last executing test programs: 2.657419466s ago: executing program 0 (id=2525): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x61d9, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000000000000000030000000900030073797a30000000000900010073797a3000000067140004800800024000000000080001"], 0xb0}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x4}}, 0x10) sendmsg$tipc(r2, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) getsockname$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) 2.611588566s ago: executing program 1 (id=2528): syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%-010d \x00'}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x2000000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x16, 0x1, 0xfff, 0x40, 0x41076, r0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da52deda337f8af0366be93702298a20b912b44091a10ec9d76ab09f3b44ee95c1de86a9fee94df8dc49001ce17774fea95cd2cbd5e662f1ea9d73351feabf5ef6f6bba0853c240188f92c5f4ae3c27038150a5c6ac31cb4545d6baabd07f705a1ea0e", &(0x7f0000000100), 0x1003, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r3, &(0x7f0000000180)="f85115", 0x0}, 0x20) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0xab, 0xfffffffa, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f00000004c0)) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000000070103000000000000000000000000080001"], 0x1c}}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @private1, 0x7fff}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000"], 0x190) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r9, 0x8917, 0x0) r10 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r10, 0x116, 0x80, &(0x7f0000000340)="7155b506edb24822da43f6c2a0b5ce2b40b0ec718aca10ae53cc28d1450e844eb4ec512f6968cb25f7c89e54f319df5a500000a467048e926b327c99c786d163734c9ded0be5ea02e4fcc7bb7b6bd0fd2fca27a4e17c3ac1a71c19bfd6770cedd6df3172c534213f8afd48cf028b9188dcc2fb1d9abadccdd4e6b964e249507921d2236e34735722ea7130954ee997f67950c1d7477fee42cb0fdb885c8b18258ba79d179eba5279ce1fd01e325e2516af7096b27ed72b6706d973a76622ee87229dee597ca72a5375427806ab1e487a72461a29b59ee5a37dab21e4ba03a7c7e94500"/241, 0x155) syz_emit_ethernet(0x137, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000801013afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r11, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 2.169581919s ago: executing program 0 (id=2533): r0 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r0, &(0x7f0000000040)={0x22, 0x9, 0xb6, 0x4b, 0x1}, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$can_raw(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @loopback}, 0x3, 0x0, 0x3, 0x1}}, 0x26) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f00000001c0)={0xccf}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='highspeed', 0x9) 1.750254731s ago: executing program 4 (id=2538): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, r2, 0x8d52e7128bb80e97, 0x70bd28, 0x25ffdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20080c0}, 0x200489e1) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x121, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c045}, 0x80c4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec020000210000dbdcdd3c838a9fb5d7729ad92104000000000000000000000000000000000000000000000000fe82000019a2000000000000000000bb00000000000000000000000000000000872d6fdad7bfc6412c093ee64ed98a153c1ba7e1f2e60a051763d3f429783bc1490b65ad7ae271f209be23bb6bb8428b383fb45f3a062923cf85aa9114263e5964bbacbaa0e938", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2ec}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r6, 0x2, 0x1}, &(0x7f0000000040)=0x8) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, r2, 0x8d52e7128bb80e97, 0x70bd28, 0x25ffdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20080c0}, 0x200489e1) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv6_delrule={0x24, 0x21, 0x121, 0x70bd2d, 0x0, {0xa, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e22}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c045}, 0x80c4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec020000210000dbdcdd3c838a9fb5d7729ad92104000000000000000000000000000000000000000000000000fe82000019a2000000000000000000bb00000000000000000000000000000000872d6fdad7bfc6412c093ee64ed98a153c1ba7e1f2e60a051763d3f429783bc1490b65ad7ae271f209be23bb6bb8428b383fb45f3a062923cf85aa9114263e5964bbacbaa0e938", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2ec}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r6, 0x2, 0x1}, &(0x7f0000000040)=0x8) (async) 1.723452517s ago: executing program 3 (id=2539): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TIMEOUT={0x0, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0xec, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc0, 0x3, 0x0, 0x1, [{0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xb8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb4, 0x1, "54c94de9f66f4d3cb5416632b08deed855974982ee61323b18bb2efc75139f73bd22226ebf39c25e10c62e46125ba54a487dd1e2511dc6ecae8dd1a66a1d62610c8d720c971a12393781f2dd0a2ffd85bd823e990bf222bd973a1a689fcabeff1cebac497df9238b80ac31e30a7621641833c41d4b6e06dd6ce37ae668773ff2c8ffe9cc1865ddb9965bb6693536554de85eaa30a827ec78f958d6ff1455fc6274cf8450a9623927ee66667dd0c5223d"}]}]}]}]}, @NFT_MSG_DELTABLE={0x50, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x16c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0x1a, 0x2, 0x1) ioctl$IMGETVERSION(r1, 0x80044944, &(0x7f0000000000)) 1.582436676s ago: executing program 1 (id=2541): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000000000300000700"], 0x0, 0x51}, 0x28) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0x88bf}, 0x1c) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'bridge_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) (async) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00001abbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000000000000000000000000ff0200000000000000000000000078c205000100"/74], 0x4a) 1.580825365s ago: executing program 4 (id=2542): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) (async) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000000100)={0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000250001042fbd7000007ff60000000400", @ANYRES32, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580"], 0x44}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x5, 0x1) setsockopt$sock_int(r7, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async, rerun: 64) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) (async, rerun: 64) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000000180)=0x4, 0x4) (async, rerun: 32) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0xfffffffffffffc5a, 0x10, 0x401, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x0, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xffffffffffffff3d, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.548493462s ago: executing program 3 (id=2543): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x7, 0x1, 0xd, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x14) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0xd, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xd}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008001}, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000040)=@get={0x1, 0x0, 0x6}) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f00000000c0)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.383984276s ago: executing program 4 (id=2544): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x134, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x100, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0xd, 0xfff1}}, @TCA_BPF_ACT={0xf4, 0x1, [@m_tunnel_key={0xf0, 0x12, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x8a, 0x6, "8f677ad31309a9b248a2c3de88217bb5e20543a1b7a31549e0fd43344527b78a62721afc84ec6b6f95bca4c6379765f80d892d6171cb106634e2db296ddca0284801110a06fe2e55572c2883fe9bf0a821f32b07bfbbefeba0d4344a646c93172ed71a0c7a2fd109ab7b5748fda37813b6ddf5871072157cf57d339ee06f74898cce5a8f9db1"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x88}, 0x20000080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)="c7a6", 0x2}], 0x1}, 0x24048811) socket$tipc(0x1e, 0x5, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40000001) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000042) socket$unix(0x1, 0x5, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0xad3394dc192dae8b, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.322147066s ago: executing program 1 (id=2545): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) writev(r1, &(0x7f0000001500)=[{&(0x7f0000000040)="6471e652d47fea2a2abf897c5910907fd41e18b309e1a393e9913d6ddcacf745f9a4442081f589486b8121992b3560c8664b0ca0ac4ddefd5d1c18705805688411bda511a3e24204c961641881a8b053e04d9413c9d9b91b1951b8962bcd0ddb8038edb9dc655b50a0d32ee59d87dcfa5b7d8afba85e40b13ad61539b9bbabe0f222012ea0c6101887886a58b90ee4ba9821280a5bc273674681d464cfe477afded74ecce47a5c9c54d82aae07d8646085088476162c83dca784229f5c934c77dd2e5f4e9dba0ad3934b3a0e7a8fa6e50dc04e00154b9bcf459e6cb6a942e7b182c0387ab83f403e142c8fcd88", 0xed}, {&(0x7f00000001c0)="826799f2b3f95bdf72b47c3554ac6c3ee22be2e2e4ac63302db97564901e4bb85dce7c39cdcb7085bad93eb9a22a0b9cda3a9df369c79041e9547a60bb3e6a0c1db12689c3e697738ed574f075a9dc8831e91248457f35760e2f54631b71f8f2f1bf1f48b639f217a40e3312e470d59d5eeb82c47a23e57950e1bd3a0d307f1f30702e7d3ccdaf15f194e90c2c405bb6669a2f3be25e51911bad7d5a4c2364fdd4e0a0fd71a08cd40af741f6e27f6b616bd146ee29", 0xb5}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="ba6c631cc907e09730d4f6232c3b6c3de71dd138fc6b2ff654717e6d33a1ae9de049b81b935c26f097f044b80f49dea5f0163a9be7305ad86c32207f7de4d5d8a3f58f1726de2f02cfc67fdf0446fb1a1792a88e29396c03d2bb271d2a7c83be2522caed4b56c0a33139c15513d4af4d0f9e2e912ff499652cdd6ccce65545656e2752a873d137e00550203fa33f66a9ecc6f27c61cdd04e10ea6aa6a01489ac36dea8", 0xa3}, {&(0x7f0000001340)="3f22ce2d422de68875c29d6036f6292dfb2809f8d586272249997100ea88a05438fa3c6472eab37e3313c3ed83f2b7b7719729e1d8e1e1ca6b0777be7391eb54470f9e773c23dd30e7646673b57a5f75efe44632c890a075a6f7b849b549f31f49d3f26d64e45f83303bf749a5a618661e3ef5baa05392c4ee7bcd00a0296ffa810b6585332788439bcd2110e594228fe2af3d478be4023831d094d3449c7b343c25ff6ce5c0f087c3f9098e064cea6d", 0xb0}, {&(0x7f0000001580)="5b05163b0544ec199dd5b848b1a13e22a1de2a09c71478649baf8d5c37c1028cfdd10799006a983ca7cc3b99f8ad1a96e023323bf1fc88a3b123f6986f669dc59d8a7c22a73f69047d8401fd0d5e43e53de7024258b854e36874c76212c6333396ec972452413730d1934053c3a2d960542dde8f132565bd9d43bbaf1aac6c4329b0c69d5afc095d0a2c583b43391b1b14f87da89f0ebbfe1e13f39018fe0f5032b5f0550b1a141b970d9f65744df80f8e7761345e495dfb3c76c17107eb2d4651312c2cb0f6f6f7a6684fa7a5616f1808b7b85d7a37efff7c1b6f", 0xdb}], 0x6) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c) 1.221578564s ago: executing program 3 (id=2546): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0xb, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2) (async, rerun: 32) bind$can_raw(r2, &(0x7f00000002c0), 0x10) (rerun: 32) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) (async) close(0x4) (async, rerun: 32) listen(r4, 0xb639) (async, rerun: 32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e24, 0x93, @empty}], 0x38) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x81, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e24}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.106267394s ago: executing program 0 (id=2548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0xfffffffffffffffd, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0xfffffffffffffffd, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004001400000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.105508156s ago: executing program 4 (id=2549): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x2, 0x4e, @local, @loopback, 0x10, 0x40, 0x0, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000001d40)=0x421, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 1.104826086s ago: executing program 1 (id=2550): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000003740)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @remote}, 0x6, {0x2, 0x4e21, @empty}, 'macvtap0\x00'}) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x4, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='netpci0\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) (async) r3 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000240)={0xa, 0x6}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f0000000080)={{0x3, @bcast}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x400}, 0x0, 0x5dfe}, [@proto={0x5, 0x19, 0x2b}]}, 0x100}}, 0x0) (async) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000000)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfec}], 0x3}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x24000090) 1.044922292s ago: executing program 3 (id=2551): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@netrom, @bcast, @bcast, @rose, @bcast, @default, @null, @bcast]}, &(0x7f0000000100)=0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=@newlink={0x5c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_IFLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x40}]}}}]}, 0x5c}}, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000140)) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000069105a000000000004000000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="ef05b9b215d0"}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800f4ff0017000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x74}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x3c, 0x8, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x238, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_FLOWTABLE_HOOK={0x218, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x14000}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x2c4}, 0x1, 0x0, 0x0, 0x814}, 0x81) 1.004417568s ago: executing program 0 (id=2552): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x4000000) socket(0x2b, 0x0, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c088}, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0x3, 0x7, 0x5, 0x9}) 878.435927ms ago: executing program 1 (id=2553): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="05020000000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r1, @ANYBLOB="5cda99501cdd267216a935bc449940168e16b0cc104b8bf992bd0f2f96c241699dae98112632437346c461ef11f76f99e948291d9a673ca84c0102564a8606f39cf6eba86eb913e5f6bf49ca138ad0568f685bbccce2276464d9e08e8e0768cc38d228d3654737af0b5b7c51483d4c17b57fcf9a7f5edc2afbea761963de0c833dfe8b25fc07cb0ab877bd8ed3e4"], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x200040d1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 877.993827ms ago: executing program 2 (id=2554): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r1, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) recvmmsg(r1, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94) (async) socket$inet6(0xa, 0x1, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) 877.39043ms ago: executing program 4 (id=2555): r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x20, 0x20, 0x3, 0x9, {{0x10, 0x4, 0x3, 0x0, 0x40, 0x65, 0x0, 0x0, 0x29, 0x0, @empty, @empty, {[@cipso={0x86, 0x18, 0x1, [{0x6, 0x12, "6f85d2888f2f500c443cd221332b3c6a"}]}, @generic={0x0, 0x10, "fb6862ccf04dcb8388ab867d7a07"}, @end]}}}}}) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000100)=""/179, 0xb3, 0x2000, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20005000}, 0x20000000) r4 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0) bind$packet(r4, &(0x7f0000000340)={0x11, 0x8, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000003c0)="af65fed230ef4d01a72fd0dd3aba442df0537502735a75d1cdd6d604768817683748338a223de2a6955a89da8294ec6ac6421b910da894c92e084cfd88639f1ff69f74f98324a0ea4c7006d7ec76f01198cf33203076849e25b5ca52e54351a324c7b2e31876baf4bb632c3b3920cda88caad1a68b35e971dfaa3aa9851605c6220468d8ca7e63d1bb04edbf767e9a648d82cbd9b6cb428df11c7682e77009777044bbda9d439d177d8f42964a40f28fe759775ec8be8af113fa0af599b410b46a29c55ad23c8564e86f6e9e0adecd58a7d26307de54106e3027b85faef644c540ecd0407a31", 0xe6}, {&(0x7f00000004c0)="3f86b8d3ac233867d01d2063dac5e171aa66bd8cac1b93bc6a11911571e6d1ed8b876e85ea532818d33884822dbc51111dffedf38ea9740cca8c954d47e4f7ef4bdf9ed5dfc67981332b0fec5d814af859be6ddcc87a213e36d9a4f387672fb0d061baa0e1c9a50b072bba531ab70798508340ce29118c0f9327e632a959e2eb79123b6cf25898f171f746038a0d7956e0a29c70e81529369048ac7d19e872d4b7035d3fd76bf8f585558ce4c926eecaa4d8120bfca05144d4ef3a5e8953d2bc4129bbbeba913da3acaf6a7eabc2556e4f6d3efeac0ce2dcb3ddff0a4e3c05f8d3011ab1dd16897ecf9a21ecd04f51ff9bd5ae2e409808", 0xf7}], 0x2}, 0x10) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000680)={'ip6gretap0\x00', @remote}) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r9, 0x6, 0x6, &(0x7f0000000700), 0x4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r6, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x382bef3fcfad6a8d}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xa8, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x8010) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0xe00, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a00)={'vcan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), r3) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f00000010c0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x19220}, 0xc, &(0x7f0000001080)={&(0x7f0000000ac0)={0x58c, r12, 0x222, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x2a0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-\'\xb8\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vcan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9c6}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffbff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x756}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb5, 0x4, "e3a967d6bd48c5c46faea31634c48d118239a894aa0b8e26a9ac8c1622b06d12d77262a5d260096c29fa1cbe92dbabdb21576808270faf8c9e2ffc7e4f75e423ea72d483c01864b6a8c77b79d393a4a33dbc95dc4170f9e9cc5be9db7a18906fd7daf657667c6dc56c1c0d3600a525fc2bd35ae3b55c385001be153f29617d1b60a3291a52ced887166bc67bd88fce1e03f8e44638206f4efe38e4ad8f4ed04b2e011a4833c54ae351be97a0aa8a86743a"}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_SOPASS={0xde, 0x3, "cee75633f5c094cd86826410dc012fe653ef6f8b3626f4eb92fa4569ff702801df046ae94c7e86c0ed5d36685132916277874a3195251e62f1d9f870269d9e1d8606e2386e0f5c481dc750f01010c4cd7233ec7fe1dfb063ac27f683bf5361e6ee1f5cd12abf531538675fe8a8e7269ceb9d5b18018ac530b8f363e97c7a5130025be27171bf38b742821764d3f94ed3957451427afa71d6979eda6e1a899efb4133b3c3d2239b0619b4feb28d10f47c5a1e24243b8de49cc1ee333ad4d97d7b01af8a301e19b00cbf32dbcad21ed42e7f670a07bf113b294a29"}, @ETHTOOL_A_WOL_SOPASS={0x39, 