last executing test programs: 7.030711733s ago: executing program 1 (id=3084): socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000ff1f00fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002"], 0x84}}, 0x0) 6.769063226s ago: executing program 1 (id=3087): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004700)=""/4083, 0xff3}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f00000001c0)=""/189, 0xbd}], 0x3}, 0x120) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3801000010000100feffffbf000000000000000001733da38c3192d55ca46601ff0200000000000000f6ffffffffff00000103944e23", @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000f48b873f99a5317ad0b0ca0b207000"/240, @ANYRESDEC=r1, @ANYRES64=r0], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x4004081) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuacct.usage_percpu\x00', 0x275a, 0x0) unshare(0x20000400) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000002c0)=0x5200122) write$cgroup_int(0xffffffffffffffff, 0x0, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x200200, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002800400338008000900", @ANYRES32=r3], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8010) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="380100001800010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000603a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d45c00000000000000000000000000ffffac1e0001000000000000000004000000000000000600000000000000ffff0000000000001c25080000000000020000000000000009000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000083aa3d1bf7696579002abd7000043500000a"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0xac, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x2c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x2f}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8000000000000001}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xfd}]}}]}, 0xac}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x8417, 0x5, 0xa1, 0x1, 0xffffffffffffffff, 0x9, '\x00', r11, r1, 0x1, 0x0, 0x5, 0xc}, 0x50) 6.344712273s ago: executing program 1 (id=3089): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@alg={0xe8, 0x10, 0x4, 0x70bd28, 0x25dfdbfc, {{'drbg_nopr_ctr_aes128\x00'}, '\x00', '\x00', 0x2400, 0x400}, [{0x8, 0x1, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1041}, 0x20000000) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000380)={{r0, &(0x7f00000001c0)='drbg_nopr_ctr_aes128\x00', 0x400a40, &(0x7f0000000200)={@_ha_fsid={[0xb18a, 0x5]}, {0xffff, 0x4, 0x9c, 0x5}}, 0x3, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x7fff}, 0x1, &(0x7f0000000340)=[{0x1, 0x101, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="870c52006b6ad849eafc9b08d96b8e7d1ef8f0f24bbdf93b0085", 0x1a}]}) close(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000400)={0x0, r1, 0x278, 0xc2, 0x5b, 0x80000001}) (async) socket$tipc(0x1e, 0xa371bda4e0e8a99c, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000440)={0x0, 0x1892}, 0x8) (async) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x10, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x8001) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r1) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x184, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2a}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xa}, @NL80211_ATTR_IE={0x42, 0x2a, [@prep={0x83, 0x1f, {{}, 0x3, 0x7, @broadcast, 0x1, @void, 0x0, 0x4, @device_a, 0x6}}, @mic={0x8c, 0x18, {0xff, "fd0585a0bc24", @long="54077dd40e1a25c44204291028d2ddd2"}}, @erp={0x2a, 0x1, {0x1}}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x118, 0x84, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5541cddd}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x81}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xffff0000}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffff8}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@device_b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0xb56}]}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1c, 0x1, @random="05d575df87772dd50b2ec8eb8d2a9c2db7f4a8664b591de4"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xffffffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x19}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xffffffff}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x48080}, 0x20048841) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000840), 0xffffffffffffffff) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000880)={0x0, "05efc2b5e0d569081a5a76683186eab7"}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000001880)={r4, "e7a114f8b5721d496eb8cd25d38aa9eb"}) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000002a40)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a00)={&(0x7f00000028c0)={0x138, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4d}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf24}, @NL80211_ATTR_FRAME_MATCH={0x84, 0x5b, "7e4191c95d3cba5c8ae53121e87850c52517b1c1a4df12b8d49b17d24437143a0f4d5d06531f66d0d3871f4334fae5d365b5c1207b41092f0137ff9a7dd7f04cb109a0b307fd469d65e042ff4c1ebfc89792aa6b67279eb1d437c203d0f1279e6db2061a721318069961cfba567d1e1f3b15a827051e9c5a81d795630addd0a7"}, @NL80211_ATTR_FRAME_MATCH={0x8b, 0x5b, "2964d65aa5c43f885e080ab2a6e929367d3e7fa574aee1a8cb4bdc2fbe89de338fc604616a7b02e36302e72a0c35fcc7e64c0a36e11103903b1bd1c9fd18fed1d7b50f2c17f89cbef2efcee968915de4b09144d99488fcb1e456ac0dc68fbcb22db0cd4df2524f006499e8a70851a52a277658a5e4a397f80e32b83a41fdf0a4a57f920b4fa27d"}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000005}, 0x40800) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002ac0), r1) (async) getsockname$packet(r1, &(0x7f0000002b00)={0x11, 0x0, 0x0}, &(0x7f0000002b40)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002c00)={r1, 0x58, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002c40)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000002d40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x7c, r5, 0x208, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000801}, 0x800) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r9, 0x8983, &(0x7f0000002d80)={0x1, 'gretap0\x00'}) (async) sendmsg$rds(r1, &(0x7f00000031c0)={&(0x7f0000002dc0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000003000)=[{&(0x7f0000002e00)=""/6, 0x6}, {&(0x7f0000002e40)=""/78, 0x4e}, {&(0x7f0000002ec0)=""/36, 0x24}, {&(0x7f0000002f00)=""/168, 0xa8}, {&(0x7f0000002fc0)=""/14, 0xe}], 0x5, &(0x7f0000003100)=[@zcopy_cookie={0x18, 0x114, 0xc, 0xfffff000}, @zcopy_cookie={0x18, 0x114, 0xc, 0xff}, @zcopy_cookie={0x18, 0x114, 0xc, 0x655b}, @mask_fadd={0x58, 0x114, 0x8, {{0x2, 0xc}, &(0x7f0000003080)=0x18000000000000, &(0x7f00000030c0)=0x5, 0x7, 0xfffffffffffffffa, 0x4, 0x6, 0x4e, 0xf06}}], 0xa0, 0x10}, 0x8080) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000003240), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000003300)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000032c0)={&(0x7f0000003280)={0x30, r10, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x5, 0x8, 0xfffffffb, 0x3}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xadaa0e01f950241f}, 0x24000041) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r9, &(0x7f0000003540)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003500)={&(0x7f00000033c0)={0x12c, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x3e, 0xfa, "c53c50d0697098b72ea45fab2f9400765223703007214eead249460e0526f26a1d0d7e50e072676f118bdc5a61fafe962a067155fe0926c5a0f0"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "8bf23e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1ff}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}, @NL80211_ATTR_FILS_ERP_REALM={0x53, 0xfa, "3ad45fdde56533162e57affafb1380257df9d34c41aa745bb387fb07b0a6c2356937ec3daecd3c7d5660317d5a2ea99630a0f2ee2ede58e9c511d612b6c65290105f8314905d96bf8f0b350de87f67"}, @NL80211_ATTR_FILS_ERP_REALM={0x61, 0xfa, "0cb62bcbbf4f1fe6e653d5fd3a721f972571258e5a94dc649ef7fb2b42da45518b639b65c5303cb9ec80c9dfc077998fb6b31f6b0fe5f31956ed07dcfed98f58acf95b05c90069bf3c8985b0d1106359a82b782b539dbadaeaf704b0e4"}]]}, 0x12c}, 0x1, 0x0, 0x0, 0x44}, 0x40008000) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000003640)={&(0x7f0000003580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x20, 0x1409, 0x8, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48000}, 0x4) (async) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000003680)={0x0, 0x4, 0x2, 0x3, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x29}, @broadcast}, 0x10) 6.223616127s ago: executing program 1 (id=3090): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) shutdown(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaadf000040f7ff08004d0000480000000000069078ac1e0001ac141411830775e00000024410052300000000000000000000000086060000000100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500009e10b3a75ae0a5c3375844bae00c676549eedc5405f64ab01010000000000000edbcc3a44f3a2c1081b8b979c62ab3484fde8ec046f72dece718f80ac34b2b8d6e6c3abace24082632fa6be854a99ec769b56a488eb"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) close(0x4) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48884) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008c00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x2, 0x6, 0xb01, 0x0, 0x0, {0x4a8f9203b8e1a73c, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.068573426s ago: executing program 1 (id=3091): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000000000000000000000007110a0000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/194, 0xc2, 0x1, &(0x7f0000000140)=""/175, 0xaf}, &(0x7f0000000240)=0x40) 5.809132992s ago: executing program 1 (id=3095): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x8001}}, 0x2, 0x4, 0xfe, 0x5, 0x1}, &(0x7f0000000180)=0x98) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @remote, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="e2", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xfffffdc1, &(0x7f0000000300)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400004}, @in6={0xa, 0x4e22, 0x4, @remote, 0x1}]}, &(0x7f0000000240)=0x10) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}}, [0x4, 0x3, 0x8000, 0x80000000, 0xc, 0x82ef, 0x6, 0x3ff, 0x9e, 0xfffffffffffffff9, 0x3fc0, 0xf0, 0xc7b0, 0x3a2]}, &(0x7f0000000440)=0x100) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000a56b71b280cbbe90df022ad72ea7be3ecc87d9", @ANYRES16, @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40004004}, 0x20040044) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r13, @ANYBLOB="28002b801c00038006000300feff000006000100039658fadc00020002000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c894}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x40010) 4.232249017s ago: executing program 3 (id=3105): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x1e, 0x4, 0xecc) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) close(r1) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000000140)={0x0, 0x9, 0x6, 0x0, 0x4, 0x0, 0x101}) (async) close(0x4) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r5, 0x215eb000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000001c0)={0x0, r3, 0x80000001, 0x80000001, 0xff, 0x1}) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r4, 0xc0096616, 0x0) (async) socket(0x14, 0x2, 0x4) (async) close(0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet(0x2, 0x3, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r6, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@align=0xd0a, {0x5, 0x40, 0x7, 0x5}}, 0xe, 0x0, 0x0}, {[0x4, 0x1ff, 0x10001, 0x8]}, 0x6, 0x0, 0x0}) (async) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x3, 0x0, [0x80000000, 0xfffffffffffffffd, 0x5, 0x6, 0x5, 0x4], 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x78) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r7, r7, 0x4, r7}, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) 3.630611586s ago: executing program 0 (id=3108): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) pread64(r1, &(0x7f0000000580)=""/224, 0xe0, 0x200000000000002) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.544783125s ago: executing program 4 (id=3109): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = socket$inet(0xa, 0x801, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) listen(r1, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="faff000004000002000000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1b, 0x17, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2, 0x1}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r10}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010001000000000000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b900000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x11}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r11, 0x0, 0xa4, 0x57, &(0x7f0000000000)="26556eaf9de7c73b1c4f8c608d898fbe85bb46fe90d64919d6acf03eed03a44d288bdd35917ac4cd40af535b8ea0f04f3abbcba6786c0fb05a05fa440a44cba76a217eaef62c285ee377257bff498c3817da9fa910b9f63bb403af33b8e0e4552d548ff52f62ca0322ac4d0ae6522f91cf2df72521fb8fb39e5a574da901e5b92696fd143b54f41eec7d312b6eb3df401a6f55586ad3dc86ef744828d5aaa076751dae34", &(0x7f00000002c0)=""/87, 0x486, 0x0, 0xe, 0x85, &(0x7f0000000340)="97e45c944e3b02078390725b83c4", &(0x7f0000000380)="1b616d79969b741528f3e9c9c4108cd890429585d728f9371e2e8282c25553661dd00b4c2b1194e3fae069f3741f57dc836663bdf2d575ed153da4566598f0b73f1ac1b4870a7de17fbe50c228086ca0a15d0b2b896ed687250efd645a65068798cfedbdb28e8140539581ba34b38099283302f17ced86526c8a85ac4b34002ec054e9f441", 0x0, 0x0, 0x7}, 0x50) 3.405281051s ago: executing program 3 (id=3111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000002060108000000000000000000000009140007800800114000080000050015000c000000050005000a000000050001000700000005000400000000000900020073797a320000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xffffff08}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd700001dcdf", @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004"], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40001) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001000ffff2bbd700001dcdf", @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004"], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40001) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x24, 0x1407, 0x300, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004050}, 0x20000000) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) (async) bind$802154_dgram(r8, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$802154_dgram(r8, &(0x7f0000000200)={&(0x7f0000000080), 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r11 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r10, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e21, 0x80000, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffb}, 0x1c, 0x0}, 0x1400c0c0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3b0, 0x0, 0x700001b, 0x148, 0x240, 0x148, 0x318, 0x206, 0x240, 0x318, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e0, 0x240, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x5, 0x6, 0x100000, 0x2], 0x6, 0x1}, {0xffffffffffffffff, [0x9, 0x1, 0x2, 0x5, 0x6], 0x3, 0x7}}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) sendto$packet(r5, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) sendto$packet(r5, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400005dfdb50000fbdbdf2500", @ANYRES32=0x0, @ANYBLOB="8a450200002602001c00128009000100626f6e64000000000c00028008000a0003000000"], 0x3c}}, 0x4000040) (async) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010400005dfdb50000fbdbdf2500", @ANYRES32=0x0, @ANYBLOB="8a450200002602001c00128009000100626f6e64000000000c00028008000a0003000000"], 0x3c}}, 0x4000040) 3.325707793s ago: executing program 0 (id=3112): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000014c0), 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="017000fedbdf251200000018000180140002007465616d5f736c6176655f300000000008000900000000000800080004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x44) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) sendfile(r6, r5, 0x0, 0x10000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000000c0)={0x5, [0x1000, 0x71af, 0x7, 0x3, 0x9]}, 0xe) (async, rerun: 32) read(r1, &(0x7f0000000040)=""/64, 0xe) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000914e73f"], 0x4e}}, 0x20008000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd2d, 0xfffffffe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0xff, 0x1, 0x2000}}, 0x1c}}, 0x4800) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="17090002000000000000010000000500070000000000080009000000000008000a00000000f4060002000000000014001f0000000000000000000000000000000000140020000000000000005a35f2e3ffffac1414bb06001b004e2300"], 0x64}}, 0x0) 3.325174711s ago: executing program 2 (id=3113): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0xe1c0}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000b80)=""/198, 0xc6}, {&(0x7f0000000d80)=""/213, 0xd5}, {&(0x7f0000000e80)=""/132, 0x84}, {&(0x7f0000000080)=""/160, 0xa0}, {&(0x7f0000001000)=""/14, 0xe}, {&(0x7f0000001040)=""/116, 0x74}, {&(0x7f0000002d00)=""/4105, 0x1009}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x1c7}], 0x3, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000ebffffff00000000000a01040000000000000000010080000900010073797a3000000040f6914e00030a01010000000080000000010000090900010073797a30000000000900030073797a320000000058000070c2daecf01100060a010400000000000000000100000008000b4000000000300004802c0001800b0001007470726f787900001c00028008000140000000fb070002400000000008800340000000150900010073797a3000000000140000001100000000000000000000000700000a000000000000000000004c21594ced913612a6cf"], 0xcc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(r0, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0x50, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000300)=ANY=[@ANYBLOB="784d7ecc904c9b849527632d0a19bea7df0e53d93773cfeba7f88cd8239ba5872ddebfe138e2b35d8f057789c29028282677382d034a1b25a5718008121b796cebf444cf876c6be16935929c3e20d1388fd6e17a77293eb0385e46"], 0x8) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c97) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r5 = socket(0x28, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000100)=r7) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/93, 0x5d}], 0x1, 0x0, 0x6c8) 3.25152014s ago: executing program 0 (id=3114): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0xa, 0x8e, 0x80, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x41}, 0x10, 0x1, 0x9, 0xec21}}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES16=r1, @ANYRES16=r6, @ANYRES8=r2], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd700000100000010000000c0002000400000000000000100007800c00018008000100", @ANYRES32=r8, @ANYBLOB="0c0005001e"], 0x3c}}, 0x4000004) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000002400)={0x14, r12, 0x301, 0x0, 0x0, {0x17}}, 0x14}, 0x1, 0x0, 0x0, 0x34000804}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x54, r12, 0x10, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5ea6}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x4}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000041}, 0x40810) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@bridge_dellink={0x20, 0x13, 0x1, 0x0, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0xd04}}, 0x20}, 0x1, 0x0, 0x0, 0x20040090}, 0x40000) 3.031324852s ago: executing program 3 (id=3115): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYBLOB="02000000080002000700000008000200070000000800020000000000140001"], 0x50}}, 0x10) 2.908949735s ago: executing program 2 (id=3116): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18ff0000000000000078380000000010950000e5da1977e367b3486699d01cc4"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e00002400028008000240fffffff80800014000000016080003400008000008000440ffffffff0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)=0x4000000) r2 = epoll_create(0xa67) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000000}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) syz_emit_ethernet(0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB="aa010001000000af65de54d86e004d0008050106f3"], 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001800)=@newtfilter={0x4e4, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4b4, 0x2, [@TCA_BASIC_EMATCHES={0x4b0, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x8}, {0x7, 0x4, 0x2, "7d106a03"}}}, @TCF_EM_CONTAINER={0xf8, 0x1, 0x0, 0x0, {{0x2, 0x0, 0x3ff}, "5d968c5710d04ce63fe5b33d84b6c649a0fd8144fb1313ab13136b16fcbb2c886c5003dccc5ccb36f677505a168e713efc7ec442373e6411fd482107d80ca432d155aa5ff686169d0a663c764752bcf8eafc2649c4fa8dfeb42922f08d7a2445d3d8bb2b6e56d4f16d6910412c8425a986624d391aa1ce8bb61b46efccf70db376c078a74348477dc948cfeb915c787f56d818f0038ee1d3afe22af9dfc3291d9a36ecd529324dc609f545cfa934fbf179ca7397a47dde82dc5c0154114851d9b143c41c3210d8bbaa59f5ae799e358830ffc53f357683516fcb9ac6d947b881e471c4cc1bda53eb270c887e"}}]}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x90, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x400}, "e5f66d8cced5586a0e74dee54393ec46f5a32fbefd2678f108014bd32875595369069c34252d05d3179fb62de06d09ca707a0a1388dc6e856919985ced418484a155cfbd8b00ccc9c1fb68ea4d6725c87e650aa2a96da066895bfda8e0ea3edf1a11175660ea847f0e76d55bd971071a0b4539bbaedd0a1c8cb87d385f1539c2d9cc877e"}}, @TCF_EM_CONTAINER={0x34, 0x3, 0x0, 0x0, {{0x8, 0x0, 0xd780}, "ff58a45434f17e8d2b57ce12494ab2fd04d58a3eec8a45814b09b279dbbebd8b134d289e354fd5f0"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1ff, 0x7, 0x4}, {{0x2, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x1ec, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x5719}, {{0x3}, {0x2, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x2, 0x8, 0xb}, {0x2, 0x0, 0x1}}}, @TCF_EM_META={0x70, 0x2, 0x0, 0x0, {{0x100, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="5724889a"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x5, 0x2}, {0x1, 0xf, 0x2}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="71334c8bf4", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="184e84"]}, @TCA_EM_META_LVALUE={0x36, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f95f8d2d0746", @TCF_META_TYPE_VAR="24ee6b80065e7c", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="8f878fdb6237b2f418", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_CONTAINER={0x90, 0x1, 0x0, 0x0, {{0x18, 0x0, 0x8}, "3ca24c1f11f58e7ee08ad2e07fbe86022e9cdf70b5c50897876d4b4f00a9d6a3955f0fcd8100724ebab5fef711975dca94ed767e6219faa307deeb8f9b37c929dcf5521d68bf0fd601f9dc8007442357b5506222d6b2686d99f2a5c407fcb24aeb40032121df3ec56743b307dca8afe73d5b2b3299384d5bb2cbbc583e70ef5cb1"}}, @TCF_EM_META={0x98, 0x1, 0x0, 0x0, {{0x6, 0x4, 0xf9d}, [@TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="585e15a093", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="30519b9e3e", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="55eca056", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="9f5b"]}, @TCA_EM_META_RVALUE={0x1b, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR='y', @TCF_META_TYPE_VAR="7c2eb23a442ebc20d2dc", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xc3, 0xb, 0x2}, {0x2, 0x10}}}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="0f1d4e9d", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0x1, 0x1}, {0x1a9, 0x36, 0x1}}}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="2364dd4d18e50c"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6fb, 0xe, 0x2}, {0xbe, 0x1, 0x2}}}]}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x2, 0x2, 0x6}, {0x2eb, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x2, 0xfffc}, {0x7, 0x9, 0x2, "cdb00d6a20840416a5"}}}]}, @TCA_EMATCH_TREE_LIST={0xcc, 0x2, 0x0, 0x1, [@TCF_EM_META={0x80, 0x3, 0x0, 0x0, {{0x1, 0x4, 0x3}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_VAR="07de", @TCF_META_TYPE_VAR="b3d3"]}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="0317", @TCF_META_TYPE_VAR="faf1d28aac61", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x55ba, 0x8, 0xc4ded10d75cdec8e}, {0x0, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x13, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="ebd6aee9f51b4e"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7ff, 0xff, 0x1}, {0x0, 0x1, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8c, 0x6, 0x1}, {0x6, 0xff}}}, @TCA_EM_META_RVALUE={0x23, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="46a63c6b50e94cf12377", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="d410b8e671", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xd, 0x3, 0x7}, {0x0, 0x2, 0x6273, 0xf3000000}}}, @TCF_EM_CONTAINER={0x2c, 0x1, 0x0, 0x0, {{0x81f6, 0x0, 0x5}, "d6dcfca86a0da1aae3c118ac4ddbaac44d136ffe8ad67fbec5ff1fbc0c1e15"}}]}]}]}}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) 2.908246627s ago: executing program 3 (id=3117): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = gettid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r6) close(r5) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='.