last executing test programs: 15.334430933s ago: executing program 1 (id=1950): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0x68, 0x17, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x4000) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x7d3}, {r4, 0x80}, {r3}], 0x3, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0x86, 0xc1, &(0x7f0000000580)="45340c8c727786e54b91e248e8b1cf41f1ea91c80b98d1ce27dec79f11e27fb4c5155c6af658c0705d999b3c1016fd0ae365ae934d9093cb400e2f29cd0587c44d7bfc69e6e19bd132e4513038c907f654cf38cad12eeceb1c8bf151c7d627c8899cc47e98731d59c2b523184053c35e6c434ffa11fd7ff102809e446bec5c9240cba55141ef", &(0x7f0000000780)=""/193, 0x94, 0x0, 0x12, 0x5, &(0x7f00000001c0)="ecfc9bbae35bbe4d410f35c21f195557215a", &(0x7f0000000640)="e8ac8497c3", 0x1, 0x0, 0x9a77}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000002b80)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000fa850000002d000000850000001100000095", @ANYBLOB="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", @ANYRES8=r4], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r6 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, 0x25, r1}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000040), 0x4) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000000)) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddff", 0x19}, {&(0x7f0000001400)="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", 0x6d6}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bd4106000000000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r11, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x5004) 14.387283578s ago: executing program 1 (id=1963): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0xa, @empty, 0x80}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0a0303000000000000000000"], 0x28}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000002800)=ANY=[@ANYBLOB="18020000022000000000000002000000850000002e000000850000000e00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f00"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000e80)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000e00)={0x34, 0x3, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0xc4) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYRES8], 0x20000600}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 8.079477065s ago: executing program 4 (id=2015): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x14, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f933a3c92b", 0x14}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) (async) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="64000000dac047b62216a8eeb0248781d47c1354c60c408f1226328366cec37d79f45fb1dfa0767eac62766e3fc8557f7e1be199ae4794749ce0c593957ac8d865e9edd1ca5322511aa0dddd8f4b8d015cdb99f3cfafb0b1364c176d0aefcca44d4b77f3440d6e8c8b719aaa360d604e74b75b68793615a4a2aebf0869c09246b5f1bc371b0e405045c982721edf25d0c97d9663258c3beeef2d8804c40bb7e1c549c06b4e35cc5a0f70708623ff6d3d1de917", @ANYRES16=r6, @ANYBLOB="00012bbd7000fbdbdf250000000008000a00010000000c0016000800000000000000140008006970366772657461703000000000000006000e000000000008000a000400000008000a0003000000080011000000000006001d0000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8041}, 0x80) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c0000006c0001002abd7000fefbdfa500000000", @ANYRES32=0x0, @ANYBLOB="9000010002000000140003006d6163766c616e30000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 7.955925531s ago: executing program 4 (id=2017): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmmsg$inet6(r4, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) 6.443850504s ago: executing program 4 (id=2027): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x60000090}, 0x40090) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x81, 0x654b}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000014c0)=0x1, 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x8800) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe80000000000000000000007649ec610600044000040000050007003a"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0xb, 0xd, 0x7, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a2a88faa7ec665a571a9ad3d1f9512e3c591df4a4554c6c2e2cc6cb4d9aee4579684743ad4888f1522a47ddaff3d4f9450d288e8559bc4f795aa0d1bc74d926038adb808cba6e90535b2eb8ba3e8ff927207d17a86b10d604e77a459df67e7f0c842d463ca5977b7e2eb55fbb9881d15633717817c735da52a1da7d64bb22e58550d8ee20883e41ec2f119a6a6364d68900c1cce4a3b3225a9ce9e1e00b444e9e7bcd10e1dec202ce7786aa7cf10d4dd6bbcee586d7903a6239ff90b49cd7fddb0c67ddab326cdb2d0fa48a783f691be9ebaa1243b21afd04a372650aa7eb46a2675cc67ae12d3b99c9acb4d9fb7c78081d269b443affd86eededd4867311221"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff, 0x0, 0x0, 0x0, 0xc}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 2.596523749s ago: executing program 2 (id=2048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') socket$netlink(0x10, 0x3, 0xf) unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x3, 0x100000005, 0x0, &(0x7f00000002c0)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000002200811070f9586069bf02e00f", 0x11}, {&(0x7f0000000300)="0c74c75350f4a548092734fe1845473bbce6798a60e972b055b84ef1af", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') (async) socket$netlink(0x10, 0x3, 0xf) (async) unshare(0x6a040000) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair(0x3, 0x100000005, 0x0, &(0x7f00000002c0)) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000080)) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000002200811070f9586069bf02e00f", 0x11}, {&(0x7f0000000300)="0c74c75350f4a548092734fe1845473bbce6798a60e972b055b84ef1af", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) close(r0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) close(r0) (async) 2.205361114s ago: executing program 0 (id=2053): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x4}, 0x14) syz_emit_ethernet(0x3b7, &(0x7f0000000380)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x381, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x40000000, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad800000000a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x2, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x10, "f5000000000000000007000200fe8000000000000800000000008879e66485201a0015ca83740000000000000000000800000000000000f17969f6890d740ab10c5bf2716daa51c5996fe2b9220245877c1238cd9838cbeddd8786c8c25bb521531d0a780ab8bad2f7d8b03377e5e931a9b614e0b16f737aee2c165a46a6f807"}, {0x4, 0x10, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b83"}]}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) readv(r5, &(0x7f00000017c0)=[{&(0x7f0000000200)=""/212, 0xd4}], 0x1) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000010000000000000000000000180100002020702500000000002020207baaf8ff00000000bd4106000003000047010000f8ffffffb702000008000000b7030000000000008500002dd10000001801000020786c250000000000202020db1af8ffa1000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r6, &(0x7f0000005c80)={&(0x7f0000005c00)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28010000", @ANYRES16=r4, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x44001}, 0x80088d4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000d0000000080000000c00000005000006040000000e000000040000000c000000090000000f00000000020000100000000400000002000000060000000800000000000008010000000200000000000002040000000000000000000003000000000300000004000000c9880000000000000300000d00000000040000000100000005000000030000000b000000050000000600000005000085010000001000000004000000fdffffff0c00000004000000000000000e0000000500001eeee1c479acbd904e3da909b500040000000400000000000000000800000f000000050000"], &(0x7f0000000340)=""/106, 0xf0, 0x6a, 0x1, 0x400}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x3a, '\x00', 0x0, @fallback=0x2d, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r8, 0x4, r0}, 0x10) 2.003611044s ago: executing program 0 (id=2055): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x8) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000feffffff000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000d602000000000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x41000, 0x920d8a6154485a39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r5}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@map, 0x35, 0x0, 0x8, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880), &(0x7f00000008c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001080)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="5c0000000400000000000000", @ANYRES32, @ANYBLOB="880000000000d90000000000000ef177dbbdec4869c00f2edd04630000000000517b33c38bac151cbdfeec2de10723", @ANYRES64=r6], 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1c, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800100000000000000200e027d77d24dcbda9000012d40e533b023eda235d571d25eebcd7d20244a5f0a1fd5487b884a8f2aab8f511f8baabf2f8c900544128898c4491fcfa3004b580ee62550c0d14bbc07e3026fccf5165c81fcca67a06435ca85b845fc85d7313b9ee22f0de1fdbb95f0d16c669ca433cd192d5cfdedba52baa166867ef233ca735dc437820037c5a8003bf8b2c6ab550edce196596afdc26a90d94fbe9e96c0128ad09c3b8dd3fb9eee66f368230088de5fe29851b96562c6ceaea1838b15cc9bf78ac7b78fd4b6df4c7baddd1c6b6207487a6f3fdd0578b753fcd363d9ba70deac25f0a000000"], &(0x7f0000000300)='GPL\x00', 0xd, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000014c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r8, @ANYRES32=r5, @ANYBLOB="140000000b000000355593c0a3fc861bc7b772074f51178f71e27bcc1d99fe84164e3eb674078acd85b29cdb027ec75f06b331e6850900000000000000fdb5b221940a3c5e6ef5ee3d00ebf3990c462c6fea507fa9affbdcf802d7e0cd560dc4d2e49d7bbcd2872a1e73d85f00"/124, @ANYRES64, @ANYRES64=r7, @ANYRES32=r5, @ANYBLOB="80406733e8a5d1b481479e4c3b8ae67338dfd0652988775fd8110c4ec2b488ec07dc0b878abb5d746248565faab96e1b9da7ace906671d2c119b9daaa3aad76913cc7b17a241e53df7f65d70e6ee250405074331feb60b5e693a09a0d0d2041bf82174925b8576a1579b9cdcfb66b9dc2fe7461660290b0027ff4ae74d059915cd52ae878dee8dceeeddcc9b99e4a88ac1f36baca469ac7607f1ab6c69", @ANYRES64=r6], 0x20) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x25, 0x12, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYRES32=r2, @ANYBLOB="1800000000200000", @ANYRES32=r4, @ANYRES32=r10, @ANYBLOB="707db266d22c87614ca36bc58df57a06f92a3398920689c7ad09fa9efe73ce4acebbd6c937445eb0a25d529224", @ANYRES64=r6], 0x20) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000004c0)) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x286}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000200)={r12, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x7a, &(0x7f0000000340)={r13, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x8, 0x31, 0xffffffffffffffff, 0x8871b000) r14 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r14, 0x29, 0x49, 0x0, &(0x7f0000000580)) 1.779306903s ago: executing program 0 (id=2058): r0 = socket$inet(0x2, 0x6, 0x3) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xd6a) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000000), 0x80800) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = gettid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x120, 0x2f, 0x100, 0x70bd2c, 0x25dfdbfc, {0x9}, [@nested={0xf6, 0x131, 0x0, 0x1, [@nested={0x4, 0x123}, @typed={0x4, 0x105}, @generic="47a467e4fbe5f4ea6731b242e3e1b787cb7576aec9cce08e460d20b8f04c5cd1df5e5cae6ebbea3b5ebbd2def3d5282407f24413bb4915bbf25be1a77e77feb5d69bbe1980d0be7dd4808363bb3fdbd86f15a09de17cfa9b4da01c281a6fe5d9ab12246dfbef78069a21e9edf35c157427d6da7505817ed11e52748fe5bbfdace9c26e82a2917929eead3846226ae10f59dc890486b08b6ae54b96626aedbced40c4a271471339c17037f6042551504c8a9d8c9267cfa8fa75d0df5ce1ca5ae720a95b79d8bdc1ed4c8572e5fa3a154a38d3a969cbbd", @nested={0x4, 0x109}, @typed={0x8, 0x116, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x4f, 0x0, 0x0, @fd=r2}]}, @nested={0x8, 0x3e, 0x0, 0x1, [@nested={0x4, 0x65}]}, @typed={0xc, 0x88, 0x0, 0x0, @u64=0x1}]}, 0x120}}, 0x40) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000002c0)={r1, 0x2, 0x3, 0x6}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x1410, 0x20, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0xc1) r5 = accept4$phonet_pipe(r2, &(0x7f0000000440), &(0x7f0000000480)=0x10, 0x800) r6 = accept4$phonet_pipe(r5, &(0x7f00000004c0), &(0x7f0000000500)=0x10, 0x80000) sendmsg$AUDIT_SET_FEATURE(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x3fa, 0x400, 0x70bd2d, 0x25dfdbfe, {0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x14) r7 = accept$netrom(r4, &(0x7f0000000640)={{0x3, @null}, [@netrom, @default, @bcast, @netrom, @bcast, @rose, @null, @default]}, &(0x7f00000006c0)=0x48) setsockopt$netrom_NETROM_T4(r7, 0x103, 0x6, &(0x7f0000000700)=0xffffff81, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000740)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@loopback}}, &(0x7f0000000840)=0xe8) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x1, '\x00', 0x0, r4, 0x3, 0x3}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x862, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) bind$netlink(r4, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc) ioctl$BTRFS_IOC_SUBVOL_CREATE(r6, 0x5000940e, &(0x7f00000009c0)={{r4}, "a7f19ec25741bbcbd6f2e0d514943492359593f9ab523b156073fdd69afdd928505f0ec5681afcfa402a1f6db110a7b552c98627a1f5a9cee15e6a3aa027b5bf5c895b66a2ef1e7d1c9c47f70d6913f956d2054ac0499bf6236651af33165a8a26701793ee235bb8142801f5c1b0bbe0100fa8ed1129e7f66dd5ca348660b9377188720f7d26976c992157377f71011c87fbcf5dd32b7daed3e64bbfaacb3aa28c5275a9d0abef99f11fea916f822cb6ab18b5b063387b1e6b0f374373483beaf506348b48ea58900997f202501ae8f885a4e15a17a67ee3f10857e86962d9598891cf4dae8807e55b512255a9b7ce696881fbc6544a2186b72b1c4868e7eb14ceb0bd5a2e1eb3cfaa35cb368fd668f9b17e4bf6cabbfb4af98976b2a7363462e968fbcc3cd74f8f01dd3b689b7ebf590ea92fd8d61dbb3db9074cf6e9c78b812d8f92619fe2d992b7b8329bd2085e70681abc4bd1213b73d05f4a0c84a629d8aef39d8d2aee8965987f2991c76f1b342505dff77a9f2cb32e180e547f254f2275d02f1b09bfd0916324e8abad538b5ce104878040d3f4efcf447ee55b29eba2ab7687dc120dc1f3417ba073501e4c55d494820c9644602ded59398ec64f63f4373ecba365496fda211c7090bff83d40492f12acf974f4d60caa47a51e0c5794ec1c696c1892244e9b5042040fc0f852bdff0a9c469a79f1279cd5ad221182751445b684ade47c7e304bf9fdc601c39ec03a297115a3e2497c4bb4e5d14e972743234397abe793dbb103b1ff04f72af2e3b52a47c07baf35a75adca565da8d70882d48210dc9e1b75900d2f57df146eba73b2fc62ad210fe4043014ee0a332066106dc148c8cec1266b1345fa1b8385f6d41ed49df6504ead89655c48fa0986c9334ca471177996ddd4e86c06427daa2ebfbf8d110b38db2efcd5f89d36213e8e53c6a2a705f50108c163b8b4e6f234175b0c04826ad04e45a932bd38aaba972c6ec277130f1fc7456ee4ffb3f822f7403df2bddcd4c3fdcb0eb51f7f07830aec9bc3f8fd391e08df763e1c6162028de90bc793d979541f835e60fedd04a6384a533a9db4836336b10112e442f4ec72e8dc9f61abd2802e78d678f6d4502ecb8a4f5c6715b6e33ebe06e4d0400ba461dcc247e5a3e29cb85e409eb1b62de50b383b202d9cfc8610a86c9b0855d3343f5f283f39c6c2f5098e275493bdd6905159b65955ee4dda2bb330b7a9025499de485adfda7cf87d7e69bdc63dc95d61b22c7690d29202ef505c713fff1434ffaa615c30ca164cdb452742a446f87efa807317e5c97b3ea46456a2269319231d37b02a2873c4cacd22170d623c0317748d135123deb37af139d648425f242a5dfce78a5e3a2105ca42b8c6442ce208fa4a54433fb359d9edda2009897fe4a7bd411b2513d8063c780b0d175483df001c2d35517998c4b59898273d55a600c1ca03818273f3f20a96321c44aa0f5949343ff6c596d5b632c032303fef74e65834235e8b7a2bfe650443f9527136b11574f3239369196ed627866d6270efadc5a310eb28e4f487349b988a75c77d296dfa8583ba908a180e8ad80e4dc730f3da007c650c4d6ab01c7261e06e8f04cdebc70e007c845a98e636389e94ddc68d3c0c9ffd7f2b1cea5cf639c60a3b964ccd0bf83d45de4196a46840e53471fc161ceda4f4360448669c3e886886b7049d5c5383581dfb613c939be38d3a535c5796ad7b513235b1d503b99eb33ba48b493db11730242edf519aac9827a1225a6f5fb3190a03d040ce92b50cd705f226a615d63ba4d1d7baddfb3d80dc70d0196ac13433884165fbf3a4f3de4169ea9e40cb58f6724409970311d1dba0f1345df77c40747df98363ba8a208b30f54f5e7c695310bf227467650c6dd3ba277ee2a8c3936dfefb373292c2e5aae4de614de453fdfd6415c6a977ea7b5ca9ad5a0a7215e0d362231c3c6c982cf3ae87349b9112958acbc1636311935b2068d53edf00624d93d04862283d25ae94792d4683e4624734db1dacc819706daea661029169810c5b207c7fa5049bbde67849d83fd2a67e476b4d9bf29640c7f1c9103fc959272a9bee27e86869ba01f5a153681cb9b948d9e1f204d7c4b464060ff33ac8b038e8126370fe452c3cefc3eadbe82ad969e03620efdd4b8f62f70baefd991b59c34d9665cd559c859b1d549e3eacd330df4e5794ac101976e4deca2683b91ec89ec84070c07e2a9cdd548aa1f52e2666e1c694c7adacdd3d98645094ca65340639ba7e45c2fa7a93ed177afb0eab4df2c4f0d8bf7883fbf82b5b1ce84a74621fbe578f8fe819b8a40e2c879153aca353a645d7a8f8f8d27f3cda6d339dfc1af3c535f40635ed61d825d75482ea0bffe4855571373961c10e64bc1c06ea0cf4598783326db00223fca518f8146dde3bff64068005b0f687b39f63bc344f7acc19d322e343b8a84c0f18a2a8504824fda520352b186272715eafe2a09a7f19f558c64936591d0eff24bafe2a004b897785bc31155841b294f9848dc5086cc80e47c71ee46c353843e7bdfb5f9266023677ad4695a4613e9220118eaa8ee19af469ee4aaf89da6de52d20739205db0ef24c79a60874afafdfc539758c3bd44f9d8629fad09897fe6b6fe2953b6696e10b59ec755f501d8dd875d16de3ebcb28160f26f8791a256477a0ec09ac76d2d8c53d68b4d9d3897f1cca75e9cd88d5a1942f942ab3d12c5cb35cafc80b5282ec788456d5f5168aad426e45f9917c01dcb4b377e3546c6e6bf493f41fa0fa6837f1484774e74824698a1e7801b2957e785041e04778a321fd632fd093124378eb0beeaf6dfea4b71bc9df5a391b8d9f27355ff2b405737a9aafa6fd346bcdd102fe679ffb1453f5d5287f9269949b12dcf2f892176181d7f6c720a77af60ed0ac9ab4b61e7a320827de84afafc47fc23f5b6d924934cd9cd9984c3217200df6fe54bdb2b83c919ea222a9813683953093cf3b348c197962f4dc0cb50d5058140f28f776502bc075d37dde66fe44290fb24adea772eb2ca5aa03739335fc2288ae58f55d7e9d252a4eeb6c7fb620203fe19153f5b9359a41b40bea2f009bb2a70c1885f628f2617e099a5bb0f05cd5c7c6f2b23ec51bb81105413f85b0e4a0274fcf79b450a2ccf06a541fff00f7eb6eda47bfafd704cf51dd1d983affa3063221cbf697c7e061abf46c900a4dc6a04f93ded1249374248218f3efb6aecc05998f0bbab573fb3ed54b991463093b55dad55c85eac268d46629d1dd888a8e02794edc670f121d22886faa568463af4589acb67de7996222da4436e72758001c94bfd48ba2cd5197301e28383ed2a19f17fc471af6e91159a08dc6ed97bb36cf2eb8297b6c49e46b3c07ee508a7a05cd202246e0065acc60f8b9cb3bc9b690ba3b3629e8254d174c6b37ca25023dc4edbd8d08374ffcf867931f6c0be011bc0b3f223e0b09fe2de54a2179455fab3c600234823280d6c19a6fd9798ce0fc66f3c6d320df379e252935f97b129d699cbfc84d5ef6722d6ad831780b40199b87dac43407b06479aa8e3e7ea78372087878b7d65160215b991cce6f510c5805a0599cc81825a719b9fed1d47739e9482acde24e4283ae09e059aad9df9d2403f3a38ddc2da40ac21a8d4de03849df4b1ffc7ac990bcae77c53f1ffb9f8af9a6a72820958b55dbd63e194ea423812042d59f33da1fd73fa840cc31efc5257c9a9082a21653e7061b4d173ec8fd69573c4659ac11a0bb82cddbcc51f32885db8088e669cae70cfe708cc498d73e6aeb8e2652e996a3cc215a0ab415f383fc3c223bcbdc023abaff8c9e8719c5b8fd3263a6fcaefe5d6297136790da162e2e42bff3507f2b3bf892bc97377ddda7d08b352566b601a1c84212cacad3497d0e48998c155e1132bc750f5285171cd48b0649bbb7cc5587fd699a13fc424a58c6940dcb1f84d05c579923bd071668bb120cb4db68208f7a56fac2d1daf41303fceacde8521da1b7f6d450c6d0b40ee9ce9e2bff627dd58bcd7b0f917c6a5b7863397251422e46b038849ee961338c8b99c8b046e6bbff66aff9500ac0223293ea3ffc586f2e4f94d54b3ae72617daf4283ea7e07b67fe9c4eb97eefa33100a685e3d53ebfa87878bfddafe0542bfc59bcf98ac612831038ce9650a36718cfce65b2eb9acb12ce12468982e14ac24e3bb2deedc153b8231d31a400d64f14e0a350a87932c5a4c879c9bc8b7e9398b876b8a8587d2382b61b32535f1d8ff1391971871bff509cdff9c705696f2602ad6e7f3c1d7739a2665872a96d76e5a47318b4acc244fae9fa6081eb977f6e1dcb8fb861d07dcd541702dd2e5abe2ce08fe59c0e63b8923b415ea1f51ffc17d46f35a166777db09f6ca82a243f290848cf5f035a15f6b3967595f047259ddfeb11eefa7bb1fb09188fb6e1841daba7c08498e39f6919d3aec4251dc9b34edca4a96c7d326aca3aad60c342df2b8491ffe768283c324b7e4785929710c3fc3d83694a75c0f3d1b9794935273792ef004fbb77435390a2e6b81e761494d479e21b4c50eeb8888ade95329551feca5f133a8763a85d6f70636a1c0a235ce1280518124a0a8cfed2eee755840c978847c096c14e4239313ee6ee69b319b2d023b6672f94050fbd6ed8e7309c1b11102d751986a9aaa177d9534bed1157ff47f480ab6d705b2843bee3e9376cf7a5532859744be9d2786520ecf8801f9589b5922c0a985060d133ca6ea3dd09a0c4bfdadf51416d7e4ae29cdbd1d2191d3976c430152d4a554d15ddb3192e730f9a6b11d02a43d8730836d17fd974d740054124b2007b96a5a87ad13a63292b1fe09b8e42efb8a6474b1abcd7dc6567a793a60c48a0d9b5f6442b94c953d3531da6a23066890bdc83f81245f0003971b9b610f4129cdb453003aa875ee61ece6f649fa49c14af2680eb00f7a91e3a07d08cd5e066fe2ebf92504dead851f65ac3923c845905be982ddfbbbe7b57600551ac87dc73bcf08e37cd0f43c2071728597a56373c76259556e09a788196f97725adf25aefc35539789862db8176692ec568d58719715ebe18c45b1963bc5301198323e6c101faf4922af588a3a313c262f4a74593651409e77cc084674e9da41f1a23d5ed7ccfc0a98bc22c3f322a44c28aa05c78b33dd1e7178200b7bd79b05e9719c93f9ba9fc4a4386042586ec41f5aab36e0541f6179519611d1c8bc1db102feca362b2156a0cbec8cb5c44748f8be6ccbe5507ffdd001c4aef3b3ee9c39a4334721b8868064835e32b6e8fb71b05d761c8c49725bee4a92d8e36230b3c8822b37c5945712c68fba53ba519d17ce70c0177d05e5656ebc4abbc225df49d6b879e6a17c250345921b17527c49c874ce49b982c2f2443e1d86ff5fbe08d3bcd3de4384288d7144ddf7b691dc43c5b75fffd15857726fd86e808c635ad808c7bb680daaf2bbb593b17a749f0b9305fa891caf48d92403d3dd369dc671d662d7533185dacb3091909a4eba97ba7eab8b52f37a8ff64167a62215515782c5372441a7f30f7d63388fa3ad675e9ff2a7165a1cf634d7b857c64bf7472fcb5a681dbbb3cef68ada266f8c8e3dfc0e985629fc00abc04b42f93a4ff4b949d3e6d91c902ab0cc37252552a15fa0df869a1f95df55504ac5f50eb1e8f076304d356f72046fc23d9403ddb676f7a67e15f4e1b2d13a1066c01ebb86773b87d180a7189009d185a18ba045c9b1769651005a112341dc804f3239ed42c6b77b17"}) accept4$inet6(r4, &(0x7f00000019c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000001a00)=0x1c, 