0x3, "0d4932dbdf1ab2d99f84cfcc09343a29a262ed6c126741dac81cc50ba135322688583013d4fad7cd70fbfdc5f11dada89fc0f81ec0"}, @ETHTOOL_A_WOL_SOPASS={0x77, 0x3, "82e14e2af2fd64d26a72da1894bca75f1e0f55a972bb48d91037fc5f17cca82fb4047e28bb19817d38f0a49377f8243323344f31c195080132443fcaf8f598383cce2f27404ebd291999f83082fe4bcf2beafc975af4020e0db5d32629d2802c2357578b3dd1af2b6c9a3a3259dbc481899228"}, @ETHTOOL_A_WOL_SOPASS={0xf8, 0x3, "49e321dd89a28b848ecd160d6570202c64d1637afea74d660d4a861c4bb618d6ad45f71fc63219b45a558c6e50edc2c861f723c1de31e71c062fc358f61a40f908f91008733c9fa036ee2c0b2e258c0633926b1edfa76117be6bc8255e6ec74e3b8344cc2c6d5d57e275fab50131310c700b4c8812e88b140ada1adfb6d7287b41d5141f013545e016afb54d532a466d59a8c25a234a8dc059ed603fd7928abe7cf3ab52ecc8cfcc72aeee4cfaffb0a8ebf486d19ca0ba129437ceaad4f5b0a948fd600bb03f94236f5f2900a8eb3cf7f2d90d507a59a9153dfd157b30bd4960408ee4c37d44b5ce9b13fe775f5feb5a8b3c9414"}]}, 0x58c}, 0x1, 0x0, 0x0, 0x40c0}, 0x10) sendto(r7, &(0x7f0000001100)="15340fa2f42b0cb96e30753c", 0xc, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f0000001140)={'erspan0\x00', r11, 0x700, 0x20, 0x81, 0x240, {{0x2b, 0x4, 0x0, 0x8, 0xac, 0x65, 0x0, 0x1, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ssrr={0x89, 0xb, 0xf2, [@remote, @private=0xa010101]}, @timestamp={0x44, 0x28, 0xc1, 0x0, 0x0, [0x2, 0xffffffff, 0x8, 0x5f, 0x1, 0x6, 0x10, 0x2, 0x6]}, @timestamp={0x44, 0x24, 0x3a, 0x0, 0x5, [0x80000000, 0xb, 0x5, 0x3, 0x9, 0x0, 0x101, 0x4]}, @rr={0x7, 0xb, 0xfc, [@multicast2, @multicast1]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0x67, [@dev={0xac, 0x14, 0x14, 0x22}, @empty, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0x7, @rand_addr=0x64010101, @rand_addr=0x64010101, @private=0xa010100, @rand_addr=0x64010102, @empty]}, @lsrr={0x83, 0x7, 0xb, [@broadcast]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001300)={r6, 0x58, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r15 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000001340)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@local, 0x4e22, 0x6, 0x4e23, 0x2, 0x2, 0xa0, 0x20, 0x3c, r14, r15}, {0x40, 0x1, 0x4, 0x0, 0x3, 0x1, 0x100, 0x7}, {0x0, 0x4, 0x8, 0x200}, 0x5, 0x6e6bb0, 0x1, 0x1, 0x1, 0x1}, {{@in=@loopback, 0x4d6, 0x33}, 0xa, @in=@local, 0x3504, 0x2, 0x0, 0x2e, 0xd742, 0x7}}, 0xe8) sendmsg$AUDIT_TTY_SET(r7, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x18, 0x3f9, 0x800, 0x70bd2d, 0x25dfdbfc, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x8050) bind$inet6(r8, &(0x7f0000001540)={0xa, 0x4e24, 0x6, @remote, 0x9}, 0x1c) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001580)={r13, 0x1000}, 0xc) getsockopt$sock_int(r6, 0x1, 0xa, &(0x7f00000015c0), &(0x7f0000001600)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x10041, &(0x7f0000001680)={0x77359400}) 743.673316ms ago: executing program 2 (id=2556): r0 = accept(0xffffffffffffffff, &(0x7f0000000980)=@in, &(0x7f0000000b40)=0x80) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000035c0)={0x0, 0x6b, "66846e28da018d23006b3666b8b6a31ff33c5936ba119633747f447898c1deada7d4f2550c2151158fbaeb8e99b54d0a5827fd4312c28ee501b51fd31e26f67a94a1b3324b400272af44c422751c3de4e9b1a0945b83678305c2bc6eed0649769f3541ae60778c6c9c5a50"}, &(0x7f0000001b80)=0x73) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003680)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x20}}, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYRES64=r3], 0x18, 0x40045}], 0x1, 0x0) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) (async, rerun: 64) r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffb, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffff8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x3, 0xb}, {0xe, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (async) recvmmsg(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)=""/38, 0x26}], 0x1}, 0x3ff}], 0x1, 0x40002020, 0x0) (async) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @private1, 0x28}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="dc", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="140000000000000029000000430000000800000000000000c80000000000000029000000040000002f150000000000000570d00e57facb7c88d46d46872602468f8835c7377b75ef0062fea10d356d1938ba00cc9ae797b9fe8a7737e2c88b1743c844fe8b2dc684a73e0c1183f753a151df98edaec2f969461b06d89f4b5225bdc49ac3c3d34ff18a2f64a3896af2152ff36d8d4cf7c9d527f4286146207446c8b904010f0738000000000c086b4b00000080000000000400000000000000010000000000000001000000000000000300000000000000010000000000000000140000000000000029000000340000000700000000000000280000000000000029000000390000002c02020900000000fe8000000000000000000000000000aa140000000000000029000000080000000300000000000000a80000000000000029000000360000008711000000000000050200090738000000020c02040009000000000000000100000000000000f2dd072e00000000090000000000000000000000000000000100000000000000c910fe800000000000000000000000000015002b00d15a0bd955e1288db6febfb75a1e9bb04b81de87f02e131ad30c1ac50a7e6d7522f3771c2499f37a87a1030001070000000000000000010000000000001400000000000000290000003400000003000000000000002000000000000000290000003600000011000000000000000502000800000000200000000000000029000000370000002b00000000000000c20400000e5a000048"], 0x280}}], 0x1, 0x880) (async, rerun: 64) shutdown(r12, 0x1) (rerun: 64) 610.606422ms ago: executing program 1 (id=2557): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x6}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x3}]]}}}]}, 0x40}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0)={0x9, @remote}, &(0x7f0000000280)=0x12, 0x800) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f00000002c0)={0x58, "50774679a624722f85bd0fd24770bfbf5fbf3b61e018ee28fe7d0fbc8f37d7b3e889142a5304a0181d9ffefb2a8393fc2353131248d41ce674f9224b1a7172940fdb7675150c5515f98a278fe79ef0a553372f3888dd6e7934bae7b23e8fdccce81df92f3fdd95379e454c0f479b7a99f3e51263774d2974c5ebf8f4cb8fba38"}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc8000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000180)=0x1007e, 0x11fb96e13838704f) recvmmsg$unix(r8, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) sendto$unix(r7, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) setsockopt(r5, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) syz_emit_ethernet(0x200000, 0x0, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0xfffffffffffffff2}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in=@empty, 0x4d6, 0x6c}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x7, 0x8}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 526.370201ms ago: executing program 4 (id=2558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ppoll(&(0x7f0000000cc0)=[{r0}], 0x1, 0x0, 0x0, 0xfffffffffffffe6c) r2 = socket(0x1e, 0x4, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r2, 0x1, 0x53, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 342.885798ms ago: executing program 2 (id=2559): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3c4253b91020000000000000", @ANYRES32=r1, @ANYBLOB="4f37e4010000008c989322007a76fa5d9ca848254eb19392edf5fc0066b52d", @ANYRES64=0x0], 0x20) (async) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000100010095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 244.944764ms ago: executing program 0 (id=2560): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x100, @empty, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0), 0x33) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "e6ff003b"}, 0x28) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)='n7', 0x2}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x304}, "4dae5a169d663829", "875a0a915143a804c0f3792f91e29b5c", "f9de9594", "1ddc00c743353199"}, 0x28) ppoll(&(0x7f0000000140)=[{r1, 0x4405}], 0x1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) writev(r2, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x105}], 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000030003d4"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) 186.3381ms ago: executing program 2 (id=2561): r0 = socket$netlink(0x10, 0x3, 0x7) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x2, 0x10008000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000200001000000000000000000000000050019003c00b3b8000000000000000000"], 0x24}}, 0x48850) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10402, 0x0) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r7, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='freezer.state\x00', 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x200}) 151.753531ms ago: executing program 3 (id=2562): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001300), 0x4) connect$inet6(r1, &(0x7f0000001380)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c) (async) r2 = socket(0x29, 0x80000, 0xeffff7f8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x1, 0x1, 0x1, 0x3, {{0x40, 0x4, 0x2, 0xd, 0x100, 0x64, 0x0, 0x8, 0x29, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x2b, 0x3d, [@dev={0xac, 0x14, 0x14, 0x12}, @loopback, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x31}, @loopback, @rand_addr=0x64010100]}, @lsrr={0x83, 0xf, 0xde, [@multicast1, @empty, @empty]}, @noop, @timestamp={0x44, 0x1c, 0xfd, 0x0, 0x4, [0x0, 0x6, 0x9, 0x3c14, 0x3, 0xf8]}, @timestamp_prespec={0x44, 0x24, 0xb4, 0x3, 0x4, [{@private=0xa010101, 0x1}, {@multicast1, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @ssrr={0x89, 0x1b, 0x3b, [@dev={0xac, 0x14, 0x14, 0x1c}, @local, @private=0xa010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @end, @timestamp_prespec={0x44, 0x3c, 0x24, 0x3, 0x2, [{@local, 0x6}, {@private=0xa010102, 0x7}, {@broadcast, 0x7f}, {@local, 0x3}, {@broadcast, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3bbd9671}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x1}]}, @rr={0x7, 0x17, 0x7c, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @multicast2]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@newtclass={0xa8, 0x28, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xf, 0xfff2}, {0x4, 0x8}, {0x0, 0x8}}, [@tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x7}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xfffffff6}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xa}}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_qfq={{0x8}, {0x2c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x4}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xc2}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x8000}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0xffff}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r8, 0x84, 0x74, &(0x7f0000000580)=""/138, &(0x7f0000000180)=0x8a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0xb}]}}]}, 0x44}}, 0x1) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet6_int(r0, 0x29, 0x50, 0x0, &(0x7f0000000080)=0x1c) 108.651467ms ago: executing program 2 (id=2563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r1, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3, 0x0, 0x3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x20000000) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb0}}, 0x0) 42.317975ms ago: executing program 0 (id=2564): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @mcast2, 0x7}, 0x1c) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 4.025466ms ago: executing program 3 (id=2565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (rerun: 32) 0s ago: executing program 2 (id=2566): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000240)={'wlan1\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="020600000200"], 0x10}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x28) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r6, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r5) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000100)={'veth0_to_bridge\x00'}) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200"], 0x44}, 0x1, 0x0, 0x0, 0x4040890}, 0x2000800) kernel console output (not intermixed with test programs): link: Missing key (keys=40, expected=200000) [ 134.183888][ T7775] netlink: 'syz.0.518': attribute type 11 has an invalid length. [ 134.313674][ T7786] netlink: 'syz.1.522': attribute type 11 has an invalid length. [ 135.093419][ T7812] netlink: 'syz.3.532': attribute type 2 has an invalid length. [ 135.225558][ T7811] lo speed is unknown, defaulting to 1000 [ 135.650590][ T7837] __nla_validate_parse: 72 callbacks suppressed [ 135.650611][ T7837] netlink: 9 bytes leftover after parsing attributes in process `syz.1.538'. [ 135.770576][ T7835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'. [ 135.798749][ T7837] gretap0: entered promiscuous mode [ 135.815906][ T7840] tipc: Cannot configure node identity twice [ 136.174940][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 136.252457][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 136.455613][ T7859] openvswitch: netlink: Actions may not be safe on all matching packets [ 136.479456][ T7859] netlink: 508 bytes leftover after parsing attributes in process `syz.0.545'. [ 136.529478][ T7859] netlink: 2300 bytes leftover after parsing attributes in process `syz.0.545'. [ 136.555924][ T7866] netlink: 196 bytes leftover after parsing attributes in process `syz.0.545'. [ 136.584992][ T7859] netlink: 5952 bytes leftover after parsing attributes in process `syz.0.545'. [ 136.674452][ T7859] netlink: 100 bytes leftover after parsing attributes in process `syz.0.545'. [ 136.861246][ T7895] netlink: 'syz.2.553': attribute type 29 has an invalid length. [ 136.894583][ T7895] netlink: 'syz.2.553': attribute type 29 has an invalid length. [ 137.048901][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 137.405042][ T7919] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 137.449811][ T7915] lo speed is unknown, defaulting to 1000 [ 137.712583][ T7941] netlink: 'syz.0.570': attribute type 4 has an invalid length. [ 137.910162][ T7945] netlink: 'syz.1.569': attribute type 1 has an invalid length. [ 137.929439][ T7949] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 138.168032][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.176909][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.287641][ T7974] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 0, id = 0 [ 138.573043][ T7984] netlink: ct family unspecified [ 138.583267][ T7984] openvswitch: netlink: Actions may not be safe on all matching packets [ 138.629508][ T7982] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.016768][ T8008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.124108][ T8012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.169076][ T8008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.359378][ T8026] wg2: entered promiscuous mode [ 139.379755][ T8026] wg2: entered allmulticast mode [ 139.644820][ T8039] netlink: 'syz.4.592': attribute type 4 has an invalid length. [ 140.403683][ T8071] netlink: 'syz.1.604': attribute type 7 has an invalid length. [ 140.427254][ T8071] netlink: 'syz.1.604': attribute type 8 has an invalid length. [ 140.491078][ T8072] ip6gre1: entered allmulticast mode [ 140.529388][ T8071] batadv_slave_1: entered promiscuous mode [ 140.608871][ T8071] batadv_slave_1: left promiscuous mode [ 140.655537][ T8076] __nla_validate_parse: 20 callbacks suppressed [ 140.655557][ T8076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.603'. [ 141.145864][ T8110] netlink: 'syz.2.616': attribute type 4 has an invalid length. [ 141.178932][ T8110] netlink: 'syz.2.616': attribute type 4 has an invalid length. [ 141.207094][ T5873] lo speed is unknown, defaulting to 1000 [ 141.225995][ T5955] lo speed is unknown, defaulting to 1000 [ 141.236674][ T8110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.252175][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 141.261004][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 141.514824][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.618'. [ 141.994813][ T8138] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.624'. [ 142.253121][ T30] audit: type=1800 audit(1758765076.783:2): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.628" name="memory.events" dev="tmpfs" ino=668 res=0 errno=0 [ 143.004352][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.636'. [ 143.050104][ T8191] netlink: 104 bytes leftover after parsing attributes in process `syz.1.639'. [ 143.252936][ T8191] syzkaller0: entered promiscuous mode [ 143.258509][ T8191] syzkaller0: entered allmulticast mode [ 143.619041][ T8210] netlink: 72 bytes leftover after parsing attributes in process `syz.4.644'. [ 143.640257][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.645'. [ 143.717071][ T8219] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 143.827829][ T8225] netlink: 'syz.1.647': attribute type 83 has an invalid length. [ 143.866675][ T8225] netlink: 788 bytes leftover after parsing attributes in process `syz.1.647'. [ 144.996207][ T8260] syzkaller1: entered promiscuous mode [ 145.010472][ T8260] syzkaller1: entered allmulticast mode [ 145.232878][ T8277] xt_HMARK: proto mask must be zero with L3 mode [ 145.696839][ T8303] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.704495][ T8303] IPv6: NLM_F_CREATE should be set when creating new route [ 146.007997][ T8315] batadv_slave_0: entered promiscuous mode [ 146.018622][ T8315] batadv_slave_0: entered allmulticast mode [ 146.123051][ T8323] __nla_validate_parse: 3 callbacks suppressed [ 146.123072][ T8323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.673'. [ 146.142979][ T8326] netlink: 212264 bytes leftover after parsing attributes in process `syz.3.673'. [ 146.192723][ T8325] netlink: 40 bytes leftover after parsing attributes in process `syz.1.670'. [ 146.977165][ T8353] lo speed is unknown, defaulting to 1000 [ 147.198417][ T8370] netlink: 256 bytes leftover after parsing attributes in process `syz.4.683'. [ 147.967903][ T8411] netlink: 'syz.1.692': attribute type 13 has an invalid length. [ 148.006778][ T8411] netlink: 'syz.1.692': attribute type 58 has an invalid length. [ 148.062356][ T8411] netlink: 152 bytes leftover after parsing attributes in process `syz.1.692'. [ 148.117867][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 148.214335][ T8426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.692'. [ 148.415634][ T8434] tipc: Enabled bearer , priority 0 [ 148.424830][ T8434] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 148.433387][ T8434] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 148.456584][ T8434] tipc: Resetting bearer [ 148.548873][ T8436] netlink: 'syz.3.700': attribute type 13 has an invalid length. [ 148.589062][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 148.671094][ T8436] netlink: 'syz.3.700': attribute type 13 