last executing test programs: 2.396358035s ago: executing program 1 (id=2447): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async, rerun: 32) write$bt_hci(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000320100f1"], 0x138) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=0x0, @ANYBLOB="20000004", @ANYRES32=0x0, @ANYBLOB="01000300ac1e000100000000000000000000000086dd00"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r5, &(0x7f00000009c0)={&(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000200)="7da5c1", 0x3}], 0x1, &(0x7f0000000980)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xb, 0x4, 0x8, 0x80000000, 0x7cd5, 0x1}}], 0x30, 0x4040081}, 0x90f0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000840)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.212632207s ago: executing program 1 (id=2451): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40d4}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r2, &(0x7f00000000c0)="a6bea8a120e5f8320c30ce50869c", 0xe, 0x48810, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @random="e6883490c5fc"}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="030000000400000096305ca60a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x5, [@volatile={0x9, 0x0, 0x0, 0x9, 0x4}, @struct={0x7, 0x1, 0x0, 0x4, 0x0, 0x6, [{0x6, 0x2, 0x8}]}, @enum64={0x9, 0x3, 0x0, 0x13, 0x1, 0x5, [{0xa, 0x3, 0x1}, {0x6, 0x7, 0x2}, {0x7, 0x5, 0x9}]}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f, 0x937ec52c1b39cc0d, 0x61]}}, &(0x7f0000000280)=""/164, 0x89, 0xa4, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r7}, 0x50) 1.655998155s ago: executing program 1 (id=2461): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e0009fffd0000000008000003000000040004"], 0x34}}, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) close(r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x5, 0x9) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000300", @ANYRES16=r2, @ANYBLOB="02002abd7000fddbdf2511000000080015000200000008000100", @ANYRES32=r3, @ANYBLOB="0800150002000000080015000100000008000100", @ANYRES32=r4, @ANYBLOB="080015000100000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x40085}, 0x4) 1.418086321s ago: executing program 4 (id=2465): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02010000000000000f8c37e602b6d70000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40040) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x4, 0xfff3}, {0x0, 0xffe0}, {0xffe0, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff3, 0xc}}, @TCA_FW_MASK={0x8, 0x5, 0x18000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) (async) r6 = socket$inet6(0x10, 0x2, 0x4) (async) recvmmsg(r2, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000003c0)) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376346170000000080001400000000514"], 0xe8}}, 0x0) 1.292723049s ago: executing program 3 (id=2467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8906}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14}}, 0x7c}}, 0x0) 1.252259389s ago: executing program 0 (id=2468): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}}, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.229987969s ago: executing program 2 (id=2469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0xffffffffffffff8f, 0xf9b}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a0104f5ff0000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a310000000009000200"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.164443965s ago: executing program 3 (id=2470): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000ac0)=@newtaction={0x8a4, 0x30, 0x12f, 0x0, 0x0, {}, [{0x890, 0x1, [@m_police={0x88c, 0x1, 0x0, 0x0, {{0xb}, {0x860, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x60, 0xfff, 0x7, 0x80000000, 0x1, 0xa, 0x8, 0xfff, 0x4, 0x9, 0x78f, 0x0, 0x9, 0x1, 0x6, 0x0, 0x1, 0x1, 0x1, 0x40, 0x2, 0x1, 0xba0e, 0x3, 0x200, 0x8048, 0x1, 0x0, 0x2, 0xe8, 0x40, 0x6, 0x200, 0x5b3e, 0x993, 0x4, 0x800, 0x846, 0x5, 0x7, 0x8000, 0x30, 0x284, 0x4, 0x7, 0x6, 0x3, 0x2, 0x66eb, 0x2, 0x74, 0x7ff, 0xea4c, 0x1, 0x24, 0xfffffffc, 0x4, 0x100, 0x7, 0x8, 0x0, 0x94, 0x2, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x7fff, 0x1, 0x30, 0x9f9, 0x5, 0x7fff, 0x8, 0x2, 0x1, 0x8, 0xf5, 0x10000, 0x9, 0x9, 0xe, 0x5, 0x0, 0x6, 0x1ff, 0x6, 0x5, 0x9, 0x5, 0x14, 0x58, 0x2, 0x3, 0x800, 0xf676, 0xfffffff7, 0xd9, 0x101, 0x2, 0x6, 0x8, 0x10001, 0x2, 0x0, 0xfffffeff, 0x8, 0x9, 0xffffffff, 0x9, 0x5, 0x1e2c, 0x401, 0x5, 0x5, 0x1, 0x7924, 0x0, 0x7, 0x9, 0x8000, 0x9, 0xfffffffd, 0x8, 0x82d, 0x4, 0x7, 0x0, 0x35e80000, 0x1, 0x1, 0xa26, 0x0, 0x2c, 0xfff, 0x7, 0x6, 0x7ede, 0x8000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x3, 0x8, 0x4, 0xa21, 0x0, 0x7, 0x7, 0xfffffffc, 0x2, 0x6, 0x54ed5172, 0x6, 0x5, 0x0, 0xf, 0x20000, 0x9, 0x9e, 0xb, 0xbb42da9, 0x25, 0x6, 0x3, 0xd, 0x7, 0x2, 0x3, 0x5, 0xd, 0x4, 0x1ff, 0x9, 0x6, 0x6, 0x8, 0x40, 0x5, 0x9, 0xff, 0x5, 0x40, 0x0, 0x7, 0xfffffff5, 0x5, 0x8001, 0xdb1, 0x8, 0x81, 0x40000, 0xfff, 0xce, 0x10, 0x5, 0x5, 0xffffffff, 0x8, 0x9, 0xdc1b, 0xf2c, 0x10000, 0x4d, 0xe8b3, 0x6, 0x9, 0x2, 0x4, 0x2, 0xc, 0x1, 0x6, 0x896, 0x3, 0x0, 0x8cc6, 0x8, 0x10000, 0x4, 0x9, 0x8, 0x7, 0x1a, 0x80000001, 0x80000000, 0x101, 0x17f, 0x1, 0x9, 0x5, 0x4, 0xb1c0, 0x7, 0x7fffffff, 0x80, 0x8, 0x0, 0xffffffff, 0x40, 0x8001, 0x101, 0x8, 0x8, 0x1ff, 0xfc51c64, 0x10000, 0xffffffff, 0x400, 0x7, 0x2]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffca}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8a4}}, 0x0) 1.163736744s ago: executing program 4 (id=2471): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x14}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xade, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x14}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) (async) 1.099373792s ago: executing program 0 (id=2472): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xce00}, 0x50) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x3) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000340)="7155b506edb24822da43f6c2a0b5ce2b40b0ec718aca10ae53cc28d1450e844eb4ec512f6968cb25f7c89e54f319df5a500000a467048e926b327c99c786d163734c9ded0be5ea02e4fcc7bb7b6bd0fd2fca27a4e17c3ac1a71c19bfd6770cedd6df3172c534213f8afd48cf028b9188dcc2fb1d9abadccdd4e6b964e249507921d2236e34735722ea7130954ee997f67950c1d7477fee42cb0fdb885c8b18258ba79d179eba5279ce1fd01e325e2516af7096b27ed72b6706d973a76622ee87229dee597ca72a5375427806ab1e487a72461a29b59ee5a37dab21e4ba03a7c7e94500"/241, 0x155) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pimreg\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800074000000000080003400000001608000140000000120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r2, &(0x7f00000002c0)={@val={0xa}, @void, @llc={@snap={0xab, 0x0, "e4fb", "013b1b", 0x1b, "99c5a07643ca14facc250500000000000000351f1076b7efa1d604fc87f58f24448df8423cc5b6507ea6746a1e55fecb7f0e078c3f7bbfc14d32749f861f64107df99062f36875aa9b5de08e4864384d12393b2173033bb1f60fb0d4fccc2e1f65faab0009"}}}, 0x72) 1.044460058s ago: executing program 2 (id=2473): r0 = socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r3, 0x1, 0x31, 0x0, &(0x7f00000008c0)) sendmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{&(0x7f0000000e40)=@qipcrtr={0x2a, 0x0, 0xffffbfff}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000ec0)="0365b3a64d959fbb720accc6461f73e3244ce33176c24e436394e85a2fc06f13b09a9cf043e4febb87093bf691a72cabd77507b92076d930ec9725ce158a533c822a87d9c1c4b03e10541cc1b26b60a17a140c68a937d36c6bc42c737966007159de76035e8cb46b96cb8b01046424272de283ffb544bb0efa876e22d5b51278c3d784688c223b9bd56b78ac87db7733f02fc86960db40ac4a47cc60d58e2df5fcab2986d5eb37e73930e61d6e0c4c03adaa39dbc4a50af995370deea4a3c4fa926fa3f96de787cc0db94cde464ef6bb0b4125efe4dfab8e71766e21685b8a8ceb290181b16e0c", 0xe7}, {&(0x7f0000000b00)="5fbd3d7b7a992385c528b3de24ce391d9cb3c9519cd2bfc78b0cb443684e", 0x1e}, {&(0x7f0000001200)="b840df50eb6a2affb19b1eed2e2b3a9de9f2d6b2f2d0cbee85ce276501cee75e3b14d4f1a484ebfb87fb04cc6f696ca192a4f68cd81df840d4cfe77cefa864f6819ec2377123ef52dc135ab5d947e3540882127026f6d70d0943bffdb81f448787731a2cc22c0a64d20bcb1eeb74d1e11715ab51230fabdaacaafc5a791a8d6c3bf9d18789ee4192932fe2d6bd63486479be2202f77b7e85ebf010d8e2ab421986db7d61a09d85f414f80a8b6e890ced70731337e2e1ea8da48e76c466778e67986a2da41b75d18ebfdd39def455d8e4b97577b40cf3ea9906c135e4a9cebb5a7b98d3d1675d4cad97659916e269a139359b4a6e0d3533", 0xf7}, {&(0x7f0000001300)="6b7e6bdd6fa0e3445ffb112982a69562483f48cb0fc58283e3c40d73a0513b9afdca8c6b3260bf93421937058c5b11c01b9cd3caf0f8d7ebb88326bdfc3e93621da4360afa8f0599d7da", 0x4a}, {&(0x7f0000001380)}, {&(0x7f0000003480)="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", 0x1000}, {&(0x7f00000013c0)="a8a947b0a787824b0b8742f7a480a1c2e122ee0cb9461ad23047e997bb278c252508f95325d09ad94a5bdb1c724b9428886f31cf4ed5346847fe1b1f32280af410b311d7e4b854feb0eae6ab9605df3464cb9b273bf4bf01438d081dbe1849fede062b3736f6a129a42ad83758d0fb5857de9bb2fdd08c660d866f2d1d87e32ba1438477f22179e15ccb5e54e4b7eee71113b14819daca2efcd255456e81e0ea640ca281113b30be25c822caf4d60f5ed26bb9be0e99a0a26716fb782acd5c4bbf57c188f8ed208933a4c8acab423f7a0fb3a31437ccc3133abd83d9964149c832c215c340aa77aeb3e0e69f591ca3df483a", 0xf2}, {&(0x7f00000014c0)="ae6c9a958f2877ef54b5cf52e71948aa35b0ca3da8abb423f20600b7ebcb0457089ae31fd090aae9ee870585822f05115a153dbb6d820c73b1cc4a066a8f5f3f6c3674197cd05d94060929ff49c686dd3e021c28b179a2408f3752f7208764baa3408ae61d0b0cbf1ef5dd764dca5cebbb8597a4892fadd021010a002d804f0d", 0x80}], 0x8, &(0x7f00000015c0)=[{0x38, 0x102, 0x1, "005e1c9705ad8f06a660e03b6126f66093913e6f4677a26da66ceacab5df16d946ef1d"}, {0xf8, 0x11, 0x8, "3caca12cb5e7918f0134b0e85a7194b3c4c46db1570e3c8fcfd0b9a035cba3fede5512a89d4ca1572cfdd23fc1da7e8d15146deafb11839e50b6f8ca50690d8848153e68b83078da62f191e9045c36c1f8f4f9e5884d5912518b386f0921d0a59da39d7e1bb05f4bf02c00757b5374e1922d0fd8891caea7cfba5b4cbe1e88e4e429ce3ee64b6524dc20457a4ff206b50f7a9e899442f2fdbb498588a1fc35ce966079360cde21f6286609d2b69b4182e0fb3ed02eeb3def4b112815af8c61e0d600645984a2058db6de8e21ead55c472612fa80a520a7da9c3754ac3b52c66247aeda"}, {0xf0, 0x114, 0x4, "89ea2f72da0738784a926df66188183d72c9fe19abb20182e4dd4b2f5ee23af0db727cc243d7d862ab88ba342b0ce8402b6dec0aa25f1faf279aa39d5640e6bebdafcea022da8a9abec683b3f85b272379c8669e29c6b603d5dcb19b220b3e39d14af8ed54b7c07af36137ff2a135cdedb6b949464adb8f322edfb7a6787b199d67e1c64f464257608d0e87f94f4ac21be92eef045d0240f56dfc2e28d3d34e200675017a63e927e90c213d8bc07e5d36c95e6fe49ecf70a43af8c924a71fd77f6b205217d7ac1e0418eec33d112bef6a9a24239cbc6432737"}, {0x70, 0x112, 0x1, "30696bdeb8434924619a959ba1a64d91a15ac012561cf41807b240415cf062907560d18d366d29fe254d6669c03d2793616bf21b8a1c54146c94d85c68a77467750fec3d6a74f0b88d8f0a12dc7c7defc327e664fd6334c3f4"}, {0x110, 0x7, 0x0, "a0c7f91fd5c401b56bc80a043d25219ec811ed2ea77c786fb5d34cc1ad8bb854ce67b7b587a58e806ca70b83626bb0126ecd738f2f58011604c730b2bdcc3307bd7d3dd55d71779c0271185ffce552d4b686a04ba8025e30cb3592f52f78da578d9ef088af65560ff6c3f76b240569a60c41092d8edaf72f754463560018cbb97a1f489b4fa8befb95713f8d7f1933468d116a8a346f49a3505fd6de56da6a6860f18782f790349717b5d00394638e9eb18c9c51b121ec1a369cb210126579a0a8af7510f250dbc7813ef3835fd433d0dbe9a8eba038666390572f0bd62e7d291b21393d3ea7d9c0f9b2f1cb20527ed977646759038f787069488d3e"}], 