000000000000005 [ 602.075861][T22434] RBP: 00007f36645df090 R08: 0000000000000000 R09: 0000000000000000 [ 602.075872][T22434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.075882][T22434] R13: 00007f36639e6038 R14: 00007f36639e5fa0 R15: 00007ffc619a8be8 [ 602.075913][T22434] [ 602.350672][T22440] bond3: entered allmulticast mode [ 602.356396][T22440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 602.389547][T22422] lo speed is unknown, defaulting to 1000 [ 602.397244][T22422] wg1 speed is unknown, defaulting to 1000 [ 602.407432][T22422] lo speed is unknown, defaulting to 1000 [ 602.511627][T22449] tipc: Enabled bearer , priority 0 [ 602.534737][T22449] syzkaller0: entered promiscuous mode [ 602.546834][T22449] syzkaller0: entered allmulticast mode [ 602.563378][T22452] netlink: 'syz.2.4182': attribute type 15 has an invalid length. [ 602.774587][T22463] openvswitch: netlink: Tunnel attr 193 out of range max 16 [ 602.827047][T22449] tipc: Resetting bearer [ 602.961817][T22448] tipc: Resetting bearer [ 603.009706][T22448] tipc: Disabling bearer [ 603.035245][T22469] 8021q: VLANs not supported on ip6gre0 [ 603.355248][T22487] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 603.361716][T22487] syzkaller1: linktype set to 260 [ 603.371854][T22484] lo speed is unknown, defaulting to 1000 [ 603.391770][T22487] __nla_validate_parse: 6 callbacks suppressed [ 603.391788][T22487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4193'. [ 603.393661][T22484] wg1 speed is unknown, defaulting to 1000 [ 603.413765][T22487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4193'. [ 603.422576][T22484] lo speed is unknown, defaulting to 1000 [ 603.583226][T22503] bridge2: entered allmulticast mode [ 603.701076][T22512] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4202'. [ 603.710290][T22512] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4202'. [ 603.719434][T22512] netlink: 'syz.2.4202': attribute type 6 has an invalid length. [ 603.727329][T22512] netlink: 'syz.2.4202': attribute type 5 has an invalid length. [ 603.735455][T22512] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4202'. [ 603.776673][T22506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.803561][T22524] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4201'. [ 603.926314][T22522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.973672][T22532] lo speed is unknown, defaulting to 1000 [ 604.003687][T22532] wg1 speed is unknown, defaulting to 1000 [ 604.013260][T22532] lo speed is unknown, defaulting to 1000 [ 604.127331][T22543] pimreg: entered allmulticast mode [ 604.145557][T22547] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 604.171216][T22536] lo speed is unknown, defaulting to 1000 [ 604.181130][T22536] wg1 speed is unknown, defaulting to 1000 [ 604.196569][T22536] lo speed is unknown, defaulting to 1000 [ 604.241480][T22551] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4210'. [ 604.269566][T22552] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4210'. [ 604.300882][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4211'. [ 604.312531][T22556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4211'. [ 604.358046][T22557] netlink: 'syz.2.4211': attribute type 11 has an invalid length. [ 604.389066][T22554] veth0_to_team: entered promiscuous mode [ 604.487861][T22568] netlink: 'syz.2.4214': attribute type 1 has an invalid length. [ 604.817150][T22587] tc_dump_action: action bad kind [ 605.045131][T22598] xt_hashlimit: size too large, truncated to 1048576 [ 605.116290][T22598] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 605.496949][T22623] bond1: option miimon: invalid value (18446744073709551607) [ 605.533254][T22623] bond1: option miimon: allowed values 0 - 2147483647 [ 605.546542][T22623] bond1 (unregistering): Released all slaves [ 605.782329][T22632] IPVS: set_ctl: invalid protocol: 13066 100.1.1.0:20003 [ 605.813329][T22639] netlink: 'syz.4.4230': attribute type 33 has an invalid length. [ 605.906232][T22643] xt_bpf: check failed: parse error [ 606.010991][T22649] vlan2: entered promiscuous mode [ 606.100615][T22654] bond4: option lacp_rate: invalid value (255) [ 606.110345][T22654] bond4 (unregistering): Released all slaves [ 606.266734][T22668] xt_hashlimit: max too large, truncated to 1048576 [ 606.570227][T22688] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:0 [ 606.720689][T22698] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 606.777729][T22698] vlan2: entered promiscuous mode [ 606.782984][T22698] vlan2: entered allmulticast mode [ 606.824984][T22698] hsr_slave_1: entered allmulticast mode [ 606.882923][T22699] lo speed is unknown, defaulting to 1000 [ 606.894738][T22699] wg1 speed is unknown, defaulting to 1000 [ 606.906436][T22699] lo speed is unknown, defaulting to 1000 [ 607.139306][T22728] block nbd2: Unsupported socket: should be TCP or UNIX. [ 607.286124][T22734] xt_hashlimit: max too large, truncated