has an invalid length. [ 148.679075][ T8438] syzkaller0: refused to change device tx_queue_len [ 148.681682][ T3548] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.731663][ T3006] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.743747][ T8442] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 148.769330][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 148.779198][ T8445] netlink: 'syz.1.702': attribute type 3 has an invalid length. [ 148.779223][ T8445] netlink: 766 bytes leftover after parsing attributes in process `syz.1.702'. [ 148.986113][ T3006] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.071696][ T8442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.119117][ T8444] bond2: (slave geneve2): making interface the new active one [ 149.185378][ T8444] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 149.280036][ T8460] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 149.288184][ T8460] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 149.357919][ T3006] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.220366][ T8499] xt_socket: unknown flags 0xd0 [ 150.240569][ T8500] netlink: 'syz.4.717': attribute type 1 has an invalid length. [ 150.344668][ T8501] veth5: entered promiscuous mode [ 150.364798][ T8501] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 150.441969][ T8504] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 151.082018][ T8540] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyڇv[DwzR3p(@O>PʡRaGͽ' [ 151.110971][ T8540] CPU: 0 UID: 0 PID: 8540 Comm: syz.2.731 Not tainted syzkaller #0 PREEMPT(full) [ 151.111000][ T8540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.111012][ T8540] Call Trace: [ 151.111021][ T8540] [ 151.111030][ T8540] dump_stack_lvl+0x189/0x250 [ 151.111073][ T8540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.111098][ T8540] ? __pfx__printk+0x10/0x10 [ 151.111135][ T8540] ? kernfs_path_from_node+0x2f/0x290 [ 151.111158][ T8540] ? kernfs_path_from_node+0x250/0x290 [ 151.111179][ T8540] ? kernfs_path_from_node+0x2f/0x290 [ 151.111207][ T8540] sysfs_warn_dup+0x8e/0xa0 [ 151.111230][ T8540] sysfs_do_create_link_sd+0xc0/0x110 [ 151.111261][ T8540] device_add_class_symlinks+0x1cf/0x240 [ 151.111291][ T8540] device_add+0x475/0xb50 [ 151.111320][ T8540] wiphy_register+0x1ba6/0x28d0 [ 151.111371][ T8540] ? __pfx_wiphy_register+0x10/0x10 [ 151.111392][ T8540] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 151.111429][ T8540] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 151.111460][ T8540] ieee80211_register_hw+0x3484/0x4100 [ 151.111504][ T8540] ? ieee80211_register_hw+0x1421/0x4100 [ 151.111544][ T8540] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 151.111576][ T8540] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 151.111618][ T8540] ? __hrtimer_setup+0x187/0x210 [ 151.111644][ T8540] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 151.111668][ T8540] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 151.111736][ T8540] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 151.111765][ T8540] ? trace_kmalloc+0x1f/0xd0 [ 151.111790][ T8540] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 151.111819][ T8540] ? kstrndup+0xbf/0x160 [ 151.111853][ T8540] hwsim_new_radio_nl+0xea4/0x1b10 [ 151.111887][ T8540] ? __pfx___nla_validate_parse+0x10/0x10 [ 151.111927][ T8540] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 151.111974][ T8540] ? __nla_parse+0x40/0x60 [ 151.112000][ T8540] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 151.112040][ T8540] genl_family_rcv_msg_doit+0x212/0x300 [ 151.112079][ T8540] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 151.112124][ T8540] ? bpf_lsm_capable+0x9/0x20 [ 151.112151][ T8540] ? security_capable+0x7e/0x2e0 [ 151.112191][ T8540] genl_rcv_msg+0x60e/0x790 [ 151.112227][ T8540] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.112254][ T8540] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 151.112302][ T8540] netlink_rcv_skb+0x208/0x470 [ 151.112322][ T8540] ? __lock_acquire+0xab9/0xd20 [ 151.112359][ T8540] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.112389][ T8540] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.112435][ T8540] ? down_read+0x1ad/0x2e0 [ 151.112463][ T8540] genl_rcv+0x28/0x40 [ 151.112488][ T8540] netlink_unicast+0x82f/0x9e0 [ 151.112531][ T8540] ? __pfx_netlink_unicast+0x10/0x10 [ 151.112566][ T8540] ? netlink_sendmsg+0x642/0xb30 [ 151.112586][ T8540] ? skb_put+0x11b/0x210 [ 151.112615][ T8540] netlink_sendmsg+0x805/0xb30 [ 151.112649][ T8540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.112676][ T8540] ? aa_sock_msg_perm+0xf1/0x1d0 [ 151.112700][ T8540] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 151.112722][ T8540] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.112745][ T8540] __sock_sendmsg+0x219/0x270 [ 151.112779][ T8540] ____sys_sendmsg+0x505/0x830 [ 151.112812][ T8540] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.112850][ T8540] ? import_iovec+0x74/0xa0 [ 151.112882][ T8540] ___sys_sendmsg+0x21f/0x2a0 [ 151.112912][ T8540] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.112983][ T8540] ? __fget_files+0x2a/0x420 [ 151.113001][ T8540] ? __fget_files+0x3a0/0x420 [ 151.113032][ T8540] __x64_sys_sendmsg+0x19b/0x260 [ 151.113060][ T8540] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.113098][ T8540] ? rcu_is_watching+0x15/0xb0 [ 151.113125][ T8540] ? do_syscall_64+0xbe/0x3b0 [ 151.113153][ T8540] do_syscall_64+0xfa/0x3b0 [ 151.113174][ T8540] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.113195][ T8540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.113215][ T8540] ? clear_bhb_loop+0x60/0xb0 [ 151.113241][ T8540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.113260][ T8540] RIP: 0033:0x7fec4c78eec9 [ 151.113291][ T8540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.113307][ T8540] RSP: 002b:00007fec4a9ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.113333][ T8540] RAX: ffffffffffffffda RBX: 00007fec4c9e5fa0 RCX: 00007fec4c78eec9 [ 151.113347][ T8540] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 151.113365][ T8540] RBP: 00007fec4c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 151.113377][ T8540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.113388][ T8540] R13: 00007fec4c9e6038 R14: 00007fec4c9e5fa0 R15: 00007ffeb6498108 [ 151.113423][ T8540] [ 151.580448][ T8547] __nla_validate_parse: 8 callbacks suppressed [ 151.580469][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.733'. [ 151.596599][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.733'. [ 151.785890][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 151.877447][ T8554] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 151.915084][ T8558] netlink: 'syz.2.735': attribute type 1 has an invalid length. [ 151.926508][ T8556] tipc: Started in network mode [ 151.931595][ T8556] tipc: Node identity c620888b0ac5, cluster identity 4711 [ 151.939069][ T8556] tipc: Enabled bearer , priority 0 [ 151.947368][ T8556] syzkaller0: entered promiscuous mode [ 151.953859][ T8556] syzkaller0: entered allmulticast mode [ 152.070121][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'. [ 152.148429][ T8561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.160524][ T8568] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 152.241187][ T8556] tipc: Resetting bearer [ 152.292534][ T8555] tipc: Resetting bearer [ 152.364605][ T8555] tipc: Disabling bearer [ 152.798648][ T8594] lo speed is unknown, defaulting to 1000 [ 152.812575][ T8599] netlink: 48 bytes leftover after parsing attributes in process `syz.3.748'. [ 152.878996][ T8608] netlink: 56 bytes leftover after parsing attributes in process `syz.0.750'. [ 152.979747][ T8598] lo speed is unknown, defaulting to 1000 [ 153.009706][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.4.751'. [ 153.040568][ T8611] openvswitch: netlink: Flow actions attr not present in new flow. [ 153.506782][ T8636] openvswitch: netlink: Actions may not be safe on all matching packets [ 153.829844][ T8644] tipc: Enabling of bearer rejected, failed to enable media [ 154.792912][ T8680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'. [ 155.179844][ T8694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.775'. [ 155.219828][ T8694] : entered promiscuous mode [ 155.528939][ T8709] RDS: rds_bind could not find a transport for fe80::12, load rds_tcp or rds_rdma? [ 155.804490][ T8719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.782'. [ 155.969360][ T8719] validate_nla: 1 callbacks suppressed [ 155.969379][ T8719] netlink: 'syz.0.782': attribute type 2 has an invalid length. [ 155.996307][ T8726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.004464][ T8726] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.192952][ T8729] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.205434][ T8729] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 156.262338][ T8729] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.268314][ T8729] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 156.361223][ T8729] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.367241][ T8729] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 156.420374][ T8729] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.432634][ T8729] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 156.468878][ T8729] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.476247][ T8745] netlink: 'syz.3.788': attribute type 11 has an invalid length. [ 156.481164][ T8729] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 156.497332][ T8745] netlink: 'syz.3.788': attribute type 11 has an invalid length. [ 156.830717][ T8763] gretap0: left promiscuous mode [ 156.976384][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.283003][ T8763] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 157.392964][ T8729] tipc: Resetting bearer [ 157.570424][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.594741][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.638896][ T8797] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 157.755188][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.774068][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.898818][ T8802] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 158.157953][ T8816] __nla_validate_parse: 3 callbacks suppressed [ 158.157972][ T8816] netlink: 108 bytes leftover after parsing attributes in process `syz.3.802'. [ 158.183658][ T8802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.253944][ T8816] netlink: 108 bytes leftover after parsing attributes in process `syz.3.802'. [ 158.290227][ T8813] IPVS: Error joining to the multicast group [ 158.441122][ T8824] sock: sock_set_timeout: `syz.1.804' (pid 8824) tries to set negative timeout [ 158.491101][ T8826] IPVS: length: 8 != 1152 [ 158.531741][ T8826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.805'. [ 158.884372][ T8836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.935117][ T8836] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.984825][ T8843] netlink: 'syz.4.811': attribute type 21 has an invalid length. [ 159.000815][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 159.045940][ T8843] netlink: 'syz.4.811': attribute type 21 has an invalid length. [ 159.052579][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 159.062726][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.811'. [ 159.095107][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 159.156858][ T8836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.187622][ T8836] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.389470][ T8836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.445601][ T8836] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.484101][ T8865] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 159.703340][ T8836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.723154][ T8836] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.757693][ T8881] netlink: 'syz.1.824': attribute type 8 has an invalid length. [ 159.795978][ T30] audit: type=1800 audit(1758765094.333:3): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.825" name="memory.events" dev="tmpfs" ino=868 res=0 errno=0 [ 160.046565][ T8891] netlink: 'syz.0.827': attribute type 33 has an invalid length. [ 160.157600][ T8900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.829'. [ 160.187439][ T8901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.829'. [ 160.211338][ T2974] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.219669][ T2974] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.271562][ T2974] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.279810][ T2974] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.299128][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.830'. [ 160.390677][ T8905] netlink: 'syz.1.830': attribute type 25 has an invalid length. [ 160.431846][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.463085][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.531950][ T2974] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.564857][ T2974] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.959065][ T8932] syzkaller1: entered promiscuous mode [ 160.971885][ T8932] syzkaller1: entered allmulticast mode [ 161.482082][ T8962] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 161.917645][ T8978] syz_tun: entered allmulticast mode [ 162.005550][ T8977] syz_tun: left allmulticast mode [ 162.334353][ T8983] delete_channel: no stack [ 162.445691][ T8991] sch_fq: defrate 0 ignored. [ 162.701577][ T9003] macvtap1: entered promiscuous mode [ 162.722960][ T9003] macvtap1: entered allmulticast mode [ 162.763003][ T9003] bond0: entered allmulticast mode [ 162.790432][ T9003] bond_slave_0: entered allmulticast mode [ 162.809705][ T9003] bond_slave_1: entered allmulticast mode [ 162.848009][ T9003] bond0: entered promiscuous mode [ 162.864349][ T9003] bond_slave_0: entered promiscuous mode [ 162.870413][ T9003] bond_slave_1: entered promiscuous mode [ 162.881241][ T9003] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 162.893082][ T9003] team0: Device macvtap1 failed to register rx_handler [ 162.901023][ T9003] bond0: left allmulticast mode [ 162.909275][ T9003] bond_slave_0: left allmulticast mode [ 162.914976][ T9003] bond_slave_1: left allmulticast mode [ 162.920791][ T9003] bond0: left promiscuous mode [ 162.929306][ T9003] bond_slave_0: left promiscuous mode [ 162.935155][ T9003] bond_slave_1: left promiscuous mode [ 163.131421][ T9018] openvswitch: netlink: Flow actions attr not present in new flow. [ 163.132215][ T9019] netlink: 'syz.2.866': attribute type 4 has an invalid length. [ 163.404672][ T9036] __nla_validate_parse: 8 callbacks suppressed [ 163.404692][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 163.896286][ T9058] macvlan0: entered promiscuous mode [ 163.907800][ T9058] batadv0: entered promiscuous mode [ 163.915288][ T9058] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 163.929726][ T9058] hsr1: entered allmulticast mode [ 163.936501][ T9058] macvlan0: entered allmulticast mode [ 163.946030][ T9058] batadv0: entered allmulticast mode [ 163.958186][ T9058] macvlan0: left promiscuous mode [ 163.967846][ T9058] batadv0: left promiscuous mode [ 163.989659][ T9059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.880'. [ 164.006100][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 164.017997][ T9061] tipc: Started in network mode [ 164.023095][ T9061] tipc: Node identity c2f17d88122, cluster identity 4711 [ 164.030477][ T9061] tipc: Enabled bearer , priority 0 [ 164.052372][ T9061] syzkaller0: entered promiscuous mode [ 164.058093][ T9061] syzkaller0: entered allmulticast mode [ 164.067573][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 164.092307][ T9061] tipc: Resetting bearer [ 164.132181][ T9060] tipc: Resetting bearer [ 164.198499][ T9060] tipc: Disabling bearer [ 164.685072][ T9087] netlink: 40 bytes leftover after parsing attributes in process `syz.3.888'. [ 164.715261][ T9087] netlink: 'syz.3.888': attribute type 21 has an invalid length. [ 164.754479][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'. [ 164.757137][ T9087] netlink: 'syz.3.888': attribute type 22 has an invalid length. [ 164.791433][ T9091] openvswitch: netlink: Flow actions attr not present in new flow. [ 164.804739][ T9087] netlink: 'syz.3.888': attribute type 23 has an invalid length. [ 164.826588][ T9087] netlink: 'syz.3.888': attribute type 25 has an invalid length. [ 164.840304][ T9087] netlink: 'syz.3.888': attribute type 26 has an invalid length. [ 164.848641][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.888'. [ 164.877730][ T9096] ieee802154 phy0 wpan0: encryption failed: -22 [ 164.894358][ T9096] netlink: 'syz.1.891': attribute type 4 has an invalid length. [ 164.957057][ T9098] netlink: 'syz.1.891': attribute type 4 has an invalid length. [ 164.997379][ T9103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.094583][ T9107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.161139][ T9106] netlink: 'syz.3.894': attribute type 8 has an invalid length. [ 165.401812][ T9122] FAULT_INJECTION: forcing a failure. [ 165.401812][ T9122] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 165.475747][ T9125] lo speed is unknown, defaulting to 1000 [ 165.481817][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: syz.2.899 Not tainted syzkaller #0 PREEMPT(full) [ 165.481843][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.481856][ T9122] Call Trace: [ 165.481864][ T9122] [ 165.481873][ T9122] dump_stack_lvl+0x189/0x250 [ 165.481904][ T9122] ? __pfx____ratelimit+0x10/0x10 [ 165.481926][ T9122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.481951][ T9122] ? __pfx__printk+0x10/0x10 [ 165.481979][ T9122] ? __might_fault+0xb0/0x130 [ 165.482018][ T9122] should_fail_ex+0x414/0x560 [ 165.482089][ T9122] _copy_from_user+0x2d/0xb0 [ 165.482118][ T9122] ___sys_sendmsg+0x158/0x2a0 [ 165.482146][ T9122] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.482207][ T9122] ? __fget_files+0x2a/0x420 [ 165.482225][ T9122] ? __fget_files+0x3a0/0x420 [ 165.482255][ T9122] __x64_sys_sendmsg+0x19b/0x260 [ 165.482284][ T9122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 165.482321][ T9122] ? __pfx_ksys_write+0x10/0x10 [ 165.482346][ T9122] ? rcu_is_watching+0x15/0xb0 [ 165.482372][ T9122] ? do_syscall_64+0xbe/0x3b0 [ 165.482400][ T9122] do_syscall_64+0xfa/0x3b0 [ 165.482421][ T9122] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.482441][ T9122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.482461][ T9122] ? clear_bhb_loop+0x60/0xb0 [ 165.482486][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.482506][ T9122] RIP: 0033:0x7fec4c78eec9 [ 165.482523][ T9122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.482539][ T9122] RSP: 002b:00007fec4a9ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.482561][ T9122] RAX: ffffffffffffffda RBX: 00007fec4c9e5fa0 RCX: 00007fec4c78eec9 [ 165.482575][ T9122] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000004 [ 165.482587][ T9122] RBP: 00007fec4a9ee090 R08: 0000000000000000 R09: 0000000000000000 [ 165.482598][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.482609][ T9122] R13: 00007fec4c9e6038 R14: 00007fec4c9e5fa0 R15: 00007ffeb6498108 [ 165.482642][ T9122] [ 165.790198][ T9130] vlan2: entered allmulticast mode [ 165.802490][ T9130] bond0: entered allmulticast mode [ 165.807757][ T9130] bond_slave_0: entered allmulticast mode [ 165.813995][ T9130] bond_slave_1: entered allmulticast mode [ 166.158237][ T9147] dvmrp0: entered allmulticast mode [ 167.070478][ T9180] IPVS: persistence engine module ip_vs_pe_ not found [ 167.287161][ T9202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.923'. [ 167.426265][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 167.442015][ T9214] unsupported nlmsg_type 40 [ 167.467743][ T9210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.925'. [ 167.911193][ T9243] syz.2.937: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 167.953977][ T9243] CPU: 0 UID: 0 PID: 9243 Comm: syz.2.937 Not tainted syzkaller #0 PREEMPT(full) [ 167.954005][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 167.954018][ T9243] Call Trace: [ 167.954026][ T9243] [ 167.954035][ T9243] dump_stack_lvl+0x189/0x250 [ 167.954074][ T9243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.954100][ T9243] ? __pfx__printk+0x10/0x10 [ 167.954137][ T9243] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 167.954163][ T9243] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 167.954189][ T9243] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 167.954217][ T9243] warn_alloc+0x214/0x310 [ 167.954255][ T9243] ? __pfx_warn_alloc+0x10/0x10 [ 167.954297][ T9243] ? __get_vm_area_node+0x28f/0x300 [ 167.954327][ T9243] ? xskq_create+0xbf/0x170 [ 167.954352][ T9243] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 167.954417][ T9243] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 167.954455][ T9243] ? __kasan_kmalloc+0x93/0xb0 [ 167.954486][ T9243] vmalloc_user_noprof+0xad/0xf0 [ 167.954517][ T9243] ? xskq_create+0xbf/0x170 [ 167.954538][ T9243] xskq_create+0xbf/0x170 [ 167.954562][ T9243] xsk_init_queue+0xb0/0x110 [ 167.954585][ T9243] xsk_setsockopt+0x57b/0x8d0 [ 167.954620][ T9243] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.954652][ T9243] ? __pfx_aa_sk_perm+0x10/0x10 [ 167.954687][ T9243] ? __fget_files+0x2a/0x420 [ 167.954703][ T9243] ? aa_sock_opt_perm+0xff/0x1b0 [ 167.954728][ T9243] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 167.954749][ T9243] ? __pfx_xsk_setsockopt+0x10/0x10 [ 167.954782][ T9243] do_sock_setsockopt+0x179/0x1b0 [ 167.954813][ T9243] __x64_sys_setsockopt+0x13f/0x1b0 [ 167.954845][ T9243] do_syscall_64+0xfa/0x3b0 [ 167.954867][ T9243] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.954888][ T9243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.954908][ T9243] ? clear_bhb_loop+0x60/0xb0 [ 167.954933][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.954953][ T9243] RIP: 0033:0x7fec4c78eec9 [ 167.954971][ T9243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.954988][ T9243] RSP: 002b:00007fec4a9cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 167.955009][ T9243] RAX: ffffffffffffffda RBX: 00007fec4c9e6090 RCX: 00007fec4c78eec9 [ 167.955023][ T9243] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 167.955034][ T9243] RBP: 00007fec4c811f91 R08: 0000000000000004 R09: 0000000000000000 [ 167.955046][ T9243] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 167.955057][ T9243] R13: 00007fec4c9e6128 R14: 00007fec4c9e6090 R15: 00007ffeb6498108 [ 167.955090][ T9243] [ 167.955234][ T9243] Mem-Info: [ 168.245507][ T9243] active_anon:5171 inactive_anon:0 isolated_anon:0 [ 168.245507][ T9243] active_file:2696 inactive_file:39903 isolated_file:0 [ 168.245507][ T9243] unevictable:768 dirty:77 writeback:0 [ 168.245507][ T9243] slab_reclaimable:10966 slab_unreclaimable:100367 [ 168.245507][ T9243] mapped:29050 shmem:1368 pagetables:1051 [ 168.245507][ T9243] sec_pagetables:0 bounce:0 [ 168.245507][ T9243] kernel_misc_reclaimable:0 [ 168.245507][ T9243] free:1326251 free_pcp:15622 free_cma:0 [ 168.332005][ T9243] Node 0 active_anon:20684kB inactive_anon:0kB active_file:10784kB inactive_file:159412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116200kB dirty:304kB writeback:0kB shmem:3936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12576kB pagetables:3972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.408871][ T9243] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 168.444628][ T9243] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.479250][ T9243] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 168.496759][ T9261] __nla_validate_parse: 3 callbacks suppressed [ 168.496778][ T9261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.941'. [ 168.565136][ T9243] Node 0 DMA32 free:1402344kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20536kB inactive_anon:0kB active_file:10784kB inactive_file:157836kB unevictable:1536kB writepending:304kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:45104kB local_pcp:20852kB free_cma:0kB [ 168.612910][ T9243] lowmem_reserve[]: 0 0 1 1 1 [ 168.618510][ T9243] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 168.678671][ T9243] lowmem_reserve[]: 0 0 0 0 0 [ 168.691388][ T9243] Node 1 Normal free:3886988kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18336kB local_pcp:8224kB free_cma:0kB [ 168.733456][ T9263] netlink: 44 bytes leftover after parsing attributes in process `syz.1.942'. [ 168.733674][ T9243] lowmem_reserve[]: 0 0 0 0 0 [ 168.747652][ T9243] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 168.760629][ T9263] netlink: 43 bytes leftover after parsing attributes in process `syz.1.942'. [ 168.760671][ T9263] netlink: 'syz.1.942': attribute type 5 has an invalid length. [ 168.760701][ T9263] netlink: 43 bytes leftover after parsing attributes in process `syz.1.942'. [ 168.787416][ T9270] tipc: Enabling of bearer rejected, failed to enable media [ 168.830145][ T9243] Node 0 DMA32: 659*4kB (ME) 489*8kB (UME) 433*16kB (UME) 497*32kB (UME) 103*64kB (UME) 37*128kB (UME) 12*256kB (UM) 3*512kB (M) 5*1024kB (UM) 6*2048kB (UME) 327*4096kB (M) = 1402116kB [ 168.862010][ T9243] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 168.892580][ T9243] Node 1 Normal: 201*4kB (UME) 55*8kB (UME) 43*16kB (UME) 92*32kB (UME) 26*64kB (UME) 6*128kB (UME) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 946*4096kB (M) = 3886988kB [ 168.911785][ T9243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.921779][ T9243] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.931220][ T9243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 168.969877][ T9243] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 168.990291][ T9276] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 168.995596][ T9243] 43964 total pagecache pages [ 169.004567][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.947'. [ 169.012228][ T9243] 0 pages in swap cache [ 169.018742][ T9243] Free swap = 124996kB [ 169.026359][ T9243] Total swap = 124996kB [ 169.030720][ T9243] 2097051 pages RAM [ 169.035751][ T9243] 0 pages HighMem/MovableOnly [ 169.040638][ T9243] 425672 pages reserved [ 169.045603][ T9243] 0 pages cma reserved [ 169.181093][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 169.272377][ T9274] syzkaller0: entered promiscuous mode [ 169.277986][ T9274] syzkaller0: entered allmulticast mode [ 169.363723][ T9287] netlink: 'syz.3.951': attribute type 1 has an invalid length. [ 169.431964][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 169.518736][ T9287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.566756][ T9301] pim6reg: entered allmulticast mode [ 169.893405][ T9317] netlink: 'syz.3.959': attribute type 1 has an invalid length. [ 170.525235][ T9342] netlink: 32 bytes leftover after parsing attributes in process `syz.3.961'. [ 171.764718][ T9347] netlink: 156 bytes leftover after parsing attributes in process `syz.0.963'. [ 171.793878][ T9347] openvswitch: netlink: Tunnel attr 9748 out of range max 16 [ 171.968292][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 172.197536][ T9371] ksmbd: Unknown IPC event: 3, ignore. [ 172.425575][ T9379] vlan2: entered promiscuous mode [ 172.460661][ T9379] bridge0: entered promiscuous mode [ 172.523616][ T9389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.635003][ T9393] sctp: [Deprecated]: syz.1.980 (pid 9393) Use of int in maxseg socket option. [ 172.635003][ T9393] Use struct sctp_assoc_value instead [ 172.678431][ T9400] syzkaller0: mtu less than device minimum [ 172.899165][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.907061][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.058625][ T9403] bridge_slave_0: left allmulticast mode [ 173.064636][ T9403] bridge_slave_0: left promiscuous mode [ 173.070529][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.109583][ T9403] bridge_slave_1: left allmulticast mode [ 173.115664][ T9403] bridge_slave_1: left promiscuous mode [ 173.121622][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.158146][ T9403] bond0: (slave bond_slave_0): Releasing backup interface [ 173.167237][ T9403] bond_slave_0: left allmulticast mode [ 173.183514][ T9403] bond0: (slave bond_slave_1): Releasing backup interface [ 173.199326][ T9403] bond_slave_1: left allmulticast mode [ 173.234144][ T9403] team0: Port device team_slave_0 removed [ 173.275200][ T9403] team0: Port device team_slave_1 removed [ 173.293813][ T9403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.319652][ T9403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.354882][ T9403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.388168][ T9403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.449304][ T9403] veth1_virt_wifi: left promiscuous mode [ 173.468586][ T9403] veth1_virt_wifi: left allmulticast mode [ 173.627621][ T9403] vlan2: left allmulticast mode [ 173.634408][ T9403] bond0: left allmulticast mode [ 173.654134][ T9416] netlink: 'syz.0.987': attribute type 4 has an invalid length. [ 173.683433][ T9433] __nla_validate_parse: 7 callbacks suppressed [ 173.683455][ T9433] netlink: 40 bytes leftover after parsing attributes in process `syz.4.991'. [ 173.725235][ T9430] netlink: 'syz.4.991': attribute type 2 has an invalid length. [ 173.729529][ T36] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.788500][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.843848][ T37] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.894283][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.928011][ T37] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.962446][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.004247][ T37] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.026247][ T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.105890][ T9445] netlink: 64 bytes leftover after parsing attributes in process `syz.1.996'. [ 174.381804][ T9456] sock: sock_set_timeout: `syz.0.1000' (pid 9456) tries to set negative timeout [ 174.453797][ T9464] netlink: 36 bytes leftover after parsing attributes in process `syz.1.999'. [ 174.663387][ T9471] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1003'. [ 174.691208][ T9471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 174.857271][ T9476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1004'. [ 174.890368][ T9476] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 175.649909][ T9495] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 175.656749][ T9494] netlink: 'syz.1.1011': attribute type 10 has an invalid length. [ 175.752960][ T9494] team0: Device hsr_slave_0 failed to register rx_handler [ 175.825794][ T9495] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 175.891402][ T2974] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 175.892896][ T9500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.068810][ T37] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 176.445989][ T9498] Illegal XDP return value 4294967274 on prog (id 287) dev N/A, expect packet loss! [ 176.700901][ T9515] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1017'. [ 177.039573][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'. [ 177.137812][ T9520] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 177.187502][ T9520] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 177.239665][ T9526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1019'. [ 178.803558][ T9526] macvlan3: entered promiscuous mode [ 178.818774][ T9526] macvlan3: entered allmulticast mode [ 178.838486][ T9534] netlink: 'syz.3.1022': attribute type 4 has an invalid length. [ 178.954696][ T9541] bridge_slave_0: left allmulticast mode [ 178.961088][ T9541] bridge_slave_0: left promiscuous mode [ 178.969020][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.990797][ T9541] bridge_slave_1: left allmulticast mode [ 178.996969][ T9541] bridge_slave_1: left promiscuous mode [ 179.004264][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.016790][ T9541] bond0: (slave bond_slave_0): Releasing backup interface [ 179.028026][ T9541] bond0: (slave bond_slave_1): Releasing backup interface [ 179.043562][ T9541] team0: Port device team_slave_0 removed [ 179.057462][ T9541] team0: Port device team_slave_1 removed [ 179.075404][ T9541] bond1: (slave bond2): Releasing backup interface [ 179.084907][ T9541] bond1: (slave bond2): the permanent HWaddr of slave - 8a:d5:37:7e:70:e0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 179.102423][ T9541] bond1: (slave gretap1): making interface the new active one [ 179.119184][ T9541] bond1: (slave gretap1): Releasing backup interface [ 179.140799][ T9541] bond4: (slave veth5): Releasing backup interface [ 179.157014][ T9541] bond5: (slave ip6gretap1): Removing an active aggregator [ 179.166652][ T9541] bond5: (slave ip6gretap1): Releasing backup interface [ 179.199943][ T9543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 179.227039][ T9541] syz.4.1025 (9541) used greatest stack depth: 17448 bytes left [ 179.240223][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 179.309432][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'. [ 179.623560][ T9570] netlink: 'syz.0.1031': attribute type 9 has an invalid length. [ 179.634009][ T9571] openvswitch: netlink: Message has 4 unknown bytes. [ 179.641054][ T9567] 8021q: VLANs not supported on gre0 [ 179.666295][ T9570] wg2: entered allmulticast mode [ 179.970530][ T9586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1036'. [ 180.047660][ T9589] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1038'. [ 180.154935][ T9574] syzkaller0: entered promiscuous mode [ 180.160487][ T9574] syzkaller0: entered allmulticast mode [ 180.237478][ T9600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1042'. [ 180.250313][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1042'. [ 180.313872][ T9604] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 181.544938][ T9600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1042'. [ 181.790322][ T9618] tipc: Enabling of bearer rejected, failed to enable media [ 182.009385][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1050'. [ 182.037629][ T9629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.077164][ T9633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1054'. [ 182.555917][ T9658] nftables ruleset with unbound chain [ 182.702674][ T9666] lo: entered promiscuous mode [ 182.723735][ T9666] netlink: 'syz.4.1063': attribute type 2 has an invalid length. [ 182.791362][ T9666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.330702][ T9699] lo speed is unknown, defaulting to 1000 [ 183.508075][ T9711] IPVS: ip_vs_add_dest(): server weight less than zero [ 184.072308][ T9737] netlink: 'syz.4.1084': attribute type 1 has an invalid length. [ 184.192947][ T9737] bond6: entered promiscuous mode [ 184.223873][ T9737] 8021q: adding VLAN 0 to HW filter on device bond6 [ 184.334910][ T9739] macvtap1: entered promiscuous mode [ 184.349755][ T9739] macvtap1: entered allmulticast mode [ 184.367405][ T9739] bond0: entered allmulticast mode [ 184.377966][ T9739] bond_slave_0: entered allmulticast mode [ 184.384428][ T9739] bond_slave_1: entered allmulticast mode [ 184.390279][ T9739] bond0: entered promiscuous mode [ 184.395383][ T9739] bond_slave_0: entered promiscuous mode [ 184.401497][ T9739] bond_slave_1: entered promiscuous mode [ 184.414978][ T9739] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 184.426693][ T9739] team0: Device macvtap1 failed to register rx_handler [ 184.435794][ T9739] bond0: left allmulticast mode [ 184.440782][ T9739] bond_slave_0: left allmulticast mode [ 184.446446][ T9739] bond_slave_1: left allmulticast mode [ 184.452137][ T9739] bond0: left promiscuous mode [ 184.463725][ T9739] bond_slave_0: left promiscuous mode [ 184.485133][ T9739] bond_slave_1: left promiscuous mode [ 184.567299][ T9749] __nla_validate_parse: 5 callbacks suppressed [ 184.567321][ T9749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1087'. [ 184.615396][ T9744] bond6: (slave bridge6): making interface the new active one [ 184.627914][ T9744] bridge6: entered promiscuous mode [ 184.640521][ T9744] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 184.771235][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1090'. [ 184.776338][ T9756] lo speed is unknown, defaulting to 1000 [ 184.781786][ T9768] netlink: 'syz.0.1090': attribute type 1 has an invalid length. [ 184.795407][ T9768] netlink: 'syz.0.1090': attribute type 2 has an invalid length. [ 185.021682][ T9774] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20004 [ 185.252712][ T9790] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1098'. [ 185.452790][ T9799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1097'. [ 185.817240][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1105'. [ 185.842870][ T9821] netlink: 'syz.2.1105': attribute type 6 has an invalid length. [ 186.368201][ T9837] lo speed is unknown, defaulting to 1000 [ 186.484891][ T9851] netlink: 'syz.3.1116': attribute type 1 has an invalid length. [ 186.494752][ T9851] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1116'. [ 186.508771][ T9849] netlink: 'syz.4.1115': attribute type 3 has an invalid length. [ 186.561737][ T9853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.573622][ T9853] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.696354][ T9853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.711611][ T9853] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.885559][ T9853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 186.898062][ T9853] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.966946][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1121'. [ 187.036814][ T9853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.048923][ T9853] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.119550][ T9874] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 187.175107][ T9874] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1123'. [ 187.422725][ T9886] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1126'. [ 187.445404][ T9886] !: renamed from dummy0 (while UP) [ 187.585632][ T2974] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.621759][ T2974] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.648661][ T9894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1130'. [ 187.714171][ T9892] : renamed from vlan0 [ 187.731202][ T2974] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.740343][ T2974] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.790266][ T2974] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.819844][ T2974] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.890476][ T2974] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.899140][ T2974] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.945614][ T9906] netlink: 'syz.2.1132': attribute type 13 has an invalid length. [ 188.023434][ T9905] bridge_slave_1 (unregistering): left allmulticast mode [ 188.040923][ T9905] bridge_slave_1 (unregistering): left promiscuous mode [ 188.059799][ T9905] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.697177][ T9942] netlink: 'syz.0.1144': attribute type 1 has an invalid length. [ 188.897636][ T9950] netlink: 'syz.2.1148': attribute type 10 has an invalid length. [ 188.970399][ T9950] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.010451][ T9950] bond0: (slave team0): Enslaving as an active interface with an up link [ 189.046136][ T9956] tipc: Enabled bearer , priority 0 [ 189.075607][ T9956] syzkaller0: entered promiscuous mode [ 189.081145][ T9956] syzkaller0: entered allmulticast mode [ 189.105347][ T9956] tipc: Resetting bearer [ 189.126110][ T9954] tipc: Resetting bearer [ 189.236211][ T9954] tipc: Disabling bearer [ 189.279790][ T9960] netlink: 'syz.2.1153': attribute type 50 has an invalid length. [ 189.473069][ T9967] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 189.730110][ T9984] __nla_validate_parse: 9 callbacks suppressed [ 189.730132][ T9984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1162'. [ 190.371134][T10017] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 190.400323][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 190.413670][T10016] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 190.616228][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1175'. [ 190.768345][T10032] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1177'. [ 190.770644][T10028] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 190.790788][T10028] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 190.808996][T10038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1178'. [ 191.037793][T10046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 191.126815][T10050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 191.243048][T10056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 191.311940][T10056] sctp: [Deprecated]: syz.1.1184 (pid 10056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.311940][T10056] Use struct sctp_sack_info instead [ 191.365074][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 191.375069][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1186'. [ 191.896810][T10089] tap0: tun_chr_ioctl cmd 1074025678 [ 191.918072][T10089] tap0: group set to 0 [ 191.937624][T10090] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 191.968032][T10092] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 192.414683][T10117] bridge0: port 1(syz_tun) entered blocking state [ 192.442561][T10117] bridge0: port 1(syz_tun) entered disabled state [ 192.479134][T10119] netlink: 'syz.3.1203': attribute type 10 has an invalid length. [ 192.500931][T10117] syz_tun: entered allmulticast mode [ 192.510966][T10117] syz_tun: entered promiscuous mode [ 192.564462][T10119] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 193.853942][T10188] tipc: Started in network mode [ 193.859012][T10188] tipc: Node identity 56e5a974e542, cluster identity 4711 [ 193.870894][T10188] tipc: Enabled bearer , priority 0 [ 193.880749][T10188] syzkaller0: entered promiscuous mode [ 193.892617][T10188] syzkaller0: entered allmulticast mode [ 193.987585][T10194] netlink: 'syz.2.1227': attribute type 1 has an invalid length. [ 194.037122][T10188] tipc: Resetting bearer [ 194.051100][T10188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.059945][T10188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.182226][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.197383][T10205] openvswitch: netlink: Multiple metadata blocks provided [ 194.241807][T10186] tipc: Resetting bearer [ 194.274550][T10186] tipc: Disabling bearer [ 199.605011][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.612137][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.976950][T10235] __nla_validate_parse: 13 callbacks suppressed [ 212.976971][T10235] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1234'. [ 213.068402][T10241] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1240'. [ 213.171092][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1241'. [ 213.303297][T10248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.689263][T10268] openvswitch: netlink: IP tunnel dst address not specified [ 213.884419][T10277] team_slave_1: entered promiscuous mode [ 213.900043][T10277] team_slave_1: entered allmulticast mode [ 213.956813][T10280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1252'. [ 214.555694][T10313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 214.760464][T10320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.454105][T10345] syzkaller1: entered promiscuous mode [ 215.473845][T10345] syzkaller1: entered allmulticast mode [ 215.657796][T10351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1271'. [ 215.668571][T10351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1271'. [ 215.694570][T10352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1272'. [ 215.732375][T10352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1272'. [ 216.000520][T10367] netlink: 'syz.1.1275': attribute type 1 has an invalid length. [ 216.039261][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1275'. [ 216.348974][T10386] team_slave_0: entered allmulticast mode [ 216.536470][T10394] IPVS: Error connecting to the multicast addr [ 216.627811][T10398] macsec1: entered promiscuous mode [ 216.633423][T10398] macsec1: entered allmulticast mode [ 216.638829][T10398] bridge0: entered allmulticast mode [ 216.647102][T10398] bridge0: port 3(macsec1) entered blocking state [ 216.656321][T10398] bridge0: port 3(macsec1) entered disabled state [ 216.683340][T10398] bridge0: left allmulticast mode [ 216.896851][T10414] netlink: 'syz.3.1288': attribute type 83 has an invalid length. [ 217.358512][T10425] tipc: Enabled bearer , priority 0 [ 217.402502][T10425] syzkaller0: entered promiscuous mode [ 217.425245][T10425] syzkaller0: entered allmulticast mode [ 217.461625][T10425] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 217.568115][T10425] tipc: Resetting bearer [ 217.616406][T10425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.655631][T10424] tipc: Resetting bearer [ 217.696750][T10424] tipc: Disabling bearer [ 218.005408][T10461] netlink: 'syz.2.1302': attribute type 1 has an invalid length. [ 218.033591][T10463] netlink: 'syz.4.1303': attribute type 21 has an invalid length. [ 218.092769][T10471] netlink: 'syz.4.1303': attribute type 21 has an invalid length. [ 218.227504][T10461] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.288930][T10474] vlan3: entered promiscuous mode [ 218.303129][T10474] bond3: entered promiscuous mode [ 218.308399][T10474] vlan3: entered allmulticast mode [ 218.353600][T10474] bond3: entered allmulticast mode [ 218.354603][T10461] netlink: 'syz.2.1302': attribute type 83 has an invalid length. [ 218.414216][T10480] bond3: (slave gretap1): making interface the new active one [ 218.426483][T10480] gretap1: entered promiscuous mode [ 218.434005][T10480] gretap1: entered allmulticast mode [ 218.444264][T10480] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 218.494168][T10482] geneve2: entered promiscuous mode [ 218.513286][T10482] geneve2: entered allmulticast mode [ 218.753427][T10504] netlink: 'syz.1.1313': attribute type 3 has an invalid length. [ 218.941925][T10511] __nla_validate_parse: 11 callbacks suppressed [ 218.941947][T10511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1315'. [ 219.005571][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1315'. [ 219.052920][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1315'. [ 219.094974][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 219.293945][T10537] netlink: 'syz.0.1322': attribute type 2 has an invalid length. [ 219.326982][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'. [ 219.495256][T10552] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1326'. [ 219.580387][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'. [ 219.768379][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1330'. [ 219.936888][T10578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1333'. [ 220.231050][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'. [ 220.489407][T10600] IPVS: length: 236 != 8 [ 220.534476][T10605] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 220.688151][T10611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.722589][T10611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.913774][T10616] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 221.623522][ T2974] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.727260][ T2974] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.746631][T10669] netlink: 'syz.4.1356': attribute type 29 has an invalid length. [ 221.824299][ T2974] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.851773][ T2974] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.869317][T10658] netlink: 'syz.4.1356': attribute type 29 has an invalid length. [ 222.069216][T10686] tipc: Can't bind to reserved service type 2 [ 222.296240][T10693] netlink: 'syz.3.1367': attribute type 12 has an invalid length. [ 222.558116][T10707] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 223.625492][T10759] netlink: 'syz.2.1383': attribute type 1 has an invalid length. [ 223.702772][T10759] 8021q: adding VLAN 0 to HW filter on device bond4 [ 223.777598][T10763] tipc: Enabled bearer , priority 0 [ 223.786233][T10763] syzkaller0: entered promiscuous mode [ 223.791958][T10763] syzkaller0: entered allmulticast mode [ 223.854699][T10759] veth5: entered promiscuous mode [ 223.862218][T10763] tipc: Resetting bearer [ 223.889376][T10770] netlink: 'syz.0.1390': attribute type 1 has an invalid length. [ 223.949497][T10760] tipc: Resetting bearer [ 223.965348][T10760] tipc: Disabling bearer [ 223.997465][T10770] macvlan2: entered promiscuous mode [ 224.003925][T10770] macvlan2: entered allmulticast mode [ 224.010465][T10770] bond3: entered promiscuous mode [ 224.032231][T10770] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 224.045488][T10770] bond3: left promiscuous mode [ 224.174424][T10778] netlink: 'syz.2.1392': attribute type 29 has an invalid length. [ 224.193425][T10778] __nla_validate_parse: 8 callbacks suppressed [ 224.193445][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 224.242364][T10784] netlink: 'syz.2.1392': attribute type 29 has an invalid length. [ 224.278405][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 224.288829][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 224.329332][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'. [ 224.764397][T10811] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.191159][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1407'. [ 225.206369][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1407'. [ 225.460083][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 225.470199][T10852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 225.482264][T10852] openvswitch: netlink: Missing key (keys=40, expected=100) [ 225.569258][T10856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 225.581077][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'. [ 225.752334][T10863] netlink: 'syz.0.1414': attribute type 1 has an invalid length. [ 226.507625][T10894] netlink: 'syz.2.1428': attribute type 7 has an invalid length. [ 226.599905][T10894] : entered promiscuous mode [ 227.095810][T10930] netlink: 'syz.4.1439': attribute type 29 has an invalid length. [ 227.105773][T10930] netlink: 'syz.4.1439': attribute type 29 has an invalid length. [ 227.234896][T10934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.472951][T10952] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 [ 227.729169][T10963] lo speed is unknown, defaulting to 1000 [ 227.863179][T10974] netlink: 'syz.1.1449': attribute type 1 has an invalid length. [ 228.158224][T10991] netlink: 'syz.0.1455': attribute type 6 has an invalid length. [ 228.166606][T10991] netlink: 'syz.0.1455': attribute type 5 has an invalid length. [ 228.662524][T11016] netlink: 'syz.2.1462': attribute type 1 has an invalid length. [ 228.680972][T11016] netlink: 'syz.2.1462': attribute type 4 has an invalid length. [ 228.683802][T11017] tipc: Enabling of bearer rejected, failed to enable media [ 228.783486][T11017] bridge0: port 3(batadv2) entered blocking state [ 228.790191][T11017] bridge0: port 3(batadv2) entered disabled state [ 228.797754][T11017] batadv2: entered allmulticast mode [ 228.809058][T11017] batadv2: entered promiscuous mode [ 229.116406][T11040] netlink: 'syz.0.1470': attribute type 1 has an invalid length. [ 229.142840][T11040] netlink: 'syz.0.1470': attribute type 2 has an invalid length. [ 229.174847][T11046] netlink: 'syz.0.1470': attribute type 1 has an invalid length. [ 229.282645][ T36] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 229.292670][ T36] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 229.377430][T11053] __nla_validate_parse: 23 callbacks suppressed [ 229.377452][T11053] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1474'. [ 229.394811][T11053] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1474'. [ 229.423502][T11053] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1474'. [ 229.439784][T11053] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1474'. [ 229.723037][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 229.733599][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 229.844788][T11082] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1482'. [ 229.886404][T11083] tipc: Enabled bearer , priority 12 [ 230.038023][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1485'. [ 230.062072][T11090] vlan4: entered allmulticast mode [ 230.067410][T11090] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 230.150247][T11097] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 230.569742][T11120] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1494'. [ 230.722339][T11126] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1497'. [ 230.876341][T11140] tipc: Enabled bearer , priority 0 [ 230.954154][T11140] syzkaller0: entered promiscuous mode [ 230.959686][T11140] syzkaller0: entered allmulticast mode [ 231.002200][ T5941] tipc: Node number set to 4123300839 [ 231.046805][T11140] tipc: Resetting bearer [ 231.081699][T11139] tipc: Resetting bearer [ 231.137346][T11139] tipc: Disabling bearer [ 231.487190][T11181] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 232.287595][T11227] macvtap1: entered promiscuous mode [ 232.293994][T11227] macvtap1: entered allmulticast mode [ 232.299802][T11227] team0: Device macvtap1 is already an upper device of the team interface [ 232.474720][T11242] mac80211_hwsim hwsim4 : renamed from wlan1 [ 232.799039][T11253] validate_nla: 12 callbacks suppressed [ 232.799060][T11253] netlink: 'syz.3.1536': attribute type 4 has an invalid length. [ 233.619588][T11301] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 233.663487][T11301] Unknown options in mask b7f2 [ 234.135868][T11335] tipc: Enabled bearer , priority 0 [ 234.206163][T11341] syzkaller0: entered promiscuous mode [ 234.231349][T11341] syzkaller0: entered allmulticast mode [ 234.276613][T11341] tipc: Resetting bearer [ 234.308389][T11334] tipc: Resetting bearer [ 234.409863][T11334] tipc: Disabling bearer [ 234.526191][T11363] __nla_validate_parse: 44 callbacks suppressed [ 234.526212][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 234.725366][T11369] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1570'. [ 234.762296][T11376] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1572'. [ 234.774230][T11375] veth0: entered promiscuous mode [ 234.927606][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1576'. [ 234.975292][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1576'. [ 235.016769][T11387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1576'. [ 235.142601][T11366] veth0: left promiscuous mode [ 235.519143][T11421] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 235.566798][T11421] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20002 [ 235.705931][T11436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1590'. [ 235.907259][T11451] netlink: 'syz.1.1594': attribute type 3 has an invalid length. [ 236.164853][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'. [ 236.490843][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'. [ 236.500643][T11471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1601'. [ 236.636997][T11475] lo speed is unknown, defaulting to 1000 [ 236.757580][T11478] lo speed is unknown, defaulting to 1000 [ 237.189064][T11500] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 237.528347][T11520] netlink: 'syz.2.1618': attribute type 1 has an invalid length. [ 237.750511][T11535] netlink: 'syz.2.1622': attribute type 11 has an invalid length. [ 237.775947][T11537] netlink: 'syz.2.1622': attribute type 11 has an invalid length. [ 238.178600][T11558] tipc: Invalid UDP bearer configuration [ 238.178661][T11558] tipc: Enabling of bearer rejected, failed to enable media [ 238.372200][T11570] netlink: 'syz.4.1635': attribute type 2 has an invalid length. [ 239.007853][T11610] netlink: 'syz.4.1648': attribute type 1 has an invalid length. [ 239.337783][T11627] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 