last executing test programs: 18.31307925s ago: executing program 3 (id=4107): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004a00003c00000000000690780a010102ac1414aa44140b01e000000100000000e00000010000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000004000000"], 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20881, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x5, 0x86, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}, {"9301447e99e3e9d92ead3feee80c1ecb957e97448ac6ddf03dcaaf849d1b156973d84bad566623ac279629317b3fce76f5c3d6ce5145f3f3c812888a68b5fd9542e1c39ebf74317ae4a3b49de3301dffeee9382ed28d73e3381cf646aa94"}}}}, 0x94) 17.550816372s ago: executing program 3 (id=4115): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'wlc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f00000010c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0xcaa1, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x9}, 0x1c) 17.149307176s ago: executing program 3 (id=4117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "0e3f81a20e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x1, 0x10, 0xfffffffa, 0x9, {{0x8, 0x4, 0x1, 0x7, 0x20, 0x68, 0x0, 0xc8, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x14}, {[@timestamp={0x44, 0xc, 0x57, 0x0, 0x7, [0xc00, 0x9]}]}}}}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x27, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call, @map_idx={0x18, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xb, 0x7, 0x1000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x2, 0x3, 0x7, 0x6}, {0x0, 0x4, 0xa, 0x5}, {0x0, 0x2, 0x7, 0x4}, {0x4, 0x2, 0xb}, {0x3, 0x3, 0x4, 0x2}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0xfffffff9, 0x54, &(0x7f00000001c0)=""/84, 0x41000, 0x11, '\x00', r2, @fallback, r3, 0x8, &(0x7f0000000300)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x6, 0x3f7d, 0x2}, 0x10, 0xffffffffffffffff, r4, 0x7, 0x0, &(0x7f0000000800)=[{0x0, 0x5, 0xb, 0x38f72f9d03d1ca9}, {0x5, 0x2, 0xa, 0xc}, {0x2, 0x3, 0x8, 0x7}, {0x0, 0x2, 0xd, 0x5}, {0x1, 0x5, 0x5, 0x2}, {0x4, 0x5, 0x8, 0x3}, {0x4, 0x1, 0xd, 0x6}]}, 0x94) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r6) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01062abd7000ffdbdf250600000006000b000a"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x28, 0x8, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8900) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r5) 16.733004081s ago: executing program 3 (id=4124): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20, 0xa8f1e416535134e9, 0x1, 0xfd, 0x0, 0xff, 0x0, 0x2d00}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000028000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) getpid() 15.462803887s ago: executing program 2 (id=4137): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x94) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) listen(r1, 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x20, 0x870f, 0x8, 0x3, {{0x5, 0x4, 0x1, 0x2a, 0x14, 0x68, 0x0, 0x10, 0x29, 0x0, @rand_addr=0x64010100, @multicast1}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0xa, [@enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x0, [{0x4, 0x800, 0x7}]}, @union={0x0, 0x3, 0x0, 0x5, 0x0, 0x5, [{0x0, 0x0, 0x7}, {0x4, 0x4, 0x5}, {0x0, 0x5, 0x60af}]}, @typedef={0x7, 0x0, 0x0, 0x8, 0x4}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x5}, @union={0x8, 0x4, 0x0, 0x5, 0x0, 0x200, [{0x9, 0x1, 0x70}, {0x0, 0x0, 0x5d}, {0xc, 0x1, 0xc}, {0xd, 0x2, 0x9}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x5, 0x2}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}, @restrict={0xe}]}, {0x0, [0x2e, 0x0, 0x0, 0x30, 0x6f, 0x5f, 0x30, 0x2e]}}, &(0x7f00000005c0)=""/190, 0xea, 0xbe, 0x0, 0x1, 0x10000}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r4, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x6, 0x1, 0x5, 0x10000, 0x1, 0x3fff8000, '\x00', r2, r3, 0x2, 0x4, 0x2, 0xd, @void, @value, @value=r4}, 0x50) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x7, &(0x7f00000000c0)=0x5, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x97}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@deltclass={0x40, 0x29, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xf, 0x3}, {0x4, 0x1}, {0xc, 0x5}}, [@tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}, @TCA_RATE={0x6, 0x5, {0x39, 0xb4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x44) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @mcast2, @remote, 0x40, 0x0, 0x0, 0xfffffffe}}) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 15.456138041s ago: executing program 3 (id=4138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ab80600000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000900)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000008c0)={r1, &(0x7f00000007c0)="aa136f6fb0b772c77827f71386f5570430a784bf6b4f484671ca88609230576558b79db8234669f7bc5d639d6ba7da2347879addb6b6de9065127d6894640c15bdf5cbbd05bb560ef8a578df6e92be28ce96a4f3e5925ef1", &(0x7f0000000840)=""/119}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r5, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pi6 \x00'}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000400)={r0, &(0x7f0000000300)='s\\#\x00', 0x1a200, &(0x7f0000000340)={@align=0x7, {0x4, 0x40, 0x236ce9eb, 0x10}}, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x1c, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8d}}, @jmp={0x5, 0x1, 0x5, 0x4, 0x7, 0x100, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x2a}, @alu={0x4, 0x1, 0x5, 0x3, 0x8, 0x2, 0xffffffffffffffff}, @alu={0x6bfa77933de74f7c, 0x1, 0xc, 0xa, 0x6, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x10, &(0x7f0000000180)=""/16, 0x40f00, 0x2, '\x00', r4, @fallback=0x16, r5, 0x8, &(0x7f0000000200)={0xb9f, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x5, &(0x7f0000000440)=[r6, r8, r9], &(0x7f00000004c0)=[{0x2, 0x1, 0x7, 0x6}, {0x3, 0x4, 0x7, 0xb}, {0x4, 0x2, 0xb, 0x9}, {0x1, 0x1, 0x10, 0x2}, {0x4, 0x3, 0x0, 0x4}], 0x10, 0xf81}, 0x94) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 15.126515055s ago: executing program 3 (id=4140): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084010000000a000000020000000000000004000000000000010501000020000400006100612e61616161006100"], 0x0, 0x4c, 0x0, 0x1}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000031401002abd7000ffdbdf250900020075797a30000000000800410072786500140033006272696467655f736c6176655f310000"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) r4 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0xa09c, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r2, 0x0, 0x59b, 0x4000, &(0x7f0000000940)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f00000006c0)="9c01bd6f9a6028c80d7364240f0700000000000000c565f0c7ac65dd4a0fadceb6c65dcb07f2421e69087e0f0700000000000000722709c46bef17c4cb9aed9fb1c342179ea3496361ccedfdb9ace43b54fa7516c64f6a4aa330b0870715169d054a78e0f38089ca5dfd878405265d5fc19365633436571ad49c85f8024a7a85a30c9094b986548e876736175d0c1e7cf4eb7ba63055ddf1b750f9a870161c6cfcde0d78700f3426f563dea457197237337448e430c6f90f8275cd4fb4ac203c9694d88e9b583829e8697aacf38ebfc7ec26f20061cfd8f676cbcaabd3efb063b8a637232c04263241b54d5d3c", &(0x7f0000001a40)="2c5b483103067e8a9bd26ffbe3489cf5aa50b1367c3de2b1d1cdc219274a5a514f852161bc4015e7564b08584290c5", 0x1}, 0x22) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f00000000c0)={0x2, 0x3, 0x7, 0xc, 0xb1}) 15.123600562s ago: executing program 2 (id=4141): socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x60}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x60}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='@\x00', 0x2}], 0x2}, 0x4004) (async) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='@\x00', 0x2}], 0x2}, 0x4004) recvmmsg(r0, &(0x7f0000003300)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/182, 0xb6}, {&(0x7f00000006c0)=""/21, 0x15}, {&(0x7f0000000700)=""/11, 0xb}, {&(0x7f0000000740)=""/157, 0x9d}, {&(0x7f0000000800)=""/38, 0x26}, {&(0x7f0000000840)=""/157, 0x9d}, {&(0x7f0000000900)=""/241, 0xf1}], 0x7, &(0x7f0000000b80)=""/34, 0x22}, 0xfffffff0}, {{&(0x7f0000000bc0)=@can, 0x80, &(0x7f0000001240)=[{&(0x7f0000000c40)=""/204, 0xcc}, {&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000000e40)=""/134, 0x86}, {&(0x7f0000000f00)=""/235, 0xeb}, {&(0x7f0000001000)=""/208, 0xd0}, {&(0x7f0000001100)=""/254, 0xfe}, {&(0x7f0000001200)=""/18, 0x12}], 0x7, &(0x7f00000012c0)=""/125, 0x7d}, 0x1f93fc66}, {{&(0x7f0000001340)=@can, 0x80, &(0x7f00000017c0)=[{&(0x7f00000013c0)=""/88, 0x58}, {&(0x7f0000001440)=""/82, 0x52}, {&(0x7f00000014c0)=""/163, 0xa3}, {&(0x7f0000001580)=""/22, 0x16}, {&(0x7f00000015c0)=""/120, 0x78}, {&(0x7f0000001640)=""/51, 0x33}, {&(0x7f0000001680)=""/14, 0xe}, {&(0x7f00000016c0)=""/218, 0xda}], 0x8, &(0x7f0000001840)=""/81, 0x51}, 0x5}, {{&(0x7f00000018c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001940)=""/229, 0xe5}], 0x1, &(0x7f0000001a80)=""/139, 0x8b}, 0x1000}, {{&(0x7f0000001b40)=@caif, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001bc0)=""/83, 0x53}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/178, 0xb2}, {&(0x7f0000002d00)=""/60, 0x3c}, {&(0x7f0000002d40)=""/66, 0x42}, {&(0x7f0000002dc0)=""/64, 0x40}, {&(0x7f0000002e00)=""/196, 0xc4}, {&(0x7f0000002f00)=""/191, 0xbf}], 0x8}}, {{&(0x7f0000003040)=@isdn, 0x80, &(0x7f00000032c0)=[{&(0x7f00000030c0)=""/120, 0x78}, {&(0x7f0000003140)=""/48, 0x30}, {&(0x7f0000003180)=""/32, 0x20}, {&(0x7f00000031c0)=""/246, 0xf6}], 0x4}}], 0x6, 0x0, &(0x7f0000003480)={0x77359400}) (async) recvmmsg(r0, &(0x7f0000003300)=[{{&(0x7f0000000380)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)=""/182, 0xb6}, {&(0x7f00000006c0)=""/21, 0x15}, {&(0x7f0000000700)=""/11, 0xb}, {&(0x7f0000000740)=""/157, 0x9d}, {&(0x7f0000000800)=""/38, 0x26}, {&(0x7f0000000840)=""/157, 0x9d}, {&(0x7f0000000900)=""/241, 0xf1}], 0x7, &(0x7f0000000b80)=""/34, 0x22}, 0xfffffff0}, {{&(0x7f0000000bc0)=@can, 0x80, &(0x7f0000001240)=[{&(0x7f0000000c40)=""/204, 0xcc}, {&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000000e40)=""/134, 0x86}, {&(0x7f0000000f00)=""/235, 0xeb}, {&(0x7f0000001000)=""/208, 0xd0}, {&(0x7f0000001100)=""/254, 0xfe}, {&(0x7f0000001200)=""/18, 0x12}], 0x7, &(0x7f00000012c0)=""/125, 0x7d}, 0x1f93fc66}, {{&(0x7f0000001340)=@can, 0x80, &(0x7f00000017c0)=[{&(0x7f00000013c0)=""/88, 0x58}, {&(0x7f0000001440)=""/82, 0x52}, {&(0x7f00000014c0)=""/163, 0xa3}, {&(0x7f0000001580)=""/22, 0x16}, {&(0x7f00000015c0)=""/120, 0x78}, {&(0x7f0000001640)=""/51, 0x33}, {&(0x7f0000001680)=""/14, 0xe}, {&(0x7f00000016c0)=""/218, 0xda}], 0x8, &(0x7f0000001840)=""/81, 0x51}, 0x5}, {{&(0x7f00000018c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001940)=""/229, 0xe5}], 0x1, &(0x7f0000001a80)=""/139, 0x8b}, 0x1000}, {{&(0x7f0000001b40)=@caif, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001bc0)=""/83, 0x53}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/178, 0xb2}, {&(0x7f0000002d00)=""/60, 0x3c}, {&(0x7f0000002d40)=""/66, 0x42}, {&(0x7f0000002dc0)=""/64, 0x40}, {&(0x7f0000002e00)=""/196, 0xc4}, {&(0x7f0000002f00)=""/191, 0xbf}], 0x8}}, {{&(0x7f0000003040)=@isdn, 0x80, &(0x7f00000032c0)=[{&(0x7f00000030c0)=""/120, 0x78}, {&(0x7f0000003140)=""/48, 0x30}, {&(0x7f0000003180)=""/32, 0x20}, {&(0x7f00000031c0)=""/246, 0xf6}], 0x4}}], 0x6, 0x0, &(0x7f0000003480)={0x77359400}) recvmsg$kcm(r4, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f00000034c0)=""/253, 0xfd}, {&(0x7f00000035c0)=""/27, 0x1b}, {&(0x7f0000003600)=""/92, 0x5c}, {&(0x7f0000003680)=""/249, 0xf9}, {&(0x7f0000003780)=""/135, 0x87}, {&(0x7f0000003840)=""/17, 0x11}, {&(0x7f0000003880)=""/46, 0x2e}, {&(0x7f00000038c0)=""/250, 0xfa}], 0x9, &(0x7f0000003a80)=""/230, 0xe6}, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/111, 0x6f}], 0x1) 14.739205566s ago: executing program 2 (id=4144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r2) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:ptchown_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x2c, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x2c, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x8847, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x24, 0x27, 0x200}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) 14.46019356s ago: executing program 2 (id=4145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xde, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000180), &(0x7f0000000280)=r1}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f00000000c0)=0x41) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000000)=0x4210) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000008000100000000003d0000004500004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b48000009078001c0a0300e20981000000000000000f08674f0a95a9b20000047d2a846c273c653d52c0126395b8f58600fb5cc4819d678aeec626f7f3dd866f"], 0x4e) 13.657437351s ago: executing program 2 (id=4148): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003904000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080002000101"], 0x44}}, 0x0) 13.294615078s ago: executing program 2 (id=4150): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="2800000002060501000000000000000000ee64ed8285a25a000009050004000000000004000780a5451c80a0f2af0da0569d963867e1fb023ad0a18206252cd24a76d0dd3b6b45eef91ca2047f9aacb770848265d492f97a82bd124debc7eda670f984cdf032d311be70433caddbe341a99f84fa256bbeb58fd565ee84f258f473be1808da763570630932c5d0cac8ff2441fc5330d8018c007849838cbf93469f38d5eae94fb04d77f0b9ccd9c6857e693677a4c035fdee16e3d3f4a8748fecd9ad1d6df6c51534cd2e8e0641c73140861559a10d0622b6f4372b82a73ae3f6e9525f37a63c"], 0x28}}, 0x40000010) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="8400028040"], 0xa0}, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24000084) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x24}, 0x24004880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) 7.760199754s ago: executing program 4 (id=4174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x200, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000f40)) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a01080000000000000000020000000900010073797a30000000000c000240000000000000000104000480"], 0x60}}, 0x0) 7.386088709s ago: executing program 4 (id=4175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0xffff}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x4914}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b0005000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c010000100001002abd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="edfa060000000000140003006e657464657673696d30000000000000f8001680f40001800c0003"], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x40) accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) 5.798466136s ago: executing program 1 (id=4179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095000000000000008d9062820b805b34b78cd182a01ecb91883b0a35102f01324235980ad30eec31c3ef5aa5f388d90180b341fe855c2dd81ed8f08c8d0a5e7e73f550d9461d75cb56882bcd494988742cec70bccbc32951d3f9d772b8a3d31048f518cc3e2ac4b79c989dd9a916d196984bd6d75f6f1a8931038fafd5a689297fee3cca9cc34c2a263835e34e09ae067cea299ac864ec133ab03255cd082d9d5386e5b6a48cec6913e6ea6e7c8a7df69b8e5bdeafa1a00934784c00"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x9c, &(0x7f0000000540)=""/156, 0x0, 0x4}, 0x2f) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0xf278}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x200000, 0x2, 0x2, 0x0, 0x98, 0x101}, 0x20) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e1050000008906ffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 3.134382578s ago: executing program 4 (id=4180): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc0000001900010000000000000000001c140000fe0000010000000084001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005001a000d00000008000400", @ANYRES32, @ANYBLOB='\f\x00\t'], 0xbc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x3) ppoll(&(0x7f0000000640)=[{r1, 0x2}], 0x1, &(0x7f0000000680)={0x0, 0x989680}, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmmsg(r0, &(0x7f0000002e00)=[{{&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @private=0xa010101}, 0x1, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)}, {&(0x7f0000000440)="8802babae58ec2f03cbb4f770cd33f4d780319f017f78b01a676dd264ab026140720d44e77deb9d2ba3af9aa747bd43f8041fbaa1fd52a0b0567c80551b7dc9d76371285b99f3ba50b5396", 0x4b}, {&(0x7f0000000580)="7211487f404d5fa29bb9b74ad2f843cc36afd9acd516eb15cabd4a9d77bb86733b0a765efa05114480acf667aff9f28ccc981f96e81972dd3ddf024f364be8e3d5ff425b3438e49aa2e50d383fc46578ad88bae534e8fc255de843a582d787283d6213f589211a9858f906bfb038804fc74b66c792c263abe975cf90234ae3fd1c229f5e4aaf7721621d2d1795002fb924f60a44ac0fcc23aebaa3d26f0c4b25de453c4e8685bb1fbd4c0200a82eed03aef9828267f4a024609fd8", 0xbb}, {&(0x7f0000000640)="dc286874c22b4147b1c185381348784f9e2953d0226c05f757ec81b0f78384791a51e88a2341e0c797e4da4dc5a2464b3fc3481df8db979fd09e69f81f137fe161f53fc80c3cf96999217454d5159613fbc55ce596704a58c14a70f318f916455bb7df58d9c0da8f6b034daf1e2605a86723bc219963ba89c3336f4c8a440f3c7adaebe6749af6f702270f273f6674d342538bba07b6b362623e730df1af60faac23f6a322b6ab2eae0b8998791240899fad5c720fe9f09e65cb15c16429", 0xbe}, {&(0x7f0000000700)="46729ef6ee78ef036f11332da8a8e667c442be1b103a2bf54559333c4ab33c116cd8105992d7abbf5596e42257a43fc7420c3889b6bd7b3fdb0182d4b9f0123c36a6460b0239796e8bec30a919db7d314c", 0x51}, {&(0x7f0000000780)="2c2a5e87da2600fa1af25e8f64e0c09bb6ebd4166e6d33d82045cda1d1c85bffbb333a40c05a82d9d3579f5fe871c70926abf3592aa61dd5fd0a5feb8f41c7cbc6f7def85c11b110258da3e73a13d4e9af60614f4c4b1769f51f60f681cbe679ad0e516d25d608e917d079243b633c62940eda5fee3f75b4534a60f45677621d8620b0973ecd1b7ad5c3448fb564d43a48041305fdf72a58c3a8a3c6e2d2d050f8cd974379c8d336f1cec7fddbb8d3d109ee02e2e6770b281423e01a1edf9235df07ebcd404f138264f490c93cc3851a50491fc5982a66", 0xd7}], 0x6}}, {{&(0x7f0000000940)=@l2tp6={0xa, 0x0, 0x1, @local, 0x9, 0x1}, 0x80, &(0x7f0000002d40)=[{&(0x7f00000009c0)="13d7d81497d5074185f2706204820c0e9ec59d255700bbc0cd63bf7a4e6e646a21dca27feaf75318901b2218b3", 0x2d}, {&(0x7f0000000a00)="48c5b8f7c4", 0x5}, {&(0x7f0000000a40)="472d90f380", 0x5}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="41f56661a30d2144d72d741c49724d6128133c2296d01e42431d941a64a7a6e1629c42e3d4023f7a2ca941dee5c20cd942180eaf52e645039a5e6206fe709bc30853661e1cf658bddf6539f25233fdc70338608cc3ed07479fe02791e955879af6c317c04fe165dd82e6bb9533295c5e6f44686e0ccd133d92a590", 0x7b}, {&(0x7f0000002bc0)="bc7ec8fc05abc54e57372ebb154824220cf5a030ef453bb90abef03087126d3208b926cc66e7c8555186ff616ae5438e214ee7239b43f10e9f8ccda2", 0x3c}, {&(0x7f0000002c00)="1517cc621c23a3a4d5410d0a98d83134ea23694bbc10ed3666e7d7b6566d8c324fc4c63464d826baff5285428b38e16cb7211c1a51da13c5dc2313225a080dc00d36de5819e73d98ea3b1e6ec5a218f9c9944b75e7979fa1bb74d1e80534cf74510a6add9f29", 0x66}, {&(0x7f0000002c80)="96729938dde77d41c8d83dc645be2007bfd86ff5c7d6fe3eae63edc057280c3e99bfe25f23981ad80ef9fa8c332f9b8d0bc51f120b3b76e189", 0x39}, {&(0x7f0000002cc0)="5a176e26d3463ccc59f3610c784c05b7ea44e91e56d315fa4fd4c2ed5bf1f277bb369556c44c57de20c23d61fb8104771769bbafbd649ab1eeb2dd0ae3c2133b93d905481080f50ae3d556435f18973bf5cf3a4e611d278fba8ee8d50fe30ac650eba9b566d6ffcd30e6740495c4d0f4", 0x70}], 0xa}}], 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, 0x0, 0x2, 0x400, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xa}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7ff}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ZONE={0x6}]}, 0xac}, 0x1, 0x0, 0x0, 0x4010}, 0x20040051) 3.021206634s ago: executing program 1 (id=4181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) (async) sendmsg$can_bcm(r3, 0x0, 0x0) (async, rerun: 32) sendmsg$can_bcm(r3, 0x0, 0x20000000) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'caif0\x00'}) (async) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x0, 0x56, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r5, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x6, 0xf9, 0x7, 0x70, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2b}}, @mcast1, 0x40, 0x40, 0x2, 0xfffffff9}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x670, 0x5, 0x360, 0x98, 0x168, 0xfeffffff, 0x98, 0x98, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'ipvlan1\x00', 'caif0\x00', {}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "83b0"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0xc40, @port=0x4e28}}}}, {{@ip={@loopback, @multicast1, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) setsockopt$inet6_tcp_int(r5, 