last executing test programs: 4.803352535s ago: executing program 3 (id=2634): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)={0x48, r2, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e7d9e838196f61c9b54c9c6b8bd5d48"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x48}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@ptr={0xe, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0, 0x61, 0x0, 0x61, 0x61]}}, &(0x7f0000000000)=""/254, 0x2b, 0xfe, 0x9, 0x1000}, 0x28) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000003b0007a737e41bcac743098701"], 0x2c}}, 0xc000) 4.448332046s ago: executing program 3 (id=2636): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) r1 = accept(r0, &(0x7f0000000040)=@hci, &(0x7f0000000100)=0x80) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000440)={0x89, 0x2a, '\x00', [@ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @ra={0x5, 0x2, 0x5}, @jumbo, @jumbo={0xc2, 0x4, 0x4}, @pad1, @generic={0x7, 0xc5, "12365aa0dd384e1f673a8265255cbde1024d2be8ed586d87946aa4d184958f4180b74ea81443cfaf33d6ee89de8ab9e9223ca4eefeb11e86e280bd0ef5c24e6778cdec3f4562565116ad91285f91a09278f5d30a2c90e807ed3441f90f3c1b3b7485b4d91b439b6b7f21a2c6ae70056de4abec384b00a06c3040b5ed7b53d5e36a2483cf94b559b14b00b90710a28c38ee449e87ec736a7d719f518dd3ee239f938e6a3aac4b65059f3a8504dc259d377060f482c427dae02b1714a4601494e44f222c3541"}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x80, 0x4a, "1026e71b1c69d717a130860fc8824e5875a8197a4f7ee72c18aca3341678f1dd3ba4661956c814aaf90fb8069d9d1cc15438bfd9f7cdae3472a2e5a59d6d9708a86702a19ac45aada60c"}, @generic={0x81, 0xf, "d8d53bdbc804c0b4e7c67e15633f40"}]}, 0x160) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x4d, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000280)=""/33, &(0x7f0000000240)=0x21) 4.315118077s ago: executing program 1 (id=2639): unshare(0x69a04c8e98d914be) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x50}}, 0x20000000) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000400)=""/32, 0x20}, {0x0}, {0x0}, {0x0}], 0x5}, 0x400}], 0x1, 0x42, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, 0x0, 0x4000000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r3) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000427bd7000fbdbdf250400000005002100010000ffe7000700030000000600020001000000080009000400000008000a0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8042}, 0x4004000) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000940), 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) listen(r9, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0xac, r10, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0xcea8}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x7f}]}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @NL80211_ATTR_MESH_SETUP={0x24, 0x70, [@NL80211_MESH_SETUP_IE={0x1e, 0x3, "c99f3182366959ded84fb7a5c6c302df609040b6be5045609f8d"}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xf}, @NL80211_ATTR_BSS_BASIC_RATES={0x1b, 0x24, [{0x30}, {0x1b, 0x1}, {0x60}, {0x4, 0x1}, {0x9}, {0x9}, {0x12, 0x1}, {0x60}, {0x16}, {0x24, 0x1}, {0x48, 0x1}, {0x60, 0x1}, {0x7c7600ddfdbb791d}, {0xb, 0x1}, {0x24, 0x1}, {0x60}, {0x16, 0x1}, {0xb}, {0x18}, {0x4, 0x1}, {0xc}, {0x4, 0x1}, {0x12, 0x1}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x1b4, 0x10, 0x1, 0x0, 0xfffffffd, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xd765}, @TCA_STAB={0x188, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x3, 0x75ef, 0x9, 0x2, 0x9, 0x200, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x3, 0xff, 0xf, 0x6, 0x1, 0xd, 0x1, 0x8}}, {0x14, 0x2, [0x40, 0x659, 0x1ff, 0xc, 0x3, 0x0, 0xe, 0xcd]}}, {{0x1c, 0x1, {0x2, 0x8, 0xa577, 0x1, 0x0, 0x6, 0xac6, 0x7}}, {0x12, 0x2, [0x7f, 0xd, 0x7, 0x4, 0x5, 0x4, 0xfff8]}}, {{0x1c, 0x1, {0x8, 0x2d, 0x8, 0xbb5, 0x1, 0xfffff2dc, 0x3, 0x2}}, {0x8, 0x2, [0x2, 0x8]}}, {{0x1c, 0x1, {0x0, 0xe, 0x100, 0x800, 0x1, 0xa9, 0x0, 0x1}}, {0x6, 0x2, [0xe]}}, {{0x1c, 0x1, {0x80, 0xb3, 0x6, 0x2, 0x0, 0x1, 0x2, 0x3}}, {0xa, 0x2, [0x6, 0x7f, 0x7]}}, {{0x1c, 0x1, {0x8, 0x40, 0x800, 0x3, 0x0, 0x6, 0x0, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x2, 0xaf, 0x1, 0xffff, 0x2, 0xc9, 0x0, 0x1}}, {0x6, 0x2, [0x401]}}, {{0x1c, 0x1, {0x2, 0x9, 0xc4, 0x9, 0x2, 0x5, 0x7, 0x3}}, {0xa, 0x2, [0xe, 0x663f, 0x4]}}, {{0x1c, 0x1, {0x5, 0xf, 0x5, 0x0, 0x1, 0x5, 0xfffffffe}}, {0x4}}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x280400c5}, 0x0) 4.243942927s ago: executing program 3 (id=2640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendfile(r0, r0, &(0x7f0000000080)=0x8, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_SEQ={0xd, 0xa, "57d2a1ab8176bc04f9"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dbadc6a622"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f29ec6d1f3ce36d566cf570b4a"}]]}, 0x50}, 0x1, 0x0, 0x0, 0x404c000}, 0x4) r4 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) r5 = accept4$netrom(r4, &(0x7f0000000280)={{0x3, @bcast}, [@netrom, @remote, @remote, @remote, @null, @bcast, @null, @null]}, &(0x7f0000000300)=0x48, 0x80000) r6 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) shutdown(r6, 0x0) r7 = socket$inet6(0xa, 0x2, 0xfffffffc) setsockopt$inet6_int(r7, 0x29, 0x24, &(0x7f0000000380)=0x6b, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r8 = accept4$rose(0xffffffffffffffff, &(0x7f00000003c0)=@short={0xb, @dev, @netrom, 0x1, @bcast}, &(0x7f0000000400)=0x1c, 0x0) connect$rose(r8, &(0x7f0000000440)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000480)=0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000004c0)=r9) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000500)={'icmp6\x00'}, &(0x7f0000000540)=0x1e) shutdown(r5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000640)={r7, r7, 0x6, 0xb2, &(0x7f0000000580)="4825ef78c981a5836bdd11d29152ef46d17471640702530a1d4b02aa1d24da94e5dec566ee8f165d31eeccfc32572995dc250f01a17f2dfed8a7b7b76d87af0ba6e0c748fb02f19aef9d687b7f7f254aa4c6b3d8877e2eee745f185db4aaecc18d431e8daaae4669f6e1c1ea6a3abd10822fc3292257bac6ac398e4b171a9977fee9d4d051ec1f0b24c59e833448bc2fc0b6b8a5ec30f5e66d86daac5164b66a774038c7d954243d6d0553102d933a076749", 0x9, 0x5, 0xac5, 0xffff, 0x8, 0x2, 0x80000001, 'syz1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x400800, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x30}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6gre0\x00', r1, 0x4, 0xd5, 0x40, 0x8, 0x40, @local, @local, 0x7, 0x1, 0x5, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000007c0)=@raw=[@exit, @map_fd={0x18, 0x4, 0x1, 0x0, r10}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000840)='GPL\x00', 0x3, 0xfa, &(0x7f0000000880)=""/250, 0x40f00, 0x75, '\x00', r11, @xdp=0x25, r7, 0x8, &(0x7f0000000a40)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0xb, 0x0, 0xd64}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000ac0)=[{0x4, 0x2, 0x5, 0x5}], 0x10, 0x40}, 0x94) r12 = accept4$inet(r6, &(0x7f0000000bc0)={0x2, 0x0, @private}, &(0x7f0000000c00)=0x10, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r12, 0x8983, &(0x7f0000000c40)) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000c80), 0x8) setsockopt$XDP_TX_RING(r13, 0x11b, 0x3, &(0x7f0000000cc0)=0x201, 0x4) 4.06404676s ago: executing program 3 (id=2643): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x80}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x12, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES64=r0], 0x4c}}, 0x4804) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) sendmmsg(r6, &(0x7f00000009c0)=[{{&(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x1}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001600)="e6a04501c952e322171c81de0ac6bd8b8bc77ed44120c1223ba59643128e9768fb5340951cfadd061dce6760762712f3b595cac9b0aba97951455abb4626954b66edfe69d2de1eed2bd0897b69107ccfeb5f1ad0506dfa82cdd06468c268884d5b5fbcf3e715f6df87839b83e2a0c398621e2c5002cffbf9dab7e4df1b6a0b226c90a07ea941c5f4560d902e6c5ed3545694f8a5071342c698e77cff464213fc0f2ab1f91470f47497014f70d55236fe3a1cbfb6d48a145e64623b0a25dafe7ebf469068c76c2e5850fec7465e984b36e2d8c2dc75a06a6343bf2cd1a41c6e9645a970d4a5f1d3fc33da75599824d0708a22928f482fd587367a23e0ad2727f62157e039f4246f86e45b53f57850a33700f1ca8bec8864a1195ec6f70d08e1a32ab44317df6a8dbdb6ca71d67b6e269538bfff16947720ba80a49daf3b9c16808a1f228df05ce6a94bed3823423d858e7ef34e7950b259515c80efefef88bfc38680b7fa0cda45c019a2da0b3d3cf238b38720749725afd203e9b5c73825a0cec4784ba5b455bcfb6f6f65934dcf9ef97d8c1945b85fcb1702526dd7bc8ad072fe48fe2a07834d864d0b5ec83c9665046f5199a82fc406a02b737795ca54380df003fad3241fd6ab2e5bd1c8107658730d03ef1625985bed985415a31d7f8c43eb47116f3db8b40a23b245c9a84bcb4933f6b954e89dbc88f80d5d527f3aef36656054ac5a2ad6ea9a0c3faee76000a9fd43d5efdce43dc3c9f66195499f3b29cebdfc85876087d475dfe2dd436d15bd2eb85b97ab61d7561c91e1c03a13214211933212d44ce79b34b8c7d00f290dc8b3ebfbcd50af9814802f7b9454d5316b2fc4f417cc34d5716ddd5ef9b5ac144b8a0455f91bcdfd8066afe6ec9ad4a5ed8cf41c3d6f742bcda16a4a2cef4a1955648e42fc515dce0d40ca2aabbae21a04e77cf5eb24d64df6e78ccdd6e8395abbd219184f9802051b56b2742030c4e3c1642c4480bd25a38d24c7f65a358dec9a2b1c53fda21f18b163123bec321c98c504ad819857eb8db1fb29828102f1d4e3d7e4ec18837f7f4df1a0b18c0bbb48db74e4f0cdc5dd125489477d32a4b6392953251628376f883b4dd6176589e6dec0ef8eac9c5c0a3d8dc2903cc02e94d61d0290997226f1c3cb93a1b187f9b2045a679f8c01887e5d0a3192ea79e40b83ab65a3227a42aad41e16579975f736202e209324eff2c0357c70d324f3e5f70c315cf950e0a030d6eecf34d46c01964f3effce1c3463a88bb34bd886615ac16adead8c0bb1b4902fac723e1986c805cba474861c3258380719fb78ee6ce93f7199f835f6469e7d27a977d67cbc5fa8fde03c89132429ddc21ebd31bdb15d23fd964884a0dba56df8a677da8e2e80d65cb01277c208525e1b8820c8a688bcd01616521df339f822028f0468013f0cd364d22bd60ef49cd005cd585068ee2270bfb82d0e8d1f91cb7d3ec700dc4887ddc3292d4ef83a470e1bb7961e9e28dbe25aecc3dfa4d135b7f8d5e1d7345a3fbbd8c1641300d62adbfbe77dd86a59d2c5fc375020f4759f450655188ee46ab3d442e90cb9507ca519956e2a550681d6f7e01d72f58301d42f84fe72d1696d932021daee597fd74127054bceb21117da17547ef65b65c7963affa7452c98c1757c037b71e09ee0fd9c2c63643a0f28afd6cd7e8f70546de1f04c8748760d42421baba05eed4dc27a73ee9586d6cf316873f388e591832ef2265e29cea31d58860311898a64c21050d13a9911c1067e799a2bc03f55741366216c5c524b74606bd6d5fd92470817104619e91cd13fe979668e36eb4325a7f6a2ec5c7fcc7199b3053223e4718e4b453559a205be5b12d57377ef46814b9b5a5fbf7ec9d10bd14473a85f994477fbbcc269f3ff6458364c149eafa6512c8356aa28ed872f6476151ba0701c40edb952b2998f9d95c18921edfe950f22e187eb2e54e24541ba8f68b4b7d0ab1e91df0c11bd468eaf919802693e236a88cba5c804f299ec80390bcade72bb1e835cee45f445303930a57cccf827681e935ae18ad1ba42bbfeaf065fd005ed12b45f462e176dbc5b6d69f23a4e4c0899aeceedf25061bec95b43d1c8b8b2f25601c6e6d77ddaa90155057819f0e1be15951676a07f7dacd82b47cf83443ea0475c87cc4c6d3b67d541b85ea0dc70ce32888ea79437ef90c0988d9f917647cbc0fe684e85b9c0a98d3d7dcfbdb09c7aa8854d34b83ddbd07c94ecdbe832248a6708899efa75e8e0476f5ac7a25b8afa7c8c7e701ebe526d5b00a46509b0e6c986b545c8545c77803df01d87e7d5d3ce7fa9607f85d0f061907ade4866e5172ce3075d299506e5ea00e3699672c2a17baf50f0c79604e79f1dc30ad153da2ba3376a5ef680c4eb707157da0cd1c615c3db12f9fc344c4a5dbf1d9b59510fe233216f0f00fa1f40e597c17f85fe40ee77e295b53476b215e08ec5dafd125b293b6118860f15f89b3070db731de91c36a94ebbc85c21d6251fd599167af41c6b529eb4751412cce2e2e6e753f7a550c3ce109bc969bd98f483dde283fa794b7dcebc804a081a82cc766790caf61285fe2c5d432d5a75e3e28f4dab9503d2ce3a26df6b959e05f2d6ed928212667514f264dfdb1befbf66d23b2bbcd0c59e77591c4185a48eb638a86e3e9bea1dcc98e6d20cac5c3b6a40b8f74caf8ad08c19f9b73f0ef4a5b4df73f51feb8cb4bcded45dad2fa3b8895585afbc0cb5ae0a1a213abf274bad8900f7e60376f956e5f28ad1f463eeb4a1a8b173a0d6ceef2872373203c9cc4caecedbe7f380a7bc4750a5f15603f7fb2e4e0186275251e73ab6109a967475c24533f8a4901f5ddd66507e93c42cbe4f14089188b0aae73dfb5bd8552daaaa0e5067075e507b16e3731c858ae5f995ffe6cc0e9ee096edb3c7ab3ed58270e2f7802b5550f047d5be48c653177d8a6e3c597c4096d2aa6293aec577552e232a04d84f8ce3e55324aef3b38d50bcf5e1351d839faf18d95295aab4b53ac067a8675dfacea77ce31a70a20e468ba4d02c38c6a6c86807cc3a7c941364a6d175fae1f42be94634c97e48812994a23d8d42ade390b0ef890cc675e6e1683c6537cd9d2e7135cd1e17d4570a94149ec73e986a6bdb6d53e6a8db0306ccbb1186392c42101829ef64bd5db5c4fb40b6db6449521c9e2f6c61d1c90da15e7c89f9b32c8d011439026990e8c3aadc31bfea873b0cc62dd315679af1b1b792f4b6fe22233f13007903e08ab7b803111eb36726a7de5a9bc5c67cebd568f35650a6faf5fa8f1f27b2a65f601cecf3b622216b38a558a9960be415cb45e8197202b530039a8335f5acb17245c74bafe56fc510f7804cdbfd6f627dfccd19cb5f052c04320af302006586966cd0f7e66e82c6d58ad16500527eab8900de94bc1fdd020ceed946bb931d30f8d1c34d019240c1eafecf70c4d7bb37f2c9cd5116bc4f730dd22b489fba7d42729b723c8ad845481880278d0300ac6189efdd72cf63b056236bcc4ea2144aaceed0c5a79ced9ec8bde2759682c910759eef8eeacfbdb380c4d00afd3290944e57ee8586ec76bb29b89c6bb5e287c3f60f1f3ff2ddcc16f0e73634c50cbd13d68c61f1d6a34263e819ecd7c4e7c47419d9ae7adf2a3b43227d347255ac3682b84724a71cb89847a6aaf1f028dd21add9f8b04857a20450b995e1faea8ca23b9b0373a8ab399805c6e2ee53af8cc67e5d5b5982c3a6873a9c70bb06d1b3e35cbfde93df413550e9eb269932f0c0119e461c841f98a224430437b781529056a26ff35fbe275a10375a8d7a2b32c2fc29efda5a64711279e76fe51503a8bf51baa08a1677c104a40c0c69ee0849cb3f69951bc4311df03f1206afc1e88487d1a72845a45f7f8115ef542650a492f56b7c5179294c59bb0194703db8c46ac26c10443f1d371013635ff00d077eed8ee2801d5a1e646c6754b32061863999261854e20de3764a86f26ade2f7fa0a0a07a11fa7e6765f8a35f53ea22452ee8dd10b4d9d737643eda6af11f86c6868ff4dba2e38a1032497b3421405ad67ef23d1723176ae073f233d3c43a41d1edc0185fb8a236f425603d2d4e04e9052d66af05c95ee8121186d4c53ba2c21899606c78a9d8aab3fbd39785f7e3e12029511772b7fda63971134ec545af3ddc102be89c3ab83b3848d8995cc5675e28fd60286fad9b34a1a61457813ef8666661dea52eb4379c582f42200ad0103e74e20b4931c50002ecbc178b7206e8908026e9d6067d312823381c9f5e17fb4300975f26129b75233c764decfbc37f6e0d2889417da3030d0d6e4ecc63d76dc339501da70c24f2b9cd5aee44ad9ccba188133d9ad279ded1ea5645ad37488e4afbce43b4eb27ffca440f02e5422710cc97dcb1b2ed8652c8652233fc8eeab6f090c4b81f882afad210961ec0365edaddc68b617a000d3236a9d351bf4ac4ab707597fa7e2b36440427cbc9a2a11568f1c0c9152b241ea30d62f13bc218e7b9d6346e4697ef31f1fc52d0b36bdf2ca1d5d2480772c44bafaeee9113189e7fdb9037c79dcd23373e2ce3e481719f22a755b1d78926a6cc09f4b7654d9c921dafb36c3814c101ee92cb7c9a65930af6f7aa7164a31ce877e28521845f3ccf773da012d2b73f79767190e74a922cd6b9a4756f335a5b4f0176d088ae88c7d46ba89471b5e7dafc1e2e1a85ce73f2d870415bcc831b5d11a240b7ebeb4b2e57b34c8c8a0c9b0f41fbbf82316ad75b9c8b6fdfee8ec3ae313ca128179eca037ab265c891029e1dc231c670ff7636965c7ff8bd6e7e539b9fa68518367cfe727357bf601660b179cee31a16adf45a432a28f32a111537758f25b5ab691f6e28f58b38ae20a9a726dffdf5db71a1cca6b4386e805dc362223ad3bb012f9c4be78d1f877753c4861e96dbb69021e1c4e7dcd9c0ad7ef8dffc86c66e33514322afc0a30cad8317878ff005b51c063e3a12d834e0c74dcda58c6bda9846c75031eb8aeed717d3c27b16d3e51e1cf635d325827eb419b03dbb547a31b1aad9c0e4eff13e17cd73cf5bc909eb3618779d060a06ccd10ff5505a168f34bb8749c8ee7ec3e8afb53dd7cc4d2311a42d740276bd344044ccb373e3a18c7223e2bb4e0a367298cf6f764db4d64aa760de9f658ac6c6f92072f01a441cc1c53fd3df4d439a6dc942320d8c255fc09260537324c1ab0f3ff8477353fa84f3adb4056cf3a1918cb972eff954ca229d8ff0f9bb6b05b1500558d08ad15b94ac32c55bfda49d5b916a28ff4416e3eb4c34a5cc984d5c814667fd4e02b53f862bc9115f6473a10fab8849364478770a33cacb95fe1be6c3c52995cc779843acad9312170e420052fa910b1436936594bd5cd7eb177abb10182bc3a960da353f6283930cad0a4d71a55d0fece04d0bdf8cb85d958e5b3183129993c8a4fdf6019613e0ed7dc43a9828b5803e4809125c0421003821af5bf974ba932019e1f3b4c40697c6b2d33f463572e0569f6bb25c17fe030b2d4e7ae1f0170d3ea2d0a904d8c078e98c272c5e316f8d9228d7f5413befdfc5a152401b0aae250eb529ea360101494b3ebe53195f5bcc82540e633b7fb230e66f444e3e1cfc98617ebc03fc5f3eb80797866f7f63b5cde9d229ef1ec673a2c5d1343afada8a28977d98b18292d24cdb4997bfd0d905c713aeb42e0e6945dfbe53beb6cb389fb25b4b7cee0730e87635b56d43db4ffdd7b5761ebf23a9a36e83b8dbe8b48b691168d898b59f67795e0688626248309fa2", 0x1000}, {&(0x7f0000000340)="f8cb1b1814b5ee72f12a4a650b8de4bf4a91a5faebafd9b00af2271e4616e02c8ce7074b2fe62cb7d712cd087dcd0ced967d369d68c788529ae6e74cd166e395f7c79ae2228dfb85f9c1c5e98b91945abf2d8ec9a8dccb123d6b1f07e5800efe9ab2f00ed8ef869332322b037e82e283ee8476f676298d90d00304ba6363e582770d48a62ebd4eb47c8859a32880f638b0efaea395eb347a7bc1d6ec6b0eae32924ea3c01c576d224c35798428be041746b0e40546811214cfa8c41cbc3624a3f77115f225bf000a43cf0fd14d3b67a93922bb1e4b4cb1f54f4384ab8eabb0169f8b9620e131", 0xe6}], 0x2}}, {{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @private=0xa010100}, 0x4, 0x4, 0x2, 0x2}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000500)="ef41cdce95e6b16098d2b5a51f6a9b83e38fe39527f6b3c093f2719805de513932df918a51e0405742a62d1a8e4183cb5866b6942578037324a2c6cc1dfb243506a6d6e1109352ea87d818832f37d3e77c33f7cfd74b614c6791da270a39353e6f16b4fe2c7267a5ad7ac194da990a98dc0c243b6c4e73f364844a4dba83a764c56564497c1b97b4a4c4156bbd6168a581810090b757e1fca659e3484f3b", 0x9e}, {&(0x7f00000005c0)="a17e9f68ca25e0d0d31d862e4cdf62e2b932901eec34d6e71e51bd4477987b822305ebe93248f45a3dbba43a832948f1bd1b71f278725ff9478bf36643d64c17a374954328f3deab16c615ff413b3418b9e451366e32d16ae4a9f9070f73e6ca136646630af8b73d477749e9aa3b97107321cff34f5b40c0f777fc40ebf1195ea954bf9130f12d654bdec24ced84aac879114db3ac7ab594482dd6b518724936290c2907e79b25df5bbdc6fd301005e0b1612bc361f7067bfe9e8a68dd6895b5eeab343b0344449af2f534fccaa20f952b2c131ea90ddac8133aafe4ba4fdc6217c42dbbfd3cf1004718aa534d1e85acc5a81db3474caa", 0xf7}, {&(0x7f00000006c0)="3e04", 0x2}, {&(0x7f0000000700)="24965d23cf66ffa387c47f5573e8a3ae621f0aab7a2ae082b497bd1db064e4c139e09c4afd864f77f4b024a51eaa54550fb5880bc2cfa1daee0798cc3fbbc9577c43548bf8f0a62f8d93e2655e4ca8f0cea4ba7a9ef88cd1796977f88079b2d9e8d9b2c32025dc5fe111c896181ea3f68c7c8a6108508910ed3cf941cf8ab230e066b8a9209a1aaa6183a256015176d2f2e163cc399b999f636d0aefe41a1bc6458a0ed4118f60af6b1f14729230df0af6ee574e83f2e689685f7e5acc34ce0047ad7ff61275c190d931a4bef403604b259984d32befc4d8360c8bfb134e03d5ee26b67ef35f014f81f62ec9f16885a84219abeaa5bf71", 0xf7}, {&(0x7f0000002600)="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", 0x1000}], 0x5, &(0x7f0000003600)=[{0x90, 0x102, 0x5, "240aeefef650be9afbee63c28321ad21b92f25eeeca6fa30fe8d8c1e212883bc06d26662f49feafd4fc839bfee927d3c2a2aae926043c0e8fdc8b71c9e648d31bbd568fedac3073d6d0ef58c280b7f067cf25dcb5e8dae8d7c858a5bb0633aa6715cbba098e68b6a93733948dc20d18c7b5e1b452df41936ac4c"}, {0xc8, 0x115, 0x1, "131424c7bde3a182e0428db6c3d81207b7202735972db4fd04e91a76267578eca4ae9948382d43c835127c7734ead3d31d1bb645f03bbf723f15a3e091d65fe23a3a9708cd3981d2f6c3ead958654034203fa9efc55ed1774131c8a9ef5ce0f34680d4a48ffc7734c96c2c868e0a3c8232348150c947966c8ccb7fe8eeb2bca318e0b3649a20e206ba42b7c5d32ab16bd77d9af167c2b50d8a092053ce8ad10eb7b9e488761d0ad1f91bc35e58b23aae3d093da3b4"}, {0x88, 0x84, 0x6, "f50c5591cf6a03552b76bbcd1caaf39afe6418a3421db2098e7ce34748989529d9045eed8ef8f718e0600c0a6d8b537f3b53b79d3c70694562ee0baf80ecae7f012ee7d5b56bf83925cdc118fe9178180de0957a65327f9aa17c3a4d2c378c8b5894a204e5b0aa279fc020155fda0cf91b2865"}, {0x1010, 0x111, 0xf, "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"}, {0x90, 0x107, 0x938a, "ac2b638dd36e575839ee380f3d60b01d188e9c05ef6fb96832265866bcf8514e9f1a35f031a21687d3bcb48a36c46f668d70c22c1806c2730063f0f91f13b58728155124277c154fd75acd51610d8715873369302c4e6a8970692652b7d28e5f1e4b31791519022b73d0dd269971b656bbc87d77d6ab196e964033"}, {0x48, 0x10c, 0x5, "c35256d9c85fe98a52c28728152daf07037fd8209ba26928eb9a31df725b27f691ddc4eb2c8b3b6dcaa8fc00c420df2d98ac014ac793711e"}], 0x12c8}}], 0x7a, 0x0) 3.882495224s ago: executing program 3 (id=2647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x5, 0x3, 0xd, 0x2}, {0x49, 0x7, 0xf0, 0x80000000}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0xb8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x3}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}, @TCA_PIE_ALPHA={0x3, 0x4, 0x12}]}}, @TCA_RATE={0x0, 0x5, {0x7, 0x1}}]}, 0xb8}}, 0x0) 3.715903923s ago: executing program 3 (id=2649): pipe(&(0x7f00000017c0)={0xffffffffffffffff}) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000001800), &(0x7f0000001980)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x404140, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) accept$netrom(r1, &(0x7f00000000c0)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @bcast, @rose, @rose, @null]}, &(0x7f0000000140)=0x48) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockname(r5, 0x0, &(0x7f0000000a80)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r3, @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {0x9, 0xa}, {}, {0xfff3, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x2, 0x8, 0xff1, 0x41000, 0xffffffffffffffff, 0x82f, '\x00', r7, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000280), 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000000)={r12, 0xe, 0x80000000, 0x2e8a}, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r9) pipe(0x0) 3.328070336s ago: executing program 1 (id=2658): r0 = socket$kcm(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000040)=0xffffff48, 0x4) 3.126926419s ago: executing program 1 (id=2662): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3f8, 0x200, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040880) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r3, &(0x7f0000009a40)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x40000121, 0x0) r4 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a000100"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x20006880) accept4$nfc_llcp(r4, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x80800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000050000001800018014000200"], 