last executing test programs: 3.546603874s ago: executing program 1 (id=2460): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newtfilter={0x2c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0xb9580000}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc804}, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) recvfrom$packet(r1, &(0x7f0000000240)=""/84, 0x54, 0x10001, &(0x7f0000000300)={0x11, 0x3, r3, 0x1, 0x3}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 3.335108647s ago: executing program 1 (id=2464): openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x16, 0x8f, 0x0, 0x0, @str='./cgroup.net/syz0\x00'}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xe0ffff}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0x24, 0x2c, 0x107, 0x70bd2b, 0x0, {0x9, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a31000b000000000000000000002c0000000b0a010300000000000000000a0000020900010073797a31000000000c0010400000000000000002140000001100010000000000000000000100000a03f16bee0158a838f2b40c422a124ad5c622b930b7b330e1c8bd892675b5e72adfd680ed5a6e2eee441b45b08ddee2901ea9ec2add1fb6e517c763f794679f213f30d31e9080d676944418c3c07a2eed31b827a05f4b649aac77d9eb"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xff3, &(0x7f0000001cc0)=""/4083, 0x41100, 0x5}, 0x94) 3.01139236s ago: executing program 1 (id=2469): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000300210000030000000828137a51baecc60100"], 0x0, 0x32, 0x0, 0x8, 0xdd6}, 0x28) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="00006f9b07b91d07868d000000000000000000001b65fb18145b770cd3e26ab94af062a0b9e6538bdebf7398306e734985b3367dfe3865c00bcb0f174e66383bf7aeaec2dabef7db43014e58175db690fd460736cf3bc04d92fe957e4ed289e36c222424cb6c01fb957bf7ae199a07a8c2f58b968fca1ed60fee2d6a7683354261988d9bce7a91071aaff7f3ca00e9c2e67a1871edf3b82c15bb592fc8489c62bc5e0b7c10091dfd1f76325160a6fa0a0f7f6378a87199e4bb3a73143f72e95a0183cbaf5b5a09d2e25e26d45e0e7c27f997c1b4919d674a23", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000ce080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500002ebfb0d6b49400030000009500"], &(0x7f0000000240)='GPL\x00', 0x4, 0xffb, &(0x7f00000014c0)=""/4091, 0x0, 0xc}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x7159, 0x8, {{0x8, 0x4, 0x2, 0x1, 0x20, 0x68, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010102, @empty, {[@timestamp={0x44, 0x8, 0xfc, 0x0, 0x9, [0x5]}, @end]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x8000, 0x40, 0x9, 0xfea, {{0xe, 0x4, 0x1, 0x9, 0x38, 0x67, 0x0, 0x9b, 0x2f, 0x0, @local, @multicast1, {[@end, @cipso={0x86, 0x22, 0x0, [{0x2, 0xc, "2b78ed6e2490bc5fe2d7"}, {0x0, 0x10, "5927e7600da26298f91d61526426"}]}]}}}}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x7}, {0x2, 0xfff1}, {0xfff2, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$kcm(0x1e, 0x4, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000540)={'gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0)) r11 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r11, &(0x7f0000000000)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'team_slave_1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r1, 0x58, &(0x7f0000000700)}, 0x10) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r13, &(0x7f00000000c0)={0x1d, r14}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'syztnl2\x00', r3, 0x2f, 0x4, 0x2, 0x1300, 0x0, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7800, 0x0, 0x5}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f00000024c0)=ANY=[@ANYBLOB="14000009", @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000000) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8b28, &(0x7f0000000040)={'wlan1\x00'}) 2.56369953s ago: executing program 1 (id=2473): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200000, 0x0) close(r5) (async) r6 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'sit0\x00', r7, 0x7, 0x80, 0x0, 0xd4000000, {{0x15, 0x4, 0x3, 0x5, 0x54, 0x67, 0x0, 0xca, 0x4, 0x0, @multicast2, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0xc2, 0x3, 0x2, [{@broadcast, 0x7f}]}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x2c, 0x1f, 0x3, 0x1, [{@empty}, {@loopback, 0x9442}, {@dev={0xac, 0x14, 0x14, 0x2f}}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}]}}}}}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@deltclass={0x34, 0x29, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0x7, 0xfff1}, {0x9, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x5}}, @TCA_RATE={0x6, 0x5, {0x93}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20045080}, 0x4004800) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="057b75a2a487"}) (async, rerun: 64) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r10, 0x5}, 0xc) 2.060986329s ago: executing program 1 (id=2478): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x3, 0x2000000, @empty, 0x8000005}}}, 0xefd1081208756ae9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x40001) 2.051505524s ago: executing program 4 (id=2479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x188, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000004}, {0x2, 0x0, 0xffffffff}, 0x70bd2d, 0x800000, 0x2, 0x4, 0x0, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x4e, 0x14, {{'hmac(sha256)\x00'}, 0x10, 0x80, "aef3"}}]}, 0x188}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/124, 0x7c}, {0x0}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4}, 0x40000001) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/124, 0x7c}, {0x0}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4}, 0x40000001) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="5800000010000700000000000300000000ca0000", @ANYRES32=0x0, @ANYBLOB="56b0817dbcb5f31a24001280110001006272696467655f736c617665000000000c00058005001900fe000000140003006272696467655f736c6176655f30"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x44800) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x3, 0xffffeffd, 0x14, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0xba08, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x3, 0xffffeffd, 0x14, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0xba08, 0x3}}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x589882, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000100)) (async) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000100)) 1.765881505s ago: executing program 2 (id=2482): r0 = socket(0x2a, 0x2, 0x8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, '\x00', 0xc0008}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[], 0x44}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004c80)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff}, {}, {0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x40801) r3 = socket(0x2a, 0x2, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[], 0x44}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001140)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000030000"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000004b180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8bfffffb702000008000000b7030000000000008500000007000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000180)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000010c0)=ANY=[@ANYBLOB="1a000000003e920a04d01b6bf9bf6bf8be4a00000000000000000000000f00000018110000e15a685dbb0f454411565f2557dcee55", @ANYRES32=r6, @ANYRES8=r7], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000bc0)={0xffffffffffffffff, 0x6aa2, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000cc0)={0xffffffffffffffff, 0x3}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f80)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x31, &(0x7f00000011c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000018320000020000000000000000000000ad2180000800000018100000", @ANYRES32=r8, @ANYBLOB="0000000000000000180000000800000000000000e100000018200000", @ANYRES32=r9, @ANYBLOB="0000000002000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000003000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000800000000000b70500000805000085000500a50000001614370de044d1ead087618fdd2c7b8ed85e921577f1d72d1c858f89b0187662e9cc42"], &(0x7f0000000f00)='GPL\x00', 0x6, 0x2d, &(0x7f0000000f40)=""/45, 0x41000, 0x8, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000fc0)={0x0, 0xb, 0xffff, 0xffff1ada}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001000), &(0x7f0000001040)=[{0x4, 0x1, 0x7, 0x1}], 0x10, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_simple={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\}d'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xd}}]}, 0x88}}, 0x40801) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r14, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x45e], 0x0, 0x0, 0x1, 0x0, r15}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.527225349s ago: executing program 4 (id=2484): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x1, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2, 0x0, 0x8}]}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, 0x0, 0x35, 0x0, 0x1, 0x4}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010102}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20040054) 1.522802515s ago: executing program 2 (id=2485): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006"], 0x38}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x40, 0x5, 0x5, 0x9, 0x2, 0x8, 0x0, 0xc6, 0x2, 0x80, 0x8, 0xa, 0x7, 0x3}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 1.4459171s ago: executing program 3 (id=2487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cc, 0x201) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2a, 0x2, 0x0) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40012180) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, 0x0) sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100b000000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000380600ae9bef20f87e172100000018000000000000"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x68}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r11}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4040) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1.303349468s ago: executing program 2 (id=2488): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="1220002300007b0000000000004992000000", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003200)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000880)=""/92, 0x5c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000140)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x400000}, {{&(0x7f0000000380)=@qipcrtr, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000000a00)=""/117, 0x75}, {&(0x7f0000000a80)=""/115, 0x73}, {&(0x7f0000000b00)=""/146, 0x92}, {&(0x7f0000000bc0)=""/110, 0x6e}, {&(0x7f0000000c40)=""/71, 0x47}, {&(0x7f0000001fc0)=""/4096, 0x1000}], 0x6}, 0xa6df}, {{&(0x7f0000003040)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000030c0), 0x0, &(0x7f0000003100)=""/254, 0xfe}, 0x7}], 0x3, 0x10000, &(0x7f0000003700)={0x77359400}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYBLOB="0733b964aaf7e2e564a0c18167906402a20e6b7a0f19033fb4ac3e3852f7b82bd512b5356866aa054b9465e498906ef67976cae03f92a9db7cc5017904dc0133c0926b60522caa7608d0fd767653991d712e753303354e5b"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r3}, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20004054}, 0x20008090) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000800400000800000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="040000c001000000040000c001010000da96af2fcead2a68"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040051) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040084) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000880) socket$inet6(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001c0001fc28bd7000fcdbdf2507000000", @ANYRES32=r10, @ANYBLOB="8000260b0a0002000180c200000c00000c000e"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040011) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fddbdf2507000000080001001a00", @ANYRES32, @ANYBLOB="1400040073797a6b616c6d65723000000000000008000500070000000a0018000303030303490000"], 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 1.23040781s ago: executing program 4 (id=2490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r2], 0x30}}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r1, 0x40, 0x2, 0x9}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000001c0)={0x5, &(0x7f0000000140)=[{0x1, 0x9c, 0x2, 0xfffffff4}, {0xfb92, 0x7, 0x4, 0x4}, {0x7, 0x8, 0x5, 0x80}, {0x28, 0xa, 0x71, 0x8}, {0xfff, 0x3, 0x4, 0x6}]}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x1407, 0x1, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a31"], 0x98}}, 0x0) 1.115812143s ago: executing program 4 (id=2491): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000200)="053a8bcc1ebc4970dce86101ec", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="220000000400000010000000", @ANYRESDEC=r0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x2, r5}, 0x38) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, 0x0}, 0x20000080) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa20, 0x90, 0x43, 0xa0, 0x90, 0x98, 0x988, 0x178, 0x178, 0x988, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {}, {0x7f}, 0x0, 0x1}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x8b8, 0x8f8, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'\x00', {0xff}, 'veth0_macvtap\x00', {}, 0x8, 0x15}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x56, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x1000003, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x6, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000004, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xfd, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138e}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x5}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xffffbff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0xffffffff}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {0x0}, {&(0x7f0000000300)="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", 0xbe8}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r9) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000f00)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000ffdbdf250100000004000180100002800c000180084d01001600000095d9df2969bec4b648a004d370445dec198bfe0ca4fa5a89a11680a248"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000000c0)={0x14, 0x0, 0xffffffffffffffff, 0x70bd2e, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48888}, 0x24004010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000001000)={'bridge_slave_0\x00', @random="e4a8b032869c"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001080), 0x4) pselect6(0x40, &(0x7f00000001c0)={0x81, 0x0, 0x77b, 0xfffffffffffffffd, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x7fffffff}, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 1.112615496s ago: executing program 2 (id=2492): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112ca000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r2, &(0x7f0000000500), 0x0}, 0x20) 1.10628698s ago: executing program 1 (id=2493): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "0500", "92dda0d3dbd473a2bd043e4a1e49e547bbaf9452c2bbcff17b9943ca892b5795", "a2251d57", "c1eb29d3ac53c50d"}, 0x38) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8885) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "0500", "92dda0d3dbd473a2bd043e4a1e49e547bbaf9452c2bbcff17b9943ca892b5795", "a2251d57", "c1eb29d3ac53c50d"}, 0x38) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x604, 0x70bd27, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8885) (async) 967.167771ms ago: executing program 3 (id=2495): r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbfb, {0xb}}, 0x14}}, 0x4000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a10334f45a6a8676be9ce35887d13858b82b9a80089da8bc68ea1f133c2558b6125bb5d84f120189ab1c2ebe316b9926265edf87c240049d1847b70e0292c6ca5553f02638ef092d644de3e99d4f7aab336b7f8bc37fd267b476f3e490469a912b51b1962fa84a8931bc12e2a0bb830b738c7181f84c2e205a9435fddb21e9c4a91b19f16bb9022aa3a150f1a72e996bdfa72045dd7533728e5997bc065475174f2723926d1b0aaf5d4eef034f1151b117e12b3b4f0d69b64c76ae93cb99251b4550191df579e3f915995e80ee6a4889642a5d656c5e70ec525f"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r5, r6, 0x4, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x20, 0x8, "9e3a2f25a5a833d84e0c46b4457cf33cc3748de7af23746060406ae0"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x40, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x20, 0x8, "9e3a2f25a5a833d84e0c46b4457cf33cc3748de7af23746060406ae0"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x9d}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x9d}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x8) (async) r9 = socket(0x10, 0x803, 0x8) sendmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000001480)=@hci={0x1f, 0x2, 0x1}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001500)="ff0cb91aa7aa7058e626ed34877fb2b24a11f6aa830fc9059f2b45c9c3a8836bca8b449d0a5879ae7de7f1c6d8e2d9204014a0ffaac7b1c5ef7d7ea18f88650a1c53404e9b0a200aec237675b6155c2f1f3d94e26ca48d1cf29da1284e02ca958a", 0x61}, {&(0x7f0000001580)="df9f990832492c1b0762a2", 0xb}, {&(0x7f00000015c0)="1c7efb38c170ab12d0a66d494398e82cfadaac98c0dd19082953d9a773db6bd5f2d1a38ac2a854b7398c4129a17b9c7d88e2b1892da4f1d23a870b2a5173483fade9dacae76ce75fb544dfd25a17bd4ddf4c95f4e833cb6109236b6786c228dd4cc9b177ba6634e81c2c3e2a0579d56c0978d23cfb20e8ce9676121e76438751efd6ccc337fd88ae6c67c680fedae664e698d660fc", 0x95}, {&(0x7f0000001680)="3b9d9b185bfc26d1933212e203a260fcd33d3f19d4405bda5ddbaa2da55b9a8a5dd0337616590f72623f195641481c72093df142b9df49e9335546abe4732edf97f878cc942037ec29360ede11049d2e7800d1280f60ab1bb59c0b17494a9221906b0130367e356883936d14ea80d0cf670761e6499f2eb181df3483b7c2fab03c", 0x81}, {&(0x7f0000001740)="2f28d47c95344ea32acf5a5008c028896b383762bd858c", 0x17}, {&(0x7f0000001780)="ec97d931485ef199975b319880e9ab9e2d306dd1c171bd49572d66827eb015037bfccafed6ad7dc13eb94837e710d31b66875209fbdaa685b322225fec1b4461c85a6f363bb3baf944c8342fe54d2ba54b26936125e3f4c43485d3d39df25b98706d697b6b37b34607478f6458c858123fbbdf56176c37844f2b", 0x7a}], 0x6, &(0x7f0000001880)=[{0x40, 0x112, 0x5f, "f9fddb302cb7bdc23cabf030224f0350a5b4f91b573a0835b88f179fef7ec6540c7fb9549183351dea4a947ae82e932c"}, {0x1010, 0xff, 0xfffffff8, "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"}, {0x60, 0x1, 0xfffff800, "055f7970246b45ae0e50ab66bb61d03fa6aeffdc3ab3347235bcdf04553f05341fe3dee4bc6407a6f41572b6ebf867e5f9f1a9e377fd9633f7fb3aa37f0bddb15ad6f45f82f891a00c71a4308fe2ab"}], 0x10b0}}, {{&(0x7f0000002940)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1cd}}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000029c0)="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", 0xff}, {&(0x7f0000002ac0)="4380adce24aea09438991bf48596592618292df93d950c5e100a5a502449902cd30173f343434682d83ec248e152ddc4b6b5e314f81a9d9957973a79991573f41b9c9b96480a790e93e7bdc01222bf695d508681262e93d1be4f512d0f84c6912859b4a4c966330a0470199f7ecb00195a906dc0e01cd5ef8717ddddf79925cd895cc8c21188f741c08fd1c262701a726a", 0x91}], 0x2, &(0x7f0000002bc0)=[{0x48, 0x107, 0x3, "6eed0db34fd81991e4bff1019f17e1dc0cc616546c3707d582c07e2ba94a672091817c94856b12018c4e1671e248d29ff5bba766fc56"}], 0x48}}, {{&(0x7f0000002c40)=@ethernet={0x306, @local}, 0x80, &(0x7f0000002cc0)}}, {{&(0x7f0000002d00)=@rc={0x1f, @any, 0x7}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002d80)="aeee99ae3626c4d587e7b72cd03ce1bb5628c82a5990", 0x16}, {&(0x7f0000002dc0)="55475077858a745508f64a26a1e497658c8ca07f14e62e79d023af5c24f577388c69edbbb52718a8122565a28065e873d5648428dce38606f0b858f6d7c3cc18ca0e0851f904ed5e73a7214258bba6679d17988df2c01cf129c2ccf263dff76c5012018c21", 0x65}, {&(0x7f0000002e40)="05e06bce46d15f5bcb98f5824a34249cdc43cb49c34a719ca7d59eb1dec0eee527ea6f85c18682f56d4da8ebed75f85c475921bc454dc106ccd68e53e03b39b7724c29d4b80c5a22f4993cc51e200fbdb639289cce36de1b0133cf527468a401b1acf426aa4d", 0x66}, {&(0x7f0000002ec0)="8d942d33278fe9f5a3e4b5556148a11108155559623062b75670cf862ed92892576cfe8e1e5f825c453df0691e48652afaf630db021356fb772196f1ad7c6e384bb350705ccedc66b6233f9beae994a1b4f74ff8eb4ebc5ea48cf3e2620240d0c8fa6a58f3f147129a3dd8cba1913ecf67fbb7e456d29bfdd81315a239c2d4630c74b0e76a507fa1f355f067075c3aa037328c138819420953f0c62ff8", 0x9d}, {&(0x7f0000002f80)="5a6d52b16ae3303a06535e118918e2340a5a3e649c12e8539127e041dde80bf33f0f184af334e300c38606cdcb009189550b69fd103461b998e0a3e274e093c41b28bc626502cbdfcc01ce9d1e3f652665b2dc44e920281846a6e87deb0bcea31811ad490d8d718b0e74b7383344249a2c5e578fa341015419db31a7", 0x7c}, {&(0x7f0000003000)="eabfb8eb5f90d01e706aa549e81712981a94f683df6b2b2599b0b274f83ea109e456a34197fb9494d28ffd8da9f239ca84aa2dfb2310528983cdb37a2b1f6ba74997acf08ff54c14f3b299f8d565e57b96985490476fa2dfe1c1d1639da12878f5fb3837999facfa642732a38e2e9f171cb383fa3b5bc05875eb1af6d4fe6de8c740b647734202ea66b8b014bba63178c06a16237aca13f6559fa9d4c4fafced47b9323721eba303a1ac87fea40ef5b219fc91081d3852a78b2106dfc2", 0xbd}], 0x6, &(0x7f0000003140)=[{0x98, 0x109, 0x5, "8a4382dae031a6c6a84a0f66cb08ab4a9a47a0fd7a0afe1ce7fd116886fc6ce48f6932ee87b3a341c9ef6e38f3b55cfa94363ebb28b27243184ccc87ff895b75d5217e68d6e793791299279947436a993e5e5543390731565a15a3ee29e15ec14d80abd75aa23cb3a818a93bfd4641c7b6a8da8cccd75819d76122b2f9482d688308dc73c17d"}, {0x88, 0x115, 