last executing test programs: 5.366177722s ago: executing program 0 (id=11797): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendto$phonet(r0, &(0x7f0000000000)="f49ed18412fbf35044c61b7b017f8b98d6ab5f95015ed010578e90f46c651d86f6a8134f555a8e96d2e163f08e9a03610c28fc0a674452da2bb4991a3b3e801cf3a331ec8bb3de3642543377a601299eefd1acd62064a1023e57653c810756ea4a5ecb4303353aa7f9f51aaef6b2", 0x6e, 0x4851, &(0x7f0000000080)={0x23, 0x40, 0x5, 0x2}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x17, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xc044) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='\x00', 0x64c00, &(0x7f0000000200)={@_ha_fsid={[0x4, 0x4]}, {0x0, 0x4, 0x80000000, 0xbc}}, 0x1, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0xffffffff}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x294, r3, 0x8, 0x70bd2d, 0x1, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x62b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff1be}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa962}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb22}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @empty, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}}}}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x744}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xce}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x53}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x78c9}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x457}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x18073b6d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d9f6257fc4370cc61eebb14dcd883c75bba1f662"}}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x40}, 0x4048081) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xc8, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xc}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x80}]}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x401}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x20080, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000900)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000a00)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6tnl0\x00', 0x0, 0x4, 0xfd, 0x8, 0xffff858b, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x8, 0x7, 0x6bc, 0x7}}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@dev}}, &(0x7f0000000c00)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000d80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)=@delpolicy={0xfc, 0x14, 0x2, 0x70bd2c, 0x25dfdbfe, {{@in=@local, @in=@private=0xa010102, 0x4e22, 0x9, 0x4e21, 0xec, 0x2, 0xa0, 0x80, 0x88, 0x0, r5}, 0x0, 0x2}, [@policy={0xac, 0x7, {{@in=@broadcast, @in=@remote, 0x4e24, 0x200, 0x4e24, 0x2, 0xa, 0xa0, 0x20, 0xc, r6, r7}, {0xd829, 0x8001, 0xa, 0x80000000, 0x7, 0x200, 0xfffffffffffffffb, 0x1000}, {0x4, 0x40, 0x8000, 0x200000000000}, 0x3, 0x6e6bb7, 0x1, 0x0, 0x1, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8040}, 0x4004804) setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000dc0)=0x7ff, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ec0)={'syztnl2\x00', &(0x7f0000000e40)={'syztnl1\x00', r4, 0x4, 0x2, 0x7, 0x0, 0x21, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, 0x7800, 0x80, 0xe, 0x4}}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001240)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000000f00)={0x2f8, 0x12, 0x20, 0x70bd28, 0x25dfdbfe, {0x12, 0x10, 0x9, 0x4, {0x4e24, 0x4e23, [0x953, 0x3ff, 0xde, 0xa], [0xfffffffb, 0x5, 0x1, 0x7], r8, [0xfffffff8, 0x2]}, 0xea67}, [@INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "fe41b7a9c7d39c464b1b4d897bd785e2e401c80f95a60bae96cb76bab4b1c1ca1b5b85ecf36b6a7845655dbf776e1f224768f5347f1cb72c1178c32bbb54cb98577151ed21c49dc3a842b6779a604555775081a380cc9bb7e0ec5af07db3e3587837763cb42b3740de6152e8b15e2dc8811f902ca586676ab6e4aca72267522f4d9ca41ce3a7626d97016165cdb760a0d0fb51f8c4f0335d45aaa149054594d652b05123f3815f9b02e674768d0f5dd15a37aa9f397f9e0692c7c3bdba4766e836835c5a5555d29c31f56ce32174006c2d570b959f88ce0eaa"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "6f8cad3deb8a866e3795177d8222d60755a9e096d9e18f36e41a66620e42ce7564791b957851eaa9a4de971f6903c31ddbb1e958ad513c0c2d41883164130d9c270d4208767a754ca0fe2b0560f474786441e0e7feb23c15227d49d6850a09460195c26648d7b63972638fc8e8926be7b4fbca94a75dfdbbe894f311dc821825376b17211aec504f78c54c814a0ed5b52a41b646ea337fe7df1656beac274df41b9ef8c60038"}, @INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1e, 0x1, "466f3b84942d451cefd479558038b7e3cd3e03e063b5d642904f"}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4}, 0x6010) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0xac, r10, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'rose0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge_slave_1\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:updpwd_exec_t:s0\x00'}]}, 0xac}}, 0x4088) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001480), r9) sendmsg$IEEE802154_LLSEC_LIST_KEY(r9, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, r11, 0x4, 0x70bd2d, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x200400c0}, 0x4000090) socketpair(0x2, 0x3, 0x3b9d, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000001580), r12) sendmsg$NFULNL_MSG_CONFIG(r13, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xe000}, 0x50) r14 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001740), r9) sendmsg$NET_DM_CMD_STOP(r9, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, r14, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040) r15 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r15, 0x112, 0xb, &(0x7f0000001840)=0x9, &(0x7f0000001880)=0x2) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000001900)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r9, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x3c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 5.029608047s ago: executing program 0 (id=11800): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000019500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xdb, &(0x7f0000000340)=""/219, 0xff90, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 4.974895369s ago: executing program 0 (id=11801): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x9, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000868000/0x5000)=nil, 0x5000, 0x100000c, 0x13, r4, 0x4a9b6000) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0xf}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xff}]}, 0x24}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x26, 0x101, 0x70bd27, 0xfffffffc, {0x2c}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x489d6}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000500)={'filter\x00', 0x0, 0x0, 0x0, [0xfffffffffffffff8, 0x4, 0x1ff, 0xfffffffffffffff8, 0x0, 0x5], 0x7, &(0x7f00000000c0)=[{}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) 3.489903523s ago: executing program 4 (id=11816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009800c00018008000100000001001400000011000100000000000000000a000a00"], 0xb0}}, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x39c, 0xb, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DESC={0x1f0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x104, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4c1d}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x387b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2f3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc621}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0xe8, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb35}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f3b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_DESC={0x190, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x62}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4856de1e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfdfa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x72}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x42}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x87b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b65}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x18d000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c4}, 0x1, 0x0, 0x0, 0x4000}, 0x10044011) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100), 0x1) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) 3.360553255s ago: executing program 4 (id=11817): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r1) r2 = socket$l2tp(0x2, 0x2, 0x73) shutdown(r2, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000055c0), 0x0, 0x300, 0x0) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c085}, 0x4004080) (async) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r4, 0x10c, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r5 = socket$inet(0x2, 0x80a, 0x9) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e24, @remote}, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd5b, 0xffffffff, 0x6}) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x41) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) unshare(0x20000400) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYBLOB="400000000000000066000000000000001800000000000000000000f9ff0000009500200000200000360a000000000000180100002020f8ff005bb57dc7000000bfa100000000000007010000f8ffff4fb702000008000000b50a000000000000850000000600000095000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x20}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r6, 0x58, &(0x7f0000000500)}, 0x10) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x60, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x19}, @in6=@private0, 0x4e24, 0x0, 0x1, 0x80, 0x2, 0x20, 0x120, 0xff}, {0x10000, 0x200000004, 0x2, 0x6811221d, 0xffffffff, 0x8000000000000001, 0x200000007, 0x9}, {0x5, 0xfffffffffffffffd, 0x7, 0x4000000}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@local, 0x80, 0x6c}, 0x2, @in=@loopback, 0x3506, 0x1, 0x0, 0x0, 0x7, 0x3}}, 0xe8) (async) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x3}, 0x1c) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) 3.217784064s ago: executing program 4 (id=11819): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffd38, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x1, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff}}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x200}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x70, 0x8001, 0x20000000, 0xb9d9, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async, rerun: 64) write(r5, 0x0, 0x0) (rerun: 64) r6 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) (async, rerun: 32) r7 = getpid() (rerun: 32) write$cgroup_pid(r6, &(0x7f00000000c0)=r7, 0x12) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x56}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4008884}, 0x20000000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x300, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@nested={0x2a7, 0x72, 0x0, 0x1, [@nested={0x18, 0x121, 0x0, 0x1, [@typed={0x7, 0x65, 0x0, 0x0, @str='#+\x00'}, @typed={0x4, 0x22}, @typed={0x8, 0x87, 0x0, 0x0, @pid}]}, @generic="c6aa44a12ebc649012e4df3f0358a1f84582958b7bf4c07ffa20", @nested={0x136, 0xfb, 0x0, 0x1, [@typed={0xc, 0xb6, 0x0, 0x0, @u64=0x7fffffffffffffff}, @generic="5ca4126c1b40f47f07d25cd5c55e2f1f3ac76c928af870af58f12d4f8b990e0feff7c2e3d57909bdea367350d4eb307cf4eb276b80de31c487768adb4dca6777f8cd81075bd0c0ce381f301ae84cfc424dd9c730bdfc143991d828e91e7c", @generic="8c798e245a06bf599198693ade7f86386d7f5ccfb7f5b980523adcfa42ba2fe25c2e0cda4ea95b4d2f0da3a44ac4406e2f61be9fb88d93146b597e00732e1ec93921d58222f4a275681d45956e220f77209ff321711bb3648b235f13f6c87dea907e7af0dffb26d5a72e04e2849ae3f7a69f3352234fab411ef3b78de150c72cadeb28523becb2ff43dc3506680c6376bc78a4a006d566d78b6d2445e98479555e488a1eea97434fdf1c2020ed1e5a8f58bd192d85b78b0dfaaa4ab2fe6970e3bfd2d239ceebeee2"]}, @generic="cbcbddd052e5eaa0da9cca2ed9bfd6c36c77c2e64da6939d4a", @typed={0x14, 0x166, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @typed={0x14, 0xd0, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x10, 0x63, 0x0, 0x1, [@typed={0x8, 0x159, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x13c}]}, @generic="044e9ae468a4ab7261b596e19d9812619012a0262dbf1c39651036d911a28a464bd3d335ab15a026e12bcb017ebdb0eca987d756ad8554f4e321b640365c05fdd2edaabfdeef652053aa0ce92b80d6f5d0afb0035a485e2edaeb5a0209b426abc21f78793ab6d8b2a3060cd7be3b4589828dcd38bfcac8986e2a178d3ec6eff7513937b3b94ab3fa95da3da80bcddb458cc24cebc5b46bca1b767c611a13f65793b1cdf3b8c850dbd6c7b9bf7aa5dcd2218f790a4f4e47b06db2fd90334f58ef0e6d5e2bd5ca5a29824a4c93287392d4a9463f13cf1533b0eb1f21cf180a14f9"]}, @typed={0x3c, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000000001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e1167"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x300}}, 0x40) 3.090762192s ago: executing program 2 (id=11820): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000040)='\xeb\x00', 0x40000, &(0x7f00000000c0)={@align=0x3, {0xb9b, 0x32, 0x1, 0x4}}, 0x77, &(0x7f0000000100), &(0x7f0000000140)=0x80000001}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x7}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={r1, 0x3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a50500000000d7d5dfa2aedc88498083dbe00700000042cbaf061197b5a9aabc36542588b5ced6041e26beb1735f27c3eef30e6239db2f3ac2268be61512b6ce7ee33258ea3f0d73ad45c8d20ce49b65bf31bfc52663a664f1814f6ccb20f16b72666e38d69de2856da2c78f341caa47c6896164c28d32672bc4fe"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 2.890972198s ago: executing program 2 (id=11821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000001a40)=ANY=[@ANYRES64=r3], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x4, @void}, 0x10) (async) syz_emit_ethernet(0xd81, &(0x7f0000001a40)=ANY=[@ANYRES64=r3], 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async) 2.887968626s ago: executing program 4 (id=11822): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000040)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)="fb608bfe10a40e527fed6b905b736f466f4276020887f6c1f95f0d915e023f12144f6b057a15ce6aafdfcd88ff9ae5f423dc63ea7482682ab7876f379557b497a40806c91c141e2ac4e9746ab6288e6a8f3244bcd615b45aa5ad070f9fa607ca0e002e6fab5e4b46805fd727df768cc91ca366a42effcfa56857cc9ddc83e207f0a35dbe2bba2c653def8e03e934426cca4f4183205424bbe719435b4c3fb1b6e4864e08dfab1c5e5ff9413da83729e3a7b06785de6b3571bf987e3371389a59187a57bc9c8956148128b9c0abe28b3b8a926e389385ce3b825449b2df06e31959d295392033ce2d6a8c0f69afffedd8d4bba2326d", 0xf5}, {&(0x7f00000005c0)="dca0b42a16dcc17f099190e943cac621746498680b09a09ded8483104bac32c14397029b1dfbcaaecf2aabdf72921af465eb9570c3e1dce0ac2da9dcf6b899a815ce7d6536983adff121f6190e581d10549315af52930bb627df2a6abdb733816fbad0baa0cca1d9685c406d06f7a94d0f377698cc4a8321b3f6db35d49e04c5c7c98dffba9ae0a0a70bfcf175a5e7d774cec7e024a04511223fe49d04a8407cade5659a", 0xa4}, {&(0x7f0000000680)="22f347efa9abf0cd8799f2bca04b8a02a97d7ba3439af41ba73a60cc3761b04074400f1b734878050a83265084a9264713e2bb9c1e0fbd3e65637dfa33976699d1a9f947f21562f08ef8d2eee13022123bbb02a2c2566ace33a9055f5caa7d8c63a4c39a4336f433", 0x68}, {&(0x7f0000000700)="e932e75aed836b184b6575a2db043727bc28f0685d60c9225f0d3380bf75091f447636d7f159622209849b01fd554f871a21d33416d585c289db5a692090b7d3b3d8e5798aae54b7a94312581439275415ab0899890616b3dd3b0fcb09b36edb4a2b2d0f13101bde5f48f5fcb8a2ac1cc8d59a0c5d97711ffc564aa2", 0x7c}, {&(0x7f0000000780)="95518c999f8e047c0bf67173ded09e5ee3065c38d837ea1a290901b123d2046621501bc2730df7543803c5be604b7335a1015c47525411aaabea4fa2e53b9b071288acaded7a5d18a6b34973181d6e624fc42d078b2d37b63f7ac7d83c237b54f281e368d9d36320ea7d68463a1ed7a83c2e3a20e2d8f6c10a0b826d73c82d2deb420793d46033140b4978ae6b65f2e1e1af5b6b82b306fdc2d4e7efccb75d2df1e8670a", 0xa4}], 0x5, &(0x7f0000000c80)=[{0x38, 0x10e, 0x400, "7c19f04a2bf85b2ab76a2e68e25ff1ca20c10cea9128f5f6e1490efc306cfecab4a6f893"}, {0xc0, 0x10e, 0xd120, "36768a9ac329e7418d4c4a70776827f7bee23bc7bed1da10f11d8d418c8cb676ec09c51afcf20ee34b1e8221fb8825d47e8025732404c991ee2432739358f0438e5fc94493c6b8e5a442bf36dcf0e8644d755494a609bc67ad5aaaab39cea7ca74080785e0bfeda6ab0264941142468d8e2168149829ef5aef923d2930e8cd4c9d50769bdd7e6f18b9d061ba8d6686d0fbc6ab0f93285914c2b8c964dc79c5228b5571654ea576881a"}, {0x90, 0x116, 0xa6, "92f0b476e81932655982b29595c19ae0e4a52d311bda272480cea34d4de13b2970558390b414b83402468e55ac4dcebab294869ed86d41bb9b47ad25b1ae2b6b2ceb149171791a9ee624a22963ab8a4a158fe9ddb1af5ae8ad88120a0099eaa7f6a9a7b7976b8fe7ae3f18512105444b5ad2d76641a5a86260c0cd4c72cc4f"}, {0x48, 0x18d, 0x4, "5dddcb1678471e9bf17a49a512a680a391c198121d09610900fb756954b4dd9c06750959767380d3da0462e52704db2b62f65a4f98b5"}, {0x60, 0x11, 0x80000000, "76438668c10537b7797f9c8fa1421d1ff2b1d54fda93c850ffaed45288a487f759cbc123cc1a3435015bb4f08bb123221516a5cf9132316047f679f3aa0e22d838de5f6ce5afe94bd53b61b920"}, {0x80, 0xa9779ca9596c36e4, 0xd, "385fa370ab745a38f043f354e41f8417b6585127255cb3cbc4af494f6fa7e03abdf8a41a985107735229750a68d7a82725807239e147460aa298c2f3292cfafd37f4dd3af865e981ea3db463c72f637d19606e03c4014048a197728322cdb8dd9bc245d7a06a2ba46ef000ae87f9"}, {0x48, 0x10b, 0x2, "67d34528f0d43fd6d068e51f0ee38395728901bfdeb0311285b7acf892969b03ff3749c70e270024f6e90fad14dd71933e467f6154"}, {0xd0, 0xff, 0x1, "099b77ab506400fb0d4555744685dc55cea2beb428081de5a5b891b936fe31a3929968ee40223cbae21ba29736b487b72658ec5d1f539a75df20684e9aa0600268c62db9820060e6b2bad1d2d9990a409ac2915e5568b27dcb87fc846e2c249dcdbdb8777075f57c04fec8b0405f41c5e6520123b84823693d8a95ce0e3921a5b783f7bcfd6d6ac10664186612622131c71890977779dc38616533bd891afe3a1f40faf21ddcb04cd413028962daad8a5c32ba30487e660906ee31ec32dca5bf"}, {0xc0, 0x118, 0x9, "ec8816c3bfe2f0e54f288abee7cc7a0f9cb679736b43b1a153e0e3f47d6d578f1339383ffe63c004963ada76f67b531883b006136b7340f601348c853687c02d680d5c73dfa58df1f4f576a77cb0d7160d59a2e6b7d8a2ba29925dd1c242bf06c38f74a52465736c50264a40960d7d98f2864d3dd8d13bc0ef2b80f9fbeb282747e717a388d18832f13979df83425c14eff88bbb15ea9d2427a66761521e10a10b6685ef5ef189d3aba6765131f589"}, {0xa0, 0x10a, 0x3, "19e23035a3f1e772ff042468a7a64943a623c084e010996f7d3c5472329fe5b13bdcd110a717c20b412d73241a763492099dfc395f3d2e9e5cd3aca26211823c5fae208782f3a52ecf34173ffdfad8836ebf3acf92f6f62aae85b30c1ce04c5f7e9b21c5dff81ea0b727ce0be105d0fa4462813259cf5bdbcfb182868dbd73d59dbccd1bbe44281ef7141afa3939c3"}], 0x528}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f00000002c0)=[{r0, 0x4008}, {r0, 0x400}], 0x2, 0x48000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000eab5e2c8354c78e495f625f0dc385840d96299d9c370567aeeb7995a2b77a55caf3a7a78266f377f1d2baccff7", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="c9f7b986f2ca3a0800e370723eae", 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 2.713816774s ago: executing program 3 (id=11824): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000002c0)={0x84, @local, 0x0, 0x0, 'lblcr\x00', 0x0, 0x2, 0x2e}, 0x2c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r4, &(0x7f0000000680)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f00000006c0)="baeea212b9411d8604f8bd67933f05bd5de7d927e34465e3319c226a8c649ce4c989666d204a1365609595dbd0e64762c7c57f1503c0f6dc0b2f6bf929b3563e31253bc1005578376677cb8141df0c77d74012351a2a23ea2d2d69dddafed3ace9ac563adb160e4120c69c83824912180a87548a1b420f433ee4d6c468eaab35d6d79fdfd1153fe76516d7af35e83bea1ae072653d9e5761a010b1f4629347af650120f02a34cb05440f0ac6732e866f1610a87469d9997b5879eba47a9b8662984c1daf35b37e77e34abf379d89f0013ae3077a04e0bf0a47cbe06aa0f7f495fdf864124c6708ce6c0c268acd378f1376", 0xf1}], 0x1}}], 0x1, 0x45) bind$can_raw(r2, &(0x7f00000005c0), 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYRES8=r0], 0x4c}}, 0x0) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010015be4c385af31d4911"], 0x14}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r1, @ANYRES32=r9, @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x240400d5}, 0x40000c0) pwritev(r7, &(0x7f00000007c0), 0x0, 0xb, 0x4) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="f54781c596dfd392fac8caafaddb87330401756d7c45053909fedf5acf11ce86a359af0b1341b5259fdcbbc7c0210e8c949063a401a63dcce1688fa710c169feef6ecca7f08f379e1535a33ef715c69fcc1da0ec387c0a6d8699f618210811ec09768b984c82a61c761f103d1b0d9c41d6591163ac6ef5a14f2ed68e446cf526b495b8c78c6ad1c5f5b356d5247de2c0a67d5cdafa5c4dfd126347b400e846f784c7c6bb5239a50addfc5b01fdeefaaacbd1654310b85fa14389bb43bf13794daa0034de6268a2aedefcc6af2b8e", @ANYRESOCT=r3, @ANYRESOCT=r8, @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8810) r10 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) close(r8) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x4c}}, 0x881) 2.570908282s ago: executing program 2 (id=11825): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3f8f26283bcd93e80cacc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1522ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7b544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff310601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7affffffff7177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a00000000000000159596ac570c4b889106f937d56b2346c818917b727bf5e2741068ec000000000000000000ec84"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010700000018000000006700000008003e"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r5, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@ifindex, 0xffffffffffffffff, 0x3d}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x126, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) read$nci(r6, &(0x7f0000000200)=""/100, 0x64) write$nci(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="4f02292a66"], 0x5) read$nci(r6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x18000000000002a0, 0x24, 0x0, &(0x7f0000000940)="b9ff0300600d698c229e14f0080096f65878a46bdf847888e10b87210941fc5a8b6eb704", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.524541486s ago: executing program 3 (id=11826): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000001540)='t', 0x1) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000140)=0x2, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1300000027000100fd0f005c4832b54c01"], 0x50}}, 0x0) 2.259114974s ago: executing program 3 (id=11828): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f00000001c0)=@raw=[@call={0x85, 0x0, 0x0, 0x62}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x9, 0x1, 0x0, r1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}], &(0x7f0000000240)='GPL\x00', 0xce4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xe, 0xfffffff3, 0x6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, r1, r1, r1, r1, r1, r1], &(0x7f0000000400)=[{0x5, 0x4, 0x6, 0xc}, {0x0, 0x3, 0xc, 0x1}, {0x3, 0x1, 0x3, 0x2}, {0x3, 0x4, 0xc, 0x9}, {0x5, 0x5, 0xe, 0x8}], 0x10, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000080)={0x1, [0x0]}) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x8801, 0x31863}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000004850000000c000000b70700000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.137354834s ago: executing program 3 (id=11829): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/148, 0x94, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r3, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}}, 0x20000004) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 1.953637058s ago: executing program 1 (id=11830): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r2, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db77c931091000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r3, &(0x7f0000000000)='D.