\x00\x00\x00\x00\x00', @ANYBLOB], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r2, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 2.905962996s ago: executing program 0 (id=3118): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}}, @NFT_MSG_DELSETELEM={0x4e8, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4d4, 0x3, 0x0, 0x1, [{0x4d0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4cc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4c8, 0x1, "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"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x524}, 0x1, 0x0, 0x0, 0x804}, 0x20000010) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 2.62553748s ago: executing program 4 (id=3119): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRESDEC=r1, @ANYRESDEC, @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES32=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a00001400028010000b800c0018"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xe07c1000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0) 2.426685769s ago: executing program 4 (id=3120): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x800, {[0x0, 0x0, 0x0, 0x5, 0x0, 0xe3]}}, 0x5c) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x80, 0x7800, 0x0, 0xc, {{0x1b, 0x4, 0x1, 0x4, 0x6c, 0x67, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @loopback, {[@timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x9}, {@private=0xa010102, 0x22}, {@empty, 0x6}, {@private=0xa010101, 0x24}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf4dc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x20, 0x0, 0xa, [0x401, 0x8, 0x4, 0x7, 0x2, 0x8, 0xfffffff7]}]}}}}}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYRES32, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.452912771s ago: executing program 0 (id=3121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a32000000000800410073697700140004"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) unshare(0x2040400) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x10000000, 0xffffffff, 0x8}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r5, 0x14, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x4000801) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000340)="d28a08d988a88d8bf2f08c8286ddabc56e2ba393c67c417b042a26b2a440f555eeea83dd63938772f47336f55b88e1eb45370266cdec", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.448645551s ago: executing program 4 (id=3122): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000001003f00000008000300", @ANYRES32=r3, @ANYBLOB="04005e80"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xc, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) 1.367641238s ago: executing program 3 (id=3123): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x78, 0x30, 0xb, 0x70bd26, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xfffffffc}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40800}, 0x1010) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x150, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0x0, 0x80000000008, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffc0000}, @mark={0xc, 0x15, {0x350759, 0x80000001}}]}, 0x150}, 0x1, 0x0, 0x0, 0xd0}, 0x20004000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'erspan0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x7800, 0x40, 0x8000, 0x9, {{0x13, 0x4, 0x0, 0xc, 0x4c, 0x66, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @local, {[@generic={0x82, 0x12, "7c2c307c43aa424a9e6ca7c3c01eeba3"}, @timestamp_addr={0x44, 0x24, 0xd5, 0x1, 0x4, [{@loopback, 0x7}, {@local, 0x9a}, {@multicast1, 0xc}, {@loopback, 0x9}]}]}}}}}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4008840}, 0x20040040) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000640)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) sendmsg$netlink(r4, &(0x7f00000007c0)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x2005060}, 0xc, &(0x7f0000000600)=[{&(0x7f0000000480)={0x124, 0x36, 0x8, 0x70bd2c, 0x25dfdbff, "", [@nested={0x113, 0x91, 0x0, 0x1, [@typed={0xfa, 0x41, 0x0, 0x0, @binary="331594a048eb3bb76ebee23decf60d915b116b90e0dd727acdab72d6861573cfd89f2858faec214a39709fea377395084af9a1cd84f7ff2c85be664f630dd7d0a44685fa8ae8122c1b70c865ef979af864ccde6f74845a564448c766ea3c56c813bc790ec04d751065937209400a516e39d26103fd41ce8803990d8be0e5bf0fd89b8d826bf6b99793e5ea65756cba481ab38ff3e3e808f09198c13a0ae3208f17a54ada491918c87c16f94be2494bb1b052f81821a4f92588c190de5f3a0a3ff982ca5d95678316c9ccf33773e7ab0a26a3cf8198e90051fc723dac0700998a307168b53714c10be3e096cbb15ddeb2268fb8e3a90d"}, @generic="bc24c72bb5853d95c8d323", @typed={0x8, 0x100, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x124}, {&(0x7f0000000300)=ANY=[@ANYBLOB="1000120000170001002bbd7000fedbdf25662ff4266ac42ddb97332a458a5cf38cc70a2ba0ff86a28e43acd40cefa20a7458cba506a3ce174cb73cda8648d22dc7e371bfb17895384bb4b32d91ca5e673eaa3a3b7e06af071ab2bbb12b2c3db301360673113e5c32950afdb610ed499dc2e7003e1e8b2d5f0bd63c02dcf91f7299b0ea5567c84cfbb7f7783bd84cbe32972545ca5805d3b518"], 0x10}], 0x2, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x20, 0x20004804}, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$inet(r7, &(0x7f0000000a80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="955b2edc3a78b5ed4e6cde440c026c6f7d564fd23050fc27ecbaff4fc23674f59ca3dd3acb05e48c0449feb1699cc987105b7b5ea7a0106ddc4226cc77aa0b8e00e3311ff8b790d6965f8ffdc026f10384c9492b7c79021f33af475ca7b72cbd87583c2ab3c6106fd9e4546c61b214e56e5ae9d0dd3b8578a095af8719296019c64391c35e0388fd968d63059a6c2a7166dd28ddebacb0dfb9aab1caf9078429b3e3a850b469901a30ccc2fa9d37772aaef2001cdaf5544526b20afb913166a7aabd961358655684e2e7f7f49269f35b9c4a8dbc53f16ee3fa36c5297fdb077a37058288389060be93c98fb42ba819bd458795a4e798abd68d62697bc95e5e05a6d26207792356c656f8f6f00100000080edd1cb8e60c82953db7fdd9f034a97b88b0971bffcde7aa3ba7dab90a7a31b83cecf56192b760f4299a04a08fbfd071c286a6b087b8954c72db7c64b7c15d5ed0ad613df2be4f6a712ad0821ea1978317e34f01cd4186fa72222463f9c8e499176584539ba96f389", 0x179}, {&(0x7f0000003380)="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", 0x114}, {&(0x7f0000000c80)="331e8c48b2ab8236fae299aaccebe171a2f9d28c12776d4c6a0400000000000000964f5ce289f029d188f72f8eced9", 0x2f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ec0)="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", 0x2ed}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="01081d4f", 0x4}], 0x1}}], 0x4, 0x2000c048) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000019c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001980)={&(0x7f00000006c0)=@allocspi={0x1288, 0x16, 0x8, 0x70bd2c, 0x25dfdbfd, {{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x4e20, 0x0, 0x4e21, 0x2, 0xa, 0x80, 0x20, 0x6c, r2, r6}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4d2, 0xff}, @in=@empty, {0x4, 0x8001, 0x5, 0x8, 0xff, 0xfffffffffffffff9, 0x8, 0x80}, {0x2, 0x0, 0x8}, {0x7, 0x9, 0x3}, 0x70bd2d, 0x3505, 0xa, 0x3, 0xf7, 0x92}, 0x1, 0x8001}, [@algo_auth={0x1048, 0x1, {{'blake2s-128-x86\x00'}, 0x8000, "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"}}, @sa={0xe4, 0x6, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e20, 0x8, 0x4e21, 0x4, 0x2, 0xa0, 0x20, 0x2b, 0x0, 0xee00}, {@in6=@local, 0x4d2, 0xff}, @in6=@mcast1, {0x1, 0xfffffffffffffffa, 0xfffffffffffffff7, 0x7, 0x39, 0x100000001, 0x1d, 0xb}, {0x1, 0x7fffffffffffffff, 0x9, 0x1f}, {0x6, 0xbf6, 0x1}, 0x70bd2b, 0x3502, 0xa, 0x2, 0xe1, 0x80}}, @sec_ctx={0x62, 0x8, {0x5e, 0x8, 0x1, 0x3, 0x56, "746a70ca9291aa4ad8302f7b8dbf276ca54781e78beaac6bc11cd5494f48c1f560e9174478841a06c6c0407998d4c00438bac8c1dbcc194a215a54c45a6b92318647cab8afb31c5f0d9e36564f842c8d42c94edcda9e"}}]}, 0x1288}, 0x1, 0x0, 0x0, 0x48000}, 0x20044840) 1.326308308s ago: executing program 2 (id=3124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000110427bd5f00bddbdf247c1b48db", @ANYRES32=0x0, @ANYBLOB="00000000060604001c0012800b00010062726964676500000c0002800500180000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24040054}, 0x8000) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000009000000090000000800000081060300", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000000000000000000000000000000000000000000454ad7735764a657cb65726740c6a7a455", @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000400000000000000000000018110000588958e4d05edbcc61400e62b15e701003d38022bdfc1eedba00000000000001ff41535a20f64b29ceaf10c0c17bad3a5b3ace43e4c2b3687a94822a9bf0c646", @ANYRES32=r2, @ANYBLOB="00000000000000002702000014000000b7030000000000008500000059000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x840000000002, 0x3, 0x100) r3 = socket(0x10, 0x3, 0x3ff) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=ANY=[@ANYBLOB="1800000052000102"], 0x18}}, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000240)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x8000000, 0x1, 0x0, 0x0, 0xfffc, 0x8}, 0x20) getsockopt$sock_int(r4, 0x1, 0x2c, 0x0, &(0x7f0000000500)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) readv(r10, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000102c0), r8) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000d042dbd7000fbffdd1f00000000", @ANYRES32=r11, @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r11, @ANYRES32=r8], 0x30}}, 0x0) getpid() 1.065050268s ago: executing program 4 (id=3125): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) unshare(0x400) r3 = socket$kcm(0xa, 0x2, 0x0) listen(r3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$kcm(r2, &(0x7f00000010c0)={&(0x7f00000001c0)=@hci={0x1f, 0x1, 0x3}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000300)="e549aa1f7d7ffde606ea0428409340eb68170ccee456978f19050aa428716aa75bc06f7e2508cdbd397a3143e2d62627e12a4a5d92334933841a7d303f513b9bf2ffb7df2fe815befd29b60d4ff90f9949168a1819ae0df484bc07ad908f", 0x5e}, {&(0x7f0000000380)="3fcc9d986c1629075c61af5ce5219c2247c965aff2aaf05f45ad94ecce70e3fe082444eb", 0x24}, {&(0x7f00000003c0)="ff48952356d535e0ed549b46d389400cf86fb4f1853ba4a10f33da63a2f9a2afa474b2400dabed16d06b96e9193b6383aaa921a2db9446", 0x37}, {&(0x7f0000000400)="e83393c82b641624b9607aa512ff96804e1b8b3b7f73d4194e9ba36bd428e64622cdb8d77f223e9c2de925b8ed99b60285b3a8f1b5bf2c", 0x37}, {&(0x7f0000000580)="01b4be8455ffe30e91c9f1a21269dc57ea191f052f99b9564471b8ce96e93cb1594c5fe49d4f7483cf801a78fa008980d8eef7af29064f3e327c540c6eb2511d2581691e0b734e5e18e464a8e2d3b32e82b7ff7e5bfe0ccd53bf24b1c70c636c8303ecb9ee2b7a429c78eb0d8d45c2ace1cb1ed9a902e1e4e780fc1910a6b54900175bbf0ee8135749a69c99800a49998519eda4cf26372da019ac8ec7ce8d", 0x9f}, {&(0x7f0000000640)="d53460b174e1fd7e73fc69826f03d688596325be53e95e6afa9c696ddd79d992123333d74161661c6cc0eb0af9c7d2bffd99752cb5a3dc74c8b5c9444589bb5d60b8fb88a35a962c02549d646bfcf18e4098d43eb8861b17b1d12e8dc13c273dbd5e206b632304d66fe0398c7e681c794438f91d813cd03a62c16ed8249eda0f98e7e9", 0x83}, {&(0x7f0000000700)="c0331277fa30", 0x6}, {&(0x7f0000000740)="2a677e7ea4a978eb4c16aced6a81a09a30b007b12e32f262a965ffdbad90ed531f620f9349b4ded05c012b370cf08f891c16e5c7061d894d51a62a9bcc34a4ffc4ee55d0fafa5f993307041297eaeb1d4b727a9a198106edb43e369342e9981f263f3dea5846a68a92da21b4fd3b88ebc0b5e0a487066615b5d7aab77edbdd546c1c1f4aebca8d8f0a73f7b870300093ebf67da3f15ceb56759401f9cb1d395efa2f357afd3cf053100ccc06989fe59642a3fba19a70a089c7acc7fe5f689b5ff13d4d0d97ce76e4d639fac352", 0xcd}, {&(0x7f0000000840)="962f4fccafa25b7fbdc75546e1cdcee714548ecab6547d5e6759198a5b2e59fd62c8fc70e1511504fc9f78e528389f43ed0f2f673878eb41", 0x38}, {&(0x7f0000000900)="9048cc930ba1534dc4a071624f6a6e55491a53a75888ca660936e2dbe3186991628c4c91a212a3b80e765746a8c2ff14951364daa9a822467f805c62fa061f3c13d77d8ef05fa98ca4457ecadfb4ac02059b18c2da15fa9c80e957b38341c1ace8e45f0f1988444ab138b75f8aef3bbcf4682cbd40eb3f11deb055592639679fb61beb5fe041250b4bc52e67067a17003d7b1c11ccb1c5a08084d6446c528ea4a8ae141d51baba3d1e8e548697efaa8cd64f3124ff84e77322d8c711b9365574968bbac51f34259eff8178ccf457d2a27d33552c7991f9550e209900c5795a31c2235aa760f947", 0xe7}], 0xa, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x5d0}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0xffe0}, {0x0, 0xffff}, {0xffe0}}}, 0x24}}, 0x10) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x204, 0x0, 0x4, 0x2, {0xa, 0x4e21, 0x4, @mcast1, 0x7fff}}}, 0x32) 1.064574235s ago: executing program 0 (id=3126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="019c2c00000000000000540000000800030000000000"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000009d430000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000002320000004a000000fc010000000000000000000000000000000000000400"/182], 0xfc}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES8=r6], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket(0xa, 0x3, 0x3a) getsockopt$inet_opts(r8, 0x0, 0x0, 0x0, 0x0) r9 = socket$key(0xf, 0x3, 0x2) recvmmsg(r9, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) close(0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000003010101000000000000b5f8a23f000808000740000000cb08006acfc9469cf9a98ed11540000000011c0019800800010040000000080002000a0000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendto$packet(r5, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="e9932cbd7000fedbdf25060000001400020020010000000000000000000000000002"], 0x28}, 0x1, 0x0, 0x0, 0x20000100}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newchain={0x448, 0x64, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffff}, {0xa, 0xfffd}, {0xfff3, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @filter_kind_options=@f_u32={{0x8}, {0x40c, 0x2, [@TCA_U32_POLICE={0x408, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x8, 0x4, 0x9, 0x30b4, 0xa, 0x0, 0x6, 0x7fffffff, 0x2, 0x27, 0x7a25, 0x7fffffff, 0x6, 0x3e, 0x8, 0x81, 0x1, 0x0, 0x40, 0x0, 0xfffffffb, 0xe3b, 0x3, 0x200, 0x4, 0xffffff80, 0x3, 0x1, 0x0, 0x6, 0x0, 0x2, 0x29f75488, 0x0, 0x10001, 0x8bb, 0x7, 0xa83, 0xc, 0x9, 0x8, 0x3, 0x800, 0x9, 0x4, 0x3ff, 0x1, 0x5, 0x9, 0x7, 0x2, 0xe6bf, 0x3, 0xcc9, 0x8000, 0x6, 0x5, 0xfd3, 0x6, 0xfa15, 0x80000000, 0xb68a, 0x9, 0x40, 0x7, 0x6, 0x81, 0xa33c, 0x81, 0x4, 0x6, 0x2, 0xe49, 0x8, 0x81, 0x7, 0x7fff, 0x1918, 0xf7a, 0x80, 0x1, 0x2ecc, 0xc000000, 0x2c23, 0x9, 0x80004, 0x5, 0xb60, 0x2, 0x7ff, 0x6, 0x1, 0x0, 0x3, 0xf0eb, 0x3, 0x8, 0xe00000, 0x80000000, 0x4, 0x2, 0x569db32e, 0x7f, 0xaa60, 0x7, 0x9, 0xf3, 0x2, 0x3, 0x3, 0x8, 0x1, 0xc, 0x1, 0x7, 0x1, 0x7, 0xffff8001, 0xffff, 0xc83, 0x2, 0xc, 0x6, 0x5, 0x100, 0x2, 0x0, 0x7, 0xffffff3e, 0x23, 0x4, 0xd94, 0x0, 0x4, 0x8, 0x5, 0x9e2c, 0xffff9f8b, 0x1, 0x3ff, 0x5, 0x80, 0x9, 0xe475, 0x1, 0x8, 0x8d4b, 0x100, 0x100, 0x7fffffff, 0x0, 0xe4, 0x200, 0x45, 0x7fff, 0x9, 0x1, 0x18295722, 0xd, 0x9, 0x53, 0xaf2, 0xe701, 0x0, 0x9, 0x101, 0x86000, 0x70e, 0x10, 0x2ded, 0x7, 0x793, 0x8001, 0x3, 0x2, 0x400, 0x1, 0x5, 0xd2, 0x3, 0x1, 0x7, 0x4, 0xfffffffc, 0x7, 0xfffffffd, 0x4, 0xfffffff1, 0xb, 0x3, 0x9, 0x3, 0x6, 0x3, 0x0, 0xffffff67, 0x2, 0x3, 0x1, 0x2b, 0x6, 0x1, 0x1, 0x5, 0x0, 0x0, 0x10001, 0x0, 0x8, 0x8, 0x11e, 0x2, 0xfff, 0x1f9a, 0x200, 0x5, 0x8, 0x5, 0x8, 0x14, 0xffffffff, 0xfa, 0x6, 0x3, 0x380, 0x100, 0x2, 0x2a49, 0x4, 0x1, 0x9, 0x9d3e, 0xf5, 0x36b, 0x3db7e015, 0x2, 0x6, 0x8, 0xcb1f, 0x73d, 0x9, 0x9, 0x0, 0x1, 0x10, 0x7fff, 0x4, 0x0, 0x6, 0x40000, 0x9, 0x7, 0xa9, 0xa8, 0xd709]}]}]}}]}, 0x448}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, 0x0}, 0x94) 755.769467ms ago: executing program 2 (id=3127): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000000ea0900000000000000040004"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket(0x1e, 0x1, 0x0) shutdown(r1, 0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32) pwritev(r3, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r3) r4 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32) sendfile(r3, r2, 0x0, 0xf03a0005) (async, rerun: 32) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x1}, 0x20) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000001140)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) (async) readv(r6, &(0x7f0000001240)=[{&(0x7f0000000040)=""/4090, 0xffa}, {&(0x7f0000001080)=""/182, 0xb6}, {&(0x7f0000001340)=""/224, 0xe0}], 0x3) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24044044, &(0x7f0000000540)={0xa, 0x5e22, 0x0, @mcast2, 0x4}, 0x1c) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="2000000004000040020019000000000001020000", @ANYRES32, @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r6, @ANYRES16=r4], 0x50) (async, rerun: 32) mmap(&(0x7f00002a1000/0x4000)=nil, 0x4000, 0x0, 0x200000006c832, 0xffffffffffffffff, 0x4f8bc000) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001280)={0x1, 0xa, 0x2, 0x8, 0xe, 0x10, 0x9}, 0xc) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}], 0x1c) (async, rerun: 32) setsockopt$sock_int(r8, 0x1, 0x1, &(0x7f0000001180)=0x4, 0x4) (async, rerun: 32) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) (async) readv(r8, &(0x7f0000000640)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1) (async) mmap(&(0x7f0000b08000/0x2000)=nil, 0x2000, 0x3, 0x200000005c832, r6, 0x1fc81000) 668.841218ms ago: executing program 4 (id=3128): r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) unshare(0x62040200) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r2, @ANYBLOB="14000600010000000100000001000000feffffff1400020000000000000000000000ff"], 0x40}, 0x1, 0x0, 0x0, 0x20048814}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x4) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@loopback, 0x3a, r4}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}}, 0x20000018) (async) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x2, 0x4) (async) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r6, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005001202000000010000000000000700000000005f616100"/53], 0x0, 0x35, 0x0, 0x1, 0x10001}, 0x28) sendto$inet(r0, 0x0, 0x0, 0x20048800, &(0x7f0000002400)={0x2, 0x2, @multicast2}, 0x10) 610.480533ms ago: executing program 3 (id=3129): r0 = socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000a0850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_buf(r0, 0x0, 0x25, 0x0, 0x0) 484.730905ms ago: executing program 2 (id=3130): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x1000}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@gre={{0x1c, 0x4, 0x1, 0x8, 0x21c, 0x64, 0x0, 0xc0, 0x2f, 0x0, @multicast2, @loopback, {[@timestamp={0x44, 0x20, 0x2a, 0x0, 0x7, [0x1, 0x4, 0x8, 0xffff0001, 0x0, 0x80000000, 0xffffff55]}, @timestamp_prespec={0x44, 0x3c, 0x72, 0x3, 0x5, [{@private=0xa010100, 0x9}, {@remote, 0x200}, {@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010102, 0xc}, {@multicast2, 0x4}, {@multicast1, 0x4}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x6b, 0x0, [0x9, 0x9], "f3f8a678da87ef080ba2fa89d70f76ea7bea9c15a1e29468700f78a01ea437d327e8790830241109feff327b8c90dfc3506786957604eb645f1084e1d8b9c4cbded840009905e0ffbe22f210e0ca305279b8238353c7945b7a6c6c242146d05213c1a4489809a07a7490a0"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x1, 0x9], "870a4f49713f8dfe9d9323526e2f22d85bfc5b9597dc45f663f12fb3f7ce86a769f43f69c785c17a6a6ec7676c4f9f3a0fdf3d5b5a8da6bb7b14378234560a2b3417dbf31c7cb2e5ccd986490a7399208135fc5cc1e54025f69393fb5542763862ce97e4"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x6], "215d204e5d579761ed9c7ae3d12a35f384d722084a1068106ad827061b3bb71ae0b1ce00"}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0xf1, 