to 1048576 [ 607.286364][T22735] xt_hashlimit: max too large, truncated to 1048576 [ 607.298607][T22734] No such timeout policy "syz0" [ 607.303398][T22735] No such timeout policy "syz0" [ 607.410612][T22737] lo speed is unknown, defaulting to 1000 [ 607.425876][T22737] wg1 speed is unknown, defaulting to 1000 [ 607.432780][T22737] lo speed is unknown, defaulting to 1000 [ 607.881243][T22755] lo speed is unknown, defaulting to 1000 [ 607.900379][T22755] wg1 speed is unknown, defaulting to 1000 [ 607.925015][T22755] lo speed is unknown, defaulting to 1000 [ 608.360014][T22770] tipc: Enabled bearer , priority 0 [ 608.374815][T22770] syzkaller0: entered promiscuous mode [ 608.398217][T22770] syzkaller0: entered allmulticast mode [ 608.467817][T22770] tipc: Resetting bearer [ 608.486249][T22769] tipc: Resetting bearer [ 608.508339][T22774] __nla_validate_parse: 14 callbacks suppressed [ 608.508357][T22774] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4267'. [ 608.508462][T22769] tipc: Disabling bearer [ 608.559506][T22772] 8021q: adding VLAN 0 to HW filter on device bond4 [ 608.624051][T22779] veth0_to_bridge: entered promiscuous mode [ 608.737906][T22785] tunl0: Caught tx_queue_len zero misconfig [ 608.823850][T22788] lo speed is unknown, defaulting to 1000 [ 608.826114][T22778] veth0_to_bridge: left promiscuous mode [ 608.844314][T22788] wg1 speed is unknown, defaulting to 1000 [ 608.855503][T22788] lo speed is unknown, defaulting to 1000 [ 609.215134][T22818] openvswitch: netlink: Tunnel attr 152 out of range max 16 [ 609.264029][T22820] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4279'. [ 609.326097][T22820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.558309][T22832] bridge6: left promiscuous mode [ 609.563460][T22832] bridge6: left allmulticast mode [ 609.692309][T22840] : entered promiscuous mode [ 609.719149][T22840] netlink: 'syz.0.4284': attribute type 21 has an invalid length. [ 609.754668][T22840] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4284'. [ 609.778889][T22844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4285'. [ 609.942169][T22853] sit0: entered promiscuous mode [ 609.966012][T22853] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4289'. [ 610.036743][T22859] lo speed is unknown, defaulting to 1000 [ 610.058034][T22859] wg1 speed is unknown, defaulting to 1000 [ 610.121895][T22867] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 610.212367][T22859] lo speed is unknown, defaulting to 1000 [ 610.259792][T22867] netlink: 'syz.4.4291': attribute type 4 has an invalid length. [ 610.503134][T22887] lo speed is unknown, defaulting to 1000 [ 610.512077][T22887] wg1 speed is unknown, defaulting to 1000 [ 610.523847][T22887] lo speed is unknown, defaulting to 1000 [ 610.660247][T22890] tap0: tun_chr_ioctl cmd 1074025681 [ 610.807186][T22908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4304'. [ 610.874007][T22910] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4305'. [ 611.106326][T22926] netlink: 'syz.0.4311': attribute type 33 has an invalid length. [ 611.142658][T22926] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4311'. [ 611.271672][T22945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4313'. [ 611.284274][T22945] hsr_slave_0: left promiscuous mode [ 611.403436][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4317'. [ 611.702136][T22975] lo speed is unknown, defaulting to 1000 [ 611.727647][T22975] wg1 speed is unknown, defaulting to 1000 [ 611.742512][T22980] xt_bpf: check failed: parse error [ 611.757291][T22975] lo speed is unknown, defaulting to 1000 [ 611.892253][T22989] nbd: nbd1 already in use [ 611.897609][T22989] block nbd1: NBD_DISCONNECT [ 611.902484][T22989] block nbd1: Send disconnect failed -32 [ 611.917824][T22989] block nbd1: shutting down sockets [ 612.150693][T22999] netem: change failed [ 612.295648][T23007] ip6tnl0: Caught tx_queue_len zero misconfig [ 612.338699][T23008] can: request_module (can-proto-0) failed. [ 612.939444][T23049] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 613.075466][T23056] lo speed is unknown, defaulting to 1000 [ 613.124295][T23065] openvswitch: netlink: Multiple metadata blocks provided [ 613.124863][T23056] wg1 speed is unknown, defaulting to 1000 [ 613.182351][T23063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.256748][T23056] lo speed is unknown, defaulting to 1000 [ 613.304170][ T5155] Bluetooth: hci1: command tx timeout [ 613.591604][T23092] __nla_validate_parse: 7 callbacks suppressed [ 613.591622][T23092] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4358'. [ 613.607597][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4358'. [ 613.618008][T23093] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4358'. [ 613.683197][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4358'. [ 613.708860][T23097] tipc: Enabled bearer , priority 0 [ 613.760760][T23088] tipc: Resetting bearer [ 