0xc7, "ec2b133aacf5a77285be23510a9dd862cf04f4570938260e992bb5e1be930e9cbe8faf32c2ff618ef2ac9276bee70141bad56e176b112590927874755538cc554270178df386a0dbb5c22a3866e358bf8ead79736db7f49be0116de71eafd3d4dcaef686435d0bb1144db93c6f305d8c131859"}, {0xc0, 0x3a, 0x7, "14595a4c992351da8d93c5d1471bf97af2b35a14e3a21cf478e30062023e4cb1077dad165c00e9b9213b19b8955ffc9b03bc3575fe2a65270f6b68dc7d95a9606ce4339efec317412805a9cb6bb6a5febb4e61f22637ad8854b67fefdb1fb16703b670670563b34d6108992ad8f731ab3c694a4c9723ddc76f11ae6a363847a80dc986764edacc8bafd793aa7922eeeaa9172dc30fce40c837701368168bd5218290cb2704a993bcf4c21356d54d66"}, {0x28, 0x6, 0x6, "27ea81f85c397d99954a1cddb94bf2e662f615"}, {0x20, 0x10f, 0x38ea, "595059d77eff0c4388e8d534c52d"}], 0x228}}, {{&(0x7f0000003380)=@xdp={0x2c, 0x6, r3, 0x28}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003400)="47907c373c27f286159269e03dce137784bc774d364aa7157ec2c3d635dcf5d3ea7bd7315e5e0d40ab7f9b927590a261ac0644dcca321171aab208d9f89fa77d54e1440785bf8326b76fdcb9f26a4940853dcf2a19ec0983e8ecbdaa04d123aa1c033cee05ec0fc336", 0x69}, {&(0x7f0000003480)="aedfc5244f0271e6df664861ae6f03ad704079ff68de2a6577bc2a4cfd583e81d4c52b9e512fd7ff0c15828fee18eef5e2622d3b5af2eddafef1c02577caefca96ca163b935001defb8442579447113085d40c813078f9c3cfb87011989c78fb1bf04119f3a1b5b6ace161708632aa5bf6afe1cf1138dff20d5bd4c70b6bb8a4ff63a335a33a56e338e9bbb570f5a0c7476f29", 0x93}], 0x2, &(0x7f0000003580)=[{0x10, 0x117, 0x8}, {0x50, 0x119, 0x7f, "cacfc3968da224fd2fe4052ae58827eca9e18508b1d181e1011a8e6910228d65bb0bc3d31cb67a06bb3772d041111a5683c0b9a8b400d8a07b67585f4d16eb"}, {0x38, 0x101, 0x0, "72470e65ec844aeefcf7b5d8a05733603dd8be0e4adcefbe778f4ae3815ac5009c"}], 0x98}}, {{&(0x7f0000003640)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(compress_null-generic)\x00'}, 0x80, &(0x7f0000003740)=[{&(0x7f00000036c0)="3207ddee7cb9e42ff6c8c4f526d28079ff43560fac9569380fddf30da64965e4abc1f7518e4b53c9bfa1a3e7fc41078085dfe824bcc3f35305fe7e4a772ee1d607a7c6d48f5b6747a542159ae906995847b7b084f67418d184ef483531", 0x5d}], 0x1, &(0x7f0000003780)}}], 0x6, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r8, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xfc, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xe0, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r8, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xfc, &(0x7f0000000300), 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xe0, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)=@newqdisc={0x74, 0x24, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0x3}, {0x6, 0xa}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0xffff}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x5c}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x4}, @TCA_CODEL_TARGET={0x8}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fcffffff320000001800018014000200"], 0x2c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xf, &(0x7f0000000a80)={@empty, 0x0}, &(0x7f0000002cc0)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000003a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003a00)={&(0x7f0000003940)={0xac, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x4}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x8090}, 0x40000) r14 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r14, &(0x7f0000001400)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x7, @remote, 0xe9b1}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000980)="1f5570d9929ce3e523816cc89ec2b4c31f5800dad500a57dcbee7c87086955fca27e677d6add49f808bc0983ea291819e0007fab295514095f7eb3a206c252d505e85e06e470d9ef8702839c8f34175ae85f90310cce57ababe16e6737e665e51628ef8857f6c734110e7a0597678a5bc5952ded3c4473f7788c2a1547f8e1736baff0f5fb8cf96720be9235b6bc0588b41353a4ede08669bbef5096536dfe2cf900e1d8ed8e601a0e6dfbfce468aeeb4390588e088941593b201b7245a3d0da16b408b4864f0df26337ff491a1084fcefd39fe8a029f48141", 0xd9}, {&(0x7f0000000b40)="13452c60a47fcd20b3e014b0d8309a324561ac871fb410fc1a394213c8993dec1310139c7b097f9c74381bf2c978d71a098b0793f715cf54d3a835416611ecb45103ed12298bb670c72760998d882dcce4922c8cfce7f4d73465d0bf1db310b21f5846c91cc46783016b4d0484e771907c4c7ef61042686018e472771258b6f29fa89b437778fdca60317400df83307badeb2be2d952eb63163ea5eba8726fbb7078a956ac", 0xa5}, {&(0x7f0000000c00)="6f61d843132121f5cec535133aa7fe89b630ca2f9943392549dcaf0aae5fa96360b532e007e9cd7ed09f031e7dd99a6fb4038d326fbc4e502b8b55f4062f42f1e5d1439c18b842eef6d987bd8a07127c673662c8f2d22366fbb29e5f608a931b2226fb47815d4c7138c0b369c2a905a80ada0af1643a84d68f7e0e0d37623268826292c273b8d46d307ca5cf59026f7415319d77d029cd3e83ec896f79dd8a55a704f8324b72b9523a9162906916cc072be0438adf4ab63f51481f7281ee52cfcb582a1bebb91509e49099003c4e82", 0xcf}, {&(0x7f0000000d00)="a0fa4379d5b847f7259d4c801cfbfdfbca95f97e2054b5546cbb9b7752d3cb05af40ee5b0a38e503e7ce6041d055405f37aea8b2f55ae4899189562c5dd124836a37c2c6c4", 0x45}, {&(0x7f0000000d80)="9b3bfb99aee2f98f1f51321de0c9596136986a3f90b632b861dec27551046435", 0x20}, {&(0x7f0000000dc0)="6c62f1667c379f41eac2e6b7b6e61a8a341d7e3658c8bc2942cd89e7d74cf26d7bfc0e09609e83868507d922013b5273b42f80fba890b636d1f4a0de36ecac69a482f3366af5", 0x46}], 0x6, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hopopts={{0x20, 0x29, 0x36, {0x2, 0x1, '\x00', [@ra={0x5, 0x2, 0xf5f5}, @ra={0x5, 0x2, 0x9}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x1, 0x6, 0x2, 0x0, 0x0, [@empty, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}]}}}], 0x80}}, {{&(0x7f0000000f40)={0xa, 0x4e22, 0x7f, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000f80)="281af82d1509bceaf78b443769721b94df444e8a1db31bd5efa4323d30a7e5337257a266954652e819fb2b9f3cc81c28efcb1190e3b5551805bb111f5462b86414b32a52ad4dbdb05e3c7288ef1f345641733617ab7d64fac6c66c0632a9e8107f72f5a4ae106709f0e8a7b84061f3f1fef090175e6d31d0782f0c67e011b1a5335e600d93cc31038cdf0e9cdbde4a389c4f1dea87996c04b33fd39038c6c0ab51b5d20ce9b1", 0xa6}, {&(0x7f0000001040)="352e8997a0044fc43fe2546a86041436f6c49d65d5aeaf62f494337081e080d60c3561d486247d21f399bee0c296de1e2c26eb16d3d1356f9aed674903d634e8527ae3079824f3508c4bd1b4b015df425af232f55640500c7aae0b07a05afa6dcf9bd0dfab8996d6a4c0c886177831002829bb0792405917cccebe04fb3d707cf49c6588a360376e04b932d0ac135a", 0x8f}, {&(0x7f0000001100)="b67f877f5b7938ea8411d20825e45de52c0b0e77c249a54c2b8ffcd011d9a3dc6ccb69f4ec9d3899d4632b9a60f7c2910200b1ca3cc5d3deb04026623bd4f6", 0x3f}, {&(0x7f0000001140)="9c6c2bd602d75e789f3e8710d866ba0f93060b89bcefe963bf2902280f4a465ea1a372f0bdea58e620474efe425f24c256a78a05b2ec6a762941d34a47970c4c0df109b4fac4fc9bd6e8f57ab22d63df4f98946719daaebda59e5eb62ed4f18a1653ae64f83f8b2c5bbfa5e77fcba9729cdbaa5871d540dafd32562f91e2301ad98dc5d28778f73a59320816ad500b92558da98f4be400a9969195eb328b69b36ed5a3a8d7fa7b", 0xa7}], 0x4, &(0x7f0000001240)=[@dstopts_2292={{0x68, 0x29, 0x4, {0x2f, 0x9, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x31}}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0xfb}, @jumbo={0xc2, 0x4, 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x79}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3ff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x73, 0xf, '\x00', [@generic={0x9, 0x7c, "360096d4b0c3c45cf7e892bb14cdb8444221f7bb1dc8f71bbfb30f9d372170883e9a97396593f7e4e527d495d54b1b0e156a4992ceab6726fcfb579a7ade3332bcf100d76e3ffef0f94412236acda76125861a0e7590f4cbf3c7266d7befa92a3dc5cbafd0d54ef0fe82e3c625986072e4ba0f047033472c602a7dbf"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xb}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r3}}}], 0x1b8}}], 0x2, 0x1) 966.663684ms ago: executing program 4 (id=2496): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1f2f, 0x24, 0x0, &(0x7f0000000000)="1e749f447f700400684010a40800297a5d41726bb1d331200ce375083a37c86b7fd9d7da", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x20) 966.40339ms ago: executing program 2 (id=2497): r0 = socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x20010, r0, 0x4fc29000) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000180)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x2, 0x3}}, 0x10, 0x0}, 0x0) 959.652898ms ago: executing program 0 (id=2498): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000001000100811208000000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket(0xb, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000000003d500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c0000001000010405000000030000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x7c}}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x800, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x70bd25, 0x25cfdbfb, {0x1, 0x0, 0xa00}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x3c}, 0x1, 0x2000a00, 0x0, 0x20040090}, 0x4009051) syz_emit_ethernet(0x28, &(0x7f0000000200)=ANY=[@ANYBLOB="01000288a81d00abe48eec2bfffeffffffffffff62"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x18, 0x30, 0x8, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008880}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f00000001c0)=ANY=[], 0x0, 0xa42e, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01410000000000001c0012800a000100697036746e6c00000c0002800500060002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 888.915289ms ago: executing program 2 (id=2499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000440)="80502cc9462af8685a044e2d703e06595d0920a70d92dd5b25c1cefff60f9f6d706fc431", 0x24}], 0x1}, 0x8084) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00000154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a31000000001400058008000140000089170800"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="080008000700020000002b00000045270333a795a37f002d00660000401190780a010102ac1414164e204e200019907802ff000100000000c1963b"], 0x3b) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xfffffffd, 0xfffffffd}, 0x20) connect$l2tp6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x7fe8, @loopback, 0x7, 0xfffffffb}, 0x74) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000010c0), &(0x7f0000001100)=0xe) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000001380)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="000000000000ac25b70a000014000000002085000000000055090100000000009500000000000000bf91000000000000b70200000200000085000000b9000000b7000000000000009500"/96], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3e, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x60000004}, 0x20000000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f00000011c0)={r10, @in6={{0xa, 0x4e24, 0x2, @mcast1, 0x100}}}, &(0x7f0000001280)=0x84) r11 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r11, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8f, 0xe, 0x9, 0x81, 0x7}) 835.634837ms ago: executing program 4 (id=2500): socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x4c010}, 0x4008011) socket(0x2b, 0x1, 0x1) (async) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x0, 0x1, 0x2009, 0xb}, 0x20) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xfce) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000002000010000000000000000000affff0000000000000001001400000000010000003f1a960e1a2bed571a5755430ea3b7020009d5d0c0c27b844b7c1f00000000000000000008000f00ffffff00000000"], 0x54}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000100000000000000010000850000001300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000009000000850000008200000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x100, 0xfdfffc80, 0x0, 0x6, 0x8, 0x0, 0x73a, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0xfeffffff, 0x0, 0x1ff, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffff7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400004, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400, 0x0, 0x10000, 0x1, 0xfff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffefe, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10000000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffff8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0xffffffff, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x71280dd2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x100, 0xfdfffc80, 0x0, 0x6, 0x8, 0x0, 0x73a, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x2, 0xc00, 0x0, 0xfeffffff, 0x0, 0x1ff, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffff7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400004, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x400, 0x0, 0x10000, 0x1, 0xfff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x135, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffefe, 0x0, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10000000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0xfffffff8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0xffffffff, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x71280dd2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0xfffefffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) 797.415894ms ago: executing program 3 (id=2501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYRES8=r1], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040844) r2 = socket(0xa, 0x3, 0xff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r8, 0x1, 0x70bd27, 0x25dedbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x46b2d3ba8e12a610}, 0x4048840) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x76223af7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040050) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000180)="671723d7c60133", 0x7}, {&(0x7f0000000040)="0008000092dc7c8fff658bb527104d265239e2f6b332c99223a7dfe52c1f51218206f5", 0x23}], 0x2}, 0x20008b88) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 742.218729ms ago: executing program 0 (id=2502): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)="71fff3b6e501848903797e084ae6df42aec9d0fa316756cb0fd9a9e104c4fb642998fc3d65c0b2420d72f5e7bf7bb3811bfb9b08a93f839f903dd690726bc7eaca55e86ea88d0c202d86c8a95b2ac950ffc61191c33f", 0x56}], 0x1, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x7ff}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x60}}, {{&(0x7f00000007c0)=@generic={0x1, "b00315c922fcae9ae375b549ef194d4f51082f9186ffbd387baaaed34800485a88480b861488a412181fe80b6ab430c8cc95fa4f5a4c434974fdf15ba2b3876113c49c1bbabb66b8e966373dd4eedb3729c6c1578ad712e7a511db501f34f99408b47ad5f3c8b21193eebfc4a66c77670fccf15c6a02b6d98007632dd147"}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000840)="8d2f68c240fb9ae0d716cee1aecfcee04f9c7cd4021d6d4d0dc482342dd0eddb373e15fa10bbcc543452b979385cf980cb5a3516b2dca523551687b8030ea145735d55368a002c6c9c982368f2e02406874a", 0x52}, {&(0x7f00000008c0)="d34955e9d98a54d3dcf23d0ef0245661ab1ba41aed9cf6f405b2250698948f124a60055b33e97c20daeb4ce43ec88c62530945001b65dd57289d9fe2e8d1f288dddb2289f5f521472f003fc42fecf48ae13f7c264dd9c1ca8c034be8c2301392019654b95ce961c9c925455ffc2b67c56d28dc3541ba4d4f5ce821390c6b7e977d42d64b57361cbd67674da7928e07f35beb4c96f957d725104e0e272f0ebc77ff36213ea190f5053a", 0xa9}, {&(0x7f0000000980)="4cf1d3ad32683f9bfe1d735aaab27ba96e58beba6e0f614121796ba93ca5698be504e52020a22e697bcc3969803122d8d69d40abcc6f9736d1c199e6b218d20aafe595eb424cdbb645e3aa5ca383febe22b9cfdd45950f1df7839f31b06df85cf94afad88ed5cedfed52085c1ec2d280bcbaf5519312726f29c645d7f9c9ae892f3090cd780b124868a5de63df559fceff3a63950b928ce590", 0x99}, {&(0x7f0000000a40)="ca94648aad3db961316ae742b67bbecaa359c98fc4f5fe854e20f5525a120950c7a4f2a5bf4834fdee6fee9a92d90b7a1f4ee61a274adb9860cc176fa0a590fe5271b24335bb06620c338bc664a4866ec697f8d4a64fc6829d0abf949741b2606d1bd423b0d320d597e7418cf2", 0x6d}, {&(0x7f0000000ac0)="9b35b270e5903a47aa24c4e24f867f871e47ce3664d511a721a64d352ffdb09570fdfdf363f7ec8b32fcf34e9e7461411dfb0615a188afd49a8b343da24929a8b2a4743c0c66bf15f3a679adfd45e34fc3f6102e26e4facb78266d26ecd9326eff91bd95d8cd4c1846dbe393622180d94afafa1095b6cab11de747c429a3fea2d0799409bf46e36d739b6028cf21a8ed0424c9fc2336c464c2772f2509f84a1b92d01baf90cfe78daa8754c1cc0a4f9abde167bab41b57a9a1f23be2ee50060e02ec", 0xc2}, {&(0x7f0000000bc0)="4f5b7e5df3ca21840ff9e6666c3324e3b3ac2ea1a6cd32d47dfdb99bf2539a152844e33d2fbc81bb86ecb56e055c28c19ad9a8c219300d6e58", 0x39}, {&(0x7f0000000c00)="b9049653c366226beba09e75549b22e7e195ae9c4d56a86f8759059d9dd5db6f3f80dba2e36c8fe9f7f1a56c4cbb18fcbda48f826aeb48767e93eca67699718f2b2336235d00ae0abbc9d5ce984f640bc83ec12edf13f27e334278ca71a08d023f9f7f86", 0x64}], 0x7, &(0x7f0000000d00)=[@txtime={{0x18, 0x1, 0x3d, 0xc228cf1}}, @mark={{0x14, 0x1, 0x24, 0x399a2b2d}}, @timestamping={{0x14, 0x1, 0x25, 0x2040000}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}], 0x60}}], 0x2, 0x24000040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d0300000000feffffff1300000004000980"], 0x18}}, 0x0) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], 0x1028, 0x20044010}], 0x1, 0x24008055) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket(0x2c, 0x1, 0x8003ff) accept4$alg(r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800be550000000000000000000000001f421e004b3d8890113f91732b0a8b93b392281b6f3258d1828ad29648cc7e471c4fdacd65"], &(0x7f0000000400)='syzkaller\x00', 0xf, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000005}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) r8 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) socket$alg(0x26, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffff4, 0x0, 0xfffffffffffffffe, 0x1000000000004, 0x7}, &(0x7f00000001c0)={0xff, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x0) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4620, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="240000000000000001"], 0x28}, 0x1400c0c0) socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)) 655.733537ms ago: executing program 0 (id=2503): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000002c0), 0x0) 654.86406ms ago: executing program 0 (id=2504): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async, rerun: 32) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) (rerun: 32) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000000), 0x4) (async, rerun: 64) setsockopt$sock_attach_bpf(r3, 0x1, 0x24, &(0x7f0000000000)=r5, 0x4) (rerun: 64) bind$inet(r5, &(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0xfffd, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x82, 0x2}, @generic={0x7, 0x6, "bb8e1297"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r6}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7}, &(0x7f0000000840), &(0x7f0000000340)=r6}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f0000000300)}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r5) sendmsg$ETHTOOL_MSG_RINGS_GET(r8, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x14, r9, 0x400, 0x70bd28, 0x25dddbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040020}, 0x4050) (async) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r10}, 0x20) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmmsg(r2, &(0x7f0000000580)=[{{&(0x7f00000000c0)=@nfc_llcp={0x27, r12, 0x0, 0x3, 0x0, 0x4, "d2e113f6e32647f904acdf6b2adf2d9bcfbaebc5c598d9be5de9991fb7a0fb39ae541567de0ad02aaaf697f92bf7aef7b77cb4324d0fd08e23d7bdad0144cb", 0x35}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="52b3eb3c4644ac", 0x7}, {&(0x7f00000003c0)="fba0b57c5cefecc8f50bfb5a5f6964086432420312dd9200633ee328f50428d17c8a18c446073d9f1fa55ca6ea3cac56ac05ac5a4eb6de6eff8bae8a4a639e2e9a6bb7f623f3d02b929aed66d27f14664585864ad0cff48e7b6d487badec83621174f436d46d8478eff1b1dd76dfc4d35a0577b46ef2c005357404fe3d80fde50e21d9bab623af8045a18f628a4779d6d5e274575dc81cb83ada5af5e90eded0fa72ff8f96407f344d29e3655d3da249ff42197905abe978b53d82cbb5ef775e78da95fd9ee833d8b842617eeb5b2ba11c20d64137ccb63e9d1fc29dbb68cf117e4082eb784ab1ee5d", 0xe9}], 0x2, &(0x7f0000000500)=[{0x10, 0x11, 0x8}, {0x48, 0x10c, 0xce, "4d85d4a33be06b26c3ef03c761993158ec971b9f12e95ab5f470e45dfad4a59933b0ba20a15bf877b716c095ac76ad18b81f5794b12dff"}, {0x20, 0x104, 0xffffffff, "1f5c900f30b73bfee9dedd"}], 0x78}}], 0x1, 0x8000) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c00000010003704030000000300000000000000", @ANYRES32=r1, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES8=r11, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x24040090) (rerun: 64) 236.031156ms ago: executing program 0 (id=2505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000f1000500030003000000080004"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x8f, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x4, [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1]}}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x6, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0xf, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0xd3, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x3, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x1, 0x9, 0x0, 0x4, 0x2}, {0x4, 0x0, 0x6, 0x71f, 0x3, 0x7f}, 0x1, 0x1, 0x3f2}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 210.284723ms ago: executing program 3 (id=2506): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x94000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x8000, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3906a7e7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000000}, 0x8080) 76.043914ms ago: executing program 3 (id=2507): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x0, 0x1, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fae8a9ad451a727"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x609f, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0xbc, "d92984bd1ca44c11a077609475b78411e88509ea050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x13}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0xbc, "d92984bd1ca44c11a077609475b78411e88509ea050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x13}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) unshare(0x8040480) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f00000000c0)=""/153, &(0x7f0000000080)=0x99) 