0x1, 0x0, 0x0, 0x1, 0x9}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0x5, 0x2, 0x0, 0x0, 0x5, 0xa}, 0x2, {0xfffffffa, 0x913, 0x1, 0x8, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "b76c171211bb62db35e96dffdd74359f86aac26c051acd261398b4e9e7074560d7f6aa68e228296a73674bee01a5445541b1b93c7536e1ae12a44746dedd1ff018b6d13ca8bfe30c0a0f9911e33f726472bd92a84c2cc8971e44f3420e5999a1b9d8371be53f741e8dc71c"}}}}, 0x22a) 0s ago: executing program 2 (id=3131): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff11, 0x0, 0xffffffffffffffff, 0xfffffffffffffea5}, 0x48) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000004100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000004280)={0x0, 0x0, &(0x7f0000004240)={&(0x7f0000004140)={0x5c, r1, 0x55f56713ebbf9c63, 0x70bd25, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0x40, 0xa8, @random="3e512fabc4237c31397f62b3839439cfa6124e8299ee962398cf7021c30b39d6dd81768ceb72993aa41e2dd8693dd47a89794a32c44ef56d11804500"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x48040) (async) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x81c, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x34008812}, 0xc008000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000004000000850000005e0000009500000000000000a30b406b5a2bc8900d74868f5f4d1098c19588a23d7ae496951cac6cba4fd5c344499902356fe555b769ad074a9c8526831ea54da16a35cf6ba9"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc80, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0x7fffffff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800c041}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000700)={0x7fff, 0x0, 0x2}, 0xfffffffffffffe8d) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004480)=@newtfilter={0x480, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0x0, 0xfff1}, {0x8, 0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x5e}, @TCA_ROUTE4_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2f16, 0xffffffffffffffff, 0xfffffff9, 0xfa01, 0x8, {0x6, 0x1, 0x3, 0x0, 0x2, 0x4}, {0x88, 0x3, 0x4, 0xe, 0x78e8}, 0xc3d7, 0x7, 0x10001}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0x8, 0x2, 0x2, 0x8, 0x3, 0x81fd, 0x9, 0x3, 0xe, 0xb, 0x5, 0x2, 0x10000, 0x800, 0x1, 0x0, 0x7, 0x74e, 0x9, 0x8, 0x4, 0x0, 0x5, 0x2, 0xa728, 0x100, 0x2, 0x5, 0x0, 0x3, 0x3, 0xfffffff1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x9, 0x9, 0x9, 0x4, 0xa0a, 0x7d7, 0xffffffff, 0x10, 0x5, 0x3, 0x3ff, 0x1, 0xffff, 0x50, 0x8, 0x9, 0x3, 0x68d3d217, 0x3, 0x0, 0x7fff, 0xfffffffb, 0x9, 0x6, 0x1, 0x0, 0x7f, 0x101, 0xb5, 0x7, 0x0, 0x4, 0x6, 0x3, 0x5, 0x4, 0x7, 0x9, 0x8, 0xffffffba, 0x1, 0x200d, 0x1, 0x6, 0x7f, 0x8, 0xf, 0x5, 0xe843, 0x3, 0x8, 0x10000, 0x6, 0x5, 0x80, 0x60, 0x8, 0x6, 0x6, 0x0, 0x3ff, 0x4, 0x9, 0x9d, 0x9, 0x43, 0x498, 0x5, 0x40, 0x4, 0x4, 0x0, 0x0, 0xfffffffe, 0xe, 0x4, 0x7, 0x6, 0xd82, 0x0, 0x5, 0x0, 0x6, 0x34a9, 0x100, 0x2, 0x7fff, 0x100, 0x76, 0x5, 0xfff, 0xffffffff, 0x3, 0x1, 0x7, 0x8000, 0x7fffffff, 0x1, 0xc, 0x0, 0xf, 0xfffffffb, 0x1, 0x7, 0x8, 0x4, 0x9d, 0x3, 0x8, 0x6, 0x1, 0x8, 0x81, 0x3bd5, 0x6, 0x683, 0x7d0, 0x2, 0x80, 0x6, 0xf, 0x5, 0x9, 0x2, 0x4, 0x7, 0x3, 0x2, 0x1, 0xbd, 0x76, 0x6, 0x9, 0x6, 0x6, 0xfffffff6, 0x2c69, 0x7, 0xc, 0x6, 0xf, 0x7, 0x2, 0x200, 0x10001, 0x1c0000, 0x5, 0x73, 0x5, 0x6, 0x0, 0x3, 0x8, 0x2, 0x9, 0x1, 0x0, 0x5, 0x4, 0x5, 0x8000, 0xa, 0x0, 0x0, 0x2873, 0x400, 0x9, 0x4ac32000, 0x5, 0x4, 0xe, 0x7, 0x4, 0x0, 0x5, 0x811, 0x6, 0x5, 0x9ec2, 0xe, 0x7fff, 0x3, 0x10, 0x5, 0x8000, 0x0, 0x2, 0x4, 0xffff31c6, 0xa29, 0x5, 0x8, 0x93a, 0x8000, 0xc, 0x1ea, 0x8, 0x80000001, 0x6, 0x3, 0x6, 0x7, 0x4, 0x9, 0x9, 0x5, 0x3fe00000, 0x4, 0x8a, 0x5, 0x81, 0xfffffff9, 0xfffffffa, 0x2f, 0xfd97, 0x1, 0x3]}]}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x40}, 0x2) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000200)=0xd34, 0x4) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x6}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fa"}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "a8"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) kernel console output (not intermixed with test programs): rq_disable+0x3b/0x140 [ 295.272993][T11615] ? clear_bhb_loop+0x40/0x90 [ 295.273013][T11615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.273029][T11615] RIP: 0033:0x7f309275d68e [ 295.273046][T11615] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 295.273060][T11615] RSP: 002b:00007f30936e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.273078][T11615] RAX: ffffffffffffffda RBX: 00007f30936e16c0 RCX: 00007f309275d68e [ 295.273089][T11615] RDX: 000000000000000f RSI: 00007f30936e10a0 RDI: 0000000000000004 [ 295.273099][T11615] RBP: 00007f30936e1090 R08: 0000000000000000 R09: 0000000000000000 [ 295.273110][T11615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.273120][T11615] R13: 00007f3092a16038 R14: 00007f3092a15fa0 R15: 00007ffddae6aaf8 [ 295.273149][T11615] [ 295.649644][T11626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1525'. [ 295.783387][T11634] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1530'. [ 296.250075][T11652] netlink: 'syz.1.1536': attribute type 1 has an invalid length. [ 296.378669][T11652] bond8: entered promiscuous mode [ 296.400275][T11652] 8021q: adding VLAN 0 to HW filter on device bond8 [ 296.486291][T11663] bond8: (slave bridge2): making interface the new active one [ 296.512445][T11663] bridge2: entered promiscuous mode [ 296.531217][T11663] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 296.721980][T11672] FAULT_INJECTION: forcing a failure. [ 296.721980][T11672] name failslab, interval 1, probability 0, space 0, times 0 [ 296.754407][T11675] netlink: 'syz.3.1542': attribute type 61 has an invalid length. [ 296.770233][T11672] CPU: 1 UID: 0 PID: 11672 Comm: syz.1.1540 Not tainted syzkaller #0 PREEMPT(full) [ 296.770257][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.770267][T11672] Call Trace: [ 296.770274][T11672] [ 296.770282][T11672] dump_stack_lvl+0xe8/0x150 [ 296.770307][T11672] should_fail_ex+0x40c/0x560 [ 296.770339][T11672] should_failslab+0xa8/0x100 [ 296.770359][T11672] __kmalloc_noprof+0xe8/0x750 [ 296.770382][T11672] ? tomoyo_realpath_from_path+0xef/0x640 [ 296.770413][T11672] tomoyo_realpath_from_path+0xef/0x640 [ 296.770448][T11672] ? tomoyo_path_number_perm+0x219/0x5f0 [ 296.770470][T11672] tomoyo_path_number_perm+0x246/0x5f0 [ 296.770495][T11672] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 296.770515][T11672] ? __lock_acquire+0x683/0x2cd0 [ 296.770548][T11672] ? hook_file_ioctl+0x1f0/0x5c0 [ 296.770590][T11672] ? __fget_files+0x2a/0x420 [ 296.770614][T11672] ? __fget_files+0x2a/0x420 [ 296.770633][T11672] ? __fget_files+0x3a2/0x420 [ 296.770651][T11672] ? __fget_files+0x2a/0x420 [ 296.770676][T11672] security_file_ioctl+0xc3/0x2a0 [ 296.770700][T11672] __se_sys_ioctl+0x47/0x170 [ 296.770725][T11672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.770745][T11672] do_syscall_64+0x174/0x580 [ 296.770765][T11672] ? trace_irq_disable+0x3b/0x140 [ 296.770789][T11672] ? clear_bhb_loop+0x40/0x90 [ 296.770819][T11672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.770836][T11672] RIP: 0033:0x7f9d9279ce59 [ 296.770853][T11672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.770868][T11672] RSP: 002b:00007f9d935b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.770886][T11672] RAX: ffffffffffffffda RBX: 00007f9d92a15fa0 RCX: 00007f9d9279ce59 [ 296.770899][T11672] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000003 [ 296.770911][T11672] RBP: 00007f9d935b4090 R08: 0000000000000000 R09: 0000000000000000 [ 296.770921][T11672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.770932][T11672] R13: 00007f9d92a16038 R14: 00007f9d92a15fa0 R15: 00007ffd22aeefa8 [ 296.770962][T11672] [ 296.770970][T11672] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.218109][T11692] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 297.439278][T11704] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 297.475900][T11704] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 297.508833][T11704] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 297.554610][T11704] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 297.633801][T11704] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 297.771478][T11724] FAULT_INJECTION: forcing a failure. [ 297.771478][T11724] name failslab, interval 1, probability 0, space 0, times 0 [ 297.810439][T11724] CPU: 0 UID: 0 PID: 11724 Comm: syz.4.1557 Not tainted syzkaller #0 PREEMPT(full) [ 297.810463][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 297.810473][T11724] Call Trace: [ 297.810480][T11724] [ 297.810488][T11724] dump_stack_lvl+0xe8/0x150 [ 297.810513][T11724] should_fail_ex+0x40c/0x560 [ 297.810545][T11724] should_failslab+0xa8/0x100 [ 297.810564][T11724] __kmalloc_noprof+0xe8/0x750 [ 297.810588][T11724] ? __pfx_dynamic_dname+0x10/0x10 [ 297.810605][T11724] ? tomoyo_encode+0x2ad/0x570 [ 297.810635][T11724] tomoyo_encode+0x2ad/0x570 [ 297.810666][T11724] tomoyo_realpath_from_path+0x5fa/0x640 [ 297.810700][T11724] ? tomoyo_path_number_perm+0x219/0x5f0 [ 297.810721][T11724] tomoyo_path_number_perm+0x246/0x5f0 [ 297.810747][T11724] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 297.810768][T11724] ? __lock_acquire+0x683/0x2cd0 [ 297.810805][T11724] ? hook_file_ioctl+0x1f0/0x5c0 [ 297.810849][T11724] ? __fget_files+0x2a/0x420 [ 297.810872][T11724] ? __fget_files+0x2a/0x420 [ 297.810892][T11724] ? __fget_files+0x3a2/0x420 [ 297.810911][T11724] ? __fget_files+0x2a/0x420 [ 297.810930][T11724] security_file_ioctl+0xc3/0x2a0 [ 297.810950][T11724] __se_sys_ioctl+0x47/0x170 [ 297.810973][T11724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.810991][T11724] do_syscall_64+0x174/0x580 [ 297.811008][T11724] ? trace_irq_disable+0x3b/0x140 [ 297.811032][T11724] ? clear_bhb_loop+0x40/0x90 [ 297.811051][T11724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.811066][T11724] RIP: 0033:0x7f309279ce59 [ 297.811082][T11724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.811095][T11724] RSP: 002b:00007f30936e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.811113][T11724] RAX: ffffffffffffffda RBX: 00007f3092a15fa0 RCX: 00007f309279ce59 [ 297.811126][T11724] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000003 [ 297.811137][T11724] RBP: 00007f30936e1090 R08: 0000000000000000 R09: 0000000000000000 [ 297.811148][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.811158][T11724] R13: 00007f3092a16038 R14: 00007f3092a15fa0 R15: 00007ffddae6aaf8 [ 297.811189][T11724] [ 297.811239][T11724] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.154100][ T6884] smbdirect: ib_dev[syz2] removed [ 298.241705][T11741] nbd: socks must be embedded in a SOCK_ITEM attr [ 298.310272][T11745] xt_hashlimit: size too large, truncated to 1048576 [ 298.395590][T11747] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.484813][T11747] bridge_slave_0 (unregistering): left allmulticast mode [ 298.491909][T11747] bridge_slave_0 (unregistering): left promiscuous mode [ 298.500754][T11747] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.546994][T11757] syzkaller0: entered promiscuous mode [ 298.557249][T11757] syzkaller0: entered allmulticast mode [ 298.612689][T11767] team0: No ports can be present during mode change [ 298.728349][T11767] __nla_validate_parse: 10 callbacks suppressed [ 298.728369][T11767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1569'. [ 298.771716][T11767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1569'. [ 298.934581][T11787] FAULT_INJECTION: forcing a failure. [ 298.934581][T11787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.948962][T11787] CPU: 1 UID: 0 PID: 11787 Comm: syz.0.1573 Not tainted syzkaller #0 PREEMPT(full) [ 298.948987][T11787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 298.948998][T11787] Call Trace: [ 298.949005][T11787] [ 298.949012][T11787] dump_stack_lvl+0xe8/0x150 [ 298.949037][T11787] should_fail_ex+0x40c/0x560 [ 298.949068][T11787] _copy_from_user+0x2d/0xb0 [ 298.949090][T11787] get_user_ifreq+0x6b/0x180 [ 298.949114][T11787] sock_ioctl+0x6f8/0x7e0 [ 298.949137][T11787] ? __pfx_sock_ioctl+0x10/0x10 [ 298.949161][T11787] ? __fget_files+0x3a2/0x420 [ 298.949184][T11787] ? __fget_files+0x2a/0x420 [ 298.949208][T11787] ? bpf_lsm_file_ioctl+0x9/0x20 [ 298.949233][T11787] ? __pfx_sock_ioctl+0x10/0x10 [ 298.949253][T11787] __se_sys_ioctl+0xfc/0x170 [ 298.949279][T11787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.949298][T11787] do_syscall_64+0x174/0x580 [ 298.949317][T11787] ? trace_irq_disable+0x3b/0x140 [ 298.949341][T11787] ? clear_bhb_loop+0x40/0x90 [ 298.949363][T11787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.949380][T11787] RIP: 0033:0x7f3e83f9ce59 [ 298.949397][T11787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.949411][T11787] RSP: 002b:00007f3e84e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.949431][T11787] RAX: ffffffffffffffda RBX: 00007f3e84215fa0 RCX: 00007f3e83f9ce59 [ 298.949444][T11787] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000003 [ 298.949455][T11787] RBP: 00007f3e84e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 298.949467][T11787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.949478][T11787] R13: 00007f3e84216038 R14: 00007f3e84215fa0 R15: 00007ffcd6efded8 [ 298.949508][T11787] [ 299.619937][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 299.879540][T11833] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1584'. [ 301.441631][T11757] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.659816][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 301.707617][T11839] FAULT_INJECTION: forcing a failure. [ 301.707617][T11839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.718776][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 301.722061][T11839] CPU: 0 UID: 0 PID: 11839 Comm: syz.0.1587 Not tainted syzkaller #0 PREEMPT(full) [ 301.722084][T11839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 301.722095][T11839] Call Trace: [ 301.722102][T11839] [ 301.722110][T11839] dump_stack_lvl+0xe8/0x150 [ 301.722134][T11839] should_fail_ex+0x40c/0x560 [ 301.722165][T11839] _copy_from_user+0x2d/0xb0 [ 301.722186][T11839] ip_tunnel_parm_from_user+0xbd/0x3b0 [ 301.722212][T11839] ? rcu_is_watching+0x15/0xb0 [ 301.722232][T11839] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 301.722259][T11839] ? __lock_acquire+0x683/0x2cd0 [ 301.722286][T11839] ip_tunnel_siocdevprivate+0xb0/0x1d0 [ 301.722313][T11839] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 301.722343][T11839] ? do_raw_spin_lock+0x12b/0x2f0 [ 301.722372][T11839] ipip6_tunnel_siocdevprivate+0x27d/0x1690 [ 301.722401][T11839] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 301.722425][T11839] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 301.722443][T11839] ? lockdep_hardirqs_on+0x7a/0x110 [ 301.722465][T11839] ? __mutex_lock+0x10ab/0x1590 [ 301.722489][T11839] ? __mutex_lock+0x5c5/0x1590 [ 301.722511][T11839] ? dev_ioctl+0x83c/0x1150 [ 301.722537][T11839] ? __pfx___mutex_lock+0x10/0x10 [ 301.722555][T11839] ? full_name_hash+0x92/0xe0 [ 301.722583][T11839] dev_ifsioc+0xb56/0x1360 [ 301.722613][T11839] dev_ioctl+0x84c/0x1150 [ 301.722641][T11839] sock_ioctl+0x753/0x7e0 [ 301.722663][T11839] ? __pfx_sock_ioctl+0x10/0x10 [ 301.722685][T11839] ? __fget_files+0x3a2/0x420 [ 301.722704][T11839] ? __fget_files+0x2a/0x420 [ 301.722728][T11839] ? bpf_lsm_file_ioctl+0x9/0x20 [ 301.722753][T11839] ? __pfx_sock_ioctl+0x10/0x10 [ 301.722771][T11839] __se_sys_ioctl+0xfc/0x170 [ 301.722795][T11839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.722814][T11839] do_syscall_64+0x174/0x580 [ 301.722833][T11839] ? trace_irq_disable+0x3b/0x140 [ 301.722859][T11839] ? clear_bhb_loop+0x40/0x90 [ 301.722879][T11839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.722896][T11839] RIP: 0033:0x7f3e83f9ce59 [ 301.722912][T11839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.722926][T11839] RSP: 002b:00007f3e84e0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.722944][T11839] RAX: ffffffffffffffda RBX: 00007f3e84215fa0 RCX: 00007f3e83f9ce59 [ 301.722957][T11839] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000003 [ 301.722968][T11839] RBP: 00007f3e84e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 301.723001][T11839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.723011][T11839] R13: 00007f3e84216038 R14: 00007f3e84215fa0 R15: 00007ffcd6efded8 [ 301.723041][T11839] [ 301.904747][T11842] nftables ruleset with unbound chain [ 301.992103][T11851] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1588'. [ 302.039341][T11851] netlink: 'syz.4.1588': attribute type 1 has an invalid length. [ 302.067666][T11851] netlink: 'syz.4.1588': attribute type 2 has an invalid length. [ 302.082341][T11851] netlink: 'syz.4.1588': attribute type 1 has an invalid length. [ 302.217597][T11866] bond0: (slave vlan4): Opening slave failed [ 302.228647][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 302.257989][T11869] IPv6: NLM_F_CREATE should be specified when creating new route [ 302.373722][T11874] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 302.373722][T11874] Please contact the netfilter-devel mailing list or update your nftables rules. [ 302.623232][T11891] –: renamed from dummy0 [ 302.635361][T11891] netlink: 'syz.0.1600': attribute type 2 has an invalid length. [ 302.719501][T11896] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1603'. [ 302.719920][T11898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1602'. [ 302.792513][T11903] openvswitch: netlink: nsh attr 5 is out of range max 3 [ 302.806317][T11904] openvswitch: netlink: nsh attr 5 is out of range max 3 [ 302.816280][T11903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.825285][T11904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.859808][T11908] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 302.948043][T11914] syzkaller0: entered promiscuous mode [ 302.953723][T11914] syzkaller0: entered allmulticast mode [ 304.845654][T11851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.317231][T11938] syzkaller1: entered promiscuous mode [ 305.337076][T11938] syzkaller1: entered allmulticast mode [ 305.411680][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1615'. [ 305.435364][T11943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.447659][T11950] netlink: 'syz.0.1619': attribute type 30 has an invalid length. [ 305.533387][T11950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1619'. [ 305.896908][T11974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'. [ 305.952571][T11974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1625'. [ 306.125499][T11987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1629'. [ 306.174329][T11990] xt_SECMARK: invalid mode: 4 [ 306.245528][T11992] x_tables: duplicate underflow at hook 1 [ 306.744593][T12020] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1640'. [ 307.146201][T12054] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 307.160060][T12054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.174518][T12054] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 307.183144][T12054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.691444][T12080] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1658'. [ 307.713073][T12082] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1659'. [ 307.745014][T12084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1658'. [ 307.815543][T12084] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.1658'. [ 307.840097][T12084] netlink: Unknown conntrack attr (0) [ 307.939825][T12091] netlink: 'syz.3.1662': attribute type 1 has an invalid length. [ 308.011776][T12091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.040464][T12094] bond4: (slave gretap2): making interface the new active one [ 308.050130][T12094] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 308.061607][T12091] netlink: 'syz.3.1662': attribute type 11 has an invalid length. [ 308.253585][T12108] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 308.444234][T12129] netlink: 'syz.0.1674': attribute type 4 has an invalid length. [ 309.251117][T12120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.641828][T12186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.750022][T12188] netlink: 'syz.3.1687': attribute type 11 has an invalid length. [ 309.992700][T12210] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 310.013367][T12210] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 310.059331][T12210] bond1: left promiscuous mode [ 310.109804][T12221] netlink: 'syz.3.1699': attribute type 11 has an invalid length. [ 310.647033][T12252] netlink: 'syz.4.1708': attribute type 1 has an invalid length. [ 310.649919][T12250] __nla_validate_parse: 6 callbacks suppressed [ 310.649935][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 310.680241][T12252] netlink: 'syz.4.1708': attribute type 3 has an invalid length. [ 310.696401][T12256] netlink: 'syz.3.1709': attribute type 1 has an invalid length. [ 310.711634][T12252] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1708'. [ 310.825131][T12256] bond5: entered promiscuous mode [ 310.830572][T12256] 8021q: adding VLAN 0 to HW filter on device bond5 [ 311.894561][T12303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.160918][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 314.212287][T12282] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.378010][T12322] netlink: 'syz.4.1726': attribute type 1 has an invalid length. [ 314.429548][T12329] netlink: 'syz.0.1728': attribute type 1 has an invalid length. [ 314.481521][T12322] bond5: entered promiscuous mode [ 314.490972][T12322] 8021q: adding VLAN 0 to HW filter on device bond5 [ 314.527595][T12329] bond8: entered promiscuous mode [ 314.534350][T12329] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.557190][T12334] macvtap1: entered allmulticast mode [ 314.593808][T12331] bond5: (slave bridge10): making interface the new active one [ 314.601393][T12331] bridge10: entered promiscuous mode [ 