last executing test programs: 4m12.804995951s ago: executing program 1 (id=1644): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0xfc, 0xfffffffffffffffa}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f0000000040)='GPL\x00', 0xf}, 0x94) 4m12.35877432s ago: executing program 1 (id=1645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc500000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000002400038020000080080003"], 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 4m11.510348272s ago: executing program 1 (id=1649): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104000000000000000000f3ffff", @ANYRES32=0x0, @ANYBLOB="8a450200800000002400128009000100626f6e6400000000140002800500010006000000080002"], 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x40) 4m11.073844518s ago: executing program 0 (id=1659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc500000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000002400038020000080080003"], 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 4m11.072763846s ago: executing program 1 (id=1660): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002301000034020000020000000800"], 0x1c}}, 0x0) (async) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000e0038"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1c000000ffb0162e", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000004000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000300030000000a000400aaaaaaaaaaaa000008000500", @ANYRES32=r6, @ANYBLOB="3d128c5d15f343c76649036d8e857ee480a8594c6b757273bd76e85ddbe6180bba505476decc3aecfb7b0c65cee36a29b3bcd2faf55e8289ade42372b84329dcc692a29f6d58989151b1d27426daca2fe241ad03939231011fc6fd892fd788f4fbe1353fc9d390f19d5071305092fc89fd6a07e6289ef3e2f68680b7a2eb9e03b6826b9ef578b36397710cd1a34c618754bcbd012a7dbf9168ada871b5f565bb7010e74189e697c170ee4b9480538e9903417dee50a4186e1d5fd2"], 0x74}}, 0x20000090) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0xb1, @private2, 0xfffffc01}, 0x1c) 4m10.989344038s ago: executing program 2 (id=1662): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5}]}}}]}, 0x44}}, 0x44000000) 4m10.963359996s ago: executing program 1 (id=1663): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x44048000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1d00}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 4m10.962280456s ago: executing program 0 (id=1664): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x2, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000080)=0x10000, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x19, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, 0x420a2, 0x79269}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xcc93f1266b7358bf}, 0x8040) 4m10.819837236s ago: executing program 2 (id=1667): socket$can_j1939(0x1d, 0x2, 0x7) socket(0x22, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m10.800768363s ago: executing program 0 (id=1668): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) socket$isdn(0x22, 0x3, 0x25) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @remote}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@delsa={0x28, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {@in6=@local, 0x4d4, 0x2, 0x33}}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)="588ab42bcf2eb389050bb2a8afb8de", 0xf}, 0x1, 0x0, 0x0, 0x1}, 0x24000004) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 4m10.729643037s ago: executing program 1 (id=1669): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000072b86aeaf79c775a4c613694c026ddf7a4ae172b7446dd4dc5f6e46e5e0126d6ae6ffa0e357b20cd89fc8f86649d4ad8226083e725bdfe7ee60fa14367bfa4d66856ba581bb9ede00a94e57a5f36d8f00a5867fc7486bb432ae95f87a8e6db588c0124a337d9e511de508a3e6186f6121f0d8c1a6601018544c8382358ef6ce6dc7bb70e0134b33eab8a1", @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000001400038004000400080002000000000004000100180001801400020076657468305f746f5f626f6e64000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r9, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40000) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000140)=""/174, 0xae}], 0x2, 0x2, 0x3) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 4m10.699001237s ago: executing program 2 (id=1671): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x41) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000600000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000a40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xac5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 4m10.58152927s ago: executing program 4 (id=1673): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f00000001c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0xc, @remote, 0xfffffff7}}, 0x24) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xf51) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2}) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24044014) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, r8, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x0) (async) r9 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r9, 0x107, 0xe, 0x0, &(0x7f0000000080)) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)="ebb8e3", 0x3}, 0x1, 0x0, 0x0, 0x48001}, 0x4c880) (async) r11 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r11, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20939, 0x6003}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) getsockname$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030400002007000000000990b60c6912f37d7de63c54015bb88d00", @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r5, @ANYBLOB="e7ac5dd5", @ANYRES32, @ANYBLOB="04001400"], 0x44}, 0x1, 0xba01}, 0x0) 4m10.333781526s ago: executing program 0 (id=1676): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x0, 0x85ffffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 4m10.285851304s ago: executing program 3 (id=1677): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6) r2 = socket$rxrpc(0x21, 0x2, 0x2) mmap(&(0x7f0000b05000/0x1000)=nil, 0x1000, 0x1000007, 0x4153050, r2, 0x100000) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001780)="a2a69b400060", 0x6}, {0x0}], 0x2}}], 0x1, 0x8124) 4m10.278282522s ago: executing program 4 (id=1678): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x41) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000600000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000a40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xac5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 4m10.238813553s ago: executing program 2 (id=1679): r0 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r0, 0x8, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800c0}, 0x24004048) unshare(0x20000400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020"], 0x38}, 0x24000052) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x348, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1c000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xe4e7, 0x7, 0x0, 0x0, "756a1796ba7709aaf1afdd4c49089efda626f1a5ffe85e8698e207ea56736661698e1f152f8d024dc4c4dacc58a88e7f1e8534a8b0b9f8704e591c0762a21d16"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38}, {0xfffffdc0, 0x6, "c01ee8cff442c5cd5c10cb35407de72bf1b0146399dd9de34b2fd21f8da9b37d7023c9cbef98edd107324d4994f4879e504e406013d9aa2043228ca69cab5e90b915b9016e4a5be5d408052c38857150b0c8b438d69d288e89cbc6ff0d62a5d0f907d5ffb96b7b2e9c62df7fb8ebae762cb38e6735d8e20ea3d1cd08ec0fb8a4f8a7f2dc396d114706418f4f7990f5b954c40c3e9b96c9722dea0b93a456a65a8edc943c61513c0e6a4e31087ccf88cbe2f1144d69dfc92ce62e31"}, {0xfffffdaa}, {0xc}}}]}]}, 0x78}}, 0x0) 4m10.145499424s ago: executing program 0 (id=1680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x8) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x4}, [@typed={0x4, 0x123}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x61, 0x0, 0x61]}}, 0x0, 0x64}, 0x28) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m10.084599828s ago: executing program 4 (id=1681): socket$can_j1939(0x1d, 0x2, 0x7) socket(0x22, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) pipe(&(0x7f0000000040)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m10.080911284s ago: executing program 3 (id=1682): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000024c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000ffdbdf2511000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000006a00010625bd7000fbdbdf250a0000000000020408000a0001005ebc15"], 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0xc044) 4m9.947892144s ago: executing program 2 (id=1683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000024000380040001001c0003800c000180080001"], 0x50}}, 0x0) 4m9.943817703s ago: executing program 3 (id=1684): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x2c, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r1}, 0x20) close(r1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000440)={"9e909e346f671de7e8f9a62e5054dbf6", 0x0, 0x0, {0x0, 0x7}, {0x80, 0x8}, 0x8001, [0x7fffffff, 0x8, 0x7fffffff, 0x4, 0x100000001, 0xa5d, 0x1000, 0x80000001, 0x7043, 0x7, 0xffffffffffffffff, 0x6, 0x1, 0xff, 0xfffffffffffeffff, 0xe]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000740)={"76a35a5f7d8505da9d4ed7fd5c8c9909", r3, r4, {0x39, 0x2}, {0x0, 0x1ff}, 0x3, [0x54, 0xc6b, 0xdb39, 0xffffffffffffffff, 0x6a, 0x7ff, 0x7fffffffffffffff, 0x3ff, 0xd08e, 0x8000000000000000, 0x4, 0x72, 0x2, 0x1, 0x0, 0x1]}) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e21, 0x4, @empty, 0x2}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0xfffffe31) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\a\x00\x00\x00\t\x00'], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x28, 0x10}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x1, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x10}]}}, &(0x7f00000002c0)=""/4, 0x32, 0x4, 0x1, 0xfffffff8}, 0x28) r10 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009008bffffffff006200000004000000000000000000080000000000"], 0x3c}}, 0x54) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}]}, &(0x7f0000000b40)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x18, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xe, 0x3, 0x80000001}, 0x10, 0x1b328, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000000c40)=[{0x4000004, 0x1, 0xb, 0xa}, {0x5, 0x1, 0x4, 0x8}, {0x1, 0x3, 0x0, 0x8}, {0x4, 0x1, 0x8, 0x3}, {0x5, 0x4, 0xb, 0x1}, {0x2, 0x4, 0x0, 0xe}, {0x4, 0x1, 0x4, 0x3}], 0x10, 0x5}, 0x64) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup=r9, 0xffffffffffffffff, 0x21, 0x8, 0x0, @void, @value=r11}, 0x20) 4m9.943258977s ago: executing program 4 (id=1685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000"], 0x1e8}, 0x1, 0x88ffffff}, 0x0) 4m9.813266565s ago: executing program 2 (id=1686): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb110018"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x4, &(0x7f0000001880)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb7ba, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0xff97) sendto$inet(r0, 0x0, 0x0, 0x10048095, 0x0, 0x0) 4m9.812876192s ago: executing program 3 (id=1687): unshare(0x22020400) unshare(0x480) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x426682, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSDEBUG(r1, 0x40047440, 0x0) 4m9.795993559s ago: executing program 4 (id=1688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'ip6_vti0\x00', 0xc201}) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x9, r3, 0x3ffffff}, 0x10) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'ip6_vti0\x00', 0xc201}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) (async) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) (async) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x9, r3, 0x3ffffff}, 0x10) (async) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) (async) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0], 0xfdef) (async) 4m9.767949446s ago: executing program 3 (id=1689): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x41) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000600000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000001c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000a40)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xac5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) 4m9.713921222s ago: executing program 0 (id=1690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4004850}, 0x20040040) 4m9.711772047s ago: executing program 3 (id=1691): socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='xen_mmu_set_p4d\x00', r0, 0x0, 0x5}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4004816}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffe0d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x6, @local}, 0x4, {0x2, 0x4e1d, @rand_addr=0x64010101}}) close(r1) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x80, 0xd]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) recvmmsg$unix(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 4m9.613716598s ago: executing program 4 (id=1692): socket$vsock_stream(0x28, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x4, 0x6d, 0x8, 0x6, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x700, 0x3, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x90, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310328bd7000000000000800000008000300", @ANYRES32=r8], 0x24}}, 0x0) 3m52.077256421s ago: executing program 32 (id=1690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x23, &(0x7f0000000040)="1875008e80d51858", 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4004850}, 0x20040040) 3m52.018944393s ago: executing program 33 (id=1669): socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8dffff"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000080)='syz0\x00', 0x1ff) r6 = openat$cgroup(r5, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)=ANY=[@ANYBLOB="40000000072b86aeaf79c775a4c613694c026ddf7a4ae172b7446dd4dc5f6e46e5e0126d6ae6ffa0e357b20cd89fc8f86649d4ad8226083e725bdfe7ee60fa14367bfa4d66856ba581bb9ede00a94e57a5f36d8f00a5867fc7486bb432ae95f87a8e6db588c0124a337d9e511de508a3e6186f6121f0d8c1a6601018544c8382358ef6ce6dc7bb70e0134b33eab8a1", @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000001400038004000400080002000000000004000100180001801400020076657468305f746f5f626f6e64000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r9, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x40000) preadv(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/89, 0x59}, {&(0x7f0000000140)=""/174, 0xae}], 0x2, 0x2, 0x3) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 3m51.958068545s ago: executing program 34 (id=1686): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb110018"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x4, &(0x7f0000001880)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb7ba, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0xff97) sendto$inet(r0, 0x0, 0x0, 0x10048095, 0x0, 0x0) 3m51.880369201s ago: executing program 35 (id=1691): socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='xen_mmu_set_p4d\x00', r0, 0x0, 0x5}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4004816}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffe0d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x5]}, 0x8}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x6, @local}, 0x4, {0x2, 0x4e1d, @rand_addr=0x64010101}}) close(r1) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x80, 0xd]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) recvmmsg$unix(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 3m51.772163548s ago: executing program 36 (id=1692): socket$vsock_stream(0x28, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x4, 0x6d, 0x8, 0x6, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x700, 0x3, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x90, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310328bd7000000000000800000008000300", @ANYRES32=r8], 0x24}}, 0x0) 3.67869922s ago: executing program 8 (id=3722): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x5, 0x1f, 0x0, &(0x7f0000000100)="66d4492a0a1b30e6f5d85a6d99", 0x0, 0xca, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) 3.492159002s ago: executing program 8 (id=3724): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9b5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90501b0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc5867dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eafeffffffffffffff000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99a40b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23eb8c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee36cdad078fc88d17cbde37a2270f90a60afe8548d4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd10459e2f2e267f82bafd5b4c7b481ea5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB=' \x00'], 0x38}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.141808722s ago: executing program 6 (id=3727): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x1100}, {0x85, 0x0, 0x0, 0x2b}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.977472926s ago: executing program 7 (id=3732): socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18287769e2cc8ae5e100000000000000180100002020702500000000002020207b1af8ffd0e70000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000003146a0026bd7000ffdbdf250900020073797a3000000000080041007369770014003300776700"/56], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000006364c4f6d68b879e6f240b186e90224a78eb2d670b2d52760e99978dac459c67ab93a7f436f317ee95544d82d2b2cbb074894158243d8b6568", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fbdbdf258200000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000500000027000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b690007e03dd6446ce8880000000000", 0x11}, {&(0x7f0000000200)="b7", 0x1}], 0x2) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r5], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100a55f4d636d72423ffc41877600000000000000000000000a90000000060a0b0400000000000000e5f100000064000480600001800b0001006c6f6f6b7570000050000280080002400000001308000240000000120800054000000001080004400000000108000240000000130800024000000008080002400000000b08000440000000010900010073797a310000000009004100f3797a3000"], 0xb8}}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000100), &(0x7f0000000180)='%pS \x00'}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0x98, 0x24, 0x400, 0x70bd2d, 0x20, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xfff3, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x6c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4375a2b1, 0x3}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffff8, 0x7ff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x10, 0xa}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x5, 0x7}}, @TCA_HTB_DIRECT_QLEN={0x51, 0x5, 0x9}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x2, 0x7, @loopback, 0x7fffff}, 0x1c) (async) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 2.976952616s ago: executing program 6 (id=3733): bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) (async, rerun: 32) socket$inet(0xa, 0x801, 0x84) (async, rerun: 32) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f7508003900", 0x25) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x4, 0x0}}]}, &(0x7f0000000540)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r7, 0x4, 0x0, 0x80000001}, 0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async) accept(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) shutdown(r0, 0x2) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (rerun: 32) 2.837757633s ago: executing program 6 (id=3736): syz_emit_ethernet(0x62, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x10}, @val={@void, {0x8100, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000a0", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @multicast2}}}}}}}, 0x0) r0 = socket(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xd1eae8f721276f1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001500)={0x3a, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "9de402ae5cf225"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000002c0)={{r3, 0x4, 0x9, 0x4, 0x2, 0x5, 0x0, 0x6dac, 0x6, 0x0, 0x5eec5eba, 0x2782, 0x2f01, 0x1, 0x6}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x8, &(0x7f0000000100)="834ca37077da32f9", 0x48, 0x1, 0x7, 0x5507, 0x8, 0x3, 0x10, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7}, {0x0, [0x2e, 0x2e, 0x2e, 0x61, 0x5f]}}, &(0x7f00000014c0)=""/2, 0x1f, 0x2, 0x1}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}]}, 0x48}}, 0x2000000) 2.794876565s ago: executing program 9 (id=3738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180)=[{0x0, 0x0, {0x1}, {0x0, 0xff}, 0x1, 0x7f}, {0x1, 0x0, {0x0, 0x0, 0x2}, {0x1, 0xff, 0x2}}], 0x40) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0xfffffffffffffea6}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882d6939c7c4e4727f8d8979ce9bb883f9213faf51834517bed4d0bfc521236439a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d237e66"}, {&(0x7f0000002c40)="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"}], 0x1, 