0x3a0}}, {{&(0x7f0000001980)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(rfc3686(lrw-camellia-asm),sha256-avx2)\x00'}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000004480)="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", 0x1000}, {&(0x7f0000001a00)="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", 0xfd}, {&(0x7f0000001b00)="ff4294aa624376450221469d305877698af54e11eb2b954bb6a10a61663ca9a4f0f9b9ca49ba32957c3a88cdeb6885", 0x2f}, {&(0x7f0000001b40)="e8cc39fc75892b88f170e086ff6e7f9a50c499330299869cb038bb50f0db232bea0e4d99367524c493e0885f1b4b12d90d2d029546b240d28bb6d9f538d813056b6d6164e70adb71b2478cbcab65184ad559438b9f84511906d30e4a0d2896466a62a412d0e7defb52d9217b73cd3d8bce72de9a928b57c62d7ee8031602eb4ffa458677701be8ecac3265d9a24a78174f87d91426eff692ec4ae3069d4b7d27910695f7c11e11f5174a1b69781b1437c8adc4806f2340751075da62e441db6fb5aee5f82fda9f7daac173", 0xcb}, {&(0x7f0000001c40)="0c1aa9bfa3203f3c4be4fcc7914f5eb1c556032b490255cc081d50ebeb1f0155258890d2ab5a170d5eb75797953df8a2e9db65de1d52b8f343325f75488df59ad4b3bdf6911ce05151c1b4ad7ba623be6c8ab3f9eff08955cac4da84ffe04ee99ce2bd9cbce97a395f63c130c605f8ffb266d44bad5b59b157af5f47c510ccf358a6c7405d08210db813a1bf94fc592b3c83e727c3666cbe9ad1358b48f32e30ee17cd1bfbee594d040bd5c38f76fb373bb4a1e0dcbf132209a08ff66656c5be6de0", 0xc2}, {&(0x7f0000001d40)="d78b7f794ab189f18091845d378b741550e297be960304f20ac13ad5aa051670b56400a0a69498b11724592f3cf1bb9a046c6c516903e3824bf920326c652387f76397d89afb5911ca1f97ca558766826875bad15549c0353397d09f873c2636cce5b0ac720aa1c424c17e8a1fde166e49730ba8a83a185079f0b687a91c4e6f013a94807bb3965b3398176aa1af5f73e0127c80b05839d854d622010034163c66358b7710620bdd7649d8deeaf4a9c8523531", 0xb3}, {&(0x7f0000001e00)="286d6fa9e9f86b311d05dff0d6ebe07c4bb04aacb1be4173003cd2914d95aa838145936bd8c58c47815ac500f35a4a09f1dc38ce525cd9251ab432637e1198ec5d23abc10d1048e2a376227153f5955769ec9f2ed8c4d84ea8279ae166f12c913e469ce5aacf3390cf00b4d533b0c469124fff335780400caa28409c43fcf280b61325e561e5feafd0552d8fc3337fe7ece7994ee56f2db2eb9af7134c8385cd6132b41597af1adc617aa9586b4cbea02dc6d37e15f7318dd21df7ebf6a6c4bc260a3d3f", 0xc4}], 0x7, &(0x7f0000005dc0)=ANY=[@ANYBLOB="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"], 0x2b8}}, {{&(0x7f0000001f80)=@ax25={{0x3, @bcast, 0x6}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null]}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002000)="6e12c9c61e94cd49782f00619b349ec90028f473564224ae0a004479334ba6d0ce01f7a971a225a5869dfd3c9a0b7ddb0634aba99734ff17018916a9560c3f04a772766d3fa6bfe27201ee92f565619151fc86282481cabe990bd8a51c80f804a7acc010", 0x64}, {&(0x7f0000002080)="07faa44dadf423e99bbfffb43ffc19f695d82b1e678fc38e4fddf0d441f3ccc414c6342d1d80f143a6024c4c07cbe4cf2c40b453b32f906b1f7b0a5138224c", 0x3f}, {&(0x7f0000003100)="4800507b3c7aa90e6bc8cc52ce2b630970e6108c8ef0f6fc20ae0eca53c1912501db17a29621d3bab7c38920521449f15df99b38dc7b5dcc3972db9d8ddffa72033cd64663af11aadd662251ccf241a75fb96f2f6f01bcb9846661a798af95ccc297da57e8a118a4f43db23e0a9b096cc282d4b8b8cedaa9ade2441ea996d56becb13cebf19bc7e5a9addcd90b48b90c0acd513a265f557296f7485106c6da31423595c45a0b942e6ab0aaa6a0edec886e38119efa083f375495f518ca40743e3a993fcb88d2c1f633003e52f8e485050fd607536db0980ff7b4cd745ce6b0a3b058093c5f508ae345000f3df4", 0xed}, {&(0x7f0000003200)="f60ee80b9c5eac9e2ca1fa098829fee76c184024b5acff34db2250ddb0b552b65f9d5b18e945200918fc6f53e3c007d06c82797c6d1d85c2a490ed328f473faf1672703a33128f94321b58bfe8d0534d", 0x50}, {&(0x7f00000020c0)="4b91a09649423649e89546193de1ba40de20378be7c4d2f337b386a0957f633a0b666fd96d41ccc0979c825302a636968c19", 0x32}, {&(0x7f0000003280)="8611450869765c63a5860963dcf9a66e8ca03a70a40d15c24ff0f02b02e2fe4a4c050cdf67066ac55d1835acd42ab858893f4c17361f20b099adc0e04ebf7aa6f730ce3e74e9651c89d0d4463dc409682cc7eb383d784b7482b4cd8b7158a0c2eddd72e1789d6b22024b7013d148b7cdbba14b02", 0x74}, {&(0x7f0000005740)="39b95aae157b64f7fc5ab340b6fdd6deff3f88034d6c2db0a82554c57bd347c30ac01234c11cb953abf5ec84f71db7b0f7030d927f0284051fbd57f88849789933eed4123c0abcfa7697e583baf6a40e74dc33f2617dd915dce13ae73c8f141008a01510c2b6b11ca19a7b5995822333613d32357d58c945f7b09124c2621790107c90efc9fb5c6cf91c509613592ea754ddbed92caeedb603370f32981db268b95c41bee5de3ac6e0e1673ec7509f7f18ff263754db138cdbb16f57d9d2a8adca7fcc47a5ad91e43cbfeae7e4c6ccebe3487304a88267636ee3a96ed8da7d56279e5e898c15186e", 0xe8}], 0x7, &(0x7f0000005840)=[{0x50, 0x3a, 0x93, "3d4a6fcab67d2a31a975ef5486967326bb4ec403f252c94ea52a6e4e1f09210f9261ac0559e1a3ea5f4c375127fe56ab65043d1b6d90bc4885"}, {0xc0, 0x29, 0x0, "333e7cdca2bdbfcd0a61ff2f9a94fcd38bcb556ffa1b4a8bf710728c94a04076a7237725f4f40482c43e8fc02a78417ddb436f658efc7c20e13ac56eb6e6f8c4ea58094bd5d993fe994a1ec378d35df41fe407836ae7fc93f50d5ce6811f11890a82265b99ddbdc74df80c3f3d82e81f90cf1a687000ca998e8c5086758309162a50d30d69dc61d24004588b66fb51ada5a60a5f723e2d2dbad8ae1486fe25097f82846719ce9219deff1da3"}, {0xf0, 0x1, 0x0, "fcaea7c16686bc87fa5785e18aa2e3d5332817eaa2a124848a4f7ca91d8394f7078e25005ac12c7f448e101a2871eaff3ed72f2f6dc89bb68a927b44cdcb0906e91c0b9764c2601491cb2953aa0808bd07b2708a4f1533a09c631e15b61947c4bf0b3e1d3348e7684f9d1f8e40c95834d5a4390d8bd68490faf3b75e204e04f3348c8612aabd70d29d96435717b62898bc8f54a2577ec262dbe448e275c0fbccdda090184ca3c89891b5eca72e801d9dd6d0a5321819e0f7b6f60dc479cb6a0eb9f1baaf76e65419632206cc5e2e7878a1e0aa504301a3161d846fc0d2f741ca"}], 0x200}}, {{&(0x7f0000005a40)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005ac0)="22f083babe1d83d40b", 0x9}, {&(0x7f0000005b00)="76a093dcb20f6eac50f30bae0a59d113f9b1c1cf8bb8f03d3d6c8c", 0x1b}, {&(0x7f0000005b40)="9c6961954d322922fbd559606bc5b62d0035f9a7557cc6315f76d4d6caadeba6683f2f75f5e1f55ccd47b1dcd7b1d52b0a9a3401541e4b2131a548a697ac7d30175f03b1bf21bcec40e4c652", 0x4c}, {&(0x7f0000005bc0)="537d0f661a9b3fe8c2bdb41491d5915a04352c528f71578e6f82a324c4422e9b69e63dff4c98010aad502b85b4846856227510b803d314603b263bbc6c1135352d490e0e23c4bf187dba9ae8029048e737c46c1c814217299c6728cee017beacb9206e5e1a85ea6ebf6e917d2f496fa05e95973f667631ec2bf598821b6fbff9e79bda08dd780ba7d0", 0x89}], 0x4}}], 0x4, 0x20000080) splice(r2, 0x0, r1, 0x0, 0xfffffffc, 0xf) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'ipvlan1\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000e00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="080029bd7000fddbdf25130000000c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000140)=@qipcrtr={0x2a, 0x3, 0x7fff}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="2276e17aa6a4e81d2da65e5a38a9ad11c952a0d193106452d89121776ff8a80aa111e2779832f9c2ed801a4dce7b715d608ef3add83363fa3f4d5e35f851c59decc5190ce918b94378fe9f06b631170db5401383f176224d4f165a7215681f287913228a0abad5c1255f3484a2c48462e8c4104717ba2c54e78bb0fb24cdecea0e2398dc86e60821e5576b1ba4fd2b5961f7ad88ce9f768b4bc8b2a311755f4fc5957925871337d9d5", 0xa9}, {&(0x7f0000000300)="99a80e7716ce616190ab7e3d0f4fb63aefb6d0107f8fa2ca5dd9ae0e8642e6e39feedcfdda28a213b2a25f546340bd47cc44d1a8787222a888a6504eaf3323bb4bc07d99307b6d5d579e504b5c5139a36fe9ae2f022334b7e77e43d053b3d596ac65ac9c36dea2243333cf2d4c55bd828d19b32706a06ec84cccad945629e5cc0dbf0dbe528b67be455325d78a8230f42249e3ab6bbbd0b99557880f1a6eade61f1dac3f5956fcf3ebacc6bca7f0ff7badc69bfb6a6c74dbd594372f701ffb13e138f96bba974f", 0xc7}, {&(0x7f0000000400)="83eea005315372b13a8ae9bfaa4abdccf953ee11e85ed772f5605f5b6b0581611ddfe7c9da6a76c7a68b8a24798b982fd6f1dbe911dddc1dfb5d45d7537aa041790ce3578ddd950da8cd239df59d87b8f6511c32401485ae35df873e3aaf322a53d9da409275c555a8ce03844ea252e44630fd75862d51099ecfae0a9d318888e9138862d880cd5f2402fe95623cf0631d24a85a8ebf9c2ad1923798acc17ebbff45af3b6898624cc61c28b1478d0e7e853875264c5e0af433838712055cfc184dc70dfcc6861eda8be692864d3c7edea27430ea239868cc00bd7f1ad20a11c2ad6fb36b", 0xe4}, {&(0x7f0000000980)="65c6cfb53ad0a298d4c9f363054b37245bd7644e0a3e07ec3ae610c191976b0b8a439b7d9c0ee8f7d9a6706ebb52ffcfe40f9b19dd6d827d21c638a04c47e0af9c10e2267867551e3ba596dd87d0919c8ed45ccb9ea76b01bb7c2608365c2745fb45747168615d3476039f6b18dc30a21a70909233e50c58b40ddddccd2e64e2719943021f1ac0953b4b3831465b36", 0x8f}], 0x4, &(0x7f0000000c40)=[{0x108, 0x109, 0x3, "b01898a3b0586365272f2445c062bf8bd6297229dcd63bd160f6f3e76fa02d735f957d766c3b5122d9630a9a2cca8588951f07873f49a144cbc4fa2f6ed3e979336e19a3db9dacf6a9ba8d034c66fcfa31b812479b74bc6200e3a5dbcf29fec56a8e928116fb03e0b3d2b988549300238802c0663c01fdad575f04d6680116492188d851d883dd05bcd38ad499ce3c39a65da42b19499626e55b543b1cb131f39faf7549b2907b57ea9703d90531e1a64d3267fe5cdb6a38226c5301e4f84c86dd027e5737893fc83f7a7dff39ebec46044a3e603e67000cc02c4142b764a3a49c6b4ee1dda5594f3c7da3d85108fcefc42b05d7d8d2f89e"}, {0x40, 0x109, 0x9, "3f3ca54b18ba4c7b0a8df4b59e0e9e3ab8a2d066becc451619b4bf80d1a9fad8c6fd7eabddc0bd60b3731a2cab"}], 0x148}, 0x4000000) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000780)=""/245, 0xf5}, {&(0x7f0000003380)=""/235, 0xeb}, {&(0x7f0000000880)=""/221, 0xdd}, {&(0x7f0000000680)=""/203, 0xcb}, {&(0x7f0000000000)=""/120, 0x78}, {&(0x7f0000002100)=""/4090, 0xffa}, {&(0x7f0000000b40)=""/203, 0xcb}, {&(0x7f0000000540)=""/211, 0xd3}], 0x8}, 0x40012100) 912.611583ms ago: executing program 3 (id=2474): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000040)=@ethtool_wolinfo={0x5, 0x0, 0x2, "0a08cf30c194"}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008000500", @ANYRES32=r6], 0x50}}, 0x2) 837.439483ms ago: executing program 3 (id=2475): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000804400000008000300", @ANYRES32=r5, @ANYBLOB="0a001800030303030303000010007000040005000500050000000000080022018b020000080026000c1700009850335ddfccc9a5b377734024ad2e0339e6440a6a"], 0x48}, 0x1, 0x0, 0x0, 0xc001}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x325, 0x70bd27, 0x0, {0x7, 0x0, 0x0, r7, 0x80, 0x8e, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x200440c5}, 0x0) (async) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 708.918586ms ago: executing program 0 (id=2476): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0xe, 0x1, 0x0, 0x3, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e20}]}, 0x18}}, 0x0) 708.381709ms ago: executing program 2 (id=2477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0xffffffffffffff1c}]}, 0x1c}}, 0x0) (async) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv4_getnexthop={0x58, 0x6a, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x3}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r2}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x58}}, 0x20000040) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="c0010000100001000000000000000000000000000000000000000000000000002001000000000000000000000000000200000000000000000000008001000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000002000000000000100000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000300af0000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017004a9245"], 0x1c0}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) 621.208898ms ago: executing program 4 (id=2478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) socket$kcm(0x11, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e22, @multicast1}, 0x3, 0x4, 0x2, 0x1}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000002c0)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="f9ffffff", 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x400c}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x1, 0x700, 0x4, 0x6, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x66, 0x0, 0x0, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x13, 0x9, &(0x7f00000003c0)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x76}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x3, 0x2, 0x6, 0x7, 0x5, 0x8, 0xfffffffffffffff0}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x802, 0xffffffff}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000000200000008000300feffffff"], 0x1c}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x94, 0x2d, 0x9, 0x70bd27, 0x0, {0x6}, [@typed={0x7d, 0xa, 0x0, 0x0, @uid}]}, 0xe6}}, 0x84) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r10) sendmsg$NLBL_MGMT_C_ADDDEF(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100fbdfd09172c182c604000000140005000000000000000000000000000000000108000200050000001400060020010000000000000000000000000001060005"], 0x4c}}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r8, &(0x7f0000000100)="b5caf18b2f91c6bfc50ac6a4be69", &(0x7f0000000140)=""/93}, 0x20) 589.896493ms ago: executing program 1 (id=2479): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xfffffffc, 0xf) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x3, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}], @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="3504000040000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc26476c256459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be66884103af11ff46315cdc9f00"/1031, 0x407}], 0x2}, 0x10049014) 491.638141ms ago: executing program 3 (id=2480): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000040)={'dvmrp0\x00', {0x2, 0x0, @multicast1}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)=@newlink={0x44, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_MASTER={0x8}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x44}, 0x1, 0xba01}, 0x4000040) 489.971135ms ago: executing program 4 (id=2481): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c0400001800dd8d00000000000000000200000000000006000000000600150001000000080416800404010000000000000000000000040000000000fe80000000000000000000000000000000000000000000000000000000000001fc00000000000000000000000000000000000000000000000000ffff00000000fe8000000000000000000000000000aaff02000000000000000000000000000100000000000000000000000000000000ff020000000000000000000000000001fe8000000000000000000000000000aaff01000000000000000000000000000100000000000000000000ffffe0000001ff020000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000bbfcff0000000000000000ffffffffffffff010000000000000000000000000001fc010000000000000000000000000000fe8800000000000000000000000000012001000000000000000000000000000200000000000000000000ffffac141400fe8000000000000000000000000000bbfe880000000000000000000000000001ff010000000000000000000000000001fc00000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001fc000000000000000000000000000000fc020000000000000000000000000000ff020000000000000000000000000001fe800000000000000000000000000000fe800000000000000000000000000000fe8800000000000000000000000000010000000000000000000000000000000100000000000000000000000000000001fe8000000000000000000000000000aa00000000000000000000000000000001fc020000000000000000000000000000fe880000000000000000000000000001ff010000000000000000000000000001ff01000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000aafc010000000000000000000000000000ff010000000000000000000000000001ff01000000000000000000000000000120010000000000000000000000000002ff01000000000000000000000000000100000000000000000000ffff00000000ff02000000000000000000000000000100000000000000000000ffffac1e000100000000000000000000000000000001fe88000000000000000000000000000100000000000000000000ffffac1414bbfe880000000000000000000000000001fc020000000000000000000000000000fe880000000000000000000000000001fc0100000000000000000000000000002001000000000000000000000000000100000000000000000000000000000001fe880000000000000000000000000001fe8000"/1068], 0x42c}}, 0x0) (async) unshare(0xa6030a80) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async) listen(r1, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e7, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x13, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 481.003264ms ago: executing program 2 (id=2482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000140)=0x80) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4004001) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010003704000000000000000000000000a835f36989d96f85c03f765e77edef27a47dc96df33d99bdcf77feb0c4f55de1114948657de1a7ab585431db1bb5f94cc9c11b35b748abf7c4ba02908f1a03f2ac5cae4baec800145ffbc0609587c2", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280060006000000000005000700000000000800040000000000"], 0x4c}}, 0x0) 400.706746ms ago: executing program 0 (id=2483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0xffffffffffffff8f, 0xf9b}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000001000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a310000000009000200"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 315.682322ms ago: executing program 4 (id=2484): socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x80000017}) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x28e, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0) 304.056225ms ago: executing program 3 (id=2485): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000021c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4001}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x4c0d0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) (rerun: 64) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000000)) (async, rerun: 32) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000000000008900000008000300", @ANYRES32=r3, @ANYBLOB="ca0001000000923df8f09d37c54d738545087594d4c7e45edc713dd983bb1050d670f79984930c90d4780d65b3ab84826873ac0ca4032b6596f3b705e69ffb2488aac2c5750b10643c915f2c1ce4c033450c2f1618f106b7b0b33967ed65ff9eeda0b64eb9bdebcf4eb99ab22e234261aff146b778246f12037c0d1e97"], 0x34}}, 0x0) (rerun: 32) 242.705088ms ago: executing program 2 (id=2486): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000003700000000000000a6a000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) 241.603982ms ago: executing program 1 (id=2487): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x7800, 0x700, 0xffff, 0x0, {{0x26, 0x4, 0x3, 0x1f, 0x98, 0x64, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@end, @ssrr={0x89, 0x17, 0x4e, [@loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010100]}, @cipso={0x86, 0x49, 0xffffffffffffffff, [{0x0, 0x12, "9d9792127233fc1d6f199b737e014966"}, {0x1, 0xa, "ad723f36a1522e9d"}, {0x2, 0x4, 'el'}, {0x0, 0xe, "e424efc7f3cba6c0279902d3"}, {0x6, 0x12, "b22dc724447dbab533b5afcc7b1def31"}, {0x7, 0x3, "b0"}]}, @ssrr={0x89, 0x1b, 0x24, [@empty, @multicast1, @remote, @multicast1, @broadcast, @empty]}, @end, @ra={0x94, 0x4}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x3, [@enum64={0xc, 0x8, 0x0, 0x13, 0x1, 0x2, [{0x9, 0x9, 0x6}, {0xd, 0x1ff, 0x2}, {0x1, 0xfffffe4b, 0x9}, {0x7, 0x7f, 0x6}, {0xc, 0x401, 0x6}, {0xe, 0x6, 0x800}, {0x10, 0x3e000000, 0x4}, {0x9, 0x7, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x3}}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}, @volatile={0x3, 0x0, 0x0, 0x9, 0x5}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x7}, @restrict={0x3}, @float={0xc, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000400)=""/210, 0xeb, 0xd2, 0x0, 0x6fee}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8000, '\x00', r1, r2, 0x3, 0x3}, 0x50) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) connect$rxrpc(r3, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 144.45366ms ago: executing program 0 (id=2488): r0 = socket$inet(0x2, 0xa, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) (async, rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in=@rand_addr=0x64010101, @in6=@private2, 0x4e21, 0x6, 0x4e21, 0x4, 0xa, 0x0, 0x0, 0x3c, r3, r4}, {0x4, 0xffffffffffff0000, 0xffffffff, 0x8001, 0x3, 0x0, 0xfffffffffffffff8, 0x9}, {0xd6bb, 0xfff, 0x9, 0x6}, 0xa, 0x6e6bba, 0x1, 0x0, 0x0, 0x3}, {{@in=@remote, 0x4d2, 0x33}, 0x2, @in=@loopback, 0x0, 0x3, 0x3, 0x0, 0x6, 0x5, 0x7}}, 0xe8) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(0x3) (async) r5 = socket(0x2, 0x2, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async, rerun: 64) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000940)={{r5}, "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"}) (rerun: 64) syz_emit_ethernet(0x18, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @multicast, @void, {@llc={0x4, {@llc={0x0, 0x0, '}', "e2f1b295469f6d"}}}}}, &(0x7f0000000080)={0x0, 0x3, [0x77f, 0x1fb, 0x218, 0xb1f]}) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) 131.002288ms ago: executing program 4 (id=2489): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="010000000000000000000900000020000380140002007663616e3000000000000000000000000800010000000000"], 0x34}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 97.078558ms ago: executing program 2 (id=2490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x7800, 0x8, 0x8, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x67, 0x0, 0x7, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@end, @timestamp_prespec={0x44, 0xc, 0xef, 0x3, 0x6, [{@broadcast, 0x1}]}, @end, @lsrr={0x83, 0x7, 0xb5, [@local]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x16}, @broadcast, @empty, @multicast2]}, @timestamp_addr={0x44, 0xc, 0x9a, 0x1, 0x2, [{@private=0xa010101, 0x10}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x6, 0x7800, 0x9, 0xfffffffd, {{0x12, 0x4, 0x1, 0x2, 0x48, 0x65, 0x0, 0x7, 0x29, 0x0, @empty, @empty, {[@noop, @end, @timestamp={0x44, 0x24, 0x80, 0x0, 0x0, [0xfffffffa, 0x5, 0x4, 0x0, 0xb97, 0x0, 0x5, 0x7]}, @ssrr={0x89, 0xb, 0x74, [@private=0xa010101, @multicast1]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)=ANY=[@ANYBLOB="cf07209820c98aa83a1655b9cf1d8cb2cbb79ed19de8185f04e5d3149732bc0fc5c24812a5434acb23a02c37aaba1f0e95300c18ad5cbbc28ae4e4cb266a93140c5f18ac44db57c98e5ad037c21956609167842faa007c61e3", @ANYRES16=r2, @ANYBLOB="000426bd7000ffdbdf250100000014000180080003000400000008000100", @ANYRES32=r3, @ANYBLOB="680001801400020070696d3672656731000000000000000008000300010000001400020068737230000000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=r4, @ANYBLOB="14000200766c616e300000000000000000000000600002801c00018008000100030000000800010008000000080001000f0000002c000180080001000700000008000100080000000800010006000000080001000200000008000100060000001400018008000100060000000800010003000000480102800c00018008000100070000004c00018008000100040000000800010007000000080001000200000008000100030000000800010004000000080001000000000008000100080000000800010006000000080001000300000014000180080001000000000008000100030000003400018008000100010000000800010000000000080001000400000008000100070000000800010000000000080001000400000044000180080001000700000008000100060000000800010007000000080001000300000008000100030000000800010008000000080001000300000008000100000000000c000180080001000300000024000180080001000400000008000100050000000800010004000000080001000800000014000180080001000100000008000100080000001c000180080001000800000008000100070000000800010000000000180002801400018008000100040000000800010006000000"], 