\'', 0x3, 0x40, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80000, 0x2) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 1.892286821s ago: executing program 4 (id=11831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x9b, "ad7e51c971f885c42e3be01d4eef71503c28f022d357ccf1ea05fe16cb2830ef09c27209e327d8b44949822a7dfdf6eaa5bd8ac740a3fa9113079a33e88dcf70707e8aeb06d9b78fb12ac87c24c5c2e7f2b8f989fabb905c974a231646a33731197d761c670cf0a1567d639e5ea27db682bf1f7a62aa47f0611e1695503e81caec76355c81da6909eb186ce6fa1e2b3ca8a84488fe7d386aca10f5"}, &(0x7f00000002c0)=0xa3) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00'}) (async) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'pimreg0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="03030800030016000c0045f50028006500000406"], 0x32) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2b}, @in, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x16}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async, rerun: 32) r8 = socket(0x10, 0x80002, 0x0) (rerun: 32) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000800) (async, rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000680)={{{@in=@multicast1, @in6=@remote}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f00000003c0)=0xe8) (async, rerun: 32) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000190001002cbd7000000000001c140000fe03000100000000840013000000010000c87800000000000000000000000800000000000000000000000000000f0f00000000000000000000000000000c0f0000000300000000000000000000000a000000000000000000000025000000000000000100000000000000000000000000000000000000000000000f00"/160], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 1.84850993s ago: executing program 0 (id=11832): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x1, 0x7, &(0x7f0000001080)=ANY=[@ANYBLOB="188878328b7983992df15607f490000000a304000000000000020000000d190000000000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000001340)='GPL\x00', 0x4d, 0xa8, &(0x7f0000001380)=""/168, 0x41100, 0x32, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001500), &(0x7f00000014c0)=[{0x5, 0x3, 0x0, 0xc}, {0x3, 0x3, 0x0, 0xa}], 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008d00000018110000", @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001480)=ANY=[@ANYBLOB="08000f9176b3af9aa140b63b2c27a39bf6eb8673", @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf25060000001400080069703667726574617030000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008f000000000000000500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf092000000000005509010000000000ab0000000000000018000000020000000000000009000000cd90fcff00000000bf91000000000000b702000003000000850000002a000000b70000000400000095727018813c128e"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r5) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000015c0)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdc01, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x20}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24004021) r7 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e20, @rand_addr=0x64010104}]}, &(0x7f00000007c0)=0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000ffff3201"], 0x138) getsockopt$bt_hci(r7, 0x84, 0x70, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f00000012c0)=ANY=[@ANYBLOB="700000000101010200000000000000000a000009080015400000000308001a40fffff00108001a400000000044000e801400018008000100e0000002080002007f0000010c000280050001002100000006000340000000000c000280050001008438b677ea87a68301b8a062bd831a9fdb0000000c0002800500010021000000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000400)="c90e00008cebcf1d1d4eb308000000000200000000000000000019b6bd50be95fcfdd5eab5f4b830ff6bd091de3363b76fcc10fd586588089876b35a6e918f9afd0378d80cda1a6962b342ef943439325c93e53297f70e02fb876c9bd108778218a7bbdbc532c2aed9cf04176f007d4fe938d1994da948d9ce738f500a50e452af1d0d7e9832f0b5b2a992fea3be3d05ec983fadc9212996eac1b6f1c35fb261b1b7f1cc3e5ff87c273012a46bfc6a42360401ba387589f3fa7d6bfe592650d416874b7b1435521302984e2e97f0e2", 0xcf) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$sock_buf(r10, 0x1, 0x1c, 0x0, &(0x7f0000000900)) socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_LEAVE_MESH(r7, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1c00006126dbf8e0b50c1eb032ec00", @ANYRES16=0x0, @ANYBLOB="000827bd7000fbdbdf254500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x128}}, 0xc004) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000001200)={0x0, &(0x7f00000011c0)}) 1.430041585s ago: executing program 2 (id=11833): r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ppoll(&(0x7f0000000080)=[{r0, 0xc511}], 0x1, 0x0, &(0x7f00000002c0)={[0x6]}, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x4040004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.410787397s ago: executing program 3 (id=11834): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, 0x0, &(0x7f0000000300)) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r4, r4, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r4, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@fallback, 0xffffffffffffffff, 0x10, 0x0, 0x0, @void, @value=r5, @void, @void, r6}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r8) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r9) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="7824040b16378c0b7d7f47e871e6d8aeee058ecee745d70ddcdefc939c805ff2ef47d56a60da830561d169a38fe4e59072fc571a8f97d90f", @ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r11 = socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(r10, &(0x7f0000000540), &(0x7f00000005c0)=0x60, 0x800) (async) accept4$nfc_llcp(r10, &(0x7f0000000540), &(0x7f00000005c0)=0x60, 0x800) recvmmsg(r11, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/157, 0x9d}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/101, 0x65}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x0, 0x0) (async) recvmmsg(r11, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000003740)=""/195, 0xc3}, {&(0x7f0000003840)=""/157, 0x9d}, {&(0x7f00000001c0)=""/154, 0x9a}, {&(0x7f0000000280)=""/101, 0x65}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000600)={'ip_vti0\x00', r3, 0x10, 0x7800, 0x32, 0x80000001, {{0x1b, 0x4, 0x0, 0x8, 0x6c, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x4c, 0xa7, 0x3, 0x8, [{@broadcast, 0x8d}, {@broadcast, 0x10001}, {@rand_addr=0x64010101, 0x7}, {@remote, 0x8}, {@rand_addr=0x64010100, 0x3}, {@broadcast, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}, {@remote, 0x9}, {@broadcast, 0x7}]}, @noop, @ssrr={0x89, 0x7, 0x2e, [@empty]}, @timestamp_prespec={0x44, 0x4, 0xb4, 0x3, 0x7}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000600)={'ip_vti0\x00', r3, 0x10, 0x7800, 0x32, 0x80000001, {{0x1b, 0x4, 0x0, 0x8, 0x6c, 0x66, 0x0, 0x3, 0x29, 0x0, @multicast2, @broadcast, {[@timestamp_prespec={0x44, 0x4c, 0xa7, 0x3, 0x8, [{@broadcast, 0x8d}, {@broadcast, 0x10001}, {@rand_addr=0x64010101, 0x7}, {@remote, 0x8}, {@rand_addr=0x64010100, 0x3}, {@broadcast, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x200}, {@remote, 0x9}, {@broadcast, 0x7}]}, @noop, @ssrr={0x89, 0x7, 0x2e, [@empty]}, @timestamp_prespec={0x44, 0x4, 0xb4, 0x3, 0x7}]}}}}}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}}, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 964.716826ms ago: executing program 1 (id=11835): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x5, 0x0) close(r1) socket(0x2, 0x80805, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0xc002a000}) 709.78563ms ago: executing program 1 (id=11836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELRULE={0x1934, 0x8, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x49, 0x7, 0x1, 0x0, "f8f1075548f3286574cc49f83d346469ae6d890322240ddc5b1d4d93b3f5af4a8113bc44dd5e61cd5173f8b2f67fee5abaac06b7e89f46549f1c2ffb5f2aaa20b3f479a81e"}, @NFTA_RULE_EXPRESSIONS={0x183c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x177c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1768, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1014, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_IMMEDIATE_DATA={0x350, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x20, 0x1, "a0dace45a40d6c287819959e3fa6c17e158110c28a1d6841cdc22b25"}, @NFTA_DATA_VALUE={0x1c, 0x1, "0f1ec267e5ee2dddc53c591522453044ac8ac22bf9b12ff0"}, @NFTA_DATA_VALUE={0xde, 0x1, "652bba33eeb7701d7088da2bad3fa66db1c65687183b1c1269f05dc5cdede9161262463fc9a764a13aa37aea67b472b6333d5e32ea1f1d5a2718b01518b453d7d269e9e21e05492301a26bb33f96f3f71c4f7d26e68c0ecbc5506da0ec061916da246134181a3b9e6ba0ee9c2e2154fdd3387dae4749280e35a0481a446a782273592acfb69d4eae677cb1ffc01cb86e1e769439bfd21d1011bfffcce2294b37c79c5a1fd5925aed2896f81d6dc314c941f59f6210cd73d4638f3cb271c7a11f3d3f3f2f5130a288685eabd93e995d458f17dd99c838f6b3ca43"}, @NFTA_DATA_VALUE={0x9b, 0x1, "e0de437bb94795e3061ef065a5f3ced529957503d6e8b3d68c7b18a05b011f7c56e2e114546d43f97ef4c57bcec35a8221eebfdbdf1c205983944be1090c3c99e7a72898261c379027024734dc9c34f04ee0bd9bac8c1946acd25ad1ab7ceec94ee423f1d49f1a3c4eda4bf5ce1eeeb9f33e0f733f2cba1c5f64e4e5154d99d2d5e2c819c4432b7fc28d18d2e78c0fba9eceeae90bbbd4"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x98, 0x1, "b8380af11597fcb09a06b03bd8f5d2a804f14e4ffe7aa3d1fe22e5ea9d5acce2fa68d526a7a3720ede444ff5be3e51e35fa5c10f7142d81cef3541bb712e9c9272f07b627fecdc3b04a5a955c340ba5d33c7f2e2017b5f0d088245c515277fdeb735ad3532030e3f49efa2bb1a2e55b7ad04385354afd0a659dffb5cef3464e84c44997218338b88cb8b521bf869b3b68f5d0452"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "e7cec11f0efb6fe61dce504a2de97fbab948f854e4ad71fe2bb0492aa53a8f9125bcbb4b982c69e154e156946f1f53e6bfd1a2211ce40eb491705c0e239074f06f3da4de9d0549563ac166a70b10594fb5f0108c06982d4c6b4b1403543fa3ac6dc3ffb4cea416828da384fe5a5fb58302c9b1e1d49c0d0dece3a35dee3e9ba8c525fbf61e684ca2160a099d756ec1e8dd8700b8a9208ef5ee320d0d3dc17002f5d45e53b74faaed6eb082013b614bce05863b"}]}, @NFTA_IMMEDIATE_DATA={0x1f0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdf, 0x1, "1fe82321d1c33b6577374c518b993c71e474d6e1682ce1fa4a808559356d96ff2ded6a039e6e123a88fc9ddfff03000000000000006c315e7422fa4b72632242b8cd975966f75f7d61d568b66807c23c126bb5064b1701f00fc45361c8ce3ef3654d7d14cb1942a488511a4b09ccbff01b999d6156a2f2c1c490fd8b727e97b7542f82f4c1f001da7fbb40aab609e17d62206c5e06f3c3c0f71df654feb4825605276ea4a903cb160b6d78256874683824b8fa0696d49697bedbc5b822478c73329d1011834fafbf8619c9c164b9e778f965966f84a30d8a83f0af"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xe, 0x1, "8c548544544f3fa6a7ba"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4ad4cde46a648395}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x49, 0x1, "c77257991c22edc30ba75d1027097608719d5fe57ce4f37ca46429b4719a5c747b205a90c4d1bf5adfc050beca4e0059824dbbf2da7bf13149ef2e7d15ee33a614ec469e2b"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0xc4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "48653c529c2002c9c17a53d3da7e79153a60ed3859074fdccc1e3bf2fda98a2d44cbf08f95c2da989b88d07530681387668977b2c72f8587c6"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x14c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xaf, 0x1, "83e0e5c795e5d00f7f6fc792beb307898df13927471d48b0d6c138b6c3b4168e5ce74f3a467f05fef7f975b515dc1e044f8ed43b803b323a8e2f82278e10feca9167abca5844f0c591769e309be549bb0edce630a4357ab479b3c23f30b105ab7dd6c6a92e12e2a074d712b1cabe5f7f626ac9f736ee41539d9c15436f5d724558510c99ded7bbe9369c950672318904696672496a9dca9a6b1230d377836da7f042b39a864bafa79ee8dd"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x6f, 0x1, "eb9ea3a58fe8a0cbae756e0cee633f72c3def0ffb9cb7781f4118d3d657bbba94cab90f53ceda309f39ab8cd55a0ab6338ade133abfefd8bcbad18e9d07fc556eae0d53105e72351aa4f630bd95354a445f0635f9c54fc7a62e0118bf84178af4bc569510fd238cae20ff7"}]}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x18}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xde}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}]}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x195c}}, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r2, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000800) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x70, 0x41, 0x1, 0x70bd28, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0x44, 0x1, 0x0, 0x1, [@nested={0x3d, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}, @generic="50e2db8ba685f33b8a158df12e3bf944f17d9ea4616b9a857911503c31c443ede02b6e17923c5fb9383a69984b7a34917d64676fae"]}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@local}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) pwrite64(r0, &(0x7f0000000340)="94e8a6d2869f7cda360e2be3e8f2fd3fbab3514d639a9482cb1a2cb5f6a342006469003669a8e2af260ff4311a6cd27781f6f9358498c51e477c246f2826a8b6538e3c470dbf582c42c179aa172c8ea1f00b23feb948e2225ddd74de636bfec90714a8c8fbb6a5cba044243ceb9bf7e2f5060d2ab333a64596a1ae4ac86787936ff50cd12fe4931b10aa", 0x8a, 0x2) 649.530351ms ago: executing program 0 (id=11837): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newnexthop={0x30, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x5}, {0x0, 0x6}]}, @NHA_FDB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)}, 0x240408e1) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x1, 0x2000000, 0x25dfdbff, {}, [@IFLA_CARRIER={0x5}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x0, {{0x2, 0xfffe, @multicast1}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) sendfile(r2, r2, 0x0, 0x9) 561.064094ms ago: executing program 1 (id=11838): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@ipv4_delrule={0x30, 0x21, 0x1, 0x201, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 413.733327ms ago: executing program 4 (id=11839): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100000a, 0x5, 0x100008, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000003c0), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000200)=')', 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000002000000180000000b000000e84a9f5ecb4c657a4623efb923f5000000000000000d0a000000010000000000001008"], &(0x7f0000000f40)=""/4089, 0x3b, 0xff9, 0x8}, 0x28) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x6) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa1ab9000000008100000086dd60b70bff004c2f0000000000000000000000ffff7f000001ff020000000000000000000000000001000008"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x205, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4f}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0xc3e85bbee1b5e3b9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x24, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x24}}, 0x20000018) 412.211747ms ago: executing program 2 (id=11840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380ef700fffff7000000c0d96870000000000000", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030029bd70000e00000001000000d677708221712561401af917cf991bd9290a2589e40ff8dcbe428d775e2b788c949367a84ab01562c218ea30d005c3c3854ab026b8f0ec7fc79f760a97957e678d7b393c9c7fe77687e9d956972eb125a350588498563c0cc2f89f353f2eb43da9ca407bbae314cb1c46070ab06c090cd25c005e7c27247f7a3e58a84439b76b56a5b8f2c4fc4ccfb50164953aebf6cccc555e1e9536e1db0c0e498814434d19b0a636c3c1c66ce00af42c25", @ANYRES32=r3, @ANYBLOB="080002000000000014000c00fe880000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r6, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_addrs=@can}) (async, rerun: 32) getsockopt$sock_int(r5, 0x1, 0x2a, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) 410.980502ms ago: executing program 1 (id=11841): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="aa4fe5336a92e1d0f5bde20612dd6c5619a28698f4f3cfae415f89823de61b1c254fc77d1a08e68582c500ddceb4f49537da2de82443ebc79768df74448f76b5b2c93d220f011f2c5103caba0756d4156f872787a91a1a0e77f8303cdaf589c0579ed25a31be3595963ca53ac7593071c31bbfafad85a7898a2ac0ac9c410bdc808bbf3e370704458c3e7968fc6de1b4c36119842c5b422d194eef8a", 0x9c) socketpair(0xf, 0x1, 0x1, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x12, &(0x7f00000001c0)=0x8001, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280)="aef6a33db6bf4f3b48366dd3f028af821a5b284c76c39bdf70a91730eb339928754f7c92a494cc1dc942bc2e8dd618b8a59ba615597846cbb8960c0520e4b137f88e4e4c36801acd58debb79336101564dfd52777d291f933b9b14d91889352a73583a310582fd6a25f8029444b3a000e500d8f68e23f65a857e65d8", &(0x7f0000000300)=@udp6=r3}, 0x20) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x99, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000006c0), 0x3) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000700)) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f0000000740)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000780)="f0c23e070229209f4234dcc86cd0a6ed50a016cde1cc090a36d2ac8a22fb5cefe0e91fe7f680ede9244e7f791a5b8ab7109d57c04a4cb91ed8924f97b779944ad128a00644fa9df1ab591b39ee80f6c4992e3b30e7149a123a704ee2477382b6c862ebc315c0c28c11ce576f", 0x6c}, {&(0x7f0000000800)="6b71f8cdd59a259716fea45250c31fb74b0e6882edebf8df62f8a83538bf2dc11bd10fbef1ee5eda1d2cc9165aacd574ca20771d2d46f5adbe736321d324a1b04a1acff2103b083847632caff88df2433c3d357e86cacac56935cde83690e4194e760ddbf75960c154cbd92925605906d3432b50d4b536fdca67905dbadc84725936dd4b641b42b038f2a39823a0a3d40bdc331de2385e9bc44d0e8680245228d2e4689909d4c1c3fdf87e01252b4339f98c107593281e7c1f0f2678ffdf681e90c74963d5a74ced515fc308e196f543e66470c235207012a0ae45db9b1e1f2b41d64d089d49ffeaa16162", 0xeb}, {0xfffffffffffffffc}], 0x3, &(0x7f0000000940)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x7b, [@empty]}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @noop, @timestamp_addr={0x44, 0xc, 0xf3, 0x1, 0x2, [{@local, 0x4}]}, @noop, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x98}}, {{&(0x7f0000000a00)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000a40)="c63aa85a76885f0e780a35b3e90f86733d44d0935a5d32fd15b573bcc0781b795ec41e6e7bc76c538cd6cb2cd7e27d84273dcf20246188b053279392b80cab22d4f3ccc1426dda3a383ac183aceac5448e245197391e8c4b904a9e539becc87e6105d4873229f6182bc705a0e4ed0c43b9ae1215b7fb450ee521f6a5683517b9ec6ac60cd5a069ec7db65f9ca112828c1c0414540ac6699f2dd53d2b05f7ac92f63fecdab5ba937c02053041413fe2740b2b25eba1a21ed2d538bc0d030e22f30a4d5e11b3c2a6e9e95dffbed21b62a09574b73376bf470c310f96eb3c51d49920689ccdaf699906b82f1d4609182ab0d357d0b1e6bcab4c", 0xf8}, {&(0x7f0000000b40)="3aa0a4110690d23783a5b2bd2b1f67cfde6427eb0a062e", 0x17}, {&(0x7f0000000b80)="6e68c207213f6d7317d0a2444c03c282b8374f2adfcbcd6896ede69ad6e24bb470752bc7eff89e507993c89ef72fe05b2c99d0137fd78c1faa50e8600972538c0c32446f0623", 0x46}, {&(0x7f0000000c00)="0413ba9cff48f199dfe1176973c4b3f4f29cc18d56a93c6826c17fbb25bf7d695f667996fa7630f9ab7e0189ba1a450c0a22951f88a944343b2d3a8c3de0c1f43b5471849d1e29cc8a6798acd662564830a51e07b48003d436b28b297d2f21aa5e733b548ffb92ee8f6f3298419ea4f85209577b0f933124d547982f399bdcf246a376e27d557c75aae96d93a8bcf0e1f7", 0x91}], 0x4, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x64010102}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xaa, 0x0, 0x9, [0x6, 0x2]}, @timestamp_addr={0x44, 0x2c, 0xb1, 0x1, 0xf, [{@empty, 0x5}, {@empty, 0xffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb2c}, {@private=0xa010100, 0x5}, {@rand_addr=0x64010101, 0x9}]}, @rr={0x7, 0x17, 0x8c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x1d}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_retopts={{0x40, 