314.608364][T12331] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 314.625462][T12329] macvtap2: entered allmulticast mode [ 315.135191][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1735'. [ 315.145589][T12356] openvswitch: netlink: Port 926363952 exceeds max allowable 65535 [ 315.169875][T12356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1735'. [ 315.193209][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1735'. [ 315.491097][T12374] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1741'. [ 315.534091][T12378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 316.423377][T12426] bond6 (unregistering): Released all slaves [ 316.881568][T12458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1763'. [ 317.065175][T12464] syzkaller0: entered promiscuous mode [ 317.071308][T12464] syzkaller0: entered allmulticast mode [ 317.085711][T12464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.170988][T12470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.180504][T12470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'. [ 317.335063][T12480] netlink: 'syz.4.1771': attribute type 1 has an invalid length. [ 317.343210][T12479] netlink: 'syz.4.1771': attribute type 1 has an invalid length. [ 317.423391][T12479] 8021q: adding VLAN 0 to HW filter on device bond6 [ 317.446638][T12482] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 317.456047][T12484] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1773'. [ 317.809041][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1779'. [ 318.109221][T12515] tipc: Enabling of bearer rejected, failed to enable media [ 318.570636][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'. [ 318.600013][T12541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1789'. [ 318.676242][T12541] geneve3: entered promiscuous mode [ 318.698658][T12541] geneve3: entered allmulticast mode [ 318.709679][ T6883] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.743621][ T6883] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.801142][T12550] geneve2: entered promiscuous mode [ 318.813300][ T6883] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.848065][ T6883] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.931008][ T6883] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.958592][ T6883] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.019413][ T6883] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.066416][ T6883] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.140465][ T6887] tipc: Subscription rejected, illegal request [ 319.265487][T12575] tipc: Enabled bearer , priority 0 [ 319.486777][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1797'. [ 319.586061][T12590] xt_hashlimit: size too large, truncated to 1048576 [ 319.717299][T12582] bridge_slave_0 (unregistering): left allmulticast mode [ 319.765976][T12582] bridge_slave_0 (unregistering): left promiscuous mode [ 319.802249][T12582] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.190499][T12616] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 320.462266][T12632] netlink: zone id is out of range [ 320.493061][T12632] netlink: zone id is out of range [ 320.516359][T12632] netlink: zone id is out of range [ 320.540533][T12632] netlink: zone id is out of range [ 320.557734][T12632] netlink: zone id is out of range [ 320.573313][T12632] netlink: zone id is out of range [ 320.592435][T12632] netlink: zone id is out of range [ 320.612408][T12632] netlink: zone id is out of range [ 320.634694][T12632] netlink: zone id is out of range [ 321.111779][T12662] netlink: 'syz.1.1816': attribute type 1 has an invalid length. [ 321.126356][T12662] netlink: 'syz.1.1816': attribute type 2 has an invalid length. [ 321.910073][T12685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.090777][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1823'. [ 322.101431][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 322.180753][T12698] 8021q: adding VLAN 0 to HW filter on device bond9 [ 322.249994][T12704] netlink: 'syz.4.1825': attribute type 1 has an invalid length. [ 322.337511][T12704] 8021q: adding VLAN 0 to HW filter on device bond7 [ 322.587744][T12716] netlink: 'syz.3.1827': attribute type 50 has an invalid length. [ 322.608098][T12716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1827'. [ 323.035470][T12735] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1832'. [ 323.208587][T12747] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 323.385654][T12754] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1838'. [ 323.444396][T12762] netlink: 'syz.1.1841': attribute type 22 has an invalid length. [ 323.463195][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 323.573459][T12762] netlink: 'syz.1.1841': attribute type 22 has an invalid length. [ 323.602561][T12762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1841'. [ 323.762553][T12785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1845'. [ 323.901943][T12792] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1847'. [ 323.924508][T12792] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1847'. [ 323.943943][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1847'. [ 324.063788][T12802] netlink: 'syz.2.1848': attribute type 6 has an invalid length. [ 324.216451][T12811] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 324.278867][T12811] netlink: 'syz.1.1851': attribute type 4 has an invalid length. [ 324.339303][T12811] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 324.530016][T12826] bond10: entered promiscuous mode [ 324.535747][T12826] 8021q: adding VLAN 0 to HW filter on device bond10 [ 324.577976][T12826] bond10: (slave bridge3): making interface the new active one [ 324.587628][T12826] bridge3: entered promiscuous mode [ 324.594197][T12826] bond10: (slave bridge3): Enslaving as an active interface with an up link [ 324.675499][T12834] batadv_slave_1: entered promiscuous mode [ 324.688800][T12833] batadv_slave_1: left promiscuous mode [ 324.801444][T12847] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 324.923217][T12857] tipc: Enabling of bearer rejected, failed to enable media [ 325.729103][T12856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.124283][T12912] net_ratelimit: 395 callbacks suppressed [ 326.124303][T12912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.170948][T12914] syzkaller0: entered promiscuous mode [ 326.192144][T12914] syzkaller0: entered allmulticast mode [ 326.244431][T12914] tipc: Enabled bearer , priority 0 [ 326.276665][T12913] tipc: Resetting bearer [ 326.319140][T12913] tipc: Disabling bearer [ 326.624777][T12935] syzkaller0: entered promiscuous mode [ 326.630635][T12935] syzkaller0: entered allmulticast mode [ 326.696773][T12940] netlink: 'syz.3.1883': attribute type 11 has an invalid length. [ 327.147902][T12964] __nla_validate_parse: 9 callbacks suppressed [ 327.147920][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 327.248749][T12972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1888'. [ 327.309549][T12974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1889'. [ 327.601327][T12982] validate_nla: 9 callbacks suppressed [ 327.601344][T12982] netlink: 'syz.0.1892': attribute type 3 has an invalid length. [ 327.615997][T12982] netlink: 'syz.0.1892': attribute type 3 has an invalid length. [ 327.624769][T12982] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1892'. [ 327.635178][T12984] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1893'. [ 327.798779][T12992] macsec1: entered promiscuous mode [ 327.811276][T12992] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 327.819525][ T30] audit: type=1804 audit(1781660809.048:6): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1897" name="/newroot/368/memory.events" dev="tmpfs" ino=1890 res=1 errno=0 [ 327.841965][T12992] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 327.884551][T12998] sctp: [Deprecated]: syz.0.1898 (pid 12998) Use of int in maxseg socket option. [ 327.884551][T12998] Use struct sctp_assoc_value instead [ 327.907278][T12998] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 328.014511][T13004] sctp: [Deprecated]: syz.4.1901 (pid 13004) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.014511][T13004] Use struct sctp_sack_info instead [ 328.068601][T13004] sctp: [Deprecated]: syz.4.1901 (pid 13004) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.068601][T13004] Use struct sctp_sack_info instead [ 328.100746][T13004] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1901'. [ 328.129690][T13009] netlink: 'syz.0.1903': attribute type 2 has an invalid length. [ 328.142120][T13009] netlink: 'syz.0.1903': attribute type 8 has an invalid length. [ 328.154216][T13009] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1903'. [ 328.226113][T13019] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 328.300009][T13009] geneve0: entered promiscuous mode [ 328.329630][T13009] geneve0: left promiscuous mode [ 328.642416][T13032] ipip0: entered promiscuous mode [ 328.776369][T13035] syzkaller1: entered promiscuous mode [ 328.789951][T13035] syzkaller1: entered allmulticast mode [ 328.806238][T13044] netlink: 'syz.4.1911': attribute type 10 has an invalid length. [ 328.894813][T13039] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.904419][T13051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1913'. [ 328.925609][T13039] bond0: left promiscuous mode [ 328.944479][T13039] bond_slave_0: left promiscuous mode [ 328.950295][T13039] bond_slave_1: left promiscuous mode [ 328.963208][T13039] tipc: Resetting bearer [ 328.983176][T13039] batman_adv: batadv0: Interface deactivated: dummy0 [ 329.061178][T13039] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 329.071031][T13039] syzkaller0: left promiscuous mode [ 329.076914][T13039] syzkaller0: left allmulticast mode [ 329.175757][T13039] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 329.200529][T13039] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 329.207659][T13039] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 329.216055][T13039] ip6tnl1: left allmulticast mode [ 329.228810][T13039] team1: left promiscuous mode [ 329.233967][T13039] team1: left allmulticast mode [ 329.240687][T13039] team2: left promiscuous mode [ 329.246747][T13039] team2: left allmulticast mode [ 329.261066][T13039] ip6erspan0: left allmulticast mode [ 329.279473][T13039] vlan2: left allmulticast mode [ 329.284556][T13039] bond5: left allmulticast mode [ 329.289731][T13039] geneve2: left allmulticast mode [ 329.297908][T13039] vxlan0: left promiscuous mode [ 329.304845][T13039] vxlan0: left allmulticast mode [ 329.320647][T13039] syzkaller1: left promiscuous mode [ 329.326269][T13039] syzkaller1: left allmulticast mode [ 329.334350][T13040] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 329.383981][T13051] vlan4: entered promiscuous mode [ 329.391919][T13051] veth1: entered promiscuous mode [ 329.448161][ T3352] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.468593][ T3352] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.484652][ T3352] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.494454][ T3352] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.504048][T13063] netlink: 'syz.3.1917': attribute type 15 has an invalid length. [ 329.513847][ T3352] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 329.529313][T13061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1916'. [ 329.533831][ T3352] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.547627][T13063] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1917'. [ 329.679918][T13067] netlink: 'syz.0.1918': attribute type 20 has an invalid length. [ 329.731651][T13067] bond9: Removing last arp target with arp_interval on [ 329.915378][T13073] tipc: Started in network mode [ 329.926246][T13073] tipc: Node identity 1689edb81379, cluster identity 4711 [ 329.943538][T13073] tipc: Enabled bearer , priority 0 [ 329.961353][T13073] syzkaller0: entered promiscuous mode [ 329.971974][T13073] syzkaller0: entered allmulticast mode [ 330.039415][T13073] tipc: Resetting bearer [ 330.053773][T13072] tipc: Resetting bearer [ 330.095412][T13072] tipc: Disabling bearer [ 331.326613][T13143] netlink: 'syz.3.1939': attribute type 1 has an invalid length. [ 331.528323][T13158] ip6t_rpfilter: unknown options [ 332.718792][T13212] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 332.731716][T13212] bond6 (unregistering): Released all slaves [ 333.122461][T13230] __nla_validate_parse: 6 callbacks suppressed [ 333.122473][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1960'. [ 335.061755][T13201] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.333548][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 335.336771][T13250] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 335.363966][T13250] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1964'. [ 335.381030][T13254] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 335.384250][T13253] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1965'. [ 335.400400][T13253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1965'. [ 335.413672][T13253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1965'. [ 335.423735][T13254] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1962'. [ 335.439241][T13251] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 335.468699][T13253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1965'. [ 335.494094][T13253] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20001 [ 335.551167][T13262] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1967'. [ 335.561861][T13262] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1967'. [ 335.878412][T13271] bond9: entered promiscuous mode [ 335.888412][T13271] 8021q: adding VLAN 0 to HW filter on device bond9 [ 336.175505][T13305] netlink: 'syz.1.1980': attribute type 1 has an invalid length. [ 336.284084][T13305] 8021q: adding VLAN 0 to HW filter on device bond12 [ 336.466123][T13306] syzkaller1: entered promiscuous mode [ 336.483005][T13306] syzkaller1: entered allmulticast mode [ 336.624881][T13323] tipc: Enabled bearer , priority 0 [ 336.637109][T13323] syzkaller0: entered promiscuous mode [ 336.648343][T13323] syzkaller0: entered allmulticast mode [ 336.680123][T13323] batman_adv: batadv0: Interface activated: syzkaller0 [ 336.704579][T13323] tipc: Resetting bearer [ 336.877652][T13334] openvswitch: netlink: IP tunnel dst address not specified [ 336.994123][T13337] syzkaller1: entered promiscuous mode [ 337.029126][T13337] syzkaller1: entered allmulticast mode [ 337.739752][T13366] syzkaller0: entered promiscuous mode [ 337.770090][T13366] syzkaller0: entered allmulticast mode [ 337.793000][T13374] openvswitch: netlink: Multiple metadata blocks provided [ 337.916747][T13377] xt_time: unknown flags 0xf4 [ 338.201931][T13391] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 338.217959][T13391] syzkaller1: linktype set to 780 [ 338.668231][T13416] xt_hashlimit: size too large, truncated to 1048576 [ 338.842396][T13426] bridge4: entered promiscuous mode [ 338.853198][T13426] bridge4: entered allmulticast mode [ 338.862669][T13428] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 338.918161][T13432] netlink: 'syz.3.2019': attribute type 1 has an invalid length. [ 338.947817][T13433] IPVS: set_ctl: invalid protocol: 171 172.20.20.11:21 [ 339.160047][T13432] 8021q: adding VLAN 0 to HW filter on device bond6 [ 339.360009][T13450] netlink: 'syz.2.2023': attribute type 1 has an invalid length. [ 339.393066][T13450] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 339.585693][T13455] IPVS: rr: FWM 3 0x00000003 - no destination available [ 339.607801][T13467] netlink: 'syz.4.2027': attribute type 8 has an invalid length. [ 339.644430][T13463] atomic_op ffff88807e693998 conn xmit_atomic 0000000000000000 [ 339.845018][T13475] __nla_validate_parse: 9 callbacks suppressed [ 339.845037][T13475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'. [ 339.882668][T13477] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 339.976461][T13473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2029'. [ 340.405915][T13504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2039'. [ 340.606387][T13506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 341.423833][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2051'. [ 341.774898][T13568] xfrm0: Caught tx_queue_len zero misconfig [ 341.817772][T13568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2053'. [ 341.866907][T13577] vlan3: entered promiscuous mode [ 341.885387][T13577] bridge0: entered promiscuous mode [ 341.991935][T13585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2058'. [ 342.117318][T13588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2059'. [ 342.164250][T13590] netlink: 'syz.0.2060': attribute type 11 has an invalid length. [ 342.227527][T13599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2062'. [ 342.241929][T13597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2061'. [ 342.367149][T13599] bond7: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 342.389902][T13599] bond7 (unregistering): Released all slaves [ 342.837675][T13635] netlink: 'syz.0.2070': attribute type 89 has an invalid length. [ 343.066280][T13646] netlink: 'syz.4.2072': attribute type 1 has an invalid length. [ 344.007432][T13665] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 344.028033][T13665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.409733][T13677] sctp: [Deprecated]: syz.3.2084 (pid 13677) Use of int in maxseg socket option. [ 344.409733][T13677] Use struct sctp_assoc_value instead [ 346.236983][T13717] syzkaller1: entered promiscuous mode [ 346.242740][T13717] syzkaller1: entered allmulticast mode [ 346.329842][T13722] __nla_validate_parse: 6 callbacks suppressed [ 346.329883][T13722] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2096'. [ 347.404956][T13681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.419185][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2096'. [ 347.825641][T13754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.118464][T13778] FAULT_INJECTION: forcing a failure. [ 348.118464][T13778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.135663][T13778] CPU: 1 UID: 0 PID: 13778 Comm: syz.0.2106 Not tainted syzkaller #0 PREEMPT(full) [ 348.135693][T13778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.135705][T13778] Call Trace: [ 348.135711][T13778] [ 348.135727][T13778] dump_stack_lvl+0xe8/0x150 [ 348.135753][T13778] should_fail_ex+0x40c/0x560 [ 348.135784][T13778] _copy_from_user+0x2d/0xb0 [ 348.135807][T13778] kstrtouint_from_user+0xd6/0x180 [ 348.135836][T13778] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 348.135877][T13778] proc_fail_nth_write+0x8e/0x210 [ 348.135900][T13778] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 348.135931][T13778] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 348.135954][T13778] vfs_write+0x296/0xba0 [ 348.135987][T13778] ? __pfx_vfs_write+0x10/0x10 [ 348.136015][T13778] ? __fget_files+0x2a/0x420 [ 348.136042][T13778] ? __fget_files+0x3a2/0x420 [ 348.136063][T13778] ? __fget_files+0x2a/0x420 [ 348.136093][T13778] ksys_write+0x150/0x270 [ 348.136121][T13778] ? __pfx_ksys_write+0x10/0x10 [ 348.136156][T13778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.136176][T13778] do_syscall_64+0x174/0x580 [ 348.136198][T13778] ? trace_irq_disable+0x3b/0x140 [ 348.136223][T13778] ? clear_bhb_loop+0x40/0x90 [ 348.136245][T13778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.136262][T13778] RIP: 0033:0x7f3e83f5d68e [ 348.136279][T13778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.136293][T13778] RSP: 002b:00007f3e84e0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.136311][T13778] RAX: ffffffffffffffda RBX: 00007f3e84e0f6c0 RCX: 00007f3e83f5d68e [ 348.136324][T13778] RDX: 0000000000000001 RSI: 00007f3e84e0f0a0 RDI: 0000000000000005 [ 348.136335][T13778] RBP: 00007f3e84e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 348.136346][T13778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.136356][T13778] R13: 00007f3e84216038 R14: 00007f3e84215fa0 R15: 00007ffcd6efded8 [ 348.136388][T13778] [ 350.628059][T13746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 350.915794][T13798] netlink: 'syz.3.2113': attribute type 1 has an invalid length. [ 351.256051][T13807] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 351.275868][T13812] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 351.363972][T13819] netlink: 'syz.0.2118': attribute type 3 has an invalid length. [ 351.410495][T13819] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2118'. [ 351.649385][T13826] syzkaller0: entered promiscuous mode [ 351.661394][T13826] syzkaller0: entered allmulticast mode [ 354.524878][T13884] Cannot find del_set index 4 as target [ 355.031509][T13914] netlink: 'syz.1.2146': attribute type 3 has an invalid length. [ 355.050243][T13914] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2146'. [ 355.072352][T13914] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 355.468978][T13922] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2148'. [ 355.615295][T13931] netlink: 'syz.3.2152': attribute type 1 has an invalid length. [ 355.635031][T13931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2152'. [ 355.889308][T13939] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2153'. [ 355.902942][T13946] syzkaller0: entered promiscuous mode [ 355.909172][T13946] syzkaller0: entered allmulticast mode [ 356.297872][T13963] netlink: 308 bytes leftover after parsing attributes in process `syz.0.2159'. [ 356.378144][T13966] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2160'. [ 356.581360][T13973] tipc: Resetting bearer [ 356.614245][T13973] tipc: Resetting bearer [ 356.647816][T13973] tipc: Resetting bearer [ 356.696110][T13960] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 356.795473][T13978] netlink: 'syz.4.2164': attribute type 11 has an invalid length. [ 356.953563][T13984] IPVS: Error joining to the multicast group [ 356.987347][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2166'. [ 357.067926][T13987] netlink: 'syz.3.2166': attribute type 11 has an invalid length. [ 