last executing test programs: 2.423378693s ago: executing program 0 (id=8198): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="510302"], 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x3c, r8, 0x1, 0x1, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10001}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x3c}}, 0x24008084) socketpair(0x5, 0x3, 0x8000, &(0x7f0000000580)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2.282048711s ago: executing program 1 (id=8203): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_opts(r0, 0x84, 0xa, 0xfffffffffffffffe, &(0x7f0000000000)=0x55571886519bd2f4) r1 = socket$igmp6(0xa, 0x3, 0x2) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x40010000, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000000c0), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0x40}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440014001000010429bd15bc9af601", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e00000010000280080005000200"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, 0x0, &(0x7f0000000340)='GPL\x00', 0x2, 0xc3, &(0x7f0000000380)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b}, 0x94) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000004c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fddbdf2501000000000000000141000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20004010) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)='GPL\x00', 0x4, 0xc3, &(0x7f00000013c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x0, 0x200000}, 0x8, 0x10, &(0x7f0000000a00), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0021040000000000000000003b49166f34af7201", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x0, 0x0, &(0x7f0000000c40)='GPL\x00', 0x9, 0x6a, &(0x7f0000000c80)=""/106, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[r8], &(0x7f0000000d40), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r8}, &(0x7f0000000dc0), &(0x7f0000000e00)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='>', 0x20000296}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000000f00), 0x400023c, 0x300, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000f40)={{0xa, 0x4e20, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, {0xa, 0x4e22, 0x762e7e93, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8001}, 0x0, {[0x8000, 0x800008, 0x0, 0x4, 0x8, 0x4, 0x7, 0x8002c0]}}, 0x5c) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000fc0)=@nat={'nat\x00', 0x670, 0x5, 0x380, 0x240, 0xf0, 0xffffffff, 0x188, 0x0, 0x2e8, 0x2e8, 0xffffffff, 0x2e8, 0x2e8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xb8, 0xf0, 0x48, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x9}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 2.085525509s ago: executing program 3 (id=8207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r2, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="2e00000013000500000000000000000004010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(0x0, r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100fdfffffffcffffff1d00000008000300", @ANYRES32=r10, @ANYBLOB="50002f800c0002000201aaaaaaaaaaaa38000380080001000000000005000300000000002400038006000300a1aa00000800020002000000060001000300000008000200020000000800"], 0x6c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000700)={0x12c, r9, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200000}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0xac, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x944}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x855}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd6}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x401}]}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x800c0}, 0x50) close(r5) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000003, 0x32, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r12}, 0xc) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPSET_CMD_RENAME(r13, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}, 0x1, 0x0, 0x0, 0xc0805}, 0x20040004) 1.994761438s ago: executing program 4 (id=8209): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r3 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) unshare(0x22020400) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x811) 1.877214919s ago: executing program 0 (id=8210): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4800, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x101401, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x8, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40}, 0x50) (async) socket$kcm(0xa, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x15, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, r1}, 0x18) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000240)={'veth0_macvtap\x00', {0x2, 0x4e24, @rand_addr=0x64010102}}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.788521858s ago: executing program 4 (id=8212): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x600}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x7c2}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="340000006800010500000000000000000000000000000000080001000300000006000300010000000c000200011a000002000000"], 0x34}}, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f00000009c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000b00)={0x20, 0x3, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r4, &(0x7f0000000b40)="8b", 0x34000, 0x0, &(0x7f0000000b80)={0xa, 0x0, 0x0, @private1}, 0x1c) unshare(0x400) pselect6(0x40, &(0x7f0000000bc0)={0xc, 0x1, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x400000000000, 0x400}, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000c00)=0x1, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x8, 0xfffffffffffffffc, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x400c050) sendto$inet6(r5, &(0x7f0000000dc0)='\x00', 0x1, 0xe0, &(0x7f0000000e00)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0xffffffffffffff78) unshare(0x2040400) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000e40)='ns/uts\x00') ioctl$NS_GET_USERNS(r7, 0xb701, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x4000020}, 0x44008014) socket$nl_route(0x10, 0x3, 0x0) 1.718675342s ago: executing program 2 (id=8213): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x5ec, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {}, {0xf9d690b100bbf911}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0x5bc, 0x2, [@TCA_BASIC_ACT={0x5a4, 0x3, [@m_xt={0xf4, 0x11, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x52, 0x6, {0x80, 'mangle\x00', 0x7, 0x8, "4cbfddd8a366640511c8e53ce873fe53d9038aee0bac6a4c87b6bd9cd4f7abc00a20a74c690433b9"}}]}, {0x78, 0x6, "95f5aded4c856197f64d5becbcc4c73a6190a1d2fcac70592ae4e686169e43187eb84c00aa7cb58f8fc52e5e10197e0736f5a45466a36d2583508faba160f2e32085e204561c902ad9d8487f425cfb06e3d6b86e06dd393e5a8c268eff09007a1868d52c746d856ea8980c759f4b6cb8cd3943a1"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0x114, 0xb, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'drr\x00'}, @TCA_DEF_DATA={0x9, 0x3, '\\[!\\\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x1598eeea, 0x2, 0xcba6, 0x8}}]}, {0xb2, 0x6, "bff4e633cf870c701ed69d88cb49a7564ad1d4c4995d59379cb0f72fbec66fb4b2677618ca103d3f403724550274af2c4a6a62e3d871f79be0bed221eae26ea6b69e9c232fe418e76c6d41f2a3e9d907ba1c7c4adccd78bf04db7ada05d8b740c7fa0f46d87bfd3c8fb54884a96a7077f4698b5d6881977c98e38c41e0ede318e8f9952407014d60f9bdcbe0557826bdaed276ff11496fe8fa07a9d909381fb1ded55dd80e09550d718fb6472059"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0xa0, 0x0, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xd, 0xb1c2, 0xffffffffffffffff, 0xa, 0x7f}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x1, 0x0, 0x1, 0x8}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x836, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x2, 0x8, 0x0, 0x5795}}]}, {0x1e, 0x6, "f62dd7e4b324680400996a4cb6b09c85faad242145fab36de4f8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xa8, 0xf, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xce8}]}, {0x72, 0x6, "6473d6cc025e99be526af26abdba2777227c2e73bb746d795d13ab0a1b3f9989e184ca62c83568763e2033c9c0342d89eb1c00cc4bac1e6456de05c97c0fa82a1b97ed6566a9b0d9fb2a9549ab11a85aa99be8970a20c349df4631f1fe487eae34b0d137774343fb902cd588aa3e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0x130, 0x1f, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x11}}]}, {0xf7, 0x6, "8c639d8421b688e902615ad106fdaedf5a4b6961d788bc137d7d21378645b5462d522a83a1265f39d9f3a25f4e12138209d14029767d607b82a421d5f4d1402f7a3471a833eeb5ae3ed33effac5c7c5314b786ee54806492d35d26db44acb6e81c413c7a520249b0d2740239530b04635d1c56d45d670e821aad587b395755c2d9438985e33aed3e327d39a82e3532c42538ecfc8af4c22fed0f1e8a8038e162b847a8086cf0f28da0d02fc7371fa5469eeeffa645989b5e3ae28b7e2988602ea3d92b80fcf586c1df9316e7bcdb541d9a85a037f0b0d4bade72cd246ecb437f7f3b45d3fbdb7c9488cb77657ed4ca2054b32b"}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_ct={0xd4, 0x18, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xf}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_ACTION={0x6, 0x3, 0x8}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x1}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0x66, 0x6, "7498f877a803cc5c96e1567ab329f335dfdb3598b6bacf8a0835bd7a762da05a7abb5bbe479cf3047225baaba8431292d4c57351d7efa4588bc415f8e5abb82ebaa541c6be5ae5f75d8a563e5a9cd4ba5a636d1fa2ac4769552225080b0c2a916c0e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x4c, 0xa, 0x0, 0x0, {{0x9}, {0x4}, {0x20, 0x6, "05f928531fbfc42c2d0de442591b0aa94489643d534db722b330f163"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_POLICE={0x14, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}]}}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x4010}, 0x40) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 1.592925023s ago: executing program 0 (id=8214): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x83, &(0x7f0000000000)={0x21, 0x0, 0x1, 0x1}, &(0x7f0000000080)=0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @random="b331687b8145", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "62d308", 0x18, 0x6, 0xff, @private1, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x6}]}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 1.591620667s ago: executing program 2 (id=8215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xac}, 0x1, 0x6000, 0x0, 0x20004010}, 0x20050800) 1.508924062s ago: executing program 3 (id=8216): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000000000001aa0000ff0f000085200000af49030095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.403307027s ago: executing program 2 (id=8217): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x80000000000009, 0xfeb6, 0x7ff}, {0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x184, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3505}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0x2, @in6=@mcast2, 0x0, 0x3}, {{@in6=@dev, 0x0, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x2, 0x1, 0x0, 0x85}, {{@in=@local, 0x0, 0x32}, 0x2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x5a8, 0x0, 0x4}, {{@in6=@private2, 0x0, 0x6c}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x4, 0x2}]}]}, 0x23c}}, 0x20000000) 1.395970199s ago: executing program 3 (id=8218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001c40)={&(0x7f0000000200), 0xc, &(0x7f0000001c00)={&(0x7f0000000640)=@deltfilter={0x1598, 0x2d, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x10, 0x8}, {0xe, 0x5}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x40}}, @filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x3}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x55}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}]}}, @filter_kind_options=@f_flow={{0x9}, {0x152c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x18}, @TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x929}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x9}, @TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ca02}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7}, @TCA_FLOW_ACT={0x14e8, 0x9, 0x0, 0x1, [@m_bpf={0xb0, 0x9, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x2, 0x81, 0xdb, 0x8}, {0xa, 0x1, 0xd, 0x71}, {0x8, 0x8, 0x1, 0x2}, {0xa, 0x2, 0x5, 0x401}, {0x7ff, 0x9, 0x3, 0x4}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x2, 0x1, 0x8000, 0x80}}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}]}, {0x34, 0x6, "4563b4c78bb6fd11804cdcc3a5e4d4f7ab61e1ff2ff9abc821e0db65e07bc47184ad76796c2308627c7ba1373e6983f9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_skbmod={0x1a0, 0xf, 0x0, 0x0, {{0xb}, {0x98, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x1, 0x0, 0x1}, 0xc}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x7, 0x1, 0x4, 0x9}, 0x4}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfe00}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="ff97e431aa77"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, {0xdd, 0x6, "e2dbb8f399dd054e47707747c2db0415251480083b73f0169f96ba235dd3644848dda6ff43a5805adfefa62e4d2c9f5e261fd2a86648ce0333a923f904f8bc5e4ba94b548f4b1a759dc6fe239b241e0f918ed1b8b2c8224a72f42004626976d4ba6e913f7322cc35f074ebbb4c26e979ee94f62093a9d2ef87ce14f3e4bb2e22f73289b79648533be77594fc61f9da4baac65a8144f5d73bfa1c1b0d511dabfbc93267edeebb21c5c1d926d12e737f3ffcc8da4936aff34e06b4051b9aa31185280e255b0136af731bcf786394455597aa4269a4156ff6cedc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0x10dc, 0x12, 0x0, 0x0, {{0x9}, {0xb0, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4d, 0x9, 0x5, 0x1}, 0x3}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5, 0x20000000, 0xfffffc00, 0x6}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb82ac}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0xf04, 0x0, 0x1, 0x3}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x2, 0x5, 0x4, 0xe5b2}, 0x2}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffd, 0x1, 0x5, 0x2, 0xd}, 0x2}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0x1b8, 0x2, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xe0a}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfc83, 0x100, 0x0, 0x1, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x1cbb, 0x4, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x9, 0x6, 0x0, 0xb36}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1f4c, 0x20000004}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x2, 0xffffffffffffffff, 0x2, 0x512}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb03}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1e6e, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x173eb1d87226735, 0x1195, 0x10000000}}]}, {0xed, 0x6, "e2e56c5fe79b61ab776c11570e5a86b1597d996135a2aa16abffeae45dba500b552c058895e3a64e25dc14c3c4cc3e4377f6cc48fb87b0d7a562779ea08c385e88fda8989948a46cf1e1aec89e2fb38d64c2f604ac8051e1552ffe912246334603c074fdce761d1252323d6e83c36c58ddd9a711df0d73549aa8b7b50b41159ef23928352272d5029bc2bcd7dddeabf75ee0f16b4e8de9350016262a260b3755615f614678495d1ee95943d03f63e2fd463b226516ad02a489b165fe5ee6b71605edda885a9df9521dcefb6d08d1f93eabe4013d498e3689983ca4d09739f196b0037951f47fdc3bde"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x9, 0x10}}]}}, @TCA_CHAIN={0x8, 0xb, 0x8000}]}, 0x1598}, 0x1, 0x0, 0x0, 0x48840}, 0x1e6e7e7cb04df3ab) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) connect$can_j1939(r1, &(0x7f0000000280)={0x1d, r2, 0x0, {0x1, 0xff, 0x1}, 0xfe}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xc, &(0x7f00000004c0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r4}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xe}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) 1.37040037s ago: executing program 0 (id=8219): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000200)=0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000fce5ffff00000000800000af18090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000540)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x2}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000ffdbdf250200000008000300", @ANYRES32=r7, @ANYBLOB="080026004317000008002700"], 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x880) r8 = socket(0x10, 0x80002, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2f, &(0x7f0000000040)={0xd, {{0xa, 0x4e21, 0x81, @private1, 0x2}}, {{0xa, 0x4e22, 0xe, @local, 0xfffffffd}}}, 0x108) sendmsg$nl_route_sched(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x84, 0x30, 0x51b, 0x0, 0x0, {}, [{0x70, 0x1, [@m_skbmod={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, @TCA_SKBMOD_DMAC={0xa}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x84}}, 0x0) 1.315603597s ago: executing program 2 (id=8220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) pipe(&(0x7f00000003c0)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000380)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="4000000010004b0428bd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000080480500140012800b0001006272696467650000230002800a000100aa"], 0x40}}, 0x4) 1.284275s ago: executing program 1 (id=8221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001800010029bd7000fedbdf251d01050008000a00", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r1, @ANYRES16=0x0], 0x30}, 0x1, 0x0, 0x0, 0x20008854}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000580)=0x5, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r4, @ANYBLOB="b2021e868fadc714c7522f63ca0c46e224110f71f4127fe056ee691b8a86332a35c5964cbde872b29ea4467ea776838658c4f7d9d7bfe0d4cf4aa23d887891782d022e1b74e940481e4e990a2360eeb27f737223f7ba9c05c1157c08f6ae44d63b1bf214359dff59e39cea1c2a4764fed049e308375a8038246b4706e9e1e6aafa0527084599925c45f7"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4894) 1.086599683s ago: executing program 1 (id=8222): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r3 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) unshare(0x22020400) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, 0x0, 0x811) 1.004006897s ago: executing program 1 (id=8223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x34, 0x0, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}]}]}, 0x34}}, 0x20008094) 946.301135ms ago: executing program 2 (id=8224): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="28000000b56aa6540a74d7b245e08c867bff2fccd25b7a1f520cf3924376d6494e8e8d6df6152cf2501a957ebb9d3deb135100fe30993fe5c77bcf51cc3b3fd8b7116958855b9012f1ab060a93df2e3d4af8e176e73be8a8e90c0ed8c9d553e2a38e816c4c89da99705612652eaf3ae85a580f1384d1b0b69e45e04b3d241c7dd2454f601c6270a121fc490588331c498f6ef37d33451cc9228748a6dd1d46b6fb58338ea67d81a9436ad6b7e671ca209e12ad676585a0afc6db2c4fc367464e0b55b45f7f7bd22260ff328cfb1d148e3f7ff765996dfff08daa623064d8765700af736d11288f9952ad25fd7f8b541496ae2527a677da103a33a7bdbcf95946e86b627b0526dbe6e7686c326ebe453c64ef069f58d68ece9e89536aab371b33e40d3ed98be5c2bcb859c4264523c800000000000039cf6444beebb55d940fbff90ac085a04060268ce322db85e0b53593dc11f089733073819a6baacfb20164a77c34e7e0dd6e9ec479eaed7aebba3e9ee46d0aa4a17f72c05cc943d535680932ba2d", @ANYRES16=r2, @ANYBLOB="8b33000000000300f1000500000008000300", @ANYRES64=r3, @ANYRES8], 0x28}}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x0, 0x4c, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000000000000001000001240004580d27778020000180070001006374000014000280080002400000000508000140000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="8b33000000000300f1000500000008000300", @ANYRES64=r3, @ANYRES8], 0x28}}, 0x0) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r5, 0x0, 0x4c, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b04000000000000000001000001240004580d27778020000180070001006374000014000280080002400000000508000140000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) (async) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) (async) 943.902497ms ago: executing program 1 (id=8225): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x1}}, 0x10) unshare(0x2c020400) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (rerun: 64) ioctl(r1, 0x40047438, &(0x7f0000000680)) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x80000042, 0xffffffff}, 0x10) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000940)={r1, &(0x7f0000000840)='GPL\x00', 0x2c640, &(0x7f0000000880)={@align=0x7, {0x2ed1, 0x4, 0x7, 0x9}}, 0x7f, &(0x7f00000008c0), &(0x7f0000000900)}) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32) r5 = socket(0x2, 0x80805, 0x0) (rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000980)={0x0, 0x10, &(0x7f00000009c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000a00)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000a40)=@assoc_value={0x0}, &(0x7f0000000a80)=0x8) (rerun: 32) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000ac0)={r6, @in6={{0xa, 0x4e21, 0x1, @private2, 0xfffffff9}}, 0xfff, 0x8}, &(0x7f0000000b80)=0x90) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r3, 0x84, 0x80, &(0x7f0000000bc0)={r6, 0xa8ef}, &(0x7f0000000c00)=0x8) (async, rerun: 32) bind$tipc(0xffffffffffffffff, 0x0, 0x0) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x2000000000000216, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000640)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r11 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r10, r10, 0x2f}, 0x14) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000800)={r11, 0x0, 0x0}, 0x10) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x1e) write(r7, &(0x7f0000000040)="0b000300010001", 0x7) (async) close(0xffffffffffffffff) 805.96635ms ago: executing program 4 (id=8226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xe, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008840}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 654.637274ms ago: executing program 4 (id=8227): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="5c000000260001000000000004000000490000800c0001000200000000000000971ed308218750518325cac8c266a8c6efe4fbf9a3916db08f05ae089f966b16abb07a8f70b234f5fec1d34930936f49dfdd8557c404005380000000"], 