0x0, 0x7, {[@end, @rr={0x7, 0x1b, 0x30, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x6, 0x8, "f8cbdbad5e7e"}, {0x7, 0x5, "15d7be"}]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010100, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x158}}, {{&(0x7f0000000e80)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000ec0)="165aace6db04548c0d5b80acd966d640876c252fd3a4ac6221e1bf72a0b0c3c15a7cef263cd5aa89a012753a9d398d99e0c1d36102cc40bcd6f3293f6ad0a770c39b6dc31d7e8406abe8a945df9fab5745ad22cc8e132d24d73d498f5b4eb212dd72c1d362578fca2ab60827432cb041", 0x70}, {&(0x7f0000000f40)="a28fe9387536c38c7ed42a124b7189bd7e7d213b1c77d98fe888b56cd84864de7b8cf4247bd09af366770b0d701c972f8525fbb36641bb891f019ccb4fd0bb6c1d9f5147cb7c9467ae1dc49b40a256feff4b4283b5dddd475efcc7cc196fc94bdf3bd98cd0e8b2efe745a96154a64dad84950d15f6e44293f567dd0ac67b9e29624fe9", 0x83}, {&(0x7f0000001000)='#', 0x1}, {&(0x7f0000001040)="d75592256fd4db10e37fc22cfe27251ffe2413465ef2db2076e046d3b1d263292ee34ceb70dab9", 0x27}], 0x4}}], 0x3, 0x40004) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001180)={0x0, @in={{0x2, 0x4e22, @remote}}, [0x3fc, 0x3, 0x2485, 0x9, 0x0, 0x8, 0x5, 0x8000, 0x567b, 0x6, 0xa, 0x7, 0xe19, 0xe, 0xffffffff]}, &(0x7f0000001280)=0x100) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000012c0)={r8, 0x200, 0x0, 0x80, 0x9}, &(0x7f0000001300)=0x18) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000001b00)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x49d9defcc3dcd15}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001380)={0x710, 0x0, 0x5, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0x3}, 0x4, 0x6, 0x538, 0x7f, 0xc, 'syz0\x00', "5ceba7fb243fc535595d9bb24ac961c32f8577854431024846aef4a26ff38231", "0541513b1ca5a410e1251cfe4a45907cf2a693ec05a76cfe69895772e03152b8", [{0x7, 0x81, {0x1, 0x7}}, {0x400, 0x9, {0x3, 0xfffff6df}}, {0x6, 0x7, {0x3, 0xffffffff}}, {0x2, 0x400, {0x2, 0x5}}, {0x28ce, 0x4, {0x2, 0x9}}, {0xf7, 0xfff0, {0x2, 0xf}}, {0x5, 0x2, {0x2, 0x5}}, {0x5, 0xe, {0x0, 0xe808}}, {0x8, 0x3, {0x0, 0x8}}, {0x4, 0x1, {0x3, 0x8001}}, {0x10, 0x8, {0x0, 0x2}}, {0x5, 0xa274, {0x3, 0xffffffff}}, {0x5, 0x7fff, {0x0, 0x80000001}}, {0xe, 0x3ff, {0x1, 0x7fff}}, {0x5, 0x5, {0x0, 0x3}}, {0x8000, 0x2, {0x3, 0xdb}}, {0x81, 0x1ff, {0x2}}, {0x9, 0x9, {0x1, 0x3}}, {0xac28, 0x0, {0x3, 0x2}}, {0x4, 0xfff8, {0x0, 0x2a7}}, {0x4, 0x1ff, {0x2, 0x6}}, {0xc, 0x0, {0x2, 0xb}}, {0x0, 0xd}, {0x0, 0x1ff, {0x2, 0x7fffffff}}, {0x1, 0x2, {0x3, 0x100}}, {0x8, 0xcb, {0x3, 0x9}}, {0x3a67, 0x4, {0x0, 0x8}}, {0x8, 0x8001, {0x0, 0x8}}, {0x5, 0x40, {0x0, 0x8001}}, {0x6, 0x8, {0x1}}, {0x6, 0x3, {0x1, 0x9}}, {0x5, 0xbaf, {0x2, 0xd}}, {0x4e, 0x3, {0x2, 0x40}}, {0x3, 0x1, {0x1, 0x81e}}, {0xfffc, 0x81, {0x2, 0x5}}, {0xffff, 0x5, {0x3, 0x200}}, {0x0, 0xc2a, {0x3, 0x3500c0a0}}, {0xff80, 0xfa86, {0x3, 0x69}}, {0x1, 0x4, {0x2, 0x7c79}}, {0x7ff, 0x9, {0x2, 0xffff}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x0, 0xa, 0x3, 0x6, 0x28, 'syz1\x00', "666a7b32d1148ab6f28d0e05efeda5db209187325238c99b07a5a1f08af06543", "d2c3af0c528d266aa0b901afbe6b54d0af3afb85583e8edb77102bb3f8e2d7c0", [{0x401, 0x3a, {0x1, 0x7}}, {0x8, 0x200, {0x1, 0x80db}}, {0x8001, 0x5, {0x1, 0x9}}, {0xd, 0x8, {0x1, 0x6}}, {0x6, 0x8001, {0x1, 0xfff}}, {0x2, 0x9, {0x2, 0x8}}, {0xfff7, 0x8001, {0x3, 0x3}}, {0x1ff, 0x9, {0x3, 0x4}}, {0x2, 0xd, {0x2, 0xb212}}, {0x5, 0x0, {0x3, 0x80000001}}, {0x0, 0x4, {0x2, 0x200}}, {0x3, 0x1, {0x3, 0x6}}, {0x800, 0x8, {0x2, 0x5}}, {0x4, 0x10, {0x3, 0x2}}, {0x1, 0x9, {0x3, 0xdd5e}}, {0xd, 0x400, {0x0, 0x6}}, {0x1, 0x9, {0x2, 0x80000000}}, {0xe, 0x81, {0x0, 0x5}}, {0x80, 0xa, {0x3}}, {0x1, 0xfff4, {0x3, 0x2}}, {0x9, 0x3, {0x1, 0x6a7}}, {0x5, 0x72, {0x2, 0x3}}, {0x3, 0xa9, {0x0, 0x8}}, {0x5, 0x7, {0x2, 0x2ccc}}, {0x43, 0x8, {0x2, 0x4}}, {0xe, 0xb281, {0x1, 0x6}}, {0x1, 0x4, {0x2, 0x70a}}, {0x1, 0x9, {0x2, 0x4}}, {0x1f, 0x5, {0x1, 0x5}}, {0x3, 0xe679, {0x0, 0x400}}, {0x7, 0x8001, {0x3, 0x80000000}}, {0xfffd, 0x8, {0x0, 0x961}}, {0x6, 0x6, {0x1, 0x10}}, {0x5, 0x5, {0x2, 0x4}}, {0x1, 0x10, {0x0, 0x924}}, {0x643, 0xc}, {0x0, 0x2, {0x3, 0x8}}, {0x1, 0x103, {0x3, 0x7fffffff}}, {0x3, 0x870, {0x0, 0xfffffff8}}, {0x1, 0x0, {0x2}}]}}}, {{0x254, 0x1, {{0x2, 0xac}, 0x7f, 0x2, 0x5, 0x2, 0x1f, 'syz1\x00', "cc215b698be54f3a2f5fe02c6e13f496ffedd9caa36c86d4b5d4feab48f42f81", "2953230bcdc289008a3cc95b88b80fcddd19fcad4346345ef1b5d89fb27a5831", [{0xc21, 0x7, {0x2, 0x3}}, {0xfb66, 0x0, {0x1, 0x731e}}, {0x7, 0x1, {0x0, 0x3}}, {0x8000, 0x5, {0x1, 0x7}}, {0xa8be, 0x4, {0x0, 0x484f}}, {0x4, 0x9, {0x2, 0x4}}, {0x686, 0xffff, {0x3, 0x400}}, {0x4, 0x1, {0x3, 0x9}}, {0x0, 0x9, {0x1, 0x1}}, {0x1ff, 0x200, {0x0, 0x3}}, {0x6, 0x1, {0x3, 0x8}}, {0x7fff, 0x7fff, {0x0, 0x8001}}, {0x4, 0x5, {0x2, 0x5}}, {0x1, 0x1, {0x1, 0x7}}, {0xa5, 0x0, {0x2, 0x33e}}, {0x5, 0x2, {0x0, 0x9}}, {0xbd01, 0x2, {0x0, 0x4}}, {0x2, 0x0, {0x3, 0x3}}, {0x3ca4, 0x6, {0x3, 0x8}}, {0x264b, 0x1, {0x1, 0x7d4a}}, {0x1c8, 0x9, {0x2, 0xf}}, {0x7ff, 0x3, {0x3, 0xa}}, {0x92fc, 0x1, {0x0, 0x5}}, {0x4, 0x401, {0x2, 0x425}}, {0x7, 0xdf2, {0x2, 0x8}}, {0x101, 0x6, {0x1, 0x7}}, {0x97a3, 0x4, {0x2, 0x9}}, {0x5bba, 0x9, {0x3, 0x1}}, {0x2, 0x8, {0x3, 0x3}}, {0x4, 0x8000, {0x1, 0xed3b}}, {0x8, 0x101, {0x1, 0x9}}, {0x0, 0x2, {0x3, 0x7}}, {0x200, 0x400, {0x3, 0x9}}, {0x3, 0xff1d, {0x3, 0x21}}, {0x4dcf, 0x9, {0x3, 0x6}}, {0xc, 0xa, {0x0, 0x1}}, {0xb7, 0x100, {0x1}}, {0x4, 0x100, {0x0, 0x8000}}, {0x0, 0x8, {0x1, 0xa4}}, {0x3, 0x400, {0x1, 0x1}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x24048010}, 0x20000000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000001c80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x20a0008}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x24, r10, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8, 0x3, r11}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000801) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000001cc0)=0x8, &(0x7f0000001d00)=0x2) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000001d40), &(0x7f0000001d80)=0x4) socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001dc0)={r9, @in6={{0xa, 0x4e22, 0x3ff, @private1, 0x4}}}, &(0x7f0000001e80)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001ec0)={r8, @in={{0x2, 0x4e24, @remote}}, 0x6, 0x0, 0x5, 0x400, 0x84, 0x81, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001f80)={r9, 0x10, 0x2, 0xd}, 0x10) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001fc0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x2, '\x00', r6, r7, 0x1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000020c0)={{r12}, &(0x7f0000002040), &(0x7f0000002080)=r5}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000002100)={0x2, [0x0, 0x0]}, &(0x7f0000002140)=0xc) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) 364.399554ms ago: executing program 3 (id=11842): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) socket$unix(0x1, 0x2, 0x0) (rerun: 64) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x3, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r4, 0x25, 0x4, @void}, 0x10) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) 247.167936ms ago: executing program 0 (id=11843): socket$netlink(0x10, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, 'bridge_slave_1\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) sendmmsg(r4, &(0x7f0000002bc0), 0x2a0, 0x20004840) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb", 0x2}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newspdinfo={0x24, 0x24, 0x1, 0x70bd27, 0x25dfdbfc, 0x9, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6, 0x3, {0x0, 0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x2, 0x1, 0x5, 0xf02, 0x4}, 0x20) 97.284523ms ago: executing program 1 (id=11844): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="c22d0000100025fc91bedfd32b181e9100007418", @ANYRES32=r1, @ANYBLOB="00080000009000001c0012800b00010062726964676500000c0002800600090004040000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc000) 0s ago: executing program 2 (id=11845): close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x4, 0x1da3a095) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000012c0)=ANY=[@ANYBLOB="3c020000192e751688b121c5c515729d212629f3f8b1e07e20841d5ac2dd70b1"], 0x23c}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r5, &(0x7f0000000040), r4, 0x0, 0x800000000ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) write$tun(r1, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000001c0)) sendmsg$nl_route(r4, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4080}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="60000000210000042abd7000ffdbdf2502001002070000052100000008000b00080000000c000c40fffffffffffffff708000b00ab0700000200000064010100080001006401010108000b000900000008000b0005000000080002000a010101"], 0x60}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r8}}, 0x40) syz_open_procfs$namespace(r8, &(0x7f0000000180)='ns/cgroup\x00') getsockopt$bt_sco_SCO_OPTIONS(r6, 0x11, 0x1, &(0x7f0000000000)=""/86, &(0x7f0000000080)=0x56) kernel console output (not intermixed with test programs): aller0> [ 1627.005712][T26762] tipc: Left network mode [ 1627.059717][T26762] IPVS: stopping master sync thread 3898 ... [ 1627.137779][T17083] syzkaller0: entered promiscuous mode [ 1627.139103][T17083] syzkaller0: entered allmulticast mode [ 1627.359179][T17083] tipc: Enabled bearer , priority 0 [ 1627.398337][T17082] tipc: Resetting bearer [ 1627.502078][T17082] tipc: Disabling bearer [ 1627.827512][T17100] syzkaller1: entered promiscuous mode [ 1627.827557][T17100] syzkaller1: entered allmulticast mode [ 1628.465759][T17136] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10748'. [ 1628.484259][T17136] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10748'. [ 1628.498324][T17136] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10748'. [ 1628.512849][T17136] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10748'. [ 1628.523043][T17136] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10748'. [ 1628.535608][T17136] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10748'. [ 1629.255656][T26762] hsr_slave_0: left promiscuous mode [ 1629.262100][T26762] hsr_slave_1: left promiscuous mode [ 1629.266225][T26762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1629.266255][T26762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1629.294158][T26762] batman_adv: batadv0: Interface deactivated: nr0 [ 1629.300899][T26762] batman_adv: batadv0: Removing interface: nr0 [ 1629.411581][T26762] veth1_macvtap: left promiscuous mode [ 1629.422153][T26762] veth0_macvtap: left promiscuous mode [ 1630.292208][T17185] ip6t_hbh: unknown flags AD [ 1630.559034][T26762] team0 (unregistering): Port device team_slave_1 removed [ 1630.578465][T26762] team0 (unregistering): Port device team_slave_0 removed [ 1630.808373][T17161] syzkaller0: entered promiscuous mode [ 1630.808423][T17161] syzkaller0: entered allmulticast mode [ 1630.851516][T17180] tipc: Enabled bearer , priority 0 [ 1630.934653][T17159] tipc: Resetting bearer [ 1631.044707][T17159] tipc: Disabling bearer [ 1631.098418][T17210] __nla_validate_parse: 59 callbacks suppressed [ 1631.098488][T17210] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10761'. [ 1631.225235][T11814] IPVS: starting estimator thread 0... [ 1631.342919][T17217] IPVS: using max 25 ests per chain, 60000 per kthread [ 1631.353649][T17220] netlink: 116 bytes leftover after parsing attributes in process `syz.3.10764'. [ 1631.527329][T17227] veth0: entered promiscuous mode [ 1631.527494][T17227] veth0: left promiscuous mode [ 1631.630172][T17240] netlink: 'syz.0.10769': attribute type 12 has an invalid length. [ 1631.635662][T17231] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20000 [ 1631.700812][T17237] netlink: 'syz.4.10765': attribute type 1 has an invalid length. [ 1631.758089][T17248] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10765'. [ 1632.689241][T17274] syzkaller1: entered promiscuous mode [ 1632.689288][T17274] syzkaller1: entered allmulticast mode [ 1632.703411][T26762] IPVS: stop unused estimator thread 0... [ 1632.911579][T17281] syzkaller1: entered promiscuous mode [ 1632.914284][T17279] netlink: 'syz.2.10775': attribute type 1 has an invalid length. [ 1632.927428][T17281] syzkaller1: entered allmulticast mode [ 1632.969942][T17289] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10775'. [ 1633.030930][T17291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10775'. [ 1633.043674][T17280] syzkaller1: left promiscuous mode [ 1633.043724][T17280] syzkaller1: left allmulticast mode [ 1633.388534][ T31] audit: type=1804 audit(1788712983.195:65): pid=17308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10781" name="/newroot/322/cgroup.controllers" dev="tmpfs" ino=1673 res=1 errno=0 [ 1633.411780][ T31] audit: type=1800 audit(1788712983.225:66): pid=17308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10781" name="cgroup.controllers" dev="tmpfs" ino=1673 res=0 errno=0 [ 1633.568278][T17279] macvlan4: entered promiscuous mode [ 1633.568334][T17279] macvlan4: entered allmulticast mode [ 1633.572918][T17279] bond3: entered promiscuous mode [ 1633.574510][T17279] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1633.605856][T17279] bond3: left promiscuous mode [ 1633.843115][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10785'. [ 1634.000995][T17325] gretap3: entered promiscuous mode [ 1634.009279][T17323] syzkaller0: entered promiscuous mode [ 1634.009326][T17323] syzkaller0: entered allmulticast mode [ 1634.220783][T17334] FAULT_INJECTION: forcing a failure. [ 1634.220783][T17334] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.234066][T17334] CPU: 1 UID: 0 PID: 17334 Comm: syz.0.10787 Not tainted syzkaller #0 PREEMPT(full) [ 1634.234099][T17334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1634.234115][T17334] Call Trace: [ 1634.234125][T17334] [ 1634.234135][T17334] dump_stack_lvl+0xe8/0x150 [ 1634.234176][T17334] should_fail_ex+0x410/0x560 [ 1634.234217][T17334] should_failslab+0xa8/0x100 [ 1634.234247][T17334] __kmalloc_cache_noprof+0xa3/0x600 [ 1634.234286][T17334] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 1634.234320][T17334] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 1634.234364][T17334] __tipc_nl_bearer_enable+0xb6b/0x1480 [ 1634.234411][T17334] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1634.234458][T17334] ? __asan_memcpy+0x40/0x70 [ 1634.234492][T17334] ? nla_put+0xd0/0x150 [ 1634.234523][T17334] ? tipc_nl_compat_bearer_enable+0x35f/0x500 [ 1634.234560][T17334] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 1634.234593][T17334] ? __nla_parse+0x40/0x60 [ 1634.234625][T17334] tipc_nl_compat_doit+0x407/0x650 [ 1634.234661][T17334] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 1634.234705][T17334] ? bpf_lsm_capable+0x9/0x20 [ 1634.234738][T17334] ? security_capable+0x7e/0x2c0 [ 1634.234775][T17334] tipc_nl_compat_recv+0x8d3/0xcf0 [ 1634.234807][T17334] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1634.234837][T17334] ? __mutex_trylock_common+0x15f/0x270 [ 1634.234875][T17334] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1634.234909][T17334] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 1634.234937][T17334] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1634.234973][T17334] ? trace_contention_end+0x3d/0x140 [ 1634.235000][T17334] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 1634.235046][T17334] genl_family_rcv_msg_doit+0x233/0x340 [ 1634.235090][T17334] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1634.235138][T17334] ? __dev_queue_xmit+0x29b/0x3820 [ 1634.235178][T17334] genl_rcv_msg+0x614/0x7a0 [ 1634.235220][T17334] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1634.235254][T17334] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1634.235283][T17334] ? __pfx_ref_tracker_free+0x10/0x10 [ 1634.235320][T17334] netlink_rcv_skb+0x226/0x4a0 [ 1634.235350][T17334] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1634.235386][T17334] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1634.235432][T17334] ? down_read+0x2be/0x330 [ 1634.235460][T17334] genl_rcv+0x28/0x40 [ 1634.235491][T17334] netlink_unicast+0x7bd/0x940 [ 1634.235530][T17334] netlink_sendmsg+0x813/0xb40 [ 1634.235570][T17334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1634.235609][T17334] ? apparmor_socket_sendmsg+0x98/0x360 [ 1634.235646][T17334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1634.235674][T17334] sock_sendmsg_nosec+0x13a/0x180 [ 1634.235709][T17334] ____sys_sendmsg+0x54e/0x850 [ 1634.235740][T17334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1634.235777][T17334] ? import_iovec+0x73/0xa0 [ 1634.235806][T17334] ___sys_sendmsg+0x2a5/0x360 [ 1634.235830][T17334] ? __lock_acquire+0x6df/0x2e50 [ 1634.235866][T17334] ? __pfx____sys_sendmsg+0x10/0x10 [ 1634.235934][T17334] ? __fget_files+0x2a/0x420 [ 1634.235963][T17334] ? __fget_files+0x3a2/0x420 [ 1634.236005][T17334] __x64_sys_sendmsg+0x1b1/0x290 [ 1634.236034][T17334] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1634.236085][T17334] do_syscall_64+0x166/0x520 [ 1634.236118][T17334] ? trace_irq_disable+0x3b/0x140 [ 1634.236140][T17334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.236163][T17334] ? clear_bhb_loop+0x70/0xc0 [ 1634.236193][T17334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.236217][T17334] RIP: 0033:0x7f813219e159 [ 1634.236239][T17334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1634.236259][T17334] RSP: 002b:00007f8132fa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1634.236284][T17334] RAX: ffffffffffffffda RBX: 00007f8132426180 RCX: 00007f813219e159 [ 1634.236301][T17334] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 000000000000000a [ 1634.236317][T17334] RBP: 00007f8132fa5090 R08: 0000000000000000 R09: 0000000000000000 [ 1634.236333][T17334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1634.236346][T17334] R13: 00007f8132426218 R14: 00007f8132426180 R15: 00007ffc1deac898 [ 1634.236389][T17334] [ 1634.428613][T17336] sctp: [Deprecated]: syz.3.10788 (pid 17336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1634.428613][T17336] Use struct sctp_sack_info instead [ 1634.826824][T17345] syzkaller0: entered promiscuous mode [ 1634.826903][T17345] syzkaller0: entered allmulticast mode [ 1634.951178][T17352] netlink: 'syz.3.10792': attribute type 29 has an invalid length. [ 1635.036739][T17352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10792'. [ 1635.056786][T17352] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10792'. [ 1635.077663][T17359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10795'. [ 1635.259896][T17366] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10800'. [ 1635.842140][T17398] net_ratelimit: 6 callbacks suppressed [ 1635.842194][T17398] openvswitch: netlink: Tunnel attr 177 out of range max 16 [ 1636.035381][T17408] xt_cgroup: path and classid specified [ 1636.185830][T17412] __nla_validate_parse: 5 callbacks suppressed [ 1636.185887][T17412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10809'. [ 1636.233547][T17412] geneve3: entered promiscuous mode [ 1636.253530][T17412] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1636.259879][T11814] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.259983][T11814] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.260091][T11814] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.260175][T11814] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.260279][T11814] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.260354][T11814] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.260450][T11814] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.260526][T11814] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.345066][T17412] syzkaller1: entered promiscuous mode [ 1636.345120][T17412] syzkaller1: entered allmulticast mode [ 1636.359307][T17412] netlink: 'syz.3.10809': attribute type 7 has an invalid length. [ 1636.359355][T17412] netlink: 'syz.3.10809': attribute type 8 has an invalid length. [ 1636.359371][T17412] netlink: 'syz.3.10809': attribute type 13 has an invalid length. [ 1636.681326][T17422] openvswitch: netlink: Unknown key attributes 20 [ 1636.694667][T17422] openvswitch: netlink: Duplicate key (type 0). [ 1636.783721][T17429] netlink: 'syz.0.10814': attribute type 4 has an invalid length. [ 1636.824059][T17429] netlink: 'syz.0.10814': attribute type 4 has an invalid length. [ 1637.936871][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10816'. [ 1638.294401][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1638.497544][T17387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1638.699088][T17456] syzkaller0: entered promiscuous mode [ 1638.705250][T17456] syzkaller0: entered allmulticast mode [ 1638.730798][T17460] tipc: Enabled bearer , priority 0 [ 1638.764683][T17458] tipc: Disabling bearer [ 1638.879123][T17464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10820'. [ 1638.879172][T17464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10820'. [ 1638.925522][T17462] lo speed is unknown, defaulting to 1000 [ 1638.935434][T17462] lo speed is unknown, defaulting to 1000 [ 1638.958000][T17462] xfrm0 speed is unknown, defaulting to 1000 [ 1639.212232][T17477] netlink: 'syz.4.10826': attribute type 1 has an invalid length. [ 1639.212277][T17477] netlink: 'syz.4.10826': attribute type 2 has an invalid length. [ 1639.231595][T17476] netlink: 