last executing test programs: 2.70396073s ago: executing program 1 (id=1632): r0 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) getsockopt$inet_int(r0, 0x0, 0x32, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="fe19ed60d13003a9d5b29bb397c61676a4923689740d85adf7d4488f362cd1adcbaf5c", 0x23) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0xffffffbe}], 0x1, 0x0, 0x0) 2.571128286s ago: executing program 1 (id=1634): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r2, 0x0, 0x0, 0x40008001) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000240)={'filter\x00', 0x0, [0xa1, 0x2, 0x4, 0x32, 0xff]}, &(0x7f0000000000)=0x54) 2.546061955s ago: executing program 4 (id=1635): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701002400128009000100626f6e6400000000140002800800070002"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r2, &(0x7f0000000200)="1e711406784e02166b685c7d767deeed90286d805ccd9d32826084b8ba28b7e4aa12ce7e2fd49cccc4cfc1c653aa083b92a225b87d8f8406792dd7ae3bbdbe914dc52fba5fa3ef65cfa81e4df95f8072ace9ade36807d5d3620ace0508eacc185a0b6b13c4d723770f02f37be8fcb7b3b114afa074abe950cd25112e9f81ce23e95f1d9197a31a875359677a3f80efd76d10b5d02165bce8b1f98d51d4addd870376d6b6fa1efff9548ba9b6d2f5afa679f86def63d51422e2c05d6f23029de6", 0xc0, 0x0, &(0x7f0000000400)={0xa, 0x4e24, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) 2.349123072s ago: executing program 4 (id=1636): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) (async) r1 = socket$inet6(0xa, 0x6, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000008a00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@multicast2, 0x0, 0x3, 0xfffc, 0x0, 0xa}, {0x0, 0xfffffffffffffffe, 0x0, 0x8001, 0x0, 0x4, 0x65a, 0x8002}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1ffffffc, 0x32}, 0x0, @in=@local, 0x3500, 0x0, 0x0, 0x1, 0x0, 0xe40b}}, 0xe8) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async, rerun: 32) socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 32) syz_emit_ethernet(0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) socket(0x1d, 0x2, 0x6) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) (async, rerun: 32) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) socket$nl_crypto(0x10, 0x3, 0x15) (rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) (async) r6 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@rose, @rose, @remote, @null, @remote, @netrom, @null, @null]}, &(0x7f0000000200)=0x48) ioctl$SIOCAX25DELFWD(r6, 0x89eb, &(0x7f0000000240)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) 2.164604888s ago: executing program 4 (id=1639): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f2, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote={0x5}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000006301b8000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/246, 0x42, 0xf6, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x27, 0x25, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) close(0x4) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000170000000c0006", @ANYRES64=r0, @ANYBLOB="08903fd750ac3d0d501fd6336bda8ccc28fd", @ANYRES32=r3], 0x20}}, 0x0) 2.141113121s ago: executing program 4 (id=1640): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) read$alg(r1, &(0x7f0000000140)=""/103, 0x67) write(r5, &(0x7f0000003300)="ac", 0x1) write(r3, 0x0, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto$inet(r0, &(0x7f00000002c0)="a60f2eebed", 0x5, 0x844, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88afa5b4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xfffffffffffffef1}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 1.612594826s ago: executing program 3 (id=1645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x7c}}, 0x40000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0001000200", @ANYBLOB="2ca0d52c"], 0x8) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000043c0)={'tunl0\x00', {0x2, 0x4e23, @empty}}) 1.612125515s ago: executing program 1 (id=1646): syz_emit_ethernet(0x76, &(0x7f00000004c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x1, 0x6, 'LJn', 0x5, 0x33, 0xff, @dev={0xfe, 0x80, '\x00', 0x2c}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0x29, 0x0, 0x4, 0x0, 0x2, 0x8, 0x7}], "e1adea3e474fafec"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000800000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x69, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/56, 0x6a}], 0x300) 1.520414299s ago: executing program 0 (id=1647): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockname(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000380)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000711203000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) bind$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x0, @none, 0x4}, 0xe) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x7ff}, 0xe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x7}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1d}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}]}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000173110b00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r6, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x10, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000001240)={{r7}, "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"}) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x1c, r12, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r10, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r12, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x448c0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 1.466515968s ago: executing program 1 (id=1648): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2b, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000480)="10b50c52f4c3a8dee7", 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r1, &(0x7f0000000640), &(0x7f00000006c0)=""/172}, 0x20) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in6=@private0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000000)=0xe8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000004000000000011000000140009"], 0x28}}, 0x4000800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000400)='X', 0x1, 0x4002000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)='J', 0x8980}], 0x1) 1.397877644s ago: executing program 3 (id=1649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r0], 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 64) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000017c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@base={0x1a, 0x2, 0x1ff, 0x8000, 0x44050, r0, 0x1ff, '\x00', 0x0, r1, 0x0, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) syz_emit_ethernet(0x76, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd602e5cea00403c0020010000000000000000001000000000ff0200000000000000000000000000010004000000000000c910fc0100"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) connect$bt_sco(r6, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) ioctl$FIBMAP(r5, 0x1, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000140)={0x0, 0x7d7, 0x0, 0x1, 0x4}, 0xc) (async) r8 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000400000000000000000000000850000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) listen(r8, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 1.284595696s ago: executing program 0 (id=1650): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3f000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="e520000046d786041b8ca87d6db572000000000000000000000027000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0xffffffffffffff26, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.24004051s ago: executing program 3 (id=1651): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001480)={@map, 0xffffffffffffffff, 0x34, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18068755011317a551acf60c9d94bc00000200000000000000ffffffff1c200000", @ANYRES32=r0, @ANYRESOCT=r2], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) 1.222058208s ago: executing program 4 (id=1652): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x7fffd8ee, @my=0x1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r1, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, 0x0, 0x400c010) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1c, 0x0, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, &(0x7f00000001c0)) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f00000000c0)=0x8, 0x4) bind$inet(r9, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0, 0xc, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000580), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e000000010000905000000000000fafd17ff030000a90000002b0e13e735a3184f12540eee4f6abf8fe63d6da2f1acfac0ee3dd2b184b27db1f3020000bf852c8c"], 0xe0}], 0x1}, 0x0) 1.103302018s ago: executing program 0 (id=1653): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x120, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x5, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x2000000, {}, [@common=@icmp={{0x28}, {0x0, "0010", 0x3}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[@ANYRES64], 0x50) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) unshare(0x28000700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x10012, r5, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000200)={0x2, 0xfffe, @local}, 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000c80)={&(0x7f00000000c0)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000980)="680d2cb9903034f26247e52dacfa9740c57720d8ab431499469e11c002592a4157228860c6cd8c748b82187019427f4acda0883d276698d76abf57e68e38265110232c8c52ef34da4f2e741a15af2445731a7832af406e50e8c7b2db930f26d0d251cd42b29e0048d1a1d90b4b7982a651887c091148301b61b06e5cd0f271a28237dac98b2a8dc27fa27cef6b8439c4ee50e5b7c4602e2aaef2d5ba2d26622f3cbf9ae616ef7ac7871d53d5f478385f6ab20456f1f1f1c2bc650b0873", 0xbd}, {&(0x7f00000003c0)="8c3e77b0", 0x4}, {&(0x7f0000000a80)="828ac8f9056cbdf05aee8448b2db9f84dd6ace554580ae6d6e2818ad64882e995f95fb60213a13b45e68771bb491f9f3ce919fc570c8bad24b02865af23432fb8d74c1f2a80dac98227c0d5fbe9a75c39e0d3f9f01f8d92b72ff", 0x5a}], 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000000840000000500000000000000050000001ffffff7000000008400000008000002fc02000000000000000000000000000018000000000000008400000006000000090000000000000900000000000000008400000001000000080009000d00000000000000070000000900000005000000fdffffff", @ANYRES32, @ANYBLOB], 0xc8, 0x2000080}, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000100)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @generic={0x3, 0xb, 0x2, 0x800, 0x3}], &(0x7f00000001c0)='GPL\x00', 0xda8, 0x14, &(0x7f0000000200)=""/20, 0x41000, 0x18, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x2, 0x677, 0x46}, 0x10, 0x27675, 0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r7, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000200)=[{0xffffffffffffffff}, {0x0}], 0x2}, 0x6}], 0x2, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) 1.102351362s ago: executing program 2 (id=1654): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000080)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_CLOSE={0x8}, @CTA_TIMEOUT_TCP_RETRANS={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x40}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x700, 0x7800, 0x1, 0x6, {{0x7, 0x4, 0x2, 0x3c, 0x1c, 0x67, 0x0, 0x7, 0x2f, 0x0, @broadcast, @local, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r10, 0x400448c8, &(0x7f0000000340)={r9, r9, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0xf000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x1}, 0x8) 1.10185417s ago: executing program 3 (id=1655): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff6a0af0fff8ffffff61a4f0ff0000000066040200000000001d400200000000004704000001ed00006203000000ffffffcf440000000000007a0a00fe00ffffffc3030000f1000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 979.533113ms ago: executing program 3 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25, 0x0, 0xfeff}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000100), 0x4) accept4(r6, &(0x7f0000001d80)=@nfc_llcp, &(0x7f0000001e00)=0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r7}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x7, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0xb, 0xb, 0x4, 0xfffffffffffffff0, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x0, 0x5, 0x9, 0x8, 0x20}, @ldst={0x2, 0x2, 0x7, 0x9, 0x5, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x2e, &(0x7f00000003c0)=""/46, 0x41100, 0x47, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0x6, 0x10000, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000007c0)=[r2, r9, r2], &(0x7f0000000800)=[{0x4, 0x5, 0x5, 0xa}], 0x10, 0x8001, @void, @value}, 0x94) readv(r10, &(0x7f0000001d00)=[{&(0x7f0000000980)=""/248, 0xf8}, {&(0x7f0000000a80)=""/82, 0x52}, {&(0x7f0000000b00)=""/212, 0xd4}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/39, 0x27}, {&(0x7f0000001c40)=""/181, 0xb5}], 0x6) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r5, 0x701, 0x0, 0x0, {0x52}}, 0x14}}, 0x0) 969.241844ms ago: executing program 0 (id=1657): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000080)="9134d0be450ba1ddafe1dbf860dda5c37371487124dab60f2d963854c52bd99a53745335ee80a64be5d1e9d5a9d0522f8f111b3f02998f5bf0ef4c7145cca7a4ef9d809ec95e82f43a7457b11d89982c30948e59267386e95b3fcdba99d4cae1d53b1e1c036ac0a02b1830200ae6301e8973fcc218584c646d4af06e26328262ae7c8d7c7d60fbe87d927dbc012c67e4b984a9ad725aa6c9f3902a3a568790a794f1d06d4e9f84a616de13ec2c4df88ebcb7c1ff4b02a09e178b64dd870e634ff04aac653f23f00fa41daf6d46890c70a5d34b4552e8734961e90ad1ceaab2c779f7c0a7f6eaf520ee249dd3ab03", 0xee, 0x4000000, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0xc015) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb0, r6, 0x4, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3cb}, {0x6, 0x11, 0x3ff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x10}}]}, 0xb0}}, 0x20000014) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000500), &(0x7f0000000540)=0x30) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={0xffffffffffffffff, r1}, 0xc) r7 = accept4(r1, &(0x7f00000005c0)=@x25={0x9, @remote}, &(0x7f0000000640)=0x80, 0x800) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r2) sendmsg$TIPC_NL_BEARER_DISABLE(r7, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x124, r8, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3cb}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4a8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5800000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'veth1_to_hsr\x00', 0x0}) sendto$inet(r1, &(0x7f0000000900)="0c5468a54df860e61ef83bba5bbc1aff5529a0749a583325fa4ac297618bb75c1394d70a457490e7917ed0ccefa79d1e90dd5721102096ee2755c965f7bdff108f882974ce4d258f7387b3e597d221b4328bd66ade", 0x55, 0x44040, &(0x7f0000000980)={0x2, 0x4e21, @private=0xa010100}, 0x10) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28040010}, 0x4000041) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', r9, 0xffffffffffffffff, 0x0, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r11 = openat$cgroup_ro(r1, &(0x7f0000000d40)='cpuacct.usage_sys\x00', 0x0, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x8, &(0x7f0000000e00)=@raw=[@alu={0x4, 0x0, 0x1, 0x0, 0xb, 0xfffffffffffffffe, 0x8}, @generic={0xc, 0xa, 0x1, 0x3, 0x8000}, @exit, @jmp={0x5, 0x1, 0xe, 0x2, 0x6, 0x6}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}], &(0x7f0000000e40)='syzkaller\x00', 0xe166, 0xd7, &(0x7f0000000e80)=""/215, 0x41000, 0x3c, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f80)={0x0, 0xc, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x1a, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x7}, [@map_val={0x18, 0x8, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x1}, @ldst={0x1, 0x2, 0x0, 0xb, 0x7, 0x100, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x2, 0x3, 0x2, 0xa, 0x12, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000c40)='syzkaller\x00', 0x7fff, 0x9e, &(0x7f0000000c80)=""/158, 0x41000, 0x6d, '\x00', r3, @xdp, r11, 0x8, &(0x7f0000000d80)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0xb, 0xac, 0x1000}, 0x10, 0xffffffffffffffff, r12, 0x1, 0x0, &(0x7f0000001080)=[{0x3, 0x1, 0xc, 0xa}], 0x10, 0xce3, @void, @value}, 0x94) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r13, 0x0, 0x61, &(0x7f0000001180)={'filter\x00', 0x4}, 0x68) socket(0x9, 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001200)) setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, &(0x7f0000001240)='syz_tun\x00', 0x10) bind$bt_hci(r1, &(0x7f0000001280)={0x1f, 0x4}, 0x6) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r1) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, r14, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "c90d233ee4ebd816469fdb"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000054}, 0x5) 872.673172ms ago: executing program 2 (id=1658): socket$rxrpc(0x21, 0x2, 0xa) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000200000000000000613cf04e8500c32200fef0000000950000"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="010001"]) (async) close(r4) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$nl_route(0x10, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$inet6(0xa, 0x2, 0x7) (async) socket$inet6(0xa, 0x2, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 846.503081ms ago: executing program 0 (id=1659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000400000000600000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000", 0xc) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 741.91092ms ago: executing program 0 (id=1660): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) socket$inet(0xa, 0x801, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r6, @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r6, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0x10000008ebc, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r10 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000040)={0x0, 0x3, 0x1ff}) write$cgroup_subtree(r11, 0x0, 0x32600) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x12, r11, 0x8780f000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r10, 0x800448d2, &(0x7f0000000180)={0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r8, 0x0, 0x40800) 688.508342ms ago: executing program 2 (id=1661): r0 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x280) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x1, 0x3, [0x1000, 0x1, 0x8]}, &(0x7f00000001c0)=0xe) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000300)={r1, 0x40}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) socket(0xa, 0x40000000002, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000005000000000000000000766574683098c76f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffff7fff00000000000000087000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) (async) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x1, 0x3, [0x1000, 0x1, 0x8]}, &(0x7f00000001c0)=0xe) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000300)={r1, 0x40}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) (async) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4040086) (async) 599.55016ms ago: executing program 2 (id=1662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac000000000101040000000000000000020000072400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100ac1414aa08000200ac1414bb08000740000000000c000d8008000240000000003c00188008000240fffffff9080001"], 0xac}}, 0x0) 506.516889ms ago: executing program 2 (id=1663): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f0000000700)='\f', 0x1, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x40000106) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000600), 0x4) (async) sendto$inet(r1, &(0x7f0000000700)='\f', 0x1, 0x0, 0x0, 0x0) (async) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407006}, 0x40000106) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x40}}, 0x0) (async) 448.719615ms ago: executing program 1 (id=1664): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x26004800}, 0x4000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000025647f0168215c50301080000008b000000000700001008"], 0x1c}}, 0x0) 324.593515ms ago: executing program 1 (id=1665): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xd}], 0x30, 0x800}, 0x4000010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003440)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x40000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000980)="e1", 0x1}], 0x2}, 0x20044054) sendmmsg$inet6(r7, 0x0, 0x0, 0x40) r8 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000035c0)=@newqdisc={0x90, 0x24, 0x0, 0x0, 0x0, {}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff8}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8044}, 0x0) recvmsg$qrtr(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000a00)=""/165, 0xa5}, {&(0x7f00000005c0)=""/181, 0xb5}], 0x3}, 