0x44}}, 0x20008000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x9, 0xd, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x0, 0x8, 0x0, 0x7fffffc}}) 2.712165228s ago: executing program 1 (id=2663): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="070000000400000000030000feffffff00000000", @ANYRES32, @ANYBLOB="0100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000400"/28], 0x50) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x216, 0xc, 0x7f}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x1, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xfffb}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8809}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x132}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4040) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f00000001c0)="f25d4b614fbe74f461f0abf50a65b1b9f7538037ffd91f7aa58a89c47a040bfc7f705ef5bab68621dbaa7d19c6a2597ad0572a90d717ce7b6eeedfca6714f87c6e3a5a1dcfeedd3f0d43ceb5d8011c8132369fb5d4fa17975214893212c16451f937909472ad52a680b5733f13b06a7ace3c7f966c51155fd6f65ab991875a3d4671c34c50df5f59945901336f65b1821b195d8c89f6e7f9539f01c565356890e088172afba8f165bdb9e99ce787742fba297a1deedb73341804ce48bb93be62f49d2e6f1270fae19764deaf519b4a399d018af00309f3e579903e2dba8375d3e86d68d1", &(0x7f00000002c0)=""/2}, 0x20) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b700000000000000070000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) unshare(0xc040480) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000004c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 2.6214155s ago: executing program 1 (id=2666): close(0x4) unshare(0x6a040000) unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'wg1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x3, 0x4, 0x3) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc1}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x38}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x40801) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)={0x14, r4, 0x731, 0xfffffffe, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x40c4}, 0x4c840) close(0x4) (async) unshare(0x6a040000) (async) unshare(0x6a040000) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'wg1\x00', 0x400}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) close(0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x3, 0x4, 0x3) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc1}]}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x38}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x10}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x40801) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)={0x14, r4, 0x731, 0xfffffffe, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x40c4}, 0x4c840) (async) 2.521824957s ago: executing program 0 (id=2668): r0 = socket(0x11, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x4}]}, @var={0xb, 0x0, 0x0, 0xe, 0x1}, @enum64={0x4, 0x4, 0x0, 0x13, 0x0, 0x0, [{0x4, 0x5, 0x2}, {0x5, 0x8, 0x3ff}, {0xa, 0x3, 0xe6}, {0x2, 0xa3dc322, 0x6}]}]}}, &(0x7f0000000f40)=""/4089, 0x86, 0xff9, 0x8}, 0x28) (async) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'sit0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@gettfilter={0x4c, 0x2e, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x3, 0x2}, {0xb, 0x8}, {0xb, 0xa}}, [{0x8, 0xb, 0x1000}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0xd}, {0x8, 0xb, 0x4}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x11, r8, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002e40)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x2, 0xfff3}, {}, {0xb, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) bind$llc(r2, &(0x7f00000003c0)={0x1a, 0x307, 0x8, 0x80, 0x0, 0x3d}, 0x10) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x24}, @dev={0xfe, 0x80, '\x00', 0x40}, @empty, 0x8, 0x800, 0x0, 0x500, 0x0, 0x40, r10}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$SEG6(0x0, r0) (async) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x29, 0xe, 0x6, 0x800, 0x67, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x2e, 0x7800, 0xfffffe00, 0xe}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', r12, 0x4, 0x5, 0x0, 0x3, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x86e31bd2a160c898, 0x9}}) 2.328110644s ago: executing program 2 (id=2670): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3a, &(0x7f0000000080)=0xb, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[], 0x1a4}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) unshare(0x62040200) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000001}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x0, 0x400, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="f4010000190001000000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1f4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="b58500", @ANYRES32, @ANYRESOCT=r6], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711238"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) 2.201250126s ago: executing program 4 (id=2672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001500010000000000000000000b"], 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000600), r3) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r4, 0x408, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, &(0x7f0000000400), &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf", 0x0, 0x8000}, 0x50) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) getpeername$packet(r9, 0x0, 0x0) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@deltfilter={0x0, 0x2d, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x8, 0x2}, {0xffff, 0xc}, {0x3, 0x7}}, [@filter_kind_options=@f_cgroup={{}, {0x0, 0x2, [@TCA_CGROUP_ACT={0x0, 0x1, [@m_xt={0x0, 0x15, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x0, 0x2, 0x2}, @TCA_IPT_TABLE={0x0, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x0, 0x3, 0x9}, @TCA_IPT_HOOK={0x0, 0x2, 0x3}, @TCA_IPT_INDEX={0x0, 0x3, 0x7}, @TCA_IPT_HOOK]}, {0x0, 0x6, "ff219336f8060b6a50b109f0f91b94ad1aaca4090882a59baf9b3f6b8aef16466242e035056555b43f7f554a9e7e0afba6ca09083280d7821e4b9ea64aed32143b5b59fb5addc2b528886b8c591b887996dc604bbfcbfe6d4fd82bf550af50f2b826439f17383314653465ebda5516de3b72fb91abb143dc0fa22e3be4a754d45c218c6f5e5dcec12e00d6ce2c3d5905eaa5676a2feac040b35a0cb6c7ac7049260af8588d96426783b6083c183fe19d188867b7a56f53ee94213cf8682fcb33926ed5c16d51049995f1a176bd9d6be6fce6ad2f210a7ca8bd2136c997620221fa918e1f4ebf27d2e94edc2e0d59c17872415c1c984b9c0369ea870605ea633ec5f2b27aa95490945376d78425123e3285f8e7b5dabcaa7adef6a13f9b22acc45e85736530f271f5292e2ed87b00742a7fe24aedd88ab5b367db2e12fcea124610b3859dd1d9dbb34a973f7447c1be43b69760ce3f0542beee93a9f0dc8bf3b4ad7b48d069cdc050a9dc8ac3754f8c656530838ac19bc71e79731c9cce873b51d66a7220af509b6784e36c48d60a3145e65017f04ff42bd29d8729b23207bf3672418a172515316c57c2b6f3b05560b14e81d87c215d6149dd3a8f5bc5b58a013c8b504afb8fcbd474b965ee95b80de9d3dab6b9bad54501b98cf0b523d9d90187c07a90a51ee050b1350fa17f8202f5150519d90fd135083fa5cb6bfe3209fe10dab47a6ef62b36f4935d9a17d1b6dc6111080fa1ec67b57609693994db574fa16abd9d394da5d4eed878a42844dc13e6d9bb14eaf516195332f8e9eaf823c73f7c5b7fbfd3974c728f8e8cf83951bedbaca85099f036a8ca8ac72e26d3ddbd654acd59d54a6f9270f883a20b70380d60528550530e696fece84715b38b96eea8456588ef174f069ecebebb1bd882e21bdf72a5a186d3b9b32289b735091f6ca03f4b72cd12aa535b091383cdbb815513d28d4ae32482814483b807a2004819d79220f0b45572c77d432569b0db93c574381cfbfb3f6bda76a3f44996e98c6a0a60491516899774018f5a1cf27cdfc4a7ef2ba97a655e94abbeecd64defcb29000d5ea66f5239b9be48e1e4abdfd02286779159e9c2e5bf57308cc6c9e304484b37d27661a685fda7188027d6ffc253364e99dea8b5f562f624a110062a65d6a475f80ad311c8ff682f610643ab7195099b98f4cb5cd70137fa9593765c7817b18e2652a42985891fa10fec40650562b64cffa7167fc54d8911371ec4b8349793d4b7b643c404929d1ac1c21627b616d0f3323e12a5cbb7e2cce0baa52e1f9395a17d447e7c3a1e51f396d079f44cd604010d8a770fd199e604f9ef0ec1702fd15ba3f618a3752b5dcf462d572f66ad4a5a1ce28b7b74eb3a99dff4f0eb2d6a2fe658cc4c97a7efbee3ebcb54c72e72ba22509909425c35fc2a418d23b1b25206310650bfacd1b65661b19d2caea11aaad8898004d19b17f34ea3a69936e10cadd7c18ce9b5975a79bd1f217ed7ccd82301f08c4ca7a73e8997cda300af014a14b0de3ffd8806a79805c6219309207adcbe4e07db091907a4339b5f384ca9816fbd1607eaf692cb949595ad642c38d928b99ec83e0cdffb9388daa3c798b5a6cd73e939f5bb53b42601b55f63a0cb1b704fe8a1ab59dd57c59604abbb39eff5922b73f212aaf23e467158d9f4f7ecfa3f3ef11634b52505a81821bda356b1b120d15ae2d5e7a241926aa7056046cfd18156acf60581136114a4e4f9b9ed1d0ef2b0e30cf9db8212b9f855facc73cd484aa28bf95320515a12489b21d47334cfb106941dacb495b83e10ad0f49a507c624937be975412d16390e69549d75c779accbc83ed57798185a19b853822dfb5544c9d2bdcb558f0dfd6d06b50b0b41d7386c160716e41ca9cee4b4bf1fe074a8393f5a59a55b1cb26685dc14115e3320883b65bd5915c2d74f8618473f096e30f9011700c9d0b6eafc215c5e9069758411fa30006ec409871313b0b1a38aecebf4675291efeb1e49d8c812bc8ac97770906959bcb273594587269c47562ccff8912b1f3e4ee9ab2938dc04cf356c0e9d8966909640b93e44a6b8046223a9b867fe1f7870619b352b52ca896bbe94dd63a5380cf0ba0914b07cd567fa216f04ee0125eef6b2c49265df9ab3fa28ec0763eac7e60a768e3ea24ea8191415204938d1bf910c2d7d4d7cbc38ffbcd0bad4d921c88a948dea6d8ae57f3cc083032211d4c9ad54b94a62d3b23a0da93faf982b3c9d961f5472454ef1e9395b7d3a7dfcfa88062049721918d31072d771d2327bd94090190576117313172209c3b378def811bb698ef52cb626f32db17d20151b07bb8d00b5602a2fa71b43da365d41988502877da71502931fe0b6b060a4d5009cd3a64f1af692b64e9fe9a5c6aa43542ede7135c5cc7afe792286d59400ae3fb6a8320a35e1b540bfcd8a69fb6e463657272ecfa21fb5d1cd815cccfbd84f85dbe7596e2bb54f5b2d0829ec0c89b04eb28edab74a9861da468081223310659619741800a0a402d9d63873a7f115e746a2dbde1bbf9c93e7bb7066bd6ac7d2690a2ca167f4cfbfe0e6633d60029f8b552fcebe8f15a04b822fc979f5aea11215c1b7d6a72f3c5c1ccc0734da1c0df8e2cdc897e93fa5cd57968c0a0dcfb10a2f038fa6b2d5df2a5728811fbb7d7998570e552a055b338c4b827d6cc07e8a2c25a9c15090e0270d87cfde46afdf79765ae5da785955456e289daed04fe6773579059c099d61c4bed178d3a0d591d54c0e3ff62d4bab36a8f83c2bb3fb04facbcc8f939bcb4a87a4ca849169c5de0230a740cda8fbdbebccb1611b2c1ad271f2573088289c93aca7c9e47d32ff57e7c344ec2e79485949fe28243fc5b4b583fa40b80c4a8d2ba3dee800e3c8d84f0209f6c139b367e94bce3bb6db07a914ffb370ad33711ed5fee13a9fc0d38966222fd089839d030229fb12aa6fcffcf4e003318e3bbe79992a51c75896c39a65b28f143bb0ad886cc2a13bb77f025dc62370e2aab4d20e777e481c00afa0202e18eadbee949cd430235ce78f283df0755152ba1f99e9b7efc9be72cabe3df0c4a19c01ee571609db43fac0c1dd87855f77a4b2f77bf9cdcb9a935f11d6094d89637430020bbd53107adc92e1eaab11a8c350264fcf1033c2bda9bc105e3477af7cd8c4de4afd2ac0773ecabdb243e7e6f41e3762cdcd5e5c051b73cca5f6627813097859b705cfb2963fc6a99b2e93a32ce75f18937e933eeb004dc70ee58b5ff9d7281e29420f59a6a1580a86b85cd8fd41bf9ef444e8499f8c8d09404403175a360b98db02143e8ad0aebbfb8dce61b5a80bb8e3f1c9b85185281ad45cdb85a42fb5c069f30811fa049748d9b9f7abca48a88953b04d2d6f9b78742a27f473ad6a13be88cf92aa0b65048c666c0be70182f50890fb90a4ef03434bcd88409001a78288de29ff573a4ced3b44b3eb91d6b65eb8c4fe45463760c7c8f5b8a492585a727a8f65397399f229ec1ce4d9ff939377bfa9be92333bd1051401a5288b401b5f7c79d56c664f082b397c1eb201dba181852edbdd52cefe0da8046223605c4e0311da2622a4ca2eb8229df4dcdaad8d0f14635566937167b79a4a71bf69f03b275645de2acae6e43d787b09e9862ac567bcbaf48d97fe7126ea744c965f08a4818c47ef1fd41550eea8365a16740ab26693c07895c0e553b42ceefae4b525f99439322b4a13b779a968e088115f7fe5e7c20af61fabf0e2057b11b208f9b4c10ae23cbb9a99fbab51537bd43bf4261e174630a6a4908b4504c460efd22e16d10c78a593feb99f01adb31bc97d21933336bd4657c22aa802a484ffdf199e20ebf20e664d6a07e7731746ca537fc8033b04274d9dddb7bcb5f2d98d3c12f1ea6f810b5b7defb58f23612d52f11b7addfa3af86630c43525c1d3ea776de3539edd90d99b37b6214c8ebfeb308ac19a050f467f0ba8f2bd372a3f8f2ceb7e404ede901bd1b765e0700348a1455c1983b9178bf76779a0e774a2f49cacf2b8665eeea3b1b9e5b404d5c82fd82d5c328a7d40064f59a54b25ef891d939e99d32a7e820c1e99902a2bffacfd505b829e119d851227b8c56a36140441b74e6ce80b37a80310051a50c54d48ed8c336d8a063b7360fe262504392588b491977eeb962a32b6f34844e52f603a0100512e5187d6228aef696e4c4f3fc81c810ff64f225149f39fb14e69bd2e404b7e3df78ae3e6c97446beb47adaa360e8426ebfc62c3217f98df6df47e81cc042584598241474df781107eb21dfb9d36e2fb693811d225f8318226688ff8112fd189e63feb90afc9555d7e17eee811457b5a3d41d19f4788ad5e4441b8baf61165b7405ea12d3c69d39d964eaa0b2751849476ee75a9e199404ccd3e0eff0a0dc71bb5ff49407e074d18c97378203e371333a50bc8fd98051e1767c491653a8abba877a7381b78d96707300249c92b74647c11aeb8f4dc5dc5806e290511a517dbcc137f213d09e64be0592b14e36743262d8c9cc93aabd00a7ee46f9198a1430ebecaef3f64890c6766bde05ca831566f0fb36e477816b5bbc1bb38103c9e831fc0a2156cf07380bfd95d0fa59a034bb5c3046f13ea5f1abb101594d7685f5b36316a9b3ed4b4a5d2a339b6fd32d2184a24818c63be581571da505a5c1e1668689f933b41550581dc970e59031022696fcf7b7011ea4fc0bfba242e96662985a2208229d2155f99fd772c1fcd841a23ba39787f7d48155d1f9b7c91a7ac314a36a3a63e8c454d911fa35900905b1c48a53de9eb2927198b9100943b88411c3cfa2befcebc29e20ff5c8a693a81409238d8a605bbc25f48a86827d9e0949fdb598ca3da9ea5a7d8bc43d1a7ca04f40fed2aaf799d5002734f1ea3b9978717654d60be0b5449d4b10c594d3a6be9a2a7a7cf84c0d8727854af5f07960a05768065c2729a4882fd9493148286e995080aa07f69f22c8d770b491118e69648a28ec0eecabb4c2cb205f0d2d6059273fe39864ae2023fdd1f013ea66f19cbd00d2f21d6d19aa09d5d7071c08cf155e589fee796804855065e43f7cf18d9a2bf714da5d4f3819be8e71942c9af1d1c8cc64adbc8e1cf4fd0384e8696b7baaa199883fa803cbb9b6cb4f967d9e5d8a8d34e324459febc800b24d8f13460be908b17aedc29b6dd57bc8f07ed91f187313a9868787376db16e03a28f6e4a1a6f4e9e357eeacde90188e88fc8182cd1279930ab824a0fa8b343cbe3bdd8916b196baa5d081a889a30ea5307745dcb5da3c9b6b889988b17b9a2eca259383d69750bf914e622f4af84190ff0fc4225f2b329cbcbdc827dd5e299547d9ec99f613d704e785c761b75b06fc2bdcc94ea3ca34cdbcd4f098b8974ff7e9b2addf19d01f1c872f2573f9d6f8886ee578a98474e34ee5741f1d0db6112108b82d8d740df51fcebbfaf2b7d6175d3e6a408da0123343f32daad51ae4c040d993ca4323fd93a28179adf17294bc9b1a9579ba32278dd83a1d26439803f681ed0b170cdf8a9a8a39d4bc3d8db2d2d06342a16219f1ef92b1aeabd3e0b7fbfcb89a0390d4daed94d3f38b819513fc6bd9da0068a69e7e368b1efb8533d56599e35af5394be78d3da8ae235f04e3508916d035121a20b6487e302460463b35803dea874e206e5e4d5e3a2a57859d3d394eca821dec10199152ca27083505bba0d9a878ecfb40c0d27816496c017b04d16e041cbd40c018cb14d4af76db55ab08707bfa6c083b514b320a35aea40de023a9f60c"}, {}, {0x0, 0x8, {0x1, 0x2}}}}, @m_skbedit={0x0, 0x4, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x0, 0x5, 0x7}, @TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x0, 0x4, 0xf4c0}]}, {0x0, 0x6, "216b3d85e3b830135b11ba3bbcb061e056829e557c9fe316fb64b3aef167b4deaebb6c50e5e434ba6070b72350b716ba869f3741ce4219934b34da12f4badb70ec07211c84ee7461070496d0aaabcef65a59da3d9ef8c4872b7b79d652a8f7b6d7ada1339b7d786144ae24c3e1fafce9407605994d94449d5a2a45fe75d4ca8a9cb743f736b8c30c"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x0, 0x1a, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x60, 0x4, 0x7fff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x0, 0x6, 0x2}, @TCA_CTINFO_ZONE={0x0, 0x4, 0xb}, @TCA_CTINFO_PARMS_DSCP_MASK={0x0, 0x5, 0x200}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0x8}, @TCA_CTINFO_ACT={0x0, 0x3, {0x15, 0x5, 0x2, 0x51, 0x9e}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x0, 0x7, 0x43}, @TCA_CTINFO_ACT={0x0, 0x3, {0x6, 0xb, 0x1, 0x33, 0x400}}, @TCA_CTINFO_PARMS_DSCP_MASK]}, {0x0, 0x6, "383a38503025ab581365ac7ef4af2d2994d4ee5451b703691e87c03c5c7ca12e3992389bb15e8bbb5054c4e67bea425843b52f07575262ad54c24117861be4c6aadbfee7789f9394762d8bb37c78aefcbb2747bfce94425da753251ff9edc0f5c4744f6a38c70704781ea69234f7ff24178367778b75cc5a66f3acfc9715382f944f5e153bf0f88e3be56b44a44c6103748ff5b15983055f7583dab6775f3268ab476bf4510a659fe05a74f33621df71f0e3ec0409f232efc2042b2a9728c1abaf8fae5e17fe059542"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_ACT={0x0, 0x1, [@m_simple={0x0, 0x8, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x0, 0x2, {0x10000, 0x7a6c, 0x1, 0x0, 0x400}}, @TCA_DEF_PARMS={0x0, 0x2, {0x6, 0x80, 0xffffffffffffffff, 0x9, 0xc7}}, @TCA_DEF_PARMS={0x0, 0x2, {0x54, 0x7, 0x8, 0x7, 0x5}}, @TCA_DEF_DATA={0x0, 0x3, 'nl80211\x00'}, @TCA_DEF_DATA={0x0, 0x3, 'wlan0\x00'}, @TCA_DEF_DATA={0x0, 0x3, '^\\.#\x00'}]}, {0x0, 0x6, "9d490ca4a057b301e0d9d023f01e48eda9e5d78c3dc9e1e3a2b2961b3e8cb1b935cf4103a4faaa47b8bea41139ce4cfe98520cdc6b8195414774076215e6253131c703b4c69b2f1f984d466c15812d48773bbe870b4e24f2f6deb93eaa40b57c0e29b19b59aa114265e6b2789d91ea03df736f7d0ba6e5e80797db5736d004ec3eed93a3800c9e6390b0f7ec5cf5f00f1b97706daf83811a54a9335ac87aa6ebb45a57c8298696cc8399607c33004a9d14ae892a3d7f4cb885babd967a8a13d9dbb0a8e09bc3"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_mirred={0x0, 0x15, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0x5, 0x7, 0xcb37b5b7454d46a0, 0x400, 0x675b}, 0x1, r10}}]}, {0x0, 0x6, "9e3719c8c95b42462b926b186536ae7d3dbfcb416a164c0002b88df46cf8851202a0dfd1007a0e7b0bda348cb86628c627cc4a03a6ab0d1aa0d3092e29df8d73ee1b5aac3a2ee7d6477a8fabfa205b8ab410e8a0c39be9eb12ee216ca07a3ea6d8295211d93912fd7a379145f82360cd049464f9a36c82e2e6af60201ba744581b1d3f32df3153afc99c1852b706dda011f9806c94dcc7732e7bd4543b1bc1c7712344f7796105d16af363b157ab325ca89e9f592476ee6f157287117f4395976d5eb4249ec7f03613c2"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x3}}}}, @m_skbmod={0x0, 0x1e, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0x0, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_ETYPE={0x0, 0x5, 0x4}]}, {0x0, 0x6, "b4d1fd537f899f2f4d56fee1fd8bece5d9300a8ce881"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0x2}}}}]}]}}, @filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_ARP_SHA, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK, @TCA_FLOWER_KEY_CT_MARK_MASK={0x0, 0x60, 0x5}]}}, @TCA_RATE={0x0, 0x5, {0x13, 0x2}}, @TCA_RATE={0x0, 0x5, {0x7, 0x5}}, @TCA_CHAIN={0x0, 0xb, 0x1}, @TCA_RATE={0x0, 0x5, {0x9, 0x5}}, @TCA_RATE={0x0, 0x5, {0x8, 0x3}}, @TCA_RATE={0x0, 0x5, {0x10, 0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r10, {0xffff, 0x3}, {}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x40004) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000300)={'wg1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x81, 0x6, 0x6, 0x23, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x7800, 0x8000, 0x3966, 0x7c9}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x14, r5, 0x400, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008041) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x28, r1, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0xf6, 0x9, 0x1}]}]}, 0x28}}, 0x4000010) 2.100155125s ago: executing program 0 (id=2673): socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001c00)=ANY=[@ANYBLOB="18000000000000000000000000000000611077000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x1e}, 0x94) r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071114c00000000008510000002000000850000008a00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) r1 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000022000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="ce010a00009a697f65360c5e86dd", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x6, 0xa, 0x9, 0x9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$phonet(0x23, 0x2, 0x1) socket$packet(0x11, 0x3, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r6, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4}]}]}]}, 0x38}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0000001800010400000000000000000200b408ff00fe0700060000060015000200000038001680340008803000038029"], 0x5c}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 1.972434795s ago: executing program 4 (id=2674): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, 0xffffffffffffffff, 0x13, 0x4006}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x875b}, 0x10}, 0x94) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 1.945447691s ago: executing program 4 (id=2675): socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000440)=ANY=[], 0x48) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) socket$alg(0x26, 0x5, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20) 1.875453593s ago: executing program 0 (id=2676): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x3) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) unshare(0x28000600) shutdown(r1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) getpeername$packet(r2, 0x0, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x19e172f08959ac6e, 0x10001, 0x47}, 0x2c) 1.79218591s ago: executing program 4 (id=2677): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x4422, 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f00000008c0)=[{0xffffffffffffffff, 0x1}, {r1, 0x46c2}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x188, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x14c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x134, 0x1, [@m_simple={0x8c, 0x1e, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x2, 0xf}}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x70, 0x36, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x48) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x100, 0x70bd25, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000810}, 0x814) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa6}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.791318339s ago: executing program 0 (id=2678): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_proto_private(r1, 0x8990, &(0x7f0000000340)="f5bb3a") (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0x200, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2, @val=0xc}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async, rerun: 64) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000020000000950000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) 1.759126283s ago: executing program 2 (id=2679): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x1200, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) recvfrom$llc(r0, &(0x7f0000000000)=""/248, 0xf8, 0x40010001, 0x0, 0x0) listen(r0, 0xd) 523.655148ms ago: executing program 2 (id=2680): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db1af87f00010000bfa100000000000007010000f8ffffffb702000008000000b703001d0000000085000000ca00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xe3, &(0x7f0000000200)=""/227, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair(0x1, 0x6, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @none}, 0x8) 436.393536ms ago: executing program 0 (id=2681): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="a1020000a13506d297c5309fdd8ec9ed4f7caaa06d645d31ef7e4c5ba688dc4f2566a08cd5ffffffffac65dbecf510d68bb3bf5dae2e11982a228224d103c7a22079", @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r2], 0x3c}}, 0x0) close(r2) 387.604212ms ago: executing program 2 (id=2682): r0 = socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x3) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001780)={0x10000008}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRESDEC=r1, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYBLOB="0c84e858610e32088c152e2db4f461ab5f364550199195a04e4930d1a411b51ba4f78753ea8b1d0ffd461a8680b1c623701bfa96c5cd0e0414fd549d0d7e66d23988a24573d0c4139a0910", @ANYRES64=r1, @ANYRES64, @ANYRESDEC=r0, @ANYRESDEC=r2], 0x40}}, 0x0) close(0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x6e, 0xc, 0x8, 0x1b, 0x6, 0xc0, 0x3, 0x9, 0x2, 0x1, 0x0, 0xfe, 0x52, 0x9}, 0xe) 330.434657ms ago: executing program 4 (id=2683): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfe, 0x8000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYRES32=r2, @ANYRESDEC=r0], 0x30}, 0x1, 0x0, 0x0, 0x2810}, 0x48004) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x10000000}, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2000000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r12 = socket$netlink(0x10, 0x3, 0x4) writev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 220.230878ms ago: executing program 1 (id=2684): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b801000000000088f414fe7a1426c9d4df8e81f99c7bb435835f38656147e1272500"/44, @ANYRES16=0x0, @ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80040c0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32=0x1, @ANYRES16=r0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="00001000000090c8df3000f400000040dcc86a5ccbef6e01000000"], 0x50) (rerun: 64) socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0xb0}}, 0x20000000) 219.817824ms ago: executing program 0 (id=2685): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911051000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @mcast1, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) close(r0) socket(0x80000000000000a, 0x2, 0x0) (async) socket$inet6(0xa, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911051000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @mcast1, 0x3}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close(r0) (async) 198.007421ms ago: executing program 4 (id=2686): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x2}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb0800450045ac00006000002f9078ac1e0001e00000010008655800189078040000000000001386dd"], 0xfdef) socket$inet6(0xa, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x24008894}], 0x1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@local, 0x8000000, 0x2, 0x0, 0x0, 0x9}, 0x20) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18003f4b2e9f393bcf00"/31], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r7], 0x54}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="b31cc3ca00000000280012800b0001006272696467650000180002800c002e0001007c9387"], 0x48}}, 0x0) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffe, 0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="08000000010000", 0x7) 116.524918ms ago: executing program 2 (id=2687): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000100)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xa8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x2c, 0x68, 0x1, 0x70bd2d, 0x80000000, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @multicast1}}]}, 0x2c}}, 0x0) 0s ago: executing program 2 (id=2688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd3b, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000640)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x8, 0x5, {{0x19, 0x4, 0x2, 0x8, 0x64, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2, {[@timestamp_addr={0x44, 0x2c, 0x89, 0x1, 0x8, [{@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010100, 0x2}]}, @timestamp_addr={0x44, 0x24, 0xd6, 0x1, 0xe, [{@local, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@private=0xa010102, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0xc}, 0xa}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_virt_wifi\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000880)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x80, 0x20, 0x7, 0x7, {{0x10, 0x4, 0x0, 0x8, 0x40, 0x67, 0x0, 0x8, 0x0, 0x0, @remote, @local, {[@timestamp={0x44, 0x1c, 0x14, 0x0, 0x3, [0x800, 0x7ff, 0x6, 0x18be, 0x9, 0xb251]}, @timestamp={0x44, 0x10, 0x33, 0x0, 0x1, [0x9, 0x3, 0x2]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x198, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x74c4cc1ed7fe883}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000014) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r11, &(0x7f0000000000)="2e000400010002", 0x7) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000003c0)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x7}}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x5c}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r12, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r13}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) kernel console output (not intermixed with test programs): PLACE [ 190.815797][T10713] IPv6: NLM_F_CREATE should be set when creating new route [ 190.818968][T10709] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1295'. [ 190.824824][T10712] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 190.834663][T10709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1295'. [ 190.906176][T10720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1297'. [ 191.051678][T10724] delete_channel: no stack [ 191.084130][T10731] netlink: 'syz.3.1302': attribute type 1 has an invalid length. [ 191.179304][T10740] netlink: 'syz.1.1304': attribute type 1 has an invalid length. [ 191.296031][T10740] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.347100][T10741] lo speed is unknown, defaulting to 1000 [ 191.388227][T10751] netlink: 'syz.2.1300': attribute type 303 has an invalid length. [ 191.408437][T10740] gretap2: entered promiscuous mode [ 191.423894][T10740] bond4: (slave gretap2): making interface the new active one [ 191.433251][T10753] ieee802154 phy0 wpan0: encryption failed: -90 [ 191.454840][T10740] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 191.481168][T10741] hsr0 speed is unknown, defaulting to 1000 [ 191.508789][T10748] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 191.751059][T10763] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.760906][T10763] bridge0: port 3(dummy0) entered blocking state [ 191.767525][T10763] bridge0: port 3(dummy0) entered forwarding state [ 191.778390][T10763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.807878][ T982] lo speed is unknown, defaulting to 1000 [ 191.813850][ T982] syz2: Port: 1 Link ACTIVE [ 191.902377][T10765] lo speed is unknown, defaulting to 1000 [ 191.998371][T10765] hsr0 speed is unknown, defaulting to 1000 [ 192.846701][T10809] sctp: [Deprecated]: syz.1.1320 (pid 10809) Use of int in maxseg socket option. [ 192.846701][T10809] Use struct sctp_assoc_value instead [ 193.265300][T10820] __nla_validate_parse: 4 callbacks suppressed [ 193.265317][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1322'. [ 194.011695][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1328'. [ 194.148887][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.157725][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.491625][T10866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1332'. [ 194.976404][T10881] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.028664][T10883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1337'. [ 195.287003][ T30] audit: type=1800 audit(1750922244.460:4): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1342" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1481 res=0 errno=0 [ 195.305340][T10898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.333341][T10895] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1343'. [ 195.346995][T10896] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1343'. [ 195.355780][ T30] audit: type=1800 audit(1750922244.460:5): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1342" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1481 res=0 errno=0 [ 195.733461][T10921] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1348'. [ 195.770129][T10924] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1349'. [ 195.782622][T10924] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1349'. [ 195.788873][T10925] bond0: entered promiscuous mode [ 195.791740][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1349'. [ 195.799866][T10925] bond_slave_0: entered promiscuous mode [ 195.817338][T10925] bond_slave_1: entered promiscuous mode [ 195.829486][T10925] batadv0: entered promiscuous mode [ 195.845415][T10925] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 195.861196][T10925] bond0: left promiscuous mode [ 195.893051][T10925] bond_slave_0: left promiscuous mode [ 195.943174][T10925] bond_slave_1: left promiscuous mode [ 195.960615][T10925] batadv0: left promiscuous mode [ 196.226692][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 196.237832][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 196.243940][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.348098][T10954] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999 [ 196.408706][T10954] vlan2: entered promiscuous mode [ 196.424304][T10954] bridge0: entered promiscuous mode [ 196.429687][T10954] vlan2: entered allmulticast mode [ 196.445311][T10954] bridge0: entered allmulticast mode [ 196.467338][T10959] xt_TPROXY: Can be used only with -p tcp or -p udp [ 196.490719][T10954] netlink: 'syz.1.1358': attribute type 3 has an invalid length. [ 196.498809][T10954] netlink: 'syz.1.1358': attribute type 3 has an invalid length. [ 196.590548][T10965] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 196.916155][T10980] 8021q: adding VLAN 0 to HW filter on device bond6 [ 196.925253][T10980] bond5: (slave bond6): making interface the new active one [ 196.933348][T10980] bond5: (slave bond6): Enslaving as an active interface with an up link [ 196.949911][T10982] lo speed is unknown, defaulting to 1000 [ 197.000346][T10965] bond5: (slave gretap3): Enslaving as a backup interface with an up link [ 197.018601][T10982] hsr0 speed is unknown, defaulting to 1000 [ 197.121957][T10991] netlink: 'syz.2.1370': attribute type 1 has an invalid length. [ 197.288697][T10999] netlink: 'syz.1.1371': attribute type 83 has an invalid length. [ 197.635532][T11010] netlink: 'syz.2.1373': attribute type 8 has an invalid length. [ 197.967825][T11046] netlink: 'syz.3.1382': attribute type 1 has an invalid length. [ 198.308491][T11074] FAULT_INJECTION: forcing a failure. [ 198.308491][T11074] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 198.323106][T11074] CPU: 0 UID: 0 PID: 11074 Comm: syz.4.1392 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 198.323129][T11074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.323140][T11074] Call Trace: [ 198.323148][T11074] [ 198.323156][T11074] dump_stack_lvl+0x189/0x250 [ 198.323184][T11074] ? __pfx____ratelimit+0x10/0x10 [ 198.323204][T11074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.323227][T11074] ? __pfx__printk+0x10/0x10 [ 198.323245][T11074] ? __might_fault+0xb0/0x130 [ 198.323270][T11074] should_fail_ex+0x414/0x560 [ 198.323296][T11074] _copy_from_user+0x2d/0xb0 [ 198.323313][T11074] ___sys_sendmsg+0x158/0x2a0 [ 198.323340][T11074] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.323399][T11074] ? __fget_files+0x2a/0x420 [ 198.323416][T11074] ? __fget_files+0x3a0/0x420 [ 198.323445][T11074] __x64_sys_sendmsg+0x19b/0x260 [ 198.323470][T11074] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.323501][T11074] ? __pfx_ksys_write+0x10/0x10 [ 198.323515][T11074] ? rcu_is_watching+0x15/0xb0 [ 198.323546][T11074] ? do_syscall_64+0xbe/0x3b0 [ 198.323568][T11074] do_syscall_64+0xfa/0x3b0 [ 198.323585][T11074] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.323603][T11074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.323618][T11074] ? clear_bhb_loop+0x60/0xb0 [ 198.323638][T11074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.323653][T11074] RIP: 0033:0x7f1ed4d8e929 [ 198.323674][T11074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.323689][T11074] RSP: 002b:00007f1ed5c9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.323711][T11074] RAX: ffffffffffffffda RBX: 00007f1ed4fb5fa0 RCX: 00007f1ed4d8e929 [ 198.323723][T11074] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 198.323734][T11074] RBP: 00007f1ed5c9a090 R08: 0000000000000000 R09: 0000000000000000 [ 198.323744][T11074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.323755][T11074] R13: 0000000000000000 R14: 00007f1ed4fb5fa0 R15: 00007fffb4522ab8 [ 198.323784][T11074] [ 198.330726][T11076] __nla_validate_parse: 48 callbacks suppressed [ 198.330742][T11076] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1393'. [ 198.520874][T11081] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 198.568813][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1394'. [ 198.679830][T11087] netlink: 'syz.4.1396': attribute type 4 has an invalid length. [ 198.702601][T11087] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1396'. [ 198.759338][T11087] wlan1: mtu less than device minimum [ 198.785666][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 199.011414][T11109] netlink: 'syz.3.1401': attribute type 10 has an invalid length. [ 199.068834][T11109] bridge0: port 3(dummy0) entered disabled state [ 199.086688][T11109] dummy0: left allmulticast mode [ 199.099742][T11114] delete_channel: no stack [ 199.104383][T11109] dummy0: left promiscuous mode [ 199.109550][T11109] bridge0: port 3(dummy0) entered disabled state [ 199.134398][T11116] FAULT_INJECTION: forcing a failure. [ 199.134398][T11116] name failslab, interval 1, probability 0, space 0, times 1 [ 199.159336][T11116] CPU: 1 UID: 0 PID: 11116 Comm: syz.4.1404 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 199.159359][T11116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.159369][T11116] Call Trace: [ 199.159376][T11116] [ 199.159382][T11116] dump_stack_lvl+0x189/0x250 [ 199.159410][T11116] ? __pfx____ratelimit+0x10/0x10 [ 199.159429][T11116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.159451][T11116] ? __pfx__printk+0x10/0x10 [ 199.159475][T11116] ? __pfx___might_resched+0x10/0x10 [ 199.159503][T11116] should_fail_ex+0x414/0x560 [ 199.159536][T11116] should_failslab+0xa8/0x100 [ 199.159556][T11116] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 199.159573][T11116] ? __alloc_skb+0x112/0x2d0 [ 199.159598][T11116] __alloc_skb+0x112/0x2d0 [ 199.159622][T11116] netlink_sendmsg+0x5c6/0xb30 [ 199.159651][T11116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.159674][T11116] ? aa_sock_msg_perm+0x94/0x160 [ 199.159694][T11116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.159712][T11116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.159730][T11116] __sock_sendmsg+0x219/0x270 [ 199.159751][T11116] ____sys_sendmsg+0x505/0x830 [ 199.159777][T11116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.159807][T11116] ? import_iovec+0x74/0xa0 [ 199.159827][T11116] ___sys_sendmsg+0x21f/0x2a0 [ 199.159851][T11116] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.159908][T11116] ? __fget_files+0x2a/0x420 [ 199.159924][T11116] ? __fget_files+0x3a0/0x420 [ 199.159950][T11116] __x64_sys_sendmsg+0x19b/0x260 [ 199.159973][T11116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.160002][T11116] ? __pfx_ksys_write+0x10/0x10 [ 199.160014][T11116] ? rcu_is_watching+0x15/0xb0 [ 199.160040][T11116] ? do_syscall_64+0xbe/0x3b0 [ 199.160061][T11116] do_syscall_64+0xfa/0x3b0 [ 199.160077][T11116] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.160093][T11116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.160108][T11116] ? clear_bhb_loop+0x60/0xb0 [ 199.160125][T11116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.160139][T11116] RIP: 0033:0x7f1ed4d8e929 [ 199.160153][T11116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.160166][T11116] RSP: 002b:00007f1ed5c9a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.160182][T11116] RAX: ffffffffffffffda RBX: 00007f1ed4fb5fa0 RCX: 00007f1ed4d8e929 [ 199.160194][T11116] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 199.160203][T11116] RBP: 00007f1ed5c9a090 R08: 0000000000000000 R09: 0000000000000000 [ 199.160212][T11116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.160222][T11116] R13: 0000000000000000 R14: 00007f1ed4fb5fa0 R15: 00007fffb4522ab8 [ 199.160247][T11116] [ 199.488524][T11119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1405'. [ 199.523244][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 199.544085][T11122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1406'. [ 199.553118][T11122] netlink: 'syz.4.1406': attribute type 12 has an invalid length. [ 199.605323][T11124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1406'. [ 199.787345][T11136] IPv6: Can't replace route, no match found [ 199.878652][T11144] openvswitch: netlink: Message has 4 unknown bytes. [ 199.998750][T11148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 200.029741][T11148] hsr_slave_0: left promiscuous mode [ 200.046478][T11148] hsr_slave_1: left promiscuous mode [ 200.162377][T11158] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.165966][T11160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1418'. [ 200.225761][T11162] lo: entered allmulticast mode [ 200.259751][T11162] tunl0: entered allmulticast mode [ 200.282302][T11162] gre0: entered allmulticast mode [ 200.317080][T11162] gretap0: entered allmulticast mode [ 200.339008][T11162] erspan0: entered allmulticast mode [ 200.398845][T11162] ip_vti0: entered allmulticast mode [ 200.413175][T11162] ip6_vti0: entered allmulticast mode [ 200.429634][T11162] sit0: entered allmulticast mode [ 200.452666][T11162] ip6tnl0: entered allmulticast mode [ 200.476823][T11162] ip6gre0: entered allmulticast mode [ 200.494525][T11162] syz_tun: entered allmulticast mode [ 200.514415][T11162] ip6gretap0: entered allmulticast mode [ 200.535043][T11162] bond0: entered allmulticast mode [ 200.540349][T11162] bond_slave_0: entered allmulticast mode [ 200.551908][T11162] bond_slave_1: entered allmulticast mode [ 200.559266][T11162] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 200.580468][T11162] team0: entered allmulticast mode [ 200.588049][T11162] team_slave_0: entered allmulticast mode [ 200.594676][T11162] team_slave_1: entered allmulticast mode [ 200.608882][T11162] !: entered allmulticast mode [ 200.631764][T11162] nlmon0: entered allmulticast mode [ 200.643720][T11162] caif0: entered allmulticast mode [ 200.649230][T11162] batadv0: entered allmulticast mode [ 200.669063][T11162] veth0: entered allmulticast mode [ 200.678179][T11162] veth1: entered allmulticast mode [ 200.704581][T11162] wg0: entered allmulticast mode [ 200.721762][T11162] wg1: entered allmulticast mode [ 200.736313][T11162] wg2: entered allmulticast mode [ 200.749827][T11162] veth0_to_bridge: entered allmulticast mode [ 200.762857][T11162] bridge_slave_0: entered allmulticast mode [ 200.780439][T11162] veth1_to_bridge: entered allmulticast mode [ 200.800484][T11162] bridge_slave_1: entered allmulticast mode [ 200.818293][T11162] veth0_to_bond: entered allmulticast mode [ 200.828427][T11162] veth1_to_bond: entered allmulticast mode [ 200.852100][T11162] veth0_to_team: entered allmulticast mode [ 200.876545][T11162] veth1_to_team: entered allmulticast mode [ 200.907534][T11162] veth0_to_batadv: entered allmulticast mode [ 200.926262][T11162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.944180][T11162] batadv_slave_0: entered allmulticast mode [ 200.951992][T11162] veth1_to_batadv: entered allmulticast mode [ 200.978395][T11162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.989364][T11162] batadv_slave_1: entered allmulticast mode [ 201.006369][T11162] xfrm0: entered allmulticast mode [ 201.013112][T11162] veth0_to_hsr: entered allmulticast mode [ 201.047508][T11162] hsr_slave_0: entered allmulticast mode [ 201.060840][T11162] veth1_to_hsr: entered allmulticast mode [ 201.072982][T11162] hsr_slave_1: entered allmulticast mode [ 201.086943][T11162] hsr0: entered allmulticast mode [ 201.101337][T11162] veth1_virt_wifi: entered allmulticast