357.218821][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2171'. [ 357.224709][T14001] tunl0: Caught tx_queue_len zero misconfig [ 357.286616][T13999] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2172'. [ 357.346134][T13995] bridge0: port 1(vlan2) entered blocking state [ 357.366602][T13995] bridge0: port 1(vlan2) entered disabled state [ 357.392341][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2173'. [ 357.404060][T13995] vlan2: entered allmulticast mode [ 357.414860][T13995] geneve0: entered allmulticast mode [ 357.422814][T13995] vlan2: entered promiscuous mode [ 357.427884][T13995] geneve0: entered promiscuous mode [ 357.800955][T14018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2177'. [ 358.557690][T14066] netlink: 'syz.0.2188': attribute type 11 has an invalid length. [ 358.566101][T14066] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.2188'. [ 359.208746][T14084] openvswitch: netlink: Message has 8 unknown bytes. [ 359.236007][T14088] FAULT_INJECTION: forcing a failure. [ 359.236007][T14088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.252520][T14084] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 359.276755][T14088] CPU: 1 UID: 0 PID: 14088 Comm: syz.0.2194 Not tainted syzkaller #0 PREEMPT(full) [ 359.276780][T14088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.276790][T14088] Call Trace: [ 359.276797][T14088] [ 359.276805][T14088] dump_stack_lvl+0xe8/0x150 [ 359.276830][T14088] should_fail_ex+0x40c/0x560 [ 359.276862][T14088] _copy_from_user+0x2d/0xb0 [ 359.276883][T14088] ___sys_sendmsg+0x1c6/0x360 [ 359.276902][T14088] ? __lock_acquire+0x683/0x2cd0 [ 359.276932][T14088] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.276984][T14088] ? __fget_files+0x2a/0x420 [ 359.277005][T14088] ? __fget_files+0x3a2/0x420 [ 359.277035][T14088] __x64_sys_sendmsg+0x1bd/0x2a0 [ 359.277057][T14088] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.277085][T14088] ? __pfx_ksys_write+0x10/0x10 [ 359.277117][T14088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.277137][T14088] do_syscall_64+0x174/0x580 [ 359.277157][T14088] ? trace_irq_disable+0x3b/0x140 [ 359.277182][T14088] ? clear_bhb_loop+0x40/0x90 [ 359.277204][T14088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.277221][T14088] RIP: 0033:0x7f3e83f9ce59 [ 359.277238][T14088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.277252][T14088] RSP: 002b:00007f3e84e0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.277272][T14088] RAX: ffffffffffffffda RBX: 00007f3e84215fa0 RCX: 00007f3e83f9ce59 [ 359.277285][T14088] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000004 [ 359.277296][T14088] RBP: 00007f3e84e0f090 R08: 0000000000000000 R09: 0000000000000000 [ 359.277307][T14088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.277317][T14088] R13: 00007f3e84216038 R14: 00007f3e84215fa0 R15: 00007ffcd6efded8 [ 359.277347][T14088] [ 359.539804][T14081] bond10: Unable to set up delay as MII monitoring is disabled [ 359.563457][T14081] bond10 (unregistering): Released all slaves [ 359.664427][T14095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2195'. [ 359.728191][T14095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2195'. [ 359.741963][T14095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2195'. [ 359.755980][T14095] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2195'. [ 359.796324][T14095] ip6gretap0: left promiscuous mode [ 359.809774][T14095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.885260][T14095] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 359.987753][T14081] bond10: Unable to set up delay as MII monitoring is disabled [ 360.008014][T14081] bond10 (unregistering): Released all slaves [ 360.208492][T14100] vlan4: entered promiscuous mode [ 360.222771][T14100] bridge0: entered promiscuous mode [ 360.373573][T14117] netlink: 'syz.2.2198': attribute type 5 has an invalid length. [ 360.523477][T14104] hmó3)ó: entered promiscuous mode [ 360.835065][T14130] syzkaller0: entered allmulticast mode [ 361.304137][T14153] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 361.653702][T14177] netlink: 'syz.2.2215': attribute type 1 has an invalid length. [ 361.802599][T14186] openvswitch: netlink: VXLAN extension message has 141 unknown bytes. [ 362.206522][T14200] __nla_validate_parse: 47 callbacks suppressed [ 362.206556][T14200] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2222'. [ 362.621832][T14221] netlink: 'syz.4.2228': attribute type 1 has an invalid length. [ 362.647714][T14221] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2228'. [ 363.164888][T14249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2233'. [ 363.347565][T14258] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2235'. [ 363.374002][T14258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 364.058189][T14281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2241'. [ 365.656132][T14224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 365.926429][T14292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2244'. [ 365.946141][T14292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2244'. [ 365.982324][T14294] IPv6: NLM_F_REPLACE set, but no existing node found! [ 366.061423][T14292] geneve3: entered promiscuous mode [ 366.075857][T14297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2244'. [ 366.343240][T14314] bond10: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 366.357906][T14314] bond10 (unregistering): Released all slaves [ 366.641111][ T6886] nci: nci_rsp_packet: unknown rsp opcode 0x111 [ 366.690860][T14340] vlan5: entered promiscuous mode [ 366.712047][T14340] 0·: entered promiscuous mode [ 366.723160][T14340] vlan5: entered allmulticast mode [ 366.793822][T14345] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2260'. [ 367.423842][T14369] __nla_validate_parse: 1 callbacks suppressed [ 367.423889][T14369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2265'. [ 367.525026][T14369] 8021q: adding VLAN 0 to HW filter on device bond7 [ 367.893972][T14408] netlink: 'syz.3.2273': attribute type 1 has an invalid length. [ 369.483616][T14333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 369.738267][T14416] syzkaller1: entered promiscuous mode [ 369.757216][T14416] syzkaller1: entered allmulticast mode [ 369.846678][T14423] netlink: 'syz.1.2276': attribute type 2 has an invalid length. [ 369.883586][T14420] syzkaller1: entered promiscuous mode [ 369.903191][T14420] syzkaller1: entered allmulticast mode [ 370.040413][T14423] netlink: 'syz.1.2276': attribute type 11 has an invalid length. [ 370.183506][T14438] netlink: zone id is out of range [ 370.207028][T14438] netlink: zone id is out of range [ 370.236194][T14438] netlink: zone id is out of range [ 370.265458][T14438] netlink: zone id is out of range [ 370.285453][T14438] netlink: zone id is out of range [ 370.296290][T14433] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.303955][T14438] netlink: zone id is out of range [ 370.335031][T14438] netlink: zone id is out of range [ 370.364219][T14438] netlink: zone id is out of range [ 370.402247][T14438] netlink: zone id is out of range [ 370.452909][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2284'. [ 370.528532][T14448] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 370.780773][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2286'. [ 371.307290][T14472] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 372.150941][T14504] bond10: option min_links: invalid value (18446744073709551612) [ 372.163363][T14504] bond10: option min_links: allowed values 0 - 2147483647 [ 372.195778][T14504] bond10 (unregistering): Released all slaves [ 372.294861][T14517] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2303'. [ 372.339731][T14517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2303'. [ 372.533454][T14526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'. [ 372.748574][T14534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2311'. [ 372.784383][T14536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2312'. [ 372.943984][T14543] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 373.007475][T14545] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2311'. [ 373.383393][T14547] wg1: entered allmulticast mode [ 373.421505][ T3265] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.443409][ T3265] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.470012][ T3265] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.488669][ T3265] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.770771][T14568] pim6reg1: entered promiscuous mode [ 373.793385][T14568] pim6reg1: entered allmulticast mode [ 373.843771][T14570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2319'. [ 373.893851][T14570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2319'. [ 374.201542][T14583] xt_hashlimit: size too large, truncated to 1048576 [ 374.255641][T14581] netlink: 'syz.1.2324': attribute type 1 has an invalid length. [ 374.303685][T14581] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2324'. [ 374.867528][T14598] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 374.927283][T14598] bond10 (unregistering): Released all slaves [ 375.067949][T14604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2331'. [ 375.547558][T14625] block nbd3: not configured, cannot reconfigure [ 375.728640][T14633] netlink: 'syz.1.2339': attribute type 30 has an invalid length. [ 375.822973][T14644] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 375.996516][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'. [ 376.184130][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2344'. [ 376.995447][T14682] tap0: tun_chr_ioctl cmd 1074025677 [ 377.020950][T14682] tap0: linktype set to 270 [ 377.045857][T14688] netlink: 'syz.1.2350': attribute type 4 has an invalid length. [ 377.124332][T14684] batadv0: entered promiscuous mode [ 377.170570][T14684] net_ratelimit: 16 callbacks suppressed [ 377.170603][T14684] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 377.309251][T14693] pim6reg99999999: entered allmulticast mode [ 377.758023][T14718] bond10: entered promiscuous mode [ 377.765199][T14722] x_tables: ip_tables: DNAT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 377.961872][T14727] xt_hashlimit: size too large, truncated to 1048576 [ 378.890103][T14765] FAULT_INJECTION: forcing a failure. [ 378.890103][T14765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.925610][T14765] CPU: 1 UID: 0 PID: 14765 Comm: syz.4.2375 Not tainted syzkaller #0 PREEMPT(full) [ 378.925636][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.925650][T14765] Call Trace: [ 378.925664][T14765] [ 378.925672][T14765] dump_stack_lvl+0xe8/0x150 [ 378.925698][T14765] should_fail_ex+0x40c/0x560 [ 378.925731][T14765] _copy_from_user+0x2d/0xb0 [ 378.925753][T14765] kstrtouint_from_user+0xd6/0x180 [ 378.925782][T14765] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 378.925824][T14765] proc_fail_nth_write+0x8e/0x210 [ 378.925848][T14765] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 378.925879][T14765] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 378.925901][T14765] vfs_write+0x296/0xba0 [ 378.925934][T14765] ? __pfx_vfs_write+0x10/0x10 [ 378.925960][T14765] ? __fget_files+0x2a/0x420 [ 378.925986][T14765] ? __fget_files+0x3a2/0x420 [ 378.926006][T14765] ? __fget_files+0x2a/0x420 [ 378.926035][T14765] ksys_write+0x150/0x270 [ 378.926062][T14765] ? __pfx_ksys_write+0x10/0x10 [ 378.926094][T14765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.926114][T14765] do_syscall_64+0x174/0x580 [ 378.926134][T14765] ? trace_irq_disable+0x3b/0x140 [ 378.926166][T14765] ? clear_bhb_loop+0x40/0x90 [ 378.926188][T14765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.926206][T14765] RIP: 0033:0x7f309275d68e [ 378.926223][T14765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.926238][T14765] RSP: 002b:00007f30936e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.926256][T14765] RAX: ffffffffffffffda RBX: 00007f30936e16c0 RCX: 00007f309275d68e [ 378.926270][T14765] RDX: 0000000000000001 RSI: 00007f30936e10a0 RDI: 0000000000000005 [ 378.926281][T14765] RBP: 00007f30936e1090 R08: 0000000000000000 R09: 0000000000000000 [ 378.926291][T14765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.926302][T14765] R13: 00007f3092a16038 R14: 00007f3092a15fa0 R15: 00007ffddae6aaf8 [ 378.926333][T14765] [ 379.381963][T14783] __nla_validate_parse: 9 callbacks suppressed [ 379.388852][T14783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2382'. [ 379.424789][T14777] block nbd0: not configured, cannot reconfigure [ 379.433547][T14782] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 379.989953][T14783] bond14 (unregistering): Released all slaves [ 380.085368][T14800] veth8: entered allmulticast mode [ 380.128758][T14792] gtp0: entered allmulticast mode [ 380.199837][T14801] veth8: entered allmulticast mode [ 380.209518][T14805] nbd: socks must be embedded in a SOCK_ITEM attr [ 380.519893][T14814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2391'. [ 380.750324][T14827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2395'. [ 380.815983][T14822] xt_CT: No such helper "syz0" [ 380.830445][T14828] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2394'. [ 380.944342][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 380.961609][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 380.985092][T14838] netlink: 'syz.0.2397': attribute type 4 has an invalid length. [ 381.038157][T14825] netlink: 'syz.0.2397': attribute type 4 has an invalid length. [ 381.074243][T14818] netlink: 'syz.4.2394': attribute type 21 has an invalid length. [ 381.104757][T14818] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2394'. [ 381.138883][T14844] openvswitch: netlink: IP tunnel dst address not specified [ 381.186275][T14818] netlink: 'syz.4.2394': attribute type 4 has an invalid length. [ 381.222421][T14818] netlink: 'syz.4.2394': attribute type 5 has an invalid length. [ 381.235602][T14818] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2394'. [ 381.323354][T14844] openvswitch: netlink: Missing key (keys=40, expected=80) [ 381.770185][T14865] FAULT_INJECTION: forcing a failure. [ 381.770185][T14865] name failslab, interval 1, probability 0, space 0, times 0 [ 381.784361][T14863] Cannot find del_set index 3 as target [ 381.808735][T14865] CPU: 1 UID: 0 PID: 14865 Comm: syz.1.2404 Not tainted syzkaller #0 PREEMPT(full) [ 381.808758][T14865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.808769][T14865] Call Trace: [ 381.808776][T14865] [ 381.808784][T14865] dump_stack_lvl+0xe8/0x150 [ 381.808810][T14865] should_fail_ex+0x40c/0x560 [ 381.808841][T14865] should_failslab+0xa8/0x100 [ 381.808859][T14865] ? dst_alloc+0x105/0x170 [ 381.808880][T14865] kmem_cache_alloc_noprof+0x87/0x650 [ 381.808910][T14865] dst_alloc+0x105/0x170 [ 381.808936][T14865] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 381.808962][T14865] ? ip_route_output_key_hash_rcu+0x1db1/0x2720 [ 381.808993][T14865] ? ip_route_output_key_hash+0xd8/0x2a0 [ 381.809018][T14865] ip_route_output_key_hash+0x18d/0x2a0 [ 381.809046][T14865] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 381.809086][T14865] ip_route_output_flow+0x2a/0x150 [ 381.809107][T14865] ? security_sk_classify_flow+0x6d/0x150 [ 381.809131][T14865] raw_sendmsg+0x110d/0x1a20 [ 381.809170][T14865] ? __pfx_raw_sendmsg+0x10/0x10 [ 381.809210][T14865] ? aa_sk_perm+0x6d5/0x900 [ 381.809240][T14865] ? __pfx_aa_sk_perm+0x10/0x10 [ 381.809261][T14865] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 381.809291][T14865] ? sock_rps_record_flow+0x19/0x350 [ 381.809317][T14865] ? inet_sendmsg+0x298/0x320 [ 381.809341][T14865] ? __pfx_inet_sendmsg+0x10/0x10 [ 381.809373][T14865] ____sys_sendmsg+0x853/0xa20 [ 381.809402][T14865] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.809428][T14865] ? import_iovec+0x73/0xa0 [ 381.809451][T14865] ___sys_sendmsg+0x2a5/0x360 [ 381.809468][T14865] ? __lock_acquire+0x683/0x2cd0 [ 381.809491][T14865] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.809545][T14865] ? __fget_files+0x2a/0x420 [ 381.809566][T14865] ? __fget_files+0x3a2/0x420 [ 381.809596][T14865] __x64_sys_sendmsg+0x1bd/0x2a0 [ 381.809617][T14865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.809645][T14865] ? __pfx_ksys_write+0x10/0x10 [ 381.809678][T14865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.809697][T14865] do_syscall_64+0x174/0x580 [ 381.809715][T14865] ? trace_irq_disable+0x3b/0x140 [ 381.809740][T14865] ? clear_bhb_loop+0x40/0x90 [ 381.809762][T14865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.809779][T14865] RIP: 0033:0x7f9d9279ce59 [ 381.809795][T14865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.809810][T14865] RSP: 002b:00007f9d935b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.809828][T14865] RAX: ffffffffffffffda RBX: 00007f9d92a15fa0 RCX: 00007f9d9279ce59 [ 381.809841][T14865] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000003 [ 381.809851][T14865] RBP: 00007f9d935b4090 R08: 0000000000000000 R09: 0000000000000000 [ 381.809862][T14865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.809872][T14865] R13: 00007f9d92a16038 R14: 00007f9d92a15fa0 R15: 00007ffd22aeefa8 [ 381.809902][T14865] [ 382.289863][T14880] tap0: tun_chr_ioctl cmd 1074025677 [ 382.295415][T14880] tap0: linktype set to 774 [ 382.329837][T14885] xt_bpf: check failed: parse error [ 382.461343][T14891] netlink: 'syz.2.2410': attribute type 1 has an invalid length. [ 382.589640][T14891] 8021q: adding VLAN 0 to HW filter on device bond10 [ 382.930903][T14907] bond11: entered promiscuous mode [ 382.936291][T14907] bond11: entered allmulticast mode [ 382.942033][T14907] 8021q: adding VLAN 0 to HW filter on device bond11 [ 384.539766][T14994] netlink: 'syz.4.2436': attribute type 10 has an invalid length. [ 384.549099][T14994] syz_tun: entered promiscuous mode [ 384.583375][T14994] bond6: (slave syz_tun): Removing an active aggregator [ 384.594139][T14994] bond6: (slave syz_tun): Releasing backup interface [ 384.615827][T14997] netlink: 41 bytes leftover after parsing attributes in process `syz.4.2436'. [ 384.625200][T14997] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2436'. [ 384.646749][T14997] netlink: 41 bytes leftover after parsing attributes in process `syz.4.2436'. [ 384.681185][T14998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2435'. [ 385.227978][T15016] vlan7: entered promiscuous mode [ 385.240321][T15016] gretap0: entered promiscuous mode [ 385.698646][T15028] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2448'. [ 386.099288][T15051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2453'. [ 386.143649][T15051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2453'. [ 386.162822][T15051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2453'. [ 386.197161][T15051] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2453'. [ 386.241329][T15062] netlink: 'syz.1.2457': attribute type 1 has an invalid length. [ 386.285640][T15063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2457'. [ 386.356094][T15063] ip6gre1: entered promiscuous mode [ 386.379379][T15063] ip6gre1: entered allmulticast mode [ 386.399436][T15057] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 386.449246][T15057] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 386.487183][ T6886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.504671][T15057] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 386.516485][ T5857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.528221][ T6886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 386.554025][T15071] tipc: Enabled bearer , priority 0 [ 386.586092][T15073] syzkaller0: entered promiscuous mode [ 386.596408][T15073] syzkaller0: entered allmulticast mode [ 386.649083][T15071] tipc: Resetting bearer [ 386.671708][T15068] tipc: Resetting bearer [ 386.751077][T15082] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 386.752765][T15068] tipc: Disabling bearer [ 386.771793][T15082] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 386.822418][T15080] ip6tnl0: Caught tx_queue_len zero misconfig [ 386.876417][T15083] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 386.972407][T15090] veth1_to_batadv: entered promiscuous mode [ 387.003177][T15090] veth1_to_batadv: entered allmulticast mode [ 387.453258][ T5857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.463759][T15109] netlink: 'syz.0.2466': attribute type 1 has an invalid length. [ 387.536901][ T5857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.567180][T15109] 8021q: adding VLAN 0 to HW filter on device bond12 [ 387.630145][T15118] netlink: 'syz.4.2469': attribute type 1 has an invalid length. [ 388.067471][T15138] syzkaller1: entered promiscuous mode [ 388.082194][T15138] syzkaller1: entered allmulticast mode [ 388.289659][T15145] bond13: entered allmulticast mode [ 388.309506][T15145] ip6gretap1: entered allmulticast mode [ 388.315771][T15145] bond13: (slave ip6gretap1): Enslaving as an active interface with an up link [ 388.832441][T15173] netlink: 'syz.3.2485': attribute type 7 has an invalid length. [ 388.851119][T15173] netlink: 'syz.3.2485': attribute type 8 has an invalid length. [ 388.876593][T15173] netlink: zone id is out of range [ 388.892784][T15173] netlink: zone id is out of range [ 388.912052][T15173] netlink: zone id is out of range [ 388.922059][T15173] netlink: zone id is out of range [ 388.932222][T15173] netlink: zone id is out of range [ 388.948041][T15173] netlink: zone id is out of range [ 388.968494][T15173] netlink: zone id is out of range [ 388.991459][T15173] netlink: zone id is out of range [ 389.012125][T15181] netlink: 'syz.1.2486': attribute type 21 has an invalid length. [ 389.042372][T15181] netlink: 'syz.1.2486': attribute type 21 has an invalid length. [ 389.463891][T15194] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 389.509047][T15194] batman_adv: batadv0: Removing interface: syzkaller0 [ 389.758782][T15194] batman_adv: batadv0: Removing interface: dummy0 [ 389.844466][T15206] __nla_validate_parse: 12 callbacks suppressed [ 389.844502][T15206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2491'. [ 390.016922][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'. [ 390.048367][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2492'. [ 390.135844][T15200] syz_tun: left promiscuous mode [ 390.151776][T15200] 8021q: adding VLAN 0 to HW filter on device .