0x38, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x482282, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0xad, 0xffff, 0x5, 0x9c0204d, 0x6}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000033c0)={r10, 0x6}, &(0x7f0000003400)=0x8) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000301010400000000000000000200000024000180050001"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x2f64, 0x30, 0xffff, 0x0, 0x0, {}, [{0x2f50, 0x1, [@m_police={0x2aac, 0x1a, 0x0, 0x0, {{0xb}, {0x29d8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x401}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x4, 0xe, 0xd, 0xc, 0xce1, 0x5, 0x5, 0xa2e, 0x100, 0x4, 0x7, 0x7, 0x8, 0x0, 0x80, 0x2, 0xb14156ca, 0x80000001, 0x4, 0xc7a, 0x6, 0x7, 0xb98, 0x23, 0x6, 0xd, 0x0, 0x1, 0x289ec8b1, 0xf3, 0x2, 0x9, 0x0, 0x1e000, 0x7f, 0x2, 0xffffffff, 0x5, 0x144d6f65, 0x2, 0x4, 0x8, 0x40, 0x6, 0xffffffff, 0x5, 0x4, 0x1, 0x8, 0x1, 0xfff, 0x4, 0x2, 0x2, 0x8000, 0x3, 0x7, 0xa, 0x9, 0x80000000, 0x4, 0x6, 0xda92, 0x6b0b, 0x760, 0x101, 0x3, 0x6, 0xffff, 0x30, 0x1, 0x5, 0x5, 0x397, 0x9, 0x4, 0x3, 0x3494, 0x6, 0xe0000, 0x20, 0x59, 0x6, 0xff, 0x6d19ff93, 0xffff, 0x3, 0x8, 0xfffffff9, 0x159, 0x0, 0x0, 0x3, 0x7, 0x3, 0x2, 0x1000, 0x4, 0x1a3, 0x9, 0x5e1, 0x200, 0xfffffffe, 0x9, 0x401, 0xffffffff, 0x7c6, 0xfffffff7, 0x6, 0x720, 0x5, 0x2, 0x80000000, 0x5, 0x5, 0x756d, 0x8, 0x3, 0x6, 0x5, 0x856, 0x9, 0x77a5, 0x0, 0xaf71, 0xe, 0x10000, 0x0, 0x5, 0xf, 0x455, 0x2, 0x9, 0xfffffff9, 0x95, 0x3, 0x2, 0x81, 0x1ff, 0x2, 0x76775b0c, 0xfffffffe, 0x3, 0x9, 0x7, 0x1000, 0x7fffffff, 0x7fff, 0x2, 0x7720ab11, 0x7, 0xffff, 0x3, 0x0, 0x1, 0x1, 0x101, 0x4, 0x4, 0x40400000, 0x9, 0x80000001, 0x4, 0x40, 0x7, 0x9, 0x101, 0x1, 0x3, 0x101, 0x1a28, 0x1, 0x7f, 0x1, 0x101, 0x8, 0x7, 0x8, 0x9, 0x10000, 0x4, 0x0, 0xfffffedc, 0x9, 0x40, 0xe, 0x8001, 0x3, 0x1, 0x6, 0x81, 0x0, 0x3dc, 0x2, 0xb, 0x3, 0x2, 0x80000000, 0x6000000, 0x2, 0x5, 0xffff, 0x5, 0xf0b, 0xdb29, 0x100, 0x0, 0x10, 0x8000, 0xf86, 0x1, 0x4, 0x7, 0x8, 0x29, 0x7, 0x5, 0x5, 0x7, 0x9, 0x0, 0x2, 0x8, 0x4000000, 0x5, 0x200, 0x80, 0x8, 0x0, 0x9, 0x5, 0x8, 0xa963971, 0x7f, 0xa4f, 0x2, 0x400, 0x2, 0x0, 0x8, 0x9, 0x1, 0xffff, 0x61997a04, 0x581, 0x80000000, 0xfffffffa, 0x3, 0x1, 0x9, 0x5, 0x8, 0x10000, 0xff, 0xd]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x6d8f2bb7, 0x1, 0x5, 0x3, 0xffffdff7, 0x6, 0x80000000, 0x3, 0x18, 0x1, 0x0, 0x5, 0x8, 0x0, 0x7fffffff, 0x0, 0x5, 0xff80000, 0xfffffbff, 0xafea, 0x1, 0x8000, 0x80000000, 0x1, 0x0, 0x8, 0x2, 0x3, 0x8, 0x80, 0x3, 0x5, 0x0, 0x10000, 0x80000000, 0x5, 0x9, 0x7, 0x8, 0x5, 0x7ff, 0x9, 0x0, 0x10001, 0x6, 0x80000001, 0x1, 0x47, 0x4, 0x9, 0xf, 0x4, 0xff, 0x40, 0x10000, 0x2, 0x9, 0x6, 0x4, 0x0, 0xf, 0x9, 0xfffffff9, 0x8c, 0x7763, 0x1, 0xdc, 0x8, 0x0, 0x3, 0x0, 0x401, 0x1, 0x0, 0x78e, 0x2b8df6e4, 0x654, 0x5, 0x3, 0x6, 0x217, 0x7, 0x7, 0x3ff, 0x4, 0x4, 0x7, 0x7, 0x16e7, 0x3, 0x10000, 0x5, 0x705d, 0x49, 0xffffffff, 0x0, 0x5, 0x81, 0x2800, 0xdbd6, 0x7, 0x3, 0xa1a, 0x80, 0x5, 0x8, 0x9, 0x4, 0x1, 0x1000, 0xc0000000, 0x2, 0x10001, 0x949, 0xbf54, 0x4, 0x9, 0x400, 0x6, 0x3, 0x9b7, 0x9, 0x5, 0x0, 0xd, 0x9, 0x2, 0xffff, 0xb, 0x5, 0x80000000, 0xfffffffc, 0x8, 0x0, 0x7, 0x8, 0x1, 0xffff0001, 0x7ff, 0x2, 0x1, 0x10, 0xcc1, 0x7, 0x965d, 0x5, 0x101, 0x1, 0x8, 0x8, 0x6, 0x4, 0x0, 0x4, 0x4, 0xff, 0x5, 0xffffffff, 0x0, 0x7fff, 0x7, 0x7, 0xc8, 0x7b4c, 0x6c, 0x6, 0x9, 0x3, 0xfff, 0x2, 0xab7b, 0x7, 0x9, 0x9, 0x3, 0x1, 0x1, 0xd, 0x28b4, 0x0, 0x2, 0xfffffc01, 0x9, 0x2, 0x2, 0x0, 0xe1, 0x9, 0x5, 0xb, 0x2, 0x7d, 0x11, 0x2, 0xf2, 0x5, 0x5, 0x9b6, 0x8000000, 0x7, 0x5, 0x7f, 0x0, 0x5, 0x3, 0x9abc, 0x6, 0x9c2, 0x5, 0x0, 0xfffffffd, 0x3, 0x3, 0x3, 0x8, 0x9, 0xd3, 0xf, 0x2, 0x5, 0x4, 0x2, 0x0, 0x442f, 0x54000000, 0x8, 0x7f, 0x3, 0x8, 0x4, 0x6, 0x6, 0x1, 0x4, 0xa, 0x2, 0x6, 0x80000000, 0x7f, 0xfffff801, 0x7, 0xfffffffe, 0x7fffffff, 0xfffffffd, 0x10001, 0xbee1, 0x2, 0x3097, 0x6, 0x2, 0x2c, 0x6, 0x917, 0x5, 0xd8e]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x446, 0x2, 0x1bb3, 0x4, 0x800, {0xf, 0x0, 0x9, 0x3ff, 0x3, 0x6}, {0xfd, 0x2, 0x40, 0x4, 0x3, 0x10001}, 0x7, 0x10, 0x8}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x1, 0x3, 0x5, 0x7de, 0x7, 0x8b, 0x1cf, 0x4, 0xe, 0x9, 0x9, 0x4, 0x80000000, 0x8, 0x6, 0xa, 0x1, 0x0, 0xffff, 0xfffffffc, 0x5, 0x0, 0xfb7, 0x1, 0x13, 0xd, 0x9, 0x2, 0x401, 0x991, 0xd, 0x2, 0xf, 0x5, 0x9c33, 0x1b1, 0x2b, 0x7, 0xfffffc00, 0x53d8, 0xfffffe00, 0x300000, 0x190b, 0x7, 0x4, 0xffffaa41, 0x1, 0x9, 0x3, 0x4, 0x54d, 0x2, 0x1, 0x2, 0x10000, 0x8001, 0x2, 0xf, 0x7, 0x9, 0xffff77fc, 0xad, 0x200, 0xffffffc0, 0x4, 0xf, 0x8, 0xeaf0, 0x80000000, 0x1, 0x8, 0x80000001, 0x3, 0x2b073062, 0x8, 0x1, 0x3, 0x4, 0x6, 0xb082, 0x8602, 0xfffffffd, 0x140, 0xfffffffb, 0xff, 0x45b, 0xfffffff7, 0x3, 0x8, 0x8001, 0x3, 0x1ff, 0x62ca, 0x8, 0x7ff, 0x1, 0x9, 0x1, 0x2, 0x5ad0, 0x7, 0x1, 0x1, 0x6, 0x9, 0x0, 0x5, 0x4, 0xad, 0x9, 0x3, 0xe, 0x80, 0x9, 0x5, 0x38, 0x3, 0x7, 0x9fb1, 0x53, 0x4, 0x2, 0x3, 0x101, 0x8, 0x10000, 0x80000001, 0x400, 0x3, 0x6, 0x1, 0x4, 0xff, 0x4, 0x0, 0x5, 0xa, 0x3, 0x1000, 0x10, 0x101, 0x8, 0x7, 0x2, 0x3, 0xba, 0x80000000, 0x0, 0x9, 0x5, 0x9, 0xa, 0xfffffff9, 0xd, 0x4f25, 0x5, 0x2, 0x566e, 0x7, 0x8eaf, 0x2, 0x80, 0x0, 0x8, 0x2, 0x3ff, 0x72ba, 0x8, 0x1, 0x4, 0x9, 0x5, 0x40, 0x5, 0x7, 0x5, 0x683, 0x8b96, 0x80000000, 0x7ff, 0x4, 0x8, 0xfc9c, 0x200, 0x9, 0x1, 0x6, 0x200, 0x8, 0x44f, 0x2a6b, 0x505bf7e4, 0x0, 0x52effe1a, 0x1, 0x3ff, 0x9, 0x6913c6c, 0x749f, 0x5, 0x2, 0x9, 0x7f4, 0x8, 0x2, 0x4abe, 0x3, 0xa, 0x0, 0xfffffffb, 0x1, 0x9, 0x7, 0x401, 0x3, 0x10000, 0xfffffff9, 0x7f, 0xfff, 0xfffff23d, 0x8000, 0x1, 0x7, 0x8, 0x1ff, 0x8, 0x0, 0x6, 0x2, 0x8001, 0xf55, 0x4, 0x8, 0x0, 0x5, 0xd9, 0x536, 0x1, 0x7, 0xb6, 0xf, 0x1, 0x4a82, 0x6, 0x6, 0x100, 0x9, 0x9, 0x1000, 0xa6cc, 0x4, 0x17475579, 0x1, 0x548, 0xd]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xf, 0x9, 0x4, 0x40, 0x5d, 0xfbb, 0x1, 0x6, 0x8, 0xf0000000, 0x4, 0x1000, 0xd77, 0x3000000, 0x81, 0x1, 0x5, 0x4488, 0xfffffff4, 0x7, 0x5, 0x80, 0x0, 0x3, 0x7fff, 0x2, 0x9, 0x5, 0x7, 0x0, 0x100, 0x1, 0x4, 0x7f, 0x2, 0x5, 0x4, 0x4, 0x42e, 0x6, 0x101, 0x6, 0x6, 0x3, 0x3ff, 0x400, 0x200, 0xfffffffb, 0x10, 0x7, 0x1ff, 0x20000000, 0x2, 0x5, 0x5, 0x6, 0x7, 0xd, 0x1000000, 0x19e5, 0x2, 0x9, 0x0, 0x1, 0xe044, 0xa, 0x2, 0x7, 0x1, 0x2, 0x9, 0x10, 0x6, 0xfff, 0x9, 0x9, 0x9, 0x8000, 0x2, 0xaf7, 0x9, 0xba, 0x6, 0x5, 0x5, 0x2, 0x1, 0x7, 0x6, 0x3, 0xfffffffb, 0x6, 0x5, 0x1ff, 0x4, 0x200, 0x2, 0x400, 0x8, 0x3, 0x8000, 0x5cd, 0x7fffffff, 0x9, 0x12000, 0xfffff800, 0x8, 0x84bf, 0xa, 0x4, 0x7f, 0x0, 0xd, 0xfffffffc, 0x5a63, 0x80, 0x1, 0x8, 0x9, 0x80, 0xdd38, 0x1, 0x8001, 0x7, 0x1, 0xe8f5, 0x2, 0x61, 0x3, 0x5, 0x7fffffff, 0x116f, 0x1, 0x9, 0xfffffff9, 0x0, 0x80000000, 0x400000, 0xb, 0x5, 0x9, 0x1, 0x8, 0x100, 0x9, 0x6, 0x9, 0x0, 0x9, 0xfff, 0x8f, 0xfffffffb, 0xffff9b9c, 0xa2b0, 0x4, 0x9, 0x10000, 0xbae, 0x0, 0xfffffff9, 0x80000001, 0x3, 0x4, 0x57141909, 0x720, 0x3, 0x3, 0x7, 0xffff719a, 0x33, 0x3, 0x7fff, 0x84c4, 0x1ff, 0x7ff, 0x6974, 0x7, 0x600000, 0x2, 0x906, 0x3, 0xe0431c23, 0x3, 0x1b, 0x7cac, 0xb, 0x9, 0x3, 0x2, 0x7ff, 0x5, 0x3, 0x5, 0xe, 0x1ff, 0x5, 0x3, 0x817, 0x5, 0x0, 0x7fffffff, 0x0, 0x7, 0x8, 0x0, 0x5, 0x10000, 0x3, 0xffffffff, 0x8, 0x0, 0xb48a, 0x5, 0x746, 0xffff34a3, 0x7, 0x3, 0x4, 0xe0, 0x80000000, 0x9, 0x200, 0x8000, 0x0, 0xae, 0x1000, 0x3, 0xffffffff, 0xab9, 0x8, 0x318, 0x80000000, 0x1000, 0x3576, 0x10000, 0x8, 0xffffffff, 0x8, 0xc, 0xe, 0x73, 0x2, 0x1a44926, 0x0, 0x800000, 0x0, 0x2, 0xf, 0x6, 0x10001, 0x101, 0x1, 0x2, 0xfffffff9, 0x239]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf74, 0x1, 0xb, 0x8000, 0xf, 0x3, 0xef, 0xdf54, 0xb, 0x2, 0x4f3, 0x10001, 0x3, 0xfffffffe, 0x9, 0x80000001, 0x3, 0x3b7, 0x9166, 0xef, 0x0, 0xf, 0xfffffeaf, 0x3, 0x100, 0x10, 0x2, 0x80000001, 0x81, 0x8001, 0x0, 0x481, 0x7, 0x6, 0x61, 0x1, 0x1, 0xfffffff9, 0x6, 0x5f9, 0xff, 0x401, 0xd37, 0x10, 0x1be5, 0x2, 0xbb2, 0x5, 0x8, 0x8, 0xfffffeff, 0x1, 0x6, 0x6, 0x1ff, 0x2000, 0xfff, 0xffff, 0x1, 0x4, 0xfff, 0xfffffff1, 0x5, 0x400, 0x5, 0x7, 0x5, 0x692182c5, 0x6, 0xcc, 0x7, 0xe3, 0xffff, 0x8001, 0x10000, 0xe, 0x2, 0x3, 0x1, 0x7, 0x76, 0x10000, 0x3, 0x8, 0x6, 0xafd, 0x1, 0x3, 0xfffffffb, 0x6, 0x6, 0x8, 0x2, 0x1000, 0x40, 0x0, 0x200, 0x3, 0x931, 0x8e, 0x3ff, 0xfffffff9, 0x9, 0x0, 0x7, 0x6, 0xdf7, 0xffffffff, 0x6, 0x3, 0x5, 0x4, 0x3, 0x7fff, 0x401, 0x9, 0x2, 0x3, 0x10001, 0x0, 0xfffffff8, 0x9, 0x7, 0x7, 0x6, 0x5, 0xfffffff7, 0x10001, 0x8, 0x7, 0x9, 0x0, 0x6, 0x2, 0x4, 0x3, 0xffffffff, 0xfffffff9, 0x211, 0x5fb, 0x9, 0x5, 0x2, 0x16bd, 0x6, 0x630c, 0x5, 0x5, 0x62, 0x6, 0x1, 0x5, 0x0, 0x138, 0x7ff, 0x7, 0x3ff, 0x5, 0x3, 0xadd, 0x592b, 0xf4e, 0xe218, 0xffff, 0x8, 0x5, 0x8000, 0x7, 0xb, 0x9, 0x1ff, 0x3, 0xb, 0x9, 0xbe5, 0x9, 0x1, 0x0, 0x0, 0x5, 0x4, 0x2, 0xfffff800, 0x8, 0x2, 0x1, 0x1000, 0xffff23c0, 0x1, 0x80000001, 0x5, 0x9, 0x7, 0x10, 0xdad, 0xc6, 0x7fff, 0x9, 0x9, 0xfffffff9, 0x6, 0xfffffffa, 0x4, 0x7, 0x7, 0x6, 0xfffffff7, 0x8000000, 0x1, 0x6, 0x3, 0xc0000000, 0x94, 0x1, 0x5, 0x65, 0x0, 0x3, 0x1, 0x0, 0x10, 0x0, 0x80000001, 0x1, 0x1, 0x0, 0x4, 0x1, 0xd249, 0x4, 0x8, 0x5, 0x80000000, 0x4, 0x6, 0x6, 0x401, 0xff, 0x149, 0x7, 0x1, 0x3, 0xc, 0x40, 0x9, 0x4313, 0x3ff, 0x2, 0xd4, 0x6b1, 0xed, 0x8, 0x0, 0xfffffffc, 0x2, 0xff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x10001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0x2, 0x6, 0xffffffff, 0x80000, 0x10, 0x101, 0x4, 0x8, 0xe, 0x2, 0x10, 0x9, 0x2b, 0x6, 0x3c, 0x101, 0x1000, 0x0, 0x6, 0x80, 0x3, 0xfffff233, 0xf09, 0x1, 0x4, 0xe, 0x1, 0x3, 0x4, 0xb1, 0xfffffffc, 0x9, 0x7f, 0x7ff, 0xfff, 0x1, 0x5, 0x6, 0xe17, 0x2, 0x7fff, 0x3, 0x7, 0x4, 0x1, 0x1, 0xffffffff, 0x80000001, 0x5, 0x8, 0x2, 0x2915461c, 0x9, 0x46, 0xffffffff, 0xf4, 0x2, 0x66f, 0x7, 0x9, 0xfffffff4, 0x4, 0xbd1, 0x7bb8, 0x7, 0x4, 0x1, 0x1, 0xe4, 0x81, 0x2, 0x100, 0x0, 0x1, 0x4, 0x0, 0x1, 0x33fb, 0x7, 0x7f, 0x9, 0x7d52, 0x400040, 0x9, 0x2, 0x3, 0x3, 0x8, 0x3, 0xf, 0x100, 0xd87, 0xfa2, 0x0, 0x919, 0x7fff, 0x2, 0x1000, 0x3ff, 0x10, 0x7, 0xa415, 0x4, 0x5, 0xa, 0x7, 0x6, 0xfffffff9, 0x8, 0x4, 0xffffff01, 0xea, 0xa4, 0xe, 0x4, 0x6, 0x8, 0x7, 0x1, 0xcc, 0x9, 0x9291, 0x0, 0x8, 0x7, 0x7f, 0x7fffffff, 0x8, 0xffffffd6, 0x6, 0x7f, 0x2, 0x66, 0x4, 0x3, 0x1, 0x10001, 0x2, 0xff, 0xfffffff7, 0x8, 0x3, 0xd93e, 0x450, 0x6, 0xda1, 0x7fff, 0x1, 0x1a0, 0x5, 0x200, 0xd, 0x7fffffff, 0xf830, 0x3, 0x15, 0x9, 0x5, 0xfffffff7, 0x1, 0x200, 0x8, 0xb6dd214, 0xe6, 0x3, 0x245, 0x9, 0x0, 0xfffffffd, 0x3, 0x6, 0x3, 0x4, 0x5, 0x7fff, 0x1, 0x4, 0xb0d7, 0xbf, 0x3, 0x1, 0x1, 0x2, 0x80000000, 0x3, 0x2, 0x4, 0xfffffffa, 0x10000, 0x4, 0x3, 0x1, 0xff, 0x7, 0x6, 0xc37, 0x337d, 0x0, 0x3, 0x5771e89f, 0x116, 0xc, 0x4, 0x5, 0x9, 0x7, 0x4, 0xe, 0x2, 0x0, 0x6, 0xe, 0x9, 0x3, 0x6, 0x7, 0x8, 0x401, 0x8, 0xe36, 0x2, 0x2, 0x6, 0x6, 0x2, 0x72, 0x7, 0x5, 0x0, 0x9, 0x1, 0x35a9, 0x2, 0x2, 0x1, 0x400, 0x2, 0x9, 0x8, 0x0, 0x7fffffff, 0x8, 0xec, 0x6, 0x101, 0xfffffffc, 0x2, 0x6, 0x5, 0x8, 0x3, 0x7, 0x10, 0x1, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffa, 0x1, 0xd7ff, 0x1, 0xc000000, 0x5, 0x7, 0xdc9, 0x8, 0x1, 0x5, 0x7, 0x5, 0x1, 0xfffffff2, 0x6, 0x45b69fd6, 0x8, 0x7fffffff, 0x80000001, 0x0, 0x3, 0xffff, 0x4, 0x1ff, 0x9, 0x1, 0x2, 0xff, 0x3, 0x2, 0x5, 0x6, 0x1, 0x6451, 0x3, 0x6, 0x40, 0xffff, 0x7, 0xffffffc0, 0x5, 0x4b, 0x16, 0x5, 0x6, 0x5, 0x5, 0x9, 0x3, 0x35, 0x7, 0x10000, 0x578, 0x5, 0x8d3, 0x187, 0x5, 0xd7b1, 0x1, 0x6, 0xe2e, 0x7fffffff, 0x64b, 0x3, 0xfffffff9, 0x597, 0x1, 0xfffffffc, 0xf0, 0x7fffffff, 0x5, 0x3, 0xe757, 0x7fffffff, 0x2, 0x8, 0x4, 0x7, 0x1ff, 0x1000, 0xc, 0x1ff, 0x0, 0x6, 0x0, 0x7fffffff, 0x6, 0x2, 0x5aa99881, 0x2, 0xf53a, 0x5, 0xffff68a1, 0x4, 0x200, 0x1, 0xe00, 0x6, 0x8, 0x6, 0xfffffc4c, 0x7, 0x5, 0x7, 0x5, 0x0, 0xff, 0x80, 0x2, 0x6, 0x9, 0x8, 0x9, 0x4, 0x8, 0xb, 0x0, 0x10000, 0x1, 0x3, 0x8, 0x8, 0x8000, 0x40000, 0x0, 0x7fff, 0xe39, 0x4, 0x6, 0x8, 0x2, 0x5049, 0x3d, 0x10001, 0x9, 0x9, 0x9, 0xfd6, 0x4, 0x4, 0x2, 0x6, 0x6, 0xcc5, 0x10, 0x4, 0x8001, 0x7cb0, 0x7, 0xe794, 0x400, 0x5dcd, 0x6, 0x7, 0xfffffffd, 0x10001, 0xe4a5, 0xd, 0x5, 0x80000001, 0x1, 0x7, 0x3, 0xfff, 0x3, 0x8, 0x5, 0x9, 0x7, 0x9, 0x2, 0x2, 0x8, 0x1, 0x1, 0x0, 0x15, 0x1, 0x1, 0x7, 0x6, 0x4, 0xb7, 0x85a5, 0x0, 0x5, 0x0, 0xa, 0x9, 0xf, 0x164, 0x5, 0x2, 0x8, 0x180, 0x2e5d, 0x9, 0x439, 0x7, 0x45, 0x5, 0x1, 0x6, 0x8, 0x7, 0xb, 0x53cc527, 0x8, 0x7fffffff, 0x2, 0x3, 0x9, 0xcf1, 0x3, 0x85, 0x0, 0x182, 0x8000, 0x9, 0xa, 0x800, 0x4000000, 0x1, 0xb8e, 0x1000, 0x4, 0x401, 0x211e, 0x9, 0x3, 0xd, 0x6, 0xfffffff8, 0x6, 0x1ff8000, 0x2, 0x9cc, 0x1, 0x4, 0x8, 0x3f, 0x80, 0x7ff, 0x8, 0xcf, 0x7ff, 0x6, 0x9, 0x8f, 0xf59f, 0x50, 0x5, 0xffffffff, 0x7ff, 0x1be]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x8000, 0x1, 0x1, {0xe6, 0x0, 0x8, 0x2, 0x9, 0x6}, {0x8, 0x0, 0x9, 0xfffb, 0x6, 0x4}, 0x5, 0x4, 0x8}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fffffff}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9b9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x7, 0x8, 0x1f, 0xf, 0x0, 0x7, 0xdd, 0x10000, 0x6, 0x0, 0x7, 0x2, 0x6, 0x10000, 0x8, 0x9, 0x80000001, 0x3, 0x5, 0x3, 0x4, 0xe7c7, 0x2, 0x6, 0x0, 0x7, 0x0, 0x5, 0x9, 0xfffffff7, 0x1, 0x8, 0x9, 0x1c0, 0x5, 0xbc, 0xfc, 0x0, 0x3, 0x0, 0x8, 0x5, 0x9, 0x5, 0x5, 0x9, 0xccf, 0x8, 0x9, 0x1, 0x7, 0xab4, 0x0, 0x6, 0x7, 0xfffffff7, 0x7fffffff, 0x3, 0xf0, 0x2, 0x87, 0x80000001, 0x3ff, 0x10, 0x5, 0x3, 0x7, 0x0, 0x0, 0x1, 0x5, 0x5, 0x3, 0x80000001, 0x5, 0x2, 0x0, 0x8, 0x9, 0xfffffff7, 0xa1, 0x51, 0x0, 0xa, 0x3, 0x8, 0x6, 0x5, 0x4205cfa1, 0xfcd, 0x7, 0x59, 0x80000001, 0xb, 0x6, 0x6, 0xa, 0x9, 0x5, 0x6, 0xffffffff, 0x400, 0x0, 0x5, 0x1, 0x7f, 0xf71, 0x2, 0x2, 0x0, 0xe3c, 0xff, 0xffff, 0x8, 0x7, 0x2, 0x7, 0xffff, 0x7fff, 0x80000001, 0x89e6, 0x40, 0x9120, 0xffff, 0x6, 0x33b, 0x8, 0xfffffff9, 0xd0, 0xf2e, 0x1, 0x5, 0x2, 0xffffffff, 0x8, 0x71, 0x1, 0x6, 0x9, 0x3f, 0x0, 0x7ff, 0x8, 0x2, 0x7, 0x7, 0x7, 0x1, 0x2, 0x9, 0x1, 0x3, 0x7, 0x442, 0xff, 0x2, 0x4, 0x8, 0x0, 0x80000000, 0x4, 0x9, 0x8, 0xfffffffa, 0x8, 0x4000, 0x8, 0xfff, 0x23fd, 0x4, 0x458, 0x5, 0x0, 0xd, 0x8, 0x400, 0x60b0, 0x81, 0x5, 0x3ff, 0x1ff, 0x81, 0x9645, 0x9, 0x3, 0x6, 0x4, 0x9, 0x8, 0x6, 0x8, 0x10, 0x60, 0x0, 0x7, 0x4, 0x6, 0x0, 0xc, 0x6, 0x401, 0x8, 0xf63, 0x8, 0xffffffff, 0x0, 0x855, 0x8, 0x6abfa184, 0x7f, 0x711f, 0x10, 0x1ff, 0x8, 0x1, 0x9, 0xffffff01, 0x83f2, 0x1, 0x400, 0x0, 0x9, 0x8, 0x0, 0xfffffff9, 0x8, 0x0, 0x7, 0x7fffffff, 0x6, 0x0, 0xfffff0b7, 0x9, 0x5, 0xc, 0x5, 0x7, 0x4, 0x4, 0x0, 0x8000, 0xfffffe01, 0xed2e, 0xb04f, 0x6, 0x401, 0xb8, 0x401, 0x0, 0xf, 0x6, 0xffff0000, 0x101, 0x401, 0xffff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xe2, 0xfff, 0xfff, 0x3, 0x1, 0x1, 0x757f, 0x1, 0x2, 0x8, 0xfff, 0x2, 0x929, 0x1000000, 0x1, 0x8, 0x7d61, 0x8, 0x6, 0x9, 0x4, 0x7, 0x67, 0x2, 0x80000000, 0x3, 0x0, 0x9c06, 0x7a, 0x5, 0x81, 0x5, 0x4, 0x4, 0x4, 0x0, 0x10001, 0x80000001, 0xfffffffb, 0x1, 0x5, 0x1000, 0x7, 0x5, 0x4, 0x81, 0x895, 0x9, 0x6, 0xfffffff7, 0x4, 0x7ec8b76d, 0x3d, 0x8, 0xf0b, 0x3, 0x9, 0x0, 0x100, 0x7, 0x9, 0xfffffffe, 0x9, 0x70a, 0x7, 0x1, 0xc1f4, 0x8000, 0x2, 0x4, 0xfffffff8, 0x7, 0x3, 0xffff57a2, 0x401, 0x2, 0x200, 0x1, 0x3, 0x8, 0xfffffff9, 0x4, 0x6, 0x9, 0x4, 0x5, 0x8, 0x3, 0xffffff22, 0x4, 0x40, 0x9a5, 0x0, 0x5, 0x81, 0x8, 0x4, 0x6, 0x2, 0x3c, 0xe, 0x80, 0x4, 0x9, 0x7, 0x2, 0x1, 0x0, 0x6, 0x6, 0x6, 0xf, 0xfffffeff, 0x0, 0x5, 0x76d, 0x3, 0x100, 0x1, 0x4, 0x9, 0x6, 0x8, 0x8001, 0x4, 0x4, 0x8, 0x2, 0xc, 0x7, 0x870e, 0x3, 0xc, 0x80000001, 0x2, 0xe0, 0x1, 0x9, 0x8f7e, 0x0, 0x0, 0x1, 0x9, 0x95f, 0x4919, 0x1, 0x8000, 0x5, 0x11ed, 0x34, 0x5662, 0x800, 0x7, 0x6, 0xa5b, 0x1, 0xc5d, 0x4, 0x1, 0x400, 0x3, 0x1, 0x10, 0x8001, 0x219, 0x3, 0x5, 0x3, 0xfffff493, 0x10001, 0x7ef9, 0x6, 0xd, 0x7fff, 0xfff, 0xdbe, 0xfffffffb, 0xc, 0x9, 0x1ff, 0x0, 0x67, 0x9, 0x0, 0x8, 0x0, 0x4, 0x5, 0x5, 0x20000, 0x4, 0x8, 0x3ff, 0x6, 0x80000000, 0x4, 0x401, 0x10000, 0x4, 0x0, 0x5, 0xba3, 0x2, 0x348, 0x6, 0xfffffff3, 0x3, 0x1, 0x1126, 0x6, 0xff, 0x9, 0x4, 0x80000001, 0x0, 0x2e89, 0x6, 0xd, 0x572, 0x7, 0x9, 0x225e, 0x9, 0x2, 0x8, 0x401, 0x2, 0x2, 0x0, 0x8, 0x6, 0x86, 0x8, 0xffff, 0x2e1, 0x3, 0x72a8, 0x3, 0x7, 0x800, 0xfff, 0x1, 0x10000, 0x100, 0x1000, 0x10, 0x10001, 0x1, 0x81, 0x890, 0x4, 0x401, 0x5, 0x8, 0x40]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x2, 0x5, 0xb1, {0x2, 0x2, 0x4, 0x5, 0xfe01, 0x7}, {0x5, 0x2, 0x7, 0x0, 0x3, 0x4}, 0x7, 0x81, 0x10001}}], [], [@TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x8, 0x0, 0x3150edf0, 0x8, {0x4, 0x0, 0x800, 0xe8, 0x7, 0x40}, {0xdf, 0x2, 0x6, 0xffff, 0xb1, 0xfff}, 0xffffffff, 0x3, 0x101}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc729}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xffff, 0x8000, 0x5, 0xffff, 0x5, 0x0, 0xc, 0x7, 0xf, 0x4, 0x5, 0x7fffffff, 0x2, 0x80000000, 0x9e8, 0x80000000, 0xc, 0xffffffff, 0x4, 0x9, 0x4, 0x34b5eff8, 0xc420, 0x75bd, 0x6, 0xffffff61, 0x0, 0x800, 0x7ff, 0x0, 0x3, 0x8, 0x3, 0x2, 0x2, 0x10001, 0x6, 0x101, 0x9, 0x4, 0xffff0000, 0x100, 0x3, 0x2, 0xfffffffc, 0x3, 0xae8, 0x8, 0x0, 0x7, 0xffff, 0x8, 0x1, 0x7f, 0xffff502b, 0xff, 0x0, 0x5, 0x1, 0xe137, 0x0, 0x5, 0x3, 0x1, 0x9, 0x400, 0x0, 0x2, 0x400, 0x80c, 0x7f, 0xb7e, 0x8, 0x4, 0x8c, 0x6, 0x7ff, 0x1, 0x1000, 0x6, 0x4, 0x47, 0x180000, 0x8, 0x4, 0x3, 0x0, 0x3, 0x7, 0x7, 0x7, 0x10001, 0x6, 0x0, 0x7, 0xa, 0x7, 0xd, 0x10, 0xc8, 0x3, 0x5, 0x10, 0x7, 0xffffffff, 0x7, 0x4, 0x2, 0x6, 0x3a0c, 0x5, 0xeb, 0x0, 0x3f, 0x3, 0x3, 0x1, 0x4, 0x8, 0x84, 0x7f, 0x3, 0x5afaa8bc, 0x1, 0xb, 0x9, 0xfffff3a5, 0x6, 0x2, 0x2, 0x8, 0x5, 0xc, 0x1, 0xfffffffa, 0x4, 0x0, 0xc, 0x4, 0xb8, 0x9, 0x6, 0x2, 0x7ff, 0x8e2, 0x4, 0x9, 0x2, 0x0, 0x1cdc, 0x0, 0x6, 0x7, 0x7, 0x100, 0x3, 0x80000000, 0x1, 0xfffffffa, 0x4, 0x6, 0xffff, 0x10000, 0x1, 0x401, 0x5, 0x0, 0x2, 0x4, 0x10000, 0x2, 0x1, 0xfffffffb, 0x10, 0xe2, 0x9, 0x5, 0x8, 0x1, 0x100, 0x4, 0x4, 0xa, 0x6, 0x8, 0xfffffffc, 0x4105, 0x2, 0x6, 0x2, 0x1, 0x6, 0x8, 0x7fff, 0x2, 0x400, 0x0, 0x77, 0x8001, 0x9, 0x6, 0x4, 0x4, 0x4, 0x7, 0x1, 0x823, 0x58, 0x99, 0xe, 0x7, 0x73, 0x0, 0x1, 0x92b7, 0x7, 0xd, 0x800, 0xf425, 0xffffd595, 0x5, 0x100, 0xfffffff8, 0x1ff, 0x7, 0x25, 0x3, 0x81, 0xfffffffc, 0x101, 0x80000000, 0x7ff, 0x8, 0x7fffffff, 0x2ab6, 0x9, 0x5, 0xf, 0x2, 0x8000, 0x7fffffff, 0x0, 0x2, 0xa52, 0x3, 0x6, 0x81, 0x4, 0x1, 0x1, 0x7, 0x80000001, 0xfffffff9, 0xfffffff5]}]]}, {0xa9, 0x6, "6c9eb77fee4e26130f5b2129baeb24a61488ce8e897237fc5cd93f38659909cdf42cddf449caddb2f8876e3ed2f0e95aaf414f13c641c1ef5c1ffc9bdbb76e01170dc599a3f22b7fa65cecacc139a8c68fc252f9be77103b94157296ac0c4f82143e457df2e10ee4581ff64bbacfd3c8730e509dfaf0b428207bcfa568b792cb0c236a85c8c75a8eb6aaca896da51e95f2f3f45ca9ab9730a1ed554cab068cdb9bebe2c1d5"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0xc8, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x6}]}, {0x96, 0x6, "a3e387ec47568b4bc565b1102df5db8a2e48421b0189950580a10e21bb7c63d9ca4004f7406d68892afbcbe4229d29f3919899a1c94f077d73df67c172b35ddaba6e2fbef2820d454c9094ebdfd36780d6f2dae67473edc4102e9fcd373e33a5515e6dcbf2c7645cb93555de596c4e41003dc84b39dd94b4345209b3d84695ac9bfc17948cc31f6926f97b3610cda163b666"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ctinfo={0xec, 0xb, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0xffffffff, 0x8, 0x1, 0x4}}]}, {0xa7, 0x6, "55f183f7019ad7cb2426ff99fba3024592f5256d4b5b144c518d36979c433f1ec6f244621b02b7645d652da087677929be3ba1044d58eca44ca5eba7de56f4915eefd84142678a21497881b9c4973227b7e6d9b3fd7f020089445300f453820e61b6803980b361a97ffd03da69a94652aae04864397b95092d24e4ddd4086c1e266b4e658d187efb45a5c90cc069b7693303ab74bd7f0c74539fc1126dd3296cea3f45"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0x188, 0x1, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x3, 0x10000000, 0xffffffff, 0x401}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0xe9, 0x6, "e6b30975634dac2babde341e4b7458abfa2e04d064c91050e2f88d68f706a8d8093148cc60548a895903af6fd73bb6e38c2ce984f54447d132714e76c46b02636e27a2c6c6ad2cdc85e0fd8d2dc019eaf238697463bc8fceae04fac8ef8b4825ffe2662e8636865b983a9a8a0c7cec9cafaebd952ea07cfc03b688f53fb60c45684a9345c01740a72b2385e6fed03c6637541b7637220f06be255bb8c92f3f71191d63bd012ab222f8bd87c067d12aa2f93ff50ef5141c796ea455d6dd76b5b678333f90bdbe243bba27ef4127993849a117fe74401a19b2aa8ee1e7914a835e5b649de458"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x164, 0xd, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfffffffd, 0x9, 0x98f219f055003031, 0xe, 0x2e}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x0, 0x27, 0xff, 0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x9396, 0x10000000, 0x7a2, 0x8}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x80, 0x40, 0xffffffffffffffff, 0x3, 0x6b3a}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xff7, 0x7, 0x0, 0x3, 0xf}}]}, {0x9b, 0x6, "72e837f823f16900bb94c0276f1914e72100586101ea5bb6394381d4cc268a79918b515e7494368aa0c266df3dece7ec70d7a08a71305d86b69c51fa2bde53f0b14d1f5782352b588cec9f101fa1249de15b1f321c71ef3208d3498aeb743f37122157e2a2bee327cae61225f7ddb8d10fc7e14da4386e2f490578bb5a1d3d8f88e6eb7ef7aaa2123030da1ad0afffa1021a4a281b23d1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x2f64}}, 0x0) 244.504455ms ago: executing program 2 (id=1666): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xa) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r9}, 0x38) write$tun(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00ba1d530ce757cf0583af6731070000ffffff"], 