0x80000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000001c40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001a80)=@mpls_getroute={0x160, 0x1a, 0x300, 0x70bd28, 0x25dfdbfc, {0x1c, 0x10, 0x20, 0x10, 0xfd, 0x4, 0x0, 0x1, 0x100}, [@RTA_VIA={0x14, 0x12, {0x10, "c44ad9f02c4fce69bd14b18eb299"}}, @RTA_NEWDST={0x84, 0x13, [{0x76, 0x0, 0x1}, {0x80000}, {0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9}, {0xfffc0}, {0xffff}, {0x8}, {0x9, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x48}, {0xe}, {0x3}, {0x200, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x5}, {0x9, 0x0, 0x1}, {0xff, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x2}, {0x2, 0x0, 0x1}, {0x16, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xf}, {0xb237}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x800, 0x0, 0x1}, {0x161}, {0x6}]}, @RTA_OIF={0x8, 0x4, r8}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}, @RTA_NEWDST={0x84, 0x13, [{}, {0x26}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xa67, 0x0, 0x1}, {0xff000}, {0x5, 0x0, 0x1}, {0xeef, 0x0, 0x1}, {0x1}, {0x8c1a}, {0x6}, {0x9, 0x0, 0x1}, {0x5}, {0x3}, {0x706e}, {0x6, 0x0, 0x1}, {0x2}, {0x7}, {0x7ff, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x200}, {0xe, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x9}, {0x0, 0x0, 0x1}, {0xff800}, {0x1b}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_DST={0x8, 0x1, {0xe24b}}, @RTA_OIF={0x8, 0x4, r8}]}, 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r9, 0x119, 0x1, &(0x7f0000001c80)=0xa0c1, 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000001cc0), &(0x7f0000001d00)=0x4) r11 = accept4$nfc_llcp(r4, &(0x7f0000001d40), &(0x7f0000001dc0)=0x60, 0x40000) ioctl$FIGETBSZ(r9, 0x2, &(0x7f0000001e00)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, 0xffffffffffffffff, 0x20000010) ioctl$sock_SIOCGSKNS(r11, 0x894c, &(0x7f0000001e40)=0x55f) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000001e80)={0x80}) 1.74834214s ago: executing program 2 (id=2059): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f00000000c0)={0x0, 0xfffffffffffffff7, 0x92c}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 1.515073794s ago: executing program 0 (id=2061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000092c000000000000000008500000053000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8dfffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 1.449273842s ago: executing program 3 (id=2062): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x98, &(0x7f00000000c0)=""/152}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c900000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e22, 0x7, @remote, 0x1}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x9a, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, @in={0x2, 0x4, @local}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x7}, @in={0x2, 0x4e23, @loopback}], 0xcc) 1.38550339s ago: executing program 2 (id=2063): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3f}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4024}, 0x0) 1.33456524s ago: executing program 3 (id=2064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000020c0), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf25000000000c0003000100000000000000080002000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000004c0)={0x0, 0x860, 0xa35, 0x1}) r3 = socket(0x23, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000008c0)={r2, "cf05260a8728241b1a8debb65729477e"}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x1a33be6, @local}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000300a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000002080001400000001408000240000000120c000580060001008faa00000c000800000001008a9500000900010073797a30"], 0x118}}, 0x0) 1.325288796s ago: executing program 2 (id=2065): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x20100, 0x0) read$rfkill(r0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000097000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000005c1b018720000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c682ea9271bbd9dfccfecddbe90570014981014a89ce8996f993686682a443e995daf2a386aebadd875fc0a9d86828f21e3131a2cb7455c28f79ea6682e533670a418aa0481afc7b57ceb1e6431ca097940"], 0x1c}}, 0x4000054) unshare(0x6a040000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x804) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) sendmmsg$inet(r8, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x999}], 0x1}}], 0x1, 0x40) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r8, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000057d4e501e290b6de5e8dd65bf846eb2b976b830b10aa4c61287e5e57bbc6e4b7eefd05e6f6cd2a70436f44201675bb8404fc17ca9dd284e75a8e8ea76db8e5983c9e6a7b67e48806c67837864141a53a354ad127d91f23c04c8b9bbdc43dd9705a697953a4304b58d3e6c597e96dd4a3355c970a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000001680)=ANY=[@ANYBLOB="1808000000000000000000000800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000cfffbaffc70200000800000018220000990de15e63b81622c77fe63284027529dfae8a7a1e998ca09afcc4dcb4b5cb6cd0b49f218fc7328c455978e2c2632bee98c12825d7fafc853c3d98447a8ef47e822590797dca65f378fc83af3e4416fe93c4115a5c5802000000f25dcf8ea94e2a5c7f3b607cf0c4eb5de3c4d4d04ea0d7cc2dbdc38ce8d3ff467962d165a55140a60ac2c8a6ee50e94d6ce896cae4c7d6a3dc42b79724a3e883ce322f42e940da6860b5b51ed55cfa58ef48de53b670ffe3db", @ANYRESOCT=r7, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x1, {0xa, 0x4e20, 0x2ca0, @private2, 0x80000000}}}, 0x32) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001480)={0x1c8, r5, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4a5920b9b604a315f65f63d88a1166fece939cd3fdbbabe9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5c9f3742ee8a6ad4d63ed2f369d9a3e9e81ef5871088eafd"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ba808baba74dc5f5def77f2f81d27c62948b7c1bf2c6194b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea478da876730ba9936ff5b0901b40d53dea2c26721e11fa"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "81b3d4a803074632d5b7291e91294eb9b76292467d738689"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d73214edb6ed65683f93ba5bc0696b8ac290fef255c75251"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "101dc76fc95a172b077c6dcd8ba0b8c2091047a6db6d84d2"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "65ecf268dcc23703eafefc7adda0aa22d3b89512d03d54b4"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000001840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x20044080) socket$can_raw(0x1d, 0x3, 0x1) 1.241264777s ago: executing program 0 (id=2066): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r10, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(r11, r12, 0x0, 0x7feff000) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.164254206s ago: executing program 4 (id=2067): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073112f00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3715], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040)) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000000c0)=""/199, 0xffffffffffffffff) 1.119607164s ago: executing program 4 (id=2068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="35000000000000004e00000000001c004000740000000000950000000000000041cca068850255544d211b541796"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2, 0x0, 0xa0, 0x3b}, {0x0, 0x200000005, 0x40000000007, 0x20000a0de, 0x100000000, 0x0, 0x200000003, 0x2}, {0x5, 0x800000000000000}, 0x5, 0x0, 0x1, 0x1, 0x6, 0x3}, {{@in=@remote, 0x4d6, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x3502, 0x3, 0x8, 0x0, 0x9075, 0x800, 0xc5e}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x8}}, 0x7}, 0x1c) r4 = accept(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) sendto$l2tp(r4, &(0x7f0000000380)="24b49d878ac3dc6cefd0841ef1e865e15e536c8643788b294fb7606a30a4", 0x1e, 0x4, &(0x7f00000003c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, 0x10) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b91f, 0x80000, {0x0, 0x0, 0x0, r10, {0x5, 0x3}, {0x8, 0xb}, {0x0, 0xd}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r11 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r11, &(0x7f00000007c0)=@in4={0x21, 0x0, 0x2, 0x6a, {0x2, 0x4e23, @broadcast}}, 0x24) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000440)={0x8, 0x7fffffff, 0x2}) 889.330075ms ago: executing program 3 (id=2069): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=r1], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_CREATE(0x3f, &(0x7f0000000880)=ANY=[], 0x50) 888.1215ms ago: executing program 1 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b0000000000080011"], 0x3c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x34, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x38, 0x0, 0x0, r3}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2}}]}, 0x34}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000080000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269"], 0xd0060) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2, 0x4, 0x2) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r5}, 0x4) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x80000000, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}}, 0x40) 702.739174ms ago: executing program 3 (id=2071): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) (async) setsockopt(r1, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000700)) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001c00070c29bd7000000000002d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'sit0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x5}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000300), 0x2) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271b, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0004000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a0004"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="6957042e55ff8b5be04a009d105138000000", @ANYRES16=r11, @ANYBLOB="080027bd7000ffdbdf250100000008000300", @ANYRES32=r12, @ANYBLOB="080001000200000008000100020000000c0006000200000002000000"], 0x38}}, 0x8044054) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000001}, 0x40000) 675.631086ms ago: executing program 1 (id=2072): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x2000001}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x2e, 0x6, 0xc, {0x1, @tcp_ip4_spec={@loopback, @multicast2, 0x4e21, 0x4e21, 0x1}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 0x4bf, 0xc62, [0x101, 0x8cb8]}, @tcp_ip6_spec={@private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x4e23, 0x10}, {0x0, @local, 0x9, 0x9, [0x2, 0xc10]}, 0x4, 0x6}}}) 614.871029ms ago: executing program 0 (id=2073): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000096d132478102268d00", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00000000000000e9ffffff0000020000dc2c2f1dc89accdd8668", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b00"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r6, @ANYBLOB="20002abd7000ffdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b007f0000000600110000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b0006000000060011008a2800000eea00006e657464657673696d0000000fdceaa1b95cf99ec87673696d300000080003000000000008000b00ff000000060011005003000057fe998137"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmmsg$inet(r4, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r5, 0xc0185879, &(0x7f0000000300)={0x14d, 0x35, 0x6}) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) write(r7, &(0x7f0000000040)="cb", 0xfffffdef) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x10, 0x8, 0x3, 0x15ab, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast1, @multicast1, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x57, [@dev]}, @ssrr={0x89, 0x1b, 0x56, [@local, @empty, @private=0xa010102, @private=0xa010100, @loopback, @broadcast]}, @cipso={0x86, 0x18, 0x2, [{0x0, 0x12, "75a75d235637447109e45e91d12b663e"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x8, 0x7800, 0x7, 0x8000, {{0x11, 0x4, 0x0, 0x3d, 0x44, 0x67, 0x0, 0xff, 0x4, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x17, 0x0, [{0x6, 0x11, "31cde5e341852155815f0e9d549043"}]}, @rr={0x7, 0xb, 0xd, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x4, 0x6c, 0x3, 0x8}, @ssrr={0x89, 0x7, 0xe5, [@rand_addr=0x64010100]}]}}}}}) 565.397127ms ago: executing program 2 (id=2074): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xffc, 0x10000003, 0xfffffffa, 0x0, 0x4000000, {}, {0x0, 0x0, 0xfffc, 0x0, 0x4, 0x8}, 0x8}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="418af06c76adc28100e40f000000180001801400020076657468315f746f5f626f6e64"], 0x2c}}, 0x4044890) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x8, 0x700, 0x6, 0x20000006, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x67, 0x0, 0x3, 0x4, 0x0, @broadcast, @multicast2, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0xf8, 0x0, 0xf, [0x1, 0x6, 0x7, 0x10001, 0x1]}, @generic={0x88, 0xb, "94f10e73ab4c84a30e"}]}}}}}) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8000000d420fa1915c19ad003520cf3e6ed1c6e432180a31938694e1422ffb693f675cf", @ANYRES16=r7, @ANYBLOB="00002abd7000ffdbdf2516000000050003000100000040000180080001001a6fb8b52fed31a8fe71b997c73bf0d5a5329ac6e895fdfd0590c51297948b57", @ANYRES32=0x0, @ANYBLOB="140002006e65747063693000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="0800030001000000080003000200000008000300010000000500020001000000050003000100000005000300000000004400018008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766574683000000000000000000000001400020070696d367265670000000000000000000800030000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x802) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa}}, 0x26) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="01422006020607f6"], 0xa) bind$bt_hci(r13, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c000280080003400000000408000180fffffffd0800f1d7fffffffd0800034000000003090002007379"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001c4010000000000010000008500000041000000850000007d0000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x69) 469.054243ms ago: executing program 1 (id=2075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0103000000000000000000000000140000001100010010000000000000000000000a"], 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001700"], 0x1c}}, 0x4140) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x4000914, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4008800) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10048095, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = epoll_create1(0x80000) unshare(0x20000400) ioctl$INCFS_IOC_CREATE_FILE(r8, 0xc058671e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x6, 0x5, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x0) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6000000010000d042abd70000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000000400000002c0012800c0001006d6163766c616e001c00028008000900ffffffff08000100010000000800030000000000140035006d6163766c616e3000"], 0x60}}, 0x8000) splice(r0, 0x0, r5, 0x0, 0xc, 0x0) write(r3, 0x0, 0x0) 257.871288ms ago: executing program 1 (id=2076): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x29, 0x803, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000004c18000071117400000000004e5b0095003300000000009500a50500000000"], &(0x7f0000000500)='syzkaller\x00', 0x5, 0xc3, &(0x7f00000006c0)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x6}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x400, {0x0, 0x0, 0x0, 0x0, 0x908b, 0x120}, [@IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0xff02}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000014000200776730000000000000000000000000000600060000000000980808806c0200803c0209801c000080060001000200"], 0x8c8}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x4008010) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r5, @ANYBLOB="81060100000002001c0012800b00010062726964676500008002332e504a97000d0df4646e0c0e3b62c0ad351edb5d0937d95c016d83c84e0779a8b24e08d8d23b5915b434ca3e6ffe3460ce2d5a134c1ac7a08e31641bc602d0c513a652a100d25ce465c21d0892c1615457e0ed0c11b3ca3c37ff70e490699382dd02000000c54ee3b463ea313fcfd07d263676e7d001001fb54ffa8c24f0fd000000"], 0x34}}, 0x20044002) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet(0x2, 0xa, 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000940)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000880)=ANY=[@ANYBLOB="afffffe7", @ANYRES16=0x0, @ANYBLOB="000103000000fddbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990009000000000000001400020126a9acd3c564b6fdfc9f4b05cc1cbbc00a000600ffffffffffff0000140002019ec5fa9f5e5c4dc9fb59d17a4f2981221400fe004d0b8325043b544b66973f31849756a60a00060008021100000100000a00060008021100000000001400fe00bb7ae85a5f723a895ae363983c028ec21400fe00ae0dcb2420826a68e241e2f3b592aa4c"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x20004000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r6, @ANYRES16=r8, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00g\x00\x00\x00', @ANYBLOB="0c000500db"], 0x30}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[], 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) 181.31673ms ago: executing program 3 (id=2077): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_cmd={0x8, 0x3, 0x3, 0x2, 0x5, 0x3, 0xd7, 0x6, 0xfe, 0x2, 0x8, 0x1000, 0x0, 0x7, 0xff, 0x7, [0x3, 0xffffce76]}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000080)=0x7, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 118.394301ms ago: executing program 2 (id=2078): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) shutdown(r1, 0x1) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r3, r1, 0x1, 0x0, 0x0, 0x48, 0x1, 0x5, 0xa, 0x8, 0x1, 0x2, 'syz0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) 