` [ 390.160514][T15200] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.174309][T15200] batadv0: left promiscuous mode [ 390.180115][T15200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.227469][T15200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.238031][T15200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.254586][T15200] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 390.265670][T15200] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.562637][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.569851][ T6880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.779344][T15229] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2495'. [ 390.803652][T15229] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2495'. [ 390.870685][T15229] netlink: 'syz.0.2495': attribute type 22 has an invalid length. [ 390.892285][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 391.230677][T15245] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2500'. [ 391.369132][T15253] syzkaller1: entered allmulticast mode [ 391.390393][T15257] netlink: 'syz.4.2504': attribute type 1 has an invalid length. [ 391.535609][T15257] bond9: entered promiscuous mode [ 391.579060][T15257] 8021q: adding VLAN 0 to HW filter on device bond9 [ 392.185841][T15293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'. [ 392.990959][T15307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2518'. [ 393.003943][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'. [ 393.362771][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2522'. [ 393.438321][T15321] bond9: entered promiscuous mode [ 393.446470][T15321] bond9: entered allmulticast mode [ 393.776011][T15343] netlink: 'syz.0.2529': attribute type 10 has an invalid length. [ 393.871350][T15349] netlink: 'syz.3.2531': attribute type 1 has an invalid length. [ 393.996213][T15351] tap0: tun_chr_ioctl cmd 2148553947 [ 394.404295][T15366] netlink: 'syz.1.2538': attribute type 1 has an invalid length. [ 394.428188][T15366] net_ratelimit: 395 callbacks suppressed [ 394.428206][T15366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.938151][T15387] __nla_validate_parse: 7 callbacks suppressed [ 394.938170][T15387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2546'. [ 395.027337][T15387] netlink: 'syz.3.2546': attribute type 1 has an invalid length. [ 395.064564][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2546'. [ 395.323986][T15401] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2550'. [ 395.786837][T15421] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2554'. [ 395.973704][T15431] IPVS: ip_vs_edit_dest(): server weight less than zero [ 396.017803][T15431] netlink: 'syz.2.2558': attribute type 10 has an invalid length. [ 396.068188][T15437] xt_CONNSECMARK: invalid mode: 254 [ 396.251621][T15446] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2562'. [ 396.454366][T15413] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 396.636575][T15465] geneve3: entered promiscuous mode [ 396.658693][ T6880] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 40279 - 0 [ 396.677259][ T6880] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 40279 - 0 [ 396.758817][ T6880] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 40279 - 0 [ 396.773448][ T6880] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 40279 - 0 [ 396.786822][T15489] bridge_slave_1: left allmulticast mode [ 396.800162][T15489] bridge_slave_1: left promiscuous mode [ 396.813313][T15489] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.839874][T15489] bond0: (slave bond_slave_0): Releasing backup interface [ 396.875254][T15489] bond0: (slave bond_slave_1): Releasing backup interface [ 396.886700][T15489] team0: Port device team_slave_0 removed [ 396.890881][T15497] netlink: 'syz.0.2578': attribute type 1 has an invalid length. [ 396.901625][T15489] team0: Port device team_slave_1 removed [ 396.907792][T15489] tipc: Resetting bearer [ 396.914665][T15489] bond5: (slave geneve2): Releasing active interface [ 396.924012][T15489] bond6: (slave bond7): Releasing backup interface [ 396.930960][T15489] bond6: (slave bond7): the permanent HWaddr of slave - 1e:f6:ea:e0:f2:fe - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 396.949395][T15489] bond6: (slave gretap1): making interface the new active one [ 396.958748][T15489] bond6: (slave gretap1): Releasing backup interface [ 397.024583][T15502] bond14: (slave veth7): Enslaving as an active interface with a down link [ 397.039384][T15489] team0: Failed to send options change via netlink (err -105) [ 397.048210][T15489] team0: Mode changed to "activebackup" [ 397.061184][T15497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2578'. [ 397.065398][T15505] bond14: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 397.117629][T15491] syzkaller0: entered promiscuous mode [ 397.123386][T15491] syzkaller0: entered allmulticast mode [ 397.235326][T15511] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 397.298707][T15511] syzkaller0: entered promiscuous mode [ 397.312130][T15511] syzkaller0: entered allmulticast mode [ 397.332916][T15520] ip_vti0: entered promiscuous mode [ 397.338814][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'. [ 397.610805][T15538] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2590'. [ 397.650874][T15538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2590'. [ 397.692847][T15538] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2590'. [ 397.771649][T15549] netlink: 'syz.4.2592': attribute type 12 has an invalid length. [ 397.837923][T15549] bond10: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 397.858076][T15549] bond10 (unregistering): Released all slaves [ 398.551172][T15584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.855024][T15592] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 398.899128][T15594] netlink: 'syz.3.2603': attribute type 21 has an invalid length. [ 398.928522][T15594] netlink: 'syz.3.2603': attribute type 5 has an invalid length. [ 398.938374][T15594] netlink: 'syz.3.2603': attribute type 6 has an invalid length. [ 398.973493][ T5643] Bluetooth: hci4: link tx timeout [ 398.982374][ T5643] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 400.158420][T15658] netlink: 'syz.0.2617': attribute type 1 has an invalid length. [ 400.172230][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 400.256223][T15658] 8021q: adding VLAN 0 to HW filter on device bond15 [ 400.352992][T15665] bond15: entered allmulticast mode [ 400.455724][T15664] __nla_validate_parse: 6 callbacks suppressed [ 400.455744][T15664] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2618'. [ 400.606574][T15660] syzkaller0: entered promiscuous mode [ 400.615386][T15660] syzkaller0: entered allmulticast mode [ 401.062654][ T5631] Bluetooth: hci4: command 0x0405 tx timeout [ 402.460417][T15691] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 402.666441][T15734] IPVS: Unknown mcast interface: vcan0 [ 402.685105][T15734] netlink: 'syz.4.2632': attribute type 1 has an invalid length. [ 402.801526][T15734] 8021q: adding VLAN 0 to HW filter on device bond10 [ 402.834296][T15740] bond10: (slave geneve4): making interface the new active one [ 402.845691][T15740] bond10: (slave geneve4): Enslaving as an active interface with an up link [ 403.014183][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'. [ 403.075499][T15758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2639'. [ 403.320885][T15782] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2645'. [ 403.366523][T15782] ipvlan2: entered allmulticast mode [ 403.376796][T15782] gretap0: entered allmulticast mode [ 403.474266][T15731] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 403.601202][T15792] tipc: Resetting bearer [ 403.670081][T15793] dvmrp8: entered allmulticast mode [ 403.761334][T15805] netlink: 'syz.2.2650': attribute type 1 has an invalid length. [ 403.808666][T15805] bond11: entered promiscuous mode [ 403.815397][T15805] 8021q: adding VLAN 0 to HW filter on device bond11 [ 404.101388][T15821] netlink: 'syz.1.2654': attribute type 89 has an invalid length. [ 404.429190][T15848] xt_hashlimit: size too large, truncated to 1048576 [ 404.970124][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2659'. [ 405.009380][T15843] –: renamed from dummy0 (while UP) [ 405.250213][T15884] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 405.281230][T15879] bond12 (unregistering): Released all slaves [ 405.347676][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2669'. [ 405.511116][T15896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.550076][T15900] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2672'. [ 405.618825][T15907] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 405.791131][T15896] syzkaller0: left promiscuous mode [ 405.798434][T15896] syzkaller0: left allmulticast mode [ 405.804452][T15896] tipc: Resetting bearer [ 406.189648][T15940] gtp1: entered allmulticast mode [ 408.511223][T15901] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 408.681641][T15961] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2687'. [ 408.867069][T15975] netlink: 'syz.4.2690': attribute type 8 has an invalid length. [ 408.901051][T15975] netlink: 'syz.4.2690': attribute type 4 has an invalid length. [ 409.161633][T15992] xt_hashlimit: size too large, truncated to 1048576 [ 409.666486][T16005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2700'. [ 409.762412][T16010] netlink: 'syz.2.2702': attribute type 1 has an invalid length. [ 409.771176][T16010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2702'. [ 410.460153][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880852f0800: rx timeout, send abort [ 410.472275][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880852f0800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 410.634808][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802a223000: rx timeout, send abort [ 411.138854][T16062] syzkaller0: entered promiscuous mode [ 411.144447][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802a223000: abort rx timeout. Force session deactivation [ 411.160261][T16062] syzkaller0: entered allmulticast mode [ 411.185611][T16062] tipc: Resetting bearer [ 411.205937][T16063] veth0: entered promiscuous mode [ 411.218559][T16068] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2722'. [ 411.281768][T16062] veth0: left promiscuous mode [ 411.367452][T16075] netlink: 'syz.4.2725': attribute type 5 has an invalid length. [ 411.460288][T16083] bridge0: entered allmulticast mode [ 411.472466][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2730'. [ 411.577400][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2728'. [ 411.606311][T16091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2728'. [ 411.622791][T16095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2732'. [ 411.644084][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2728'. [ 411.667487][T16091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2728'. [ 411.716133][T16102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2734'. [ 412.091406][T16115] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2737'. [ 412.682636][T16136] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2744'. [ 412.874681][T16147] syzkaller0: entered promiscuous mode [ 412.892194][T16147] syzkaller0: entered allmulticast mode [ 412.925147][T16154] vti0: entered promiscuous mode [ 412.990961][T16153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.341125][T16182] syzkaller1: entered promiscuous mode [ 413.349949][T16182] syzkaller1: entered allmulticast mode [ 415.345943][T16189] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 415.355641][T16189] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 415.376069][T16189] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 415.468478][T16210] bridge9: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 415.737248][T16238] netlink: 'syz.4.2774': attribute type 1 has an invalid length. [ 415.830790][T16245] tun0: tun_chr_ioctl cmd 1074025680 [ 415.899028][T16251] 8021q: adding VLAN 0 to HW filter on device bond11 [ 415.966218][T16258] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 415.976768][T16258] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 415.985699][T16258] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 416.005267][T16260] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 416.647744][T16264] sctp: [Deprecated]: syz.2.2781 (pid 16264) Use of int in max_burst socket option. [ 416.647744][T16264] Use struct sctp_assoc_value instead [ 417.031286][T16285] __nla_validate_parse: 12 callbacks suppressed [ 417.031305][T16285] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2786'. [ 417.136432][T16291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2784'. [ 417.170711][T16285] gretap0: entered promiscuous mode [ 417.189713][T16294] netlink: 'syz.1.2787': attribute type 1 has an invalid length. [ 417.202256][T16294] netlink: 'syz.1.2787': attribute type 1 has an invalid length. [ 417.251102][T16290] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2786'. [ 417.285742][T16290] 0ªî{X¹¦: renamed from gretap0 [ 417.322636][T16290] 0ªî{X¹¦: left promiscuous mode [ 417.328067][T16290] 0ªî{X¹¦: entered allmulticast mode [ 417.350395][T16290] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 417.452211][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 418.428209][T16343] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2798'. [ 418.652672][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2801'. [ 418.701327][T16354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2802'. [ 418.880123][T16358] tipc: Enabling of bearer rejected, already enabled [ 418.916328][T16358] tipc: Resetting bearer [ 418.944581][T16358] syzkaller0: left promiscuous mode [ 419.025926][T16358] tipc: Resetting bearer [ 419.118446][T16366] netlink: 'syz.0.2806': attribute type 1 has an invalid length. [ 419.136536][T16366] netlink: 'syz.0.2806': attribute type 4 has an invalid length. [ 419.145155][T16366] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2806'. [ 419.336576][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 419.356838][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 419.366402][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 419.379595][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 419.390258][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 419.394910][T16386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2811'. [ 419.451332][T16386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2811'. [ 419.510830][T16386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2811'. [ 419.957475][T16401] team1: entered promiscuous mode [ 419.967882][T16401] team1: entered allmulticast mode [ 419.986885][T16401] 8021q: adding VLAN 0 to HW filter on device team1 [ 420.090931][T16402] team2: entered promiscuous mode [ 420.101659][T16402] team2: entered allmulticast mode [ 420.107783][T16402] 8021q: adding VLAN 0 to HW filter on device team2 [ 420.420287][T16419] netlink: 'syz.0.2819': attribute type 4 has an invalid length. [ 420.493808][ T5634] Bluetooth: hci4: command 0x0405 tx timeout [ 420.879387][T16445] tipc: New replicast peer: 255.255.255.255 [ 420.886398][T16445] tipc: Enabled bearer , priority 5 [ 420.961849][T16381] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.978408][T16381] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.998245][T16381] bridge_slave_0: entered allmulticast mode [ 421.015310][T16381] bridge_slave_0: entered promiscuous mode [ 421.038797][T16381] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.058110][T16381] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.074264][T16381] bridge_slave_1: entered allmulticast mode [ 421.094637][T16381] bridge_slave_1: entered promiscuous mode [ 421.200470][T16381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.227186][T16381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.294578][T16472] netlink: 'syz.2.2830': attribute type 8 has an invalid length. [ 421.324494][T16381] team0: Port device team_slave_0 added [ 421.359982][T16472] geneve4: entered promiscuous mode [ 421.371622][T16472] geneve4: entered allmulticast mode [ 421.389953][T16381] team0: Port device team_slave_1 added [ 421.407735][ T6881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.420946][ T6881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.453027][ T5643] Bluetooth: hci5: command tx timeout [ 421.479319][ T6881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.547527][T16381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.572445][T16381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.635444][T16486] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 421.636706][T16381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.675554][T16381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.692279][T16381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.760884][T16381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.974929][T16381] hsr_slave_0: entered promiscuous mode [ 421.988985][T16381] hsr_slave_1: entered promiscuous mode [ 422.099178][T16506] ip6gre1: entered allmulticast mode [ 422.277140][T16516] __nla_validate_parse: 9 callbacks suppressed [ 422.277160][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2843'. [ 422.315059][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2843'. [ 422.381898][T16381] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 40279 - 0 [ 422.428349][T16524] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 422.464819][T16531] netlink: 'syz.0.2848': attribute type 1 has an invalid length. [ 422.525761][T16531] bond16: entered promiscuous mode [ 422.531349][T16531] 8021q: adding VLAN 0 to HW filter on device bond16 [ 422.585815][T16531] 8021q: adding VLAN 0 to HW filter on device bond16 [ 422.593233][T16531] bond16: (slave gre2): The slave device specified does not support setting the MAC address [ 422.603915][T16531] bond16: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 422.614058][T16543] netlink: 'syz.4.2851': attribute type 39 has an invalid length. [ 422.623113][T16531] bond16: (slave gre2): making interface the new active one [ 422.630668][T16531] gre2: entered promiscuous mode [ 422.637206][T16531] bond16: (slave gre2): Enslaving as an active interface with an up link [ 422.648760][T16381] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 40279 - 0 [ 422.666969][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2851'. [ 422.695057][T16535] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2851'. [ 422.721268][T16381] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 40279 - 0 [ 422.776763][T16547] netlink: 'syz.0.2853': attribute type 32 has an invalid length. [ 422.786705][T16547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2853'. [ 422.823741][T16547] bond17: option coupled_control: invalid value (12) [ 422.834083][T16547] bond17 (unregistering): Released all slaves [ 422.896810][T16381] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 40279 - 0 [ 422.942766][T16553] lo speed is unknown, defaulting to 1000 [ 422.951114][T16553] lo speed is unknown, defaulting to 1000 [ 422.953753][T16555] syzkaller0: entered promiscuous mode [ 422.968092][T16555] syzkaller0: entered allmulticast mode [ 422.976880][T16556] siw: device registration error -23 [ 422.980197][T16553] lo speed is unknown, defaulting to 1000 [ 422.991502][T16553] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 423.021884][T16553] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 423.040203][T16553] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 423.090015][T16553] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 423.156814][T16553] lo speed is unknown, defaulting to 1000 [ 423.175147][T16553] lo speed is unknown, defaulting to 1000 [ 423.184996][T16553] lo speed is unknown, defaulting to 1000 [ 423.275057][T16553] lo speed is unknown, defaulting to 1000 [ 423.338909][T16553] lo speed is unknown, defaulting to 1000 [ 423.357241][T16553] lo speed is unknown, defaulting to 1000 [ 423.532893][ T5643] Bluetooth: hci5: command tx timeout [ 423.548881][T16381] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 423.550812][T16581] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2863'. [ 423.573601][T16381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 423.581907][T16381] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 423.613724][T16381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.708069][T16381] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 423.748749][T16381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.759790][T16587] netlink: 'syz.0.2864': attribute type 10 has an invalid length. [ 423.786214][T16587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2864'. [ 423.791105][T16381] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 423.848001][T16381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.865903][T16590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2865'. [ 424.030039][T16590] bond12 (unregistering): Released all slaves [ 424.101153][T16609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2868'. [ 424.215940][T16381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.293893][T16617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2872'. [ 424.305463][T16381] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.437742][ T6880] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.444929][ T6880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.531395][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.538621][ T6880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.645435][T16633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.968435][T16653] xt_policy: output policy not valid in PREROUTING and INPUT [ 425.206423][T16672] macvlan1: entered allmulticast mode [ 425.224621][T16672] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 