0x5c}], 0x1}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0xfffffef1, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0xd8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x4, {0x0, 0x0, 0x0, r2, {0x0, 0x15}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x8c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0xd1a}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1, 0x3}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7ff}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7960, 0x2}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xb}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5}, @TCA_HTB_INIT={0x0, 0x2, {0x3, 0x47, 0x401}}]}}, @TCA_STAB={0x4}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x4}}, @qdisc_kind_options=@q_qfg={0x8}]}, 0xd8}, 0x1, 0x0, 0x0, 0xf8072eabe1d74d47}, 0x20000004) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)={0x14, 0x23, 0x1, 0x0, 0x25dfdbfc, "", [@generic="02"]}, 0x14}], 0x1, 0x0, 0x0, 0x48000}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x5, 0xfffffffffffffffc, 0xae, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(0x3) socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000a40)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4000}, 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40480, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0xffffffffffffff66}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f0000000b00)="f9", 0x1, 0x20000040, &(0x7f0000000b40)={0xa, 0x0, 0x2, @private2}, 0x1c) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x74, &(0x7f0000000b80)={0x0, 0xfffe, 0x10, 0x7, 0x510}, &(0x7f0000000bc0)=0x18) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000700)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000002, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x81}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000840)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'syzkaller0\x00'}) 513.067668ms ago: executing program 3 (id=8228): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000000000001ab0000ff0f000085200000af49030095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 449.525357ms ago: executing program 3 (id=8229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x52}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f00000015c0)=@ipv4_newroute={0x44, 0x18, 0x200, 0x70bd27, 0x25dfdbfb, {0x2, 0x14, 0x10, 0xaf, 0xfc, 0x3, 0xfd, 0xa, 0x1200}, [@RTA_OIF={0x8}, @RTA_DST={0x8, 0x1, @rand_addr=0x64010102}, @RTA_DST={0x8, 0x1, @local}, @RTA_UID={0x8}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x44}, 0x1, 0x0, 0x0, 0x44800}, 0x40041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001680)={0x0, 0x0, 0x0}, &(0x7f00000016c0)=0xc) sendmmsg$unix(r1, &(0x7f0000001700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=[@rights={{0x18, 0x1, 0x1, [r2, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x50, 0x40800}}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000017c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001800)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000001900)=0xe8) r8 = getgid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = getpid() sendmsg$unix(r9, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee00}}}], 0x20, 0x1}, 0x880) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x2a, 0x803, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={0x0, 0x24}}, 0x0) getsockname$packet(r12, &(0x7f0000001a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r13, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r14 = socket(0x1, 0x803, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000001b80)='hybla', 0x5) getsockname$packet(r14, &(0x7f0000001bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001c00)=0x14) sendmsg$nl_route(r12, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000100)=@can_newroute={0x54, 0x18, 0x800, 0x70bd27, 0x25dfdbfb, {0x1d, 0x1, 0x1}, [@CGW_MOD_UID={0x8, 0xe, r7}, @CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "1ab6a3748a2e90af"}}}, @CGW_CS_XOR={0x8, 0x5, {0x3, 0xfffffffffffffff8, 0x1, 0xc}}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x0, 0x0, 0x1}, 0x5, 0x0, 0x0, 0x0, "7e80a134a9beaf3d"}, 0x5}}]}, 0x54}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000001d00)={{{@in=@dev, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000001e00)=0xe8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e40)={0xffffffffffffffff}) shutdown(r17, 0x0) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_generic(r11, &(0x7f0000001f00)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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", @ANYRES32=r16, @ANYBLOB="04008500ea029d80a0018b80040091000400558008005e00", @ANYRES32=r12, @ANYBLOB="8c01398085011280010131003226e0c3985c5d2d31ba7bb2ee7a2596d874651d9a33b3a7ac03d34d18461b9829397420d4b1e8376c5a27eb9677c343cafa0fd01f94f7b5ece04897eeb0c02f52e4df089de25ae08506f390bb5e29d1d1dfc2d1666be85b0d21137a138b7035ef79348b6030b4c271141c59c99a2c7e9892ff171c0f9b20dd74ff2f2609fae4c332e66a0752292dc5b4574105a593348e9ebcb98298e29b5a8ada8cc873936eec9acfda03e50832b5dc2406478149cb473180095d5c18a20104dfd8e076b07ae5988b2a6f5d034f8494a6f1b9fe1909c54bbd72f0022cd18b23dfb33de592f2cbb5cf08a41c974a690b01db996fbab58da82298d62d6ea330ccaa10000000009c89dc663df7b63f9c7417171b9b5305c1271aa50df721d8acc7a46704000e80f979aa4b06b66804503a65aa156cc3666c12c624db0529a7495067bd907f2a53a798c117db08ee38f73f04002f8071a6daaca0df9280d34f0b73a1db4e5141856f277e73a3bee40c14551725c5eb7a6946612ef593c3294a89c397856c00000092000c002cd69e5cecd709a5a69e57d49bc3c2917afbc8ed5d548cf2c0ad7b6b7c2ebe4f7f8ba253de470f3158c6f41dcc94bfc8b6e0a651e92b4b81d63d267ed3f818c1d262523ad9e5e4b0b040b5a32d980f9a3ed5024ee1ae17938915738663e7b1d96aa0bfcaeae31890cf37852f73ee1be9dcb57fb4357c3c8f4bb35d583e75651dbbcdc39965f6f7ad11ac9f1cee750000baa8704dcdfa00a44f44050029e0ce02bd86ae630fa9c5bf5d953bfc8fabc61d3086439ba72878caf69c8128c04d2fa730d4642f2d258dc5faa671098064d60eaddaa0e9fd9d9251e18b89fad1854a60c38c18788fec3ef3569afa4a534c9f3b7241254167cda9400b2d1e66b327ecdd2b9be849d969cf6cb3b91e71ce6eba810e1a3c328a93b24ca172fe98496878d402ba443fc2f4fdda6b224db93cf0505d57b169bbb9026bbaf5a008005c00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x5e8}, 0x1, 0x0, 0x0, 0x40080c4}, 0x8080) r18 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_IPSEC_POLICY(r18, 0x29, 0x22, &(0x7f00000025c0)={{{@in=@empty, @in=@loopback, 0x4e20, 0x8, 0x4e24, 0x1000, 0x5, 0xa0, 0x80, 0x0, r15, r16}, {0x8000, 0x1800000000, 0x7, 0x7, 0x6, 0xa24, 0x6, 0xbc1}, {0x2, 0x9, 0x7, 0x24}, 0x3, 0x0, 0x1, 0x1, 0x2, 0x2}, {{@in=@empty, 0x4d3, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x3, 0x2, 0x40, 0xffffffff, 0x4, 0x4}}, 0xe8) sendmsg$netlink(r0, &(0x7f0000002780)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4}, 0xc, &(0x7f0000000a80)=[{&(0x7f00000002c0)={0x1c0, 0x16, 0x100, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x13b, 0x0, 0x0, @fd=r0}, @generic="ecb484342b95fe2e054334553169bb249e53324c55b3cca74b20572897b6c73cee7db6187f370e05a44b2f7d00437f3679a26d83d242", @nested={0x1c, 0xc7, 0x0, 0x1, [@nested={0x4, 0x112}, @nested={0x4, 0x10a}, @typed={0xd, 0x7c, 0x0, 0x0, @str='-:.-:{(^\x00'}]}, @nested={0x152, 0xb4, 0x0, 0x1, [@generic="5d9692feaf37a7ff0d0d38080619f28f47", @typed={0x8, 0x7b, 0x0, 0x0, @uid}, @nested={0x4, 0x15a}, @generic="361c15d56e21490743d347efaec8d6107c22906f85a8145970f7a434d028861eb47a77712965b2cebac8b69d0bdbabc30cde17d3e90581cde1287b670a08b68c32108ec15a715422f2703a652935963856f504834a8173c4f676381658dd52471b7919bb6ab24d9cbd892cbd050e87a166d37f9691f6e0f7f0e3edfb9538cd21aae0dbf5b084073b52503851a1ca602d61b13488b673579fc050dda0adc0779fe1aa29c0564bbdb3d90790c8e65ef6d74c69c701b8eb51e11a495e35c73670530d3c86c9b38119e35aa799e0781303dd2ef6e467f46bfcbb845d25cfbb27380560bba94965769a185380733f4c0f5cf2c226d6eb3d", @typed={0x3b, 0x121, 0x0, 0x0, @binary="242be9aaddbea02eae11b65613081a624a6efc4143f016b2980df9a4610cd0bf92724aee8db2dc0440d2edddc0312b8a82ef3521088534"}]}]}, 0x1c0}, {&(0x7f0000000700)={0x358, 0x27, 0x1, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x84, 0x0, 0x0, @fd=r0}, @generic="cd68e823132fb6a62005afd9107556764ef7d9c7f516bf5e63601b0c524e4bba99f102bfe1cd8f79e4b09d3a81567c86f6fbcae9855087bb02c80a6c689cfef8d6582e671d99a7776fcaf4c1deacdbf8645f395683e3696f3cbd94caf68f2178c6fdf808200d6654e319e2d4a418ac4002677703e16a15ea1278a4b29cadb81695f5e6cc067cb23d5ee8bbd56091e92662e7c2d149a1a2332178017894c7f8dc643432e755e415019a6cf74209a44b1f1a78f9dc6dab78eaef23c0d11600be539b185e0f25493c2b2aa5043edc389a7d3e0a79734206144dde1e80254ea3c827073a120a4c14a8faef23b26c28f4f8f87965", @nested={0x62, 0x3c, 0x0, 0x1, [@generic="f499ca2523e6c4669f232b949ea084b82b78ec1c639a84591b59eebf7890ad8031211103b7dec800c5df31424488b95853702523124da22701cd07a20e74e680b11c2f52bfed099a092ec6bf81a57ef4dc4a1d73a880d90359c40c887eed"]}, @generic="0dd61974605034ae77b8f2245a45e7a8d8e315bdeb5c1e6c330df6ba76a030c928376a208841b138f5903c5a798e34d691f6c7d3fdfa11c1c2662877471d39342c984b598e8503934bd7c98f2e4db8416f6e1e98971a7ec79fdbe91c5f23f7a6efc1d4a0e4e7aba81df6e5bce58ca07819b86eaeb3c642f885b11b84a9da30cd9f4a2d43085a0ddbca377bbefb5e2b65fcb52ad249299e3569c23cfc135bc4d3f21b6f804b894562e769a1c02eb42c3d7011747642a464fd817c61b5e4b6fbdc5184a20a8d48", @generic, @generic="91f202f581f0103a778057821280b1f1c8122e3cded9020675abbf0067bea0aa3a5a1e85a6a0e4186c2dd5c30e69a871c244324087d7367f235e74e598f34412ffe158cdbc249677d8c16b4101c603acbe4c47a789a6738fa29cfa59ed89897cb1716a194f79bf2522504c1ea1918f3431d1bc9bf42a9d3e42c7efd2a06e4120dba75790b70f01ba964c1ace8adaf841552c45c0627dd5737bb0fd526bb8872a1fc79afb8859d6bfb25d8b5d44caaefb51db726d7f966bac0d9b811858169a41e6909c", @nested={0x60, 0xda, 0x0, 0x1, [@generic="232f9113bbe1ca2c6db520e03e0d0e5b168c54a0419e945a6f6f491778e827f45b46123c62ba4e9fa0e7a8a2d9b916dff3ee2f6e1e5898f0e8acc9fc6066931bcbcc050d4296990a2a9b33c4ab0679aa6b2d0809686e0ed8", @typed={0x4, 0x54}]}]}, 0x358}], 0x2, &(0x7f00000026c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r16, 0xee01}}}], 0xa0, 0x4000}, 0x10) 403.749538ms ago: executing program 0 (id=8230): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000080) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="e00000001200090500000000000000000800bb0000000000c5000080", @ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe0"], 0xe0}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="0815000000051104060000000000000001000005540201"], 0x1508}}, 0x24000880) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) writev(r0, &(0x7f0000000ac0), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711242000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0xa8011, 0xffffffffffffffff, 0x2000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.events\x00', 0x275a, 0x0) sendfile(r5, r5, 0x0, 0x856) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0x1f, &(0x7f0000000b00)=ANY=[@ANYBLOB="290b500000000000b7080000000000007b8af8ff00000000b70800004f0000007b8af0ffc5890000bfa1000000000000070100fbf70007040000f0ffffffb702000008000000182300"/84, @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018500000000000000000000000000000020f050026010000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000005000000"], &(0x7f0000000700)='syzkaller\x00', 0x8, 0x4f, &(0x7f0000000c40)=""/79, 0x41000, 0x4, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000d00)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000d40)={0x2, 0x4, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[0xffffffffffffffff, r3], &(0x7f0000000dc0)=[{0x5, 0x3, 0xd, 0x8}, {0x2, 0x4, 0xb}, {0x0, 0x4, 0x7, 0x9}, {0x4, 0x5, 0xd, 0x5}], 0x10, 0xa4a6}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$fou(&(0x7f0000000540), r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000740)={'ip_vti0\x00', 0x0, 0x1, 0x9e, 0x8000, 0x8, {{0xa, 0x4, 0x0, 0x4, 0x28, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast1, @remote, {[@rr={0x7, 0x13, 0x25, [@local, @private=0xa010102, @private=0xa010100, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x9d, 0x1a, 0x24, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x10, 0x20, 0x8, 0x4ac3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x4b6, 0x0, {{0x9, 0x4, 0x1, 0x9, 0x24, 0x64, 0x0, 0x92, 0x4, 0x0, @private=0xa010102, @multicast2, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xb, 0xaf, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1d}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0}, &(0x7f0000000480)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000004c0)={0x0, @dev, @empty}, &(0x7f0000000500)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000001080)=ANY=[@ANYBLOB="9c010000", @ANYRES16=r4, @ANYBLOB="0200294b731fe6d89b642a97000000a80001800800012f92669f343bc82a1f45a3d95c20509d3607c14ccbbbe006fe92bf4130", @ANYRES32=r6, @ANYBLOB="08000300020000000800030003000000140002007767320000000000000000000000000008000100", @ANYRES32=r7, @ANYBLOB="0800030002000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="080003000100000008000100", @ANYRES32=r12, @ANYBLOB="1400020067656e65766531000000000000000000080003000000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="140002006e6963766630000000000000000000000800030000000000600001801400020073797a6b616c6c6572300000000000000800030001000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r9, @ANYBLOB="080003000100000008000100", @ANYRES32=r10, @ANYBLOB="1400020070696d36726567300000000000000000040001800c00018008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000100", @ANYRES32=r11, @ANYBLOB="1400020076657468305f766c616e00000000000030000180080003000200000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="1400020076657468305f746f5f7465616d0000002000018014000200776732000000000000000000000000000800030003000000"], 0x19c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 259.416409ms ago: executing program 4 (id=8231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000012740)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000012780)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000127c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000012800)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000012840)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "0f3406ec00000000000092f94413582b", "00001000", "4e6703000000ac2f"}, 0x28) sendmmsg$inet6(r0, &(0x7f0000012f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000012e80)=[{&(0x7f0000012a40)="01679c840c524a08d14873b07ccfae84ac37e22a295b967a278fdd4a348871c78a0bf055009a0f2212175ef617efe9be07a5320d99ae6dc8802da224c58e26ca47bd3775b744d9f0154b96b5ac00", 0x4e}, {&(0x7f0000012ac0)="69f86b9ef92c7cbba56766bbf8", 0xd}, {&(0x7f0000012b00)="b211af7389f616016ad7501db8722a527cdb0d8249c2b28303ba58e063595de798a2405158e7e9cddc6a69853eafba3aa019ca02e21911b27613e9c7c8153ef23a1e951606b4682b197ade0b1f3ba211a633b977debb3415c9bc0377dfb4f33b64d4f26e30e0902a6dbbe390fef5e53223a550cac9ffd34b97530b087b1ac61fe33ccef1eefd2d3c0af4ddf23b650a740e79b4fa87300d63bf0b7124e69709af5f174fa78e57c4340975d3cef6a2979c04bf9c0ab150cecfdd354d39fe5c984dddde6442ebafe2f0b283ac0b7a201d85d925", 0xd2}, {&(0x7f0000012c00)="d570a8c25d005f40435b5670b62f64b38870289a44ab2da3bd862a706b3727458219da1e7281dd6f9cf4", 0x2a}, {&(0x7f0000012c40)="d9b0ce728a1a4080dbb38f5e0acd0ac7f4e7bbd702bf1ba38093999d976a708034d065e1338ad1f8145e780a1865f9040afca9bfd7b4d92a9dd1af2958c84731497517c8701a0458dead2a510cdf2ecb80960e2ee6cd13ea655016b5af8d837a7258a4c6ed5c9f6395c1c2f215f6da4b5bf0b6e7124790f44e0805a0b969b7a1dfa3a48e1ea7b352dde33a537b332f011bdedfea108bd7d2c453563c49a4aeb82df1bb74e3071311384f17235cf65a52e0f691af2a22c083bf351ccfadfc921afc333ec23c8065829b7ca905d05f74", 0xcf}], 0x5}}], 0x2, 0x40) 212.292587ms ago: executing program 1 (id=8232): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000400000000000000000018450000fdffffff000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') recvfrom$inet(r3, &(0x7f0000000080)=""/25, 0x19, 0x43, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/163, 0xa3}], 0x2) write$cgroup_int(r5, &(0x7f0000002240), 0xfffffdef) r6 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(0x0, 0x0, 0x3, 0x30, r6, 0x80000000) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=ANY=[@ANYBLOB="3000000041000701fefffffffeffffff017c0000040042800c00018006000600800a00000c000280080013008b5a3b3443", @ANYRES32=r8, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) listen(r7, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, &(0x7f0000002340)={0x10, 0x0, 0x0, 0x1}, 0xc) r10 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r10, &(0x7f0000002380)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000023c0)) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000002400)={{{@in=@broadcast, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r10, &(0x7f0000002500), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) 123.848776ms ago: executing program 0 (id=8233): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r0, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x6) close(0x3) r3 = socket(0x2b, 0x80801, 0x1) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) unshare(0x22020400) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48085}, 0x811) 116.540235ms ago: executing program 4 (id=8234): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1a, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa29}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000001c0)='syzkaller\x00', 0xfffffff1, 0xd4, &(0x7f0000000200)=""/212, 0x40f00, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x0, 0x2, 0x1, 0x9}, {0x1, 0x4, 0x9}, {0x1, 0x1, 0x6, 0x3}, {0x4, 0x1, 0x7, 0x4}, {0x5, 0x3, 0xc, 0xb}, {0x4, 0x1, 0x7}, {0x4, 0x5, 0x6, 0x8}, {0x4, 0x4, 0x2, 0xc}, {0x0, 0x1, 0xb, 0x6}], 0x10, 0x200}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1a, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa29}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f00000001c0)='syzkaller\x00', 0xfffffff1, 0xd4, &(0x7f0000000200)=""/212, 0x40f00, 0x38, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x0, 0x2, 0x1, 0x9}, {0x1, 0x4, 0x9}, {0x1, 0x1, 0x6, 0x3}, {0x4, 0x1, 0x7, 0x4}, {0x5, 0x3, 0xc, 0xb}, {0x4, 0x1, 0x7}, {0x4, 0x5, 0x6, 0x8}, {0x4, 0x4, 0x2, 0xc}, {0x0, 0x1, 0xb, 0x6}], 0x10, 0x200}, 0x94) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x17, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @ldst={0x2, 0x3, 0x1, 0xb, 0x7, 0xffffffffffffffe0, 0x1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @jmp={0x5, 0x1, 0x5, 0x4, 0xb, 0x2, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x59400f102bc0f0aa}}}, &(0x7f0000000640)='GPL\x00', 0xfffff801, 0x34, &(0x7f0000000680)=""/52, 0x40f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x4, 0x91a}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000780)=[{0x2, 0x2, 0x6, 0x3}, {0x2, 0x3, 0x5, 0x7}, {0x5, 0x1, 0x7, 0x9}, {0x4, 0x4, 0xb, 0x3}, {0x5, 0x1, 0x5, 0x3}, {0x0, 0x2, 0x2, 0x9}, {0x2, 0x4, 0x9, 0x3}], 0x10, 0x401}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0), 0x4) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @generic={0x9, 0x2, 0x0, 0x1, 0x36c}]}, &(0x7f0000000940)='syzkaller\x00', 0x8, 0x8e, &(0x7f0000000980)=""/142, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x3, 0xc, 0x7d3, 0x1}, 0x10, 0x1701a, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[0xffffffffffffffff, 0x1], &(0x7f0000000ac0)=[{0x4, 0x4, 0x9, 0x1}, {0x3, 0x5, 0x2, 0x9}], 0x10, 0xfffffffe}, 0x94) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @generic={0x9, 0x2, 0x0, 0x1, 0x36c}]}, &(0x7f0000000940)='syzkaller\x00', 0x8, 0x8e, &(0x7f0000000980)=""/142, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x3, 0xc, 0x7d3, 0x1}, 0x10, 0x1701a, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[0xffffffffffffffff, 0x1], &(0x7f0000000ac0)=[{0x4, 0x4, 0x9, 0x1}, {0x3, 0x5, 0x2, 0x9}], 0x10, 0xfffffffe}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c40)={'syztnl2\x00', &(0x7f0000000bc0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x4, 0x8001, 0x9, @mcast2, @empty, 0x7800, 0x1, 0x1, 0x8}}) sendmsg$nl_route(r0, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)=@setlink={0x8c, 0x13, 0x100, 0x70bd29, 0xfed8, {0x0, 0x0, 0x0, r1, 0x400, 0x2040}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x2}, @IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_XDP={0x3c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FD={0x8, 0x1, r6}]}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r8, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r9, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001fc0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f80)={&(0x7f0000000f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@const={0x9, 0x0, 0x0, 0xa, 0x5}, @volatile={0xa, 0x0, 0x0, 0x9, 0x5}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x4, 0x4}, {0x9}, {}, {0x3, 0x5}, {0x9, 0x3}]}]}, {0x0, [0x2e, 0x0, 0x61, 0x0]}}, &(0x7f0000000f80)=""/4096, 0x6a, 0x1000, 0x0, 0xa, 0x10000, @value=r10}, 0x28) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r11, 0x11c, 0x4, &(0x7f0000002000)=""/30, &(0x7f0000002040)=0x1e) connect$inet6(r11, &(0x7f0000002080)={0xa, 0x4e24, 0x2, @private2, 0x5}, 0x1c) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x0, 0x0) (async) socket$kcm(0x29, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r12, 0x4058587a, &(0x7f00000022c0)={{r12, &(0x7f00000020c0)='GPL\x00', 0x400, &(0x7f0000002100)={@align=0x1598, {0x1, 0x7, 0x9, 0x3}}, 0x9, &(0x7f0000002140), &(0x7f0000002180)=0x8}, {[0x3, 0x400, 0x6c7250ff, 0xae]}, 0x3, 0xc6, &(0x7f00000021c0)=""/198}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r12, 0x4058587a, &(0x7f00000022c0)={{r12, &(0x7f00000020c0)='GPL\x00', 0x400, &(0x7f0000002100)={@align=0x1598, {0x1, 0x7, 0x9, 0x3}}, 0x9, &(0x7f0000002140), &(0x7f0000002180)=0x8}, {[0x3, 0x400, 0x6c7250ff, 0xae]}, 0x3, 0xc6, &(0x7f00000021c0)=""/198}) syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000023c0)=0x0, &(0x7f0000002400)=0x4) sendmsg$ETHTOOL_MSG_EEE_GET(r13, &(0x7f0000002540)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002500)={&(0x7f0000002440)={0x94, r14, 