75.767073ms ago: executing program 3 (id=2508): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000680)={0x24, 0x12, 0x0, 0x201, 0x70bd2c, 0x25dfdbff, {0x7, 0x0, 0xb}, [@nested={0x10, 0xab, 0x0, 0x1, [@nested={0x4, 0x64}, @typed={0x8, 0x41, 0x0, 0x0, @pid}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0x4c040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) recvmsg(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) 0s ago: executing program 0 (id=2509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="997429bd7000fbdbdf251500000018000180040007000d0001007564703a73797a3200000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000006c0)={'wlan1\x00', 0x20}) r3 = socket$packet(0x11, 0x1, 0x300) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x840) write$nci(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7) write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="600702010402"], 0x6) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bind$packet(r3, &(0x7f0000000200)={0x11, 0x19, r10, 0x1, 0x1, 0x6, @remote}, 0x14) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r11, 0xffffffffffffffff}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r11}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040000000040000000800000000040000", @ANYRES32=r12, @ANYBLOB="380500ffffff000000a4e98ec0ca94190000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000200"/28], 0x50) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl0\x00', r10, 0x4, 0x9, 0x3, 0x1, 0x3a, @rand_addr=' \x01\x00', @local, 0x7800, 0x10, 0x4, 0x8000}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'}) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0xc084}, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r13, @ANYBLOB="00022bbd7000ffdbdf251500000000bf08000300000000000800030000000000080003000500000008000300000100000c0003000300000008000100", @ANYRES32=r10, @ANYBLOB="4000018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200726f7365300000000000000000000000080003000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="2000018008000100", @ANYRES32=r10, @ANYBLOB="140002007866726d3000000000000000000000002c0001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x80) kernel console output (not intermixed with test programs): istering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.820601][ T9796] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.894278][ T9811] syzkaller1: entered promiscuous mode [ 167.902475][ T9811] syzkaller1: entered allmulticast mode [ 167.954426][ T9796] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.985751][ T9796] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.052193][ T9796] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.074956][ T9796] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.097911][ T9831] xt_hashlimit: size too large, truncated to 1048576 [ 168.216595][ T9840] netlink: 'syz.3.1062': attribute type 1 has an invalid length. [ 168.233468][ T9796] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.254089][ T9840] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1062'. [ 168.264852][ T9796] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.278162][ T9835] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1062'. [ 168.430494][ T9820] lo speed is unknown, defaulting to 1000 [ 168.445931][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.457024][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.511118][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.538103][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.579172][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 168.607081][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.616269][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.657775][ T159] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.680545][ T159] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.850531][ T9877] x_tables: duplicate underflow at hook 2 [ 168.890370][ T9877] openvswitch: netlink: IP tunnel dst address not specified [ 169.328728][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'. [ 169.560643][ T9938] netlink: 'syz.0.1087': attribute type 13 has an invalid length. [ 169.569932][ T9938] netlink: 'syz.0.1087': attribute type 17 has an invalid length. [ 169.619176][ T9938] bridge2: port 1(erspan0) entered blocking state [ 169.625828][ T9938] bridge2: port 1(erspan0) entered forwarding state [ 169.667480][ T9938] sit0: left promiscuous mode [ 169.700487][ T9938] ip6tnl0: left promiscuous mode [ 169.738311][ T9938] bridge0: port 3(dummy0) entered blocking state [ 169.744848][ T9938] bridge0: port 3(dummy0) entered forwarding state [ 169.757734][ T9938] bridge0: entered promiscuous mode [ 169.764944][ T9938] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.784863][ T9938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.917980][ T9938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.046209][ T9938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.149613][ T9938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.172100][ T9938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.199030][ T9938] veth1_vlan: left promiscuous mode [ 170.205876][ T9938] veth0_vlan: left promiscuous mode [ 170.221093][ T9938] veth0_vlan: entered promiscuous mode [ 170.240737][ T9938] veth1_vlan: entered promiscuous mode [ 170.273707][ T9938] veth1_macvtap: left promiscuous mode [ 170.286761][ T9938] veth0_macvtap: left promiscuous mode [ 170.303820][ T9938] veth0_macvtap: entered promiscuous mode [ 170.339019][ T9938] bridge0: port 4(vlan4) entered blocking state [ 170.345526][ T9938] bridge0: port 4(vlan4) entered forwarding state [ 170.360548][ T9938] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 170.377655][ T9938] 8021q: adding VLAN 0 to HW filter on device eth0 [ 170.402825][ T9938] 8021q: adding VLAN 0 to HW filter on device eth1 [ 170.429218][ T9938] 8021q: adding VLAN 0 to HW filter on device eth2 [ 170.458799][ T9938] 8021q: adding VLAN 0 to HW filter on device eth3 [ 170.487920][ T9938] macvlan2: left allmulticast mode [ 170.494350][ T9938] bridge0: left allmulticast mode [ 170.505009][ T9938] ip6gre1: left promiscuous mode [ 170.510170][ T9938] ip6gre1: left allmulticast mode [ 170.517729][ T9938] vlan2: left allmulticast mode [ 170.524560][ T9938] bridge2: left allmulticast mode [ 170.540264][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.547474][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.556905][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.564092][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.604932][ T9945] netlink: 'syz.3.1090': attribute type 3 has an invalid length. [ 170.620294][ T9977] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.647539][ T9977] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.686053][ T9977] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.714285][ T9977] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.075995][T10053] ip6tnl2: entered allmulticast mode [ 171.082233][T10051] netlink: 'syz.3.1111': attribute type 1 has an invalid length. [ 171.090359][T10051] netlink: 'syz.3.1111': attribute type 1 has an invalid length. [ 171.144203][T10057] __nla_validate_parse: 13 callbacks suppressed [ 171.144225][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1114'. [ 171.160899][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1114'. [ 171.236728][T10060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1115'. [ 171.407502][T10071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.487766][T10074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1121'. [ 171.603181][T10082] xt_hl: Unknown Hop Limit match mode: 206 [ 171.677818][T10086] netlink: 'syz.3.1125': attribute type 1 has an invalid length. [ 171.702526][T10086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 171.715700][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1126'. [ 171.736790][T10089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1126'. [ 171.809924][T10095] netlink: 'syz.1.1127': attribute type 11 has an invalid length. [ 171.818040][T10086] bond6: (slave veth5): Enslaving as an active interface with a down link [ 171.830054][T10095] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1127'. [ 171.846486][T10092] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 171.858493][T10092] bond6: (slave batadv1): making interface the new active one [ 171.869853][T10092] batadv1: entered promiscuous mode [ 171.876210][T10092] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 171.995759][T10100] syzkaller0: entered promiscuous mode [ 172.003793][T10100] syzkaller0: entered allmulticast mode [ 172.020657][T10098] pim6reg1: entered promiscuous mode [ 172.031223][T10098] pim6reg1: entered allmulticast mode [ 172.062606][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 172.197504][T10119] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 172.206367][T10119] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.308649][T10126] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 172.411878][T10133] can: request_module (can-proto-0) failed. [ 172.536116][T10140] netlink: 'syz.1.1141': attribute type 1 has an invalid length. [ 172.584027][T10140] bond8: entered promiscuous mode [ 172.617356][T10140] 8021q: adding VLAN 0 to HW filter on device bond8 [ 172.650123][T10119] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 172.888923][T10166] 8021q: VLANs not supported on lo [ 172.916813][T10171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1149'. [ 172.931683][T10171] netlink: 'syz.1.1149': attribute type 4 has an invalid length. [ 173.108043][T10187] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 173.150064][T10191] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1153'. [ 173.173355][T10187] bond0: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 173.195641][T10193] netlink: 'syz.4.1157': attribute type 2 has an invalid length. [ 173.204885][T10193] netlink: 'syz.4.1157': attribute type 1 has an invalid length. [ 173.208890][T10187] bond0 (unregistering): Released all slaves [ 173.244132][T10195] bridge2: port 1(erspan0) entered disabled state [ 173.264715][T10195] bridge0: port 4(vlan4) entered disabled state [ 173.271573][T10195] bridge0: port 3(dummy0) entered disabled state [ 173.278084][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.285289][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.323855][T10195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.337747][T10195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.423717][T10199] : renamed from dummy0 [ 173.444525][ T12] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.457924][ T12] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.468094][ T12] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.477822][T10193] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 173.494952][ T12] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.561153][T10203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.805504][T10224] netlink: 'syz.3.1164': attribute type 1 has an invalid length. [ 173.853355][T10224] bond7: entered promiscuous mode [ 173.858971][T10224] 8021q: adding VLAN 0 to HW filter on device bond7 [ 174.041868][T10246] netlink: 'syz.3.1169': attribute type 2 has an invalid length. [ 174.247797][T10254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.259256][T10254] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.270170][T10254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.318724][T10254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.328485][T10254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.341979][T10254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.352677][T10254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.371936][T10254] veth1_vlan: left promiscuous mode [ 174.387983][T10254] veth0_vlan: left promiscuous mode [ 174.397331][T10254] veth0_vlan: entered promiscuous mode [ 174.408955][T10254] veth1_vlan: entered promiscuous mode [ 174.430846][T10254] veth1_macvtap: left promiscuous mode [ 174.439217][T10254] veth1_macvtap: entered promiscuous mode [ 174.450819][T10254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.462657][T10254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.470949][T10254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.480597][T10254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.502228][T10254] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 174.530367][ T5735] lo speed is unknown, defaulting to 1000 [ 174.540292][ T5735] syz2: Port: 1 Link ACTIVE [ 174.550580][ T9977] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.557787][ T9977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.607815][ T9977] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.615037][ T9977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.648217][T10256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.670240][ T9983] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.680372][ T9983] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.705953][ T9983] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.716339][ T9983] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.457900][T10303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.520654][T10303] bond0: (slave veth7): Enslaving as an active interface with an up link [ 175.617389][T10303] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 175.755966][T10319] batadv_slave_1: entered promiscuous mode [ 175.908931][T10324] pim6reg: entered allmulticast mode [ 175.920093][T10328] batadv_slave_1: left promiscuous mode [ 175.940027][T10324] pim6reg: left allmulticast mode [ 176.045085][T10342] netlink: 'syz.2.1197': attribute type 9 has an invalid length. [ 176.098023][T10341] netlink: 'syz.0.1196': attribute type 13 has an invalid length. [ 176.134910][T10341] netlink: 'syz.0.1196': attribute type 17 has an invalid length. [ 176.185449][T10339] __nla_validate_parse: 14 callbacks suppressed [ 176.185466][T10339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 176.308926][T10341] bridge0: left promiscuous mode [ 176.320232][T10341] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.345567][T10341] bridge0: port 3(dummy0) entered blocking state [ 176.352157][T10341] bridge0: port 3(dummy0) entered forwarding state [ 176.382579][T10341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.442420][T10341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.460501][T10341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.483473][T10341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.500566][T10341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.528528][T10341] veth1_vlan: left promiscuous mode [ 176.540900][T10341] veth0_vlan: left promiscuous mode [ 176.547519][T10341] veth0_vlan: entered promiscuous mode [ 176.555928][T10341] veth1_vlan: entered promiscuous mode [ 176.565703][T10341] veth0_macvtap: left promiscuous mode [ 176.572562][T10341] veth0_macvtap: entered promiscuous mode [ 176.582276][T10341] bridge0: port 4(vlan4) entered blocking state [ 176.588684][T10341] bridge0: port 4(vlan4) entered forwarding state [ 176.602092][T10341] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 176.610551][T10341] 8021q: adding VLAN 0 to HW filter on device eth0 [ 176.618972][T10341] 8021q: adding VLAN 0 to HW filter on device eth1 [ 176.627135][T10341] 8021q: adding VLAN 0 to HW filter on device eth2 [ 176.636234][T10341] 8021q: adding VLAN 0 to HW filter on device eth3 [ 176.649821][T10341] bridge2: port 1(erspan0) entered blocking state [ 176.656457][T10341] bridge2: port 1(erspan0) entered forwarding state [ 176.726793][ T5735] bridge0: entered promiscuous mode [ 176.738162][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.745378][ T9974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.760053][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.767260][ T9974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.820105][ T9983] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.839282][ T9983] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.859595][ T9983] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.871863][T10368] GUP no longer grows the stack in syz.3.1202 (10368): 200000003000-20000000a000 (200000001000) [ 176.882645][T10368] CPU: 0 UID: 0 PID: 10368 Comm: syz.3.1202 Not tainted syzkaller #0 PREEMPT(full) [ 176.882673][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 176.882684][T10368] Call Trace: [ 176.882692][T10368] [ 176.882700][T10368] dump_stack_lvl+0xe8/0x150 [ 176.882727][T10368] __get_user_pages+0x238c/0x2720 [ 176.882751][T10368] ? __gup_longterm_locked+0xc3b/0x15c0 [ 176.882775][T10368] ? rcu_is_watching+0x15/0xb0 [ 176.882807][T10368] __gup_longterm_locked+0xd52/0x15c0 [ 176.882831][T10368] ? gup_fast_fallback+0xbc4/0x20d0 [ 176.882854][T10368] ? rcu_is_watching+0x15/0xb0 [ 176.882875][T10368] ? rcu_is_watching+0x15/0xb0 [ 176.882897][T10368] gup_fast_fallback+0x1d82/0x20d0 [ 176.882936][T10368] ? __pfx_gup_fast_fallback+0x10/0x10 [ 176.882960][T10368] ? __fget_files+0x2a/0x420 [ 176.882981][T10368] ? is_valid_gup_args+0x11f/0x200 [ 176.883003][T10368] ? get_user_pages_fast+0x4d/0xb0 [ 176.883026][T10368] __iov_iter_get_pages_alloc+0x378/0xa40 [ 176.883065][T10368] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 176.883094][T10368] iov_iter_get_pages2+0x5e/0xa0 [ 176.883122][T10368] __se_sys_vmsplice+0x7b5/0x1660 [ 176.883157][T10368] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 176.883185][T10368] ? __pfx_futex_wake+0x10/0x10 [ 176.883209][T10368] ? rcu_is_watching+0x15/0xb0 [ 176.883253][T10368] ? rcu_is_watching+0x15/0xb0 [ 176.883274][T10368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.883294][T10368] do_syscall_64+0x174/0x580 [ 176.883321][T10368] ? trace_irq_disable+0x3b/0x140 [ 176.883348][T10368] ? clear_bhb_loop+0x40/0x90 [ 176.883371][T10368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.883391][T10368] RIP: 0033:0x7f2aa0f9ce59 [ 176.883409][T10368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.883426][T10368] RSP: 002b:00007f2a9f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 176.883447][T10368] RAX: ffffffffffffffda RBX: 00007f2aa1215fa0 RCX: 00007f2aa0f9ce59 [ 176.883462][T10368] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 176.883475][T10368] RBP: 00007f2aa1032e6f R08: 0000000000000000 R09: 0000000000000000 [ 176.883487][T10368] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 176.883498][T10368] R13: 00007f2aa1216038 R14: 00007f2aa1215fa0 R15: 00007fff80794ce8 [ 176.883521][T10368] [ 177.206964][ T9983] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.384446][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.396162][T10385] bridge_slave_0 (unregistering): left allmulticast mode [ 177.409885][T10385] bridge_slave_0 (unregistering): left promiscuous mode [ 177.419011][T10385] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.429982][T10397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1208'. [ 177.479303][T10377] macvtap0: entered allmulticast mode [ 177.487532][T10377] dummy0: entered allmulticast mode [ 177.492926][T10377] dummy0: entered promiscuous mode [ 177.498747][T10392] netlink: 'syz.3.1207': attribute type 11 has an invalid length. [ 177.506878][T10377] dummy0: left allmulticast mode [ 177.535497][ T10] dummy0: left promiscuous mode [ 177.540676][T10387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1208'. [ 177.633140][T10405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1212'. [ 177.710394][T10409] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1212'. [ 177.849764][T10426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1217'. [ 177.888256][T10429] Bluetooth: MGMT ver 1.23 [ 178.067478][T10405] lo speed is unknown, defaulting to 1000 [ 178.188955][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'. [ 178.198723][T10448] netlink: 'syz.0.1222': attribute type 2 has an invalid length. [ 178.207272][T10448] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1222'. [ 178.216406][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'. [ 178.596326][T10468] lo: entered allmulticast mode [ 178.623678][T10468] lo: left allmulticast mode [ 178.859388][T10487] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 179.134363][T10486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1235'. [ 179.163253][T10486] syzkaller0: left promiscuous mode [ 179.168781][T10486] syzkaller0: left allmulticast mode [ 179.435091][T10522] netlink: 'syz.2.1244': attribute type 61 has an invalid length. [ 179.464869][T10522] netlink: 'syz.2.1244': attribute type 62 has an invalid length. [ 179.499013][T10508] lo speed is unknown, defaulting to 1000 [ 179.648286][T10537] netlink: 'syz.3.1249': attribute type 15 has an invalid length. [ 179.707687][T10534] bond5: option all_slaves_active: invalid value (127) [ 179.720139][T10534] bond5 (unregistering): Released all slaves [ 179.861864][T10551] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 179.886152][T10553] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 180.017007][T10551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.066352][T10560] netlink: 'syz.0.1253': attribute type 8 has an invalid length. [ 