0x6, 0x8, &(0x7f00000001c0)=0x9, 0x4) 1.846356498s ago: executing program 4 (id=4183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000580)) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000b0}, 0x40c0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x8}, 0xc) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r13, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) 1.845077161s ago: executing program 0 (id=4184): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbd04135400000000000000140604020000002a12816c", 0x24}, {&(0x7f00000000c0)="fda2127ae75a914ebe32", 0xa}], 0x2}, 0x64) 1.828991723s ago: executing program 1 (id=4185): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xd9}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) r4 = gettid() ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x58}}, 0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x24000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}}, 0x840) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000680)=0x6e) recvmsg$unix(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000006c0)=""/17, 0x11}, {&(0x7f0000000700)=""/237, 0xed}], 0x2, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x10122) r11 = accept4$tipc(r8, &(0x7f00000008c0)=@name, &(0x7f0000000900)=0x10, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r11, &(0x7f0000000940)={0xc0000010}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x30049610}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x70, r2, 0x100, 0x9, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0xc0}, 0x44045) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c081) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r8, &(0x7f0000000d80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x104, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x101}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x60d}}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), r9) socket(0x1, 0x4, 0x4) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x38, r12, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x40}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r8, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x58, r12, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4000880) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000010c0), r1) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000001380)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f0000001140)={0x1dc, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x194, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x36}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_ID={0x8c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1ff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2f2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1b}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfcf}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x88000}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) 1.57895426s ago: executing program 1 (id=4186): r0 = socket$qrtr(0x2a, 0x2, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/137, 0x89}, {&(0x7f0000000180)=""/36, 0x24}, {&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000200)=""/225, 0xe1}], 0x4, 0x4, 0x5) (async) connect$qrtr(r0, &(0x7f0000000040), 0xc) (async) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x40002e9, 0x2, 0x0) (async) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2c, 0x2, {{0x0, 0x9, 0x0, 0x0, 0xffffffff}, 0xfffffc00, 0x0, 0x4, 0x8, 0x80000001, 0x11, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000100)=0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r12}, @IFLA_HSR_SLAVE1={0x8, 0x1, r11}, @IFLA_HSR_VERSION={0x5, 0x6, 0x5a}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000380)={r9}, &(0x7f0000000400)=0x8) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000380)={r9, 0x9, 0x20, 0x51e7, 0x2b9}, &(0x7f00000003c0)=0x18) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b00)={{r1, &(0x7f0000000440)='TIPCv2\x00', 0xc601, &(0x7f0000000480)={@_ha_fsid={[0x0, 0x7]}, {0x5, 0xd95, 0x101, 0x3}}, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x7ff}, 0x7, &(0x7f0000000a00)=[{0x1, 0x7, &(0x7f0000000540)='TIPCv2\x00', &(0x7f0000000580)="d36adbf54a296c71bb335522563ea2b09f77f21c8c9ea55a213880acf6b39bb14451ace0fb2d810df530f005ae4f95790bb7058c8896b8dda03a113cd46cddbbc8c4b0507782335d35d6cf47a2b396a97c38bb07d8fcb95e761c7e639a7792c757f30fc3728d5728ce5eee728f3eb9417c50359649337f3e", 0x78, 0x2}, {0x3, 0xe14, &(0x7f0000000600)='TIPCv2\x00', &(0x7f0000000640)="f7f059514059470352957855371a28eae7f894db1b9f72cc5cf6040f", 0x1c, 0x22}, {0x2, 0xffffffff, &(0x7f0000000680)='%!k/+\x00', &(0x7f00000006c0)="2b0c240e94c962287115cbbad88f7b208ed4a858b33c39e1c7f324105b2e5ead4e961bd42e3bd158954f7e5e09e8af99e51d161798936c48c152038a3c4e2db26e919d1b3812fda2a7a551a310301bc7355b708ac214dc52c470830bce7481e5511bc44f2a417fbbe51e7025951fba3cb8eef66051086d", 0x77, 0x12}, {0x2, 0x0, &(0x7f0000000740)='\x00', &(0x7f0000000780)="5dcb3a011f9c8e307421a112325b42eaedc3e361f23a1e9d4eb7d4b58e11f12e49cbeed778cf4aedef9793fa2fe960797d6fe6cc5f6abf3fdb", 0x39}, {0x1, 0x1, &(0x7f00000007c0)='TIPCv2\x00', &(0x7f0000000800)="720f91e9a7e536e6fc833b4c6c4478296f0229ce4ca7", 0x16, 0x1a}, {0x1, 0x401, &(0x7f0000000840)='TIPCv2\x00', &(0x7f0000000880)="1915ae7c", 0x4, 0x2a}, {0x2, 0x6, &(0x7f00000008c0)='\x00', &(0x7f0000000940)="19c44d74f849b9c986720c7f9cfc5c2db213e6f0b3e648c62e33bba9f6fd85079be51cd1437b3b1adb77d46c1fa170e8acbfc7b903ce67c9cb2dfdb723b5ac5d322f4e439ee9153c7f42ad964662ba471eb909c1ed9dd1e1dfdd541dcf94405072daf37132f66c45d5a2da3f6b6d6bb12b40859f5bb533980f9e400e152e8c1e3749c511996208e6f7fbe26d9182311baa33893ab0", 0x95}]}) setsockopt$inet6_udp_encap(r13, 0x11, 0x64, &(0x7f0000000b80)=0x4, 0x4) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 1.531313027s ago: executing program 0 (id=4187): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340)={0x2, 0x1}, 0x4) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002440)=@newlink={0x48, 0x10, 0x437, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x2f8, 0x2f8, 0xffffffff, 0x0, 0x1a0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '|z', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000004c0)) (async) sendto$packet(r0, &(0x7f0000000000)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x18, r2, 0x1, 0xe9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 1.383092032s ago: executing program 1 (id=4188): r0 = socket(0x1f, 0x800, 0x0) close(0xffffffffffffffff) unshare(0x2a060400) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x7}, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=r5, @ANYBLOB="800000002626492656ad2afac2bccb501501dff8bcd12b3e23978c315e62781081a9a5d0b9bae1eab349f053659edc7853236bc51bbf06589cc953a8757e374fcdc1eaa0ea00000000", @ANYRES32=r5, @ANYBLOB="08001b00ffffffff"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r11) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r12, 0x6f6) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.281290928s ago: executing program 0 (id=4189): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x18, 0x3e, 0x217, 0x70bda7, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x4, 0x1c2}]}, 0x18}, 0x1, 0x0, 0x0, 0x200480c2}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x840) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r9], 0x1c}}, 0x4008054) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f00000000c0)=0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, r13, 0x1, 0x125, 0x237, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x178, 0xc, 0x160, 0x178, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xf, 0x7c, 0x80000001, 'netbios-ns\x00', {0x2}}}}, {{@ipv6={@private1, @local, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x101ffffff], 'vlan1\x00', 'netdevsim0\x00', {}, {0xff}, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r14, 0x8983, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0xa, 0x9}, {0x6, 0x2}, {0xd, 0x4}, {0x3}]}]}}, 0x0, 0x46, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) 833.589023ms ago: executing program 0 (id=4190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000007800000002000000080000000096807f370000000a00000007000085030000000600000003000000fd5c00000400000003000000e200000001000000000000000104000009000000020000000600000002000000000000000d0000000c000000000000000900000005000000000000000c00000000000000000000090300"/146], &(0x7f0000001b80)=""/4090, 0x92, 0xffa, 0xa}, 0x28) ioctl$BTRFS_IOC_DEFRAG(r3, 0x50009402, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="22ffffd0", @ANYRES16=0x0, @ANYRESOCT=r2, @ANYRES32=r4, @ANYBLOB="08005d0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20048001) socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000001080)={&(0x7f0000000f80)={0x24, @long={0x3, 0x1}}, 0x14, &(0x7f0000001040)={&(0x7f0000000fc0)="cd441e731f055433bbd0c8e102565a4372b5310c5308fe1f7a2e2b1c8c1ad52ee87c671d4bd847448f47f60a9c10c5eed2ff6c73319541030a54e16e1b5884cfd1a6f8ce72d51bda7aed4a51f01217dc451b9a5300cfb2139bbd69f8db838b13953e8914612706bec1e422faa04b", 0x6e}, 0x1, 0x0, 0x0, 0x44040}, 0x40042) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000600)=""/31, 0x0, 0x1f, 0x0, 0x8001}, 0x28) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004074}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r7, 0x0, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, 0x28) syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r2) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x480c4}, 0x4000800) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000810) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc01cf509, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000280)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000000206010300000000000000000000100005000500000000000900020073797a3200000000050004000000000005000100070000000500050900000000"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r8, @ANYBLOB="00000000000000002c000000000000080000000000000000800000010000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) 689.18402ms ago: executing program 1 (id=4191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYRES64=r1, @ANYBLOB="a11c0210b96693592be06a1f6fcd3e29634779b6abd56752dbdec30bbc428e4e367ab9d0a4080d0da5788771814964c3490af60e5b1c8f2f536228037b02d7ebeb50be0a31f92a15ce7e024e8bd19f5e3c3b44ed9cbd30bf20f0d3d00ea8b06a545224aa0269c8a873fa419977c61dd94238e1ef4d6e177d626b818add6a1b8f13f17923f20ebdf9020000004b16bb30f82c0b7a0894819360517e28ba7526f053c31b1013bdd7ea26539776e2db965c8fea86050036b1097bf40a297e7e2fe208f4012a5f", @ANYRESOCT=r0], 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x44001) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r4, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) write$cgroup_int(r5, &(0x7f0000000140), 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0xffffffffffffff61, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r8) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) close(r3) 683.401112ms ago: executing program 4 (id=4192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000600)={r3, &(0x7f0000000480)='#,)\x00', 0x8a200, &(0x7f00000004c0)={@_ha_fsid={[0xffff, 0x3]}, {0x6f, 0x2, 0xd}}, 0x6, &(0x7f0000000500), &(0x7f0000000540)=0x9}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000000000907020000000000008007050000", @ANYRES32=0x0, @ANYBLOB="0c000180060002000f000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) bind$inet(r5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) pread64(r4, &(0x7f0000000340)=""/129, 0x81, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r6], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r10 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r10, 0x29, 0x1e, 0x0, 0x15) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) r11 = openat$cgroup_pressure(r4, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r11, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(0x4) 299.271315ms ago: executing program 0 (id=4193): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000d80)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="00000000a8a100000000b7080000000000007b8af8ff00000000b70800009e0400007b8af0ff00000000bfa10000000000000000182300000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000008510000008000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0xea, &(0x7f00000001c0)=""/234, 0x41100, 0x18, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xd, 0x3c, 0xffff}, 0x10, 0x3037d, 0xffffffffffffffff, 0x7, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x2, 0x4, 0xd, 0x5}, {0xfffffffe, 0x5, 0x7, 0x1}, {0x2, 0x5, 0x200, 0x4}, {0x0, 0x4, 0x7, 0xc}, {0x5, 0x5, 0x2, 0x9}, {0x5, 0x21, 0x7, 0x5}, {0x5, 0x3, 0xe, 0x3}], 0x10, 0x1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000540)=@generic={&(0x7f0000000040)='./file0\x00', r6}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYRES8=r5], 0x0, 0x62, 0x0, 0x3, 0x100}, 0x28) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000840)={0xffffffffffffffff, &(0x7f0000000700)="5b7463fe04db73d8f24cc98a3986bd5b2901a26a58c975c47340441f849e417dc00261118e61e3f1abe55d4e430941bc391e1b1941325c32a926428c0e", &(0x7f0000000740)=""/208, 0x4}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000980)={'erspan0\x00', 0x0, 0x8000, 0x20, 0x3, 0x3, {{0x13, 0x4, 0x3, 0x1, 0x4c, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x24, 0x5b, 0x0, 0x9, [0x3, 0xfffffffb, 0x5, 0xfffffb39, 0xe, 0x96, 0xc5, 0x8]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xe4, 0x0, 0xe, [0x6, 0xfffffff8, 0x2]}]}}}}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010231bd701efedbd92508c6000000c394f737d22696834300d3c9e199352a593d8a54c79e223cbe7c1577df95d39ed6765c0fc973fca4571d98719d119259d2e1966b167ceba32f206269c15ac7fb459bd535eb67f023e393e075dfa44a4f85bb931ed075fa8416e3bbcadef53f2fe39d785f97d29a045ca96754a67c76ea5033cd52"], 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r6, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000008c0), &(0x7f0000000900)=[0x0, 0x0], 0x0, 0xa0, &(0x7f0000000940)=[{}, {}], 0xa, 0xa, &(0x7f00000000c0), &(0x7f0000000100), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) r9 = socket$inet6(0xa, 0x80002, 0x0) sendmsg$sock(r9, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0xa, 0x4ea3, 0x81, @loopback, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}], 0x18}, 0x4c040) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x0, @void}, 0x10) 23.43879ms ago: executing program 32 (id=4140): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084010000000a000000020000000000000004000000000000010501000020000400006100612e61616161006100"], 0x0, 0x4c, 0x0, 0x1}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRES16], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000031401002abd7000ffdbdf250900020075797a30000000000800410072786500140033006272696467655f736c6176655f310000"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) r4 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0xa09c, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r2, 0x0, 0x59b, 0x4000, &(0x7f0000000940)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f00000006c0)="9c01bd6f9a6028c80d7364240f0700000000000000c565f0c7ac65dd4a0fadceb6c65dcb07f2421e69087e0f0700000000000000722709c46bef17c4cb9aed9fb1c342179ea3496361ccedfdb9ace43b54fa7516c64f6a4aa330b0870715169d054a78e0f38089ca5dfd878405265d5fc19365633436571ad49c85f8024a7a85a30c9094b986548e876736175d0c1e7cf4eb7ba63055ddf1b750f9a870161c6cfcde0d78700f3426f563dea457197237337448e430c6f90f8275cd4fb4ac203c9694d88e9b583829e8697aacf38ebfc7ec26f20061cfd8f676cbcaabd3efb063b8a637232c04263241b54d5d3c", &(0x7f0000001a40)="2c5b483103067e8a9bd26ffbe3489cf5aa50b1367c3de2b1d1cdc219274a5a514f852161bc4015e7564b08584290c5", 0x1}, 0x22) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f00000000c0)={0x2, 0x3, 0x7, 0xc, 0xb1}) 1.938523ms ago: executing program 4 (id=4195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003904000000000000000000000020", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280080002000101"], 0x44}}, 0x0) 0s ago: executing program 0 (id=4196): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) (async) close(r0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001a00ffff"], 0x1c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001a00ffff"], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000980)=""/223}, {&(0x7f0000000800)=""/89}, {&(0x7f0000000880)=""/154}, {&(0x7f0000000940)=""/14}, {&(0x7f0000000cc0)=""/4096}, {&(0x7f0000001cc0)=""/108}, {&(0x7f0000001d40)=""/101}], 0x0, &(0x7f0000001e40)=""/133}, 0x1000}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001f00)=""/17}, {&(0x7f0000001f40)=""/48}, {&(0x7f0000001f80)=""/133}]}, 0xff}, {{0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f00000026c0)=""/71}, 0x1}], 0x400023e, 0x300, 0x0) (async) recvmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000980)=""/223}, {&(0x7f0000000800)=""/89}, {&(0x7f0000000880)=""/154}, {&(0x7f0000000940)=""/14}, {&(0x7f0000000cc0)=""/4096}, {&(0x7f0000001cc0)=""/108}, {&(0x7f0000001d40)=""/101}], 0x0, &(0x7f0000001e40)=""/133}, 0x1000}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001f00)=""/17}, {&(0x7f0000001f40)=""/48}, {&(0x7f0000001f80)=""/133}]}, 0xff}, {{0x0, 0x0, &(0x7f0000002640), 0x0, &(0x7f00000026c0)=""/71}, 0x1}], 0x400023e, 0x300, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000440)={@multicast, @random="fd137b07daa7", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x50}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x1, 0xffffffff, 0xfffffffe, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xfffffffffffff813, 0xfffffffc, 0x7, 0x4, 0x55}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x50}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x1, 0xffffffff, 0xfffffffe, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xfffffffffffff813, 0xfffffffc, 0x7, 0x4, 0x55}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r5}, 0x8) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x94, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x68, 0x3, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x118}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) kernel console output (not intermixed with test programs): 1000 [ 622.308704][T19507] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 622.446850][T19468] infiniband syz0: set down [ 622.465394][T19468] infiniband syz0: added ipvlan0 [ 622.522622][T17423] Bluetooth: hci1: command tx timeout [ 622.536296][T19468] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 622.555899][T19468] infiniband syz0: Couldn't open port 1 [ 622.562177][T19515] Cannot find add_set index 2 as target [ 622.576381][T19468] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 622.626991][T19516] Cannot find add_set index 2 as target [ 622.633161][T19468] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 622.675430][T19468] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 622.875414][T19468] RDS/IB: syz0: added [ 622.894939][T19468] smc: adding ib device syz0 with port count 1 [ 622.921275][T19468] smc: ib device syz0 port 1 has no pnetid [ 623.691590][ T48] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 623.732391][T19547] batadv0: entered promiscuous mode [ 623.855078][ T6058] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 623.921996][ T6058] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 624.191624][ T6058] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 624.367797][ T6069] lo: left allmulticast mode [ 624.597585][T17423] Bluetooth: hci1: command tx timeout [ 624.900564][T19587] netlink: 'syz.1.3161': attribute type 1 has an invalid length. [ 625.285467][ T6069] .` (unregistering): left promiscuous mode [ 625.292447][ T6069] .