0xa) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) bind(r3, &(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x80) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000080)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56d41, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x38, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xb48, 0x3, 0x1, 0x200, 0x9, 0x9}}, {0x16, 0x2, [0x1, 0x9, 0x9, 0x1, 0x4, 0x4, 0x7, 0x5, 0x7]}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) 2.769254925s ago: executing program 6 (id=3739): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2e4141, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010003000000000000008180000080"], 0x1c}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001500)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) socket$kcm(0x28, 0x2, 0x0) splice(r7, 0x0, r4, &(0x7f0000000000)=0x40000000, 0x7fffffffffffffff, 0x0) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x60, r3, 0x400, 0x70bd26, 0x25dfdbf5, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @empty}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x2a}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r9}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c4}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x19, 0x70bd2c, 0x255fdbfa, {0x0, 0x0, 0x0, 0x0, 0x40d87, 0x79269}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x7}]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0xcc93f1266b77d0bf}, 0x8040) 2.696876792s ago: executing program 7 (id=3740): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0xb2ad9fb1bfbfce0b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4040040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2.655028692s ago: executing program 6 (id=3741): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x8, &(0x7f0000000100)="834ca37077da32f9", 0x48, 0x1, 0x7, 0x5507, 0x8, 0x3, 0x10, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.62182644s ago: executing program 7 (id=3742): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="5001000010001304fcffffff00000000e0000001000000000000000000000000ac1414aa000000000000000000000000020000004e2400000a00002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e0000002000000000000000000000000000004d1320000007f000001000000000000000000000000feffffffffffffffa40200000000000001000000000000000000000000000000ffffffffffefffff03000000000000000800000000020000df0b00000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000feffffff0000000027bd7000000000000a00010142000000000000005f001200726663343330392863000028616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800000040"], 0x150}}, 0x0) 2.557644585s ago: executing program 9 (id=3743): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010002104ffffffeffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) 2.555691947s ago: executing program 7 (id=3744): r0 = socket$kcm(0x29, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8000000000000000, 0x0, 0x100000001}) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000080)={0x3, 0x1}) getpeername(r1, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000140)=0x80) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0xa6}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r3, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e22, 0x9d2, @local, 0xbc6}}, 0x1, 0x8, 0x2, 0x4, 0x1}, &(0x7f0000000300)=0x98) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) close(r1) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000003c0)={@private2, r6}, 0x14) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000400)={0x2, [0x679e, 0x0]}, &(0x7f0000000440)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'macvlan1\x00'}) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000004c0)={0x2f, 0x8, 0x2, 0xd1, 0x0, [@private0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x48) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000540)=0xffff9403) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000580)={r4, 0x9}, 0x8) write$cgroup_subtree(r1, &(0x7f00000005c0)={[{0x0, 'cpu'}, {0x2b, 'hugetlb'}, {0x2b, 'net'}]}, 0x13) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000600)=[@timestamp, @timestamp, @timestamp, @window={0x3, 0x1, 0xffff}], 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000640)={0x1, 0x6, 0x40, 0x6, 0x21, 0xf7, 0x3}, 0xc) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000680)=0x8) r7 = accept(r1, 0x0, &(0x7f00000006c0)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000700)={r3, 0x8}, &(0x7f0000000740)=0x8) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000780)={"14d77160772863c9d05ef46245851202", 0x0, 0x0, {0xe5a0000000, 0xff}, {0x5, 0x8}, 0x101, [0xfffffffffffffffc, 0x3, 0x5, 0x1, 0x7, 0x2, 0xa3a, 0x8, 0x8, 0x6, 0x0, 0x3ff, 0x5, 0x7, 0x2916643f]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000880)=r8) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000900)={r1}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000940)=@o_path={&(0x7f00000008c0)='./file0\x00', r1, 0x4000, r9}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000980)={r4, 0x7}, &(0x7f00000009c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000a40)={r10, 0x1c, &(0x7f0000000a00)=[@in6={0xa, 0x4e22, 0x80000001, @private1, 0x5}]}, &(0x7f0000000a80)=0x10) 2.525668014s ago: executing program 8 (id=3745): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000080000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) (async) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1401, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}}, 0x0) (async) recvmsg(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}, {&(0x7f0000001280)=""/211, 0xd3}], 0x2}, 0x10002) 2.503035436s ago: executing program 6 (id=3746): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x11, 0x4) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/54, 0x36}, 0x4fb}], 0x1, 0x12020, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1000}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$bt_l2cap(r2, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000600)=ANY=[]) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r6, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2.46416413s ago: executing program 7 (id=3747): write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000884c4cdd007a00650000d1029078e00000010a010100070709ac1414bb8313fbe0000002ffffffff0a010102e000000200001f089078ac141428c8f3a4c4ddea793a07023f9260360646319fec9d62f5b5a7aafea7971f423e741a585a73a821ee2c9e826ef6b0532b5fdb2021db0a3e3e6e6e7869faa8b65af072a7c91409a84c"], 0x7e) r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff01000e0000000000000000000000010c00068005000100000000004700028005000100010000000600034000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00fc00"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000140)={{0x2, 0x4e20, @multicast2}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x2, {0x2, 0x4e23, @local}, 'bridge0\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001500010086f700000000000002100000", @ANYBLOB, @ANYBLOB="14000300730000000000000000000000001a1c1f"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 2.463594543s ago: executing program 8 (id=3748): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5760, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 2.350895473s ago: executing program 8 (id=3750): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000400000002000000000000110300000000000007000000000100000d000000000e00000001000000020000000000000c02000000000061"], 0x0, 0x4c}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 2.25880801s ago: executing program 9 (id=3751): socket(0x10, 0x3, 0x1cb20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0xfffffffd, 0x10000, 0x1, 0xfffffffe, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan3\x00'}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x810, r3, 0x1cf50000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0xf, &(0x7f0000000300)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x5, 0xff1, &(0x7f0000002cc0)=""/4081, 0x40e00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0xffe4}, 0x14}}, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000004}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2.157700417s ago: executing program 8 (id=3752): unshare(0x6a040000) (async, rerun: 32) r0 = socket$inet6(0xa, 0x3, 0x1) (rerun: 32) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4e23, 0xfffc, 0x4e23, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x9, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210000, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) (rerun: 64) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0xffe0) (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x6a040000) (async) close(0xffffffffffffffff) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r4, 0x0) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x40) (async) close(r4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600000008000000ad00000000002000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 2.144272465s ago: executing program 7 (id=3753): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="12", 0x1}], 0x1}, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000280), 0x0}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x4) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}, {&(0x7f0000000440)}, {&(0x7f0000001340)="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", 0xe85}, {0x0}], 0x7, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r5, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020702500000000042020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300002a0b0000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) 1.909155454s ago: executing program 9 (id=3756): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x8, &(0x7f0000000100)="834ca37077da32f9", 0x48, 0x1, 0x7, 0x5507, 0x8, 0x3, 0x10, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.839344875s ago: executing program 9 (id=3757): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) 1.57401896s ago: executing program 9 (id=3758): r0 = socket(0x26, 0xa, 0x3) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r2}, 0x18) r3 = syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x0, 0xd}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x21, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000480)={&(0x7f0000000640), 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="08000100010000000500540000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8881}, 0x4000010) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f00000008c0)={r8, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000580)={r9, 0xb0, "f3663f226195d6a79015bb7b7734e7b5cd0fc5ae73f19549a5265d3f7c2a59f3fb838ee4d0db19a76405a931228efc4b93af18c6e336e5a45f297f041dd5ede1bdfe7bc61efad3ea56471ee3dad245d2d70ee8205fc9d7f6587693b9feac0f83e9d3fd5512fdb2fe2946983477dc88dcc14f570e427ecdf20f78715deb4abf1f0a99766f9cc11615a9eabcb77f2c56270cae48f1f9ab9b4bc26c1d1e1db331e246a97c555caf9d90a9d4c53d954970d3"}, &(0x7f0000000000)=0xb8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="30fd0000400007012bbd700000000000217c0000040042800a00018006000600800a00000c00028005001480b0000000"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) ioctl$FS_IOC_GETFLAGS(r10, 0x80086601, &(0x7f0000000080)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0xfffc, 0x2, 0x5, 0x5}, 0x10) 609.35616ms ago: executing program 5 (id=3761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="01000000000000000000050000001800018014000200", @ANYRESDEC=r1], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 539.148865ms ago: executing program 5 (id=3762): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000010002104effffffffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r8], 0x50}}, 0x2) 273.638406ms ago: executing program 5 (id=3763): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, 0x0) (rerun: 64) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) (async) r2 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000300)=0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r7, @ANYRES32=r8, @ANYRES32=r4, @ANYRESHEX=r1], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@getchain={0x4c, 0x66, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xf, 0x1}, {0x2, 0xffe0}, {0xfff3, 0x2}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1004}, 0x0) (async) sendto$packet(r5, &(0x7f00000002c0)="44c394f305916c4516999da286dd", 0xe, 0x0, &(0x7f0000000340)={0x11, 0x3, r8, 0x1, 0x0, 0x6, @remote}, 0x14) (async) ioctl$sock_netdev_private(r4, 0x89fa, &(0x7f0000000580)="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") getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1}, &(0x7f0000000500)=0x7) (async, rerun: 32) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, &(0x7f00000001c0)=0x14) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000700)={0x0, 0x6, 0x2, 0x4, 0x89f, 0x6, 0xa185, 0x2, {0x0, @in6={{0xa, 0x4e22, 0x7, @private1, 0x4}}, 0x10, 0x5, 0x97, 0xfff, 0x36d5ea56}}, &(0x7f0000000400)=0xb0) (async) r9 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) (async) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29"], 0x6c}}, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @null, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 254.279635ms ago: executing program 5 (id=3764): r0 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r0, 0x8, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800c0}, 0x24004048) unshare(0x20000400) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0x16, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="e6", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa0000000020"], 0x38}, 0x24000052) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x348, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x38040000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xe4e7, 0x7, 0x0, 0x0, "756a1796ba7709aaf1afdd4c49089efda626f1a5ffe85e8698e207ea56736661698e1f152f8d024dc4c4dacc58a88e7f1e8534a8b0b9f8704e591c0762a21d16"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38}, {0xfffffdc0, 0x6, "c01ee8cff442c5cd5c10cb35407de72bf1b0146399dd9de34b2fd21f8da9b37d7023c9cbef98edd107324d4994f4879e504e406013d9aa2043228ca69cab5e90b915b9016e4a5be5d408052c38857150b0c8b438d69d288e89cbc6ff0d62a5d0f907d5ffb96b7b2e9c62df7fb8ebae762cb38e6735d8e20ea3d1cd08ec0fb8a4f8a7f2dc396d114706418f4f7990f5b954c40c3e9b96c9722dea0b93a456a65a8edc943c61513c0e6a4e31087ccf88cbe2f1144d69dfc92ce62e31"}, {0xfffffdaa}, {0xc}}}]}]}, 0x78}}, 0x0) 94.360986ms ago: executing program 5 (id=3765): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xea, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 39) 0s ago: executing program 5 (id=3766): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a00010000000080fbdbdf250a"], 0x2c}}, 0x20000050) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000024000380040001001c0003800c", @ANYRESDEC=r3], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 7) kernel console output (not intermixed with test programs): e7e6038 R14: 00007fdc1e7e5fa0 R15: 00007ffe145aa138 [ 282.035988][T12397] [ 282.675233][T12408] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 282.801020][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1913'. [ 283.559154][ T5828] Bluetooth: hci7: link tx timeout [ 283.564866][ T5828] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 283.681532][T12415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 283.689683][T12415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 283.697610][T12415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 283.705501][T12415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 283.713385][T12415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 283.721326][T12415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 283.729252][T12415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 283.737182][T12415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 283.745096][T12415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 283.752954][T12415] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 283.827940][T12429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 285.056842][T12481] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1932'. [ 285.467843][T12488] netlink: 'syz.6.1935': attribute type 28 has an invalid length. [ 285.484857][T12488] netlink: 'syz.6.1935': attribute type 3 has an invalid length. [ 285.492932][T12488] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1935'. [ 285.563893][T12489] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input9 [ 285.605321][ T5832] Bluetooth: hci7: command 0x0406 tx timeout [ 285.633019][T12492] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1936'. [ 286.174796][T12514] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1943'. [ 286.220691][T12514] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1943'. [ 286.749210][T12528] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 286.760665][T12528] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 286.843136][T12531] bond2: (slave tunl0): Device is not bonding slave [ 286.851774][T12531] bond2: option active_slave: invalid value (tunl0) [ 286.865192][T12531] bond2 (unregistering): Released all slaves [ 287.025851][T12544] tipc: Enabled bearer , priority 0 [ 287.117743][T12547] syzkaller0: entered promiscuous mode [ 287.125561][T12547] syzkaller0: entered allmulticast mode [ 287.150794][T12536] tipc: Resetting bearer [ 287.191818][T12534] tipc: Resetting bearer [ 287.230398][T12534] tipc: Disabling bearer [ 287.385371][T12563] xt_bpf: check failed: parse error [ 287.391229][T12563] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1957'. [ 287.427826][T12563] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1957'. [ 287.464354][T12563] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1957'. [ 287.533715][T12567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1958'. [ 287.542943][T12567] netlink: 'syz.5.1958': attribute type 7 has an invalid length. [ 287.551650][T12567] netlink: 'syz.5.1958': attribute type 8 has an invalid length. [ 287.559952][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1958'. [ 287.646179][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1959'. [ 287.695811][T12570] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 287.714614][T12570] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 287.739965][T12570] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 288.188011][T12585] bond1: (slave tunl0): Device is not bonding slave [ 288.208578][T12585] bond1: option active_slave: invalid value (tunl0) [ 288.239668][T12585] bond1 (unregistering): Released all slaves [ 288.411747][T12600] 8021q: adding VLAN 0 to HW filter on device bond3 [ 288.424591][T12600] bond0: (slave bond3): Enslaving as an active interface with an up link [ 289.033283][T12602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.059185][T12602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.077887][T12602] bond0 (unregistering): (slave bond3): Releasing backup interface [ 289.126411][T12602] bond0 (unregistering): Released all slaves [ 289.264682][T12619] syzkaller1: entered promiscuous mode [ 289.283877][T12619] syzkaller1: entered allmulticast mode [ 289.636226][T12644] ipvlan2: entered promiscuous mode [ 289.710493][T12644] ipvlan2: entered allmulticast mode [ 289.754767][T12644] geneve1: entered allmulticast mode [ 290.052934][T12657] bond1: (slave tunl0): Device is not bonding slave [ 290.078576][T12657] bond1: option active_slave: invalid value (tunl0) [ 290.139748][T12657] bond1 (unregistering): Released all slaves [ 291.028557][T12689] __nla_validate_parse: 7 callbacks suppressed [ 291.028577][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1998'. [ 291.093509][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1998'. [ 291.192990][T12692] xt_connbytes: Forcing CT accounting to be enabled [ 291.400331][T12698] netlink: 'syz.9.2001': attribute type 3 has an invalid length. [ 291.430733][T12702] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2003'. [ 291.485436][T12699] kthread_run failed with err -4 [ 291.490830][T12699] netlink: 'syz.9.2001': attribute type 3 has an invalid length. [ 292.006246][T12728] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2006'. [ 292.113170][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2009'. [ 292.122492][T12744] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2009'. [ 292.175141][ T3509] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.237527][ T36] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.282201][ T36] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.314283][ T36] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.382657][T12755] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2013'. [ 292.425150][T12757] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2015'. [ 292.528888][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2017'. [ 292.554995][T12762] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2017'. [ 292.675038][T12770] net_ratelimit: 44 callbacks suppressed [ 292.675054][T12770] openvswitch: netlink: Flow actions attr not present in new flow. [ 292.724462][T12774] netlink: 'syz.9.2021': attribute type 13 has an invalid length. [ 292.742617][T12774] netlink: 'syz.9.2021': attribute type 17 has an invalid length. [ 292.953353][T12774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.079274][T12778] netlink: 'syz.7.2022': attribute type 10 has an invalid length. [ 