613.844657][T23088] tipc: Disabling bearer [ 614.106766][T23113] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4363'. [ 614.265171][T23120] lo speed is unknown, defaulting to 1000 [ 614.272593][T23120] wg1 speed is unknown, defaulting to 1000 [ 614.283641][T23125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4366'. [ 614.333382][T23120] lo speed is unknown, defaulting to 1000 [ 614.419054][T23130] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4368'. [ 614.658348][T23122] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4365'. [ 615.006661][T23160] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 615.294227][T23167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4373'. [ 615.906909][T23171] bond0: (slave team0): Releasing backup interface [ 615.922375][T23171] bond1: (slave dummy0): Releasing active interface [ 615.935290][T23171] bridge_slave_0: left allmulticast mode [ 615.935437][T23178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4377'. [ 615.941105][T23171] bridge_slave_0: left promiscuous mode [ 615.973505][T23171] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.996073][T23171] bridge_slave_1: left allmulticast mode [ 616.001757][T23171] bridge_slave_1: left promiscuous mode [ 616.024508][T23171] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.038313][T23171] bond0: (slave bond_slave_0): Releasing backup interface [ 616.048009][T23171] bond0: (slave bond_slave_1): Releasing backup interface [ 616.057926][T23171] team0: Failed to send options change via netlink (err -105) [ 616.065982][T23171] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 616.077527][T23171] team0: Port device team_slave_0 removed [ 616.088428][T23171] team0: Failed to send options change via netlink (err -105) [ 616.097093][T23171] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 616.112354][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 616.115048][T23171] team0: Port device team_slave_1 removed [ 616.125210][T23171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.140534][T23171] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 616.504352][T23194] ): renamed from bond_slave_0 (while UP) [ 616.908510][T23215] geneve2: entered promiscuous mode [ 616.913771][T23215] geneve2: entered allmulticast mode [ 616.955852][T23218] tipc: Enabled bearer , priority 0 [ 616.977641][T23218] syzkaller0: entered promiscuous mode [ 617.008987][T23218] syzkaller0: entered allmulticast mode [ 617.061204][T23218] tipc: Resetting bearer [ 617.079781][T23226] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20000 [ 617.087766][T23217] tipc: Resetting bearer [ 617.107099][T23217] tipc: Disabling bearer [ 617.119313][T23232] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2696477032/2696477034 [ 617.128897][T23229] tipc: Enabled bearer , priority 0 [ 617.136196][T23232] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2696477032/2696477034 [ 617.176996][T23229] tipc: Disabling bearer [ 617.921660][T23290] netlink: 'syz.3.4409': attribute type 1 has an invalid length. [ 617.943722][T23295] netlink: 'syz.4.4411': attribute type 32 has an invalid length. [ 618.060829][T23290] lo speed is unknown, defaulting to 1000 [ 618.069190][T23290] wg1 speed is unknown, defaulting to 1000 [ 618.076817][T23290] lo speed is unknown, defaulting to 1000 [ 618.610435][T19033] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 618.631534][T23319] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 618.656998][T23323] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 618.936188][T18191] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 619.011985][T23343] __nla_validate_parse: 110 callbacks suppressed [ 619.012003][T23343] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4419'. [ 619.044253][T19015] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 619.134119][T18191] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 619.423535][T23354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4421'. [ 619.463395][T23346] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.492338][T23346] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.542888][T23361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4426'. [ 619.607456][T23367] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4425'. [ 619.668034][T23346] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.689683][T23346] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.852381][T23346] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.860638][T23385] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4430'. [ 619.870734][T23387] netlink: 'syz.3.4433': attribute type 29 has an invalid length. [ 619.888959][T23385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4430'. [ 619.890431][T23346] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.958614][T19344] IPVS: starting estimator thread 0... [ 620.054180][T23396] IPVS: using max 28 ests per chain, 67200 per kthread [ 