180.075078][T10560] sch_fq: defrate 0 ignored. [ 180.147680][T10562] syzkaller0: entered promiscuous mode [ 180.154135][T10562] syzkaller0: entered allmulticast mode [ 180.160947][T10562] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 180.246422][T10573] pimreg: entered allmulticast mode [ 180.390456][T10583] syzkaller0: entered promiscuous mode [ 180.396009][T10579] netlink: 'syz.0.1262': attribute type 1 has an invalid length. [ 180.418096][T10583] syzkaller0: entered allmulticast mode [ 180.500421][T10590] netlink: 'syz.1.1264': attribute type 1 has an invalid length. [ 180.578756][T10590] 8021q: adding VLAN 0 to HW filter on device bond9 [ 180.603337][T10590] bond9: entered promiscuous mode [ 180.628981][T10590] bond9: entered allmulticast mode [ 181.106006][T10634] sctp: [Deprecated]: syz.3.1275 (pid 10634) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.106006][T10634] Use struct sctp_sack_info instead [ 181.179792][T10642] wlan0: mtu less than device minimum [ 181.199578][T10652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.218655][T10654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.377665][T10666] __nla_validate_parse: 10 callbacks suppressed [ 181.377687][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 181.414617][T10669] netlink: 'syz.2.1282': attribute type 1 has an invalid length. [ 181.492363][T10669] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.507393][T10678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.524478][T10662] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 181.542024][T10662] bond5: (slave batadv3): making interface the new active one [ 181.554066][T10662] bond5: (slave batadv3): Enslaving as an active interface with an up link [ 181.568770][T10683] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1285'. [ 181.579273][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1285'. [ 181.609036][T10684] bond2: option updelay: invalid value (18446744073709518847) [ 181.617401][T10684] bond2: option updelay: allowed values 0 - 2147483647 [ 181.628551][T10684] bond2 (unregistering): Released all slaves [ 181.915067][T10702] IPVS: Unknown mcast interface: vcan0 [ 182.110665][T10717] netlink: 'syz.2.1299': attribute type 1 has an invalid length. [ 182.186674][T10724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1300'. [ 182.202404][T10725] netlink: 6060 bytes leftover after parsing attributes in process `syz.1.1301'. [ 182.215742][T10724] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 182.239242][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1302'. [ 182.250504][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 182.324827][T10735] syzkaller0: entered promiscuous mode [ 182.330371][T10735] syzkaller0: entered allmulticast mode [ 182.779242][T10749] syzkaller0: entered promiscuous mode [ 182.784975][T10749] syzkaller0: entered allmulticast mode [ 182.794110][T10749] tipc: Started in network mode [ 182.799006][T10749] tipc: Node identity , cluster identity 4711 [ 182.805460][T10749] tipc: Failed to obtain node identity [ 182.811080][T10749] tipc: Enabling of bearer rejected, failed to enable media [ 183.009157][T10755] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 183.019677][T10755] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.1309'. [ 183.036402][T10755] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 183.094576][ T159] batadv1: left promiscuous mode [ 183.142139][T10752] lo speed is unknown, defaulting to 1000 [ 183.452387][T10785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1315'. [ 183.524872][T10785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1315'. [ 183.749364][T10806] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.756866][T10806] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.972696][T10803] lo speed is unknown, defaulting to 1000 [ 184.007762][T10815] validate_nla: 1 callbacks suppressed [ 184.007786][T10815] netlink: 'syz.2.1325': attribute type 15 has an invalid length. [ 184.043171][T10816] netlink: 'syz.2.1325': attribute type 15 has an invalid length. [ 184.818656][T10838] sctp: [Deprecated]: syz.1.1330 (pid 10838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.818656][T10838] Use struct sctp_sack_info instead [ 185.100651][T10875] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 185.130329][T10875] netlink: 'syz.0.1338': attribute type 1 has an invalid length. [ 185.197553][T10882] netlink: 'syz.4.1339': attribute type 1 has an invalid length. [ 185.449535][T10884] bond5: (slave dummy0): Releasing active interface [ 185.464067][T10884] bond1: (slave geneve2): Releasing active interface [ 185.473138][T10884] bond5: (slave veth3): Releasing active interface [ 185.482040][T10884] bond6: (slave veth5): Releasing active interface [ 185.488661][T10884] bond6: (slave veth5): the permanent HWaddr of slave - 96:62:3f:7f:ee:58 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 185.506286][T10884] batadv1: entered promiscuous mode [ 185.515486][T10884] bond6: (slave batadv1): Releasing active interface [ 185.523408][T10884] batadv1: left promiscuous mode [ 185.569549][T10882] 8021q: adding VLAN 0 to HW filter on device bond5 [ 185.728904][T10906] xt_hashlimit: max too large, truncated to 1048576 [ 185.745812][T10906] xt_hashlimit: overflow, try lower: 2/0 [ 185.897267][T10917] netlink: 'syz.0.1350': attribute type 62 has an invalid length. [ 186.025870][T10900] lo speed is unknown, defaulting to 1000 [ 186.049926][T10920] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 186.394634][T10957] __nla_validate_parse: 74 callbacks suppressed [ 186.394654][T10957] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.1361'. [ 186.420910][T10957] openvswitch: netlink: Key type 11488 is out of range max 32 [ 186.430864][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 186.638361][T10967] netlink: 'syz.0.1364': attribute type 3 has an invalid length. [ 186.658414][T10967] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1364'. [ 186.864846][T10975] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 186.883661][T10978] 8021q: VLANs not supported on wg1 [ 186.898691][T10972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1366'. [ 187.018674][T10972] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 187.028223][T10981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1369'. [ 187.040498][T10972] bond8 (unregistering): Released all slaves [ 187.068270][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 187.190009][T10983] bond2: entered allmulticast mode [ 187.250229][T10989] macvlan0: entered promiscuous mode [ 187.279888][T10989] macvlan0: entered allmulticast mode [ 187.314510][T10989] bond2: (slave macvlan0): Opening slave failed [ 187.330531][T11009] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1373'. [ 187.360188][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1371'. [ 187.387810][T11011] netlink: 'syz.1.1371': attribute type 7 has an invalid length. [ 187.421498][T11004] tap0: tun_chr_ioctl cmd 1074025675 [ 187.437347][T11011] netlink: 'syz.1.1371': attribute type 8 has an invalid length. [ 187.461914][T11004] tap0: persist disabled [ 187.466169][T11011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 187.506004][T11009] gretap0: entered allmulticast mode [ 187.536204][T11011] syz_tun: entered promiscuous mode [ 187.556121][T11011] syz_tun: left promiscuous mode [ 187.585275][T10985] tap0: tun_chr_ioctl cmd 1074025692 [ 187.647193][T11019] x_tables: duplicate underflow at hook 2 [ 187.676620][T11025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1377'. [ 187.747263][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.826898][T11027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.837985][T11027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.908010][ T5743] lo speed is unknown, defaulting to 1000 [ 187.923171][ T5743] syz2: Port: 1 Link DOWN [ 187.927681][T11032] netlink: 'syz.3.1379': attribute type 12 has an invalid length. [ 187.948095][ T159] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.965169][ T159] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.988475][ T159] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.015036][ T159] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.123534][T11034] syzkaller0: entered promiscuous mode [ 188.137680][T11034] syzkaller0: entered allmulticast mode [ 188.167355][ T159] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.210181][ T159] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.265135][ T159] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.297433][ T159] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.433043][T11056] syzkaller0: entered promiscuous mode [ 188.450347][T11056] syzkaller0: entered allmulticast mode [ 188.794576][T11069] syzkaller0: entered promiscuous mode [ 188.806485][T11069] syzkaller0: entered allmulticast mode [ 189.153836][T11098] xt_hashlimit: size too large, truncated to 1048576 [ 189.328085][T11101] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 189.414314][T11119] macsec0: entered promiscuous mode [ 189.504348][T11123] veth1_macvtap: left promiscuous mode [ 189.537431][T11123] macsec0 (unregistering): left promiscuous mode [ 189.553392][T11121] bond3: entered promiscuous mode [ 189.564835][T11121] bond3: entered allmulticast mode [ 189.600932][T11130] netlink: 'syz.1.1402': attribute type 1 has an invalid length. [ 189.630671][T11130] bond10: entered promiscuous mode [ 189.637840][T11130] 8021q: adding VLAN 0 to HW filter on device bond10 [ 189.826155][T11151] FAULT_INJECTION: forcing a failure. [ 189.826155][T11151] name failslab, interval 1, probability 0, space 0, times 0 [ 189.854838][T11151] CPU: 0 UID: 0 PID: 11151 Comm: syz.1.1407 Not tainted syzkaller #0 PREEMPT(full) [ 189.854867][T11151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.854879][T11151] Call Trace: [ 189.854886][T11151] [ 189.854894][T11151] dump_stack_lvl+0xe8/0x150 [ 189.854924][T11151] should_fail_ex+0x40c/0x560 [ 189.854948][T11151] should_failslab+0xa8/0x100 [ 189.854977][T11151] ? skb_clone+0x212/0x3a0 [ 189.854995][T11151] kmem_cache_alloc_noprof+0x87/0x650 [ 189.855024][T11151] skb_clone+0x212/0x3a0 [ 189.855043][T11151] __netlink_deliver_tap+0x413/0x860 [ 189.855078][T11151] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.855107][T11151] netlink_deliver_tap+0x19c/0x1b0 [ 189.855136][T11151] netlink_sendskb+0x68/0x140 [ 189.855164][T11151] netlink_rcv_skb+0x2a4/0x4a0 [ 189.855192][T11151] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 189.855221][T11151] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 189.855257][T11151] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.855288][T11151] netlink_unicast+0x7bb/0x940 [ 189.855320][T11151] netlink_sendmsg+0x813/0xb40 [ 189.855354][T11151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.855392][T11151] ? aa_sock_msg_perm+0xf1/0x1b0 [ 189.855412][T11151] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 189.855436][T11151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.855465][T11151] ____sys_sendmsg+0x9b9/0xa20 [ 189.855498][T11151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.855531][T11151] ? import_iovec+0x73/0xa0 [ 189.855559][T11151] ___sys_sendmsg+0x2a5/0x360 [ 189.855586][T11151] ? rcu_is_watching+0x15/0xb0 [ 189.855605][T11151] ? get_pid_task+0x20/0x1f0 [ 189.855624][T11151] ? __pfx____sys_sendmsg+0x10/0x10 [ 189.855655][T11151] ? rcu_is_watching+0x15/0xb0 [ 189.855690][T11151] ? __fget_files+0x2a/0x420 [ 189.855711][T11151] ? __fget_files+0x3a2/0x420 [ 189.855737][T11151] __x64_sys_sendmsg+0x1b1/0x290 [ 189.855767][T11151] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 189.855802][T11151] ? rcu_is_watching+0x15/0xb0 [ 189.855823][T11151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.855843][T11151] do_syscall_64+0x174/0x580 [ 189.855869][T11151] ? trace_irq_disable+0x3b/0x140 [ 189.855896][T11151] ? clear_bhb_loop+0x40/0x90 [ 189.855918][T11151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.855937][T11151] RIP: 0033:0x7fcf89f9ce59 [ 189.855954][T11151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.855970][T11151] RSP: 002b:00007fcf8ad89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.855990][T11151] RAX: ffffffffffffffda RBX: 00007fcf8a216090 RCX: 00007fcf89f9ce59 [ 189.856005][T11151] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 189.856017][T11151] RBP: 00007fcf8ad89090 R08: 0000000000000000 R09: 0000000000000000 [ 189.856028][T11151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.856039][T11151] R13: 00007fcf8a216128 R14: 00007fcf8a216090 R15: 00007ffdb5c77058 [ 189.856063][T11151] [ 190.242582][T11162] netlink: 'syz.4.1410': attribute type 3 has an invalid length. [ 190.815895][T11186] netlink: 'syz.2.1418': attribute type 11 has an invalid length. [ 190.918470][T11195] pim6reg: entered allmulticast mode [ 190.937603][T11195] pim6reg: left allmulticast mode [ 190.973483][ T9977] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.985162][ T9977] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.995013][ T9977] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.009348][ T9977] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.027753][T11198] netlink: 'syz.1.1422': attribute type 2 has an invalid length. [ 191.105654][T11202] netlink: 'syz.4.1424': attribute type 16 has an invalid length. [ 191.114374][T11202] netlink: 'syz.4.1424': attribute type 3 has an invalid length. [ 191.127716][T11202] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 191.137013][T11202] block nbd4: not configured, cannot reconfigure [ 191.144845][T11202] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 191.153648][T11202] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 191.162412][T11202] netlink: 'syz.4.1424': attribute type 8 has an invalid length. [ 191.199379][T11206] netlink: 'syz.4.1425': attribute type 1 has an invalid length. [ 191.223627][T11206] 8021q: adding VLAN 0 to HW filter on device bond6 [ 191.299591][T11206] bond6: (slave veth9): Enslaving as an active interface with a down link [ 191.508130][T11230] FAULT_INJECTION: forcing a failure. [ 191.508130][T11230] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 191.522047][T11230] CPU: 0 UID: 0 PID: 11230 Comm: syz.1.1433 Not tainted syzkaller #0 PREEMPT(full) [ 191.522075][T11230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.522087][T11230] Call Trace: [ 191.522095][T11230] [ 191.522103][T11230] dump_stack_lvl+0xe8/0x150 [ 191.522130][T11230] should_fail_ex+0x40c/0x560 [ 191.522153][T11230] _copy_from_user+0x2d/0xb0 [ 191.522182][T11230] __sys_connect+0x155/0x460 [ 191.522210][T11230] ? __pfx___sys_connect+0x10/0x10 [ 191.522241][T11230] ? __pfx_ksys_write+0x10/0x10 [ 191.522271][T11230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.522291][T11230] __x64_sys_connect+0x7a/0x90 [ 191.522317][T11230] do_syscall_64+0x174/0x580 [ 191.522343][T11230] ? trace_irq_disable+0x3b/0x140 [ 191.522370][T11230] ? clear_bhb_loop+0x40/0x90 [ 191.522393][T11230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.522422][T11230] RIP: 0033:0x7fcf89f9ce59 [ 191.522440][T11230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.522458][T11230] RSP: 002b:00007fcf8adaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 191.522480][T11230] RAX: ffffffffffffffda RBX: 00007fcf8a215fa0 RCX: 00007fcf89f9ce59 [ 191.522494][T11230] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 191.522508][T11230] RBP: 00007fcf8adaa090 R08: 0000000000000000 R09: 0000000000000000 [ 191.522521][T11230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.522532][T11230] R13: 00007fcf8a216038 R14: 00007fcf8a215fa0 R15: 00007ffdb5c77058 [ 191.522557][T11230] [ 191.700193][T11232] __nla_validate_parse: 12 callbacks suppressed [ 191.700212][T11232] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1434'. [ 191.956051][T11246] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 192.208939][T11274] dvmrp0: entered allmulticast mode [ 192.223999][T11278] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1447'. [ 192.274751][T11278] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1447'. [ 192.677510][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1460'. [ 192.687737][T11316] tipc: Started in network mode [ 192.697054][T11316] tipc: Node identity 7f000001, cluster identity 4711 [ 192.705735][T11316] tipc: Enabled bearer , priority 10 [ 192.725312][T11316] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 192.740930][T11316] tipc: Enabled bearer , priority 10 [ 192.820241][T11328] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 193.009109][T11343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'. [ 193.228261][T11354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1470'. [ 193.590774][T11405] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1482'. [ 193.823228][ T5743] tipc: Node number set to 2130706433 [ 194.098174][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 194.101860][T11433] netlink: zone id is out of range [ 194.112522][T11433] netlink: zone id is out of range [ 194.117758][T11433] netlink: zone id is out of range [ 194.123658][T11433] netlink: zone id is out of range [ 194.128817][T11433] netlink: zone id is out of range [ 194.134704][T11433] netlink: zone id is out of range [ 194.139838][T11433] netlink: zone id is out of range [ 194.148213][T11433] netlink: zone id is out of range [ 194.154779][T11433] netlink: zone id is out of range [ 194.312984][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.603904][T11440] gre0: entered promiscuous mode [ 194.609020][T11440] gre0: entered allmulticast mode [ 194.701074][T11444] syzkaller0: entered promiscuous mode [ 194.706770][T11444] syzkaller0: entered allmulticast mode [ 196.499876][T11387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.682204][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 196.725365][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1497'. [ 197.047748][T11484] : renamed from veth0_to_bond (while UP) [ 197.140382][T11493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1507'. [ 197.158728][T11493] netlink: 'syz.0.1507': attribute type 20 has an invalid length. [ 197.187143][T11493] netlink: 'syz.0.1507': attribute type 21 has an invalid length. [ 197.224478][T11494] netlink: 'syz.0.1507': attribute type 1 has an invalid length. [ 197.309641][T11494] 8021q: adding VLAN 0 to HW filter on device bond4 [ 197.439939][T11494] bond4: (slave ip6gretap1): making interface the new active one [ 197.473979][T11494] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 197.506792][T11496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 197.527555][T11512] lo: entered allmulticast mode [ 197.553602][T11514] lo: left allmulticast mode [ 197.585809][T11512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1511'. [ 197.620577][T11514] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1511'. [ 197.682508][T11521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1512'. [ 197.702854][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1514'. [ 197.738181][T11522] netlink: 'syz.4.1514': attribute type 4 has an invalid length. [ 197.755613][T11522] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1514'. [ 198.213953][T11547] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1521'. [ 198.237214][T11547] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1521'. [ 198.734758][T11573] netlink: 'syz.4.1529': attribute type 142 has an invalid length. [ 198.855523][T11587] FAULT_INJECTION: forcing a failure. [ 198.855523][T11587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.905336][T11587] CPU: 0 UID: 0 PID: 11587 Comm: syz.4.1533 Not tainted syzkaller #0 PREEMPT(full) [ 198.905366][T11587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 198.905379][T11587] Call Trace: [ 198.905386][T11587] [ 198.905395][T11587] dump_stack_lvl+0xe8/0x150 [ 198.905422][T11587] should_fail_ex+0x40c/0x560 [ 198.905447][T11587] _copy_from_iter+0x1d3/0x1660 [ 198.905475][T11587] ? rcu_is_watching+0x15/0xb0 [ 198.905500][T11587] ? __pfx__copy_from_iter+0x10/0x10 [ 198.905523][T11587] ? is_bpf_text_address+0x26/0x2b0 [ 198.905553][T11587] ? rcu_is_watching+0x15/0xb0 [ 198.905575][T11587] ? rcu_is_watching+0x15/0xb0 [ 198.905600][T11587] tun_get_user+0x269/0x4350 [ 198.905625][T11587] ? is_bpf_text_address+0x292/0x2b0 [ 198.905657][T11587] ? rcu_is_watching+0x15/0xb0 [ 198.905679][T11587] ? rcu_is_watching+0x15/0xb0 [ 198.905699][T11587] ? lock_release+0x4b/0x3c0 [ 198.905728][T11587] ? arch_stack_walk+0xfb/0x150 [ 198.905755][T11587] ? aa_file_perm+0x4ed/0x15f0 [ 198.905776][T11587] ? __pfx_tun_get_user+0x10/0x10 [ 198.905805][T11587] ? kstrtoull+0x12f/0x1d0 [ 198.905830][T11587] ? ref_tracker_alloc+0x341/0x4b0 [ 198.905852][T11587] ? get_pid_task+0x20/0x1f0 [ 198.905871][T11587] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 198.905893][T11587] ? rcu_is_watching+0x15/0xb0 [ 198.905913][T11587] ? tun_get+0x1c/0x2f0 [ 198.905936][T11587] ? tun_get+0x1c/0x2f0 [ 198.905959][T11587] ? rcu_is_watching+0x15/0xb0 [ 198.905978][T11587] ? tun_get+0x1c/0x2f0 [ 198.906001][T11587] ? lock_release+0x4b/0x3c0 [ 198.906030][T11587] ? apparmor_file_permission+0x1f4/0x300 [ 198.906057][T11587] ? tun_get+0x1c/0x2f0 [ 198.906093][T11587] tun_chr_write_iter+0x113/0x200 [ 198.906120][T11587] vfs_write+0x612/0xba0 [ 198.906152][T11587] ? __pfx_vfs_write+0x10/0x10 [ 198.906185][T11587] ? __fget_files+0x2a/0x420 [ 198.906212][T11587] ksys_write+0x150/0x270 [ 198.906240][T11587] ? __pfx_ksys_write+0x10/0x10 [ 198.906268][T11587] ? rcu_is_watching+0x15/0xb0 [ 198.906290][T11587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.906311][T11587] do_syscall_64+0x174/0x580 [ 198.906337][T11587] ? trace_irq_disable+0x3b/0x140 [ 198.906368][T11587] ? clear_bhb_loop+0x40/0x90 [ 198.906391][T11587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.906411][T11587] RIP: 0033:0x7f72a5d9ce59 [ 198.906430][T11587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.906448][T11587] RSP: 002b:00007f72a6d0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.906470][T11587] RAX: ffffffffffffffda RBX: 00007f72a6015fa0 RCX: 00007f72a5d9ce59 [ 198.906486][T11587] RDX: 0000000000000039 RSI: 0000200000000480 RDI: 0000000000000003 [ 198.906498][T11587] RBP: 00007f72a6d0a090 R08: 0000000000000000 R09: 0000000000000000 [ 198.906510][T11587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.906522][T11587] R13: 00007f72a6016038 R14: 00007f72a6015fa0 R15: 00007ffdb4cedbc8 [ 198.906547][T11587] [ 199.280991][T11602] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:21 [ 199.296961][T11601] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:21 [ 199.335617][T11601] xt_hashlimit: size too large, truncated to 1048576 [ 199.478025][T11602] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 199.780048][T11634] syzkaller0: entered promiscuous mode [ 199.785843][T11634] syzkaller0: entered allmulticast mode [ 199.898046][ T4937] block nbd4: Receive control failed (result -32) [ 199.905928][ T5623] block nbd4: Receive control failed (result -32) [ 200.066181][T11650] netlink: 'syz.2.1553': attribute type 1 has an invalid length. [ 200.085702][T11655] netlink: 'syz.3.1554': attribute type 1 has an invalid length. [ 200.150079][T11655] 8021q: adding VLAN 0 to HW filter on device bond8 [ 200.178549][T11650] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.218976][T11657] bond8: (slave veth9): Enslaving as an active interface with a down link [ 200.262172][T11659] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 200.308835][T11655] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 200.330725][T11655] bond8: (slave batadv2): making interface the new active one [ 200.342940][T11655] batadv2: entered promiscuous mode [ 200.348648][T11655] bond8: (slave batadv2): Enslaving as an active interface with an up link [ 200.534858][T11681] netlink: 'syz.2.1564': attribute type 11 has an invalid length. [ 200.577249][T11679] net_ratelimit: 393 callbacks suppressed [ 200.577269][T11679] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 200.866630][T11703] netlink: 'syz.1.1568': attribute type 3 has an invalid length. [ 200.920699][T11709] syzkaller0: entered promiscuous mode [ 200.936597][T11709] syzkaller0: entered allmulticast mode [ 201.347985][T11736] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.382223][T11736] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.504483][T11736] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.524945][T11736] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.571834][T11741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.603325][T11741] IPVS: set_ctl: invalid protocol: 40 20.0.8.0:10429 [ 201.616571][T11736] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.644757][T11736] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.727103][T11736] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.780448][T11736] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.873222][T11755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.885181][T11755] __nla_validate_parse: 18 callbacks suppressed [ 201.885201][T11755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1583'. [ 201.907048][T11755] netlink: del zone limit has 8 unknown bytes [ 201.924826][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.934947][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.975435][ T9981] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.996349][ T9981] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.015301][ T9981] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.024405][ T9981] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.047274][T11759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 202.063270][ T9981] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.076472][ T9981] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.099423][T11759] veth9: entered allmulticast mode [ 202.108562][T11759] bond5: (slave veth9): Enslaving as an active interface with an up link [ 202.126028][T11757] sit0: entered promiscuous mode [ 202.137182][T11757] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1584'. [ 202.233921][T11766] validate_nla: 4 callbacks suppressed [ 202.233942][T11766] netlink: 'syz.2.1586': attribute type 4 has an invalid length. [ 202.261031][T11766] netlink: 'syz.2.1586': attribute type 4 has an invalid length. [ 202.324870][T11773] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 202.347194][T11773] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 202.531164][T11778] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 202.640130][T11778] bond6 (unregistering): Released all slaves [ 202.965496][T11807] netlink: 'syz.2.1598': attribute type 5 has an invalid length. [ 203.082223][T11810] ip_vti0: entered promiscuous mode [ 203.114443][T11810] ip_vti0: entered allmulticast mode [ 203.500209][T11802] lo speed is unknown, defaulting to 1000 [ 203.587705][T11832] unsupported nlmsg_type 40 [ 203.994304][T11850] netlink: 616 bytes leftover after parsing attributes in process `syz.0.1610'. [ 204.138654][T11854] nbd: must specify a size in bytes for the device [ 204.157592][T11853] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1612'. [ 204.173423][T11853] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1612'. [ 204.207955][T11853] erspan0: left promiscuous mode [ 204.223701][T11860] netlink: 'syz.4.1614': attribute type 1 has an invalid length. [ 204.253781][T11853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.265655][T11853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.327902][T11853] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 204.374371][T11860] 8021q: adding VLAN 0 to HW filter on device bond7 [ 204.438109][T11865] bond7: (slave veth11): Enslaving as an active interface with a down link [ 204.457899][ T5743] uyz0: Port: 1 Link ACTIVE [ 204.483672][T11868] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 204.494694][T11868] bond7: (slave batadv5): making interface the new active one [ 204.509989][T11868] batadv5: entered promiscuous mode [ 204.516363][T11868] bond7: (slave batadv5): Enslaving as an active interface with an up link [ 204.538761][T11861] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 204.570467][T11873] veth1_to_bond: entered allmulticast mode [ 204.578375][T11871] veth1_to_bond: entered promiscuous mode [ 204.618831][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1617'. [ 204.698474][T11871] veth1_to_bond (unregistering): left allmulticast mode [ 204.721196][T11871] veth1_to_bond (unregistering): left promiscuous mode [ 204.965524][T11888] netlink: 'syz.0.1623': attribute type 83 has an invalid length. [ 205.245233][T11906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 205.278715][T11908] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 205.299078][T11910] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1629'. [ 205.324555][T11908] netlink: 'syz.2.1628': attribute type 1 has an invalid length. [ 205.342751][T11910] pim6reg1: entered promiscuous mode [ 205.354849][T11910] pim6reg1: entered allmulticast mode [ 205.360365][T11908] netlink: 'syz.2.1628': attribute type 1 has an invalid length. [ 205.785685][T11941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1638'. [ 205.915767][T11945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1637'. [ 205.993748][T11945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.238299][T11959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.433211][T11968] x_tables: duplicate underflow at hook 1 [ 206.600986][T11973] netlink: 'syz.0.1645': attribute type 5 has an invalid length. [ 206.639578][T11982] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 206.670757][T11986] bond11: (slave tunl0): Device is not bonding slave [ 206.678589][T11986] bond11: option active_slave: invalid value (tunl0) [ 206.686994][T11986] bond11 (unregistering): Released all slaves [ 206.715592][T11982] bond8: option mode: invalid value (8) [ 206.723219][T11982] bond8 (unregistering): Released all slaves [ 206.788508][T11995] syzkaller0: entered promiscuous mode [ 206.797697][T11995] syzkaller0: entered allmulticast mode [ 206.806423][T11996] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 206.815908][T11995] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 206.979058][T12012] __nla_validate_parse: 3 callbacks suppressed [ 206.979078][T12012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1653'. [ 207.022509][T12012] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1653'. [ 207.326149][T12040] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1663'. [ 207.337381][T12036] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1661'. [ 207.355079][T12040] netlink: 'syz.3.1663': attribute type 9 has an invalid length. [ 207.383647][T12040] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1663'. [ 207.397484][T12047] vxcan2: entered allmulticast mode [ 207.523249][T12050] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1664'. [ 207.546708][T12050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.735961][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1667'. [ 207.762129][T12058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1667'. [ 207.819922][T12058] 8021q: adding VLAN 0 to HW filter on device bond6 [ 207.889585][T12070] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 207.911127][T12069] netlink: 'syz.2.1669': attribute type 1 has an invalid length. [ 208.052736][T12076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.108735][T12084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.196446][T12073] bridge2: port 1(erspan0) entered disabled state [ 208.255752][T12086] netlink: zone id is out of range [ 208.293838][T12086] netlink: zone id is out of range [ 208.319736][T12086] netlink: zone id is out of range [ 208.341875][T12086] netlink: zone id is out of range [ 208.421030][T12086] netlink: set zone limit has 4 unknown bytes [ 208.496041][T12073] bridge0: port 4(vlan4) entered disabled state [ 208.502935][T12073] bridge0: port 3(dummy0) entered disabled state [ 208.509432][T12073] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.516642][T12073] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.760934][T12073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.775295][T12073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.232021][T12069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 209.288560][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1674'. [ 209.299808][ T159] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.309458][T12091] netlink: 'syz.3.1674': attribute type 11 has an invalid length. [ 209.320157][ T159] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.365332][ T159] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.365368][T12091] netlink: 'syz.3.1674': attribute type 11 has an invalid length. [ 209.382303][ T159] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.848585][T12140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.857992][T12140] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.869031][T12140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.986016][T12140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.005610][T12140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.017370][T12140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.030339][T12140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.046114][T12140] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 210.062352][T12105] lo speed is unknown, defaulting to 1000 [ 210.076144][ T9977] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.083362][ T9977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.091240][T12105] syz2: Port: 1 Link ACTIVE [ 210.463772][T12187] xt_hashlimit: overflow, rate too high: 0 [ 210.603050][T12193] syzkaller1: entered promiscuous mode [ 210.643003][T12193] syzkaller1: entered allmulticast mode [ 211.104233][T12222] netlink: 'syz.4.1705': attribute type 4 has an invalid length. [ 211.383159][T12254] netlink: 'syz.4.1712': attribute type 1 has an invalid length. [ 211.392146][T12254] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 211.399474][T12254] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 211.407458][T12254] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 211.462529][ T9983] batadv2: left promiscuous mode [ 211.852398][T12264] lo speed is unknown, defaulting to 1000 [ 211.952830][T12286] dvmrp8: entered allmulticast mode [ 212.068948][T12292] bond0: (slave ip6tnl0): Error: Device type is different from other slaves [ 212.129097][T12295] bond9: ARP target 9.0.0.0 is already present [ 212.155420][T12295] bond9: option arp_ip_target: invalid value (9) [ 212.182866][T12295] bond9 (unregistering): Released all slaves [ 212.219614][T12304] __nla_validate_parse: 13 callbacks suppressed [ 212.219635][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1725'. [ 212.254454][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1725'. [ 212.312420][T12306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1725'. [ 212.368893][T12314] netlink: 'syz.3.1728': attribute type 40 has an invalid length. [ 212.378383][T12310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1726'. [ 212.497077][T12327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1729'. [ 212.573821][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1729'. [ 212.684005][T12339] netlink: 'syz.3.1732': attribute type 1 has an invalid length. [ 212.707765][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1730'. [ 212.733792][T12342] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1733'. [ 212.743804][T12342] openvswitch: netlink: Key type 769 is out of range max 32 [ 212.817039][T12339] 8021q: adding VLAN 0 to HW filter on device bond9 [ 212.859483][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1734'. [ 212.875172][T12343] bond9: (slave batadv3): Opening slave failed [ 213.037668][T12365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1738'. [ 213.215886][T12380] IPv6: NLM_F_REPLACE set, but no existing node found! [ 213.430710][T12404] sctp: [Deprecated]: syz.2.1748 (pid 12404) Use of int in maxseg socket option. [ 213.430710][T12404] Use struct sctp_assoc_value instead [ 213.546256][T12407] atomic_op ffff88807d0b9998 conn xmit_atomic 0000000000000000 [ 213.825116][T12393] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.868659][ T24] uyz0: Port: 1 Link DOWN [ 213.870861][ T9974] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.926867][ T9974] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.959160][ T9974] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.274920][T12439] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 214.288884][T12439] netlink: 'syz.1.1759': attribute type 3 has an invalid length. [ 214.316057][T12434] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 214.414753][T12448] netlink: 'syz.4.1760': attribute type 1 has an invalid length. [ 214.436694][T12434] bond7: entered allmulticast mode [ 214.443664][T12434] 8021q: adding VLAN 0 to HW filter on device bond7 [ 214.500262][T12448] 8021q: adding VLAN 0 to HW filter on device bond8 [ 214.555779][T12457] bond8: (slave veth13): Enslaving as an active interface with a down link [ 214.598800][T12448] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 214.620690][T12448] bond8: (slave batadv6): making interface the new active one [ 214.648299][T12448] batadv6: entered promiscuous mode [ 214.654852][T12448] bond8: (slave batadv6): Enslaving as an active interface with an up link [ 214.707693][T12464] ip6tnl2: entered promiscuous mode [ 214.784951][T12477] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 214.814838][T12483] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 214.951212][T12490] tipc: Enabled bearer , priority 2 [ 215.356283][T12529] ip6gre1: entered promiscuous mode [ 215.364982][T12529] ip6gre1: entered allmulticast mode [ 215.452242][T12531] batadv_slave_0: entered promiscuous mode [ 215.479327][T12531] batadv_slave_0 (unregistering): left promiscuous mode [ 215.496043][T12531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.693145][ T9983] batadv5: left promiscuous mode [ 215.836709][ T30] audit: type=1800 audit(1782324775.249:8): pid=12539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1780" name=CB dev="tmpfs" ino=1924 res=0 errno=0 [ 215.869131][ T30] audit: type=1800 audit(1782324775.279:9): pid=12540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1780" name=CB dev="tmpfs" ino=1924 res=0 errno=0 [ 216.498733][T12579] syzkaller0: entered promiscuous mode [ 216.504953][T12579] syzkaller0: entered allmulticast mode [ 216.868998][T12591] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 216.875953][T12591] pim6reg0: linktype set to 805 [ 217.810451][T12597] __nla_validate_parse: 10 callbacks suppressed [ 217.810469][T12597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1796'. [ 219.329944][T12568] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.459683][T12610] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 219.489809][T12610] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.549655][T12610] bond7: (slave veth11): Enslaving as an active interface with a down link [ 219.581061][T12610] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 219.595565][T12610] bond7: (slave batadv2): making interface the new active one [ 219.615916][T12610] batadv2: entered promiscuous mode [ 219.622539][T12610] bond7: (slave batadv2): Enslaving as an active interface with an up link [ 219.803390][T12638] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1807'. [ 219.934648][ T9983] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 219.955661][T12645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.004130][T12649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.249772][T12672] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1815'. [ 220.294864][T12674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1815'. [ 220.317599][T12672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1815'. [ 220.607888][T12693] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1821'. [ 220.795751][T12704] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1823'. [ 220.848252][T12703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1820'. [ 221.218517][T12734] xt_hashlimit: size too large, truncated to 1048576 [ 221.226956][T12745] netlink: 'syz.1.1832': attribute type 1 has an invalid length. [ 221.304173][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1830'. [ 221.341676][T12751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1832'. [ 221.632986][T12761] tipc: Enabled bearer , priority 0 [ 221.774421][T12719] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.807707][T12719] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.864219][T12719] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.877572][T12719] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.889279][T12733] tipc: Disabling bearer [ 222.033456][T12786] xt_TCPMSS: Only works on TCP SYN packets [ 222.077013][T12783] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.094465][T12783] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.117328][T12787] lo speed is unknown, defaulting to 1000 [ 222.129875][T12787] lo speed is unknown, defaulting to 1000 [ 222.146089][T12787] lo speed is unknown, defaulting to 1000 [ 222.154201][T12783] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.216842][T12783] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.300229][T12783] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.324515][T12783] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.395865][T12799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.407957][T12816] netlink: 'syz.3.1847': attribute type 1 has an invalid length. [ 222.422031][T12813] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 222.487052][T12783] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.518901][T12783] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.539105][T12787] infiniband syz1: set active [ 222.544580][T12787] infiniband syz1: added lo [ 222.567858][T12787] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 222.586072][T12820] bond10: (slave geneve4): making interface the new active one [ 222.599538][T12820] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 222.609485][T12787] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 222.630604][T12787] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 222.635873][T12816] bond10 (unregistering): (slave geneve4): Releasing active interface [ 222.660894][T12787] RDS/IB: syz1: added [ 222.666267][T12787] smc: adding ib device syz1 with port count 1 [ 222.673694][T12787] smc: ib device syz1 port 1 has no pnetid [ 222.694276][T12816] bond10 (unregistering): Released all slaves [ 222.712100][T12111] lo speed is unknown, defaulting to 1000 [ 222.717944][ T6751] lo speed is unknown, defaulting to 1000 [ 222.725385][T12787] lo speed is unknown, defaulting to 1000 [ 