293.168096][T12778] team0: Port device geneve0 added [ 293.635853][T12807] tipc: Enabled bearer , priority 0 [ 293.646168][T12807] syzkaller0: entered promiscuous mode [ 293.651660][T12807] syzkaller0: entered allmulticast mode [ 293.727327][T12807] tipc: Resetting bearer [ 293.746305][T12806] tipc: Resetting bearer [ 293.796413][T12806] tipc: Disabling bearer [ 294.992629][T12837] xt_connbytes: Forcing CT accounting to be enabled [ 295.422748][T12851] bond0: (slave tunl0): Device is not bonding slave [ 295.443531][T12851] bond0: option active_slave: invalid value (tunl0) [ 295.454143][T12851] bond0 (unregistering): Released all slaves [ 295.933488][T12880] syzkaller1: entered promiscuous mode [ 295.963743][T12880] syzkaller1: entered allmulticast mode [ 296.322134][T12900] __nla_validate_parse: 11 callbacks suppressed [ 296.322151][T12900] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2056'. [ 296.339273][T12900] netlink: 'syz.6.2056': attribute type 4 has an invalid length. [ 296.375950][T12910] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2059'. [ 296.414154][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2057'. [ 296.470647][T12907] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2057'. [ 296.471040][T12912] bond0: (slave tunl0): Device is not bonding slave [ 296.486707][T12912] bond0: option active_slave: invalid value (tunl0) [ 296.509973][T12912] bond0 (unregistering): Released all slaves [ 296.794486][T12931] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2065'. [ 296.813684][T12931] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2065'. [ 296.831091][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2066'. [ 296.843522][T12933] bond0: Device is already in use. [ 296.917259][T12935] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2068'. [ 297.242308][T12945] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2072'. [ 297.553980][T12961] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2077'. [ 297.663330][T12958] bond0: (slave tunl0): Device is not bonding slave [ 297.680216][T12958] bond0: option active_slave: invalid value (tunl0) [ 297.695847][T12958] bond0 (unregistering): Released all slaves [ 298.279489][T12974] syzkaller0: entered promiscuous mode [ 298.285222][T12974] syzkaller0: entered allmulticast mode [ 298.657015][T12993] macsec0: left allmulticast mode [ 298.673851][T12993] veth1_macvtap: left allmulticast mode [ 298.691854][T12993] macsec0: left promiscuous mode [ 298.697545][T12993] bridge0: port 3(macsec0) entered disabled state [ 298.866322][T12999] svc: failed to register nfsdv3 RPC service (errno 111). [ 298.891774][T12999] svc: failed to register nfsaclv3 RPC service (errno 111). [ 298.901519][T12993] bridge_slave_1: left allmulticast mode [ 298.909404][T12993] bridge_slave_1: left promiscuous mode [ 298.916987][T12993] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.952723][T12993] bridge_slave_0: left allmulticast mode [ 298.958720][T12993] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.032544][T12989] pimreg1: tun_chr_ioctl cmd 21731 [ 299.532814][T13024] ip6tnl0: entered promiscuous mode [ 299.553199][T13025] FAULT_INJECTION: forcing a failure. [ 299.553199][T13025] name failslab, interval 1, probability 0, space 0, times 0 [ 299.563559][T13024] ip6tnl0: entered allmulticast mode [ 299.565861][T13025] CPU: 0 UID: 0 PID: 13025 Comm: syz.6.2095 Not tainted syzkaller #0 PREEMPT(full) [ 299.565884][T13025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.565894][T13025] Call Trace: [ 299.565903][T13025] [ 299.565910][T13025] dump_stack_lvl+0x189/0x250 [ 299.565938][T13025] ? __pfx____ratelimit+0x10/0x10 [ 299.565961][T13025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.565982][T13025] ? __pfx__printk+0x10/0x10 [ 299.565999][T13025] ? do_xdp_generic+0x11a/0x11a0 [ 299.566030][T13025] should_fail_ex+0x414/0x560 [ 299.566060][T13025] should_failslab+0xa8/0x100 [ 299.566079][T13025] kmem_cache_alloc_noprof+0x74/0x6e0 [ 299.566102][T13025] ? skb_clone+0x212/0x3a0 [ 299.566126][T13025] skb_clone+0x212/0x3a0 [ 299.566143][T13025] ? packet_rcv_spkt+0x117/0x5c0 [ 299.566163][T13025] packet_rcv_spkt+0x139/0x5c0 [ 299.566184][T13025] __netif_receive_skb_core+0x7c7/0x3060 [ 299.566212][T13025] ? __kernel_text_address+0xd/0x40 [ 299.566241][T13025] ? unwind_get_return_address+0x4d/0x90 [ 299.566261][T13025] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 299.566283][T13025] ? arch_stack_walk+0xfc/0x150 [ 299.566313][T13025] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 299.566334][T13025] ? stack_trace_save+0x9c/0xe0 [ 299.566353][T13025] ? __pfx_stack_trace_save+0x10/0x10 [ 299.566376][T13025] ? stack_depot_save_flags+0x40/0x860 [ 299.566403][T13025] ? __lock_acquire+0xab9/0xd20 [ 299.566426][T13025] ? netif_receive_skb+0x115/0x790 [ 299.566448][T13025] ? netif_receive_skb+0x115/0x790 [ 299.566472][T13025] __netif_receive_skb+0x72/0x380 [ 299.566499][T13025] ? netif_receive_skb+0x115/0x790 [ 299.566520][T13025] netif_receive_skb+0x1cb/0x790 [ 299.566541][T13025] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 299.566560][T13025] ? __pfx_netif_receive_skb+0x10/0x10 [ 299.566587][T13025] ? tun_rx_batched+0x160/0x730 [ 299.566609][T13025] tun_rx_batched+0x1b9/0x730 [ 299.566627][T13025] ? __lock_acquire+0xab9/0xd20 [ 299.566647][T13025] ? __pfx_tun_rx_batched+0x10/0x10 [ 299.566670][T13025] ? tun_get_user+0x272f/0x3e90 [ 299.566701][T13025] tun_get_user+0x2b65/0x3e90 [ 299.566727][T13025] ? tun_get_user+0x6f6/0x3e90 [ 299.566747][T13025] ? tun_get_user+0x272f/0x3e90 [ 299.566770][T13025] ? aa_file_perm+0x44d/0x1550 [ 299.566786][T13025] ? __pfx_tun_get_user+0x10/0x10 [ 299.566815][T13025] ? __lock_acquire+0xab9/0xd20 [ 299.566836][T13025] ? ref_tracker_alloc+0x318/0x460 [ 299.566850][T13025] ? __lock_acquire+0xab9/0xd20 [ 299.566868][T13025] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 299.566890][T13025] ? tun_get+0x1c/0x2f0 [ 299.566913][T13025] ? tun_get+0x1c/0x2f0 [ 299.566930][T13025] ? tun_get+0x1c/0x2f0 [ 299.566953][T13025] tun_chr_write_iter+0x113/0x200 [ 299.566975][T13025] vfs_write+0x5c9/0xb30 [ 299.567001][T13025] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 299.567020][T13025] ? __pfx_vfs_write+0x10/0x10 [ 299.567051][T13025] ? __fget_files+0x2a/0x420 [ 299.567075][T13025] ksys_write+0x145/0x250 [ 299.567099][T13025] ? __pfx_ksys_write+0x10/0x10 [ 299.567123][T13025] ? do_syscall_64+0xbe/0xfa0 [ 299.567143][T13025] do_syscall_64+0xfa/0xfa0 [ 299.567158][T13025] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.567174][T13025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.567190][T13025] ? clear_bhb_loop+0x60/0xb0 [ 299.567210][T13025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.567226][T13025] RIP: 0033:0x7fa08298e17f [ 299.567246][T13025] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 299.567260][T13025] RSP: 002b:00007fa083895000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 299.567279][T13025] RAX: ffffffffffffffda RBX: 00007fa082be6090 RCX: 00007fa08298e17f [ 299.567291][T13025] RDX: 000000000000002a RSI: 0000200000000b80 RDI: 00000000000000c8 [ 299.567302][T13025] RBP: 00007fa083895090 R08: 0000000000000000 R09: 0000000000000000 [ 299.567312][T13025] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 299.567322][T13025] R13: 00007fa082be6128 R14: 00007fa082be6090 R15: 00007ffd12dd33d8 [ 299.567351][T13025] [ 299.999080][T13032] dummy0: Caught tx_queue_len zero misconfig [ 300.139808][T13034] team0: Port device bridge3 added [ 300.167259][T13032] bridge0: port 3(team0) entered blocking state [ 300.176097][T13032] bridge0: port 3(team0) entered disabled state [ 300.188383][T13032] team0: entered allmulticast mode [ 300.194786][T13032] team_slave_0: entered allmulticast mode [ 300.200687][T13032] team_slave_1: entered allmulticast mode [ 300.206814][T13032] bridge3: entered allmulticast mode [ 300.214799][T13032] team0: entered promiscuous mode [ 300.219837][T13032] team_slave_0: entered promiscuous mode [ 300.226193][T13032] team_slave_1: entered promiscuous mode [ 300.232055][T13032] bridge3: entered promiscuous mode [ 300.238570][T13032] bridge0: port 3(team0) entered blocking state [ 300.245332][T13032] bridge0: port 3(team0) entered forwarding state [ 300.909054][T13074] netlink: 'syz.7.2108': attribute type 9 has an invalid length. [ 301.723316][T13108] xt_bpf: check failed: parse error [ 301.834686][T13117] __nla_validate_parse: 16 callbacks suppressed [ 301.834703][T13117] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2120'. [ 301.884053][T13108] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2117'. [ 301.901313][T13117] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2120'. [ 301.917992][T13108] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2117'. [ 301.944208][T13108] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2117'. [ 302.161359][T13126] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 302.291054][T13136] bond0: (slave dummy0): Releasing backup interface [ 302.316320][T13128] netlink: 'syz.9.2124': attribute type 10 has an invalid length. [ 302.388179][T13136] bond0: (slave bond_slave_0): Releasing backup interface [ 302.434739][T13136] bond0: (slave bond_slave_1): Releasing backup interface [ 302.483480][T13136] team0: Port device team_slave_0 removed [ 302.511502][T13136] team0: Port device team_slave_1 removed [ 302.519432][T13136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.535867][T13136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.561928][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2130'. [ 302.575840][T13136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.584323][T13136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.596000][T13136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 302.616807][T13151] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 302.625031][ T6900] IPVS: starting estimator thread 0... [ 302.715561][T13128] mac80211_hwsim hwsim20 wlan1: left allmulticast mode [ 302.724725][T13154] IPVS: using max 26 ests per chain, 62400 per kthread [ 302.764420][T13128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.811720][T13128] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 302.934511][T13152] veth3: entered promiscuous mode [ 303.260716][T13163] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2133'. [ 303.281168][T13163] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2133'. [ 303.546904][T13172] netlink: 'syz.6.2136': attribute type 2 has an invalid length. [ 303.580561][T13172] !: entered promiscuous mode [ 303.601504][T13173] netlink: 'syz.6.2136': attribute type 2 has an invalid length. [ 303.674308][T13173] !: left promiscuous mode [ 304.397294][T13198] netlink: 'syz.6.2142': attribute type 3 has an invalid length. [ 304.425488][T13198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2142'. [ 304.561801][T13202] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2143'. [ 304.721638][T13202] syzkaller0: entered promiscuous mode [ 304.728515][T13202] syzkaller0: entered allmulticast mode [ 305.279158][T13226] bond1: (slave tunl0): Device is not bonding slave [ 305.296526][T13226] bond1: option active_slave: invalid value (tunl0) [ 305.306736][T13226] bond1 (unregistering): Released all slaves [ 305.372434][T13240] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:19999 [ 305.828083][T13251] syzkaller0: entered promiscuous mode [ 305.854016][T13251] syzkaller0: entered allmulticast mode [ 307.714888][T13288] __nla_validate_parse: 6 callbacks suppressed [ 307.714907][T13288] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2173'. [ 307.837696][T13287] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2173'. [ 307.859962][T13287] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2173'. [ 308.069670][T13296] rose0: entered promiscuous mode [ 308.286887][T13304] syzkaller0: entered promiscuous mode [ 308.292385][T13304] syzkaller0: entered allmulticast mode [ 308.324523][T13303] tipc: Enabled bearer , priority 0 [ 308.361364][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2178'. [ 308.538254][T13299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.557791][T13299] tipc: Resetting bearer [ 308.603166][T13299] tipc: Disabling bearer [ 308.660463][T13312] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2181'. [ 308.793867][T13315] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2182'. [ 308.906811][T13319] xt_bpf: check failed: parse error [ 308.912561][T13319] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2184'. [ 308.934455][T13319] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2184'. [ 308.955627][T13319] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2184'. [ 308.956843][T13317] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2183'. [ 309.272480][T13348] bridge4: entered promiscuous mode [ 309.439245][T13353] wg1 speed is unknown, defaulting to 1000 [ 309.534092][T13357] vlan3: entered promiscuous mode [ 309.545089][T13357] bridge5: entered promiscuous mode [ 309.576930][T13357] vlan3: entered allmulticast mode [ 309.596926][T13357] bridge5: entered allmulticast mode [ 309.603174][T13353] wg1 speed is unknown, defaulting to 1000 [ 309.614087][T13353] wg1 speed is unknown, defaulting to 1000 [ 309.621559][T13365] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 309.630293][T13365] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 309.636183][T13353] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 309.662101][T13360] xt_TCPMSS: Only works on TCP SYN packets [ 309.697393][T13353] wg1 speed is unknown, defaulting to 1000 [ 309.723098][T13353] wg1 speed is unknown, defaulting to 1000 [ 309.760337][T13368] xt_bpf: check failed: parse error [ 309.764678][T13353] wg1 speed is unknown, defaulting to 1000 [ 309.799539][T13353] wg1 speed is unknown, defaulting to 1000 [ 309.824277][T13353] wg1 speed is unknown, defaulting to 1000 [ 309.852580][T13353] wg1 speed is unknown, defaulting to 1000 [ 309.882919][T13353] wg1 speed is unknown, defaulting to 1000 [ 310.419461][T13388] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 311.133437][T13426] bond0: (slave tunl0): Device is not bonding slave [ 311.150186][T13426] bond0: option active_slave: invalid value (tunl0) [ 311.160760][T13426] bond0 (unregistering): Released all slaves [ 311.316412][T13433] gretap0: entered promiscuous mode [ 311.330050][T13379] wg1 speed is unknown, defaulting to 1000 [ 311.330072][T13432] gretap0: left promiscuous mode [ 311.707108][T13459] netlink: 'syz.6.2229': attribute type 13 has an invalid length. [ 311.717569][T13459] netlink: 'syz.6.2229': attribute type 17 has an invalid length. [ 311.919989][T13459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.037337][T13452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.060897][T13467] bond3: (slave tunl0): Device is not bonding slave [ 312.071936][T13467] bond3: option active_slave: invalid value (tunl0) [ 312.109157][T13467] bond3 (unregistering): Released all slaves [ 312.131505][T13459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.518353][T13461] wg1 speed is unknown, defaulting to 1000 [ 313.219355][T13506] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 313.617074][T13514] __nla_validate_parse: 20 callbacks suppressed [ 313.617091][T13514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2246'. [ 313.644687][T13481] wg1 speed is unknown, defaulting to 1000 [ 313.720853][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2247'. [ 313.809051][T13517] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2247'. [ 314.232694][T13534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.746752][T13548] syzkaller0: entered promiscuous mode [ 314.752331][T13548] syzkaller0: entered allmulticast mode [ 314.929101][T13563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2260'. [ 314.939202][T13563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2260'. [ 315.261482][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2263'. [ 316.322759][T13571] vlan5: entered promiscuous mode [ 316.355768][T13571] bond0: entered promiscuous mode [ 316.360831][T13571] bond_slave_0: entered promiscuous mode [ 316.378528][T13571] bond_slave_1: entered promiscuous mode [ 316.408416][T13572] lo: Caught tx_queue_len zero misconfig [ 316.453733][T13572] netlink: 'syz.5.2263': attribute type 14 has an invalid length. [ 316.543453][T13579] bridge_slave_0: left allmulticast mode [ 316.572121][T13579] bridge_slave_0: left promiscuous mode [ 316.601054][T13579] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.615532][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2266'. [ 316.641912][T13579] bridge_slave_1: left allmulticast mode [ 316.651577][T13582] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2266'. [ 316.660982][T13579] bridge_slave_1: left promiscuous mode [ 316.667077][T13582] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2266'. [ 316.673868][T13579] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.709524][T13579] bond0: (slave bond_slave_0): Releasing backup interface [ 316.729089][T13579] bond0: (slave bond_slave_1): Releasing backup interface [ 316.759094][T13590] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2267'. [ 316.779900][T13579] team0: Port device C removed [ 316.808989][T13579] team0: Port device team_slave_1 removed [ 316.826069][T13579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.835087][T13579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.844625][T13579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.859448][T13579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.868668][T13579] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 316.893549][ T10] wg1 speed is unknown, defaulting to 1000 [ 317.047341][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.080788][T13597] ip6gre1: entered promiscuous mode [ 317.104871][T13597] ip6gre1: entered allmulticast mode [ 317.343990][T13558] wg1 speed is unknown, defaulting to 1000 [ 317.896060][T13629] tc_dump_action: action bad kind [ 318.759413][T13660] __nla_validate_parse: 5 callbacks suppressed [ 318.759430][T13660] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2294'. [ 318.775420][T13660] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2294'. [ 318.822246][T13663] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 318.828799][T13663] syzkaller1: linktype set to 778 [ 319.059165][T13674] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2298'. [ 319.168055][T13676] batadv1: entered promiscuous mode [ 319.286072][T13683] FAULT_INJECTION: forcing a failure. [ 319.286072][T13683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.309626][T13683] CPU: 1 UID: 0 PID: 13683 Comm: syz.9.2301 Not tainted syzkaller #0 PREEMPT(full) [ 319.309652][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.309667][T13683] Call Trace: [ 319.309674][T13683] [ 319.309681][T13683] dump_stack_lvl+0x189/0x250 [ 319.309708][T13683] ? __pfx____ratelimit+0x10/0x10 [ 319.309733][T13683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 319.309755][T13683] ? __pfx__printk+0x10/0x10 [ 319.309774][T13683] ? __might_fault+0xb0/0x130 [ 319.309807][T13683] should_fail_ex+0x414/0x560 [ 319.309837][T13683] _copy_from_user+0x2d/0xb0 [ 319.309859][T13683] sctp_setsockopt+0x19f/0x1200 [ 319.309876][T13683] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 319.309901][T13683] do_sock_setsockopt+0x17c/0x1b0 [ 319.309925][T13683] __x64_sys_setsockopt+0x13f/0x1b0 [ 319.309949][T13683] do_syscall_64+0xfa/0xfa0 [ 319.309966][T13683] ? lockdep_hardirqs_on+0x9c/0x150 [ 319.309982][T13683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.309999][T13683] ? clear_bhb_loop+0x60/0xb0 [ 319.310021][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.310042][T13683] RIP: 0033:0x7f8a3838f6c9 [ 319.310057][T13683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.310071][T13683] RSP: 002b:00007f8a39288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.310090][T13683] RAX: ffffffffffffffda RBX: 00007f8a385e5fa0 RCX: 00007f8a3838f6c9 [ 319.310103][T13683] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000004 [ 319.310114][T13683] RBP: 00007f8a39288090 R08: 0000000000000008 R09: 0000000000000000 [ 319.310126][T13683] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 319.310137][T13683] R13: 00007f8a385e6038 R14: 00007f8a385e5fa0 R15: 00007ffdb15944f8 [ 319.310168][T13683] [ 319.325471][T13685] netlink: 'syz.6.2302': attribute type 13 has an invalid length. [ 319.549205][T13688] syzkaller1: entered promiscuous mode [ 319.633791][T13688] syzkaller1: entered allmulticast mode [ 319.678446][T13699] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2305'. [ 319.688672][T13699] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2305'. [ 319.784306][T13690] syzkaller0: entered promiscuous mode [ 319.793037][T13690] syzkaller0: entered allmulticast mode [ 320.208896][T13724] FAULT_INJECTION: forcing a failure. [ 320.208896][T13724] name failslab, interval 1, probability 0, space 0, times 0 [ 320.237140][T13724] CPU: 0 UID: 0 PID: 13724 Comm: syz.7.2314 Not tainted syzkaller #0 PREEMPT(full) [ 320.237164][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.237175][T13724] Call Trace: [ 320.237182][T13724] [ 320.237189][T13724] dump_stack_lvl+0x189/0x250 [ 320.237216][T13724] ? __pfx____ratelimit+0x10/0x10 [ 320.237242][T13724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.237264][T13724] ? __pfx__printk+0x10/0x10 [ 320.237285][T13724] ? stack_trace_save+0x9c/0xe0 [ 320.237306][T13724] ? __pfx_stack_trace_save+0x10/0x10 [ 320.237333][T13724] should_fail_ex+0x414/0x560 [ 320.237362][T13724] should_failslab+0xa8/0x100 [ 320.237382][T13724] kmem_cache_alloc_node_noprof+0x77/0x710 [ 320.237406][T13724] ? __alloc_skb+0x112/0x2d0 [ 320.237429][T13724] __alloc_skb+0x112/0x2d0 [ 320.237460][T13724] _sctp_make_chunk+0x5e/0x430 [ 320.237482][T13724] sctp_make_strreset_req+0xef/0x620 [ 320.237510][T13724] ? __pfx_sctp_make_strreset_req+0x10/0x10 [ 320.237533][T13724] ? sctp_send_reset_streams+0x37c/0xd90 [ 320.237556][T13724] ? sctp_stream_outq_is_empty+0x194/0x1e0 [ 320.237582][T13724] sctp_send_reset_streams+0x727/0xd90 [ 320.237617][T13724] sctp_setsockopt+0x98b/0x1200 [ 320.237635][T13724] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 320.237660][T13724] do_sock_setsockopt+0x17c/0x1b0 [ 320.237684][T13724] __x64_sys_setsockopt+0x13f/0x1b0 [ 320.237708][T13724] do_syscall_64+0xfa/0xfa0 [ 320.237723][T13724] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.237741][T13724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.237758][T13724] ? clear_bhb_loop+0x60/0xb0 [ 320.237778][T13724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.237794][T13724] RIP: 0033:0x7f0185d8f6c9 [ 320.237810][T13724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.237824][T13724] RSP: 002b:00007f0186cc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 320.237843][T13724] RAX: ffffffffffffffda RBX: 00007f0185fe5fa0 RCX: 00007f0185d8f6c9 [ 320.237855][T13724] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000004 [ 320.237866][T13724] RBP: 00007f0186cc1090 R08: 0000000000000008 R09: 0000000000000000 [ 320.237877][T13724] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 320.237888][T13724] R13: 00007f0185fe6038 R14: 00007f0185fe5fa0 R15: 00007ffd597674b8 [ 320.237918][T13724] [ 320.246290][T13726] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2315'. [ 320.419822][T13728] netlink: 'syz.7.2316': attribute type 39 has an invalid length. [ 320.598905][T13736] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2318'. [ 320.612185][T13736] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2318'. [ 320.764548][T13743] netlink: 'syz.6.2320': attribute type 2 has an invalid length. [ 321.048583][T13757] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 321.092919][T13757] Cannot find map_set index 11008 as target [ 321.110270][T13759] ip6tnl0: Caught tx_queue_len zero misconfig [ 321.138683][T13766] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2328'. [ 321.174224][T13757] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2325'. [ 321.513311][T13769] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 321.531335][T13769] bond3 (unregistering): Released all slaves [ 321.644889][T13785] xt_TCPMSS: Only works on TCP SYN packets [ 321.678961][T13778] vxcan3: entered allmulticast mode [ 321.706655][T13782] netlink: 'syz.7.2333': attribute type 9 has an invalid length. [ 321.924585][T13789] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 323.602938][T13803] wg1 speed is unknown, defaulting to 1000 [ 324.011986][T13840] geneve2: entered promiscuous mode [ 324.265966][T13852] __nla_validate_parse: 4 callbacks suppressed [ 324.265982][T13852] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2356'. [ 324.363869][T13855] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2357'. [ 324.500005][T13842] wg1 speed is unknown, defaulting to 1000 [ 324.813394][T13862] bond1: (slave tunl0): Device is not bonding slave [ 324.823986][T13862] bond1: option active_slave: invalid value (tunl0) [ 324.836010][T13862] bond1 (unregistering): Released all slaves [ 324.847380][T13871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2361'. [ 325.031569][T13878] netlink: 'syz.9.2366': attribute type 1 has an invalid length. [ 325.040756][T13878] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2366'. [ 325.391356][T13891] xt_bpf: check failed: parse error [ 325.400864][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2371'. [ 325.464162][T13891] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2371'. [ 325.474181][T13891] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2371'. [ 325.599376][T13899] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2373'. [ 325.921673][T13882] wg1 speed is unknown, defaulting to 1000 [ 326.154077][T13914] bond4: (slave tunl0): Device is not bonding slave [ 326.166974][T13914] bond4: option active_slave: invalid value (tunl0) [ 326.208830][T13922] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2383'. [ 326.220804][T13922] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2383'. [ 326.222564][T13914] bond4 (unregistering): Released all slaves [ 326.291906][T13922] netlink: 'syz.5.2383': attribute type 8 has an invalid length. [ 326.432768][T13927] xt_bpf: check failed: parse error [ 326.866716][T13919] wg1 speed is unknown, defaulting to 1000 [ 328.083404][T13978] xt_connbytes: Forcing CT accounting to be enabled [ 328.369816][T13992] netlink: 'syz.9.2405': attribute type 1 has an invalid length. [ 328.444579][T13992] bond2: entered promiscuous mode [ 328.450141][T13992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.499180][T13992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.506489][T13992] IPv6: NLM_F_CREATE should be set when creating new route [ 328.513770][T13992] IPv6: NLM_F_CREATE should be set when creating new route [ 328.597227][T13992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.612220][T13990] 8021q: adding VLAN 0 to HW filter on device bond2 [ 328.619719][T13990] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 328.645067][T13990] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 328.670500][T13990] bond2: (slave wireguard0): making interface the new active one [ 328.678669][T13990] wireguard0: entered promiscuous mode [ 328.685787][T13990] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 328.867308][T14010] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.875197][T14010] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.970605][T14010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.984490][T14010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.005651][T14010] hsr0: left promiscuous mode [ 329.099916][T14010] mac80211_hwsim hwsim22 wlan0: left promiscuous mode [ 329.107442][T14010] mac80211_hwsim hwsim22 wlan0: left allmulticast mode [ 329.128236][T14010] geneve2: left promiscuous mode [ 329.133281][T14010] geneve2: left allmulticast mode [ 329.247103][ T6266] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.272317][ T6266] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.330504][ T6266] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.355552][ T6266] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.511479][T14040] netlink: 'syz.8.2415': attribute type 1 has an invalid length. [ 329.591288][T14043] __nla_validate_parse: 17 callbacks suppressed [ 329.591305][T14043] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2415'. [ 329.627266][T14040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 330.036008][T14043] bond3 (unregistering): Released all slaves [ 330.062298][T14012] wg1 speed is unknown, defaulting to 1000 [ 330.283012][T14068] netlink: 'syz.8.2418': attribute type 16 has an invalid length. [ 330.292502][T14068] netlink: 'syz.8.2418': attribute type 17 has an invalid length. [ 330.405099][T14071] IPv6: NLM_F_REPLACE set, but no existing node found! [ 330.483057][T14068] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.490827][T14068] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.675295][T14068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.694995][T14068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.919093][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2418'. [ 331.007094][T14016] wg1 speed is unknown, defaulting to 1000 [ 331.013422][T14072] rose0: left promiscuous mode [ 331.030566][ T3435] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.054003][ T3435] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.063238][ T3435] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.081001][ T3435] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.113099][ T3435] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.133325][ T3435] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.153325][T14078] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2420'. [ 331.162555][T14078] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2420'. [ 331.188820][T14078] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2420'. [ 332.472363][ T3435] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.481380][ T3435] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.502447][T14032] wg1 speed is unknown, defaulting to 1000 [ 333.025566][T14091] bond3: (slave tunl0): Device is not bonding slave [ 333.032357][T14091] bond3: option active_slave: invalid value (tunl0) [ 333.058750][T14091] bond3 (unregistering): Released all slaves [ 333.735507][T14108] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2427'. [ 333.748349][T14108] netlink: 35 bytes leftover after parsing attributes in process `syz.7.2427'. [ 333.773748][T14108] netlink: 'syz.7.2427': attribute type 6 has an invalid length. [ 333.784607][T14108] netlink: 'syz.7.2427': attribute type 5 has an invalid length. [ 333.808984][T14108] netlink: 35 bytes leftover after parsing attributes in process `syz.7.2427'. [ 333.889812][T14108] netlink: 'syz.7.2427': attribute type 4 has an invalid length. [ 333.904261][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2429'. [ 333.961703][T14113] netlink: 'syz.7.2427': attribute type 4 has an invalid length. [ 333.994936][T14115] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2429'. [ 334.082066][T14115] vlan3: entered promiscuous mode [ 334.095805][T14115] bridge0: entered promiscuous mode [ 334.106084][T14115] vlan3: entered allmulticast mode [ 334.111299][T14115] bridge0: entered allmulticast mode [ 334.130217][T14121] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 334.170372][T14097] wg1 speed is unknown, defaulting to 1000 [ 334.541313][T14134] xt_bpf: check failed: parse error [ 334.691255][T14136] __nla_validate_parse: 9 callbacks suppressed [ 334.691272][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2437'. [ 334.968869][T14147] syzkaller0: entered promiscuous mode [ 334.984047][T14147] syzkaller0: entered allmulticast mode [ 335.067970][T14152] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2441'. [ 335.176251][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2442'. [ 335.209865][T14154] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2442'. [ 335.248475][T14154] vlan0: entered promiscuous mode [ 335.256031][T14154] bridge4: entered promiscuous mode [ 335.262477][T14154] vlan0: entered allmulticast mode [ 335.271244][T14154] bridge4: entered allmulticast mode [ 335.531907][T14117] wg1 speed is unknown, defaulting to 1000 [ 335.544512][T14103] wg1 speed is unknown, defaulting to 1000 [ 335.583549][T14101] wg1 speed is unknown, defaulting to 1000 [ 335.668305][T14167] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2445'. [ 335.678046][T14167] netlink: 116 bytes leftover after parsing attributes in process `syz.9.2445'. [ 335.689157][T14167] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2445'. [ 335.816723][T14169] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2446'. [ 335.832470][T14169] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2446'. [ 335.943455][T14171] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2447'. [ 336.043841][T14176] xt_bpf: check failed: parse error [ 336.051022][T14171] tunl0: entered allmulticast mode [ 336.805586][T14205] tipc: Enabled bearer , priority 0 [ 336.830136][T14204] syzkaller0: entered promiscuous mode [ 336.849748][T14204] syzkaller0: entered allmulticast mode [ 336.951797][T14204] tipc: Resetting bearer [ 336.972582][T14203] tipc: Resetting bearer [ 337.020210][T14203] tipc: Disabling bearer [ 337.086247][T14220] xt_bpf: check failed: parse error [ 337.352747][T14231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.777354][T14256] xt_bpf: check failed: parse error [ 338.029377][T14265] bridge0: port 3(team0) entered disabled state [ 338.036202][T14265] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.043946][T14265] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.129208][T14265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.141553][T14265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.243549][T14269] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 338.261061][T14271] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 338.335446][T14281] vlan4: entered promiscuous mode [ 338.341370][T14281] bridge5: entered promiscuous mode [ 338.369977][T14281] vlan4: entered allmulticast mode [ 338.381195][T14281] bridge5: entered allmulticast mode [ 338.413934][ T3435] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.456683][ T3435] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.515830][ T3509] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.537480][ T3509] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.693531][T14302] netlink: 'syz.7.2490': attribute type 13 has an invalid length. [ 338.717372][T14302] netlink: 'syz.7.2490': attribute type 17 has an invalid length. [ 338.739735][T14302] tunl0: left allmulticast mode [ 338.819198][T14302] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.864878][T14302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.153496][T14320] tipc: Enabled bearer , priority 0 [ 339.163459][T14320] syzkaller0: entered promiscuous mode [ 339.170175][T14320] syzkaller0: entered allmulticast mode [ 339.209108][T14320] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 339.321169][T14320] tipc: Resetting bearer [ 339.361070][T14317] tipc: Resetting bearer [ 339.406866][T14317] tipc: Disabling bearer [ 339.438065][T14333] netlink: 'syz.5.2499': attribute type 1 has an invalid length. [ 339.627344][T14311] wg1 speed is unknown, defaulting to 1000 [ 340.157406][T14346] wg1 speed is unknown, defaulting to 1000 [ 340.212626][T14321] wg1 speed is unknown, defaulting to 1000 [ 340.418045][T14351] syzkaller0: entered promiscuous mode [ 340.424226][T14351] syzkaller0: entered allmulticast mode [ 340.451219][T14350] __nla_validate_parse: 29 callbacks suppressed [ 340.451236][T14350] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2504'. [ 340.652104][T14357] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2506'. [ 340.890516][T14360] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2507'. [ 341.377178][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2513'. [ 341.749979][T14398] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2518'. [ 341.985439][T14405] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2521'. [ 342.102494][T14408] macvlan0: entered promiscuous mode [ 342.137837][T14408] netlink: 'syz.6.2523': attribute type 1 has an invalid length. [ 342.185922][T14408] netlink: 'syz.6.2523': attribute type 2 has an invalid length. [ 342.198823][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2523'. [ 342.226983][T14422] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2528'. [ 342.236328][T14422] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2528'. [ 342.700433][T14410] wg1 speed is unknown, defaulting to 1000 [ 342.986702][T14439] bond1: entered allmulticast mode [ 342.996501][T14439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.010326][T14439] bond1: entered promiscuous mode [ 343.017089][T14439] team0: Port device bond1 added [ 343.600957][T14463] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2543'. [ 343.664581][T14465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.254357][T14492] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 344.513278][T14475] wg1 speed is unknown, defaulting to 1000 [ 344.711994][T14515] netlink: 'syz.7.2560': attribute type 2 has an invalid length. [ 344.720299][T14515] netlink: 'syz.7.2560': attribute type 1 has an invalid length. [ 345.201407][T14528] veth0: entered promiscuous mode [ 345.499105][T14536] __nla_validate_parse: 13 callbacks suppressed [ 345.499122][T14536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2569'. [ 345.520277][T14536] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2569'. [ 345.531829][T14536] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2569'. [ 345.696421][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2573'. [ 345.705575][T14549] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2573'. [ 346.037532][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2580'. [ 346.128756][T14570] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2580'. [ 346.430303][T14577] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2583'. [ 346.457761][T14583] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.465114][T14583] IPv6: NLM_F_CREATE should be set when creating new route [ 346.472400][T14583] IPv6: NLM_F_CREATE should be set when creating new route [ 346.479667][T14583] IPv6: NLM_F_CREATE should be set when creating new route [ 346.531979][T14583] vxcan1: tx address claim with different name [ 346.540390][T14553] wg1 speed is unknown, defaulting to 1000 [ 346.716347][T14592] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2588'. [ 346.743813][T14592] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2588'. [ 347.146261][T14579] wg1 speed is unknown, defaulting to 1000 [ 347.772205][ T43] wg1 speed is unknown, defaulting to 1000 [ 347.780605][ T43] syz: Port: 1 Link DOWN [ 347.789266][T13971] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.860458][ T3509] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.883782][ T3509] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.892445][ T3509] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.278835][T14639] netlink: 'syz.9.2606': attribute type 1 has an invalid length. [ 349.286399][T14654] wg1 speed is unknown, defaulting to 1000 [ 350.339769][T14716] vlan6: entered promiscuous mode [ 350.361806][T14716] bridge12: entered promiscuous mode [ 350.373910][T14716] vlan6: entered allmulticast mode [ 350.383938][T14716] bridge12: entered allmulticast mode [ 350.545072][T14727] netlink: 'syz.7.2638': attribute type 8 has an invalid length. [ 350.750055][T14729] __nla_validate_parse: 25 callbacks suppressed [ 350.750072][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2639'. [ 350.957788][T14726] wg1 speed is unknown, defaulting to 1000 [ 351.040648][T14744] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2642'. [ 351.248235][T14754] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input10 [ 351.340518][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2649'. [ 351.357431][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2649'. [ 351.411154][T14759] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2647'. [ 351.484146][T14764] vlan2: entered promiscuous mode [ 351.494000][T14764] bridge1: entered promiscuous mode [ 351.505161][T14764] vlan2: entered allmulticast mode [ 351.518162][T14764] bridge1: entered allmulticast mode [ 351.851894][T14774] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2654'. [ 351.894992][T14737] wg1 speed is unknown, defaulting to 1000 [ 351.966976][T14727] wg1 speed is unknown, defaulting to 1000 [ 352.091828][T14777] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2655'. [ 352.189130][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2655'. [ 353.130867][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2660'. [ 353.183020][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2660'. [ 353.253168][T14794] vlan4: entered promiscuous mode [ 353.267781][T14794] bridge1: entered promiscuous mode [ 353.273164][T14794] vlan4: entered allmulticast mode [ 353.294962][T14794] bridge1: entered allmulticast mode [ 353.315203][T14777] wg1 speed is unknown, defaulting to 1000 [ 354.019830][T14816] syzkaller1: entered promiscuous mode [ 354.053420][T14816] syzkaller1: entered allmulticast mode [ 354.417009][T14827] bond4: entered allmulticast mode [ 354.444393][T14827] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.837041][T14841] bridge_slave_0: left allmulticast mode [ 354.842737][T14841] bridge_slave_0: left promiscuous mode [ 354.897309][T14841] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.993221][T14841] bridge_slave_1: left allmulticast mode [ 355.042422][T14841] bridge_slave_1: left promiscuous mode [ 355.052264][T14841] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.120746][T14841] bond0: (slave bond_slave_0): Releasing backup interface [ 355.143305][T14841] bond0: (slave bond_slave_1): Releasing backup interface [ 355.174465][T14841] team0: Port device team_slave_0 removed [ 355.186548][T14841] team0: Port device team_slave_1 removed [ 355.201639][T14841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.227737][T14841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.244752][T14841] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 355.265760][T14849] netlink: 'syz.9.2678': attribute type 6 has an invalid length. [ 355.412262][T14846] bond5: (slave tunl0): Device is not bonding slave [ 355.453510][T14846] bond5: option active_slave: invalid value (tunl0) [ 355.496990][T14846] bond5 (unregistering): Released all slaves [ 355.667999][T14805] wg1 