` (unregistering): Released all slaves [ 625.307387][ T6069] bond1 (unregistering): Released all slaves [ 625.334754][ T6069] bond2 (unregistering): Released all slaves [ 625.355299][ T6069] bond3 (unregistering): Released all slaves [ 625.371046][ T6069] bond4 (unregistering): Released all slaves [ 625.385862][ T6069] bond5 (unregistering): Released all slaves [ 625.425366][ T6069] bond6 (unregistering): Released all slaves [ 625.441586][ T6069] bond7 (unregistering): Released all slaves [ 625.457309][ T6069] bond8 (unregistering): Released all slaves [ 625.485377][ T6069] bond9 (unregistering): Released all slaves [ 625.535700][T19583] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 625.542240][T19583] syzkaller1: linktype set to 769 [ 625.750448][T19587] 8021q: adding VLAN 0 to HW filter on device bond8 [ 625.855806][T19593] bond8: (slave macvlan0): Enslaving as an active interface with a down link [ 625.920750][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 625.955327][ T6069] : left promiscuous mode [ 626.021097][T19602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3163'. [ 626.046354][T19602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3163'. [ 626.144409][T19466] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.160304][T19605] netlink: 'syz.0.3164': attribute type 10 has an invalid length. [ 626.169651][T19466] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.169994][T19605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3164'. [ 626.181523][T19466] bridge_slave_0: entered allmulticast mode [ 626.204791][T19466] bridge_slave_0: entered promiscuous mode [ 626.240764][T19602] team0: entered promiscuous mode [ 626.268113][T19602] team0: left promiscuous mode [ 626.278710][ T6069] hmó3)ó€: left promiscuous mode [ 626.314870][T19605] team0: Port device geneve1 added [ 626.328005][T19466] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.343888][T19466] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.367077][T19466] bridge_slave_1: entered allmulticast mode [ 626.387844][T19466] bridge_slave_1: entered promiscuous mode [ 626.498727][ T6069] tipc: Left network mode [ 626.525870][T19466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.581075][T19466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.621775][T19608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3165'. [ 626.677003][T17423] Bluetooth: hci1: command tx timeout [ 626.824367][T19613] netlink: 'syz.3.3166': attribute type 5 has an invalid length. [ 627.178435][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'. [ 627.274498][T19466] team0: Port device team_slave_0 added [ 627.381745][T19466] team0: Port device team_slave_1 added [ 627.607738][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3171'. [ 627.645447][T19466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.673640][T19466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.730028][T19466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.980746][T19466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.024305][T19466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 628.105967][T19466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.205519][T19647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.611618][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 628.651573][T19466] hsr_slave_0: entered promiscuous mode [ 628.659387][T19466] hsr_slave_1: entered promiscuous mode [ 628.666186][T19466] debugfs: 'hsr0' already exists in 'hsr' [ 628.686510][T19466] Cannot create hsr debugfs directory [ 628.757481][ T5640] Bluetooth: hci1: command tx timeout [ 629.244435][T19674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3176'. [ 629.277450][T19674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3176'. [ 629.356349][T19674] team0: entered promiscuous mode [ 629.380773][T19674] team_slave_0: entered promiscuous mode [ 629.412415][T19674] team_slave_1: entered promiscuous mode [ 629.427128][T19674] geneve1: entered promiscuous mode [ 629.444416][T19674] bond0: entered promiscuous mode [ 629.459610][T19674] bond_slave_0: entered promiscuous mode [ 629.476447][T19674] bond_slave_1: entered promiscuous mode [ 629.497874][T19674] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 629.776283][T19466] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 629.898393][T19684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3178'. [ 629.952330][T13701] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96 [ 630.057068][T19684] ipvlan2: entered allmulticast mode [ 630.094747][T19684] dummy0: entered allmulticast mode [ 630.184564][T19694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3179'. [ 630.285173][T19466] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 630.620508][T19466] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 630.821864][T19466] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 631.681978][T19466] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 631.742803][T19466] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.775204][T19466] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 631.834583][T19466] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.889220][T19466] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 631.936475][T19466] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.966191][T19466] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 631.999578][T19466] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 633.004739][T19742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.564814][T19466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.734814][T19466] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.955361][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.962730][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.114824][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.122109][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.188821][ T6069] team0: left promiscuous mode [ 634.195296][ T6069] batadv2: left promiscuous mode [ 634.462333][ T6069] team0 (unregistering): Port device batadv2 removed [ 634.624030][T19778] __nla_validate_parse: 2 callbacks suppressed [ 634.624052][T19778] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3195'. [ 636.435246][T19808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 636.848661][T19820] FAULT_INJECTION: forcing a failure. [ 636.848661][T19820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.893617][T19820] CPU: 1 UID: 0 PID: 19820 Comm: syz.2.3201 Not tainted syzkaller #0 PREEMPT(full) [ 636.893650][T19820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 636.893661][T19820] Call Trace: [ 636.893669][T19820] [ 636.893678][T19820] dump_stack_lvl+0xe8/0x150 [ 636.893708][T19820] should_fail_ex+0x40c/0x560 [ 636.893747][T19820] _copy_from_iter+0x1d3/0x1660 [ 636.893784][T19820] ? rcu_is_watching+0x15/0xb0 [ 636.893815][T19820] ? __pfx__copy_from_iter+0x10/0x10 [ 636.893833][T19820] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 636.893872][T19820] ? netlink_sendmsg+0x650/0xb40 [ 636.893897][T19820] ? skb_put+0x112/0x210 [ 636.893921][T19820] netlink_sendmsg+0x6c0/0xb40 [ 636.893954][T19820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.893981][T19820] ? aa_sock_msg_perm+0xf1/0x1b0 [ 636.894016][T19820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 636.894044][T19820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.894070][T19820] ____sys_sendmsg+0x9b9/0xa20 [ 636.894093][T19820] ? __might_fault+0xaf/0x130 [ 636.894125][T19820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.894159][T19820] ? import_iovec+0x73/0xa0 [ 636.894185][T19820] ___sys_sendmsg+0x2a5/0x360 [ 636.894206][T19820] ? __lock_acquire+0x683/0x2cd0 [ 636.894228][T19820] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.894281][T19820] ? __fget_files+0x2a/0x420 [ 636.894303][T19820] ? __fget_files+0x3a2/0x420 [ 636.894336][T19820] __x64_sys_sendmsg+0x1bd/0x2a0 [ 636.894361][T19820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 636.894394][T19820] ? __pfx_ksys_write+0x10/0x10 [ 636.894435][T19820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.894457][T19820] do_syscall_64+0x174/0x580 [ 636.894482][T19820] ? trace_irq_disable+0x3b/0x140 [ 636.894511][T19820] ? clear_bhb_loop+0x40/0x90 [ 636.894535][T19820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.894555][T19820] RIP: 0033:0x7f723139ce59 [ 636.894574][T19820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.894592][T19820] RSP: 002b:00007f72322f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.894614][T19820] RAX: ffffffffffffffda RBX: 00007f7231615fa0 RCX: 00007f723139ce59 [ 636.894628][T19820] RDX: 0000000000000080 RSI: 0000200000000540 RDI: 0000000000000003 [ 636.894641][T19820] RBP: 00007f72322f2090 R08: 0000000000000000 R09: 0000000000000000 [ 636.894653][T19820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.894663][T19820] R13: 00007f7231616038 R14: 00007f7231615fa0 R15: 00007fffe4e78cf8 [ 636.894693][T19820] [ 637.474317][T19827] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3203'. [ 637.712124][ T6069] IPVS: stop unused estimator thread 0... [ 637.833268][T19835] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 638.546539][T19862] 8021q: VLANs not supported on ip_vti0 [ 638.622339][T19466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.639740][T19864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 638.922609][T19876] FAULT_INJECTION: forcing a failure. [ 638.922609][T19876] name failslab, interval 1, probability 0, space 0, times 0 [ 638.967443][T19876] CPU: 0 UID: 0 PID: 19876 Comm: syz.0.3212 Not tainted syzkaller #0 PREEMPT(full) [ 638.967475][T19876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 638.967487][T19876] Call Trace: [ 638.967495][T19876] [ 638.967504][T19876] dump_stack_lvl+0xe8/0x150 [ 638.967533][T19876] should_fail_ex+0x40c/0x560 [ 638.967573][T19876] should_failslab+0xa8/0x100 [ 638.967598][T19876] __kmalloc_noprof+0xe8/0x750 [ 638.967624][T19876] ? __pfx___mutex_trylock_common+0x10/0x10 [ 638.967653][T19876] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 638.967690][T19876] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 638.967737][T19876] genl_family_rcv_msg_doit+0xda/0x340 [ 638.967774][T19876] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 638.967811][T19876] ? apparmor_capable+0x126/0x170 [ 638.967837][T19876] ? bpf_lsm_capable+0x9/0x20 [ 638.967856][T19876] ? security_capable+0x7e/0x2c0 [ 638.967893][T19876] genl_rcv_msg+0x614/0x7a0 [ 638.967928][T19876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 638.967953][T19876] ? __pfx_batadv_pre_doit+0x10/0x10 [ 638.968081][T19876] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 638.968109][T19876] ? __pfx_batadv_post_doit+0x10/0x10 [ 638.968137][T19876] ? __pfx_ref_tracker_free+0x10/0x10 [ 638.968174][T19876] netlink_rcv_skb+0x226/0x4a0 [ 638.968197][T19876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 638.968227][T19876] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 638.968268][T19876] ? down_read+0x270/0x2e0 [ 638.968292][T19876] ? genl_rcv+0xd/0x40 [ 638.968320][T19876] genl_rcv+0x28/0x40 [ 638.968345][T19876] netlink_unicast+0x7bb/0x940 [ 638.968391][T19876] netlink_sendmsg+0x813/0xb40 [ 638.968425][T19876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.968453][T19876] ? aa_sock_msg_perm+0xf1/0x1b0 [ 638.968484][T19876] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 638.968510][T19876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.968535][T19876] ____sys_sendmsg+0x9b9/0xa20 [ 638.968558][T19876] ? __might_fault+0xaf/0x130 [ 638.968592][T19876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.968627][T19876] ? import_iovec+0x73/0xa0 [ 638.968655][T19876] ___sys_sendmsg+0x2a5/0x360 [ 638.968676][T19876] ? __lock_acquire+0x683/0x2cd0 [ 638.968711][T19876] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.968777][T19876] ? __fget_files+0x2a/0x420 [ 638.968800][T19876] ? __fget_files+0x3a2/0x420 [ 638.968838][T19876] __x64_sys_sendmsg+0x1bd/0x2a0 [ 638.968864][T19876] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 638.968898][T19876] ? __pfx_ksys_write+0x10/0x10 [ 638.968939][T19876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.968962][T19876] do_syscall_64+0x174/0x580 [ 638.968985][T19876] ? trace_irq_disable+0x3b/0x140 [ 638.969014][T19876] ? clear_bhb_loop+0x40/0x90 [ 638.969041][T19876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.969061][T19876] RIP: 0033:0x7f99b5d9ce59 [ 638.969082][T19876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.969099][T19876] RSP: 002b:00007f99b6c35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.969123][T19876] RAX: ffffffffffffffda RBX: 00007f99b6015fa0 RCX: 00007f99b5d9ce59 [ 638.969138][T19876] RDX: 0000000000000080 RSI: 0000200000000540 RDI: 0000000000000003 [ 638.969150][T19876] RBP: 00007f99b6c35090 R08: 0000000000000000 R09: 0000000000000000 [ 638.969162][T19876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.969174][T19876] R13: 00007f99b6016038 R14: 00007f99b6015fa0 R15: 00007ffca4e87f78 [ 638.969209][T19876] [ 640.075064][T19904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.237398][T19907] netlink: 'syz.3.3217': attribute type 10 has an invalid length. [ 640.249921][T19895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 640.490906][T19466] veth0_vlan: entered promiscuous mode [ 640.588107][T19466] veth1_vlan: entered promiscuous mode [ 640.802138][T19466] veth0_macvtap: entered promiscuous mode [ 640.862132][T19466] veth1_macvtap: entered promiscuous mode [ 640.968976][T19466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 641.050284][T19466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.138730][ T6058] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.190360][ T6058] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.265836][ T6061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.304137][ T6061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.641361][T19934] FAULT_INJECTION: forcing a failure. [ 641.641361][T19934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.688800][T19934] CPU: 0 UID: 0 PID: 19934 Comm: syz.0.3223 Not tainted syzkaller #0 PREEMPT(full) [ 641.688831][T19934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 641.688843][T19934] Call Trace: [ 641.688851][T19934] [ 641.688860][T19934] dump_stack_lvl+0xe8/0x150 [ 641.688889][T19934] should_fail_ex+0x40c/0x560 [ 641.688927][T19934] _copy_from_user+0x2d/0xb0 [ 641.688952][T19934] ___sys_sendmsg+0x1c6/0x360 [ 641.688975][T19934] ? __lock_acquire+0x683/0x2cd0 [ 641.689003][T19934] ? __pfx____sys_sendmsg+0x10/0x10 [ 641.689064][T19934] ? __fget_files+0x2a/0x420 [ 641.689089][T19934] ? __fget_files+0x3a2/0x420 [ 641.689125][T19934] __x64_sys_sendmsg+0x1bd/0x2a0 [ 641.689150][T19934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 641.689184][T19934] ? __pfx_ksys_write+0x10/0x10 [ 641.689222][T19934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.689245][T19934] do_syscall_64+0x174/0x580 [ 641.689269][T19934] ? trace_irq_disable+0x3b/0x140 [ 641.689298][T19934] ? clear_bhb_loop+0x40/0x90 [ 641.689323][T19934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.689344][T19934] RIP: 0033:0x7f99b5d9ce59 [ 641.689364][T19934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.689382][T19934] RSP: 002b:00007f99b6c35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.689405][T19934] RAX: ffffffffffffffda RBX: 00007f99b6015fa0 RCX: 00007f99b5d9ce59 [ 641.689419][T19934] RDX: 0000000020004800 RSI: 0000200000000040 RDI: 0000000000000004 [ 641.689433][T19934] RBP: 00007f99b6c35090 R08: 0000000000000000 R09: 0000000000000000 [ 641.689445][T19934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.689457][T19934] R13: 00007f99b6016038 R14: 00007f99b6015fa0 R15: 00007ffca4e87f78 [ 641.689491][T19934] [ 642.001922][ T7428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.030424][T19938] x_tables: duplicate underflow at hook 1 [ 642.046512][ T7428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.241794][ T7428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.286375][ T7428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.734637][T19970] FAULT_INJECTION: forcing a failure. [ 642.734637][T19970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 642.784517][T19970] CPU: 0 UID: 0 PID: 19970 Comm: syz.4.3133 Not tainted syzkaller #0 PREEMPT(full) [ 642.784548][T19970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 642.784560][T19970] Call Trace: [ 642.784569][T19970] [ 642.784578][T19970] dump_stack_lvl+0xe8/0x150 [ 642.784619][T19970] should_fail_ex+0x40c/0x560 [ 642.784657][T19970] _copy_from_iter+0x1d3/0x1660 [ 642.784683][T19970] ? rcu_is_watching+0x15/0xb0 [ 642.784714][T19970] ? __pfx__copy_from_iter+0x10/0x10 [ 642.784731][T19970] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 642.784768][T19970] ? netlink_sendmsg+0x650/0xb40 [ 642.784791][T19970] ? skb_put+0x112/0x210 [ 642.784814][T19970] netlink_sendmsg+0x6c0/0xb40 [ 642.784847][T19970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.784874][T19970] ? aa_sock_msg_perm+0xf1/0x1b0 [ 642.784905][T19970] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 642.784931][T19970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.784956][T19970] ____sys_sendmsg+0x9b9/0xa20 [ 642.784979][T19970] ? __might_fault+0xaf/0x130 [ 642.785011][T19970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.785044][T19970] ? import_iovec+0x73/0xa0 [ 642.785071][T19970] ___sys_sendmsg+0x2a5/0x360 [ 642.785091][T19970] ? ktime_get+0x45/0x220 [ 642.785125][T19970] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.785154][T19970] ? __pfx_clockevents_program_event+0x10/0x10 [ 642.785218][T19970] ? irqentry_exit+0x218/0x8e0 [ 642.785280][T19970] __x64_sys_sendmsg+0x1bd/0x2a0 [ 642.785306][T19970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.785339][T19970] ? __pfx_ksys_write+0x10/0x10 [ 642.785379][T19970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.785401][T19970] do_syscall_64+0x174/0x580 [ 642.785424][T19970] ? trace_irq_disable+0x3b/0x140 [ 642.785453][T19970] ? clear_bhb_loop+0x40/0x90 [ 642.785478][T19970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.785499][T19970] RIP: 0033:0x7f9a3179ce59 [ 642.785519][T19970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.785537][T19970] RSP: 002b:00007f9a32743028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.785560][T19970] RAX: ffffffffffffffda RBX: 00007f9a31a15fa0 RCX: 00007f9a3179ce59 [ 642.785575][T19970] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 642.785597][T19970] RBP: 00007f9a32743090 R08: 0000000000000000 R09: 0000000000000000 [ 642.785611][T19970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.785623][T19970] R13: 00007f9a31a16038 R14: 00007f9a31a15fa0 R15: 00007ffd859f99d8 [ 642.785658][T19970] [ 643.041324][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880527b3c00: rx timeout, send abort [ 643.483759][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880527b2400: rx timeout, send abort [ 643.549682][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880527b3c00: abort rx timeout. Force session deactivation [ 643.883460][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3236'. [ 643.982551][T17423] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 643.992156][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880527b2400: abort rx timeout. Force session deactivation [ 644.008969][T17423] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 644.019770][T17423] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 644.029066][T17423] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 644.041344][T17423] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 644.547230][T20009] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 644.905825][T20016] syzkaller0: entered promiscuous mode [ 644.907130][T20018] netlink: 'syz.0.3241': attribute type 13 has an invalid length. [ 644.933405][T20016] syzkaller0: entered allmulticast mode [ 645.761118][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3245'. [ 645.811012][T20049] FAULT_INJECTION: forcing a failure. [ 645.811012][T20049] name failslab, interval 1, probability 0, space 0, times 0 [ 645.858728][T20049] CPU: 1 UID: 0 PID: 20049 Comm: syz.3.3245 Not tainted syzkaller #0 PREEMPT(full) [ 645.858760][T20049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 645.858772][T20049] Call Trace: [ 645.858779][T20049] [ 645.858788][T20049] dump_stack_lvl+0xe8/0x150 [ 645.858820][T20049] should_fail_ex+0x40c/0x560 [ 645.858859][T20049] should_failslab+0xa8/0x100 [ 645.858882][T20049] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 645.858913][T20049] ? __alloc_skb+0x1d7/0x7a0 [ 645.858942][T20049] ? __local_bh_enable_ip+0xd0/0x130 [ 645.858971][T20049] __alloc_skb+0x1d7/0x7a0 [ 645.859008][T20049] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 645.859047][T20049] rtmsg_ifinfo+0x8c/0x1a0 [ 645.859083][T20049] netif_close_many+0x281/0x410 [ 645.859116][T20049] ? __pfx_netif_close_many+0x10/0x10 [ 645.859148][T20049] ? rcu_is_watching+0x15/0xb0 [ 645.859173][T20049] ? trace_contention_end+0x3d/0x140 [ 645.859200][T20049] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 645.859295][T20049] unregister_netdevice_many_notify+0xb76/0x2150 [ 645.859325][T20049] ? stack_trace_save+0xa9/0x100 [ 645.859354][T20049] ? __pfx_stack_trace_save+0x10/0x10 [ 645.859386][T20049] ? rtnl_dellink+0x41b/0x810 [ 645.859408][T20049] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 645.859437][T20049] ? unregister_netdevice_queue+0x17d/0x340 [ 645.859467][T20049] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 645.859495][T20049] ? __nla_parse+0x40/0x60 [ 645.859521][T20049] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 645.859547][T20049] rtnl_dellink+0x5be/0x810 [ 645.859570][T20049] ? __pfx_rtnl_dellink+0x10/0x10 [ 645.859705][T20049] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 645.859737][T20049] ? __pfx_rtnl_dellink+0x10/0x10 [ 645.859783][T20049] ? __pfx_rtnl_dellink+0x10/0x10 [ 645.859812][T20049] rtnetlink_rcv_msg+0x802/0xc00 [ 645.859847][T20049] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 645.859878][T20049] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 645.859908][T20049] ? ref_tracker_free+0x689/0x830 [ 645.859935][T20049] ? __pfx_ref_tracker_free+0x10/0x10 [ 645.859969][T20049] netlink_rcv_skb+0x226/0x4a0 [ 645.859994][T20049] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 645.860027][T20049] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 645.860066][T20049] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.860087][T20049] ? netlink_deliver_tap+0x2e/0x1b0 [ 645.860116][T20049] netlink_unicast+0x7bb/0x940 [ 645.860161][T20049] netlink_sendmsg+0x813/0xb40 [ 645.860196][T20049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.860224][T20049] ? aa_sock_msg_perm+0xf1/0x1b0 [ 645.860257][T20049] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 645.860283][T20049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 645.860308][T20049] ____sys_sendmsg+0x9b9/0xa20 [ 645.860332][T20049] ? __might_fault+0xaf/0x130 [ 645.860367][T20049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 645.860402][T20049] ? import_iovec+0x73/0xa0 [ 645.860431][T20049] ___sys_sendmsg+0x2a5/0x360 [ 645.860452][T20049] ? __lock_acquire+0x683/0x2cd0 [ 645.860480][T20049] ? __pfx____sys_sendmsg+0x10/0x10 [ 645.860546][T20049] ? __fget_files+0x2a/0x420 [ 645.860571][T20049] ? __fget_files+0x3a2/0x420 [ 645.860616][T20049] __x64_sys_sendmsg+0x1bd/0x2a0 [ 645.860643][T20049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 645.860678][T20049] ? __pfx_ksys_write+0x10/0x10 [ 645.860719][T20049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.860743][T20049] do_syscall_64+0x174/0x580 [ 645.860768][T20049] ? trace_irq_disable+0x3b/0x140 [ 645.860798][T20049] ? clear_bhb_loop+0x40/0x90 [ 645.860825][T20049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.860846][T20049] RIP: 0033:0x7fddbc19ce59 [ 645.860867][T20049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.860885][T20049] RSP: 002b:00007fddbd00b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.860908][T20049] RAX: ffffffffffffffda RBX: 00007fddbc415fa0 RCX: 00007fddbc19ce59 [ 645.860923][T20049] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 645.860937][T20049] RBP: 00007fddbd00b090 R08: 0000000000000000 R09: 0000000000000000 [ 645.860950][T20049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.860963][T20049] R13: 00007fddbc416038 R14: 00007fddbc415fa0 R15: 00007ffd1967c048 [ 645.860999][T20049] [ 646.414671][T19995] macsec0 speed is unknown, defaulting to 1000 [ 646.647156][T17423] Bluetooth: hci3: command tx timeout [ 646.894507][T20060] netlink: 'syz.3.3249': attribute type 1 has an invalid length. [ 646.903832][T20060] netlink: 'syz.3.3249': attribute type 3 has an invalid length. [ 646.958367][T20060] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3249'. [ 647.004586][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'. [ 647.030664][ T7247] IPVS: starting estimator thread 0... [ 647.126975][T20065] IPVS: using max 25 ests per chain, 60000 per kthread [ 647.308545][T20073] tunl0: Caught tx_queue_len zero misconfig [ 647.493971][T20068] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.677150][T17423] Bluetooth: hci3: command tx timeout [ 649.750951][T19995] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.761054][T19995] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.768704][T19995] bridge_slave_0: entered allmulticast mode [ 649.776956][T19995] bridge_slave_0: entered promiscuous mode [ 649.787731][T19995] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.795199][T19995] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.803110][T19995] bridge_slave_1: entered allmulticast mode [ 649.811419][T19995] bridge_slave_1: entered promiscuous mode [ 649.874980][T19995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.915407][T19995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.091664][T19995] team0: Port device team_slave_0 added [ 650.139781][T20127] FAULT_INJECTION: forcing a failure. [ 650.139781][T20127] name failslab, interval 1, probability 0, space 0, times 0 [ 650.158614][T19995] team0: Port device team_slave_1 added [ 650.214081][T20127] CPU: 1 UID: 0 PID: 20127 Comm: syz.4.3260 Not tainted syzkaller #0 PREEMPT(full) [ 650.214109][T20127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 650.214119][T20127] Call Trace: [ 650.214127][T20127] [ 650.214135][T20127] dump_stack_lvl+0xe8/0x150 [ 650.214164][T20127] should_fail_ex+0x40c/0x560 [ 650.214200][T20127] should_failslab+0xa8/0x100 [ 650.214219][T20127] ? ptlock_alloc+0x20/0x70 [ 650.214242][T20127] kmem_cache_alloc_noprof+0x87/0x650 [ 650.214276][T20127] ptlock_alloc+0x20/0x70 [ 650.214298][T20127] pte_alloc_one+0x7a/0x370 [ 650.214360][T20127] __pte_alloc+0x25/0x1a0 [ 650.214391][T20127] do_pte_missing+0x2eaa/0x3540 [ 650.214425][T20127] ? mtree_range_walk+0x707/0x8b0 [ 650.214529][T20127] handle_mm_fault+0x1b38/0x3080 [ 650.214553][T20127] ? mt_find+0x186/0x630 [ 650.214590][T20127] ? handle_mm_fault+0xec/0x3080 [ 650.214626][T20127] ? __pfx_handle_mm_fault+0x10/0x10 [ 650.214648][T20127] ? do_raw_spin_lock+0x12b/0x2f0 [ 650.214697][T20127] __get_user_pages+0x1678/0x2720 [ 650.214747][T20127] __gup_longterm_locked+0xd52/0x15c0 [ 650.214790][T20127] ? gup_fast_fallback+0x20d/0x20d0 [ 650.214816][T20127] ? sanity_check_pinned_pages+0x817/0x8d0 [ 650.214847][T20127] gup_fast_fallback+0x1d82/0x20d0 [ 650.214882][T20127] ? trace_irq_disable+0x3b/0x140 [ 650.214934][T20127] ? __pfx_gup_fast_fallback+0x10/0x10 [ 650.214959][T20127] ? camellia_encrypt+0x1e76/0x6150 [ 650.215053][T20127] ? pin_user_pages_fast+0x4d/0xb0 [ 650.215079][T20127] iov_iter_extract_pages+0x369/0x5f0 [ 650.215116][T20127] extract_iter_to_sg+0xee0/0x25f0 [ 650.215179][T20127] ? crypto_shash_finup+0x464/0x6c0 [ 650.215241][T20127] ? sanity_check_pinned_pages+0x810/0x8d0 [ 650.215266][T20127] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 650.215297][T20127] ? unpin_user_page+0xb4/0xf0 [ 650.215316][T20127] ? __pfx_unpin_user_page+0x10/0x10 [ 650.215347][T20127] ? __asan_memset+0x22/0x50 [ 650.215373][T20127] hash_sendmsg+0x4fd/0x1060 [ 650.215420][T20127] ? __pfx_hash_sendmsg+0x10/0x10 [ 650.215442][T20127] ____sys_sendmsg+0x9b9/0xa20 [ 650.215464][T20127] ? __might_fault+0xaf/0x130 [ 650.215496][T20127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 650.215526][T20127] ? import_iovec+0x73/0xa0 [ 650.215552][T20127] ___sys_sendmsg+0x2a5/0x360 [ 650.215572][T20127] ? __lock_acquire+0x683/0x2cd0 [ 650.215597][T20127] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.215659][T20127] ? __fget_files+0x2a/0x420 [ 650.215684][T20127] ? __fget_files+0x3a2/0x420 [ 650.215721][T20127] __x64_sys_sendmsg+0x1bd/0x2a0 [ 650.215748][T20127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 650.215824][T20127] ? __pfx_ksys_write+0x10/0x10 [ 650.215865][T20127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.215887][T20127] do_syscall_64+0x174/0x580 [ 650.215909][T20127] ? trace_irq_disable+0x3b/0x140 [ 650.215939][T20127] ? clear_bhb_loop+0x40/0x90 [ 650.215964][T20127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.215983][T20127] RIP: 0033:0x7f9a3179ce59 [ 650.216003][T20127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.216020][T20127] RSP: 002b:00007f9a32743028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.216041][T20127] RAX: ffffffffffffffda RBX: 00007f9a31a15fa0 RCX: 00007f9a3179ce59 [ 650.216056][T20127] RDX: 0000000020004800 RSI: 0000200000000040 RDI: 0000000000000004 [ 650.216068][T20127] RBP: 00007f9a32743090 R08: 0000000000000000 R09: 0000000000000000 [ 650.216081][T20127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.216093][T20127] R13: 00007f9a31a16038 R14: 00007f9a31a15fa0 R15: 00007ffd859f99d8 [ 650.216128][T20127] [ 650.301117][T19995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.780853][T17423] Bluetooth: hci3: command tx timeout [ 650.823616][T20141] netlink: 'syz.4.3261': attribute type 1 has an invalid length. [ 650.884223][T20141] netlink: 'syz.4.3261': attribute type 3 has an invalid length. [ 650.921292][T20141] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3261'. [ 650.947821][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3261'. [ 650.982053][T19995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.106310][T19995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.212893][T19995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.270621][T19995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.276225][T20154] netlink: 'syz.4.3263': attribute type 1 has an invalid length. [ 651.346151][T19995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.475669][T20154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 651.814779][T20164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3264'. [ 651.850852][T19995] hsr_slave_0: entered promiscuous mode [ 651.863482][T19995] hsr_slave_1: entered promiscuous mode [ 651.871623][T20166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3264'. [ 651.899478][T19995] debugfs: 'hsr0' already exists in 'hsr' [ 651.919819][T19995] Cannot create hsr debugfs directory [ 652.054431][T20164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 652.164849][T20170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 652.211258][T20170] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 652.268167][T20170] bond1: (slave ipip0): Error -95 calling set_mac_address [ 652.775584][T20184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3266'. [ 652.843254][T17423] Bluetooth: hci3: command tx timeout [ 652.865930][T20188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3266'. [ 653.565308][T20201] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 653.728892][T19995] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.814640][T19995] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 59085 - 0 [ 654.032682][T20208] bridge_slave_0: left allmulticast mode [ 654.055292][T20217] netlink: 'syz.2.3272': attribute type 1 has an invalid length. [ 654.067218][T20208] bridge_slave_0: left promiscuous mode [ 654.074744][T20217] netlink: 'syz.2.3272': attribute type 3 has an invalid length. [ 654.083003][T20208] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.100991][T20217] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3272'. [ 654.131871][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3272'. [ 654.158472][T20208] bridge_slave_1: left allmulticast mode [ 654.177792][T20208] bridge_slave_1: left promiscuous mode [ 654.207358][T20208] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.279139][T20208] bond0: (slave bond_slave_0): Releasing backup interface [ 654.362302][T20208] bond0: (slave bond_slave_1): Releasing backup interface [ 654.469807][T20208] team0: Port device team_slave_0 removed [ 654.508728][T20208] team0: Port device team_slave_1 removed [ 654.541655][T20208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.571694][T20208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.601510][T20208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.642330][T20208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.675636][T20208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 654.820573][T20213] team0: Port device xfrm0 added [ 654.876723][T20215] tipc: Started in network mode [ 654.913292][T20215] tipc: Node identity 6e830e83f6f1, cluster identity 4711 [ 654.940387][T20215] tipc: Enabled bearer , priority 0 [ 654.997707][T20200] macsec0 speed is unknown, defaulting to 1000 [ 655.133057][T19995] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.158058][T19995] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 59085 - 0 [ 655.513892][T19995] bond0: (slave netdevsim1): Releasing backup interface [ 655.566260][T19995] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 655.596491][T19995] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.616699][T19995] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 59085 - 0 [ 655.673818][T20235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.854989][T19995] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.885838][T19995] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 59085 - 0 [ 656.057266][ T5764] tipc: Node number set to 2557611651 [ 656.273317][T20252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3278'. [ 656.332582][T20252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3278'. [ 656.483492][T20259] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 656.541809][T20260] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_0, syncid = 0, id = 0 [ 656.737543][T20262] netlink: 'syz.4.3282': attribute type 1 has an invalid length. [ 656.745563][T20262] netlink: 'syz.4.3282': attribute type 3 has an invalid length. [ 656.756170][T20262] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3282'. [ 656.784193][T20262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3282'. [ 656.945976][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3283'. [ 656.956519][T19995] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 656.979755][T20267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3283'. [ 656.994989][T19995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 657.044814][T19995] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 657.056767][T20267] netlink: 'syz.3.3283': attribute type 11 has an invalid length. [ 657.128159][T19995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 657.224340][T19995] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 657.224464][T20267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3283'. [ 657.252876][T20267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3283'. [ 657.266354][T20267] netlink: 'syz.3.3283': attribute type 11 has an invalid length. [ 657.276141][T19995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 657.313405][T19995] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 657.410521][T19995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 657.455896][ T112] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.520159][T20279] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:0 [ 657.550176][ T112] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.587801][T20279] IPVS: set_ctl: invalid protocol: 576 0.32.0.0:12288 [ 657.594783][ T112] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.679005][T20274] IPVS: set_ctl: invalid protocol: 18698 178.140.125.23:34000 [ 657.764376][ T112] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.173859][T19995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.244849][T19995] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.331339][T13708] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.338637][T13708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.372782][T13708] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.380151][T13708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.410623][T20294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3288'. [ 658.938396][T20307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3292'. [ 659.114419][T20310] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 659.171315][T20310] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 659.392823][T20314] hmó3)ó: entered promiscuous mode [ 659.936571][T19995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.155741][T19995] veth0_vlan: entered promiscuous mode [ 660.223933][T20347] bond2 (unregistering): Released all slaves [ 660.333503][T19995] veth1_vlan: entered promiscuous mode [ 660.411839][T19995] veth0_macvtap: entered promiscuous mode [ 660.445646][T19995] veth1_macvtap: entered promiscuous mode [ 660.502618][T19995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.574722][T19995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.636083][T13706] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.658641][T13706] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.690663][T13706] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.711887][T13706] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.871621][T20367] netlink: 'syz.3.3305': attribute type 8 has an invalid length. [ 661.795177][T20380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.841835][ T7429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.886136][ T7429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.003673][T20388] IPv6: NLM_F_CREATE should be specified when creating new route [ 662.021285][ T6058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.039955][T20389] netlink: zone id is out of range [ 662.047699][T20390] IPv6: NLM_F_CREATE should be specified when creating new route [ 662.056816][ T6058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.064301][T20389] netlink: zone id is out of range [ 662.070576][T20389] netlink: zone id is out of range [ 662.077471][T20383] macsec0 speed is unknown, defaulting to 1000 [ 662.082079][T20389] netlink: zone id is out of range [ 662.085013][T20388] __nla_validate_parse: 9 callbacks suppressed [ 662.085030][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 662.089096][T20389] netlink: zone id is out of range [ 662.089110][T20389] netlink: zone id is out of range [ 662.089119][T20389] netlink: zone id is out of range [ 662.089128][T20389] netlink: zone id is out of range [ 662.089137][T20389] netlink: zone id is out of range [ 662.090811][T20389] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3312'. [ 662.119797][T20388] netlink: 'syz.0.3313': attribute type 20 has an invalid length. [ 662.191383][T20388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3313'. [ 662.200946][T13708] wlan1: Trigger new scan to find an IBSS to join [ 663.763261][T20438] xt_CT: You must specify a L4 protocol and not use inversions on it [ 663.945748][T20436] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 664.014502][T20436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 664.065317][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.072648][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.155375][T13701] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.167516][T20432] macsec0 speed is unknown, defaulting to 1000 [ 664.253300][T13701] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.271816][T13701] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.369376][T13701] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 664.684862][T20458] bond2: invalid ARP target 0.0.0.0 specified for addition [ 664.706880][T20458] bond2: option arp_ip_target: invalid value (0) [ 664.719419][T20458] bond2 (unregistering): Released all slaves [ 664.801689][T20438] macsec0 speed is unknown, defaulting to 1000 [ 665.091968][T20473] xt_TCPMSS: Only works on TCP SYN packets [ 665.123461][T20473] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3333'. [ 665.239202][ T6058] wlan1: Trigger new scan to find an IBSS to join [ 665.393262][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'. [ 665.437891][T20475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 665.547659][T20483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 665.581375][T20479] wg0: entered promiscuous mode [ 665.597345][T20479] team0: Device wg0 is of different type [ 666.584772][T20506] x_tables: duplicate underflow at hook 1 [ 666.808798][T20510] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3343'. [ 667.624172][T20522] Bluetooth: MGMT ver 1.23 [ 668.197743][ T7429] wlan1: Trigger new scan to find an IBSS to join [ 668.380285][T20534] net_ratelimit: 393 callbacks suppressed [ 668.380309][T20534] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 668.477548][T20536] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 668.824763][T20541] netlink: 'syz.0.3352': attribute type 1 has an invalid