0x36) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r12, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={&(0x7f0000000340)="fb1d19e7b35d4874dafd602a0827fc52c6d4ddac5067d1c187a076d72b1ca08b813d9103b06d6959e640451e3d55eb1d7e756a9b2915223cc962e05ef74b118192d00541595790346892c48cc225943a23b864fb6761a2b8f41e844ca9dbe174e4846637718651dcf2e991abc4b3756fc577f29614d15f101b3c0f4b45d3ff3433183ff363f727821d0e172e38f090fa829d56796f171b10bea7ad8107bbbdeb6560ec8ae740f7a4bbada0b528f58de0d13e9da116ddc2bd04fb223458f1a6765bb966a81bb556154d90acbc1890198f68f731cb4e771b4ce478c8d97d81d3fdafd51bf069", &(0x7f0000000440)=""/226, &(0x7f0000000600)="7019d4807ab4f66a2ae41d9be9b2d4209dd8760c8c0277de39a502cf776580765ab7f41415a86ca9564ab1d4a566f12c008592f997cdd0aa3e56643fc70031b36ab48f1b23be9ef9c977253f2c7762a7dde1ff927e419ef8b673b0ebf5aad5294cee72308183b198a9f707cd2ed51ceaacdca8b9d6571fd00703a3c0a253c41f592eaae3dd5128edf4f8ec8504abb5a7e162c2625e4666ee5658bf134bb2124590f68eb88752ae38728a410baff63d0d9644f6f1a3e001c5", &(0x7f0000000780)="416dadb4906830ea2ef2f1c9b4de0e3d540ee0d3fe09f4b785bd429b9275e956cd76fa68d2080cea0008bad73ad75b023f181945781733f1f978987368264a20964b86bd10d08fa49bc67240325f98a739774d555f0ed09d813df54bde7c723f6e58a565a945d8e787f5b5bc0256d843b876d36ea5e40e4bcf810ebfb0f11af874271c94c3a31558a932db947898759a7e1661029b7231c889adfe6ebade058026e7bf5b89c6a8d9863f698ddb36dfb703e3aa5cf6b97bd4582c9f9c984b07407ca82b3546f2d4d8fa80aa34cc216fd5654842c99c4a75ce36651ae22c9d6162466b45f0d4e4364ddfe1d3b001176b7bfcdcae92", 0x9, r14}, 0x38) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x34, r15, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac0d, 0xfac03, 0xfac12]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8}]]}, 0x34}}, 0x0) 176.444293ms ago: executing program 4 (id=1667): socket$inet_udplite(0x2, 0x2, 0x88) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100100000000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x1e, 0x1, 0x0) (async, rerun: 32) write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x1, 0x12) (async, rerun: 32) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async, rerun: 32) socket(0x40000000015, 0x5, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006c0001002dbd7000fddbdf2500", @ANYRES32=0x0, @ANYBLOB='H'], 0x20}}, 0x880) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="0001000010000103000000000000000063747228646573335f65646529"], 0x100}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async, rerun: 64) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000400)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x4f88, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, 0x4, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd700000000000010000d9b80000000016000014000480050003008000000005000300060010000000000000000000"], 0x38}}, 0x810) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000100003050000", @ANYRES32=0x0, @ANYBLOB="000000007fff0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6], 0x44}}, 0x0) (async) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400eeba30cd0100000000400300000000ffff00", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350076657468315f6d616376746170000000", @ANYRES64=r10], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r13 = epoll_create1(0x0) ioctl$int_out(r13, 0x2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r11, &(0x7f0000000140)={0xc}) 0s ago: executing program 3 (id=1668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r1], 0x1c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x10, 0x20, 0x8, 0x5, {{0xe, 0x4, 0x3, 0x7, 0x38, 0x66, 0x0, 0x80, 0x29, 0x0, @empty, @remote, {[@timestamp_prespec={0x44, 0x24, 0xd9, 0x3, 0x0, [{@rand_addr=0x64010102, 0x401}, {@broadcast, 0xe67}, {@private=0xa010101, 0x5}, {@multicast1, 0xd16}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x20, 0x1, 0x4, 0xfffffff2, {{0x17, 0x4, 0x1, 0x21, 0x5c, 0x68, 0x0, 0x7, 0x29, 0x0, @broadcast, @multicast1, {[@noop, @cipso={0x86, 0x39, 0x2, [{0x0, 0xf, "cf1baf08b09196af83cffa5216"}, {0x6, 0x5, "241478"}, {0x2, 0x12, "120ee5dc528f20d192e1610824f6d6b4"}, {0x0, 0xd, "6c75f28bdbab0a6558d310"}]}, @timestamp={0x44, 0xc, 0xc7, 0x0, 0x2, [0x5, 0x81]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0], 0x0, 0xe, &(0x7f0000000800)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xec, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x4, 0x47, 0x5, 0x7, 0x6, @rand_addr=' \x01\x00', @remote, 0x8070, 0x10, 0x6, 0xe67}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000b00)={0x5d0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}]}}, {{0x8}, {0x228, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xeb}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xf4, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xa, 0x9, 0x9f, 0x7}, {0x100, 0x55, 0x2, 0x8}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) unshare(0x62040200) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r13, 0x29, 0x41, &(0x7f0000000680)={'filter\x00', 0x2, [{}, {}]}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xaf}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): 136][ T6451] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 87.156114][ T6451] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 87.161662][ T6451] sctp_sendmsg+0x219a/0x3520 [ 87.166343][ T6451] ? aa_sk_perm+0x96d/0xab0 [ 87.170844][ T6451] ? __pfx_sctp_sendmsg+0x10/0x10 [ 87.175870][ T6451] ? __pfx_aa_sk_perm+0x10/0x10 [ 87.180726][ T6451] ? inet_sendmsg+0x330/0x390 [ 87.185404][ T6451] __sock_sendmsg+0x1a6/0x270 [ 87.190081][ T6451] ____sys_sendmsg+0x52a/0x7e0 [ 87.194848][ T6451] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.200134][ T6451] ? __fget_files+0x2a/0x410 [ 87.204726][ T6451] ? __fget_files+0x2a/0x410 [ 87.209322][ T6451] __sys_sendmmsg+0x36a/0x720 [ 87.214008][ T6451] ? __pfx___sys_sendmmsg+0x10/0x10 [ 87.219214][ T6451] ? __pfx_lock_release+0x10/0x10 [ 87.224231][ T6451] ? kstrtouint_from_user+0x128/0x190 [ 87.229625][ T6451] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 87.235521][ T6451] ? ksys_write+0x22a/0x2b0 [ 87.240017][ T6451] ? __pfx_lock_release+0x10/0x10 [ 87.245048][ T6451] ? vfs_write+0x730/0xd30 [ 87.249473][ T6451] ? __mutex_unlock_slowpath+0x21e/0x790 [ 87.255125][ T6451] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 87.261140][ T6451] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.267468][ T6451] ? do_syscall_64+0x100/0x230 [ 87.272262][ T6451] __x64_sys_sendmmsg+0xa0/0xb0 [ 87.277115][ T6451] do_syscall_64+0xf3/0x230 [ 87.281618][ T6451] ? clear_bhb_loop+0x35/0x90 [ 87.286305][ T6451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.292201][ T6451] RIP: 0033:0x7f9650985d29 [ 87.296625][ T6451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.316602][ T6451] RSP: 002b:00007f96517ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 87.325018][ T6451] RAX: ffffffffffffffda RBX: 00007f9650b76080 RCX: 00007f9650985d29 [ 87.332993][ T6451] RDX: 0000000000000001 RSI: 0000000020000880 RDI: 0000000000000005 [ 87.340958][ T6451] RBP: 00007f96517ec090 R08: 0000000000000000 R09: 0000000000000000 [ 87.348933][ T6451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.356900][ T6451] R13: 0000000000000000 R14: 00007f9650b76080 R15: 00007ffecfe8f8f8 [ 87.364901][ T6451] [ 88.087929][ T6476] sock: sock_timestamping_bind_phc: sock not bind to device [ 89.389151][ T6463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.410525][ T6463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.430757][ T6463] bond0 (unregistering): Released all slaves [ 89.475476][ T6486] netlink: 300 bytes leftover after parsing attributes in process `syz.3.163'. [ 89.834531][ T6501] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 89.868280][ T6501] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 89.901949][ T6501] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 89.940137][ T6501] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 89.976359][ T6501] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 89.989045][ T6501] netlink: 'syz.4.169': attribute type 4 has an invalid length. [ 90.145951][ T6511] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 90.176257][ T58] IPVS: starting estimator thread 0... [ 90.296871][ T6521] __nla_validate_parse: 3 callbacks suppressed [ 90.296888][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'. [ 90.312467][ T6519] IPVS: using max 25 ests per chain, 60000 per kthread [ 90.553419][ T6533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'. [ 90.644418][ T6535] netlink: 52 bytes leftover after parsing attributes in process `syz.3.181'. [ 90.663654][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.180'. [ 90.714183][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 91.201500][ T6565] netlink: 596 bytes leftover after parsing attributes in process `syz.2.191'. [ 92.729456][ T6561] validate_nla: 59 callbacks suppressed [ 92.729476][ T6561] netlink: 'syz.2.191': attribute type 29 has an invalid length. [ 92.815507][ T6559] netlink: 96 bytes leftover after parsing attributes in process `syz.0.190'. [ 92.835244][ T6566] pim6reg1: entered promiscuous mode [ 92.861312][ T6566] pim6reg1: entered allmulticast mode [ 92.991311][ T6562] syz.0.190 (6562) used greatest stack depth: 18096 bytes left [ 93.160601][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 93.341410][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.199'. [ 93.463483][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 93.475398][ T6596] delete_channel: no stack [ 93.946887][ T6603] netlink: 'syz.0.202': attribute type 11 has an invalid length. [ 95.061369][ T6654] netlink: zone id is out of range [ 95.084647][ T6654] netlink: zone id is out of range [ 95.098257][ T6654] netlink: zone id is out of range [ 95.124873][ T6654] netlink: zone id is out of range [ 95.144975][ T6654] netlink: zone id is out of range [ 95.161159][ T6654] netlink: zone id is out of range [ 95.177911][ T6654] netlink: zone id is out of range [ 95.199358][ T6654] netlink: del zone limit has 4 unknown bytes [ 95.868169][ T6688] batadv0: entered promiscuous mode [ 95.901828][ T6688] batadv0: left promiscuous mode [ 96.654750][ T6715] FAULT_INJECTION: forcing a failure. [ 96.654750][ T6715] name failslab, interval 1, probability 0, space 0, times 0 [ 96.704033][ T6715] CPU: 1 UID: 0 PID: 6715 Comm: syz.0.225 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 96.714696][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 96.724794][ T6715] Call Trace: [ 96.728103][ T6715] [ 96.731146][ T6715] dump_stack_lvl+0x241/0x360 [ 96.735860][ T6715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.741104][ T6715] ? __pfx__printk+0x10/0x10 [ 96.745746][ T6715] should_fail_ex+0x3b0/0x4e0 [ 96.750462][ T6715] should_failslab+0xac/0x100 [ 96.755185][ T6715] __kmalloc_cache_noprof+0x70/0x390 [ 96.760517][ T6715] ? sctp_add_bind_addr+0x89/0x3a0 [ 96.765685][ T6715] sctp_add_bind_addr+0x89/0x3a0 [ 96.770674][ T6715] sctp_copy_local_addr_list+0x311/0x500 [ 96.776354][ T6715] ? sctp_copy_local_addr_list+0xab/0x500 [ 96.782117][ T6715] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 96.788305][ T6715] ? sctp_v4_is_any+0x35/0x60 [ 96.793008][ T6715] sctp_bind_addr_copy+0xad/0x3b0 [ 96.798039][ T6715] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 96.804370][ T6715] sctp_connect_new_asoc+0x2f3/0x6c0 [ 96.809658][ T6715] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 96.815459][ T6715] ? sctp_sendmsg+0xbb9/0x3520 [ 96.820224][ T6715] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 96.826049][ T6715] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 96.831599][ T6715] sctp_sendmsg+0x219a/0x3520 [ 96.836291][ T6715] ? aa_sk_perm+0x96d/0xab0 [ 96.840795][ T6715] ? __pfx_sctp_sendmsg+0x10/0x10 [ 96.845819][ T6715] ? __pfx_aa_sk_perm+0x10/0x10 [ 96.850671][ T6715] ? inet_sendmsg+0x330/0x390 [ 96.855346][ T6715] __sock_sendmsg+0x1a6/0x270 [ 96.860024][ T6715] ____sys_sendmsg+0x52a/0x7e0 [ 96.864796][ T6715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 96.870086][ T6715] ? __fget_files+0x2a/0x410 [ 96.874681][ T6715] ? __fget_files+0x2a/0x410 [ 96.879369][ T6715] __sys_sendmmsg+0x36a/0x720 [ 96.884063][ T6715] ? __pfx___sys_sendmmsg+0x10/0x10 [ 96.889277][ T6715] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 96.895641][ T6715] ? __pfx_group_send_sig_info+0x10/0x10 [ 96.901287][ T6715] ? mark_lock+0x9a/0x360 [ 96.905629][ T6715] ? __lock_acquire+0x1397/0x2100 [ 96.910693][ T6715] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 96.916709][ T6715] ? rcu_is_watching+0x15/0xb0 [ 96.921477][ T6715] __x64_sys_sendmmsg+0xa0/0xb0 [ 96.926332][ T6715] do_syscall_64+0xf3/0x230 [ 96.930837][ T6715] ? clear_bhb_loop+0x35/0x90 [ 96.935512][ T6715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.941408][ T6715] RIP: 0033:0x7f4af7585d29 [ 96.945823][ T6715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.965427][ T6715] RSP: 002b:00007f4af8481038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 96.973848][ T6715] RAX: ffffffffffffffda RBX: 00007f4af7776080 RCX: 00007f4af7585d29 [ 96.981829][ T6715] RDX: 0000000000000001 RSI: 0000000020000880 RDI: 0000000000000005 [ 96.989802][ T6715] RBP: 00007f4af8481090 R08: 0000000000000000 R09: 0000000000000000 [ 96.997769][ T6715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.005734][ T6715] R13: 0000000000000000 R14: 00007f4af7776080 R15: 00007fffd86d0658 [ 97.013725][ T6715] [ 97.380687][ T6722] __nla_validate_parse: 2 callbacks suppressed [ 97.380707][ T6722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.227'. [ 98.131725][ T6741] xt_connbytes: Forcing CT accounting to be enabled [ 98.387688][ T6766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.856171][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 98.878047][ T6806] netlink: 56 bytes leftover after parsing attributes in process `syz.3.239'. [ 98.892453][ T6802] veth1_macvtap: left promiscuous mode [ 98.969309][ T6806] xt_CT: No such helper "snmp" [ 99.280235][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.245'. [ 99.381026][ T6827] netlink: 'syz.0.245': attribute type 21 has an invalid length. [ 99.412110][ T6827] netlink: 132 bytes leftover after parsing attributes in process `syz.0.245'. [ 99.960338][ T6851] netlink: 152 bytes leftover after parsing attributes in process `syz.4.252'. [ 99.963072][ T6849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.251'. [ 100.117480][ T6861] netlink: 256 bytes leftover after parsing attributes in process `syz.4.252'. [ 100.166743][ T6861] unsupported nlmsg_type 40 [ 101.231462][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.273'. [ 101.243620][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.273'. [ 101.261981][ T6936] batadv0: entered promiscuous mode [ 101.273885][ T6936] team0: entered promiscuous mode [ 101.281647][ T6936] team_slave_0: entered promiscuous mode [ 101.296489][ T6936] team_slave_1: entered promiscuous mode [ 101.318472][ T6936] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 102.139198][ T6984] netlink: 'syz.3.281': attribute type 1 has an invalid length. [ 102.196996][ T5846] block nbd0: Receive control failed (result -107) [ 103.476960][ T7014] FAULT_INJECTION: forcing a failure. [ 103.476960][ T7014] name failslab, interval 1, probability 0, space 0, times 0 [ 103.517367][ T7014] CPU: 1 UID: 0 PID: 7014 Comm: syz.1.287 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 103.528012][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 103.538071][ T7014] Call Trace: [ 103.541392][ T7014] [ 103.544475][ T7014] dump_stack_lvl+0x241/0x360 [ 103.549260][ T7014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.554479][ T7014] ? __pfx__printk+0x10/0x10 [ 103.559084][ T7014] should_fail_ex+0x3b0/0x4e0 [ 103.563763][ T7014] should_failslab+0xac/0x100 [ 103.568456][ T7014] __kmalloc_cache_noprof+0x70/0x390 [ 103.573749][ T7014] ? sctp_add_bind_addr+0x89/0x3a0 [ 103.578963][ T7014] sctp_add_bind_addr+0x89/0x3a0 [ 103.583904][ T7014] sctp_copy_local_addr_list+0x311/0x500 [ 103.589577][ T7014] ? sctp_copy_local_addr_list+0xab/0x500 [ 103.595319][ T7014] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 103.601511][ T7014] ? sctp_v4_is_any+0x35/0x60 [ 103.606195][ T7014] sctp_bind_addr_copy+0xad/0x3b0 [ 103.611229][ T7014] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 103.617560][ T7014] sctp_connect_new_asoc+0x2f3/0x6c0 [ 103.622849][ T7014] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 103.628651][ T7014] ? sctp_sendmsg+0xbb9/0x3520 [ 103.633420][ T7014] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 103.639231][ T7014] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 103.644794][ T7014] sctp_sendmsg+0x219a/0x3520 [ 103.649479][ T7014] ? aa_sk_perm+0x96d/0xab0 [ 103.653984][ T7014] ? __pfx_sctp_sendmsg+0x10/0x10 [ 103.659008][ T7014] ? __pfx_aa_sk_perm+0x10/0x10 [ 103.663882][ T7014] ? inet_sendmsg+0x330/0x390 [ 103.668581][ T7014] __sock_sendmsg+0x1a6/0x270 [ 103.673255][ T7014] ____sys_sendmsg+0x52a/0x7e0 [ 103.678023][ T7014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.683306][ T7014] ? __fget_files+0x2a/0x410 [ 103.688044][ T7014] ? __fget_files+0x2a/0x410 [ 103.692648][ T7014] __sys_sendmmsg+0x36a/0x720 [ 103.697429][ T7014] ? __pfx___sys_sendmmsg+0x10/0x10 [ 103.702636][ T7014] ? __pfx_lock_release+0x10/0x10 [ 103.707710][ T7014] ? kstrtouint_from_user+0x128/0x190 [ 103.713190][ T7014] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 103.719172][ T7014] ? ksys_write+0x22a/0x2b0 [ 103.723675][ T7014] ? __pfx_lock_release+0x10/0x10 [ 103.728702][ T7014] ? vfs_write+0x730/0xd30 [ 103.733137][ T7014] ? __mutex_unlock_slowpath+0x21e/0x790 [ 103.738806][ T7014] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.744810][ T7014] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.751147][ T7014] ? do_syscall_64+0x100/0x230 [ 103.755918][ T7014] __x64_sys_sendmmsg+0xa0/0xb0 [ 103.760775][ T7014] do_syscall_64+0xf3/0x230 [ 103.765276][ T7014] ? clear_bhb_loop+0x35/0x90 [ 103.769949][ T7014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.775844][ T7014] RIP: 0033:0x7f9650985d29 [ 103.780256][ T7014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.799860][ T7014] RSP: 002b:00007f96517ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.808272][ T7014] RAX: ffffffffffffffda RBX: 00007f9650b76080 RCX: 00007f9650985d29 [ 103.816240][ T7014] RDX: 0000000000000001 RSI: 0000000020000880 RDI: 0000000000000005 [ 103.824201][ T7014] RBP: 00007f96517ec090 R08: 0000000000000000 R09: 0000000000000000 [ 103.832226][ T7014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.840234][ T7014] R13: 0000000000000000 R14: 00007f9650b76080 R15: 00007ffecfe8f8f8 [ 103.848216][ T7014] [ 106.498570][ T6995] __nla_validate_parse: 3 callbacks suppressed [ 106.498590][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 106.539928][ T6995] netlink: 1 bytes leftover after parsing attributes in process `syz.0.283'. [ 106.969199][ T7028] netlink: 100 bytes leftover after parsing attributes in process `syz.4.290'. [ 107.013445][ T7031] geneve2: entered promiscuous mode [ 107.033634][ T7031] geneve2: entered allmulticast mode [ 107.231759][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 107.283395][ T7050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.344952][ T7050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.352768][ T7050] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 107.366859][ T7050] bond1: (slave ipip0): Error -95 calling set_mac_address [ 107.430632][ T7048] ip6gretap1: entered promiscuous mode [ 107.436404][ T7048] ip6gretap1: entered allmulticast mode [ 107.476678][ T7048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.296'. [ 107.522845][ T7048] Cannot find set identified by id 0 to match [ 107.690938][ T7074] ªªªªª: renamed from bridge0 (while UP) [ 107.723845][ T7074] ªªªªª: port 2(bridge_slave_1) entered disabled state [ 107.733128][ T7074] ªªªªª: port 1(bridge_slave_0) entered disabled state [ 107.768735][ T7074] ªªªªª: entered promiscuous mode [ 107.776903][ T7074] ªªªªª: entered allmulticast mode [ 107.981154][ T7090] bridge_slave_0: left allmulticast mode [ 108.012021][ T7090] bridge_slave_0: left promiscuous mode [ 108.035026][ T7090] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.065774][ T7090] bridge_slave_1: left allmulticast mode [ 108.075509][ T7090] bridge_slave_1: left promiscuous mode [ 108.085010][ T7090] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.115345][ T7090] bond0: (slave bond_slave_0): Releasing backup interface [ 108.137953][ T7090] bond0: (slave bond_slave_1): Releasing backup interface [ 108.262100][ T7090] team0: Port device team_slave_0 removed [ 108.324342][ T7090] team0: Port device team_slave_1 removed [ 108.346112][ T7090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.366041][ T7090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.384116][ T7090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.391964][ T7090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.470764][ T7092] team0: Mode changed to "loadbalance" [ 108.602040][ T7108] vlan2: entered promiscuous mode [ 108.614838][ T7108] dummy0: entered promiscuous mode [ 