'syz.4.10826': attribute type 1 has an invalid length. [ 1639.231637][T17476] netlink: 'syz.4.10826': attribute type 2 has an invalid length. [ 1639.422278][T17486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10829'. [ 1639.586738][T17491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10830'. [ 1639.596015][T17491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10830'. [ 1639.939450][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10835'. [ 1639.958210][T17510] ip6gre2: entered promiscuous mode [ 1639.965876][T17510] ip6gre2: entered allmulticast mode [ 1640.385372][T17523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10839'. [ 1640.933261][T11526] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1640.933510][T11526] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1640.962712][ T5732] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1641.279625][T17557] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1641.303416][T17557] batman_adv: batadv0: Adding interface: gretap1 [ 1641.303474][T17557] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1641.303513][T17557] batman_adv: batadv0: Interface activated: gretap1 [ 1641.496338][ T5732] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1641.591127][T17547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10846'. [ 1641.658965][T26644] block nbd4: Receive control failed (result -32) [ 1641.669849][ T52] block nbd4: Receive control failed (result -32) [ 1641.718239][T17573] netlink: 'syz.4.10852': attribute type 1 has an invalid length. [ 1641.972675][T12467] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1642.019561][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10853'. [ 1642.088053][T17585] rdma_rxe: rxe_newlink: failed to add bond0 [ 1642.129792][T17585] macvtap1: entered promiscuous mode [ 1642.135795][T17585] batadv0: entered promiscuous mode [ 1642.142683][T17585] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1642.156421][T17585] batadv0: left promiscuous mode [ 1642.161484][T17587] rdma_rxe: rxe_newlink: failed to add bond0 [ 1642.411200][T17595] lo speed is unknown, defaulting to 1000 [ 1642.424536][T17595] lo speed is unknown, defaulting to 1000 [ 1642.449113][T17595] xfrm0 speed is unknown, defaulting to 1000 [ 1642.911851][T17619] syzkaller0: entered promiscuous mode [ 1642.917782][T17619] syzkaller0: entered allmulticast mode [ 1643.051381][T17619] FAULT_INJECTION: forcing a failure. [ 1643.051381][T17619] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.051447][T17619] CPU: 1 UID: 0 PID: 17619 Comm: syz.1.10861 Not tainted syzkaller #0 PREEMPT(full) [ 1643.051479][T17619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1643.051495][T17619] Call Trace: [ 1643.051506][T17619] [ 1643.051517][T17619] dump_stack_lvl+0xe8/0x150 [ 1643.051560][T17619] should_fail_ex+0x410/0x560 [ 1643.051608][T17619] should_failslab+0xa8/0x100 [ 1643.051641][T17619] __kmalloc_cache_noprof+0xa3/0x600 [ 1643.051693][T17619] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 1643.051731][T17619] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 1643.051786][T17619] __tipc_nl_bearer_enable+0xb6b/0x1480 [ 1643.051839][T17619] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1643.051900][T17619] ? __asan_memcpy+0x40/0x70 [ 1643.051940][T17619] ? nla_put+0xd0/0x150 [ 1643.051974][T17619] ? tipc_nl_compat_bearer_enable+0x35f/0x500 [ 1643.052016][T17619] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 1643.052053][T17619] ? __nla_parse+0x40/0x60 [ 1643.052088][T17619] tipc_nl_compat_doit+0x407/0x650 [ 1643.052128][T17619] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 1643.052174][T17619] ? bpf_lsm_capable+0x9/0x20 [ 1643.052211][T17619] ? security_capable+0x7e/0x2c0 [ 1643.052247][T17619] tipc_nl_compat_recv+0x8d3/0xcf0 [ 1643.052283][T17619] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1643.052316][T17619] ? __mutex_trylock_common+0x15f/0x270 [ 1643.052352][T17619] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1643.052388][T17619] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 1643.052419][T17619] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1643.052459][T17619] ? trace_contention_end+0x3d/0x140 [ 1643.052490][T17619] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 1643.052540][T17619] genl_family_rcv_msg_doit+0x233/0x340 [ 1643.052589][T17619] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1643.052642][T17619] ? __dev_queue_xmit+0x29b/0x3820 [ 1643.052698][T17619] genl_rcv_msg+0x614/0x7a0 [ 1643.052745][T17619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1643.052782][T17619] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1643.052816][T17619] ? __pfx_ref_tracker_free+0x10/0x10 [ 1643.052858][T17619] netlink_rcv_skb+0x226/0x4a0 [ 1643.052891][T17619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1643.052933][T17619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1643.052987][T17619] ? down_read+0x2be/0x330 [ 1643.053019][T17619] genl_rcv+0x28/0x40 [ 1643.053055][T17619] netlink_unicast+0x7bd/0x940 [ 1643.053098][T17619] netlink_sendmsg+0x813/0xb40 [ 1643.053144][T17619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1643.053190][T17619] ? apparmor_socket_sendmsg+0x98/0x360 [ 1643.053232][T17619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1643.053264][T17619] sock_sendmsg_nosec+0x13a/0x180 [ 1643.053303][T17619] ____sys_sendmsg+0x54e/0x850 [ 1643.053340][T17619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1643.053382][T17619] ? import_iovec+0x73/0xa0 [ 1643.053415][T17619] ___sys_sendmsg+0x2a5/0x360 [ 1643.053444][T17619] ? __lock_acquire+0x6df/0x2e50 [ 1643.053476][T17619] ? __pfx____sys_sendmsg+0x10/0x10 [ 1643.053553][T17619] ? __fget_files+0x2a/0x420 [ 1643.053586][T17619] ? __fget_files+0x3a2/0x420 [ 1643.053634][T17619] __x64_sys_sendmsg+0x1b1/0x290 [ 1643.053675][T17619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1643.053732][T17619] do_syscall_64+0x166/0x520 [ 1643.053767][T17619] ? trace_irq_disable+0x3b/0x140 [ 1643.053851][T17619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.053953][T17619] ? clear_bhb_loop+0x70/0xc0 [ 1643.054046][T17619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.054117][T17619] RIP: 0033:0x7fc9b8f9e159 [ 1643.054191][T17619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1643.054250][T17619] RSP: 002b:00007fc9b9ed3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1643.054321][T17619] RAX: ffffffffffffffda RBX: 00007fc9b9225fa0 RCX: 00007fc9b8f9e159 [ 1643.054368][T17619] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 000000000000000a [ 1643.054414][T17619] RBP: 00007fc9b9ed3090 R08: 0000000000000000 R09: 0000000000000000 [ 1643.054460][T17619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1643.054506][T17619] R13: 00007fc9b9226038 R14: 00007fc9b9225fa0 R15: 00007fffd410aa88 [ 1643.054616][T17619] [ 1643.680050][T17635] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10866'. [ 1643.797798][T17636] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10866'. [ 1643.808102][T17636] netlink: 'syz.4.10866': attribute type 32 has an invalid length. [ 1643.808144][T17636] netlink: 500 bytes leftover after parsing attributes in process `syz.4.10866'. [ 1643.817724][T17639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10868'. [ 1643.835707][T17639] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10868'. [ 1643.857590][T17635] netlink: 548 bytes leftover after parsing attributes in process `syz.4.10866'. [ 1643.862728][T17642] netlink: 60 bytes leftover after parsing attributes in process `syz.4.10866'. [ 1644.099790][T17647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10869'. [ 1644.399213][T17660] netlink: 'syz.0.10871': attribute type 30 has an invalid length. [ 1644.426268][T17661] netlink: 'syz.0.10871': attribute type 30 has an invalid length. [ 1644.557562][T17627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1644.557641][T17627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1644.557816][T17627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1644.557925][T17627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1644.558017][T17627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1644.562325][T17627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1644.562611][T17627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1644.562708][T17627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1644.562798][T17627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1644.562887][T17627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1644.943845][T17675] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1644.970571][T17675] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1645.070990][T17674] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1645.080124][T17674] bond4: (slave bond6): Enslaving as an active interface with an up link [ 1645.083400][ T145] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1645.083527][ T145] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1645.083634][ T145] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1645.083733][ T145] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1645.162491][T17679] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1645.252592][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1645.347216][T17699] bridge0: entered allmulticast mode [ 1645.487327][T17706] syzkaller0: entered promiscuous mode [ 1645.487373][T17706] syzkaller0: entered allmulticast mode [ 1645.531980][T17701] FAULT_INJECTION: forcing a failure. [ 1645.531980][T17701] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.532062][T17701] CPU: 0 UID: 0 PID: 17701 Comm: syz.4.10877 Not tainted syzkaller #0 PREEMPT(full) [ 1645.532088][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1645.532148][T17701] Call Trace: [ 1645.532182][T17701] [ 1645.532213][T17701] dump_stack_lvl+0xe8/0x150 [ 1645.532316][T17701] should_fail_ex+0x410/0x560 [ 1645.532428][T17701] should_failslab+0xa8/0x100 [ 1645.532497][T17701] __kmalloc_cache_noprof+0xa3/0x600 [ 1645.532594][T17701] ? tipc_disc_create+0x6e/0x4a0 [ 1645.532664][T17701] ? tipc_disc_create+0x6e/0x4a0 [ 1645.532748][T17701] tipc_disc_create+0x6e/0x4a0 [ 1645.532855][T17701] __tipc_nl_bearer_enable+0xea6/0x1480 [ 1645.532944][T17701] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1645.533052][T17701] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1645.533171][T17701] ? __asan_memcpy+0x40/0x70 [ 1645.533259][T17701] ? nla_put+0xd0/0x150 [ 1645.533336][T17701] ? tipc_nl_compat_bearer_enable+0x35f/0x500 [ 1645.533435][T17701] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 1645.533524][T17701] ? __nla_parse+0x40/0x60 [ 1645.533611][T17701] tipc_nl_compat_doit+0x407/0x650 [ 1645.533713][T17701] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 1645.533822][T17701] ? bpf_lsm_capable+0x9/0x20 [ 1645.533898][T17701] ? security_capable+0x7e/0x2c0 [ 1645.533986][T17701] tipc_nl_compat_recv+0x8d3/0xcf0 [ 1645.534075][T17701] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1645.534152][T17701] ? __mutex_trylock_common+0x15f/0x270 [ 1645.534230][T17701] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1645.534319][T17701] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 1645.534395][T17701] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1645.534487][T17701] ? trace_contention_end+0x3d/0x140 [ 1645.534548][T17701] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 1645.534668][T17701] genl_family_rcv_msg_doit+0x233/0x340 [ 1645.534771][T17701] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1645.534891][T17701] ? __dev_queue_xmit+0x29b/0x3820 [ 1645.534990][T17701] genl_rcv_msg+0x614/0x7a0 [ 1645.535125][T17701] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1645.535220][T17701] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1645.535295][T17701] ? __pfx_ref_tracker_free+0x10/0x10 [ 1645.535384][T17701] netlink_rcv_skb+0x226/0x4a0 [ 1645.535459][T17701] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1645.535551][T17701] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1645.535663][T17701] ? down_read+0x2be/0x330 [ 1645.535738][T17701] genl_rcv+0x28/0x40 [ 1645.535826][T17701] netlink_unicast+0x7bd/0x940 [ 1645.535923][T17701] netlink_sendmsg+0x813/0xb40 [ 1645.536023][T17701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.536122][T17701] ? apparmor_socket_sendmsg+0x98/0x360 [ 1645.536213][T17701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1645.536288][T17701] sock_sendmsg_nosec+0x13a/0x180 [ 1645.536383][T17701] ____sys_sendmsg+0x54e/0x850 [ 1645.536476][T17701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1645.536570][T17701] ? import_iovec+0x73/0xa0 [ 1645.536648][T17701] ___sys_sendmsg+0x2a5/0x360 [ 1645.536704][T17701] ? __lock_acquire+0x6df/0x2e50 [ 1645.536780][T17701] ? __pfx____sys_sendmsg+0x10/0x10 [ 1645.536947][T17701] ? __fget_files+0x2a/0x420 [ 1645.537032][T17701] ? __fget_files+0x3a2/0x420 [ 1645.537142][T17701] __x64_sys_sendmsg+0x1b1/0x290 [ 1645.537218][T17701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1645.537347][T17701] do_syscall_64+0x166/0x520 [ 1645.537434][T17701] ? trace_irq_disable+0x3b/0x140 [ 1645.537489][T17701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.537550][T17701] ? clear_bhb_loop+0x70/0xc0 [ 1645.537625][T17701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.537691][T17701] RIP: 0033:0x7f823019e159 [ 1645.537748][T17701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1645.537809][T17701] RSP: 002b:00007f8230f9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1645.537889][T17701] RAX: ffffffffffffffda RBX: 00007f8230425fa0 RCX: 00007f823019e159 [ 1645.537935][T17701] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 000000000000000a [ 1645.537977][T17701] RBP: 00007f8230f9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1645.538022][T17701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1645.538064][T17701] R13: 00007f8230426038 R14: 00007f8230425fa0 R15: 00007ffd7ec6f298 [ 1645.538154][T17701] [ 1645.566721][T17701] tipc: Disabling bearer [ 1645.636361][T17701] tipc: Enabling of bearer rejected, failed to create discoverer [ 1646.090589][T17722] syzkaller1: entered promiscuous mode [ 1646.090647][T17722] syzkaller1: entered allmulticast mode [ 1646.448843][T17741] syzkaller0: entered promiscuous mode [ 1646.448891][T17741] syzkaller0: entered allmulticast mode [ 1646.616460][T17752] __nla_validate_parse: 10 callbacks suppressed [ 1646.616509][T17752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10887'. [ 1646.661133][T17754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10890'. [ 1646.760622][T17754] vlan2: entered promiscuous mode [ 1646.760669][T17754] syz_tun: entered promiscuous mode [ 1646.953122][T17767] syzkaller0: entered promiscuous mode [ 1646.953172][T17767] syzkaller0: entered allmulticast mode [ 1647.001724][T17767] FAULT_INJECTION: forcing a failure. [ 1647.001724][T17767] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.001816][T17767] CPU: 1 UID: 0 PID: 17767 Comm: syz.0.10895 Not tainted syzkaller #0 PREEMPT(full) [ 1647.001843][T17767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1647.001893][T17767] Call Trace: [ 1647.001919][T17767] [ 1647.001958][T17767] dump_stack_lvl+0xe8/0x150 [ 1647.002072][T17767] should_fail_ex+0x410/0x560 [ 1647.002181][T17767] ? __alloc_skb+0x1db/0x7a0 [ 1647.002268][T17767] should_failslab+0xa8/0x100 [ 1647.002346][T17767] ? __alloc_skb+0x1db/0x7a0 [ 1647.002424][T17767] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1647.002498][T17767] ? rcu_is_watching+0x16/0xb0 [ 1647.002578][T17767] ? __alloc_skb+0x1db/0x7a0 [ 1647.002680][T17767] __alloc_skb+0x1db/0x7a0 [ 1647.002779][T17767] tipc_buf_acquire+0x2b/0xe0 [ 1647.002874][T17767] tipc_disc_create+0x92/0x4a0 [ 1647.002975][T17767] __tipc_nl_bearer_enable+0xea6/0x1480 [ 1647.003063][T17767] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1647.003160][T17767] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1647.003291][T17767] ? __asan_memcpy+0x40/0x70 [ 1647.003395][T17767] ? nla_put+0xd0/0x150 [ 1647.003492][T17767] ? tipc_nl_compat_bearer_enable+0x35f/0x500 [ 1647.003589][T17767] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 1647.003674][T17767] ? __nla_parse+0x40/0x60 [ 1647.003752][T17767] tipc_nl_compat_doit+0x407/0x650 [ 1647.003841][T17767] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 1647.003968][T17767] ? bpf_lsm_capable+0x9/0x20 [ 1647.004047][T17767] ? security_capable+0x7e/0x2c0 [ 1647.004133][T17767] tipc_nl_compat_recv+0x8d3/0xcf0 [ 1647.004219][T17767] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1647.004299][T17767] ? __mutex_trylock_common+0x15f/0x270 [ 1647.004383][T17767] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 1647.004450][T17767] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 1647.004524][T17767] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1647.004620][T17767] ? trace_contention_end+0x3d/0x140 [ 1647.004695][T17767] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 1647.004831][T17767] genl_family_rcv_msg_doit+0x233/0x340 [ 1647.004960][T17767] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1647.005087][T17767] ? __dev_queue_xmit+0x29b/0x3820 [ 1647.005186][T17767] genl_rcv_msg+0x614/0x7a0 [ 1647.005295][T17767] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1647.005383][T17767] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 1647.005454][T17767] ? __pfx_ref_tracker_free+0x10/0x10 [ 1647.005551][T17767] netlink_rcv_skb+0x226/0x4a0 [ 1647.005619][T17767] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1647.005716][T17767] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1647.005834][T17767] ? down_read+0x2be/0x330 [ 1647.005908][T17767] genl_rcv+0x28/0x40 [ 1647.005986][T17767] netlink_unicast+0x7bd/0x940 [ 1647.006081][T17767] netlink_sendmsg+0x813/0xb40 [ 1647.006202][T17767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1647.006313][T17767] ? apparmor_socket_sendmsg+0x98/0x360 [ 1647.006410][T17767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1647.006479][T17767] sock_sendmsg_nosec+0x13a/0x180 [ 1647.006558][T17767] ____sys_sendmsg+0x54e/0x850 [ 1647.006637][T17767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1647.006735][T17767] ? import_iovec+0x73/0xa0 [ 1647.006811][T17767] ___sys_sendmsg+0x2a5/0x360 [ 1647.006866][T17767] ? __lock_acquire+0x6df/0x2e50 [ 1647.006942][T17767] ? __pfx____sys_sendmsg+0x10/0x10 [ 1647.007115][T17767] ? __fget_files+0x2a/0x420 [ 1647.007191][T17767] ? __fget_files+0x3a2/0x420 [ 1647.007308][T17767] __x64_sys_sendmsg+0x1b1/0x290 [ 1647.007384][T17767] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1647.007530][T17767] do_syscall_64+0x166/0x520 [ 1647.007632][T17767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.007703][T17767] ? clear_bhb_loop+0x70/0xc0 [ 1647.007780][T17767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.007836][T17767] RIP: 0033:0x7f813219e159 [ 1647.007891][T17767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1647.007954][T17767] RSP: 002b:00007f8132fe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1647.008018][T17767] RAX: ffffffffffffffda RBX: 00007f8132425fa0 RCX: 00007f813219e159 [ 1647.008068][T17767] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 000000000000000a [ 1647.008111][T17767] RBP: 00007f8132fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 1647.008146][T17767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1647.008180][T17767] R13: 00007f8132426038 R14: 00007f8132425fa0 R15: 00007ffc1deac898 [ 1647.008277][T17767] [ 1647.032226][T17767] tipc: Disabling bearer [ 1647.064296][T17767] tipc: Enabling of bearer rejected, failed to create discoverer [ 1647.538652][T17774] syzkaller1: entered promiscuous mode [ 1647.544719][T17774] syzkaller1: entered allmulticast mode [ 1647.733356][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10900'. [ 1647.736910][T17790] netlink: 1303 bytes leftover after parsing attributes in process `syz.4.10900'. [ 1647.788734][T17783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1647.974446][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10903'. [ 1647.974498][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10903'. [ 1647.975218][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10903'. [ 1647.975273][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10903'. [ 1648.148658][T17807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10906'. [ 1648.164956][T17807] netlink: 'syz.1.10906': attribute type 1 has an invalid length. [ 1648.200618][T17807] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1648.318802][T17810] batadv0: entered promiscuous mode [ 1648.328986][T17810] macvtap1: entered promiscuous mode [ 1648.334883][T17810] macvtap1: entered allmulticast mode [ 1648.340551][T17810] batadv0: entered allmulticast mode [ 1648.349760][T17810] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1648.461915][T17810] batadv0: left allmulticast mode [ 1648.476990][T17810] batadv0: left promiscuous mode [ 1648.703063][T17814] syzkaller0: entered promiscuous mode [ 1648.703105][T17814] syzkaller0: entered allmulticast mode [ 1648.720941][T17816] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10910'. [ 1648.790610][T17814] tipc: Enabled bearer , priority 0 [ 1648.799455][T17814] FAULT_INJECTION: forcing a failure. [ 