0x310, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x8000) syz_genetlink_get_family_id$smc(&(0x7f0000002580), r13) (async) syz_genetlink_get_family_id$smc(&(0x7f0000002580), r13) r16 = bpf$ITER_CREATE(0x21, &(0x7f00000025c0)={r13}, 0x8) sendmsg$nl_route(r13, &(0x7f00000036c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003680)={&(0x7f0000002640)=@ipmr_newroute={0x1020, 0x18, 0x400, 0x70bd27, 0x25dfdbfc, {0x80, 0x14, 0x10, 0x4, 0x5de19c7fbc81ab8e, 0x3, 0x0, 0x5, 0x2000}, [@RTA_METRICS={0x1004, 0x8, 0x0, 0x1, "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"}]}, 0x1020}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000003700)=0xffff) (async) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r3, 0x40089413, &(0x7f0000003700)=0xffff) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003780), r16) sendmsg$TIPC_NL_LINK_GET(r17, &(0x7f0000003900)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000038c0)={&(0x7f00000037c0)={0xd8, r18, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0xd8}}, 0x80) (async) sendmsg$TIPC_NL_LINK_GET(r17, &(0x7f0000003900)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000038c0)={&(0x7f00000037c0)={0xd8, r18, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}]}, 0xd8}}, 0x80) 51.799742ms ago: executing program 3 (id=8235): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81}}, 0x1c}}, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000037c00000400fc800c00018005b41918", @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) socket$packet(0x11, 0x3, 0x300) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="4eaa000000000000911019000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 2 (id=8236): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r1, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x3c65e5a12d2f864f) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d7fb7c27a1059ae31c6", 0xd8}, {0x0}], 0x2, 0x0, 0x0, 0x7400}, 0x4) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000240001002cbd7000fbdbdf250500001b060003000000000006000400ed"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) r5 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000500)=0x7b, 0x4) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x48, &(0x7f0000000600)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}, @in6={0xa, 0x4e20, 0x4, @empty, 0x2}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000006c0), &(0x7f0000000340)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000800)=0x84) (async, rerun: 32) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000007030000000000000000000a0000090901010073797a30000000009c2aa2310945"], 0x20}}, 0x0) (async, rerun: 32) shutdown(r5, 0x0) (async) recvmmsg(r5, &(0x7f0000000900), 0xa0d, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000007c232bf0040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0xfe01, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 64) socket(0x14, 0x2, 0x4) kernel console output (not intermixed with test programs): ] ? clear_bhb_loop+0x70/0xc0 [ 1106.999017][ T1944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.999041][ T1944] RIP: 0033:0x7fcd6539e2d9 [ 1106.999062][ T1944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1106.999089][ T1944] RSP: 002b:00007fcd662a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1106.999114][ T1944] RAX: ffffffffffffffda RBX: 00007fcd65625fa0 RCX: 00007fcd6539e2d9 [ 1106.999132][ T1944] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1106.999148][ T1944] RBP: 00007fcd662a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1106.999163][ T1944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1106.999178][ T1944] R13: 00007fcd65626038 R14: 00007fcd65625fa0 R15: 00007ffe955233b8 [ 1106.999215][ T1944] [ 1107.378080][ T1946] 8021q: VLANs not supported on ip6_vti0 [ 1107.559061][ T1961] syzkaller0: entered promiscuous mode [ 1107.559086][ T1961] syzkaller0: entered allmulticast mode [ 1107.580727][ T1961] tipc: Enabled bearer , priority 0 [ 1107.591004][ T1960] tipc: Resetting bearer [ 1107.644725][ T1960] tipc: Disabling bearer [ 1107.740447][ T1967] FAULT_INJECTION: forcing a failure. [ 1107.740447][ T1967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1107.740485][ T1967] CPU: 0 UID: 0 PID: 1967 Comm: syz.2.6992 Not tainted syzkaller #0 PREEMPT(full) [ 1107.740511][ T1967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1107.740526][ T1967] Call Trace: [ 1107.740535][ T1967] [ 1107.740546][ T1967] dump_stack_lvl+0xe8/0x150 [ 1107.740584][ T1967] should_fail_ex+0x410/0x560 [ 1107.740621][ T1967] _copy_from_iter+0x1d3/0x1660 [ 1107.740652][ T1967] ? __alloc_skb+0x27a/0x7a0 [ 1107.740687][ T1967] ? __alloc_skb+0x27a/0x7a0 [ 1107.740723][ T1967] ? __alloc_skb+0x27a/0x7a0 [ 1107.740756][ T1967] ? __pfx__copy_from_iter+0x10/0x10 [ 1107.740785][ T1967] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1107.740808][ T1967] ? __alloc_skb+0x27a/0x7a0 [ 1107.740840][ T1967] ? __alloc_skb+0x27a/0x7a0 [ 1107.740883][ T1967] ? netlink_sendmsg+0x650/0xb40 [ 1107.740913][ T1967] ? skb_put+0x112/0x210 [ 1107.740938][ T1967] netlink_sendmsg+0x6c0/0xb40 [ 1107.740978][ T1967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.741019][ T1967] ? apparmor_socket_sendmsg+0x98/0x360 [ 1107.741051][ T1967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1107.741080][ T1967] sock_sendmsg_nosec+0x14e/0x190 [ 1107.741114][ T1967] ____sys_sendmsg+0x54e/0x850 [ 1107.741143][ T1967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1107.741177][ T1967] ? import_iovec+0x73/0xa0 [ 1107.741213][ T1967] ___sys_sendmsg+0x2a5/0x360 [ 1107.741236][ T1967] ? __lock_acquire+0x747/0x2de0 [ 1107.741266][ T1967] ? __pfx____sys_sendmsg+0x10/0x10 [ 1107.741337][ T1967] ? __fget_files+0x2a/0x420 [ 1107.741371][ T1967] ? __fget_files+0x3a2/0x420 [ 1107.741416][ T1967] __x64_sys_sendmsg+0x1b1/0x290 [ 1107.741444][ T1967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1107.741491][ T1967] do_syscall_64+0x166/0x520 [ 1107.741521][ T1967] ? trace_irq_disable+0x3b/0x140 [ 1107.741546][ T1967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.741570][ T1967] ? clear_bhb_loop+0x70/0xc0 [ 1107.741599][ T1967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.741623][ T1967] RIP: 0033:0x7f7f7ff9e2d9 [ 1107.741644][ T1967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1107.741665][ T1967] RSP: 002b:00007f7f7e1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1107.741690][ T1967] RAX: ffffffffffffffda RBX: 00007f7f80225fa0 RCX: 00007f7f7ff9e2d9 [ 1107.741707][ T1967] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1107.741722][ T1967] RBP: 00007f7f7e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1107.741737][ T1967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1107.741752][ T1967] R13: 00007f7f80226038 R14: 00007f7f80225fa0 R15: 00007fff8501c3e8 [ 1107.741788][ T1967] [ 1108.199525][ T1982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6996'. [ 1108.472610][ T1992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1108.560996][ T1996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7000'. [ 1108.636918][ T2000] syzkaller0: entered promiscuous mode [ 1108.636943][ T2000] syzkaller0: entered allmulticast mode [ 1108.650993][ T1998] netlink: 'syz.3.7001': attribute type 32 has an invalid length. [ 1108.661740][ T2000] tipc: Started in network mode [ 1108.661773][ T2000] tipc: Node identity 9ee666492dfa, cluster identity 4711 [ 1108.662041][ T2000] tipc: Enabled bearer , priority 0 [ 1108.666627][ T1999] tipc: Resetting bearer [ 1108.764648][ T1999] tipc: Disabling bearer [ 1108.806229][ T2006] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7006'. [ 1108.810950][ T2006] tipc: Enabling of bearer rejected, failed to enable media [ 1108.860204][ T2008] FAULT_INJECTION: forcing a failure. [ 1108.860204][ T2008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1108.860242][ T2008] CPU: 0 UID: 0 PID: 2008 Comm: syz.1.7005 Not tainted syzkaller #0 PREEMPT(full) [ 1108.860268][ T2008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1108.860283][ T2008] Call Trace: [ 1108.860292][ T2008] [ 1108.860303][ T2008] dump_stack_lvl+0xe8/0x150 [ 1108.860350][ T2008] should_fail_ex+0x410/0x560 [ 1108.860388][ T2008] _copy_from_iter+0x1d3/0x1660 [ 1108.860420][ T2008] ? __alloc_skb+0x27a/0x7a0 [ 1108.860457][ T2008] ? __alloc_skb+0x27a/0x7a0 [ 1108.860493][ T2008] ? __alloc_skb+0x27a/0x7a0 [ 1108.860528][ T2008] ? __pfx__copy_from_iter+0x10/0x10 [ 1108.860557][ T2008] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1108.860581][ T2008] ? __alloc_skb+0x27a/0x7a0 [ 1108.860613][ T2008] ? __alloc_skb+0x27a/0x7a0 [ 1108.860653][ T2008] ? netlink_sendmsg+0x650/0xb40 [ 1108.860695][ T2008] ? skb_put+0x112/0x210 [ 1108.860720][ T2008] netlink_sendmsg+0x6c0/0xb40 [ 1108.860762][ T2008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.860803][ T2008] ? apparmor_socket_sendmsg+0x98/0x360 [ 1108.860836][ T2008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1108.860865][ T2008] sock_sendmsg_nosec+0x14e/0x190 [ 1108.860898][ T2008] ____sys_sendmsg+0x54e/0x850 [ 1108.860929][ T2008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1108.860963][ T2008] ? import_iovec+0x73/0xa0 [ 1108.861000][ T2008] ___sys_sendmsg+0x2a5/0x360 [ 1108.861024][ T2008] ? __lock_acquire+0x747/0x2de0 [ 1108.861053][ T2008] ? __pfx____sys_sendmsg+0x10/0x10 [ 1108.861120][ T2008] ? __fget_files+0x2a/0x420 [ 1108.861153][ T2008] ? __fget_files+0x3a2/0x420 [ 1108.861198][ T2008] __x64_sys_sendmsg+0x1b1/0x290 [ 1108.861226][ T2008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1108.861274][ T2008] do_syscall_64+0x166/0x520 [ 1108.861305][ T2008] ? trace_irq_disable+0x3b/0x140 [ 1108.861337][ T2008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.861361][ T2008] ? clear_bhb_loop+0x70/0xc0 [ 1108.861391][ T2008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.861413][ T2008] RIP: 0033:0x7fcd6539e2d9 [ 1108.861434][ T2008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.861455][ T2008] RSP: 002b:00007fcd662a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1108.861480][ T2008] RAX: ffffffffffffffda RBX: 00007fcd65625fa0 RCX: 00007fcd6539e2d9 [ 1108.861498][ T2008] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1108.861514][ T2008] RBP: 00007fcd662a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1108.861529][ T2008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.861544][ T2008] R13: 00007fcd65626038 R14: 00007fcd65625fa0 R15: 00007ffe955233b8 [ 1108.861581][ T2008] [ 1109.155373][ T2010] netlink: 'syz.3.7007': attribute type 10 has an invalid length. [ 1109.157114][ T2010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1109.178303][ T2010] team0: Port device netdevsim1 added [ 1109.187584][ T2010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7007'. [ 1109.189853][ T2010] netlink: 'syz.3.7007': attribute type 10 has an invalid length. [ 1109.263054][ T2010] team0: Port device netdevsim1 removed [ 1109.295381][ T2010] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1109.309646][ T2010] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1109.560642][ T2028] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1109.592791][ T2030] netlink: 'syz.3.7012': attribute type 39 has an invalid length. [ 1109.848916][ T2042] netlink: 'syz.2.7016': attribute type 21 has an invalid length. [ 1109.848943][ T2042] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7016'. [ 1109.870939][ T2042] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7016'. [ 1109.882072][ T2041] syzkaller1: entered promiscuous mode [ 1109.882092][ T2041] syzkaller1: entered allmulticast mode [ 1109.954237][ T2044] netlink: 140 bytes leftover after parsing attributes in process `syz.3.7015'. [ 1109.979430][ T2041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7015'. [ 1109.979464][ T2041] netlink: 'syz.3.7015': attribute type 10 has an invalid length. [ 1109.979482][ T2041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7015'. [ 1109.987599][ T2044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7015'. [ 1109.987683][ T2044] netlink: 'syz.3.7015': attribute type 10 has an invalid length. [ 1110.087393][ T2047] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1110.119639][ T2041] geneve2: entered promiscuous mode [ 1110.119664][ T2041] geneve2: entered allmulticast mode [ 1110.157825][ T2048] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1110.190668][ T2044] geneve2: entered promiscuous mode [ 1110.190693][ T2044] geneve2: entered allmulticast mode [ 1110.585606][ T2062] tipc: Enabling of bearer rejected, failed to enable media [ 1110.836774][ T2072] SET target dimension over the limit! [ 1111.326360][ T2100] netlink: 'syz.1.7031': attribute type 1 has an invalid length. [ 1111.326388][ T2100] nbd: must specify at least one socket [ 1112.169781][ T2107] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1112.301536][ T2112] bond8: (slave team0): Device is not bonding slave [ 1112.301560][ T2112] bond8: option active_slave: invalid value (team0) [ 1112.310530][ T2112] bond8 (unregistering): Released all slaves [ 1112.415732][ T2125] netlink: zone id is out of range [ 1112.415781][ T2125] netlink: zone id is out of range [ 1112.415959][ T2125] netlink: zone id is out of range [ 1112.416007][ T2125] netlink: zone id is out of range [ 1112.416016][ T2125] netlink: zone id is out of range [ 1112.416026][ T2125] netlink: zone id is out of range [ 1112.416035][ T2125] netlink: zone id is out of range [ 1112.416044][ T2125] netlink: zone id is out of range [ 1112.416054][ T2125] netlink: zone id is out of range [ 1112.416063][ T2125] netlink: zone id is out of range [ 1112.524525][ T2117] tipc: Enabling of bearer rejected, failed to enable media [ 1112.878973][ T2144] netlink: 'syz.3.7045': attribute type 1 has an invalid length. [ 1112.879000][ T2144] nbd: couldn't find device at index 0 [ 1113.536992][ T2176] __nla_validate_parse: 6 callbacks suppressed [ 1113.537014][ T2176] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7056'. [ 1115.902921][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1115.910108][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.085083][ T2183] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1116.085685][ T2185] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7057'. [ 1116.316160][ T2214] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7061'. [ 1116.473096][ T2220] syzkaller1: entered promiscuous mode [ 1116.473121][ T2220] syzkaller1: entered allmulticast mode [ 1116.552102][ T2223] FAULT_INJECTION: forcing a failure. [ 1116.552102][ T2223] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.552138][ T2223] CPU: 0 UID: 0 PID: 2223 Comm: syz.4.7064 Not tainted syzkaller #0 PREEMPT(full) [ 1116.552163][ T2223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1116.552178][ T2223] Call Trace: [ 1116.552187][ T2223] [ 1116.552198][ T2223] dump_stack_lvl+0xe8/0x150 [ 1116.552235][ T2223] should_fail_ex+0x410/0x560 [ 1116.552281][ T2223] ? __alloc_skb+0x1db/0x7a0 [ 1116.552313][ T2223] should_failslab+0xa8/0x100 [ 1116.552345][ T2223] ? __alloc_skb+0x1db/0x7a0 [ 1116.552375][ T2223] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1116.552399][ T2223] ? __alloc_skb+0x18d/0x7a0 [ 1116.552432][ T2223] ? __alloc_skb+0x1db/0x7a0 [ 1116.552471][ T2223] __alloc_skb+0x1db/0x7a0 [ 1116.552515][ T2223] netlink_ack+0x136/0xb30 [ 1116.552550][ T2223] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1116.552574][ T2223] ? nfnetlink_rcv+0x1021/0x28c0 [ 1116.552608][ T2223] nfnetlink_rcv+0x260c/0x28c0 [ 1116.552669][ T2223] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1116.552744][ T2223] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1116.552772][ T2223] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 1116.552817][ T2223] netlink_unicast+0x7bd/0x940 [ 1116.552855][ T2223] netlink_sendmsg+0x813/0xb40 [ 1116.552894][ T2223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.552933][ T2223] ? apparmor_socket_sendmsg+0x98/0x360 [ 1116.552964][ T2223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1116.552992][ T2223] sock_sendmsg_nosec+0x14e/0x190 [ 1116.553026][ T2223] ____sys_sendmsg+0x54e/0x850 [ 1116.553054][ T2223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1116.553087][ T2223] ? import_iovec+0x73/0xa0 [ 1116.553122][ T2223] ___sys_sendmsg+0x2a5/0x360 [ 1116.553144][ T2223] ? __lock_acquire+0x747/0x2de0 [ 1116.553172][ T2223] ? __pfx____sys_sendmsg+0x10/0x10 [ 1116.553232][ T2223] ? __fget_files+0x2a/0x420 [ 1116.553264][ T2223] ? __fget_files+0x3a2/0x420 [ 1116.553306][ T2223] __x64_sys_sendmsg+0x1b1/0x290 [ 1116.553333][ T2223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1116.553380][ T2223] do_syscall_64+0x166/0x520 [ 1116.553409][ T2223] ? trace_irq_disable+0x3b/0x140 [ 1116.553431][ T2223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.553454][ T2223] ? clear_bhb_loop+0x70/0xc0 [ 1116.553491][ T2223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.553513][ T2223] RIP: 0033:0x7fca1b19e2d9 [ 1116.553533][ T2223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.553552][ T2223] RSP: 002b:00007fca1bf8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1116.553575][ T2223] RAX: ffffffffffffffda RBX: 00007fca1b425fa0 RCX: 00007fca1b19e2d9 [ 1116.553592][ T2223] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1116.553607][ T2223] RBP: 00007fca1bf8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.553622][ T2223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.553635][ T2223] R13: 00007fca1b426038 R14: 00007fca1b425fa0 R15: 00007ffe5c092c08 [ 1116.553670][ T2223] [ 1116.749806][ T2224] netlink: 'syz.0.7063': attribute type 12 has an invalid length. [ 1116.749868][ T2224] netlink: 'syz.0.7063': attribute type 5 has an invalid length. [ 1117.036462][ T2234] netlink: 'syz.4.7068': attribute type 1 has an invalid length. [ 1117.286495][ T2246] ip6tnl1: entered allmulticast mode [ 1119.391756][ T1016] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1119.392002][ T1016] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1119.411531][ T1221] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1119.446155][ T2249] vlan1: entered allmulticast mode [ 1119.446178][ T2249] bond0: entered allmulticast mode [ 1119.632704][T23109] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1119.671692][ T1221] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1120.029652][ T2278] FAULT_INJECTION: forcing a failure. [ 1120.029652][ T2278] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.029687][ T2278] CPU: 1 UID: 0 PID: 2278 Comm: syz.0.7079 Not tainted syzkaller #0 PREEMPT(full) [ 1120.029731][ T2278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1120.029745][ T2278] Call Trace: [ 1120.029755][ T2278] [ 1120.029770][ T2278] dump_stack_lvl+0xe8/0x150 [ 1120.029809][ T2278] should_fail_ex+0x410/0x560 [ 1120.029846][ T2278] should_failslab+0xa8/0x100 [ 1120.029879][ T2278] __kmalloc_cache_noprof+0xa3/0x600 [ 1120.029907][ T2278] ? nfnetlink_rcv+0x1021/0x28c0 [ 1120.029932][ T2278] ? nfnetlink_rcv+0x1021/0x28c0 [ 1120.029984][ T2278] nfnetlink_rcv+0x1021/0x28c0 [ 1120.030050][ T2278] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1120.030129][ T2278] ? skb_clone+0x246/0x3a0 [ 1120.030171][ T2278] ? netlink_deliver_tap+0x2e/0x1b0 [ 1120.030203][ T2278] ? netlink_deliver_tap+0x2e/0x1b0 [ 1120.030241][ T2278] netlink_unicast+0x7bd/0x940 [ 1120.030289][ T2278] netlink_sendmsg+0x813/0xb40 [ 1120.030331][ T2278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1120.030371][ T2278] ? apparmor_socket_sendmsg+0x98/0x360 [ 1120.030405][ T2278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1120.030434][ T2278] sock_sendmsg_nosec+0x14e/0x190 [ 1120.030469][ T2278] ____sys_sendmsg+0x54e/0x850 [ 1120.030500][ T2278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1120.030535][ T2278] ? import_iovec+0x73/0xa0 [ 1120.030573][ T2278] ___sys_sendmsg+0x2a5/0x360 [ 1120.030596][ T2278] ? __lock_acquire+0x747/0x2de0 [ 1120.030626][ T2278] ? __pfx____sys_sendmsg+0x10/0x10 [ 1120.030691][ T2278] ? __fget_files+0x2a/0x420 [ 1120.030725][ T2278] ? __fget_files+0x3a2/0x420 [ 1120.030772][ T2278] __x64_sys_sendmsg+0x1b1/0x290 [ 1120.030800][ T2278] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1120.030851][ T2278] do_syscall_64+0x166/0x520 [ 1120.030881][ T2278] ? trace_irq_disable+0x3b/0x140 [ 1120.030906][ T2278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.030930][ T2278] ? clear_bhb_loop+0x70/0xc0 [ 1120.030959][ T2278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.030982][ T2278] RIP: 0033:0x7f39ce99e2d9 [ 1120.031003][ T2278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.031024][ T2278] RSP: 002b:00007f39cf7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1120.031048][ T2278] RAX: ffffffffffffffda RBX: 00007f39cec25fa0 RCX: 00007f39ce99e2d9 [ 1120.031066][ T2278] RDX: 0000000000040088 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1120.031082][ T2278] RBP: 00007f39cf7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.031097][ T2278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1120.031125][ T2278] R13: 00007f39cec26038 R14: 00007f39cec25fa0 R15: 00007ffc136dc7f8 [ 1120.031161][ T2278] [ 1120.454992][ T2281] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7080'. [ 1120.806956][ T2289] netlink: 'syz.3.7083': attribute type 1 has an invalid length. [ 1120.806980][ T2289] netlink: 1272 bytes leftover after parsing attributes in process `syz.3.7083'. [ 1120.963924][ T2293] netlink: 168 bytes leftover after parsing attributes in process `syz.4.7085'. [ 1120.972568][ T2293] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7085'. [ 1121.097295][ T2298] syzkaller0: entered promiscuous mode [ 1121.097320][ T2298] syzkaller0: entered allmulticast mode [ 1121.117819][ T2294] tipc: Enabled bearer , priority 0 [ 1121.212690][ T2292] tipc: Resetting bearer [ 1121.307454][ T2292] tipc: Disabling bearer [ 1121.865770][ T2342] netlink: 'syz.4.7101': attribute type 23 has an invalid length. [ 1121.865793][ T2342] netlink: 'syz.4.7101': attribute type 21 has an invalid length. [ 