mode [ 201.120594][T11162] veth0_virt_wifi: entered allmulticast mode [ 201.139140][T11162] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 201.157250][T11162] veth1_vlan: entered allmulticast mode [ 201.172978][T11162] veth0_vlan: entered allmulticast mode [ 201.205142][T11162] vlan0: entered allmulticast mode [ 201.210421][T11162] vlan1: entered allmulticast mode [ 201.233721][T11162] macvlan0: entered allmulticast mode [ 201.243928][T11162] macvlan1: entered allmulticast mode [ 201.250653][T11162] ipvlan0: entered allmulticast mode [ 201.273498][T11162] ipvlan1: entered allmulticast mode [ 201.285209][T11162] veth0_macvtap: entered allmulticast mode [ 201.306567][T11162] macvtap0: entered allmulticast mode [ 201.333769][T11162] geneve1: entered allmulticast mode [ 201.344787][T11162] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 201.363986][T11162] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 201.383838][T11162] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 201.401298][T11162] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 201.417511][T11162] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 201.445717][T11162] macvtap1: entered allmulticast mode [ 201.451207][T11162] veth2: entered allmulticast mode [ 201.463985][T11162] veth3: entered allmulticast mode [ 201.469195][T11162] bridge1: left promiscuous mode [ 201.475552][T11162] bridge1: entered allmulticast mode [ 201.481282][T11162] bond1: entered allmulticast mode [ 201.494827][T11162] gretap1: left promiscuous mode [ 201.517179][T11162] bridge2: entered allmulticast mode [ 201.522579][T11162] bridge3: left promiscuous mode [ 201.530894][T11162] vxlan0: entered allmulticast mode [ 201.536331][T11162] : entered allmulticast mode [ 201.541170][T11162] bond2: entered allmulticast mode [ 201.546660][T11162] syztnl0: entered allmulticast mode [ 201.552022][T11162] bridge0: entered allmulticast mode [ 201.557944][T11162] gre1: entered allmulticast mode [ 201.597248][T11162] syztnl2: entered allmulticast mode [ 201.602614][T11162] vxlan1: entered allmulticast mode [ 201.678169][T11158] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.726029][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.752930][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.842558][T11158] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.982209][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.014139][ T6353] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.274581][T11198] netlink: 'syz.4.1429': attribute type 3 has an invalid length. [ 202.302869][T11199] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 202.317735][T11158] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.337624][T11199] IPVS: set_ctl: invalid protocol: 79 172.30.1.2:20000 [ 202.371085][T11199] bridge4: entered promiscuous mode [ 203.019349][ T6353] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.084085][ T6353] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.156829][ T6353] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.182513][ T6353] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.367741][T11222] ip6tnl1: entered promiscuous mode [ 203.372984][T11222] ip6tnl1: entered allmulticast mode [ 203.610083][T11243] raw_sendmsg: syz.0.1442 forgot to set AF_INET. Fix it! [ 203.671603][T11245] __nla_validate_parse: 4 callbacks suppressed [ 203.671622][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1444'. [ 203.728999][T11245] syzkaller1: entered promiscuous mode [ 203.750615][T11245] syzkaller1: entered allmulticast mode [ 203.841885][T11247] SET target dimension over the limit! [ 203.852836][T11247] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1445'. [ 203.962100][T11251] sctp: [Deprecated]: syz.1.1447 (pid 11251) Use of int in max_burst socket option. [ 203.962100][T11251] Use struct sctp_assoc_value instead [ 204.149941][T11264] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1450'. [ 204.161928][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.324750][T11276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 204.397610][T11282] netlink: 'syz.1.1455': attribute type 12 has an invalid length. [ 204.488040][T11282] lo speed is unknown, defaulting to 1000 [ 204.549168][T11283] netlink: 'syz.1.1455': attribute type 21 has an invalid length. [ 204.587369][T11283] netlink: 'syz.1.1455': attribute type 6 has an invalid length. [ 204.624328][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1455'. [ 204.634625][T11283] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1455'. [ 204.898354][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1462'. [ 204.937309][T11304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1462'. [ 205.108432][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 205.128596][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 205.190160][T11319] netlink: 'syz.1.1467': attribute type 1 has an invalid length. [ 205.272728][T11319] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 205.293382][T11319] 8021q: adding VLAN 0 to HW filter on device bond7 [ 205.294624][ T6363] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 205.377128][T11319] veth5: entered promiscuous mode [ 205.394625][T11319] bond7: (slave veth5): Enslaving as a backup interface with a down link [ 205.434853][ T36] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 205.459962][T11325] bond4: (slave gretap2): Releasing active interface [ 205.522497][T11325] bond5: (slave bond6): Releasing backup interface [ 205.540167][T11325] bond5: (slave bond6): the permanent HWaddr of slave - 3a:42:55:4e:01:c6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 205.557899][T11325] bond5: (slave gretap3): making interface the new active one [ 205.578492][T11325] bond5: (slave gretap3): Releasing backup interface [ 205.599832][T11325] bond7: (slave ip6gretap1): Removing an active aggregator [ 205.607778][T11325] bond7: (slave ip6gretap1): Releasing backup interface [ 205.615315][T11325] bond7: (slave ip6gretap1): the permanent HWaddr of slave - 66:8f:c4:59:f3:d7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 205.640165][T11325] bond7: (slave veth5): Releasing backup interface [ 205.798380][T11346] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 205.841360][T11337] lo speed is unknown, defaulting to 1000 [ 205.933112][T11350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.988148][T11353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.275851][T11375] warn_alloc: 1 callbacks suppressed [ 206.275867][T11375] syz.1.1481: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 206.351100][T11375] CPU: 0 UID: 0 PID: 11375 Comm: syz.1.1481 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 206.351125][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.351135][T11375] Call Trace: [ 206.351142][T11375] [ 206.351150][T11375] dump_stack_lvl+0x189/0x250 [ 206.351181][T11375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.351204][T11375] ? __pfx__printk+0x10/0x10 [ 206.351222][T11375] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 206.351241][T11375] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 206.351261][T11375] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 206.351282][T11375] warn_alloc+0x214/0x310 [ 206.351309][T11375] ? __pfx_warn_alloc+0x10/0x10 [ 206.351337][T11375] ? __get_vm_area_node+0x28f/0x300 [ 206.351356][T11375] ? packet_set_ring+0x6f4/0x2380 [ 206.351383][T11375] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 206.351434][T11375] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 206.351454][T11375] ? alloc_pages_mpol+0x3cd/0x4a0 [ 206.351475][T11375] ? packet_set_ring+0x6f4/0x2380 [ 206.351497][T11375] vzalloc_noprof+0xb2/0xf0 [ 206.351514][T11375] ? packet_set_ring+0x6f4/0x2380 [ 206.351537][T11375] packet_set_ring+0x6f4/0x2380 [ 206.351582][T11375] ? __pfx_packet_set_ring+0x10/0x10 [ 206.351625][T11375] ? _copy_from_user+0x94/0xb0 [ 206.351647][T11375] packet_setsockopt+0xc5a/0x12c0 [ 206.351672][T11375] ? __pfx_packet_setsockopt+0x10/0x10 [ 206.351692][T11375] ? futex_wait+0x285/0x360 [ 206.351716][T11375] ? __pfx_futex_wait+0x10/0x10 [ 206.351744][T11375] ? aa_sk_perm+0x81e/0x950 [ 206.351768][T11375] ? __pfx_aa_sk_perm+0x10/0x10 [ 206.351785][T11375] ? __lock_acquire+0xab9/0xd20 [ 206.351812][T11375] ? aa_sock_opt_perm+0x74/0x110 [ 206.351835][T11375] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 206.351853][T11375] ? __pfx_packet_setsockopt+0x10/0x10 [ 206.351877][T11375] do_sock_setsockopt+0x25a/0x3e0 [ 206.351902][T11375] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 206.351929][T11375] ? __fget_files+0x2a/0x420 [ 206.351956][T11375] __x64_sys_setsockopt+0x18b/0x220 [ 206.351983][T11375] do_syscall_64+0xfa/0x3b0 [ 206.352008][T11375] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.352026][T11375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.352041][T11375] ? clear_bhb_loop+0x60/0xb0 [ 206.352060][T11375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.352075][T11375] RIP: 0033:0x7f94d1f8e929 [ 206.352090][T11375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.352104][T11375] RSP: 002b:00007f94d2e02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.352122][T11375] RAX: ffffffffffffffda RBX: 00007f94d21b5fa0 RCX: 00007f94d1f8e929 [ 206.352135][T11375] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003 [ 206.352144][T11375] RBP: 00007f94d2010b39 R08: 000000000000001c R09: 0000000000000000 [ 206.352154][T11375] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 206.352164][T11375] R13: 0000000000000000 R14: 00007f94d21b5fa0 R15: 00007ffd446dacc8 [ 206.352190][T11375] [ 206.352197][T11375] Mem-Info: [ 206.665398][T11375] active_anon:4663 inactive_anon:0 isolated_anon:0 [ 206.665398][T11375] active_file:1550 inactive_file:39884 isolated_file:0 [ 206.665398][T11375] unevictable:768 dirty:100 writeback:0 [ 206.665398][T11375] slab_reclaimable:11866 slab_unreclaimable:161886 [ 206.665398][T11375] mapped:29493 shmem:2363 pagetables:971 [ 206.665398][T11375] sec_pagetables:0 bounce:0 [ 206.665398][T11375] kernel_misc_reclaimable:0 [ 206.665398][T11375] free:1267420 free_pcp:16083 free_cma:0 [ 206.729452][T11375] Node 0 active_anon:20992kB inactive_anon:0kB active_file:6200kB inactive_file:159336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120396kB dirty:396kB writeback:0kB shmem:10348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12560kB pagetables:3712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.790903][T11375] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.850469][T11375] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.898524][T11375] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 206.908565][T11375] Node 0 DMA32 free:1160148kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22856kB inactive_anon:0kB active_file:6200kB inactive_file:157504kB unevictable:1536kB writepending:420kB present:3129332kB managed:2560948kB mlocked:0kB bounce:0kB free_pcp:47504kB local_pcp:23572kB free_cma:0kB [ 206.983682][T11375] lowmem_reserve[]: 0 0 1 1 1 [ 206.988428][T11375] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 207.060616][T11375] lowmem_reserve[]: 0 0 0 0 0 [ 207.077710][T11375] Node 1 Normal free:3898628kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19368kB local_pcp:8804kB free_cma:0kB [ 207.120038][T11375] lowmem_reserve[]: 0 0 0 0 0 [ 207.128245][T11375] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 207.143125][T11375] Node 0 DMA32: 453*4kB (UME) 242*8kB (UME) 72*16kB (UM) 1025*32kB (UME) 238*64kB (UME) 74*128kB (UME) 64*256kB (UME) 21*512kB (UM) 19*1024kB (UM) 3*2048kB (U) 254*4096kB (UM) = 1155524kB [ 207.206554][T11375] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 207.213254][T11390] lo speed is unknown, defaulting to 1000 [ 207.237277][T11375] Node 1 Normal: 211*4kB (UME) 51*8kB (UME) 40*16kB (UME) 117*32kB (UME) 30*64kB (UME) 5*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3898628kB [ 207.278284][T11409] FAULT_INJECTION: forcing a failure. [ 207.278284][T11409] name failslab, interval 1, probability 0, space 0, times 0 [ 207.292028][T11409] CPU: 0 UID: 0 PID: 11409 Comm: syz.3.1489 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 207.292051][T11409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.292062][T11409] Call Trace: [ 207.292069][T11409] [ 207.292076][T11409] dump_stack_lvl+0x189/0x250 [ 207.292104][T11409] ? __pfx____ratelimit+0x10/0x10 [ 207.292125][T11409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.292149][T11409] ? __pfx__printk+0x10/0x10 [ 207.292184][T11409] should_fail_ex+0x414/0x560 [ 207.292210][T11409] should_failslab+0xa8/0x100 [ 207.292230][T11409] kmem_cache_alloc_noprof+0x73/0x3c0 [ 207.292254][T11409] ? skb_clone+0x212/0x3a0 [ 207.292276][T11409] skb_clone+0x212/0x3a0 [ 207.292296][T11409] __netlink_deliver_tap+0x404/0x850 [ 207.292330][T11409] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.292352][T11409] netlink_deliver_tap+0x19c/0x1b0 [ 207.292374][T11409] netlink_sendskb+0x68/0x140 [ 207.292396][T11409] netlink_rcv_skb+0x28c/0x470 [ 207.292417][T11409] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 207.292437][T11409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.292470][T11409] ? bpf_lsm_capable+0x9/0x20 [ 207.292485][T11409] ? security_capable+0x7e/0x2e0 [ 207.292514][T11409] nfnetlink_rcv+0x26a/0x2520 [ 207.292534][T11409] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 207.292557][T11409] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 207.292585][T11409] ? __dev_queue_xmit+0x27e/0x3a70 [ 207.292602][T11409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.292631][T11409] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 207.292647][T11409] ? __pfx___dev_queue_xmit+0x10/0x10 [ 207.292680][T11409] ? ref_tracker_free+0x63a/0x7d0 [ 207.292699][T11409] ? __copy_skb_header+0xa7/0x550 [ 207.292724][T11409] ? __pfx_ref_tracker_free+0x10/0x10 [ 207.292764][T11409] ? skb_clone+0x246/0x3a0 [ 207.292783][T11409] ? __netlink_deliver_tap+0x807/0x850 [ 207.292802][T11409] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.292829][T11409] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.292848][T11409] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.292873][T11409] netlink_unicast+0x758/0x8d0 [ 207.292905][T11409] netlink_sendmsg+0x805/0xb30 [ 207.292933][T11409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.292958][T11409] ? aa_sock_msg_perm+0x94/0x160 [ 207.292984][T11409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.293004][T11409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.293024][T11409] __sock_sendmsg+0x219/0x270 [ 207.293045][T11409] ____sys_sendmsg+0x505/0x830 [ 207.293074][T11409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.293106][T11409] ? import_iovec+0x74/0xa0 [ 207.293125][T11409] ___sys_sendmsg+0x21f/0x2a0 [ 207.293150][T11409] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.293206][T11409] ? __fget_files+0x2a/0x420 [ 207.293224][T11409] ? __fget_files+0x3a0/0x420 [ 207.293252][T11409] __x64_sys_sendmsg+0x19b/0x260 [ 207.293278][T11409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.293309][T11409] ? __pfx_ksys_write+0x10/0x10 [ 207.293322][T11409] ? rcu_is_watching+0x15/0xb0 [ 207.293350][T11409] ? do_syscall_64+0xbe/0x3b0 [ 207.293374][T11409] do_syscall_64+0xfa/0x3b0 [ 207.293391][T11409] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.293410][T11409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.293426][T11409] ? clear_bhb_loop+0x60/0xb0 [ 207.293446][T11409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.293463][T11409] RIP: 0033:0x7faf45b8e929 [ 207.293479][T11409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.293493][T11409] RSP: 002b:00007faf469ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.293511][T11409] RAX: ffffffffffffffda RBX: 00007faf45db5fa0 RCX: 00007faf45b8e929 [ 207.293528][T11409] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 207.293537][T11409] RBP: 00007faf469ae090 R08: 0000000000000000 R09: 0000000000000000 [ 207.293547][T11409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.293558][T11409] R13: 0000000000000000 R14: 00007faf45db5fa0 R15: 00007fff7f81bb58 [ 207.293588][T11409] [ 207.293939][T11375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.550050][T11413] netlink: 'syz.0.1490': attribute type 10 has an invalid length. [ 207.669724][T11375] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.669747][T11375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.669762][T11375] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.761362][T11375] 45664 total pagecache pages [ 207.784125][T11375] 0 pages in swap cache [ 207.815256][T11375] Free swap = 124996kB [ 207.819685][T11375] Total swap = 124996kB [ 207.845178][T11375] 2097051 pages RAM [ 207.848993][T11375] 0 pages HighMem/MovableOnly [ 207.864640][T11375] 424708 pages reserved [ 207.868800][T11375] 0 pages cma reserved [ 207.908636][T11412] lo speed is unknown, defaulting to 1000 [ 208.386882][T11446] dummy0: left allmulticast mode [ 208.391862][T11446] dummy0: left promiscuous mode [ 208.429027][T11446] bridge0: port 3(dummy0) entered disabled state [ 208.477937][T11446] bridge_slave_1: left allmulticast mode [ 208.491626][T11446] bridge_slave_1: left promiscuous mode [ 208.499280][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.513158][T11446] bridge_slave_0: left allmulticast mode [ 208.520133][T11446] bridge_slave_0: left promiscuous mode [ 208.529800][T11446] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.572832][T11460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.597205][T11461] FAULT_INJECTION: forcing a failure. [ 208.597205][T11461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.614510][T11461] CPU: 1 UID: 0 PID: 11461 Comm: syz.3.1502 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 208.614534][T11461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.614544][T11461] Call Trace: [ 208.614552][T11461] [ 208.614559][T11461] dump_stack_lvl+0x189/0x250 [ 208.614587][T11461] ? __pfx____ratelimit+0x10/0x10 [ 208.614608][T11461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.614632][T11461] ? __pfx__printk+0x10/0x10 [ 208.614664][T11461] should_fail_ex+0x414/0x560 [ 208.614691][T11461] _copy_to_user+0x31/0xb0 [ 208.614711][T11461] simple_read_from_buffer+0xe1/0x170 [ 208.614734][T11461] proc_fail_nth_read+0x1df/0x250 [ 208.614757][T11461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.614780][T11461] ? rw_verify_area+0x258/0x650 [ 208.614803][T11461] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.614824][T11461] vfs_read+0x1fd/0x980 [ 208.614853][T11461] ? __pfx___mutex_lock+0x10/0x10 [ 208.614875][T11461] ? __pfx_vfs_read+0x10/0x10 [ 208.614900][T11461] ? __fget_files+0x2a/0x420 [ 208.614923][T11461] ? __fget_files+0x3a0/0x420 [ 208.614940][T11461] ? __fget_files+0x2a/0x420 [ 208.614968][T11461] ksys_read+0x145/0x250 [ 208.614987][T11461] ? __pfx_ksys_read+0x10/0x10 [ 208.615007][T11461] ? rcu_is_watching+0x15/0xb0 [ 208.615036][T11461] ? do_syscall_64+0xbe/0x3b0 [ 208.615060][T11461] do_syscall_64+0xfa/0x3b0 [ 208.615087][T11461] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.615105][T11461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.615122][T11461] ? clear_bhb_loop+0x60/0xb0 [ 208.615144][T11461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.615160][T11461] RIP: 0033:0x7faf45b8d33c [ 208.615176][T11461] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 208.615190][T11461] RSP: 002b:00007faf469ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.615209][T11461] RAX: ffffffffffffffda RBX: 00007faf45db5fa0 RCX: 00007faf45b8d33c [ 208.615221][T11461] RDX: 000000000000000f RSI: 00007faf469ae0a0 RDI: 0000000000000004 [ 208.615232][T11461] RBP: 00007faf469ae090 R08: 0000000000000000 R09: 0000000000000000 [ 208.615243][T11461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.615253][T11461] R13: 0000000000000000 R14: 00007faf45db5fa0 R15: 00007fff7f81bb58 [ 208.615284][T11461] [ 208.618999][T11460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.929597][T11466] __nla_validate_parse: 8 callbacks suppressed [ 208.929614][T11466] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1503'. [ 208.969496][T11448] lo speed is unknown, defaulting to 1000 [ 209.208651][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1506'. [ 210.018412][T11507] bridge3: entered promiscuous mode [ 210.137751][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 210.153282][T11517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1515'. [ 210.162084][T11515] vlan3: entered allmulticast mode [ 210.195111][T11515] bridge_slave_0: entered allmulticast mode [ 210.217564][T11520] netlink: 'syz.4.1516': attribute type 16 has an invalid length. [ 210.245753][T11521] bond8: entered promiscuous mode [ 210.250798][T11521] bond8: entered allmulticast mode [ 210.256448][T11521] 8021q: adding VLAN 0 to HW filter on device bond8 [ 210.276194][T11520] netlink: 'syz.4.1516': attribute type 3 has an invalid length. [ 210.293963][T11520] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.1516'. [ 210.361360][T11527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1518'. [ 210.582940][T11536] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 210.629329][T11540] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 210.651806][T11540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.871248][T11546] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.896835][T11546] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.056947][T11556] syzkaller1: entered promiscuous mode [ 211.062449][T11556] syzkaller1: entered allmulticast mode [ 211.077156][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1529'. [ 211.097464][T11556] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1527'. [ 211.168995][T11555] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1528'. [ 211.205437][T11566] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1530'. [ 211.601125][ T30] audit: type=1107 audit(1750922260.770:6): pid=11589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ö½p' [ 212.009051][T11601] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 212.072263][T11608] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 212.084372][T11608] openvswitch: netlink: Duplicate key (type 0). [ 212.112004][T11608] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 212.459408][T11638] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.641180][T11648] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 212.729157][T11648] lo speed is unknown, defaulting to 1000 [ 213.296006][ T30] audit: type=1800 audit(1750922262.470:7): pid=11671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1564" name=34FFFF dev="tmpfs" ino=1782 res=0 errno=0 [ 213.899846][T11702] netlink: 'syz.4.1577': attribute type 1 has an invalid length. [ 214.098977][T11719] __nla_validate_parse: 10 callbacks suppressed [ 214.098994][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1580'. [ 214.144525][T11726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1581'. [ 214.209491][T11724] syzkaller0: entered promiscuous mode [ 214.215095][T11724] syzkaller0: entered allmulticast mode [ 215.497808][T11732] netlink: 'syz.0.1585': attribute type 1 has an invalid length. [ 215.514118][T11732] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1585'. [ 215.567767][T11743] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 215.608040][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1587'. [ 215.651231][T11748] lo speed is unknown, defaulting to 1000 [ 215.679897][T11742] netlink: 'syz.4.1587': attribute type 13 has an invalid length. [ 215.823876][T11756] xt_l2tp: missing protocol rule (udp|l2tpip) [ 215.921556][ T6359] bond0: (slave bond_slave_0): interface is now down [ 215.923453][T11742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.937499][T11742] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.942276][ T6359] bond0: (slave bond_slave_1): interface is now down [ 215.961082][T11761] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 215.964882][T11760] netlink: 'syz.2.1593': attribute type 10 has an invalid length. [ 215.979699][ T6359] bond0: (slave wlan1): interface is now down [ 215.986179][T11760] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1593'. [ 216.023887][ T36] bond0: (slave bond_slave_0): interface is now down [ 216.035928][ T36] bond0: (slave bond_slave_1): interface is now down [ 216.042759][ T36] bond0: (slave wlan1): interface is now down [ 216.063757][ T36] bond0: (slave bond_slave_0): interface is now down [ 216.070675][ T36] bond0: (slave bond_slave_1): interface is now down [ 216.077965][ T36] bond0: (slave wlan1): interface is now down [ 216.093827][T11742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.109407][ T36] bond0: (slave bond_slave_0): interface is now down [ 216.109427][ T36] bond0: (slave bond_slave_1): interface is now down [ 216.109440][ T36] bond0: (slave wlan1): interface is now down [ 216.131789][T11750] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1589'. [ 216.142489][ T6353] bond0: (slave bond_slave_0): interface is now down [ 216.149610][T11760] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 216.171037][ T6353] bond0: (slave bond_slave_1): interface is now down [ 216.177879][ T6353] bond0: (slave wlan1): interface is now down [ 216.214467][ T36] bond0: (slave bond_slave_0): interface is now down [ 216.225914][ T36] bond0: (slave bond_slave_1): interface is now down [ 216.240369][ T36] bond0: (slave wlan1): interface is now down [ 216.265740][ T134] bond0: (slave bond_slave_0): interface is now down [ 216.281420][T11769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1595'. [ 216.313976][ T134] bond0: (slave bond_slave_1): interface is now down [ 216.333728][ T134] bond0: (slave wlan1): interface is now down [ 216.377743][ T134] bond0: now running without any active interface! [ 216.575484][T11786] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 216.981771][T11802] pimreg: entered allmulticast mode [ 216.995442][T11802] pimreg: left allmulticast mode [ 217.487121][T11822] ip_vti0: left promiscuous mode [ 217.617092][T11840] nbd: must specify a device to reconfigure [ 217.641898][T11822] macvlan0: left promiscuous mode [ 217.677618][T11822] bridge2: left promiscuous mode [ 217.712081][T11822] bridge2: left allmulticast mode [ 217.740563][T11822] bridge3: left promiscuous mode [ 217.765232][T11822] bridge3: left allmulticast mode [ 217.787911][T11822] gretap1: left allmulticast mode [ 217.840829][T11822] geneve0: left promiscuous mode [ 217.847376][T11822] geneve0: left allmulticast mode [ 217.884358][T11822] gretap2: left promiscuous mode [ 217.943891][T11822] vlan2: left promiscuous mode [ 217.950918][T11822] bridge0: left promiscuous mode [ 217.959285][T11822] vlan2: left allmulticast mode [ 217.965235][T11822] bridge0: left allmulticast mode [ 217.972080][T11822] bridge4: left promiscuous mode [ 217.983180][T11822] ip6tnl1: left promiscuous mode [ 217.996873][T11822] ip6tnl1: left allmulticast mode [ 218.007854][T11822] veth5: left promiscuous mode [ 218.014075][T11822] vlan3: left allmulticast mode [ 218.019075][T11822] bridge_slave_0: left allmulticast mode [ 218.026568][T11822] bond8: left promiscuous mode [ 218.041462][T11822] bond8: left allmulticast mode [ 218.079134][ T6359] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 50767 - 0 [ 218.109127][ T6359] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 50767 - 0 [ 218.127961][ T6359] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 50767 - 0 [ 218.149121][ T6359] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 50767 - 0 [ 218.243077][T11864] IPVS: set_ctl: invalid protocol: 44 10.1.1.2:20001 [ 218.284494][T11864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1619'. [ 218.293444][T11864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1619'. [ 218.326893][T11864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1619'. [ 218.385299][T11868] lo speed is unknown, defaulting to 1000 [ 218.790223][T11883] netlink: 'syz.1.1624': attribute type 4 has an invalid length. [ 219.112113][T11901] __nla_validate_parse: 1 callbacks suppressed [ 219.112130][T11901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1632'. [ 219.227558][T11904] tipc: Started in network mode [ 219.238695][T11904] tipc: Node identity ca20f46c0cd4, cluster identity 4711 [ 219.266380][T11904] tipc: Enabled bearer , priority 0 [ 219.295223][T11912] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1635'. [ 219.377043][T11911] syzkaller0: entered promiscuous mode [ 219.382520][T11911] syzkaller0: entered allmulticast mode [ 219.409828][T11911] tipc: Resetting bearer [ 219.532868][ T36] tipc: Resetting bearer [ 219.549298][T11903] tipc: Resetting bearer [ 220.394771][T11843] tipc: Node number set to 3337942124 [ 220.819444][T11903] tipc: Disabling bearer [ 221.069384][T11954] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 221.140334][T11961] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.167894][T11961] lo speed is unknown, defaulting to 1000 [ 221.218558][T11963] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1647'. [ 221.317053][T11971] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1649'. [ 221.353293][T11971] netlink: zone id is out of range [ 221.383447][T11971] netlink: zone id is out of range [ 221.388694][ T30] audit: type=1800 audit(1750922270.560:8): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1643" name="cgroup.controllers" dev="tmpfs" ino=1666 res=0 errno=0 [ 221.416888][T11971] netlink: zone id is out of range [ 221.422013][T11971] netlink: zone id is out of range [ 221.434967][T11971] netlink: zone id is out of range [ 221.449476][T11971] netlink: zone id is out of range [ 221.483614][T11971] netlink: zone id is out of range [ 221.520406][T11971] netlink: zone id is out of range [ 221.534009][T11971] netlink: zone id is out of range [ 221.619951][T11982] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20004 [ 221.816054][T11993] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'. [ 221.826720][T11993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1653'. [ 221.887321][T11993] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551615) [ 221.908267][T11993] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 222.053823][T12005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1654'. [ 222.097419][T12004] lo speed is unknown, defaulting to 1000 [ 222.743978][T12027] IPVS: stopping backup sync thread 6199 ... [ 222.842089][T12030] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1660'. [ 222.990589][T12026] IPVS: Unknown mcast interface: vlan0 [ 223.083054][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 223.134685][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 223.974985][T12076] netlink: 'syz.1.1671': attribute type 39 has an invalid length. [ 224.203025][T12094] __nla_validate_parse: 1 callbacks suppressed [ 224.203042][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'. [ 224.239399][T12094] macvtap1: entered promiscuous mode [ 224.246395][T12094] team0: entered promiscuous mode [ 224.252205][T12094] team_slave_0: entered promiscuous mode [ 224.259745][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1676'. [ 224.261592][T12094] team_slave_1: entered promiscuous mode [ 224.279132][T12094] macvtap1: entered allmulticast mode [ 224.284716][T12094] team0: entered allmulticast mode [ 224.289964][T12094] team_slave_0: entered allmulticast mode [ 224.295775][T12094] team_slave_1: entered allmulticast mode [ 224.301651][T12094] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 224.309317][T12094] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 224.317774][T12099] team0: left allmulticast mode [ 224.322671][T12099] team_slave_0: left allmulticast mode [ 224.328539][T12099] team_slave_1: left allmulticast mode [ 224.334134][T12099] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 224.342508][T12099] team0: left promiscuous mode [ 224.347410][T12099] team_slave_0: left promiscuous mode [ 224.353780][T12099] team_slave_1: left promiscuous mode [ 224.399956][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1677'. [ 224.410443][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1677'. [ 224.427404][T12101] netlink: 'syz.2.1677': attribute type 5 has an invalid length. [ 224.502516][T12102] netlink: 'syz.2.1677': attribute type 2 has an invalid length. [ 224.727142][T12122] netlink: 'syz.3.1682': attribute type 1 has an invalid length. [ 224.729860][T12115] netlink: 'syz.4.1683': attribute type 2 has an invalid length. [ 224.750420][T12115] netlink: 'syz.4.1683': attribute type 3 has an invalid length. [ 224.792735][T12122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.190840][T12137] lo speed is unknown, defaulting to 1000 [ 225.238609][T12149] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1691'. [ 225.721591][T12171] veth4: entered allmulticast mode [ 225.735888][T12171] veth5: entered promiscuous mode [ 225.922900][T12180] netlink: 'syz.4.1699': attribute type 2 has an invalid length. [ 225.984136][T12174] bridge3: left promiscuous mode [ 226.005991][T12174] macvtap1: left promiscuous mode [ 226.024436][T12174] macvtap1: left allmulticast mode [ 226.045533][T12174] veth4: left allmulticast mode [ 226.054004][T12174] veth5: left promiscuous mode [ 226.084106][T11828] lo speed is unknown, defaulting to 1000 [ 226.123759][T11828] syz2: Port: 1 Link DOWN [ 226.444781][T12198] xt_CT: No such helper "pptp" [ 226.657713][T12193] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.687358][T12210] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 226.730363][T12212] vlan3: entered promiscuous mode [ 226.793736][T12212] team0: entered promiscuous mode [ 226.798932][T12212] team_slave_0: entered promiscuous mode [ 226.805963][T12212] team_slave_1: entered promiscuous mode [ 226.927122][T12193] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.055761][T12223] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1709'. [ 227.129881][T12228] netlink: 'syz.1.1712': attribute type 11 has an invalid length. [ 227.155624][T12230] xt_CONNSECMARK: invalid mode: 254 [ 227.176170][T12233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 227.187770][T12193] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.249068][T12222] lo speed is unknown, defaulting to 1000 [ 227.311387][T12221] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999 [ 227.402730][T12193] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.766574][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.794603][T12263] sctp: [Deprecated]: syz.4.1719 (pid 12263) Use of int in maxseg socket option. [ 227.794603][T12263] Use struct sctp_assoc_value instead [ 227.820962][ T6359] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.030284][ T6359] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.073125][T12279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.075423][ T6359] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.192727][T12259] lo speed is unknown, defaulting to 1000 [ 228.475611][T12297] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 228.528137][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1727'. [ 229.337622][T12337] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20003 [ 229.350989][T12341] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1738'. [ 229.353904][T12342] netlink: 'syz.1.1738': attribute type 15 has an invalid length. [ 229.791695][T12363] lo speed is unknown, defaulting to 1000 [ 229.834513][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 229.942833][T12355] lo speed is unknown, defaulting to 1000 [ 230.188374][T12389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.282457][T12383] lo speed is unknown, defaulting to 1000 [ 230.708485][T12407] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 230.733911][T12355] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1742'. [ 230.809233][T12414] net_ratelimit: 11 callbacks suppressed [ 230.809254][T12414] Set syz0 is full, maxelem 0 reached [ 230.823997][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'. [ 230.871476][T12407] 8021q: adding VLAN 0 to HW filter on device bond3 [ 230.909366][T12425] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.934090][T12426] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 230.953424][T12407] ip6t_srh: unknown srh invflags 4000 [ 231.132172][T12417] bond3 (unregistering): Released all slaves [ 231.177824][T12412] lo speed is unknown, defaulting to 1000 [ 231.301121][T12436] x_tables: duplicate underflow at hook 2 [ 231.425859][T12443] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1761'. [ 231.466418][ T5888] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 231.478356][ T5888] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 231.486036][ T5888] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 231.497935][ T5888] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 231.519729][ T5888] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 231.544635][ T5888] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 231.562774][ T5888] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3 [ 231.582629][ T5888] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 17/19 [ 231.601546][ T5888] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 232.025567][T12460] lo speed is unknown, defaulting to 1000 [ 232.042502][T12473] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 232.261731][T12483] netlink: 'syz.0.1770': attribute type 13 has an invalid length. [ 232.289777][T12485] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1772'. [ 232.305143][T12483] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (255) [ 232.320139][T12488] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1772'. [ 232.507512][T12487] tun0: tun_chr_ioctl cmd 1074025675 [ 232.550586][T12487] tun0: persist enabled [ 232.557929][T12487] tun0: tun_chr_ioctl cmd 1074025675 [ 232.563232][T12487] tun0: persist enabled [ 232.671782][T12501] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.708866][T12502] netlink: 'syz.1.1775': attribute type 11 has an invalid length. [ 232.820368][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'. [ 232.834127][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'. [ 232.971055][T12519] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1781'. [ 233.228709][T12532] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.316590][T12532] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.367230][T12535] lo speed is unknown, defaulting to 1000 [ 233.388783][T12532] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.424332][ T5155] Bluetooth: hci4: command 0x0405 tx timeout [ 233.486685][T12532] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.696452][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.717526][ T6353] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.771568][ T6353] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.830850][ T6363] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.862193][T12555] lo speed is unknown, defaulting to 1000 [ 234.014422][T12558] pim6reg1: entered allmulticast mode [ 234.424164][T12605] sctp: [Deprecated]: syz.3.1804 (pid 12605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.424164][T12605] Use struct sctp_sack_info instead [ 234.468684][T12605] netlink: 'syz.3.1804': attribute type 13 has an invalid length. [ 234.608854][T12611] __nla_validate_parse: 7 callbacks suppressed [ 234.608866][T12611] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1806'. [ 234.631258][T12611] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1806'. [ 234.720990][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'. [ 234.842847][T12626] tc_dump_action: action bad kind [ 234.938845][T12632] netlink: 'syz.3.1814': attribute type 1 has an invalid length. [ 234.946891][T12632] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1814'. [ 234.956375][T12632] netlink: 'syz.3.1814': attribute type 1 has an invalid length. [ 235.211952][T12645] lo speed is unknown, defaulting to 1000 [ 235.684820][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1825'. [ 235.870361][ T30] audit: type=1800 audit(1750922285.040:9): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1829" name="memory.events" dev="tmpfs" ino=1923 res=0 errno=0 [ 235.904601][ T30] audit: type=1804 audit(1750922285.070:10): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1829" name="memory.events" dev="tmpfs" ino=1923 res=1 errno=0 [ 236.342234][T12697] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 236.367011][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 236.543285][T12699] team0: Mode changed to "activebackup" [ 236.553300][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1840'. [ 236.574820][T12705] lo speed is unknown, defaulting to 1000 [ 236.589666][T12710] netlink: 'syz.3.1840': attribute type 1 has an invalid length. [ 236.607016][T12710] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1840'. [ 236.615639][T12711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1838'. [ 236.629833][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'. [ 236.652899][T12720] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 236.666404][T12709] netlink: 'syz.3.1840': attribute type 1 has an invalid length. [ 237.210092][T12754] xt_limit: Overflow, try lower: 0/0 [ 238.008067][T12800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.206111][T12810] lo speed is unknown, defaulting to 1000 [ 238.360250][T12821] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 238.404611][T12823] veth0: entered promiscuous mode [ 238.546003][T12828] IPVS: Error connecting to the multicast addr [ 239.027579][T12810] netlink: 'syz.4.1867': attribute type 21 has an invalid length. [ 239.060842][T12810] netlink: 'syz.4.1867': attribute type 1 has an invalid length. [ 239.108958][T12868] xt_hashlimit: size too large, truncated to 1048576 [ 239.377431][T12880] netlink: zone id is out of range [ 239.392585][T12880] netlink: zone id is out of range [ 239.398973][T12880] netlink: get zone limit has 8 unknown bytes [ 239.676234][T12891] __nla_validate_parse: 12 callbacks suppressed [ 239.676252][T12891] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1889'. [ 239.706889][T12893] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1889'. [ 240.016418][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1893'. [ 241.471822][T12946] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1901'. [ 241.526225][T12949] netlink: 'syz.2.1903': attribute type 1 has an invalid length. [ 241.552172][T12949] netlink: 'syz.2.1903': attribute type 4 has an invalid length. [ 241.576042][T12951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 241.585397][T12949] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1903'. [ 241.609086][T12949] NCSI netlink: No device for ifindex 458760 [ 241.617259][T12956] netlink: 'syz.1.1905': attribute type 6 has an invalid length. [ 241.776708][T12968] netlink: 