0x250}, 0x1, 0x0, 0x0, 0x4080}, 0x804) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x402) r6 = socket$unix(0x1, 0x5, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r5, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000000c0)=""/183, 0xb7}, {&(0x7f0000000600)=""/200, 0xc8}, {&(0x7f0000001f00)=""/4078, 0xfee}], 0x4}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 23.794584ms ago: executing program 1 (id=2491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000000000010000000a000000090002008d001f106f194eb3050001"], 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xfffffffffffffe6d, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x20040004) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02000082", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fddbdf25770000000c00990007000000120000000800ef0001000000"], 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x48040) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x44, 0x0, 0x9, 0x3, 0x0, 0x0, {0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)) sendto$inet(r2, &(0x7f0000000580)="fb560fa15dae3dae67bc4abb2f4d004e9564ad1b6c28f22b6ff8f7ea8226948a677916f9b11b752684a5344ca8f305ca74b68d9769bb84fa7ce3267b5a797e039e0f6e87afac2f872a77598cb3f932fb4fdc4e3baa59cf72c7e92e4275659acf5d898c9b6958c59d33172bb5a1d88741798ba262f71b848aaaf49a6178d2738106dc768570b629c65c723d21b91bf841f6705ec31e49c15160fa8662f9b2bfc55c66753e8b9ef744907a37699e72cca170a376a242a0f403bb5121acdc34f69669a5cb85c66a56860bfd0e142f91838a365452896a5b3ca7c1a92293f31ac678afefc5c47c66396b1d91790448714f00", 0xf0, 0x40894, &(0x7f0000000680)={0x2, 0x7ff, @empty}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) r5 = socket$inet6_sctp(0xa, 0x4, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) syz_emit_ethernet(0xa56, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0xa20, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xc8, "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"}]}}}}}}, 0x0) shutdown(r6, 0x1) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000001280)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000002c0)={r8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000400)={0x40, 0x8, 0x2, 0xf, 0x2, 0xffff0000, 0x1, 0x0, r8}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000012c0)={r4, 0xfeff, 0x207}, 0xff2c) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f00000004c0)={'ip_vti0\x00', 0x0, 0x8709, 0x7800, 0x0, 0xffffffff, {{0x1c, 0x4, 0x1, 0x12, 0x70, 0x66, 0x0, 0xb, 0x29, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x13, 0x26, [@private=0xa010102, @multicast2, @multicast1, @broadcast]}, @cipso={0x86, 0x26, 0x3, [{0x0, 0xf, "03ae2966c3f2b1fac108020a62"}, {0x2, 0xc, "ea997e23298fc460822d"}, {0x6, 0x2}, {0x0, 0x3, "1b"}]}, @ssrr={0x89, 0x7, 0xad, [@multicast1]}, @lsrr={0x83, 0x13, 0xe, [@multicast2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @lsrr={0x83, 0x7, 0xb9, [@empty]}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="dfe9c9f91e7f417d166b9efb69bbc90e6e9c57ead6535f63a7ef0e5508c7ee0a3826ef6365b8c90a2aabf9ef2b3fbb0373af8ab3341c397867c139e11b81f4a74d36688f28ea0455cf28b2ee874f31239db315925cec8c7f8935988f15608bd9b8ebb3d26c6df690326d", 0x6a, 0x10, &(0x7f00000003c0)={0x11, 0x16, r10, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 0s ago: executing program 0 (id=2492): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x4, [@typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @enum={0xe, 0x3, 0x0, 0x6, 0x4, [{0x0, 0x8}, {0x1, 0x1}, {0xc, 0x6c0}]}, @const={0xb, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0x9, 0x1}, {0x5, 0x1}]}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x5}, @datasec={0x10, 0x3, 0x0, 0xf, 0x2, [{0x1, 0x401, 0x1}, {0x3, 0xffffffff, 0x7}, {0x2, 0x3, 0x6}], "68c1"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000001c0), 0xbc, 0x0, 0x1, 0x3, 0x10000}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9e, 0x9e, 0x4, [@typedef={0x10, 0x0, 0x0, 0x8, 0x1}, @enum={0xe, 0x3, 0x0, 0x6, 0x4, [{0x0, 0x8}, {0x1, 0x1}, {0xc, 0x6c0}]}, @const={0xb, 0x0, 0x0, 0xa, 0x4}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0x9, 0x1}, {0x5, 0x1}]}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x5}, @datasec={0x10, 0x3, 0x0, 0xf, 0x2, [{0x1, 0x401, 0x1}, {0x3, 0xffffffff, 0x7}, {0x2, 0x3, 0x6}], "68c1"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000001c0), 0xbc, 0x0, 0x1, 0x3, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x42e800, 0x4, 0x8, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x400000}, 0x50) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x818}, 0x24000041) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) (async) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000480)=""/214, 0xd6}], 0x2}, 0x7}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) (async) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000280)=0x60, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000002000000014001a80100005800c000180"], 0x34}}, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}}) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) kernel console output (not intermixed with test programs): 5.819448][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.305'. [ 105.865623][ T7046] netlink: 'syz.3.305': attribute type 2 has an invalid length. [ 106.013860][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 106.170383][ T7065] tipc: Enabling of bearer rejected, failed to enable media [ 106.194277][ T7067] sctp: [Deprecated]: syz.2.310 (pid 7067) Use of int in max_burst socket option deprecated. [ 106.194277][ T7067] Use struct sctp_assoc_value instead [ 106.246493][ T7065] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 106.274732][ T7065] netlink: 'syz.2.310': attribute type 11 has an invalid length. [ 106.291954][ T7065] netlink: 220 bytes leftover after parsing attributes in process `syz.2.310'. [ 106.393139][ T7073] macvtap1: entered promiscuous mode [ 106.412064][ T7073] macvtap1: entered allmulticast mode [ 106.551610][ T7086] netlink: 4260 bytes leftover after parsing attributes in process `syz.3.317'. [ 106.568458][ T7088] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 106.728367][ T7095] netlink: 44 bytes leftover after parsing attributes in process `syz.3.321'. [ 106.744974][ T7095] netlink: 43 bytes leftover after parsing attributes in process `syz.3.321'. [ 106.755567][ T7095] netlink: 'syz.3.321': attribute type 5 has an invalid length. [ 106.765332][ T7095] netlink: 43 bytes leftover after parsing attributes in process `syz.3.321'. [ 107.133491][ T7118] pim6reg1: entered promiscuous mode [ 107.152708][ T7119] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 107.184829][ T7118] pim6reg1: entered allmulticast mode [ 107.242442][ T7126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.330'. [ 107.259588][ T7126] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 107.597255][ T7140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.950558][ T7160] netlink: 'syz.0.342': attribute type 4 has an invalid length. [ 108.088495][ T7164] netlink: 'syz.2.343': attribute type 3 has an invalid length. [ 108.518772][ T7181] bond0: left promiscuous mode [ 108.555409][ T7181] bond_slave_0: left promiscuous mode [ 108.564840][ T7181] bond_slave_1: left promiscuous mode [ 108.575193][ T7181] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.581025][ T7193] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 108.619463][ T7181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 108.664927][ T7195] tun0: tun_chr_ioctl cmd 1074025675 [ 108.704649][ T7195] tun0: persist disabled [ 108.933762][ T7182] syzkaller1: entered promiscuous mode [ 108.939738][ T7182] syzkaller1: entered allmulticast mode [ 108.958577][ T7217] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 109.397531][ T7241] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 109.502716][ T7258] atomic_op ffff8880251e8998 conn xmit_atomic 0000000000000000 [ 109.656352][ T7265] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 109.823144][ T7277] vlan2: entered promiscuous mode [ 109.848502][ T7277] vlan2: entered allmulticast mode [ 109.859724][ T7277] hsr_slave_1: entered allmulticast mode [ 110.117658][ T7285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.221403][ T7285] bond0: Device is already in use. [ 110.266794][ T7297] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20000 [ 110.777367][ T7334] __nla_validate_parse: 9 callbacks suppressed [ 110.777385][ T7334] netlink: 348 bytes leftover after parsing attributes in process `syz.2.389'. [ 111.107032][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.396'. [ 111.268389][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.399'. [ 111.455550][ T7365] validate_nla: 2 callbacks suppressed [ 111.455566][ T7365] netlink: 'syz.2.401': attribute type 1 has an invalid length. [ 111.493699][ T7365] netlink: 784 bytes leftover after parsing attributes in process `syz.2.401'. [ 111.527126][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 111.605220][ T7376] netlink: 80 bytes leftover after parsing attributes in process `syz.0.402'. [ 111.607855][ T7375] tipc: Enabled bearer , priority 0 [ 111.665431][ T7375] syzkaller0: entered promiscuous mode [ 111.693692][ T7375] syzkaller0: entered allmulticast mode [ 111.761745][ T7375] tipc: Resetting bearer [ 111.770392][ T7384] sock: sock_timestamping_bind_phc: sock not bind to device [ 111.976781][ T7391] netlink: 'syz.0.407': attribute type 29 has an invalid length. [ 112.151279][ T7400] pim6reg1: entered promiscuous mode [ 112.158179][ T7400] pim6reg1: entered allmulticast mode [ 112.225704][ T7412] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.412'. [ 112.335617][ T7369] tipc: Resetting bearer [ 112.385336][ T7369] tipc: Disabling bearer [ 112.479464][ T5875] Bluetooth: hci4: command 0x0405 tx timeout [ 112.639945][ T7437] ipvlan0: entered promiscuous mode [ 112.645202][ T7437] ipvlan0: entered allmulticast mode [ 112.667953][ T7437] veth0_vlan: entered allmulticast mode [ 113.045915][ T7459] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 113.141256][ T7466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.431'. [ 113.213502][ T7459] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.251920][ T7465] bond2: (slave gretap1): making interface the new active one [ 113.261367][ T7465] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 113.302402][ T7471] netlink: 16 bytes leftover after parsing attributes in process `syz.0.433'. [ 113.482648][ T7481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.436'. [ 