1121.865822][ T2342] IPv6: NLM_F_CREATE should be specified when creating new route [ 1122.396453][ T2353] pim6reg: entered allmulticast mode [ 1122.533464][ T2363] xt_nfacct: accounting object `syz0' does not exist [ 1122.734752][ T2368] veth1_to_bond: entered promiscuous mode [ 1122.905346][ T2365] veth1_to_bond: left promiscuous mode [ 1123.077477][ T2385] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1123.187457][ T2352] pim6reg: left allmulticast mode [ 1123.222887][ T2397] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7118'. [ 1123.222921][ T2397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7118'. [ 1123.251338][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1123.705822][ T2425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7128'. [ 1123.818837][ T2431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7130'. [ 1123.818895][ T2431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7130'. [ 1124.039217][ T2443] pim6reg: entered allmulticast mode [ 1124.176944][ T2452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7134'. [ 1124.225842][ T2462] xt_nfacct: accounting object `syz0' does not exist [ 1124.614409][ T2487] IPVS: length: 155 != 8 [ 1124.784445][ T2441] pim6reg: left allmulticast mode [ 1125.536494][ T2554] netlink: 'syz.2.7164': attribute type 1 has an invalid length. [ 1125.574673][ T2554] bond2: entered promiscuous mode [ 1125.577446][ T2554] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1125.593581][ T2554] __nla_validate_parse: 3 callbacks suppressed [ 1125.593634][ T2554] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7164'. [ 1125.593686][ T2554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7164'. [ 1125.593729][ T2554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7164'. [ 1125.617866][ T2554] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.7164'. [ 1125.697255][ T2554] ipvlan2: entered allmulticast mode [ 1125.697280][ T2554] bond2: entered allmulticast mode [ 1125.700778][ T2554] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1125.700804][ T2554] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1125.700822][ T2554] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1125.757093][ T2554] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1126.053794][ T2586] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7170'. [ 1126.486013][ T2614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7173'. [ 1128.099600][ T2656] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7181'. [ 1128.277675][ T2665] netlink: 'syz.2.7183': attribute type 1 has an invalid length. [ 1129.444409][ T2665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1129.522202][ T2666] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1129.560978][ T2667] bond3: (slave syz_tun): making interface the new active one [ 1129.571674][ T2667] syz_tun: entered promiscuous mode [ 1129.573678][ T2667] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 1129.730469][ T2688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7188'. [ 1130.108875][ T2715] netlink: 92 bytes leftover after parsing attributes in process `syz.0.7195'. [ 1130.110837][ T2717] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.7196'. [ 1130.632287][ T2746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7202'. [ 1130.777088][ T2750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7204'. [ 1130.818840][ T2750] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7204'. [ 1131.073860][ T2761] x_tables: duplicate underflow at hook 1 [ 1131.248822][ T2765] syzkaller0: entered promiscuous mode [ 1131.248849][ T2765] syzkaller0: entered allmulticast mode [ 1131.254621][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1131.317167][ T2765] tipc: Enabled bearer , priority 0 [ 1131.343953][ T2764] tipc: Resetting bearer [ 1131.505097][ T2764] tipc: Disabling bearer [ 1131.604427][ T2782] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7214'. [ 1131.669514][ T2779] net_ratelimit: 60 callbacks suppressed [ 1131.669536][ T2779] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1131.744408][ T2779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7213'. [ 1131.808317][ T2795] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7216'. [ 1132.091724][ T2806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7221'. [ 1132.236986][ T2819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7226'. [ 1132.355414][ T2825] syzkaller0: entered promiscuous mode [ 1132.355439][ T2825] syzkaller0: entered allmulticast mode [ 1132.358717][ T2825] tipc: Bearer : already 2 bearers with priority 0 [ 1132.358736][ T2825] tipc: Enabling of bearer rejected, cannot adjust to lower [ 1132.738250][ T2855] 0: reclassify loop, rule prio 0, protocol 800 [ 1132.824409][ T2861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7235'. [ 1132.983070][ T2873] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7239'. [ 1133.046932][ T2879] netlink: 'syz.4.7241': attribute type 2 has an invalid length. [ 1133.046958][ T2879] netlink: 'syz.4.7241': attribute type 2 has an invalid length. [ 1133.046973][ T2879] netlink: 'syz.4.7241': attribute type 1 has an invalid length. [ 1133.151870][ T2887] syzkaller0: entered promiscuous mode [ 1133.151907][ T2887] syzkaller0: entered allmulticast mode [ 1133.155317][ T2887] tipc: Enabled bearer , priority 0 [ 1133.259914][ T2885] tipc: Resetting bearer [ 1133.375200][ T2885] tipc: Disabling bearer [ 1133.558969][ T2905] netlink: 'syz.1.7247': attribute type 1 has an invalid length. [ 1133.668213][ T2910] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1133.678867][ T2910] bond6: (slave bond7): making interface the new active one [ 1133.686276][ T2910] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1133.686545][ T2904] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1133.757038][ T2902] bond6: (slave gretap1): Enslaving as a backup interface with an up link [ 1134.570231][ T2945] syzkaller1: entered promiscuous mode [ 1134.570259][ T2945] syzkaller1: entered allmulticast mode [ 1134.652667][ T2950] syzkaller0: entered promiscuous mode [ 1134.652692][ T2950] syzkaller0: entered allmulticast mode [ 1134.655726][ T2950] tipc: Started in network mode [ 1134.655758][ T2950] tipc: Node identity 8a4f98e99ffc, cluster identity 4711 [ 1134.655903][ T2950] tipc: Enabled bearer , priority 0 [ 1134.698455][ T2949] tipc: Resetting bearer [ 1134.779146][ T2949] tipc: Disabling bearer [ 1134.904113][ T2959] gre1: entered allmulticast mode [ 1134.943521][ T2956] xt_hashlimit: size too large, truncated to 1048576 [ 1134.944652][ T2959] tipc: Resetting bearer [ 1135.010406][ T2959] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1135.031563][ T2959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1135.035810][ T2959] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1135.089162][ T2959] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1135.099519][T23091] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1135.221238][ T7428] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1135.221291][ T7428] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1135.221422][ T7428] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1135.221473][ T7428] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1135.225986][ T7449] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1135.412328][T23091] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1135.474714][ T2967] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1135.510574][ T2967] syzkaller0: entered promiscuous mode [ 1135.510602][ T2967] syzkaller0: entered allmulticast mode [ 1135.660101][ T2987] __nla_validate_parse: 5 callbacks suppressed [ 1135.660124][ T2987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7267'. [ 1135.778929][ T2990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7268'. [ 1135.779319][ T2992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7268'. [ 1135.890364][ T2997] netlink: 'syz.1.7270': attribute type 1 has an invalid length. [ 1135.915562][ T2995] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7269'. [ 1136.042476][ T2999] bond8: (slave veth3): Enslaving as an active interface with a down link [ 1136.068765][ T2999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7270'. [ 1136.096495][ T2997] bond8: (slave veth0_to_bond): making interface the new active one [ 1136.111871][ T2997] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1136.138428][ T3008] netlink: 'syz.1.7270': attribute type 1 has an invalid length. [ 1136.185235][ T3010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7270'. [ 1136.190101][ T2999] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1136.245936][ T7451] bond8: (slave veth0_to_bond): link status definitely down, disabling slave [ 1136.249212][ T7451] bond8: now running without any active interface! [ 1136.262875][ T3003] syzkaller0: entered promiscuous mode [ 1136.262931][ T3003] syzkaller0: entered allmulticast mode [ 1136.289105][ T3003] tipc: Enabled bearer , priority 0 [ 1136.490339][ T3002] tipc: Resetting bearer [ 1136.540006][ T3002] tipc: Disabling bearer [ 1136.559591][ T3020] netlink: 'syz.1.7276': attribute type 4 has an invalid length. [ 1136.646524][ T3033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7278'. [ 1136.925530][ T3046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7283'. [ 1137.024631][ T3057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7286'. [ 1137.024668][ T3057] netlink: 'syz.1.7286': attribute type 30 has an invalid length. [ 1137.027107][ T3053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7286'. [ 1137.027168][ T3053] netlink: 'syz.1.7286': attribute type 30 has an invalid length. [ 1137.084080][ T3057] vxlan1: entered promiscuous mode [ 1137.084105][ T3057] vxlan1: entered allmulticast mode [ 1137.119446][ T3053] vxlan2: entered promiscuous mode [ 1137.119471][ T3053] vxlan2: entered allmulticast mode [ 1137.365584][ T3066] syzkaller0: entered promiscuous mode [ 1137.365610][ T3066] syzkaller0: entered allmulticast mode [ 1137.369040][ T3066] tipc: Bearer : already 2 bearers with priority 0 [ 1137.369059][ T3066] tipc: Enabling of bearer rejected, cannot adjust to lower [ 1137.589394][ T3071] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1137.592436][ T3071] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1137.612127][ T3071] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1137.614697][ T3071] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1137.617456][ T3071] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1137.617999][ T3071] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1137.618564][ T3071] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1137.619753][ T3071] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1137.620302][ T3071] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1137.675750][ T3071] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 1137.714254][ T3076] bond3: (slave syz_tun): Releasing active interface [ 1137.714294][ T3076] syz_tun: left promiscuous mode [ 1137.744066][ T3076] bridge_slave_0: left allmulticast mode [ 1137.744094][ T3076] bridge_slave_0: left promiscuous mode [ 1137.744422][ T3076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.749358][ T3076] bridge_slave_1: left allmulticast mode [ 1137.749380][ T3076] bridge_slave_1: left promiscuous mode [ 1137.749591][ T3076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.800819][ T3076] bond0: (slave bond_slave_0): Releasing backup interface [ 1137.839152][ T3076] bond0: (slave bond_slave_1): Releasing backup interface [ 1137.879627][ T3076] team0: Port device team_slave_0 removed [ 1137.919435][ T3076] team0: Port device veth1_to_team removed [ 1137.940299][ T3076] team0: Port device team_slave_1 removed [ 1137.946597][ T3076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1137.946660][ T3076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.979761][ T3076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1137.979779][ T3076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.000512][ T3076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1138.285289][ T3101] syzkaller0: entered promiscuous mode [ 1138.285314][ T3101] syzkaller0: entered allmulticast mode [ 1138.289446][ T3101] tipc: Enabled bearer , priority 0 [ 1138.317622][ T3100] tipc: Resetting bearer [ 1138.373323][ T3100] tipc: Disabling bearer [ 1139.331569][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1139.580148][ T3163] syzkaller0: entered promiscuous mode [ 1139.580173][ T3163] syzkaller0: entered allmulticast mode [ 1139.619425][ T3163] tipc: Enabled bearer , priority 0 [ 1139.768804][ T3162] tipc: Resetting bearer [ 1139.837785][ T3162] tipc: Disabling bearer [ 1140.079478][ T3188] veth1_macvtap: entered allmulticast mode [ 1140.374552][ T3220] pim6reg: entered allmulticast mode [ 1140.391852][ T3220] pim6reg: left allmulticast mode [ 1140.484859][ T3229] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1140.554890][ T3229] veth0_macvtap: left promiscuous mode [ 1140.579238][ T3235] xt_ecn: cannot match TCP bits for non-tcp packets [ 1140.645890][ T3240] xt_limit: Overflow, try lower: 268435456/134217728 [ 1140.650129][ T3209] netlink: 'syz.3.7335': attribute type 2 has an invalid length. [ 1140.650156][ T3209] netlink: 'syz.3.7335': attribute type 2 has an invalid length. [ 1140.650266][ T3240] xt_limit: Overflow, try lower: 268435456/134217728 [ 1140.829228][ T3253] __nla_validate_parse: 14 callbacks suppressed [ 1140.829250][ T3253] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7343'. [ 1140.927722][ T3259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7344'. [ 1141.000131][ T3260] tipc: Enabling of bearer rejected, failed to enable media [ 1141.015038][ T3260] syzkaller0: entered promiscuous mode [ 1141.015060][ T3260] syzkaller0: entered allmulticast mode [ 1141.066716][ T3260] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1141.537290][ T3287] netlink: 'syz.0.7353': attribute type 4 has an invalid length. [ 1141.555431][ T3285] netlink: 'syz.3.7352': attribute type 11 has an invalid length. [ 1141.555454][ T3285] netlink: 'syz.3.7352': attribute type 9 has an invalid length. [ 1141.555470][ T3285] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7352'. [ 1141.750229][ T3301] netlink: 336 bytes leftover after parsing attributes in process `syz.1.7355'. [ 1141.750258][ T3301] openvswitch: netlink: Flow key attr not present in new flow. [ 1141.769073][ T3301] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7355'. [ 1141.769184][ T3301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7355'. [ 1142.050821][ T3314] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7362'. [ 1142.099812][ T3320] netlink: NAT attribute has 8 unknown bytes [ 1142.099849][ T3320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1142.159050][ T3322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7363'. [ 1142.159071][ T3322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7363'. [ 1142.159096][ T3322] netlink: 'syz.0.7363': attribute type 14 has an invalid length. [ 1142.159110][ T3322] netlink: 'syz.0.7363': attribute type 13 has an invalid length. [ 1142.369120][ T3331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7366'. [ 1142.394346][ T3333] ipt_rpfilter: unknown options [ 1142.459135][ T3337] syzkaller1: entered promiscuous mode [ 1142.459160][ T3337] syzkaller1: entered allmulticast mode [ 1142.533604][ T3346] set match dimension is over the limit! [ 1142.535912][ T3348] set match dimension is over the limit! [ 1143.423411][ T3390] netlink: 'syz.0.7384': attribute type 4 has an invalid length. [ 1143.555763][ T7444] IPVS: starting estimator thread 0... [ 1143.642369][ T3394] IPVS: using max 29 ests per chain, 69600 per kthread [ 1144.004485][ T3412] syzkaller1: entered promiscuous mode [ 1144.004510][ T3412] syzkaller1: entered allmulticast mode [ 1144.704823][ T3446] ip6gre1: entered promiscuous mode [ 1144.704850][ T3446] ip6gre1: entered allmulticast mode [ 1144.709137][ T3451] netlink: 'syz.0.7397': attribute type 2 has an invalid length. [ 1144.935551][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.938271][ T3468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.940669][ T3468] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1144.940692][ T3468] batman_adv: batadv0: Removing interface: ipvlan2 [ 1145.177727][ T3495] netlink: 'syz.3.7402': attribute type 1 has an invalid length. [ 1145.239487][ T3474] syzkaller1: entered promiscuous mode [ 1145.239600][ T3474] syzkaller1: entered allmulticast mode [ 1145.585888][ T3511] tap0: tun_chr_ioctl cmd 1074025676 [ 1145.585912][ T3511] tap0: owner set to 0 [ 1145.832954][ T3511] bond9: entered allmulticast mode [ 1145.834085][ T3511] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1145.971321][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1146.263734][ T3554] __nla_validate_parse: 10 callbacks suppressed [ 1146.263757][ T3554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7423'. [ 1146.263787][ T3554] netlink: 'syz.4.7423': attribute type 7 has an invalid length. [ 1146.263802][ T3554] netlink: 'syz.4.7423': attribute type 8 has an invalid length. [ 1146.263817][ T3554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7423'. [ 1147.026010][ T3564] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1147.368372][ T3600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7430'. [ 1147.413893][ T3600] netlink: 'syz.2.7430': attribute type 1 has an invalid length. [ 1147.440460][ T3601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7432'. [ 1147.520270][ T3612] netlink: 'syz.2.7430': attribute type 10 has an invalid length. [ 1147.520296][ T3612] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7430'. [ 1147.807914][ T3612] dummy0: entered promiscuous mode [ 1147.891309][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1148.313701][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7440'. [ 1148.611931][T19372] IPVS: ip_vs_send_async error -101 [ 1148.691885][ T3566] Bluetooth: hci2: command 0x0406 tx timeout [ 1151.577751][ T3670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7447'. [ 1152.134197][ T3707] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 1152.136804][ T3707] syzkaller1: entered promiscuous mode [ 1152.136825][ T3707] syzkaller1: entered allmulticast mode [ 1152.734148][ T3731] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7468'. [ 1152.864415][ T3735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7470'. [ 1153.075584][ T3744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7473'. [ 1153.078720][ T3745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7473'. [ 1153.102553][ T3745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7473'. [ 1153.104632][ T3745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7473'. [ 1153.105610][ T3745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7473'. [ 1153.106799][ T3745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7473'. [ 1153.109954][ T3745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7473'. [ 1154.592654][ T5626] Bluetooth: hci0: link tx timeout [ 1154.592675][ T5626] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1154.904410][ T3837] block nbd3: NBD_DISCONNECT [ 1154.904447][ T3837] block nbd3: Send disconnect failed -104 [ 1154.904466][ T3837] block nbd3: shutting down sockets [ 1155.156153][ T3851] openvswitch: netlink: Missing valid actions attribute. [ 1155.156195][ T3851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1155.230061][ T3851] syzkaller1: entered promiscuous mode [ 1155.230105][ T3851] syzkaller1: entered allmulticast mode [ 1155.263809][ T3854] netlink: 'syz.0.7508': attribute type 2 has an invalid length. [ 1155.636495][ T3861] can: request_module (can-proto-0) failed. [ 1155.951530][ T7444] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.951579][ T7444] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.951617][ T7444] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1155.951653][ T7444] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1156.614325][ T3566] Bluetooth: hci0: command 0x0406 tx timeout [ 1156.883570][ T3923] __nla_validate_parse: 74 callbacks suppressed [ 1156.883593][ T3923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7529'. [ 1156.883622][ T3923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7529'. [ 1156.884819][ T3923] netlink: set zone limit has 4 unknown bytes [ 1156.888779][ T3928] netlink: set zone limit has 4 unknown bytes [ 1156.889019][ T3926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7529'. [ 1156.889036][ T3926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7529'. [ 1157.054454][ T3931] syzkaller0: entered promiscuous mode [ 1157.054472][ T3931] syzkaller0: entered allmulticast mode [ 1157.408991][ T3945] dvmrp0: entered allmulticast mode [ 1157.827376][ T3964] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.827422][ T3964] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.895363][ T3967] bond8: option resend_igmp: invalid value (2878) [ 1157.895390][ T3967] bond8: option resend_igmp: allowed values 0 - 255 [ 1157.900521][ T3967] bond8 (unregistering): Released all slaves [ 1158.006751][ T3978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7547'. [ 1158.006778][ T3978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7547'. [ 1158.006805][ T3978] netlink: 'syz.4.7547': attribute type 15 has an invalid length. [ 1158.058957][ T3964] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1158.058996][ T3964] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.119015][ T3978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7547'. [ 1158.119042][ T3978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7547'. [ 1158.119071][ T3978] netlink: 'syz.4.7547': attribute type 15 has an invalid length. [ 1158.175031][ T7444] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1158.175066][ T7444] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 1158.175115][ T7444] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1158.175142][ T7444] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 