'syz.3.1909': attribute type 4 has an invalid length. [ 241.821873][T12972] netlink: 'syz.3.1909': attribute type 4 has an invalid length. [ 241.850669][T11828] lo speed is unknown, defaulting to 1000 [ 241.859228][T11828] syz2: Port: 1 Link ACTIVE [ 241.923425][T11830] lo speed is unknown, defaulting to 1000 [ 241.930130][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1909'. [ 241.943182][T11830] syz2: Port: 1 Link DOWN [ 242.053020][T12986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1913'. [ 242.140817][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1914'. [ 242.392959][T13004] lo speed is unknown, defaulting to 1000 [ 242.691103][T13020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1922'. [ 243.214218][T13054] netlink: 'syz.3.1933': attribute type 9 has an invalid length. [ 243.227874][T13052] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 243.246097][T13052] macsec1: entered allmulticast mode [ 243.251412][T13052] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 243.266237][T13052] batman_adv: batadv0: Adding interface: macsec1 [ 243.277067][T13055] No such timeout policy "syz0" [ 243.285062][T13052] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 243.314010][T13052] batman_adv: batadv0: Interface activated: macsec1 [ 243.340282][T13054] macvlan0: entered allmulticast mode [ 243.382956][T13054] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 243.736202][T13087] lo speed is unknown, defaulting to 1000 [ 243.936376][T13098] netlink: 'syz.2.1945': attribute type 10 has an invalid length. [ 244.077610][T13098] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 244.252777][T13116] lo speed is unknown, defaulting to 1000 [ 245.102891][T13153] lo speed is unknown, defaulting to 1000 [ 245.510766][T13184] __nla_validate_parse: 38 callbacks suppressed [ 245.510779][T13184] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1964'. [ 245.697864][T13193] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1966'. [ 245.822517][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1969'. [ 246.045633][T13209] lo speed is unknown, defaulting to 1000 [ 246.299285][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 246.436602][T13221] bridge_slave_1 (unregistering): left allmulticast mode [ 246.463422][T13221] bridge_slave_1 (unregistering): left promiscuous mode [ 246.491865][T13221] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.603003][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 246.631427][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 246.644413][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 246.653390][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 246.704222][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 246.753644][T13221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 246.894450][T13234] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 246.901946][T13234] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 246.949979][T13240] RDS: rds_bind could not find a transport for ::ffff:172.20.20.59, load rds_tcp or rds_rdma? [ 246.961744][T13237] wg2: entered promiscuous mode [ 247.889598][T13281] netlink: 'syz.4.1994': attribute type 1 has an invalid length. [ 247.921080][T13281] NCSI netlink: No device for ifindex 813332851 [ 248.039657][T13291] vxcan1: entered allmulticast mode [ 248.550374][T13329] lo speed is unknown, defaulting to 1000 [ 248.936611][T13352] lo speed is unknown, defaulting to 1000 [ 248.976413][T13359] lo speed is unknown, defaulting to 1000 [ 249.028235][T13351] netlink: 'syz.0.2013': attribute type 1 has an invalid length. [ 249.228805][T13376] netlink: 'syz.3.2019': attribute type 10 has an invalid length. [ 249.603705][T13397] netlink: 'syz.4.2023': attribute type 4 has an invalid length. [ 249.692473][T13403] macvlan0: left allmulticast mode [ 249.744212][T13402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.219400][T13437] lo speed is unknown, defaulting to 1000 [ 250.253113][T13440] netlink: 'syz.2.2030': attribute type 303 has an invalid length. [ 250.524304][T13450] netlink: 'syz.2.2035': attribute type 12 has an invalid length. [ 250.552696][T13450] __nla_validate_parse: 48 callbacks suppressed [ 250.552713][T13450] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2035'. [ 250.744790][T13456] lo speed is unknown, defaulting to 1000 [ 250.767932][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2039'. [ 250.889306][T13466] netlink: 'syz.4.2041': attribute type 3 has an invalid length. [ 251.401044][T13496] netlink: 'syz.1.2049': attribute type 1 has an invalid length. [ 251.434674][T13496] 8021q: adding VLAN 0 to HW filter on device bond9 [ 251.606206][T13496] bond9 (unregistering): Released all slaves [ 251.637359][T13513] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2054'. [ 251.647518][T13514] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2054'. [ 251.663098][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 251.750104][T13519] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.796200][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2057'. [ 251.861927][T13527] veth0_virt_wifi: entered promiscuous mode [ 251.891103][T13527] veth0_virt_wifi: left promiscuous mode [ 252.099802][T13543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2062'. [ 252.202121][T13549] x_tables: duplicate underflow at hook 1 [ 252.271325][T13555] delete_channel: no stack [ 252.304752][T13548] lo speed is unknown, defaulting to 1000 [ 252.379454][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2068'. [ 252.401747][T13560] x_tables: duplicate underflow at hook 1 [ 252.481931][T13567] lo speed is unknown, defaulting to 1000 [ 252.627535][T13582] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2072'. [ 252.945900][T13604] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2077'. [ 252.980295][T13604] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 253.008206][T13604] openvswitch: netlink: Message has 6332 unknown bytes. [ 253.254202][T13617] netlink: 'syz.1.2082': attribute type 21 has an invalid length. [ 253.423082][T13632] ipvlan2: entered promiscuous mode [ 253.454539][T13632] ipvlan2: entered allmulticast mode [ 253.459862][T13632] !: entered allmulticast mode [ 253.474961][T13635] IPVS: Error connecting to the multicast addr [ 253.532678][T13634] lo speed is unknown, defaulting to 1000 [ 253.877053][T13648] lo speed is unknown, defaulting to 1000 [ 254.361097][T13678] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 254.511795][T13690] lo speed is unknown, defaulting to 1000 [ 254.551991][T13680] xt_CT: No such helper "syz0" [ 254.654229][T13697] syzkaller1: entered promiscuous mode [ 254.667678][T13697] syzkaller1: entered allmulticast mode [ 254.789206][T13699] lo speed is unknown, defaulting to 1000 [ 255.056126][T13722] lo speed is unknown, defaulting to 1000 [ 255.261424][T13731] openvswitch: netlink: Missing key (keys=40, expected=80) [ 255.401010][T13745] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 255.410961][T13745] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 255.432937][T13746] nbd: socks must be embedded in a SOCK_ITEM attr [ 255.686972][T13755] bridge3: entered promiscuous mode [ 255.795235][T13763] netlink: 'syz.0.2122': attribute type 10 has an invalid length. [ 255.827780][T13763] team0: Cannot enslave team device to itself [ 255.837555][T13763] netlink: 'syz.0.2122': attribute type 10 has an invalid length. [ 255.853203][T13763] team0: Cannot enslave team device to itself [ 255.898538][T13765] lo speed is unknown, defaulting to 1000 [ 255.962127][T13776] __nla_validate_parse: 15 callbacks suppressed [ 255.962142][T13776] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2126'. [ 256.155769][T13784] x_tables: duplicate underflow at hook 4 [ 256.247759][T13779] lo speed is unknown, defaulting to 1000 [ 258.518232][T13834] lo speed is unknown, defaulting to 1000 [ 258.600477][T13846] netlink: 'syz.3.2144': attribute type 10 has an invalid length. [ 258.681776][T13846] team0: Device ipvlan1 failed to register rx_handler [ 259.404105][T13884] netlink: 'syz.0.2151': attribute type 10 has an invalid length. [ 259.432879][T13884] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2151'. [ 259.519472][T13884] team0: Port device geneve0 added [ 259.964492][T13915] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 260.323989][T13934] syz.2.2166: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 260.368113][T13934] CPU: 0 UID: 0 PID: 13934 Comm: syz.2.2166 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 260.368138][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.368148][T13934] Call Trace: [ 260.368156][T13934] [ 260.368163][T13934] dump_stack_lvl+0x189/0x250 [ 260.368198][T13934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.368224][T13934] ? __pfx__printk+0x10/0x10 [ 260.368243][T13934] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 260.368262][T13934] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 260.368291][T13934] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 260.368314][T13934] warn_alloc+0x214/0x310 [ 260.368334][T13934] ? stack_depot_save_flags+0x40/0x900 [ 260.368361][T13934] ? __pfx_warn_alloc+0x10/0x10 [ 260.368383][T13934] ? kasan_save_track+0x4f/0x80 [ 260.368407][T13934] ? xskq_create+0x56/0x170 [ 260.368423][T13934] ? xsk_init_queue+0xb0/0x110 [ 260.368439][T13934] ? xsk_setsockopt+0x43f/0x710 [ 260.368454][T13934] ? do_sock_setsockopt+0x25a/0x3e0 [ 260.368475][T13934] ? __x64_sys_setsockopt+0x18b/0x220 [ 260.368495][T13934] ? do_syscall_64+0xfa/0x3b0 [ 260.368513][T13934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.368538][T13934] __vmalloc_node_range_noprof+0x125/0x12f0 [ 260.368589][T13934] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.368616][T13934] ? __kasan_kmalloc+0x93/0xb0 [ 260.368637][T13934] vmalloc_user_noprof+0xad/0xf0 [ 260.368655][T13934] ? xskq_create+0xbf/0x170 [ 260.368675][T13934] xskq_create+0xbf/0x170 [ 260.368698][T13934] xsk_init_queue+0xb0/0x110 [ 260.368720][T13934] xsk_setsockopt+0x43f/0x710 [ 260.368740][T13934] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.368755][T13934] ? __lock_acquire+0xab9/0xd20 [ 260.368789][T13934] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 260.368810][T13934] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.368829][T13934] do_sock_setsockopt+0x25a/0x3e0 [ 260.368855][T13934] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 260.368883][T13934] ? __fget_files+0x2a/0x420 [ 260.368912][T13934] __x64_sys_setsockopt+0x18b/0x220 [ 260.368941][T13934] do_syscall_64+0xfa/0x3b0 [ 260.368960][T13934] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.368980][T13934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.368997][T13934] ? clear_bhb_loop+0x60/0xb0 [ 260.369019][T13934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.369034][T13934] RIP: 0033:0x7fe3ec58e929 [ 260.369050][T13934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.369066][T13934] RSP: 002b:00007fe3ed4b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.369085][T13934] RAX: ffffffffffffffda RBX: 00007fe3ec7b6080 RCX: 00007fe3ec58e929 [ 260.369098][T13934] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 260.369109][T13934] RBP: 00007fe3ec610b39 R08: 0000000000000004 R09: 0000000000000000 [ 260.369121][T13934] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.369133][T13934] R13: 0000000000000000 R14: 00007fe3ec7b6080 R15: 00007ffdcb82d0d8 [ 260.369164][T13934] [ 260.369171][T13934] Mem-Info: [ 260.798542][T13934] active_anon:3709 inactive_anon:0 isolated_anon:0 [ 260.798542][T13934] active_file:1674 inactive_file:39908 isolated_file:0 [ 260.798542][T13934] unevictable:768 dirty:185 writeback:0 [ 260.798542][T13934] slab_reclaimable:12430 slab_unreclaimable:171189 [ 260.798542][T13934] mapped:29307 shmem:1363 pagetables:901 [ 260.798542][T13934] sec_pagetables:0 bounce:0 [ 260.798542][T13934] kernel_misc_reclaimable:0 [ 260.798542][T13934] free:1259029 free_pcp:15441 free_cma:0 [ 260.875109][T13934] Node 0 active_anon:14836kB inactive_anon:0kB active_file:6696kB inactive_file:159432kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117128kB dirty:736kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12924kB pagetables:3668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 260.918008][T13934] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 260.977877][T13934] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.023097][T13962] netlink: 'syz.1.2175': attribute type 1 has an invalid length. [ 261.037042][T13962] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2175'. [ 261.120755][T13934] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 261.136844][T13934] Node 0 DMA32 free:1120392kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14784kB inactive_anon:0kB active_file:6696kB inactive_file:157600kB unevictable:1536kB writepending:736kB present:3129332kB managed:2560948kB mlocked:0kB bounce:0kB free_pcp:43668kB local_pcp:21460kB free_cma:0kB [ 261.172477][T13934] lowmem_reserve[]: 0 0 1 1 1 [ 261.177291][T13934] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 261.221196][T13934] lowmem_reserve[]: 0 0 0 0 [ 261.221247][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2177'. [ 261.226049][T13934] 0 [ 261.226067][T13934] Node 1 Normal free:3899952kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18120kB local_pcp:8296kB free_cma:0kB [ 261.226124][T13934] lowmem_reserve[]: 0 0 0 0 0 [ 261.226166][T13934] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.311770][T13934] Node 0 DMA32: 1939*4kB (UME) 770*8kB (UME) 215*16kB (UME) 715*32kB (UME) 218*64kB (UME) 67*128kB (UME) 55*256kB (UME) 23*512kB (UM) 23*1024kB (UM) 4*2048kB (UE) 244*4096kB (UM) = 1119788kB [ 261.332528][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2179'. [ 261.336903][T13934] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 261.356711][T13934] Node 1 Normal: 214*4kB (UME) 51*8kB (UME) 40*16kB (UME) 130*32kB (UME) 40*64kB (UME) 7*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3899952kB [ 261.375221][T13934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.385678][T13934] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.401298][T13934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.411772][T13934] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.434161][T13934] 42942 total pagecache pages [ 261.438861][T13934] 0 pages in swap cache [ 261.443004][T13934] Free swap = 124996kB [ 261.453014][T13934] Total swap = 124996kB [ 261.457280][T13934] 2097051 pages RAM [ 261.461480][T13934] 0 pages HighMem/MovableOnly [ 261.468500][T13934] 424708 pages reserved [ 261.472809][T13934] 0 pages cma reserved [ 261.654908][T13971] lo speed is unknown, defaulting to 1000 [ 261.733387][T13990] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2183'. [ 261.944023][T13999] veth0: entered promiscuous mode [ 261.950487][T13998] veth0: left promiscuous mode [ 262.512031][T14043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2195'. [ 262.655219][T14054] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2198'. [ 262.760364][T14057] lo speed is unknown, defaulting to 1000 [ 262.779501][T14060] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 262.867646][T14068] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 263.058435][T14075] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2202'. [ 263.059898][T14074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2203'. [ 263.284329][T14079] netlink: 'syz.4.2205': attribute type 21 has an invalid length. [ 263.292771][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 263.481784][T14088] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2207'. [ 263.511501][T14088] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 263.522465][T14088] gretap2: entered promiscuous mode [ 263.527927][T14088] gretap2: entered allmulticast mode [ 263.603723][T14095] lo speed is unknown, defaulting to 1000 [ 263.659742][T14092] gretap0: entered promiscuous mode [ 263.729005][T14107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.838882][T14110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.979097][T14095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.579857][T14153] netlink: 'syz.2.2227': attribute type 142 has an invalid length. [ 264.608342][T14156] netlink: 'syz.2.2227': attribute type 142 has an invalid length. [ 265.088099][T14193] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 265.143479][T14181] lo speed is unknown, defaulting to 1000 [ 265.186916][T14193] syzkaller1: entered promiscuous mode [ 265.192409][T14193] syzkaller1: entered allmulticast mode [ 265.815720][T14222] bridge_slave_0: entered allmulticast mode [ 265.823097][T14217] lo speed is unknown, defaulting to 1000 [ 265.910302][T14224] tipc: Enabling of bearer rejected, media not registered [ 266.123641][T14232] __nla_validate_parse: 16 callbacks suppressed [ 266.123659][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2251'. [ 266.352568][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2252'. [ 266.596984][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2254'. [ 266.635501][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 266.669053][T14250] netlink: 'syz.0.2254': attribute type 1 has an invalid length. [ 266.682879][T14250] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2254'. [ 266.705955][T14217] lo speed is unknown, defaulting to 1000 [ 266.735575][T14250] nbd: socks must be embedded in a SOCK_ITEM attr [ 266.751268][T14250] block nbd0: shutting down sockets [ 266.762308][T14217] lo speed is unknown, defaulting to 1000 [ 266.775022][T14217] lo speed is unknown, defaulting to 1000 [ 266.866236][T14217] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 266.920245][T14263] netlink: 'syz.2.2257': attribute type 12 has an invalid length. [ 266.969313][T14272] netlink: 'syz.2.2257': attribute type 12 has an invalid length. [ 266.977525][T14217] lo speed is unknown, defaulting to 1000 [ 267.015105][T14217] lo speed is unknown, defaulting to 1000 [ 267.037207][T14265] lo speed is unknown, defaulting to 1000 [ 267.143965][T14217] lo speed is unknown, defaulting to 1000 [ 267.154632][T14273] lo speed is unknown, defaulting to 1000 [ 267.249604][T14217] lo speed is unknown, defaulting to 1000 [ 267.318434][T14217] lo speed is unknown, defaulting to 1000 [ 267.326214][T14217] lo speed is unknown, defaulting to 1000 [ 267.822204][T14277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2258'. [ 267.962840][T14266] SET target dimension over the limit! [ 270.188554][T14283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2261'. [ 270.244773][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 270.280540][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2262'. [ 270.296620][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 270.376948][T14302] vlan0: entered promiscuous mode [ 270.394375][T14302] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 270.471808][T14302] netlink: 'syz.3.2266': attribute type 20 has an invalid length. [ 271.320164][T14367] __nla_validate_parse: 6 callbacks suppressed [ 271.320183][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2282'. [ 271.336075][T14369] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2283'. [ 271.367739][T14369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.501581][ T30] audit: type=1800 audit(1750922320.670:11): pid=14375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2286" name="bpf-map" dev="anon_inodefs" ino=24 res=0 errno=0 [ 271.561174][T14379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2288'. [ 271.644955][T14383] netlink: 'syz.4.2289': attribute type 7 has an invalid length. [ 271.677270][T14386] tipc: Failed to remove unknown binding: 66,1,1/0:4080888202/4080888204 [ 271.755290][T14386] tipc: Failed to remove unknown binding: 66,1,1/0:4080888202/4080888204 [ 271.793618][T14386] tipc: Failed to remove unknown binding: 66,1,1/0:4080888202/4080888204 [ 271.892237][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2296'. [ 271.935030][T14406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2295'. [ 272.166856][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'. [ 272.176330][T14406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.214736][T14415] bond4: (slave veth5): Enslaving as an active interface with an up link [ 272.284320][T14425] vlan2: entered allmulticast mode [ 272.289532][T14425] veth1: entered allmulticast mode [ 272.295736][T14425] bond0: (slave vlan2): Opening slave failed [ 272.380059][T14432] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.550064][T14413] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2297'. [ 272.816457][T14453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.856682][T14455] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2308'. [ 272.892394][T14458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2309'. [ 272.901999][T14458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2309'. [ 272.923254][T14458] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 272.934193][T14446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.014588][T14446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.135627][T14469] syzkaller1: entered promiscuous mode [ 273.141097][T14469] syzkaller1: entered allmulticast mode [ 273.217066][T14473] tun0: tun_chr_ioctl cmd 1074025675 [ 273.222496][T14473] tun0: persist enabled [ 273.230048][T14473] tun0: tun_chr_ioctl cmd 1074025675 [ 273.235591][T14473] tun0: persist enabled [ 