620.198917][T23346] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 620.229960][T23346] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.311514][T19033] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 620.321337][T19033] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 620.362822][T23410] tipc: Enabled bearer , priority 0 [ 620.370632][T23397] syzkaller0: entered promiscuous mode [ 620.378196][T23397] syzkaller0: entered allmulticast mode [ 620.410252][T23380] tipc: Resetting bearer [ 620.465002][T23380] tipc: Disabling bearer [ 620.473756][T23411] lo speed is unknown, defaulting to 1000 [ 620.486670][T23411] wg1 speed is unknown, defaulting to 1000 [ 620.519111][T23411] lo speed is unknown, defaulting to 1000 [ 620.562295][T19015] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.570816][T19015] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.658949][T19040] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.667494][T19040] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.715196][T23427] netlink: 203996 bytes leftover after parsing attributes in process `syz.4.4438'. [ 620.746512][T19040] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.758101][T19040] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.805594][T23427] tipc: Enabling of bearer rejected, failed to enable media [ 620.834389][T19040] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 620.842720][T19040] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.989616][T23445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4443'. [ 621.001837][T23445] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4443'. [ 621.066798][T21494] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 621.278809][T23465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4448'. [ 621.295636][T23465] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 621.698501][T23493] netlink: 'syz.1.4459': attribute type 1 has an invalid length. [ 621.769241][T23493] 8021q: adding VLAN 0 to HW filter on device bond5 [ 621.780496][T23495] erspan0: entered allmulticast mode [ 621.867514][T23495] bond5: (slave erspan0): making interface the new active one [ 621.885765][T23495] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 621.954611][T23501] macvtap1: entered promiscuous mode [ 621.960841][T23501] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 622.104626][T20815] IPVS: ip_vs_send_async error -101 [ 622.110016][T23503] lo speed is unknown, defaulting to 1000 [ 622.176372][T23503] wg1 speed is unknown, defaulting to 1000 [ 622.281605][T23503] lo speed is unknown, defaulting to 1000 [ 622.774096][T23534] netlink: 'syz.3.4469': attribute type 23 has an invalid length. [ 623.204839][T23552] dummy0: entered promiscuous mode [ 623.234741][T23552] macsec1: entered promiscuous mode [ 623.240179][T23552] macsec1: entered allmulticast mode [ 623.268623][T23552] dummy0: entered allmulticast mode [ 623.345914][T23552] dummy0: left allmulticast mode [ 623.362900][T23552] dummy0: left promiscuous mode [ 623.416108][T23575] netlink: 'syz.2.4482': attribute type 1 has an invalid length. [ 623.471865][T23575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 623.486484][T23572] netlink: 'syz.3.4481': attribute type 1 has an invalid length. [ 623.510769][T23570] syzkaller1: entered promiscuous mode [ 623.525409][T23570] syzkaller1: entered allmulticast mode [ 623.740576][T23579] bond2 (unregistering): Released all slaves [ 624.096713][T23607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.268904][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.406191][T23624] lo speed is unknown, defaulting to 1000 [ 624.429895][T23624] wg1 speed is unknown, defaulting to 1000 [ 624.443084][T23624] lo speed is unknown, defaulting to 1000 [ 624.504114][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 624.765165][ T5914] IPVS: starting estimator thread 0... [ 624.771851][T23631] __nla_validate_parse: 14 callbacks suppressed [ 624.771867][T23631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4494'. [ 624.796833][T23631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4494'. [ 624.809018][T23631] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4494'. [ 624.823085][T23631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4494'. [ 624.880719][T23637] bond5: (slave erspan0): Releasing active interface [ 624.895908][T23638] IPVS: using max 38 ests per chain, 91200 per kthread [ 624.950208][T23637] bridge_slave_0: left allmulticast mode [ 624.977101][T23647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4497'. [ 624.984083][T23637] bridge_slave_0: left promiscuous mode [ 625.018417][T23637] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.099794][T23637] bridge_slave_1: left allmulticast mode [ 625.137964][T23637] bridge_slave_1: left promiscuous mode [ 625.163648][T23637] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.212627][T23637] bond0: (slave bond_slave_0): Releasing backup interface [ 