108.629494][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 108.638637][ T7108] team0: Port device vlan2 added [ 108.646601][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 108.678468][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 108.965103][ T7130] Bluetooth: MGMT ver 1.23 [ 109.164054][ T7137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.216355][ T7137] netlink: 60 bytes leftover after parsing attributes in process `syz.0.320'. [ 109.235383][ T7143] netlink: 'syz.3.321': attribute type 1 has an invalid length. [ 109.282983][ T7143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.303470][ T7143] bond2: (slave gretap1): making interface the new active one [ 109.312784][ T7143] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 109.332949][ T7143] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 109.649864][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 110.412811][ T7209] netlink: 'syz.4.337': attribute type 2 has an invalid length. [ 110.497913][ T7207] syz.1.338[7207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.498006][ T7207] syz.1.338[7207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.515405][ T7207] syz.1.338[7207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.528015][ T7207] syz.1.338[7207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.539693][ T7207] syz.1.338[7207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.551162][ T7207] syz.1.338[7207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.580174][ T7207] pim6reg1: entered promiscuous mode [ 110.612830][ T7207] pim6reg1: entered allmulticast mode [ 110.908891][ T7228] syz.2.344[7228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.908993][ T7228] syz.2.344[7228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.932946][ T7228] syz.2.344[7228] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.526864][ T7260] __nla_validate_parse: 4 callbacks suppressed [ 111.526884][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 111.646318][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 111.660180][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 111.669195][ T7264] netlink: 'syz.3.355': attribute type 7 has an invalid length. [ 111.707129][ T7268] netlink: 244 bytes leftover after parsing attributes in process `syz.2.357'. [ 112.175325][ T7276] netlink: 'syz.4.361': attribute type 3 has an invalid length. [ 112.521317][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.367'. [ 113.083892][ T7305] Driver unsupported XDP return value 0 on prog (id 310) dev N/A, expect packet loss! [ 113.115137][ T7305] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.142230][ T7305] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 115.102963][ T7317] FAULT_INJECTION: forcing a failure. [ 115.102963][ T7317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.116443][ T7317] CPU: 1 UID: 0 PID: 7317 Comm: syz.2.375 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 115.127078][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 115.137175][ T7317] Call Trace: [ 115.140486][ T7317] [ 115.143440][ T7317] dump_stack_lvl+0x241/0x360 [ 115.148152][ T7317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.153365][ T7317] ? __pfx__printk+0x10/0x10 [ 115.157974][ T7317] should_fail_ex+0x3b0/0x4e0 [ 115.162693][ T7317] _copy_from_user+0x2f/0xc0 [ 115.167293][ T7317] move_addr_to_kernel+0x82/0x150 [ 115.172350][ T7317] copy_msghdr_from_user+0x43e/0x680 [ 115.177640][ T7317] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 115.183441][ T7317] ? __fget_files+0x2a/0x410 [ 115.188032][ T7317] ? __fget_files+0x2a/0x410 [ 115.192623][ T7317] __sys_sendmsg+0x209/0x350 [ 115.197230][ T7317] ? __pfx_lock_release+0x10/0x10 [ 115.202280][ T7317] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.207420][ T7317] ? __pfx_vfs_write+0x10/0x10 [ 115.212210][ T7317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.218539][ T7317] ? do_syscall_64+0x100/0x230 [ 115.223307][ T7317] ? do_syscall_64+0xb6/0x230 [ 115.227985][ T7317] do_syscall_64+0xf3/0x230 [ 115.232489][ T7317] ? clear_bhb_loop+0x35/0x90 [ 115.237183][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.243084][ T7317] RIP: 0033:0x7f9713f85d29 [ 115.247505][ T7317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.267132][ T7317] RSP: 002b:00007f9714e1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.275573][ T7317] RAX: ffffffffffffffda RBX: 00007f9714175fa0 RCX: 00007f9713f85d29 [ 115.283540][ T7317] RDX: 0000000000004000 RSI: 0000000020000640 RDI: 0000000000000003 [ 115.291594][ T7317] RBP: 00007f9714e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 115.299575][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.307634][ T7317] R13: 0000000000000000 R14: 00007f9714175fa0 R15: 00007ffe91732d38 [ 115.315613][ T7317] [ 115.492946][ T7334] netlink: 24 bytes leftover after parsing attributes in process `syz.4.378'. [ 115.524376][ T7339] netlink: 'syz.0.377': attribute type 11 has an invalid length. [ 115.615611][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 115.643483][ T7343] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 115.726807][ T7343] ieee802154 phy0 wpan0: encryption failed: -22 [ 115.772307][ T7350] RDS: rds_bind could not find a transport for 1400::, load rds_tcp or rds_rdma? [ 115.783076][ T7350] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 115.795513][ T7350] netlink: 68 bytes leftover after parsing attributes in process `syz.3.383'. [ 116.032747][ T7362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.386'. [ 116.046885][ T7364] FAULT_INJECTION: forcing a failure. [ 116.046885][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 116.080479][ T7364] CPU: 0 UID: 0 PID: 7364 Comm: syz.0.387 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 116.091557][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 116.101638][ T7364] Call Trace: [ 116.104919][ T7364] [ 116.107851][ T7364] dump_stack_lvl+0x241/0x360 [ 116.112538][ T7364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.117736][ T7364] ? __pfx__printk+0x10/0x10 [ 116.122331][ T7364] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 116.128317][ T7364] ? __pfx___might_resched+0x10/0x10 [ 116.133600][ T7364] should_fail_ex+0x3b0/0x4e0 [ 116.138276][ T7364] should_failslab+0xac/0x100 [ 116.142961][ T7364] kmem_cache_alloc_node_noprof+0x77/0x380 [ 116.148772][ T7364] ? __alloc_skb+0x1c3/0x440 [ 116.153362][ T7364] __alloc_skb+0x1c3/0x440 [ 116.157775][ T7364] ? __pfx_validate_chain+0x10/0x10 [ 116.162974][ T7364] ? __pfx___alloc_skb+0x10/0x10 [ 116.167949][ T7364] ? reacquire_held_locks+0x690/0x690 [ 116.173329][ T7364] ? __lock_acquire+0x1397/0x2100 [ 116.178446][ T7364] alloc_skb_with_frags+0xc3/0x820 [ 116.183569][ T7364] sock_alloc_send_pskb+0x91a/0xa60 [ 116.188779][ T7364] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 116.194494][ T7364] ? __pfx_validate_chain+0x10/0x10 [ 116.199694][ T7364] ? dev_get_by_index+0x23/0x2d0 [ 116.204633][ T7364] packet_sendmsg+0x4080/0x6c30 [ 116.209494][ T7364] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 116.214883][ T7364] ? __pfx___might_resched+0x10/0x10 [ 116.220170][ T7364] ? __pfx_packet_sendmsg+0x10/0x10 [ 116.225370][ T7364] ? aa_sk_perm+0x96d/0xab0 [ 116.229884][ T7364] ? __pfx_aa_sk_perm+0x10/0x10 [ 116.234737][ T7364] ? __import_iovec+0x590/0x870 [ 116.239586][ T7364] ? aa_sock_msg_perm+0x91/0x160 [ 116.244522][ T7364] ? __pfx_packet_sendmsg+0x10/0x10 [ 116.249728][ T7364] __sock_sendmsg+0x221/0x270 [ 116.254402][ T7364] ____sys_sendmsg+0x52a/0x7e0 [ 116.259170][ T7364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.264453][ T7364] ? __fget_files+0x2a/0x410 [ 116.269046][ T7364] ? __fget_files+0x2a/0x410 [ 116.273642][ T7364] __sys_sendmsg+0x269/0x350 [ 116.278245][ T7364] ? __pfx_lock_release+0x10/0x10 [ 116.283268][ T7364] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.288387][ T7364] ? __pfx_vfs_write+0x10/0x10 [ 116.293162][ T7364] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.299488][ T7364] ? do_syscall_64+0x100/0x230 [ 116.304254][ T7364] ? do_syscall_64+0xb6/0x230 [ 116.308945][ T7364] do_syscall_64+0xf3/0x230 [ 116.313471][ T7364] ? clear_bhb_loop+0x35/0x90 [ 116.318145][ T7364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.324048][ T7364] RIP: 0033:0x7f4af7585d29 [ 116.328465][ T7364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.348086][ T7364] RSP: 002b:00007f4af84a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.356523][ T7364] RAX: ffffffffffffffda RBX: 00007f4af7775fa0 RCX: 00007f4af7585d29 [ 116.364495][ T7364] RDX: 0000000000004000 RSI: 0000000020000640 RDI: 0000000000000003 [ 116.372464][ T7364] RBP: 00007f4af84a2090 R08: 0000000000000000 R09: 0000000000000000 [ 116.380432][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.388400][ T7364] R13: 0000000000000000 R14: 00007f4af7775fa0 R15: 00007fffd86d0658 [ 116.396388][ T7364] [ 116.602927][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.392'. [ 116.743739][ T7388] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 116.928748][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 116.999126][ T7399] ieee802154 phy0 wpan0: encryption failed: -22 [ 117.030462][ T7383] team0 (unregistering): left promiscuous mode [ 117.037250][ T7383] team_slave_0: left promiscuous mode [ 117.043956][ T7383] team_slave_1: left promiscuous mode [ 117.064698][ T7383] team0 (unregistering): Port device team_slave_0 removed [ 117.079168][ T7383] team0 (unregistering): Port device team_slave_1 removed [ 117.104807][ T7395] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 117.229248][ T7410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.440311][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.1.406'. [ 117.578811][ T7431] netlink: 'syz.1.409': attribute type 11 has an invalid length. [ 117.642343][ T7436] netlink: 'syz.1.409': attribute type 29 has an invalid length. [ 117.660764][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 118.324891][ T7470] netlink: 'syz.2.417': attribute type 30 has an invalid length. [ 118.355315][ T7470] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 118.369340][ T7470] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 118.499935][ T7460] lo speed is unknown, defaulting to 1000 [ 118.504421][ T7484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.419'. [ 118.519341][ T7460] lo speed is unknown, defaulting to 1000 [ 118.527087][ T7460] lo speed is unknown, defaulting to 1000 [ 118.543692][ T7460] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 118.572870][ T7460] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 118.622615][ T7460] lo speed is unknown, defaulting to 1000 [ 118.637496][ T7460] lo speed is unknown, defaulting to 1000 [ 118.657948][ T7460] lo speed is unknown, defaulting to 1000 [ 118.664808][ T7460] lo speed is unknown, defaulting to 1000 [ 118.687477][ T7488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.709855][ T7491] netlink: 176 bytes leftover after parsing attributes in process `syz.0.423'. [ 118.726021][ T7460] lo speed is unknown, defaulting to 1000 [ 118.733326][ T7460] lo speed is unknown, defaulting to 1000 [ 118.899217][ T7500] lo speed is unknown, defaulting to 1000 [ 118.965241][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 118.989277][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 119.043659][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 119.053687][ T7511] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xb [ 119.062876][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 119.560054][ T7539] openvswitch: netlink: Message has 1247 unknown bytes. [ 119.580502][ T7539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.909347][ T7557] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 122.537799][ T7657] __nla_validate_parse: 134 callbacks suppressed [ 122.537818][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 122.559116][ T7657] netlink: 'syz.4.470': attribute type 11 has an invalid length. [ 122.652485][ T7666] xt_l2tp: missing protocol rule (udp|l2tpip) [ 122.676426][ T7666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'. [ 122.697396][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 122.706391][ T7666] netlink: 'syz.3.473': attribute type 5 has an invalid length. [ 122.714851][ T7666] netlink: 'syz.3.473': attribute type 6 has an invalid length. [ 122.996015][ T7666] bond_slave_0: left promiscuous mode [ 123.001626][ T7666] bond_slave_0: left allmulticast mode [ 123.112703][ T7666] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.121869][ T7666] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.132433][ T7666] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.141724][ T7666] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.186207][ T7666] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 123.214691][ T7672] ip6gretap0: entered promiscuous mode [ 123.232234][ T7672] batadv_slave_0: entered promiscuous mode [ 123.250972][ T7672] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 123.268382][ T7672] Cannot create hsr debugfs directory [ 123.282183][ T7672] ip6gretap0: left promiscuous mode [ 123.301069][ T7672] batadv_slave_0: left promiscuous mode [ 123.680464][ T7708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.485'. [ 123.864283][ T7718] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 123.895749][ T7718] Bluetooth: MGMT ver 1.23 [ 123.915352][ T7718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.488'. [ 123.938597][ T7723] Cannot find del_set index 0 as target [ 123.964981][ T7725] netlink: 36 bytes leftover after parsing attributes in process `syz.2.489'. [ 123.972313][ T7716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.487'. [ 123.982682][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 124.007313][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 124.017087][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 124.026428][ T7725] netlink: 'syz.2.489': attribute type 4 has an invalid length. [ 124.269532][ T7735] syzkaller1: entered promiscuous mode [ 124.301724][ T7735] syzkaller1: entered allmulticast mode [ 124.325115][ T7741] dccp_v6_rcv: dropped packet with invalid checksum [ 124.586755][ T7749] netlink: 'syz.4.496': attribute type 1 has an invalid length. [ 124.855056][ T7756] bond0: entered promiscuous mode [ 124.860687][ T7756] bond_slave_0: entered promiscuous mode [ 124.866527][ T7756] bond_slave_1: entered promiscuous mode [ 124.874203][ T7756] batadv0: entered promiscuous mode [ 124.880244][ T7756] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 124.889864][ T7756] Cannot create hsr debugfs directory [ 124.895824][ T7756] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 124.969031][ T7762] tipc: Started in network mode [ 124.974260][ T7762] tipc: Node identity 7, cluster identity 4711 [ 124.981075][ T7762] tipc: Node number set to 7 [ 125.141850][ T7771] netlink: zone id is out of range [ 125.151539][ T7771] netlink: zone id is out of range [ 125.164341][ T7771] netlink: zone id is out of range [ 125.176803][ T7771] netlink: zone id is out of range [ 125.182931][ T7771] netlink: zone id is out of range [ 125.189104][ T7771] netlink: zone id is out of range [ 125.195261][ T7771] netlink: zone id is out of range [ 125.201795][ T7771] netlink: zone id is out of range [ 125.403527][ T7781] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 125.622284][ T7780] delete_channel: no stack [ 125.905957][ T7797] gre1: entered promiscuous mode [ 126.418932][ T7821] FAULT_INJECTION: forcing a failure. [ 126.418932][ T7821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.432352][ T7821] CPU: 1 UID: 0 PID: 7821 Comm: syz.4.517 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 126.442965][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 126.453016][ T7821] Call Trace: [ 126.456299][ T7821] [ 126.459240][ T7821] dump_stack_lvl+0x241/0x360 [ 126.463952][ T7821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.469152][ T7821] ? __pfx__printk+0x10/0x10 [ 126.473752][ T7821] ? __pfx_lock_release+0x10/0x10 [ 126.478793][ T7821] should_fail_ex+0x3b0/0x4e0 [ 126.483512][ T7821] _copy_from_user+0x2f/0xc0 [ 126.488130][ T7821] copy_msghdr_from_user+0xae/0x680 [ 126.493347][ T7821] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 126.499150][ T7821] ? __fget_files+0x2a/0x410 [ 126.503742][ T7821] ? __fget_files+0x2a/0x410 [ 126.508339][ T7821] __sys_sendmsg+0x209/0x350 [ 126.512932][ T7821] ? __pfx_lock_release+0x10/0x10 [ 126.517974][ T7821] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.523108][ T7821] ? __pfx_vfs_write+0x10/0x10 [ 126.527903][ T7821] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 126.534241][ T7821] ? do_syscall_64+0x100/0x230 [ 126.539011][ T7821] ? do_syscall_64+0xb6/0x230 [ 126.543692][ T7821] do_syscall_64+0xf3/0x230 [ 126.548198][ T7821] ? clear_bhb_loop+0x35/0x90 [ 126.552875][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.558768][ T7821] RIP: 0033:0x7fc4b3185d29 [ 126.563257][ T7821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.582882][ T7821] RSP: 002b:00007fc4b0ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.591346][ T7821] RAX: ffffffffffffffda RBX: 00007fc4b3376080 RCX: 00007fc4b3185d29 [ 126.599327][ T7821] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 126.607306][ T7821] RBP: 00007fc4b0ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 126.615273][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.623243][ T7821] R13: 0000000000000000 R14: 00007fc4b3376080 R15: 00007ffc081370b8 [ 126.631230][ T7821] [ 127.379832][ T7862] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 127.624443][ T7872] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 127.810190][ T7888] ip6tnl0: Master is either lo or non-ether device [ 128.010133][ T7860] trusted_key: syz.1.531 sent an empty control message without MSG_MORE. [ 128.298534][ T7916] __nla_validate_parse: 11 callbacks suppressed [ 128.298553][ T7916] netlink: 40 bytes leftover after parsing attributes in process `syz.1.549'. [ 128.344527][ T7919] tipc: Started in network mode [ 128.352346][ T7919] tipc: Node identity 1a206c2ddb5e, cluster identity 4711 [ 128.368934][ T7919] tipc: Enabled bearer , priority 0 [ 128.442577][ T7919] syzkaller0: entered promiscuous mode [ 128.450251][ T7919] syzkaller0: entered allmulticast mode [ 128.456638][ T7919] tipc: Resetting bearer [ 128.519537][ T7918] tipc: Resetting bearer [ 129.405979][ T5911] tipc: Node number set to 3246287917 [ 130.509756][ T7959] netlink: 'syz.4.556': attribute type 4 has an invalid length. [ 130.566565][ T7960] netlink: 'syz.4.556': attribute type 4 has an invalid length. [ 130.792773][ T7918] tipc: Disabling bearer [ 130.801440][ T7930] netlink: 48 bytes leftover after parsing attributes in process `syz.3.552'. [ 131.109140][ T7977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.562'. [ 131.115945][ T7978] netlink: 40 bytes leftover after parsing attributes in process `syz.3.561'. [ 131.333538][ T7987] netlink: 'syz.1.565': attribute type 5 has an invalid length. [ 131.407765][ T7993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.566'. [ 131.503354][ T7998] net_ratelimit: 4 callbacks suppressed [ 131.503373][ T7998] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 131.533501][ T46] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 131.622319][ T8005] netlink: 'syz.3.570': attribute type 1 has an invalid length. [ 131.902092][ T8016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.574'. [ 131.909815][ T8019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.575'. [ 132.259887][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.577'. [ 132.492657][ T5867] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 133.133959][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.140913][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.774354][ T8038] netlink: 60 bytes leftover after parsing attributes in process `syz.0.582'. [ 134.117949][ T8058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 134.130463][ T8061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.587'. [ 134.286213][ T8066] xt_l2tp: unknown flags: 10 [ 136.241381][ T8099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'. [ 136.401483][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.595'. [ 136.523331][ T8101] netlink: 48 bytes leftover after parsing attributes in process `syz.3.600'. [ 137.011983][ T8130] netlink: 40 bytes leftover after parsing attributes in process `syz.1.609'. [ 137.101917][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 137.125926][ T8134] netlink: 56 bytes leftover after parsing attributes in process `syz.0.611'. [ 137.281812][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.614'. [ 138.041020][ T8197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.465731][ T8218] netlink: 'syz.0.635': attribute type 1 has an invalid length. [ 139.479231][ T8218] __nla_validate_parse: 5 callbacks suppressed [ 139.479250][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.635'. [ 140.059714][ T8223] netlink: 'syz.2.636': attribute type 7 has an invalid length. [ 140.143453][ T8225] netlink: 40 