273.330632][T14484] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 273.344816][T14483] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.401786][T14483] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.455580][T14483] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.562129][T14483] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.976985][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.053159][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.123357][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.326280][T14507] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 274.412437][ T204] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.530555][T14534] netlink: 'syz.0.2326': attribute type 8 has an invalid length. [ 274.784396][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 275.363157][T14579] No such timeout policy "syz0" [ 275.614412][T14585] netlink: 'syz.2.2339': attribute type 1 has an invalid length. [ 275.694882][T14585] bond5: entered promiscuous mode [ 275.700275][T14585] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.730470][T14589] bond5: (slave bridge4): making interface the new active one [ 275.742387][T14589] bridge4: entered promiscuous mode [ 275.749495][T14589] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 276.033933][T14607] netlink: 'syz.2.2346': attribute type 1 has an invalid length. [ 276.041691][T14607] netlink: 'syz.2.2346': attribute type 1 has an invalid length. [ 276.073584][T14607] netlink: 'syz.2.2346': attribute type 2 has an invalid length. [ 276.753331][T14646] netlink: 'syz.0.2354': attribute type 16 has an invalid length. [ 276.761888][T14646] netlink: 'syz.0.2354': attribute type 17 has an invalid length. [ 276.798055][T14646] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.809316][T14646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.835230][T14650] gretap2: entered allmulticast mode [ 277.038825][T14665] __nla_validate_parse: 10 callbacks suppressed [ 277.038843][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2364'. [ 277.134863][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2367'. [ 277.806037][T14680] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2368'. [ 277.850082][T14680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2368'. [ 278.233856][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2373'. [ 278.633969][T14714] FAULT_INJECTION: forcing a failure. [ 278.633969][T14714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.667091][T14714] CPU: 0 UID: 0 PID: 14714 Comm: syz.0.2377 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 278.667116][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.667127][T14714] Call Trace: [ 278.667135][T14714] [ 278.667142][T14714] dump_stack_lvl+0x189/0x250 [ 278.667171][T14714] ? __pfx____ratelimit+0x10/0x10 [ 278.667192][T14714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.667215][T14714] ? __pfx__printk+0x10/0x10 [ 278.667233][T14714] ? __might_fault+0xb0/0x130 [ 278.667262][T14714] should_fail_ex+0x414/0x560 [ 278.667289][T14714] _copy_from_user+0x2d/0xb0 [ 278.667307][T14714] ___sys_sendmsg+0x158/0x2a0 [ 278.667333][T14714] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.667393][T14714] ? __fget_files+0x2a/0x420 [ 278.667411][T14714] ? __fget_files+0x3a0/0x420 [ 278.667439][T14714] __x64_sys_sendmsg+0x19b/0x260 [ 278.667465][T14714] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.667497][T14714] ? __pfx_ksys_write+0x10/0x10 [ 278.667511][T14714] ? rcu_is_watching+0x15/0xb0 [ 278.667539][T14714] ? do_syscall_64+0xbe/0x3b0 [ 278.667563][T14714] do_syscall_64+0xfa/0x3b0 [ 278.667581][T14714] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.667600][T14714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.667616][T14714] ? clear_bhb_loop+0x60/0xb0 [ 278.667636][T14714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.667656][T14714] RIP: 0033:0x7f73ee58e929 [ 278.667671][T14714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.667686][T14714] RSP: 002b:00007f73ef498038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.667703][T14714] RAX: ffffffffffffffda RBX: 00007f73ee7b5fa0 RCX: 00007f73ee58e929 [ 278.667716][T14714] RDX: 0000000024040880 RSI: 0000200000000140 RDI: 0000000000000003 [ 278.667727][T14714] RBP: 00007f73ef498090 R08: 0000000000000000 R09: 0000000000000000 [ 278.667738][T14714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.667748][T14714] R13: 0000000000000000 R14: 00007f73ee7b5fa0 R15: 00007ffc7a4b6ed8 [ 278.667777][T14714] [ 279.031236][T14721] netlink: 'syz.1.2378': attribute type 1 has an invalid length. [ 279.088270][T14721] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2378'. [ 279.140063][T14723] netlink: 'syz.1.2378': attribute type 1 has an invalid length. [ 279.148114][T14723] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2378'. [ 279.321042][T14743] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 279.412460][T14747] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 279.468660][T14753] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2388'. [ 279.637339][T14764] FAULT_INJECTION: forcing a failure. [ 279.637339][T14764] name failslab, interval 1, probability 0, space 0, times 0 [ 279.654829][T14763] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2389'. [ 279.657121][T14764] CPU: 1 UID: 0 PID: 14764 Comm: syz.3.2390 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 279.657144][T14764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.657154][T14764] Call Trace: [ 279.657161][T14764] [ 279.657169][T14764] dump_stack_lvl+0x189/0x250 [ 279.657196][T14764] ? __pfx____ratelimit+0x10/0x10 [ 279.657216][T14764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.657238][T14764] ? __pfx__printk+0x10/0x10 [ 279.657263][T14764] ? __pfx___might_resched+0x10/0x10 [ 279.657291][T14764] should_fail_ex+0x414/0x560 [ 279.657316][T14764] should_failslab+0xa8/0x100 [ 279.657336][T14764] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 279.657353][T14764] ? __alloc_skb+0x112/0x2d0 [ 279.657378][T14764] __alloc_skb+0x112/0x2d0 [ 279.657402][T14764] netlink_sendmsg+0x5c6/0xb30 [ 279.657431][T14764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.657455][T14764] ? aa_sock_msg_perm+0x94/0x160 [ 279.657477][T14764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 279.657496][T14764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.657516][T14764] __sock_sendmsg+0x219/0x270 [ 279.657537][T14764] ____sys_sendmsg+0x505/0x830 [ 279.657565][T14764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.657596][T14764] ? import_iovec+0x74/0xa0 [ 279.657622][T14764] ___sys_sendmsg+0x21f/0x2a0 [ 279.657647][T14764] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.657704][T14764] ? __fget_files+0x2a/0x420 [ 279.657721][T14764] ? __fget_files+0x3a0/0x420 [ 279.657749][T14764] __x64_sys_sendmsg+0x19b/0x260 [ 279.657775][T14764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.657806][T14764] ? __pfx_ksys_write+0x10/0x10 [ 279.657819][T14764] ? rcu_is_watching+0x15/0xb0 [ 279.657847][T14764] ? do_syscall_64+0xbe/0x3b0 [ 279.657872][T14764] do_syscall_64+0xfa/0x3b0 [ 279.657889][T14764] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.657908][T14764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.657923][T14764] ? clear_bhb_loop+0x60/0xb0 [ 279.657943][T14764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.657958][T14764] RIP: 0033:0x7faf45b8e929 [ 279.657973][T14764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.657986][T14764] RSP: 002b:00007faf469ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.658004][T14764] RAX: ffffffffffffffda RBX: 00007faf45db5fa0 RCX: 00007faf45b8e929 [ 279.658016][T14764] RDX: 0000000024040880 RSI: 0000200000000140 RDI: 0000000000000003 [ 279.658027][T14764] RBP: 00007faf469ae090 R08: 0000000000000000 R09: 0000000000000000 [ 279.658037][T14764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.658047][T14764] R13: 0000000000000000 R14: 00007faf45db5fa0 R15: 00007fff7f81bb58 [ 279.658075][T14764] [ 279.744565][ T13] wlan0: Trigger new scan to find an IBSS to join [ 279.766378][T14763] lo: left allmulticast mode [ 279.950272][T14769] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2392'. [ 279.960549][T14763] tunl0: left allmulticast mode [ 279.965917][T14763] gre0: left allmulticast mode [ 279.971008][T14763] gretap0: left allmulticast mode [ 279.976872][T14763] erspan0: left allmulticast mode [ 279.982476][T14763] ip_vti0: left allmulticast mode [ 279.988207][T14763] ip6_vti0: left allmulticast mode [ 279.994010][T14763] sit0: left allmulticast mode [ 279.999483][T14763] ip6tnl0: left allmulticast mode [ 280.007057][T14763] ip6gre0: left allmulticast mode [ 280.012611][T14763] syz_tun: left allmulticast mode [ 280.019172][T14763] ip6gretap0: left allmulticast mode [ 280.025365][T14763] bond0: left allmulticast mode [ 280.031518][T14763] team0: left allmulticast mode [ 280.037713][T14763] !: left allmulticast mode [ 280.043175][T14763] nlmon0: left allmulticast mode [ 280.049573][T14763] caif0: left allmulticast mode [ 280.055353][T14763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.080863][T14769] 0ªX¹¦À: renamed from caif0 [ 280.113644][T14769] 0ªX¹¦À: entered allmulticast mode [ 280.128016][T14769] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 280.243901][T14777] xt_TCPMSS: Only works on TCP SYN packets [ 280.249865][T14777] xt_TCPMSS: Only works on TCP SYN packets [ 280.715058][T14803] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 280.871897][ T6359] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.920170][ T6359] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.950920][ T6359] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.960792][ T6359] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.227517][T14834] netem: change failed [ 281.500700][T14852] FAULT_INJECTION: forcing a failure. [ 281.500700][T14852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.541158][T14852] CPU: 0 UID: 0 PID: 14852 Comm: syz.3.2412 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 281.541183][T14852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.541193][T14852] Call Trace: [ 281.541201][T14852] [ 281.541208][T14852] dump_stack_lvl+0x189/0x250 [ 281.541237][T14852] ? __pfx____ratelimit+0x10/0x10 [ 281.541256][T14852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.541279][T14852] ? __pfx__printk+0x10/0x10 [ 281.541296][T14852] ? __might_fault+0xb0/0x130 [ 281.541325][T14852] should_fail_ex+0x414/0x560 [ 281.541352][T14852] _copy_from_iter+0x1db/0x16f0 [ 281.541377][T14852] ? rcu_is_watching+0x15/0xb0 [ 281.541400][T14852] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 281.541418][T14852] ? __pfx__copy_from_iter+0x10/0x10 [ 281.541441][T14852] ? __build_skb_around+0x257/0x3e0 [ 281.541465][T14852] ? netlink_sendmsg+0x642/0xb30 [ 281.541490][T14852] ? skb_put+0x11b/0x210 [ 281.541519][T14852] netlink_sendmsg+0x6b2/0xb30 [ 281.541548][T14852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.541572][T14852] ? aa_sock_msg_perm+0x94/0x160 [ 281.541593][T14852] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 281.541613][T14852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.541634][T14852] __sock_sendmsg+0x219/0x270 [ 281.541657][T14852] ____sys_sendmsg+0x505/0x830 [ 281.541685][T14852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.541717][T14852] ? import_iovec+0x74/0xa0 [ 281.541737][T14852] ___sys_sendmsg+0x21f/0x2a0 [ 281.541761][T14852] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.541821][T14852] ? __fget_files+0x2a/0x420 [ 281.541837][T14852] ? __fget_files+0x3a0/0x420 [ 281.541866][T14852] __x64_sys_sendmsg+0x19b/0x260 [ 281.541890][T14852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.541922][T14852] ? __pfx_ksys_write+0x10/0x10 [ 281.541935][T14852] ? rcu_is_watching+0x15/0xb0 [ 281.541963][T14852] ? do_syscall_64+0xbe/0x3b0 [ 281.541986][T14852] do_syscall_64+0xfa/0x3b0 [ 281.542003][T14852] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.542022][T14852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.542038][T14852] ? clear_bhb_loop+0x60/0xb0 [ 281.542059][T14852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.542074][T14852] RIP: 0033:0x7faf45b8e929 [ 281.542089][T14852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.542102][T14852] RSP: 002b:00007faf469ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.542120][T14852] RAX: ffffffffffffffda RBX: 00007faf45db5fa0 RCX: 00007faf45b8e929 [ 281.542131][T14852] RDX: 0000000024040880 RSI: 0000200000000140 RDI: 0000000000000003 [ 281.542142][T14852] RBP: 00007faf469ae090 R08: 0000000000000000 R09: 0000000000000000 [ 281.542153][T14852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.542163][T14852] R13: 0000000000000000 R14: 00007faf45db5fa0 R15: 00007fff7f81bb58 [ 281.542192][T14852] [ 282.012888][T14863] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (192) [ 282.041782][T14863] ipvlan2: entered promiscuous mode [ 282.052512][T14863] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 282.118838][ T6359] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.130581][ T6359] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.176458][ T6359] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.200705][ T6359] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.336670][T14883] __nla_validate_parse: 4 callbacks suppressed [ 282.336687][T14883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'. [ 282.569975][T14901] xt_TCPMSS: Only works on TCP SYN packets [ 282.620135][T14900] syzkaller0: entered promiscuous mode [ 282.636017][T14900] syzkaller0: entered allmulticast mode [ 282.810066][T14914] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2432'. [ 282.830182][T14916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2434'. [ 282.860135][T14916] netlink: 'syz.3.2434': attribute type 30 has an invalid length. [ 282.872235][T14916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2434'. [ 282.922893][T14914] xt_bpf: check failed: parse error [ 282.946666][T14928] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2437'. [ 283.208354][T14938] wireguard0: entered promiscuous mode [ 283.214035][T14938] wireguard0: entered allmulticast mode [ 283.224723][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 283.772645][T14978] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 283.808846][T14978] nbd: must specify an index to disconnect [ 283.819876][T14978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2451'. [ 283.871959][T14984] tipc: Enabled bearer , priority 0 [ 283.998054][T14974] tipc: Disabling bearer [ 284.053062][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2454'. [ 284.073787][T14994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2454'. [ 284.110326][T14994] erspan0: entered promiscuous mode [ 284.124783][T14994] erspan0: left promiscuous mode [ 284.280002][T15010] netlink: 'syz.3.2458': attribute type 13 has an invalid length. [ 284.311869][T15010] macvtap0: entered promiscuous mode [ 284.324260][T15010] macvtap0: refused to change device tx_queue_len [ 284.343783][T15002] block nbd0: server does not support multiple connections per device. [ 284.354314][T15002] block nbd0: shutting down sockets [ 284.428247][T15019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2463'. [ 284.881493][T15053] netlink: 'syz.4.2475': attribute type 15 has an invalid length. [ 285.112331][T15062] vxcan2: entered promiscuous mode [ 285.671141][T15097] netlink: 'syz.1.2487': attribute type 1 has an invalid length. [ 285.711366][T15092] syzkaller0: entered promiscuous mode [ 285.723629][T15092] syzkaller0: entered allmulticast mode [ 285.732252][T15097] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 285.741453][T15105] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 287.690004][T15156] x_tables: duplicate underflow at hook 1 [ 287.771489][T15162] wireguard0: entered promiscuous mode [ 287.799077][T15162] wireguard0: entered allmulticast mode [ 287.943241][T15164] __nla_validate_parse: 9 callbacks suppressed [ 287.943265][T15164] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2503'. [ 288.018068][T15176] tipc: Enabling of bearer rejected, failed to enable media [ 288.175867][T15184] syz.2.2510: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 288.265809][T15184] CPU: 0 UID: 0 PID: 15184 Comm: syz.2.2510 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 288.265836][T15184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.265847][T15184] Call Trace: [ 288.265854][T15184] [ 288.265862][T15184] dump_stack_lvl+0x189/0x250 [ 288.265894][T15184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.265917][T15184] ? __pfx__printk+0x10/0x10 [ 288.265936][T15184] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.265956][T15184] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.265977][T15184] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 288.266006][T15184] warn_alloc+0x214/0x310 [ 288.266026][T15184] ? stack_depot_save_flags+0x40/0x900 [ 288.266051][T15184] ? __pfx_warn_alloc+0x10/0x10 [ 288.266072][T15184] ? kasan_save_track+0x4f/0x80 [ 288.266094][T15184] ? xskq_create+0x56/0x170 [ 288.266111][T15184] ? xsk_init_queue+0xb0/0x110 [ 288.266126][T15184] ? xsk_setsockopt+0x43f/0x710 [ 288.266141][T15184] ? do_sock_setsockopt+0x25a/0x3e0 [ 288.266161][T15184] ? __x64_sys_setsockopt+0x18b/0x220 [ 288.266180][T15184] ? do_syscall_64+0xfa/0x3b0 [ 288.266198][T15184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.266224][T15184] __vmalloc_node_range_noprof+0x125/0x12f0 [ 288.266274][T15184] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.266300][T15184] ? __kasan_kmalloc+0x93/0xb0 [ 288.266320][T15184] vmalloc_user_noprof+0xad/0xf0 [ 288.266339][T15184] ? xskq_create+0xbf/0x170 [ 288.266357][T15184] xskq_create+0xbf/0x170 [ 288.266377][T15184] xsk_init_queue+0xb0/0x110 [ 288.266398][T15184] xsk_setsockopt+0x43f/0x710 [ 288.266419][T15184] ? __pfx_xsk_setsockopt+0x10/0x10 [ 288.266435][T15184] ? __lock_acquire+0xab9/0xd20 [ 288.266468][T15184] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 288.266487][T15184] ? __pfx_xsk_setsockopt+0x10/0x10 [ 288.266506][T15184] do_sock_setsockopt+0x25a/0x3e0 [ 288.266532][T15184] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 288.266562][T15184] ? __fget_files+0x2a/0x420 [ 288.266591][T15184] __x64_sys_setsockopt+0x18b/0x220 [ 288.266619][T15184] do_syscall_64+0xfa/0x3b0 [ 288.266637][T15184] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.266656][T15184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.266673][T15184] ? clear_bhb_loop+0x60/0xb0 [ 288.266694][T15184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.266709][T15184] RIP: 0033:0x7fe3ec58e929 [ 288.266725][T15184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.266739][T15184] RSP: 002b:00007fe3ed4d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 288.266758][T15184] RAX: ffffffffffffffda RBX: 00007fe3ec7b5fa0 RCX: 00007fe3ec58e929 [ 288.266770][T15184] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 288.266781][T15184] RBP: 00007fe3ec610b39 R08: 0000000000000004 R09: 0000000000000000 [ 288.266792][T15184] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.266803][T15184] R13: 0000000000000000 R14: 00007fe3ec7b5fa0 R15: 00007ffdcb82d0d8 [ 288.266833][T15184] [ 288.267125][T15184] Mem-Info: [ 288.613575][T15184] active_anon:6970 inactive_anon:0 isolated_anon:0 [ 288.613575][T15184] active_file:1723 inactive_file:39918 isolated_file:0 [ 288.613575][T15184] unevictable:768 dirty:277 writeback:0 [ 288.613575][T15184] slab_reclaimable:12634 slab_unreclaimable:170093 [ 288.613575][T15184] mapped:35587 shmem:4613 pagetables:1031 [ 288.613575][T15184] sec_pagetables:0 bounce:0 [ 288.613575][T15184] kernel_misc_reclaimable:0 [ 288.613575][T15184] free:1256163 free_pcp:14684 free_cma:0 [ 288.664190][T15184] Node 0 active_anon:28580kB inactive_anon:0kB active_file:6892kB inactive_file:159472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143148kB dirty:1108kB writeback:0kB shmem:17516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13100kB pagetables:3788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 288.705821][T15184] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 288.744502][T15184] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.838798][T15184] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 288.856017][T15184] Node 0 DMA32 free:1105488kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30664kB inactive_anon:0kB active_file:6892kB inactive_file:157640kB unevictable:1536kB writepending:1108kB present:3129332kB managed:2560948kB mlocked:0kB bounce:0kB free_pcp:43004kB local_pcp:20436kB free_cma:0kB [ 288.949423][T15184] lowmem_reserve[]: 0 0 1 1 1 [ 288.959598][T15184] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 289.023848][T15184] lowmem_reserve[]: 0 0 0 0 0 [ 289.033987][T15184] Node 1 Normal free:3900208kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17864kB local_pcp:9568kB free_cma:0kB [ 289.069879][T15209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.136253][T15184] lowmem_reserve[]: 0 0 0 0 0 [ 289.155449][T15213] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2516'. [ 289.190598][T15184] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 289.257357][T15217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2517'. [ 289.262885][T15184] Node 0 DMA32: 1709*4kB (UME) 848*8kB (UME) 476*16kB (UME) 370*32kB (UME) 170*64kB (UME) 43*128kB (UME) 71*256kB (UME) 43*512kB (UME) 