625.265944][T23637] bond0: (slave bond_slave_1): Releasing backup interface [ 625.321432][T23637] team0: Port device team_slave_0 removed [ 625.377164][T23637] team0: Port device team_slave_1 removed [ 625.398341][T23637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.423578][T23637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.434080][T23637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.453096][T23640] mac80211_hwsim hwsim39 ªªªªª;: renamed from wlan0 [ 625.511640][T23647] vlan2: entered promiscuous mode [ 625.528052][T23647] bond0: entered promiscuous mode [ 625.542209][T23647] ): entered promiscuous mode [ 625.554885][T23647] bond_slave_1: entered promiscuous mode [ 625.573197][T23670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4503'. [ 625.620517][T23656] lo speed is unknown, defaulting to 1000 [ 625.628498][T23656] wg1 speed is unknown, defaulting to 1000 [ 625.636132][T23656] lo speed is unknown, defaulting to 1000 [ 625.805760][T23680] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4507'. [ 625.872390][T23681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4508'. [ 625.979484][T23690] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4509'. [ 626.008565][T23690] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4509'. [ 626.149220][T23702] tipc: Enabled bearer , priority 0 [ 626.159357][T23702] syzkaller0: entered promiscuous mode [ 626.165774][T23702] syzkaller0: entered allmulticast mode [ 626.294906][T23707] tipc: Resetting bearer [ 626.344477][ T5155] Bluetooth: hci3: command 0x041b tx timeout [ 626.377560][T23700] tipc: Resetting bearer [ 626.378160][T23710] x_tables: unsorted underflow at hook 1 [ 626.401566][T23700] tipc: Disabling bearer [ 626.868105][T23729] netlink: 'syz.2.4521': attribute type 5 has an invalid length. [ 627.010343][T23730] lo speed is unknown, defaulting to 1000 [ 627.019431][T23730] wg1 speed is unknown, defaulting to 1000 [ 627.036223][T23730] lo speed is unknown, defaulting to 1000 [ 627.202106][T23743] lo speed is unknown, defaulting to 1000 [ 627.216450][T23751] netlink: 'syz.1.4529': attribute type 2 has an invalid length. [ 627.267039][T23743] wg1 speed is unknown, defaulting to 1000 [ 627.284525][T23743] lo speed is unknown, defaulting to 1000 [ 628.183708][T23765] lo speed is unknown, defaulting to 1000 [ 628.444780][T23800] netlink: 'syz.2.4539': attribute type 1 has an invalid length. [ 628.604972][T23765] wg1 speed is unknown, defaulting to 1000 [ 628.746450][T23784] bond2: (slave gretap0): making interface the new active one [ 628.782606][T23784] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 628.818020][T23805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 628.859983][T23765] lo speed is unknown, defaulting to 1000 [ 628.975856][T23824] team0: Caught tx_queue_len zero misconfig [ 629.560753][T23856] netlink: 'syz.3.4552': attribute type 14 has an invalid length. [ 629.613589][T19052] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.613698][T23856] netlink: 'syz.3.4552': attribute type 14 has an invalid length. [ 629.622320][T19052] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.668113][T19052] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 629.678219][T19052] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 630.198306][T23880] netlink: 'syz.2.4557': attribute type 322 has an invalid length. [ 630.262065][T23884] __nla_validate_parse: 13 callbacks suppressed [ 630.262083][T23884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4558'. [ 630.286174][T23884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4558'. [ 630.708776][T23901] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4561'. [ 630.857472][T23913] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4563'. [ 631.111099][T23924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4568'. [ 631.134564][T23924] lo: Caught tx_queue_len zero misconfig [ 631.140308][T23924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4568'. [ 631.271104][T23930] syzkaller1: entered promiscuous mode [ 631.296909][T23930] syzkaller1: entered allmulticast mode [ 631.349939][T23932] syzkaller0: entered promiscuous mode [ 631.364111][T23932] syzkaller0: entered allmulticast mode [ 631.587151][T23949] 0ªî{X¹¦: left allmulticast mode [ 631.675933][T23949] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.693199][T23949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 631.751769][T23961] x_tables: duplicate underflow at hook 3 [ 631.861066][T23959] lo speed is unknown, defaulting to 1000 [ 631.896233][T23959] wg1 speed is unknown, defaulting to 1000 [ 631.941089][T23959] lo speed is unknown, defaulting to 1000 [ 632.038590][T23965] bond7: option ad_select: invalid value (34) [ 632.049573][T23965] bond7 (unregistering): Released all slaves [ 632.088826][T23969] lo speed is unknown, defaulting to 1000 [ 632.584303][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 632.666514][T23996] netlink: 