425.530284][T16381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.577281][T16694] syzkaller1: entered promiscuous mode [ 425.584816][T16694] syzkaller1: entered allmulticast mode [ 425.613954][ T5643] Bluetooth: hci5: command tx timeout [ 425.682537][T16381] veth0_vlan: entered promiscuous mode [ 425.713732][T16381] veth1_vlan: entered promiscuous mode [ 425.787971][T16381] veth0_macvtap: entered promiscuous mode [ 425.818052][T16381] veth1_macvtap: entered promiscuous mode [ 425.890647][T16381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.953551][T16381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.991224][ T6884] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.008801][ T6884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.037774][ T6884] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.048212][ T6884] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.304609][ T6880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.328982][ T6880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.350667][T16705] syzkaller0: entered promiscuous mode [ 426.360773][T16705] syzkaller0: entered allmulticast mode [ 426.392297][T16710] geneve5: entered promiscuous mode [ 426.397530][T16710] geneve5: entered allmulticast mode [ 426.484753][ T6886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.485057][ T6880] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20003 - 0 [ 426.502819][ T6886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.527389][ T6880] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20003 - 0 [ 426.575828][ T6880] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0 [ 427.003623][T16738] netlink: 'syz.3.2902': attribute type 12 has an invalid length. [ 427.250162][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.265536][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.278366][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.286756][T16754] __nla_validate_parse: 8 callbacks suppressed [ 427.286771][T16754] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2906'. [ 427.287499][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.313137][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.433558][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2907'. [ 427.668940][T16775] sctp: [Deprecated]: syz.0.2910 (pid 16775) Use of int in max_burst socket option deprecated. [ 427.668940][T16775] Use struct sctp_assoc_value instead [ 427.693603][ T5634] Bluetooth: hci5: command tx timeout [ 428.044365][T16750] lo speed is unknown, defaulting to 1000 [ 428.737254][ T6880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.749823][ T6880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 428.803045][T16822] netlink: 'syz.0.2919': attribute type 10 has an invalid length. [ 428.835091][T16822] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2919'. [ 428.948410][T16750] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.981821][T16750] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.024167][T16750] bridge_slave_0: entered allmulticast mode [ 429.051024][T16750] bridge_slave_0: entered promiscuous mode [ 429.115008][T16829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'. [ 429.139463][T16750] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.162844][T16750] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.170345][T16750] bridge_slave_1: entered allmulticast mode [ 429.179628][T16750] bridge_slave_1: entered promiscuous mode [ 429.307143][ T6880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.343015][ T6880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 429.372494][ T5634] Bluetooth: hci1: command tx timeout [ 429.471116][T16750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.495279][T16750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.545581][T16855] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 429.673503][ T6880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.719449][ T6880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20003 - 0 [ 429.753022][T16871] netlink: 'syz.1.2929': attribute type 1 has an invalid length. [ 429.780310][T16750] team0: Port device team_slave_0 added [ 429.866160][T16871] 8021q: adding VLAN 0 to HW filter on device bond15 [ 429.894889][T16750] team0: Port device team_slave_1 added [ 429.919277][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2935'. [ 429.956417][T16865] bond15: (slave veth1): Enslaving as an active interface with a down link [ 430.047681][T16871] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 430.058336][T16871] bond15: (slave batadv1): making interface the new active one [ 430.067194][T16871] batadv1: entered promiscuous mode [ 430.072879][T16871] bond15: (slave batadv1): Enslaving as an active interface with an up link [ 430.092448][T16889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2937'. [ 430.155148][T16750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.163891][T16750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.201470][T16750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.243493][T16750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.250982][T16750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.279692][T16750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.420278][T16750] hsr_slave_0: entered promiscuous mode [ 430.420330][T16903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2941'. [ 430.427855][T16750] hsr_slave_1: entered promiscuous mode [ 430.445739][T16750] debugfs: 'hsr0' already exists in 'hsr' [ 430.451594][T16750] Cannot create hsr debugfs directory [ 430.510533][T16906] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2943'. [ 430.565459][T16905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2943'. [ 430.581381][T16909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2943'. [ 430.950895][ T6880] pim6reg99999999: left allmulticast mode [ 430.962515][ T6880] lo: left allmulticast mode [ 431.452311][ T5634] Bluetooth: hci1: command tx timeout [ 431.465258][ T6880] bond0 (unregistering): Released all slaves [ 431.493473][ T6880] bond1 (unregistering): Released all slaves [ 431.521685][ T6880] bond2 (unregistering): Released all slaves [ 431.550658][ T6880] bond3 (unregistering): Released all slaves [ 431.577270][ T6880] bond4 (unregistering): Released all slaves [ 431.608279][ T6880] bond5 (unregistering): Released all slaves [ 431.633922][ T6880] bond6 (unregistering): Released all slaves [ 431.656418][ T6880] bond7 (unregistering): Released all slaves [ 431.680347][ T6880] bond8 (unregistering): Released all slaves [ 431.698391][ T6880] bond9 (unregistering): Released all slaves [ 431.713994][ T6880] bond10 (unregistering): Released all slaves [ 431.729142][ T6880] bond11 (unregistering): Released all slaves [ 432.100749][ T6880] tipc: Disabling bearer [ 432.124042][ T6880] tipc: Disabling bearer [ 432.154486][ T6880] tipc: Disabling bearer [ 432.178072][T16965] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 432.191505][ T6880] tipc: Left network mode [ 432.235431][T16967] Unsupported ieee802154 address type: 0 [ 432.246251][T16969] unsupported nla_type 216 [ 432.857530][T17005] __nla_validate_parse: 5 callbacks suppressed [ 432.857546][T17005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2963'. [ 432.920235][T17010] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 432.970324][T17007] netlink: 'syz.4.2962': attribute type 23 has an invalid length. [ 432.978547][T17010] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 433.532588][ T5634] Bluetooth: hci1: command tx timeout [ 433.679650][T17028] lo speed is unknown, defaulting to 1000 [ 434.308479][T17056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2970'. [ 434.378244][T16750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 434.428107][T16750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 434.450919][T16750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 434.475041][T16750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 434.520591][T16750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 434.570071][T16750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 434.676090][T16750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 434.704382][T16750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 434.749906][T17075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2973'. [ 435.077278][T17093] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 435.150878][T17094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2977'. [ 435.202522][ T6884] smbdirect: ib_dev[syz2] removed [ 435.217941][T17093] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2977'. [ 435.243644][T17093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2977'. [ 435.277485][T16750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.310056][T16750] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.337936][T17097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.359793][T17097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.400774][ T6887] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.408002][ T6887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.431732][ T6887] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.438916][ T6887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.449700][T17099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 435.595160][T17101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2980'. [ 435.622402][ T5634] Bluetooth: hci1: command tx timeout [ 435.809311][ T6880] IPVS: stop unused estimator thread 0... [ 435.818046][T17113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2983'. [ 435.961782][T17119] xt_hashlimit: size too large, truncated to 1048576 [ 436.258341][T17133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2987'. [ 436.269386][T17133] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2987'. [ 436.475694][T16750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.746281][T16750] veth0_vlan: entered promiscuous mode [ 436.797711][T16750] veth1_vlan: entered promiscuous mode [ 436.915625][T17168] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 437.018487][T16750] veth0_macvtap: entered promiscuous mode [ 437.075735][T16750] veth1_macvtap: entered promiscuous mode [ 437.166418][T16750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.260124][T16750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.300027][ T6884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.331711][ T6884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.364425][ T6884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.398011][ T6884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.721017][T17190] bond17: option miimon: invalid value (18446744073709551607) [ 437.734157][T17190] bond17: option miimon: allowed values 0 - 2147483647 [ 437.750316][T17190] bond17 (unregistering): Released all slaves [ 437.838146][ T5634] block nbd1: Receive control failed (result -32) [ 438.253636][ T6881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.295939][ T6881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.375834][ T6886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.395304][T17242] netlink: 'syz.4.3008': attribute type 1 has an invalid length. [ 438.397317][ T6886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.428820][T17242] __nla_validate_parse: 5 callbacks suppressed [ 438.428835][T17242] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3008'. [ 438.453991][T17242] netlink: 658 bytes leftover after parsing attributes in process `syz.4.3008'. [ 438.485377][T17242] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3008'. [ 438.571070][T17249] tipc: Enabled bearer , priority 0 [ 438.665961][T17249] syzkaller0: entered promiscuous mode [ 438.681753][T17249] syzkaller0: entered allmulticast mode [ 438.701502][T17252] tipc: Resetting bearer [ 438.765720][T17252] tipc: Disabling bearer [ 438.859953][T17260] syzkaller1: entered allmulticast mode [ 438.953014][T17279] xt_recent: Unsupported userspace flags (000000b1) [ 439.069612][T17279] veth1_to_batadv: entered promiscuous mode [ 439.079619][T17281] xt_hashlimit: size too large, truncated to 1048576 [ 439.094791][T17284] netlink: 'syz.2.3018': attribute type 1 has an invalid length. [ 439.099163][T17279] veth1_to_batadv: entered allmulticast mode [ 439.139915][T17284] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3018'. [ 439.220104][T17295] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3019'. [ 439.446696][T17287] netlink: 'syz.3.3017': attribute type 13 has an invalid length. [ 439.528744][T17305] netlink: 'syz.4.3022': attribute type 1 has an invalid length. [ 439.566955][T17305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.611755][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.626233][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 439.635545][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 439.644580][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 439.653490][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.861008][T17319] netlink: 'syz.4.3025': attribute type 1 has an invalid length. [ 440.042701][T17332] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3025'. [ 440.369137][T17347] bridge_slave_0: left allmulticast mode [ 440.399081][T17347] bridge_slave_0: left promiscuous mode [ 440.424936][T17347] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.468294][T17347] bridge_slave_1: left allmulticast mode [ 440.548348][T17347] bridge_slave_1: left promiscuous mode [ 440.554675][T17347] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.576532][T17347] bond0: (slave bond_slave_0): Releasing backup interface [ 440.607587][T17347] bond0: (slave bond_slave_1): Releasing backup interface [ 440.642501][T17347] team0: Port device team_slave_0 removed [ 440.672329][T17347] team0: Port device team_slave_1 removed [ 440.685309][T17347] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.693412][T17347] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.703593][T17347] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 440.757179][T17353] team0: Port device xfrm0 added [ 440.763903][T17355] tipc: Started in network mode [ 440.772714][T17355] tipc: Node identity da401c4920ac, cluster identity 4711 [ 440.797478][T17355] tipc: Enabled bearer , priority 0 [ 441.043203][T17367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3035'. [ 441.278209][T17384] netlink: 'syz.3.3038': attribute type 29 has an invalid length. [ 441.336397][T17384] netlink: 'syz.3.3038': attribute type 29 has an invalid length. [ 441.409547][T17395] netlink: 'syz.2.3042': attribute type 2 has an invalid length. [ 441.431940][ T6875] batadv1: left promiscuous mode [ 441.444158][T17387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.456538][T17395] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3042'. [ 441.489571][T17401] netlink: 'syz.3.3041': attribute type 1 has an invalid length. [ 441.514304][T17395] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3042'. [ 441.531730][T17401] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3041'. [ 441.694387][ T5634] Bluetooth: hci3: command tx timeout [ 441.819071][T17309] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.847492][T17309] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.870746][T17309] bridge_slave_0: entered allmulticast mode [ 441.893015][T17309] bridge_slave_0: entered promiscuous mode [ 441.918702][ T5857] tipc: Node number set to 4209777737 [ 441.927310][T17431] netlink: 'syz.2.3049': attribute type 1 has an invalid length. [ 441.937668][T17309] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.958961][T17309] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.978130][T17309] bridge_slave_1: entered allmulticast mode [ 441.995846][T17309] bridge_slave_1: entered promiscuous mode [ 442.037902][T17309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.050572][T17309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.119543][T17309] team0: Port device team_slave_0 added [ 442.134692][T17309] team0: Port device team_slave_1 added [ 442.192492][T17309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.199492][T17309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.228150][T17309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.261815][T17309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.269287][T17309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.310010][T17309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.496901][T17309] hsr_slave_0: entered promiscuous mode [ 442.519044][T17309] hsr_slave_1: entered promiscuous mode [ 442.534792][T17309] debugfs: 'hsr0' already exists in 'hsr' [ 442.554175][T17309] Cannot create hsr debugfs directory [ 443.537143][T17517] __nla_validate_parse: 70 callbacks suppressed [ 443.537163][T17517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3071'. [ 443.629607][T17519] syzkaller1: entered promiscuous mode [ 443.638596][T17519] syzkaller1: entered allmulticast mode [ 443.789897][ T5634] Bluetooth: hci3: command tx timeout [ 443.842867][T17523] bond2: entered promiscuous mode [ 443.848080][T17523] bond2: entered allmulticast mode [ 443.853673][T17523] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.861708][T17525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3073'. [ 443.870904][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3073'. [ 443.880070][T17525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3073'. [ 443.910370][T17523] netlink: zone id is out of range [ 443.946092][T17523] netlink: zone id is out of range [ 443.968652][T17523] netlink: zone id is out of range [ 443.992186][T17529] validate_nla: 2 callbacks suppressed [ 443.992203][T17529] netlink: 'syz.1.3075': attribute type 30 has an invalid length. [ 443.997265][T17523] netlink: zone id is out of range [ 444.017226][T17523] netlink: zone id is out of range [ 444.022556][T17523] netlink: zone id is out of range [ 444.027744][T17523] netlink: zone id is out of range [ 444.033318][T17523] netlink: zone id is out of range [ 444.200172][T17309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.211176][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.219694][T17309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.239965][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.319944][T17535] bond16: option min_links: invalid value (18446744073709551612) [ 444.336587][T17535] bond16: option min_links: allowed values 0 - 2147483647 [ 444.489266][T17535] bond16 (unregistering): Released all slaves [ 444.659052][T17309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.681879][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.716413][T17309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.765664][T17309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.969981][T17309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.054482][T17309] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.104925][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.112129][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.123376][T17555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3079'. [ 445.203235][T17555] veth5: entered allmulticast mode [ 445.263452][ T6886] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.270644][ T6886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.576338][T17564] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3081'. [ 445.697990][T17564] bond16: entered promiscuous mode [ 445.715182][T17564] bond16: entered allmulticast mode [ 445.862805][ T5634] Bluetooth: hci3: command tx timeout [ 445.967936][T17586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3084'. [ 445.994932][T17586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3084'. [ 446.019416][T17586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3084'. [ 446.394263][T17309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.557972][T17309] veth0_vlan: entered promiscuous mode [ 446.599572][T17309] veth1_vlan: entered promiscuous mode [ 446.711848][T17309] veth0_macvtap: entered promiscuous mode [ 446.729034][T17611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3090'. [ 446.750300][T17309] veth1_macvtap: entered promiscuous mode [ 446.820001][T17309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.869372][T17309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.911198][ T6887] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.933183][ T6887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.959928][ T6887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.992569][ T6887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.171635][ T6887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.195899][ T6887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.286384][ T6887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.312829][ T6887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.932411][ T5634] Bluetooth: hci3: command tx timeout [ 448.256168][T17673] netlink: 'syz.0.3102': attribute type 1 has an invalid length. [ 448.309663][T17667] C: renamed from veth1_to_team (while UP) [ 448.321872][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 448.339901][ T5643] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 448.347789][ T5643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 448.359674][ T5643] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 448.370572][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 448.745995][ T6886] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.772260][ T6886] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.867070][T17686] syzkaller0: entered promiscuous mode [ 448.904534][T17686] syzkaller0: entered allmulticast mode [ 449.097707][ T6886] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.136029][ T6886] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.356801][ T6886] bond0: (slave netdevsim1): Releasing backup interface [ 449.446810][ T6886] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.484667][ T6886] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.591621][T17711] xt_NFQUEUE: number of total queues is 0 [ 449.650611][T17712] bond1: option arp_all_targets: invalid value (3) [ 449.670748][T17712] bond1 (unregistering): Released all slaves [ 