1648.799455][T17814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1648.799526][T17814] CPU: 1 UID: 0 PID: 17814 Comm: syz.2.10909 Not tainted syzkaller #0 PREEMPT(full) [ 1648.799555][T17814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1648.799570][T17814] Call Trace: [ 1648.799580][T17814] [ 1648.799591][T17814] dump_stack_lvl+0xe8/0x150 [ 1648.799631][T17814] should_fail_ex+0x410/0x560 [ 1648.799674][T17814] _copy_to_user+0x31/0xb0 [ 1648.799709][T17814] simple_read_from_buffer+0xe1/0x170 [ 1648.799760][T17814] proc_fail_nth_read+0x1bb/0x230 [ 1648.799797][T17814] ? common_file_perm+0x20e/0x2b0 [ 1648.799827][T17814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1648.799870][T17814] ? rw_verify_area+0x24a/0x4c0 [ 1648.799907][T17814] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1648.799945][T17814] vfs_read+0x213/0xa80 [ 1648.799987][T17814] ? __pfx___mutex_lock+0x10/0x10 [ 1648.800025][T17814] ? __pfx_vfs_read+0x10/0x10 [ 1648.800059][T17814] ? __fget_files+0x2a/0x420 [ 1648.800097][T17814] ? __fget_files+0x3a2/0x420 [ 1648.800129][T17814] ? __fget_files+0x2a/0x420 [ 1648.800173][T17814] ksys_read+0x150/0x270 [ 1648.800210][T17814] ? __pfx_ksys_read+0x10/0x10 [ 1648.800269][T17814] do_syscall_64+0x166/0x520 [ 1648.800306][T17814] ? trace_irq_disable+0x3b/0x140 [ 1648.800330][T17814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.800357][T17814] ? clear_bhb_loop+0x70/0xc0 [ 1648.800388][T17814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.800414][T17814] RIP: 0033:0x7fe40555e98e [ 1648.800438][T17814] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1648.800461][T17814] RSP: 002b:00007fe40650ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1648.800498][T17814] RAX: ffffffffffffffda RBX: 00007fe4065106c0 RCX: 00007fe40555e98e [ 1648.800518][T17814] RDX: 000000000000000f RSI: 00007fe4065100a0 RDI: 000000000000000b [ 1648.800535][T17814] RBP: 00007fe406510090 R08: 0000000000000000 R09: 0000000000000000 [ 1648.800550][T17814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1648.800566][T17814] R13: 00007fe405826038 R14: 00007fe405825fa0 R15: 00007ffcb6f139b8 [ 1648.800608][T17814] [ 1649.188106][T17817] tipc: Resetting bearer [ 1649.307794][T17817] tipc: Disabling bearer [ 1649.332168][T17838] syzkaller0: entered promiscuous mode [ 1649.332221][T17838] syzkaller0: entered allmulticast mode [ 1649.345808][T17836] tipc: Enabled bearer , priority 0 [ 1649.536972][T17842] tipc: Resetting bearer [ 1649.557666][T17838] syzkaller0: left allmulticast mode [ 1649.605703][T17835] tipc: Resetting bearer [ 1649.696247][T17835] tipc: Disabling bearer [ 1650.545717][T17884] netlink: 'syz.4.10920': attribute type 1 has an invalid length. [ 1650.681808][T17886] syzkaller1: entered promiscuous mode [ 1650.681856][T17886] syzkaller1: entered allmulticast mode [ 1650.772902][ T52] Bluetooth: hci3: link tx timeout [ 1650.787048][ T52] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1651.323622][T17892] net_ratelimit: 3261 callbacks suppressed [ 1651.323690][T17892] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1651.323735][T17892] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1651.323775][T17892] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1651.323816][T17892] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1651.323856][T17892] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1651.323896][T17892] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1651.323935][T17892] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1651.323974][T17892] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1651.324013][T17892] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1651.401305][T17892] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1651.931369][T17920] __nla_validate_parse: 7 callbacks suppressed [ 1651.932291][T17920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10932'. [ 1652.151601][T17941] netlink: 'syz.0.10936': attribute type 12 has an invalid length. [ 1652.265878][T17950] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10937'. [ 1652.275484][T17950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10937'. [ 1652.285087][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10937'. [ 1652.359872][T17949] netlink: 'syz.2.10938': attribute type 1 has an invalid length. [ 1652.853209][T26644] Bluetooth: hci3: command 0x0406 tx timeout [ 1653.008649][T17971] FAULT_INJECTION: forcing a failure. [ 1653.008649][T17971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1653.008712][T17971] CPU: 1 UID: 0 PID: 17971 Comm: syz.4.10943 Not tainted syzkaller #0 PREEMPT(full) [ 1653.008739][T17971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1653.008752][T17971] Call Trace: [ 1653.008761][T17971] [ 1653.008769][T17971] dump_stack_lvl+0xe8/0x150 [ 1653.008803][T17971] should_fail_ex+0x410/0x560 [ 1653.008838][T17971] _copy_from_user+0x2d/0xb0 [ 1653.008860][T17971] ___sys_sendmsg+0x1c6/0x360 [ 1653.008881][T17971] ? __lock_acquire+0x6df/0x2e50 [ 1653.008905][T17971] ? __pfx____sys_sendmsg+0x10/0x10 [ 1653.008960][T17971] ? __fget_files+0x2a/0x420 [ 1653.008986][T17971] ? __fget_files+0x3a2/0x420 [ 1653.009019][T17971] __x64_sys_sendmsg+0x1b1/0x290 [ 1653.009044][T17971] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1653.009086][T17971] do_syscall_64+0x166/0x520 [ 1653.009114][T17971] ? trace_irq_disable+0x3b/0x140 [ 1653.009133][T17971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.009152][T17971] ? clear_bhb_loop+0x70/0xc0 [ 1653.009177][T17971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.009196][T17971] RIP: 0033:0x7f823019e159 [ 1653.009215][T17971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1653.009232][T17971] RSP: 002b:00007f8230f9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1653.009254][T17971] RAX: ffffffffffffffda RBX: 00007f8230425fa0 RCX: 00007f823019e159 [ 1653.009269][T17971] RDX: 0000000024000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1653.009282][T17971] RBP: 00007f8230f9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1653.009295][T17971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1653.009307][T17971] R13: 00007f8230426038 R14: 00007f8230425fa0 R15: 00007ffd7ec6f298 [ 1653.009338][T17971] [ 1653.414727][T17974] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10944'. [ 1654.306639][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1656.994001][T17957] batman_adv: batadv0: Adding interface: dummy0 [ 1657.000411][T17957] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1657.028863][T17957] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1657.331618][T17999] netlink: 'syz.4.10949': attribute type 4 has an invalid length. [ 1657.638143][T18010] netlink: 144 bytes leftover after parsing attributes in process `syz.1.10954'. [ 1657.778289][T18021] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10955'. [ 1657.778342][T18021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10955'. [ 1657.778725][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10955'. [ 1658.226605][T18038] net_ratelimit: 3265 callbacks suppressed [ 1658.232901][T18038] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1658.356954][T18047] netlink: 'syz.0.10961': attribute type 21 has an invalid length. [ 1658.365408][T18047] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10961'. [ 1658.377114][T18047] netlink: 'syz.0.10961': attribute type 5 has an invalid length. [ 1658.385291][T18047] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10961'. [ 1658.773834][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1663.729714][T18057] lo speed is unknown, defaulting to 1000 [ 1663.825902][T18057] lo speed is unknown, defaulting to 1000 [ 1663.876637][T18057] xfrm0 speed is unknown, defaulting to 1000 [ 1663.982002][T18108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10974'. [ 1664.017038][T18108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1664.017079][T18108] IPv6: NLM_F_CREATE should be set when creating new route [ 1664.017146][T18108] IPv6: NLM_F_CREATE should be set when creating new route [ 1664.775901][T18138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10984'. [ 1664.843228][T18145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10984'. [ 1664.886761][T18142] netlink: 'syz.3.10986': attribute type 12 has an invalid length. [ 1665.027401][T18145] bond4: entered promiscuous mode [ 1665.027464][T18145] bond4: entered allmulticast mode [ 1665.034467][T18145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1665.374599][T18155] netlink: 'syz.3.10988': attribute type 10 has an invalid length. [ 1665.384884][T18155] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10988'. [ 1665.460464][T18155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10988'. [ 1665.509996][T18158] pim6reg1: entered promiscuous mode [ 1665.516701][T18158] pim6reg1: entered allmulticast mode [ 1665.870212][T18168] lo speed is unknown, defaulting to 1000 [ 1665.891464][T18170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10993'. [ 1665.891530][T18170] netlink: 'syz.4.10993': attribute type 11 has an invalid length. [ 1665.979609][T18168] lo speed is unknown, defaulting to 1000 [ 1665.991102][T18171] netlink: 'syz.2.10992': attribute type 4 has an invalid length. [ 1666.007609][T18168] xfrm0 speed is unknown, defaulting to 1000 [ 1666.015050][T18170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10993'. [ 1666.015107][T18170] netlink: 'syz.4.10993': attribute type 11 has an invalid length. [ 1666.238534][T18178] netlink: 'syz.3.10995': attribute type 10 has an invalid length. [ 1666.246934][T18178] syz_tun: entered promiscuous mode [ 1666.734462][T18186] netlink: 'syz.4.10998': attribute type 12 has an invalid length. [ 1667.372198][T18198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11000'. [ 1668.362977][T18192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1668.420382][T18192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1669.228217][T18192] batman_adv: batadv0: Interface deactivated: gretap1 [ 1669.327047][ T145] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1669.327105][ T145] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.327165][ T145] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1669.327199][ T145] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.327241][ T145] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1669.327274][ T145] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.327315][ T145] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1669.327347][ T145] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.549775][T18234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11006'. [ 1669.803640][T18245] netlink: Invalid conntrack helper [ 1669.809080][T18245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1670.021928][T18247] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1670.055140][T18247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1670.067808][T18247] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1670.081077][T18247] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1670.105038][T18247] bond0 (unregistering): Released all slaves [ 1670.162270][T18249] netlink: 'syz.0.11009': attribute type 12 has an invalid length. [ 1670.618394][T18262] x_tables: duplicate underflow at hook 1 [ 1670.808840][T18266] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11017'. [ 1670.819544][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11017'. [ 1670.828978][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11017'. [ 1672.212700][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1675.693752][T18304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11026'. [ 1675.726920][T18298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11025'. [ 1676.036441][T18313] netlink: 'syz.0.11029': attribute type 12 has an invalid length. [ 1676.752952][T18334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11035'. [ 1676.762342][T18334] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11035'. [ 1677.235545][T18350] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11038'. [ 1677.235594][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11038'. [ 1677.235636][T18350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11038'. [ 1677.335101][T18353] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 1677.338976][T18353] netlink: 170676 bytes leftover after parsing attributes in process `syz.2.11040'. [ 1677.339041][T18353] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16) [ 1677.339097][T18353] openvswitch: netlink: Message has 512 unknown bytes. [ 1677.389944][T18332] syzkaller1: entered promiscuous mode [ 1677.396763][T18332] syzkaller1: entered allmulticast mode [ 1677.575168][T18364] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11043'. [ 1677.576665][T18362] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11042'. [ 1677.598168][T18362] netlink: 'syz.2.11042': attribute type 1 has an invalid length. [ 1677.688151][T18367] netlink: 'syz.3.11044': attribute type 1 has an invalid length. [ 1678.278944][T18384] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1682.295892][T18367] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1682.312992][T18375] pim6reg: entered allmulticast mode [ 1682.321839][T18376] pim6reg: left allmulticast mode [ 1682.508854][T18404] __nla_validate_parse: 1 callbacks suppressed [ 1682.508907][T18404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11051'. [ 1682.628134][T18404] netlink: 92 bytes leftover after parsing attributes in process `syz.0.11051'. [ 1682.648617][T18410] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11053'. [ 1682.670719][T18410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11053'. [ 1682.739812][T18416] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11054'. [ 1683.940775][T18443] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11062'. [ 1683.950758][T18443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11062'. [ 1683.950786][T18443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11062'. [ 1684.127286][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11064'. [ 1684.144089][T18447] ip6tnl2: entered allmulticast mode [ 1684.284950][T18449] netlink: 'syz.2.11067': attribute type 1 has an invalid length. [ 1684.424641][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11065'. [ 1684.470185][T18462] netlink: 'syz.3.11068': attribute type 1 has an invalid length. [ 1690.836813][T18449] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1690.852736][T18489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11072'. [ 1690.922987][T18459] tipc: New replicast peer: 172.20.20.187 [ 1690.923914][T18459] tipc: Enabled bearer , priority 26 [ 1690.949453][T18462] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1690.950666][T18465] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1690.967497][T18466] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1690.991850][T18467] bridge15: entered promiscuous mode [ 1691.139937][T18468] bridge15: entered promiscuous mode [ 1691.444636][T18508] vlan2: entered allmulticast mode [ 1691.444683][T18508] bond0: entered allmulticast mode [ 1691.567540][T18515] xt_hashlimit: size too large, truncated to 1048576 [ 1692.042544][ T2468] tipc: Node number set to 613973638 [ 1692.558000][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.558210][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.558393][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.558555][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.558709][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.558885][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.559036][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.559184][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.559343][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.559499][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.644292][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.653334][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1692.653584][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1692.654045][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1692.654532][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1692.673550][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1692.674130][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1692.699117][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1692.699823][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1692.700201][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11081'. [ 1692.780785][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.781225][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.781617][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.782023][T18532] tipc: Enabling of bearer rejected, already enabled [ 1692.813439][T18536] tipc: New replicast peer: 127.0.0.1 [ 1692.925374][T18536] tipc: Enabled bearer , priority 26 [ 1692.925734][T18532] tipc: Enabling of bearer rejected, already enabled [ 1693.302242][T18554] netlink: 'syz.4.11084': attribute type 29 has an invalid length. [ 1693.480963][T18558] netlink: 'syz.3.11087': attribute type 3 has an invalid length. [ 1693.605088][T18552] bond7: option lacp_active: invalid value (5) [ 1693.620914][T18552] bond7 (unregistering): Released all slaves [ 1694.119579][T18581] ipvlan3: entered allmulticast mode [ 1694.119624][T18581] virt_wifi0: entered allmulticast mode [ 1694.152706][T18581] batman_adv: batadv0: Adding interface: ipvlan3 [ 1694.152772][T18581] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.153008][T18581] batman_adv: batadv0: Interface activated: ipvlan3 [ 1694.466450][T18572] lo speed is unknown, defaulting to 1000 [ 1694.487840][T18572] lo speed is unknown, defaulting to 1000 [ 1694.528034][T18572] xfrm0 speed is unknown, defaulting to 1000 [ 1694.644990][T18582] udevd[18582]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1694.670617][T18601] netlink: 'syz.4.11094': attribute type 12 has an invalid length. [ 1694.688426][T18584] udevd[18584]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1695.218114][T18606] netlink: 'syz.3.11095': attribute type 1 has an invalid length. [ 1695.497837][T18606] bond6: entered promiscuous mode [ 1695.507349][T18606] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1695.604639][T18608] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1695.615443][T18608] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1695.615497][T18608] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1695.675948][T18608] bond6: (slave ip6gre2): making interface the new active one [ 1695.676038][T18608] ip6gre2: entered promiscuous mode [ 1695.709689][T18608] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 1696.350479][T18618] __nla_validate_parse: 27 callbacks suppressed [ 1696.350535][T18618] netlink: 1303 bytes leftover after parsing attributes in process `syz.2.11099'. [ 1696.708956][T18626] netlink: 'syz.4.11101': attribute type 12 has an invalid length. [ 1696.961646][T18628] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11102'. [ 1697.360335][T18636] netlink: 'syz.3.11104': attribute type 12 has an invalid length. [ 1697.527741][T18639] netlink: 112 bytes leftover after parsing attributes in process `syz.2.11105'. [ 1697.595294][T18639] netlink: 'syz.2.11105': attribute type 1 has an invalid length. [ 1698.729662][T18676] netlink: 'syz.4.11117': attribute type 12 has an invalid length. [ 1698.955013][T18680] ip_tables: iptables: counters copy to user failed while replacing table [ 1699.703578][T18706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11126'. [ 1699.786657][T18706] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11126'. [ 1699.852613][T18706] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11126'. [ 1699.852664][T18706] netlink: 64 bytes leftover after parsing attributes in process `syz.4.11126'. [ 1699.954825][T18706] syzkaller0: entered promiscuous mode [ 1699.960640][T18706] syzkaller0: entered allmulticast mode [ 1700.310024][T18727] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1704.270396][T18721] syzkaller0: entered promiscuous mode [ 1704.270447][T18721] syzkaller0: entered allmulticast mode [ 1704.282147][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11131'. [ 1704.307749][T18724] tipc: Enabled bearer , priority 0 [ 1704.346932][T18713] tipc: Resetting bearer [ 1704.363248][ T5754] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1704.405781][T18713] tipc: Disabling bearer [ 1704.461785][T18749] netlink: 'syz.4.11133': attribute type 12 has an invalid length. [ 1704.476201][T18750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11135'. [ 1704.672175][T18757] netlink: 'syz.2.11136': attribute type 12 has an invalid length. [ 1704.726258][T18762] netlink: 'syz.1.11139': attribute type 1 has an invalid length. [ 1704.726301][T18762] netlink: 1368 bytes leftover after parsing attributes in process `syz.1.11139'. [ 1704.773598][T11813] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1705.096864][ T5754] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1705.117707][T18776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11143'. [ 1705.195136][T18778] netlink: 'syz.0.11144': attribute type 10 has an invalid length. [ 1705.253050][T18778] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1705.299482][T18778] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1705.515029][T18784] syzkaller0: entered promiscuous mode [ 1705.521124][T18784] syzkaller0: entered allmulticast mode [ 1705.814862][T11813] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1705.815168][T11813] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1706.081370][T18798] netlink: 'syz.2.11150': attribute type 12 has an invalid length. [ 1706.152981][T16423] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1706.551216][T18826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1707.087254][T18837] x_tables: duplicate underflow at hook 2 [ 1707.109381][T18835] netlink: NAT attribute has 4 unknown bytes [ 1707.109459][T18835] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1707.136175][T18839] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1707.381199][T18848] netlink: 'syz.1.11165': attribute type 12 has an invalid length. [ 1707.509107][T18851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11166'. [ 1707.668039][T18851] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1707.760049][T18858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11167'. [ 1707.831984][T18851] bond7 (unregistering): Released all slaves [ 1707.960005][T18864] ip_tables: iptables: counters copy to user failed while replacing table [ 1707.996603][T18864] ip6erspan0: entered allmulticast mode [ 1708.006232][T18861] syzkaller0: refused to change device tx_queue_len [ 1708.052592][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1708.175670][T18872] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1708.187394][T18870] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1708.187776][T18870] syzkaller1: linktype set to 769 [ 1708.392842][T18866] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11171'. [ 1708.677000][T18902] netlink: 'syz.2.11179': attribute type 12 has an invalid length. [ 1708.846645][T18900] bridge19: entered allmulticast mode [ 1709.097474][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11183'. [ 1709.109672][T18915] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11183'. [ 1709.284270][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11186'. [ 1709.442516][T18933] syz.0.11189: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1709.468418][T18933] CPU: 1 UID: 0 PID: 18933 Comm: syz.0.11189 Not tainted syzkaller #0 PREEMPT(full) [ 1709.468450][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1709.468467][T18933] Call Trace: [ 1709.468477][T18933] [ 1709.468487][T18933] dump_stack_lvl+0xe8/0x150 [ 1709.468528][T18933] warn_alloc+0x24d/0x270 [ 1709.468565][T18933] ? kasan_save_track+0x4f/0x80 [ 1709.468587][T18933] ? kasan_save_track+0x3e/0x80 [ 1709.468621][T18933] ? __pfx_warn_alloc+0x10/0x10 [ 1709.468653][T18933] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1709.468677][T18933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.468726][T18933] __vmalloc_node_range_noprof+0x127/0x1540 [ 1709.468785][T18933] ? rcu_is_watching+0x16/0xb0 [ 1709.468819][T18933] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1709.468852][T18933] ? __kmalloc_cache_noprof+0x321/0x600 [ 1709.468888][T18933] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1709.468922][T18933] ? xskq_create+0x56/0x220 [ 1709.468958][T18933] xskq_create+0x148/0x220 [ 1709.468989][T18933] ? xsk_init_queue+0x8a/0xe0 [ 1709.469021][T18933] xsk_init_queue+0x8a/0xe0 [ 1709.469055][T18933] xsk_setsockopt+0x52a/0x960 [ 1709.469088][T18933] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1709.469118][T18933] ? __pfx_aa_sk_perm+0x10/0x10 [ 1709.469153][T18933] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1709.469182][T18933] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1709.469212][T18933] do_sock_setsockopt+0x17c/0x1b0 [ 1709.469242][T18933] __x64_sys_setsockopt+0x13d/0x1b0 [ 1709.469274][T18933] do_syscall_64+0x166/0x520 [ 1709.469307][T18933] ? trace_irq_disable+0x3b/0x140 [ 1709.469329][T18933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.469353][T18933] ? clear_bhb_loop+0x70/0xc0 [ 1709.469382][T18933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.469406][T18933] RIP: 0033:0x7f813219e159 [ 1709.469428][T18933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1709.469449][T18933] RSP: 002b:00007f8132fa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1709.469474][T18933] RAX: ffffffffffffffda RBX: 00007f8132426180 RCX: 00007f813219e159 [ 1709.469492][T18933] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1709.469507][T18933] RBP: 00007f8132235024 R08: 0000000000000004 R09: 0000000000000000 [ 1709.469522][T18933] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1709.469537][T18933] R13: 00007f8132426218 R14: 00007f8132426180 R15: 00007ffc1deac898 [ 1709.469575][T18933] [ 1709.490354][T18933] Mem-Info: [ 1709.490371][T18933] active_anon:10430 inactive_anon:6 isolated_anon:0 [ 1709.490371][T18933] active_file:18 inactive_file:44177 isolated_file:0 [ 1709.490371][T18933] unevictable:34 dirty:178 writeback:0 [ 1709.490371][T18933] slab_reclaimable:13970 slab_unreclaimable:209842 [ 1709.490371][T18933] mapped:29878 shmem:698 pagetables:3614 [ 1709.490371][T18933] sec_pagetables:0 bounce:0 [ 1709.490371][T18933] kernel_misc_reclaimable:0 [ 1709.490371][T18933] free:1102355 free_pcp:25118 free_cma:0 [ 1709.490457][T18933] Node 0 active_anon:41720kB inactive_anon:24kB active_file:72kB inactive_file:176508kB unevictable:136kB isolated(anon):0kB isolated(file):0kB mapped:99032kB dirty:712kB writeback:0kB shmem:2792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17032kB pagetables:14168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1709.490520][T18933] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20480kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1709.490585][T18933] Node 0 DMA free:15136kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:120kB free_cma:0kB [ 1709.490659][T18933] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1709.490702][T18933] Node 0 DMA32 free:548568kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:41720kB inactive_anon:24kB active_file:72kB inactive_file:176508kB unevictable:136kB writepending:712kB zspages:0kB present:3129332kB managed:2546700kB mlocked:136kB bounce:0kB free_pcp:43568kB local_pcp:22456kB free_cma:0kB [ 1709.490792][T18933] lowmem_reserve[]: 0 0 0 0 0 [ 1709.490831][T18933] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1709.490898][T18933] lowmem_reserve[]: 0 0 0 0 0 [ 1709.490937][T18933] Node 1 Normal free:3845716kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:56680kB local_pcp:27528kB free_cma:0kB [ 1709.491003][T18933] lowmem_reserve[]: 0 0 0 0 0 [ 1709.491048][T18933] Node 0 DMA: 0*4kB 2*8kB (U) 1*16kB (U) 2*32kB (U) 1*64kB (U) 1*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (M) = 15136kB [ 1709.491223][T18933] Node 0 DMA32: 2130*4kB (UM) 932*8kB (UME) 819*16kB (UME) 1362*32kB (UME) 706*64kB (UME) 401*128kB (UME) 344*256kB (UM) 193*512kB (UM) 130*1024kB (UME) 11*2048kB (UM) 9*4096kB (UM) = 548568kB [ 1709.491406][T18933] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1709.491528][T18933] Node 1 Normal: 25*4kB (UM) 28*8kB (UM) 31*16kB (UM) 39*32kB (UM) 37*64kB (UM) 30*128kB (U) 32*256kB (UM) 31*512kB (UM) 22*1024kB (U) 5*2048kB (U) 923*4096kB (UM) = 3845716kB [ 1709.491790][T18933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1709.491809][T18933] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1709.491827][T18933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1709.491846][T18933] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1709.491865][T18933] 44889 total pagecache pages [ 1709.491874][T18933] 0 pages in swap cache [ 1709.491883][T18933] Free swap = 124996kB [ 1709.491892][T18933] Total swap = 124996kB [ 1709.491902][T18933] 2097051 pages RAM [ 1709.491911][T18933] 0 pages HighMem/MovableOnly [ 1709.491920][T18933] 428760 pages reserved [ 1709.491929][T18933] 0 pages cma reserved [ 1709.984244][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1710.296545][T18940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11190'. [ 1710.296625][T18940] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1710.639173][T18957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11191'. [ 1710.978670][T18963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11195'. [ 1711.189464][T18970] udevd[18970]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1711.191185][T18975] syzkaller1: entered promiscuous mode [ 1711.191242][T18975] syzkaller1: entered allmulticast mode [ 1711.261272][T18969] udevd[18969]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1711.460877][T18995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11200'. [ 1711.471188][T18996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11200'. [ 1711.471234][T18996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11200'. [ 1711.624423][T19000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11201'. [ 1711.849943][T19010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11204'. [ 1713.089798][T19045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1713.277504][T19033] mac80211_hwsim hwsim125 wlan0: entered promiscuous mode [ 1713.277562][T19033] mac80211_hwsim hwsim125 wlan0: entered allmulticast mode [ 1713.707522][T19067] netlink: 5 bytes leftover after parsing attributes in process `syz.1.11216'. [ 1714.003218][T19078] nbd: must specify at least one socket [ 1714.068134][T19074] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1714.082534][T19074] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1714.082865][ T6860] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1714.765245][T19127] __nla_validate_parse: 2 callbacks suppressed [ 1714.765304][T19127] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11230'. [ 1715.767196][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1715.891152][T19179] netlink: 48 bytes leftover after parsing attributes in process `syz.4.11236'. [ 1715.902697][T19179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11236'. [ 1715.902775][T19179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11236'. [ 1716.402012][T19191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11237'. [ 1718.260404][T19147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1718.614634][T19194] netlink: 'syz.3.11238': attribute type 41 has an invalid length. [ 1718.932666][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1719.159604][T19201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11241'. [ 1721.395782][T19191] bridge3: entered allmulticast mode [ 1721.651477][T19214] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1721.663221][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11244'. [ 1721.995242][T19234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11249'. [ 1722.036191][T19232] syzkaller1: entered allmulticast mode [ 1722.158082][T19238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11248'. [ 1722.158138][T19238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11248'. [ 1722.158157][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11248'. [ 1722.194135][T19240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1722.475041][T19252] openvswitch: netlink: IP tunnel dst address not specified [ 1722.489493][T19252] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.11253'. [ 1723.335801][T19281] SET target dimension over the limit! [ 1723.345895][T19281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11260'. [ 1723.356898][T19281] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11260'. [ 1723.377201][T19282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11259'. [ 1723.506820][T19289] netlink: 'syz.2.11261': attribute type 1 has an invalid length. [ 1728.508473][T19289] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1729.088514][T19332] siw: device registration error -23 [ 1729.147305][T19341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11274'. [ 1729.615359][T19357] netlink: 'syz.3.11281': attribute type 13 has an invalid length. [ 1729.615406][T19357] netlink: 'syz.3.11281': attribute type 58 has an invalid length. [ 1729.615441][T19357] netlink: 152 bytes leftover after parsing attributes in process `syz.3.11281'. [ 1729.860498][T19364] netlink: 148 bytes leftover after parsing attributes in process `syz.4.11282'. [ 1729.860549][T19364] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1729.882616][T19372] netlink: 76 bytes leftover after parsing attributes in process `syz.3.11285'. [ 1729.935216][T11813] tipc: Subscription rejected, illegal request [ 1730.356209][T19393] netlink: 156 bytes leftover after parsing attributes in process `syz.4.11290'. [ 1730.503616][T19399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1730.523154][T19399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1730.531236][T19399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1730.545775][T19399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1730.556693][T19399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1731.772843][T19452] syzkaller0: entered promiscuous mode [ 1731.772888][T19452] syzkaller0: entered allmulticast mode [ 1731.887818][T19459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11301'. [ 1732.066170][T26760] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.314201][T19461] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1732.347854][T19396] lo speed is unknown, defaulting to 1000 [ 1732.405396][T19396] lo speed is unknown, defaulting to 1000 [ 1732.458027][T26760] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.547678][T19396] xfrm0 speed is unknown, defaulting to 1000 [ 1732.655906][T26760] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.692951][ T52] Bluetooth: hci0: command tx timeout [ 1732.775773][T26760] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.024251][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11306'. [ 1733.114969][T19483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11308'. [ 1733.562638][T11526] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1733.814083][T26762] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1733.894993][T26760] pimreg: left allmulticast mode [ 1734.121570][T26760] bond6 (unregistering): (slave ip6gre2): Releasing backup interface [ 1734.121619][T26760] ip6gre2 (unregistering): left promiscuous mode [ 1734.782543][ T52] Bluetooth: hci0: command tx timeout [ 1734.789840][T11815] smbdirect: ib_dev[syz1] removed [ 1734.818101][T26760] bond0 (unregistering): Released all slaves [ 1734.847343][T19523] netlink: 'syz.0.11318': attribute type 2 has an invalid length. [ 1734.870630][T26760] bond1 (unregistering): Released all slaves [ 1734.915790][T26760] bond2 (unregistering): Released all slaves [ 1734.946579][T26760] bond3 (unregistering): Released all slaves [ 1734.975470][T26760] bond4 (unregistering): Released all slaves [ 1735.004548][T26760] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1735.034476][T26760] bond5 (unregistering): Released all slaves [ 1735.080742][T26760] bond6 (unregistering): Released all slaves [ 1735.294671][T19527] bridge_slave_1 (unregistering): left promiscuous mode [ 1735.294804][T19527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.449815][ T6860] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1735.449895][ T6860] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1735.518737][T26760] tipc: Disabling bearer [ 1735.520161][T26760] tipc: Disabling bearer [ 1735.520989][T26760] tipc: Left network mode [ 1736.442695][T19565] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11323'. [ 1736.646965][T19396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.647111][T19396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.647339][T19396] bridge_slave_0: entered allmulticast mode [ 1736.656526][T19396] bridge_slave_0: entered promiscuous mode [ 1736.694718][T19396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.694941][T19396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.697564][T19396] bridge_slave_1: entered allmulticast mode [ 1736.737882][T19396] bridge_slave_1: entered promiscuous mode [ 1736.788151][T26760] IPVS: stopping backup sync thread 7155 ... [ 1736.865185][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1736.874788][ T52] Bluetooth: hci0: command tx timeout [ 1736.880435][T19587] netlink: 'syz.4.11329': attribute type 1 has an invalid length. [ 1736.955486][T19589] netlink: 'syz.4.11329': attribute type 1 has an invalid length. [ 1737.069726][T19396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1737.086926][T19396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1737.154961][T19596] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11331'. [ 1737.165094][T19596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11331'. [ 1737.174521][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11331'. [ 1737.596118][T19589] veth9: entered allmulticast mode [ 1737.970270][T19396] team0: Port device team_slave_0 added [ 1738.391420][T19627] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11334'. [ 1738.431357][T19627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1738.431432][T19627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1738.431536][T19627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1738.432031][T19627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1738.432123][T19627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1738.432214][T19627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1738.432304][T19627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1738.432562][T19627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1738.432662][T19627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1738.432758][T19627] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 1738.932573][ T52] Bluetooth: hci0: command tx timeout [ 1743.667630][T19396] team0: Port device team_slave_1 added [ 1743.701593][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1743.939239][T19396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1743.939283][T19396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1743.939313][T19396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1743.996778][T19396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1743.996830][T19396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1743.996860][T19396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1744.117437][T19657] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11343'. [ 1744.332963][T19655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11342'. [ 1744.411792][T19655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11342'. [ 1744.579063][T19396] hsr_slave_0: entered promiscuous mode [ 1744.589070][T19396] hsr_slave_1: entered promiscuous mode [ 1744.597724][T19396] debugfs: 'hsr0' already exists in 'hsr' [ 1744.597775][T19396] Cannot create hsr debugfs directory [ 1745.247224][T19690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11349'. [ 1745.301412][T19687] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1745.335895][T19687] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1745.351613][T19687] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1745.788909][T19709] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11352'. [ 1745.788956][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11352'. [ 1745.788991][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11352'. [ 1746.202022][T26760] batman_adv: batadv0: Removing interface: dummy0 [ 1746.221183][T26760] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1746.230802][T26760] batman_adv: batadv0: Removing interface: ipvlan3 [ 1747.453903][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1748.172182][T19763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11359'. [ 1752.583230][T19396] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1752.906430][T19773] tipc: Enabled bearer , priority 0 [ 1752.921536][T19782] tipc: Resetting bearer [ 1753.077263][T19396] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1753.178530][T19788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11365'. [ 1753.219549][T19788] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1753.378930][T19793] netlink: 4384 bytes leftover after parsing attributes in process `syz.4.11365'. [ 1753.581467][T19797] x_tables: duplicate entry at hook 1 [ 1753.632099][T19396] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1753.731674][T19788] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1753.783847][T19780] tipc: Disabling bearer [ 1753.791459][T26760] IPVS: stop unused estimator thread 0... [ 1754.028750][T19396] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1754.136999][T19815] netlink: 'syz.2.11371': attribute type 1 has an invalid length. [ 1754.175299][T19814] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1754.187219][T19814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1754.198353][T19814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11370'. [ 1754.399097][T19817] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11369'. [ 1759.558239][T19855] tipc: Enabled bearer , priority 0 [ 1759.577427][T19840] tipc: Disabling bearer [ 1759.816630][T19866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11377'. [ 1759.909368][T19874] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11377'. [ 1759.916526][T19874] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11377'. [ 1760.162730][T19892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11377'. [ 1760.542775][T19873] netlink: 'syz.1.11380': attribute type 12 