speed is unknown, defaulting to 1000 [ 357.060687][T14804] wg1 speed is unknown, defaulting to 1000 [ 357.534469][T14887] bond3: (slave tunl0): Device is not bonding slave [ 357.600281][T14887] bond3: option active_slave: invalid value (tunl0) [ 357.683010][T14887] bond3 (unregistering): Released all slaves [ 357.834569][ T5881] IPVS: starting estimator thread 0... [ 357.945536][T14893] IPVS: using max 32 ests per chain, 76800 per kthread [ 358.600033][T14905] __nla_validate_parse: 4 callbacks suppressed [ 358.600050][T14905] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2697'. [ 358.713755][T14905] netlink: 'syz.6.2697': attribute type 1 has an invalid length. [ 358.949310][T14905] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2697'. [ 358.958771][T14905] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 358.974670][T14914] netlink: 236 bytes leftover after parsing attributes in process `syz.9.2701'. [ 359.014257][T14914] openvswitch: netlink: Flow key attr not present in new flow. [ 359.512085][T14925] bond3: (slave tunl0): Device is not bonding slave [ 359.566995][T14925] bond3: option active_slave: invalid value (tunl0) [ 359.636579][T14925] bond3 (unregistering): Released all slaves [ 360.085304][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 360.091384][ T5830] Bluetooth: hci6: command 0x0406 tx timeout [ 360.097575][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 360.393551][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2713'. [ 360.513887][T14946] xfrm1: entered allmulticast mode [ 360.687673][T14953] syzkaller0: entered promiscuous mode [ 360.693178][T14953] syzkaller0: entered allmulticast mode [ 360.795661][T14960] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2719'. [ 360.846668][T14961] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2719'. [ 360.893426][T14960] vlan5: entered promiscuous mode [ 360.905668][T14960] bridge2: entered promiscuous mode [ 360.915823][T14960] vlan5: entered allmulticast mode [ 360.921029][T14960] bridge2: entered allmulticast mode [ 360.933333][T14961] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2719'. [ 361.015081][T14964] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2718'. [ 361.529924][T14971] netlink: 'syz.7.2722': attribute type 1 has an invalid length. [ 361.685714][T14974] bond3: (slave tunl0): Device is not bonding slave [ 361.707408][T14974] bond3: option active_slave: invalid value (tunl0) [ 361.750687][T14974] bond3 (unregistering): Released all slaves [ 361.847313][T14994] netlink: 'syz.5.2727': attribute type 1 has an invalid length. [ 361.890003][T14971] 8021q: adding VLAN 0 to HW filter on device bond5 [ 361.909718][T14998] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2729'. [ 361.931759][T14981] bond5: (slave ip6gretap2): making interface the new active one [ 361.949043][T14981] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 361.997729][T15005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2730'. [ 362.007647][T14988] erspan0: entered allmulticast mode [ 362.076699][T14994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.112907][T14999] bond2: (slave geneve3): making interface the new active one [ 362.122174][T14999] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 362.213127][T15000] syzkaller0: entered promiscuous mode [ 362.222098][T15000] syzkaller0: entered allmulticast mode [ 362.284681][T15012] vlan3: entered promiscuous mode [ 362.290558][T15012] bridge2: entered promiscuous mode [ 362.297893][T15012] vlan3: entered allmulticast mode [ 362.303864][T15012] bridge2: entered allmulticast mode [ 362.310004][T13973] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.321320][T13973] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.766420][T13973] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.775723][T13973] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.376449][T15057] __nla_validate_parse: 3 callbacks suppressed [ 364.376467][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2744'. [ 364.400881][T15060] netlink: 'syz.9.2745': attribute type 1 has an invalid length. [ 364.416727][T15022] wg1 speed is unknown, defaulting to 1000 [ 364.422328][T15057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2744'. [ 364.510446][T15057] vlan7: entered promiscuous mode [ 364.516080][T15057] bridge13: entered promiscuous mode [ 364.521623][T15057] vlan7: entered allmulticast mode [ 364.555032][T15057] bridge13: entered allmulticast mode [ 364.561219][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2744'. [ 364.686801][T15067] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2747'. [ 364.839006][T15075] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2750'. [ 364.839451][T15078] netlink: 'syz.8.2747': attribute type 10 has an invalid length. [ 364.864730][T15078] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 364.877492][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2747'. [ 364.882572][T15075] vlan6: entered allmulticast mode [ 364.961610][T15078] bond0: (slave bridge0): Releasing backup interface [ 365.030423][T15083] IPv6: sit1: Disabled Multicast RS [ 365.058760][T15075] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 365.277205][T15089] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2753'. [ 365.321424][T15091] netlink: 'syz.7.2754': attribute type 3 has an invalid length. [ 365.337597][T15091] openvswitch: netlink: Flow actions attr not present in new flow. [ 365.404779][T15082] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2749'. [ 365.419724][T15082] block nbd0: not configured, cannot reconfigure [ 366.183199][T15109] wg1 speed is unknown, defaulting to 1000 [ 366.695953][T15114] wg1 speed is unknown, defaulting to 1000 [ 366.850185][T15133] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 367.078999][T15145] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2770'. [ 367.995112][T15174] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2780'. [ 368.118467][T15176] netlink: 'syz.9.2783': attribute type 1 has an invalid length. [ 368.126374][T15176] netlink: 'syz.9.2783': attribute type 2 has an invalid length. [ 368.137100][T15176] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 368.389865][T15145] wg1 speed is unknown, defaulting to 1000 [ 368.426351][T15139] wg1 speed is unknown, defaulting to 1000 [ 369.088853][T15207] bond3: (slave tunl0): Device is not bonding slave [ 369.096091][T15207] bond3: option active_slave: invalid value (tunl0) [ 369.105373][T15207] bond3 (unregistering): Released all slaves [ 369.601494][T15222] __nla_validate_parse: 14 callbacks suppressed [ 369.601506][T15222] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2800'. [ 370.482519][T15265] netlink: zone id is out of range [ 370.499934][T15265] netlink: zone id is out of range [ 370.514833][T15265] netlink: set zone limit has 8 unknown bytes [ 371.025292][T15257] wg1 speed is unknown, defaulting to 1000 [ 371.032427][T15288] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2821'. [ 371.147576][T15296] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2821'. [ 371.813535][T15319] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2828'. [ 372.399739][T15323] xt_CT: No such helper "netbios-ns" [ 372.431326][T15329] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2831'. [ 372.534831][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2831'. [ 372.682807][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2831'. [ 372.717116][T15332] vlan4: entered promiscuous mode [ 372.724223][T15332] bridge0: entered promiscuous mode [ 372.739935][T15332] vlan4: entered allmulticast mode [ 372.749918][T15332] bridge0: entered allmulticast mode [ 372.997224][T15346] netlink: 'syz.8.2836': attribute type 1 has an invalid length. [ 373.045802][T15304] wg1 speed is unknown, defaulting to 1000 [ 373.208574][T15356] vlan5: entered promiscuous mode [ 373.214355][T15356] vlan5: entered allmulticast mode [ 373.219636][T15356] hsr_slave_1: entered allmulticast mode [ 373.299322][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2839'. [ 373.546666][T15334] wg1 speed is unknown, defaulting to 1000 [ 373.578468][T15315] wg1 speed is unknown, defaulting to 1000 [ 374.106954][T15357] wg1 speed is unknown, defaulting to 1000 [ 374.162368][T15363] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2841'. [ 374.193712][T15353] wg1 speed is unknown, defaulting to 1000 [ 374.888447][T15375] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2845'. [ 374.924855][T15375] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2845'. [ 375.093063][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2849'. [ 375.205620][T15385] 8021q: adding VLAN 0 to HW filter on device bond3 [ 375.624414][T15388] bond3 (unregistering): Released all slaves [ 375.852936][T15404] netlink: 'syz.9.2855': attribute type 21 has an invalid length. [ 375.863468][T15404] netlink: 'syz.9.2855': attribute type 22 has an invalid length. [ 375.879683][T15404] netlink: 'syz.9.2855': attribute type 23 has an invalid length. [ 375.889380][T15404] netlink: 'syz.9.2855': attribute type 25 has an invalid length. [ 375.900713][T15404] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2855'. [ 375.918633][T15411] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2855'. [ 375.965647][T15413] netlink: 388 bytes leftover after parsing attributes in process `syz.7.2856'. [ 376.433276][T15440] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2868'. [ 376.525188][T15434] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 376.569105][T15434] bond3 (unregistering): Released all slaves [ 376.620525][T15418] wg1 speed is unknown, defaulting to 1000 [ 376.633239][T15448] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.662856][T15444] netlink: 'syz.6.2870': attribute type 10 has an invalid length. [ 376.696831][T15444] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 376.754492][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.763495][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.936212][T15457] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2873'. [ 377.490901][T15478] sctp: [Deprecated]: syz.6.2884 (pid 15478) Use of int in max_burst socket option deprecated. [ 377.490901][T15478] Use struct sctp_assoc_value instead [ 377.529802][T15478] netlink: 'syz.6.2884': attribute type 8 has an invalid length. [ 377.809018][T15495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.379757][T15527] netlink: 'syz.8.2898': attribute type 29 has an invalid length. [ 378.489010][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.499662][T15534] SET target dimension over the limit! [ 378.851519][T15543] wg1 speed is unknown, defaulting to 1000 [ 379.067093][T15555] xt_TPROXY: Can be used only with -p tcp or -p udp [ 379.592258][T15565] bond3: (slave tunl0): Device is not bonding slave [ 379.600328][T15565] bond3: option active_slave: invalid value (tunl0) [ 379.618958][T15565] bond3 (unregistering): Released all slaves [ 379.678349][T15555] wg1 speed is unknown, defaulting to 1000 [ 379.857273][T15576] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2915'. [ 380.031664][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2917'. [ 380.090632][T15586] bond4: option ad_actor_sys_prio: invalid value (0) [ 380.099021][T15586] bond4: option ad_actor_sys_prio: allowed values 1 - 65535 [ 380.126117][T15586] bond4 (unregistering): Released all slaves [ 380.226943][T15586] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2917'. [ 380.541841][T15615] bond6: (slave tunl0): Device is not bonding slave [ 380.551260][T15615] bond6: option active_slave: invalid value (tunl0) [ 380.559977][T15615] bond6 (unregistering): Released all slaves [ 380.803486][T15620] wg1 speed is unknown, defaulting to 1000 [ 381.596253][T15642] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2933'. [ 381.634135][T15642] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2933'. [ 381.690957][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2933'. [ 382.085430][T15663] bond1: (slave tunl0): Device is not bonding slave [ 382.093246][T15663] bond1: option active_slave: invalid value (tunl0) [ 382.103858][T15663] bond1 (unregistering): Released all slaves [ 382.446642][T15656] wg1 speed is unknown, defaulting to 1000 [ 382.506118][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2945'. [ 382.708731][T15686] xt_cluster: node mask cannot exceed total number of nodes [ 382.860102][T15692] netlink: 464 bytes leftover after parsing attributes in process `syz.5.2947'. [ 383.065257][T15696] xt_CT: No such helper "netbios-ns" [ 383.083118][T15697] xt_CT: No such helper "netbios-ns" [ 383.121519][T15640] wg1 speed is unknown, defaulting to 1000 [ 383.161610][T15677] wg1 speed is unknown, defaulting to 1000 [ 383.455076][T15711] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2953'. [ 383.931033][T15721] xt_CT: No such helper "netbios-ns" [ 383.939873][T15720] xt_CT: No such helper "netbios-ns" [ 384.068807][T15726] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2959'. [ 384.239482][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2961'. [ 384.278679][T15730] hsr_slave_0: left promiscuous mode [ 384.292122][T15730] hsr_slave_1: left promiscuous mode [ 384.482363][T15743] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 384.509238][T15742] bridge7: entered promiscuous mode [ 384.655961][T15745] workqueue: Failed to create a rescuer kthread for wq "nfc7_nci_rx_wq": -EINTR [ 385.048543][T15790] netlink: 'syz.5.2976': attribute type 1 has an invalid length. [ 385.073748][T15790] __nla_validate_parse: 1 callbacks suppressed [ 385.073765][T15790] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2976'. [ 385.295112][T15801] netlink: 'syz.6.2977': attribute type 30 has an invalid length. [ 385.650308][T15822] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2984'. [ 385.665420][T15788] wg1 speed is unknown, defaulting to 1000 [ 385.813267][T15828] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2985'. [ 386.153093][T15844] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2992'. [ 386.205201][T15849] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2992'. [ 386.507662][T15862] netlink: 'syz.5.2998': attribute type 4 has an invalid length. [ 386.536528][T15862] netlink: 'syz.5.2998': attribute type 4 has an invalid length. [ 386.553930][T15862] netlink: 167064 bytes leftover after parsing attributes in process `syz.5.2998'. [ 386.610123][T15868] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3001'. [ 386.622443][T15861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.624760][T15869] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3000'. [ 386.643934][T15868] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3001'. [ 386.831099][T15876] netlink: 'syz.5.3002': attribute type 1 has an invalid length. [ 386.891629][T15876] bond3: entered promiscuous mode [ 386.897196][T15876] bond3: entered allmulticast mode [ 386.902978][T15876] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.910941][T15879] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3004'. [ 387.212816][T15885] 8021q: adding VLAN 0 to HW filter on device bond4 [ 387.527433][T15890] bond4 (unregistering): Released all slaves [ 387.567555][T15834] wg1 speed is unknown, defaulting to 1000 [ 388.165878][T15923] syzkaller0: entered promiscuous mode [ 388.171563][T15923] syzkaller0: entered allmulticast mode [ 388.233286][T15925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.644025][ T5832] Bluetooth: hci7: command 0x0406 tx timeout [ 388.824550][T15948] syzkaller0: entered promiscuous mode [ 388.830058][T15948] syzkaller0: entered allmulticast mode [ 389.240823][T15976] netlink: 'syz.9.3040': attribute type 13 has an invalid length. [ 389.253880][T15976] netlink: 'syz.9.3040': attribute type 17 has an invalid length. [ 389.343943][T15976] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.878072][T15978] wg1 speed is unknown, defaulting to 1000 [ 390.035146][T16004] netlink: 'syz.8.3050': attribute type 21 has an invalid length. [ 390.097622][T16005] netlink: 'syz.5.3051': attribute type 1 has an invalid length. [ 390.113803][T16005] netlink: 'syz.5.3051': attribute type 1 has an invalid length. [ 390.132839][T16005] __nla_validate_parse: 14 callbacks suppressed [ 390.132923][T16005] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.3051'. [ 390.285396][T16014] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3055'. [ 390.901005][T16049] netlink: zone id is out of range [ 390.907955][T16049] netlink: zone id is out of range [ 390.915534][T16049] netlink: set zone limit has 8 unknown bytes [ 391.301136][T16063] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3071'. [ 391.726137][T16081] netlink: 'syz.8.3079': attribute type 10 has an invalid length. [ 391.761084][T16081] team0: Port device dummy0 added [ 391.800763][T16084] netlink: 'syz.8.3079': attribute type 10 has an invalid length. [ 391.913537][T16084] team0: Port device dummy0 removed [ 391.940674][T16084] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 391.962263][T16062] wg1 speed is unknown, defaulting to 1000 [ 392.087077][T16100] netlink: 'syz.8.3083': attribute type 1 has an invalid length. [ 392.197214][T16106] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3085'. [ 392.590923][T16118] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3090'. [ 392.619231][T16118] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3090'. [ 392.654849][T16118] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3090'. [ 392.829454][T16126] vlan5: entered promiscuous mode [ 392.837767][T16126] bond0: entered promiscuous mode [ 392.842898][T16126] dummy0: entered promiscuous mode [ 392.858202][T16128] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3092'. [ 392.868464][T16128] netlink: 'syz.9.3092': attribute type 39 has an invalid length. [ 392.911022][T16126] netlink: 'syz.8.3091': attribute type 13 has an invalid length. [ 393.187679][T16137] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3097'. [ 393.216418][T16143] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3098'. [ 393.432204][T16154] netlink: 'syz.5.3102': attribute type 3 has an invalid length. [ 394.220387][T16188] tunl0: Caught tx_queue_len zero misconfig [ 394.263890][T16170] wg1 speed is unknown, defaulting to 1000 [ 394.549014][T16206] netlink: 'syz.6.3122': attribute type 4 has an invalid length. [ 394.630133][T16206] netlink: 'syz.6.3122': attribute type 4 has an invalid length. [ 394.859415][T16211] vlan5: entered promiscuous mode [ 394.873893][T16211] bridge8: entered promiscuous mode [ 394.882539][T16211] vlan5: entered allmulticast mode [ 394.889205][T16211] bridge8: entered allmulticast mode [ 395.266496][T16239] __nla_validate_parse: 20 callbacks suppressed [ 395.266509][T16239] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3135'. [ 395.323053][T16241] validate_nla: 2 callbacks suppressed [ 395.323070][T16241] netlink: 'syz.7.3136': attribute type 1 has an invalid length. [ 395.382224][T16246] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3137'. [ 395.391722][T16246] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3137'. [ 395.752663][T16262] netlink: 'syz.7.3140': attribute type 13 has an invalid length. [ 395.778875][T16262] netlink: 'syz.7.3140': attribute type 17 has an invalid length. [ 395.789117][T16262] erspan0: left allmulticast mode [ 395.806109][T16262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.850451][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3143'. [ 395.905182][T16269] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3143'. [ 395.940187][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3140'. [ 395.987404][T16274] vlan5: entered promiscuous mode [ 396.020932][T16269] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3143'. [ 396.039157][T16274] bridge4: entered promiscuous mode [ 396.053965][T16274] vlan5: entered allmulticast mode [ 396.059122][T16274] bridge4: entered allmulticast mode [ 396.120387][T16283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.216459][T16266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.236699][T16277] syzkaller0: entered promiscuous mode [ 396.250282][T16277] syzkaller0: entered allmulticast mode [ 396.267292][T16289] netlink: 'syz.8.3150': attribute type 4 has an invalid length. [ 396.297258][T16289] netlink: 'syz.8.3150': attribute type 4 has an invalid length. [ 396.714777][T16305] netlink: 'syz.5.3152': attribute type 12 has an invalid length. [ 398.033062][T16262] wg1 speed is unknown, defaulting to 1000 [ 398.437146][T16325] netlink: 148 bytes leftover after parsing attributes in process `syz.9.3162'. [ 398.473947][T16325] netlink: 116 bytes leftover after parsing attributes in process `syz.9.3162'. [ 398.483281][T16325] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3162'. [ 398.564893][T16327] Cannot find add_set index 4 as target [ 398.662192][T16331] netlink: 'syz.9.3165': attribute type 10 has an invalid length. [ 398.670494][T16331] batadv_slave_1: entered promiscuous mode [ 399.732004][T16341] wg1 speed is unknown, defaulting to 1000 [ 400.090775][T16410] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 400.272356][T16410] veth1_to_bond: entered allmulticast mode [ 400.576794][T16419] __nla_validate_parse: 3 callbacks suppressed [ 400.576812][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3191'. [ 400.618727][T16405] wg1 speed is