1158.175176][ T7444] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1158.175202][ T7444] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 1158.175235][ T7444] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1158.175260][ T7444] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 1158.196202][ T3981] netlink: 'syz.2.7548': attribute type 1 has an invalid length. [ 1158.304349][ T3964] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1158.304390][ T3964] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.328979][ T3981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7548'. [ 1158.440267][ T3989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7550'. [ 1158.473682][ T3964] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1158.473720][ T3964] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.622948][ T3989] team0: Port device team_slave_0 removed [ 1158.951904][ T7445] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1158.951948][ T7445] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.951995][ T7445] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1158.952022][ T7445] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.022750][ T7444] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.022785][ T7444] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.022834][ T7444] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1159.022860][ T7444] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.777374][ T4037] ip6tnl0: Caught tx_queue_len zero misconfig [ 1160.005854][ T4052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1160.154924][ T4067] bond0: left allmulticast mode [ 1160.154944][ T4067] bond_slave_0: left allmulticast mode [ 1160.154985][ T4067] bond_slave_1: left allmulticast mode [ 1160.156748][ T4067] bond0: left promiscuous mode [ 1160.156763][ T4067] bond_slave_0: left promiscuous mode [ 1160.156960][ T4067] bond_slave_1: left promiscuous mode [ 1160.159305][ T4067] bridge0: port 3(bond0) entered disabled state [ 1160.214882][ T4067] bridge_slave_0: left allmulticast mode [ 1160.214911][ T4067] bridge_slave_0: left promiscuous mode [ 1160.215206][ T4067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.618338][ T4067] bridge_slave_1: left allmulticast mode [ 1160.618359][ T4067] bridge_slave_1: left promiscuous mode [ 1160.618582][ T4067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.645573][ T4067] bond0: (slave bond_slave_0): Releasing backup interface [ 1160.650405][ T4067] bond0: (slave bond_slave_1): Releasing backup interface [ 1160.674465][ T4067] team0: Port device team_slave_1 removed [ 1160.675068][ T4067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1160.675088][ T4067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.676512][ T4067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.676527][ T4067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.678042][ T4067] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1160.886319][ T4081] ip_tables: iptables: counters copy to user failed while replacing table [ 1161.535186][ T4098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1161.535207][ T4098] IPv6: NLM_F_CREATE should be set when creating new route [ 1161.535259][ T4098] IPv6: NLM_F_CREATE should be set when creating new route [ 1162.930932][ T4100] __nla_validate_parse: 10 callbacks suppressed [ 1162.930950][ T4100] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7582'. [ 1162.958851][ T4055] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1163.058168][ T4102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7584'. [ 1163.058204][ T4102] netlink: 'syz.1.7584': attribute type 7 has an invalid length. [ 1163.058216][ T4102] netlink: 'syz.1.7584': attribute type 8 has an invalid length. [ 1163.058229][ T4102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7584'. [ 1163.139781][ T4102] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 1163.164099][ T4102] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1163.170300][ T4102] erspan0: entered promiscuous mode [ 1163.188948][ T4102] debugfs: 'hsr1' already exists in 'hsr' [ 1163.188973][ T4102] Cannot create hsr debugfs directory [ 1163.203392][ T4102] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1163.349368][ T4115] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7590'. [ 1163.515744][ T4130] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1163.628093][ T4123] tipc: New replicast peer: 255.255.255.255 [ 1163.629136][ T4123] tipc: Enabled bearer , priority 10 [ 1163.637750][ T4123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7592'. [ 1163.838984][ T4146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7596'. [ 1163.839054][ T4146] openvswitch: netlink: Flow key attr not present in new flow. [ 1164.062367][ T4153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7600'. [ 1164.136185][ T4164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7602'. [ 1164.400017][ T4176] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7607'. [ 1164.446160][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805685cc00: rx timeout, send abort [ 1164.539172][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1164.741679][T16140] tipc: Node number set to 1456652794 [ 1164.992793][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805685cc00: abort rx timeout. Force session deactivation [ 1164.995632][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805685c800: rx timeout, send abort [ 1165.124791][ T4194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7613'. [ 1165.495679][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805685c800: abort rx timeout. Force session deactivation [ 1165.812244][ T7428] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 1165.813200][ T7402] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 1165.814085][ T7402] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 1165.814125][ T7402] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 1166.242106][ T4216] lo: entered promiscuous mode [ 1166.242134][ T4216] lo: entered allmulticast mode [ 1166.246265][ T4216] tunl0: entered promiscuous mode [ 1166.246284][ T4216] tunl0: entered allmulticast mode [ 1166.246815][ T4216] gre0: entered promiscuous mode [ 1166.246832][ T4216] gre0: entered allmulticast mode [ 1166.249742][ T4216] gretap0: entered promiscuous mode [ 1166.249761][ T4216] gretap0: entered allmulticast mode [ 1166.254520][ T4216] erspan0: entered promiscuous mode [ 1166.254541][ T4216] erspan0: entered allmulticast mode [ 1166.260804][ T4216] ip_vti0: entered promiscuous mode [ 1166.260856][ T4216] ip_vti0: entered allmulticast mode [ 1166.302790][ T4216] ip6_vti0: entered promiscuous mode [ 1166.302849][ T4216] ip6_vti0: entered allmulticast mode [ 1166.304171][ T4216] sit0: entered promiscuous mode [ 1166.304206][ T4216] sit0: entered allmulticast mode [ 1166.306010][ T4216] ip6tnl0: entered promiscuous mode [ 1166.306059][ T4216] ip6tnl0: entered allmulticast mode [ 1166.308505][ T4216] ip6gre0: entered promiscuous mode [ 1166.308553][ T4216] ip6gre0: entered allmulticast mode [ 1166.387208][ T4216] syz_tun: entered promiscuous mode [ 1166.387249][ T4216] syz_tun: entered allmulticast mode [ 1166.398682][ T4216] ip6gretap0: entered promiscuous mode [ 1166.398734][ T4216] ip6gretap0: entered allmulticast mode [ 1166.409370][ T4216] bridge0: entered promiscuous mode [ 1166.409560][ T4216] bridge0: entered allmulticast mode [ 1166.426470][ T4216] bond0: entered promiscuous mode [ 1166.426496][ T4216] bond0: entered allmulticast mode [ 1166.430983][ T4216] team0: entered promiscuous mode [ 1166.431006][ T4216] team0: entered allmulticast mode [ 1166.487130][ T4216] nlmon0: entered promiscuous mode [ 1166.487155][ T4216] nlmon0: entered allmulticast mode [ 1166.500021][ T4216] batadv0: entered promiscuous mode [ 1166.500089][ T4216] batadv0: entered allmulticast mode [ 1166.529331][ T4216] vxcan0: entered promiscuous mode [ 1166.529355][ T4216] vxcan0: entered allmulticast mode [ 1166.529925][ T4216] vxcan1: entered promiscuous mode [ 1166.529944][ T4216] vxcan1: entered allmulticast mode [ 1166.538789][ T4216] wg0: entered promiscuous mode [ 1166.550910][ T4216] wg0: entered allmulticast mode [ 1166.559946][ T4216] wg1: entered promiscuous mode [ 1166.560023][ T4216] wg1: entered allmulticast mode [ 1166.579591][ T4216] veth0_to_bridge: entered promiscuous mode [ 1166.579613][ T4216] veth0_to_bridge: entered allmulticast mode [ 1166.588528][ T4216] bridge_slave_0: entered promiscuous mode [ 1166.592423][ T4216] bridge_slave_0: entered allmulticast mode [ 1166.599731][ T4216] veth1_to_bridge: entered promiscuous mode [ 1166.599791][ T4216] veth1_to_bridge: entered allmulticast mode [ 1166.620982][ T4216] bridge_slave_1: entered promiscuous mode [ 1166.621007][ T4216] bridge_slave_1: entered allmulticast mode [ 1166.650139][ T4216] veth0_to_bond: entered promiscuous mode [ 1166.650164][ T4216] veth0_to_bond: entered allmulticast mode [ 1166.662801][ T4216] bond_slave_0: entered promiscuous mode [ 1166.662857][ T4216] bond_slave_0: entered allmulticast mode [ 1166.675770][ T4216] veth1_to_bond: entered promiscuous mode [ 1166.675793][ T4216] veth1_to_bond: entered allmulticast mode [ 1166.676608][ T4216] bond_slave_1: entered promiscuous mode [ 1166.676627][ T4216] bond_slave_1: entered allmulticast mode [ 1166.689254][ T4216] veth1_to_team: entered promiscuous mode [ 1166.689285][ T4216] veth1_to_team: entered allmulticast mode [ 1166.720998][ T4216] team_slave_1: entered promiscuous mode [ 1166.721022][ T4216] team_slave_1: entered allmulticast mode [ 1166.745060][ T4216] veth0_to_batadv: entered promiscuous mode [ 1166.745083][ T4216] veth0_to_batadv: entered allmulticast mode [ 1166.758171][ T4216] batadv_slave_0: entered promiscuous mode [ 1166.758223][ T4216] batadv_slave_0: entered allmulticast mode [ 1166.770117][ T4216] veth1_to_batadv: entered promiscuous mode [ 1166.770175][ T4216] veth1_to_batadv: entered allmulticast mode [ 1166.792632][ T4216] batadv_slave_1: entered promiscuous mode [ 1166.792655][ T4216] batadv_slave_1: entered allmulticast mode [ 1166.800587][ T4216] xfrm0: entered promiscuous mode [ 1166.800610][ T4216] xfrm0: entered allmulticast mode [ 1166.817462][ T4216] veth0_to_hsr: entered promiscuous mode [ 1166.817509][ T4216] veth0_to_hsr: entered allmulticast mode [ 1166.829272][ T4216] hsr_slave_0: entered allmulticast mode [ 1166.845859][ T4216] veth1_to_hsr: entered promiscuous mode [ 1166.845880][ T4216] veth1_to_hsr: entered allmulticast mode [ 1166.846810][ T4216] hsr_slave_1: entered allmulticast mode [ 1166.870050][ T4216] hsr0: entered promiscuous mode [ 1166.870073][ T4216] hsr0: entered allmulticast mode [ 1166.889429][ T4216] veth1_virt_wifi: entered promiscuous mode [ 1166.889451][ T4216] veth1_virt_wifi: entered allmulticast mode [ 1166.905002][ T4216] veth0_virt_wifi: entered promiscuous mode [ 1166.905024][ T4216] veth0_virt_wifi: entered allmulticast mode [ 1166.926344][ T4216] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1166.926559][ T4216] virt_wifi0: entered promiscuous mode [ 1166.926576][ T4216] virt_wifi0: entered allmulticast mode [ 1166.928726][ T4216] veth1_vlan: left promiscuous mode [ 1166.928748][ T4216] veth1_vlan: entered promiscuous mode [ 1166.928764][ T4216] veth1_vlan: entered allmulticast mode [ 1166.930547][ T4216] veth0_vlan: left promiscuous mode [ 1166.930570][ T4216] veth0_vlan: entered promiscuous mode [ 1166.930586][ T4216] veth0_vlan: entered allmulticast mode [ 1166.957705][ T4216] vlan1: entered promiscuous mode [ 1166.958212][ T4216] vlan1: entered allmulticast mode [ 1166.965960][ T4216] macvlan0: entered promiscuous mode [ 1166.967864][ T4216] macvlan0: entered allmulticast mode [ 1166.982618][ T4216] macvlan1: entered promiscuous mode [ 1166.984121][ T4216] macvlan1: entered allmulticast mode [ 1167.003372][ T4216] ipvlan0: entered promiscuous mode [ 1167.003429][ T4216] ipvlan0: entered allmulticast mode [ 1167.033106][ T4216] ipvlan1: entered promiscuous mode [ 1167.033128][ T4216] ipvlan1: entered allmulticast mode [ 1167.034808][ T4216] veth1_macvtap: left promiscuous mode [ 1167.034830][ T4216] veth1_macvtap: entered promiscuous mode [ 1167.034845][ T4216] veth1_macvtap: entered allmulticast mode [ 1167.036578][ T4216] veth0_macvtap: left promiscuous mode [ 1167.036600][ T4216] veth0_macvtap: entered promiscuous mode [ 1167.036613][ T4216] veth0_macvtap: entered allmulticast mode [ 1167.037972][ T4216] macvtap0: entered promiscuous mode [ 1167.038159][ T4216] macvtap0: entered allmulticast mode [ 1167.039586][ T4216] macsec0: entered promiscuous mode [ 1167.039762][ T4216] macsec0: entered allmulticast mode [ 1167.053530][ T4216] geneve0: entered promiscuous mode [ 1167.053617][ T4216] geneve0: entered allmulticast mode [ 1167.104319][ T4216] geneve1: entered promiscuous mode [ 1167.104371][ T4216] geneve1: entered allmulticast mode [ 1167.137614][ T4216] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1167.137652][ T4216] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1167.138147][ T4216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1167.144515][ T4216] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1167.144606][ T4216] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1167.148807][ T4216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1167.160021][ T4216] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1167.165132][ T4216] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1167.166600][ T4216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1167.199035][ T4216] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 1167.199106][ T4216] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 1167.204354][ T4216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1167.227251][ T4216] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode [ 1167.227444][ T4216] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode [ 1167.247280][ T4216] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode [ 1167.247308][ T4216] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 1167.248158][ T4216] geneve2: entered allmulticast mode [ 1167.248711][ T4216] ipip0: entered promiscuous mode [ 1167.248730][ T4216] ipip0: entered allmulticast mode [ 1167.250826][ T4216] bond1: entered promiscuous mode [ 1167.250850][ T4216] bond1: entered allmulticast mode [ 1167.286826][ T4216] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1167.298813][ T4216] vxlan0: entered promiscuous mode [ 1167.298872][ T4216] vxlan0: entered allmulticast mode [ 1167.314647][ T4216] sit1: entered promiscuous mode [ 1167.314671][ T4216] sit1: entered allmulticast mode [ 1167.315430][ T4216] syztnl2: entered promiscuous mode [ 1167.315449][ T4216] syztnl2: entered allmulticast mode [ 1167.316998][ T4216] vxlan1: entered promiscuous mode [ 1167.317017][ T4216] vxlan1: entered allmulticast mode [ 1167.317890][ T4216] vxlan2: entered promiscuous mode [ 1167.317908][ T4216] vxlan2: entered allmulticast mode [ 1167.318887][ T4216] ip6erspan0: entered promiscuous mode [ 1167.318902][ T4216] ip6erspan0: entered allmulticast mode [ 1167.323493][ T1016] netdevsim netdevsim4 netdevsim3: set [0, 2] type 1 family 0 port 8472 - 0 [ 1167.323577][ T1016] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1167.480579][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1167.514585][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1167.515453][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1167.552176][ T4257] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1167.552216][ T4257] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1167.552259][ T4257] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1167.667508][ T7451] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1167.726352][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1167.749223][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1167.775246][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1167.776981][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1167.777131][ T7444] netdevsim netdevsim4 netdevsim0: set [0, 2] type 1 family 0 port 8472 - 0 [ 1167.777160][ T7444] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1167.777283][ T7444] netdevsim netdevsim4 netdevsim1: set [0, 2] type 1 family 0 port 8472 - 0 [ 1167.777308][ T7444] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1167.864237][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1167.865917][ T1016] netdevsim netdevsim4 netdevsim2: set [0, 2] type 1 family 0 port 8472 - 0 [ 1167.865950][ T1016] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1167.866058][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1167.867950][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1167.869777][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1167.915388][ T4257] dummy0 speed is unknown, defaulting to 1000 [ 1167.950176][ T4272] __nla_validate_parse: 9 callbacks suppressed [ 1167.950198][ T4272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7631'. [ 1167.967519][ T4272] ovs-dp0: entered promiscuous mode [ 1167.969430][ T4272] netlink: 'syz.3.7631': attribute type 11 has an invalid length. [ 1168.117448][ T4278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7634'. [ 1168.224614][ T4275] syzkaller0: entered promiscuous mode [ 1168.224639][ T4275] syzkaller0: entered allmulticast mode [ 1168.255075][ T4275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7632'. [ 1168.358158][ T4291] netlink: zone id is out of range [ 1168.358176][ T4291] netlink: zone id is out of range [ 1168.358185][ T4291] netlink: zone id is out of range [ 1168.358195][ T4291] netlink: zone id is out of range [ 1168.358204][ T4291] netlink: zone id is out of range [ 1168.358212][ T4291] netlink: zone id is out of range [ 1168.358225][ T4291] netlink: zone id is out of range [ 1168.358234][ T4291] netlink: zone id is out of range [ 1168.358243][ T4291] netlink: zone id is out of range [ 1168.358252][ T4291] netlink: zone id is out of range [ 1168.628629][ T4306] netlink: 'syz.2.7642': attribute type 1 has an invalid length. [ 1168.745002][ T4306] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1168.811845][ T4309] bond4: (slave geneve2): making interface the new active one [ 1168.815939][ T4309] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 1168.954600][ T4316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7644'. [ 1168.974935][ T4320] netlink: 'syz.2.7645': attribute type 21 has an invalid length. [ 1168.974959][ T4320] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7645'. [ 1169.004346][ T4320] netlink: 'syz.2.7645': attribute type 4 has an invalid length. [ 1169.004370][ T4320] netlink: 'syz.2.7645': attribute type 3 has an invalid length. [ 1169.004386][ T4320] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7645'. [ 1169.337006][ T4335] netlink: 'syz.0.7647': attribute type 1 has an invalid length. [ 1169.416322][ T4335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1169.443385][ T4339] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1169.464531][ T4335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7647'. [ 1169.528496][ T4342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7651'. [ 1171.573584][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1172.078949][ T4330] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1172.365738][ T4361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7655'. [ 1172.477178][ T4372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7658'. [ 1172.890338][ T4392] tipc: Enabled bearer , priority 0 [ 1172.891029][ T4392] syzkaller0: entered promiscuous mode [ 1172.891051][ T4392] syzkaller0: entered allmulticast mode [ 1172.910736][ T4392] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1172.969321][ T4392] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1172.982480][ T4392] tipc: Resetting bearer [ 1172.998069][ T4391] tipc: Resetting bearer [ 1173.055987][ T4391] tipc: Disabling bearer [ 1173.355423][ T4405] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1173.426504][ T4413] __nla_validate_parse: 1 callbacks suppressed [ 1173.426528][ T4413] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7670'. [ 1173.671539][ T4423] netlink: 'syz.3.7674': attribute type 4 has an invalid length. [ 1173.691883][ T4423] netlink: 'syz.3.7674': attribute type 4 has an invalid length. [ 1174.045070][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7678'. [ 1174.045094][ T4443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7678'. [ 1174.117067][ T4449] netlink: 47 bytes leftover after parsing attributes in process `syz.2.7679'. [ 1174.332823][ T4440] x_tables: duplicate underflow at hook 2 [ 1174.332918][ T4440] x_tables: duplicate underflow at hook 2 [ 1174.333003][ T4440] x_tables: duplicate underflow at hook 2 [ 1174.333101][ T4440] x_tables: duplicate underflow at hook 2 [ 1174.333190][ T4440] x_tables: duplicate underflow at hook 2 [ 1174.333265][ T4440] x_tables: duplicate underflow at hook 2 [ 1174.333339][ T4440] x_tables: duplicate underflow at hook 2 [ 1174.333441][ T4440] x_tables: duplicate underflow at hook 2 [ 1174.333516][ T4440] x_tables: duplicate underflow at hook 2 [ 1174.333589][ T4440] x_tables: duplicate underflow at hook 2 [ 1174.745136][ T4479] sctp: [Deprecated]: syz.3.7684 (pid 4479) Use of int in max_burst socket option. [ 1174.745136][ T4479] Use struct sctp_assoc_value instead [ 1175.081979][ T7428] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.082033][ T7428] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.125765][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7689'. [ 1175.344217][ T7449] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.344267][ T7449] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.601465][ T4508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7691'. [ 1175.601493][ T4508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7691'. [ 1175.707130][ T4512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7693'. [ 1175.729315][ T4512] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7693'. [ 1175.729885][ T4512] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7693'. [ 1175.771859][ T4513] net_ratelimit: 1705 callbacks suppressed [ 1175.771882][ T4513] ip_tables: iptables: counters copy to user failed while replacing table [ 1175.829536][ T4515] ip_tables: iptables: counters copy to user failed while replacing table [ 1175.917165][ T4517] vxcan3: entered allmulticast mode [ 1176.005911][ T4520] netlink: 'syz.2.7696': attribute type 1 has an invalid length. [ 1176.051364][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1176.353049][ T4531] sit2: entered promiscuous mode [ 1176.388526][ T7445] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1177.333210][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.227151][ T4526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1179.459976][ T4604] __nla_validate_parse: 2 callbacks suppressed [ 1179.460000][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1179.482912][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1179.483286][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1179.483637][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1179.499971][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1179.504457][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1179.518226][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1179.562814][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1179.563193][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1179.563541][ T4604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1179.893174][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1180.049611][ T4630] FAULT_INJECTION: forcing a failure. [ 1180.049611][ T4630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1180.049650][ T4630] CPU: 1 UID: 0 PID: 4630 Comm: syz.1.7718 Not tainted syzkaller #0 PREEMPT(full) [ 1180.049676][ T4630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1180.049692][ T4630] Call Trace: [ 1180.049701][ T4630] [ 1180.049712][ T4630] dump_stack_lvl+0xe8/0x150 [ 1180.049751][ T4630] should_fail_ex+0x410/0x560 [ 1180.049791][ T4630] _copy_from_user+0x2d/0xb0 [ 1180.049826][ T4630] __sys_sendto+0x2a9/0x5a0 [ 1180.049868][ T4630] ? __pfx___sys_sendto+0x10/0x10 [ 1180.049935][ T4630] ? do_user_addr_fault+0xc4c/0x1340 [ 1180.049965][ T4630] __x64_sys_sendto+0xde/0x100 [ 1180.050003][ T4630] do_syscall_64+0x166/0x520 [ 1180.050033][ T4630] ? trace_irq_disable+0x3b/0x140 [ 1180.050056][ T4630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.050079][ T4630] ? clear_bhb_loop+0x70/0xc0 [ 1180.050108][ T4630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.050130][ T4630] RIP: 0033:0x7fcd6535eb0e [ 1180.050151][ T4630] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1180.050170][ T4630] RSP: 002b:00007fcd662a7e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1180.050195][ T4630] RAX: ffffffffffffffda RBX: 00007fcd662a96c0 RCX: 00007fcd6535eb0e [ 1180.050213][ T4630] RDX: 0000000000000024 RSI: 00007fcd662a8000 RDI: 0000000000000003 [ 1180.050228][ T4630] RBP: 0000000000000000 R08: 00007fcd662a7f04 R09: 000000000000000c [ 1180.050244][ T4630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1180.050258][ T4630] R13: 00007fcd662a7f58 R14: 00007fcd662a8000 R15: 0000000000000000 [ 1180.050295][ T4630] [ 1180.619478][ T4646] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1180.661913][ T4646] bond4 (unregistering): Released all slaves [ 1180.757718][ T4675] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1180.927161][ T4680] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1181.055157][ T4688] 8021q: VLANs not supported on vcan0 [ 1181.393471][ T4705] netlink: 'syz.4.7735': attribute type 10 has an invalid length. [ 1181.396914][ T4705] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 1181.396940][ T4705] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 1181.432475][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1181.435056][ T4705] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1181.435237][ T4705] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1181.436306][ T4705] team0: Port device netdevsim1 added [ 1181.439172][ T4705] netlink: 'syz.4.7735': attribute type 10 has an invalid length. [ 1181.439541][ T4705] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 1181.439840][ T4705] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 1181.508094][ T4705] team0: Port device netdevsim1 removed [ 1181.523135][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1181.526984][ T4705] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1181.527562][ T4705] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1181.529827][ T4719] netlink: 'syz.4.7735': attribute type 10 has an invalid length. [ 1181.535586][ T4710] netlink: 'syz.4.7735': attribute type 10 has an invalid length. [ 1181.584567][ T4705] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1181.597013][ T4719] bond0: (slave netdevsim1): Releasing backup interface [ 1181.610507][ T4719] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 1181.610691][ T4719] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 1181.633779][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1181.634776][ T4719] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1181.634947][ T4719] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1181.638508][ T4719] team0: Port device netdevsim1 added [ 1181.640794][ T4710] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 1181.640965][ T4710] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 1181.693424][ T4710] team0: Port device netdevsim1 removed [ 1181.712270][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1181.713973][ T4710] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1181.714301][ T4710] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1181.720676][ T4710] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1182.176109][ T4734] batman_adv: batadv0: Adding interface: gretap1 [ 1182.176130][ T4734] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.176165][ T4734] batman_adv: batadv0: Interface activated: gretap1 [ 1182.269801][ T4739] ipt_ECN: cannot use operation on non-tcp rule [ 1182.323741][ T4745] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1182.324265][ T4745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1182.325709][ T4745] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1183.066360][ T4799] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1183.223482][ T4807] netlink: 'syz.4.7767': attribute type 1 has an invalid length. [ 1183.294081][ T4807] bond2: entered promiscuous mode [ 1183.294488][ T4807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1183.322800][ T4807] ipvlan2: entered allmulticast mode [ 1183.322819][ T4807] bond2: entered allmulticast mode [ 1183.323087][ T4807] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1183.323115][ T4807] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1183.323130][ T4807] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1183.324923][ T4807] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1183.578801][ T4823] ip6erspan0: entered allmulticast mode [ 1184.131291][ T4853] netlink: 'syz.2.7775': attribute type 4 has an invalid length. [ 1184.354916][ T4858] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1184.373890][ T4858] 0ªX¹¦Dö»: entered allmulticast mode [ 1184.677972][ T4890] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1185.012995][ T4905] __nla_validate_parse: 72 callbacks suppressed [ 1185.013017][ T4905] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7787'. [ 1185.084457][ T4910] netlink: 'syz.3.7789': attribute type 1 has an invalid length. [ 1185.628637][ T4940] netlink: 'syz.3.7795': attribute type 9 has an invalid length. [ 1185.689882][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1185.694538][ T4946] netlink: 'syz.2.7796': attribute type 1 has an invalid length. [ 1185.758420][ T4945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7796'. [ 1185.813024][ T4946] bond5: entered promiscuous mode [ 1185.813565][ T4946] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1185.814679][ T4945] bond5: entered allmulticast mode [ 1185.863372][ T4945] bond5: (slave bridge5): making interface the new active one [ 1185.863396][ T4945] bridge5: entered promiscuous mode [ 1185.863589][ T4945] bridge5: entered allmulticast mode [ 1185.870217][ T4945] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 1186.022157][ T4960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7798'. [ 1186.294621][ T4969] pimreg: left allmulticast mode [ 1186.385031][ T4972] netlink: 15 bytes leftover after parsing attributes in process `syz.3.7801'. [ 1186.393707][ T4972] netlink: 15 bytes leftover after parsing attributes in process `syz.3.7801'. [ 1186.400805][ T4972] netlink: 15 bytes leftover after parsing attributes in process `syz.3.7801'. [ 1186.409950][ T4972] netlink: 15 bytes leftover after parsing attributes in process `syz.3.7801'. [ 1186.419020][ T4972] netlink: 15 bytes leftover after parsing attributes in process `syz.3.7801'. [ 1186.430534][ T4972] netlink: 15 bytes leftover after parsing attributes in process `syz.3.7801'. [ 1186.640506][ T4983] hsr0: left allmulticast mode [ 1186.740340][ T4995] xt_nfacct: accounting object `syz' does not exist [ 1186.972870][ T5002] netlink: 'syz.1.7806': attribute type 6 has an invalid length. [ 1186.972894][ T5002] netlink: 'syz.1.7806': attribute type 5 has an invalid length. [ 1187.447461][ T5014] netlink: NAT attribute has 8 unknown bytes [ 1187.447498][ T5014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1187.697058][ T5022] bond3 (unregistering): Released all slaves [ 1187.915170][ T5036] xt_check_table_hooks: 27 callbacks suppressed [ 1187.915194][ T5036] x_tables: duplicate underflow at hook 3 [ 1188.240011][ T5056] netlink: 'syz.1.7818': attribute type 4 has an invalid length. [ 1188.558936][ T5070] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1188.673401][ T5072] bridge0: left promiscuous mode [ 1188.948080][ T5085] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 1188.965530][ T5085] bond6 (unregistering): Released all slaves [ 1189.115481][ T5090] netlink: 'syz.0.7830': attribute type 11 has an invalid length. [ 1189.170651][ T5090] netlink: 'syz.0.7830': attribute type 11 has an invalid length. [ 1189.951060][ T5127] tipc: New replicast peer: 255.255.255.255 [ 1189.953915][ T5127] tipc: Enabled bearer , priority 10 [ 1190.023443][ T5131] netlink: 'syz.0.7841': attribute type 1 has an invalid length. [ 1190.053960][ T5131] bond4: entered promiscuous mode [ 1190.054486][ T5131] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1190.152453][ T5136] __nla_validate_parse: 224 callbacks suppressed [ 1190.152477][ T5136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7841'. [ 1190.152540][ T5136] bond4: entered allmulticast mode [ 1190.215623][ T5130] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 1190.219684][ T5127] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 1190.542561][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7848'. [ 1190.543170][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7848'. [ 1190.692535][ T5161] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7849'. [ 1190.928751][ T5170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7854'. [ 1190.951548][T23088] tipc: Node number set to 3004982857 [ 1190.968951][ T5177] netlink: 'syz.3.7855': attribute type 5 has an invalid length. [ 1190.984587][ T5180] netlink: 'syz.3.7855': attribute type 5 has an invalid length. [ 1191.054880][ T5185] netlink: 'syz.2.7856': attribute type 1 has an invalid length. [ 1191.075885][ T5189] bond_slave_0: entered promiscuous mode [ 1191.075909][ T5189] bond_slave_0: entered allmulticast mode [ 1191.078315][ T5189] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1191.117756][ T5185] xt_policy: neither incoming nor outgoing policy selected [ 1191.180252][ T5193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7858'. [ 1191.304623][ T5202] pim6reg: entered allmulticast mode [ 1191.423334][ T5202] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1191.521637][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7862'. [ 1192.130502][ T5201] pim6reg: left allmulticast mode [ 1193.896591][ T5170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1194.068484][ T5244] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7873'. [ 1194.145947][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7871'. [ 1194.146590][ T5256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7875'. [ 1194.389680][ T5268] netlink: 'syz.3.7878': attribute type 1 has an invalid length. [ 1194.494142][ T5268] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1194.553652][ T31] audit: type=1804 audit(1791926904.738:22): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.7878" name="cgroup.controllers" dev="tmpfs" ino=2408 res=1 errno=0 [ 1194.553884][ T31] audit: type=1800 audit(1791926904.738:23): pid=5268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7878" name="cgroup.controllers" dev="tmpfs" ino=2408 res=0 errno=0 [ 1194.619859][ T5268] syzkaller1: entered promiscuous mode [ 1194.619883][ T5268] syzkaller1: entered allmulticast mode [ 1195.039455][ T5291] IPVS: Unknown mcast interface: syzkaller1 [ 1195.163192][ T5306] __nla_validate_parse: 9 callbacks suppressed [ 1195.163234][ T5306] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7887'. [ 1195.704513][ T5342] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7893'. [ 1195.743005][ T5342] netlink: 239 bytes leftover after parsing attributes in process `syz.0.7893'. [ 1195.787067][ T5344] syzkaller0: entered promiscuous mode [ 1195.787092][ T5344] syzkaller0: entered allmulticast mode [ 1195.891612][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1196.206528][ T5368] ip6t_srh: unknown srh match flags 4000 [ 1196.207408][ T5367] ip6t_srh: unknown srh match flags 4000 [ 1196.302392][ T5368] ip_tables: iptables: counters copy to user failed while replacing table [ 1196.458315][ T5378] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7901'. [ 1196.529462][ T5384] xt_TCPMSS: Only works on TCP SYN packets [ 1196.529708][ T5384] xt_TCPMSS: Only works on TCP SYN packets [ 1196.618266][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7902'. [ 1197.173096][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1197.429324][ T5391] netlink: 'syz.1.7904': attribute type 1 has an invalid length. [ 1197.540088][ T5397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7904'. [ 1197.597659][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7904'. [ 1197.735113][ T5400] bond10: (slave bridge4): making interface the new active one [ 1197.735686][ T5400] bond10: (slave bridge4): Enslaving as an active interface with an up link [ 1197.737263][ T5410] netlink: 'syz.3.7908': attribute type 4 has an invalid length. [ 1197.737283][ T5410] netlink: 'syz.3.7908': attribute type 3 has an invalid length. [ 1197.786982][ T5409] hsr0: entered allmulticast mode [ 1197.787441][ T5411] syzkaller1: entered promiscuous mode [ 1197.787463][ T5411] syzkaller1: entered allmulticast mode [ 1197.931272][ T5419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7910'. [ 1198.047577][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7909'. [ 1198.072441][ T5409] hsr0 (unregistering): left allmulticast mode [ 1198.144036][ T5424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7912'. [ 1198.185737][ T31] audit: type=1800 audit(1791926908.368:24): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7911" name="memory.events" dev="tmpfs" ino=1957 res=0 errno=0 [ 1198.536403][ T5436] tipc: Enabled bearer , priority 7 [ 1198.702934][ T5447] netlink: 'syz.4.7920': attribute type 4 has an invalid length. [ 1198.727497][ T5447] .`: renamed from bond0 (while UP) [ 1198.740536][ T5449] sit0: entered promiscuous mode [ 1198.978286][ T5461] bridge0: left allmulticast mode [ 1199.242731][ T5469] syzkaller0: entered promiscuous mode [ 1199.242757][ T5469] syzkaller0: entered allmulticast mode [ 1199.651789][ T5471] IPVS: Error connecting to the multicast addr [ 1200.227069][ T5506] __nla_validate_parse: 9 callbacks suppressed [ 1200.227094][ T5506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7933'. [ 1200.255241][ T5506] vxcan0: entered allmulticast mode [ 1200.546168][ T5521] netlink: 260 bytes leftover after parsing attributes in process `syz.3.7937'. [ 1200.702956][ T5538] FAULT_INJECTION: forcing a failure. [ 1200.702956][ T5538] name failslab, interval 1, probability 0, space 0, times 0 [ 1200.703101][ T5538] CPU: 0 UID: 0 PID: 5538 Comm: syz.4.7941 Not tainted syzkaller #0 PREEMPT(full) [ 1200.703128][ T5538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1200.703141][ T5538] Call Trace: [ 1200.703151][ T5538] [ 1200.703161][ T5538] dump_stack_lvl+0xe8/0x150 [ 1200.703199][ T5538] should_fail_ex+0x410/0x560 [ 1200.703238][ T5538] should_failslab+0xa8/0x100 [ 1200.703273][ T5538] __kmalloc_noprof+0xfe/0x720 [ 1200.703297][ T5538] ? rcu_is_watching+0x16/0xb0 [ 1200.703327][ T5538] ? tomoyo_realpath_from_path+0xef/0x640 [ 1200.703362][ T5538] ? tomoyo_realpath_from_path+0xef/0x640 [ 1200.703405][ T5538] tomoyo_realpath_from_path+0xef/0x640 [ 1200.703456][ T5538] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1200.703488][ T5538] tomoyo_path_number_perm+0x246/0x5f0 [ 1200.703522][ T5538] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1200.703550][ T5538] ? __lock_acquire+0x747/0x2de0 [ 1200.703591][ T5538] ? hook_file_ioctl+0x1f2/0x600 [ 1200.703645][ T5538] ? __fget_files+0x2a/0x420 [ 1200.703681][ T5538] ? __fget_files+0x2a/0x420 [ 1200.703714][ T5538] ? __fget_files+0x3a2/0x420 [ 1200.703746][ T5538] ? __fget_files+0x2a/0x420 [ 1200.703785][ T5538] security_file_ioctl+0xc3/0x2a0 [ 1200.703817][ T5538] __se_sys_ioctl+0x47/0x170 [ 1200.703848][ T5538] do_syscall_64+0x166/0x520 [ 1200.703878][ T5538] ? trace_irq_disable+0x3b/0x140 [ 1200.703917][ T5538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.703942][ T5538] ? clear_bhb_loop+0x70/0xc0 [ 1200.703970][ T5538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.703993][ T5538] RIP: 0033:0x7fca1b19e2d9 [ 1200.704015][ T5538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.704035][ T5538] RSP: 002b:00007fca1bf8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1200.704061][ T5538] RAX: ffffffffffffffda RBX: 00007fca1b425fa0 RCX: 00007fca1b19e2d9 [ 1200.704079][ T5538] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 1200.704094][ T5538] RBP: 00007fca1bf8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.704109][ T5538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.704122][ T5538] R13: 00007fca1b426038 R14: 00007fca1b425fa0 R15: 00007ffe5c092c08 [ 1200.704161][ T5538] [ 1200.706303][ T5538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1200.750124][ T5542] openvswitch: netlink: Message has -2 unknown bytes. [ 1200.750210][ T5542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1200.988226][ T5548] netlink: 59 bytes leftover after parsing attributes in process `syz.1.7943'. [ 1201.280986][ T5561] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1201.326994][ T5559] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7949'. [ 1201.389861][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7950'. [ 1201.396890][ T5563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7950'. [ 1201.396958][ T5563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7950'. [ 1201.399621][ T5563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7950'. [ 1201.603350][ T5574] batman_adv: batadv0: Adding interface: macvlan2 [ 1201.603636][ T5574] batman_adv: batadv0: Interface activated: macvlan2 [ 1201.783287][ T5583] FAULT_INJECTION: forcing a failure. [ 1201.783287][ T5583] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.783334][ T5583] CPU: 0 UID: 0 PID: 5583 Comm: syz.3.7956 Not tainted syzkaller #0 PREEMPT(full) [ 1201.783363][ T5583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1201.783378][ T5583] Call Trace: [ 1201.783388][ T5583] [ 1201.783400][ T5583] dump_stack_lvl+0xe8/0x150 [ 1201.783443][ T5583] should_fail_ex+0x410/0x560 [ 1201.783486][ T5583] should_failslab+0xa8/0x100 [ 1201.783526][ T5583] __kmalloc_noprof+0xfe/0x720 [ 1201.783555][ T5583] ? tomoyo_encode+0x2ad/0x570 [ 1201.783591][ T5583] ? tomoyo_encode+0x2ad/0x570 [ 1201.783635][ T5583] tomoyo_encode+0x2ad/0x570 [ 1201.783681][ T5583] tomoyo_realpath_from_path+0x5fa/0x640 [ 1201.783731][ T5583] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1201.783764][ T5583] tomoyo_path_number_perm+0x246/0x5f0 [ 1201.783800][ T5583] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1201.783831][ T5583] ? __lock_acquire+0x747/0x2de0 [ 1201.783878][ T5583] ? hook_file_ioctl+0x1f2/0x600 [ 1201.783938][ T5583] ? __fget_files+0x2a/0x420 [ 1201.783984][ T5583] ? __fget_files+0x2a/0x420 [ 1201.784020][ T5583] ? __fget_files+0x3a2/0x420 [ 1201.784056][ T5583] ? __fget_files+0x2a/0x420 [ 1201.784098][ T5583] security_file_ioctl+0xc3/0x2a0 [ 1201.784131][ T5583] __se_sys_ioctl+0x47/0x170 [ 1201.784176][ T5583] do_syscall_64+0x166/0x520 [ 1201.784209][ T5583] ? trace_irq_disable+0x3b/0x140 [ 1201.784235][ T5583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.784260][ T5583] ? clear_bhb_loop+0x70/0xc0 [ 1201.784289][ T5583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.784312][ T5583] RIP: 0033:0x7fcd8f99e2d9 [ 1201.784347][ T5583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1201.784368][ T5583] RSP: 002b:00007fcd90878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.784393][ T5583] RAX: ffffffffffffffda RBX: 00007fcd8fc25fa0 RCX: 00007fcd8f99e2d9 [ 1201.784411][ T5583] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 1201.784427][ T5583] RBP: 00007fcd90878090 R08: 0000000000000000 R09: 0000000000000000 [ 1201.784442][ T5583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1201.784457][ T5583] R13: 00007fcd8fc26038 R14: 00007fcd8fc25fa0 R15: 00007ffc6f006a48 [ 1201.784495][ T5583] [ 1201.788644][ T5583] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1202.078284][ T5593] macvlan1: entered promiscuous mode [ 1202.078479][ T5593] macvlan1: entered allmulticast mode [ 1202.078496][ T5593] veth1_vlan: entered allmulticast mode [ 1202.149063][ T5596] netlink: 'syz.4.7959': attribute type 2 has an invalid length. [ 1202.149085][ T5596] netlink: 'syz.4.7959': attribute type 1 has an invalid length. [ 1202.149100][ T5596] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7959'. [ 1202.484623][ T5617] ip_tables: iptables: counters copy to user failed while replacing table [ 1202.490554][ T5616] netlink: 'syz.1.7964': attribute type 49 has an invalid length. [ 1202.869850][ T5638] FAULT_INJECTION: forcing a failure. [ 1202.869850][ T5638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1202.869886][ T5638] CPU: 1 UID: 0 PID: 5638 Comm: syz.3.7971 Not tainted syzkaller #0 PREEMPT(full) [ 1202.869911][ T5638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1202.869924][ T5638] Call Trace: [ 1202.869934][ T5638] [ 1202.869944][ T5638] dump_stack_lvl+0xe8/0x150 [ 1202.869981][ T5638] should_fail_ex+0x410/0x560 [ 1202.870017][ T5638] _copy_from_user+0x2d/0xb0 [ 1202.870055][ T5638] __tun_chr_ioctl+0x20a/0x1e70 [ 1202.870181][ T5638] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1202.870216][ T5638] ? __fget_files+0x2a/0x420 [ 1202.870249][ T5638] ? __fget_files+0x3a2/0x420 [ 1202.870281][ T5638] ? __fget_files+0x2a/0x420 [ 1202.870318][ T5638] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1202.870353][ T5638] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1202.870382][ T5638] __se_sys_ioctl+0xfc/0x170 [ 1202.870413][ T5638] do_syscall_64+0x166/0x520 [ 1202.870444][ T5638] ? trace_irq_disable+0x3b/0x140 [ 1202.870467][ T5638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.870492][ T5638] ? clear_bhb_loop+0x70/0xc0 [ 1202.870522][ T5638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.870545][ T5638] RIP: 0033:0x7fcd8f99e2d9 [ 1202.870565][ T5638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.870586][ T5638] RSP: 002b:00007fcd90878028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1202.870610][ T5638] RAX: ffffffffffffffda RBX: 00007fcd8fc25fa0 RCX: 00007fcd8f99e2d9 [ 1202.870628][ T5638] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 1202.870644][ T5638] RBP: 00007fcd90878090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.870659][ T5638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1202.870673][ T5638] R13: 00007fcd8fc26038 R14: 00007fcd8fc25fa0 R15: 00007ffc6f006a48 [ 1202.870711][ T5638] [ 1203.088970][ T5641] syz_tun: entered allmulticast mode [ 1203.339423][ T5635] syz_tun: left allmulticast mode [ 1203.419795][ T5666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7975'. [ 1203.506777][ T5667] nbd: device at index 64 is going down [ 1203.574045][ T5672] udevd[5672]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1203.600461][ T5672] udevd[5672]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1203.643242][ T5677] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1203.643585][ T5677] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1203.889163][ T5692] FAULT_INJECTION: forcing a failure. [ 1203.889163][ T5692] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.889199][ T5692] CPU: 1 UID: 0 PID: 5692 Comm: syz.1.7987 Not tainted syzkaller #0 PREEMPT(full) [ 1203.889224][ T5692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1203.889239][ T5692] Call Trace: [ 1203.889248][ T5692] [ 1203.889259][ T5692] dump_stack_lvl+0xe8/0x150 [ 1203.889296][ T5692] should_fail_ex+0x410/0x560 [ 1203.889333][ T5692] should_failslab+0xa8/0x100 [ 1203.889366][ T5692] __kvmalloc_node_noprof+0x176/0x820 [ 1203.889392][ T5692] ? __lock_acquire+0x747/0x2de0 [ 1203.889420][ T5692] ? tun_attach+0x8e8/0x1560 [ 1203.889449][ T5692] ? tun_attach+0x8e8/0x1560 [ 1203.889490][ T5692] tun_attach+0x8e8/0x1560 [ 1203.889524][ T5692] ? apparmor_capable+0x126/0x170 [ 1203.889552][ T5692] ? bpf_lsm_capable+0x9/0x20 [ 1203.889575][ T5692] ? security_capable+0x7e/0x2c0 [ 1203.889610][ T5692] ? ns_capable+0x89/0xe0 [ 1203.889643][ T5692] ? tun_not_capable+0x180/0x1f0 [ 1203.889678][ T5692] tun_set_iff+0x463/0xf20 [ 1203.889716][ T5692] __tun_chr_ioctl+0x7e5/0x1e70 [ 1203.889757][ T5692] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1203.889792][ T5692] ? __fget_files+0x2a/0x420 [ 1203.889825][ T5692] ? __fget_files+0x3a2/0x420 [ 1203.889857][ T5692] ? __fget_files+0x2a/0x420 [ 1203.889895][ T5692] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1203.889929][ T5692] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1203.889957][ T5692] __se_sys_ioctl+0xfc/0x170 [ 1203.889987][ T5692] do_syscall_64+0x166/0x520 [ 1203.890035][ T5692] ? trace_irq_disable+0x3b/0x140 [ 1203.890059][ T5692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.890084][ T5692] ? clear_bhb_loop+0x70/0xc0 [ 1203.890119][ T5692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.890142][ T5692] RIP: 0033:0x7fcd6539e2d9 [ 1203.890163][ T5692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.890183][ T5692] RSP: 002b:00007fcd662a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1203.890208][ T5692] RAX: ffffffffffffffda RBX: 00007fcd65625fa0 RCX: 00007fcd6539e2d9 [ 1203.890225][ T5692] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000004 [ 1203.890241][ T5692] RBP: 00007fcd662a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.890256][ T5692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.890270][ T5692] R13: 00007fcd65626038 R14: 00007fcd65625fa0 R15: 00007ffe955233b8 [ 1203.890307][ T5692] [ 1204.168591][ T5695] sctp: [Deprecated]: syz.3.7988 (pid 5695) Use of int in maxseg socket option. [ 1204.168591][ T5695] Use struct sctp_assoc_value instead [ 1204.429889][ T5705] netlink: 'syz.2.7990': attribute type 1 has an invalid length. [ 1205.095695][ T5742] netlink: 'syz.3.7999': attribute type 4 has an invalid length. [ 1205.294573][ T5748] FAULT_INJECTION: forcing a failure. [ 1205.294573][ T5748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.294606][ T5748] CPU: 1 UID: 0 PID: 5748 Comm: syz.2.8001 Not tainted syzkaller #0 PREEMPT(full) [ 1205.294628][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1205.294641][ T5748] Call Trace: [ 1205.294649][ T5748] [ 1205.294659][ T5748] dump_stack_lvl+0xe8/0x150 [ 1205.294696][ T5748] should_fail_ex+0x410/0x560 [ 1205.294729][ T5748] _copy_from_user+0x2d/0xb0 [ 1205.294760][ T5748] kstrtouint_from_user+0xd6/0x180 [ 1205.294788][ T5748] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1205.294822][ T5748] ? lock_acquire+0x115/0x350 [ 1205.294849][ T5748] proc_fail_nth_write+0x8e/0x210 [ 1205.294874][ T5748] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1205.294905][ T5748] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1205.294926][ T5748] vfs_write+0x296/0xba0 [ 1205.294956][ T5748] ? __pfx_vfs_write+0x10/0x10 [ 1205.294979][ T5748] ? __fget_files+0x2a/0x420 [ 1205.295013][ T5748] ? __fget_files+0x3a2/0x420 [ 1205.295042][ T5748] ? __fget_files+0x2a/0x420 [ 1205.295099][ T5748] ksys_write+0x150/0x270 [ 1205.295123][ T5748] ? __pfx_ksys_write+0x10/0x10 [ 1205.295144][ T5748] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1205.295181][ T5748] do_syscall_64+0x166/0x520 [ 1205.295210][ T5748] ? trace_irq_disable+0x3b/0x140 [ 1205.295241][ T5748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.295290][ T5748] ? clear_bhb_loop+0x70/0xc0 [ 1205.295316][ T5748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.295338][ T5748] RIP: 0033:0x7f7f7ff5eb0e [ 1205.295357][ T5748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1205.295375][ T5748] RSP: 002b:00007f7f7e1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1205.295397][ T5748] RAX: ffffffffffffffda RBX: 00007f7f7e1f66c0 RCX: 00007f7f7ff5eb0e [ 1205.295413][ T5748] RDX: 0000000000000001 RSI: 00007f7f7e1f60a0 RDI: 0000000000000005 [ 1205.295426][ T5748] RBP: 00007f7f7e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.295439][ T5748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.295452][ T5748] R13: 00007f7f80226038 R14: 00007f7f80225fa0 R15: 00007fff8501c3e8 [ 1205.295493][ T5748] [ 1205.572248][ T5750] xt_CT: No such helper "snmp_trap" [ 1205.784024][ T5757] netlink: 'syz.2.8003': attribute type 1 has an invalid length. [ 1205.930672][ T5769] __nla_validate_parse: 5 callbacks suppressed [ 1205.930695][ T5769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8005'. [ 1205.964562][ T5769] vlan2: entered allmulticast mode [ 1205.964584][ T5769] bridge_slave_0: entered allmulticast mode [ 1206.183041][ T5783] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8011'. [ 1206.183041][ T5784] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8011'. [ 1206.298765][ T5777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.298805][ T5777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.369573][ T5786] bridge_slave_0: left allmulticast mode [ 1206.369599][ T5786] bridge_slave_0: left promiscuous mode [ 1206.369811][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.406567][ T5786] bridge_slave_1: left allmulticast mode [ 1206.406593][ T5786] bridge_slave_1: left promiscuous mode [ 1206.406814][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.483876][ T5786] bond0: (slave bond_slave_0): Releasing backup interface [ 1206.509570][ T5786] bond0: (slave bond_slave_1): Releasing backup interface [ 1206.532926][ T5786] team0: Port device team_slave_0 removed [ 1206.542596][ T5786] team0: Port device team_slave_1 removed [ 1206.549858][ T5786] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1206.745476][ T5777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1206.745516][ T5777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.822290][ T5806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8014'. [ 1206.822334][ T5806] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1206.828465][ T5806] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1206.859903][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8014'. [ 1206.859932][ T5806] block nbd3: Unsupported socket: should be TCP or UNIX. [ 1207.029814][ T5812] tunl0: left promiscuous mode [ 1207.029843][ T5812] tunl0: left allmulticast mode [ 1207.196105][ T5777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.196145][ T5777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.387655][ T5777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1207.387694][ T5777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.441567][ T5824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8018'. [ 1207.443871][ T5824] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8018'. [ 1207.601535][ T7428] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.601571][ T7428] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.632417][ T7428] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.632454][ T7428] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.632509][ T7428] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.632537][ T7428] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.701899][ T7428] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1207.701935][ T7428] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.799186][ T5841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8022'. [ 1208.205645][ T5853] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8025'. [ 1208.231917][ T5853] Cannot find del_set index 4 as target [ 1208.253162][ T5856] dummy0: entered allmulticast mode [ 1208.255952][ T5854] dummy0: left allmulticast mode [ 1208.925026][ T5885] sctp: [Deprecated]: syz.0.8032 (pid 5885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1208.925026][ T5885] Use struct sctp_sack_info instead [ 1209.728976][ T5890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8033'. [ 1209.881318][ T5918] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 1210.212935][ T5930] netlink: 'syz.0.8040': attribute type 12 has an invalid length. [ 1210.466318][ T5937] bridge_slave_0: left allmulticast mode [ 1210.466345][ T5937] bridge_slave_0: left promiscuous mode [ 1210.466693][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.497955][ T5937] bridge_slave_1: left allmulticast mode [ 1210.497982][ T5937] bridge_slave_1: left promiscuous mode [ 1210.498195][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.542638][ T5937] bond2: (slave veth0_to_bond): Releasing backup interface [ 1210.565835][ T5937] bond0: (slave bond_slave_0): Releasing backup interface [ 1210.596331][ T5937] bond0: (slave bond_slave_1): Releasing backup interface [ 1210.656266][ T5937] team0: Port device team_slave_0 removed [ 1210.672740][ T5937] team0: Port device team_slave_1 removed [ 1210.674915][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.674938][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.680913][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.680935][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.728968][ T5937] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1210.794916][T23086] syz1: Port: 1 Link DOWN [ 1210.822844][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1210.827047][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 1210.918828][ T5948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1210.918854][ T5948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1210.954811][ T5948] veth1_vlan: left promiscuous mode [ 1210.960060][ T5948] veth1_vlan: entered promiscuous mode [ 1210.976979][ T5948] veth1_macvtap: left promiscuous mode [ 1210.978115][ T5948] veth0_macvtap: left promiscuous mode [ 1210.979173][ T5948] veth0_macvtap: entered promiscuous mode [ 1210.980476][ T5948] veth1_macvtap: entered promiscuous mode [ 1211.009846][ T5948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1211.011024][ T5948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1211.027112][ T5948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1211.035884][ T5948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1211.052537][ T5948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1211.055613][ T5948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1211.063413][ T5948] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1211.063606][ T4598] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.063637][ T4598] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.163436][ T5953] tipc: Enabling of bearer rejected, failed to enable media [ 1211.163506][ T5954] netlink: 'syz.3.8044': attribute type 3 has an invalid length. [ 1211.163744][ T5954] netlink: 'syz.3.8044': attribute type 3 has an invalid length. [ 1211.167826][ T5954] netlink: 'syz.3.8044': attribute type 3 has an invalid length. [ 1211.167951][ T5954] netlink: 'syz.3.8044': attribute type 3 has an invalid length. [ 1211.226380][ T5954] netlink: 'syz.3.8044': attribute type 3 has an invalid length. [ 1211.226589][ T5954] netlink: 'syz.3.8044': attribute type 3 has an invalid length. [ 1211.228951][ T5954] netlink: 'syz.3.8044': attribute type 3 has an invalid length. [ 1211.229068][ T5954] netlink: 'syz.3.8044': attribute type 3 has an invalid length. [ 1211.229580][ T5954] netlink: 'syz.3.8044': attribute type 3 has an invalid length. [ 1211.351828][ T7428] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.351863][ T7428] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.351905][ T7428] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.351931][ T7428] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.351965][ T7428] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.351990][ T7428] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.443479][ T5965] __nla_validate_parse: 3 callbacks suppressed [ 1211.443499][ T5965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8047'. [ 1211.650973][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8054'. [ 1211.782782][ T5983] dummy0 speed is unknown, defaulting to 1000 [ 1212.024084][ T6008] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8059'. [ 1212.098420][ T6006] bond5: option active_slave: mode dependency failed, not supported in mode broadcast(3) [ 1212.128384][ T6006] bond5 (unregistering): Released all slaves [ 1212.216956][ T6010] syzkaller1: entered allmulticast mode [ 1212.434100][ T6025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8061'. [ 1212.628785][ T6037] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8065'. [ 1212.727132][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8066'. [ 1212.805027][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8066'. [ 1212.922996][ T6051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8068'. [ 1213.101576][ T6060] syzkaller0: entered promiscuous mode [ 1213.101598][ T6060] syzkaller0: entered allmulticast mode [ 1213.109538][ T6060] simple: /dev/video#_3 [ 1213.109555][ T6060] simple: /dev/video#_6 [ 1213.109566][ T6060] simple: /dev/video#_9 [ 1213.109576][ T6060] simple: /dev/video#_12 [ 1213.109586][ T6060] simple: /dev/video#_15 [ 1213.109596][ T6060] simple: /dev/video#_18 [ 1213.109606][ T6060] simple: /dev/video#_21 [ 1213.109616][ T6060] simple: /dev/video#_24 [ 1213.109626][ T6060] simple: /dev/video#_27 [ 1213.109635][ T6060] simple: /dev/video#_30 [ 1213.109645][ T6060] simple: /dev/video#_33 [ 1213.109655][ T6060] simple: /dev/video#_36 [ 1213.109665][ T6060] simple: /dev/video#_39 [ 1213.109675][ T6060] simple: /dev/video#_42 [ 1213.109685][ T6060] simple: /dev/video#_45 [ 1213.109694][ T6060] simple: /dev/video#_48 [ 1213.109704][ T6060] simple: /dev/video#_51 [ 1213.109714][ T6060] simple: /dev/video#_54 [ 1213.109725][ T6060] simple: /dev/video#_57 [ 1213.109743][ T6060] simple: /dev/video#_60 [ 1213.109753][ T6060] simple: /dev/video#_63 [ 1213.109764][ T6060] simple: /dev/video#_66 [ 1213.109773][ T6060] simple: /dev/video#_69 [ 1213.109784][ T6060] simple: /dev/video#_72 [ 1213.109793][ T6060] simple: /dev/video#_75 [ 1213.109804][ T6060] simple: /dev/video#_78 [ 1213.109813][ T6060] simple: /dev/video#_81 [ 1213.109823][ T6060] simple: /dev/video#_84 [ 1213.109833][ T6060] simple: /dev/video#_87 [ 1213.109843][ T6060] simple: /dev/video#_90 [ 1213.109852][ T6060] simple: /dev/video#_93 [ 1213.109862][ T6060] simple: /dev/video#_96 [ 1213.109873][ T6060] TC_ACT_REPEAT abuse ? [ 1213.381018][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8074'. [ 1213.391009][ T6065] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1213.398239][ T6065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8074'. [ 1214.477181][ T6098] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.478997][ T6098] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.479029][ T6098] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1214.580966][ T6109] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1214.723447][ T6098] netdevsim netdevsim1 netdevsim2 (unregistering): left promiscuous mode [ 1214.724573][ T6098] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.724608][ T6098] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.724637][ T6098] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1214.842380][ T6126] ip_tables: iptables: counters copy to user failed while replacing table [ 1214.877793][ T6098] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 1214.878598][ T6098] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1214.878631][ T6098] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.878657][ T6098] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1215.017383][ T6098] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1215.017421][ T6098] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.017449][ T6098] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1215.291520][ T4598] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.291555][ T4598] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1215.291581][ T4598] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1215.495226][ T6153] batadv_slave_1: entered promiscuous mode [ 1215.681657][ T4598] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.681694][ T4598] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1215.681722][ T4598] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1215.695556][ T4598] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.695644][ T4598] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1215.695706][ T4598] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1215.695834][ T4598] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.695904][ T4598] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1215.695953][ T4598] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1216.084886][ T6171] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1216.246387][ T6171] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 1216.330255][ T6171] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1216.347185][ T6171] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1216.350215][ T6171] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1216.366674][ T6171] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1216.409083][ T7428] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 1216.430059][ T7428] bond3: (slave veth3): making interface the new active one [ 1216.460191][ T7428] bond3: active interface up! [ 1216.564513][ T6172] validate_nla: 59 callbacks suppressed [ 1216.564538][ T6172] netlink: 'syz.2.8098': attribute type 3 has an invalid length. [ 1216.564803][ T6172] netlink: 'syz.2.8098': attribute type 3 has an invalid length. [ 1216.565205][ T6177] tun0: tun_chr_ioctl cmd 2148553947 [ 1216.565448][ T6145] batadv_slave_1: left promiscuous mode [ 1216.567548][ T6178] tun0: tun_chr_ioctl cmd 1074025673 [ 1216.567627][ T6182] tun0: tun_chr_ioctl cmd 2148553947 [ 1216.583722][ T4582] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1216.834879][ T6198] __nla_validate_parse: 7 callbacks suppressed [ 1216.834900][ T6198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8102'. [ 1216.894211][ T6198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8102'. [ 1216.910897][ T6193] dummy0 speed is unknown, defaulting to 1000 [ 1217.005961][ T6198] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8102'. [ 1217.031934][ T6206] netlink: 'syz.1.8106': attribute type 21 has an invalid length. [ 1217.051531][ T6206] netlink: 'syz.1.8106': attribute type 1 has an invalid length. [ 1217.051552][ T6206] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8106'. [ 1217.692298][ T6240] nbd3: detected capacity change from 0 to 63 [ 1217.699553][ T5626] block nbd3: Receive control failed (result -32) [ 1217.702471][ T1707] block nbd3: Dead connection, failed to find a fallback [ 1217.702497][ T1707] block nbd3: shutting down sockets [ 1217.702593][ T1707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.702707][ T1707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1217.748864][ T1707] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.748896][ T1707] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1217.749002][ T1707] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.749027][ T1707] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1217.753929][ T1707] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.753964][ T1707] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1217.812745][ T1707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.812777][ T1707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1217.812902][ T1707] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.812927][ T1707] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1217.813045][ T1707] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.813071][ T1707] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1217.813195][ T1707] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.813221][ T1707] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1217.813332][ T1707] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.813359][ T1707] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1217.813466][ T1707] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1217.813492][ T1707] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1217.819272][ T5908] ldm_validate_partition_table(): Disk read failed. [ 1217.968601][ T6233] syzkaller0: entered promiscuous mode [ 1217.968625][ T6233] syzkaller0: entered allmulticast mode [ 1217.991315][ T5908] Dev nbd3: unable to read RDB block 0 [ 1218.040386][ T5908] nbd3: unable to read partition table [ 1218.072204][ T5908] ldm_validate_partition_table(): Disk read failed. [ 1218.072768][ T5908] Dev nbd3: unable to read RDB block 0 [ 1218.073461][ T5908] nbd3: unable to read partition table [ 1218.257780][ T6257] dummy0 speed is unknown, defaulting to 1000 [ 1218.426128][ T6264] netlink: 'syz.4.8118': attribute type 11 has an invalid length. [ 1218.426154][ T6264] netlink: 'syz.4.8118': attribute type 9 has an invalid length. [ 1218.426169][ T6264] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8118'. [ 1219.296535][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8122'. [ 1219.541853][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1219.715800][ T6315] tipc: New replicast peer: 255.255.255.255 [ 1219.719385][ T6315] tipc: Enabled bearer , priority 10 [ 1219.758476][ T6317] netlink: 984 bytes leftover after parsing attributes in process `syz.1.8131'. [ 1219.787829][ T6317] netlink: 984 bytes leftover after parsing attributes in process `syz.1.8131'. [ 1219.934562][ T6330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8133'. [ 1220.261002][ T6344] gretap0: entered promiscuous mode [ 1220.268672][ T6344] vlan3: entered promiscuous mode [ 1220.611317][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1220.885868][T16136] tipc: Node number set to 364091625 [ 1221.616208][ T6416] netlink: 'syz.1.8152': attribute type 1 has an invalid length. [ 1221.985473][ T6420] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING [ 1222.159870][ T6436] pim6reg: entered allmulticast mode [ 1222.197084][ T6438] __nla_validate_parse: 6 callbacks suppressed [ 1222.197099][ T6438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8159'. [ 1222.279846][ T6442] xt_nfacct: accounting object `syz0' does not exist [ 1222.438656][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8161'. [ 1222.463510][ T6445] bond11: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 1222.464822][ T6445] bond11 (unregistering): Released all slaves [ 1222.641535][ T6454] netlink: 'syz.3.8163': attribute type 1 has an invalid length. [ 1222.849573][ T6462] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 1222.969207][ T6435] pim6reg: left allmulticast mode [ 1222.983322][ T6474] netlink: 'syz.3.8166': attribute type 26 has an invalid length. [ 1223.027971][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8166'. [ 1223.137763][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8167'. [ 1223.199399][ T6479] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8170'. [ 1223.237448][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8168'. [ 1223.368813][ T6481] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8168'. [ 1223.395395][ T6494] netlink: 'syz.2.8171': attribute type 1 has an invalid length. [ 1223.409584][ T6496] netlink: 'syz.2.8171': attribute type 1 has an invalid length. [ 1223.428661][ T6495] netlink: 'syz.1.8174': attribute type 1 has an invalid length. [ 1223.506045][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8172'. [ 1223.506079][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8172'. [ 1223.506097][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8172'. [ 1223.642763][ T6494] bond6: option mode: invalid value (7) [ 1223.644720][ T6494] bond6 (unregistering): Released all slaves [ 1223.759519][ T6496] bond6: option mode: invalid value (7) [ 1223.770051][ T6496] bond6 (unregistering): Released all slaves [ 1223.859545][ T6492] dummy0: left promiscuous mode [ 1224.050937][ T6527] pim6reg: entered allmulticast mode [ 1224.186211][ T6537] xt_nfacct: accounting object `syz0' does not exist [ 1224.533502][ T6551] netlink: 'syz.1.8186': attribute type 1 has an invalid length. [ 1224.579698][ T6553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1224.580117][ T6553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1224.580423][ T6553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1224.580735][ T6553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1224.616441][ T6553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1224.616770][ T6553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1224.617223][ T6553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1224.617534][ T6553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1224.617822][ T6553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1224.618111][ T6553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1224.843935][ T6525] pim6reg: left allmulticast mode [ 1225.444585][ T6601] pim6reg: entered allmulticast mode [ 1225.613991][ T6618] xt_nfacct: accounting object `syz0' does not exist [ 1225.658066][ T6589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1225.982299][ T6635] netlink: 'syz.4.8212': attribute type 4 has an invalid length. [ 1226.033077][ T6635] netlink: 'syz.4.8212': attribute type 4 has an invalid length. [ 1226.238357][ T6598] pim6reg: left allmulticast mode [ 1226.524700][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880387e8800: rx timeout, send abort [ 1226.873331][ T6688] syzkaller0: entered promiscuous mode [ 1226.873355][ T6688] syzkaller0: entered allmulticast mode [ 1227.006803][ T6690] netlink: 'syz.4.8227': attribute type 1 has an invalid length. [ 1227.008255][ T6690] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1227.027144][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880387e8800: abort rx timeout. Force session deactivation [ 1227.027288][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880387e8c00: rx timeout, send abort [ 1227.097713][ T6690] syzkaller0: entered promiscuous mode [ 1227.097741][ T6690] syzkaller0: entered allmulticast mode [ 1227.251395][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1227.274825][ T6695] bond11: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1227.280674][ T6695] bond11 (unregistering): Released all slaves [ 1227.347434][ T6697] netlink: 'syz.3.8229': attribute type 1 has an invalid length. [ 1227.347880][ T6699] __nla_validate_parse: 16 callbacks suppressed [ 1227.347898][ T6699] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.8230'. [ 1227.527353][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880387e8c00: abort rx timeout. Force session deactivation [ 1227.633093][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8235'. [ 1227.687667][ T6718] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8236'. [ 1227.702275][ T6718] [ 1227.704647][ T6718] ====================================================== [ 1227.711706][ T6718] WARNING: possible circular locking dependency detected [ 1227.718758][ T6718] syzkaller #0 Not tainted [ 1227.723197][ T6718] ------------------------------------------------------ [ 1227.730236][ T6718] syz.2.8236/6718 is trying to acquire lock: [ 1227.736243][ T6718] ffffffff8fe90360 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x600 [ 1227.745614][ T6718] [ 1227.745614][ T6718] but task is already holding lock: [ 1227.753006][ T6718] ffff8880772c4530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 1227.762299][ T6718] [ 1227.762299][ T6718] which lock already depends on the new lock. [ 1227.762299][ T6718] [ 1227.772725][ T6718] [ 1227.772725][ T6718] the existing dependency chain (in reverse order) is: [ 1227.781762][ T6718] [ 1227.781762][ T6718] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 1227.789365][ T6718] __mutex_lock+0x19d/0x1550 [ 1227.794519][ T6718] __ipv6_dev_mc_inc+0x4e/0xaf0 [ 1227.799938][ T6718] __ipv6_sock_mc_join+0x511/0x830 [ 1227.805611][ T6718] do_ipv6_setsockopt+0x206c/0x2960 [ 1227.811448][ T6718] ipv6_setsockopt+0x59/0x170 [ 1227.816675][ T6718] do_sock_setsockopt+0x17c/0x1b0 [ 1227.822240][ T6718] __x64_sys_setsockopt+0x13d/0x1b0 [ 1227.827987][ T6718] do_syscall_64+0x166/0x520 [ 1227.833134][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.839583][ T6718] [ 1227.839583][ T6718] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1227.847356][ T6718] lock_sock_nested+0x41/0x100 [ 1227.852670][ T6718] inet_shutdown+0x6a/0x390 [ 1227.857739][ T6718] nbd_mark_nsock_dead+0x2cb/0x550 [ 1227.863516][ T6718] sock_shutdown+0x15e/0x260 [ 1227.868659][ T6718] nbd_clear_sock+0x24/0x170 [ 1227.873783][ T6718] nbd_config_put+0x477/0x7e0 [ 1227.878993][ T6718] nbd_genl_connect+0x19b8/0x1cd0 [ 1227.884551][ T6718] genl_family_rcv_msg_doit+0x233/0x340 [ 1227.890637][ T6718] genl_rcv_msg+0x614/0x7a0 [ 1227.895677][ T6718] netlink_rcv_skb+0x226/0x4a0 [ 1227.900984][ T6718] genl_rcv+0x28/0x40 [ 1227.905501][ T6718] netlink_unicast+0x7bd/0x940 [ 1227.910805][ T6718] netlink_sendmsg+0x813/0xb40 [ 1227.916121][ T6718] sock_sendmsg_nosec+0x14e/0x190 [ 1227.921691][ T6718] ____sys_sendmsg+0x54e/0x850 [ 1227.926984][ T6718] ___sys_sendmsg+0x2a5/0x360 [ 1227.932216][ T6718] __x64_sys_sendmsg+0x1b1/0x290 [ 1227.937683][ T6718] do_syscall_64+0x166/0x520 [ 1227.942815][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.949239][ T6718] [ 1227.949239][ T6718] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1227.956898][ T6718] __mutex_lock+0x19d/0x1550 [ 1227.962031][ T6718] nbd_queue_rq+0x373/0xff0 [ 1227.967083][ T6718] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1227.973271][ T6718] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1227.980186][ T6718] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1227.986703][ T6718] blk_mq_run_work_fn+0x16c/0x300 [ 1227.992277][ T6718] process_scheduled_works+0xc3d/0x1630 [ 1227.998377][ T6718] worker_thread+0xa47/0xfb0 [ 1228.003514][ T6718] kthread+0x38b/0x480 [ 1228.008120][ T6718] ret_from_fork+0x514/0xb70 [ 1228.013294][ T6718] ret_from_fork_asm+0x1a/0x30 [ 1228.018616][ T6718] [ 1228.018616][ T6718] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1228.025852][ T6718] __mutex_lock+0x19d/0x1550 [ 1228.030984][ T6718] nbd_queue_rq+0xc1/0xff0 [ 1228.035938][ T6718] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1228.042030][ T6718] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1228.048912][ T6718] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1228.055430][ T6718] blk_mq_run_work_fn+0x16c/0x300 [ 1228.061036][ T6718] process_scheduled_works+0xc3d/0x1630 [ 1228.067122][ T6718] worker_thread+0xa47/0xfb0 [ 1228.072256][ T6718] kthread+0x38b/0x480 [ 1228.076854][ T6718] ret_from_fork+0x514/0xb70 [ 1228.081990][ T6718] ret_from_fork_asm+0x1a/0x30 [ 1228.087291][ T6718] [ 1228.087291][ T6718] -> #3 (set->srcu){.+.+}-{0:0}: [ 1228.094427][ T6718] __synchronize_srcu+0xc9/0x2f0 [ 1228.099917][ T6718] elevator_switch+0x1e8/0x7b0 [ 1228.105338][ T6718] elevator_change+0x2fa/0x480 [ 1228.110639][ T6718] elevator_set_default+0x375/0x440 [ 1228.116381][ T6718] blk_register_queue+0x3f3/0x4e0 [ 1228.122019][ T6718] __add_disk+0x6b8/0xdb0 [ 1228.126891][ T6718] add_disk_fwnode+0x100/0x3a0 [ 1228.132193][ T6718] nbd_dev_add+0x733/0xb60 [ 1228.137142][ T6718] nbd_init+0x168/0x1f0 [ 1228.141907][ T6718] do_one_initcall+0x250/0x870 [ 1228.147206][ T6718] do_initcall_level+0x10a/0x1a0 [ 1228.152726][ T6718] do_initcalls+0x59/0xa0 [ 1228.157596][ T6718] kernel_init_freeable+0x29d/0x3e0 [ 1228.163360][ T6718] kernel_init+0x22/0x1d0 [ 1228.168226][ T6718] ret_from_fork+0x514/0xb70 [ 1228.173357][ T6718] ret_from_fork_asm+0x1a/0x30 [ 1228.178661][ T6718] [ 1228.178661][ T6718] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1228.186502][ T6718] __mutex_lock+0x19d/0x1550 [ 1228.191632][ T6718] elevator_change+0x1af/0x480 [ 1228.196944][ T6718] elevator_set_none+0xb5/0x140 [ 1228.202344][ T6718] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1228.208698][ T6718] nbd_start_device+0x189/0xb30 [ 1228.214091][ T6718] nbd_genl_connect+0x167d/0x1cd0 [ 1228.219661][ T6718] genl_family_rcv_msg_doit+0x233/0x340 [ 1228.225753][ T6718] genl_rcv_msg+0x614/0x7a0 [ 1228.230801][ T6718] netlink_rcv_skb+0x226/0x4a0 [ 1228.236110][ T6718] genl_rcv+0x28/0x40 [ 1228.240622][ T6718] netlink_unicast+0x7bd/0x940 [ 1228.245922][ T6718] netlink_sendmsg+0x813/0xb40 [ 1228.251232][ T6718] sock_sendmsg_nosec+0x14e/0x190 [ 1228.256802][ T6718] ____sys_sendmsg+0x54e/0x850 [ 1228.262107][ T6718] ___sys_sendmsg+0x2a5/0x360 [ 1228.267329][ T6718] __x64_sys_sendmsg+0x1b1/0x290 [ 1228.272802][ T6718] do_syscall_64+0x166/0x520 [ 1228.277933][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.284356][ T6718] [ 1228.284356][ T6718] -> #1 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 1228.292978][ T6718] blk_alloc_queue+0x544/0x690 [ 1228.298284][ T6718] __blk_mq_alloc_disk+0x194/0x390 [ 1228.303957][ T6718] nbd_dev_add+0x494/0xb60 [ 1228.308913][ T6718] nbd_init+0x168/0x1f0 [ 1228.313606][ T6718] do_one_initcall+0x250/0x870 [ 1228.318911][ T6718] do_initcall_level+0x10a/0x1a0 [ 1228.324392][ T6718] do_initcalls+0x59/0xa0 [ 1228.329287][ T6718] kernel_init_freeable+0x29d/0x3e0 [ 1228.335034][ T6718] kernel_init+0x22/0x1d0 [ 1228.339904][ T6718] ret_from_fork+0x514/0xb70 [ 1228.345026][ T6718] ret_from_fork_asm+0x1a/0x30 [ 1228.350330][ T6718] [ 1228.350330][ T6718] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1228.357557][ T6718] __lock_acquire+0x164c/0x2de0 [ 1228.362951][ T6718] lock_acquire+0x115/0x350 [ 1228.367995][ T6718] fs_reclaim_acquire+0x71/0x100 [ 1228.373465][ T6718] __kmalloc_cache_noprof+0x61/0x600 [ 1228.379285][ T6718] __ipv6_dev_mc_inc+0x447/0xaf0 [ 1228.384788][ T6718] pndisc_constructor+0xe0/0x150 [ 1228.390273][ T6718] pneigh_create+0x253/0x4e0 [ 1228.395400][ T6718] neigh_add+0x77a/0x1090 [ 1228.400259][ T6718] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1228.405739][ T6718] netlink_rcv_skb+0x226/0x4a0 [ 1228.411046][ T6718] netlink_unicast+0x7bd/0x940 [ 1228.416353][ T6718] netlink_sendmsg+0x813/0xb40 [ 1228.421654][ T6718] sock_sendmsg_nosec+0x14e/0x190 [ 1228.427213][ T6718] ____sys_sendmsg+0x54e/0x850 [ 1228.432507][ T6718] ___sys_sendmsg+0x2a5/0x360 [ 1228.437711][ T6718] __x64_sys_sendmsg+0x1b1/0x290 [ 1228.443200][ T6718] do_syscall_64+0x166/0x520 [ 1228.448351][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.454775][ T6718] [ 1228.454775][ T6718] other info that might help us debug this: [ 1228.454775][ T6718] [ 1228.465002][ T6718] Chain exists of: [ 1228.465002][ T6718] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 1228.465002][ T6718] [ 1228.477619][ T6718] Possible unsafe locking scenario: [ 1228.477619][ T6718] [ 1228.485078][ T6718] CPU0 CPU1 [ 1228.490459][ T6718] ---- ---- [ 1228.495835][ T6718] lock(&idev->mc_lock); [ 1228.500177][ T6718] lock(sk_lock-AF_INET6); [ 1228.507213][ T6718] lock(&idev->mc_lock); [ 1228.514075][ T6718] lock(fs_reclaim); [ 1228.518072][ T6718] [ 1228.518072][ T6718] *** DEADLOCK *** [ 1228.518072][ T6718] [ 1228.526249][ T6718] locks held by syz.2.8236/6718: 3, last CPU#0: [ 1228.532503][ T6718] #0: ffffffff91255c60 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1228.541937][ T6718] #1: ffff8880493cb3f8 (&tbl->phash_lock){+.+.}-{4:4}, at: pneigh_create+0x49/0x4e0 [ 1228.551458][ T6718] #2: ffff8880772c4530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xaf0 [ 1228.561154][ T6718] [ 1228.561154][ T6718] stack backtrace: [ 1228.567062][ T6718] CPU: 0 UID: 0 PID: 6718 Comm: syz.2.8236 Not tainted syzkaller #0 PREEMPT(full) [ 1228.576359][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1228.586515][ T6718] Call Trace: [ 1228.589807][ T6718] [ 1228.592765][ T6718] dump_stack_lvl+0xe8/0x150 [ 1228.597392][ T6718] print_circular_bug+0x2e2/0x300 [ 1228.602434][ T6718] check_noncircular+0x12f/0x150 [ 1228.607393][ T6718] __lock_acquire+0x164c/0x2de0 [ 1228.612265][ T6718] ? preempt_schedule_common+0x7f/0xd0 [ 1228.617757][ T6718] ? preempt_schedule_thunk+0x16/0x40 [ 1228.623156][ T6718] ? __mutex_lock+0x321/0x1550 [ 1228.627939][ T6718] lock_acquire+0x115/0x350 [ 1228.632470][ T6718] ? __kmalloc_cache_noprof+0x61/0x600 [ 1228.637949][ T6718] ? __pfx___mutex_lock+0x10/0x10 [ 1228.642997][ T6718] fs_reclaim_acquire+0x71/0x100 [ 1228.647950][ T6718] ? __kmalloc_cache_noprof+0x61/0x600 [ 1228.653421][ T6718] __kmalloc_cache_noprof+0x61/0x600 [ 1228.658716][ T6718] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 1228.663843][ T6718] ? __ipv6_dev_mc_inc+0x447/0xaf0 [ 1228.668983][ T6718] __ipv6_dev_mc_inc+0x447/0xaf0 [ 1228.673948][ T6718] pndisc_constructor+0xe0/0x150 [ 1228.678902][ T6718] ? __pfx_pndisc_constructor+0x10/0x10 [ 1228.684468][ T6718] ? __kmalloc_noprof+0x1ab/0x720 [ 1228.689502][ T6718] ? pneigh_create+0x12c/0x4e0 [ 1228.694283][ T6718] ? pneigh_create+0x148/0x4e0 [ 1228.699068][ T6718] pneigh_create+0x253/0x4e0 [ 1228.703676][ T6718] neigh_add+0x77a/0x1090 [ 1228.708022][ T6718] ? __pfx_neigh_add+0x10/0x10 [ 1228.712819][ T6718] ? __pfx_neigh_add+0x10/0x10 [ 1228.717603][ T6718] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1228.722571][ T6718] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1228.727784][ T6718] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1228.733365][ T6718] ? __copy_skb_header+0xa3/0x4a0 [ 1228.738436][ T6718] netlink_rcv_skb+0x226/0x4a0 [ 1228.743243][ T6718] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1228.748853][ T6718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1228.754200][ T6718] ? netlink_deliver_tap+0x2e/0x1b0 [ 1228.759438][ T6718] ? netlink_deliver_tap+0x2e/0x1b0 [ 1228.764731][ T6718] netlink_unicast+0x7bd/0x940 [ 1228.769535][ T6718] netlink_sendmsg+0x813/0xb40 [ 1228.774342][ T6718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.779673][ T6718] ? apparmor_socket_sendmsg+0x98/0x360 [ 1228.785271][ T6718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.790587][ T6718] sock_sendmsg_nosec+0x14e/0x190 [ 1228.795648][ T6718] ____sys_sendmsg+0x54e/0x850 [ 1228.800442][ T6718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.805766][ T6718] ? import_iovec+0x73/0xa0 [ 1228.810313][ T6718] ___sys_sendmsg+0x2a5/0x360 [ 1228.815017][ T6718] ? __lock_acquire+0x747/0x2de0 [ 1228.819981][ T6718] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.825218][ T6718] ? futex_wait+0x2a2/0x390 [ 1228.829766][ T6718] ? __fget_files+0x2a/0x420 [ 1228.834393][ T6718] ? __fget_files+0x3a2/0x420 [ 1228.839108][ T6718] __x64_sys_sendmsg+0x1b1/0x290 [ 1228.844072][ T6718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1228.849570][ T6718] do_syscall_64+0x166/0x520 [ 1228.854188][ T6718] ? trace_irq_disable+0x3b/0x140 [ 1228.859236][ T6718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.865495][ T6718] ? clear_bhb_loop+0x70/0xc0 [ 1228.870197][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.876103][ T6718] RIP: 0033:0x7f7f7ff9e2d9 [ 1228.880533][ T6718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.900155][ T6718] RSP: 002b:00007f7f7e1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.908592][ T6718] RAX: ffffffffffffffda RBX: 00007f7f80225fa0 RCX: 00007f7f7ff9e2d9 [ 1228.916582][ T6718] RDX: 0000000000000004 RSI: 0000200000000940 RDI: 0000000000000004 [ 1228.924563][ T6718] RBP: 00007f7f80035888 R08: 0000000000000000 R09: 0000000000000000 [ 1228.932543][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1228.940529][ T6718] R13: 00007f7f80226038 R14: 00007f7f80225fa0 R15: 00007fff8501c3e8 [ 1228.948526][ T6718] [ 1228.954722][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1228.957337][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8236'. [ 1228.957519][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8236'. [ 1228.957684][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8236'. [ 1228.957857][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8236'. [ 1228.958012][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8236'. [ 1228.958169][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8236'. [ 1228.958323][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8236'. [ 1229.155888][ T6730] xt_l2tp: v2 tid > 0xffff: 4294901760 [ 1229.171694][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1233.651307][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!