239.379265][T11631] netlink: 'syz.2.1654': attribute type 33 has an invalid length. [ 239.428580][T11635] netlink: 'syz.3.1653': attribute type 21 has an invalid length. [ 239.519326][T11634] lo speed is unknown, defaulting to 1000 [ 239.639991][T11648] __nla_validate_parse: 12 callbacks suppressed [ 239.640014][T11648] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1658'. [ 239.673342][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 239.954749][T11664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1665'. [ 239.973602][T11666] netlink: 'syz.2.1663': attribute type 10 has an invalid length. [ 240.018167][T11666] veth0_vlan: entered allmulticast mode [ 240.044189][T11666] tipc: Resetting bearer [ 240.077469][T11666] veth0_vlan: left promiscuous mode [ 240.100278][T11666] veth0_vlan: entered promiscuous mode [ 240.137032][T11666] team0: Device veth0_vlan failed to register rx_handler [ 240.182802][T11666] tipc: Resetting bearer [ 240.229436][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1667'. [ 240.271469][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 240.597416][T11694] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 240.604985][T11694] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 240.719425][T11700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1680'. [ 240.750414][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1680'. [ 240.829695][T11700] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1680'. [ 241.120026][T11724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1687'. [ 241.205915][T11732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 241.560743][T11748] pim6reg: entered allmulticast mode [ 241.594308][T11751] openvswitch: netlink: Actions may not be safe on all matching packets [ 241.955712][T11770] nbd: must specify an index to disconnect [ 242.096585][T11778] netlink: 'syz.1.1705': attribute type 10 has an invalid length. [ 242.132316][T11778] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.140278][T11778] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.178429][T11778] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.185948][T11778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.193623][T11778] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.200832][T11778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.215668][T11778] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 242.339134][T11790] netlink: 'syz.4.1708': attribute type 3 has an invalid length. [ 242.915799][T11814] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 242.978157][T11814] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 243.118319][T11828] vlan0: entered promiscuous mode [ 243.130560][T11828] vlan0: entered allmulticast mode [ 243.154971][T11828] veth0_vlan: entered allmulticast mode [ 243.228802][T11831] hsr_slave_0 (unregistering): left promiscuous mode [ 243.485036][T11848] netlink: 'syz.4.1722': attribute type 1 has an invalid length. [ 243.528338][T11854] netlink: 'syz.3.1724': attribute type 83 has an invalid length. [ 243.868945][T11878] netlink: 'syz.2.1730': attribute type 12 has an invalid length. [ 244.157088][T11896] blkio.reset_stats is deprecated [ 244.403755][T11918] wg2: left allmulticast mode [ 244.412705][T11918] vlan0: left promiscuous mode [ 244.417807][T11918] vlan0: left allmulticast mode [ 244.429152][T11918] veth0_vlan: left allmulticast mode [ 244.739156][T11935] netlink: 'syz.3.1748': attribute type 1 has an invalid length. [ 244.763738][T11935] __nla_validate_parse: 10 callbacks suppressed [ 244.763758][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1748'. [ 244.896160][T11952] tipc: Enabled bearer , priority 0 [ 244.911918][T11952] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 244.919888][T11952] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 244.947439][T11952] tipc: Resetting bearer [ 245.157305][T11958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1755'. [ 245.173277][T11958] netlink: 'syz.4.1755': attribute type 7 has an invalid length. [ 245.190744][T11958] netlink: 'syz.4.1755': attribute type 8 has an invalid length. [ 245.209989][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1755'. [ 245.265629][T11973] netlink: 'syz.0.1760': attribute type 10 has an invalid length. [ 245.420924][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 245.498932][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 245.510559][T11983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1763'. [ 245.550815][T11983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1763'. [ 245.566994][T11983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1763'. [ 245.580989][T11983] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1763'. [ 245.659052][T11986] netlink: 'syz.4.1764': attribute type 1 has an invalid length. [ 245.720465][T11986] 8021q: adding VLAN 0 to HW filter on device bond8 [ 245.778827][T11985] 8021q: adding VLAN 0 to HW filter on device bond8 [ 245.788781][T11985] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 245.807395][T11985] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 245.835858][T11988] tipc: Enabled bearer , priority 0 [ 245.843309][T11990] syzkaller0: entered promiscuous mode [ 245.849472][T11990] syzkaller0: entered allmulticast mode [ 245.895349][T11990] tipc: Resetting bearer [ 245.917840][T11990] tipc: Disabling bearer [ 245.941469][T11873] tipc: Node number set to 3437594763 [ 246.061803][T12011] netlink: 'syz.2.1771': attribute type 12 has an invalid length. [ 246.071579][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1771'. [ 246.192992][T12011] netlink: 'syz.2.1771': attribute type 12 has an invalid length. [ 246.288640][T12026] tipc: Enabled bearer , priority 0 [ 246.296433][T12022] syzkaller0: entered promiscuous mode [ 246.303364][T12022] syzkaller0: entered allmulticast mode [ 246.350502][T12022] tipc: Resetting bearer [ 246.372700][T12021] tipc: Resetting bearer [ 246.410536][T12021] tipc: Disabling bearer [ 247.941134][T12110] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 248.462917][T12142] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 248.565768][T12151] vlan0: entered promiscuous mode [ 248.574425][T12151] bridge0: entered promiscuous mode [ 248.575156][T12152] validate_nla: 3 callbacks suppressed [ 248.575174][T12152] netlink: 'syz.4.1818': attribute type 1 has an invalid length. [ 248.700263][T12152] 8021q: adding VLAN 0 to HW filter on device bond9 [ 248.765699][T12162] netlink: zone id is out of range [ 248.772985][T12162] netlink: del zone limit has 4 unknown bytes [ 248.779629][T12156] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 248.969750][T12168] tipc: Enabled bearer , priority 0 [ 248.996669][T12168] syzkaller0: entered promiscuous mode [ 249.006262][T12168] syzkaller0: entered allmulticast mode [ 249.068140][T12168] tipc: Resetting bearer [ 249.199612][T12167] tipc: Resetting bearer [ 249.249242][T12167] tipc: Disabling bearer [ 249.787095][T12213] syzkaller1: entered promiscuous mode [ 249.799684][T12213] syzkaller1: entered allmulticast mode [ 250.098217][T12229] netlink: 'syz.1.1843': attribute type 4 has an invalid length. [ 250.130398][T12229] netlink: 'syz.1.1843': attribute type 4 has an invalid length. [ 250.426388][T12248] __nla_validate_parse: 18 callbacks suppressed [ 250.426410][T12248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1849'. [ 250.566847][T12256] netlink: 'syz.4.1853': attribute type 4 has an invalid length. [ 250.799080][T12266] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1857'. [ 250.945158][T12270] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 251.119561][T12281] bridge7: entered promiscuous mode [ 251.129635][T12283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.150922][T12281] bridge7: entered allmulticast mode [ 251.159147][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1864'. [ 251.185610][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'. [ 251.194893][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1864'. [ 251.356839][T12299] tipc: Enabling of bearer rejected, already enabled [ 251.365597][T12300] tipc: Enabling of bearer rejected, already enabled [ 251.421086][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1871'. [ 251.498841][T12310] FAULT_INJECTION: forcing a failure. [ 251.498841][T12310] name failslab, interval 1, probability 0, space 0, times 1 [ 251.530407][T12310] CPU: 1 UID: 0 PID: 12310 Comm: syz.4.1870 Not tainted syzkaller #0 PREEMPT(full) [ 251.530435][T12310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.530464][T12310] Call Trace: [ 251.530472][T12310] [ 251.530482][T12310] dump_stack_lvl+0x189/0x250 [ 251.530512][T12310] ? __pfx____ratelimit+0x10/0x10 [ 251.530540][T12310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.530565][T12310] ? __pfx__printk+0x10/0x10 [ 251.530596][T12310] ? __lock_acquire+0xab9/0xd20 [ 251.530636][T12310] should_fail_ex+0x414/0x560 [ 251.530672][T12310] should_failslab+0xa8/0x100 [ 251.530704][T12310] kmem_cache_alloc_noprof+0x73/0x3c0 [ 251.530732][T12310] ? skb_clone+0x212/0x3a0 [ 251.530765][T12310] skb_clone+0x212/0x3a0 [ 251.530796][T12310] __netlink_deliver_tap+0x404/0x850 [ 251.530833][T12310] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.530857][T12310] netlink_deliver_tap+0x19c/0x1b0 [ 251.530881][T12310] netlink_unicast+0x7fa/0x9e0 [ 251.530921][T12310] ? __pfx_netlink_unicast+0x10/0x10 [ 251.530955][T12310] ? netlink_sendmsg+0x642/0xb30 [ 251.530975][T12310] ? skb_put+0x11b/0x210 [ 251.531002][T12310] netlink_sendmsg+0x805/0xb30 [ 251.531036][T12310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.531063][T12310] ? aa_sock_msg_perm+0xf1/0x1d0 [ 251.531086][T12310] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.531109][T12310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.531134][T12310] __sock_sendmsg+0x219/0x270 [ 251.531170][T12310] ____sys_sendmsg+0x505/0x830 [ 251.531202][T12310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.531242][T12310] ? import_iovec+0x74/0xa0 [ 251.531272][T12310] ___sys_sendmsg+0x21f/0x2a0 [ 251.531300][T12310] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.531367][T12310] ? __fget_files+0x2a/0x420 [ 251.531384][T12310] ? __fget_files+0x3a0/0x420 [ 251.531414][T12310] __x64_sys_sendmsg+0x19b/0x260 [ 251.531444][T12310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 251.531481][T12310] ? __pfx_ksys_write+0x10/0x10 [ 251.531507][T12310] ? rcu_is_watching+0x15/0xb0 [ 251.531539][T12310] ? do_syscall_64+0xbe/0x3b0 [ 251.531567][T12310] do_syscall_64+0xfa/0x3b0 [ 251.531588][T12310] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.531609][T12310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.531629][T12310] ? clear_bhb_loop+0x60/0xb0 [ 251.531654][T12310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.531679][T12310] RIP: 0033:0x7f0dd618eec9 [ 251.531698][T12310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.531716][T12310] RSP: 002b:00007f0dd6f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.531738][T12310] RAX: ffffffffffffffda RBX: 00007f0dd63e5fa0 RCX: 00007f0dd618eec9 [ 251.531753][T12310] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 251.531765][T12310] RBP: 00007f0dd6f67090 R08: 0000000000000000 R09: 0000000000000000 [ 251.531777][T12310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.531788][T12310] R13: 00007f0dd63e6038 R14: 00007f0dd63e5fa0 R15: 00007fffa39224d8 [ 251.531821][T12310] [ 251.848878][T12317] netlink: 'syz.3.1874': attribute type 1 has an invalid length. [ 251.917932][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1875'. [ 251.936577][T12317] 8021q: adding VLAN 0 to HW filter on device bond6 [ 252.009618][T12324] bond6: (slave geneve2): making interface the new active one [ 252.034078][T12324] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 252.048432][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.091395][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.100175][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.168708][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.396971][T12347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1885'. [ 252.464473][T12347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1885'. [ 252.487318][T12352] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1886'. [ 252.536161][T12362] FAULT_INJECTION: forcing a failure. [ 252.536161][T12362] name failslab, interval 1, probability 0, space 0, times 0 [ 252.589617][T12362] CPU: 1 UID: 0 PID: 12362 Comm: syz.3.1887 Not tainted syzkaller #0 PREEMPT(full) [ 252.589648][T12362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.589661][T12362] Call Trace: [ 252.589670][T12362] [ 252.589679][T12362] dump_stack_lvl+0x189/0x250 [ 252.589710][T12362] ? __pfx____ratelimit+0x10/0x10 [ 252.589734][T12362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.589758][T12362] ? __pfx__printk+0x10/0x10 [ 252.589794][T12362] ? __pfx___might_resched+0x10/0x10 [ 252.589813][T12362] ? fs_reclaim_acquire+0x7d/0x100 [ 252.589839][T12362] should_fail_ex+0x414/0x560 [ 252.589876][T12362] should_failslab+0xa8/0x100 [ 252.589908][T12362] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 252.589938][T12362] ? __alloc_skb+0x112/0x2d0 [ 252.589967][T12362] __alloc_skb+0x112/0x2d0 [ 252.589995][T12362] netlink_ack+0x146/0xa50 [ 252.590014][T12362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.590040][T12362] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 252.590068][T12362] ? __pfx_nl80211_post_doit+0x10/0x10 [ 252.590113][T12362] netlink_rcv_skb+0x28c/0x470 [ 252.590133][T12362] ? __lock_acquire+0xab9/0xd20 [ 252.590164][T12362] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.590194][T12362] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.590243][T12362] ? down_read+0x1ad/0x2e0 [ 252.590272][T12362] genl_rcv+0x28/0x40 [ 252.590298][T12362] netlink_unicast+0x82f/0x9e0 [ 252.590340][T12362] ? __pfx_netlink_unicast+0x10/0x10 [ 252.590374][T12362] ? netlink_sendmsg+0x642/0xb30 [ 252.590394][T12362] ? skb_put+0x11b/0x210 [ 252.590422][T12362] netlink_sendmsg+0x805/0xb30 [ 252.590461][T12362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.590488][T12362] ? aa_sock_msg_perm+0xf1/0x1d0 [ 252.590510][T12362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.590542][T12362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.590566][T12362] __sock_sendmsg+0x219/0x270 [ 252.590606][T12362] ____sys_sendmsg+0x505/0x830 [ 252.590639][T12362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.590676][T12362] ? import_iovec+0x74/0xa0 [ 252.590707][T12362] ___sys_sendmsg+0x21f/0x2a0 [ 252.590736][T12362] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.590802][T12362] ? __fget_files+0x2a/0x420 [ 252.590820][T12362] ? __fget_files+0x3a0/0x420 [ 252.590850][T12362] __x64_sys_sendmsg+0x19b/0x260 [ 252.590881][T12362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.590917][T12362] ? __pfx_ksys_write+0x10/0x10 [ 252.590942][T12362] ? rcu_is_watching+0x15/0xb0 [ 252.590970][T12362] ? do_syscall_64+0xbe/0x3b0 [ 252.590999][T12362] do_syscall_64+0xfa/0x3b0 [ 252.591020][T12362] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.591043][T12362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.591062][T12362] ? clear_bhb_loop+0x60/0xb0 [ 252.591085][T12362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.591105][T12362] RIP: 0033:0x7f273778eec9 [ 252.591124][T12362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.591141][T12362] RSP: 002b:00007f27385db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.591162][T12362] RAX: ffffffffffffffda RBX: 00007f27379e6090 RCX: 00007f273778eec9 [ 252.591176][T12362] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 252.591189][T12362] RBP: 00007f27385db090 R08: 0000000000000000 R09: 0000000000000000 [ 252.591201][T12362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.591212][T12362] R13: 00007f27379e6128 R14: 00007f27379e6090 R15: 00007ffeae93fec8 [ 252.591250][T12362] [ 252.610100][T12365] netlink: 'syz.1.1888': attribute type 1 has an invalid length. [ 253.438810][T12396] netlink: 'syz.4.1895': attribute type 2 has an invalid length. [ 253.438985][T12401] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 253.471436][ T1150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.487480][ T1150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.496530][T11873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 253.521203][T12407] FAULT_INJECTION: forcing a failure. [ 253.521203][T12407] name failslab, interval 1, probability 0, space 0, times 0 [ 253.535679][T12407] CPU: 1 UID: 0 PID: 12407 Comm: syz.1.1902 Not tainted syzkaller #0 PREEMPT(full) [ 253.535711][T12407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 253.535724][T12407] Call Trace: [ 253.535732][T12407] [ 253.535741][T12407] dump_stack_lvl+0x189/0x250 [ 253.535771][T12407] ? __pfx____ratelimit+0x10/0x10 [ 253.535794][T12407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.535818][T12407] ? __pfx__printk+0x10/0x10 [ 253.535851][T12407] ? __pfx___might_resched+0x10/0x10 [ 253.535869][T12407] ? fs_reclaim_acquire+0x7d/0x100 [ 253.535893][T12407] should_fail_ex+0x414/0x560 [ 253.535930][T12407] should_failslab+0xa8/0x100 [ 253.535963][T12407] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 253.535993][T12407] ? __alloc_skb+0x112/0x2d0 [ 253.536021][T12407] __alloc_skb+0x112/0x2d0 [ 253.536048][T12407] netlink_ack+0x146/0xa50 [ 253.536068][T12407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.536094][T12407] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 253.536121][T12407] ? __pfx_nl80211_post_doit+0x10/0x10 [ 253.536156][T12407] ? __asan_memcpy+0x40/0x70 [ 253.536179][T12407] ? __pfx_ref_tracker_free+0x10/0x10 [ 253.536209][T12407] netlink_rcv_skb+0x28c/0x470 [ 253.536228][T12407] ? __lock_acquire+0xab9/0xd20 [ 253.536259][T12407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.536288][T12407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.536331][T12407] ? down_read+0x1ad/0x2e0 [ 253.536359][T12407] genl_rcv+0x28/0x40 [ 253.536383][T12407] netlink_unicast+0x82f/0x9e0 [ 253.536424][T12407] ? __pfx_netlink_unicast+0x10/0x10 [ 253.536467][T12407] ? netlink_sendmsg+0x642/0xb30 [ 253.536487][T12407] ? skb_put+0x11b/0x210 [ 253.536514][T12407] netlink_sendmsg+0x805/0xb30 [ 253.536548][T12407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.536574][T12407] ? aa_sock_msg_perm+0xf1/0x1d0 [ 253.536598][T12407] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.536619][T12407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.536642][T12407] __sock_sendmsg+0x219/0x270 [ 253.536678][T12407] ____sys_sendmsg+0x505/0x830 [ 253.536712][T12407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.536750][T12407] ? import_iovec+0x74/0xa0 [ 253.536782][T12407] ___sys_sendmsg+0x21f/0x2a0 [ 253.536813][T12407] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.536881][T12407] ? __fget_files+0x2a/0x420 [ 253.536901][T12407] ? __fget_files+0x3a0/0x420 [ 253.536932][T12407] __x64_sys_sendmsg+0x19b/0x260 [ 253.536963][T12407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.537002][T12407] ? __pfx_ksys_write+0x10/0x10 [ 253.537028][T12407] ? rcu_is_watching+0x15/0xb0 [ 253.537056][T12407] ? do_syscall_64+0xbe/0x3b0 [ 253.537085][T12407] do_syscall_64+0xfa/0x3b0 [ 253.537107][T12407] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.537128][T12407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.537147][T12407] ? clear_bhb_loop+0x60/0xb0 [ 253.537173][T12407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.537192][T12407] RIP: 0033:0x7fe4d5b8eec9 [ 253.537210][T12407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.537228][T12407] RSP: 002b:00007fe4d6a3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.537250][T12407] RAX: ffffffffffffffda RBX: 00007fe4d5de5fa0 RCX: 00007fe4d5b8eec9 [ 253.537265][T12407] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 253.537277][T12407] RBP: 00007fe4d6a3b090 R08: 0000000000000000 R09: 0000000000000000 [ 253.537290][T12407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.537302][T12407] R13: 00007fe4d5de6038 R14: 00007fe4d5de5fa0 R15: 00007fffa62ae558 [ 253.537335][T12407] [ 253.970619][T12415] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 253.990122][T12412] lo: entered promiscuous mode [ 254.021797][T11873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.031398][T12412] lo: entered allmulticast mode [ 254.110822][T12413] vlan0: entered promiscuous mode [ 254.150916][T12424] netlink: 'syz.0.1905': attribute type 2 has an invalid length. [ 254.213112][T12430] : entered promiscuous mode [ 254.270837][T12432] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 254.563297][T11873] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.645600][T12457] pim6reg527: entered allmulticast mode [ 254.884430][T12471] netlink: 'syz.3.1920': attribute type 19 has an invalid length. [ 254.990301][T12477] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.232599][T12498] netlink: 'syz.2.1928': attribute type 4 has an invalid length. [ 255.270937][T12488] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 255.284878][T12501] netlink: 'syz.2.1928': attribute type 4 has an invalid length. [ 255.308551][T12496] FAULT_INJECTION: forcing a failure. [ 255.308551][T12496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.323819][T11874] lo speed is unknown, defaulting to 1000 [ 255.329758][ T8770] lo speed is unknown, defaulting to 1000 [ 255.346740][T12496] CPU: 0 UID: 0 PID: 12496 Comm: syz.0.1927 Not tainted syzkaller #0 PREEMPT(full) [ 255.346765][T12496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.346775][T12496] Call Trace: [ 255.346781][T12496] [ 255.346789][T12496] dump_stack_lvl+0x189/0x250 [ 255.346814][T12496] ? __pfx____ratelimit+0x10/0x10 [ 255.346833][T12496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.346852][T12496] ? __pfx__printk+0x10/0x10 [ 255.346876][T12496] ? __might_fault+0xb0/0x130 [ 255.346916][T12496] should_fail_ex+0x414/0x560 [ 255.346945][T12496] _copy_from_user+0x2d/0xb0 [ 255.346968][T12496] kstrtouint_from_user+0xc4/0x170 [ 255.346991][T12496] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 255.347026][T12496] proc_fail_nth_write+0x88/0x200 [ 255.347046][T12496] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 255.347071][T12496] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 255.347092][T12496] vfs_write+0x27b/0xb30 [ 255.347124][T12496] ? __pfx_vfs_write+0x10/0x10 [ 255.347148][T12496] ? __fget_files+0x2a/0x420 [ 255.347171][T12496] ? __fget_files+0x3a0/0x420 [ 255.347188][T12496] ? __fget_files+0x2a/0x420 [ 255.347217][T12496] ksys_write+0x145/0x250 [ 255.347257][T12496] ? __pfx_ksys_write+0x10/0x10 [ 255.347281][T12496] ? rcu_is_watching+0x15/0xb0 [ 255.347308][T12496] ? do_syscall_64+0xbe/0x3b0 [ 255.347337][T12496] do_syscall_64+0xfa/0x3b0 [ 255.347359][T12496] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.347381][T12496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.347401][T12496] ? clear_bhb_loop+0x60/0xb0 [ 255.347427][T12496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.347447][T12496] RIP: 0033:0x7f399738d97f [ 255.347466][T12496] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 255.347484][T12496] RSP: 002b:00007f3998225030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 255.347507][T12496] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f399738d97f [ 255.347521][T12496] RDX: 0000000000000001 RSI: 00007f39982250a0 RDI: 0000000000000005 [ 255.347533][T12496] RBP: 00007f3998225090 R08: 0000000000000000 R09: 0000000000000000 [ 255.347545][T12496] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 255.347557][T12496] R13: 00007f39975e6128 R14: 00007f39975e6090 R15: 00007ffc16060b78 [ 255.347591][T12496] [ 255.622946][T12504] __nla_validate_parse: 15 callbacks suppressed [ 255.622968][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1931'. [ 255.677596][T12508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.912578][T12520] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1936'. [ 256.029639][T12531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.188605][T12534] lo speed is unknown, defaulting to 1000 [ 256.356597][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1944'. [ 256.759815][T12569] netlink: 'syz.0.1948': attribute type 1 has an invalid length. [ 256.785134][T12569] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 257.178447][T12589] tipc: Enabled bearer , priority 0 [ 257.196738][T12589] syzkaller0: entered promiscuous mode [ 257.204389][T12589] syzkaller0: entered allmulticast mode [ 257.418143][T12607] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 257.452239][T12607] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 257.460190][T12588] tipc: Resetting bearer [ 257.481926][T12588] tipc: Disabling bearer [ 257.487303][T12611] netlink: 'syz.0.1961': attribute type 1 has an invalid length. [ 257.521471][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 257.605735][T12611] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.626761][T12611] bond4: (slave bond5): making interface the new active one [ 257.659897][T12611] bond4: (slave bond5): Enslaving as an active interface with an up link [ 257.716917][T12618] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 257.746354][T12611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1961'. [ 257.767248][T12611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.643277][T12667] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1978'. [ 258.866886][T12680] netlink: 'syz.2.1983': attribute type 1 has an invalid length. [ 259.312207][T12693] netlink: 'syz.0.1987': attribute type 10 has an invalid length. [ 259.353560][T12693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1987'. [ 259.648483][T12710] team0: Port device geneve3 added [ 259.697057][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 259.722312][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 259.768071][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 259.886865][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 259.996484][T12730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1996'. [ 260.120662][T12735] netlink: 'syz.2.1996': attribute type 23 has an invalid length. [ 260.526987][T12757] bond5: entered promiscuous mode [ 260.532904][T12757] bond5: entered allmulticast mode [ 260.539104][T12757] 8021q: adding VLAN 0 to HW filter on device bond5 [ 260.710042][T12768] tipc: Enabled bearer , priority 0 [ 260.722345][T12768] syzkaller0: entered promiscuous mode [ 260.732212][T12768] syzkaller0: entered allmulticast mode [ 260.809195][T12768] tipc: Resetting bearer [ 260.845769][T12768] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2010'. [ 260.866958][T12774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2011'. [ 260.922921][T12777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2011'. [ 260.940011][T12775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2010'. [ 260.956223][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2010'. [ 260.968139][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 260.969374][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2013'. [ 261.050569][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.059489][T12777] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2011'. [ 261.069798][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.109915][T12766] tipc: Resetting bearer [ 261.127354][T12785] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2011'. [ 261.216514][T12766] tipc: Disabling bearer [ 261.265294][T12777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2011'. [ 261.360297][T12792] 8021q: VLANs not supported on sit0 [ 261.396805][T12793] 8021q: VLANs not supported on sit0 [ 261.698836][ T2974] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.724526][T12819] netlink: 'syz.4.2024': attribute type 10 has an invalid length. [ 261.727802][ T2974] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.782975][ T2974] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.899713][T12819] bridge0: port 1(team0) entered blocking state [ 261.907091][T12819] bridge0: port 1(team0) entered disabled state [ 261.931019][T12819] team0: entered allmulticast mode [ 261.964190][ T2974] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.064271][T12831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.112267][T12835] netlink: 'syz.2.2030': attribute type 1 has an invalid length. [ 262.120211][T12832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.305321][T12835] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 262.520136][T12862] netlink: 'syz.1.2040': attribute type 1 has an invalid length. [ 262.867913][T12874] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.925286][T12874] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.000228][T12879] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 263.789359][T12922] netlink: 'syz.2.2057': attribute type 9 has an invalid length. [ 263.809555][T12922] netlink: 'syz.2.2057': attribute type 6 has an invalid length. [ 263.830392][T12922] netlink: 'syz.2.2057': attribute type 7 has an invalid length. [ 263.847546][T12922] netlink: 'syz.2.2057': attribute type 8 has an invalid length. [ 263.873233][T12920] syzkaller0: entered promiscuous mode [ 263.876061][T12922] openvswitch: netlink: IPv4 tun info is not correct [ 263.878843][T12920] syzkaller0: entered allmulticast mode [ 265.525187][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 265.806981][T12969] bridge5: entered promiscuous mode [ 265.825901][T12969] bridge5: entered allmulticast mode [ 265.875251][T12971] vlan5: entered promiscuous mode [ 265.880373][T12971] bridge0: entered promiscuous mode [ 265.929187][T12971] team0: entered promiscuous mode [ 265.963858][T12977] __nla_validate_parse: 7 callbacks suppressed [ 265.963879][T12977] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2070'. [ 266.015714][T12978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2072'. [ 266.037813][T12977] openvswitch: netlink: Actions may not be safe on all matching packets [ 266.284096][T12997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2077'. [ 266.678294][T13019] openvswitch: netlink: VXLAN extension message has 6 unknown bytes. [ 266.702943][T13019] netlink: 'syz.2.2086': attribute type 11 has an invalid length. [ 266.730433][T13019] netlink: 'syz.2.2086': attribute type 11 has an invalid length. [ 266.775281][T13019] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2086'. [ 267.013840][T13031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2088'. [ 267.043833][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2088'. [ 267.063441][T13031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2088'. [ 267.139978][T13037] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2092'. [ 267.222238][T13043] netlink: 'syz.3.2094': attribute type 1 has an invalid length. [ 267.264564][T13043] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2094'. [ 267.358710][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2097'. [ 267.379636][T13051] netlink: 'syz.4.2097': attribute type 1 has an invalid length. [ 267.407253][T13054] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 267.571165][T13065] openvswitch: netlink: Unknown key attributes 2 [ 267.608767][T13065] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 267.834654][T13080] netlink: 'syz.1.2106': attribute type 12 has an invalid length. [ 267.852157][T13080] netlink: 'syz.1.2106': attribute type 29 has an invalid length. [ 267.870675][T13080] netlink: 'syz.1.2106': attribute type 2 has an invalid length. [ 267.959987][T13084] lo speed is unknown, defaulting to 1000 [ 268.086250][T13090] netlink: 'syz.1.2110': attribute type 1 has an invalid length. [ 268.297208][T13104] netlink: 'syz.3.2113': attribute type 33 has an invalid length. [ 268.357461][T13094] bridge0: Device is already in use. [ 268.420609][T13099] tipc: Enabled bearer , priority 0 [ 268.477614][T13108] syzkaller0: entered promiscuous mode [ 268.503924][T13108] syzkaller0: entered allmulticast mode [ 268.587072][T13099] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 268.595736][T13117] netlink: 'syz.4.2117': attribute type 4 has an invalid length. [ 268.703239][T13099] tipc: Resetting bearer [ 268.764856][T13098] tipc: Resetting bearer [ 268.872353][T13098] tipc: Disabling bearer [ 269.182667][T13147] tipc: Enabling of bearer rejected, failed to enable media [ 269.204054][T13145] nbd: device at index 0 is going down [ 269.257426][T13147] netlink: 'syz.4.2125': attribute type 28 has an invalid length. [ 269.275189][T13147] netlink: 'syz.4.2125': attribute type 3 has an invalid length. [ 269.376944][T13154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.909775][T13189] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 269.991492][T13190] tipc: Enabling of bearer rejected, already enabled [ 270.540182][T13224] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 270.714923][T13228] syz_tun: entered allmulticast mode [ 271.243252][T13253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.300729][T13256] __nla_validate_parse: 28 callbacks suppressed [ 271.300751][T13256] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2161'. [ 271.526683][T13227] syz_tun: left allmulticast mode [ 271.562272][T13264] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2164'. [ 271.583645][T13266] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2165'. [ 271.614501][T13266] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2165'. [ 271.625296][T13270] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2166'. [ 271.635725][T13268] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2166'. [ 271.942948][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2168'. [ 272.082428][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2168'. [ 272.228604][T13299] wg2: entered promiscuous mode [ 272.238065][T13299] wg2: entered allmulticast mode [ 272.282765][T13300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2177'. [ 272.386194][T13308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.576574][T13321] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 272.586313][T13321] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 272.678060][T13319] bond7: entered promiscuous mode [ 272.693681][T13319] bond7: entered allmulticast mode [ 272.699478][T13319] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.707570][T13321] validate_nla: 6 callbacks suppressed [ 272.707587][T13321] netlink: 'syz.2.2183': attribute type 29 has an invalid length. [ 272.729328][T13321] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2183'. [ 272.729580][T13322] netlink: 'syz.2.2183': attribute type 29 has an invalid length. [ 272.765892][T13322] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 272.769074][T13335] netlink: 'syz.0.2188': attribute type 1 has an invalid length. [ 272.796569][T13335] netlink: 'syz.0.2188': attribute type 4 has an invalid length. [ 272.814489][T13321] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 274.864341][T13374] netlink: 'syz.2.2199': attribute type 1 has an invalid length. [ 275.016136][T13382] netlink: 'syz.2.2201': attribute type 1 has an invalid length. [ 275.218112][T13387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.663804][T13414] C: renamed from lo (while UP) [ 275.909615][T13423] xt_HMARK: proto mask must be zero with L3 mode [ 276.343436][T13452] netlink: 'syz.0.2228': attribute type 9 has an invalid length. [ 276.390574][T13450] __nla_validate_parse: 18 callbacks suppressed [ 276.390597][T13450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 278.203089][T13482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2236'. [ 278.402338][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2242'. [ 278.529506][T13496] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 278.760972][T13518] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2246'. [ 278.796829][T13517] tipc: Enabled bearer , priority 0 [ 278.817616][T13517] syzkaller0: entered promiscuous mode [ 278.841785][T13517] syzkaller0: entered allmulticast mode [ 278.867121][T13517] tipc: Resetting bearer [ 278.889967][T13516] tipc: Resetting bearer [ 278.922855][T13516] tipc: Disabling bearer [ 279.182713][T13539] C: renamed from team_slave_0 [ 279.223357][T13539] netlink: 'syz.0.2254': attribute type 1 has an invalid length. [ 279.233536][T13541] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2255'. [ 279.245656][T13539] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 279.274214][T13548] Bluetooth: MGMT ver 1.23 [ 279.299949][T13547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2257'. [ 279.507999][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'. [ 279.552464][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2261'. [ 279.590545][T13563] netlink: 'syz.1.2264': attribute type 21 has an invalid length. [ 279.607433][T13563] IPv6: NLM_F_CREATE should be specified when creating new route [ 279.650314][T13563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.657699][T13563] IPv6: NLM_F_CREATE should be set when creating new route [ 279.665057][T13563] IPv6: NLM_F_CREATE should be set when creating new route [ 279.672397][T13563] IPv6: NLM_F_CREATE should be set when creating new route [ 279.801724][T13573] tipc: Enabling of bearer rejected, media not registered [ 279.833015][T13579] netlink: 'syz.2.2267': attribute type 10 has an invalid length. [ 