43*1024kB (UME) 5*2048kB (U) 234*4096kB (UM) = 1102388kB [ 289.329854][T15184] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 289.402006][T15184] Node 1 Normal: 214*4kB (UME) 51*8kB (UME) 40*16kB (UME) 136*32kB (UME) 41*64kB (UME) 7*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3900208kB [ 289.458955][T15184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.489495][T15184] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.515771][T15224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2520'. [ 289.524017][T15184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.541977][T15184] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.552861][T15184] 43029 total pagecache pages [ 289.564401][T15184] 0 pages in swap cache [ 289.568560][T15184] Free swap = 124996kB [ 289.572705][T15184] Total swap = 124996kB [ 289.587790][T15184] 2097051 pages RAM [ 289.592127][T15184] 0 pages HighMem/MovableOnly [ 289.603466][T15184] 424708 pages reserved [ 289.611520][T15184] 0 pages cma reserved [ 289.978422][T15266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2532'. [ 290.047811][T15272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2534'. [ 290.071451][T15272] FAULT_INJECTION: forcing a failure. [ 290.071451][T15272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.096990][T15275] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2533'. [ 290.117943][T15272] CPU: 0 UID: 0 PID: 15272 Comm: syz.3.2534 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 290.117968][T15272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 290.117979][T15272] Call Trace: [ 290.117986][T15272] [ 290.117993][T15272] dump_stack_lvl+0x189/0x250 [ 290.118023][T15272] ? __pfx____ratelimit+0x10/0x10 [ 290.118044][T15272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.118067][T15272] ? __pfx__printk+0x10/0x10 [ 290.118100][T15272] should_fail_ex+0x414/0x560 [ 290.118126][T15272] _copy_to_user+0x31/0xb0 [ 290.118147][T15272] simple_read_from_buffer+0xe1/0x170 [ 290.118170][T15272] proc_fail_nth_read+0x1df/0x250 [ 290.118194][T15272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.118218][T15272] ? rw_verify_area+0x258/0x650 [ 290.118241][T15272] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.118264][T15272] vfs_read+0x1fd/0x980 [ 290.118294][T15272] ? __pfx___mutex_lock+0x10/0x10 [ 290.118315][T15272] ? __pfx_vfs_read+0x10/0x10 [ 290.118340][T15272] ? __fget_files+0x2a/0x420 [ 290.118364][T15272] ? __fget_files+0x3a0/0x420 [ 290.118380][T15272] ? __fget_files+0x2a/0x420 [ 290.118408][T15272] ksys_read+0x145/0x250 [ 290.118427][T15272] ? __pfx_ksys_read+0x10/0x10 [ 290.118448][T15272] ? rcu_is_watching+0x15/0xb0 [ 290.118477][T15272] ? do_syscall_64+0xbe/0x3b0 [ 290.118500][T15272] do_syscall_64+0xfa/0x3b0 [ 290.118518][T15272] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.118536][T15272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.118553][T15272] ? clear_bhb_loop+0x60/0xb0 [ 290.118574][T15272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.118590][T15272] RIP: 0033:0x7faf45b8d33c [ 290.118606][T15272] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 290.118620][T15272] RSP: 002b:00007faf469ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.118638][T15272] RAX: ffffffffffffffda RBX: 00007faf45db5fa0 RCX: 00007faf45b8d33c [ 290.118650][T15272] RDX: 000000000000000f RSI: 00007faf469ae0a0 RDI: 0000000000000005 [ 290.118661][T15272] RBP: 00007faf469ae090 R08: 0000000000000000 R09: 0000000000000000 [ 290.118672][T15272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.118683][T15272] R13: 0000000000000000 R14: 00007faf45db5fa0 R15: 00007fff7f81bb58 [ 290.118713][T15272] [ 290.691973][T15292] netlink: 'syz.2.2539': attribute type 8 has an invalid length. [ 291.074613][T15314] syzkaller0: entered allmulticast mode [ 291.109214][T15314] syzkaller0 (unregistering): left allmulticast mode [ 291.387894][T15337] ip6t_srh: unknown srh invflags 4000 [ 291.418411][T15340] IPVS: set_ctl: invalid protocol: 115 100.1.1.0:19999 [ 291.444476][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'. [ 291.470467][T15340] xt_TPROXY: Can be used only with -p tcp or -p udp [ 292.211884][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2565'. [ 292.268512][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2565'. [ 293.055768][T15440] __nla_validate_parse: 3 callbacks suppressed [ 293.055785][T15440] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2582'. [ 293.077704][T15440] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2582'. [ 293.087458][T15440] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2582'. [ 293.268908][T15455] tipc: Can't bind to reserved service type 0 [ 293.345634][T15463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2586'. [ 293.389857][T15463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2586'. [ 293.400617][T15462] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2587'. [ 293.577355][T15470] netlink: 'syz.3.2590': attribute type 13 has an invalid length. [ 293.591715][T15470] netlink: 'syz.3.2590': attribute type 17 has an invalid length. [ 293.645606][T15470] gretap0: left promiscuous mode [ 293.663921][T15477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2591'. [ 293.679699][T15470] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.713787][T15470] 0ªX¹¦À: left allmulticast mode [ 293.718740][T15470] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 293.756788][T15481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2592'. [ 294.092203][T15490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.168822][T15490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.233011][T15488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.453045][T15512] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2599'. [ 294.492478][T15508] sctp: [Deprecated]: syz.4.2598 (pid 15508) Use of struct sctp_assoc_value in delayed_ack socket option. [ 294.492478][T15508] Use struct sctp_sack_info instead [ 294.782713][T15530] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 295.399029][T15551] smc: net device bond0 applied user defined pnetid SYZ2 [ 295.633406][T15557] TCP: TCP_TX_DELAY enabled [ 295.685958][T15557] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2610'. [ 295.938738][T15574] netlink: 'syz.3.2614': attribute type 7 has an invalid length. [ 296.316204][T15595] netlink: 'syz.4.2619': attribute type 4 has an invalid length. [ 296.326862][T15599] netlink: 'syz.2.2620': attribute type 1 has an invalid length. [ 296.351523][T15582] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 296.379381][T15601] netlink: 'syz.3.2621': attribute type 10 has an invalid length. [ 296.380893][T15598] can: request_module (can-proto-0) failed. [ 296.409348][T15582] syzkaller0: entered promiscuous mode [ 296.415366][T15582] syzkaller0: entered allmulticast mode [ 296.521688][T15603] bond6: (slave gretap1): making interface the new active one [ 296.530026][T15603] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 296.540525][T15602] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 298.188320][T15638] netlink: 'syz.3.2631': attribute type 4 has an invalid length. [ 298.289817][T15639] xt_CT: No such helper "snmp" [ 298.425833][T15650] __nla_validate_parse: 3 callbacks suppressed [ 298.425849][T15650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2633'. [ 298.496420][T15658] sctp: [Deprecated]: syz.4.2633 (pid 15658) Use of int in maxseg socket option. [ 298.496420][T15658] Use struct sctp_assoc_value instead [ 298.693271][ T30] audit: type=1800 audit(1750922347.860:12): pid=15667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2637" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2818 res=0 errno=0 [ 298.755068][ T30] audit: type=1800 audit(1750922347.890:13): pid=15668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2637" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2818 res=0 errno=0 [ 299.093075][T15686] netlink: 'syz.3.2643': attribute type 1 has an invalid length. [ 299.121086][T15686] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2643'. [ 299.274233][T15692] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2647'. [ 299.298682][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2647'. [ 299.391391][T15704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2649'. [ 299.430192][T15704] bridge_slave_0: left allmulticast mode [ 299.441376][T15704] bridge_slave_0: left promiscuous mode [ 299.462796][T15706] netlink: 748 bytes leftover after parsing attributes in process `syz.4.2650'. [ 299.468075][T15704] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.491314][T15710] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2651'. [ 299.568453][T15706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2650'. [ 299.615574][T15719] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 299.689280][T15722] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2654'. [ 299.888845][T15735] netlink: 'syz.2.2659': attribute type 1 has an invalid length. [ 299.929763][T15741] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2657'. [ 300.509904][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.555779][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.566390][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.585388][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.602845][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.459216][T15814] netlink: 'syz.2.2679': attribute type 10 has an invalid length. [ 302.397079][ T36] bond1 (unregistering): Released all slaves [ 302.411778][ T36] bond2 (unregistering): Released all slaves [ 302.424461][ T36] bond3 (unregistering): Released all slaves [ 302.519472][ T36] bond0 (unregistering): Released all slaves [ 302.703786][ T5155] Bluetooth: hci4: command tx timeout [ 302.745292][ T36] tipc: Left network mode [ 302.789749][ T36] IPVS: stopping backup sync thread 15105 ... [ 302.807695][T15755] chnl_net:caif_netlink_parms(): no params data found [ 302.965374][T15832] lo speed is unknown, defaulting to 1000 [ 303.018220][T15832] lo speed is unknown, defaulting to 1000 [ 303.039830][T15839] syzkaller1: entered promiscuous mode [ 303.055265][T15839] syzkaller1: entered allmulticast mode [ 303.084140][ T36] [ 303.086486][ T36] ====================================================== [ 303.093493][ T36] WARNING: possible circular locking dependency detected [ 303.100508][ T36] 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 Not tainted [ 303.107615][ T36] ------------------------------------------------------ [ 303.114622][ T36] kworker/u8:2/36 is trying to acquire lock: [ 303.120588][ T36] ffff88802995ce00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 303.130174][ T36] [ 303.130174][ T36] but task is already holding lock: [ 303.137529][ T36] ffff888028510768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 303.147867][ T36] [ 303.147867][ T36] which lock already depends on the new lock. [ 303.147867][ T36] [ 303.158252][ T36] [ 303.158252][ T36] the existing dependency chain (in reverse order) is: [ 303.167243][ T36] [ 303.167243][ T36] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 303.174964][ T36] lock_acquire+0x120/0x360 [ 303.179977][ T36] __mutex_lock+0x182/0xe80 [ 303.184986][ T36] ieee80211_open+0xed/0x1f0 [ 303.190078][ T36] __dev_open+0x470/0x880 [ 303.194916][ T36] netif_open+0xaa/0x170 [ 303.199674][ T36] dev_open+0x125/0x260 [ 303.204332][ T36] team_add_slave+0xb36/0x2840 [ 303.209602][ T36] do_set_master+0x530/0x6d0 [ 303.214698][ T36] do_setlink+0xcf0/0x41c0 [ 303.219616][ T36] rtnl_newlink+0x160b/0x1c70 [ 303.224795][ T36] rtnetlink_rcv_msg+0x7cc/0xb70 [ 303.230235][ T36] netlink_rcv_skb+0x205/0x470 [ 303.235501][ T36] netlink_unicast+0x758/0x8d0 [ 303.240772][ T36] netlink_sendmsg+0x805/0xb30 [ 303.246042][ T36] __sock_sendmsg+0x219/0x270 [ 303.251219][ T36] ____sys_sendmsg+0x505/0x830 [ 303.256487][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 303.261669][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 303.267109][ T36] do_syscall_64+0xfa/0x3b0 [ 303.272115][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.278507][ T36] [ 303.278507][ T36] -> #0 (team->team_lock_key#4){+.+.}-{4:4}: [ 303.286656][ T36] validate_chain+0xb9b/0x2140 [ 303.291919][ T36] __lock_acquire+0xab9/0xd20 [ 303.297098][ T36] lock_acquire+0x120/0x360 [ 303.302104][ T36] __mutex_lock+0x182/0xe80 [ 303.307108][ T36] team_del_slave+0x32/0x1c0 [ 303.312200][ T36] team_device_event+0x285/0xa20 [ 303.317637][ T36] notifier_call_chain+0x1b3/0x3e0 [ 303.323260][ T36] unregister_netdevice_many_notify+0x15d8/0x2320 [ 303.330183][ T36] unregister_netdevice_queue+0x33c/0x380 [ 303.336404][ T36] _cfg80211_unregister_wdev+0x165/0x590 [ 303.342541][ T36] ieee80211_remove_interfaces+0x49a/0x6d0 [ 303.348849][ T36] ieee80211_unregister_hw+0x5d/0x2c0 [ 303.354729][ T36] mac80211_hwsim_del_radio+0x275/0x460 [ 303.360786][ T36] hwsim_exit_net+0x584/0x640 [ 303.365967][ T36] ops_undo_list+0x497/0x990 [ 303.371066][ T36] cleanup_net+0x4c5/0x800 [ 303.375981][ T36] process_scheduled_works+0xae1/0x17b0 [ 303.382035][ T36] worker_thread+0x8a0/0xda0 [ 303.387132][ T36] kthread+0x70e/0x8a0 [ 303.391703][ T36] ret_from_fork+0x3f9/0x770 [ 303.396797][ T36] ret_from_fork_asm+0x1a/0x30 [ 303.402065][ T36] [ 303.402065][ T36] other info that might help us debug this: [ 303.402065][ T36] [ 303.412276][ T36] Possible unsafe locking scenario: [ 303.412276][ T36] [ 303.419707][ T36] CPU0 CPU1 [ 303.425055][ T36] ---- ---- [ 303.430402][ T36] lock(&rdev->wiphy.mtx); [ 303.434889][ T36] lock(team->team_lock_key#4); [ 303.442331][ T36] lock(&rdev->wiphy.mtx); [ 303.449333][ T36] lock(team->team_lock_key#4); [ 303.454259][ T36] [ 303.454259][ T36] *** DEADLOCK *** [ 303.454259][ T36] [ 303.462380][ T36] 5 locks held by kworker/u8:2/36: [ 303.467463][ T36] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 303.478328][ T36] #1: ffffc90000ac7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 303.488848][ T36] #2: ffffffff8f506210 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 303.498155][ T36] #3: ffffffff8f512ec8 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 303.507979][ T36] #4: ffff888028510768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 303.518757][ T36] [ 303.518757][ T36] stack backtrace: [ 303.524633][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 303.524651][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.524660][ T36] Workqueue: netns cleanup_net [ 303.524688][ T36] Call Trace: [ 303.524698][ T36] [ 303.524706][ T36] dump_stack_lvl+0x189/0x250 [ 303.524727][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.524745][ T36] ? __pfx__printk+0x10/0x10 [ 303.524759][ T36] ? print_lock_name+0xde/0x100 [ 303.524772][ T36] print_circular_bug+0x2ee/0x310 [ 303.524786][ T36] check_noncircular+0x134/0x160 [ 303.524800][ T36] validate_chain+0xb9b/0x2140 [ 303.524815][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.524832][ T36] __lock_acquire+0xab9/0xd20 [ 303.524850][ T36] ? team_del_slave+0x32/0x1c0 [ 303.524863][ T36] lock_acquire+0x120/0x360 [ 303.524878][ T36] ? team_del_slave+0x32/0x1c0 [ 303.524892][ T36] ? __mutex_trylock_common+0x153/0x260 [ 303.524905][ T36] __mutex_lock+0x182/0xe80 [ 303.524919][ T36] ? team_del_slave+0x32/0x1c0 [ 303.524932][ T36] ? rcu_is_watching+0x15/0xb0 [ 303.524951][ T36] ? team_del_slave+0x32/0x1c0 [ 303.524964][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 303.524978][ T36] ? bond_netdev_event+0xd9/0xe80 [ 303.524992][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 303.525005][ T36] ? __pfx_bond_netdev_event+0x10/0x10 [ 303.525021][ T36] team_del_slave+0x32/0x1c0 [ 303.525034][ T36] team_device_event+0x285/0xa20 [ 303.525051][ T36] notifier_call_chain+0x1b3/0x3e0 [ 303.525071][ T36] unregister_netdevice_many_notify+0x15d8/0x2320 [ 303.525090][ T36] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 303.525107][ T36] ? call_rcu+0x6dd/0x990 [ 303.525118][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.525140][ T36] unregister_netdevice_queue+0x33c/0x380 [ 303.525152][ T36] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 303.525167][ T36] _cfg80211_unregister_wdev+0x165/0x590 [ 303.525185][ T36] ieee80211_remove_interfaces+0x49a/0x6d0 [ 303.525200][ T36] ? __pfx_synchronize_rcu+0x10/0x10 [ 303.525212][ T36] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 303.525226][ T36] ? rcu_is_watching+0x15/0xb0 [ 303.525246][ T36] ieee80211_unregister_hw+0x5d/0x2c0 [ 303.525258][ T36] mac80211_hwsim_del_radio+0x275/0x460 [ 303.525276][ T36] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 303.525293][ T36] hwsim_exit_net+0x584/0x640 [ 303.525307][ T36] ? __pfx_hwsim_exit_net+0x10/0x10 [ 303.525320][ T36] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 303.525337][ T36] ops_undo_list+0x497/0x990 [ 303.525355][ T36] ? __pfx_ops_undo_list+0x10/0x10 [ 303.525373][ T36] cleanup_net+0x4c5/0x800 [ 303.525388][ T36] ? __pfx_cleanup_net+0x10/0x10 [ 303.525404][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 303.525416][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 303.525433][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 303.525450][ T36] process_scheduled_works+0xae1/0x17b0 [ 303.525475][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 303.525497][ T36] worker_thread+0x8a0/0xda0 [ 303.525516][ T36] kthread+0x70e/0x8a0 [ 303.525529][ T36] ? __pfx_worker_thread+0x10/0x10 [ 303.525546][ T36] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 303.525559][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 303.525571][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.525583][ T36] ? __pfx_kthread+0x10/0x10 [ 303.525596][ T36] ret_from_fork+0x3f9/0x770 [ 303.525613][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 303.525631][ T36] ? __switch_to_asm+0x39/0x70 [ 303.525642][ T36] ? __switch_to_asm+0x33/0x70 [ 303.525653][ T36] ? __pfx_kthread+0x10/0x10 [ 303.525666][ T36] ret_from_fork_asm+0x1a/0x30 [ 303.525683][ T36] [ 303.884700][ T36] team0: Port device wlan1 removed [ 303.889871][T15844] __nla_validate_parse: 4 callbacks suppressed [ 303.889884][T15844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'. [ 303.908190][T15832] lo speed is unknown, defaulting to 1000 [ 303.944285][T15850] Bluetooth: MGMT ver 1.23 [ 303.958673][T15854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2686'. [ 304.087373][T15832] infiniband syz0: set down [ 304.089453][T15844] ip6gretap0: entered promiscuous mode [ 304.097509][T15832] infiniband syz0: added lo [ 304.102444][T15832] syz0: rxe_create_cq: returned err = -12 [ 304.117423][T15832] infiniband syz0: Couldn't create ib_mad CQ [ 304.156411][T15832] infiniband syz0: Couldn't open port 1 [ 304.244382][T15832] RDS/IB: syz0: added [ 304.248412][T15832] smc: adding ib device syz0 with port count 1 [ 304.254605][T15832] smc: ib device syz0 port 1 has pnetid [ 304.281029][ T979] lo speed is unknown, defaulting to 1000 [ 304.346303][T11830] lo speed is unknown, defaulting to 1000 [ 304.365234][ T36] mac80211_hwsim hwsim7 wlan0 (unregistering): left allmulticast mode [ 304.443751][T15832] lo speed is unknown, defaulting to 1000 [ 304.491723][T15850] syz_tun (unregistering): left allmulticast mode [ 304.503529][T15850] syz_tun (unregistering): left promiscuous mode [ 304.511800][T15850] bridge0: port 2(syz_tun) entered disabled state [ 304.590676][T15832] lo speed is unknown, defaulting to 1000 [ 304.645855][T15832] lo speed is unknown, defaulting to 1000 [ 304.707565][T15832] lo speed is unknown, defaulting to 1000 [ 304.767327][T15832] lo speed is unknown, defaulting to 1000 [ 304.821354][T15832] lo speed is unknown, defaulting to 1000 [ 304.875184][T15832] lo speed is unknown, defaulting to 1000 [ 305.014930][ T36] hsr_slave_0: left promiscuous mode [ 305.020662][ T36] hsr_slave_1: left promiscuous mode [ 305.288577][ T36] team_slave_1 (unregistering): left promiscuous mode [ 305.296515][ T36] team0 (unregistering): Port device team_slave_1 removed [ 305.326559][ T36] team_slave_0 (unregistering): left promiscuous mode [ 305.333958][ T36] team0 (unregistering): Port device team_slave_0 removed [ 305.788976][ T36] IPVS: stop unused estimator thread 0... [ 306.038324][ T36] bridge0: port 1(batadv0) entered disabled state [ 306.069522][ T36] batman_adv: batadv0: Removing interface: ip6gretap1 [ 306.130269][ T36] bond6 (unregistering): (slave gretap1): Releasing active interface [ 306.159943][ T36] dvmrp0 (unregistering): left allmulticast mode [ 306.351624][ T36] bond5 (unregistering): (slave bridge4): Releasing backup interface [ 306.359822][ T36] bridge4 (unregistering): left promiscuous mode [ 306.396240][ T36] bond0 (unregistering): Released all slaves [ 306.404684][ T36] bond1 (unregistering): Released all slaves [ 306.482627][ T36] bond2 (unregistering): Released all slaves [ 306.491325][ T36] bond3 (unregistering): Released all slaves [ 306.502639][ T36] bond4 (unregistering): (slave veth5): Releasing backup interface [ 306.511731][ T36] bond4 (unregistering): Released all slaves [ 306.522276][ T36] bond5 (unregistering): Released all slaves [ 306.531363][ T36] bond6 (unregistering): Released all slaves [ 306.541980][ T36] bond7 (unregistering): Released all slaves [ 306.599218][ T36] bond0 (unregistering): Released all slaves [ 306.675817][ T36] tipc: Left network mode [ 306.972978][ T36] hsr_slave_0: left promiscuous mode [ 306.989631][ T36] hsr_slave_1: left promiscuous mode [ 307.783174][ T36] IPVS: stop unused estimator thread 0...