449.716869][T17711] bond1: option arp_all_targets: invalid value (3) [ 449.726450][T17711] bond1 (unregistering): Released all slaves [ 449.825670][ T6886] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.836291][ T6886] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.869630][ T5643] block nbd2: Receive control failed (result -32) [ 450.105722][T17734] __nla_validate_parse: 3 callbacks suppressed [ 450.105741][T17734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3117'. [ 450.208658][T17743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3118'. [ 450.232208][ T6886] wg1: left allmulticast mode [ 450.413596][ T5643] Bluetooth: hci0: command tx timeout [ 450.535559][T17757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3120'. [ 450.568498][T17757] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3120'. [ 450.588294][ T6886] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 450.880970][ T6886] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 450.889870][ T6886] bridge1 (unregistering): left promiscuous mode [ 450.906947][ T6886] bond8 (unregistering): (slave bridge2): Releasing backup interface [ 450.918857][ T6886] bridge2 (unregistering): left promiscuous mode [ 450.929740][ T6886] bond10 (unregistering): (slave bridge3): Releasing backup interface [ 450.937956][ T6886] bridge3 (unregistering): left promiscuous mode [ 450.959272][ T6886] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 450.971339][ T6886] bond0 (unregistering): Released all slaves [ 450.988267][ T6886] bond1 (unregistering): Released all slaves [ 451.002016][ T6886] bond2 (unregistering): Released all slaves [ 451.016059][ T6886] bond3 (unregistering): Released all slaves [ 451.035163][ T6886] bond4 (unregistering): Released all slaves [ 451.048544][ T6886] bond5 (unregistering): Released all slaves [ 451.065567][ T6886] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 451.080611][ T6886] bond6 (unregistering): Released all slaves [ 451.094663][ T6886] bond7 (unregistering): Released all slaves [ 451.108628][ T6886] bond8 (unregistering): Released all slaves [ 451.122294][ T6886] bond9 (unregistering): Released all slaves [ 451.137369][ T6886] bond10 (unregistering): Released all slaves [ 451.159089][ T6886] bond11 (unregistering): Released all slaves [ 451.173037][ T6886] bond12 (unregistering): Released all slaves [ 451.186609][ T6886] bond13 (unregistering): Released all slaves [ 451.207252][ T6886] bond14 (unregistering): Released all slaves [ 451.221738][ T6886] bond15 (unregistering): (slave veth1): Releasing active interface [ 451.229904][ T6886] batadv1: entered promiscuous mode [ 451.240907][ T6886] bond15 (unregistering): (slave batadv1): Releasing active interface [ 451.251895][ T6886] bond15 (unregistering): Released all slaves [ 451.265655][ T6886] bond16 (unregistering): Released all slaves [ 451.333882][ T5856] –: left promiscuous mode [ 451.431908][ T5292] 8021q: adding VLAN 0 to HW filter on device eth2 [ 451.505846][T17770] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3122'. [ 451.572782][ T6886] tipc: Left network mode [ 451.779454][T17777] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3124'. [ 451.846889][T17779] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3123'. [ 451.873459][T17785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3125'. [ 451.899930][T17777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 451.925418][T17787] lo speed is unknown, defaulting to 1000 [ 451.973700][T17792] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3126'. [ 452.037047][T17787] lo speed is unknown, defaulting to 1000 [ 452.190341][T17787] lo speed is unknown, defaulting to 1000 [ 452.273355][T17787] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 452.403667][T17787] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 452.449739][T17672] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.465660][T17787] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 452.476709][T17672] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.501220][ T5643] Bluetooth: hci0: command tx timeout [ 452.512593][T17672] bridge_slave_0: entered allmulticast mode [ 452.537158][T17672] bridge_slave_0: entered promiscuous mode [ 452.537767][T17787] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 452.651633][T17672] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.689274][T17672] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.701254][T17672] bridge_slave_1: entered allmulticast mode [ 452.717946][T17672] bridge_slave_1: entered promiscuous mode [ 452.775325][T17787] lo speed is unknown, defaulting to 1000 [ 452.816472][T17810] lo speed is unknown, defaulting to 1000 [ 452.850942][T17672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.874524][T17787] lo speed is unknown, defaulting to 1000 [ 452.888230][ T5292] 8021q: adding VLAN 0 to HW filter on device eth1 [ 452.923740][T17672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.940909][T17787] lo speed is unknown, defaulting to 1000 [ 452.954258][ C0] ================================================================== [ 452.960697][T17834] netlink: 'syz.2.3131': attribute type 11 has an invalid length. [ 452.962344][ C0] BUG: KASAN: slab-use-after-free in fib_rules_lookup+0x15e/0xeb0 [ 452.962374][ C0] Read of size 8 at addr ffff888026a1d680 by task dhcpcd/17614 [ 452.962391][ C0] [ 452.962412][ C0] CPU: 0 UID: 101 PID: 17614 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 452.962435][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 452.962445][ C0] Call Trace: [ 452.962452][ C0] [ 452.962460][ C0] dump_stack_lvl+0xe8/0x150 [ 452.962483][ C0] print_address_description+0x55/0x1e0 [ 452.962502][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 452.962522][ C0] print_report+0x58/0x70 [ 452.962545][ C0] kasan_report+0x117/0x150 [ 452.962575][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 452.962598][ C0] ? fib_rules_lookup+0x99/0xeb0 [ 452.962618][ C0] fib_rules_lookup+0x15e/0xeb0 [ 452.962640][ C0] ? fib_rules_lookup+0x99/0xeb0 [ 452.962664][ C0] ? __pfx_fib_rules_lookup+0x10/0x10 [ 452.962684][ C0] ? l3mdev_update_flow+0x26/0x610 [ 452.962708][ C0] ? l3mdev_update_flow+0x4ad/0x610 [ 452.962732][ C0] __fib_lookup+0x106/0x210 [ 452.962750][ C0] ? queue_work_on+0x106/0x1d0 [ 452.962768][ C0] ? macvlan_handle_frame+0xfb4/0x1360 [ 452.962797][ C0] ? __netif_receive_skb_core+0x989/0x30b0 [ 452.962824][ C0] ? __pfx___fib_lookup+0x10/0x10 [ 452.962840][ C0] ? make_kuid+0x1e5/0x670 [ 452.962868][ C0] ? __pfx_make_kuid+0x10/0x10 [ 452.962890][ C0] ? do_syscall_64+0x174/0x580 [ 452.962911][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.962933][ C0] ? fib_lookup+0x49/0x440 [ 452.962959][ C0] ip_route_input_rcu+0x19ee/0x3190 [ 452.962992][ C0] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 452.963019][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 452.963053][ C0] ? ip_route_input_noref+0xad/0x270 [ 452.963081][ C0] ip_route_input_noref+0x17c/0x270 [ 452.963109][ C0] ? __pfx_ip_route_input_noref+0x10/0x10 [ 452.963138][ C0] ? macvlan_handle_frame+0xfb4/0x1360 [ 452.963169][ C0] ? arp_process+0x59e/0x18c0 [ 452.963199][ C0] arp_process+0xaab/0x18c0 [ 452.963230][ C0] ? __pfx_arp_process+0x10/0x10 [ 452.963258][ C0] ? NF_HOOK+0xa2/0x3c0 [ 452.963285][ C0] NF_HOOK+0x33a/0x3c0 [ 452.963310][ C0] ? __pfx_arp_process+0x10/0x10 [ 452.963336][ C0] ? NF_HOOK+0xa2/0x3c0 [ 452.963361][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 452.963388][ C0] ? process_backlog+0x3c3/0x1860 [ 452.963417][ C0] ? arp_rcv+0x2f5/0x500 [ 452.963444][ C0] ? __pfx_arp_rcv+0x10/0x10 [ 452.963471][ C0] process_backlog+0xbf0/0x1860 [ 452.963501][ C0] ? process_backlog+0x3c3/0x1860 [ 452.963539][ C0] __napi_poll+0xaa/0x330 [ 452.963566][ C0] net_rx_action+0x61d/0xf50 [ 452.963599][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 452.963625][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 452.963650][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 452.963680][ C0] handle_softirqs+0x225/0x840 [ 452.963701][ C0] ? do_softirq+0x76/0xd0 [ 452.963720][ C0] ? __dev_queue_xmit+0x29b/0x37f0 [ 452.963742][ C0] do_softirq+0x76/0xd0 [ 452.963759][ C0] [ 452.963766][ C0] [ 452.963773][ C0] __local_bh_enable_ip+0xf8/0x130 [ 452.963790][ C0] ? __dev_queue_xmit+0x29b/0x37f0 [ 452.963811][ C0] __dev_queue_xmit+0x1ed7/0x37f0 [ 452.963838][ C0] ? __dev_queue_xmit+0x29b/0x37f0 [ 452.963863][ C0] ? _copy_from_iter+0x5d4/0x1660 [ 452.963883][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 452.963907][ C0] ? __pfx__copy_from_iter+0x10/0x10 [ 452.963934][ C0] ? __pfx_packet_parse_headers+0x10/0x10 [ 452.963962][ C0] ? packet_xmit+0x68/0x330 [ 452.963985][ C0] ? skb_put+0x112/0x210 [ 452.964003][ C0] packet_sendmsg+0x3d95/0x5040 [ 452.964029][ C0] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 452.964055][ C0] ? sock_read_iter+0x246/0x320 [ 452.964076][ C0] ? vfs_read+0x595/0xa80 [ 452.964101][ C0] ? do_syscall_64+0x174/0x580 [ 452.964121][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.964145][ C0] ? __lock_acquire+0x683/0x2cd0 [ 452.964177][ C0] ? __pfx_packet_sendmsg+0x10/0x10 [ 452.964196][ C0] ? aa_sk_perm+0x6d5/0x900 [ 452.964220][ C0] ? aa_file_perm+0x18b/0x15f0 [ 452.964240][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 452.964264][ C0] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 452.964298][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 452.964322][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.964347][ C0] ? __pfx_packet_sendmsg+0x10/0x10 [ 452.964368][ C0] sock_write_iter+0x498/0x4e0 [ 452.964392][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 452.964420][ C0] ? aa_sock_msg_perm+0xda/0x1b0 [ 452.964451][ C0] do_iter_readv_writev+0x612/0x8c0 [ 452.964481][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 452.964513][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 452.964544][ C0] ? security_file_permission+0x75/0x260 [ 452.964568][ C0] ? rw_verify_area+0x203/0x4c0 [ 452.964596][ C0] vfs_writev+0x343/0x990 [ 452.964615][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 452.964646][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 452.964674][ C0] ? __pfx_set_user_sigmask+0x10/0x10 [ 452.964702][ C0] do_writev+0x154/0x2e0 [ 452.964723][ C0] ? __pfx_do_writev+0x10/0x10 [ 452.964746][ C0] ? __secure_computing+0xe7/0x2b0 [ 452.964766][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.964786][ C0] do_syscall_64+0x174/0x580 [ 452.964806][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.964825][ C0] ? clear_bhb_loop+0x40/0x90 [ 452.964847][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.964866][ C0] RIP: 0033:0x7f9b2802c407 [ 452.964883][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 452.964900][ C0] RSP: 002b:00007fffe48e5b10 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 452.964920][ C0] RAX: ffffffffffffffda RBX: 00007f9b27fa2780 RCX: 00007f9b2802c407 [ 452.964934][ C0] RDX: 0000000000000002 RSI: 00007fffe48e5b70 RDI: 0000000000000003 [ 452.964947][ C0] RBP: 000000000000005c R08: 0000000000000000 R09: 0000000000000000 [ 452.964958][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffe48e5bb0 [ 452.964971][ C0] R13: 0000558a8a3fc890 R14: 00007fffe48e5c00 R15: 00007fffe48f5dd0 [ 452.964995][ C0] [ 452.965002][ C0] [ 452.979852][T17787] lo speed is unknown, defaulting to 1000 [ 452.985520][ C0] Allocated by task 5630: [ 452.985539][ C0] kasan_save_track+0x3e/0x80 [ 452.985568][ C0] __kasan_kmalloc+0x93/0xb0 [ 452.985591][ C0] __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 452.985617][ C0] kmemdup_noprof+0x2b/0x70 [ 452.985633][ C0] fib_rules_register+0x2f/0x400 [ 453.003002][T17787] lo speed is unknown, defaulting to 1000 [ 453.007160][ C0] fib4_rules_init+0x21/0x160 [ 453.007185][ C0] fib_net_init+0x17a/0x3e0 [ 453.013638][T17672] team0: Port device team_slave_0 added [ 453.017863][ C0] ops_init+0x35d/0x5d0 [ 453.632946][ C0] setup_net+0x118/0x350 [ 453.637184][ C0] copy_net_ns+0x4f9/0x720 [ 453.641585][ C0] create_new_namespaces+0x3f0/0x6b0 [ 453.646864][ C0] unshare_nsproxy_namespaces+0x149/0x190 [ 453.652567][ C0] ksys_unshare+0x57d/0xa00 [ 453.657058][ C0] __x64_sys_unshare+0x38/0x50 [ 453.661812][ C0] do_syscall_64+0x174/0x580 [ 453.666391][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.672268][ C0] [ 453.674571][ C0] Freed by task 6887: [ 453.678527][ C0] kasan_save_track+0x3e/0x80 [ 453.683190][ C0] kasan_save_free_info+0x40/0x50 [ 453.688199][ C0] __kasan_slab_free+0x5c/0x80 [ 453.692949][ C0] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 453.698481][ C0] rcu_free_sheaf+0x31/0x200 [ 453.703056][ C0] rcu_core+0x78b/0x10a0 [ 453.707278][ C0] handle_softirqs+0x225/0x840 [ 453.712021][ C0] do_softirq+0x76/0xd0 [ 453.716156][ C0] __local_bh_enable_ip+0xf8/0x130 [ 453.721246][ C0] __alloc_skb+0x1ad/0x7a0 [ 453.725660][ C0] nsim_dev_trap_report_work+0x25f/0xb40 [ 453.731279][ C0] process_scheduled_works+0xa8e/0x14e0 [ 453.736806][ C0] worker_thread+0xa47/0xfb0 [ 453.741379][ C0] kthread+0x389/0x470 [ 453.745435][ C0] ret_from_fork+0x514/0xb70 [ 453.750007][ C0] ret_from_fork_asm+0x1a/0x30 [ 453.754754][ C0] [ 453.757060][ C0] The buggy address belongs to the object at ffff888026a1d600 [ 453.757060][ C0] which belongs to the cache kmalloc-192 of size 192 [ 453.771104][ C0] The buggy address is located 128 bytes inside of [ 453.771104][ C0] freed 192-byte region [ffff888026a1d600, ffff888026a1d6c0) [ 453.784882][ C0] [ 453.787188][ C0] The buggy address belongs to the physical page: [ 453.793588][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26a1d [ 453.802422][ C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 453.809522][ C0] page_type: f5(slab) [ 453.813488][ C0] raw: 00fff00000000000 ffff88813fe163c0 dead000000000100 dead000000000122 [ 453.822050][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 453.830608][ C0] page dumped because: kasan: bad access detected [ 453.837005][ C0] page_owner tracks the page as allocated [ 453.842706][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5472708943, free_ts 5462910594 [ 453.862324][ C0] post_alloc_hook+0x22d/0x280 [ 453.867094][ C0] get_page_from_freelist+0x24ae/0x2530 [ 453.872631][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 453.878429][ C0] allocate_slab+0x77/0x660 [ 453.882913][ C0] refill_objects+0x336/0x3d0 [ 453.887571][ C0] __pcs_replace_empty_main+0x320/0x720 [ 453.893101][ C0] __kmalloc_cache_noprof+0x388/0x660 [ 453.898461][ C0] call_usermodehelper_setup+0x8e/0x270 [ 453.903994][ C0] kobject_uevent_env+0x662/0x9e0 [ 453.909008][ C0] device_add+0x544/0xb90 [ 453.913326][ C0] device_create+0x269/0x300 [ 453.917897][ C0] bdi_register_va+0x9c/0x740 [ 453.922554][ C0] bdi_register+0xe2/0x140 [ 453.926948][ C0] __add_disk+0x7da/0xe30 [ 453.931276][ C0] add_disk_fwnode+0xfb/0x4b0 [ 453.935943][ C0] loop_add+0x861/0xb40 [ 453.940085][ C0] page last free pid 10 tgid 10 stack trace: [ 453.946040][ C0] __free_frozen_pages+0xc0d/0xd20 [ 453.951138][ C0] vfree+0x1fd/0x330 [ 453.955019][ C0] delayed_vfree_work+0x55/0x80 [ 453.959863][ C0] process_scheduled_works+0xa8e/0x14e0 [ 453.965387][ C0] worker_thread+0xa47/0xfb0 [ 453.969961][ C0] kthread+0x389/0x470 [ 453.974015][ C0] ret_from_fork+0x514/0xb70 [ 453.978587][ C0] ret_from_fork_asm+0x1a/0x30 [ 453.983338][ C0] [ 453.985640][ C0] Memory state around the buggy address: [ 453.991245][ C0] ffff888026a1d580: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 453.999288][ C0] ffff888026a1d600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 454.007334][ C0] >ffff888026a1d680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 454.015373][ C0] ^ [ 454.019416][ C0] ffff888026a1d700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 454.027456][ C0] ffff888026a1d780: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 454.035495][ C0] ================================================================== [ 454.043688][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 454.050896][ C0] CPU: 0 UID: 101 PID: 17614 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 454.060096][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.070155][ C0] Call Trace: [ 454.073435][ C0] [ 454.076282][ C0] vpanic+0x56c/0xa60 [ 454.080284][ C0] ? __pfx_vpanic+0x10/0x10 [ 454.084808][ C0] panic+0xc5/0xd0 [ 454.088541][ C0] ? __pfx_panic+0x10/0x10 [ 454.092958][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 454.097994][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 454.103031][ C0] check_panic_on_warn+0x89/0xb0 [ 454.107986][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 454.113024][ C0] end_report+0x73/0x170 [ 454.117289][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 454.122332][ C0] kasan_report+0x128/0x150 [ 454.126856][ C0] ? fib_rules_lookup+0x15e/0xeb0 [ 454.131895][ C0] ? fib_rules_lookup+0x99/0xeb0 [ 454.136839][ C0] fib_rules_lookup+0x15e/0xeb0 [ 454.141685][ C0] ? fib_rules_lookup+0x99/0xeb0 [ 454.146612][ C0] ? __pfx_fib_rules_lookup+0x10/0x10 [ 454.151975][ C0] ? l3mdev_update_flow+0x26/0x610 [ 454.157082][ C0] ? l3mdev_update_flow+0x4ad/0x610 [ 454.162270][ C0] __fib_lookup+0x106/0x210 [ 454.166766][ C0] ? queue_work_on+0x106/0x1d0 [ 454.171526][ C0] ? macvlan_handle_frame+0xfb4/0x1360 [ 454.176978][ C0] ? __netif_receive_skb_core+0x989/0x30b0 [ 454.182773][ C0] ? __pfx___fib_lookup+0x10/0x10 [ 454.187779][ C0] ? make_kuid+0x1e5/0x670 [ 454.192188][ C0] ? __pfx_make_kuid+0x10/0x10 [ 454.196942][ C0] ? do_syscall_64+0x174/0x580 [ 454.201693][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.207748][ C0] ? fib_lookup+0x49/0x440 [ 454.212152][ C0] ip_route_input_rcu+0x19ee/0x3190 [ 454.217344][ C0] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 454.222881][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 454.228684][ C0] ? ip_route_input_noref+0xad/0x270 [ 454.233958][ C0] ip_route_input_noref+0x17c/0x270 [ 454.239165][ C0] ? __pfx_ip_route_input_noref+0x10/0x10 [ 454.244898][ C0] ? macvlan_handle_frame+0xfb4/0x1360 [ 454.250364][ C0] ? arp_process+0x59e/0x18c0 [ 454.255045][ C0] arp_process+0xaab/0x18c0 [ 454.259549][ C0] ? __pfx_arp_process+0x10/0x10 [ 454.264483][ C0] ? NF_HOOK+0xa2/0x3c0 [ 454.268633][ C0] NF_HOOK+0x33a/0x3c0 [ 454.272706][ C0] ? __pfx_arp_process+0x10/0x10 [ 454.277636][ C0] ? NF_HOOK+0xa2/0x3c0 [ 454.281781][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 454.286359][ C0] ? process_backlog+0x3c3/0x1860 [ 454.291379][ C0] ? arp_rcv+0x2f5/0x500 [ 454.295612][ C0] ? __pfx_arp_rcv+0x10/0x10 [ 454.300195][ C0] process_backlog+0xbf0/0x1860 [ 454.305053][ C0] ? process_backlog+0x3c3/0x1860 [ 454.310088][ C0] __napi_poll+0xaa/0x330 [ 454.314417][ C0] net_rx_action+0x61d/0xf50 [ 454.319010][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 454.324115][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 454.329309][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 454.334592][ C0] handle_softirqs+0x225/0x840 [ 454.339344][ C0] ? do_softirq+0x76/0xd0 [ 454.343660][ C0] ? __dev_queue_xmit+0x29b/0x37f0 [ 454.348759][ C0] do_softirq+0x76/0xd0 [ 454.352902][ C0] [ 454.355817][ C0] [ 454.358729][ C0] __local_bh_enable_ip+0xf8/0x130 [ 454.363829][ C0] ? __dev_queue_xmit+0x29b/0x37f0 [ 454.368927][ C0] __dev_queue_xmit+0x1ed7/0x37f0 [ 454.373956][ C0] ? __dev_queue_xmit+0x29b/0x37f0 [ 454.379061][ C0] ? _copy_from_iter+0x5d4/0x1660 [ 454.384083][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 454.389467][ C0] ? __pfx__copy_from_iter+0x10/0x10 [ 454.394739][ C0] ? __pfx_packet_parse_headers+0x10/0x10 [ 454.400451][ C0] ? packet_xmit+0x68/0x330 [ 454.404940][ C0] ? skb_put+0x112/0x210 [ 454.409164][ C0] packet_sendmsg+0x3d95/0x5040 [ 454.414001][ C0] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 454.419360][ C0] ? sock_read_iter+0x246/0x320 [ 454.424194][ C0] ? vfs_read+0x595/0xa80 [ 454.428512][ C0] ? do_syscall_64+0x174/0x580 [ 454.433264][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.439318][ C0] ? __lock_acquire+0x683/0x2cd0 [ 454.444250][ C0] ? __pfx_packet_sendmsg+0x10/0x10 [ 454.449435][ C0] ? aa_sk_perm+0x6d5/0x900 [ 454.453923][ C0] ? aa_file_perm+0x18b/0x15f0 [ 454.458676][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 454.463513][ C0] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 454.469923][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 454.474852][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.480131][ C0] ? __pfx_packet_sendmsg+0x10/0x10 [ 454.485316][ C0] sock_write_iter+0x498/0x4e0 [ 454.490069][ C0] ? __pfx_sock_write_iter+0x10/0x10 [ 454.495346][ C0] ? aa_sock_msg_perm+0xda/0x1b0 [ 454.500280][ C0] do_iter_readv_writev+0x612/0x8c0 [ 454.505471][ C0] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 454.511185][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 454.516545][ C0] ? security_file_permission+0x75/0x260 [ 454.522163][ C0] ? rw_verify_area+0x203/0x4c0 [ 454.527003][ C0] vfs_writev+0x343/0x990 [ 454.531316][ C0] ? bpf_lsm_file_permission+0x9/0x20 [ 454.536680][ C0] ? __pfx_vfs_writev+0x10/0x10 [ 454.541522][ C0] ? __pfx_set_user_sigmask+0x10/0x10 [ 454.546885][ C0] do_writev+0x154/0x2e0 [ 454.551111][ C0] ? __pfx_do_writev+0x10/0x10 [ 454.555861][ C0] ? __secure_computing+0xe7/0x2b0 [ 454.560955][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.567005][ C0] do_syscall_64+0x174/0x580 [ 454.571580][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.577636][ C0] ? clear_bhb_loop+0x40/0x90 [ 454.582328][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.588220][ C0] RIP: 0033:0x7f9b2802c407 [ 454.592624][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 454.612216][ C0] RSP: 002b:00007fffe48e5b10 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 454.620637][ C0] RAX: ffffffffffffffda RBX: 00007f9b27fa2780 RCX: 00007f9b2802c407 [ 454.628593][ C0] RDX: 0000000000000002 RSI: 00007fffe48e5b70 RDI: 0000000000000003 [ 454.636560][ C0] RBP: 000000000000005c R08: 0000000000000000 R09: 0000000000000000 [ 454.644512][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fffe48e5bb0 [ 454.652467][ C0] R13: 0000558a8a3fc890 R14: 00007fffe48e5c00 R15: 00007fffe48f5dd0 [ 454.660436][ C0] [ 454.663710][ C0] Kernel Offset: disabled [ 454.668019][ C0] Rebooting in 86400 seconds..