113.748792][ T7496] netlink: 'syz.4.440': attribute type 3 has an invalid length. [ 114.026817][ T7500] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 114.175138][ T7500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.246436][ T7508] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 114.301317][ T7508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.520039][ T7527] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 114.531646][ T181] nci: nci_ntf_packet: unknown ntf opcode 0x10b [ 115.245740][ T7538] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 115.377679][ T7546] netlink: 'syz.0.457': attribute type 8 has an invalid length. [ 115.434354][ T7549] nbd: must specify a size in bytes for the device [ 115.593167][ T7557] netlink: 'syz.1.462': attribute type 1 has an invalid length. [ 115.649941][ T7557] netlink: 'syz.1.462': attribute type 1 has an invalid length. [ 115.992316][ T7564] bond3: (slave bridge1): making interface the new active one [ 116.010223][ T7564] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 116.278698][ T7597] netlink: 'syz.3.470': attribute type 21 has an invalid length. [ 116.331522][ T7597] __nla_validate_parse: 5 callbacks suppressed [ 116.331537][ T7597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.470'. [ 116.392140][ T7597] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 116.963430][ T7624] netlink: 'syz.4.480': attribute type 2 has an invalid length. [ 116.993799][ T7624] netlink: 9 bytes leftover after parsing attributes in process `syz.4.480'. [ 117.037052][ T7624] gretap0: entered promiscuous mode [ 117.223680][ T7636] netlink: zone id is out of range [ 117.422312][ T7651] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 117.437513][ T7651] sctp: [Deprecated]: syz.3.487 (pid 7651) Use of int in max_burst socket option. [ 117.437513][ T7651] Use struct sctp_assoc_value instead [ 117.698479][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 117.716394][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 118.692320][ T7719] sctp: [Deprecated]: syz.1.502 (pid 7719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.692320][ T7719] Use struct sctp_sack_info instead [ 118.764936][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.502'. [ 118.785446][ T7719] netlink: 'syz.1.502': attribute type 7 has an invalid length. [ 118.818025][ T7719] netlink: 'syz.1.502': attribute type 8 has an invalid length. [ 118.899152][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 118.957149][ T7730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.506'. [ 119.132939][ T7739] netlink: 96 bytes leftover after parsing attributes in process `syz.2.510'. [ 119.213764][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.511'. [ 119.245140][ T7745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.511'. [ 119.297918][ T7745] geneve2: entered promiscuous mode [ 119.307239][ T7748] netlink: 'syz.2.513': attribute type 1 has an invalid length. [ 119.330715][ T7745] geneve2: entered allmulticast mode [ 120.055968][ T7789] vlan4: entered allmulticast mode [ 120.066897][ T7789] hsr0: entered allmulticast mode [ 120.082475][ T7789] hsr_slave_0: entered allmulticast mode [ 120.388614][ T7802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.497426][ T7802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.583198][ T7802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.055461][ T7844] netlink: 'syz.0.548': attribute type 3 has an invalid length. [ 121.066402][ T7839] tipc: Started in network mode [ 121.075563][ T7839] tipc: Node identity 8ab6ae2e5614, cluster identity 4711 [ 121.092977][ T7839] tipc: Enabled bearer , priority 0 [ 121.113301][ T7839] syzkaller0: entered promiscuous mode [ 121.140210][ T7839] syzkaller0: entered allmulticast mode [ 121.177068][ T7839] tipc: Resetting bearer [ 121.212373][ T7838] tipc: Resetting bearer [ 121.237095][ T7838] tipc: Disabling bearer [ 121.255573][ T9] IPVS: starting estimator thread 0... [ 121.354045][ T7859] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 121.355261][ T7856] veth1_to_bond: entered allmulticast mode [ 121.367935][ T7854] IPVS: using max 32 ests per chain, 76800 per kthread [ 121.373144][ T7861] __nla_validate_parse: 6 callbacks suppressed [ 121.373159][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.552'. [ 121.501472][ T7861] bond0: (slave bond_slave_1): Releasing backup interface [ 121.529117][ T7868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.556'. [ 121.565328][ T7868] openvswitch: netlink: Flow key attr not present in new flow. [ 121.634722][ T7867] ipvlan2: entered promiscuous mode [ 121.797553][ T7873] netlink: 'syz.0.558': attribute type 10 has an invalid length. [ 121.877434][ T7882] syz.1.561 uses old SIOCAX25GETINFO [ 121.918369][ T7879] vlan2: entered promiscuous mode [ 121.956882][ T7879] vlan2: entered allmulticast mode [ 121.982702][ T7879] hsr_slave_1: entered allmulticast mode [ 122.148430][ T7894] netlink: 'syz.0.564': attribute type 2 has an invalid length. [ 122.203533][ T7894] netlink: 'syz.0.564': attribute type 1 has an invalid length. [ 122.226231][ T7894] netlink: 'syz.0.564': attribute type 2 has an invalid length. [ 122.544489][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 122.553570][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 122.578671][ T7916] netlink: 'syz.0.572': attribute type 3 has an invalid length. [ 122.587439][ T7913] netlink: 36 bytes leftover after parsing attributes in process `syz.4.570'. [ 122.601112][ T7914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.571'. [ 122.618439][ T7917] bond0: (slave rose0): Enslaving as an active interface with an up link [ 122.699680][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 122.800006][ T7928] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 122.806811][ T7928] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 122.987125][ T7934] veth1_to_bond: entered allmulticast mode [ 123.024570][ T7933] veth1_to_bond: left allmulticast mode [ 123.309862][ T7938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.531754][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 124.038290][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'. [ 124.117560][ T7988] IPv6: sit1: Disabled Multicast RS [ 124.153166][ T7988] sit1: entered allmulticast mode [ 124.183373][ T7998] netlink: 'syz.0.602': attribute type 3 has an invalid length. [ 124.390731][ T8011] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 124.416917][ T8011] netlink: 348 bytes leftover after parsing attributes in process `syz.3.606'. [ 124.458223][ T8008] can: request_module (can-proto-4) failed. [ 124.862566][ T8037] netlink: 'syz.1.615': attribute type 3 has an invalid length. [ 124.876383][ T8039] sctp: [Deprecated]: syz.3.616 (pid 8039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.876383][ T8039] Use struct sctp_sack_info instead [ 124.949689][ T8043] sctp: [Deprecated]: syz.3.616 (pid 8043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.949689][ T8043] Use struct sctp_sack_info instead [ 125.524557][ T8077] IPVS: Error connecting to the multicast addr [ 125.537889][ T8076] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.545156][ T8076] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.747553][ T8091] netlink: 'syz.1.631': attribute type 11 has an invalid length. [ 125.914519][ T8101] unsupported nla_type 52263 [ 126.403405][ T8125] __nla_validate_parse: 2 callbacks suppressed [ 126.403421][ T8125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.640'. [ 127.265288][ T8174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 127.802258][ T8196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.662'. [ 127.823798][ T8196] netlink: 68 bytes leftover after parsing attributes in process `syz.2.662'. [ 128.227028][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 128.655680][ T8236] netlink: 'syz.0.671': attribute type 83 has an invalid length. [ 128.801010][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.674'. [ 128.902014][ T8254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.674'. [ 129.208947][ T8244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.458271][ T8283] tipc: Enabling of bearer rejected, failed to enable media [ 130.129860][ T8323] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20000 [ 130.322834][ T8332] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 130.463312][ T8332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.534175][ T8334] 8021q: adding VLAN 0 to HW filter on device bond3 [ 130.552222][ T8334] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 130.568479][ T8334] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 130.699616][ T8337] veth3: entered promiscuous mode [ 130.732691][ T8337] bond3: (slave veth3): Enslaving as an active interface with a down link [ 130.927820][ T8361] netlink: 44 bytes leftover after parsing attributes in process `syz.2.705'. [ 130.944091][ T8356] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 131.123222][ T8375] netlink: 27 bytes leftover after parsing attributes in process `syz.3.708'. [ 131.530154][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 131.593550][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.713'. [ 131.653124][ T8402] netlink: 'syz.2.715': attribute type 3 has an invalid length. [ 131.680789][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 131.852630][ T8411] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.716'. [ 132.127356][ T8423] syzkaller0: entered promiscuous mode [ 132.146988][ T8423] syzkaller0: entered allmulticast mode [ 132.177318][ T8426] tipc: Enabled bearer , priority 0 [ 132.220550][ T8421] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 132.318886][ T8423] tipc: Resetting bearer [ 132.438347][ T8418] tipc: Resetting bearer [ 132.621840][ T8418] tipc: Disabling bearer [ 132.831140][ T8460] sctp: [Deprecated]: syz.4.729 (pid 8460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 132.831140][ T8460] Use struct sctp_sack_info instead [ 132.889754][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.896361][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.948473][ T8460] ieee802154 phy0 wpan0: encryption failed: -90 [ 133.106543][ T8474] netlink: 'syz.0.734': attribute type 1 has an invalid length. [ 133.151120][ T8474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.734'. [ 133.173444][ T8477] netlink: 112 bytes leftover after parsing attributes in process `syz.4.736'. [ 133.442755][ T8497] netlink: 'syz.2.741': attribute type 1 has an invalid length. [ 133.492228][ T8497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.741'. [ 133.640317][ T8510] netlink: 80 bytes leftover after parsing attributes in process `syz.4.743'. [ 133.733165][ T8510] netlink: 80 bytes leftover after parsing attributes in process `syz.4.743'. [ 133.768651][ T8514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.335532][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 134.356284][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.755'. [ 134.494462][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 134.693223][ T8555] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 134.941387][ T8571] syzkaller1: entered promiscuous mode [ 134.976728][ T8571] syzkaller1: entered allmulticast mode [ 135.529087][ T8609] Illegal XDP return value 4294967289 on prog (id 152) dev N/A, expect packet loss! [ 135.566332][ T8614] netlink: 'syz.1.774': attribute type 10 has an invalid length. [ 135.977544][ T8635] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 136.031135][ T8635] 0ªî{X¹¦: entered allmulticast mode [ 136.066961][ T8635] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 136.113326][ T8641] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 136.145095][ T8641] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 136.156419][ T8641] gretap1: entered promiscuous mode [ 136.177708][ T8641] gretap1: entered allmulticast mode [ 136.451588][ T8661] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 136.642661][ T8671] FAULT_INJECTION: forcing a failure. [ 136.642661][ T8671] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 136.692769][ T8671] CPU: 0 UID: 0 PID: 8671 Comm: syz.0.794 Not tainted syzkaller #0 PREEMPT(full) [ 136.692793][ T8671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.692810][ T8671] Call Trace: [ 136.692817][ T8671] [ 136.692825][ T8671] dump_stack_lvl+0x189/0x250 [ 136.692857][ T8671] ? __pfx____ratelimit+0x10/0x10 [ 136.692880][ T8671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.692899][ T8671] ? __pfx__printk+0x10/0x10 [ 136.692921][ T8671] ? __might_fault+0xb0/0x130 [ 136.692955][ T8671] should_fail_ex+0x414/0x560 [ 136.692981][ T8671] _copy_from_user+0x2d/0xb0 [ 136.693002][ T8671] ___sys_sendmsg+0x158/0x2a0 [ 136.693053][ T8671] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.693110][ T8671] ? __fget_files+0x2a/0x420 [ 136.693131][ T8671] ? __fget_files+0x3a0/0x420 [ 136.693164][ T8671] __sys_sendmmsg+0x227/0x430 [ 136.693186][ T8671] ? __pfx___sys_sendmmsg+0x10/0x10 [ 136.693202][ T8671] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 136.693251][ T8671] ? ksys_write+0x22a/0x250 [ 136.693275][ T8671] ? __pfx_ksys_write+0x10/0x10 [ 136.693292][ T8671] ? rcu_is_watching+0x15/0xb0 [ 136.693316][ T8671] __x64_sys_sendmmsg+0xa0/0xc0 [ 136.693336][ T8671] do_syscall_64+0xfa/0x3b0 [ 136.693350][ T8671] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.693371][ T8671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.693387][ T8671] ? clear_bhb_loop+0x60/0xb0 [ 136.693406][ T8671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.693422][ T8671] RIP: 0033:0x7fd1d598ebe9 [ 136.693441][ T8671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.693455][ T8671] RSP: 002b:00007fd1d687e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 136.693477][ T8671] RAX: ffffffffffffffda RBX: 00007fd1d5bc5fa0 RCX: 00007fd1d598ebe9 [ 136.693489][ T8671] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003 [ 136.693500][ T8671] RBP: 00007fd1d687e090 R08: 0000000000000000 R09: 0000000000000000 [ 136.693510][ T8671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.693520][ T8671] R13: 00007fd1d5bc6038 R14: 00007fd1d5bc5fa0 R15: 00007ffc9b402878 [ 136.693550][ T8671] [ 136.925260][ T8677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.088455][ T8685] netlink: zone id is out of range [ 137.100060][ T8685] netlink: del zone limit has 4 unknown bytes [ 137.356364][ T8705] __nla_validate_parse: 6 callbacks suppressed [ 137.356381][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.801'. [ 137.484998][ T8711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.801'. [ 137.573500][ T8717] netlink: 'syz.0.807': attribute type 3 has an invalid length. [ 137.596132][ T8715] netlink: 44 bytes leftover after parsing attributes in process `syz.2.805'. [ 137.631740][ T8719] geneve2: entered promiscuous mode [ 137.636999][ T8719] geneve2: entered allmulticast mode [ 137.648019][ T49] netdevsim netdevsim1 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 19999 - 0 [ 137.669910][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 137.684515][ T8719] openvswitch: netlink: EtherType 0 is less than min 600 [ 137.803815][ T8728] netlink: 'syz.4.810': attribute type 10 has an invalid length. [ 137.831460][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 137.906167][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 138.001113][ T8736] netlink: 'syz.0.813': attribute type 17 has an invalid length. [ 138.029870][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 138.060074][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.813'. [ 138.065519][ T8736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.813'. [ 138.145165][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.815'. [ 138.395458][ T8760] netlink: 'syz.4.819': attribute type 3 has an invalid length. [ 138.753042][ T8780] tipc: Started in network mode [ 138.758386][ T8780] tipc: Node identity 0ac84e7741b8, cluster identity 4711 [ 138.767660][ T8780] tipc: Enabled bearer , priority 0 [ 138.780238][ T8780] syzkaller0: entered promiscuous mode [ 138.785845][ T8780] syzkaller0: entered allmulticast mode [ 139.220554][ T8801] netlink: 'syz.0.833': attribute type 3 has an invalid length. [ 139.238158][ T8778] tipc: Resetting bearer [ 139.266430][ T8778] tipc: Disabling bearer [ 139.438223][ T8719] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 139.658066][ T8719] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 139.745327][ T8827] netlink: 'syz.0.842': attribute type 64 has an invalid length. [ 139.764723][ T8827] netlink: 20 bytes leftover after parsing attributes in process `syz.0.842'. [ 139.856558][ T8719] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 139.859574][ T8829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.885909][ T8831] netlink: 'syz.3.844': attribute type 3 has an invalid length. [ 139.900589][ T8829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 140.114425][ T181] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 140.345290][ T3485] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 140.370821][ T3485] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 140.713316][ T3485] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 140.901511][ T8875] netlink: 'syz.0.857': attribute type 3 has an invalid length. [ 140.985299][ T8880] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.992600][ T8880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.383847][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.868'. [ 141.484499][ T8909] bond0: (slave syz_tun): Releasing backup interface [ 141.490091][ T8913] netlink: 'syz.1.870': attribute type 3 has an invalid length. [ 141.511931][ T8909] bond0: (slave team0): Releasing backup interface [ 141.554676][ T8909] bridge_slave_0: left allmulticast mode [ 141.568342][ T8909] bridge_slave_0: left promiscuous mode [ 141.577738][ T8909] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.595235][ T8909] bridge_slave_1: left allmulticast mode [ 141.610857][ T8909] bridge_slave_1: left promiscuous mode [ 141.621803][ T8909] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.642378][ T8909] bond0: (slave bond_slave_0): Releasing backup interface [ 141.658568][ T8909] bond0: (slave bond_slave_1): Releasing backup interface [ 141.683792][ T8909] team0: Port device team_slave_0 removed [ 141.694670][ T8909] team0: Port device team_slave_1 removed [ 141.702097][ T8909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.710683][ T8909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.721083][ T8909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.728508][ T8909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.743707][ T8909] bond3: (slave veth3): Releasing active interface [ 141.821678][ T8926] netlink: 'syz.1.873': attribute type 4 has an invalid length. [ 142.211089][ T6108] hid-generic 0005:16C0:05DF.0002: unknown main item tag 0x0 [ 142.231767][ T6108] hid-generic 0005:16C0:05DF.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 142.337177][ T8944] tipc: Enabled bearer , priority 0 [ 142.397229][ T8944] syzkaller0: entered promiscuous mode [ 142.429436][ T8944] syzkaller0: entered allmulticast mode [ 143.218489][ T8994] __nla_validate_parse: 3 callbacks suppressed [ 143.218508][ T8994] netlink: 348 bytes leftover after parsing attributes in process `syz.0.888'. [ 143.280960][ T8986] tipc: Enabled bearer , priority 0 [ 143.315402][ T8942] tipc: Resetting bearer [ 143.323360][ T8999] netlink: 48 bytes leftover after parsing attributes in process `syz.2.889'. [ 143.413156][ T8942] tipc: Disabling bearer [ 143.446320][ T8986] tipc: Disabling bearer [ 143.635410][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.891'. [ 143.684324][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 143.715922][ T9024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.895'. [ 143.739695][ T9023] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 143.783505][ T9024] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 144.482708][ T9057] 8021q: VLANs not supported on tunl0 [ 144.640923][ T9063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.877835][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 144.891599][ T9076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 145.125895][ T9087] netlink: 56 bytes leftover after parsing attributes in process `syz.3.914'. [ 145.318556][ T9104] Bluetooth: MGMT ver 1.23 [ 145.543726][ T9111] geneve2: entered promiscuous mode [ 145.554633][ T9111] geneve2: entered allmulticast mode [ 145.554650][ T9114] netlink: 244 bytes leftover after parsing attributes in process `syz.3.922'. [ 145.591208][ T59] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 145.611752][ T9116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'. [ 145.616062][ T59] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 145.722618][ T59] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 145.738028][ T59] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 146.044522][ T9128] netlink: 'syz.3.925': attribute type 2 has an invalid length. [ 146.376217][ T9137] syzkaller0: entered allmulticast mode [ 146.539359][ T9143] tipc: Started in network mode [ 146.544277][ T9143] tipc: Node identity 6a53c21d16df, cluster identity 4711 [ 146.549941][ T9155] netlink: 'syz.4.935': attribute type 3 has an invalid length. [ 146.562874][ T9143] tipc: Enabled bearer , priority 0 [ 146.577520][ T9148] syzkaller0: entered promiscuous mode [ 146.595637][ T9148] syzkaller0: entered allmulticast mode [ 146.660677][ T9156] tipc: Resetting bearer [ 146.889156][ T9142] tipc: Resetting bearer [ 146.963078][ T9142] tipc: Disabling bearer [ 147.274200][ T9185] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 147.283433][ T9185] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 147.782179][ T9218] netlink: 'syz.4.954': attribute type 1 has an invalid length. [ 147.898728][ T9218] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.428225][ T9259] __nla_validate_parse: 8 callbacks suppressed [ 148.428243][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.967'. [ 148.455333][ T9259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.967'. [ 