unknown, defaulting to 1000 [ 400.767632][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3191'. [ 400.931618][T16419] batadv_slave_1: left promiscuous mode [ 401.080025][T16419] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 401.092570][T16419] bond2: left promiscuous mode [ 401.098059][T16419] wireguard0: left promiscuous mode [ 401.171362][T16419] vlan3: left promiscuous mode [ 401.177887][T16419] bridge0: left promiscuous mode [ 401.183160][T16419] vlan3: left allmulticast mode [ 401.205479][T16419] vlan4: left promiscuous mode [ 401.210269][T16419] bridge1: left promiscuous mode [ 401.215897][T16419] vlan4: left allmulticast mode [ 401.220925][T16419] bridge1: left allmulticast mode [ 401.231446][T16419] xfrm1: left allmulticast mode [ 401.244731][T16419] vlan5: left promiscuous mode [ 401.249712][T16419] bridge2: left promiscuous mode [ 401.257365][T16419] vlan5: left allmulticast mode [ 401.264046][T16419] bridge2: left allmulticast mode [ 401.283013][T16347] wg1 speed is unknown, defaulting to 1000 [ 401.365344][T16428] hsr_slave_0: left promiscuous mode [ 401.373811][T16428] hsr_slave_1: left promiscuous mode [ 401.397774][T16407] veth1_to_bond: left allmulticast mode [ 401.403563][ T6266] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.445894][ T6266] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.475546][ T6266] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.612977][ T6266] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.645739][T16411] wg1 speed is unknown, defaulting to 1000 [ 402.682892][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3202'. [ 402.767486][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3206'. [ 402.922319][T16475] netlink: 'syz.7.3206': attribute type 2 has an invalid length. [ 402.930484][T16475] netlink: 'syz.7.3206': attribute type 1 has an invalid length. [ 403.076794][T16464] wg1 speed is unknown, defaulting to 1000 [ 403.083397][T16461] infiniband syz2: set down [ 403.088757][T16461] infiniband syz2: added ipvlan1 [ 403.144863][T16461] RDS/IB: syz2: added [ 403.149053][T16461] smc: adding ib device syz2 with port count 1 [ 403.155487][T16461] smc: ib device syz2 port 1 has no pnetid [ 403.501762][T16495] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3211'. [ 403.529528][T16495] netlink: 'syz.5.3211': attribute type 1 has an invalid length. [ 403.556792][T16499] netlink: 'syz.9.3210': attribute type 12 has an invalid length. [ 403.569306][T16499] netlink: 'syz.9.3210': attribute type 4 has an invalid length. [ 405.108490][T16548] syzkaller0: entered promiscuous mode [ 405.119719][T16548] syzkaller0: entered allmulticast mode [ 405.231872][T16560] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3234'. [ 405.250620][T16556] warn_alloc: 1 callbacks suppressed [ 405.250636][T16556] syz.9.3234: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 405.324888][T16556] CPU: 1 UID: 0 PID: 16556 Comm: syz.9.3234 Not tainted syzkaller #0 PREEMPT(full) [ 405.324915][T16556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.324927][T16556] Call Trace: [ 405.324935][T16556] [ 405.324944][T16556] dump_stack_lvl+0x189/0x250 [ 405.324977][T16556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.325001][T16556] ? __pfx__printk+0x10/0x10 [ 405.325017][T16556] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 405.325041][T16556] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 405.325066][T16556] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 405.325092][T16556] warn_alloc+0x214/0x310 [ 405.325139][T16556] ? __pfx_warn_alloc+0x10/0x10 [ 405.325173][T16556] ? __get_vm_area_node+0x28f/0x300 [ 405.325200][T16556] ? translate_table+0x19b/0x2040 [ 405.325221][T16556] __vmalloc_node_range_noprof+0x690/0x12d0 [ 405.325268][T16556] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 405.325291][T16556] ? translate_table+0x19b/0x2040 [ 405.325310][T16556] ? rcu_is_watching+0x15/0xb0 [ 405.325330][T16556] ? translate_table+0x19b/0x2040 [ 405.325348][T16556] __kvmalloc_node_noprof+0x674/0x910 [ 405.325373][T16556] ? translate_table+0x19b/0x2040 [ 405.325387][T16556] ? do_ip6t_set_ctl+0x88a/0xce0 [ 405.325403][T16556] ? nf_setsockopt+0x26f/0x290 [ 405.325431][T16556] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 405.325449][T16556] ? do_syscall_64+0xfa/0xfa0 [ 405.325473][T16556] translate_table+0x19b/0x2040 [ 405.325504][T16556] ? __lock_acquire+0xab9/0xd20 [ 405.325527][T16556] ? __pfx_translate_table+0x10/0x10 [ 405.325548][T16556] ? __might_fault+0xb0/0x130 [ 405.325591][T16556] ? _copy_from_user+0x94/0xb0 [ 405.325618][T16556] do_ip6t_set_ctl+0x970/0xce0 [ 405.325640][T16556] ? rcu_is_watching+0x15/0xb0 [ 405.325660][T16556] ? trace_contention_end+0x39/0x120 [ 405.325680][T16556] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 405.325719][T16556] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 405.325748][T16556] ? __pfx_aa_sk_perm+0x10/0x10 [ 405.325776][T16556] nf_setsockopt+0x26f/0x290 [ 405.325798][T16556] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 405.325824][T16556] do_sock_setsockopt+0x17c/0x1b0 [ 405.325848][T16556] __x64_sys_setsockopt+0x13f/0x1b0 [ 405.325872][T16556] do_syscall_64+0xfa/0xfa0 [ 405.325888][T16556] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.325905][T16556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.325923][T16556] ? clear_bhb_loop+0x60/0xb0 [ 405.325944][T16556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.325961][T16556] RIP: 0033:0x7f8a3838f6c9 [ 405.325978][T16556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.325993][T16556] RSP: 002b:00007f8a39267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 405.326013][T16556] RAX: ffffffffffffffda RBX: 00007f8a385e6090 RCX: 00007f8a3838f6c9 [ 405.326025][T16556] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 405.326036][T16556] RBP: 00007f8a38411f91 R08: 00000000000003f0 R09: 0000000000000000 [ 405.326047][T16556] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 405.326058][T16556] R13: 00007f8a385e6128 R14: 00007f8a385e6090 R15: 00007ffdb15944f8 [ 405.326089][T16556] [ 405.326266][T16556] Mem-Info: [ 405.649130][T16556] active_anon:4775 inactive_anon:0 isolated_anon:0 [ 405.649130][T16556] active_file:3744 inactive_file:40021 isolated_file:0 [ 405.649130][T16556] unevictable:768 dirty:315 writeback:0 [ 405.649130][T16556] slab_reclaimable:12610 slab_unreclaimable:163200 [ 405.649130][T16556] mapped:29756 shmem:1386 pagetables:1165 [ 405.649130][T16556] sec_pagetables:0 bounce:0 [ 405.649130][T16556] kernel_misc_reclaimable:0 [ 405.649130][T16556] free:1260511 free_pcp:13223 free_cma:0 [ 405.659231][T16570] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3239'. [ 405.694694][T16556] Node 0 active_anon:19100kB inactive_anon:0kB active_file:14976kB inactive_file:159880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119024kB dirty:1260kB writeback:0kB shmem:4008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15044kB pagetables:4524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 405.694752][T16556] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 405.694797][T16556] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.694865][T16556] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 405.694903][T16556] Node 0 [ 405.719268][T16571] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3239'. [ 405.735954][T16556] DMA32 free:1128216kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19100kB inactive_anon:0kB active_file:14976kB inactive_file:159880kB unevictable:1536kB writepending:1260kB zspages:0kB present:3129332kB managed:2565104kB mlocked:0kB bounce:0kB free_pcp:35808kB local_pcp:21052kB free_cma:0kB [ 405.736012][T16556] lowmem_reserve[]: 0 0 0 0 0 [ 405.736050][T16556] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.881243][T16556] lowmem_reserve[]: 0 0 0 0 0 [ 405.886154][T16556] Node 1 Normal free:3898468kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17040kB local_pcp:11644kB free_cma:0kB [ 405.920125][T16556] lowmem_reserve[]: 0 0 0 0 0 [ 405.925212][T16556] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 405.938886][T16556] Node 0 DMA32: 2348*4kB (UM) 1590*8kB (UME) 989*16kB (UME) 216*32kB (UM) 209*64kB (UME) 47*128kB (ME) 18*256kB (ME) 9*512kB (UM) 10*1024kB (UM) 4*2048kB (ME) 253*4096kB (UM) = 1128176kB [ 405.959379][T16556] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 405.970947][T16556] Node 1 Normal: 167*4kB (UE) 39*8kB (UME) 41*16kB (UME) 102*32kB (UME) 31*64kB (UME) 7*128kB (UME) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3898468kB [ 405.989498][T16556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 405.999164][T16556] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 406.009037][T16556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.018886][T16556] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 406.028252][T16556] 45148 total pagecache pages [ 406.032943][T16556] 0 pages in swap cache [ 406.037354][T16556] Free swap = 124996kB [ 406.041523][T16556] Total swap = 124996kB [ 406.046098][T16556] 2097051 pages RAM [ 406.049911][T16556] 0 pages HighMem/MovableOnly [ 406.054669][T16556] 424133 pages reserved [ 406.058837][T16556] 0 pages cma reserved [ 407.262029][T16569] bridge10: entered promiscuous mode [ 407.279929][T16569] bridge10: entered allmulticast mode [ 407.382011][T16577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.389327][T16577] IPv6: NLM_F_CREATE should be set when creating new route [ 407.396573][T16577] IPv6: NLM_F_CREATE should be set when creating new route [ 407.444818][T16577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3241'. [ 407.483769][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3241'. [ 407.493129][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3241'. [ 408.497693][T16611] FAULT_INJECTION: forcing a failure. [ 408.497693][T16611] name failslab, interval 1, probability 0, space 0, times 0 [ 408.518991][T16611] CPU: 0 UID: 0 PID: 16611 Comm: syz.9.3251 Not tainted syzkaller #0 PREEMPT(full) [ 408.519016][T16611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.519028][T16611] Call Trace: [ 408.519036][T16611] [ 408.519044][T16611] dump_stack_lvl+0x189/0x250 [ 408.519072][T16611] ? __pfx____ratelimit+0x10/0x10 [ 408.519097][T16611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.519118][T16611] ? __pfx__printk+0x10/0x10 [ 408.519139][T16611] ? __pfx___might_resched+0x10/0x10 [ 408.519159][T16611] ? fs_reclaim_acquire+0x7d/0x100 [ 408.519181][T16611] should_fail_ex+0x414/0x560 [ 408.519211][T16611] should_failslab+0xa8/0x100 [ 408.519229][T16611] __kmalloc_noprof+0xcb/0x7f0 [ 408.519251][T16611] ? bpf_test_init+0x9f/0x150 [ 408.519274][T16611] bpf_test_init+0x9f/0x150 [ 408.519295][T16611] bpf_prog_test_run_xdp+0x503/0x10e0 [ 408.519329][T16611] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 408.519353][T16611] ? __fget_files+0x2a/0x420 [ 408.519375][T16611] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 408.519395][T16611] bpf_prog_test_run+0x2c7/0x340 [ 408.519419][T16611] __sys_bpf+0x562/0x860 [ 408.519439][T16611] ? __pfx___sys_bpf+0x10/0x10 [ 408.519473][T16611] ? ksys_write+0x22a/0x250 [ 408.519499][T16611] ? __pfx_ksys_write+0x10/0x10 [ 408.519529][T16611] __x64_sys_bpf+0x7c/0x90 [ 408.519554][T16611] do_syscall_64+0xfa/0xfa0 [ 408.519571][T16611] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.519589][T16611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.519607][T16611] ? clear_bhb_loop+0x60/0xb0 [ 408.519628][T16611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.519645][T16611] RIP: 0033:0x7f8a3838f6c9 [ 408.519662][T16611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.519677][T16611] RSP: 002b:00007f8a39288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.519697][T16611] RAX: ffffffffffffffda RBX: 00007f8a385e5fa0 RCX: 00007f8a3838f6c9 [ 408.519710][T16611] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 408.519722][T16611] RBP: 00007f8a39288090 R08: 0000000000000000 R09: 0000000000000000 [ 408.519742][T16611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.519753][T16611] R13: 00007f8a385e6038 R14: 00007f8a385e5fa0 R15: 00007ffdb15944f8 [ 408.519785][T16611] [ 408.850753][T16614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3252'. [ 409.286281][T16625] netlink: 'syz.6.3254': attribute type 4 has an invalid length. [ 409.486186][T16523] wg1 speed is unknown, defaulting to 1000 [ 409.517157][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3258'. [ 410.019238][T16609] wg1 speed is unknown, defaulting to 1000 [ 410.027758][T16646] tipc: Started in network mode [ 410.043979][T16646] tipc: Node identity ac1414aa, cluster identity 4711 [ 410.058466][T16646] tipc: Enabled bearer , priority 6 [ 410.108276][T16649] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3262'. [ 410.133477][T16649] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3262'. [ 410.154320][T16646] tipc: Enabled bearer , priority 0 [ 410.216676][T16649] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3262'. [ 410.728848][T16666] __nla_validate_parse: 1 callbacks suppressed [ 410.728865][T16666] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3269'. [ 410.936030][T16669] veth1: Caught tx_queue_len zero misconfig [ 411.102087][T16679] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3274'. [ 411.193932][ T6896] tipc: Node number set to 2886997162 [ 411.264770][T16685] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3275'. [ 411.294188][T16685] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3275'. [ 411.303163][T16685] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3275'. [ 411.366074][T16683] xt_CT: No such helper "netbios-ns" [ 411.576491][T16699] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3270'. [ 411.913800][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3283'. [ 411.992792][T16720] 8021q: adding VLAN 0 to HW filter on device bond4 [ 412.106123][T16678] wg1 speed is unknown, defaulting to 1000 [ 412.410022][T16737] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3287'. [ 412.424563][T16737] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3287'. [ 412.434426][T16737] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3287'. [ 412.556589][T16743] tunl0: Caught tx_queue_len zero misconfig [ 412.591452][T16668] wg1 speed is unknown, defaulting to 1000 [ 413.137745][T16726] wg1 speed is unknown, defaulting to 1000 [ 413.730980][T16767] netlink: 'syz.7.3296': attribute type 5 has an invalid length. [ 413.753786][T16767] x_tables: duplicate underflow at hook 1 [ 414.111575][T16772] bridge_slave_1: left allmulticast mode [ 414.120331][T16772] bridge_slave_1: left promiscuous mode [ 414.143182][T16772] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.176764][T16772] bridge_slave_0: left allmulticast mode [ 414.182444][T16772] bridge_slave_0: left promiscuous mode [ 414.190762][T16772] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.755325][T16775] syzkaller0: entered promiscuous mode [ 414.761396][T16775] syzkaller0: entered allmulticast mode [ 416.294423][T16779] unsupported nla_type 52263 [ 416.469984][T16768] wg1 speed is unknown, defaulting to 1000 [ 416.538715][T16766] wg1 speed is unknown, defaulting to 1000 [ 417.310482][T16795] __nla_validate_parse: 6 callbacks suppressed [ 417.310499][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3304'. [ 417.527427][T16790] wg1 speed is unknown, defaulting to 1000 [ 418.151785][T16811] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 418.237532][T16825] netlink: 'syz.8.3313': attribute type 1 has an invalid length. [ 418.311929][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3313'. [ 418.352152][T16825] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 418.464519][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3315'. [ 418.525515][T16834] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3315'. [ 418.542518][T16837] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3316'. [ 418.816070][T16839] vlan6: entered promiscuous mode [ 418.821473][T16839] bridge5: entered promiscuous mode [ 418.829566][T16839] vlan6: entered allmulticast mode [ 418.835147][T16839] bridge5: entered allmulticast mode [ 418.848276][T16843] tipc: Enabled bearer , priority 6 [ 419.828093][T16866] pimreg1: tun_chr_ioctl cmd 1074025677 [ 419.834660][T16866] pimreg1: linktype set to 804 [ 419.890929][T16867] bond6: entered promiscuous mode [ 419.892579][T16870] Bluetooth: MGMT ver 1.23 [ 419.897190][T16867] bond6: entered allmulticast mode [ 419.917952][T16867] 8021q: adding VLAN 0 to HW filter on device bond6 [ 420.327039][T16870] wg1 speed is unknown, defaulting to 1000 [ 420.337718][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3331'. [ 420.347909][T16884] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3331'. [ 420.382664][T16886] tipc: Enabled bearer , priority 6 [ 420.586648][T16890] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 420.604842][T16890] ip6t_rpfilter: unknown options [ 421.103341][T16909] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3339'. [ 421.729803][T16939] netlink: 'syz.7.3347': attribute type 23 has an invalid length. [ 422.041454][T16945] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 422.058969][T16945] netlink: 'syz.7.3350': attribute type 10 has an invalid length. [ 422.067026][T16945] mac80211_hwsim hwsim24 wlan1: left allmulticast mode [ 422.116294][T16947] team0: Port device team_slave_0 removed [ 422.135467][T16947] team0: Port device team_slave_1 removed [ 422.141885][T16947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.157191][T16947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.171794][T16947] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.287524][T16950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.308856][T16956] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3353'. [ 422.769626][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3361'. [ 423.316260][T17008] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3368'. [ 423.509502][T17000] wg1 speed is unknown, defaulting to 1000 [ 423.519409][T17016] netlink: 1484 bytes leftover after parsing attributes in process `syz.8.3370'. [ 423.700158][T17023] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3372'. [ 424.637071][T17048] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3380'. [ 424.764192][T17053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3382'. [ 424.783339][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3384'. [ 424.809477][T17059] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3383'. [ 424.822977][T17055] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3384'. [ 425.020017][T17063] vlan6: entered promiscuous mode [ 425.102055][T17063] bridge3: entered promiscuous mode [ 425.134164][T17063] vlan6: entered allmulticast mode [ 425.183112][T17063] bridge3: entered allmulticast mode [ 426.006998][T17071] wg1 speed is unknown, defaulting to 1000 [ 426.088612][T17091] netlink: 'syz.9.3394': attribute type 1 has an invalid length. [ 426.505196][T17106] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3397'. [ 426.798963][T17098] wg1 speed is unknown, defaulting to 1000 [ 427.517503][T17101] wg1 speed is unknown, defaulting to 1000 [ 427.875628][T17131] __nla_validate_parse: 2 callbacks suppressed [ 427.875647][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3405'. [ 428.117030][T17140] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3409'. [ 428.250500][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3411'. [ 428.261329][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3411'. [ 428.306876][T17142] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3410'. [ 428.521364][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3413'. [ 428.858505][T17133] wg1 speed is unknown, defaulting to 1000 [ 429.132222][T17159] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3415'. [ 429.584203][T17173] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3421'. [ 430.104900][T17183] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3426'. [ 430.117322][T17183] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3426'. [ 431.087816][T17212] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 431.140811][T17214] bond7: (slave tunl0): Device is not bonding slave [ 431.147917][T17214] bond7: option active_slave: invalid value (tunl0) [ 431.159288][T17214] bond7 (unregistering): Released all slaves [ 431.180632][T17208] netlink: 'syz.8.3436': attribute type 8 has an invalid length. [ 431.450139][T17234] netlink: 'syz.9.3444': attribute type 1 has an invalid length. [ 431.781817][T17232] wg1 speed is unknown, defaulting to 1000 [ 432.621191][T17273] syzkaller0: entered promiscuous mode [ 432.633821][T17273] syzkaller0: entered allmulticast mode [ 432.954111][T17279] __nla_validate_parse: 18 callbacks suppressed [ 432.954132][T17279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3456'. [ 433.468494][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3457'. [ 433.503854][T17281] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3457'. [ 433.704632][T17292] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3461'. [ 433.705028][T17289] macvtap1: entered promiscuous mode [ 433.719355][T17289] batadv0: entered promiscuous mode [ 433.726160][T17289] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 433.735283][T17289] batadv0: left promiscuous mode [ 