length. [ 668.966542][T20552] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3351'. [ 669.002145][T20541] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.121233][ T6058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.155284][T20548] bond2: (slave macvlan0): making interface the new active one [ 669.209788][T20548] bond2: (slave macvlan0): Enslaving as an active interface with an up link [ 669.317000][ T5764] page_pool_release_retry() stalled pool shutdown: id 202, 1 inflight 60 sec [ 669.808545][T20577] Cannot find map_set index 17 as target [ 669.930771][T20580] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 669.952858][T20580] bridge2: entered allmulticast mode [ 670.002547][T20577] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 670.026866][T20577] bridge3: entered allmulticast mode [ 670.532366][T20573] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 670.565501][T20573] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 670.644992][T20593] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3370'. [ 670.764038][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 671.159758][T20573] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 671.174782][T20573] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 671.409469][T20620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3376'. [ 671.453012][T20620] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3376'. [ 671.469613][T20620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3376'. [ 671.487358][T20573] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 671.508388][T20573] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 671.512471][T20624] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 671.700139][T20573] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 671.722771][T20573] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 671.820037][T20632] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3379'. [ 671.972496][T20573] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 671.986820][T20573] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 672.110284][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 672.955038][T20657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3386'. [ 673.328932][T20662] netlink: 'syz.1.3388': attribute type 7 has an invalid length. [ 673.445105][T20670] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3390'. [ 673.471126][T20673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3391'. [ 673.550487][ T6058] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.576306][ T6058] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.609314][T20674] hsr0: entered promiscuous mode [ 673.633625][ T6058] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.664054][ T6058] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.171158][T20698] __nla_validate_parse: 5 callbacks suppressed [ 674.171182][T20698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3399'. [ 674.955081][T20720] xt_hashlimit: size too large, truncated to 1048576 [ 674.976472][T20722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3404'. [ 675.008513][T20722] vlan2: entered promiscuous mode [ 675.013705][T20722] syz_tun: entered promiscuous mode [ 675.389249][T20735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3408'. [ 675.533651][T20739] netlink: 'syz.0.3410': attribute type 1 has an invalid length. [ 675.779191][T20739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 675.875827][T20762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3411'. [ 675.877541][T20745] bond2: (slave macvlan0): Releasing active interface [ 675.960122][T20745] bond3: (slave macvlan0): making interface the new active one [ 675.976359][T20745] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 676.235027][T20772] netlink: 'syz.4.3416': attribute type 1 has an invalid length. [ 676.452066][T20782] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:19997 [ 676.471317][T20780] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 676.648210][T20785] netlink: 'syz.1.3421': attribute type 12 has an invalid length. [ 676.838520][T20790] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 677.113840][T20795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3424'. [ 677.360465][T20780] sit0: entered promiscuous mode [ 677.392289][T20780] netlink: 'syz.2.3420': attribute type 1 has an invalid length. [ 677.407691][T20780] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3420'. [ 677.422730][T20803] syzkaller0: entered promiscuous mode [ 677.438499][T20803] syzkaller0: entered allmulticast mode [ 677.482891][T20806] rdma_rxe: rxe_newlink: failed to add lo [ 677.732830][T20813] tipc: Started in network mode [ 677.742127][T20813] tipc: Node identity e6fe0c3486a4, cluster identity 4711 [ 677.751724][T20813] tipc: Enabled bearer , priority 0 [ 677.936515][T20821] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3433'. [ 678.021746][T20821] netlink: 'syz.4.3433': attribute type 1 has an invalid length. [ 678.149370][T20833] bond1: entered promiscuous mode [ 678.154525][T20833] bond1: entered allmulticast mode [ 678.160897][T20833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 678.173248][T20797] tipc: Resetting bearer [ 678.187315][T20821] netlink: 'syz.4.3433': attribute type 3 has an invalid length. [ 678.220504][T20821] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3433'. [ 678.309856][T20797] tipc: Disabling bearer [ 678.399622][T20839] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3436'. [ 679.156991][T20866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3441'. [ 679.511089][T20870] xt_l2tp: v2 tid > 0xffff: 37482740 [ 679.518624][T20871] xt_l2tp: v2 tid > 0xffff: 37482740 [ 683.782717][T20881] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3448'. [ 684.260436][T20904] netlink: 6928 bytes leftover after parsing attributes in process `syz.3.3453'. [ 684.584385][T20914] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 684.594292][T20914] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 684.602971][T20914] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 684.927422][T20919] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.935412][T20919] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.987486][T20919] bridge0: entered allmulticast mode [ 685.040060][T20920] bridge_slave_1: left allmulticast mode [ 685.088362][T20920] bridge_slave_1: left promiscuous mode [ 685.114591][T20920] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.234869][T20925] netlink: 'syz.0.3459': attribute type 1 has an invalid length. [ 685.245087][T20920] bridge_slave_0: left allmulticast mode [ 685.270535][T20920] bridge_slave_0: left promiscuous mode [ 685.299306][T20920] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.978191][T20934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3463'. [ 686.332105][T20938] tipc: Started in network mode [ 686.368421][T20938] tipc: Node identity c27c347a6726, cluster identity 4711 [ 686.403154][T20938] tipc: Enabled bearer , priority 0 [ 686.415096][T20943] xt_policy: output policy not valid in PREROUTING and INPUT [ 686.447688][T20941] syzkaller0: entered promiscuous mode [ 686.469615][T20941] syzkaller0: entered allmulticast mode [ 686.521903][T20938] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 686.572349][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3466'. [ 686.751317][T20941] tipc: Resetting bearer [ 686.813332][T20937] tipc: Resetting bearer [ 686.825013][T20950] netlink: 'syz.1.3468': attribute type 5 has an invalid length. [ 686.925277][T20937] tipc: Disabling bearer [ 686.991276][T20951] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3468'. [ 687.050582][T20950] erspan1: entered allmulticast mode [ 687.429921][T20961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3472'. [ 687.471001][T20961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3472'. [ 687.533335][T20961] team0: entered promiscuous mode [ 687.574003][T20961] bond0: entered promiscuous mode [ 687.600308][T20961] debugfs: 'hsr1' already exists in 'hsr' [ 687.622906][T20961] Cannot create hsr debugfs directory [ 687.648360][T20961] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 687.693372][T20961] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 687.742801][T20961] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 688.163216][T20973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3476'. [ 688.473054][ T29] audit: type=1107 audit(1781624388.978:10): pid=20974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='-¦ [ 688.473054][ T29] –â›@­jˆ þò{ß‘øm£' [ 688.931869][ T29] audit: type=1804 audit(1781624389.438:11): pid=20985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3479" name="/newroot/130/cgroup.controllers" dev="tmpfs" ino=679 res=1 errno=0 [ 688.947474][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3479'. [ 689.005801][T20987] Cannot find set identified by id 0 to match [ 689.006372][ T29] audit: type=1800 audit(1781624389.438:12): pid=20985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3479" name="cgroup.controllers" dev="tmpfs" ino=679 res=0 errno=0 [ 689.608379][T20991] netlink: 'syz.4.3481': attribute type 1 has an invalid length. [ 689.639379][T20991] netlink: 'syz.4.3481': attribute type 3 has an invalid length. [ 689.665752][T20991] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3481'. [ 689.690145][T21000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3481'. [ 689.973503][T21008] netlink: 'syz.1.3487': attribute type 10 has an invalid length. [ 689.998523][T21008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3487'. [ 690.134641][T21014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3489'. [ 690.519621][T21008] team0: Port device geneve1 added [ 690.569387][ T6058] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.607815][ T6058] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.642305][ T6058] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.681361][ T6058] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.734016][ T6058] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.778217][ T6058] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.823462][ T6058] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.863886][ T6058] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.915834][T21021] ÿ: renamed from bond_slave_0 (while UP) [ 690.933033][T21035] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.3495'. [ 690.959288][T21037] netlink: 'syz.4.3492': attribute type 62 has an invalid length. [ 691.015291][T21025] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 691.457868][T21025] bond4 (unregistering): Released all slaves [ 691.825108][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3504'. [ 692.094419][T21077] netlink: 'syz.1.3508': attribute type 4 has an invalid length. [ 692.187598][T21079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3506'. [ 692.201561][T21083] netlink: 'syz.1.3508': attribute type 4 has an invalid length. [ 692.944863][ T29] audit: type=1800 audit(1781624393.448:13): pid=21110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3516" name="memory.events" dev="tmpfs" ino=720 res=0 errno=0 [ 692.984539][T21112] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 693.226901][T21120] netlink: 'syz.3.3522': attribute type 1 has an invalid length. [ 693.284665][T21120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 694.995198][T21126] bond2: (slave macvlan0): making interface the new active one [ 695.083647][T21126] bond2: (slave macvlan0): Enslaving as an active interface with an up link [ 695.573595][T21142] syzkaller1: entered promiscuous mode [ 695.590055][T21142] syzkaller1: entered allmulticast mode [ 696.042750][T21160] openvswitch: netlink: Message has -1 unknown bytes. [ 696.295881][T21171] netlink: 'syz.0.3534': attribute type 1 has an invalid length. [ 697.026490][T21155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.041941][T21155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.218467][T21155] mac80211_hwsim hwsim50 wlan0: left promiscuous mode [ 697.234786][T21155] mac80211_hwsim hwsim50 wlan0: left allmulticast mode [ 697.244565][T21155] erspan1: left allmulticast mode [ 697.258935][T21171] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 697.358205][T21182] bond4: Unable to set up delay as MII monitoring is disabled [ 697.408620][T21182] bond4 (unregistering): Released all slaves [ 697.499787][ T7429] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.650173][ T7429] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.683636][T21206] mac80211_hwsim hwsim50 wlan0: entered promiscuous mode [ 697.767839][ T7429] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.813373][ T7429] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.239313][T21227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3547'. [ 698.267851][T21227] nbd: couldn't find a device at index 65546 [ 698.911708][T21252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3552'. [ 698.934678][T21251] netlink: 684 bytes leftover after parsing attributes in process `syz.4.3554'. [ 698.964687][T21251] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3554'. [ 699.027336][T21252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 699.178534][T21257] bond3: entered promiscuous mode [ 699.220087][T21257] bond3: entered allmulticast mode [ 699.282611][T21257] 8021q: adding VLAN 0 to HW filter on device bond3 [ 699.353378][T21257] team0: Port device bond3 added [ 699.366717][T21259] macvtap0: mtu less than device minimum [ 699.372777][T21266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3559'. [ 699.644185][T21273] netlink: 'syz.3.3562': attribute type 1 has an invalid length. [ 699.871204][T21273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 699.932710][T21288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.003305][T21296] netlink: 'syz.0.3565': attribute type 11 has an invalid length. [ 700.013658][T21288] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.034293][T21296] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.3565'. [ 700.052988][T21288] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 700.228611][T21283] bond3: (slave geneve4): making interface the new active one [ 700.267073][T21283] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 700.905695][T21308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3570'. [ 700.953099][T21308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3570'. [ 700.998920][T21308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3570'. [ 701.025594][T21308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3570'. [ 701.093149][T21309] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 701.093325][ T7247] IPVS: starting estimator thread 0... [ 701.223839][T21308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.226857][T21313] IPVS: using max 27 ests per chain, 64800 per kthread [ 701.274057][T21308] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.322209][T21308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.485940][T21321] netlink: 'syz.4.3572': attribute type 1 has an invalid length. [ 701.525222][T21321] netlink: 'syz.4.3572': attribute type 3 has an invalid length. [ 701.548583][T21308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.583966][T21308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.634392][T21308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 701.678447][T21308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 701.741183][T21308] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 702.572405][T21337] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 702.588959][T21343] sctp: [Deprecated]: syz.1.3579 (pid 21343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 702.588959][T21343] Use struct sctp_sack_info instead [ 702.652865][T21340] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 702.688323][T21340] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 703.762841][T21370] __nla_validate_parse: 47 callbacks suppressed [ 703.762865][T21370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3585'. [ 704.229239][T21381] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3589'. [ 704.258788][T21381] netlink: 'syz.4.3589': attribute type 2 has an invalid length. [ 704.259020][T21378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'. [ 704.276878][T21383] lo: Caught tx_queue_len zero misconfig [ 704.294676][T21380] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3589'. [ 704.339039][T21380] netlink: 'syz.4.3589': attribute type 2 has an invalid length. [ 704.406318][T21388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3591'. [ 704.415577][T21388] openvswitch: netlink: Flow actions attr not present in new flow. [ 704.668509][T21391] bond4 (unregistering): Released all slaves [ 704.733441][T17423] block nbd3: Receive control failed (result -32) [ 705.069049][T21405] macsec0 speed is unknown, defaulting to 1000 [ 705.500949][T21416] syzkaller1: entered promiscuous mode [ 705.506491][T21416] syzkaller1: entered allmulticast mode [ 705.634487][T21426] netlink: 'syz.2.3598': attribute type 1 has an invalid length. [ 705.782120][T21426] bond4: entered promiscuous mode [ 705.788223][T21426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 706.206311][T21449] netlink: 'syz.4.3603': attribute type 21 has an invalid length. [ 706.370258][T21457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 706.764579][T21466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3608'. [ 706.901009][T21473] netlink: 'syz.4.3609': attribute type 12 has an invalid length. [ 707.032997][T21478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3609'. [ 707.080192][T21478] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3609'. [ 707.545357][T21489] netlink: 480 bytes leftover after parsing attributes in process `syz.4.3611'. [ 707.577675][T21488] netlink: 'syz.2.3612': attribute type 1 has an invalid length. [ 707.868391][T21488] 8021q: adding VLAN 0 to HW filter on device bond5 [ 708.372678][T21509] macsec0 speed is unknown, defaulting to 1000 [ 708.580357][T21523] FAULT_INJECTION: forcing a failure. [ 708.580357][T21523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.593884][T21523] CPU: 1 UID: 0 PID: 21523 Comm: syz.1.3620 Not tainted syzkaller #0 PREEMPT(full) [ 708.593914][T21523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 708.593926][T21523] Call Trace: [ 708.593935][T21523] [ 708.593943][T21523] dump_stack_lvl+0xe8/0x150 [ 708.593977][T21523] should_fail_ex+0x40c/0x560 [ 708.594019][T21523] _copy_from_user+0x2d/0xb0 [ 708.594044][T21523] __sys_bpf+0x229/0x950 [ 708.594079][T21523] ? __pfx___sys_bpf+0x10/0x10 [ 708.594135][T21523] ? ksys_write+0x242/0x270 [ 708.594171][T21523] ? __pfx_ksys_write+0x10/0x10 [ 708.594205][T21523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.594229][T21523] __x64_sys_bpf+0x7c/0x90 [ 708.594257][T21523] do_syscall_64+0x174/0x580 [ 708.594285][T21523] ? trace_irq_disable+0x3b/0x140 [ 708.594316][T21523] ? clear_bhb_loop+0x40/0x90 [ 708.594342][T21523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.594364][T21523] RIP: 0033:0x7f046e59ce59 [ 708.594385][T21523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.594404][T21523] RSP: 002b:00007f046f3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 708.594428][T21523] RAX: ffffffffffffffda RBX: 00007f046e815fa0 RCX: 00007f046e59ce59 [ 708.594444][T21523] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 708.594458][T21523] RBP: 00007f046f3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 708.594471][T21523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.594484][T21523] R13: 00007f046e816038 R14: 00007f046e815fa0 R15: 00007ffd2d68bcb8 [ 708.594520][T21523] [ 708.966119][T21526] netlink: 'syz.1.3621': attribute type 1 has an invalid length. [ 708.974198][T21526] __nla_validate_parse: 64 callbacks suppressed [ 708.974217][T21526] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3621'. [ 709.391866][T21535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3624'. [ 709.406300][T21539] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3627'. [ 709.424588][T21535] nbd: must specify a size in bytes for the device [ 709.439229][T21539] 0ªX¹¦À: renamed from batadv0 [ 709.463037][T21539] 0ªX¹¦À: entered allmulticast mode [ 709.479962][T21539] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 709.509083][T21539] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 709.695680][T21550] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3629'. [ 709.740793][T21555] x_tables: duplicate underflow at hook 1 [ 709.748439][T21550] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3629'. [ 709.972961][T21558] netlink: 'syz.0.3631': attribute type 1 has an invalid length. [ 710.230098][T21558] 8021q: adding VLAN 0 to HW filter on device bond4 [ 711.753851][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3644'. [ 712.070796][T21622] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3645'. [ 712.073650][T21621] sit0: left promiscuous mode [ 712.090893][T21621] 0ªX¹¦À: left allmulticast mode [ 712.112270][T21621] bridge2: left allmulticast mode [ 712.137363][T21621] bridge3: left allmulticast mode [ 712.150622][T21621] bond3: left allmulticast mode [ 712.168825][T21621] bond4: left promiscuous mode [ 712.717069][T21649] syzkaller1: entered promiscuous mode [ 712.730514][T21649] syzkaller1: entered allmulticast mode [ 712.893988][T21653] xfrm0: entered allmulticast mode [ 712.935823][T13701] tipc: Resetting bearer [ 713.489367][T21678] xt_hashlimit: size too large, truncated to 1048576 [ 714.515247][T21694] macsec0 speed is unknown, defaulting to 1000 [ 714.581627][T21708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3668'. [ 714.732925][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3668'. [ 715.774078][T21732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3673'. [ 715.787200][T21742] FAULT_INJECTION: forcing a failure. [ 715.787200][T21742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.827447][T21742] CPU: 0 UID: 0 PID: 21742 Comm: syz.2.3677 Not tainted syzkaller #0 PREEMPT(full) [ 715.827477][T21742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 715.827499][T21742] Call Trace: [ 715.827507][T21742] [ 715.827516][T21742] dump_stack_lvl+0xe8/0x150 [ 715.827548][T21742] should_fail_ex+0x40c/0x560 [ 715.827586][T21742] _copy_from_iter+0x1d3/0x1660 [ 715.827612][T21742] ? rcu_is_watching+0x15/0xb0 [ 715.827644][T21742] ? __pfx__copy_from_iter+0x10/0x10 [ 715.827663][T21742] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 715.827701][T21742] ? netlink_sendmsg+0x650/0xb40 [ 715.827728][T21742] ? skb_put+0x112/0x210 [ 715.827753][T21742] netlink_sendmsg+0x6c0/0xb40 [ 715.827788][T21742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.827816][T21742] ? aa_sock_msg_perm+0xf1/0x1b0 [ 715.827851][T21742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 715.827878][T21742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.827904][T21742] ____sys_sendmsg+0x9b9/0xa20 [ 715.827928][T21742] ? __might_fault+0xaf/0x130 [ 715.827961][T21742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.827992][T21742] ? import_iovec+0x73/0xa0 [ 715.828021][T21742] ___sys_sendmsg+0x2a5/0x360 [ 715.828043][T21742] ? __lock_acquire+0x683/0x2cd0 [ 715.828069][T21742] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.828130][T21742] ? __fget_files+0x2a/0x420 [ 715.828155][T21742] ? __fget_files+0x3a2/0x420 [ 715.828191][T21742] __x64_sys_sendmsg+0x1bd/0x2a0 [ 715.828214][T21742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 715.828246][T21742] ? __pfx_ksys_write+0x10/0x10 [ 715.828284][T21742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.828307][T21742] do_syscall_64+0x174/0x580 [ 715.828336][T21742] ? trace_irq_disable+0x3b/0x140 [ 715.828365][T21742] ? clear_bhb_loop+0x40/0x90 [ 715.828391][T21742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.828410][T21742] RIP: 0033:0x7f723139ce59 [ 715.828430][T21742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.828446][T21742] RSP: 002b:00007f72322f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.828470][T21742] RAX: ffffffffffffffda RBX: 00007f7231615fa0 RCX: 00007f723139ce59 [ 715.828492][T21742] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 715.828504][T21742] RBP: 00007f72322f2090 R08: 0000000000000000 R09: 0000000000000000 [ 715.828515][T21742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.828527][T21742] R13: 00007f7231616038 R14: 00007f7231615fa0 R15: 00007fffe4e78cf8 [ 715.828561][T21742] [ 716.307444][T21751] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 716.385314][T21755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3681'. [ 716.526360][T21758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3682'. [ 716.654911][T21756] bond5: option arp_interval: invalid value (18446744073709551615) [ 716.690936][T21756] bond5: option arp_interval: allowed values 0 - 2147483647 [ 716.722244][T21756] bond5 (unregistering): Released all slaves [ 717.287395][T21784] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 717.732799][T21799] FAULT_INJECTION: forcing a failure. [ 717.732799][T21799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.774405][T21799] CPU: 1 UID: 0 PID: 21799 Comm: syz.4.3692 Not tainted syzkaller #0 PREEMPT(full) [ 717.774437][T21799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 717.774449][T21799] Call Trace: [ 717.774457][T21799] [ 717.774467][T21799] dump_stack_lvl+0xe8/0x150 [ 717.774508][T21799] should_fail_ex+0x40c/0x560 [ 717.774548][T21799] _copy_from_iter+0x1d3/0x1660 [ 717.774575][T21799] ? rcu_is_watching+0x15/0xb0 [ 717.774605][T21799] ? __pfx__copy_from_iter+0x10/0x10 [ 717.774624][T21799] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 717.774664][T21799] ? netlink_sendmsg+0x650/0xb40 [ 717.774687][T21799] ? skb_put+0x112/0x210 [ 717.774711][T21799] netlink_sendmsg+0x6c0/0xb40 [ 717.774744][T21799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.774771][T21799] ? aa_sock_msg_perm+0xf1/0x1b0 [ 717.774802][T21799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 717.774827][T21799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.774850][T21799] ____sys_sendmsg+0x9b9/0xa20 [ 717.774871][T21799] ? __might_fault+0xaf/0x130 [ 717.774904][T21799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.774936][T21799] ? import_iovec+0x73/0xa0 [ 717.774963][T21799] ___sys_sendmsg+0x2a5/0x360 [ 717.774982][T21799] ? __lock_acquire+0x683/0x2cd0 [ 717.775009][T21799] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.775071][T21799] ? __fget_files+0x2a/0x420 [ 717.775095][T21799] ? __fget_files+0x3a2/0x420 [ 717.775131][T21799] __x64_sys_sendmsg+0x1bd/0x2a0 [ 717.775156][T21799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.775189][T21799] ? __pfx_ksys_write+0x10/0x10 [ 717.775228][T21799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.775249][T21799] do_syscall_64+0x174/0x580 [ 717.775273][T21799] ? trace_irq_disable+0x3b/0x140 [ 717.775302][T21799] ? clear_bhb_loop+0x40/0x90 [ 717.775328][T21799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.775348][T21799] RIP: 0033:0x7f9a3179ce59 [ 717.775368][T21799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.775386][T21799] RSP: 002b:00007f9a32743028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.775409][T21799] RAX: ffffffffffffffda RBX: 00007f9a31a15fa0 RCX: 00007f9a3179ce59 [ 717.775424][T21799] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 717.775436][T21799] RBP: 00007f9a32743090 R08: 0000000000000000 R09: 0000000000000000 [ 717.775447][T21799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.775460][T21799] R13: 00007f9a31a16038 R14: 00007f9a31a15fa0 R15: 00007ffd859f99d8 [ 717.775503][T21799] [ 718.240863][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3694'. [ 718.361606][T21804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3694'. [ 718.420102][T21819] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3697'. [ 718.472630][T21822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3693'. [ 718.690295][T21828] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3698'. [ 718.859670][T21819] macsec0 speed is unknown, defaulting to 1000 [ 719.244010][T21841] vxcan2: entered allmulticast mode [ 719.724343][T21825] pimreg: entered allmulticast mode [ 720.235869][T21878] netlink: 'syz.3.3718': attribute type 1 has an invalid length. [ 720.264223][T21878] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 721.255586][T21906] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 721.858786][T21924] netlink: 'syz.3.3732': attribute type 3 has an invalid length. [ 721.894522][T21924] __nla_validate_parse: 1 callbacks suppressed [ 721.894542][T21924] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3732'. [ 722.395213][T21934] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.403047][T21934] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.767177][T21934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.798724][T21934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.880699][T21962] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3742'. [ 723.225085][T13700] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.253360][T13700] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.285618][T13700] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.344860][T13700] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.389507][T13706] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.430208][T13706] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.475360][T13706] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.542714][T13706] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.602258][T21986] netlink: 'syz.1.3747': attribute type 1 has an invalid length. [ 723.613887][T21980] syzkaller0: entered promiscuous mode [ 723.648926][T21980] syzkaller0: entered allmulticast mode [ 724.068875][T22013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3754'. [ 724.531159][T22032] netlink: 'syz.0.3757': attribute type 11 has an invalid length. [ 724.546832][T22038] netlink: 296 bytes leftover after parsing attributes in process `syz.3.3758'. [ 725.035429][T22056] syzkaller0: entered promiscuous mode [ 725.045738][T22056] syzkaller0: entered allmulticast mode [ 725.060813][T22059] netlink: 'syz.2.3766': attribute type 1 has an invalid length. [ 725.072170][T22059] netlink: 'syz.2.3766': attribute type 2 has an invalid length. [ 725.733994][T22086] FAULT_INJECTION: forcing a failure. [ 725.733994][T22086] name failslab, interval 1, probability 0, space 0, times 0 [ 725.748471][T22086] CPU: 1 UID: 0 PID: 22086 Comm: syz.3.3776 Not tainted syzkaller #0 PREEMPT(full) [ 725.748500][T22086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 725.748513][T22086] Call Trace: [ 725.748522][T22086] [ 725.748531][T22086] dump_stack_lvl+0xe8/0x150 [ 725.748562][T22086] should_fail_ex+0x40c/0x560 [ 725.748602][T22086] should_failslab+0xa8/0x100 [ 725.748624][T22086] __kmalloc_noprof+0xe8/0x750 [ 725.748654][T22086] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 725.748692][T22086] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 725.748729][T22086] genl_family_rcv_msg_doit+0xda/0x340 [ 725.748765][T22086] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 725.748801][T22086] ? apparmor_capable+0x126/0x170 [ 725.748827][T22086] ? bpf_lsm_capable+0x9/0x20 [ 725.748847][T22086] ? security_capable+0x7e/0x2c0 [ 725.748885][T22086] genl_rcv_msg+0x614/0x7a0 [ 725.748920][T22086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 725.748946][T22086] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 725.749098][T22086] ? __pfx_nl80211_new_key+0x10/0x10 [ 725.749126][T22086] ? __pfx_nl80211_post_doit+0x10/0x10 [ 725.749155][T22086] ? __pfx_ref_tracker_free+0x10/0x10 [ 725.749191][T22086] netlink_rcv_skb+0x226/0x4a0 [ 725.749219][T22086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 725.749248][T22086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 725.749290][T22086] ? down_read+0x270/0x2e0 [ 725.749316][T22086] ? genl_rcv+0xd/0x40 [ 725.749344][T22086] genl_rcv+0x28/0x40 [ 725.749368][T22086] netlink_unicast+0x7bb/0x940 [ 725.749412][T22086] netlink_sendmsg+0x813/0xb40 [ 725.749446][T22086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.749473][T22086] ? aa_sock_msg_perm+0xf1/0x1b0 [ 725.749503][T22086] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 725.749528][T22086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.749553][T22086] ____sys_sendmsg+0x9b9/0xa20 [ 725.749576][T22086] ? __might_fault+0xaf/0x130 [ 725.749610][T22086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.749644][T22086] ? import_iovec+0x73/0xa0 [ 725.749672][T22086] ___sys_sendmsg+0x2a5/0x360 [ 725.749692][T22086] ? __lock_acquire+0x683/0x2cd0 [ 725.749719][T22086] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.749783][T22086] ? __fget_files+0x2a/0x420 [ 725.749808][T22086] ? __fget_files+0x3a2/0x420 [ 725.749844][T22086] __x64_sys_sendmsg+0x1bd/0x2a0 [ 725.749869][T22086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 725.749902][T22086] ? __pfx_ksys_write+0x10/0x10 [ 725.749943][T22086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.749974][T22086] do_syscall_64+0x174/0x580 [ 725.749998][T22086] ? trace_irq_disable+0x3b/0x140 [ 725.750028][T22086] ? clear_bhb_loop+0x40/0x90 [ 725.750054][T22086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.750074][T22086] RIP: 0033:0x7fddbc19ce59 [ 725.750096][T22086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.750114][T22086] RSP: 002b:00007fddbd00b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 725.750138][T22086] RAX: ffffffffffffffda RBX: 00007fddbc415fa0 RCX: 00007fddbc19ce59 [ 725.750153][T22086] RDX: 0000000024046050 RSI: 0000200000008ac0 RDI: 0000000000000005 [ 725.750167][T22086] RBP: 00007fddbd00b090 R08: 0000000000000000 R09: 0000000000000000 [ 725.750180][T22086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.750192][T22086] R13: 00007fddbc416038 R14: 00007fddbc415fa0 R15: 00007ffd1967c048 [ 725.750229][T22086] [ 726.187970][T22076] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3773'. [ 726.258117][T22076] netlink: 'syz.1.3773': attribute type 4 has an invalid length. [ 726.270474][T22076] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3773'. [ 726.295393][T22091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3779'. [ 726.312823][T22076] .`: renamed from bond0 (while UP) [ 726.355002][T22091] ip6gre2: entered promiscuous mode [ 726.362485][T22091] ip6gre2: entered allmulticast mode [ 727.276133][T22136] netlink: 'syz.1.3792': attribute type 1 has an invalid length. [ 727.299801][T22136] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3792'. [ 727.344539][T22136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3792'. [ 727.539695][T22147] tipc: Enabled bearer , priority 0 [ 727.564954][T22147] syzkaller0: entered promiscuous mode [ 727.583155][T22147] syzkaller0: entered allmulticast mode [ 727.731214][T22147] tipc: Resetting bearer [ 727.769565][T22146] tipc: Resetting bearer [ 727.803080][T22146] tipc: Disabling bearer [ 728.005724][T22163] veth3: entered promiscuous mode [ 731.678994][T22191] macsec0 speed is unknown, defaulting to 1000 [ 732.091563][T22250] FAULT_INJECTION: forcing a failure. [ 732.091563][T22250] name failslab, interval 1, probability 0, space 0, times 0 [ 732.129251][T22250] CPU: 1 UID: 0 PID: 22250 Comm: syz.4.3815 Not tainted syzkaller #0 PREEMPT(full) [ 732.129280][T22250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 732.129292][T22250] Call Trace: [ 732.129300][T22250] [ 732.129308][T22250] dump_stack_lvl+0xe8/0x150 [ 732.129338][T22250] should_fail_ex+0x40c/0x560 [ 732.129374][T22250] should_failslab+0xa8/0x100 [ 732.129395][T22250] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 732.129424][T22250] ? __alloc_skb+0x1d7/0x7a0 [ 732.129452][T22250] ? __local_bh_enable_ip+0xd0/0x130 [ 732.129480][T22250] __alloc_skb+0x1d7/0x7a0 [ 732.129516][T22250] netlink_ack+0x136/0xb30 [ 732.129536][T22250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.129564][T22250] ? __pfx_nl80211_post_doit+0x10/0x10 [ 732.129595][T22250] ? __pfx_ref_tracker_free+0x10/0x10 [ 732.129629][T22250] netlink_rcv_skb+0x2a4/0x4a0 [ 732.129653][T22250] ? __pfx_genl_rcv_msg+0x10/0x10 [ 732.129683][T22250] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 732.129726][T22250] ? down_read+0x270/0x2e0 [ 732.129752][T22250] ? genl_rcv+0xd/0x40 [ 732.129781][T22250] genl_rcv+0x28/0x40 [ 732.129807][T22250] netlink_unicast+0x7bb/0x940 [ 732.129851][T22250] netlink_sendmsg+0x813/0xb40 [ 732.129886][T22250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.129914][T22250] ? aa_sock_msg_perm+0xf1/0x1b0 [ 732.129946][T22250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 732.129972][T22250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 732.129998][T22250] ____sys_sendmsg+0x9b9/0xa20 [ 732.130020][T22250] ? __might_fault+0xaf/0x130 [ 732.130055][T22250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 732.130089][T22250] ? import_iovec+0x73/0xa0 [ 732.130125][T22250] ___sys_sendmsg+0x2a5/0x360 [ 732.130146][T22250] ? __lock_acquire+0x683/0x2cd0 [ 732.130172][T22250] ? __pfx____sys_sendmsg+0x10/0x10 [ 732.130236][T22250] ? __fget_files+0x2a/0x420 [ 732.130260][T22250] ? __fget_files+0x3a2/0x420 [ 732.130294][T22250] __x64_sys_sendmsg+0x1bd/0x2a0 [ 732.130320][T22250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 732.130353][T22250] ? __pfx_ksys_write+0x10/0x10 [ 732.130392][T22250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.130432][T22250] do_syscall_64+0x174/0x580 [ 732.130455][T22250] ? trace_irq_disable+0x3b/0x140 [ 732.130484][T22250] ? clear_bhb_loop+0x40/0x90 [ 732.130509][T22250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.130530][T22250] RIP: 0033:0x7f9a3179ce59 [ 732.130549][T22250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.130567][T22250] RSP: 002b:00007f9a32743028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.130589][T22250] RAX: ffffffffffffffda RBX: 00007f9a31a15fa0 RCX: 00007f9a3179ce59 [ 732.130604][T22250] RDX: 0000000024046050 RSI: 0000200000008ac0 RDI: 0000000000000005 [ 732.130617][T22250] RBP: 00007f9a32743090 R08: 0000000000000000 R09: 0000000000000000 [ 732.130629][T22250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.130640][T22250] R13: 00007f9a31a16038 R14: 00007f9a31a15fa0 R15: 00007ffd859f99d8 [ 732.130676][T22250] [ 732.518402][T22257] netlink: 'syz.3.3818': attribute type 10 has an invalid length. [ 732.699879][T22257] bridge0: port 3(netdevsim1) entered blocking state [ 732.710711][T22257] bridge0: port 3(netdevsim1) entered disabled state [ 732.717817][T22257] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 732.728736][T22257] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 733.206516][T22286] netlink: 176884 bytes leftover after parsing attributes in process `syz.4.3829'. [ 733.289455][T22295] netlink: 'syz.3.3833': attribute type 2 has an invalid length. [ 733.606470][T22305] syzkaller1: entered promiscuous mode [ 733.641543][T22305] syzkaller1: entered allmulticast mode [ 733.659240][T22302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3836'. [ 733.691742][T22302] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 734.072763][T22321] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3839'. [ 734.102333][T22321] netlink: Conntrack attr has 3 unknown bytes [ 734.160778][T22324] tun0: tun_chr_ioctl cmd 2148553947 [ 734.592601][T22337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3846'. [ 734.725290][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 734.750782][T22341] netlink: 'syz.1.3848': attribute type 10 has an invalid length. [ 734.786114][T22341] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.796161][T22341] .