bytes leftover after parsing attributes in process `syz.4.637'. [ 140.519363][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 140.533712][ T8255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.645'. [ 140.916665][ T8272] netlink: 'syz.0.652': attribute type 1 has an invalid length. [ 140.967005][ T8272] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 140.977315][ T8272] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 140.991827][ T8272] bond4: (slave vti0): making interface the new active one [ 141.001085][ T8272] bond4: (slave vti0): Enslaving as an active interface with an up link [ 142.242486][ T8325] x_tables: duplicate underflow at hook 1 [ 142.402943][ T8336] netlink: 96 bytes leftover after parsing attributes in process `syz.1.671'. [ 142.436792][ T8336] vlan0: entered allmulticast mode [ 142.441277][ T8340] netlink: 116 bytes leftover after parsing attributes in process `syz.2.673'. [ 142.475321][ T8340] netlink: 5 bytes leftover after parsing attributes in process `syz.2.673'. [ 142.515602][ T8340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.659716][ T8350] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 143.136651][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.685'. [ 143.353574][ T8382] bond1: entered promiscuous mode [ 143.360268][ T8382] bond1: entered allmulticast mode [ 143.365808][ T8382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.531412][ T8391] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.633070][ T8382] bond1 (unregistering): Released all slaves [ 143.655211][ T8393] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 144.155804][ T8421] netlink: 72 bytes leftover after parsing attributes in process `syz.1.700'. [ 144.174774][ T8421] netlink: 20 bytes leftover after parsing attributes in process `syz.1.700'. [ 145.934420][ T5867] IPVS: starting estimator thread 0... [ 146.000529][ T8459] IPVS: Error connecting to the multicast addr [ 146.037485][ T8454] IPVS: using max 30 ests per chain, 72000 per kthread [ 146.101436][ T8465] __nla_validate_parse: 1 callbacks suppressed [ 146.101456][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 146.197961][ T8467] netlink: 'syz.3.714': attribute type 8 has an invalid length. [ 146.250567][ T8471] netlink: 'syz.4.715': attribute type 4 has an invalid length. [ 146.370421][ T8476] netem: change failed [ 146.389525][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 146.401908][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.715'. [ 146.550478][ T8484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.720'. [ 146.718079][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.725'. [ 146.859556][ T8509] dvmrp8: entered allmulticast mode [ 147.014936][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 147.092270][ T8531] netlink: 48 bytes leftover after parsing attributes in process `syz.0.734'. [ 147.222195][ T8535] bridge2: entered promiscuous mode [ 147.250369][ T8535] bridge2: entered allmulticast mode [ 147.272663][ T8543] netlink: 'syz.3.735': attribute type 10 has an invalid length. [ 147.284842][ T8535] team0: Port device bridge2 added [ 147.367595][ T8535] bridge0: port 1(ip6gretap0) entered blocking state [ 147.382751][ T8535] bridge0: port 1(ip6gretap0) entered disabled state [ 147.393517][ T8535] ip6gretap0: entered allmulticast mode [ 147.414968][ T8535] ip6gretap0: entered promiscuous mode [ 147.551112][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.740'. [ 147.731715][ T8556] atomic_op ffff888021751998 conn xmit_atomic 0000000000000000 [ 147.759140][ T8556] netdevsim netdevsim0: Direct firmware load for / [ 147.759140][ T8556] failed with error -2 [ 147.794506][ T8556] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 147.794506][ T8556] [ 147.833015][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.742'. [ 147.925513][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.208732][ T8583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.747'. [ 148.311442][ T8588] ip6tnl1: entered allmulticast mode [ 148.389611][ T8574] netlink: 'syz.4.746': attribute type 10 has an invalid length. [ 148.415768][ T8574] veth0_vlan: entered allmulticast mode [ 148.465408][ T8574] bridge0: port 3(veth0_vlan) entered blocking state [ 148.512021][ T8574] bridge0: port 3(veth0_vlan) entered disabled state [ 148.530885][ T8574] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 148.607098][ T8602] x_tables: ip_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 148.687924][ T8605] netlink: 'syz.2.757': attribute type 1 has an invalid length. [ 148.847850][ T8622] bridge_slave_1: left allmulticast mode [ 148.853547][ T8622] bridge_slave_1: left promiscuous mode [ 148.871134][ T8622] ªªªªª: port 2(bridge_slave_1) entered disabled state [ 148.923805][ T8622] bridge_slave_0: left allmulticast mode [ 148.943532][ T8622] bridge_slave_0: left promiscuous mode [ 148.964285][ T8622] ªªªªª: port 1(bridge_slave_0) entered disabled state [ 149.056537][ T8627] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 149.096098][ T8630] batman_adv: batadv0: Adding interface: ip6gretap2 [ 149.137279][ T8630] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.206330][ T8630] batman_adv: batadv0: Interface activated: ip6gretap2 [ 149.355755][ T8644] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 149.561436][ T8654] netlink: 'syz.0.771': attribute type 16 has an invalid length. [ 149.583132][ T8654] netlink: 'syz.0.771': attribute type 3 has an invalid length. [ 149.660791][ T8660] ieee802154 phy0 wpan0: encryption failed: -22 [ 149.942463][ T8678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.648263][ T8722] xt_l2tp: unknown flags: 10 [ 150.691261][ T8726] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 150.725459][ T8726] macsec1: entered promiscuous mode [ 150.736342][ T8726] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 150.858895][ T8734] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 150.874491][ T8734] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 150.896952][ T8736] 8021q: adding VLAN 0 to HW filter on device team1 [ 151.236919][ T8753] __nla_validate_parse: 16 callbacks suppressed [ 151.236940][ T8753] netlink: 16 bytes leftover after parsing attributes in process `syz.4.803'. [ 151.323439][ T8759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.805'. [ 151.341613][ T8759] ebtables: ebtables: counters copy to user failed while replacing table [ 151.571116][ T8773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 151.580649][ T8773] netlink: 'syz.3.810': attribute type 30 has an invalid length. [ 151.588899][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.810'. [ 151.795730][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.814'. [ 151.809064][ T8787] netlink: 'syz.3.815': attribute type 10 has an invalid length. [ 151.824552][ T8787] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.883594][ T8789] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 152.160874][ T8803] netlink: 48 bytes leftover after parsing attributes in process `syz.0.820'. [ 152.172142][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.820'. [ 152.186118][ T8803] bridge_slave_1: left allmulticast mode [ 152.196797][ T8803] bridge_slave_1: left promiscuous mode [ 152.211833][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.230482][ T8803] bridge_slave_0: left allmulticast mode [ 152.236428][ T8803] bridge_slave_0: left promiscuous mode [ 152.243179][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.402715][ T8819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.823'. [ 152.499495][ T8822] sctp: [Deprecated]: syz.1.825 (pid 8822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.499495][ T8822] Use struct sctp_sack_info instead [ 152.706325][ T8840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.830'. [ 152.718523][ T8840] tipc: Enabling of bearer rejected, media not registered [ 152.862160][ T8852] batadv1: entered promiscuous mode [ 152.961261][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.835'. [ 152.995361][ T8858] pim6reg1: entered promiscuous mode [ 153.002349][ T8858] pim6reg1: entered allmulticast mode [ 153.118783][ T8862] netlink: 'syz.0.837': attribute type 10 has an invalid length. [ 153.440683][ T5846] Bluetooth: hci4: link tx timeout [ 153.446141][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.459310][ T5846] Bluetooth: hci4: link tx timeout [ 153.464489][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.472990][ T5846] Bluetooth: hci4: link tx timeout [ 153.478298][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.487527][ T5846] Bluetooth: hci4: link tx timeout [ 153.492713][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.502364][ T5846] Bluetooth: hci4: link tx timeout [ 153.507644][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.515455][ T5846] Bluetooth: hci4: link tx timeout [ 153.520908][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.528750][ T5846] Bluetooth: hci4: link tx timeout [ 153.535282][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.543114][ T5846] Bluetooth: hci4: link tx timeout [ 153.548354][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.556133][ T5846] Bluetooth: hci4: link tx timeout [ 153.560810][ T8887] lo: entered allmulticast mode [ 153.561306][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.574015][ T5846] Bluetooth: hci4: link tx timeout [ 153.579317][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.587479][ T5846] Bluetooth: hci4: link tx timeout [ 153.592634][ T5846] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 153.675924][ T8887] lo: left allmulticast mode [ 153.746898][ T8900] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.756155][ T8900] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.765045][ T8900] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.773946][ T8900] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.807286][ T8900] vxlan0: entered promiscuous mode [ 153.812477][ T8900] vxlan0: entered allmulticast mode [ 153.838539][ T8900] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.847586][ T8900] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.856532][ T8900] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.865553][ T8900] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.958271][ T8906] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 153.994074][ T8906] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 154.453730][ T8915] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.587986][ T8915] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.706877][ T8915] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.830548][ T8915] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.985997][ T8915] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.012368][ T8915] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.066671][ T8915] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.086298][ T8915] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.527445][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 155.735694][ T8969] netem: change failed [ 155.901934][ T8979] netlink: 'syz.4.865': attribute type 1 has an invalid length. [ 156.545448][ T9018] netlink: 'syz.1.876': attribute type 1 has an invalid length. [ 156.569747][ T9018] __nla_validate_parse: 13 callbacks suppressed [ 156.569767][ T9018] netlink: 224 bytes leftover after parsing attributes in process `syz.1.876'. [ 156.624760][ T9022] openvswitch: netlink: Message has 12 unknown bytes. [ 156.833865][ T9022] netlink: 187320 bytes leftover after parsing attributes in process `syz.0.878'. [ 156.884432][ T9022] netlink: zone id is out of range [ 156.913431][ T9022] netlink: zone id is out of range [ 156.964021][ T9022] netlink: zone id is out of range [ 156.974100][ T9022] netlink: zone id is out of range [ 156.988183][ T9022] netlink: zone id is out of range [ 156.993430][ T9022] netlink: zone id is out of range [ 157.025801][ T9022] netlink: zone id is out of range [ 157.066157][ T9022] netlink: zone id is out of range [ 157.085438][ T9022] netlink: zone id is out of range [ 157.106881][ T9041] netlink: 'syz.1.882': attribute type 3 has an invalid length. [ 157.226760][ T9050] xt_nfacct: accounting object `syz1' does not exists [ 157.770374][ T9060] bond0 (unregistering): left promiscuous mode [ 157.780034][ T9060] bond_slave_0: left promiscuous mode [ 157.785867][ T9060] bond_slave_1: left promiscuous mode [ 157.795444][ T9060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.813383][ T9060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.825203][ T9060] bond0 (unregistering): Released all slaves [ 157.928652][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.0.889'. [ 158.044725][ T9083] netlink: 'syz.4.891': attribute type 2 has an invalid length. [ 158.135881][ T9084] netlink: 'syz.4.891': attribute type 5 has an invalid length. [ 158.496133][ T9088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.893'. [ 158.505872][ T9088] netlink: 32 bytes leftover after parsing attributes in process `syz.2.893'. [ 159.210046][ T9109] xt_nfacct: accounting object `sy' does not exists [ 159.237452][ T9109] mac80211_hwsim hwsim3 : renamed from wlan1 (while UP) [ 159.596441][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.908'. [ 159.613959][ T9144] netlink: 'syz.2.908': attribute type 2 has an invalid length. [ 159.663116][ T9144] : entered promiscuous mode [ 159.768673][ T9150] netlink: 48 bytes leftover after parsing attributes in process `syz.1.909'. [ 159.790676][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.910'. [ 160.260852][ T9172] netlink: 'syz.1.915': attribute type 4 has an invalid length. [ 160.416880][ T9176] syz.4.917 (9176) used greatest stack depth: 18008 bytes left [ 160.592594][ T9195] netlink: 'syz.2.920': attribute type 32 has an invalid length. [ 160.600543][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 160.610009][ T9195] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 160.698179][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.924'. [ 160.953323][ T9225] netlink: 'syz.3.927': attribute type 3 has an invalid length. [ 161.056867][ T9228] netlink: 'syz.4.929': attribute type 1 has an invalid length. [ 161.071350][ T9228] netlink: 'syz.4.929': attribute type 8 has an invalid length. [ 161.429882][ T9244] dummy0: entered promiscuous mode [ 161.444378][ T9244] dummy0: left promiscuous mode [ 161.638200][ T9259] __nla_validate_parse: 6 callbacks suppressed [ 161.638219][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.937'. [ 161.867136][ T9276] netlink: 40 bytes leftover after parsing attributes in process `syz.0.943'. [ 161.941165][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 161.961611][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 161.988143][ T9279] net_ratelimit: 4 callbacks suppressed [ 161.988162][ T9279] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 162.018658][ T9281] openvswitch: netlink: Unexpected mask (mask=8000040, allowed=10048) [ 162.075085][ T9281] netlink: 'syz.1.944': attribute type 21 has an invalid length. [ 162.087673][ T9281] netlink: 132 bytes leftover after parsing attributes in process `syz.1.944'. [ 162.102633][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 162.114192][ T9279] validate_nla: 1 callbacks suppressed [ 162.114217][ T9279] netlink: 'syz.1.944': attribute type 21 has an invalid length. [ 162.136578][ T9279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.944'. [ 162.148067][ T9279] netlink: 'syz.1.944': attribute type 1 has an invalid length. [ 162.157530][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.944'. [ 162.293029][ T9300] netlink: 'syz.3.951': attribute type 13 has an invalid length. [ 162.303993][ T9300] netlink: 'syz.3.951': attribute type 3 has an invalid length. [ 162.310353][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.952'. [ 162.456352][ T9311] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 162.464658][ T9311] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 162.557870][ T9318] netlink: 'syz.3.957': attribute type 2 has an invalid length. [ 162.573483][ T9318] Tq€: entered promiscuous mode [ 162.581198][ T9318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 164.568103][ T9415] nbd: socks must be embedded in a SOCK_ITEM attr [ 164.579581][ T9418] Cannot find set identified by id 0 to match [ 165.097698][ T9427] netlink: 'syz.4.987': attribute type 1 has an invalid length. [ 165.144680][ T9427] bond0: entered promiscuous mode [ 165.161151][ T9427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.250991][ T9431] bond0: (slave veth5): making interface the new active one [ 165.290745][ T9431] veth5: entered promiscuous mode [ 165.323387][ T9431] bond0: (slave veth5): Enslaving as an active interface with an up link [ 165.376500][ T9419] lo speed is unknown, defaulting to 1000 [ 165.435467][ T9419] lo speed is unknown, defaulting to 1000 [ 165.468570][ T9419] lo speed is unknown, defaulting to 1000 [ 165.485934][ T9419] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 165.563906][ T9419] lo speed is unknown, defaulting to 1000 [ 165.613401][ T9419] lo speed is unknown, defaulting to 1000 [ 165.644821][ T9419] lo speed is unknown, defaulting to 1000 [ 165.688491][ T9419] lo speed is unknown, defaulting to 1000 [ 165.695718][ T9419] lo speed is unknown, defaulting to 1000 [ 165.733782][ T9419] lo speed is unknown, defaulting to 1000 [ 166.782856][ T9479] netlink: 'syz.1.997': attribute type 5 has an invalid length. [ 166.874037][ T9484] __nla_validate_parse: 11 callbacks suppressed [ 166.874059][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1001'. [ 166.929663][ T9484] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1001'. [ 167.022943][ T9489] netlink: 'syz.3.1002': attribute type 1 has an invalid length. [ 167.093476][ T9489] 8021q: adding VLAN 0 to HW filter on device bond4 [ 167.282816][ T9496] netlink: 'syz.2.1003': attribute type 1 has an invalid length. [ 167.318313][ T9496] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1003'. [ 167.469438][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1006'. [ 167.548031][ T9506] xt_socket: unknown flags 0xd0 [ 167.687758][ T9510] netlink: 'syz.2.1008': attribute type 10 has an invalid length. [ 167.731567][ T9510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1008'. [ 168.344746][ T9537] lo speed is unknown, defaulting to 1000 [ 168.635008][ T9550] Cannot find set identified by id 0 to match [ 168.914775][ T9564] x_tables: duplicate underflow at hook 2 [ 168.922451][ T9564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1022'. [ 169.004944][ T9568] vlan2: entered promiscuous mode [ 169.028563][ T9568] vlan2: entered allmulticast mode [ 169.105675][ T9573] netlink: 'syz.1.1024': attribute type 13 has an invalid length. [ 169.202722][ T9537] lo speed is unknown, defaulting to 1000 [ 169.367469][ T5842] Bluetooth: hci0: command 0x0401 tx timeout [ 169.367920][ T5846] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 169.522331][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 169.826324][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 169.909869][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'. [ 169.980111][ T9600] vxcan0: Master is either lo or non-ether device [ 170.043707][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 170.739471][ T9643] bridge1: entered promiscuous mode [ 170.744747][ T9643] bridge1: entered allmulticast mode [ 170.778188][ T9644] netlink: 'syz.2.1047': attribute type 10 has an invalid length. [ 170.800692][ T9643] team0: Port device bridge1 added [ 170.848151][ T9643] bridge0: port 1(ip6gretap0) entered blocking state [ 170.854958][ T9643] bridge0: port 1(ip6gretap0) entered disabled state [ 170.868074][ T9643] ip6gretap0: entered allmulticast mode [ 170.875269][ T9643] ip6gretap0: entered promiscuous mode [ 171.249687][ T9655] netlink: 'syz.3.1050': attribute type 12 has an invalid length. [ 171.704472][ T9679] ipt_REJECT: ECHOREPLY no longer supported. [ 172.005541][ T9688] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 172.210857][ T9705] __nla_validate_parse: 8 callbacks suppressed [ 172.210876][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 172.257402][ T9705] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1060'. [ 172.266105][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 172.295789][ T9705] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1060'. [ 172.304357][ T9698] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1060'. [ 172.314752][ T9698] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1060'. [ 172.349767][ T9711] netlink: 'syz.2.1061': attribute type 10 has an invalid length. [ 172.371559][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 172.393072][ T9711] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1061'. [ 172.407509][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 172.419566][ T9711] openvswitch: netlink: Flow key attr not present in new flow. [ 172.510786][ T9705] vlan3: entered allmulticast mode [ 172.553059][ T9698] vlan3: entered allmulticast mode [ 172.608099][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 