60.213026ms ago: executing program 4 (id=2079): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32], 0x68}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}}}, 0x24}}, 0x4000080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000140)={0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000300)="854b63bd8c0e6ac6b4702623b39698401e662bee949044f9cdfe310495c23430ad2060e9d7234cf78afb2a8370c2a9f3e736d3e5f1077187ac568702b6179e19febcb2b05028eeaeb561c7752d184626fd62707804557ee9f7dd6f4437adbb7d3b7b5e171cbba88cf90982be8c2f1e9c8b197f5ab4d939b9afcbcdb92ed6ecb570b46e3c29b4038333bf83324e9fb6bd3a421b28d566539fdf12ee8ae883b54e18db3db889f0d076747e8c5a4ee528d16db60a785aa29a7904e286d63d503630334b163c67b6eb4a2dd3a3dfddd4daa2ed7d283fed43553c56e11f954ec37cf6bff567ee74eac06a2c5bc8efb187bdffcbc46b928df075a0", 0xf8}, {&(0x7f0000000480)="69a39c94531f8329f75a4b83cd907e20db5ab11451a06ccf3d2471d7f7ae4ec96ebbab1870d8e76a8ae4efacb402da8f82d742c743c9a5358b1d8b469996cfcaaccd1db41e0dbfd03c68337f33046b0851446127cdccab338935587ec635993fc8d58bf17662815e9bfab21a3ea65ae58543d7bc38d76592f03ed8bea26cc863bb8ce760f3b2721e8e8b6daaa816814d1c53a11cc672c47df4491274cf6b6ae9a56a08b5e3be6c817e3c314992baec1ba4eea9f4805990511611b07d1a6501115ed81685ed2566e6cc9d16a5a78a88ef03be2797f2d237f43540738219c9", 0xde}, {&(0x7f0000000600)="eb94bd4302f02946e0c9386aa882a6863765a3a06d47c3c2c1d637812a53c2b6ed5c7e044df46de69dbee15b83b556a7c4f7aa37a9ea19b419546959fa87bf5ff915af9b4ef7f7dd68daaf1c813d6cb85044c0c3d265f98e7f4ec71b19eb079dc145b562a90f9e37cbc2afbe9a5328ee042ed6bfe56a3c779ce176eeda2141a588575aad192f68bf989f1e32375cbdf25e6ecc10dc8d6ff22c3face83cd75f", 0x9f}, {&(0x7f0000000200)="086959384e6a148ad0499d974bd37e36da482a86571096fdf457ff9d830334f1ba1a822474ce1d37c12a3132e016bdb12fb2462fe586d3ba1b407029305351aa262ffcb7a86dd2b93d7623e7bf9d8df7b31007a4c09ba6d6d0557257411ed9abdd07a640741eea44f7b5d94d5bb13fa251f7851d18fead", 0x77}, {&(0x7f0000000180)="7c970c8f0aecb3bc7bab004cb3914dac00b7ad119b162dec", 0x18}], 0x5, &(0x7f0000000740)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x62, 0xe, 0x1, 0x1, 0x0, [@mcast1, @empty, @mcast2, @empty, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}}}], 0x88}, 0x20008004) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x51) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/254, 0xfe}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002"], 0x58}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x100, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000800)) 0s ago: executing program 3 (id=2080): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r0, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@timestamping={{0x14, 0x1, 0x51, 0x2}}], 0x18}}], 0x1, 0x20000000) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) socketpair(0x8, 0x6, 0x86f6, &(0x7f0000000000)) (async) unshare(0x2020280) kernel console output (not intermixed with test programs): 7240] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.291'. [ 124.075320][ T7242] netlink: 'syz.4.292': attribute type 4 has an invalid length. [ 124.482860][ T7255] netlink: 100 bytes leftover after parsing attributes in process `syz.4.295'. [ 125.280688][ T7282] erspan0: entered promiscuous mode [ 125.286751][ T7282] vlan2: entered promiscuous mode [ 125.545092][ T7288] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.304'. [ 125.579001][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 125.627157][ T7292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.305'. [ 126.841613][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 126.933284][ T7335] netlink: 'syz.3.318': attribute type 58 has an invalid length. [ 126.984831][ T7335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.318'. [ 128.734067][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.326'. [ 128.813826][ T7344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.867136][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 128.971619][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 128.993451][ T7344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.024214][ T7384] netlink: 'syz.1.330': attribute type 5 has an invalid length. [ 129.097699][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.106245][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.243736][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.262880][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.436995][ T7371] gretap1: left promiscuous mode [ 129.442758][ T7371] bridge1: left promiscuous mode [ 129.448254][ T7371] bridge1: left allmulticast mode [ 129.582805][ T7344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.632499][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.646611][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.714096][ T7344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.753571][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.784528][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.982480][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.014456][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.067565][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.130618][ T3489] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.144676][ T7412] syzkaller0: entered promiscuous mode [ 130.170286][ T7412] syzkaller0: entered allmulticast mode [ 130.519158][ T7432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.344'. [ 130.680752][ T7440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.347'. [ 130.729185][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 131.212126][ T7464] netlink: 240 bytes leftover after parsing attributes in process `syz.3.351'. [ 131.234979][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 131.252336][ T7465] netlink: 'syz.1.349': attribute type 7 has an invalid length. [ 131.729629][ T7479] bond3: option tlb_dynamic_lb: invalid value (47) [ 131.771694][ T7479] bond3 (unregistering): Released all slaves [ 132.434956][ T7525] FAULT_INJECTION: forcing a failure. [ 132.434956][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 132.455039][ T7525] CPU: 0 UID: 0 PID: 7525 Comm: syz.4.369 Not tainted syzkaller #0 PREEMPT(full) [ 132.455066][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.455082][ T7525] Call Trace: [ 132.455094][ T7525] [ 132.455103][ T7525] dump_stack_lvl+0x189/0x250 [ 132.455137][ T7525] ? __pfx____ratelimit+0x10/0x10 [ 132.455157][ T7525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.455177][ T7525] ? __pfx__printk+0x10/0x10 [ 132.455201][ T7525] ? __might_fault+0xb0/0x130 [ 132.455235][ T7525] should_fail_ex+0x414/0x560 [ 132.455265][ T7525] _copy_from_iter+0x1de/0x1790 [ 132.455293][ T7525] ? rcu_is_watching+0x15/0xb0 [ 132.455313][ T7525] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 132.455340][ T7525] ? __pfx__copy_from_iter+0x10/0x10 [ 132.455363][ T7525] ? __build_skb_around+0x257/0x3e0 [ 132.455390][ T7525] ? netlink_sendmsg+0x642/0xb30 [ 132.455409][ T7525] ? skb_put+0x11b/0x210 [ 132.455432][ T7525] netlink_sendmsg+0x6b2/0xb30 [ 132.455460][ T7525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.455486][ T7525] ? aa_sock_msg_perm+0xf1/0x1d0 [ 132.455514][ T7525] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 132.455530][ T7525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.455553][ T7525] __sock_sendmsg+0x219/0x270 [ 132.455585][ T7525] ____sys_sendmsg+0x505/0x830 [ 132.455615][ T7525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.455650][ T7525] ? import_iovec+0x74/0xa0 [ 132.455677][ T7525] ___sys_sendmsg+0x21f/0x2a0 [ 132.455703][ T7525] ? __pfx____sys_sendmsg+0x10/0x10 [ 132.455735][ T7525] ? rcu_read_lock_any_held+0xb3/0x120 [ 132.455766][ T7525] ? sb_end_write+0xe9/0x1c0 [ 132.455806][ T7525] ? __pfx_vfs_write+0x10/0x10 [ 132.455838][ T7525] __x64_sys_sendmsg+0x19b/0x260 [ 132.455865][ T7525] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 132.455900][ T7525] ? __pfx_ksys_write+0x10/0x10 [ 132.455932][ T7525] ? rcu_is_watching+0x15/0xb0 [ 132.455954][ T7525] ? do_syscall_64+0xbe/0x3b0 [ 132.455980][ T7525] do_syscall_64+0xfa/0x3b0 [ 132.456001][ T7525] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.456021][ T7525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.456040][ T7525] ? clear_bhb_loop+0x60/0xb0 [ 132.456063][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.456081][ T7525] RIP: 0033:0x7f60f778eec9 [ 132.456109][ T7525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.456135][ T7525] RSP: 002b:00007f60f59f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.456159][ T7525] RAX: ffffffffffffffda RBX: 00007f60f79e5fa0 RCX: 00007f60f778eec9 [ 132.456173][ T7525] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 132.456193][ T7525] RBP: 00007f60f59f6090 R08: 0000000000000000 R09: 0000000000000000 [ 132.456204][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.456215][ T7525] R13: 00007f60f79e6038 R14: 00007f60f79e5fa0 R15: 00007fff49a2c698 [ 132.456247][ T7525] [ 132.848487][ T7532] netlink: 28 bytes leftover after parsing attributes in process `syz.3.370'. [ 133.119010][ T7539] netlink: 'syz.4.371': attribute type 12 has an invalid length. [ 133.126864][ T7539] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.371'. [ 133.264053][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.289434][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.372'. [ 133.389472][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.371'. [ 134.015558][ T9] IPVS: starting estimator thread 0... [ 134.092828][ T7567] erspan0: entered promiscuous mode [ 134.106771][ T7567] erspan0: left promiscuous mode [ 134.121053][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'. [ 134.134432][ T7571] openvswitch: netlink: Flow actions attr not present in new flow. [ 134.138328][ T7561] IPVS: using max 28 ests per chain, 67200 per kthread [ 134.253756][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 134.283396][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 134.344194][ T7579] FAULT_INJECTION: forcing a failure. [ 134.344194][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 134.382705][ T7579] CPU: 0 UID: 0 PID: 7579 Comm: syz.0.381 Not tainted syzkaller #0 PREEMPT(full) [ 134.382739][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.382749][ T7579] Call Trace: [ 134.382757][ T7579] [ 134.382765][ T7579] dump_stack_lvl+0x189/0x250 [ 134.382790][ T7579] ? __pfx____ratelimit+0x10/0x10 [ 134.382812][ T7579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.382834][ T7579] ? __pfx__printk+0x10/0x10 [ 134.382858][ T7579] ? __lock_acquire+0xab9/0xd20 [ 134.382895][ T7579] should_fail_ex+0x414/0x560 [ 134.382927][ T7579] should_failslab+0xa8/0x100 [ 134.382954][ T7579] kmem_cache_alloc_noprof+0x73/0x3c0 [ 134.382976][ T7579] ? skb_clone+0x212/0x3a0 [ 134.383006][ T7579] skb_clone+0x212/0x3a0 [ 134.383035][ T7579] __netlink_deliver_tap+0x404/0x850 [ 134.383072][ T7579] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.383096][ T7579] netlink_deliver_tap+0x19c/0x1b0 [ 134.383119][ T7579] netlink_unicast+0x7fa/0x9e0 [ 134.383148][ T7579] ? __pfx_netlink_unicast+0x10/0x10 [ 134.383169][ T7579] ? netlink_sendmsg+0x642/0xb30 [ 134.383189][ T7579] ? skb_put+0x11b/0x210 [ 134.383215][ T7579] netlink_sendmsg+0x805/0xb30 [ 134.383247][ T7579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.383271][ T7579] ? aa_sock_msg_perm+0xf1/0x1d0 [ 134.383300][ T7579] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.383318][ T7579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.383345][ T7579] __sock_sendmsg+0x219/0x270 [ 134.383379][ T7579] ____sys_sendmsg+0x505/0x830 [ 134.383410][ T7579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.383446][ T7579] ? import_iovec+0x74/0xa0 [ 134.383473][ T7579] ___sys_sendmsg+0x21f/0x2a0 [ 134.383500][ T7579] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.383533][ T7579] ? rcu_read_lock_any_held+0xb3/0x120 [ 134.383563][ T7579] ? sb_end_write+0xe9/0x1c0 [ 134.383600][ T7579] ? __pfx_vfs_write+0x10/0x10 [ 134.383626][ T7579] __x64_sys_sendmsg+0x19b/0x260 [ 134.383647][ T7579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 134.383673][ T7579] ? __pfx_ksys_write+0x10/0x10 [ 134.383688][ T7579] ? rcu_is_watching+0x15/0xb0 [ 134.383706][ T7579] ? do_syscall_64+0xbe/0x3b0 [ 134.383733][ T7579] do_syscall_64+0xfa/0x3b0 [ 134.383749][ T7579] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.383764][ T7579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.383778][ T7579] ? clear_bhb_loop+0x60/0xb0 [ 134.383796][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.383809][ T7579] RIP: 0033:0x7f6f1dd8eec9 [ 134.383823][ T7579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.383835][ T7579] RSP: 002b:00007f6f1ecef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.383851][ T7579] RAX: ffffffffffffffda RBX: 00007f6f1dfe5fa0 RCX: 00007f6f1dd8eec9 [ 134.383861][ T7579] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 134.383870][ T7579] RBP: 00007f6f1ecef090 R08: 0000000000000000 R09: 0000000000000000 [ 134.383878][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.383886][ T7579] R13: 00007f6f1dfe6038 R14: 00007f6f1dfe5fa0 R15: 00007ffdc08a7958 [ 134.383909][ T7579] [ 134.397901][ T7584] netlink: 'syz.3.382': attribute type 2 has an invalid length. [ 134.519897][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.383'. [ 134.583302][ T7588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.383'. [ 135.041747][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 135.284067][ T7624] FAULT_INJECTION: forcing a failure. [ 135.284067][ T7624] name failslab, interval 1, probability 0, space 0, times 0 [ 135.346638][ T7624] CPU: 0 UID: 0 PID: 7624 Comm: syz.1.393 Not tainted syzkaller #0 PREEMPT(full) [ 135.346733][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.346745][ T7624] Call Trace: [ 135.346753][ T7624] [ 135.346763][ T7624] dump_stack_lvl+0x189/0x250 [ 135.346790][ T7624] ? __pfx____ratelimit+0x10/0x10 [ 135.346812][ T7624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.346841][ T7624] ? __pfx__printk+0x10/0x10 [ 135.346873][ T7624] ? __pfx___might_resched+0x10/0x10 [ 135.346902][ T7624] ? fs_reclaim_acquire+0x7d/0x100 [ 135.346936][ T7624] should_fail_ex+0x414/0x560 [ 135.346969][ T7624] should_failslab+0xa8/0x100 [ 135.346998][ T7624] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 135.347024][ T7624] ? __alloc_skb+0x112/0x2d0 [ 135.347050][ T7624] __alloc_skb+0x112/0x2d0 [ 135.347077][ T7624] netlink_ack+0x146/0xa50 [ 135.347097][ T7624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.347140][ T7624] netlink_rcv_skb+0x28c/0x470 [ 135.347159][ T7624] ? __lock_acquire+0xab9/0xd20 [ 135.347183][ T7624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.347213][ T7624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.347253][ T7624] ? down_read+0x1ad/0x2e0 [ 135.347278][ T7624] genl_rcv+0x28/0x40 [ 135.347300][ T7624] netlink_unicast+0x82c/0x9e0 [ 135.347329][ T7624] ? __pfx_netlink_unicast+0x10/0x10 [ 135.347347][ T7624] ? netlink_sendmsg+0x642/0xb30 [ 135.347365][ T7624] ? skb_put+0x11b/0x210 [ 135.347390][ T7624] netlink_sendmsg+0x805/0xb30 [ 135.347422][ T7624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.347446][ T7624] ? aa_sock_msg_perm+0xf1/0x1d0 [ 135.347475][ T7624] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.347493][ T7624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.347515][ T7624] __sock_sendmsg+0x219/0x270 [ 135.347547][ T7624] ____sys_sendmsg+0x505/0x830 [ 135.347577][ T7624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.347612][ T7624] ? import_iovec+0x74/0xa0 [ 135.347639][ T7624] ___sys_sendmsg+0x21f/0x2a0 [ 135.347668][ T7624] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.347713][ T7624] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 135.347758][ T7624] ? bpf_trace_run2+0x186/0x4b0 [ 135.347789][ T7624] __x64_sys_sendmsg+0x19b/0x260 [ 135.347818][ T7624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.347871][ T7624] ? rcu_is_watching+0x15/0xb0 [ 135.347890][ T7624] ? trace_sys_enter+0x25/0x100 [ 135.347924][ T7624] do_syscall_64+0xfa/0x3b0 [ 135.347947][ T7624] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.347968][ T7624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.347985][ T7624] ? clear_bhb_loop+0x60/0xb0 [ 135.348007][ T7624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.348025][ T7624] RIP: 0033:0x7fa656b8eec9 [ 135.348041][ T7624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.348058][ T7624] RSP: 002b:00007fa657960038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.348078][ T7624] RAX: ffffffffffffffda RBX: 00007fa656de5fa0 RCX: 00007fa656b8eec9 [ 135.348093][ T7624] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 135.348105][ T7624] RBP: 00007fa657960090 R08: 0000000000000000 R09: 0000000000000000 [ 135.348116][ T7624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.348127][ T7624] R13: 00007fa656de6038 R14: 00007fa656de5fa0 R15: 00007fff44ad6e88 [ 135.348158][ T7624] [ 135.785569][ T7628] veth0_to_bridge: entered promiscuous mode [ 135.915467][ T7627] veth0_to_bridge: left promiscuous mode [ 136.085173][ T7652] erspan1: entered allmulticast mode [ 136.454272][ T7671] netlink: 'syz.1.405': attribute type 16 has an invalid length. [ 136.468929][ T7671] netlink: 'syz.1.405': attribute type 17 has an invalid length. [ 137.082720][ T7700] Bluetooth: MGMT ver 1.23 [ 137.087379][ T7700] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 138.621191][ T7753] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.667018][ T7753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 138.677040][ T7763] Illegal XDP return value 16128 on prog (id 132) dev syz_tun, expect packet loss! [ 138.991584][ T7780] __nla_validate_parse: 3 callbacks suppressed [ 138.991604][ T7780] netlink: 220 bytes leftover after parsing attributes in process `syz.3.419'. [ 139.024600][ T7786] netlink: 'syz.4.421': attribute type 23 has an invalid length. [ 139.052145][ T7787] netlink: 48 bytes leftover after parsing attributes in process `syz.0.420'. [ 139.099344][ T7786] netlink: 'syz.4.421': attribute type 64 has an invalid length. [ 139.124471][ T7741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.305121][ T7790] syz.2.422 (7790) used greatest stack depth: 17864 bytes left [ 139.446356][ T7807] netlink: 32 bytes leftover after parsing attributes in process `syz.2.427'. [ 139.458874][ T7808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.426'. [ 139.500100][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.427'. [ 139.510851][ T7803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.426'. [ 139.853306][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 140.110221][ T7830] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 140.402993][ T7843] netlink: 52 bytes leftover after parsing attributes in process `syz.2.438'. [ 140.520855][ T7847] netlink: 200 bytes leftover after parsing attributes in process `syz.0.439'. [ 140.780601][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.440'. [ 141.772409][ T7899] !: renamed from dummy0 (while UP) [ 149.898118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.539430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.179222][ T7935] __nla_validate_parse: 1 callbacks suppressed [ 188.179242][ T7935] netlink: 156 bytes leftover after parsing attributes in process `syz.0.453'. [ 188.279987][ T7941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.455'. [ 188.444392][ T7951] netlink: 'syz.4.459': attribute type 18 has an invalid length. [ 188.528427][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 188.565072][ T7954] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 188.577731][ T7954] netlink: 'syz.2.460': attribute