`: (slave team0): Enslaving as an active interface with an up link [ 734.813354][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 734.833057][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 734.853161][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 734.880592][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3847'. [ 735.035244][T22350] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3849'. [ 735.060168][T22353] lo: entered allmulticast mode [ 735.065418][T22353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 735.937113][T22369] veth0_macvtap: Caught tx_queue_len zero misconfig [ 736.221110][T22380] IPv6: NLM_F_CREATE should be specified when creating new route [ 736.244913][T22376] bond0: entered promiscuous mode [ 736.267519][T22376] batadv_slave_0: entered promiscuous mode [ 736.285214][T22376] debugfs: 'hsr1' already exists in 'hsr' [ 736.297818][T22376] Cannot create hsr debugfs directory [ 736.312994][T22381] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 736.330365][T22381] syzkaller1: linktype set to 1 [ 736.551892][T22384] bond6: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 736.622714][T22384] bond6 (unregistering): Released all slaves [ 737.141276][T22412] syzkaller1: entered promiscuous mode [ 737.160124][T22412] syzkaller1: entered allmulticast mode [ 738.329803][T22460] __nla_validate_parse: 4 callbacks suppressed [ 738.329824][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 738.383879][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3882'. [ 738.543749][T22475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3885'. [ 738.642122][T22482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3886'. [ 738.704591][T22460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.860984][T22499] netlink: 'syz.3.3886': attribute type 8 has an invalid length. [ 739.581014][T22518] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 739.623322][T22518] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 739.656454][T22518] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 740.014886][T22534] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3897'. [ 740.406226][T22548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3901'. [ 740.534061][T22556] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3905'. [ 740.539500][T22548] macsec0 speed is unknown, defaulting to 1000 [ 740.630763][T22556] tipc: Resetting bearer [ 740.701296][T22564] FAULT_INJECTION: forcing a failure. [ 740.701296][T22564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.748156][T22564] CPU: 0 UID: 0 PID: 22564 Comm: syz.2.3907 Not tainted syzkaller #0 PREEMPT(full) [ 740.748189][T22564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 740.748202][T22564] Call Trace: [ 740.748212][T22564] [ 740.748221][T22564] dump_stack_lvl+0xe8/0x150 [ 740.748251][T22564] should_fail_ex+0x40c/0x560 [ 740.748290][T22564] _copy_from_user+0x2d/0xb0 [ 740.748312][T22564] dev_ethtool+0xdb/0x2930 [ 740.748405][T22564] ? __lock_acquire+0x683/0x2cd0 [ 740.748443][T22564] ? __pfx_dev_ethtool+0x10/0x10 [ 740.748472][T22564] ? kasan_quarantine_put+0xbb/0x1f0 [ 740.748514][T22564] ? dev_load+0x21/0x1f0 [ 740.748583][T22564] ? dev_load+0x21/0x1f0 [ 740.748615][T22564] ? dev_load+0x21/0x1f0 [ 740.748647][T22564] dev_ioctl+0x392/0x1150 [ 740.748684][T22564] sock_do_ioctl+0x23e/0x320 [ 740.748714][T22564] ? __pfx_sock_do_ioctl+0x10/0x10 [ 740.748739][T22564] ? hook_file_ioctl+0x1f0/0x5c0 [ 740.748788][T22564] sock_ioctl+0x57a/0x7e0 [ 740.748817][T22564] ? __pfx_sock_ioctl+0x10/0x10 [ 740.748843][T22564] ? __fget_files+0x2a/0x420 [ 740.748869][T22564] ? __fget_files+0x3a2/0x420 [ 740.748892][T22564] ? __fget_files+0x2a/0x420 [ 740.748922][T22564] ? bpf_lsm_file_ioctl+0x9/0x20 [ 740.748953][T22564] ? __pfx_sock_ioctl+0x10/0x10 [ 740.748976][T22564] __se_sys_ioctl+0xfc/0x170 [ 740.749007][T22564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.749030][T22564] do_syscall_64+0x174/0x580 [ 740.749054][T22564] ? trace_irq_disable+0x3b/0x140 [ 740.749083][T22564] ? clear_bhb_loop+0x40/0x90 [ 740.749108][T22564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.749129][T22564] RIP: 0033:0x7f723139ce59 [ 740.749161][T22564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.749179][T22564] RSP: 002b:00007f72322f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.749202][T22564] RAX: ffffffffffffffda RBX: 00007f7231615fa0 RCX: 00007f723139ce59 [ 740.749217][T22564] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003 [ 740.749230][T22564] RBP: 00007f72322f2090 R08: 0000000000000000 R09: 0000000000000000 [ 740.749243][T22564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.749255][T22564] R13: 00007f7231616038 R14: 00007f7231615fa0 R15: 00007fffe4e78cf8 [ 740.749290][T22564] [ 741.181525][T22567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3908'. [ 741.511306][T22578] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20002 [ 742.344082][T22612] FAULT_INJECTION: forcing a failure. [ 742.344082][T22612] name failslab, interval 1, probability 0, space 0, times 0 [ 742.381726][T22612] CPU: 0 UID: 0 PID: 22612 Comm: syz.1.3921 Not tainted syzkaller #0 PREEMPT(full) [ 742.381759][T22612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 742.381772][T22612] Call Trace: [ 742.381780][T22612] [ 742.381789][T22612] dump_stack_lvl+0xe8/0x150 [ 742.381821][T22612] should_fail_ex+0x40c/0x560 [ 742.381860][T22612] should_failslab+0xa8/0x100 [ 742.381884][T22612] __kmalloc_cache_noprof+0x88/0x660 [ 742.381914][T22612] ? dev_ethtool+0x13f/0x2930 [ 742.381946][T22612] dev_ethtool+0x13f/0x2930 [ 742.381972][T22612] ? __lock_acquire+0x683/0x2cd0 [ 742.382011][T22612] ? __pfx_dev_ethtool+0x10/0x10 [ 742.382038][T22612] ? kasan_quarantine_put+0xbb/0x1f0 [ 742.382070][T22612] ? dev_load+0x21/0x1f0 [ 742.382113][T22612] ? dev_load+0x21/0x1f0 [ 742.382144][T22612] ? dev_load+0x21/0x1f0 [ 742.382176][T22612] dev_ioctl+0x392/0x1150 [ 742.382211][T22612] sock_do_ioctl+0x23e/0x320 [ 742.382242][T22612] ? __pfx_sock_do_ioctl+0x10/0x10 [ 742.382265][T22612] ? hook_file_ioctl+0x1f0/0x5c0 [ 742.382311][T22612] sock_ioctl+0x57a/0x7e0 [ 742.382339][T22612] ? __pfx_sock_ioctl+0x10/0x10 [ 742.382366][T22612] ? __fget_files+0x2a/0x420 [ 742.382400][T22612] ? __fget_files+0x3a2/0x420 [ 742.382424][T22612] ? __fget_files+0x2a/0x420 [ 742.382454][T22612] ? bpf_lsm_file_ioctl+0x9/0x20 [ 742.382484][T22612] ? __pfx_sock_ioctl+0x10/0x10 [ 742.382510][T22612] __se_sys_ioctl+0xfc/0x170 [ 742.382539][T22612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.382562][T22612] do_syscall_64+0x174/0x580 [ 742.382587][T22612] ? trace_irq_disable+0x3b/0x140 [ 742.382615][T22612] ? clear_bhb_loop+0x40/0x90 [ 742.382641][T22612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.382660][T22612] RIP: 0033:0x7f046e59ce59 [ 742.382682][T22612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.382699][T22612] RSP: 002b:00007f046f3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 742.382721][T22612] RAX: ffffffffffffffda RBX: 00007f046e815fa0 RCX: 00007f046e59ce59 [ 742.382737][T22612] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000003 [ 742.382750][T22612] RBP: 00007f046f3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 742.382769][T22612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.382782][T22612] R13: 00007f046e816038 R14: 00007f046e815fa0 R15: 00007ffd2d68bcb8 [ 742.382817][T22612] [ 742.674998][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3922'. [ 742.917399][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3924'. [ 742.928899][T22618] bond4: option ad_actor_sys_prio: invalid value (0) [ 742.935646][T22618] bond4: option ad_actor_sys_prio: allowed values 1 - 65535 [ 742.951597][T22618] bond4 (unregistering): Released all slaves [ 742.988485][T22629] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 742.999320][T22629] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.405831][T22642] netlink: 'syz.2.3925': attribute type 2 has an invalid length. [ 743.456960][T22637] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 743.620602][T22649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3930'. [ 743.630533][T22644] syzkaller0: entered promiscuous mode [ 743.697195][T22644] syzkaller0: entered allmulticast mode [ 743.742504][T22649] netlink: 'syz.0.3930': attribute type 5 has an invalid length. [ 744.068033][T22665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3935'. [ 744.303251][T22678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3934'. [ 744.506418][T22665] vlan2: entered promiscuous mode [ 744.517064][T22665] vlan2: entered allmulticast mode [ 744.536903][T22665] geneve1: entered allmulticast mode [ 744.712526][T22692] netlink: 'syz.0.3941': attribute type 2 has an invalid length. [ 744.721463][T22692] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3941'. [ 744.768971][T22693] sctp: [Deprecated]: syz.2.3940 (pid 22693) Use of int in maxseg socket option. [ 744.768971][T22693] Use struct sctp_assoc_value instead [ 744.952804][T22696] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3942'. [ 745.126001][T22701] tipc: New replicast peer: 255.255.255.255 [ 745.150539][T22701] tipc: Enabled bearer , priority 10 [ 745.450957][T22715] netlink: 'syz.1.3947': attribute type 10 has an invalid length. [ 745.473118][T22715] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3947'. [ 745.766511][T22727] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3949'. [ 745.790198][T22726] sctp: [Deprecated]: syz.1.3951 (pid 22726) Use of int in max_burst socket option deprecated. [ 745.790198][T22726] Use struct sctp_assoc_value instead [ 746.157471][T22737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3952'. [ 746.215918][T22737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3952'. [ 746.288930][ T7246] tipc: Node number set to 1616514100 [ 746.300978][T22711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3946'. [ 746.369976][T22738] macsec0 speed is unknown, defaulting to 1000 [ 747.357487][T22758] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 749.102345][T22824] __nla_validate_parse: 34 callbacks suppressed [ 749.102369][T22824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3972'. [ 749.223139][T22828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3975'. [ 749.251942][T22828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3975'. [ 749.302154][T22828] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3975'. [ 749.832829][T22852] netlink: 'syz.0.3980': attribute type 13 has an invalid length. [ 749.852858][T22852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3980'. [ 749.949926][T22850] xt_CT: No such helper "netbios-ns" [ 750.605940][T22874] syzkaller0: entered promiscuous mode [ 750.631114][T22874] syzkaller0: entered allmulticast mode [ 750.665225][T22879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3986'. [ 750.702737][T22869] macsec0 speed is unknown, defaulting to 1000 [ 751.211894][T22892] netlink: 'syz.0.3988': attribute type 1 has an invalid length. [ 751.231961][T22887] netlink: 'syz.1.3989': attribute type 41 has an invalid length. [ 751.361249][T22892] 8021q: adding VLAN 0 to HW filter on device bond5 [ 751.495350][T22907] netlink: 'syz.3.3991': attribute type 1 has an invalid length. [ 751.526358][T22907] netlink: 'syz.3.3991': attribute type 3 has an invalid length. [ 751.537330][T22907] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3991'. [ 751.600442][T22907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3991'. [ 751.811413][T22919] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 751.855765][T22919] netlink: 'syz.0.3995': attribute type 12 has an invalid length. [ 751.877220][T22921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3996'. [ 751.889577][T22919] netlink: 'syz.0.3995': attribute type 29 has an invalid length. [ 751.908614][T22919] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3995'. [ 752.421041][T22946] netlink: 'syz.0.4002': attribute type 21 has an invalid length. [ 752.443047][T22946] netlink: 'syz.0.4002': attribute type 4 has an invalid length. [ 752.451600][T22946] netlink: 'syz.0.4002': attribute type 5 has an invalid length. [ 752.522668][T22948] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 752.540887][ T24] IPVS: starting estimator thread 0... [ 752.617553][T22949] ip6gre3: entered allmulticast mode [ 752.646904][T22950] IPVS: using max 25 ests per chain, 60000 per kthread [ 752.823004][T22953] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.508539][T22963] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 754.021293][T22986] geneve0: Caught tx_queue_len zero misconfig [ 754.393741][T23004] __nla_validate_parse: 10 callbacks suppressed [ 754.393765][T23004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4015'. [ 754.802747][T23019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4019'. [ 754.832827][T23016] macsec0 speed is unknown, defaulting to 1000 [ 754.847715][T23019] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 754.893240][T23022] FAULT_INJECTION: forcing a failure. [ 754.893240][T23022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.931108][T23022] CPU: 0 UID: 0 PID: 23022 Comm: syz.2.4020 Not tainted syzkaller #0 PREEMPT(full) [ 754.931139][T23022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 754.931153][T23022] Call Trace: [ 754.931162][T23022] [ 754.931171][T23022] dump_stack_lvl+0xe8/0x150 [ 754.931202][T23022] should_fail_ex+0x40c/0x560 [ 754.931241][T23022] _copy_from_iter+0x1d3/0x1660 [ 754.931261][T23022] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 754.931285][T23022] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 754.931303][T23022] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 754.931329][T23022] ? rcu_is_watching+0x15/0xb0 [ 754.931354][T23022] ? __pfx__copy_from_iter+0x10/0x10 [ 754.931372][T23022] ? trace_kmalloc+0x2a/0xf0 [ 754.931401][T23022] ? __kmalloc_noprof+0x379/0x750 [ 754.931430][T23022] ? bcm_rx_setup+0x70d/0x1ee0 [ 754.931555][T23022] bcm_rx_setup+0x87d/0x1ee0 [ 754.931586][T23022] ? lock_sock_nested+0x6a/0x100 [ 754.931614][T23022] ? __pfx_bcm_rx_setup+0x10/0x10 [ 754.931677][T23022] ? bcm_sendmsg+0x20e/0x6a0 [ 754.931707][T23022] ? __local_bh_enable_ip+0xd0/0x130 [ 754.931733][T23022] bcm_sendmsg+0x264/0x6a0 [ 754.931765][T23022] ? __pfx_bcm_sendmsg+0x10/0x10 [ 754.931803][T23022] ? aa_sock_msg_perm+0xf1/0x1b0 [ 754.931836][T23022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 754.931863][T23022] ? __pfx_bcm_sendmsg+0x10/0x10 [ 754.931895][T23022] ____sys_sendmsg+0x9b9/0xa20 [ 754.931929][T23022] ? __might_fault+0xaf/0x130 [ 754.931964][T23022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 754.931997][T23022] ? import_iovec+0x73/0xa0 [ 754.932023][T23022] ___sys_sendmsg+0x2a5/0x360 [ 754.932043][T23022] ? __lock_acquire+0x683/0x2cd0 [ 754.932068][T23022] ? __pfx____sys_sendmsg+0x10/0x10 [ 754.932128][T23022] ? __fget_files+0x2a/0x420 [ 754.932152][T23022] ? __fget_files+0x3a2/0x420 [ 754.932186][T23022] __x64_sys_sendmsg+0x1bd/0x2a0 [ 754.932211][T23022] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 754.932243][T23022] ? __pfx_ksys_write+0x10/0x10 [ 754.932280][T23022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.932302][T23022] do_syscall_64+0x174/0x580 [ 754.932324][T23022] ? trace_irq_disable+0x3b/0x140 [ 754.932352][T23022] ? clear_bhb_loop+0x40/0x90 [ 754.932377][T23022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.932397][T23022] RIP: 0033:0x7f723139ce59 [ 754.932416][T23022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.932433][T23022] RSP: 002b:00007f72322f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.932456][T23022] RAX: ffffffffffffffda RBX: 00007f7231615fa0 RCX: 00007f723139ce59 [ 754.932470][T23022] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 754.932483][T23022] RBP: 00007f72322f2090 R08: 0000000000000000 R09: 0000000000000000 [ 754.932495][T23022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.932507][T23022] R13: 00007f7231616038 R14: 00007f7231615fa0 R15: 00007fffe4e78cf8 [ 754.932542][T23022] [ 754.941741][T23019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4019'. [ 756.073432][T23050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4025'. [ 756.183521][T23050] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 756.241136][T23050] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 756.303856][T23023] Cannot find del_set index 4 as target [ 756.737288][T23061] xt_connbytes: Forcing CT accounting to be enabled [ 756.763962][T23061] xt_CT: You must specify a L4 protocol and not use inversions on it [ 757.152689][T23071] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4031'. [ 757.186942][T23071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4031'. [ 757.489512][T23077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4032'. [ 757.520321][T23077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4032'. [ 757.541572][T23077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4032'. [ 757.568352][T23077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4032'. [ 758.656747][T23117] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 759.093636][T23148] xt_hashlimit: size too large, truncated to 1048576 [ 759.359848][T23158] validate_nla: 2 callbacks suppressed [ 759.359872][T23158] netlink: 'syz.1.4048': attribute type 21 has an invalid length. [ 759.521363][T23158] netlink: 'syz.1.4048': attribute type 6 has an invalid length. [ 759.546789][T23158] __nla_validate_parse: 1 callbacks suppressed [ 759.546811][T23158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4048'. [ 760.094105][T23184] xt_hashlimit: size too large, truncated to 1048576 [ 761.235306][T23211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4061'. [ 761.276053][T23211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4061'. [ 761.690388][T23228] netlink: 45 bytes leftover after parsing attributes in process `syz.3.4065'. [ 762.622897][T23268] netlink: 'syz.1.4071': attribute type 1 has an invalid length. [ 762.652596][T23268] netlink: 'syz.1.4071': attribute type 3 has an invalid length. [ 762.661558][T23268] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4071'. [ 762.682275][T23268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4071'. [ 762.804564][T23273] netlink: 'syz.2.4073': attribute type 1 has an invalid length. [ 763.045637][T23279] ip6gre1: entered promiscuous mode [ 763.068667][T23279] ip6gre1: entered allmulticast mode [ 763.184686][T23283] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 763.457290][T23293] netlink: 'syz.3.4079': attribute type 11 has an invalid length. [ 763.491226][T23293] netlink: 'syz.3.4079': attribute type 4 has an invalid length. [ 763.518973][T23293] netlink: 'syz.3.4079': attribute type 6 has an invalid length. [ 763.550695][T23293] netlink: 199556 bytes leftover after parsing attributes in process `syz.3.4079'. [ 763.882812][T23304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4081'. [ 763.959822][T23307] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 763.996147][T23304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 764.083345][T23304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.369235][T23319] netlink: 'syz.4.4086': attribute type 1 has an invalid length. [ 764.378191][T23319] netlink: 'syz.4.4086': attribute type 3 has an invalid length. [ 764.386266][T23319] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4086'. [ 764.399789][T23319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4086'. [ 765.158286][T13708] batman_adv: batadv_iv_ogm_emit: mesh interface switch for queued OGM [ 765.443369][T23338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4091'. [ 768.174255][T23325] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 768.190992][T23327] team0: No ports can be present during mode change [ 768.440533][T23348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 768.498930][T23348] openvswitch: netlink: Flow actions attr not present in new flow. [ 768.500172][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4093'. [ 768.538645][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4093'. [ 768.560253][T23348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 768.709036][T23363] bridge3: entered allmulticast mode [ 768.920290][ T7246] IPVS: starting estimator thread 0... [ 768.965812][T23372] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4097'. [ 769.019451][T23372] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4097'. [ 769.047108][T23373] IPVS: using max 28 ests per chain, 67200 per kthread [ 769.224025][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4100'. [ 769.293569][T23389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4101'. [ 769.312206][T23382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4100'. [ 769.365079][T23389] bridge8: entered promiscuous mode [ 769.388617][T23389] bridge8: entered allmulticast mode [ 769.444983][T23399] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:19999 [ 769.453200][T23389] team0: Port device bridge8 added [ 769.721001][T23384] bridge9: entered promiscuous mode [ 769.745102][T23384] bridge9: entered allmulticast mode [ 769.784278][T23384] team0: Port device bridge9 added [ 769.896427][T23411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4106'. [ 770.144459][T23425] 8021q: VLANs not supported on vxcan1 [ 770.229188][T23414] syzkaller1: entered promiscuous mode [ 770.252310][T23414] syzkaller1: entered allmulticast mode [ 770.316503][T23438] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4112'. [ 770.603624][T23447] netlink: 'syz.4.4113': attribute type 1 has an invalid length. [ 770.885269][T23467] netlink: 'syz.4.4113': attribute type 8 has an invalid length. [ 771.275736][T23478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.333526][T23480] __nla_validate_parse: 