172.776114][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1066'. [ 173.185954][ T9754] Bluetooth: MGMT ver 1.23 [ 173.464730][ T9770] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.516237][ T9770] dummy0: left promiscuous mode [ 173.621476][ T9770] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 173.976938][ T9796] lo: entered promiscuous mode [ 174.219402][ T9795] lo: left promiscuous mode [ 174.274140][ T9817] pim6reg1: entered promiscuous mode [ 174.303689][ T9817] pim6reg1: entered allmulticast mode [ 174.346126][ T9824] tap0: tun_chr_ioctl cmd 1074025677 [ 174.362316][ T9824] tap0: linktype set to 825 [ 174.464801][ T9829] syz_tun: entered allmulticast mode [ 174.546615][ T9828] syz_tun: left allmulticast mode [ 174.864640][ T9855] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.872324][ T9855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.939701][ T9855] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.950501][ T9855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.075860][ T9855] batadv0 (unregistering): left promiscuous mode [ 176.768871][ T9882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.805939][ T9882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.989514][ T9882] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.007259][ T9882] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.016443][ T9882] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.027893][ T9882] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.095944][ T9882] gretap1: left promiscuous mode [ 177.108299][ T9882] gretap1: left allmulticast mode [ 177.118655][ T9882] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 177.127368][ T9882] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 177.158414][ T9882] batadv1: left promiscuous mode [ 179.412203][ T9951] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.421209][ T9951] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.430016][ T9951] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.439032][ T9951] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.679739][ T9958] netlink: 'syz.1.1114': attribute type 3 has an invalid length. [ 179.912672][ T9979] __nla_validate_parse: 6 callbacks suppressed [ 179.912691][ T9979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1119'. [ 179.995654][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1121'. [ 179.999326][ T9979] nr0: entered promiscuous mode [ 180.371433][T10004] tun0: tun_chr_ioctl cmd 1074812117 [ 180.703298][T10037] netlink: 'syz.3.1132': attribute type 3 has an invalid length. [ 180.716007][T10037] netlink: 'syz.3.1132': attribute type 3 has an invalid length. [ 180.769625][T10042] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1134'. [ 180.885355][T10042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1134'. [ 180.979223][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'. [ 181.969365][T10107] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.1145'. [ 181.983118][T10111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.009401][T10111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.024714][T10111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.049376][T10111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.804653][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1153'. [ 182.979797][T10163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1155'. [ 183.033239][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 183.137943][T10169] bridge4: entered promiscuous mode [ 183.143254][T10169] bridge4: entered allmulticast mode [ 183.264511][T10177] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1160'. [ 183.347779][T10177] ip6gretap1: entered promiscuous mode [ 183.353315][T10177] ip6gretap1: entered allmulticast mode [ 183.381903][T10177] syz_tun: entered allmulticast mode [ 183.402139][T10177] xt_TCPMSS: Only works on TCP SYN packets [ 183.423704][T10175] syz_tun: left allmulticast mode [ 183.751852][T10203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.993591][T10219] 8021q: adding VLAN 0 to HW filter on device team1 [ 184.219073][T10234] netlink: 'syz.3.1177': attribute type 1 has an invalid length. [ 184.645085][T10264] netlink: 'syz.3.1185': attribute type 1 has an invalid length. [ 184.976081][T10276] __nla_validate_parse: 10 callbacks suppressed [ 184.976103][T10276] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1188'. [ 185.013056][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 185.022804][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 185.032133][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1188'. [ 185.041513][T10276] netlink: 'syz.0.1188': attribute type 4 has an invalid length. [ 185.079638][T10276] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1188'. [ 185.089882][T10276] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (11) [ 185.146077][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1191'. [ 185.189890][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 185.489098][T10315] netlink: 'syz.0.1194': attribute type 10 has an invalid length. [ 185.551049][T10320] rdma_op ffff888059b581f0 conn xmit_rdma 0000000000000000 [ 185.564543][T10315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1194'. [ 185.586689][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1199'. [ 185.621915][T10315] batman_adv: batadv0: Adding interface: virt_wifi0 [ 185.641152][T10315] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 185.678581][T10315] batman_adv: batadv0: Interface activated: virt_wifi0 [ 185.761650][T10334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1200'. [ 185.993545][T10351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.170890][T10365] syz_tun: entered allmulticast mode [ 186.265753][T10365] syz_tun: left allmulticast mode [ 186.413952][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 186.418307][ T5832] Bluetooth: hci0: command 0x0401 tx timeout [ 186.420899][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 186.426050][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 186.685748][T10381] veth0: entered promiscuous mode [ 186.694205][T10381] macvtap1: entered promiscuous mode [ 186.703446][T10381] macvtap1: entered allmulticast mode [ 186.709538][T10381] veth0: entered allmulticast mode [ 186.747839][T10381] veth0: left allmulticast mode [ 186.758976][T10381] veth0: left promiscuous mode [ 186.908547][T10359] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 187.571124][ T8964] bond0 (unregistering): Released all slaves [ 187.614725][T10416] netlink: 'syz.0.1220': attribute type 10 has an invalid length. [ 188.414722][T10467] 8021q: adding VLAN 0 to HW filter on device team1 [ 188.466238][T10474] pimreg: entered allmulticast mode [ 188.489798][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 188.872517][T10504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.082813][T10576] bridge2: entered promiscuous mode [ 190.117237][T10576] bridge2: entered allmulticast mode [ 190.130947][T10576] team0: Port device bridge2 added [ 190.170512][T10576] netlink: 'syz.2.1255': attribute type 10 has an invalid length. [ 190.263672][T10584] __nla_validate_parse: 15 callbacks suppressed [ 190.263692][T10584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1257'. [ 190.362406][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 190.386695][T10592] openvswitch: netlink: Actions may not be safe on all matching packets [ 190.392655][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'. [ 190.408668][T10590] netlink: 'syz.1.1259': attribute type 25 has an invalid length. [ 190.422384][T10586] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1258'. [ 190.438589][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 190.670426][T10601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1261'. [ 190.685021][T10611] FAULT_INJECTION: forcing a failure. [ 190.685021][T10611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.709799][T10611] CPU: 1 UID: 0 PID: 10611 Comm: syz.1.1264 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 190.720726][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 190.730999][T10611] Call Trace: [ 190.734347][T10611] [ 190.737305][T10611] dump_stack_lvl+0x241/0x360 [ 190.742387][T10611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.747631][T10611] ? __pfx__printk+0x10/0x10 [ 190.752367][T10611] ? do_vfs_ioctl+0xf07/0x2e40 [ 190.757170][T10611] ? __pfx_lock_release+0x10/0x10 [ 190.762243][T10611] should_fail_ex+0x3b0/0x4e0 [ 190.766960][T10611] _copy_from_user+0x2f/0xc0 [ 190.771612][T10611] get_user_ifreq+0xc3/0x200 [ 190.776268][T10611] inet_ioctl+0x3a4/0x4f0 [ 190.780640][T10611] ? __pfx_inet_ioctl+0x10/0x10 [ 190.785620][T10611] ? tomoyo_path_number_perm+0x679/0x860 [ 190.791342][T10611] ? __lock_acquire+0x1397/0x2100 [ 190.796492][T10611] ? tomoyo_path_number_perm+0x206/0x860 [ 190.802175][T10611] sock_do_ioctl+0x158/0x460 [ 190.806811][T10611] ? __pfx_sock_do_ioctl+0x10/0x10 [ 190.811977][T10611] sock_ioctl+0x626/0x8e0 [ 190.816356][T10611] ? __pfx_sock_ioctl+0x10/0x10 [ 190.821341][T10611] ? __fget_files+0x2a/0x410 [ 190.825970][T10611] ? __fget_files+0x2a/0x410 [ 190.830595][T10611] ? __pfx_sock_ioctl+0x10/0x10 [ 190.835563][T10611] __se_sys_ioctl+0xf5/0x170 [ 190.840187][T10611] do_syscall_64+0xf3/0x230 [ 190.844716][T10611] ? clear_bhb_loop+0x35/0x90 [ 190.849477][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.855368][T10611] RIP: 0033:0x7f9650985d29 [ 190.859778][T10611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.879385][T10611] RSP: 002b:00007f965180d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.887817][T10611] RAX: ffffffffffffffda RBX: 00007f9650b75fa0 RCX: 00007f9650985d29 [ 190.895788][T10611] RDX: 0000000020002280 RSI: 0000000000008914 RDI: 0000000000000003 [ 190.903770][T10611] RBP: 00007f965180d090 R08: 0000000000000000 R09: 0000000000000000 [ 190.911739][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.919727][T10611] R13: 0000000000000000 R14: 00007f9650b75fa0 R15: 00007ffecfe8f8f8 [ 190.927730][T10611] [ 191.245598][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1267'. [ 191.287901][T10626] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 191.604022][T10637] bridge_slave_1: entered allmulticast mode [ 191.766251][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1275'. [ 191.827276][T10648] 8021q: adding VLAN 0 to HW filter on device team1 [ 191.877778][T10650] netlink: 'syz.2.1276': attribute type 3 has an invalid length. [ 192.481703][T10678] netlink: 'syz.0.1282': attribute type 1 has an invalid length. [ 192.494731][T10680] netlink: 492 bytes leftover after parsing attributes in process `syz.4.1284'. [ 192.507848][T10678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.662425][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 192.838326][T10696] SET target dimension over the limit! [ 192.848133][T10696] openvswitch: netlink: Flow actions attr not present in new flow. [ 192.880733][T10700] bridge0: entered promiscuous mode [ 192.886466][T10700] bridge0: entered allmulticast mode [ 192.906175][T10701] bridge2: entered promiscuous mode [ 192.915020][T10701] bridge2: entered allmulticast mode [ 193.978986][T10768] netlink: 'syz.3.1308': attribute type 6 has an invalid length. [ 194.201050][T10782] bridge0: port 1(ip6gretap0) entered blocking state [ 194.207963][T10782] bridge0: port 1(ip6gretap0) entered forwarding state [ 194.276745][T10782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.320045][T10782] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.372742][T10782] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.586008][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.755056][T10811] openvswitch: netlink: nsh attr 9472 is out of range max 3 [ 194.819725][T10811] netlink: 'syz.1.1315': attribute type 4 has an invalid length. [ 194.871711][T10811] netlink: 'syz.1.1315': attribute type 8 has an invalid length. [ 194.888513][T10811] netlink: 'syz.1.1315': attribute type 9 has an invalid length. [ 194.915684][T10811] netlink: 'syz.1.1315': attribute type 10 has an invalid length. [ 194.945720][T10811] netlink: 'syz.1.1315': attribute type 11 has an invalid length. [ 195.032122][T10828] batadv_slave_1: entered promiscuous mode [ 195.465638][T10824] batadv_slave_1: left promiscuous mode [ 195.955050][T10867] batadv_slave_1: entered promiscuous mode [ 195.969436][T10866] batadv_slave_1: left promiscuous mode [ 196.047829][T10855] netlink: 'syz.0.1323': attribute type 21 has an invalid length. [ 196.055816][T10855] netlink: 'syz.0.1323': attribute type 6 has an invalid length. [ 196.063690][T10855] __nla_validate_parse: 10 callbacks suppressed [ 196.063706][T10855] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1323'. [ 196.083014][T10868] netlink: 'syz.3.1328': attribute type 10 has an invalid length. [ 196.101980][T10868] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.1328'. [ 196.127273][T10868] openvswitch: netlink: Message has 7 unknown bytes. [ 196.176885][T10878] syz_tun: entered promiscuous mode [ 196.354915][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e724000: rx timeout, send abort [ 196.365722][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e724000: 0x0f002: (3) A timeout occurred and this is the connection abort to close the session. [ 196.400683][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ad97000: rx timeout, send abort [ 196.409656][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ad97000: 0x1f000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.541338][T10883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1333'. [ 196.691589][T10893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1332'. [ 196.814116][T10897] netlink: 'syz.2.1336': attribute type 10 has an invalid length. [ 196.862831][T10897] team0: Device hsr_slave_0 failed to register rx_handler [ 196.898963][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 196.926742][T10903] netlink: 812 bytes leftover after parsing attributes in process `syz.0.1338'. [ 197.068419][T10911] FAULT_INJECTION: forcing a failure. [ 197.068419][T10911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.102345][T10911] CPU: 0 UID: 0 PID: 10911 Comm: syz.2.1339 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 197.113169][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 197.123257][T10911] Call Trace: [ 197.126565][T10911] [ 197.129522][T10911] dump_stack_lvl+0x241/0x360 [ 197.134238][T10911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.139482][T10911] ? __pfx__printk+0x10/0x10 [ 197.144117][T10911] ? __pfx_lock_release+0x10/0x10 [ 197.149179][T10911] should_fail_ex+0x3b0/0x4e0 [ 197.153885][T10911] _copy_from_iter+0x1e9/0x1c20 [ 197.158778][T10911] ? __virt_addr_valid+0x183/0x530 [ 197.163927][T10911] ? __alloc_skb+0x28f/0x440 [ 197.168541][T10911] ? __pfx__copy_from_iter+0x10/0x10 [ 197.173937][T10911] ? __virt_addr_valid+0x183/0x530 [ 197.179079][T10911] ? __virt_addr_valid+0x183/0x530 [ 197.184228][T10911] ? __virt_addr_valid+0x45f/0x530 [ 197.189373][T10911] ? __phys_addr_symbol+0x2f/0x70 [ 197.194441][T10911] ? __check_object_size+0x47a/0x730 [ 197.199819][T10911] netlink_sendmsg+0x73d/0xcb0 [ 197.204624][T10911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.209941][T10911] ? aa_sock_msg_perm+0x91/0x160 [ 197.214915][T10911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.220226][T10911] __sock_sendmsg+0x221/0x270 [ 197.224923][T10911] ____sys_sendmsg+0x52a/0x7e0 [ 197.229723][T10911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.235045][T10911] ? __fget_files+0x2a/0x410 [ 197.239659][T10911] ? __fget_files+0x2a/0x410 [ 197.244282][T10911] __sys_sendmsg+0x269/0x350 [ 197.248905][T10911] ? __pfx_lock_release+0x10/0x10 [ 197.253952][T10911] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.259096][T10911] ? __pfx_vfs_write+0x10/0x10 [ 197.263986][T10911] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.270334][T10911] ? do_syscall_64+0x100/0x230 [ 197.275122][T10911] ? do_syscall_64+0xb6/0x230 [ 197.279823][T10911] do_syscall_64+0xf3/0x230 [ 197.284347][T10911] ? clear_bhb_loop+0x35/0x90 [ 197.289041][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.294957][T10911] RIP: 0033:0x7f9713f85d29 [ 197.299393][T10911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.319103][T10911] RSP: 002b:00007f9714e1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.327539][T10911] RAX: ffffffffffffffda RBX: 00007f9714175fa0 RCX: 00007f9713f85d29 [ 197.335528][T10911] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 197.343512][T10911] RBP: 00007f9714e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 197.351499][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.359497][T10911] R13: 0000000000000000 R14: 00007f9714175fa0 R15: 00007ffe91732d38 [ 197.367500][T10911] [ 197.416159][T10913] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 197.479653][T10871] syz_tun: left promiscuous mode [ 197.611134][T10920] ip6gretap0: left allmulticast mode [ 197.616581][T10920] ip6gretap0: left promiscuous mode [ 197.645579][T10920] bridge0: port 1(ip6gretap0) entered disabled state [ 197.687490][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 197.735705][T10920] team0: Port device team_slave_0 removed [ 197.750878][T10926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1343'. [ 197.766849][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1346'. [ 197.768864][T10920] team0: Port device team_slave_1 removed [ 197.785740][T10926] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1343'. [ 197.793424][T10920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.808398][T10920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.829484][T10920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.865931][T10920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.870105][T10930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'. [ 197.926403][T10920] team0: Port device bridge1 removed [ 197.950767][T10920] team0: Port device bridge2 removed [ 197.989302][T10935] 8021q: adding VLAN 0 to HW filter on device team2 [ 198.194307][T10947] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 198.354341][T10947] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 199.134258][T10995] netlink: 'syz.3.1361': attribute type 5 has an invalid length. [ 199.182913][T10995] ip6erspan0: entered promiscuous mode [ 199.336701][T11005] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 199.372916][T11005] netlink: 'syz.3.1365': attribute type 1 has an invalid length. [ 199.388351][T11005] netlink: 'syz.3.1365': attribute type 2 has an invalid length. [ 199.488552][ T9] IPVS: starting estimator thread 0... [ 199.588212][T11019] IPVS: using max 24 ests per chain, 57600 per kthread [ 199.685156][T11033] netlink: 'syz.1.1371': attribute type 1 has an invalid length. [ 199.698464][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 199.885718][T11042] netlink: 'syz.3.1372': attribute type 1 has an invalid length. [ 199.974931][T11045] tun0: tun_chr_ioctl cmd 21731 [ 200.302718][T11067] xfrm1: entered allmulticast mode [ 200.634899][T11076] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.647476][T11076] bond0: (slave bond6): Enslaving as an active interface with an up link [ 200.674944][T11080] macsec1: entered allmulticast mode [ 201.067921][T11103] bond0: (slave macvlan2): Opening slave failed [ 201.080477][T11108] xt_hashlimit: size too large, truncated to 1048576 [ 201.130284][T11106] 8021q: adding VLAN 0 to HW filter on device team1 [ 201.169840][T11110] __nla_validate_parse: 11 callbacks suppressed [ 201.169863][T11110] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1395'. [ 201.463007][T11124] validate_nla: 1 callbacks suppressed [ 201.463029][T11124] netlink: 'syz.4.1400': attribute type 3 has an invalid length. [ 201.478047][T11124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1400'. [ 201.514052][T11121] x_tables: duplicate underflow at hook 3 [ 201.555604][T11123] x_tables: duplicate underflow at hook 3 [ 201.572149][T11133] netlink: 'syz.1.1401': attribute type 1 has an invalid length. [ 201.718196][T11139] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 201.730307][T11139] netlink: 'syz.2.1403': attribute type 3 has an invalid length. [ 201.747264][T11139] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1403'. [ 201.817866][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 201.925322][T11151] sctp: [Deprecated]: syz.3.1407 (pid 11151) Use of int in max_burst socket option. [ 201.925322][T11151] Use struct sctp_assoc_value instead [ 201.938810][T11153] netlink: 'syz.1.1408': attribute type 1 has an invalid length. [ 201.950354][T11151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1407'. [ 202.063504][T11159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1411'. [ 202.253363][T11173] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 202.411682][T11183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.468627][T11183] netlink: 'syz.2.1418': attribute type 10 has an invalid length. [ 202.527296][T11189] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (149) [ 