has an invalid length. [ 1760.553810][T26762] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1760.553874][T26762] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.555010][T11814] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1760.555098][T11814] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.555215][T11814] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1760.555286][T11814] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.555399][T11814] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1760.555482][T11814] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.651828][T19892] bridge_slave_1: left allmulticast mode [ 1760.652602][T19892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.730405][T19892] bridge_slave_0: left allmulticast mode [ 1760.730461][T19892] bridge_slave_0: left promiscuous mode [ 1760.730848][T19892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.906363][T19897] net_ratelimit: 3259 callbacks suppressed [ 1760.913333][T19897] ip_tables: iptables: counters copy to user failed while replacing table [ 1761.038417][ T31] audit: type=1800 audit(1788713110.845:67): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11381" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2016 res=0 errno=0 [ 1761.914889][T16423] xfrm0 speed is unknown, defaulting to 1000 [ 1761.921229][T16423] syz0: Port: 1 Link DOWN [ 1761.925885][T16423] xfrm0 speed is unknown, defaulting to 1000 [ 1762.129930][T19396] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1762.161061][T19396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1762.168320][T19396] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1762.235397][T19396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1762.248034][T19396] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1762.285030][T19396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1762.297293][T19396] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1762.336206][T19396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1762.479751][T19934] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11385'. [ 1762.479794][T19934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11385'. [ 1762.479825][T19934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11385'. [ 1762.568703][T19936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11388'. [ 1762.640158][T19936] netlink: 56 bytes leftover after parsing attributes in process `syz.4.11388'. [ 1763.038744][T19396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1763.105240][T19943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11389'. [ 1763.120149][T19396] 8021q: adding VLAN 0 to HW filter on device team0 [ 1763.149909][ T6956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.150017][ T6956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1763.179768][ T6956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.179894][ T6956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1764.441989][T19961] netlink: NAT attribute has 4 unknown bytes [ 1764.448810][T19961] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1768.616353][T19957] bridge3: entered promiscuous mode [ 1768.621852][T19957] bridge3: entered allmulticast mode [ 1768.765874][T19968] sctp: [Deprecated]: syz.4.11395 (pid 19968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1768.765874][T19968] Use struct sctp_sack_info instead [ 1768.845280][T19971] __nla_validate_parse: 2 callbacks suppressed [ 1768.851783][T19971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11396'. [ 1769.119122][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11398'. [ 1769.119190][T19984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11398'. [ 1769.119279][T19984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11398'. [ 1769.119337][T19984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11398'. [ 1769.177240][T19987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11398'. [ 1769.177303][T19987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11398'. [ 1769.177354][T19987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11398'. [ 1769.177374][T19987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11398'. [ 1769.661959][T20003] FAULT_INJECTION: forcing a failure. [ 1769.661959][T20003] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.662019][T20003] CPU: 1 UID: 0 PID: 20003 Comm: syz.0.11402 Not tainted syzkaller #0 PREEMPT(full) [ 1769.662046][T20003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1769.662062][T20003] Call Trace: [ 1769.662071][T20003] [ 1769.662080][T20003] dump_stack_lvl+0xe8/0x150 [ 1769.662120][T20003] should_fail_ex+0x410/0x560 [ 1769.662160][T20003] should_failslab+0xa8/0x100 [ 1769.662191][T20003] __kmalloc_noprof+0xfe/0x720 [ 1769.662226][T20003] ? tomoyo_encode+0x2ad/0x570 [ 1769.662251][T20003] ? tomoyo_encode+0x2ad/0x570 [ 1769.662283][T20003] tomoyo_encode+0x2ad/0x570 [ 1769.662320][T20003] tomoyo_realpath_from_path+0x5fa/0x640 [ 1769.662357][T20003] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1769.662392][T20003] tomoyo_path_number_perm+0x246/0x5f0 [ 1769.662430][T20003] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1769.662464][T20003] ? __lock_acquire+0x6df/0x2e50 [ 1769.662505][T20003] ? hook_file_ioctl+0x1f2/0x600 [ 1769.662560][T20003] ? __fget_files+0x2a/0x420 [ 1769.662593][T20003] ? __fget_files+0x2a/0x420 [ 1769.662621][T20003] ? __fget_files+0x3a2/0x420 [ 1769.662649][T20003] ? __fget_files+0x2a/0x420 [ 1769.662683][T20003] security_file_ioctl+0xc3/0x2a0 [ 1769.662719][T20003] __se_sys_ioctl+0x47/0x170 [ 1769.662745][T20003] do_syscall_64+0x166/0x520 [ 1769.662779][T20003] ? trace_irq_disable+0x3b/0x140 [ 1769.662801][T20003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.662826][T20003] ? clear_bhb_loop+0x70/0xc0 [ 1769.662855][T20003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.662878][T20003] RIP: 0033:0x7f813219e159 [ 1769.662899][T20003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1769.662919][T20003] RSP: 002b:00007f8132fe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1769.662944][T20003] RAX: ffffffffffffffda RBX: 00007f8132425fa0 RCX: 00007f813219e159 [ 1769.662961][T20003] RDX: 0000200000000240 RSI: 0000000000008954 RDI: 0000000000000003 [ 1769.662977][T20003] RBP: 00007f8132fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 1769.662991][T20003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1769.663005][T20003] R13: 00007f8132426038 R14: 00007f8132425fa0 R15: 00007ffc1deac898 [ 1769.663050][T20003] [ 1769.792037][T20003] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1770.152663][T20008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11403'. [ 1770.620109][T20027] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1770.656155][T19396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1770.846052][T19396] veth0_vlan: entered promiscuous mode [ 1770.879278][T19396] veth1_vlan: entered promiscuous mode [ 1771.054219][T19396] veth0_macvtap: entered promiscuous mode [ 1771.095961][T19396] veth1_macvtap: entered promiscuous mode [ 1771.239075][T19396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1771.309140][T19396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1771.373746][T26760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.373832][T26760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.394512][T26760] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.943233][ T6956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.978194][T20055] netlink: 'syz.4.11412': attribute type 4 has an invalid length. [ 1772.068780][T11814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1772.068824][T11814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1772.364386][T20074] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1772.509081][T20074] bond7 (unregistering): Released all slaves [ 1772.706896][T26760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1772.706946][T26760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1773.009166][T20101] Bluetooth: MGMT ver 1.23 [ 1773.972810][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1773.992800][T20153] __nla_validate_parse: 5 callbacks suppressed [ 1773.992859][T20153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11427'. [ 1773.996062][T20153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11427'. [ 1774.085572][T20150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11429'. [ 1775.243654][T20179] lo speed is unknown, defaulting to 1000 [ 1775.282123][T20179] lo speed is unknown, defaulting to 1000 [ 1775.291150][T20182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1775.321391][T20179] xfrm0 speed is unknown, defaulting to 1000 [ 1775.383047][T20182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1775.389709][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11437'. [ 1775.637073][T20204] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1776.678915][T20227] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1776.914793][T20231] syzkaller0: entered promiscuous mode [ 1776.914844][T20231] syzkaller0: entered allmulticast mode [ 1778.141787][T20182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1778.446573][T20261] netlink: 92 bytes leftover after parsing attributes in process `syz.2.11451'. [ 1779.797179][T20308] netlink: Unknown NAT attribute (type=9006, max=9) [ 1779.797237][T20308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1779.834317][T20311] geneve2: entered promiscuous mode [ 1779.834363][T20311] geneve2: entered allmulticast mode [ 1780.249833][T20337] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11468'. [ 1780.367736][T20348] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1780.433504][T20348] netlink: 'syz.0.11472': attribute type 34 has an invalid length. [ 1780.443351][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11472'. [ 1780.559736][T20348] bond5: option lacp_strict: invalid value (24) [ 1780.647985][T20348] bond5 (unregistering): Released all slaves [ 1781.171180][T20370] netlink: 'syz.0.11476': attribute type 142 has an invalid length. [ 1781.457222][T20378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11478'. [ 1781.457303][T20378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11478'. [ 1781.751094][T20378] geneve3: entered promiscuous mode [ 1781.751161][T20378] geneve3: entered allmulticast mode [ 1781.852689][ T6956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.860560][T26760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.860690][T26760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.860798][T26760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.440437][T20419] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11486'. [ 1782.485457][T16423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.076447][T20433] 8021q: VLANs not supported on ip_vti0 [ 1783.091895][T20410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1783.165889][T20433] syzkaller0: entered promiscuous mode [ 1783.171556][T20433] syzkaller0: entered allmulticast mode [ 1783.178170][T20430] x_tables: duplicate underflow at hook 1 [ 1783.259663][T20430] IPv6: NLM_F_CREATE should be specified when creating new route [ 1783.259917][T20430] IPv6: Can't replace route, no match found [ 1783.527684][T20442] netlink: 'syz.0.11494': attribute type 1 has an invalid length. [ 1783.564579][T20442] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11494'. [ 1783.566881][T20443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11494'. [ 1783.730143][T20463] netlink: 136 bytes leftover after parsing attributes in process `syz.1.11495'. [ 1783.740907][T20463] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 1783.845762][T20475] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11499'. [ 1783.921845][T20479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11501'. [ 1784.129797][T20486] 8021q: VLANs not supported on ip_vti0 [ 1784.738242][T20496] tipc: Enabled bearer , priority 0 [ 1784.739337][T20496] syzkaller0: entered promiscuous mode [ 1784.744162][T20496] syzkaller0: entered allmulticast mode [ 1785.106352][T20502] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1785.147884][T20506] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1785.170932][T20506] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1785.234530][T20502] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1785.255026][T20502] bond6 (unregistering): Released all slaves [ 1785.299993][T20506] dvmrp0: entered allmulticast mode [ 1785.308835][T20506] dvmrp0: left allmulticast mode [ 1785.471967][T20492] tipc: Resetting bearer [ 1785.481672][T20525] __nla_validate_parse: 7 callbacks suppressed [ 1785.481730][T20525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11512'. [ 1785.558859][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11512'. [ 1785.558914][T20522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11512'. [ 1785.628517][T20492] tipc: Disabling bearer [ 1785.759316][T20534] netlink: 'syz.2.11515': attribute type 1 has an invalid length. [ 1785.903138][T20534] veth5: entered allmulticast mode [ 1785.937611][T20534] bond7: (slave veth5): Enslaving as an active interface with a down link [ 1785.985386][T20539] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1786.020934][T20534] macvlan4: entered promiscuous mode [ 1786.028405][T20534] macvlan4: entered allmulticast mode [ 1786.029249][T20534] bond7: entered promiscuous mode [ 1786.041540][T20534] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1786.050411][T20534] bond7: left promiscuous mode [ 1787.214613][T20599] bridge_slave_0: left allmulticast mode [ 1787.226375][T20599] bridge_slave_0: left promiscuous mode [ 1787.226739][T20599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.288255][T20599] bond0: (slave bond_slave_0): Releasing backup interface [ 1787.344163][T20599] bond0: (slave bond_slave_1): Releasing backup interface [ 1787.376112][T20599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1787.388267][T20599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1787.399763][T20599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1787.408291][T20599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1787.431823][T20599] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1787.686565][T20602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11527'. [ 1787.698700][T20618] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1787.834669][T20624] bridge: RTM_NEWNEIGH with invalid ether address [ 1788.040146][T20634] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11532'. [ 1788.049610][T20634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11532'. [ 1788.060724][T20634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11532'. [ 1788.701171][T20664] netlink: 'syz.3.11542': attribute type 12 has an invalid length. [ 1788.844035][T20671] netlink: 67 bytes leftover after parsing attributes in process `syz.3.11543'. [ 1788.884426][T20671] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1788.918719][T20675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11541'. [ 1788.918764][T20675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11541'. [ 1788.948784][T20675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1788.961013][T20675] bond6: (slave bond0): making interface the new active one [ 1788.972160][T20674] netlink: 'syz.0.11541': attribute type 4 has an invalid length. [ 1788.988857][T20675] bond6: (slave bond0): Enslaving as an active interface with an up link [ 1788.998920][T20674] .`: renamed from bond0 (while UP) [ 1789.655522][T20681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1789.672678][T20681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1790.997072][T20640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1791.392203][T20704] FAULT_INJECTION: forcing a failure. [ 1791.392203][T20704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.406593][T20704] CPU: 1 UID: 0 PID: 20704 Comm: syz.2.11551 Not tainted syzkaller #0 PREEMPT(full) [ 1791.406624][T20704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1791.406638][T20704] Call Trace: [ 1791.406648][T20704] [ 1791.406658][T20704] dump_stack_lvl+0xe8/0x150 [ 1791.406700][T20704] should_fail_ex+0x410/0x560 [ 1791.406741][T20704] _copy_from_user+0x2d/0xb0 [ 1791.406767][T20704] __sys_bpf+0x2e7/0xd90 [ 1791.406801][T20704] ? __pfx___sys_bpf+0x10/0x10 [ 1791.406838][T20704] ? __fget_files+0x2a/0x420 [ 1791.406887][T20704] ? ksys_write+0x242/0x270 [ 1791.406922][T20704] ? __pfx_ksys_write+0x10/0x10 [ 1791.406961][T20704] __x64_sys_bpf+0xba/0xd0 [ 1791.406992][T20704] do_syscall_64+0x166/0x520 [ 1791.407032][T20704] ? trace_irq_disable+0x3b/0x140 [ 1791.407054][T20704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.407078][T20704] ? clear_bhb_loop+0x70/0xc0 [ 1791.407106][T20704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.407130][T20704] RIP: 0033:0x7fe40559e159 [ 1791.407152][T20704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.407172][T20704] RSP: 002b:00007fe406510028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1791.407197][T20704] RAX: ffffffffffffffda RBX: 00007fe405825fa0 RCX: 00007fe40559e159 [ 1791.407215][T20704] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1791.407230][T20704] RBP: 00007fe406510090 R08: 0000000000000000 R09: 0000000000000000 [ 1791.407245][T20704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1791.407260][T20704] R13: 00007fe405826038 R14: 00007fe405825fa0 R15: 00007ffcb6f139b8 [ 1791.407296][T20704] [ 1824.963121][T20732] __nla_validate_parse: 1 callbacks suppressed [ 1824.963178][T20732] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11558'. [ 1824.970339][T20729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11558'. [ 1825.227163][T20741] netlink: 'syz.3.11561': attribute type 1 has an invalid length. [ 1825.227215][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11561'. [ 1825.621937][T20742] netlink: 'syz.1.11559': attribute type 10 has an invalid length. [ 1825.709319][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11565'. [ 1825.761984][T20769] team0: Port device team_slave_0 removed [ 1825.811649][T20768] syzkaller1: entered promiscuous mode [ 1825.811709][T20768] syzkaller1: entered allmulticast mode [ 1825.847490][T20768] netlink: 256 bytes leftover after parsing attributes in process `syz.4.11565'. [ 1825.940890][T20772] FAULT_INJECTION: forcing a failure. [ 1825.940890][T20772] name failslab, interval 1, probability 0, space 0, times 0 [ 1825.940945][T20772] CPU: 0 UID: 0 PID: 20772 Comm: syz.3.11566 Not tainted syzkaller #0 PREEMPT(full) [ 1825.940972][T20772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1825.940987][T20772] Call Trace: [ 1825.940997][T20772] [ 1825.941007][T20772] dump_stack_lvl+0xe8/0x150 [ 1825.941044][T20772] should_fail_ex+0x410/0x560 [ 1825.941085][T20772] should_failslab+0xa8/0x100 [ 1825.941116][T20772] __kmalloc_noprof+0xfe/0x720 [ 1825.941152][T20772] ? bpf_test_init+0x9f/0x150 [ 1825.941178][T20772] ? bpf_test_init+0x9f/0x150 [ 1825.941209][T20772] bpf_test_init+0x9f/0x150 [ 1825.941240][T20772] bpf_prog_test_run_skb+0x31e/0x2230 [ 1825.941269][T20772] ? lock_acquire+0x115/0x350 [ 1825.941310][T20772] ? __fget_files+0x3a2/0x420 [ 1825.941339][T20772] ? __fget_files+0x2a/0x420 [ 1825.941372][T20772] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1825.941401][T20772] bpf_prog_test_run+0x2c5/0x340 [ 1825.941431][T20772] __sys_bpf+0xa22/0xd90 [ 1825.941462][T20772] ? __pfx___sys_bpf+0x10/0x10 [ 1825.941498][T20772] ? __fget_files+0x2a/0x420 [ 1825.941544][T20772] ? ksys_write+0x242/0x270 [ 1825.941577][T20772] ? __pfx_ksys_write+0x10/0x10 [ 1825.941613][T20772] __x64_sys_bpf+0xba/0xd0 [ 1825.941647][T20772] do_syscall_64+0x166/0x520 [ 1825.941682][T20772] ? trace_irq_disable+0x3b/0x140 [ 1825.941705][T20772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.941729][T20772] ? clear_bhb_loop+0x70/0xc0 [ 1825.941756][T20772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.941802][T20772] RIP: 0033:0x7f536559e159 [ 1825.941883][T20772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1825.941930][T20772] RSP: 002b:00007f53637f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1825.942007][T20772] RAX: ffffffffffffffda RBX: 00007f5365825fa0 RCX: 00007f536559e159 [ 1825.942052][T20772] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1825.942094][T20772] RBP: 00007f53637f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1825.942129][T20772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1825.942157][T20772] R13: 00007f5365826038 R14: 00007f5365825fa0 R15: 00007ffdd31b3978 [ 1825.942246][T20772] [ 1826.410947][T20789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11570'. [ 1826.531671][T20791] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11570'. [ 1826.651636][T20802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11575'. [ 1826.869609][T20810] netlink: 'syz.2.11576': attribute type 2 has an invalid length. [ 1826.878045][T20810] netlink: 'syz.2.11576': attribute type 2 has an invalid length. [ 1827.360459][T20820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11580'. [ 1828.112067][T20854] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 1828.165040][T20856] netlink: 'syz.2.11592': attribute type 1 has an invalid length. [ 1828.240527][T20860] netlink: 'syz.3.11594': attribute type 12 has an invalid length. [ 1829.067432][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11601'. [ 