1 callbacks suppressed [ 771.333547][T23480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4120'. [ 771.413317][T23489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4120'. [ 771.923716][T23507] macsec0 speed is unknown, defaulting to 1000 [ 772.231266][T23520] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4133'. [ 772.644275][T23531] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4135'. [ 772.787258][T23535] veth1_to_bond: Caught tx_queue_len zero misconfig [ 772.899955][T23541] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4139'. [ 772.925307][T23541] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4139'. [ 772.945654][T23541] netlink: 'syz.1.4139': attribute type 10 has an invalid length. [ 773.263367][T23555] sock: sock_timestamping_bind_phc: sock not bind to device [ 773.555883][T23563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4143'. [ 773.614244][T23555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 773.626526][T23555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.649430][T23565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4143'. [ 773.824939][T23555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 773.837983][T23555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.173197][T23555] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 774.182685][T23555] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 774.201266][T23555] bridge0: port 3(netdevsim1) entered disabled state [ 774.231827][T23555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.242412][T23555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.422663][T23555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 774.444302][T23555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.583183][T23580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4148'. [ 774.626158][T23582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4149'. [ 774.951857][T23550] infiniband uyz0: set active [ 774.981844][T23550] infiniband uyz0: added bridge_slave_1 [ 775.011187][T23550] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 775.025112][T23550] infiniband uyz0: Couldn't open port 1 [ 775.046160][T23550] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 775.067023][T23550] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 775.088259][T23550] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 775.202021][T13700] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 775.232409][T13700] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.243091][T13700] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.252517][T23550] RDS/IB: uyz0: added [ 775.312039][T23550] smc: adding ib device uyz0 with port count 1 [ 775.336794][T23550] smc: ib device uyz0 port 1 has no pnetid [ 775.577707][T13700] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 775.634599][ T6069] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.654240][ T6069] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.679874][T23585] macsec0 speed is unknown, defaulting to 1000 [ 775.686169][ T6069] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 775.716930][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 775.842937][ T6069] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.878733][ T6069] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.903507][ T6069] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.923745][ T6069] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.963288][ T6069] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 776.491294][T23611] __nla_validate_parse: 2 callbacks suppressed [ 776.491318][T23611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4153'. [ 776.698108][T23611] tipc: Enabled bearer , priority 0 [ 776.716950][T23611] tipc: Resetting bearer [ 776.825689][T23610] tipc: Disabling bearer [ 776.873064][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 777.610009][T23648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4160'. [ 778.225790][T23660] syzkaller0: entered promiscuous mode [ 778.266146][T23660] syzkaller0: entered allmulticast mode [ 778.559366][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 778.800945][T23681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4165'. [ 779.180012][T23695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4168'. [ 779.375174][T23700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4169'. [ 779.423907][T23700] IPVS: set_ctl: invalid protocol: 60 172.30.1.5:20066 [ 779.692988][T23712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4171'. [ 779.752285][T23704] syzkaller0: entered promiscuous mode [ 779.788046][T23704] syzkaller0: entered allmulticast mode [ 780.044544][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 780.172703][T23723] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 780.558104][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4174'. [ 780.918550][T23741] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 781.299468][T23751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4177'. [ 784.920093][T23739] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 784.928519][T23739] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4175'. [ 784.947088][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4 [ 785.054411][ T6061] vlan4: left allmulticast mode [ 785.065236][ T6061] geneve0: left allmulticast mode [ 785.084930][ T6061] vlan4: left promiscuous mode [ 785.090456][ T6061] geneve0: left promiscuous mode [ 785.105303][ T6061] bridge0: port 2(vlan4) entered disabled state [ 785.138332][ T6061] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 785.152289][ T6061] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 785.174057][ T6061] bridge0: port 1(wlan1) entered disabled state [ 785.260952][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4182'. [ 785.297827][ T6061] pim6reg: left allmulticast mode [ 785.669585][ T6061] bond10 (unregistering): (slave gretap1): Releasing active interface [ 785.716172][ T6061] bond13 (unregistering): (slave gretap3): Releasing active interface [ 785.727592][ T6061] bond13 (unregistering): (slave gretap3): the permanent HWaddr of slave - da:12:9d:cc:a9:ac - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 785.825675][ T6061] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 785.848087][ T6061] team0: Port device bridge5 removed [ 785.859559][ T6061] bond13 (unregistering): (slave bridge6): Releasing active interface [ 785.885828][ T6061] bond0 (unregistering): Released all slaves [ 785.901460][ T6061] bond1 (unregistering): Released all slaves [ 785.921340][ T6061] bond2 (unregistering): Released all slaves [ 785.935848][ T6061] bond3 (unregistering): Released all slaves [ 785.959059][ T6061] bond4 (unregistering): Released all slaves [ 785.974017][ T6061] bond5 (unregistering): Released all slaves [ 785.989684][ T6061] bond6 (unregistering): Released all slaves [ 786.009711][ T6061] bond7 (unregistering): Released all slaves [ 786.025115][ T6061] bond8 (unregistering): Released all slaves [ 786.041889][ T6061] bond9 (unregistering): Released all slaves [ 786.065019][ T6061] bond10 (unregistering): Released all slaves [ 786.082233][ T6061] bond11 (unregistering): (slave veth11): Releasing active interface [ 786.096143][ T6061] bond11 (unregistering): Released all slaves [ 786.111075][ T6061] bond12 (unregistering): Released all slaves [ 786.128875][ T6061] bond13 (unregistering): Released all slaves [ 786.144970][ T6061] bond14 (unregistering): (slave veth0_to_bond): Releasing active interface [ 786.157643][ T6061] bond14 (unregistering): Released all slaves [ 786.180978][ T6061] bond15 (unregistering): Released all slaves [ 786.439080][T23791] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4184'. [ 786.491178][ T6061] 5nè‹Ò: left promiscuous mode [ 786.661925][T23796] xt_nat: multiple ranges no longer supported [ 786.682026][T23793] tipc: Enabled bearer , priority 0 [ 786.707349][T23795] syzkaller0: entered promiscuous mode [ 786.721802][T23795] syzkaller0: entered allmulticast mode [ 786.770409][T23797] ip6gre2: entered promiscuous mode [ 786.776643][T23797] ip6gre2: entered allmulticast mode [ 786.791178][T23788] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 786.922089][ T6061] tipc: Disabling bearer [ 786.933912][ T6061] tipc: Disabling bearer [ 786.973090][ T6061] tipc: Disabling bearer [ 786.973947][T23807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4188'. [ 787.006392][T23807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4188'. [ 787.019427][ T6061] tipc: Left network mode [ 787.034193][T23795] tipc: Resetting bearer [ 787.110355][T23787] tipc: Resetting bearer [ 787.231925][T23787] tipc: Disabling bearer [ 787.688400][T23830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4192'. [ 787.771940][T23833] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4192'. [ 788.252420][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4195'. [ 788.300283][ T6061] ================================================================== [ 788.308523][ T6061] BUG: KASAN: slab-use-after-free in fib_rules_lookup+0x15e/0xeb0 [ 788.316433][ T6061] Read of size 8 at addr ffff8880278b5080 by task kworker/u8:12/6061 [ 788.324530][ T6061] [ 788.326891][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 788.326919][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 788.326933][ T6061] Workqueue: netns cleanup_net [ 788.327035][ T6061] Call Trace: [ 788.327045][ T6061] [ 788.327054][ T6061] dump_stack_lvl+0xe8/0x150 [ 788.327081][ T6061] print_address_description+0x55/0x1e0 [ 788.327114][ T6061] ? fib_rules_lookup+0x15e/0xeb0 [ 788.327136][ T6061] print_report+0x58/0x70 [ 788.327156][ T6061] kasan_report+0x117/0x150 [ 788.327188][ T6061] ? fib_rules_lookup+0x15e/0xeb0 [ 788.327212][ T6061] ? fib_rules_lookup+0x99/0xeb0 [ 788.327234][ T6061] fib_rules_lookup+0x15e/0xeb0 [ 788.327258][ T6061] ? fib_rules_lookup+0x99/0xeb0 [ 788.327283][ T6061] ? __pfx_fib_rules_lookup+0x10/0x10 [ 788.327306][ T6061] ? l3mdev_update_flow+0x26/0x610 [ 788.327358][ T6061] ? l3mdev_update_flow+0x4ad/0x610 [ 788.327383][ T6061] __fib_lookup+0x106/0x210 [ 788.327471][ T6061] ? __pfx___fib_lookup+0x10/0x10 [ 788.327492][ T6061] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 788.327531][ T6061] ? arch_stack_walk+0x11b/0x150 [ 788.327578][ T6061] ? fib_lookup+0x49/0x440 [ 788.327637][ T6061] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 788.327691][ T6061] ip_route_output_key_hash_rcu+0x294/0x2720 [ 788.327724][ T6061] ? ip_route_output_key_hash+0xd8/0x2a0 [ 788.327751][ T6061] ? ip_route_output_key_hash+0xd8/0x2a0 [ 788.327779][ T6061] ip_route_output_key_hash+0x18d/0x2a0 [ 788.327808][ T6061] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 788.327838][ T6061] ? lock_acquire+0x106/0x350 [ 788.327863][ T6061] ip_route_output_flow+0x2a/0x150 [ 788.327891][ T6061] ip4_datagram_release_cb+0x89d/0xbe0 [ 788.327963][ T6061] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 788.327990][ T6061] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 788.328014][ T6061] ? do_raw_spin_lock+0x12b/0x2f0 [ 788.328045][ T6061] ? release_sock+0x2f/0x260 [ 788.328074][ T6061] release_sock+0x206/0x260 [ 788.328102][ T6061] inet_shutdown+0x2b1/0x390 [ 788.328184][ T6061] udp_tunnel_sock_release+0x6d/0x80 [ 788.328236][ T6061] fou_exit_net+0x17d/0x1f0 [ 788.328262][ T6061] ops_undo_list+0x43d/0x8d0 [ 788.328294][ T6061] ? __pfx_ops_undo_list+0x10/0x10 [ 788.328323][ T6061] ? idr_destroy+0x227/0x290 [ 788.328346][ T6061] cleanup_net+0x572/0x810 [ 788.328384][ T6061] ? __pfx_cleanup_net+0x10/0x10 [ 788.328417][ T6061] ? rcu_is_watching+0x15/0xb0 [ 788.328439][ T6061] ? process_scheduled_works+0xa20/0x14e0 [ 788.328470][ T6061] process_scheduled_works+0xa8e/0x14e0 [ 788.328521][ T6061] ? __pfx_process_scheduled_works+0x10/0x10 [ 788.328546][ T6061] ? assign_work+0x3cf/0x5d0 [ 788.328567][ T6061] worker_thread+0xa47/0xfb0 [ 788.328600][ T6061] kthread+0x389/0x470 [ 788.328625][ T6061] ? __pfx_worker_thread+0x10/0x10 [ 788.328644][ T6061] ? __pfx_kthread+0x10/0x10 [ 788.328669][ T6061] ret_from_fork+0x514/0xb70 [ 788.328691][ T6061] ? __pfx_ret_from_fork+0x10/0x10 [ 788.328711][ T6061] ? __switch_to+0xc89/0x1420 [ 788.328740][ T6061] ? __pfx_kthread+0x10/0x10 [ 788.328765][ T6061] ret_from_fork_asm+0x1a/0x30 [ 788.328798][ T6061] [ 788.328806][ T6061] [ 788.634106][ T6061] Allocated by task 5628: [ 788.638548][ T6061] kasan_save_track+0x3e/0x80 [ 788.643304][ T6061] __kasan_kmalloc+0x93/0xb0 [ 788.647939][ T6061] __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 788.654344][T23845] xfrm0: Caught tx_queue_len zero misconfig [ 788.654469][ T6061] kmemdup_noprof+0x2b/0x70 [ 788.664885][ T6061] fib_rules_register+0x2f/0x400 [ 788.669856][ T6061] fib4_rules_init+0x21/0x160 [ 788.674576][ T6061] fib_net_init+0x17a/0x3e0 [ 788.679177][ T6061] ops_init+0x35d/0x5d0 [ 788.683543][ T6061] setup_net+0x118/0x350 [ 788.687816][ T6061] copy_net_ns+0x4f9/0x720 [ 788.692259][ T6061] create_new_namespaces+0x3f0/0x6b0 [ 788.697554][ T6061] unshare_nsproxy_namespaces+0x149/0x190 [ 788.703279][ T6061] ksys_unshare+0x57d/0xa00 [ 788.707964][ T6061] __x64_sys_unshare+0x38/0x50 [ 788.712822][ T6061] do_syscall_64+0x174/0x580 [ 788.717597][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.723498][ T6061] [ 788.725825][ T6061] Freed by task 23: [ 788.729713][ T6061] kasan_save_track+0x3e/0x80 [ 788.734394][ T6061] kasan_save_free_info+0x40/0x50 [ 788.739427][ T6061] __kasan_slab_free+0x5c/0x80 [ 788.744210][ T6061] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 788.749869][ T6061] rcu_free_sheaf+0x31/0x200 [ 788.754484][ T6061] rcu_core+0x78b/0x10a0 [ 788.758737][ T6061] handle_softirqs+0x225/0x840 [ 788.763509][ T6061] run_ksoftirqd+0x36/0x60 [ 788.767932][ T6061] smpboot_thread_fn+0x57c/0xa80 [ 788.772885][ T6061] kthread+0x389/0x470 [ 788.777051][ T6061] ret_from_fork+0x514/0xb70 [ 788.781731][ T6061] ret_from_fork_asm+0x1a/0x30 [ 788.786497][ T6061] [ 788.788826][ T6061] The buggy address belongs to the object at ffff8880278b5000 [ 788.788826][ T6061] which belongs to the cache kmalloc-192 of size 192 [ 788.802966][ T6061] The buggy address is located 128 bytes inside of [ 788.802966][ T6061] freed 192-byte region [ffff8880278b5000, ffff8880278b50c0) [ 788.816766][ T6061] [ 788.819093][ T6061] The buggy address belongs to the physical page: [ 788.825516][ T6061] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x278b5 [ 788.834539][ T6061] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 788.841655][ T6061] page_type: f5(slab) [ 788.845647][ T6061] raw: 00fff00000000000 ffff88813fe163c0 dead000000000100 dead000000000122 [ 788.854356][ T6061] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 788.863042][ T6061] page dumped because: kasan: bad access detected [ 788.869481][ T6061] page_owner tracks the page as allocated [ 788.875203][ T6061] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 8364349626, free_ts 8277486447 [ 788.895264][ T6061] post_alloc_hook+0x22d/0x280 [ 788.900038][ T6061] get_page_from_freelist+0x24ae/0x2530 [ 788.905596][ T6061] __alloc_frozen_pages_noprof+0x18d/0x380 [ 788.911416][ T6061] allocate_slab+0x77/0x660 [ 788.915925][ T6061] refill_objects+0x336/0x3d0 [ 788.920609][ T6061] __pcs_replace_empty_main+0x320/0x720 [ 788.926160][ T6061] __kmalloc_cache_noprof+0x388/0x660 [ 788.931540][ T6061] call_usermodehelper_setup+0x8e/0x270 [ 788.937103][ T6061] kobject_uevent_env+0x662/0x9e0 [ 788.942162][ T6061] disk_uevent+0x297/0x470 [ 788.946627][ T6061] add_disk_fwnode+0x387/0x4b0 [ 788.951408][ T6061] null_add_dev+0x130b/0x1d70 [ 788.956176][ T6061] null_init+0x20f/0x3a0 [ 788.960492][ T6061] do_one_initcall+0x250/0x870 [ 788.965866][ T6061] do_initcall_level+0x10a/0x1a0 [ 788.970833][ T6061] do_initcalls+0x59/0xa0 [ 788.975258][ T6061] page last free pid 44 tgid 44 stack trace: [ 788.981323][ T6061] __free_frozen_pages+0xc0d/0xd20 [ 788.986443][ T6061] vfree+0x1fd/0x330 [ 788.990368][ T6061] delayed_vfree_work+0x55/0x80 [ 788.995240][ T6061] process_scheduled_works+0xa8e/0x14e0 [ 789.000877][ T6061] worker_thread+0xa47/0xfb0 [ 789.005478][ T6061] kthread+0x389/0x470 [ 789.009575][ T6061] ret_from_fork+0x514/0xb70 [ 789.014175][ T6061] ret_from_fork_asm+0x1a/0x30 [ 789.018978][ T6061] [ 789.021303][ T6061] Memory state around the buggy address: [ 789.026931][ T6061] ffff8880278b4f80: fc 00 00 00 00 00 fc fc 00 00 00 00 00 fc fc fc [ 789.035007][ T6061] ffff8880278b5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 789.043068][ T6061] >ffff8880278b5080: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 789.051130][ T6061] ^ [ 789.055288][ T6061] ffff8880278b5100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 789.063462][ T6061] ffff8880278b5180: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 789.071657][ T6061] ================================================================== [ 789.080009][ T6061] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 789.087320][ T6061] CPU: 0 UID: 0 PID: 6061 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 789.096939][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 789.107275][ T6061] Workqueue: netns cleanup_net [ 789.112273][ T6061] Call Trace: [ 789.115587][ T6061] [ 789.118541][ T6061] vpanic+0x56c/0xa60 [ 789.122566][ T6061] ? rcu_is_watching+0x15/0xb0 [ 789.127371][ T6061] ? __pfx_vpanic+0x10/0x10 [ 789.131918][ T6061] panic+0xc5/0xd0 [ 789.135871][ T6061] ? __pfx_panic+0x10/0x10 [ 789.140319][ T6061] ? fib_rules_lookup+0x15e/0xeb0 [ 789.145396][ T6061] ? fib_rules_lookup+0x15e/0xeb0 [ 789.150557][ T6061] check_panic_on_warn+0x89/0xb0 [ 789.155534][ T6061] ? fib_rules_lookup+0x15e/0xeb0 [ 789.160590][ T6061] end_report+0x73/0x170 [ 789.164871][ T6061] ? fib_rules_lookup+0x15e/0xeb0 [ 789.169918][ T6061] kasan_report+0x128/0x150 [ 789.174455][ T6061] ? fib_rules_lookup+0x15e/0xeb0 [ 789.179596][ T6061] ? fib_rules_lookup+0x99/0xeb0 [ 789.184643][ T6061] fib_rules_lookup+0x15e/0xeb0 [ 789.189520][ T6061] ? fib_rules_lookup+0x99/0xeb0 [ 789.194589][ T6061] ? __pfx_fib_rules_lookup+0x10/0x10 [ 789.199985][ T6061] ? l3mdev_update_flow+0x26/0x610 [ 789.205125][ T6061] ? l3mdev_update_flow+0x4ad/0x610 [ 789.210347][ T6061] __fib_lookup+0x106/0x210 [ 789.214880][ T6061] ? __pfx___fib_lookup+0x10/0x10 [ 789.219926][ T6061] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 789.226117][ T6061] ? arch_stack_walk+0x11b/0x150 [ 789.231087][ T6061] ? fib_lookup+0x49/0x440 [ 789.235634][ T6061] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 789.241821][ T6061] ip_route_output_key_hash_rcu+0x294/0x2720 [ 789.247843][ T6061] ? ip_route_output_key_hash+0xd8/0x2a0 [ 789.253649][ T6061] ? ip_route_output_key_hash+0xd8/0x2a0 [ 789.259334][ T6061] ip_route_output_key_hash+0x18d/0x2a0 [ 789.264915][ T6061] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 789.271021][ T6061] ? lock_acquire+0x106/0x350 [ 789.275734][ T6061] ip_route_output_flow+0x2a/0x150 [ 789.280875][ T6061] ip4_datagram_release_cb+0x89d/0xbe0 [ 789.286377][ T6061] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 789.291967][ T6061] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 789.297987][ T6061] ? do_raw_spin_lock+0x12b/0x2f0 [ 789.303057][ T6061] ? release_sock+0x2f/0x260 [ 789.307697][ T6061] release_sock+0x206/0x260 [ 789.312315][ T6061] inet_shutdown+0x2b1/0x390 [ 789.316956][ T6061] udp_tunnel_sock_release+0x6d/0x80 [ 789.322267][ T6061] fou_exit_net+0x17d/0x1f0 [ 789.326782][ T6061] ops_undo_list+0x43d/0x8d0 [ 789.331483][ T6061] ? __pfx_ops_undo_list+0x10/0x10 [ 789.337044][ T6061] ? idr_destroy+0x227/0x290 [ 789.341684][ T6061] cleanup_net+0x572/0x810 [ 789.346140][ T6061] ? __pfx_cleanup_net+0x10/0x10 [ 789.351277][ T6061] ? rcu_is_watching+0x15/0xb0 [ 789.356246][ T6061] ? process_scheduled_works+0xa20/0x14e0 [ 789.362170][ T6061] process_scheduled_works+0xa8e/0x14e0 [ 789.367936][ T6061] ? __pfx_process_scheduled_works+0x10/0x10 [ 789.374055][ T6061] ? assign_work+0x3cf/0x5d0 [ 789.378963][ T6061] worker_thread+0xa47/0xfb0 [ 789.383581][ T6061] kthread+0x389/0x470 [ 789.387668][ T6061] ? __pfx_worker_thread+0x10/0x10 [ 789.392791][ T6061] ? __pfx_kthread+0x10/0x10 [ 789.397415][ T6061] ret_from_fork+0x514/0xb70 [ 789.402016][ T6061] ? __pfx_ret_from_fork+0x10/0x10 [ 789.407132][ T6061] ? __switch_to+0xc89/0x1420 [ 789.411840][ T6061] ? __pfx_kthread+0x10/0x10 [ 789.416575][ T6061] ret_from_fork_asm+0x1a/0x30 [ 789.421443][ T6061] [ 789.424805][ T6061] Kernel Offset: disabled [ 789.429214][ T6061] Rebooting in 86400 seconds..