202.538707][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1419'. [ 202.575915][T11189] 8021q: adding VLAN 0 to HW filter on device team2 [ 202.675772][T11183] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.701414][T11193] GUP no longer grows the stack in syz.0.1421 (11193): 20006000-2000a000 (20005000) [ 202.734278][T11193] CPU: 1 UID: 0 PID: 11193 Comm: syz.0.1421 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 202.745089][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 202.755170][T11193] Call Trace: [ 202.758476][T11193] [ 202.761432][T11193] dump_stack_lvl+0x241/0x360 [ 202.766188][T11193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.771433][T11193] ? __pfx__printk+0x10/0x10 [ 202.776055][T11193] ? find_vma+0xf9/0x170 [ 202.780359][T11193] __get_user_pages+0x4385/0x49e0 [ 202.785435][T11193] ? __pfx_lock_acquire+0x10/0x10 [ 202.790544][T11193] ? mark_lock+0x9a/0x360 [ 202.794919][T11193] ? __lock_acquire+0x1397/0x2100 [ 202.799992][T11193] ? __pfx___get_user_pages+0x10/0x10 [ 202.805397][T11193] ? __gup_longterm_locked+0xd2f/0x17f0 [ 202.810975][T11193] ? __pfx_down_read_killable+0x10/0x10 [ 202.816590][T11193] ? __pfx_lock_acquire+0x10/0x10 [ 202.821648][T11193] ? try_get_folio+0xf1/0x6f0 [ 202.826352][T11193] ? __pfx_lock_release+0x10/0x10 [ 202.831434][T11193] __gup_longterm_locked+0xe64/0x17f0 [ 202.836859][T11193] ? mark_lock+0x9a/0x360 [ 202.841495][T11193] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.847511][T11193] ? __pfx___gup_longterm_locked+0x10/0x10 [ 202.853361][T11193] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.859735][T11193] ? gup_fast_fallback+0x207e/0x29c0 [ 202.865052][T11193] gup_fast_fallback+0x2266/0x29c0 [ 202.870222][T11193] ? __pfx_gup_fast_fallback+0x10/0x10 [ 202.875743][T11193] ? __mutex_trylock_common+0x183/0x2e0 [ 202.881336][T11193] ? __pfx___might_resched+0x10/0x10 [ 202.886649][T11193] ? is_valid_gup_args+0x124/0x200 [ 202.892055][T11193] get_user_pages_fast+0xcc/0x160 [ 202.897206][T11193] ? __pfx_get_user_pages_fast+0x10/0x10 [ 202.902867][T11193] ? rcu_is_watching+0x15/0xb0 [ 202.907670][T11193] ? trace_contention_end+0x3c/0x120 [ 202.912997][T11193] ? __mutex_lock+0x37f/0xee0 [ 202.917716][T11193] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 202.923482][T11193] iov_iter_get_pages2+0xcf/0x130 [ 202.928519][T11193] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 202.934252][T11193] __se_sys_vmsplice+0x740/0x1490 [ 202.939382][T11193] ? plist_del+0x3f1/0x410 [ 202.943826][T11193] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 202.949295][T11193] ? __pfx_futex_wake+0x10/0x10 [ 202.954185][T11193] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.960189][T11193] ? do_syscall_64+0x100/0x230 [ 202.964963][T11193] ? do_syscall_64+0xb6/0x230 [ 202.969748][T11193] do_syscall_64+0xf3/0x230 [ 202.974295][T11193] ? clear_bhb_loop+0x35/0x90 [ 202.979097][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.985212][T11193] RIP: 0033:0x7f4af7585d29 [ 202.989666][T11193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.009576][T11193] RSP: 002b:00007f4af84a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 203.018015][T11193] RAX: ffffffffffffffda RBX: 00007f4af7775fa0 RCX: 00007f4af7585d29 [ 203.026177][T11193] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000005 [ 203.033796][T11208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1426'. [ 203.034149][T11193] RBP: 00007f4af7601b08 R08: 0000000000000000 R09: 0000000000000000 [ 203.051126][T11193] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 203.059124][T11193] R13: 0000000000000000 R14: 00007f4af7775fa0 R15: 00007fffd86d0658 [ 203.067117][T11193] [ 203.162921][T11183] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.278242][T11218] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 203.288208][T11219] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 203.300826][T11183] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.383482][T11183] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.434283][T11224] set match dimension is over the limit! [ 203.479123][T11183] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.495801][T11183] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.526474][T11183] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.563966][T11183] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.625836][T11229] netlink: 'syz.0.1433': attribute type 5 has an invalid length. [ 203.638776][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1433'. [ 203.654400][T11229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'. [ 204.055518][T11257] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 204.124736][T11257] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 204.151587][T11262] Cannot find add_set index 32768 as target [ 204.177306][T11257] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 204.529084][T11280] netlink: 'syz.1.1446': attribute type 16 has an invalid length. [ 204.541340][T11280] netlink: 'syz.1.1446': attribute type 2 has an invalid length. [ 204.555347][ T2148] IPVS: starting estimator thread 0... [ 204.574722][T11280] netlink: 'syz.1.1446': attribute type 1 has an invalid length. [ 204.623818][T11278] syzkaller1: entered promiscuous mode [ 204.649337][T11282] IPVS: using max 29 ests per chain, 69600 per kthread [ 204.658899][T11278] syzkaller1: entered allmulticast mode [ 204.704122][T11278] unsupported nla_type 58 [ 204.968291][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 205.440219][T11340] 8021q: adding VLAN 0 to HW filter on device team2 [ 205.561253][T11341] syzkaller1: entered promiscuous mode [ 205.566789][T11341] syzkaller1: entered allmulticast mode [ 205.646055][T11354] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 205.951825][T11371] sctp: [Deprecated]: syz.4.1474 (pid 11371) Use of int in maxseg socket option. [ 205.951825][T11371] Use struct sctp_assoc_value instead [ 206.056456][T11375] FAULT_INJECTION: forcing a failure. [ 206.056456][T11375] name failslab, interval 1, probability 0, space 0, times 0 [ 206.070031][T11375] CPU: 1 UID: 0 PID: 11375 Comm: syz.1.1478 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 206.080931][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 206.091018][T11375] Call Trace: [ 206.094334][T11375] [ 206.097294][T11375] dump_stack_lvl+0x241/0x360 [ 206.102010][T11375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.107240][T11375] ? __pfx__printk+0x10/0x10 [ 206.111864][T11375] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 206.116411][T11379] No such timeout policy "syz0" [ 206.117248][T11375] ? __pfx___might_resched+0x10/0x10 [ 206.117280][T11375] should_fail_ex+0x3b0/0x4e0 [ 206.132633][T11375] should_failslab+0xac/0x100 [ 206.137358][T11375] __kmalloc_node_noprof+0xe1/0x4d0 [ 206.143028][T11375] ? __kvmalloc_node_noprof+0x72/0x190 [ 206.148487][T11375] __kvmalloc_node_noprof+0x72/0x190 [ 206.154382][T11375] alloc_netdev_mqs+0xa72/0x1080 [ 206.159333][T11375] rtnl_create_link+0x2f9/0xc20 [ 206.164192][T11375] rtnl_newlink_create+0x210/0xa40 [ 206.169303][T11375] ? __pfx___mutex_lock+0x10/0x10 [ 206.174673][T11375] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 206.180316][T11375] ? ns_capable+0x8a/0xf0 [ 206.184652][T11375] rtnl_newlink+0x1c7e/0x2210 [ 206.189342][T11375] ? __pfx_rtnl_newlink+0x10/0x10 [ 206.194365][T11375] ? __netlink_deliver_tap+0x56b/0x7f0 [ 206.199823][T11375] ? __pfx_validate_chain+0x10/0x10 [ 206.205019][T11375] ? __sock_sendmsg+0x221/0x270 [ 206.209863][T11375] ? ____sys_sendmsg+0x52a/0x7e0 [ 206.214798][T11375] ? __sys_sendmsg+0x269/0x350 [ 206.219573][T11375] ? do_syscall_64+0xf3/0x230 [ 206.224250][T11375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.230334][T11375] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 206.236317][T11375] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.242741][T11375] ? mark_lock+0x9a/0x360 [ 206.247072][T11375] ? __lock_acquire+0x1397/0x2100 [ 206.252118][T11375] ? __pfx_lock_release+0x10/0x10 [ 206.257160][T11375] ? __pfx_rtnl_newlink+0x10/0x10 [ 206.262188][T11375] rtnetlink_rcv_msg+0x791/0xcf0 [ 206.267130][T11375] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 206.272250][T11375] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.277720][T11375] ? ref_tracker_free+0x643/0x7e0 [ 206.282747][T11375] netlink_rcv_skb+0x1e3/0x430 [ 206.287522][T11375] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.292981][T11375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.298281][T11375] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.303483][T11375] netlink_unicast+0x7f6/0x990 [ 206.308264][T11375] ? __pfx_netlink_unicast+0x10/0x10 [ 206.313542][T11375] ? __virt_addr_valid+0x45f/0x530 [ 206.318651][T11375] ? __phys_addr_symbol+0x2f/0x70 [ 206.323672][T11375] ? __check_object_size+0x47a/0x730 [ 206.328959][T11375] netlink_sendmsg+0x8e4/0xcb0 [ 206.333763][T11375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.339060][T11375] ? aa_sock_msg_perm+0x91/0x160 [ 206.344002][T11375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.349287][T11375] __sock_sendmsg+0x221/0x270 [ 206.353962][T11375] ____sys_sendmsg+0x52a/0x7e0 [ 206.358733][T11375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.364018][T11375] ? __fget_files+0x2a/0x410 [ 206.368620][T11375] ? __fget_files+0x2a/0x410 [ 206.373222][T11375] __sys_sendmsg+0x269/0x350 [ 206.377812][T11375] ? __pfx_lock_release+0x10/0x10 [ 206.382837][T11375] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.387963][T11375] ? __pfx_vfs_write+0x10/0x10 [ 206.392744][T11375] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.399078][T11375] ? do_syscall_64+0x100/0x230 [ 206.403875][T11375] ? do_syscall_64+0xb6/0x230 [ 206.408660][T11375] do_syscall_64+0xf3/0x230 [ 206.413181][T11375] ? clear_bhb_loop+0x35/0x90 [ 206.417872][T11375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.423776][T11375] RIP: 0033:0x7f9650985d29 [ 206.428193][T11375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.447834][T11375] RSP: 002b:00007f965180d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.456345][T11375] RAX: ffffffffffffffda RBX: 00007f9650b75fa0 RCX: 00007f9650985d29 [ 206.464314][T11375] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 206.472308][T11375] RBP: 00007f965180d090 R08: 0000000000000000 R09: 0000000000000000 [ 206.480297][T11375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.488267][T11375] R13: 0000000000000000 R14: 00007f9650b75fa0 R15: 00007ffecfe8f8f8 [ 206.496270][T11375] [ 206.508461][T11373] __nla_validate_parse: 17 callbacks suppressed [ 206.508484][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1477'. [ 206.569436][T11377] validate_nla: 3 callbacks suppressed [ 206.569455][T11377] netlink: 'syz.3.1476': attribute type 3 has an invalid length. [ 208.919450][T11404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1484'. [ 208.990280][T11407] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1485'. [ 209.098478][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 209.167443][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 209.186961][T11421] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode broadcast(3) [ 209.209249][T11421] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 209.258189][T11427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 209.271861][T11423] rdma_rxe: rxe_newlink: failed to add lo [ 209.279377][T11427] FAULT_INJECTION: forcing a failure. [ 209.279377][T11427] name failslab, interval 1, probability 0, space 0, times 0 [ 209.288890][T11428] rdma_rxe: rxe_newlink: failed to add lo [ 209.293387][T11427] CPU: 0 UID: 0 PID: 11427 Comm: syz.2.1490 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 209.308522][T11427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 209.318595][T11427] Call Trace: [ 209.321894][T11427] [ 209.324840][T11427] dump_stack_lvl+0x241/0x360 [ 209.329525][T11427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.334735][T11427] ? __pfx__printk+0x10/0x10 [ 209.339353][T11427] ? __kmalloc_cache_noprof+0x48/0x390 [ 209.344838][T11427] ? __pfx___might_resched+0x10/0x10 [ 209.350123][T11427] should_fail_ex+0x3b0/0x4e0 [ 209.354816][T11427] should_failslab+0xac/0x100 [ 209.359517][T11427] __kmalloc_cache_noprof+0x70/0x390 [ 209.364821][T11427] ? alloc_netdev_mqs+0xbc6/0x1080 [ 209.369959][T11427] ? __xdp_rxq_info_reg+0x141/0x230 [ 209.375157][T11427] alloc_netdev_mqs+0xbc6/0x1080 [ 209.380119][T11427] rtnl_create_link+0x2f9/0xc20 [ 209.385023][T11427] rtnl_newlink_create+0x210/0xa40 [ 209.390141][T11427] ? __pfx___mutex_lock+0x10/0x10 [ 209.395182][T11427] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 209.400840][T11427] ? ns_capable+0x8a/0xf0 [ 209.405312][T11427] rtnl_newlink+0x1c7e/0x2210 [ 209.410024][T11427] ? __pfx_rtnl_newlink+0x10/0x10 [ 209.415066][T11427] ? __netlink_deliver_tap+0x56b/0x7f0 [ 209.420547][T11427] ? __pfx_validate_chain+0x10/0x10 [ 209.425753][T11427] ? __sock_sendmsg+0x221/0x270 [ 209.430600][T11427] ? ____sys_sendmsg+0x52a/0x7e0 [ 209.435535][T11427] ? __sys_sendmsg+0x269/0x350 [ 209.440296][T11427] ? do_syscall_64+0xf3/0x230 [ 209.445003][T11427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.451125][T11427] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 209.457109][T11427] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.463451][T11427] ? mark_lock+0x9a/0x360 [ 209.467782][T11427] ? __lock_acquire+0x1397/0x2100 [ 209.472851][T11427] ? __pfx_lock_release+0x10/0x10 [ 209.477898][T11427] ? __pfx_rtnl_newlink+0x10/0x10 [ 209.482933][T11427] rtnetlink_rcv_msg+0x791/0xcf0 [ 209.487885][T11427] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 209.493023][T11427] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.498672][T11427] ? ref_tracker_free+0x643/0x7e0 [ 209.503711][T11427] netlink_rcv_skb+0x1e3/0x430 [ 209.508484][T11427] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.513953][T11427] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.519274][T11427] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.524498][T11427] netlink_unicast+0x7f6/0x990 [ 209.529284][T11427] ? __pfx_netlink_unicast+0x10/0x10 [ 209.534573][T11427] ? __virt_addr_valid+0x45f/0x530 [ 209.539688][T11427] ? __phys_addr_symbol+0x2f/0x70 [ 209.544712][T11427] ? __check_object_size+0x47a/0x730 [ 209.549999][T11427] netlink_sendmsg+0x8e4/0xcb0 [ 209.554773][T11427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.560062][T11427] ? aa_sock_msg_perm+0x91/0x160 [ 209.565003][T11427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.570284][T11427] __sock_sendmsg+0x221/0x270 [ 209.574978][T11427] ____sys_sendmsg+0x52a/0x7e0 [ 209.579749][T11427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.585032][T11427] ? __fget_files+0x2a/0x410 [ 209.589624][T11427] ? __fget_files+0x2a/0x410 [ 209.594307][T11427] __sys_sendmsg+0x269/0x350 [ 209.598956][T11427] ? __pfx_lock_release+0x10/0x10 [ 209.603986][T11427] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.609105][T11427] ? __pfx_vfs_write+0x10/0x10 [ 209.613971][T11427] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.620297][T11427] ? do_syscall_64+0x100/0x230 [ 209.625066][T11427] ? do_syscall_64+0xb6/0x230 [ 209.629748][T11427] do_syscall_64+0xf3/0x230 [ 209.634250][T11427] ? clear_bhb_loop+0x35/0x90 [ 209.638930][T11427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.645087][T11427] RIP: 0033:0x7f9713f85d29 [ 209.649503][T11427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.669108][T11427] RSP: 002b:00007f9714e1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.677524][T11427] RAX: ffffffffffffffda RBX: 00007f9714175fa0 RCX: 00007f9713f85d29 [ 209.685578][T11427] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 209.693568][T11427] RBP: 00007f9714e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 209.701538][T11427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.709526][T11427] R13: 0000000000000000 R14: 00007f9714175fa0 R15: 00007ffe91732d38 [ 209.717537][T11427] [ 209.904476][T11433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1493'. [ 209.928748][T11437] sctp: [Deprecated]: syz.0.1495 (pid 11437) Use of int in maxseg socket option. [ 209.928748][T11437] Use struct sctp_assoc_value instead [ 209.955237][T11436] sctp: [Deprecated]: syz.0.1495 (pid 11436) Use of int in maxseg socket option. [ 209.955237][T11436] Use struct sctp_assoc_value instead [ 209.979183][T11441] sctp: [Deprecated]: syz.4.1494 (pid 11441) Use of int in max_burst socket option deprecated. [ 209.979183][T11441] Use struct sctp_assoc_value instead [ 210.317373][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 210.530079][T11467] RDS: rds_bind could not find a transport for ::4000:20:0:0, load rds_tcp or rds_rdma? [ 210.842439][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1502'. [ 210.885904][T11476] FAULT_INJECTION: forcing a failure. [ 210.885904][T11476] name failslab, interval 1, probability 0, space 0, times 0 [ 210.900484][T11476] CPU: 0 UID: 0 PID: 11476 Comm: syz.2.1502 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 210.911290][T11476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 210.921373][T11476] Call Trace: [ 210.924669][T11476] [ 210.927616][T11476] dump_stack_lvl+0x241/0x360 [ 210.932330][T11476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.937568][T11476] ? __pfx__printk+0x10/0x10 [ 210.942199][T11476] ? __kmalloc_cache_noprof+0x48/0x390 [ 210.947718][T11476] ? __pfx___might_resched+0x10/0x10 [ 210.953135][T11476] should_fail_ex+0x3b0/0x4e0 [ 210.957854][T11476] should_failslab+0xac/0x100 [ 210.962568][T11476] __kmalloc_cache_noprof+0x70/0x390 [ 210.968228][T11476] ? alloc_netdev_mqs+0xbc6/0x1080 [ 210.973380][T11476] ? __xdp_rxq_info_reg+0x141/0x230 [ 210.978631][T11476] alloc_netdev_mqs+0xbc6/0x1080 [ 210.983614][T11476] rtnl_create_link+0x2f9/0xc20 [ 210.988503][T11476] rtnl_newlink_create+0x210/0xa40 [ 210.993655][T11476] ? __pfx___mutex_lock+0x10/0x10 [ 210.998711][T11476] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 211.004382][T11476] ? ns_capable+0x8a/0xf0 [ 211.008768][T11476] rtnl_newlink+0x1c7e/0x2210 [ 211.013493][T11476] ? __pfx_rtnl_newlink+0x10/0x10 [ 211.018548][T11476] ? __netlink_deliver_tap+0x56b/0x7f0 [ 211.024043][T11476] ? __pfx_validate_chain+0x10/0x10 [ 211.029273][T11476] ? __sock_sendmsg+0x221/0x270 [ 211.034152][T11476] ? ____sys_sendmsg+0x52a/0x7e0 [ 211.039124][T11476] ? __sys_sendmsg+0x269/0x350 [ 211.044008][T11476] ? do_syscall_64+0xf3/0x230 [ 211.048716][T11476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.054842][T11476] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 211.060882][T11476] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.067288][T11476] ? mark_lock+0x9a/0x360 [ 211.071655][T11476] ? __lock_acquire+0x1397/0x2100 [ 211.076745][T11476] ? __pfx_lock_release+0x10/0x10 [ 211.081833][T11476] ? __pfx_rtnl_newlink+0x10/0x10 [ 211.086908][T11476] rtnetlink_rcv_msg+0x791/0xcf0 [ 211.091888][T11476] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 211.097107][T11476] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 211.102615][T11476] ? ref_tracker_free+0x643/0x7e0 [ 211.107779][T11476] netlink_rcv_skb+0x1e3/0x430 [ 211.112587][T11476] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 211.118091][T11476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.123439][T11476] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.128678][T11476] netlink_unicast+0x7f6/0x990 [ 211.133469][T11476] ? __pfx_netlink_unicast+0x10/0x10 [ 211.138774][T11476] ? __virt_addr_valid+0x45f/0x530 [ 211.143924][T11476] ? __phys_addr_symbol+0x2f/0x70 [ 211.148982][T11476] ? __check_object_size+0x47a/0x730 [ 211.154314][T11476] netlink_sendmsg+0x8e4/0xcb0 [ 211.159117][T11476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.164450][T11476] ? aa_sock_msg_perm+0x91/0x160 [ 211.169429][T11476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.174741][T11476] __sock_sendmsg+0x221/0x270 [ 211.179461][T11476] ____sys_sendmsg+0x52a/0x7e0 [ 211.184247][T11476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.189544][T11476] ? __fget_files+0x2a/0x410 [ 211.194185][T11476] ? __fget_files+0x2a/0x410 [ 211.198803][T11476] __sys_sendmsg+0x269/0x350 [ 211.203424][T11476] ? __pfx_lock_release+0x10/0x10 [ 211.208476][T11476] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.213639][T11476] ? __pfx_vfs_write+0x10/0x10 [ 211.218464][T11476] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.224825][T11476] ? do_syscall_64+0x100/0x230 [ 211.229666][T11476] ? do_syscall_64+0xb6/0x230 [ 211.234371][T11476] do_syscall_64+0xf3/0x230 [ 211.238882][T11476] ? clear_bhb_loop+0x35/0x90 [ 211.243561][T11476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.249469][T11476] RIP: 0033:0x7f9713f85d29 [ 211.253901][T11476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.273521][T11476] RSP: 002b:00007f9714e1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.281976][T11476] RAX: ffffffffffffffda RBX: 00007f9714175fa0 RCX: 00007f9713f85d29 [ 211.289977][T11476] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 211.298422][T11476] RBP: 