1830.016521][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11607'. [ 1830.767897][T20942] netlink: 'syz.2.11612': attribute type 12 has an invalid length. [ 1831.038995][ T52] Bluetooth: hci0: link tx timeout [ 1831.041875][ T52] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1831.307787][ T52] Bluetooth: hci0: link tx timeout [ 1831.307832][ T52] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1831.346121][ T52] Bluetooth: hci0: link tx timeout [ 1831.346179][ T52] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1831.359934][T20963] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11617'. [ 1831.375785][T20964] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11618'. [ 1831.375837][T20964] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11618'. [ 1831.375854][T20964] netlink: 'syz.4.11618': attribute type 6 has an invalid length. [ 1831.375886][T20964] netlink: 'syz.4.11618': attribute type 5 has an invalid length. [ 1831.375934][T20964] netlink: 43 bytes leftover after parsing attributes in process `syz.4.11618'. [ 1831.376873][T20963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11617'. [ 1831.585524][ T52] Bluetooth: hci0: link tx timeout [ 1831.585569][ T52] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1831.769372][T20989] netlink: 'syz.4.11620': attribute type 2 has an invalid length. [ 1831.776254][T20989] netlink: 'syz.4.11620': attribute type 2 has an invalid length. [ 1831.825412][T20971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11622'. [ 1831.825495][T20971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11622'. [ 1831.935808][T20971] geneve0: entered promiscuous mode [ 1831.943639][T20971] geneve0: entered allmulticast mode [ 1832.042534][T20992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.067079][ T52] Bluetooth: hci0: link tx timeout [ 1832.067125][ T52] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1832.172522][T21002] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11624'. [ 1832.188575][T21005] netlink: 1404 bytes leftover after parsing attributes in process `syz.3.11625'. [ 1833.115988][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 1833.133271][ T52] Bluetooth: hci0: link tx timeout [ 1834.308788][T21070] netlink: 'syz.3.11633': attribute type 2 has an invalid length. [ 1834.446931][T21073] lo speed is unknown, defaulting to 1000 [ 1834.465154][T21073] lo speed is unknown, defaulting to 1000 [ 1834.482413][T21073] xfrm0 speed is unknown, defaulting to 1000 [ 1834.807410][T21090] syzkaller1: entered promiscuous mode [ 1834.813725][T21090] syzkaller1: entered allmulticast mode [ 1835.351946][T21111] syzkaller0: renamed from bond0 (while UP) [ 1835.450762][T21113] netlink: 'syz.0.11645': attribute type 1 has an invalid length. [ 1835.690334][T21126] netlink: 'syz.1.11647': attribute type 40 has an invalid length. [ 1835.744644][T21113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1836.810131][T21167] __nla_validate_parse: 9 callbacks suppressed [ 1836.810191][T21167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11654'. [ 1837.151323][T21188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11657'. [ 1837.302080][T21196] xt_hashlimit: size too large, truncated to 1048576 [ 1837.327588][T21193] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1837.329784][T21193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1837.346994][T21193] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1837.430655][T21193] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11658'. [ 1837.821124][T21212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11660'. [ 1838.017721][T21224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1838.158828][T21228] netlink: 'syz.2.11666': attribute type 1 has an invalid length. [ 1838.679535][T21241] veth0_virt_wifi: entered promiscuous mode [ 1838.699472][T21241] veth0_virt_wifi: left promiscuous mode [ 1839.173838][T21273] netlink: 'syz.0.11676': attribute type 8 has an invalid length. [ 1839.173883][T21273] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.11676'. [ 1839.230416][T21273] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11676'. [ 1839.239776][T21273] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11676'. [ 1839.250272][T21273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11676'. [ 1839.348533][T21278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11678'. [ 1839.596025][T21283] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11681'. [ 1839.760070][T21289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.761604][T21289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.774854][T21299] xt_limit: Overflow, try lower: 6/2147483648 [ 1839.899632][T21289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1839.911228][T21289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1840.049534][T21289] geneve2: left promiscuous mode [ 1840.049592][T21289] geneve2: left allmulticast mode [ 1840.104333][ T6956] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.113779][ T6956] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.124289][ T6956] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.124362][ T6956] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.066080][T21340] netlink: 'syz.0.11696': attribute type 10 has an invalid length. [ 1841.066142][T21340] dummy0: entered promiscuous mode [ 1841.067037][T21340] bridge0: port 1(dummy0) entered blocking state [ 1841.070742][T21340] bridge0: port 1(dummy0) entered disabled state [ 1841.071293][T21340] dummy0: entered allmulticast mode [ 1842.728312][T21391] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1843.407776][T21415] __nla_validate_parse: 8 callbacks suppressed [ 1843.431218][T21415] netlink: 164 bytes leftover after parsing attributes in process `syz.4.11711'. [ 1843.443160][T21415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11711'. [ 1843.459752][T21416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11711'. [ 1843.709314][T21422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1843.748083][T21424] netlink: 332 bytes leftover after parsing attributes in process `syz.4.11714'. [ 1843.759306][T21424] netlink: 'syz.4.11714': attribute type 9 has an invalid length. [ 1843.768204][T21424] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11714'. [ 1843.778543][T21424] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11714'. [ 1844.204941][T21444] openvswitch: netlink: Message has 251 unknown bytes. [ 1844.485597][T21458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11720'. [ 1844.557978][T21460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11721'. [ 1844.558051][T21460] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11721'. [ 1844.606839][T21460] gretap0: entered promiscuous mode [ 1844.631812][T21460] gretap0: left promiscuous mode [ 1844.783576][T21460] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11721'. [ 1844.872148][T21468] veth0: entered promiscuous mode [ 1844.931294][T21468] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1844.950514][T21468] bond0: entered promiscuous mode [ 1844.958073][T21467] bond0: left promiscuous mode [ 1844.963629][T21467] veth0: left promiscuous mode [ 1845.947116][T21517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1846.485090][T21551] netlink: 'syz.4.11741': attribute type 3 has an invalid length. [ 1846.885499][T21571] geneve1: left promiscuous mode [ 1846.885681][T21571] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1846.889626][T21571] macvlan2: left promiscuous mode [ 1846.894978][T21571] ip6gre2: left promiscuous mode [ 1846.895046][T21571] ip6gre2: left allmulticast mode [ 1846.896326][T21571] vlan2: left promiscuous mode [ 1846.896377][T21571] syz_tun: left promiscuous mode [ 1846.897926][T21571] bond4: left promiscuous mode [ 1846.897969][T21571] bond4: left allmulticast mode [ 1846.899213][T21571] bridge3: left allmulticast mode [ 1846.915344][T21571] geneve3: left promiscuous mode [ 1846.915580][T21571] geneve3: left allmulticast mode [ 1847.063171][ T145] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.072448][ T145] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.072494][ T145] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.072529][ T145] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.396507][T21597] veth3: entered allmulticast mode [ 1847.413908][T21597] team0: Port device veth3 added [ 1849.224768][T21671] __nla_validate_parse: 8 callbacks suppressed [ 1849.225538][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11766'. [ 1849.225598][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11766'. [ 1849.380574][T21675] netlink: 'syz.3.11767': attribute type 16 has an invalid length. [ 1849.380627][T21675] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.11767'. [ 1849.675896][T21562] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1849.933180][T21690] xt_connbytes: Forcing CT accounting to be enabled [ 1849.949950][T21686] tipc: Enabled bearer , priority 0 [ 1849.953668][T21686] syzkaller0: entered promiscuous mode [ 1849.953831][T21686] syzkaller0: entered allmulticast mode [ 1849.960806][T21686] tipc: Resetting bearer [ 1850.095983][T21696] tipc: Resetting bearer [ 1850.166286][T21698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11772'. [ 1850.166342][T21698] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11772'. [ 1850.166361][T21698] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11772'. [ 1850.166378][T21698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11772'. [ 1850.166485][T21698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11772'. [ 1850.166534][T21698] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11772'. [ 1850.166550][T21698] netlink: 5 bytes leftover after parsing attributes in process `syz.2.11772'. [ 1850.919744][T21732] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20003 [ 1850.982718][T21732] netlink: 'syz.2.11777': attribute type 1 has an invalid length. [ 1851.022489][T21732] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1851.076701][T21728] bond9: entered promiscuous mode [ 1851.076751][T21728] bond9: entered allmulticast mode [ 1851.244971][T21744] tipc: Enabled bearer , priority 0 [ 1851.246929][T21744] syzkaller0: entered promiscuous mode [ 1851.247000][T21744] syzkaller0: entered allmulticast mode [ 1851.254802][T21744] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1851.356399][T21744] tipc: Resetting bearer [ 1851.376390][T21747] tipc: Enabling of bearer rejected, already enabled [ 1851.389680][T21744] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 1851.402072][T21743] tipc: Resetting bearer [ 1851.444074][T21743] tipc: Disabling bearer [ 1851.471583][T21752] netlink: 'syz.2.11781': attribute type 1 has an invalid length. [ 1851.615154][T21755] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 1851.635755][T21752] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1851.688203][T21752] netlink: 'syz.2.11781': attribute type 10 has an invalid length. [ 1851.745210][T21764] netlink: 'syz.2.11781': attribute type 1 has an invalid length. [ 1851.763639][T21770] netlink: 'syz.2.11781': attribute type 10 has an invalid length. [ 1851.780450][T21754] bond10: (slave veth7): Enslaving as an active interface with a down link [ 1851.803505][T21755] bond10: (slave dummy0): making interface the new active one [ 1851.815459][T21755] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 1851.819303][T21752] dummy0: entered promiscuous mode [ 1851.824778][T21772] x_tables: duplicate underflow at hook 1 [ 1851.849435][T21752] bond10: (slave dummy0): Releasing active interface [ 1851.908610][T21765] bond10: (slave veth9): Enslaving as an active interface with a down link [ 1852.146833][T21779] netlink: 'syz.1.11788': attribute type 10 has an invalid length. [ 1852.178957][T21779] tipc: Resetting bearer [ 1852.193119][T21779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1852.206817][T21779] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1852.207245][T21779] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1852.234117][T21779] syzkaller0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1852.255070][T21783] netlink: 'syz.4.11785': attribute type 1 has an invalid length. [ 1852.518995][T21790] xt_TCPMSS: Only works on TCP SYN packets [ 1852.678484][T21802] siw: device registration error -23 [ 1852.706510][T21802] gretap0: left promiscuous mode [ 1852.724004][T21802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1852.735044][T21802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1852.767830][T21802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1852.779823][T21802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1852.796157][T21802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1852.807428][T21802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1852.820757][T21802] veth1_vlan: left promiscuous mode [ 1852.827911][T21802] veth0_vlan: left promiscuous mode [ 1852.836053][T21802] veth0_vlan: entered promiscuous mode [ 1852.847097][T21802] veth1_vlan: entered promiscuous mode [ 1852.888064][T21802] veth1_macvtap: left promiscuous mode [ 1852.891624][T21802] veth0_macvtap: left promiscuous mode [ 1852.903151][T21802] veth0_macvtap: entered promiscuous mode [ 1852.907313][T21802] veth1_macvtap: entered promiscuous mode [ 1852.920221][T21802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1852.926346][T21802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1852.928478][T21802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1852.929991][T21802] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1852.937844][T21790] bond11 (unregistering): Released all slaves [ 1852.987681][ T31] audit: type=1800 audit(1788713202.795:68): pid=21806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11795" name="r" dev="tmpfs" ino=2663 res=0 errno=0 [ 1853.244482][T11815] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.258300][T11814] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.262872][T11814] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.392487][T20992] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1853.399841][T21815] bond0: Unable to set down delay as MII monitoring is disabled [ 1853.631075][ T31] audit: type=1804 audit(1788713203.435:69): pid=21825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.11801" name="/newroot/520/cgroup.controllers" dev="tmpfs" ino=2679 res=1 errno=0 [ 1853.667818][ T31] audit: type=1800 audit(1788713203.435:70): pid=21825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11801" name="cgroup.controllers" dev="tmpfs" ino=2679 res=0 errno=0 [ 1853.862780][T21842] netlink: 'syz.2.11805': attribute type 4 has an invalid length. [ 1853.871281][T21842] netlink: 'syz.2.11805': attribute type 4 has an invalid length. [ 1854.360164][T21856] __nla_validate_parse: 12 callbacks suppressed [ 1854.360217][T21856] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11807'. [ 1854.383429][T21858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11807'. [ 1854.838359][T21878] validate_nla: 1 callbacks suppressed [ 1854.838422][T21878] netlink: 'syz.4.11813': attribute type 1 has an invalid length. [ 1854.875201][T21883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11815'. [ 1854.889411][T21878] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1854.984952][T20995] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1854.985047][T20995] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1854.985320][T20995] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1855.399595][T21906] netlink: 720 bytes leftover after parsing attributes in process `syz.4.11819'. [ 1855.661710][T21919] ±ÿ: renamed from lo [ 1855.833758][ T145] IPVS: starting estimator thread 0... [ 1855.925035][T21932] IPVS: using max 26 ests per chain, 62400 per kthread [ 1856.083608][T21944] netlink: 'syz.2.11825': attribute type 62 has an invalid length. [ 1856.812190][T21937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1857.778933][T22019] openvswitch: netlink: IP tunnel attribute has 53 unknown bytes. [ 1858.208594][T22034] bridge0: port 1(veth1_to_bridge) entered blocking state [ 1858.209335][T22034] bridge0: port 1(veth1_to_bridge) entered disabled state [ 1858.209907][T22034] veth1_to_bridge: entered allmulticast mode [ 1858.229232][T22034] veth1_to_bridge: entered promiscuous mode [ 1858.621999][T22035] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 1858.633970][T22035] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1858.642531][T22035] CPU: 1 UID: 0 PID: 22035 Comm: syz.4.11839 Not tainted syzkaller #0 PREEMPT(full) [ 1858.652061][T22035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1858.662171][T22035] RIP: 0010:klist_remove+0x156/0x340 [ 1858.667516][T22035] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd cb 5c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be cb 5c f6 49 8b 44 24 58 48 89 44 24 08 [ 1858.687185][T22035] RSP: 0018:ffffc9000d40f960 EFLAGS: 00010202 [ 1858.693312][T22035] RAX: 000000000000000b RBX: ffff88804d760000 RCX: ffffffff9a9db501 [ 1858.701342][T22035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 1858.709372][T22035] RBP: ffffc9000d40fa60 R08: ffffffff905f90e3 R09: 1ffffffff20bf21c [ 1858.717446][T22035] R10: dffffc0000000000 R11: fffffbfff20bf21d R12: 0000000000000000 [ 1858.725466][T22035] R13: 1ffff1100b23f68c R14: ffff8880591fb460 R15: dffffc0000000000 [ 1858.733491][T22035] FS: 00007f8230f9c6c0(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 1858.742476][T22035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1858.749111][T22035] CR2: 00007fe40635da08 CR3: 000000001230e000 CR4: 00000000003526f0 [ 1858.757143][T22035] Call Trace: [ 1858.760472][T22035] [ 1858.763451][T22035] ? __pfx_klist_remove+0x10/0x10 [ 1858.768528][T22035] ? kobject_move+0x5e2/0x720 [ 1858.773256][T22035] ? __pfx_kobject_move+0x10/0x10 [ 1858.778324][T22035] ? do_raw_spin_unlock+0xf5/0x200 [ 1858.783492][T22035] ? get_device_parent+0x366/0x3a0 [ 1858.788692][T22035] device_move+0x18e/0x720 [ 1858.793158][T22035] hci_conn_del_sysfs+0xb8/0x1a0 [ 1858.798145][T22035] hci_conn_del+0xc3d/0x1200 [ 1858.802788][T22035] ? __pfx_iso_disconn_cfm+0x10/0x10 [ 1858.808145][T22035] hci_conn_hash_flush+0x189/0x260 [ 1858.813315][T22035] hci_dev_close_sync+0x7fc/0x10c0 [ 1858.818475][T22035] ? __pfx___mutex_lock+0x10/0x10 [ 1858.823564][T22035] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1858.829178][T22035] ? lockdep_hardirqs_on+0x7b/0x110 [ 1858.834436][T22035] ? enable_work+0x1fd/0x230 [ 1858.839092][T22035] hci_dev_close+0x108/0x260 [ 1858.843743][T22035] sock_do_ioctl+0x101/0x320 [ 1858.848473][T22035] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1858.853680][T22035] ? hook_file_ioctl+0x1f2/0x600 [ 1858.858668][T22035] sock_ioctl+0x57a/0x7e0 [ 1858.863058][T22035] ? __pfx_sock_ioctl+0x10/0x10 [ 1858.867962][T22035] ? __fget_files+0x2a/0x420 [ 1858.872644][T22035] ? __fget_files+0x3a2/0x420 [ 1858.877374][T22035] ? __fget_files+0x2a/0x420 [ 1858.882027][T22035] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1858.887070][T22035] ? __pfx_sock_ioctl+0x10/0x10 [ 1858.891972][T22035] __se_sys_ioctl+0xfc/0x170 [ 1858.896632][T22035] do_syscall_64+0x166/0x520 [ 1858.901278][T22035] ? trace_irq_disable+0x3b/0x140 [ 1858.906361][T22035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.912477][T22035] ? clear_bhb_loop+0x70/0xc0 [ 1858.917207][T22035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.923140][T22035] RIP: 0033:0x7f823019e159 [ 1858.927594][T22035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1858.947325][T22035] RSP: 002b:00007f8230f9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1858.955798][T22035] RAX: ffffffffffffffda RBX: 00007f8230425fa0 RCX: 00007f823019e159 [ 1858.963912][T22035] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000007 [ 1858.971927][T22035] RBP: 00007f8230235024 R08: 0000000000000000 R09: 0000000000000000 [ 1858.979939][T22035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1858.987961][T22035] R13: 00007f8230426038 R14: 00007f8230425fa0 R15: 00007ffd7ec6f298 [ 1858.995990][T22035] [ 1858.999065][T22035] Modules linked in: [ 1859.005866][T22035] ---[ end trace 0000000000000000 ]--- [ 1859.078385][T ** replaying previous printk message ** [ 1859.078385][T22035] RIP: 0010:klist_remove+0x156/0x340 [ 1859.078451][T22035] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 dd cb 5c f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 be cb 5c f6 49 8b 44 24 58 48 89 44 24 08 [ 1859.078474][T22035] RSP: 0018:ffffc9000d40f960 EFLAGS: 00010202 [ 1859.078560][T22035] RAX: 000000000000000b RBX: ffff88804d760000 RCX: ffffffff9a9db501 [ 1859.078629][T22035] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000058 [ 1859.078716][T22035] RBP: ffffc9000d40fa60 R08: ffffffff905f90e3 R09: 1ffffffff20bf21c [ 1859.078763][T22035] R10: dffffc0000000000 R11: fffffbfff20bf21d R12: 0000000000000000 [ 1859.078807][T22035] R13: 1ffff1100b23f68c R14: ffff8880591fb460 R15: dffffc0000000000 [ 1859.078860][T22035] FS: 00007f8230f9c6c0(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 1859.078914][T22035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1859.078945][T22035] CR2: 00007ffdd14d0c78 CR3: 000000001230e000 CR4: 00000000003526f0 [ 1859.079011][T22035] Kernel panic - not syncing: Fatal exception [ 1859.184765][T22035] Kernel Offset: disabled [ 1859.189135][T22035] Rebooting in 86400 seconds..