'syz.2.4585': attribute type 21 has an invalid length. [ 632.691809][T23996] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4585'. [ 632.719163][T23996] netlink: 'syz.2.4585': attribute type 5 has an invalid length. [ 632.746905][T23996] netlink: 'syz.2.4585': attribute type 6 has an invalid length. [ 632.765016][T23996] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4585'. [ 632.900261][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4590'. [ 632.930071][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'. [ 633.107599][T24022] netlink: 'syz.2.4593': attribute type 3 has an invalid length. [ 634.017969][T24081] syzkaller0: entered promiscuous mode [ 634.023480][T24081] syzkaller0: entered allmulticast mode [ 634.092161][T24086] lo speed is unknown, defaulting to 1000 [ 634.113357][T24088] lo speed is unknown, defaulting to 1000 [ 634.114607][T24086] wg1 speed is unknown, defaulting to 1000 [ 634.152513][T24086] lo speed is unknown, defaulting to 1000 [ 634.152913][T24088] wg1 speed is unknown, defaulting to 1000 [ 634.212857][T24088] lo speed is unknown, defaulting to 1000 [ 634.275360][T24095] syzkaller0: entered promiscuous mode [ 634.280875][T24095] syzkaller0: entered allmulticast mode [ 634.417277][T24095] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.424858][T24095] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.687821][T24095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.721662][T24095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.755529][T24108] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 635.756007][T24110] __nla_validate_parse: 8 callbacks suppressed [ 635.756022][T24110] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4622'. [ 635.781968][T24110] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4622'. [ 635.791660][T24110] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4622'. [ 635.816016][T19037] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.928068][T24121] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4625'. [ 635.982658][T24122] netlink: 'syz.1.4624': attribute type 4 has an invalid length. [ 636.075428][T24126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4626'. [ 636.148669][ T5155] Bluetooth: hci1: link tx timeout [ 636.154663][ T5155] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 636.168987][ T5155] Bluetooth: hci1: link tx timeout [ 636.174187][ T5155] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 636.595325][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 637.307691][T19037] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.316366][T19037] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.354921][T19037] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.540557][T24138] netlink: 'syz.1.4627': attribute type 1 has an invalid length. [ 637.558748][T24137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4629'. [ 637.578224][T24137] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4629'. [ 637.949476][T24163] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4631'. [ 638.050256][T24167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4636'. [ 638.206728][T24175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4639'. [ 638.216568][T24175] sctp: [Deprecated]: syz.2.4639 (pid 24175) Use of int in max_burst socket option. [ 638.216568][T24175] Use struct sctp_assoc_value instead [ 638.264275][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 638.352779][T24185] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 638.963608][T24218] lo speed is unknown, defaulting to 1000 [ 639.011057][T24218] wg1 speed is unknown, defaulting to 1000 [ 639.031176][T24218] lo speed is unknown, defaulting to 1000 [ 639.281101][T24229] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 639.326909][T24232] lo speed is unknown, defaulting to 1000 [ 639.335909][T24232] wg1 speed is unknown, defaulting to 1000 [ 639.343486][T24232] lo speed is unknown, defaulting to 1000 [ 639.539707][T24241] netlink: 'syz.0.4653': attribute type 10 has an invalid length. [ 639.959090][T24267] block nbd0: reconnected socket [ 640.128517][T24269] lo speed is unknown, defaulting to 1000 [ 640.146050][T24269] wg1 speed is unknown, defaulting to 1000 [ 640.198647][T24269] lo speed is unknown, defaulting to 1000 [ 640.345715][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 640.376040][ T5841] block nbd0: Receive control failed (result -32) [ 640.866152][T19052] tipc: Resetting bearer [ 641.244690][T24316] __nla_validate_parse: 4 callbacks suppressed [ 641.244707][T24316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4672'. [ 641.329759][T19052] bond7 (unregistering): (slave ip6gretap3): Releasing active interface [ 641.444067][T24327] x_tables: duplicate underflow at hook 1 [ 641.851017][T19052] bond8 (unregistering): (slave gre1): Releasing backup interface [ 641.859202][T19052] gre1 (unregistering): left promiscuous mode [ 642.225434][T19052] tipc: Disabling bearer [ 642.542233][T19052] bond0 (unregistering): Released all slaves [ 642.555091][T19052] bond1 (unregistering): Released all slaves [ 642.568859][T19052] bond2 (unregistering): Released all slaves [ 642.581287][T19052] bond3 (unregistering): Released all slaves [ 642.687633][T19052] bond4 (unregistering): (slave batadv0): Releasing active interface [ 642.696808][T19052] bond4 (unregistering): Released all slaves [ 642.709092][T19052] bond5 (unregistering): Released all slaves [ 642.721263][T19052] bond6 (unregistering): Released all slaves [ 642.818615][T19052] bond7 (unregistering): Released all slaves [ 642.914009][T19052] bond8 (unregistering): Released all slaves [ 643.011413][T19052] bond9 (unregistering): Released all slaves [ 643.024415][T19052] bond10 (unregistering): Released all slaves [ 643.134093][T19052] : left promiscuous mode [ 643.259789][T19052] tipc: Disabling bearer [ 643.278228][T19052] tipc: Left network mode [ 643.358100][T24357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4685'. [ 643.435471][T19052] IPVS: stopping backup sync thread 16552 ... [ 643.463075][T24367] netlink: 'syz.3.4686': attribute type 29 has an invalid length. [ 643.484297][T24368] netlink: 'syz.3.4686': attribute type 29 has an invalid length. [ 643.636492][T24382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4688'. [ 643.686185][T24379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4688'. [ 643.792174][T24379] unsupported nlmsg_type 40 [ 643.835712][T24395] xt_cluster: node mask cannot exceed total number of nodes [ 643.873304][T24395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4694'. [ 644.085191][T24405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4699'. [ 644.321110][T24419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.360662][T24413] vlan0: entered promiscuous mode [ 644.374399][T24413] vlan0: entered allmulticast mode [ 644.384339][T24413] veth0_vlan: entered allmulticast mode [ 644.478849][T24428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4707'. [ 644.664731][T24434] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4710'. [ 644.677866][T24434] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4710'. [ 645.023074][T24435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4709'. [ 645.093551][T19052] hsr_slave_0: left promiscuous mode [ 645.113106][T19052] hsr_slave_1: left promiscuous mode [ 645.337075][T24468] [ 645.339439][T24468] ====================================================== [ 645.346451][T24468] WARNING: possible circular locking dependency detected [ 645.353482][T24468] syzkaller #0 Not tainted [ 645.357893][T24468] ------------------------------------------------------ [ 645.364904][T24468] syz.3.4715/24468 is trying to acquire lock: [ 645.370966][T24468] ffffffff8f4576b8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 645.380119][T24468] [ 645.380119][T24468] but task is already holding lock: [ 645.387476][T24468] ffff888048fff270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 645.396695][T24468] [ 645.396695][T24468] which lock already depends on the new lock. [ 645.396695][T24468] [ 645.407165][T24468] [ 645.407165][T24468] the existing dependency chain (in reverse order) is: [ 645.416159][T24468] [ 645.416159][T24468] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 645.424147][T24468] _raw_spin_lock_bh+0x36/0x50 [ 645.429428][T24468] nr_rt_device_down+0x12a/0x720 [ 645.434873][T24468] nr_device_event+0x137/0x150 [ 645.440141][T24468] notifier_call_chain+0x19d/0x3a0 [ 645.445763][T24468] netif_close_many+0x29c/0x410 [ 645.451117][T24468] netif_close+0x158/0x210 [ 645.456037][T24468] dev_close+0x10a/0x220 [ 645.460787][T24468] bpq_device_event+0x377/0x6a0 [ 645.466146][T24468] notifier_call_chain+0x19d/0x3a0 [ 645.471848][T24468] netif_close_many+0x29c/0x410 [ 645.477203][T24468] netif_close+0x158/0x210 [ 645.482126][T24468] dev_close+0x10a/0x220 [ 645.486876][T24468] bond_setup_by_slave+0x5f/0x3d0 [ 645.492410][T24468] bond_enslave+0x6ca/0x38c0 [ 645.497502][T24468] bond_do_ioctl+0x635/0x9b0 [ 645.502596][T24468] bond_siocdevprivate+0x17e/0x350 [ 645.508213][T24468] dev_ifsioc+0xb57/0xf00 [ 645.513048][T24468] dev_ioctl+0x84c/0x1150 [ 645.517890][T24468] sock_ioctl+0x719/0x790 [ 645.522724][T24468] __se_sys_ioctl+0xfc/0x170 [ 645.527818][T24468] do_syscall_64+0xfa/0xf80 [ 645.532827][T24468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.539222][T24468] [ 645.539222][T24468] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 645.547027][T24468] _raw_spin_lock_bh+0x36/0x50 [ 645.552306][T24468] nr_rt_device_down+0xa9/0x720 [ 645.557665][T24468] nr_device_event+0x137/0x150 [ 645.562936][T24468] notifier_call_chain+0x19d/0x3a0 [ 645.568553][T24468] netif_close_many+0x29c/0x410 [ 645.573922][T24468] netif_close+0x158/0x210 [ 645.578853][T24468] dev_close+0x10a/0x220 [ 645.583599][T24468] bpq_device_event+0x377/0x6a0 [ 645.588958][T24468] notifier_call_chain+0x19d/0x3a0 [ 645.594573][T24468] netif_close_many+0x29c/0x410 [ 645.599932][T24468] netif_close+0x158/0x210 [ 645.604855][T24468] dev_close+0x10a/0x220 [ 645.609605][T24468] bond_setup_by_slave+0x5f/0x3d0 [ 645.615134][T24468] bond_enslave+0x6ca/0x38c0 [ 645.620225][T24468] bond_do_ioctl+0x635/0x9b0 [ 645.625319][T24468] bond_siocdevprivate+0x17e/0x350 [ 645.630940][T24468] dev_ifsioc+0xb57/0xf00 [ 645.635777][T24468] dev_ioctl+0x84c/0x1150 [ 645.640613][T24468] sock_ioctl+0x719/0x790 [ 645.645453][T24468] __se_sys_ioctl+0xfc/0x170 [ 645.650548][T24468] do_syscall_64+0xfa/0xf80 [ 645.655553][T24468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.661952][T24468] [ 645.661952][T24468] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 645.669839][T24468] __lock_acquire+0x15a6/0x2cf0 [ 645.675193][T24468] lock_acquire+0x117/0x340 [ 645.680195][T24468] _raw_spin_lock_bh+0x36/0x50 [ 645.685459][T24468] nr_rt_ioctl+0x390/0xd50 [ 645.690381][T24468] sock_do_ioctl+0xdc/0x300 [ 645.695396][T24468] sock_ioctl+0x576/0x790 [ 645.700233][T24468] __se_sys_ioctl+0xfc/0x170 [ 645.705326][T24468] do_syscall_64+0xfa/0xf80 [ 645.710349][T24468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.716744][T24468] [ 645.716744][T24468] other info that might help us debug this: [ 645.716744][T24468] [ 645.726948][T24468] Chain exists of: [ 645.726948][T24468] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 645.726948][T24468] [ 645.740745][T24468] Possible unsafe locking scenario: [ 645.740745][T24468] [ 645.748170][T24468] CPU0 CPU1 [ 645.753514][T24468] ---- ---- [ 645.758858][T24468] lock(&nr_node->node_lock); [ 645.763605][T24468] lock(nr_node_list_lock); [ 645.770695][T24468] lock(&nr_node->node_lock); [ 645.777958][T24468] lock(nr_neigh_list_lock); [ 645.782613][T24468] [ 645.782613][T24468] *** DEADLOCK *** [ 645.782613][T24468] [ 645.790745][T24468] 2 locks held by syz.3.4715/24468: [ 645.795918][T24468] #0: ffffffff8f457718 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 645.805392][T24468] #1: ffff888048fff270 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 645.815032][T24468] [ 645.815032][T24468] stack backtrace: [ 645.820899][T24468] CPU: 1 UID: 0 PID: 24468 Comm: syz.3.4715 Not tainted syzkaller #0 PREEMPT(full) [ 645.820916][T24468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 645.820925][T24468] Call Trace: [ 645.820931][T24468] [ 645.820939][T24468] dump_stack_lvl+0x189/0x250 [ 645.820956][T24468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 645.820969][T24468] ? __pfx__printk+0x10/0x10 [ 645.820985][T24468] ? stack_trace_save+0x9c/0xe0 [ 645.821007][T24468] print_circular_bug+0x2e2/0x300 [ 645.821024][T24468] check_noncircular+0x12e/0x150 [ 645.821042][T24468] __lock_acquire+0x15a6/0x2cf0 [ 645.821064][T24468] ? nr_rt_ioctl+0x390/0xd50 [ 645.821080][T24468] lock_acquire+0x117/0x340 [ 645.821091][T24468] ? nr_rt_ioctl+0x390/0xd50 [ 645.821108][T24468] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 645.821126][T24468] ? nr_rt_ioctl+0x390/0xd50 [ 645.821141][T24468] _raw_spin_lock_bh+0x36/0x50 [ 645.821156][T24468] ? nr_rt_ioctl+0x390/0xd50 [ 645.821172][T24468] nr_rt_ioctl+0x390/0xd50 [ 645.821193][T24468] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 645.821213][T24468] ? apparmor_capable+0x137/0x1a0 [ 645.821231][T24468] ? capable+0x89/0xe0 [ 645.821243][T24468] ? nr_ioctl+0x1b1/0x3b0 [ 645.821258][T24468] sock_do_ioctl+0xdc/0x300 [ 645.821273][T24468] ? __pfx_sock_do_ioctl+0x10/0x10 [ 645.821287][T24468] ? do_futex+0x395/0x420 [ 645.821304][T24468] sock_ioctl+0x576/0x790 [ 645.821317][T24468] ? __pfx_sock_ioctl+0x10/0x10 [ 645.821332][T24468] ? __fget_files+0x3a0/0x420 [ 645.821343][T24468] ? __fget_files+0x2a/0x420 [ 645.821356][T24468] ? bpf_lsm_file_ioctl+0x9/0x20 [ 645.821372][T24468] ? __pfx_sock_ioctl+0x10/0x10 [ 645.821385][T24468] __se_sys_ioctl+0xfc/0x170 [ 645.821401][T24468] do_syscall_64+0xfa/0xf80 [ 645.821417][T24468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.821430][T24468] ? clear_bhb_loop+0x60/0xb0 [ 645.821445][T24468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.821457][T24468] RIP: 0033:0x7fc0f778f749 [ 645.821470][T24468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.821482][T24468] RSP: 002b:00007fc0f8694038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 645.821496][T24468] RAX: ffffffffffffffda RBX: 00007fc0f79e5fa0 RCX: 00007fc0f778f749 [ 645.821506][T24468] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000007 [ 645.821514][T24468] RBP: 00007fc0f7813f91 R08: 0000000000000000 R09: 0000000000000000 [ 645.821523][T24468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.821530][T24468] R13: 00007fc0f79e6038 R14: 00007fc0f79e5fa0 R15: 00007fff23947128 [ 645.821547][T24468] [ 646.630529][T21494] lo speed is unknown, defaulting to 1000 [ 646.634427][T24472] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 646.639187][T21494] syz2: Port: 1 Link DOWN