148.788531][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 148.827842][ T9273] netlink: 'syz.3.971': attribute type 1 has an invalid length. [ 149.028094][ T9283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.974'. [ 149.363621][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 150.070374][ T9328] pim6reg: entered allmulticast mode [ 151.163370][ T9391] tipc: New replicast peer: 255.255.255.255 [ 151.170702][ T9391] tipc: Enabled bearer , priority 10 [ 151.385108][ T9406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'. [ 151.494705][ T9408] sctp: [Deprecated]: syz.1.1009 (pid 9408) Use of int in maxseg socket option. [ 151.494705][ T9408] Use struct sctp_assoc_value instead [ 151.677603][ T9415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1012'. [ 151.717104][ T59] tipc: Subscription rejected, illegal request [ 151.754377][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1014'. [ 152.289489][ T5983] tipc: Node number set to 2089599517 [ 152.535348][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 152.857204][ T9473] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1032'. [ 153.414787][ T5867] udevd[5867]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 153.524305][ T9511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.542302][ T9511] __nla_validate_parse: 2 callbacks suppressed [ 153.542319][ T9511] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1046'. [ 153.582870][ T9511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.608540][ T9511] bond0 (unregistering): (slave team0): Releasing backup interface [ 153.652622][ T9511] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 153.725397][ T9511] bond0 (unregistering): Released all slaves [ 153.821835][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1050'. [ 153.836792][ T9527] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 153.844365][ T9526] bond0: entered promiscuous mode [ 153.845160][ T9527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1051'. [ 153.859740][ T9526] bond_slave_0: entered promiscuous mode [ 153.866263][ T9526] bond_slave_1: entered promiscuous mode [ 153.903445][ T9526] bond0: left promiscuous mode [ 153.908393][ T9526] bond_slave_0: left promiscuous mode [ 153.916122][ T9526] bond_slave_1: left promiscuous mode [ 154.534525][ T9559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1060'. [ 154.759477][ T9570] netlink: 'syz.4.1064': attribute type 39 has an invalid length. [ 154.883095][ T9573] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1065'. [ 154.894537][ T9573] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 154.906038][ T9573] netlink: 'syz.0.1065': attribute type 1 has an invalid length. [ 154.980618][ T9575] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 154.988623][ T9575] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1066'. [ 154.998620][ T9575] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1066'. [ 155.039455][ T5882] Bluetooth: hci4: command 0x0405 tx timeout [ 155.128346][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 155.171234][ T9580] bond1: left promiscuous mode [ 155.188703][ T9580] bridge0: port 3(bond1) entered disabled state [ 155.228367][ T9580] bridge_slave_1: left allmulticast mode [ 155.239249][ T9580] bridge_slave_1: left promiscuous mode [ 155.255637][ T9580] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.269715][ T9580] bridge_slave_0: left allmulticast mode [ 155.275488][ T9580] bridge_slave_0: left promiscuous mode [ 155.297900][ T9580] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.430957][ T9597] tipc: Enabling of bearer rejected, media not registered [ 155.667633][ T9607] gre1: entered promiscuous mode [ 155.689123][ T9607] gre1: entered allmulticast mode [ 155.807155][ T9618] netlink: 'syz.4.1080': attribute type 23 has an invalid length. [ 155.989379][ T9629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1082'. [ 156.035169][ T9629] netlink: 'syz.3.1082': attribute type 1 has an invalid length. [ 156.055028][ T9629] netlink: 'syz.3.1082': attribute type 2 has an invalid length. [ 156.121822][ T9625] netlink: 'syz.3.1082': attribute type 1 has an invalid length. [ 156.165642][ T9625] netlink: 'syz.3.1082': attribute type 2 has an invalid length. [ 156.725300][ T9670] netlink: 'syz.3.1096': attribute type 10 has an invalid length. [ 156.776365][ T9670] team0: Device hsr_slave_0 failed to register rx_handler [ 157.077869][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1098'. [ 157.872767][ T9705] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 158.677864][ T9765] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1119'. [ 158.787236][ T9761] bridge_slave_0: entered promiscuous mode [ 158.982208][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 159.018968][ T9780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1127'. [ 159.165389][ T9790] netlink: 'syz.0.1130': attribute type 11 has an invalid length. [ 159.204492][ T9790] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1130'. [ 159.475060][ T9809] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 159.776695][ T9827] ieee802154 phy0 wpan0: encryption failed: -22 [ 160.100487][ T9840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.116702][ T9843] validate_nla: 2 callbacks suppressed [ 160.116721][ T9843] netlink: 'syz.2.1140': attribute type 1 has an invalid length. [ 160.130425][ T9840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.133624][ T9843] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1140'. [ 160.169850][ T9840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.194662][ T9840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.559386][ T9859] dvmrp1: entered allmulticast mode [ 160.822790][ T9873] netlink: 'syz.0.1150': attribute type 12 has an invalid length. [ 160.835116][ T9873] netlink: 'syz.0.1150': attribute type 29 has an invalid length. [ 160.845632][ T9873] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1150'. [ 160.901748][ T9873] netlink: 'syz.0.1150': attribute type 2 has an invalid length. [ 160.909882][ T9881] netlink: 'syz.0.1150': attribute type 1 has an invalid length. [ 160.929709][ T9873] netlink: 'syz.0.1150': attribute type 1 has an invalid length. [ 160.951583][ T9873] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1150'. [ 160.956302][ T9881] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1150'. [ 160.962087][ T9884] netlink: 'syz.4.1152': attribute type 3 has an invalid length. [ 160.981400][ T9884] netlink: 'syz.4.1152': attribute type 3 has an invalid length. [ 161.392035][ T9895] macsec0: entered promiscuous mode [ 161.397773][ T9895] macsec0: entered allmulticast mode [ 161.411439][ T9902] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1158'. [ 161.463965][ T9903] veth1_macvtap: entered allmulticast mode [ 161.474182][ T9903] macsec0: left promiscuous mode [ 161.484535][ T9903] macsec0: left allmulticast mode [ 161.492681][ T9903] veth1_macvtap: left allmulticast mode [ 161.703681][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1163'. [ 162.126261][ T9944] hsr0 speed is unknown, defaulting to 1000 [ 162.134197][ T9944] hsr0 speed is unknown, defaulting to 1000 [ 162.157927][ T9944] hsr0 speed is unknown, defaulting to 1000 [ 162.203732][ T9944] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.254334][ T9944] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 162.368197][ T9944] hsr0 speed is unknown, defaulting to 1000 [ 162.391541][ T9944] hsr0 speed is unknown, defaulting to 1000 [ 162.432240][ T9944] hsr0 speed is unknown, defaulting to 1000 [ 162.518102][ T9944] hsr0 speed is unknown, defaulting to 1000 [ 162.559050][ T9944] hsr0 speed is unknown, defaulting to 1000 [ 162.764345][ T9978] netlink: 'syz.1.1180': attribute type 5 has an invalid length. [ 162.814982][ T9978] netlink: 'syz.1.1180': attribute type 6 has an invalid length. [ 162.884745][ T9987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.900694][ T9980] bond3: entered allmulticast mode [ 162.906959][ T9980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 162.915636][ T9980] bridge0: port 3(bond3) entered blocking state [ 162.922600][ T9980] bridge0: port 3(bond3) entered disabled state [ 162.932189][ T9991] TCP: TCP_TX_DELAY enabled [ 162.934552][ T9980] bond3: entered promiscuous mode [ 162.949519][ T9980] bridge0: port 3(bond3) entered blocking state [ 162.957475][ T9980] bridge0: port 3(bond3) entered forwarding state [ 163.623628][ T8979] bridge0: port 3(bond3) entered disabled state [ 163.680026][T10029] __nla_validate_parse: 12 callbacks suppressed [ 163.680047][T10029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1195'. [ 164.377125][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1206'. [ 164.655780][T10083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1211'. [ 164.665585][T10086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 164.675973][T10081] lo: entered promiscuous mode [ 164.720329][T10081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.825030][T10088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1209'. [ 164.994095][T10084] vlan4: entered allmulticast mode [ 164.999782][T10084] bridge0: entered allmulticast mode [ 165.061641][T10083] 8021q: adding VLAN 0 to HW filter on device bond4 [ 165.117884][T10088] team0: Port device geneve0 added [ 165.228304][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.248009][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.331881][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.354315][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.622397][T10117] tipc: Enabled bearer , priority 0 [ 165.647946][T10117] syzkaller0: entered promiscuous mode [ 165.676714][T10117] syzkaller0: entered allmulticast mode [ 165.687027][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 165.739616][T10124] validate_nla: 4 callbacks suppressed [ 165.739632][T10124] netlink: 'syz.1.1223': attribute type 7 has an invalid length. [ 165.783871][T10117] tipc: Resetting bearer [ 165.795033][T10116] tipc: Resetting bearer [ 165.812576][T10116] tipc: Disabling bearer [ 165.846278][T10124] : entered promiscuous mode [ 166.103442][T10141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1228'. [ 166.321991][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 166.361948][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'. [ 166.471266][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 166.479729][ T1144] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.546432][ T1144] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.587736][ T1144] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.621474][ T1144] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.744542][T10168] openvswitch: netlink: Actions may not be safe on all matching packets [ 167.002772][T10181] netlink: 'syz.3.1244': attribute type 23 has an invalid length. [ 167.653270][T10210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.823233][T10210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.908616][T10218] bridge0: port 1(veth5) entered blocking state [ 167.942219][T10218] bridge0: port 1(veth5) entered disabled state [ 