00007f9714e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 211.306423][T11476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.314439][T11476] R13: 0000000000000000 R14: 00007f9714175fa0 R15: 00007ffe91732d38 [ 211.322518][T11476] [ 211.488228][T11492] netlink: 'syz.4.1509': attribute type 1 has an invalid length. [ 211.496610][T11495] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1508'. [ 211.505803][T11492] netlink: 'syz.4.1509': attribute type 1 has an invalid length. [ 211.522407][T11495] batadv_slave_1: entered promiscuous mode [ 211.539980][T11497] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.549069][T11497] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.558059][T11497] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.566802][T11497] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.901816][T11520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1509'. [ 212.189882][T11538] Unsupported ieee802154 address type: 0 [ 212.928097][T11557] netlink: 'syz.4.1523': attribute type 1 has an invalid length. [ 212.983717][T11557] bond2: entered promiscuous mode [ 212.990912][T11557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.020836][T11564] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.047692][T11572] netlink: 'syz.2.1526': attribute type 10 has an invalid length. [ 213.056215][T11564] bond2: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 213.078667][T11564] bond2: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 213.104868][T11564] bond2: (slave ip6gre2): making interface the new active one [ 213.113041][T11564] ip6gre2: entered promiscuous mode [ 213.123946][T11564] bond2: (slave ip6gre2): Enslaving as an active interface with an up link [ 213.672224][T11600] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 213.876921][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 213.902006][T11610] netlink: 'syz.2.1535': attribute type 7 has an invalid length. [ 213.910708][T11610] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1535'. [ 215.049458][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 215.870105][T11608] FAULT_INJECTION: forcing a failure. [ 215.870105][T11608] name failslab, interval 1, probability 0, space 0, times 0 [ 215.883190][T11608] CPU: 0 UID: 0 PID: 11608 Comm: syz.1.1534 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 215.893960][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 215.904017][T11608] Call Trace: [ 215.907296][T11608] [ 215.910230][T11608] dump_stack_lvl+0x241/0x360 [ 215.914915][T11608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.920126][T11608] ? __pfx__printk+0x10/0x10 [ 215.924740][T11608] ? __kmalloc_cache_noprof+0x48/0x390 [ 215.930199][T11608] ? __pfx___might_resched+0x10/0x10 [ 215.935477][T11608] ? dev_prep_valid_name+0x916/0xa40 [ 215.940775][T11608] should_fail_ex+0x3b0/0x4e0 [ 215.945461][T11608] should_failslab+0xac/0x100 [ 215.950145][T11608] __kmalloc_cache_noprof+0x70/0x390 [ 215.955430][T11608] ? register_netdevice+0x59c/0x1b10 [ 215.960725][T11608] register_netdevice+0x59c/0x1b10 [ 215.965843][T11608] ? __pfx__get_random_bytes+0x10/0x10 [ 215.971304][T11608] ? __pfx_register_netdevice+0x10/0x10 [ 215.976847][T11608] ? dev_addr_mod+0xbd/0x330 [ 215.981437][T11608] ? __asan_memset+0x23/0x50 [ 215.986027][T11608] team_newlink+0x10a/0x170 [ 215.990531][T11608] ? __pfx_team_newlink+0x10/0x10 [ 215.995631][T11608] ? rtnl_create_link+0x91c/0xc20 [ 216.000678][T11608] ? __pfx_team_newlink+0x10/0x10 [ 216.005727][T11608] rtnl_newlink_create+0x2ee/0xa40 [ 216.010854][T11608] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 216.016499][T11608] ? ns_capable+0x8a/0xf0 [ 216.020839][T11608] rtnl_newlink+0x1c7e/0x2210 [ 216.025526][T11608] ? __pfx_rtnl_newlink+0x10/0x10 [ 216.030631][T11608] ? __netlink_deliver_tap+0x56b/0x7f0 [ 216.036088][T11608] ? __pfx_validate_chain+0x10/0x10 [ 216.041286][T11608] ? __sock_sendmsg+0x221/0x270 [ 216.046129][T11608] ? ____sys_sendmsg+0x52a/0x7e0 [ 216.051066][T11608] ? __sys_sendmsg+0x269/0x350 [ 216.055822][T11608] ? do_syscall_64+0xf3/0x230 [ 216.060497][T11608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.066594][T11608] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 216.072575][T11608] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.078904][T11608] ? mark_lock+0x9a/0x360 [ 216.083238][T11608] ? __lock_acquire+0x1397/0x2100 [ 216.088283][T11608] ? __pfx_lock_release+0x10/0x10 [ 216.093319][T11608] ? __pfx_rtnl_newlink+0x10/0x10 [ 216.098366][T11608] rtnetlink_rcv_msg+0x791/0xcf0 [ 216.103304][T11608] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 216.108419][T11608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.113901][T11608] ? ref_tracker_free+0x643/0x7e0 [ 216.118950][T11608] netlink_rcv_skb+0x1e3/0x430 [ 216.123736][T11608] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 216.129211][T11608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.134515][T11608] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.139716][T11608] netlink_unicast+0x7f6/0x990 [ 216.144488][T11608] ? __pfx_netlink_unicast+0x10/0x10 [ 216.149775][T11608] ? __virt_addr_valid+0x45f/0x530 [ 216.154898][T11608] ? __phys_addr_symbol+0x2f/0x70 [ 216.159920][T11608] ? __check_object_size+0x47a/0x730 [ 216.165212][T11608] netlink_sendmsg+0x8e4/0xcb0 [ 216.169984][T11608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.175269][T11608] ? aa_sock_msg_perm+0x91/0x160 [ 216.180210][T11608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.185493][T11608] __sock_sendmsg+0x221/0x270 [ 216.190164][T11608] ____sys_sendmsg+0x52a/0x7e0 [ 216.194933][T11608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.200215][T11608] ? __fget_files+0x2a/0x410 [ 216.204807][T11608] ? __fget_files+0x2a/0x410 [ 216.209401][T11608] __sys_sendmsg+0x269/0x350 [ 216.214004][T11608] ? __pfx_lock_release+0x10/0x10 [ 216.219032][T11608] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.224153][T11608] ? __pfx_vfs_write+0x10/0x10 [ 216.228930][T11608] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.235258][T11608] ? do_syscall_64+0x100/0x230 [ 216.240024][T11608] ? do_syscall_64+0xb6/0x230 [ 216.244704][T11608] do_syscall_64+0xf3/0x230 [ 216.249207][T11608] ? clear_bhb_loop+0x35/0x90 [ 216.253882][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.259783][T11608] RIP: 0033:0x7f9650985d29 [ 216.264197][T11608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.283887][T11608] RSP: 002b:00007f965180d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.292298][T11608] RAX: ffffffffffffffda RBX: 00007f9650b75fa0 RCX: 00007f9650985d29 [ 216.300266][T11608] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 216.308235][T11608] RBP: 00007f965180d090 R08: 0000000000000000 R09: 0000000000000000 [ 216.316459][T11608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.324433][T11608] R13: 0000000000000000 R14: 00007f9650b75fa0 R15: 00007ffecfe8f8f8 [ 216.332416][T11608] [ 216.572493][T11639] nbd: illegal input index -1 [ 216.875695][T11661] netlink: 'syz.1.1553': attribute type 3 has an invalid length. [ 216.889920][T11662] syz.0.1554[11662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.890036][T11662] syz.0.1554[11662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.902437][T11661] netlink: 'syz.1.1553': attribute type 3 has an invalid length. [ 216.913831][T11662] syz.0.1554[11662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.256824][T11682] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1558'. [ 217.306216][T11684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1560'. [ 217.442556][T11694] syzkaller1: entered promiscuous mode [ 217.455361][T11694] syzkaller1: entered allmulticast mode [ 217.747237][T11684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1560'. [ 218.011683][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 218.037266][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1568'. [ 218.160894][T11731] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.301140][T11739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 218.535602][T11751] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 218.698340][T11757] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1578'. [ 218.864180][T11767] tipc: Enabling of bearer rejected, failed to enable media [ 219.045521][T11774] team0: No ports can be present during mode change [ 219.612392][T11797] lo: entered allmulticast mode [ 219.625272][T11799] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.682685][T11799] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.713615][T11805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1588'. [ 219.743670][T11805] netlink: 'syz.3.1588': attribute type 7 has an invalid length. [ 219.766199][T11799] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.777696][T11805] netlink: 'syz.3.1588': attribute type 8 has an invalid length. [ 219.807493][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1588'. [ 219.821530][T11805] syz_tun: entered promiscuous mode [ 219.833762][T11805] syz_tun: left promiscuous mode [ 219.852985][T11799] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.949128][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 220.002574][T11799] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.053143][T11799] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.085837][T11799] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.137097][T11826] netlink: 'syz.0.1592': attribute type 1 has an invalid length. [ 220.148709][T11799] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.179557][T11832] syz.4.1595 uses old SIOCAX25GETINFO [ 220.267005][T11834] 8021q: adding VLAN 0 to HW filter on device bond8 [ 220.288712][T11834] bond7: (slave bond8): making interface the new active one [ 220.307783][T11834] bond7: (slave bond8): Enslaving as an active interface with an up link [ 220.349100][T11844] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.449465][T11844] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.516640][T11854] netlink: 'syz.2.1599': attribute type 3 has an invalid length. [ 220.572744][T11858] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode active-backup(1) [ 220.605720][T11844] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.622370][T11858] netlink: 'syz.4.1598': attribute type 9 has an invalid length. [ 220.702816][T11844] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.796247][T11861] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 220.974629][T11868] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 221.045748][T11868] 8021q: adding VLAN 0 to HW filter on device bond9 [ 221.062331][T11870] bond9: (slave ip6gretap3): making interface the new active one [ 221.072135][T11870] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 221.083425][T11870] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 221.092981][T11870] bond9: (slave ip6gretap3): Enslaving as an active interface with an up link [ 221.109419][ T5905] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 221.130596][ T25] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 221.224827][T11875] syzkaller1: entered promiscuous mode [ 221.238488][T11875] syzkaller1: entered allmulticast mode [ 221.246348][T11878] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20002 [ 221.487927][ T35] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 222.139521][ T5905] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 222.167709][ T25] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 222.573669][T11906] bridge0: port 1(gretap0) entered blocking state [ 222.581150][T11906] bridge0: port 1(gretap0) entered disabled state [ 222.607761][T11906] gretap0: entered allmulticast mode [ 222.629898][T11906] gretap0: entered promiscuous mode [ 222.669250][ T63] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 222.694699][ T63] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 222.706958][T11908] gretap0: left allmulticast mode [ 222.721171][T11908] gretap0: left promiscuous mode [ 222.728927][T11908] bridge0: port 1(gretap0) entered disabled state [ 222.857882][T11910] __nla_validate_parse: 10 callbacks suppressed [ 222.857903][T11910] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1617'. [ 222.986290][T11921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1618'. [ 222.997544][ T9] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 223.012107][T11921] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1618'. [ 223.313863][T11844] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.343926][T11844] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.374797][T11844] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.423724][T11844] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.505101][T11940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'. [ 223.583509][T11940] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1625'. [ 223.654354][T11937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 223.854896][T11962] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 223.926864][T11960] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 223.976767][T11962] ip6_vti0: entered promiscuous mode [ 224.082684][T11972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1633'. [ 224.215762][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1635'. [ 224.241732][T11976] bond0: left promiscuous mode [ 224.246910][T11976] veth5: left promiscuous mode [ 224.329640][ T5905] bond0: (slave veth5): link status definitely down, disabling slave [ 224.343035][ T5905] bond0: now running without any active interface! [ 224.456874][ T5846] Bluetooth: hci4: link tx timeout [ 224.464882][ T5846] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 224.720850][T11999] netlink: 'syz.0.1637': attribute type 1 has an invalid length. [ 224.737789][T11999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1637'. [ 224.778779][T11999] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1637'. [ 224.902695][T12005] bridge0: port 1(ip6gretap0) entered disabled state [ 224.914788][T12005] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 224.944064][T11993] batadv0: entered promiscuous mode [ 225.238438][T12022] bond10 (unregistering): Released all slaves [ 225.657279][T12047] netlink: 'syz.3.1655': attribute type 2 has an invalid length. [ 226.494107][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 226.608680][ T748] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 226.608702][ T748] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 226.647627][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 226.722474][T12097] batadv_slave_1: entered promiscuous mode [ 226.764307][ T9122] ------------[ cut here ]------------ [ 226.769912][ T9122] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 226.769993][ T9122] WARNING: CPU: 1 PID: 9122 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 [ 226.785294][ T9122] Modules linked in: [ 226.789257][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 226.800228][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 226.810778][ T9122] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 226.816197][ T9122] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef 33 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 cc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 226.835968][ T9122] RSP: 0018:ffffc9001c53f920 EFLAGS: 00010246 [ 226.842132][ T9122] RAX: 28fc964301a00d00 RBX: ffff88802f92acb0 RCX: ffff888024c45a00 [ 226.850185][ T9122] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 226.858214][ T9122] RBP: ffffc9001c53fab0 R08: ffffffff81602ac2 R09: fffffbfff1cfa210 [ 226.866223][ T9122] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 226.874302][ T9122] R13: 0000000000000000 R14: 1ffff920038a7f38 R15: dffffc0000000000 [ 226.882338][ T9122] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 226.891735][ T9122] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.898469][ T9122] CR2: 00007f119bb48178 CR3: 000000005cccc000 CR4: 00000000003526f0 [ 226.906511][ T9122] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.914565][ T9122] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.922699][ T9122] Call Trace: [ 226.926085][ T9122] [ 226.929176][ T9122] ? __warn+0x165/0x4d0 [ 226.933888][ T9122] ? __mutex_lock+0xdac/0xee0 [ 226.938640][ T9122] ? report_bug+0x2b3/0x500 [ 226.943195][ T9122] ? __mutex_lock+0xdac/0xee0 [ 226.947952][ T9122] ? handle_bug+0x60/0x90 [ 226.952319][ T9122] ? exc_invalid_op+0x1a/0x50 [ 226.957171][ T9122] ? asm_exc_invalid_op+0x1a/0x20 [ 226.962309][ T9122] ? __warn_printk+0x292/0x360 [ 226.967173][ T9122] ? __mutex_lock+0xdac/0xee0 [ 226.971897][ T9122] ? free_netdev+0x2d9/0x610 [ 226.976543][ T9122] ? __pfx___mutex_lock+0x10/0x10 [ 226.981642][ T9122] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 226.986965][ T9122] ? dev_addr_check+0x6f/0x240 [ 226.991882][ T9122] ? dev_addr_flush+0x192/0x210 [ 226.996762][ T9122] free_netdev+0x2d9/0x610 [ 227.001251][ T9122] netdev_run_todo+0xf21/0x10d0 [ 227.006139][ T9122] ? __pfx_netdev_run_todo+0x10/0x10 [ 227.011511][ T9122] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 227.017922][ T9122] ? down_write+0x18c/0x220 [ 227.022574][ T9122] ? __pfx_down_write+0x10/0x10 [ 227.027510][ T9122] bnep_session+0x2e3c/0x3030 [ 227.032226][ T9122] ? __pfx_bnep_session+0x10/0x10 [ 227.037333][ T9122] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 227.043696][ T9122] ? __pfx_woken_wake_function+0x10/0x10 [ 227.049480][ T9122] ? __kthread_parkme+0x169/0x1d0 [ 227.054542][ T9122] ? __pfx_bnep_session+0x10/0x10 [ 227.059644][ T9122] kthread+0x2f0/0x390 [ 227.063752][ T9122] ? __pfx_bnep_session+0x10/0x10 [ 227.068849][ T9122] ? __pfx_kthread+0x10/0x10 [ 227.073476][ T9122] ret_from_fork+0x4b/0x80 [ 227.078077][ T9122] ? __pfx_kthread+0x10/0x10 [ 227.082702][ T9122] ret_from_fork_asm+0x1a/0x30 [ 227.087552][ T9122] [ 227.090596][ T9122] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 227.097937][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01150-g7d2eba0f83a5 #0 [ 227.108812][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 227.118975][ T9122] Call Trace: [ 227.122273][ T9122] [ 227.125231][ T9122] dump_stack_lvl+0x241/0x360 [ 227.129944][ T9122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.135185][ T9122] ? __pfx__printk+0x10/0x10 [ 227.139891][ T9122] ? _printk+0xd5/0x120 [ 227.144049][ T9122] ? __init_begin+0x41000/0x41000 [ 227.149113][ T9122] ? vscnprintf+0x5d/0x90 [ 227.153475][ T9122] panic+0x349/0x880 [ 227.157393][ T9122] ? __warn+0x174/0x4d0 [ 227.161558][ T9122] ? __pfx_panic+0x10/0x10 [ 227.166023][ T9122] ? ret_from_fork_asm+0x1a/0x30 [ 227.170972][ T9122] __warn+0x344/0x4d0 [ 227.174961][ T9122] ? __mutex_lock+0xdac/0xee0 [ 227.179650][ T9122] report_bug+0x2b3/0x500 [ 227.183997][ T9122] ? __mutex_lock+0xdac/0xee0 [ 227.188706][ T9122] handle_bug+0x60/0x90 [ 227.192861][ T9122] exc_invalid_op+0x1a/0x50 [ 227.197376][ T9122] asm_exc_invalid_op+0x1a/0x20 [ 227.202251][ T9122] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 227.207543][ T9122] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef 33 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 cc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 227.227148][ T9122] RSP: 0018:ffffc9001c53f920 EFLAGS: 00010246 [ 227.233213][ T9122] RAX: 28fc964301a00d00 RBX: ffff88802f92acb0 RCX: ffff888024c45a00 [ 227.241178][ T9122] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 227.249156][ T9122] RBP: ffffc9001c53fab0 R08: ffffffff81602ac2 R09: fffffbfff1cfa210 [ 227.257122][ T9122] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 0000000000000000 [ 227.265092][ T9122] R13: 0000000000000000 R14: 1ffff920038a7f38 R15: dffffc0000000000 [ 227.273233][ T9122] ? __warn_printk+0x292/0x360 [ 227.278093][ T9122] ? free_netdev+0x2d9/0x610 [ 227.282684][ T9122] ? __pfx___mutex_lock+0x10/0x10 [ 227.287711][ T9122] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 227.292992][ T9122] ? dev_addr_check+0x6f/0x240 [ 227.297750][ T9122] ? dev_addr_flush+0x192/0x210 [ 227.302600][ T9122] free_netdev+0x2d9/0x610 [ 227.307043][ T9122] netdev_run_todo+0xf21/0x10d0 [ 227.311892][ T9122] ? __pfx_netdev_run_todo+0x10/0x10 [ 227.317174][ T9122] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 227.323408][ T9122] ? down_write+0x18c/0x220 [ 227.327917][ T9122] ? __pfx_down_write+0x10/0x10 [ 227.332767][ T9122] bnep_session+0x2e3c/0x3030 [ 227.337447][ T9122] ? __pfx_bnep_session+0x10/0x10 [ 227.342484][ T9122] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 227.348811][ T9122] ? __pfx_woken_wake_function+0x10/0x10 [ 227.354442][ T9122] ? __kthread_parkme+0x169/0x1d0 [ 227.359458][ T9122] ? __pfx_bnep_session+0x10/0x10 [ 227.364483][ T9122] kthread+0x2f0/0x390 [ 227.368560][ T9122] ? __pfx_bnep_session+0x10/0x10 [ 227.373577][ T9122] ? __pfx_kthread+0x10/0x10 [ 227.378249][ T9122] ret_from_fork+0x4b/0x80 [ 227.382672][ T9122] ? __pfx_kthread+0x10/0x10 [ 227.387342][ T9122] ret_from_fork_asm+0x1a/0x30 [ 227.392103][ T9122] [ 227.395604][ T9122] Kernel Offset: disabled [ 227.399967][ T9122] Rebooting in 86400 seconds..