type 2 has an invalid length. [ 188.602780][ T7957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.461'. [ 188.615136][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 188.624538][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.461'. [ 188.776760][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 189.122863][ T7984] netlink: 'syz.4.469': attribute type 1 has an invalid length. [ 190.698904][ T5183] Bluetooth: hci4: command tx timeout [ 190.991403][ T8053] bridge_slave_0: left allmulticast mode [ 190.997495][ T8053] bridge_slave_0: left promiscuous mode [ 191.003676][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.015575][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.030343][ T8053] bond0: (slave bond_slave_0): Releasing backup interface [ 191.042887][ T8053] bond0: (slave bond_slave_1): Releasing backup interface [ 191.054132][ T8053] team0: Port device team_slave_0 removed [ 191.067121][ T8053] team0: Port device team_slave_1 removed [ 191.073782][ T8053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.082296][ T8053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.105402][ T8053] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.308867][ T8067] syz_tun: entered allmulticast mode [ 191.530990][ T8080] netem: incorrect ge model size [ 191.536199][ T8080] netem: change failed [ 191.608112][ T8064] syz_tun: left allmulticast mode [ 192.119516][ T8115] veth1_to_bond: entered allmulticast mode [ 192.204976][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 192.276469][ T8120] bond0: (slave bond_slave_1): Releasing backup interface [ 192.314074][ T8120] veth1_to_bond (unregistering): left allmulticast mode [ 192.575025][ T8137] vlan2: entered promiscuous mode [ 192.683190][ T8144] netlink: 'syz.2.508': attribute type 11 has an invalid length. [ 192.701139][ T8145] netlink: 'syz.2.508': attribute type 11 has an invalid length. [ 192.750865][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.509'. [ 192.955349][ T8153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.511'. [ 193.724796][ T8178] __nla_validate_parse: 2 callbacks suppressed [ 193.724815][ T8178] netlink: 60 bytes leftover after parsing attributes in process `syz.0.517'. [ 193.886348][ T8182] ipvlan2: entered promiscuous mode [ 193.903332][ T8182] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 194.402318][ T8192] netlink: 'syz.2.519': attribute type 1 has an invalid length. [ 194.421132][ T8192] netlink: 232 bytes leftover after parsing attributes in process `syz.2.519'. [ 194.683489][ T8212] netlink: 788 bytes leftover after parsing attributes in process `syz.1.524'. [ 194.705940][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.080495][ T8226] team0: Port device dummy0 removed [ 195.127118][ T8226] bridge_slave_0: left allmulticast mode [ 195.147501][ T8226] bridge_slave_0: left promiscuous mode [ 195.161285][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.185216][ T8226] bridge_slave_1: left allmulticast mode [ 195.299283][ T8226] bridge_slave_1: left promiscuous mode [ 195.305723][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.409592][ T8226] bond0: (slave bond_slave_0): Releasing backup interface [ 195.429958][ T8226] bond0: (slave bond_slave_1): Releasing backup interface [ 195.453534][ T8226] team0: Port device team_slave_0 removed [ 195.469872][ T8226] team0: Port device team_slave_1 removed [ 195.478522][ T8226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.486839][ T8226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.519998][ T8226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.528061][ T8226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.550579][ T8226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 195.811860][ T8240] netlink: 180 bytes leftover after parsing attributes in process `syz.3.532'. [ 195.828444][ T8241] netlink: 180 bytes leftover after parsing attributes in process `syz.3.532'. [ 195.860037][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 195.972308][ T8249] netlink: 'syz.2.534': attribute type 6 has an invalid length. [ 195.980920][ T8250] netlink: 44 bytes leftover after parsing attributes in process `syz.2.534'. [ 196.033708][ T8251] netlink: 14 bytes leftover after parsing attributes in process `syz.1.535'. [ 196.129689][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.539'. [ 196.310741][ T30] audit: type=1107 audit(1759382403.253:3): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='WSzU_*Aq*ź7.No0o' [ 196.316620][ T8251] bond0 (unregistering): Released all slaves [ 196.466643][ T8270] syzkaller0: entered promiscuous mode [ 196.472875][ T8270] syzkaller0: entered allmulticast mode [ 197.707195][ T8306] netlink: 24 bytes leftover after parsing attributes in process `syz.3.547'. [ 197.946532][ T8313] macsec1: entered promiscuous mode [ 197.965157][ T8313] dummy0: entered promiscuous mode [ 197.990345][ T8313] macsec1: entered allmulticast mode [ 198.008390][ T8313] dummy0: entered allmulticast mode [ 198.254807][ T8326] tipc: Started in network mode [ 198.260232][ T8326] tipc: Node identity 4e8a7c55a60e, cluster identity 4711 [ 198.267532][ T8326] tipc: Enabled bearer , priority 0 [ 198.302059][ T8326] syzkaller0: entered promiscuous mode [ 198.319369][ T8326] syzkaller0: entered allmulticast mode [ 198.667481][ T8325] tipc: Resetting bearer [ 198.759636][ T8354] __nla_validate_parse: 2 callbacks suppressed [ 198.759656][ T8354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.562'. [ 198.775128][ T8354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.562'. [ 198.845025][ T8325] tipc: Disabling bearer [ 198.932995][ T8364] netlink: 44 bytes leftover after parsing attributes in process `syz.2.565'. [ 198.951561][ T8364] netlink: 44 bytes leftover after parsing attributes in process `syz.2.565'. [ 198.984088][ T8366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.564'. [ 199.055203][ T8371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.566'. [ 199.653050][ T8379] netlink: 'syz.0.569': attribute type 6 has an invalid length. [ 199.822944][ T8407] tipc: Enabled bearer , priority 0 [ 199.831679][ T8407] syzkaller0: entered promiscuous mode [ 199.837384][ T8407] syzkaller0: entered allmulticast mode [ 199.868847][ T8407] ip6tnl1: entered promiscuous mode [ 199.874169][ T8407] ip6tnl1: entered allmulticast mode [ 199.919668][ T8406] tipc: Resetting bearer [ 200.064117][ T8406] tipc: Disabling bearer [ 200.093680][ T8410] netlink: 28 bytes leftover after parsing attributes in process `syz.1.576'. [ 200.144860][ T8411] netlink: 56 bytes leftover after parsing attributes in process `syz.1.576'. [ 200.455257][ T8419] syzkaller0: entered promiscuous mode [ 200.461530][ T8419] syzkaller0: entered allmulticast mode [ 200.691890][ T8439] netlink: 36 bytes leftover after parsing attributes in process `syz.4.582'. [ 200.822576][ T8445] netlink: 'syz.0.584': attribute type 32 has an invalid length. [ 200.831262][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 200.854037][ T8445] bond2: option coupled_control: invalid value (124) [ 200.863405][ T8445] bond2 (unregistering): Released all slaves [ 201.853621][ T8510] vlan2: entered promiscuous mode [ 201.859848][ T8510] ip6gretap0: entered promiscuous mode [ 203.069533][ T8565] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 3, id = 0 [ 203.403529][ T30] audit: type=1800 audit(1759382410.343:4): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.619" name="memory.events" dev="tmpfs" ino=637 res=0 errno=0 [ 203.510246][ T8584] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 203.579690][ T8584] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 203.947436][ T8609] wg1 speed is unknown, defaulting to 1000 [ 203.961526][ T8609] wg1 speed is unknown, defaulting to 1000 [ 204.000240][ T8609] wg1 speed is unknown, defaulting to 1000 [ 204.036491][ T8612] wg1 speed is unknown, defaulting to 1000 [ 204.091623][ T8609] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 204.102530][ T8619] __nla_validate_parse: 10 callbacks suppressed [ 204.102549][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 204.195282][ T8609] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 204.274550][ T8609] wg1 speed is unknown, defaulting to 1000 [ 204.322884][ T8609] wg1 speed is unknown, defaulting to 1000 [ 204.346270][ T8609] wg1 speed is unknown, defaulting to 1000 [ 204.354432][ T8631] netlink: 'syz.0.635': attribute type 4 has an invalid length. [ 204.412957][ T8609] wg1 speed is unknown, defaulting to 1000 [ 204.434495][ T8609] wg1 speed is unknown, defaulting to 1000 [ 204.549933][ T8641] wg1 speed is unknown, defaulting to 1000 [ 204.643627][ T8647] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.638'. [ 204.672524][ T8650] netlink: 'syz.3.641': attribute type 10 has an invalid length. [ 204.692928][ T8652] netlink: 48 bytes leftover after parsing attributes in process `syz.4.639'. [ 204.840140][ T8656] wg1 speed is unknown, defaulting to 1000 [ 204.856706][ T8661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 204.875185][ T8652] netlink: 16 bytes leftover after parsing attributes in process `syz.4.639'. [ 204.882802][ T8662] netlink: 132 bytes leftover after parsing attributes in process `syz.3.641'. [ 205.240860][ T8675] netlink: 22 bytes leftover after parsing attributes in process `syz.1.645'. [ 205.299491][ T8682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.645'. [ 205.400083][ T8675] wg1 speed is unknown, defaulting to 1000 [ 205.544288][ T8693] netlink: 'syz.2.649': attribute type 101 has an invalid length. [ 205.564957][ T8693] netlink: 'syz.2.649': attribute type 7 has an invalid length. [ 205.623324][ T8687] netlink: 48 bytes leftover after parsing attributes in process `syz.0.648'. [ 205.787983][ T8707] tipc: Started in network mode [ 205.793117][ T8707] tipc: Node identity 528d92c6fd4d, cluster identity 4711 [ 205.839774][ T8707] tipc: Enabled bearer , priority 0 [ 205.869181][ T8711] syzkaller0: entered promiscuous mode [ 205.891270][ T8711] syzkaller0: entered allmulticast mode [ 205.957218][ T8707] syzkaller0: mtu less than device minimum [ 205.969148][ T8706] tipc: Resetting bearer [ 206.022832][ T8706] tipc: Disabling bearer [ 206.028034][ T8717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.654'. [ 206.403959][ T8724] netlink: 'syz.1.656': attribute type 1 has an invalid length. [ 207.018962][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 207.018979][ T5867] Bluetooth: hci2: command 0x0406 tx timeout [ 207.019051][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 207.025240][ T5873] Bluetooth: hci0: command 0x0406 tx timeout [ 207.086790][ T8739] bond1: left promiscuous mode [ 207.091841][ T8739] bond1: left allmulticast mode [ 207.099303][ T8739] bond2: left promiscuous mode [ 207.104292][ T8739] bond2: left allmulticast mode [ 207.112115][ T8739] dummy0: left allmulticast mode [ 207.117194][ T8739] dummy0: left promiscuous mode [ 207.122606][ T8739] macsec1: left promiscuous mode [ 207.128222][ T8739] macsec1: left allmulticast mode [ 207.149125][ T8742] geneve2: entered promiscuous mode [ 207.154446][ T8742] geneve2: entered allmulticast mode [ 207.184284][ T8750] wg1 speed is unknown, defaulting to 1000 [ 207.624594][ T8783] macsec1: entered promiscuous mode [ 207.717018][ T8782] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 208.227312][ T8803] bond3: option resend_igmp: invalid value (2878) [ 208.234466][ T8803] bond3: option resend_igmp: allowed values 0 - 255 [ 208.243551][ T8803] bond3 (unregistering): Released all slaves [ 208.333674][ T8823] sctp: [Deprecated]: syz.2.679 (pid 8823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.333674][ T8823] Use struct sctp_sack_info instead [ 208.633115][ T8844] netlink: 'syz.1.687': attribute type 1 has an invalid length. [ 208.866587][ T8843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.948863][ T8852] wg1 speed is unknown, defaulting to 1000 [ 209.006118][ T8861] wg1 speed is unknown, defaulting to 1000 [ 209.670954][ T8894] tap0: tun_chr_ioctl cmd 1074025677 [ 209.676629][ T8894] tap0: linktype set to 776 [ 209.926310][ T8900] __nla_validate_parse: 10 callbacks suppressed [ 209.926331][ T8900] netlink: 28 bytes leftover after parsing attributes in process `syz.2.702'. [ 210.002601][ T8900] sock: sock_timestamping_bind_phc: sock not bind to device [ 210.074081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.756949][ T8927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.709'. [ 210.839420][ T8933] netlink: 'syz.4.710': attribute type 3 has an invalid length. [ 210.856766][ T8933] netlink: 666 bytes leftover after parsing attributes in process `syz.4.710'. [ 211.009130][ T8937] pim6reg: entered allmulticast mode [ 211.019440][ T8941] ieee802154 phy1 wpan1: encryption failed: -22 [ 211.523167][ T8976] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 211.555037][ T8976] netlink: 132 bytes leftover after parsing attributes in process `syz.2.720'. [ 211.610914][ T8980] tipc: Enabled bearer , priority 0 [ 211.649676][ T8980] syzkaller0: entered promiscuous mode [ 211.665076][ T8980] syzkaller0: entered allmulticast mode [ 211.678534][ T8988] netlink: 'syz.3.726': attribute type 8 has an invalid length. [ 211.690374][ T8988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 211.708561][ T8979] tipc: Resetting bearer [ 211.746083][ T8979] tipc: Disabling bearer [ 211.795578][ T8988] bond0: entered promiscuous mode [ 211.848682][ T8988] bond0: left promiscuous mode [ 211.928746][ T9001] tipc: New replicast peer: 255.255.255.255 [ 211.951976][ T9001] tipc: Enabled bearer , priority 10 [ 211.998816][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 212.335481][ T8988] nbd: must specify a size in bytes for the device [ 212.378651][ T8977] delete_channel: no stack [ 212.421725][ T9026] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 212.443312][ T9021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.736'. [ 212.455560][ T9026] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 212.519614][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.2.736'. [ 212.541321][ T9021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.736'. [ 212.585775][ T9038] netlink: 'syz.1.738': attribute type 10 has an invalid length. [ 212.593925][ T9032] netlink: 'syz.0.740': attribute type 1 has an invalid length. [ 212.601787][ T9038] dummy0: left allmulticast mode [ 212.613296][ T9038] dummy0: entered allmulticast mode [ 212.619869][ T9032] netlink: 'syz.0.740': attribute type 4 has an invalid length. [ 212.631621][ T9038] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 212.641290][ T9038] team0: Failed to send options change via netlink (err -105) [ 212.649609][ T9032] netlink: 188 bytes leftover after parsing attributes in process `syz.0.740'. [ 212.659097][ T9038] team0: Port device dummy0 added [ 213.069345][ T6070] tipc: Node number set to 900428244 [ 213.120420][ T9059] geneve2: entered promiscuous mode [ 213.275815][ T9062] wg1 speed is unknown, defaulting to 1000 [ 213.650937][ T9086] netlink: 'syz.3.753': attribute type 1 has an invalid length. [ 213.732332][ T9082] wg1 speed is unknown, defaulting to 1000 [ 213.733045][ T9086] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 213.756528][ T9094] netlink: 'syz.1.754': attribute type 13 has an invalid length. [ 213.906159][ T9094] syzkaller0: entered promiscuous mode [ 213.917869][ T9094] syzkaller0: entered allmulticast mode [ 214.327848][ T9108] wg1 speed is unknown, defaulting to 1000 [ 214.736277][ T9123] wg1 speed is unknown, defaulting to 1000 [ 215.180495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.578304][ T5183] Bluetooth: hci4: command 0x0405 tx timeout [ 215.928814][ T9188] sctp: [Deprecated]: syz.1.778 (pid 9188) Use of int in maxseg socket option. [ 215.928814][ T9188] Use struct sctp_assoc_value instead [ 215.968927][ T9188] __nla_validate_parse: 7 callbacks suppressed [ 215.968947][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.778'. [ 216.023531][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 216.035798][ T9192] netlink: 'syz.2.780': attribute type 30 has an invalid length. [ 216.058854][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.782'. [ 216.090242][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.100430][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.115918][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.127369][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.290278][ T9207] wg1 speed is unknown, defaulting to 1000 [ 216.500634][ T9215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.784'. [ 216.740378][ T9227] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 217.170851][ T9247] netlink: 'syz.4.793': attribute type 10 has an invalid length. [ 217.196567][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'. [ 217.210878][ T9247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.793'. [ 217.249159][ T9247] batadv0: entered promiscuous mode [ 217.281455][ T9247] batadv0: entered allmulticast mode [ 217.305915][ T9247] bridge0: port 3(batadv0) entered blocking state [ 217.361327][ T9247] bridge0: port 3(batadv0) entered disabled state [ 217.430174][ T7774] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 217.439823][ T7774] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 217.666177][ T9285] tipc: Failed to remove unknown binding: 66,1,1/0:380733463/380733465 [ 217.678519][ T9285] tipc: Failed to remove unknown binding: 66,1,1/0:380733463/380733465 [ 217.687013][ T9285] tipc: Failed to remove unknown binding: 66,1,1/0:380733463/380733465 [ 217.892289][ T9241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.204741][ T9303] netlink: 256 bytes leftover after parsing attributes in process `syz.2.808'. [ 218.325857][ T9311] netlink: 104 bytes leftover after parsing attributes in process `syz.3.807'. [ 218.393884][ T9314] wg1 speed is unknown, defaulting to 1000 [ 218.724843][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 218.897636][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 219.186983][ T9361] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20000 [ 219.215165][ T9352] atm:sigd_send: bad message type 36 [ 219.227581][ T9358] wg1 speed is unknown, defaulting to 1000 [ 219.785949][ T9385] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 220.960750][ T9378] tipc: Enabling of bearer rejected, failed to enable media [ 221.016481][ T9412] __nla_validate_parse: 4 callbacks suppressed [ 221.016499][ T9412] netlink: 36 bytes leftover after parsing attributes in process `syz.3.838'. [ 221.035494][ T9409] wg1 speed is unknown, defaulting to 1000 [ 221.126529][ T9429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.840'. [ 221.680729][ T9446] wg1 speed is unknown, defaulting to 1000 [ 222.187511][ T9469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.851'. [ 222.237848][ T9469] netlink: 36 bytes leftover after parsing attributes in process `syz.4.851'. [ 222.369290][ T9472] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 222.472267][ T9479] IPVS: dh: FWM 3 0x00000003 - no destination available [ 222.505030][ T9479] netlink: 156 bytes leftover after parsing attributes in process `syz.4.855'. [ 222.856669][ T9488] netlink: 830 bytes leftover after parsing attributes in process `syz.0.857'. [ 222.857429][ T9486] sctp: [Deprecated]: syz.4.856 (pid 9486) Use of int in maxseg socket option. [ 222.857429][ T9486] Use struct sctp_assoc_value instead [ 223.042740][ T9493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.859'. [ 223.292607][ T9507] netlink: 'syz.1.864': attribute type 39 has an invalid length. [ 223.332127][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'. [ 223.498603][ T9514] netlink: 