222.774264][T12719] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.787804][T12719] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.838213][T12826] vlan5: entered promiscuous mode [ 222.858574][T12826] bridge0: entered promiscuous mode [ 222.875110][T12719] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.898649][T12719] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.946781][T12719] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.963010][T12719] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.993095][T12719] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.026548][T12719] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.129489][T12787] lo speed is unknown, defaulting to 1000 [ 223.172969][T12839] __nla_validate_parse: 6 callbacks suppressed [ 223.172991][T12839] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1853'. [ 223.205396][T12839] ipvlan2: entered promiscuous mode [ 223.215698][T12839] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 223.239595][T12839] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1853'. [ 223.292041][T12845] netlink: 'syz.2.1854': attribute type 11 has an invalid length. [ 223.474061][T12787] lo speed is unknown, defaulting to 1000 [ 223.598084][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1858'. [ 223.635897][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1858'. [ 223.655531][T12857] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1857'. [ 223.737718][T12841] lo speed is unknown, defaulting to 1000 [ 223.756211][T12787] lo speed is unknown, defaulting to 1000 [ 223.928975][T12841] lo speed is unknown, defaulting to 1000 [ 224.022876][T12870] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 224.109391][T12865] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1860'. [ 224.133870][T12870] 8021q: adding VLAN 0 to HW filter on device bond8 [ 224.204005][T12875] bond8: (slave veth13): Enslaving as an active interface with a down link [ 224.222845][T12870] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 224.232223][T12870] bond8: (slave batadv3): making interface the new active one [ 224.241754][T12870] batadv3: entered promiscuous mode [ 224.247383][T12870] bond8: (slave batadv3): Enslaving as an active interface with an up link [ 224.266245][T12787] lo speed is unknown, defaulting to 1000 [ 224.357603][T12881] netlink: 'syz.2.1864': attribute type 2 has an invalid length. [ 224.429802][T12881] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1864'. [ 224.575779][T12896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1868'. [ 224.787299][T12913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1874'. [ 224.813242][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1874'. [ 224.865429][T12921] batadv_slave_1: entered promiscuous mode [ 224.926328][T12921] batadv_slave_1: left promiscuous mode [ 225.088145][T12935] smc: removing ib device uyz0 [ 225.120576][T12935] smbdirect: ib_dev[uyz0] removed [ 225.236416][T12938] syzkaller0: entered promiscuous mode [ 225.272617][T12938] syzkaller0: entered allmulticast mode [ 225.681769][ T57] batadv6: left promiscuous mode [ 225.962049][T12975] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20000 [ 226.863855][T13012] bond9: Unable to set up delay as MII monitoring is disabled [ 226.885009][T13012] bond9 (unregistering): Released all slaves [ 226.903349][T13014] netlink: 'syz.3.1904': attribute type 29 has an invalid length. [ 226.941974][T13024] 8021q: adding VLAN 0 to HW filter on device bond12 [ 226.954688][T13031] pimreg: entered allmulticast mode [ 226.963273][T13011] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 226.979855][T13014] ip_vti0: entered promiscuous mode [ 226.989722][T13014] ip_vti0: entered allmulticast mode [ 227.071062][T13023] pimreg: left allmulticast mode [ 227.092947][T13036] syzkaller1: entered promiscuous mode [ 227.098690][T13036] syzkaller1: entered allmulticast mode [ 227.203573][T13048] macsec0: entered allmulticast mode [ 227.209266][T13048] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 227.222181][T13046] 8021q: VLANs not supported on vxcan0 [ 227.413693][T13060] batadv0: entered promiscuous mode [ 227.421065][T13060] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 227.542502][T13068] tap0: tun_chr_ioctl cmd 1074025677 [ 227.548154][T13068] tap0: linktype set to 787 [ 228.096490][T13093] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 228.205379][T13097] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 228.332065][T13104] netlink: 'syz.3.1933': attribute type 1 has an invalid length. [ 228.398072][T13104] 8021q: adding VLAN 0 to HW filter on device bond10 [ 228.429779][T13113] bond10: (slave veth11): Enslaving as an active interface with a down link [ 228.503686][T13113] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 228.513817][T13113] bond10: (slave batadv3): making interface the new active one [ 228.524510][T13113] batadv3: entered promiscuous mode [ 228.531798][T13113] bond10: (slave batadv3): Enslaving as an active interface with an up link [ 228.924670][T13118] __nla_validate_parse: 15 callbacks suppressed [ 228.924685][T13118] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1936'. [ 228.955526][T13118] lo speed is unknown, defaulting to 1000 [ 228.963195][T13118] lo speed is unknown, defaulting to 1000 [ 229.210777][T13109] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 229.463736][T13139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1941'. [ 229.475159][T13140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.485113][T13140] batadv_slave_1: entered promiscuous mode [ 229.543221][T13126] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1937'. [ 230.239635][T13181] syz_tun: entered promiscuous mode [ 230.246300][T13181] macsec0: entered allmulticast mode [ 230.252818][T13181] syz_tun: entered allmulticast mode [ 230.260106][T13181] syz_tun: left allmulticast mode [ 230.265628][T13181] syz_tun: left promiscuous mode [ 230.637503][T13203] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1955'. [ 230.667166][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1955'. [ 230.689729][T13203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1955'. [ 230.700027][T12727] batadv2: left promiscuous mode [ 230.714615][T13210] lo speed is unknown, defaulting to 1000 [ 230.722717][T13210] lo speed is unknown, defaulting to 1000 [ 230.840001][T13211] lo speed is unknown, defaulting to 1000 [ 230.890363][T13217] netlink: 'syz.2.1959': attribute type 1 has an invalid length. [ 231.205260][T13233] xt_hashlimit: size too large, truncated to 1048576 [ 231.233039][T13239] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1965'. [ 231.377755][T13211] lo speed is unknown, defaulting to 1000 [ 231.558413][T13239] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1965'. [ 231.647154][T13257] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.749600][T13260] netlink: 'syz.3.1971': attribute type 1 has an invalid length. [ 231.782155][T13260] netlink: 'syz.3.1971': attribute type 4 has an invalid length. [ 231.790319][T13260] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1971'. [ 231.878291][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1974'. [ 231.968890][T13278] xt_l2tp: wrong L2TP version: 0 [ 232.607345][T13313] openvswitch: netlink: Flow actions attr not present in new flow. [ 233.147878][T13322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.410423][T13337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.451832][T12726] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.466925][T12726] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.478575][T12726] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.493641][T12726] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.515069][T12726] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.537297][T12726] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.546424][T12726] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.556167][T12726] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.588813][T13363] netlink: 'syz.4.1995': attribute type 12 has an invalid length. [ 233.707536][T13366] bridge0: port 1(ipvlan3) entered blocking state [ 233.731899][T13366] bridge0: port 1(ipvlan3) entered disabled state [ 233.755748][T13366] ipvlan3: entered allmulticast mode [ 233.777737][T13366] bridge0: entered allmulticast mode [ 233.796940][T13366] ipvlan3: left allmulticast mode [ 233.817917][T13366] bridge0: left allmulticast mode [ 234.010935][T13396] __nla_validate_parse: 7 callbacks suppressed [ 234.010956][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2004'. [ 234.039721][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2004'. [ 234.222458][T13402] gre0: left promiscuous mode [ 234.227220][T13402] gre0: left allmulticast mode [ 234.392122][T13402] ip_vti0: left promiscuous mode [ 234.404906][T13402] ip_vti0: left allmulticast mode [ 234.726234][T13402] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.173671][T13402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.184772][T13402] batadv_slave_1: left promiscuous mode [ 235.206179][T13402] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 235.213678][T13402] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 235.240101][T13402] vlan5: left promiscuous mode [ 235.249233][T13402] bridge0: left promiscuous mode [ 235.255282][T12110] lo speed is unknown, defaulting to 1000 [ 235.255358][T13403] bridge_slave_1: left allmulticast mode [ 235.263405][T12110] syz2: Port: 1 Link DOWN [ 235.269194][T13403] bridge_slave_1: left promiscuous mode [ 235.277727][T13403] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.403633][T12726] batadv3: left promiscuous mode [ 235.630416][T13445] syzkaller0: entered promiscuous mode [ 235.637580][T13445] syzkaller0: entered allmulticast mode [ 235.946719][T13469] bond9: entered allmulticast mode [ 236.010975][T13476] ipip0: entered promiscuous mode [ 236.017119][T13476] ipip0: entered allmulticast mode [ 236.023843][T13476] bond9: (slave ipip0): The slave device specified does not support setting the MAC address [ 236.035957][T13476] bond9: (slave ipip0): Error -95 calling set_mac_address [ 236.758543][ T30] audit: type=1800 audit(1782324796.169:10): pid=13490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2022" name="memory.events" dev="tmpfs" ino=2133 res=0 errno=0 [ 236.899874][T13507] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2026'. [ 237.075545][T13518] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2028'. [ 237.193961][T13523] bridge0: entered allmulticast mode [ 238.823240][T13460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.982837][T13539] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2032'. [ 239.036748][T13536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2034'. [ 239.076330][T13540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2033'. [ 239.077400][T13536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2034'. [ 239.100053][T13548] xt_hashlimit: size too large, truncated to 1048576 [ 239.134268][T13550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2038'. [ 239.144095][T13537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2034'. [ 239.168835][T13550] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 239.254562][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2039'. [ 239.362541][T13561] netlink: 'syz.0.2040': attribute type 12 has an invalid length. [ 239.395826][T13561] netlink: 'syz.0.2040': attribute type 12 has an invalid length. [ 239.417613][T13561] netlink: 'syz.0.2040': attribute type 12 has an invalid length. [ 239.483306][T13570] netlink: 'syz.4.2042': attribute type 1 has an invalid length. [ 239.499277][T13571] erspan0: entered promiscuous mode [ 239.516310][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2041'. [ 239.580523][T13570] 8021q: adding VLAN 0 to HW filter on device bond9 [ 239.637110][T13578] bond9: (slave veth15): Enslaving as an active interface with a down link [ 239.670315][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2047'. [ 239.698816][T13570] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 239.727705][T13570] bond9: (slave batadv7): making interface the new active one [ 239.738687][T13585] netlink: 'syz.1.2046': attribute type 1 has an invalid length. [ 239.773730][T13570] batadv7: entered promiscuous mode [ 239.785942][T13570] bond9: (slave batadv7): Enslaving as an active interface with an up link [ 239.839089][T13582] syzkaller0: entered promiscuous mode [ 239.843532][T13593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2048'. [ 239.846812][T13582] syzkaller0: entered allmulticast mode [ 239.963786][T13593] 8021q: adding VLAN 0 to HW filter on device bond10 [ 239.978911][T13593] team_slave_1: entered promiscuous mode [ 240.028083][T13593] team0: Port device team_slave_1 removed [ 240.037970][T13593] bond10: (slave team_slave_1): Enslaving as an active interface with an up link [ 240.047996][T13602] bond10: entered promiscuous mode [ 240.053964][T13602] bond10: entered allmulticast mode [ 240.059228][T13602] team_slave_1: entered allmulticast mode [ 240.072999][T13611] x_tables: duplicate underflow at hook 1 [ 240.080234][T13602] 8021q: adding VLAN 0 to HW filter on device bond10 [ 240.094762][T13602] team0: Port device bond10 added [ 240.161673][ T9986] batadv3: left promiscuous mode [ 240.484152][T13623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.614221][T13589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.754373][T13633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2058'. [ 240.770935][T13631] wg1: entered promiscuous mode [ 241.602089][T13685] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 241.632279][T12104] lo speed is unknown, defaulting to 1000 [ 241.830510][T13697] bond10: option min_links: invalid value (18446744073709551612) [ 241.872136][T13697] bond10: option min_links: allowed values 0 - 2147483647 [ 241.904088][T13697] bond10 (unregistering): Released all slaves [ 241.913244][T13706] netlink: 'syz.4.2079': attribute type 2 has an invalid length. [ 241.939878][T13706] netlink: 'syz.4.2079': attribute type 2 has an invalid length. [ 241.950954][T13707] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 241.950954][T13707] Please contact the netfilter-devel mailing list or update your nftables rules. [ 242.008773][T13706] tipc: Enabled bearer , priority 0 [ 242.042640][T13708] syzkaller0: entered promiscuous mode [ 242.057338][T13708] syzkaller0: entered allmulticast mode [ 242.067106][T13706] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 242.084686][T13708] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 242.122398][T13712] syz.0.2080: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 242.130496][T13706] tipc: Resetting bearer [ 242.171774][T13705] tipc: Resetting bearer [ 242.177819][T13712] CPU: 0 UID: 0 PID: 13712 Comm: syz.0.2080 Not tainted syzkaller #0 PREEMPT(full) [ 242.177845][T13712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 242.177858][T13712] Call Trace: [ 242.177865][T13712] [ 242.177874][T13712] dump_stack_lvl+0xe8/0x150 [ 242.177900][T13712] warn_alloc+0x249/0x340 [ 242.177929][T13712] ? __pfx_stack_trace_save+0x10/0x10 [ 242.177960][T13712] ? __pfx_warn_alloc+0x10/0x10 [ 242.177985][T13712] ? do_raw_spin_lock+0x12b/0x2f0 [ 242.178014][T13712] ? __kasan_kmalloc+0x93/0xb0 [ 242.178041][T13712] ? __kmalloc_cache_noprof+0x318/0x660 [ 242.178067][T13712] ? xskq_create+0x56/0x170 [ 242.178096][T13712] ? xsk_init_queue+0x8a/0xe0 [ 242.178117][T13712] ? xsk_setsockopt+0x52a/0x960 [ 242.178137][T13712] ? do_sock_setsockopt+0x17c/0x1b0 [ 242.178165][T13712] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 242.178192][T13712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.178216][T13712] __vmalloc_node_range_noprof+0x12c/0x1730 [ 242.178261][T13712] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 242.178292][T13712] ? __kasan_kmalloc+0x93/0xb0 [ 242.178323][T13712] vmalloc_user_noprof+0xad/0xe0 [ 242.178349][T13712] ? xskq_create+0xbf/0x170 [ 242.178373][T13712] xskq_create+0xbf/0x170 [ 242.178398][T13712] xsk_init_queue+0x8a/0xe0 [ 242.178423][T13712] xsk_setsockopt+0x52a/0x960 [ 242.178449][T13712] ? __pfx_xsk_setsockopt+0x10/0x10 [ 242.178472][T13712] ? __pfx_aa_sk_perm+0x10/0x10 [ 242.178502][T13712] ? lock_release+0x4b/0x3c0 [ 242.178539][T13712] ? aa_sock_opt_perm+0xff/0x1a0 [ 242.178561][T13712] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 242.178587][T13712] ? __pfx_xsk_setsockopt+0x10/0x10 [ 242.178610][T13712] do_sock_setsockopt+0x17c/0x1b0 [ 242.178641][T13712] __x64_sys_setsockopt+0x13d/0x1b0 [ 242.178670][T13712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.178691][T13712] do_syscall_64+0x174/0x580 [ 242.178718][T13712] ? trace_irq_disable+0x3b/0x140 [ 242.178746][T13712] ? clear_bhb_loop+0x40/0x90 [ 242.178769][T13712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.178789][T13712] RIP: 0033:0x7f233a79ce59 [ 242.178807][T13712] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.178824][T13712] RSP: 002b:00007f23389d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 242.178846][T13712] RAX: ffffffffffffffda RBX: 00007f233aa16090 RCX: 00007f233a79ce59 [ 242.178861][T13712] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 242.178874][T13712] RBP: 00007f233a832e6f R08: 0000000000000004 R09: 0000000000000000 [ 242.178886][T13712] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.178898][T13712] R13: 00007f233aa16128 R14: 00007f233aa16090 R15: 00007ffd4f656c28 [ 242.178923][T13712] [ 242.293060][T13712] Mem-Info: [ 242.476386][T13712] active_anon:6665 inactive_anon:0 isolated_anon:0 [ 242.476386][T13712] active_file:3274 inactive_file:40021 isolated_file:0 [ 242.476386][T13712] unevictable:768 dirty:268 writeback:0 [ 242.476386][T13712] slab_reclaimable:11576 slab_unreclaimable:172413 [ 242.476386][T13712] mapped:30562 shmem:1290 pagetables:1440 [ 242.476386][T13712] sec_pagetables:0 bounce:0 [ 242.476386][T13712] kernel_misc_reclaimable:0 [ 242.476386][T13712] free:1246547 free_pcp:13454 free_cma:0 [ 242.524556][T13705] tipc: Disabling bearer [ 242.542781][T13712] Node 0 active_anon:26760kB inactive_anon:0kB active_file:13096kB inactive_file:159880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122348kB dirty:1072kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15284kB pagetables:5524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 242.581005][T13712] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 242.615367][T13712] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.646508][T13720] batadv0: entered promiscuous mode [ 242.654433][T13712] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 242.660398][T13712] Node 0 DMA32 free:1037220kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26860kB inactive_anon:0kB active_file:13096kB inactive_file:159880kB unevictable:1536kB writepending:1072kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:53588kB local_pcp:21628kB free_cma:0kB [ 242.665090][T13720] batadv0: entered allmulticast mode [ 242.706706][T13712] lowmem_reserve[]: 0 0 0 0 0 [ 242.711781][T13712] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:664kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 242.742961][T13720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.751938][T13712] lowmem_reserve[]: 0 0 0 0 0 [ 242.760256][T13712] Node 1 Normal free:3933608kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.822063][T13712] lowmem_reserve[]: 0 0 0 0 0 [ 242.827080][T13712] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 242.841047][T13712] Node 0 DMA32: 3835*4kB (UM) 3363*8kB (UME) 2160*16kB (UME) 687*32kB (UE) 384*64kB (UME) 439*128kB (UME) 363*256kB (UME) 271*512kB (UM) 163*1024kB (UME) 60*2048kB (UM) 82*4096kB (UM) = 1036900kB [ 242.886588][T13729] netlink: 'syz.4.2083': attribute type 21 has an invalid length. [ 242.915508][T13712] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 242.944054][T13712] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 7*16kB (UM) 9*32kB (UM) 6*64kB (UM) 3*128kB (UM) 5*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 958*4096kB (UM) = 3933608kB [ 242.964332][T13712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.976896][T13712] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.988670][T13712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.001028][T13712] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 243.012049][T13712] 44581 total pagecache pages [ 243.016910][T13712] 0 pages in swap cache [ 243.021147][T13712] Free swap = 124996kB [ 243.026425][T13712] Total swap = 124996kB [ 243.030750][T13712] 2097051 pages RAM [ 243.035440][T13712] 0 pages HighMem/MovableOnly [ 243.040253][T13712] 427122 pages reserved [ 243.045524][T13712] 0 pages cma reserved [ 243.399166][T13753] netlink: 'syz.4.2092': attribute type 1 has an invalid length. [ 244.296534][T13797] __nla_validate_parse: 15 callbacks suppressed [ 244.296638][T13797] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2099'. [ 244.466555][T13805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2101'. [ 244.485203][T13805] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2101'. [ 244.504455][T13808] netlink: 'syz.4.2101': attribute type 23 has an invalid length. [ 244.908742][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2109'. [ 244.954895][T13841] netlink: 'syz.4.2110': attribute type 1 has an invalid length. [ 245.013425][T13844] netlink: 'syz.0.2111': attribute type 2 has an invalid length. [ 245.213885][T13860] netlink: 'syz.0.2116': attribute type 12 