279.833279][T13580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.909069][T13580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.940447][T13580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.979931][T13580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.241078][T13610] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2273'. [ 280.425854][T13636] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2275'. [ 280.488584][T13636] macvtap1: entered promiscuous mode [ 280.501741][T13636] macvtap1: entered allmulticast mode [ 280.565926][T13642] macvtap1: entered promiscuous mode [ 280.577922][T13642] vlan0: entered promiscuous mode [ 280.583650][T13642] macvtap1: entered allmulticast mode [ 280.590195][T13642] vlan0: entered allmulticast mode [ 280.605678][T13642] veth0_vlan: entered allmulticast mode [ 280.626927][T13650] bond3: option mode: unable to set because the bond device is up [ 280.669540][T13650] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 280.694564][T13650] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 280.768544][T13659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.881456][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 281.036557][T13673] raw_sendmsg: syz.4.2286 forgot to set AF_INET. Fix it! [ 281.084372][T13678] netlink: 'syz.3.2288': attribute type 1 has an invalid length. [ 281.244728][T13680] C speed is unknown, defaulting to 1000 [ 281.405453][T13700] __nla_validate_parse: 1 callbacks suppressed [ 281.405474][T13700] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2293'. [ 281.852984][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2301'. [ 281.916310][T13727] tipc: Enabled bearer , priority 0 [ 281.925081][T13724] syzkaller0: entered promiscuous mode [ 281.930607][T13724] syzkaller0: entered allmulticast mode [ 281.943962][T13729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2303'. [ 281.986520][T13724] tipc: Resetting bearer [ 282.009707][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 282.019177][T13722] tipc: Resetting bearer [ 282.037141][T13722] tipc: Disabling bearer [ 282.190031][T13744] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 282.255308][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'. [ 282.270123][T13752] IPv6: sit2: Disabled Multicast RS [ 282.290706][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2309'. [ 282.331618][T13752] sit2: entered allmulticast mode [ 282.529435][T13769] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2314'. [ 282.689361][T13777] netlink: 900 bytes leftover after parsing attributes in process `syz.2.2318'. [ 282.759461][T13783] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 512, id = 0 [ 282.767414][T13784] IPVS: stopping backup sync thread 13783 ... [ 282.836516][T13789] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2322'. [ 282.879482][T13789] netlink: 'syz.3.2322': attribute type 33 has an invalid length. [ 282.890238][T13789] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2322'. [ 282.904905][T13789] openvswitch: netlink: Key type 2576 is out of range max 32 [ 282.927111][T13791] netlink: 'syz.4.2323': attribute type 2 has an invalid length. [ 283.108425][T13800] pim6reg: entered allmulticast mode [ 283.135735][T13806] syzkaller1: entered promiscuous mode [ 283.145433][T13806] syzkaller1: entered allmulticast mode [ 283.178624][T13800] pim6reg: left allmulticast mode [ 283.413840][T13816] vlan0: entered allmulticast mode [ 283.419584][T13816] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 283.532895][T13823] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 283.731530][T13834] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 283.870933][T13843] netlink: 'syz.2.2339': attribute type 1 has an invalid length. [ 284.200147][T13863] netlink: 'syz.1.2347': attribute type 11 has an invalid length. [ 284.268314][T13863] netlink: 'syz.1.2347': attribute type 1 has an invalid length. [ 284.662297][T13889] netlink: 'syz.4.2355': attribute type 1 has an invalid length. [ 284.689501][T13893] 8021q: VLANs not supported on lo [ 285.210008][T13915] netlink: 'syz.0.2362': attribute type 21 has an invalid length. [ 285.342695][T13920] C speed is unknown, defaulting to 1000 [ 285.818378][T13949] bridge_slave_1: left allmulticast mode [ 285.824394][T13949] bridge_slave_1: left promiscuous mode [ 285.830431][T13949] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.850007][T13949] bridge_slave_0: left allmulticast mode [ 285.857467][T13949] bridge_slave_0: left promiscuous mode [ 285.864101][T13949] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.193410][T13966] tipc: Enabling of bearer rejected, failed to enable media [ 286.741972][T13986] netlink: 'syz.2.2380': attribute type 8 has an invalid length. [ 286.810362][T13995] __nla_validate_parse: 22 callbacks suppressed [ 286.810383][T13995] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2384'. [ 286.837256][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2386'. [ 286.867248][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2386'. [ 287.002663][T14008] netlink: 'syz.0.2390': attribute type 1 has an invalid length. [ 287.391038][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2397'. [ 287.562168][T14044] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2399'. [ 287.594494][T14044] unknown channel width for channel at 909000KHz? [ 287.601397][T14044] unknown channel width for channel at 909000KHz? [ 287.783839][T14059] C speed is unknown, defaulting to 1000 [ 288.239838][T14072] syzkaller0: entered promiscuous mode [ 288.258645][T14072] syzkaller0: entered allmulticast mode [ 288.394206][T14092] netlink: 'syz.3.2407': attribute type 1 has an invalid length. [ 288.412807][T14092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2407'. [ 288.509919][T14100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2410'. [ 289.840934][T14090] syzkaller1: entered promiscuous mode [ 289.846595][T14090] syzkaller1: entered allmulticast mode [ 290.109236][T14106] netlink: 'syz.3.2412': attribute type 29 has an invalid length. [ 290.161985][T14108] netlink: 'syz.3.2412': attribute type 29 has an invalid length. [ 290.196900][T14106] netlink: 524 bytes leftover after parsing attributes in process `syz.3.2412'. [ 290.237960][T14106] unsupported nla_type 58 [ 290.488906][T14131] netlink: 'syz.1.2420': attribute type 4 has an invalid length. [ 290.503242][T14131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2420'. [ 290.517258][T14131] netlink: 146780 bytes leftover after parsing attributes in process `syz.1.2420'. [ 291.218609][T14162] netlink: 'syz.4.2432': attribute type 14 has an invalid length. [ 291.256514][T14162] netlink: 'syz.4.2432': attribute type 13 has an invalid length. [ 291.336058][T14165] 8021q: adding VLAN 0 to HW filter on device bond7 [ 291.390451][T14175] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 291.420753][T14175] bond7: (slave macvlan2): Enslaving as a backup interface with a down link [ 291.595563][T14187] netlink: 'syz.4.2438': attribute type 11 has an invalid length. [ 291.638699][T14192] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 291.664639][T14192] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 291.808733][T14198] tipc: Enabling of bearer rejected, already enabled [ 291.866663][T14205] __nla_validate_parse: 4 callbacks suppressed [ 291.866685][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2444'. [ 291.902885][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2444'. [ 291.934556][T14205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2444'. [ 292.017193][T14219] tipc: Enabling of bearer rejected, failed to enable media [ 292.458852][T14252] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 292.468666][T14250] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2455'. [ 292.888669][T14274] netlink: 'syz.4.2462': attribute type 10 has an invalid length. [ 293.417371][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2465'. [ 294.034192][T14320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2476'. [ 294.292308][T14333] netlink: 'syz.1.2480': attribute type 9 has an invalid length. [ 294.330125][T14335] pim6reg1: entered promiscuous mode [ 294.336983][T14333] netlink: 'syz.1.2480': attribute type 6 has an invalid length. [ 294.365605][T14335] pim6reg1: entered allmulticast mode [ 294.391447][T14330] C speed is unknown, defaulting to 1000 [ 294.399514][T14333] netlink: 'syz.1.2480': attribute type 7 has an invalid length. [ 294.670504][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2484'. [ 294.788098][T14355] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2485'. [ 294.857092][T14360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2488'. [ 294.869066][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 294.878778][T14360] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 294.887640][T14360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.220052][T14374] validate_nla: 3 callbacks suppressed [ 295.220074][T14374] netlink: 'syz.1.2491': attribute type 4 has an invalid length. [ 295.318208][T14374] `: renamed from bond0 (while UP) [ 295.545839][T14392] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 295.567090][T14394] lo: left promiscuous mode [ 295.590995][T14394] lo: left allmulticast mode [ 295.621948][T14399] veth9: entered allmulticast mode [ 295.649134][T14400] veth11: entered allmulticast mode [ 295.668959][T14401] team0: Refused to change device type [ 295.957224][T14417] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.339390][T14438] netlink: 'syz.3.2514': attribute type 12 has an invalid length. [ 296.394587][T14440] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 296.556326][T14448] netlink: 'syz.4.2518': attribute type 12 has an invalid length. [ 296.753289][T14458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.800423][ T3548] bond9: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 296.830804][ T3548] bond9: (slave veth0_to_bond): making interface the new active one [ 296.869149][ T3548] bond9: active interface up! [ 296.973663][T14472] netlink: 'syz.4.2527': attribute type 1 has an invalid length. [ 296.995518][T14473] C speed is unknown, defaulting to 1000 [ 297.075688][T14472] 8021q: adding VLAN 0 to HW filter on device bond11 [ 297.355127][T14476] bond0: (slave rose0): Error: Device can not be enslaved while up [ 297.490212][T14504] netlink: 'syz.3.2534': attribute type 6 has an invalid length. [ 297.499768][T14504] netlink: 'syz.3.2534': attribute type 6 has an invalid length. [ 297.818088][T14524] __nla_validate_parse: 5 callbacks suppressed [ 297.818112][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2539'. [ 298.021976][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2543'. [ 298.041277][T14541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2543'. [ 298.067570][T14541] netlink: 'syz.3.2543': attribute type 33 has an invalid length. [ 298.088071][T14541] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2543'. [ 298.320917][T14550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2546'. [ 298.356770][T14554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.449331][T14559] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 298.922837][T14592] tipc: Enabling of bearer rejected, already enabled [ 298.950821][T14593] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 298.963478][T14593] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 299.016225][ T30] audit: type=1800 audit(1758765233.553:4): pid=14573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2552" name="memory.events" dev="tmpfs" ino=2533 res=0 errno=0 [ 299.155899][T14597] lo: entered promiscuous mode [ 299.161023][T14597] netlink: 'syz.1.2557': attribute type 2 has an invalid length. [ 299.169069][T14597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.370925][T14618] sctp: [Deprecated]: syz.3.2562 (pid 14618) Use of int in max_burst socket option deprecated. [ 299.370925][T14618] Use struct sctp_assoc_value instead [ 299.517752][T14625] [ 299.520138][T14625] ====================================================== [ 299.527168][T14625] WARNING: possible circular locking dependency detected [ 299.534209][T14625] syzkaller #0 Not tainted [ 299.538627][T14625] ------------------------------------------------------ [ 299.545654][T14625] syz.0.2564/14625 is trying to acquire lock: [ 299.551721][T14625] ffffffff8f68f7b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 299.561233][T14625] [ 299.561233][T14625] but task is already holding lock: [ 299.568602][T14625] ffffffff8f68f758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 299.578187][T14625] [ 299.578187][T14625] which lock already depends on the new lock. [ 299.578187][T14625] [ 299.588594][T14625] [ 299.588594][T14625] the existing dependency chain (in reverse order) is: [ 299.597608][T14625] [ 299.597608][T14625] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 299.605528][T14625] lock_acquire+0x120/0x360 [ 299.610603][T14625] _raw_spin_lock_bh+0x36/0x50 [ 299.615911][T14625] nr_rt_ioctl+0x390/0xd50 [ 299.620863][T14625] sock_do_ioctl+0xdc/0x300 [ 299.625908][T14625] sock_ioctl+0x576/0x790 [ 299.630768][T14625] __se_sys_ioctl+0xfc/0x170 [ 299.635890][T14625] do_syscall_64+0xfa/0x3b0 [ 299.640924][T14625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.647341][T14625] [ 299.647341][T14625] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 299.655351][T14625] lock_acquire+0x120/0x360 [ 299.660407][T14625] _raw_spin_lock_bh+0x36/0x50 [ 299.665707][T14625] nr_rt_ioctl+0x193/0xd50 [ 299.670663][T14625] sock_do_ioctl+0xdc/0x300 [ 299.675713][T14625] sock_ioctl+0x576/0x790 [ 299.680570][T14625] __se_sys_ioctl+0xfc/0x170 [ 299.685689][T14625] do_syscall_64+0xfa/0x3b0 [ 299.690746][T14625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.697165][T14625] [ 299.697165][T14625] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 299.704999][T14625] validate_chain+0xb9b/0x2140 [ 299.710309][T14625] __lock_acquire+0xab9/0xd20 [ 299.715520][T14625] lock_acquire+0x120/0x360 [ 299.720569][T14625] _raw_spin_lock_bh+0x36/0x50 [ 299.725871][T14625] nr_rt_device_down+0xa9/0x720 [ 299.731256][T14625] nr_device_event+0x137/0x150 [ 299.736580][T14625] notifier_call_chain+0x1b3/0x3e0 [ 299.742221][T14625] __dev_notify_flags+0x18d/0x2e0 [ 299.747775][T14625] netif_change_flags+0xe8/0x1a0 [ 299.753241][T14625] dev_change_flags+0x130/0x260 [ 299.758710][T14625] dev_ioctl+0x7b4/0x1150 [ 299.763568][T14625] sock_do_ioctl+0x22c/0x300 [ 299.768698][T14625] sock_ioctl+0x576/0x790 [ 299.773683][T14625] __se_sys_ioctl+0xfc/0x170 [ 299.778905][T14625] do_syscall_64+0xfa/0x3b0 [ 299.783936][T14625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.790464][T14625] [ 299.790464][T14625] other info that might help us debug this: [ 299.790464][T14625] [ 299.800695][T14625] Chain exists of: [ 299.800695][T14625] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 299.800695][T14625] [ 299.814523][T14625] Possible unsafe locking scenario: [ 299.814523][T14625] [ 299.821979][T14625] CPU0 CPU1 [ 299.827345][T14625] ---- ---- [ 299.832736][T14625] lock(nr_neigh_list_lock); [ 299.837513][T14625] lock(&nr_node->node_lock); [ 299.844805][T14625] lock(nr_neigh_list_lock); [ 299.852009][T14625] lock(nr_node_list_lock); [ 299.856610][T14625] [ 299.856610][T14625] *** DEADLOCK *** [ 299.856610][T14625] [ 299.864761][T14625] 2 locks held by syz.0.2564/14625: [ 299.869961][T14625] #0: ffffffff8f53a088 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 299.878771][T14625] #1: ffffffff8f68f758 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 299.888800][T14625] [ 299.888800][T14625] stack backtrace: [ 299.894692][T14625] CPU: 1 UID: 0 PID: 14625 Comm: syz.0.2564 Not tainted syzkaller #0 PREEMPT(full) [ 299.894714][T14625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 299.894725][T14625] Call Trace: [ 299.894732][T14625] [ 299.894741][T14625] dump_stack_lvl+0x189/0x250 [ 299.894766][T14625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.894786][T14625] ? __pfx__printk+0x10/0x10 [ 299.894811][T14625] ? print_lock_name+0xde/0x100 [ 299.894835][T14625] print_circular_bug+0x2ee/0x310 [ 299.894857][T14625] check_noncircular+0x134/0x160 [ 299.894877][T14625] validate_chain+0xb9b/0x2140 [ 299.894897][T14625] ? rt6_disable_ip+0x6b3/0x720 [ 299.894912][T14625] ? __queue_work+0xc56/0xfb0 [ 299.894931][T14625] ? __lock_acquire+0xab9/0xd20 [ 299.894956][T14625] __lock_acquire+0xab9/0xd20 [ 299.894982][T14625] ? nr_rt_device_down+0xa9/0x720 [ 299.895005][T14625] lock_acquire+0x120/0x360 [ 299.895027][T14625] ? nr_rt_device_down+0xa9/0x720 [ 299.895055][T14625] ? nr_rt_device_down+0xa9/0x720 [ 299.895077][T14625] _raw_spin_lock_bh+0x36/0x50 [ 299.895102][T14625] ? nr_rt_device_down+0xa9/0x720 [ 299.895124][T14625] nr_rt_device_down+0xa9/0x720 [ 299.895148][T14625] ? do_raw_spin_unlock+0x122/0x240 [ 299.895171][T14625] nr_device_event+0x137/0x150 [ 299.895193][T14625] notifier_call_chain+0x1b3/0x3e0 [ 299.895214][T14625] __dev_notify_flags+0x18d/0x2e0 [ 299.895235][T14625] ? __pfx___dev_notify_flags+0x10/0x10 [ 299.895253][T14625] ? __dev_change_flags+0x4cc/0x6d0 [ 299.895274][T14625] ? __pfx___dev_change_flags+0x10/0x10 [ 299.895293][T14625] ? full_name_hash+0x92/0xe0 [ 299.895313][T14625] netif_change_flags+0xe8/0x1a0 [ 299.895335][T14625] dev_change_flags+0x130/0x260 [ 299.895354][T14625] dev_ioctl+0x7b4/0x1150 [ 299.895372][T14625] sock_do_ioctl+0x22c/0x300 [ 299.895404][T14625] ? __pfx_sock_do_ioctl+0x10/0x10 [ 299.895428][T14625] ? __lock_acquire+0xab9/0xd20 [ 299.895459][T14625] sock_ioctl+0x576/0x790 [ 299.895483][T14625] ? __pfx_sock_ioctl+0x10/0x10 [ 299.895507][T14625] ? __fget_files+0x2a/0x420 [ 299.895520][T14625] ? __fget_files+0x3a0/0x420 [ 299.895533][T14625] ? __fget_files+0x2a/0x420 [ 299.895548][T14625] ? bpf_lsm_file_ioctl+0x9/0x20 [ 299.895569][T14625] ? __pfx_sock_ioctl+0x10/0x10 [ 299.895591][T14625] __se_sys_ioctl+0xfc/0x170 [ 299.895611][T14625] do_syscall_64+0xfa/0x3b0 [ 299.895630][T14625] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.895648][T14625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.895665][T14625] ? clear_bhb_loop+0x60/0xb0 [ 299.895683][T14625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.895700][T14625] RIP: 0033:0x7f399738eec9 [ 299.895716][T14625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.895731][T14625] RSP: 002b:00007f3998246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.895749][T14625] RAX: ffffffffffffffda RBX: 00007f39975e5fa0 RCX: 00007f399738eec9 [ 299.895761][T14625] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000004 [ 299.895772][T14625] RBP: 00007f3997411f91 R08: 0000000000000000 R09: 0000000000000000 [ 299.895782][T14625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.895792][T14625] R13: 00007f39975e6038 R14: 00007f39975e5fa0 R15: 00007ffc16060b78 [ 299.895811][T14625]