228 bytes leftover after parsing attributes in process `syz.2.866'. [ 223.633606][ T9527] netlink: 'syz.2.866': attribute type 16 has an invalid length. [ 223.641782][ T9527] netlink: 'syz.2.866': attribute type 17 has an invalid length. [ 223.697803][ T9527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.142606][ T9545] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.873'. [ 224.162304][ T9545] netlink: 'syz.1.873': attribute type 1 has an invalid length. [ 224.172881][ T9545] siw: device registration error -23 [ 224.261343][ T9547] netlink: 'syz.4.874': attribute type 2 has an invalid length. [ 224.306222][ T9547] : entered promiscuous mode [ 224.418479][ T9551] wg1 speed is unknown, defaulting to 1000 [ 224.808174][ T9569] syzkaller1: entered promiscuous mode [ 224.826258][ T9569] syzkaller1: entered allmulticast mode [ 225.724707][ T9603] netlink: 'syz.1.884': attribute type 11 has an invalid length. [ 226.278470][ T9621] wg1 speed is unknown, defaulting to 1000 [ 226.690947][ T9625] wg1 speed is unknown, defaulting to 1000 [ 227.480479][ T9636] __nla_validate_parse: 1 callbacks suppressed [ 227.480501][ T9636] netlink: 52 bytes leftover after parsing attributes in process `syz.0.894'. [ 227.699585][ T9646] netlink: 264 bytes leftover after parsing attributes in process `syz.0.895'. [ 227.748198][ T9645] netlink: 264 bytes leftover after parsing attributes in process `syz.0.895'. [ 227.829426][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.899'. [ 227.851070][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 227.870123][ T9650] netlink: 60 bytes leftover after parsing attributes in process `syz.4.898'. [ 227.978745][ T9657] xt_l2tp: v2 tid > 0xffff: 37482740 [ 228.262293][ T9671] wg1 speed is unknown, defaulting to 1000 [ 228.386859][ T9680] netlink: 'syz.2.906': attribute type 6 has an invalid length. [ 228.565877][ T9683] netlink: 32 bytes leftover after parsing attributes in process `syz.0.907'. [ 228.576556][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.908'. [ 228.944430][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 228.990473][ T9710] : renamed from team_slave_1 [ 229.226884][ T9730] netlink: 'syz.0.918': attribute type 29 has an invalid length. [ 230.189515][ T9770] netlink: 'syz.1.930': attribute type 5 has an invalid length. [ 230.324520][ T9776] openvswitch: netlink: Message has -2 unknown bytes. [ 230.413859][ T9778] netlink: 'syz.2.933': attribute type 17 has an invalid length. [ 230.421927][ T9778] netlink: 148 bytes leftover after parsing attributes in process `syz.2.933'. [ 230.510541][ T9783] netlink: 'syz.1.934': attribute type 49 has an invalid length. [ 230.525470][ T9783] netlink: 'syz.1.934': attribute type 49 has an invalid length. [ 230.546824][ T9783] netlink: 'syz.1.934': attribute type 49 has an invalid length. [ 231.511028][ T9854] xt_HMARK: proto mask must be zero with L3 mode [ 231.574786][ T9857] batman_adv: batadv0: Adding interface: dummy0 [ 231.584959][ T9857] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.623353][ T9857] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 232.328682][ T9896] tipc: Enabling of bearer rejected, media not registered [ 232.571655][ T9910] __nla_validate_parse: 10 callbacks suppressed [ 232.571675][ T9910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 232.601952][ T9911] netlink: 'syz.2.973': attribute type 13 has an invalid length. [ 232.616170][ T9913] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 232.645409][ T9911] netlink: 'syz.2.973': attribute type 17 has an invalid length. [ 232.791641][ T9917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.819157][ T9911] wg1 speed is unknown, defaulting to 1000 [ 233.022530][ T9933] nbd: must specify a size in bytes for the device [ 233.501995][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 233.541234][ T9947] Bluetooth: MGMT ver 1.23 [ 233.849938][ T9935] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 234.154559][ T9974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.991'. [ 234.442434][ T9984] netlink: 'syz.0.995': attribute type 4 has an invalid length. [ 234.674687][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.999'. [ 234.728317][ T9996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.999'. [ 234.998781][T10008] tipc: Cannot configure node identity twice [ 235.161736][T10019] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1006'. [ 235.181367][ T5183] Bluetooth: hci4: command 0x0405 tx timeout [ 235.245797][T10019] wg1 speed is unknown, defaulting to 1000 [ 235.328202][T10017] gtp0: entered promiscuous mode [ 235.337343][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1005'. [ 235.581341][T10034] batadv_slave_1: entered promiscuous mode [ 235.589592][T10032] batadv_slave_1: left promiscuous mode [ 236.409292][T10055] tipc: Enabled bearer , priority 0 [ 236.428487][T10055] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 236.448855][T10055] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 236.457025][T10055] tipc: Resetting bearer [ 236.541201][T10055] tipc: Resetting bearer [ 236.571687][T10064] netlink: 'syz.0.1020': attribute type 1 has an invalid length. [ 236.589870][T10064] netlink: 'syz.0.1020': attribute type 1 has an invalid length. [ 236.597628][T10064] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1020'. [ 236.891852][T10076] dvmrp12: entered allmulticast mode [ 236.935926][T10075] dvmrp12: left allmulticast mode [ 237.009533][T10079] : renamed from bond_slave_0 (while UP) [ 237.179593][ T13] tipc: Resetting bearer [ 237.277303][T10086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 237.364797][T10086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.453826][T10086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.468029][ T6919] tipc: Node number set to 2948633286 [ 237.539794][T10086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.635934][T10086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.771670][ T197] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.808001][ T197] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.837455][ T197] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.888854][ T197] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.005808][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1035'. [ 238.372846][T10127] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1039'. [ 238.478867][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1040'. [ 238.558568][T10139] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'. [ 238.725941][T10147] xt_socket: unknown flags 0xd0 [ 238.763133][T10150] wg1 speed is unknown, defaulting to 1000 [ 238.799028][T10154] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1048'. [ 238.866609][T10152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1046'. [ 239.102652][T10161] wg1 speed is unknown, defaulting to 1000 [ 239.113842][T10158] wg1 speed is unknown, defaulting to 1000 [ 239.434044][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1053'. [ 239.742605][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 239.797578][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'. [ 239.849319][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.878185][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.886441][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.938463][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.970484][T10220] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1062'. [ 240.064512][T10224] netlink: 'syz.2.1063': attribute type 12 has an invalid length. [ 240.152729][T10229] tipc: Started in network mode [ 240.157641][T10229] tipc: Node identity 96cc28229818, cluster identity 4711 [ 240.165554][T10229] tipc: Enabled bearer , priority 0 [ 240.196609][T10225] netlink: 'syz.2.1063': attribute type 12 has an invalid length. [ 240.314901][T10228] tipc: Disabling bearer [ 240.345068][T10242] wg1 speed is unknown, defaulting to 1000 [ 240.636134][T10253] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 240.647288][ T3489] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.656679][ T3489] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.666564][ T3489] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.675185][ T3489] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.692764][T10257] wg1 speed is unknown, defaulting to 1000 [ 241.015656][T10278] tipc: Enabled bearer , priority 0 [ 241.040559][T10278] syzkaller0: entered promiscuous mode [ 241.046217][T10278] syzkaller0: entered allmulticast mode [ 241.070062][T10278] tipc: Resetting bearer [ 241.108247][T10276] tipc: Resetting bearer [ 241.135670][T10276] tipc: Disabling bearer [ 241.142157][T10284] netlink: 'syz.4.1079': attribute type 1 has an invalid length. [ 241.508266][T10303] netlink: 'syz.4.1086': attribute type 9 has an invalid length. [ 241.852461][T10327] netlink: 'syz.1.1094': attribute type 21 has an invalid length. [ 242.248028][T10352] netlink: 'syz.1.1100': attribute type 13 has an invalid length. [ 242.269379][T10352] tipc: Resetting bearer [ 242.306306][T10354] syzkaller0: entered promiscuous mode [ 242.313352][T10354] syzkaller0: entered allmulticast mode [ 242.323042][T10354] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 242.637636][T10370] wg1 speed is unknown, defaulting to 1000 [ 243.316767][T10387] __nla_validate_parse: 13 callbacks suppressed [ 243.316788][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1113'. [ 243.525189][T10396] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 243.549711][T10396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 243.611678][T10391] wg1 speed is unknown, defaulting to 1000 [ 243.664143][T10399] wg1 speed is unknown, defaulting to 1000 [ 243.770903][T10409] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1121'. [ 243.889524][T10413] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1122'. [ 243.899033][T10413] IPVS: Unknown mcast interface: vetN1_macvtap [ 243.908422][T10413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1122'. [ 243.923633][T10413] netlink: 'syz.4.1122': attribute type 10 has an invalid length. [ 244.083868][T10419] sctp: [Deprecated]: syz.4.1123 (pid 10419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.083868][T10419] Use struct sctp_sack_info instead [ 244.173963][T10421] wg1 speed is unknown, defaulting to 1000 [ 244.358415][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 244.400950][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 244.485684][T10442] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 244.493754][T10442] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1129'. [ 244.503054][T10442] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 244.613310][T10451] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 244.719120][T10457] ipvlan2: left promiscuous mode [ 244.867100][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 244.881485][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1134'. [ 244.912958][T10467] nbd: socks must be embedded in a SOCK_ITEM attr [ 244.926204][T10467] block nbd0: shutting down sockets [ 245.043991][T10473] hsr_slave_0: left promiscuous mode [ 245.053787][T10473] hsr_slave_1: left promiscuous mode [ 245.104602][ T49] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.118912][ T49] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.132309][T10483] netlink: 'syz.0.1136': attribute type 15 has an invalid length. [ 245.164293][ T49] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.183427][ T49] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.203521][ T49] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.224035][ T49] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.234262][ T49] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.243200][ T49] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.362562][T10501] netlink: 'syz.1.1139': attribute type 10 has an invalid length. [ 246.767592][T10561] netlink: 'syz.2.1153': attribute type 16 has an invalid length. [ 246.782409][T10561] netlink: 'syz.2.1153': attribute type 17 has an invalid length. [ 246.857359][T10561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.096483][T10583] wg1 speed is unknown, defaulting to 1000 [ 247.182616][T10586] wg1 speed is unknown, defaulting to 1000 [ 247.222164][T10595] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 248.779969][T10671] wg1 speed is unknown, defaulting to 1000 [ 248.811219][T10672] macsec1: entered promiscuous mode [ 248.816473][T10672] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 248.848872][T10672] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 248.857278][T10682] __nla_validate_parse: 12 callbacks suppressed [ 248.857299][T10682] netlink: 23432 bytes leftover after parsing attributes in process `syz.4.1180'. [ 249.006042][T10674] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 249.033909][T10674] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 249.099000][T10687] lo speed is unknown, defaulting to 1000 [ 249.125814][T10685] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 249.156288][T10687] lo speed is unknown, defaulting to 1000 [ 249.208806][T10687] lo speed is unknown, defaulting to 1000 [ 249.225540][T10691] netlink: 'syz.3.1181': attribute type 4 has an invalid length. [ 249.305669][T10687] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 249.375859][T10687] lo speed is unknown, defaulting to 1000 [ 249.389492][T10687] lo speed is unknown, defaulting to 1000 [ 249.397455][T10687] lo speed is unknown, defaulting to 1000 [ 249.405703][T10687] lo speed is unknown, defaulting to 1000 [ 249.430211][T10687] lo speed is unknown, defaulting to 1000 [ 249.462235][T10687] lo speed is unknown, defaulting to 1000 [ 249.716259][T10723] wg1 speed is unknown, defaulting to 1000 [ 249.735487][T10725] netlink: 'syz.3.1188': attribute type 10 has an invalid length. [ 249.751370][T10723] lo speed is unknown, defaulting to 1000 [ 249.761233][T10725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.793538][T10725] netlink: 'syz.3.1188': attribute type 10 has an invalid length. [ 249.810316][T10725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1188'. [ 249.854495][T10725] batadv0: entered promiscuous mode [ 249.868251][T10725] batadv0: entered allmulticast mode [ 249.874004][T10725] bridge0: port 1(batadv0) entered blocking state [ 249.881448][T10725] bridge0: port 1(batadv0) entered disabled state [ 249.902115][T10728] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1189'. [ 249.931072][T10735] netlink: 'syz.0.1189': attribute type 11 has an invalid length. [ 249.940325][T10733] tipc: Enabled bearer , priority 0 [ 249.955185][T10733] syzkaller0: entered promiscuous mode [ 249.964145][T10733] syzkaller0: entered allmulticast mode [ 250.112099][T10732] tipc: Resetting bearer [ 250.186081][T10732] tipc: Disabling bearer [ 250.298367][ T69] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 250.305708][T10756] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.307645][ T69] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 250.376603][T10756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.409405][T10757] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.459840][T10759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.552360][ T7777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.567880][ T7777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.720597][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 250.967239][T10800] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1210'. [ 250.978927][T10795] wg1 speed is unknown, defaulting to 1000 [ 250.990297][T10795] lo speed is unknown, defaulting to 1000 [ 251.193482][T10813] wg1 speed is unknown, defaulting to 1000 [ 251.206969][T10813] lo speed is unknown, defaulting to 1000 [ 251.472400][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 251.556417][T10844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'. [ 251.647477][T10848] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 251.660569][T10850] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1221'. [ 251.674536][T10850] netlink: 'syz.4.1221': attribute type 13 has an invalid length. [ 251.684166][T10850] netlink: 'syz.4.1221': attribute type 17 has an invalid length. [ 252.947411][T10850] gretap0: refused to change device tx_queue_len [ 252.954090][T10850] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 252.990179][T10853] wg1 speed is unknown, defaulting to 1000 [ 253.054289][T10854] wg1 speed is unknown, defaulting to 1000 [ 253.067456][T10853] lo speed is unknown, defaulting to 1000 [ 253.089863][T10854] lo speed is unknown, defaulting to 1000 [ 254.128749][T10907] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 254.187342][T10907] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1237'. [ 254.220061][T10907] netlink: 'syz.3.1237': attribute type 1 has an invalid length. [ 254.282452][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 254.305839][T10916] netlink: 'syz.2.1240': attribute type 41 has an invalid length. [ 254.325677][T10919] macvlan0: left promiscuous mode [ 254.330877][T10919] macvlan0: left allmulticast mode [ 254.337193][T10919] netlink: 'syz.1.1241': attribute type 1 has an invalid length. [ 254.345372][T10919] netlink: 'syz.1.1241': attribute type 2 has an invalid length. [ 254.516577][T10915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 254.539026][T10933] tipc: New replicast peer: 255.255.255.255 [ 254.546009][T10933] tipc: Enabled bearer , priority 10 [ 254.610749][T10933] syzkaller1: entered promiscuous mode [ 254.616542][T10933] syzkaller1: entered allmulticast mode [ 254.624556][T10931] wg1 speed is unknown, defaulting to 1000 [ 254.626103][T10933] tipc: Enabling of bearer rejected, already enabled [ 254.645786][T10931] lo speed is unknown, defaulting to 1000 [ 254.793903][ T7777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.809030][ T7777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.917622][T10950] netlink: 'syz.4.1249': attribute type 4 has an invalid length. [ 254.936260][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 254.940624][T10950] netlink: 'syz.4.1249': attribute type 4 has an invalid length. [ 254.967099][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1249'. [ 255.111566][T10961] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1252'. [ 255.120954][T10961] 0X: renamed from caif0 [ 255.131578][T10961] 0X: entered allmulticast mode [ 255.136778][T10961] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 255.155347][T10961] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1252'. [ 255.167536][T10961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1252'. [ 255.255806][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1255'. [ 255.265643][T10972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1255'. [ 255.424181][T10980] netlink: 'syz.4.1259': attribute type 30 has an invalid length. [ 255.470278][T10978] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.478434][T10984] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 255.493163][T10985] macvlan0: entered promiscuous mode [ 255.504994][T10985] macvlan0: entered allmulticast mode [ 255.657840][ T6908] tipc: Node number set to 108227921 [ 256.780773][T11059] netlink: 'syz.0.1280': attribute type 12 has an invalid length. [ 256.892196][T11059] tipc: Enabled bearer , priority 0 [ 256.900241][T11059] syzkaller0: entered promiscuous mode [ 256.905743][T11059] syzkaller0: entered allmulticast mode [ 257.128032][T11057] tipc: Resetting bearer [ 257.188240][T11057] tipc: Disabling bearer [ 257.497838][ T5183] Bluetooth: hci0: command tx timeout [ 257.719968][T11092] wg1 speed is unknown, defaulting to 1000 [ 257.742718][T11092] lo