has an invalid length. [ 245.238964][T13867] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2117'. [ 245.457801][T13883] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2121'. [ 245.537626][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 245.719297][T13898] openvswitch: netlink: Missing key (keys=40, expected=80) [ 245.771337][T13893] lo speed is unknown, defaulting to 1000 [ 245.771730][T13909] netlink: 'syz.4.2129': attribute type 1 has an invalid length. [ 245.790229][T13893] lo speed is unknown, defaulting to 1000 [ 245.803108][T13909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2129'. [ 245.863977][T13913] xt_l2tp: invalid flags combination: 0 [ 246.104124][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 246.114299][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2133'. [ 246.632899][T13958] netlink: 'syz.2.2145': attribute type 4 has an invalid length. [ 246.684837][T13958] netlink: 'syz.2.2145': attribute type 4 has an invalid length. [ 246.788245][T13965] netlink: 'syz.3.2148': attribute type 2 has an invalid length. [ 246.801058][T13966] netlink: 'syz.1.2149': attribute type 7 has an invalid length. [ 246.817792][T13966] netlink: 'syz.1.2149': attribute type 8 has an invalid length. [ 246.908198][T13968] syzkaller0: entered promiscuous mode [ 246.923676][T13968] syzkaller0: entered allmulticast mode [ 246.936869][ T30] audit: type=1800 audit(1782324806.349:11): pid=13973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2152" name=20 dev="tmpfs" ino=2294 res=0 errno=0 [ 246.984626][T13968] tc action pedit 'at' offset 2047 out of bounds [ 246.991096][T13968] tc action pedit 'at' offset 2047 out of bounds [ 246.997504][T13968] tc action pedit 'at' offset 2047 out of bounds [ 247.003898][T13968] tc action pedit 'at' offset 2047 out of bounds [ 247.010254][T13968] tc action pedit 'at' offset 2047 out of bounds [ 247.016673][T13968] tc action pedit 'at' offset 2047 out of bounds [ 247.023061][T13968] tc action pedit 'at' offset 2047 out of bounds [ 247.029439][T13968] tc action pedit 'at' offset 2047 out of bounds [ 247.035853][T13968] tc action pedit 'at' offset 2047 out of bounds [ 247.042253][T13968] tc action pedit 'at' offset 2047 out of bounds [ 247.048642][T13968] TC_ACT_REPEAT abuse ? [ 247.232271][T13997] xt_socket: unknown flags 0x8 [ 247.297774][T13989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.308008][T13989] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.321915][T13989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.362536][T13989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.372264][T13989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.385887][T13989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.396804][T13989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.411105][T13989] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 247.488813][T14000] veth13: entered allmulticast mode [ 247.518208][T14000] bond11: (slave veth13): Enslaving as an active interface with an up link [ 247.528107][T12104] lo speed is unknown, defaulting to 1000 [ 247.539858][T12104] syz2: Port: 1 Link ACTIVE [ 247.635727][T14014] syzkaller1: entered promiscuous mode [ 247.653034][T14014] syzkaller1: entered allmulticast mode [ 247.728860][T14018] syzkaller1: entered promiscuous mode [ 247.741428][T14018] syzkaller1: entered allmulticast mode [ 248.206334][T14045] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 248.238827][T12728] nci: nci_rsp_packet: unknown rsp opcode 0x62c [ 248.494222][T14070] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 251.043493][T14038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.179604][T14074] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 251.365995][T14094] __nla_validate_parse: 9 callbacks suppressed [ 251.366015][T14094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2184'. [ 251.417344][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 251.492347][T14103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.665833][T14111] validate_nla: 7 callbacks suppressed [ 251.665855][T14111] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 251.713217][T14111] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2192'. [ 251.755064][T14111] netlink: 'syz.2.2192': attribute type 1 has an invalid length. [ 251.763986][T14111] netlink: 'syz.2.2192': attribute type 8 has an invalid length. [ 251.771954][T14111] netlink: 606 bytes leftover after parsing attributes in process `syz.2.2192'. [ 251.781007][T14117] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2193'. [ 251.790181][T14111] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2192'. [ 252.137119][T14145] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 252.236880][T14153] syzkaller0: entered promiscuous mode [ 252.243594][T14153] syzkaller0: entered allmulticast mode [ 252.285439][T14157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2205'. [ 252.369858][T14157] 8021q: adding VLAN 0 to HW filter on device bond12 [ 252.412561][T14157] bond12 (unregistering): Released all slaves [ 252.539558][T14166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2207'. [ 252.798535][T14175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2210'. [ 252.918297][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2213'. [ 253.282757][T14214] lo speed is unknown, defaulting to 1000 [ 253.290408][T14214] lo speed is unknown, defaulting to 1000 [ 253.329319][T14220] netlink: 'syz.4.2223': attribute type 1 has an invalid length. [ 253.378872][T14220] 8021q: adding VLAN 0 to HW filter on device bond10 [ 253.409225][T14221] bond10: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 253.452673][T14221] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 253.516220][T14212] can: request_module (can-proto-0) failed. [ 253.533674][T14220] bond10: (slave ip6gretap1): making interface the new active one [ 253.594454][T14220] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 253.646050][T14231] IPv4: Oversized IP packet from 127.202.26.0 [ 253.798483][T14247] netlink: 'syz.1.2228': attribute type 3 has an invalid length. [ 253.883852][T14250] netlink: 'syz.4.2229': attribute type 10 has an invalid length. [ 254.179637][T14271] gretap0: entered promiscuous mode [ 254.407559][T14293] syzkaller1: entered promiscuous mode [ 254.440178][T14293] syzkaller1: entered allmulticast mode [ 254.594673][T14311] netlink: 'syz.3.2249': attribute type 13 has an invalid length. [ 254.714116][T14315] IPVS: length: 24 != 504 [ 255.172620][T14343] syzkaller0: entered promiscuous mode [ 255.178255][T14343] syzkaller0: entered allmulticast mode [ 255.574807][T14366] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 255.585640][T14366] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 255.662684][T14370] netlink: 'syz.3.2268': attribute type 4 has an invalid length. [ 255.756657][ T1327] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.769093][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.045565][T14393] syzkaller0: Caught tx_queue_len zero misconfig [ 256.067675][T14397] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 256.370953][T14415] IPVS: Scheduler module ip_vs_ not found [ 256.679164][T14431] tipc: New replicast peer: 255.255.255.255 [ 256.705793][T14431] tipc: Enabled bearer , priority 10 [ 256.816697][T14437] sctp: [Deprecated]: syz.1.2286 (pid 14437) Use of int in max_burst socket option. [ 256.816697][T14437] Use struct sctp_assoc_value instead [ 256.931724][T14439] __nla_validate_parse: 20 callbacks suppressed [ 256.931744][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2287'. [ 257.114953][T14448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2291'. [ 257.144843][T14448] validate_nla: 5 callbacks suppressed [ 257.144865][T14448] netlink: 'syz.0.2291': attribute type 1 has an invalid length. [ 257.158689][T14448] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2291'. [ 257.243586][T14457] netlink: 'syz.0.2293': attribute type 9 has an invalid length. [ 257.253906][T14457] netlink: 'syz.0.2293': attribute type 6 has an invalid length. [ 257.262701][T14457] netlink: 'syz.0.2293': attribute type 7 has an invalid length. [ 257.271034][T14457] netlink: 'syz.0.2293': attribute type 8 has an invalid length. [ 257.675401][T14471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'. [ 257.766465][T14473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2299'. [ 257.780880][T14473] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2299'. [ 257.795733][T14473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2299'. [ 257.811184][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'. [ 257.893734][T14477] tipc: Enabled bearer , priority 0 [ 257.918464][T14477] syzkaller0: entered promiscuous mode [ 257.935772][T14477] syzkaller0: entered allmulticast mode [ 257.950425][T14480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2302'. [ 257.963091][T14477] tipc: Resetting bearer [ 257.976296][T14477] netlink: 'syz.2.2301': attribute type 25 has an invalid length. [ 257.985274][T14477] netlink: 'syz.2.2301': attribute type 3 has an invalid length. [ 257.994224][T14477] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2301'. [ 258.008228][T14476] tipc: Resetting bearer [ 258.022849][T14476] tipc: Disabling bearer [ 258.124517][T14482] sit0: left promiscuous mode [ 258.217941][T14482] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.225176][T14482] bridge0: port 2(bridge_slave_1) entered listening state [ 258.232603][T14482] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.239753][T14482] bridge0: port 1(bridge_slave_0) entered listening state [ 258.285031][T14482] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 258.325898][T14485] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 258.345329][T14491] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 258.654964][T14509] FAULT_INJECTION: forcing a failure. [ 258.654964][T14509] name failslab, interval 1, probability 0, space 0, times 0 [ 258.711390][T14509] CPU: 0 UID: 0 PID: 14509 Comm: syz.0.2310 Not tainted syzkaller #0 PREEMPT(full) [ 258.711417][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.711430][T14509] Call Trace: [ 258.711438][T14509] [ 258.711446][T14509] dump_stack_lvl+0xe8/0x150 [ 258.711473][T14509] should_fail_ex+0x40c/0x560 [ 258.711498][T14509] should_failslab+0xa8/0x100 [ 258.711536][T14509] __kmalloc_cache_noprof+0x88/0x660 [ 258.711565][T14509] ? rtnl_newlink+0x136/0x1bd0 [ 258.711590][T14509] ? kernel_text_address+0xa5/0xe0 [ 258.711614][T14509] rtnl_newlink+0x136/0x1bd0 [ 258.711638][T14509] ? arch_stack_walk+0xfb/0x150 [ 258.711667][T14509] ? __pfx_rtnl_newlink+0x10/0x10 [ 258.711690][T14509] ? stack_trace_save+0xa9/0x100 [ 258.711716][T14509] ? __pfx_stack_trace_save+0x10/0x10 [ 258.711742][T14509] ? stack_depot_save_flags+0x33/0x800 [ 258.711764][T14509] ? __update_page_owner_handle+0x5a/0x570 [ 258.711792][T14509] ? rcu_is_watching+0x15/0xb0 [ 258.711814][T14509] ? rcu_is_watching+0x15/0xb0 [ 258.711834][T14509] ? lock_release+0x4b/0x3c0 [ 258.711861][T14509] ? ima_match_policy+0x106/0x21c0 [ 258.711887][T14509] ? post_alloc_hook+0x22d/0x280 [ 258.711910][T14509] ? get_page_from_freelist+0x24ae/0x2530 [ 258.711939][T14509] ? rcu_read_lock_held+0xa/0x50 [ 258.711963][T14509] ? __update_page_owner_handle+0x5a/0x570 [ 258.711990][T14509] ? __update_page_owner_handle+0x51a/0x570 [ 258.712016][T14509] ? unwind_next_frame+0x8f/0x2550 [ 258.712040][T14509] ? rcu_is_watching+0x15/0xb0 [ 258.712068][T14509] ? is_bpf_text_address+0x26/0x2b0 [ 258.712098][T14509] ? rcu_is_watching+0x15/0xb0 [ 258.712119][T14509] ? rcu_is_watching+0x15/0xb0 [ 258.712164][T14509] ? lock_release+0x4b/0x3c0 [ 258.712193][T14509] ? lock_release+0x4b/0x3c0 [ 258.712225][T14509] ? is_bpf_text_address+0x292/0x2b0 [ 258.712254][T14509] ? is_bpf_text_address+0x26/0x2b0 [ 258.712290][T14509] ? kernel_text_address+0xa5/0xe0 [ 258.712318][T14509] ? __kernel_text_address+0xd/0x30 [ 258.712339][T14509] ? unwind_get_return_address+0x4d/0x90 [ 258.712361][T14509] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 258.712389][T14509] ? arch_stack_walk+0xfb/0x150 [ 258.712416][T14509] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 258.712442][T14509] ? rcu_is_watching+0x15/0xb0 [ 258.712461][T14509] ? __pfx_rtnl_newlink+0x10/0x10 [ 258.712486][T14509] ? rcu_is_watching+0x15/0xb0 [ 258.712506][T14509] ? __pfx_rtnl_newlink+0x10/0x10 [ 258.712537][T14509] ? lock_release+0x4b/0x3c0 [ 258.712569][T14509] ? bpf_lsm_capable+0x9/0x20 [ 258.712587][T14509] ? security_capable+0x7e/0x2c0 [ 258.712621][T14509] ? __pfx_rtnl_newlink+0x10/0x10 [ 258.712646][T14509] rtnetlink_rcv_msg+0x802/0xc00 [ 258.712671][T14509] ? kasan_save_track+0x3e/0x80 [ 258.712695][T14509] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 258.712715][T14509] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.712738][T14509] ? __netlink_lookup+0xc6/0x8b0 [ 258.712753][T14509] ? rcu_is_watching+0x15/0xb0 [ 258.712773][T14509] netlink_rcv_skb+0x226/0x4a0 [ 258.712798][T14509] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.712820][T14509] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.712848][T14509] ? net_generic+0x1e/0x240 [ 258.712866][T14509] ? net_generic+0x1e/0x240 [ 258.712885][T14509] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.712911][T14509] netlink_unicast+0x7bb/0x940 [ 258.712938][T14509] netlink_sendmsg+0x813/0xb40 [ 258.712966][T14509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.712991][T14509] ? __might_fault+0xaf/0x130 [ 258.713011][T14509] ? aa_sock_msg_perm+0xf1/0x1b0 [ 258.713028][T14509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 258.713048][T14509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.713073][T14509] __sys_sendto+0x626/0x6c0 [ 258.713096][T14509] ? __pfx___sys_sendto+0x10/0x10 [ 258.713130][T14509] ? do_user_addr_fault+0xc4a/0x1340 [ 258.713148][T14509] __x64_sys_sendto+0xde/0x100 [ 258.713169][T14509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.713186][T14509] do_syscall_64+0x174/0x580 [ 258.713208][T14509] ? trace_irq_disable+0x3b/0x140 [ 258.713230][T14509] ? clear_bhb_loop+0x40/0x90 [ 258.713250][T14509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.713268][T14509] RIP: 0033:0x7f233a75d68e [ 258.713283][T14509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 258.713297][T14509] RSP: 002b:00007f23389f4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 258.713315][T14509] RAX: ffffffffffffffda RBX: 00007f23389f66c0 RCX: 00007f233a75d68e [ 258.713328][T14509] RDX: 0000000000000020 RSI: 00007f23389f5000 RDI: 0000000000000003 [ 258.713338][T14509] RBP: 0000000000000000 R08: 00007f23389f4f04 R09: 000000000000000c [ 258.713348][T14509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 258.713358][T14509] R13: 00007f23389f4f58 R14: 00007f23389f5000 R15: 0000000000000000 [ 258.713378][T14509] [ 259.296066][T14523] netlink: 'syz.2.2313': attribute type 1 has an invalid length. [ 259.315665][T14510] veth9: entered allmulticast mode [ 259.891936][ T9293] udevd[9293]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 260.085269][T14576] netlink: 'syz.4.2327': attribute type 14 has an invalid length. [ 260.104610][T14576] netlink: 'syz.4.2327': attribute type 12 has an invalid length. [ 260.375760][T14598] syzkaller1: entered promiscuous mode [ 260.396731][T14598] syzkaller1: entered allmulticast mode [ 260.926842][T14626] bridge0: port 5(veth0_virt_wifi) entered blocking state [ 260.952679][T14626] bridge0: port 5(veth0_virt_wifi) entered disabled state [ 260.978026][T14626] veth0_virt_wifi: entered allmulticast mode [ 261.015271][T14626] veth0_virt_wifi: entered promiscuous mode [ 261.163635][T14648] syzkaller1: entered promiscuous mode [ 261.211291][T14651] IPv6: NLM_F_CREATE should be specified when creating new route [ 261.218369][T14648] syzkaller1: entered allmulticast mode [ 261.360464][T14638] sctp: [Deprecated]: syz.1.2346 (pid 14638) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.360464][T14638] Use struct sctp_sack_info instead [ 261.577705][T14664] 8021q: adding VLAN 0 to HW filter on device bond14 [ 261.613845][T14664] bond14: (slave veth11): Enslaving as an active interface with a down link [ 261.666063][T14667] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 261.706137][T14667] geneve5: entered promiscuous mode [ 261.722336][T14667] geneve5: entered allmulticast mode [ 262.030162][T14676] 8021q: adding VLAN 0 to HW filter on device bond11 [ 262.118617][T14686] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 262.142801][T14684] syzkaller0: entered promiscuous mode [ 262.153655][T14684] syzkaller0: entered allmulticast mode [ 262.166331][T14686] syzkaller0: entered promiscuous mode [ 262.172115][T14686] syzkaller0: entered allmulticast mode [ 262.186150][T14688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.318971][T14696] validate_nla: 4 callbacks suppressed [ 262.318992][T14696] netlink: 'syz.3.2362': attribute type 5 has an invalid length. [ 262.364038][T14696] __nla_validate_parse: 73 callbacks suppressed [ 262.364058][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2362'. [ 262.592753][T14714] hmac(sha224: entered promiscuous mode [ 262.716793][T14716] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2368'. [ 262.898360][T14732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2372'. [ 262.912462][T14729] netlink: 212088 bytes leftover after parsing attributes in process `syz.4.2371'. [ 262.922197][T14735] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2373'. [ 262.942069][T14732] 8021q: adding VLAN 0 to HW filter on device bond12 [ 263.006520][T14732] 8021q: adding VLAN 0 to HW filter on device bond12 [ 263.025821][T14732] bond12: (slave vti0): The slave device specified does not support setting the MAC address [ 263.038223][T14732] bond12: (slave vti0): Error -95 calling set_mac_address [ 263.132546][T14744] bond12: (slave dummy0): Error -99 calling set_mac_address [ 263.157997][T14746] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2376'. [ 263.361897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.370639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.379300][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.705143][T14779] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2383'. [ 263.924334][T14802] tipc: Started in network mode [ 263.936657][T14802] tipc: Node identity ac14140f, cluster identity 4711 [ 263.951799][T14802] tipc: New replicast peer: 255.255.255.255 [ 263.961795][T14802] tipc: Enabled bearer , priority 10 [ 264.097720][T14809] Cannot find set identified by id 65534 to match [ 264.114387][T14809] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2392'. [ 264.235612][T14812] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2393'. [ 264.390896][T14826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2398'. [ 264.408609][T14827] netlink: 'syz.0.2397': attribute type 13 has an invalid length. [ 264.443200][T14823] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 264.477561][T14826] 8021q: adding VLAN 0 to HW filter on device bond13 [ 264.493228][T12719] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.511612][T12719] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.554004][T14826] 8021q: adding VLAN 0 to HW filter on device bond14 [ 264.563269][T14826] bond13: (slave bond14): Enslaving as an active interface with an up link [ 264.573747][T12719] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.606853][T14826] bond13 (unregistering): (slave bond14): Releasing backup interface [ 264.633347][T14826] bond13 (unregistering): Released all slaves [ 264.667810][T12719] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.764838][T14843] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 264.820773][T14838] bond12: entered promiscuous mode [ 264.826235][T14838] bond12: entered allmulticast mode [ 264.923207][T14852] netlink: 'syz.3.2404': attribute type 1 has an invalid length. [ 264.957335][T14852] bond13: entered promiscuous mode [ 264.963041][T14852] 8021q: adding VLAN 0 to HW filter on device bond13 [ 264.984427][T14852] bond13: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 264.998381][T14852] bond13: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 265.009582][T14852] bond13: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 265.081593][T12103] tipc: Node number set to 2886997007 [ 265.458340][T14882] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 265.639755][T14895] netlink: 'syz.1.2414': attribute type 1 has an invalid length. [ 265.648805][T14895] netlink: 'syz.1.2414': attribute type 2 has an invalid length. [ 265.656990][T14895] netlink: 'syz.1.2414': attribute type 1 has an invalid length. [ 265.717196][T14898] xt_connbytes: Forcing CT accounting to be enabled [ 265.724200][T14898] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 265.754034][T14898] bond15: option arp_interval: invalid value (18446744073709551615) [ 265.762424][T14898] bond15: option arp_interval: allowed values 0 - 2147483647 [ 265.771114][T14898] bond15 (unregistering): Released all slaves [ 266.589330][T14941] xt_hashlimit: size too large, truncated to 1048576 [ 266.615233][T14937] lo: Caught tx_queue_len zero misconfig [ 266.638243][T14939] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 266.693049][T14949] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.733987][T14955] netlink: 'syz.1.2432': attribute type 1 has an invalid length. [ 266.743288][T14949] bridge_slave_0 (unregistering): left allmulticast mode [ 