434.322651][T17297] wg1 speed is unknown, defaulting to 1000 [ 434.992009][T17317] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3469'. [ 435.040784][T17318] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3469'. [ 435.043480][T17317] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3469'. [ 435.229337][T17327] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3472'. [ 435.852316][T17344] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3478'. [ 436.273177][T17349] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3479'. [ 437.618178][T17338] wg1 speed is unknown, defaulting to 1000 [ 438.013815][T17364] __nla_validate_parse: 6 callbacks suppressed [ 438.013833][T17364] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3485'. [ 438.130357][T17371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3487'. [ 438.359878][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3491'. [ 438.369124][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3491'. [ 438.399789][T17382] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3491'. [ 438.412190][T17339] wg1 speed is unknown, defaulting to 1000 [ 438.625048][T17391] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3494'. [ 438.636999][T17391] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3494'. [ 438.666871][T17391] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3494'. [ 439.051230][T17346] wg1 speed is unknown, defaulting to 1000 [ 439.169453][T17405] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3496'. [ 439.793463][T17420] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3503'. [ 439.930077][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.053393][T17380] wg1 speed is unknown, defaulting to 1000 [ 440.084842][T17378] wg1 speed is unknown, defaulting to 1000 [ 441.392377][T17467] tipc: Enabled bearer , priority 0 [ 441.402460][T17465] syzkaller0: entered promiscuous mode [ 441.409221][T17465] syzkaller0: entered allmulticast mode [ 441.702158][T17472] tipc: Resetting bearer [ 441.740574][T17464] tipc: Resetting bearer [ 441.768469][T17464] tipc: Disabling bearer [ 441.792770][T17471] vlan8: entered promiscuous mode [ 441.798254][T17471] bridge15: entered promiscuous mode [ 441.804141][T17471] vlan8: entered allmulticast mode [ 441.809274][T17471] bridge15: entered allmulticast mode [ 443.033414][T17515] __nla_validate_parse: 13 callbacks suppressed [ 443.033432][T17515] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3534'. [ 443.057843][T17511] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3532'. [ 443.078506][T17511] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 443.145526][T17517] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3533'. [ 443.161154][T17513] syzkaller0: entered promiscuous mode [ 443.166949][T17513] syzkaller0: entered allmulticast mode [ 443.361589][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3537'. [ 443.410055][T17525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3538'. [ 443.646358][T17536] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3543'. [ 443.649027][T17538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3542'. [ 443.655522][T17536] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3543'. [ 443.690378][T17536] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3543'. [ 443.710293][T17538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3542'. [ 443.767972][T17538] vlan9: entered promiscuous mode [ 443.773067][T17538] bridge16: entered promiscuous mode [ 443.779496][T17538] vlan9: entered allmulticast mode [ 443.789445][T17538] bridge16: entered allmulticast mode [ 444.097890][T17535] wg1 speed is unknown, defaulting to 1000 [ 444.860175][T17570] vlan8: entered promiscuous mode [ 444.866038][T17570] bridge4: entered promiscuous mode [ 444.871537][T17570] vlan8: entered allmulticast mode [ 444.878477][T17570] bridge4: entered allmulticast mode [ 445.014984][T17581] wg2: entered promiscuous mode [ 445.048431][T17581] wg2: entered allmulticast mode [ 445.638323][T17598] netlink: 'syz.7.3562': attribute type 8 has an invalid length. [ 445.646550][T17599] netlink: 'syz.7.3562': attribute type 8 has an invalid length. [ 446.405424][T17626] bond4: (slave tunl0): Device is not bonding slave [ 446.421650][T17629] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20001 [ 446.454087][T17626] bond4: option active_slave: invalid value (tunl0) [ 446.476758][T17626] bond4 (unregistering): Released all slaves [ 446.615302][T17605] wg1 speed is unknown, defaulting to 1000 [ 446.847615][T17647] netlink: 'syz.7.3575': attribute type 1 has an invalid length. [ 446.904652][T17647] bond7: entered promiscuous mode [ 446.910155][T17647] 8021q: adding VLAN 0 to HW filter on device bond7 [ 446.984610][T17651] 8021q: adding VLAN 0 to HW filter on device bond7 [ 446.991714][T17651] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 447.008306][T17651] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 447.074987][T17657] vlan10: entered promiscuous mode [ 447.089829][T17657] bridge5: entered promiscuous mode [ 447.102623][T17657] vlan10: entered allmulticast mode [ 447.117445][T17657] bridge5: entered allmulticast mode [ 447.381827][T17665] bond4: entered promiscuous mode [ 447.407778][T17665] 8021q: adding VLAN 0 to HW filter on device bond4 [ 447.591435][T17675] netlink: 'syz.5.3585': attribute type 2 has an invalid length. [ 447.723242][T17677] netlink: 'syz.5.3585': attribute type 2 has an invalid length. [ 447.814438][T17665] bond4 (unregistering): Released all slaves [ 447.893339][T17675] !: entered promiscuous mode [ 447.944927][T17677] !: left promiscuous mode [ 448.156411][T17680] bond4: (slave tunl0): Device is not bonding slave [ 448.183101][T17685] __nla_validate_parse: 11 callbacks suppressed [ 448.183119][T17685] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3588'. [ 448.203326][T17680] bond4: option active_slave: invalid value (tunl0) [ 448.211001][T17685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 448.218258][T17685] IPv6: NLM_F_CREATE should be set when creating new route [ 448.225556][T17685] IPv6: NLM_F_CREATE should be set when creating new route [ 448.254279][T17680] bond4 (unregistering): Released all slaves [ 448.636156][T17696] netlink: 'syz.9.3591': attribute type 5 has an invalid length. [ 448.871407][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3593'. [ 448.888231][T17702] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3594'. [ 448.899327][T17702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 448.906594][T17702] IPv6: NLM_F_CREATE should be set when creating new route [ 448.913870][T17702] IPv6: NLM_F_CREATE should be set when creating new route [ 448.922595][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3593'. [ 448.996286][T17700] vlan10: entered promiscuous mode [ 449.013880][T17700] bridge19: entered promiscuous mode [ 449.026283][T17700] vlan10: entered allmulticast mode [ 449.041863][T17700] bridge19: entered allmulticast mode [ 449.086061][T17700] tipc: Failed to remove unknown binding: 66,1,1/10136234:221377998/221378000 [ 449.097778][T17700] tipc: Failed to remove unknown binding: 66,1,1/10136234:221377998/221378000 [ 449.108200][T17700] tipc: Failed to remove unknown binding: 66,1,1/10136234:221377998/221378000 [ 449.454102][T17710] wg1 speed is unknown, defaulting to 1000 [ 449.610122][T17722] bond8: (slave tunl0): Device is not bonding slave [ 449.641802][T17722] bond8: option active_slave: invalid value (tunl0) [ 449.668762][T17722] bond8 (unregistering): Released all slaves [ 449.816623][T17720] syzkaller0: entered promiscuous mode [ 449.822212][T17720] syzkaller0: entered allmulticast mode [ 449.934149][T17731] tipc: Enabled bearer , priority 0 [ 450.025475][T17737] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x7 [ 450.052354][T17731] syzkaller0: entered promiscuous mode [ 450.058420][T17731] syzkaller0: entered allmulticast mode [ 450.065504][T17731] tipc: Resetting bearer [ 450.120738][T17729] tipc: Resetting bearer [ 451.772576][T17729] tipc: Disabling bearer [ 451.787819][T17730] wg1 speed is unknown, defaulting to 1000 [ 452.069944][T17758] netlink: 136 bytes leftover after parsing attributes in process `syz.7.3613'. [ 452.122736][T17762] bond4: (slave tunl0): Device is not bonding slave [ 452.129605][T17762] bond4: option active_slave: invalid value (tunl0) [ 452.139250][T17762] bond4 (unregistering): Released all slaves [ 452.368883][T17751] wg1 speed is unknown, defaulting to 1000 [ 453.173006][T17776] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 453.269155][T17778] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 453.394126][T17782] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3622'. [ 454.541886][T17811] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3629'. [ 454.867986][T17825] netlink: 288 bytes leftover after parsing attributes in process `syz.7.3634'. [ 455.070286][T17836] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3637'. [ 455.118573][T17838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.299973][T17853] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3642'. [ 455.715122][T17834] wg1 speed is unknown, defaulting to 1000 [ 455.824299][T17838] wg1 speed is unknown, defaulting to 1000 [ 455.896599][T17864] netlink: 'syz.6.3645': attribute type 9 has an invalid length. [ 455.930927][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3645'. [ 455.948026][T17866] netlink: 'syz.6.3645': attribute type 9 has an invalid length. [ 455.960755][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3645'. [ 456.116905][T17868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3646'. [ 456.154886][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3646'. [ 456.160741][T17870] FAULT_INJECTION: forcing a failure. [ 456.160741][T17870] name failslab, interval 1, probability 0, space 0, times 0 [ 456.191250][T17870] CPU: 0 UID: 0 PID: 17870 Comm: syz.9.3647 Not tainted syzkaller #0 PREEMPT(full) [ 456.191276][T17870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.191300][T17870] Call Trace: [ 456.191308][T17870] [ 456.191317][T17870] dump_stack_lvl+0x189/0x250 [ 456.191345][T17870] ? __pfx____ratelimit+0x10/0x10 [ 456.191370][T17870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.191392][T17870] ? __pfx__printk+0x10/0x10 [ 456.191417][T17870] ? __pfx___might_resched+0x10/0x10 [ 456.191434][T17870] ? fs_reclaim_acquire+0x7d/0x100 [ 456.191457][T17870] should_fail_ex+0x414/0x560 [ 456.191488][T17870] should_failslab+0xa8/0x100 [ 456.191508][T17870] __kmalloc_noprof+0xcb/0x7f0 [ 456.191528][T17870] ? ethnl_default_set_doit+0x168/0x890 [ 456.191553][T17870] ethnl_default_set_doit+0x168/0x890 [ 456.191574][T17870] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 456.191598][T17870] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 456.191628][T17870] genl_family_rcv_msg_doit+0x215/0x300 [ 456.191659][T17870] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 456.191693][T17870] ? bpf_lsm_capable+0x9/0x20 [ 456.191713][T17870] ? security_capable+0x7e/0x2e0 [ 456.191742][T17870] genl_rcv_msg+0x60e/0x790 [ 456.191768][T17870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.191789][T17870] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 456.191825][T17870] netlink_rcv_skb+0x208/0x470 [ 456.191842][T17870] ? __lock_acquire+0xab9/0xd20 [ 456.191860][T17870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.191883][T17870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.191921][T17870] ? down_read+0x1ad/0x2e0 [ 456.191943][T17870] genl_rcv+0x28/0x40 [ 456.191963][T17870] netlink_unicast+0x82f/0x9e0 [ 456.192005][T17870] ? __pfx_netlink_unicast+0x10/0x10 [ 456.192031][T17870] ? netlink_sendmsg+0x642/0xb30 [ 456.192048][T17870] ? skb_put+0x11b/0x210 [ 456.192070][T17870] netlink_sendmsg+0x805/0xb30 [ 456.192099][T17870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.192121][T17870] ? aa_sock_msg_perm+0xf1/0x1d0 [ 456.192146][T17870] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.192163][T17870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.192192][T17870] __sock_sendmsg+0x21c/0x270 [ 456.192219][T17870] ____sys_sendmsg+0x505/0x830 [ 456.192244][T17870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.192273][T17870] ? import_iovec+0x74/0xa0 [ 456.192298][T17870] ___sys_sendmsg+0x21f/0x2a0 [ 456.192320][T17870] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.192375][T17870] ? __fget_files+0x2a/0x420 [ 456.192391][T17870] ? __fget_files+0x3a0/0x420 [ 456.192417][T17870] __x64_sys_sendmsg+0x19b/0x260 [ 456.192439][T17870] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.192469][T17870] ? __pfx_ksys_write+0x10/0x10 [ 456.192495][T17870] ? do_syscall_64+0xbe/0xfa0 [ 456.192514][T17870] do_syscall_64+0xfa/0xfa0 [ 456.192529][T17870] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.192547][T17870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.192564][T17870] ? clear_bhb_loop+0x60/0xb0 [ 456.192585][T17870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.192602][T17870] RIP: 0033:0x7f8a3838f6c9 [ 456.192619][T17870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.192634][T17870] RSP: 002b:00007f8a39288038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.192653][T17870] RAX: ffffffffffffffda RBX: 00007f8a385e5fa0 RCX: 00007f8a3838f6c9 [ 456.192665][T17870] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001d [ 456.192677][T17870] RBP: 00007f8a39288090 R08: 0000000000000000 R09: 0000000000000000 [ 456.192688][T17870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.192699][T17870] R13: 00007f8a385e6038 R14: 00007f8a385e5fa0 R15: 00007ffdb15944f8 [ 456.192729][T17870] [ 456.228307][T17871] vlan5: entered promiscuous mode [ 456.568046][T17871] bridge4: entered promiscuous mode [ 456.573479][T17871] vlan5: entered allmulticast mode [ 456.578931][T17871] bridge4: entered allmulticast mode [ 456.870801][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3651'. [ 457.197241][T17896] vlan11: entered promiscuous mode [ 457.202671][T17896] hsr_slave_1: entered promiscuous mode [ 457.209741][T17896] vlan11: entered allmulticast mode [ 457.234720][T17896] hsr_slave_1: entered allmulticast mode [ 457.306788][T17901] FAULT_INJECTION: forcing a failure. [ 457.306788][T17901] name failslab, interval 1, probability 0, space 0, times 0 [ 457.342751][T17901] CPU: 1 UID: 0 PID: 17901 Comm: syz.8.3658 Not tainted syzkaller #0 PREEMPT(full) [ 457.342778][T17901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 457.342789][T17901] Call Trace: [ 457.342796][T17901] [ 457.342805][T17901] dump_stack_lvl+0x189/0x250 [ 457.342833][T17901] ? __pfx____ratelimit+0x10/0x10 [ 457.342859][T17901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.342882][T17901] ? __pfx__printk+0x10/0x10 [ 457.342905][T17901] ? __pfx___might_resched+0x10/0x10 [ 457.342930][T17901] should_fail_ex+0x414/0x560 [ 457.342961][T17901] should_failslab+0xa8/0x100 [ 457.342981][T17901] kmem_cache_alloc_node_noprof+0x77/0x710 [ 457.343006][T17901] ? __alloc_skb+0x112/0x2d0 [ 457.343030][T17901] __alloc_skb+0x112/0x2d0 [ 457.343051][T17901] netlink_ack+0x146/0xa50 [ 457.343068][T17901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.343107][T17901] netlink_rcv_skb+0x28c/0x470 [ 457.343124][T17901] ? __lock_acquire+0xab9/0xd20 [ 457.343149][T17901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.343174][T17901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.343212][T17901] ? down_read+0x1ad/0x2e0 [ 457.343235][T17901] genl_rcv+0x28/0x40 [ 457.343256][T17901] netlink_unicast+0x82f/0x9e0 [ 457.343290][T17901] ? __pfx_netlink_unicast+0x10/0x10 [ 457.343317][T17901] ? netlink_sendmsg+0x642/0xb30 [ 457.343334][T17901] ? skb_put+0x11b/0x210 [ 457.343355][T17901] netlink_sendmsg+0x805/0xb30 [ 457.343384][T17901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.343407][T17901] ? aa_sock_msg_perm+0xf1/0x1d0 [ 457.343434][T17901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.343452][T17901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.343472][T17901] __sock_sendmsg+0x21c/0x270 [ 457.343498][T17901] ____sys_sendmsg+0x505/0x830 [ 457.343524][T17901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.343554][T17901] ? import_iovec+0x74/0xa0 [ 457.343582][T17901] ___sys_sendmsg+0x21f/0x2a0 [ 457.343602][T17901] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.343651][T17901] ? __fget_files+0x2a/0x420 [ 457.343666][T17901] ? __fget_files+0x3a0/0x420 [ 457.343693][T17901] __x64_sys_sendmsg+0x19b/0x260 [ 457.343714][T17901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.343743][T17901] ? __pfx_ksys_write+0x10/0x10 [ 457.343768][T17901] ? do_syscall_64+0xbe/0xfa0 [ 457.343788][T17901] do_syscall_64+0xfa/0xfa0 [ 457.343804][T17901] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.343822][T17901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.343839][T17901] ? clear_bhb_loop+0x60/0xb0 [ 457.343861][T17901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.343878][T17901] RIP: 0033:0x7fdc1e58f6c9 [ 457.343894][T17901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.343907][T17901] RSP: 002b:00007fdc1f386038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.343926][T17901] RAX: ffffffffffffffda RBX: 00007fdc1e7e5fa0 RCX: 00007fdc1e58f6c9 [ 457.343940][T17901] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001d [ 457.343952][T17901] RBP: 00007fdc1f386090 R08: 0000000000000000 R09: 0000000000000000 [ 457.343963][T17901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.343973][T17901] R13: 00007fdc1e7e6038 R14: 00007fdc1e7e5fa0 R15: 00007ffe145aa138 [ 457.344000][T17901] [ 457.757880][T17905] syz2: rxe_newlink: already configured on ipvlan1 [ 457.933568][T17907] syz2: rxe_newlink: already configured on ipvlan1 [ 457.960828][T17896] wg1 speed is unknown, defaulting to 1000 [ 458.480052][T17919] __nla_validate_parse: 4 callbacks suppressed [ 458.480070][T17919] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3663'. [ 458.575006][T17928] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3666'. [ 458.648053][T17930] tipc: Enabled bearer , priority 0 [ 458.655489][T17930] syzkaller0: entered promiscuous mode [ 458.661301][T17930] syzkaller0: entered allmulticast mode [ 458.782104][T17930] tipc: Resetting bearer [ 458.845708][T17929] tipc: Resetting bearer [ 458.872085][T17929] tipc: Disabling bearer [ 459.653505][T17949] wg1 speed is unknown, defaulting to 1000 [ 459.676303][T17963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.121912][T17981] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3684'. [ 460.140651][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3685'. [ 460.166199][T17981] netlink: 'syz.9.3684': attribute type 6 has an invalid length. [ 460.202128][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3685'. [ 460.281311][T17984] vlan11: entered promiscuous mode [ 460.297656][T17984] bridge20: entered promiscuous mode [ 460.311739][T17984] vlan11: entered allmulticast mode [ 460.332181][T17984] bridge20: entered allmulticast mode [ 460.432224][T17992] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3688'. [ 460.452226][T17992] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3688'. [ 460.475361][T17992] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3688'. [ 460.671870][T18006] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3692'. [ 461.228215][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3699'. [ 461.718456][T18064] bond4: (slave tunl0): Device is not bonding slave [ 461.725590][T18064] bond4: option active_slave: invalid value (tunl0) [ 461.754852][T18064] bond4 (unregistering): Released all slaves [ 461.814883][T18067] netlink: 'syz.6.3711': attribute type 1 has an invalid length. [ 461.901467][T18067] bond1: (slave geneve2): making interface the new active one [ 461.921093][T18067] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 461.935197][T13973] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 461.947758][T13973] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 461.964008][T13973] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 461.982128][T13973] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 462.374737][T11735] hid-generic 0005:0007:5507.0001: hidraw0: BLUETOOTH HID v0.08 Device [syz0] on aa:aa:aa:aa:aa:aa [ 462.636360][T18103] fido_id[18103]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci7/hci7:200/report_descriptor': No such file or directory [ 462.680684][T18117] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input11 [ 463.235447][T18164] netlink: 'syz.9.3738': attribute type 16 has an invalid length. [ 463.255057][T18167] syzkaller0: entered promiscuous mode [ 463.260559][T18167] syzkaller0: entered allmulticast mode [ 463.271532][T18164] netlink: 'syz.9.3738': attribute type 1 has an invalid length. [ 463.285519][T18164] netlink: 'syz.9.3738': attribute type 2 has an invalid length. [ 463.508661][T18177] __nla_validate_parse: 10 callbacks suppressed [ 463.508679][T18177] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3743'. [ 463.563428][T18177] vlan11: entered promiscuous mode [ 463.573191][T18177] bridge8: entered promiscuous mode [ 463.586139][T18177] vlan11: entered allmulticast mode [ 463.591366][T18177] bridge8: entered allmulticast mode [ 463.622925][T18191] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3747'. [ 463.645206][T18194] netlink: 'syz.5.3749': attribute type 1 has an invalid