speed is unknown, defaulting to 1000 [ 258.013494][T11113] netlink: 'syz.3.1296': attribute type 1 has an invalid length. [ 258.245430][T11117] wg1 speed is unknown, defaulting to 1000 [ 258.257336][T11122] syz_tun: entered allmulticast mode [ 258.303407][T11117] lo speed is unknown, defaulting to 1000 [ 258.348071][T11122] syz_tun: left allmulticast mode [ 258.444001][T11120] wg1 speed is unknown, defaulting to 1000 [ 258.454347][T11131] bridge0: port 1(batadv0) entered disabled state [ 258.474520][T11131] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 258.523471][T11120] lo speed is unknown, defaulting to 1000 [ 258.863858][T11141] netlink: 'syz.3.1302': attribute type 1 has an invalid length. [ 259.328881][T11157] __nla_validate_parse: 9 callbacks suppressed [ 259.328900][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 259.489187][T11157] syzkaller1: entered promiscuous mode [ 259.494717][T11157] syzkaller1: entered allmulticast mode [ 260.008433][T11186] netlink: 'syz.2.1312': attribute type 1 has an invalid length. [ 260.242645][T11186] bond3: entered promiscuous mode [ 260.298464][T11186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.463159][T11194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.472252][T11194] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 260.484061][T11194] bond3: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 260.552109][T11194] bond3: (slave wireguard1): making interface the new active one [ 260.603154][T11194] wireguard1: entered promiscuous mode [ 260.647640][T11194] bond3: (slave wireguard1): Enslaving as an active interface with an up link [ 261.061628][T11228] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1320'. [ 261.111265][T11228] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1320'. [ 261.478440][T11258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1328'. [ 261.501128][T11258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1328'. [ 261.526556][T11260] netlink: 'syz.1.1329': attribute type 17 has an invalid length. [ 261.534706][T11260] lo: left promiscuous mode [ 261.540843][T11260] lo: left allmulticast mode [ 261.577080][T11260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.658903][T11262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1330'. [ 261.733048][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1331'. [ 261.759056][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1331'. [ 261.784413][T11268] tipc: Enabled bearer , priority 0 [ 261.817201][T11268] syzkaller0: entered promiscuous mode [ 261.827140][T11268] syzkaller0: entered allmulticast mode [ 261.862012][T11265] wg1 speed is unknown, defaulting to 1000 [ 261.904094][T11265] lo speed is unknown, defaulting to 1000 [ 261.904446][T11268] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 261.961750][T11268] tipc: Resetting bearer [ 262.182842][T11268] wg1 speed is unknown, defaulting to 1000 [ 262.191222][T11268] lo speed is unknown, defaulting to 1000 [ 262.350379][T11265] netlink: 'syz.2.1331': attribute type 6 has an invalid length. [ 262.416756][T11286] wg1 speed is unknown, defaulting to 1000 [ 262.487188][T11286] lo speed is unknown, defaulting to 1000 [ 262.657429][T11268] tipc: Resetting bearer [ 262.727526][T11268] tipc: Disabling bearer [ 262.953956][T11309] netlink: 'syz.2.1342': attribute type 10 has an invalid length. [ 262.999010][T11309] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1342'. [ 263.014548][T11313] netlink: 'syz.3.1343': attribute type 58 has an invalid length. [ 263.023082][T11313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1343'. [ 263.203872][T11322] wg1 speed is unknown, defaulting to 1000 [ 263.224092][T11322] lo speed is unknown, defaulting to 1000 [ 263.254924][T11325] netlink: 'syz.2.1347': attribute type 1 has an invalid length. [ 263.285943][ T6908] IPVS: starting estimator thread 0... [ 263.432218][T11333] netlink: 'syz.2.1349': attribute type 21 has an invalid length. [ 263.458048][T11331] IPVS: using max 26 ests per chain, 62400 per kthread [ 263.660216][T11337] wg1 speed is unknown, defaulting to 1000 [ 263.854077][T11337] lo speed is unknown, defaulting to 1000 [ 264.035118][T11351] tipc: New replicast peer: 255.255.255.255 [ 264.043514][T11351] tipc: Enabled bearer , priority 10 [ 264.452176][T11362] __nla_validate_parse: 3 callbacks suppressed [ 264.452195][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'. [ 264.775517][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1356'. [ 264.792959][T11363] vlan2: entered promiscuous mode [ 264.805669][T11363] bond0: entered promiscuous mode [ 265.186226][ T6908] tipc: Node number set to 248784930 [ 265.704322][ T3489] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.712892][ T3489] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.745352][ T3489] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.774645][ T3489] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.956953][T11400] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1366'. [ 265.987312][T11400] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1366'. [ 265.996542][T11400] netlink: 'syz.3.1366': attribute type 6 has an invalid length. [ 266.004760][T11400] netlink: 'syz.3.1366': attribute type 5 has an invalid length. [ 266.042488][T11400] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1366'. [ 266.147479][T11413] !: renamed from dummy0 [ 266.250612][T11416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1368'. [ 266.306267][T11416] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1368'. [ 266.417392][T11417] wg1 speed is unknown, defaulting to 1000 [ 266.450045][T11417] lo speed is unknown, defaulting to 1000 [ 266.678388][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1371'. [ 266.715242][T11430] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1372'. [ 266.743305][T11427] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1371'. [ 267.082146][T11452] netlink: 'syz.4.1377': attribute type 1 has an invalid length. [ 267.321792][T11464] netlink: 'syz.2.1379': attribute type 7 has an invalid length. [ 267.754717][T11489] tipc: Enabling of bearer rejected, failed to enable media [ 268.015961][T11496] netlink: 'syz.4.1387': attribute type 1 has an invalid length. [ 268.016991][T11494] wg1 speed is unknown, defaulting to 1000 [ 268.048110][T11494] lo speed is unknown, defaulting to 1000 [ 269.257169][T11567] netlink: 'syz.1.1407': attribute type 13 has an invalid length. [ 269.261942][T11568] veth0_to_bridge: entered promiscuous mode [ 269.272406][T11567] netlink: 'syz.1.1407': attribute type 17 has an invalid length. [ 269.317022][T11567] tunl0: left promiscuous mode [ 269.392609][T11567] tunl0: left allmulticast mode [ 269.400976][T11567] gre0: left promiscuous mode [ 269.405817][T11567] gre0: left allmulticast mode [ 269.411889][T11567] gretap0: left promiscuous mode [ 269.421018][T11567] gretap0: left allmulticast mode [ 269.435128][T11567] erspan0: left promiscuous mode [ 269.441553][T11567] erspan0: left allmulticast mode [ 269.454681][T11567] ip_vti0: left promiscuous mode [ 269.461319][T11567] ip_vti0: left allmulticast mode [ 269.467375][T11567] ip6_vti0: left promiscuous mode [ 269.473566][T11567] ip6_vti0: left allmulticast mode [ 269.480715][T11567] sit0: left promiscuous mode [ 269.485646][T11567] sit0: left allmulticast mode [ 269.492079][T11567] ip6tnl0: left promiscuous mode [ 269.498357][T11567] ip6tnl0: left allmulticast mode [ 269.507566][T11567] ip6gre0: left promiscuous mode [ 269.534160][T11567] ip6gre0: left allmulticast mode [ 269.549151][T11567] ip6gretap0: left promiscuous mode [ 269.560218][T11567] ip6gretap0: left allmulticast mode [ 269.585042][T11567] bridge0: left promiscuous mode [ 269.590663][T11567] bridge0: left allmulticast mode [ 269.597261][T11567] vcan0: left promiscuous mode [ 269.604318][T11567] vcan0: left allmulticast mode [ 269.615714][T11567] team0: left promiscuous mode [ 269.636619][T11567] team0: left allmulticast mode [ 269.642014][T11567] dummy0: left allmulticast mode [ 269.650619][T11567] nlmon0: left promiscuous mode [ 269.656494][T11567] nlmon0: left allmulticast mode [ 269.668514][T11567] caif0: left promiscuous mode [ 269.673620][T11567] caif0: left allmulticast mode [ 269.679826][T11567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.706352][T11571] __nla_validate_parse: 7 callbacks suppressed [ 269.706370][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 269.792647][T11576] wg1 speed is unknown, defaulting to 1000 [ 269.803930][T11576] lo speed is unknown, defaulting to 1000 [ 269.861359][T11580] bridge_slave_0: left allmulticast mode [ 269.870884][T11580] bridge_slave_0: left promiscuous mode [ 269.879366][T11580] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.899884][T11580] bridge_slave_1: left allmulticast mode [ 269.905639][T11580] bridge_slave_1: left promiscuous mode [ 269.911966][T11580] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.932580][T11580] bond0: (slave 30): Releasing backup interface [ 269.963242][T11580] team0: Port device team_slave_0 removed [ 270.001311][T11580] team0: Port device team_slave_1 removed [ 270.018535][T11580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.029569][T11580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.039690][T11580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.047175][T11580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.059510][T11580] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 270.112138][T11555] veth0_to_bridge: left promiscuous mode [ 270.381392][T11608] sock: sock_timestamping_bind_phc: sock not bind to device [ 270.822384][T11627] wg1 speed is unknown, defaulting to 1000 [ 270.831132][T11627] lo speed is unknown, defaulting to 1000 [ 270.832891][T11635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1423'. [ 270.966844][T11638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1424'. [ 271.432669][T11670] openvswitch: netlink: Flow key attribute not present in set flow. [ 271.455192][T11670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1431'. [ 271.479918][T11670] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1431'. [ 271.594768][T11676] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1433'. [ 271.732062][T11683] netlink: 'syz.4.1436': attribute type 32 has an invalid length. [ 271.755484][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 271.836408][T11683] bond5: option coupled_control: invalid value (83) [ 271.854325][T11683] bond5 (unregistering): Released all slaves [ 272.191449][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.198306][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.211387][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.229163][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.245959][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.267219][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.282823][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.290079][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.296734][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.308101][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.314754][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.326890][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.335835][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.343807][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.352901][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.360109][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.367034][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.375486][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.391535][T11695] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 272.402984][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.411262][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.427941][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.435429][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.453678][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.462678][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.469442][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.476350][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.483475][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.491677][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.498573][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.508715][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.515735][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.522615][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.529732][T11689] IPVS: set_ctl: invalid protocol: 8192 0.0.1.0:0 [ 272.637141][T11708] batadv_slave_1: entered promiscuous mode [ 272.654498][T11708] batman_adv: batadv0: Adding interface: macsec1 [ 272.661367][T11708] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.691131][T11708] batman_adv: batadv0: Interface activated: macsec1 [ 272.723648][T11718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1446'. [ 272.843997][T11708] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.903426][T11718] batadv_slave_0: left allmulticast mode [ 272.927906][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1449'. [ 272.941765][T11706] wg1 speed is unknown, defaulting to 1000 [ 273.085035][T11708] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.117963][T11739] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1451'. [ 273.158530][T11706] lo speed is unknown, defaulting to 1000 [ 273.159628][T11719] wg1 speed is unknown, defaulting to 1000 [ 273.229227][T11739] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.281822][T11739] netlink: 'syz.4.1451': attribute type 1 has an invalid length. [ 273.305819][T11708] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.360781][T11719] lo speed is unknown, defaulting to 1000 [ 273.583691][T11708] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.737966][T11766] netlink: 'syz.3.1456': attribute type 1 has an invalid length. [ 274.073087][ T69] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.082622][ T69] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.189468][ T69] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.254368][ T1165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.352431][T11790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.547018][ T10] IPVS: starting estimator thread 0... [ 274.637928][T11810] IPVS: using max 24 ests per chain, 57600 per kthread [ 274.956905][T11827] netlink: 'syz.0.1471': attribute type 2 has an invalid length. [ 274.977592][T11827] __nla_validate_parse: 4 callbacks suppressed [ 274.977617][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 274.994579][T11830] netlink: 'syz.4.1468': attribute type 1 has an invalid length. [ 275.002702][T11830] netlink: 'syz.4.1468': attribute type 6 has an invalid length. [ 275.044522][T11830] netlink: 'syz.4.1468': attribute type 3 has an invalid length. [ 275.208738][T11838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1474'. [ 275.237188][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 275.320944][T11838] bond4: entered promiscuous mode [ 275.326737][T11838] bond4: entered allmulticast mode [ 275.358908][T11838] 8021q: adding VLAN 0 to HW filter on device bond4 [ 275.376751][T11853] netlink: 'syz.0.1477': attribute type 39 has an invalid length. [ 275.391686][T11838] wg1 speed is unknown, defaulting to 1000 [ 275.399838][T11838] lo speed is unknown, defaulting to 1000 [ 275.438767][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1474'. [ 275.452939][T11849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1474'. [ 275.649650][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1481'. [ 275.671349][T11868] netlink: 4264 bytes leftover after parsing attributes in process `syz.1.1478'. [ 275.681568][T11868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.705343][T11867] bond2: option mode: unable to set because the bond device is up [ 275.727590][T11867] macvlan1: entered promiscuous mode [ 275.733608][T11867] macvlan1: entered allmulticast mode [ 275.741857][T11867] veth0: entered promiscuous mode [ 275.747036][T11867] veth0: entered allmulticast mode [ 275.758784][T11867] bond2: (slave macvlan1): making interface the new active one [ 275.774611][T11867] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 275.853396][T11875] wg1 speed is unknown, defaulting to 1000 [ 275.861890][T11875] lo speed is unknown, defaulting to 1000 [ 276.015600][T11885] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 276.034878][T11885] netlink: 'syz.2.1484': attribute type 1 has an invalid length. [ 276.185756][T11883] wg1 speed is unknown, defaulting to 1000 [ 276.196088][T11883] lo speed is unknown, defaulting to 1000 [ 276.214703][T11891] siw: device registration error -23 [ 276.281397][T11893] wg1 speed is unknown, defaulting to 1000 [ 276.333829][T11893] lo speed is unknown, defaulting to 1000 [ 276.692342][T11924] netlink: 'syz.4.1492': attribute type 1 has an invalid length. [ 276.697325][T11921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1494'. [ 276.756245][T11924] bond6: (slave bridge5): making interface the new active one [ 276.766884][T11924] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 276.800588][T11921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 276.843293][T11937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1491'. [ 276.964658][T11938] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 277.628294][T11977] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 277.729129][T11983] geneve3: entered promiscuous mode [ 278.437505][T12009] wg1 speed is unknown, defaulting to 1000 [ 278.487374][T12012] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 278.504384][T12012] bond2 (unregistering): Released all slaves [ 278.536450][T12009] lo speed is unknown, defaulting to 1000 [ 279.214704][T12057] netlink: 'syz.3.1525': attribute type 1 has an invalid length. [ 279.222566][T12057] netlink: 'syz.3.1525': attribute type 1 has an invalid length. [ 279.279342][T12061] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 279.292308][T12061] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 279.321980][T12061] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 279.358176][T12065] bridge0: port 1(erspan0) entered blocking state [ 279.384831][T12065] bridge0: port 1(erspan0) entered disabled state [ 279.418026][T12065] erspan0: entered allmulticast mode [ 279.446907][T12065] erspan0: entered promiscuous mode [ 279.508118][T12071] erspan0: left allmulticast mode [ 279.517362][T12071] erspan0: left promiscuous mode [ 279.571583][T12071] bridge0: port 1(erspan0) entered disabled state [ 279.721750][T12084] FAULT_INJECTION: forcing a failure. [ 279.721750][T12084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.740940][T12084] CPU: 0 UID: 0 PID: 12084 Comm: syz.2.1533 Not tainted syzkaller #0 PREEMPT(full) [ 279.740968][T12084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 279.740993][T12084] Call Trace: [ 279.741002][T12084] [ 279.741011][T12084] dump_stack_lvl+0x189/0x250 [ 279.741039][T12084] ? __pfx____ratelimit+0x10/0x10 [ 279.741063][T12084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.741085][T12084] ? __pfx__printk+0x10/0x10 [ 279.741130][T12084] should_fail_ex+0x414/0x560 [ 279.741168][T12084] _copy_to_user+0x31/0xb0 [ 279.741196][T12084] simple_read_from_buffer+0xe1/0x170 [ 279.741228][T12084] proc_fail_nth_read+0x1b3/0x220 [ 279.741252][T12084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.741277][T12084] ? rw_verify_area+0x2a6/0x4d0 [ 279.741299][T12084] ? __lock_acquire+0xab9/0xd20 [ 279.741324][T12084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 279.741346][T12084] vfs_read+0x1fd/0xa30 [ 279.741369][T12084] ? fdget_pos+0x247/0x320 [ 279.741401][T12084] ? __pfx___mutex_lock+0x10/0x10 [ 279.741425][T12084] ? __pfx_vfs_read+0x10/0x10 [ 279.741450][T12084] ? __fget_files+0x2a/0x420 [ 279.741482][T12084] ? __fget_files+0x3a0/0x420 [ 279.741508][T12084] ? __fget_files+0x2a/0x420 [ 279.741545][T12084] ksys_read+0x145/0x250 [ 279.741572][T12084] ? __pfx_ksys_read+0x10/0x10 [ 279.741593][T12084] ? fput+0xa0/0xd0 [ 279.741618][T12084] ? do_syscall_64+0xbe/0x3b0 [ 279.741645][T12084] do_syscall_64+0xfa/0x3b0 [ 279.741666][T12084] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.741686][T12084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.741706][T12084] ? clear_bhb_loop+0x60/0xb0 [ 279.741731][T12084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.741749][T12084] RIP: 0033:0x7fbbbdf8d8dc [ 279.741767][T12084] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 279.741785][T12084] RSP: 002b:00007fbbbee26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 279.741805][T12084] RAX: ffffffffffffffda RBX: 00007fbbbe1e5fa0 RCX: 00007fbbbdf8d8dc [ 279.741820][T12084] RDX: 000000000000000f RSI: 00007fbbbee260a0 RDI: 0000000000000006 [ 279.741833][T12084] RBP: 00007fbbbee26090 R08: 0000000000000000 R09: 0000000000000000 [ 279.741845][T12084] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 279.741858][T12084] R13: 00007fbbbe1e6038 R14: 00007fbbbe1e5fa0 R15: 00007ffdb4862fd8 [ 279.741892][T12084] [ 280.010701][T12097] __nla_validate_parse: 5 callbacks suppressed [ 280.010719][T12097] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1537'. [ 280.167312][T12104] sctp: [Deprecated]: syz.0.1539 (pid 12104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 280.167312][T12104] Use struct sctp_sack_info instead [ 280.191002][T12107] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1538'. [ 280.203313][T12111] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1542'. [ 280.208535][T12110] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1538'. [ 280.227401][T12113] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1540'. [ 280.330577][T12114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1539'. [ 280.517240][T12126] wg1 speed is unknown, defaulting to 1000 [ 280.538939][T12130] netlink: 'syz.2.1548': attribute type 1 has an invalid length. [ 280.547535][T12130] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1548'. [ 280.553556][T12133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1547'. [ 280.556804][T12130] netlink: 'syz.2.1548': attribute type 1 has an invalid length. [ 280.576665][T12126] lo speed is unknown, defaulting to 1000 [ 280.587134][T12133] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1547'. [ 280.713335][T12142] vlan0: entered allmulticast mode [ 280.735403][T12142] bridge_slave_0: entered allmulticast mode [ 280.773832][T12136] wg1 speed is unknown, defaulting to 1000 [ 280.789446][T12144] tipc: Enabling of bearer rejected, failed to enable media [ 280.868241][T12136] lo speed is unknown, defaulting to 1000 [ 280.899057][T12147] unsupported nla_type 58120 [ 281.173276][T12162] syz.0.1554: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 281.243393][T12162] CPU: 1 UID: 0 PID: 12162 Comm: syz.0.1554 Not tainted syzkaller #0 PREEMPT(full) [ 281.243423][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 281.243435][T12162] Call Trace: [ 281.243443][T12162] [ 281.243453][T12162] dump_stack_lvl+0x189/0x250 [ 281.243485][T12162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.243510][T12162] ? __pfx__printk+0x10/0x10 [ 281.243538][T12162] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 281.243561][T12162] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 281.243587][T12162] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 281.243613][T12162] warn_alloc+0x214/0x310 [ 281.243645][T12162] ? stack_depot_save_flags+0x40/0x860 [ 281.243678][T12162] ? __pfx_warn_alloc+0x10/0x10 [ 281.243710][T12162] ? kasan_save_track+0x4f/0x80 [ 281.243743][T12162] ? xskq_create+0x56/0x170 [ 281.243762][T12162] ? xsk_init_queue+0xb0/0x110 [ 281.243779][T12162] ? xsk_setsockopt+0x4dc/0x8d0 [ 281.243808][T12162] ? do_sock_setsockopt+0x17c/0x1b0 [ 281.243832][T12162] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 281.243856][T12162] ? do_syscall_64+0xfa/0x3b0 [ 281.243877][T12162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.243908][T12162] __vmalloc_node_range_noprof+0x125/0x12f0 [ 281.243972][T12162] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 281.244008][T12162] ? __kasan_kmalloc+0x93/0xb0 [ 281.244038][T12162] vmalloc_user_noprof+0xad/0xf0 [ 281.244067][T12162] ? xskq_create+0xbf/0x170 [ 281.244089][T12162] xskq_create+0xbf/0x170 [ 281.244113][T12162] xsk_init_queue+0xb0/0x110 [ 281.244137][T12162] xsk_setsockopt+0x4dc/0x8d0 [ 281.244171][T12162] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.244203][T12162] ? __pfx_aa_sk_perm+0x10/0x10 [ 281.244237][T12162] ? aa_sock_opt_perm+0xff/0x1b0 [ 281.244261][T12162] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 281.244281][T12162] ? __pfx_xsk_setsockopt+0x10/0x10 [ 281.244314][T12162] do_sock_setsockopt+0x17c/0x1b0 [ 281.244345][T12162] __x64_sys_setsockopt+0x13f/0x1b0 [ 281.244377][T12162] do_syscall_64+0xfa/0x3b0 [ 281.244399][T12162] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.244421][T12162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.244442][T12162] ? clear_bhb_loop+0x60/0xb0 [ 281.244468][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.244487][T12162] RIP: 0033:0x7f6f1dd8eec9 [ 281.244506][T12162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.244524][T12162] RSP: 002b:00007f6f1ecef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 281.244547][T12162] RAX: ffffffffffffffda RBX: 00007f6f1dfe5fa0 RCX: 00007f6f1dd8eec9 [ 281.244563][T12162] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 281.244575][T12162] RBP: 00007f6f1de11f91 R08: 0000000000000004 R09: 0000000000000000 [ 281.244588][T12162] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.244601][T12162] R13: 00007f6f1dfe6038 R14: 00007f6f1dfe5fa0 R15: 00007ffdc08a7958 [ 281.244637][T12162] [ 281.244658][T12162] Mem-Info: [ 281.546179][T12162] active_anon:15897 inactive_anon:0 isolated_anon:0 [ 281.546179][T12162] active_file:3336 inactive_file:39955 isolated_file:0 [ 281.546179][T12162] unevictable:768 dirty:332 writeback:0 [ 281.546179][T12162] slab_reclaimable:12419 slab_unreclaimable:119236 [ 281.546179][T12162] mapped:31889 shmem:5377 pagetables:1270 [ 281.546179][T12162] sec_pagetables:0 bounce:0 [ 281.546179][T12162] kernel_misc_reclaimable:0 [ 281.546179][T12162] free:1298650 free_pcp:12258 free_cma:0 [ 281.592393][T12162] Node 0 active_anon:57488kB inactive_anon:0kB active_file:13344kB inactive_file:159616kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127556kB dirty:1324kB writeback:0kB shmem:13872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13464kB pagetables:4932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 281.625339][T12162] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 281.656997][T12162] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.694462][T12162] lowmem_reserve[]: 0 2499 2501 2501 2501 [ 281.700670][T12162] Node 0 DMA32 free:1291312kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55240kB inactive_anon:0kB active_file:13344kB inactive_file:157808kB unevictable:1536kB writepending:1324kB present:3129332kB managed:2559852kB mlocked:0kB bounce:0kB free_pcp:38856kB local_pcp:21060kB free_cma:0kB [ 281.734546][T12162] lowmem_reserve[]: 0 0 1 1 1 [ 281.740773][T12162] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 281.798117][T12162] lowmem_reserve[]: 0 0 0 0 0 [ 281.803887][T12162] Node 1 Normal free:3887900kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18944kB local_pcp:12192kB free_cma:0kB [ 281.855370][T12162] lowmem_reserve[]: 0 0 0 0 0 [ 281.867489][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 281.869672][T12162] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 281.891414][T12162] Node 0 DMA32: 823*4kB (UM) 1117*8kB (UM) 232*16kB (UM) 998*32kB (UM) 436*64kB (UM) 140*128kB (UME) 68*256kB (UME) 45*512kB (UME) 32*1024kB (UM) 6*2048kB (UM) 273*4096kB (UM) = 1297412kB [ 281.912725][T12162] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 281.925914][T12162] Node 1 Normal: 223*4kB (UME) 60*8kB (UME) 54*16kB (UME) 141*32kB (UME) 35*64kB (UME) 8*128kB (UME) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3887900kB [ 281.961702][T12162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.976152][T12162] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 281.987273][T12162] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 281.998442][T12162] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 282.009110][T12162] 44664 total pagecache pages [ 282.013869][T12162] 0 pages in swap cache [ 282.018807][T12162] Free swap = 124996kB [ 282.023026][T12162] Total swap = 124996kB [ 282.027181][T12162] 2097051 pages RAM [ 282.031720][T12162] 0 pages HighMem/MovableOnly [ 282.036567][T12162] 424998 pages reserved [ 282.040802][T12162] 0 pages cma reserved [ 282.048850][T12186] batadv0: left allmulticast mode [ 282.053919][T12186] batadv0: left promiscuous mode [ 282.059718][T12186] bridge0: port 3(batadv0) entered disabled state [ 282.069053][T12186] bridge_slave_1: left allmulticast mode [ 282.074732][T12186] bridge_slave_1: left promiscuous mode [ 282.080599][T12186] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.094867][T12186] bridge_slave_0: left allmulticast mode [ 282.101021][T12186] bridge_slave_0: left promiscuous mode [ 282.106808][T12186] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.270968][T12169] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 282.437769][T12204] lo: entered allmulticast mode [ 282.453864][T12204] lo: left allmulticast mode [ 282.681666][T12218] netlink: 'syz.4.1567': attribute type 3 has an invalid length. [ 282.960449][T12226] siw: device registration error -23 [ 282.976371][T12228] delete_channel: no stack [ 283.170360][T12234] xt_l2tp: missing protocol rule (udp|l2tpip) [ 283.926217][T12260] dvmrp8: entered allmulticast mode [ 284.023666][T12261] lo speed is unknown, defaulting to 1000 [ 284.124694][T12265] netlink: 'syz.1.1585': attribute type 2 has an invalid length. [ 284.242293][T12275] netlink: 'syz.3.1586': attribute type 2 has an invalid length. [ 284.845551][T12294] lo speed is unknown, defaulting to 1000 [ 284.849108][T12261] dvmrp8: left allmulticast mode [ 285.124269][T12304] lo speed is unknown, defaulting to 1000 [ 285.267162][T12317] !: renamed from dummy0 (while UP) [ 285.851388][T12345] netlink: 'syz.0.1602': attribute type 3 has an invalid length. [ 286.027224][T12347] lo speed is unknown, defaulting to 1000 [ 286.447276][T12370] __nla_validate_parse: 8 callbacks suppressed [ 286.447289][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1608'. [ 286.450878][T12369] tun0: tun_chr_ioctl cmd 1074812118 [ 286.526937][T12373] tun0: tun_chr_ioctl cmd 2148045848 [ 286.595155][T12373] tun0: tun_chr_ioctl cmd 21731 [ 286.647167][T12380] netlink: 'syz.1.1610': attribute type 1 has an invalid length. [ 286.673779][T12382] syzkaller1: entered promiscuous mode [ 286.679468][T12382] syzkaller1: entered allmulticast mode [ 287.124961][T12400] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1616'. [ 287.402174][T12422] netlink: 'syz.2.1622': attribute type 12 has an invalid length. [ 287.513001][T12428] lo speed is unknown, defaulting to 1000 [ 287.880610][T12451] ip6gretap0: entered allmulticast mode [ 288.054813][T12459] lo speed is unknown, defaulting to 1000 [ 288.182283][T12467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1632'. [ 288.347883][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1632'. [ 288.529123][T12479] openvswitch: netlink: Message has 8 unknown bytes. [ 288.580289][T12485] syzkaller0: entered promiscuous mode [ 288.647767][T12485] syzkaller0: entered allmulticast mode [ 288.679482][T12482] tipc: Enabled bearer , priority 0 [ 288.729897][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1641'. [ 288.767589][T12482] tipc: Resetting bearer [ 288.806447][T12494] ip6gretap0: left allmulticast mode [ 288.818213][T12494] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.845481][T12496] IPVS: set_ctl: invalid protocol: 51 172.30.1.1:20000 [ 288.860514][T12498] tipc: Enabling of bearer rejected, failed to enable media [ 288.932187][T12504] syzkaller1: entered promiscuous mode [ 288.941711][T12504] syzkaller1: entered allmulticast mode [ 289.303967][T12481] tipc: Resetting bearer [ 289.346511][T12481] tipc: Disabling bearer [ 289.582999][T12525] lo speed is unknown, defaulting to 1000 [ 289.608898][T12526] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1647'. [ 289.979792][T12541] lo speed is unknown, defaulting to 1000 [ 290.041447][T12545] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 290.177116][T12557] netlink: 212316 bytes leftover after parsing attributes in process `syz.0.1655'. [ 290.197971][T12557] netlink: zone id is out of range [ 290.203317][T12557] netlink: zone id is out of range [ 290.215996][T12557] netlink: get zone limit has 8 unknown bytes [ 290.559191][T12578] netlink: 'syz.3.1661': attribute type 1 has an invalid length. [ 290.567467][T12578] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1661'. [ 290.574462][T12574] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1660'. [ 290.891177][T12596] netlink: 'syz.2.1667': attribute type 3 has an invalid length. [ 290.904448][T12596] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1667'. [ 290.934905][T12589] lo speed is unknown, defaulting to 1000 [ 291.020349][T12601] netlink: 'syz.0.1668': attribute type 10 has an invalid length. [ 327.818703][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.178205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.627268][T12615] netlink: 'syz.2.1671': attribute type 13 has an invalid length. [ 353.635917][T12613] netlink: 'syz.1.1670': attribute type 1 has an invalid length. [ 353.648019][T12613] netlink: 'syz.1.1670': attribute type 2 has an invalid length. [ 353.656398][T12615] netlink: 'syz.2.1671': attribute type 17 has an invalid length. [ 353.838623][T12628] __nla_validate_parse: 1 callbacks suppressed [ 353.838642][T12628] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1675'. [ 353.909261][T12624] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1672'. [ 354.090750][T12634] netlink: 'syz.4.1675': attribute type 1 has an invalid length. [ 354.099341][T12634] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1675'. [ 354.108847][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 354.131887][T12615] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.284970][T12613] lo speed is unknown, defaulting to 1000 [ 354.565392][T12626] lo speed is unknown, defaulting to 1000 [ 354.770647][T12640] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1676'. [ 354.886105][T12643] lo speed is unknown, defaulting to 1000 [ 355.209055][T12659] lo speed is unknown, defaulting to 1000 [ 355.609056][T12667] bond5: option tlb_dynamic_lb: invalid value (71) [ 355.654172][T12667] bond5 (unregistering): Released all slaves [ 355.811249][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 356.084420][ T30] audit: type=1800 audit(1759382563.023:5): pid=12678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1684" name="memory.events" dev="tmpfs" ino=1736 res=0 errno=0 [ 356.392414][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1687'. [ 356.404871][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1691'. [ 356.523158][T12711] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1692'. [ 356.643995][T12718] netlink: 'syz.0.1694': attribute type 9 has an invalid length. [ 356.654396][T12718] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1694'. [ 356.751206][T12723] netlink: 'syz.1.1695': attribute type 2 has an invalid length. [ 357.324136][ T5183] Bluetooth: hci4: link tx timeout [ 357.336141][ T5183] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 357.465766][T12762] geneve3: entered promiscuous mode [ 357.474313][ T69] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.488014][ T69] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.496245][ T69] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.524695][ T69] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.834562][T12785] lo speed is unknown, defaulting to 1000 [ 358.262449][T12802] wg2: entered promiscuous mode [ 358.267354][T12802] wg2: entered allmulticast mode [ 358.300657][T12799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.021619][T12846] netlink: 'syz.1.1728': attribute type 4 has an invalid length. [ 359.417927][ T5876] Bluetooth: hci4: command 0x0405 tx timeout [ 360.494150][T12852] __nla_validate_parse: 5 callbacks suppressed [ 360.494169][T12852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1731'. [ 360.510421][T12835] ip6tnl1: left promiscuous mode [ 360.510447][T12835] ip6tnl1: left allmulticast mode [ 360.550734][T12835] macvlan0: left promiscuous mode [ 360.556034][T12835] macvlan0: left allmulticast mode [ 360.562260][T12835] bond3: left promiscuous mode [ 360.568230][T12835] wireguard1: left promiscuous mode [ 360.613430][T12835] bond4: left promiscuous mode [ 360.622448][T12835] bond4: left allmulticast mode [ 360.629391][T12835] veth0: left allmulticast mode [ 360.634821][T12835] macvlan1: left promiscuous mode [ 360.640335][T12835] macvlan1: left allmulticast mode [ 360.669895][T12842] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 360.701654][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 360.739600][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 360.758066][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 360.768917][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 360.779062][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 360.791104][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 360.802483][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 360.814335][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 360.824327][T12865] netlink: 212288 bytes leftover after parsing attributes in process `syz.3.1735'. [ 360.834354][T12849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 360.853598][ T7774] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.868360][ T7774] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.912700][ T7774] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.955670][ T7774] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.977553][ T7774] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.980745][T12872] netlink: 'syz.1.1737': attribute type 2 has an invalid length. [ 360.992666][ T7774] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.024981][ T7774] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.043922][ T7774] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.101411][T12881] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5 [ 361.150801][T12873] lo speed is unknown, defaulting to 1000 [ 361.679404][T12924] lo speed is unknown, defaulting to 1000 [ 361.895578][T12933] netlink: 'syz.1.1751': attribute type 1 has an invalid length. [ 361.955707][T12933] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 361.969178][T12933] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 362.042224][T12935] gretap2: entered promiscuous mode [ 362.091036][T12935] bond0: (slave gretap2): making interface the new active one [ 362.143450][T12935] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 362.175244][T12933] macvlan3: entered promiscuous mode [ 362.183989][T12933] macvlan3: entered allmulticast mode [ 362.190628][T12933] bond0: entered promiscuous mode [ 362.198197][T12933] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 362.232142][T12933] bond0: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 362.246426][T12933] bond0: left promiscuous mode [ 362.284741][T12945] net veth1_virt_wifi : renamed from virt_wifi0 [ 362.600985][T12973] IPVS: Scheduler module ip_vs_sip not found [ 363.682278][T13014] netlink: 'syz.3.1773': attribute type 10 has an invalid length. [ 363.693752][T13014] batadv0: left promiscuous mode [ 363.708062][T13014] batadv0: left allmulticast mode [ 363.729896][T13014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.781974][T13014] batadv0: entered promiscuous mode [ 363.802643][T13014] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 364.348091][T13041] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.398042][T13039] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.517762][T13049] macsec0: entered promiscuous mode [ 364.523138][T13049] macsec0: entered allmulticast mode [ 364.538492][T13049] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 364.684994][T13059] delete_channel: no stack [ 365.027376][T13077] tipc: Enabling of bearer rejected, already enabled [ 365.505337][T13119] __nla_validate_parse: 25 callbacks suppressed [ 365.505357][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1801'. [ 365.812149][T13138] netlink: 'syz.3.1807': attribute type 1 has an invalid length. [ 365.828825][T13138] netlink: 'syz.3.1807': attribute type 11 has an invalid length. [ 365.881540][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1809'. [ 365.922993][T13142] veth12: entered promiscuous mode [ 365.925465][T13143] can: request_module (can-proto-0) failed. [ 365.929023][T13142] veth12: entered allmulticast mode [ 365.947274][T13143] tipc: Enabling of bearer rejected, failed to enable media [ 365.995076][T13141] bond7: entered promiscuous mode [ 366.001269][T13141] bond7: entered allmulticast mode [ 366.007001][T13141] 8021q: adding VLAN 0 to HW filter on device bond7 [ 366.112359][T13141] bond7 (unregistering): Released all slaves [ 366.148751][T13149] netlink: 'syz.3.1810': attribute type 1 has an invalid length. [ 366.330819][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 366.367083][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 366.503649][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1813'. [ 366.601736][T13179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1816'. [ 366.625084][T13185] lo speed is unknown, defaulting to 1000 [ 366.660783][T13188] netem: incorrect gi model size [ 366.666122][T13188] netem: change failed [ 366.735707][T13191] netlink: 'syz.0.1820': attribute type 4 has an invalid length. [ 366.822066][T13195] tipc: Enabled bearer , priority 0 [ 366.842536][T13195] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 366.863640][T13195] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 366.902114][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 366.977363][T13195] tipc: Resetting bearer [ 367.160922][T13221] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1830'. [ 367.207972][T13221] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1830'. [ 367.369214][T13231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1832'. [ 367.780803][T13246] lo speed is unknown, defaulting to 1000 [ 367.913336][T13260] netlink: 'syz.3.1840': attribute type 4 has an invalid length. [ 368.387595][T13281] 8021q: VLANs not supported on ip6tnl0 [ 368.432645][T13282] lo speed is unknown, defaulting to 1000 [ 368.498786][T13287] netlink: 'syz.3.1848': attribute type 1 has an invalid length. [ 368.549907][T13287] gretap2: entered allmulticast mode [ 368.801478][T13301] veth0_to_bond: left promiscuous mode [ 368.857117][T13298] lo speed is unknown, defaulting to 1000 [ 369.216317][T13310] sit1: entered promiscuous mode [ 369.292112][T13322] lo speed is unknown, defaulting to 1000 [ 370.584725][T13381] lo speed is unknown, defaulting to 1000 [ 370.623257][T13386] __nla_validate_parse: 8 callbacks suppressed [ 370.623277][T13386] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1866'. [ 370.973151][T13392] lo speed is unknown, defaulting to 1000 [ 371.273593][T13411] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1873'. [ 371.275534][T13405] lo speed is unknown, defaulting to 1000 [ 371.315313][T13411] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1873'. [ 371.350163][T13410] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1873'. [ 371.400331][T13410] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1873'. [ 371.400809][T13418] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 371.416964][T13415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1873'. [ 371.456163][T13411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1873'. [ 371.475934][T13418] netlink: 'syz.1.1874': attribute type 10 has an invalid length. [ 371.486179][T13418] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1874'. [ 371.495329][T13418] geneve0: left promiscuous mode [ 371.508093][T13418] geneve0: left allmulticast mode [ 371.541140][T13418] team0: Port device geneve0 added [ 371.546444][T13426] netlink: 'syz.1.1874': attribute type 13 has an invalid length. [ 371.559482][T13428] netlink: 'syz.3.1876': attribute type 10 has an invalid length. [ 371.567460][T13428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1876'. [ 371.585617][T10662] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.594625][T10662] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.603327][T13426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1874'. [ 371.676572][T13426] bond3: option fail_over_mac: invalid value (6) [ 371.692561][T13426] bond3 (unregistering): Released all slaves [ 371.776074][T13428] team0: Port device geneve0 added [ 371.784514][T10662] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.807602][T10662] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.826263][T13425] hsr_slave_0: left promiscuous mode [ 371.841888][T13425] hsr_slave_1: left promiscuous mode [ 371.874701][T10662] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.921275][T10662] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.951866][T10662] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.994456][T10662] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.044266][T13443] netlink: 'syz.2.1881': attribute type 13 has an invalid length. [ 372.073832][T13443] netlink: 'syz.2.1881': attribute type 17 has an invalid length. [ 372.177137][T13443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.206879][T13443] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.259813][T13443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.322895][T13446] lo speed is unknown, defaulting to 1000 [ 372.341968][ T30] audit: type=1107 audit(1759382579.283:6): pid=13457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='&N%fLઋ$rid.C^~BœND_vDOu5ަyiPضgdkˬ`X."iҡGcgu#mg' [ 372.590948][T13459] lo speed is unknown, defaulting to 1000 [ 373.240240][T13501] lo speed is unknown, defaulting to 1000 [ 373.628173][T13527] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 373.642162][T13527] netlink: 'syz.1.1899': attribute type 1 has an invalid length. [ 373.811551][T13533] syzkaller0: entered promiscuous mode [ 373.819018][T13533] syzkaller0: entered allmulticast mode [ 375.468557][T13556] batman_adv: batadv0: Removing interface: dummy0 [ 375.480283][T13556] bond0: (slave bond_slave_0): Releasing backup interface [ 375.515058][T13556] bond0: (slave bond_slave_1): Releasing backup interface [ 375.542762][T13556] team0: Port device team_slave_0 removed [ 375.559597][T13556] team0: Port device team_slave_1 removed [ 375.565789][T13556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.596476][T13556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.613952][T13556] bond3: (slave geneve2): Releasing backup interface [ 375.640231][T13556] bond6: (slave bridge5): Releasing active interface [ 375.916784][T13585] __nla_validate_parse: 7 callbacks suppressed [ 375.916804][T13585] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1914'. [ 376.035636][T13573] team0: Port device dummy0 removed [ 376.074992][T13573] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.207195][T13591] lo speed is unknown, defaulting to 1000 [ 376.310482][T13578] lo speed is unknown, defaulting to 1000 [ 376.501350][T13613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 376.700114][T13607] 0X: left allmulticast mode [ 376.781506][T13607] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 376.824885][T13607] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 376.875183][T13607] geneve3: left promiscuous mode [ 376.925704][T13607] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 376.954951][T13607] macsec0: left promiscuous mode [ 376.967846][T13607] macsec0: left allmulticast mode [ 377.023543][ T7777] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.041766][ T7777] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.080729][ T7777] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.238234][ T7777] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.350847][T13634] netlink: 'syz.2.1925': attribute type 13 has an invalid length. [ 377.378145][T13634] netlink: 'syz.2.1925': attribute type 17 has an invalid length. [ 377.415952][T13634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 377.862178][ T7777] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 377.890293][ T7777] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 377.898310][ T6908] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 378.150999][T13677] Bluetooth: MGMT ver 1.23 [ 378.333552][T13686] lo speed is unknown, defaulting to 1000 [ 378.361813][T13691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1940'. [ 378.391986][T13694] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1942'. [ 378.465302][T13696] tipc: Enabled bearer , priority 0 [ 378.498029][ T43] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 378.532858][T13696] syzkaller0: entered promiscuous mode [ 378.541554][T13696] syzkaller0: entered allmulticast mode [ 378.607601][T13702] batman_adv: batadv0: Adding interface: macvtap2 [ 378.617262][T13702] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.645177][T13702] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 378.667339][T13695] tipc: Resetting bearer [ 378.702998][ T43] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 378.714582][T13695] tipc: Disabling bearer [ 378.746724][T13703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.135641][T13725] delete_channel: no stack [ 379.460013][T13739] netlink: 'syz.2.1957': attribute type 8 has an invalid length. [ 379.490277][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1957'. [ 379.728229][T13748] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1959'. [ 379.825371][T13750] xt_l2tp: v2 sid > 0xffff: 1114112 [ 379.953287][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1963'. [ 380.048001][T13758] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 380.059704][T13758] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 380.355879][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1965'. [ 380.590690][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1967'. [ 380.612108][T13771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1967'. [ 381.065856][T13786] __nla_validate_parse: 2 callbacks suppressed [ 381.065877][T13786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1973'. [ 381.185778][T13790] netlink: 'syz.2.1975': attribute type 1 has an invalid length. [ 381.200724][T13790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1975'. [ 381.533755][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 381.747861][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 381.870530][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'. [ 381.879773][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1981'. [ 381.889191][T13807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'. [ 382.026670][T13814] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1983'. [ 382.236536][T13817] lo speed is unknown, defaulting to 1000 [ 382.328065][T13818] lo speed is unknown, defaulting to 1000 [ 382.459272][T13818] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1984'. [ 382.601803][T13656] Set syz1 is full, maxelem 65536 reached [ 383.491383][T13845] netlink: 'syz.2.1990': attribute type 1 has an invalid length. [ 383.563029][T13845] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1990'. [ 383.630690][T13845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1990'. [ 383.964712][T13848] 0X: renamed from caif0 [ 383.980866][T13848] 0X: entered allmulticast mode [ 383.986104][T13848] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 384.351736][T13854] lo speed is unknown, defaulting to 1000 [ 384.872297][T13881] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20000 [ 386.425589][T13945] lo speed is unknown, defaulting to 1000 [ 386.889726][T13961] __nla_validate_parse: 5 callbacks suppressed [ 386.889745][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2019'. [ 387.015135][T13965] tipc: Can't bind to reserved service type 1 [ 387.024057][T13965] netlink: 'syz.2.2020': attribute type 39 has an invalid length. [ 387.097127][T13968] vlan0: entered allmulticast mode [ 387.547201][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'. [ 387.597211][T13975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'. [ 387.782804][T13979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2024'. [ 387.958223][T13982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2025'. [ 388.175390][T13991] netlink: 'syz.4.2027': attribute type 13 has an invalid length. [ 388.234423][T13994] team0: Device ipip0 is of different type [ 388.374359][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2031'. [ 388.390959][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2031'. [ 388.409947][T14000] tipc: Enabled bearer , priority 0 [ 388.417408][T14002] syzkaller0: entered promiscuous mode [ 388.425528][T14002] syzkaller0: entered allmulticast mode [ 388.560322][T13994] tipc: Resetting bearer [ 388.594782][T14005] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 388.753082][T13993] tipc: Resetting bearer [ 388.852060][T13993] tipc: Disabling bearer [ 388.903218][T14009] lo speed is unknown, defaulting to 1000 [ 389.078881][T14019] lo speed is unknown, defaulting to 1000 [ 389.258332][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 391.245322][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 391.945261][T14091] lo speed is unknown, defaulting to 1000 [ 392.111893][T14102] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 392.130897][T14102] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2052'. [ 392.150087][T14102] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 393.111453][T14146] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2064'. [ 393.125242][T14146] netlink: 'syz.3.2064': attribute type 8 has an invalid length. [ 393.241773][T14147] lo speed is unknown, defaulting to 1000 [ 393.259166][T14153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2066'. [ 393.378495][T13759] Set syz1 is full, maxelem 65536 reached [ 393.426692][T14156] tipc: Enabling of bearer rejected, already enabled [ 393.580557][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2066'. [ 393.843840][T14171] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2071'. [ 393.890075][T14172] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2071'. [ 393.953266][T14171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2071'. [ 393.983595][T14171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2071'. [ 393.989526][T14174] lo speed is unknown, defaulting to 1000 [ 394.025435][T14156] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 394.042105][T14182] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2074'. [ 394.057919][T14156] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 394.216059][T14188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 394.384626][ T12] [ 394.386981][ T12] ============================================ [ 394.393111][ T12] WARNING: possible recursive locking detected [ 394.399337][ T12] syzkaller #0 Not tainted [ 394.403728][ T12] -------------------------------------------- [ 394.409871][ T12] kworker/u8:0/12 is trying to acquire lock: [ 394.415820][ T12] ffffe8ffffd938c0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 394.425026][ T12] [ 394.425026][ T12] but task is already holding lock: [ 394.432400][ T12] ffffe8ffffd94598 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 394.441601][ T12] [ 394.441601][ T12] other info that might help us debug this: [ 394.449635][ T12] Possible unsafe locking scenario: [ 394.449635][ T12] [ 394.457058][ T12] CPU0 [ 394.460314][ T12] ---- [ 394.463569][ T12] lock(&pd_list->lock); [ 394.467876][ T12] lock(&pd_list->lock); [ 394.472189][ T12] [ 394.472189][ T12] *** DEADLOCK *** [ 394.472189][ T12] [ 394.480308][ T12] May be due to missing lock nesting notation [ 394.480308][ T12] [ 394.488613][ T12] 3 locks held by kworker/u8:0/12: [ 394.493695][ T12] #0: ffff8881466ea148 ((wq_completion)pdecrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 394.505588][ T12] #1: ffffc90000117bc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 394.517651][ T12] #2: ffffe8ffffd94598 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 394.527321][ T12] [ 394.527321][ T12] stack backtrace: [ 394.533199][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 394.533213][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.533222][ T12] Workqueue: pdecrypt_parallel padata_parallel_worker [ 394.533240][ T12] Call Trace: [ 394.533249][ T12] [ 394.533256][ T12] dump_stack_lvl+0x189/0x250 [ 394.533270][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.533281][ T12] ? __pfx__printk+0x10/0x10 [ 394.533295][ T12] ? print_lock_name+0xde/0x100 [ 394.533308][ T12] print_deadlock_bug+0x28b/0x2a0 [ 394.533319][ T12] validate_chain+0x1a3f/0x2140 [ 394.533332][ T12] ? __queue_work+0x102/0xfb0 [ 394.533342][ T12] ? look_up_lock_class+0x74/0x170 [ 394.533354][ T12] ? register_lock_class+0x51/0x320 [ 394.533368][ T12] ? __queue_work+0xc56/0xfb0 [ 394.533378][ T12] __lock_acquire+0xab9/0xd20 [ 394.533393][ T12] ? padata_do_serial+0x73e/0xb80 [ 394.533405][ T12] lock_acquire+0x120/0x360 [ 394.533418][ T12] ? padata_do_serial+0x73e/0xb80 [ 394.533430][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 394.533444][ T12] _raw_spin_lock+0x2e/0x40 [ 394.533454][ T12] ? padata_do_serial+0x73e/0xb80 [ 394.533465][ T12] padata_do_serial+0x73e/0xb80 [ 394.533480][ T12] ? padata_parallel_worker+0x44/0x1d0 [ 394.533493][ T12] padata_parallel_worker+0x75/0x1d0 [ 394.533505][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 394.533521][ T12] process_scheduled_works+0xae1/0x17b0 [ 394.533542][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.533562][ T12] worker_thread+0x8a0/0xda0 [ 394.533578][ T12] kthread+0x70e/0x8a0 [ 394.533590][ T12] ? __pfx_worker_thread+0x10/0x10 [ 394.533599][ T12] ? __pfx_kthread+0x10/0x10 [ 394.533611][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 394.533620][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.533630][ T12] ? __pfx_kthread+0x10/0x10 [ 394.533641][ T12] ret_from_fork+0x439/0x7d0 [ 394.533651][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 394.533662][ T12] ? __switch_to_asm+0x39/0x70 [ 394.533673][ T12] ? __switch_to_asm+0x33/0x70 [ 394.533685][ T12] ? __pfx_kthread+0x10/0x10 [ 394.533696][ T12] ret_from_fork_asm+0x1a/0x30 [ 394.533712][ T12] [ 394.977481][T14199] lo speed is unknown, defaulting to 1000 [ 403.987851][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!