266.752353][T14949] bridge_slave_0 (unregistering): left promiscuous mode [ 266.780667][T14949] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.874117][T14958] lo speed is unknown, defaulting to 1000 [ 266.889022][T14958] lo speed is unknown, defaulting to 1000 [ 266.987154][T14966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.471776][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.480498][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.489186][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.911999][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.919950][T14963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.010158][T15026] __nla_validate_parse: 12 callbacks suppressed [ 270.010177][T15026] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2441'. [ 270.074375][T15028] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^!Y [ 270.074375][T15028] 3UH5rBn [ 270.323586][T15051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2449'. [ 270.487032][T15060] sctp: [Deprecated]: syz.0.2449 (pid 15060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.487032][T15060] Use struct sctp_sack_info instead [ 270.589188][ T30] audit: type=1800 audit(1782324829.999:12): pid=15064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2452" name=20 dev="tmpfs" ino=2646 res=0 errno=0 [ 270.648086][T15066] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2453'. [ 270.923272][T12727] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 271.061191][T15078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.180999][T15092] 8021q: adding VLAN 0 to HW filter on device bond10 [ 271.196461][T15096] geneve3: entered promiscuous mode [ 271.208680][T12720] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.225424][T15093] syzkaller0: entered promiscuous mode [ 271.232980][T15093] syzkaller0: entered allmulticast mode [ 271.246605][T15096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2461'. [ 271.260298][T15100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2459'. [ 271.278722][T12720] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.293410][T12720] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.303964][T12720] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.313139][T15093] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2459'. [ 271.332022][T15096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2461'. [ 271.369494][T15108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2464'. [ 271.420956][T15108] netlink: 'syz.1.2464': attribute type 39 has an invalid length. [ 271.494152][T15119] netlink: 'syz.1.2464': attribute type 1 has an invalid length. [ 271.510122][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2464'. [ 271.547243][T15120] ip6tnl4: entered allmulticast mode [ 271.848587][T15142] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2470'. [ 272.289681][T15175] IPVS: length: 35 != 24 [ 272.305446][T15176] netlink: 'syz.3.2474': attribute type 1 has an invalid length. [ 272.544705][T15178] syzkaller0: entered promiscuous mode [ 272.557711][T15178] syzkaller0: entered allmulticast mode [ 272.653962][T15188] netlink: 'syz.1.2478': attribute type 13 has an invalid length. [ 272.662227][T15188] netlink: 'syz.1.2478': attribute type 17 has an invalid length. [ 273.025390][T15188] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 273.207238][T15213] syzkaller0: entered promiscuous mode [ 273.218855][T15213] syzkaller0: entered allmulticast mode [ 273.232231][T15221] netlink: 'syz.0.2486': attribute type 11 has an invalid length. [ 273.367129][T15230] xt_NFQUEUE: number of total queues is 0 [ 273.431931][T12720] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.470710][T12728] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.494282][T12728] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.544978][T12720] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.635915][T15250] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.652834][T15250] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.738894][T15257] netlink: 'syz.3.2495': attribute type 1 has an invalid length. [ 273.765776][T15250] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.790421][T15250] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.862861][T15269] syzkaller1: entered promiscuous mode [ 273.868509][T15269] syzkaller1: entered allmulticast mode [ 273.902093][T15275] netlink: 'syz.3.2501': attribute type 11 has an invalid length. [ 274.214369][T15269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.224402][T15269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.257595][T15269] bridge0: left allmulticast mode [ 274.283097][T15269] bond12: left promiscuous mode [ 274.288319][T15269] bond12: left allmulticast mode [ 274.294692][T15269] geneve3: left promiscuous mode [ 274.304631][T15269] syzkaller1: left promiscuous mode [ 274.310102][T15269] syzkaller1: left allmulticast mode [ 274.319670][T15250] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.330040][T15250] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.348764][T12104] lo speed is unknown, defaulting to 1000 [ 274.355921][T15271] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 274.364069][T12104] syz2: Port: 1 Link DOWN [ 274.368676][T15277] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 274.377241][T15280] syzkaller1: entered promiscuous mode [ 274.384168][T15280] syzkaller1: entered allmulticast mode [ 274.392137][T12727] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.411393][T12727] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.446149][T12727] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.467876][T15250] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.477912][T15250] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.504220][T12727] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.610122][T12727] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.628836][T12727] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.652035][ T9986] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.663839][ T9986] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.678702][ T9986] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.687765][ T9986] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.718064][ T9986] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.726776][ T9986] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.739020][T15252] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 274.753158][T15252] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.770462][ T9986] ================================================================== [ 274.778598][ T9986] BUG: KASAN: slab-use-after-free in __mutex_lock+0x154/0x1550 [ 274.786267][ T9986] Read of size 8 at addr ffff88807c3beca8 by task kworker/u8:15/9986 [ 274.794380][ T9986] [ 274.796750][ T9986] CPU: 0 UID: 0 PID: 9986 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 274.796777][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 274.796792][ T9986] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 274.796833][ T9986] Call Trace: [ 274.796843][ T9986] [ 274.796851][ T9986] dump_stack_lvl+0xe8/0x150 [ 274.796877][ T9986] print_address_description+0x55/0x1e0 [ 274.796901][ T9986] ? __mutex_lock+0x154/0x1550 [ 274.796930][ T9986] print_report+0x58/0x70 [ 274.796950][ T9986] kasan_report+0x117/0x150 [ 274.796990][ T9986] ? rcu_is_watching+0x15/0xb0 [ 274.797016][ T9986] ? __mutex_lock+0x154/0x1550 [ 274.797050][ T9986] __mutex_lock+0x154/0x1550 [ 274.797083][ T9986] ? __mutex_lock+0x5d4/0x1550 [ 274.797115][ T9986] ? udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 274.797149][ T9986] ? __pfx___mutex_lock+0x10/0x10 [ 274.797180][ T9986] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.797210][ T9986] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 274.797237][ T9986] ? pwq_dec_nr_in_flight+0xb93/0xf20 [ 274.797267][ T9986] ? process_scheduled_works+0xa20/0x14e0 [ 274.797294][ T9986] ? rcu_is_watching+0x15/0xb0 [ 274.797318][ T9986] ? process_scheduled_works+0xa20/0x14e0 [ 274.797346][ T9986] udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 274.797381][ T9986] ? rcu_is_watching+0x15/0xb0 [ 274.797406][ T9986] ? process_scheduled_works+0xa20/0x14e0 [ 274.797434][ T9986] process_scheduled_works+0xa8e/0x14e0 [ 274.797480][ T9986] ? __pfx_process_scheduled_works+0x10/0x10 [ 274.797507][ T9986] ? do_raw_spin_lock+0x12b/0x2f0 [ 274.797538][ T9986] ? assign_work+0x3cf/0x5d0 [ 274.797568][ T9986] worker_thread+0xa47/0xfb0 [ 274.797614][ T9986] kthread+0x388/0x470 [ 274.797635][ T9986] ? __pfx_worker_thread+0x10/0x10 [ 274.797662][ T9986] ? __pfx_kthread+0x10/0x10 [ 274.797683][ T9986] ret_from_fork+0x514/0xb70 [ 274.797707][ T9986] ? __pfx_ret_from_fork+0x10/0x10 [ 274.797729][ T9986] ? __switch_to+0xc89/0x1420 [ 274.797762][ T9986] ? __pfx_kthread+0x10/0x10 [ 274.797783][ T9986] ret_from_fork_asm+0x1a/0x30 [ 274.797818][ T9986] [ 274.797826][ T9986] [ 275.002515][ T9986] Allocated by task 15250: [ 275.006948][ T9986] kasan_save_track+0x3e/0x80 [ 275.011658][ T9986] __kasan_kmalloc+0x93/0xb0 [ 275.016369][ T9986] __kmalloc_noprof+0x358/0x750 [ 275.021301][ T9986] udp_tunnel_nic_netdevice_event+0x4e9/0x1850 [ 275.027495][ T9986] notifier_call_chain+0x1a5/0x3d0 [ 275.032640][ T9986] register_netdevice+0x18a4/0x1eb0 [ 275.037870][ T9986] nsim_create+0xbd7/0x1140 [ 275.042402][ T9986] __nsim_dev_port_add+0x7f8/0xcd0 [ 275.047554][ T9986] nsim_dev_port_add_all+0x37/0xf0 [ 275.052705][ T9986] nsim_dev_reload_up+0x4dd/0x880 [ 275.057761][ T9986] devlink_reload+0x4b2/0x890 [ 275.062458][ T9986] devlink_nl_reload_doit+0xa9c/0xc80 [ 275.067854][ T9986] genl_family_rcv_msg_doit+0x233/0x340 [ 275.073427][ T9986] genl_rcv_msg+0x614/0x7a0 [ 275.077952][ T9986] netlink_rcv_skb+0x226/0x4a0 [ 275.082747][ T9986] genl_rcv+0x28/0x40 [ 275.086747][ T9986] netlink_unicast+0x7bb/0x940 [ 275.091538][ T9986] netlink_sendmsg+0x813/0xb40 [ 275.096332][ T9986] ____sys_sendmsg+0x9b9/0xa20 [ 275.101139][ T9986] ___sys_sendmsg+0x2a5/0x360 [ 275.105873][ T9986] __x64_sys_sendmsg+0x1b1/0x290 [ 275.110992][ T9986] do_syscall_64+0x174/0x580 [ 275.115640][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.121574][ T9986] [ 275.123929][ T9986] Freed by task 15252: [ 275.128016][ T9986] kasan_save_track+0x3e/0x80 [ 275.132725][ T9986] kasan_save_free_info+0x40/0x50 [ 275.137774][ T9986] __kasan_slab_free+0x5c/0x80 [ 275.142567][ T9986] kfree+0x1c5/0x640 [ 275.146500][ T9986] udp_tunnel_nic_netdevice_event+0x1236/0x1850 [ 275.152772][ T9986] notifier_call_chain+0x1a5/0x3d0 [ 275.157920][ T9986] unregister_netdevice_many_notify+0x17de/0x2150 [ 275.164367][ T9986] unregister_netdevice_queue+0x2f5/0x340 [ 275.170118][ T9986] nsim_destroy+0x26d/0x800 [ 275.174780][ T9986] __nsim_dev_port_del+0x14e/0x200 [ 275.179934][ T9986] nsim_dev_reload_destroy+0x288/0x490 [ 275.185423][ T9986] nsim_dev_reload_down+0x8a/0xc0 [ 275.190477][ T9986] devlink_reload+0x1c5/0x890 [ 275.195179][ T9986] devlink_nl_reload_doit+0xa9c/0xc80 [ 275.200569][ T9986] genl_family_rcv_msg_doit+0x233/0x340 [ 275.206139][ T9986] genl_rcv_msg+0x614/0x7a0 [ 275.210663][ T9986] netlink_rcv_skb+0x226/0x4a0 [ 275.215450][ T9986] genl_rcv+0x28/0x40 [ 275.219448][ T9986] netlink_unicast+0x7bb/0x940 [ 275.224536][ T9986] netlink_sendmsg+0x813/0xb40 [ 275.229348][ T9986] ____sys_sendmsg+0x9b9/0xa20 [ 275.234193][ T9986] ___sys_sendmsg+0x2a5/0x360 [ 275.238900][ T9986] __x64_sys_sendmsg+0x1b1/0x290 [ 275.243859][ T9986] do_syscall_64+0x174/0x580 [ 275.248496][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.254405][ T9986] [ 275.256750][ T9986] Last potentially related work creation: [ 275.262510][ T9986] kasan_save_stack+0x3e/0x60 [ 275.267213][ T9986] kasan_record_aux_stack+0xbd/0xd0 [ 275.272435][ T9986] insert_work+0x3d/0x330 [ 275.276794][ T9986] __queue_work+0xb7c/0xff0 [ 275.281319][ T9986] queue_work_on+0x106/0x1d0 [ 275.285943][ T9986] __udp_tunnel_nic_add_port+0xba9/0xd90 [ 275.291606][ T9986] udp_tunnel_push_rx_port+0x169/0x1f0 [ 275.297090][ T9986] geneve_offload_rx_ports+0xc7/0x150 [ 275.302481][ T9986] geneve_netdevice_event+0x6a/0x80 [ 275.307697][ T9986] notifier_call_chain+0x1a5/0x3d0 [ 275.312835][ T9986] call_netdevice_notifiers+0x90/0xd0 [ 275.318230][ T9986] udp_tunnel_nic_netdevice_event+0xe33/0x1850 [ 275.324407][ T9986] notifier_call_chain+0x1a5/0x3d0 [ 275.329553][ T9986] register_netdevice+0x18a4/0x1eb0 [ 275.334773][ T9986] nsim_create+0xbd7/0x1140 [ 275.339301][ T9986] __nsim_dev_port_add+0x7f8/0xcd0 [ 275.344463][ T9986] nsim_dev_port_add_all+0x37/0xf0 [ 275.349612][ T9986] nsim_dev_reload_up+0x4dd/0x880 [ 275.354669][ T9986] devlink_reload+0x4b2/0x890 [ 275.359383][ T9986] devlink_nl_reload_doit+0xa9c/0xc80 [ 275.364822][ T9986] genl_family_rcv_msg_doit+0x233/0x340 [ 275.370401][ T9986] genl_rcv_msg+0x614/0x7a0 [ 275.374934][ T9986] netlink_rcv_skb+0x226/0x4a0 [ 275.379739][ T9986] genl_rcv+0x28/0x40 [ 275.383766][ T9986] netlink_unicast+0x7bb/0x940 [ 275.388577][ T9986] netlink_sendmsg+0x813/0xb40 [ 275.393383][ T9986] ____sys_sendmsg+0x9b9/0xa20 [ 275.398185][ T9986] ___sys_sendmsg+0x2a5/0x360 [ 275.402903][ T9986] __x64_sys_sendmsg+0x1b1/0x290 [ 275.407875][ T9986] do_syscall_64+0x174/0x580 [ 275.412513][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.418446][ T9986] [ 275.420801][ T9986] Second to last potentially related work creation: [ 275.427403][ T9986] kasan_save_stack+0x3e/0x60 [ 275.432109][ T9986] kasan_record_aux_stack+0xbd/0xd0 [ 275.437330][ T9986] insert_work+0x3d/0x330 [ 275.441687][ T9986] __queue_work+0xcb6/0xff0 [ 275.446221][ T9986] queue_work_on+0x106/0x1d0 [ 275.450833][ T9986] __udp_tunnel_nic_add_port+0xba9/0xd90 [ 275.456490][ T9986] udp_tunnel_push_rx_port+0x169/0x1f0 [ 275.461983][ T9986] vxlan_offload_rx_ports+0x129/0x1f0 [ 275.467384][ T9986] vxlan_netdevice_event+0x111/0x490 [ 275.472686][ T9986] notifier_call_chain+0x1a5/0x3d0 [ 275.477823][ T9986] call_netdevice_notifiers+0x90/0xd0 [ 275.483213][ T9986] udp_tunnel_nic_netdevice_event+0xe33/0x1850 [ 275.489422][ T9986] notifier_call_chain+0x1a5/0x3d0 [ 275.494566][ T9986] register_netdevice+0x18a4/0x1eb0 [ 275.499813][ T9986] nsim_create+0xbd7/0x1140 [ 275.504336][ T9986] __nsim_dev_port_add+0x7f8/0xcd0 [ 275.509471][ T9986] nsim_dev_port_add_all+0x37/0xf0 [ 275.514614][ T9986] nsim_dev_reload_up+0x4dd/0x880 [ 275.519662][ T9986] devlink_reload+0x4b2/0x890 [ 275.524360][ T9986] devlink_nl_reload_doit+0xa9c/0xc80 [ 275.529757][ T9986] genl_family_rcv_msg_doit+0x233/0x340 [ 275.535329][ T9986] genl_rcv_msg+0x614/0x7a0 [ 275.539852][ T9986] netlink_rcv_skb+0x226/0x4a0 [ 275.544651][ T9986] genl_rcv+0x28/0x40 [ 275.548650][ T9986] netlink_unicast+0x7bb/0x940 [ 275.553619][ T9986] netlink_sendmsg+0x813/0xb40 [ 275.558424][ T9986] ____sys_sendmsg+0x9b9/0xa20 [ 275.563223][ T9986] ___sys_sendmsg+0x2a5/0x360 [ 275.567926][ T9986] __x64_sys_sendmsg+0x1b1/0x290 [ 275.572887][ T9986] do_syscall_64+0x174/0x580 [ 275.577498][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.583408][ T9986] [ 275.585747][ T9986] The buggy address belongs to the object at ffff88807c3bec00 [ 275.585747][ T9986] which belongs to the cache kmalloc-256 of size 256 [ 275.599822][ T9986] The buggy address is located 168 bytes inside of [ 275.599822][ T9986] freed 256-byte region [ffff88807c3bec00, ffff88807c3bed00) [ 275.613639][ T9986] [ 275.615987][ T9986] The buggy address belongs to the physical page: [ 275.622465][ T9986] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c3be [ 275.631275][ T9986] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 275.639810][ T9986] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 275.647468][ T9986] page_type: f5(slab) [ 275.651472][ T9986] raw: 00fff00000000040 ffff88813fe1bb40 dead000000000100 dead000000000122 [ 275.660072][ T9986] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 275.668675][ T9986] head: 00fff00000000040 ffff88813fe1bb40 dead000000000100 dead000000000122 [ 275.677367][ T9986] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 275.686056][ T9986] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 275.694746][ T9986] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 275.703429][ T9986] page dumped because: kasan: bad access detected [ 275.709883][ T9986] page_owner tracks the page as allocated [ 275.715612][ T9986] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5618, tgid 5618 (syz-executor), ts 69400781917, free_ts 68913412550 [ 275.736997][ T9986] post_alloc_hook+0x22d/0x280 [ 275.741802][ T9986] get_page_from_freelist+0x24ae/0x2530 [ 275.747388][ T9986] __alloc_frozen_pages_noprof+0x18d/0x380 [ 275.753219][ T9986] allocate_slab+0x74/0x5d0 [ 275.757744][ T9986] refill_objects+0x328/0x3c0 [ 275.762444][ T9986] __pcs_replace_empty_main+0x2e0/0x6b0 [ 275.768028][ T9986] __kmalloc_noprof+0x464/0x750 [ 275.772913][ T9986] fib_create_info+0x16fe/0x3170 [ 275.777876][ T9986] fib_table_insert+0xcb/0x1b10 [ 275.782752][ T9986] fib_magic+0x43b/0x530 [ 275.787015][ T9986] fib_add_ifaddr+0x139/0x5d0 [ 275.791710][ T9986] fib_inetaddr_event+0x12e/0x190 [ 275.796752][ T9986] notifier_call_chain+0x1a5/0x3d0 [ 275.801893][ T9986] blocking_notifier_call_chain+0x6a/0x90 [ 275.807649][ T9986] __inet_insert_ifa+0x9ef/0xbc0 [ 275.812611][ T9986] inet_rtm_newaddr+0x102d/0x19e0 [ 275.817663][ T9986] page last free pid 5640 tgid 5640 stack trace: [ 275.824007][ T9986] __free_frozen_pages+0xc0d/0xd20 [ 275.829145][ T9986] __slab_free+0x274/0x2c0 [ 275.833593][ T9986] qlist_free_all+0x99/0x100 [ 275.838200][ T9986] kasan_quarantine_reduce+0x148/0x160 [ 275.843676][ T9986] __kasan_slab_alloc+0x22/0x80 [ 275.848553][ T9986] __kmalloc_cache_noprof+0x2b6/0x660 [ 275.853947][ T9986] __devl_resource_register+0x10f/0x3a0 [ 275.859515][ T9986] devl_resource_register+0x41/0x60 [ 275.864734][ T9986] nsim_drv_probe+0x46b/0xbf0 [ 275.869435][ T9986] really_probe+0x254/0xae0 [ 275.873963][ T9986] __driver_probe_device+0x1e8/0x360 [ 275.879281][ T9986] driver_probe_device+0x4f/0x240 [ 275.884357][ T9986] __device_attach_driver+0x270/0x410 [ 275.889764][ T9986] bus_for_each_drv+0x258/0x2f0 [ 275.894728][ T9986] __device_attach+0x2c4/0x450 [ 275.899529][ T9986] device_initial_probe+0xa1/0xd0 [ 275.904578][ T9986] [ 275.906921][ T9986] Memory state around the buggy address: [ 275.912565][ T9986] ffff88807c3beb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 275.920642][ T9986] ffff88807c3bec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 275.928715][ T9986] >ffff88807c3bec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 275.936791][ T9986] ^ [ 275.942179][ T9986] ffff88807c3bed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 275.950255][ T9986] ffff88807c3bed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 275.958334][ T9986] ================================================================== [ 275.980426][ T9986] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 275.987708][ T9986] CPU: 0 UID: 0 PID: 9986 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 275.997274][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 276.007351][ T9986] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 276.014689][ T9986] Call Trace: [ 276.017987][ T9986] [ 276.020939][ T9986] vpanic+0x56c/0xa60 [ 276.024950][ T9986] ? __pfx_vpanic+0x10/0x10 [ 276.029479][ T9986] ? rcu_is_watching+0x15/0xb0 [ 276.034269][ T9986] panic+0xc5/0xd0 [ 276.038013][ T9986] ? __pfx_panic+0x10/0x10 [ 276.042479][ T9986] ? preempt_schedule_thunk+0x16/0x40 [ 276.047876][ T9986] ? __mutex_lock+0x154/0x1550 [ 276.052676][ T9986] ? preempt_schedule_thunk+0x16/0x40 [ 276.058082][ T9986] ? __mutex_lock+0x154/0x1550 [ 276.062873][ T9986] check_panic_on_warn+0x89/0xb0 [ 276.067854][ T9986] ? __mutex_lock+0x154/0x1550 [ 276.072664][ T9986] end_report+0x73/0x170 [ 276.076944][ T9986] ? __mutex_lock+0x154/0x1550 [ 276.081740][ T9986] kasan_report+0x128/0x150 [ 276.086284][ T9986] ? rcu_is_watching+0x15/0xb0 [ 276.091079][ T9986] ? __mutex_lock+0x154/0x1550 [ 276.095878][ T9986] __mutex_lock+0x154/0x1550 [ 276.100591][ T9986] ? __mutex_lock+0x5d4/0x1550 [ 276.105424][ T9986] ? udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 276.111702][ T9986] ? __pfx___mutex_lock+0x10/0x10 [ 276.116758][ T9986] ? do_raw_spin_lock+0x12b/0x2f0 [ 276.121814][ T9986] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 276.127215][ T9986] ? pwq_dec_nr_in_flight+0xb93/0xf20 [ 276.132619][ T9986] ? process_scheduled_works+0xa20/0x14e0 [ 276.138364][ T9986] ? rcu_is_watching+0x15/0xb0 [ 276.143153][ T9986] ? process_scheduled_works+0xa20/0x14e0 [ 276.148893][ T9986] udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 276.155003][ T9986] ? rcu_is_watching+0x15/0xb0 [ 276.159792][ T9986] ? process_scheduled_works+0xa20/0x14e0 [ 276.165535][ T9986] process_scheduled_works+0xa8e/0x14e0 [ 276.171117][ T9986] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.177120][ T9986] ? do_raw_spin_lock+0x12b/0x2f0 [ 276.182179][ T9986] ? assign_work+0x3cf/0x5d0 [ 276.186793][ T9986] worker_thread+0xa47/0xfb0 [ 276.191425][ T9986] kthread+0x388/0x470 [ 276.195531][ T9986] ? __pfx_worker_thread+0x10/0x10 [ 276.200691][ T9986] ? __pfx_kthread+0x10/0x10 [ 276.205318][ T9986] ret_from_fork+0x514/0xb70 [ 276.209938][ T9986] ? __pfx_ret_from_fork+0x10/0x10 [ 276.215069][ T9986] ? __switch_to+0xc89/0x1420 [ 276.219783][ T9986] ? __pfx_kthread+0x10/0x10 [ 276.224405][ T9986] ret_from_fork_asm+0x1a/0x30 [ 276.229212][ T9986] [ 276.232873][ T9986] Kernel Offset: disabled [ 276.237209][ T9986] Rebooting in 86400 seconds..