length. [ 463.654132][T18191] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3747'. [ 463.663119][T18191] netlink: 'syz.7.3747': attribute type 5 has an invalid length. [ 463.684983][T18191] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3747'. [ 463.695363][T18199] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3747'. [ 463.708006][T18191] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3747'. [ 463.775598][T18194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 464.225060][T18185] wg1 speed is unknown, defaulting to 1000 [ 464.653863][T18206] wg1 speed is unknown, defaulting to 1000 [ 464.868578][T18232] wg1 speed is unknown, defaulting to 1000 [ 465.054953][T18236] syzkaller0: entered promiscuous mode [ 465.060461][T18236] syzkaller0: entered allmulticast mode [ 465.482157][T18244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3762'. [ 465.507867][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3762'. [ 465.582428][T18244] vlan13: entered promiscuous mode [ 465.590524][T18244] bridge21: entered promiscuous mode [ 465.600881][T18244] vlan13: entered allmulticast mode [ 465.606683][T18244] bridge21: entered allmulticast mode [ 465.800525][T18252] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3764'. [ 465.810993][T18252] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3764'. [ 466.008065][T18256] FAULT_INJECTION: forcing a failure. [ 466.008065][T18256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.009453][T18256] [ 466.009462][T18256] ====================================================== [ 466.009470][T18256] WARNING: possible circular locking dependency detected [ 466.009482][T18256] syzkaller #0 Not tainted [ 466.009491][T18256] ------------------------------------------------------ [ 466.009499][T18256] syz.5.3766/18256 is trying to acquire lock: [ 466.009508][T18256] ffffffff8df31620 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 466.009555][T18256] [ 466.009555][T18256] but task is already holding lock: [ 466.009561][T18256] ffff8880b883a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 466.009597][T18256] [ 466.009597][T18256] which lock already depends on the new lock. [ 466.009597][T18256] [ 466.009604][T18256] [ 466.009604][T18256] the existing dependency chain (in reverse order) is: [ 466.009610][T18256] [ 466.009610][T18256] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 466.009633][T18256] lock_acquire+0x120/0x360 [ 466.009648][T18256] _raw_spin_lock_nested+0x32/0x50 [ 466.009661][T18256] raw_spin_rq_lock_nested+0x2a/0x140 [ 466.009674][T18256] task_rq_lock+0xbc/0x470 [ 466.009685][T18256] cgroup_move_task+0x92/0x2a0 [ 466.009699][T18256] css_set_move_task+0x658/0x9e0 [ 466.009710][T18256] cgroup_post_fork+0x1ef/0x790 [ 466.009720][T18256] copy_process+0x3862/0x3c00 [ 466.009730][T18256] kernel_clone+0x21e/0x840 [ 466.009739][T18256] user_mode_thread+0xdd/0x140 [ 466.009749][T18256] rest_init+0x23/0x300 [ 466.009759][T18256] start_kernel+0x3ae/0x410 [ 466.009770][T18256] x86_64_start_reservations+0x24/0x30 [ 466.009780][T18256] x86_64_start_kernel+0x143/0x1c0 [ 466.009788][T18256] common_startup_64+0x13e/0x147 [ 466.009800][T18256] [ 466.009800][T18256] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 466.009818][T18256] lock_acquire+0x120/0x360 [ 466.009826][T18256] _raw_spin_lock_irqsave+0xa7/0xf0 [ 466.009839][T18256] try_to_wake_up+0x67/0x12b0 [ 466.009850][T18256] __wake_up_common_lock+0x137/0x1f0 [ 466.009862][T18256] tty_port_default_wakeup+0xfb/0x170 [ 466.009871][T18256] serial8250_tx_chars+0x72e/0x970 [ 466.009884][T18256] serial8250_handle_irq+0x633/0xbb0 [ 466.009896][T18256] serial8250_default_handle_irq+0xbf/0x200 [ 466.009904][T18256] serial8250_interrupt+0x8d/0x180 [ 466.009914][T18256] __handle_irq_event_percpu+0x295/0xab0 [ 466.009926][T18256] handle_irq_event+0x8b/0x1e0 [ 466.009937][T18256] handle_edge_irq+0x23b/0xa10 [ 466.009947][T18256] __common_interrupt+0x141/0x1f0 [ 466.009959][T18256] common_interrupt+0xb6/0xe0 [ 466.009970][T18256] asm_common_interrupt+0x26/0x40 [ 466.009978][T18256] mas_start+0x138/0x560 [ 466.009990][T18256] mas_find+0x8aa/0xd30 [ 466.009997][T18256] vms_gather_munmap_vmas+0xe8f/0x12e0 [ 466.010007][T18256] mmap_region+0x722/0x2110 [ 466.010016][T18256] do_mmap+0xc45/0x10d0 [ 466.010027][T18256] vm_mmap_pgoff+0x2a6/0x4d0 [ 466.010037][T18256] ksys_mmap_pgoff+0x51f/0x760 [ 466.010047][T18256] do_syscall_64+0xfa/0xfa0 [ 466.010056][T18256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.010065][T18256] [ 466.010065][T18256] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 466.010077][T18256] lock_acquire+0x120/0x360 [ 466.010085][T18256] _raw_spin_lock_irqsave+0xa7/0xf0 [ 466.010097][T18256] __wake_up_common_lock+0x2f/0x1f0 [ 466.010108][T18256] tty_port_default_wakeup+0xfb/0x170 [ 466.010116][T18256] serial8250_tx_chars+0x72e/0x970 [ 466.010127][T18256] serial8250_handle_irq+0x633/0xbb0 [ 466.010138][T18256] serial8250_default_handle_irq+0xbf/0x200 [ 466.010147][T18256] serial8250_interrupt+0x8d/0x180 [ 466.010156][T18256] __handle_irq_event_percpu+0x295/0xab0 [ 466.010167][T18256] handle_irq_event+0x8b/0x1e0 [ 466.010177][T18256] handle_edge_irq+0x23b/0xa10 [ 466.010187][T18256] __common_interrupt+0x141/0x1f0 [ 466.010199][T18256] common_interrupt+0xb6/0xe0 [ 466.010208][T18256] asm_common_interrupt+0x26/0x40 [ 466.010217][T18256] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 466.010228][T18256] uart_port_unlock_deref+0x111/0x2f0 [ 466.010240][T18256] uart_write+0xe8/0x130 [ 466.010250][T18256] n_tty_write+0xd27/0x1200 [ 466.010259][T18256] file_tty_write+0x559/0xa20 [ 466.010270][T18256] vfs_write+0x5c9/0xb30 [ 466.010281][T18256] ksys_write+0x145/0x250 [ 466.010292][T18256] do_syscall_64+0xfa/0xfa0 [ 466.010300][T18256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.010308][T18256] [ 466.010308][T18256] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 466.010320][T18256] lock_acquire+0x120/0x360 [ 466.010328][T18256] _raw_spin_lock_irqsave+0xa7/0xf0 [ 466.010339][T18256] serial8250_console_write+0x17e/0x1ba0 [ 466.010352][T18256] console_flush_all+0x6f3/0xb10 [ 466.010362][T18256] console_unlock+0xbb/0x190 [ 466.010371][T18256] vprintk_emit+0x4c5/0x590 [ 466.010381][T18256] _printk+0xcf/0x120 [ 466.010389][T18256] register_console+0xa8b/0xf90 [ 466.010399][T18256] univ8250_console_init+0x3a/0x70 [ 466.010409][T18256] console_init+0x10e/0x430 [ 466.010417][T18256] start_kernel+0x254/0x410 [ 466.010428][T18256] x86_64_start_reservations+0x24/0x30 [ 466.010437][T18256] x86_64_start_kernel+0x143/0x1c0 [ 466.010445][T18256] common_startup_64+0x13e/0x147 [ 466.010456][T18256] [ 466.010456][T18256] -> #0 (console_owner){-.-.}-{0:0}: [ 466.010467][T18256] validate_chain+0xb9b/0x2140 [ 466.010477][T18256] __lock_acquire+0xab9/0xd20 [ 466.010485][T18256] lock_acquire+0x120/0x360 [ 466.010492][T18256] console_flush_all+0x69c/0xb10 [ 466.010503][T18256] console_unlock+0xbb/0x190 [ 466.010512][T18256] vprintk_emit+0x4c5/0x590 [ 466.010522][T18256] _printk+0xcf/0x120 [ 466.010529][T18256] should_fail_ex+0x3f5/0x560 [ 466.010541][T18256] strncpy_from_user+0x36/0x290 [ 466.010552][T18256] strncpy_from_user_nofault+0x72/0x150 [ 466.010562][T18256] bpf_probe_read_compat_str+0xe2/0x180 [ 466.010573][T18256] bpf_prog_84c16067fcc0268f+0x41/0x68 [ 466.010581][T18256] bpf_trace_run2+0x284/0x4b0 [ 466.010588][T18256] __bpf_trace_tlb_flush+0xf5/0x150 [ 466.010600][T18256] trace_tlb_flush+0x115/0x140 [ 466.010611][T18256] switch_mm_irqs_off+0x54a/0x7b0 [ 466.010622][T18256] __schedule+0x110e/0x4cc0 [ 466.010634][T18256] schedule+0x165/0x360 [ 466.010645][T18256] schedule_preempt_disabled+0x13/0x30 [ 466.010658][T18256] __mutex_lock+0x7e6/0x1350 [ 466.010666][T18256] ethnl_default_set_doit+0x2b3/0x890 [ 466.010677][T18256] genl_family_rcv_msg_doit+0x215/0x300 [ 466.010689][T18256] genl_rcv_msg+0x60e/0x790 [ 466.010699][T18256] netlink_rcv_skb+0x208/0x470 [ 466.010707][T18256] genl_rcv+0x28/0x40 [ 466.010717][T18256] netlink_unicast+0x82f/0x9e0 [ 466.010729][T18256] netlink_sendmsg+0x805/0xb30 [ 466.010738][T18256] __sock_sendmsg+0x21c/0x270 [ 466.010750][T18256] ____sys_sendmsg+0x505/0x830 [ 466.010759][T18256] ___sys_sendmsg+0x21f/0x2a0 [ 466.010768][T18256] __x64_sys_sendmsg+0x19b/0x260 [ 466.010777][T18256] do_syscall_64+0xfa/0xfa0 [ 466.010786][T18256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.010794][T18256] [ 466.010794][T18256] other info that might help us debug this: [ 466.010794][T18256] [ 466.010798][T18256] Chain exists of: [ 466.010798][T18256] console_owner --> &p->pi_lock --> &rq->__lock [ 466.010798][T18256] [ 466.010816][T18256] Possible unsafe locking scenario: [ 466.010816][T18256] [ 466.010819][T18256] CPU0 CPU1 [ 466.010822][T18256] ---- ---- [ 466.010826][T18256] lock(&rq->__lock); [ 466.010832][T18256] lock(&p->pi_lock); [ 466.010839][T18256] lock(&rq->__lock); [ 466.010846][T18256] lock(console_owner); [ 466.010852][T18256] [ 466.010852][T18256] *** DEADLOCK *** [ 466.010852][T18256] [ 466.010855][T18256] 6 locks held by syz.5.3766/18256: [ 466.010861][T18256] #0: ffffffff8f3320f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 466.010884][T18256] #1: ffffffff8f2cc188 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x2b3/0x890 [ 466.010907][T18256] #2: ffff8880b883a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 466.010928][T18256] #3: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 466.010948][T18256] #4: ffffffff8df31680 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 466.010968][T18256] #5: ffffffff8de18f50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 466.010991][T18256] [ 466.010991][T18256] stack backtrace: [ 466.010996][T18256] CPU: 0 UID: 0 PID: 18256 Comm: syz.5.3766 Not tainted syzkaller #0 PREEMPT(full) [ 466.011007][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.011014][T18256] Call Trace: [ 466.011018][T18256] [ 466.011023][T18256] dump_stack_lvl+0x189/0x250 [ 466.011037][T18256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.011049][T18256] ? __pfx__printk+0x10/0x10 [ 466.011058][T18256] ? print_lock_name+0xde/0x100 [ 466.011068][T18256] print_circular_bug+0x2ee/0x310 [ 466.011080][T18256] check_noncircular+0x134/0x160 [ 466.011092][T18256] validate_chain+0xb9b/0x2140 [ 466.011107][T18256] __lock_acquire+0xab9/0xd20 [ 466.011117][T18256] ? console_flush_all+0x13a/0xb10 [ 466.011128][T18256] lock_acquire+0x120/0x360 [ 466.011136][T18256] ? console_flush_all+0x13a/0xb10 [ 466.011149][T18256] ? do_raw_spin_unlock+0x122/0x240 [ 466.011161][T18256] ? console_flush_all+0x13a/0xb10 [ 466.011173][T18256] console_flush_all+0x69c/0xb10 [ 466.011184][T18256] ? console_flush_all+0x13a/0xb10 [ 466.011195][T18256] ? console_flush_all+0x13a/0xb10 [ 466.011208][T18256] ? __pfx_console_flush_all+0x10/0x10 [ 466.011222][T18256] ? is_printk_cpu_sync_owner+0x32/0x40 [ 466.011236][T18256] console_unlock+0xbb/0x190 [ 466.011246][T18256] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 466.011258][T18256] ? __pfx_console_unlock+0x10/0x10 [ 466.011270][T18256] vprintk_emit+0x4c5/0x590 [ 466.011281][T18256] ? __pfx_vprintk_emit+0x10/0x10 [ 466.011296][T18256] _printk+0xcf/0x120 [ 466.011304][T18256] ? __pfx____ratelimit+0x10/0x10 [ 466.011318][T18256] ? __pfx__printk+0x10/0x10 [ 466.011328][T18256] ? rcu_is_watching+0x15/0xb0 [ 466.011340][T18256] should_fail_ex+0x3f5/0x560 [ 466.011353][T18256] strncpy_from_user+0x36/0x290 [ 466.011366][T18256] strncpy_from_user_nofault+0x72/0x150 [ 466.011377][T18256] bpf_probe_read_compat_str+0xe2/0x180 [ 466.011389][T18256] bpf_prog_84c16067fcc0268f+0x41/0x68 [ 466.011396][T18256] bpf_trace_run2+0x284/0x4b0 [ 466.011405][T18256] ? bpf_trace_run2+0x186/0x4b0 [ 466.011413][T18256] ? __pfx_bpf_trace_run2+0x10/0x10 [ 466.011421][T18256] ? do_raw_spin_lock+0x121/0x290 [ 466.011432][T18256] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 466.011444][T18256] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 466.011457][T18256] __bpf_trace_tlb_flush+0xf5/0x150 [ 466.011469][T18256] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 466.011483][T18256] ? psi_group_change+0xab8/0x1050 [ 466.011494][T18256] trace_tlb_flush+0x115/0x140 [ 466.011506][T18256] switch_mm_irqs_off+0x54a/0x7b0 [ 466.011519][T18256] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 466.011531][T18256] ? psi_task_switch+0x4e3/0x880 [ 466.011542][T18256] __schedule+0x110e/0x4cc0 [ 466.011557][T18256] ? __lock_acquire+0xab9/0xd20 [ 466.011567][T18256] ? __lock_acquire+0xab9/0xd20 [ 466.011576][T18256] ? __pfx___schedule+0x10/0x10 [ 466.011591][T18256] ? schedule+0x91/0x360 [ 466.011604][T18256] schedule+0x165/0x360 [ 466.011617][T18256] schedule_preempt_disabled+0x13/0x30 [ 466.011629][T18256] __mutex_lock+0x7e6/0x1350 [ 466.011639][T18256] ? __mutex_lock+0x5bb/0x1350 [ 466.011650][T18256] ? ethnl_default_set_doit+0x2b3/0x890 [ 466.011661][T18256] ? __pfx___mutex_lock+0x10/0x10 [ 466.011672][T18256] ? rcu_is_watching+0x15/0xb0 [ 466.011682][T18256] ? ethnl_default_parse+0x195/0x290 [ 466.011693][T18256] ? ethnl_set_linkmodes_validate+0x215/0x370 [ 466.011706][T18256] ethnl_default_set_doit+0x2b3/0x890 [ 466.011717][T18256] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 466.011729][T18256] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 466.011743][T18256] genl_family_rcv_msg_doit+0x215/0x300 [ 466.011756][T18256] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 466.011771][T18256] ? bpf_lsm_capable+0x9/0x20 [ 466.011782][T18256] ? security_capable+0x7e/0x2e0 [ 466.011796][T18256] genl_rcv_msg+0x60e/0x790 [ 466.011808][T18256] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.011824][T18256] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 466.011837][T18256] netlink_rcv_skb+0x208/0x470 [ 466.011846][T18256] ? __lock_acquire+0xab9/0xd20 [ 466.011855][T18256] ? __pfx_genl_rcv_msg+0x10/0x10 [ 466.011867][T18256] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 466.011879][T18256] ? down_read+0x1ad/0x2e0 [ 466.011889][T18256] genl_rcv+0x28/0x40 [ 466.011900][T18256] netlink_unicast+0x82f/0x9e0 [ 466.011914][T18256] ? __pfx_netlink_unicast+0x10/0x10 [ 466.011928][T18256] ? netlink_sendmsg+0x642/0xb30 [ 466.011937][T18256] ? skb_put+0x11b/0x210 [ 466.011947][T18256] netlink_sendmsg+0x805/0xb30 [ 466.011958][T18256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.011969][T18256] ? aa_sock_msg_perm+0xf1/0x1d0 [ 466.011982][T18256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 466.011992][T18256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.012001][T18256] __sock_sendmsg+0x21c/0x270 [ 466.012014][T18256] ____sys_sendmsg+0x505/0x830 [ 466.012025][T18256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.012037][T18256] ? import_iovec+0x74/0xa0 [ 466.012049][T18256] ___sys_sendmsg+0x21f/0x2a0 [ 466.012060][T18256] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.012077][T18256] ? __fget_files+0x2a/0x420 [ 466.012086][T18256] ? __fget_files+0x3a0/0x420 [ 466.012096][T18256] __x64_sys_sendmsg+0x19b/0x260 [ 466.012107][T18256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.012119][T18256] ? __pfx_ksys_write+0x10/0x10 [ 466.012132][T18256] ? do_syscall_64+0xbe/0xfa0 [ 466.012141][T18256] do_syscall_64+0xfa/0xfa0 [ 466.012150][T18256] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.012158][T18256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.012167][T18256] ? clear_bhb_loop+0x60/0xb0 [ 466.012177][T18256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.012187][T18256] RIP: 0033:0x7fc95278f6c9 [ 466.012194][T18256] Code: Unable to access opcode bytes at 0x7fc95278f69f. [ 466.012199][T18256] RSP: 002b:00007fc953669038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.012209][T18256] RAX: ffffffffffffffda RBX: 00007fc9529e5fa0 RCX: 00007fc95278f6c9 [ 466.012217][T18256] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 466.012223][T18256] RBP: 00007fc953669090 R08: 0000000000000000 R09: 0000000000000000 [ 466.012229][T18256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.012235][T18256] R13: 00007fc9529e6038 R14: 00007fc9529e5fa0 R15: 00007ffeccc460e8 [ 466.012245][T18256] [ 467.455792][T18256] CPU: 0 UID: 0 PID: 18256 Comm: syz.5.3766 Not tainted syzkaller #0 PREEMPT(full) [ 467.455807][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.455814][T18256] Call Trace: [ 467.455821][T18256] [ 467.455828][T18256] dump_stack_lvl+0x189/0x250 [ 467.455845][T18256] ? __pfx____ratelimit+0x10/0x10 [ 467.455860][T18256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.455871][T18256] ? __pfx__printk+0x10/0x10 [ 467.455882][T18256] ? rcu_is_watching+0x15/0xb0 [ 467.455893][T18256] should_fail_ex+0x414/0x560 [ 467.455909][T18256] strncpy_from_user+0x36/0x290 [ 467.455923][T18256] strncpy_from_user_nofault+0x72/0x150 [ 467.455936][T18256] bpf_probe_read_compat_str+0xe2/0x180 [ 467.455949][T18256] bpf_prog_84c16067fcc0268f+0x41/0x68 [ 467.455958][T18256] bpf_trace_run2+0x284/0x4b0 [ 467.455966][T18256] ? bpf_trace_run2+0x186/0x4b0 [ 467.455975][T18256] ? __pfx_bpf_trace_run2+0x10/0x10 [ 467.455983][T18256] ? do_raw_spin_lock+0x121/0x290 [ 467.455997][T18256] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 467.456008][T18256] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 467.456022][T18256] __bpf_trace_tlb_flush+0xf5/0x150 [ 467.456035][T18256] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 467.456049][T18256] ? psi_group_change+0xab8/0x1050 [ 467.456061][T18256] trace_tlb_flush+0x115/0x140 [ 467.456074][T18256] switch_mm_irqs_off+0x54a/0x7b0 [ 467.456087][T18256] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 467.456099][T18256] ? psi_task_switch+0x4e3/0x880 [ 467.456111][T18256] __schedule+0x110e/0x4cc0 [ 467.456128][T18256] ? __lock_acquire+0xab9/0xd20 [ 467.456138][T18256] ? __lock_acquire+0xab9/0xd20 [ 467.456147][T18256] ? __pfx___schedule+0x10/0x10 [ 467.456163][T18256] ? schedule+0x91/0x360 [ 467.456176][T18256] schedule+0x165/0x360 [ 467.456189][T18256] schedule_preempt_disabled+0x13/0x30 [ 467.456202][T18256] __mutex_lock+0x7e6/0x1350 [ 467.456213][T18256] ? __mutex_lock+0x5bb/0x1350 [ 467.456223][T18256] ? ethnl_default_set_doit+0x2b3/0x890 [ 467.456236][T18256] ? __pfx___mutex_lock+0x10/0x10 [ 467.456247][T18256] ? rcu_is_watching+0x15/0xb0 [ 467.456258][T18256] ? ethnl_default_parse+0x195/0x290 [ 467.456269][T18256] ? ethnl_set_linkmodes_validate+0x215/0x370 [ 467.456281][T18256] ethnl_default_set_doit+0x2b3/0x890 [ 467.456293][T18256] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 467.456306][T18256] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 467.456320][T18256] genl_family_rcv_msg_doit+0x215/0x300 [ 467.456334][T18256] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 467.456349][T18256] ? bpf_lsm_capable+0x9/0x20 [ 467.456360][T18256] ? security_capable+0x7e/0x2e0 [ 467.456374][T18256] genl_rcv_msg+0x60e/0x790 [ 467.456387][T18256] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.456398][T18256] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 467.456412][T18256] netlink_rcv_skb+0x208/0x470 [ 467.456421][T18256] ? __lock_acquire+0xab9/0xd20 [ 467.456430][T18256] ? __pfx_genl_rcv_msg+0x10/0x10 [ 467.456442][T18256] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 467.456455][T18256] ? down_read+0x1ad/0x2e0 [ 467.456466][T18256] genl_rcv+0x28/0x40 [ 467.456476][T18256] netlink_unicast+0x82f/0x9e0 [ 467.456492][T18256] ? __pfx_netlink_unicast+0x10/0x10 [ 467.456505][T18256] ? netlink_sendmsg+0x642/0xb30 [ 467.456515][T18256] ? skb_put+0x11b/0x210 [ 467.456525][T18256] netlink_sendmsg+0x805/0xb30 [ 467.456537][T18256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.456547][T18256] ? aa_sock_msg_perm+0xf1/0x1d0 [ 467.456561][T18256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.456571][T18256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.456581][T18256] __sock_sendmsg+0x21c/0x270 [ 467.456595][T18256] ____sys_sendmsg+0x505/0x830 [ 467.456607][T18256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.456619][T18256] ? import_iovec+0x74/0xa0 [ 467.456631][T18256] ___sys_sendmsg+0x21f/0x2a0 [ 467.456646][T18256] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.456663][T18256] ? __fget_files+0x2a/0x420 [ 467.456672][T18256] ? __fget_files+0x3a0/0x420 [ 467.456683][T18256] __x64_sys_sendmsg+0x19b/0x260 [ 467.456693][T18256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.456706][T18256] ? __pfx_ksys_write+0x10/0x10 [ 467.456719][T18256] ? do_syscall_64+0xbe/0xfa0 [ 467.456729][T18256] do_syscall_64+0xfa/0xfa0 [ 467.456738][T18256] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.456746][T18256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.456756][T18256] ? clear_bhb_loop+0x60/0xb0 [ 467.456766][T18256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.456776][T18256] RIP: 0033:0x7fc95278f6c9 [ 467.456784][T18256] Code: Unable to access opcode bytes at 0x7fc95278f69f. [ 467.456789][T18256] RSP: 002b:00007fc953669038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.456800][T18256] RAX: ffffffffffffffda RBX: 00007fc9529e5fa0 RCX: 00007fc95278f6c9 [ 467.456807][T18256] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 467.456814][T18256] RBP: 00007fc953669090 R08: 0000000000000000 R09: 0000000000000000 [ 467.456820][T18256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.456826][T18256] R13: 00007fc9529e6038 R14: 00007fc9529e5fa0 R15: 00007ffeccc460e8 [ 467.456836][T18256]