167.976675][T10218] veth5: entered allmulticast mode [ 168.035316][T10218] veth5: entered promiscuous mode [ 168.070542][T10217] bridge0: port 2(veth0_to_bond) entered blocking state [ 168.099981][T10217] bridge0: port 2(veth0_to_bond) entered disabled state [ 168.141725][T10217] veth0_to_bond: entered allmulticast mode [ 168.171792][T10217] veth0_to_bond: entered promiscuous mode [ 168.284202][T10240] team0: Device ip6gre1 is of different type [ 168.388201][T10252] tc_dump_action: action bad kind [ 168.461224][T10252] tc_dump_action: action bad kind [ 168.650428][T10265] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 168.671535][T10269] netlink: 'syz.4.1268': attribute type 23 has an invalid length. [ 168.681094][T10265] 0ªî{X¹¦: entered allmulticast mode [ 168.698219][T10265] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 169.311226][T10302] netlink: 'syz.1.1276': attribute type 8 has an invalid length. [ 169.556395][T10315] __nla_validate_parse: 8 callbacks suppressed [ 169.556421][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'. [ 169.760221][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 169.791163][T10322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1285'. [ 169.882041][T10328] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1287'. [ 169.951543][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1287'. [ 170.082229][T10337] netlink: 'syz.3.1290': attribute type 2 has an invalid length. [ 170.104963][T10337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1290'. [ 170.304267][T10347] Bluetooth: MGMT ver 1.23 [ 170.344553][T10347] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 170.644979][T10363] netlink: 'syz.3.1298': attribute type 8 has an invalid length. [ 170.659344][T10366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1300'. [ 170.739088][T10366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1300'. [ 170.853829][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1300'. [ 170.863557][T10379] netlink: 'syz.3.1304': attribute type 21 has an invalid length. [ 170.887796][T10379] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 170.891583][T10375] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1300'. [ 171.295931][T10396] tipc: Enabled bearer , priority 0 [ 171.333036][T10396] syzkaller0: entered promiscuous mode [ 171.362890][T10396] syzkaller0: entered allmulticast mode [ 171.378193][T10406] openvswitch: netlink: IPv4 tun info is not correct [ 171.553103][T10396] tipc: Resetting bearer [ 171.564516][T10415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.583578][T10393] tipc: Resetting bearer [ 171.626159][T10393] tipc: Disabling bearer [ 171.972399][T10430] hsr0 speed is unknown, defaulting to 1000 [ 171.996095][T10433] netlink: 'syz.0.1318': attribute type 8 has an invalid length. [ 172.029272][T10433] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20004 [ 172.399294][ T5882] Bluetooth: hci2: command 0x0401 tx timeout [ 172.401638][ T5875] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 172.697421][T10469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.254254][T10497] bridge_slave_0: left allmulticast mode [ 173.298293][T10497] bridge_slave_0: left promiscuous mode [ 173.311636][T10497] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.347853][T10497] bridge_slave_1: left allmulticast mode [ 173.367300][T10497] bridge_slave_1: left promiscuous mode [ 173.382145][T10497] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.404632][T10497] bond0: (slave bond_slave_0): Releasing backup interface [ 173.413267][T10497] bond_slave_0: left allmulticast mode [ 173.452526][T10497] bond0: (slave bond_slave_1): Releasing backup interface [ 173.480126][T10497] bond_slave_1: left allmulticast mode [ 173.494466][T10497] team0: Port device team_slave_0 removed [ 173.507159][T10497] team0: Port device team_slave_1 removed [ 173.524124][T10497] bond2: (slave gretap1): Releasing active interface [ 173.545052][T10497] bond3: (slave bridge1): Releasing active interface [ 173.953880][T10537] vlan2: entered promiscuous mode [ 173.973356][T10537] vlan2: entered allmulticast mode [ 173.999610][T10537] hsr_slave_1: entered allmulticast mode [ 174.106624][T10546] tipc: Enabled bearer , priority 0 [ 174.152300][T10546] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 174.204470][T10547] tipc: Resetting bearer [ 174.235826][T10544] tipc: Disabling bearer [ 174.769544][T10578] netlink: 'syz.2.1363': attribute type 10 has an invalid length. [ 174.857167][T10578] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 175.201027][T10591] __nla_validate_parse: 9 callbacks suppressed [ 175.201047][T10591] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1368'. [ 175.277452][T10588] syzkaller0: entered promiscuous mode [ 175.285488][T10588] syzkaller0: entered allmulticast mode [ 175.293745][T10600] veth0_to_bridge: entered promiscuous mode [ 175.325714][T10594] veth0_to_bridge: left promiscuous mode [ 177.110686][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1374'. [ 177.121339][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1374'. [ 177.130910][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1374'. [ 177.275132][T10631] netlink: 'syz.2.1380': attribute type 2 has an invalid length. [ 177.338611][T10631] netlink: 'syz.2.1380': attribute type 8 has an invalid length. [ 177.349926][T10636] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1381'. [ 177.386585][T10631] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.1380'. [ 177.403783][T10639] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1381'. [ 177.434304][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 177.579149][T10640] hsr_slave_0 (unregistering): left promiscuous mode [ 177.829788][T10661] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 177.957502][T10669] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 177.977221][T10669] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 178.005260][T10669] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 178.083881][T10661] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 178.096989][T10661] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 178.727872][T10716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1402'. [ 178.864455][T10733] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1407'. [ 179.400234][T10745] netlink: 'syz.1.1412': attribute type 3 has an invalid length. [ 179.565172][T10748] netlink: 'syz.3.1414': attribute type 11 has an invalid length. [ 179.707252][T10752] syzkaller1: entered promiscuous mode [ 179.741244][T10752] syzkaller1: entered allmulticast mode [ 179.760152][T10754] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 179.851779][T10760] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 179.930598][T10761] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 180.007649][T10771] macvlan0: entered promiscuous mode [ 180.038579][T10771] macvlan0: entered allmulticast mode [ 180.938745][T10823] tap0: tun_chr_ioctl cmd 1074025677 [ 180.971421][T10823] tap0: linktype set to 65534 [ 181.071538][T10829] bond0: entered allmulticast mode [ 181.080414][T10829] bond_slave_0: entered allmulticast mode [ 181.107240][T10834] __nla_validate_parse: 3 callbacks suppressed [ 181.107258][T10834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1433'. [ 181.128956][T10829] bond_slave_1: entered allmulticast mode [ 181.164914][T10837] tipc: Enabling of bearer rejected, failed to enable media [ 181.165018][T10838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1432'. [ 181.209248][T10837] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.284610][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1432'. [ 181.371923][T10832] macvlan0: left promiscuous mode [ 181.393852][T10832] macvlan0: left allmulticast mode [ 181.421023][T10832] netlink: 'syz.3.1432': attribute type 1 has an invalid length. [ 181.432286][T10832] netlink: 'syz.3.1432': attribute type 2 has an invalid length. [ 181.635550][T10864] netlink: 'syz.0.1440': attribute type 21 has an invalid length. [ 181.670839][T10864] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1440'. [ 181.719593][T10864] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1440'. [ 182.420474][T10903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1454'. [ 182.867754][T10926] tap0: tun_chr_ioctl cmd 1074025677 [ 182.877956][T10926] tap0: linktype set to 65534 [ 182.996142][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 183.221619][T10953] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1473'. [ 183.378773][T10959] FAULT_INJECTION: forcing a failure. [ 183.378773][T10959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.401602][T10953] hsr0 speed is unknown, defaulting to 1000 [ 183.417554][T10959] CPU: 1 UID: 0 PID: 10959 Comm: syz.0.1475 Not tainted syzkaller #0 PREEMPT(full) [ 183.417579][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.417589][T10959] Call Trace: [ 183.417596][T10959] [ 183.417604][T10959] dump_stack_lvl+0x189/0x250 [ 183.417629][T10959] ? __pfx____ratelimit+0x10/0x10 [ 183.417651][T10959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.417670][T10959] ? __pfx__printk+0x10/0x10 [ 183.417692][T10959] ? __might_fault+0xb0/0x130 [ 183.417724][T10959] should_fail_ex+0x414/0x560 [ 183.417752][T10959] _copy_from_user+0x2d/0xb0 [ 183.417772][T10959] ___sys_sendmsg+0x158/0x2a0 [ 183.417793][T10959] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.417849][T10959] ? __fget_files+0x2a/0x420 [ 183.417870][T10959] ? __fget_files+0x3a0/0x420 [ 183.417902][T10959] __sys_sendmmsg+0x227/0x430 [ 183.417926][T10959] ? __pfx___sys_sendmmsg+0x10/0x10 [ 183.417941][T10959] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 183.417991][T10959] ? ksys_write+0x22a/0x250 [ 183.418015][T10959] ? __pfx_ksys_write+0x10/0x10 [ 183.418032][T10959] ? rcu_is_watching+0x15/0xb0 [ 183.418055][T10959] __x64_sys_sendmmsg+0xa0/0xc0 [ 183.418075][T10959] do_syscall_64+0xfa/0x3b0 [ 183.418090][T10959] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.418111][T10959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.418127][T10959] ? clear_bhb_loop+0x60/0xb0 [ 183.418148][T10959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.418163][T10959] RIP: 0033:0x7fd1d598ebe9 [ 183.418179][T10959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.418192][T10959] RSP: 002b:00007fd1d687e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 183.418223][T10959] RAX: ffffffffffffffda RBX: 00007fd1d5bc5fa0 RCX: 00007fd1d598ebe9 [ 183.418235][T10959] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 183.418245][T10959] RBP: 00007fd1d687e090 R08: 0000000000000000 R09: 0000000000000000 [ 183.418255][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.418265][T10959] R13: 00007fd1d5bc6038 R14: 00007fd1d5bc5fa0 R15: 00007ffc9b402878 [ 183.418294][T10959] [ 183.909410][T10953] netlink: 'syz.1.1473': attribute type 13 has an invalid length. [ 183.919739][T10953] netlink: 'syz.1.1473': attribute type 17 has an invalid length. [ 183.966090][T10953] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 184.051850][T10981] vlan4: entered promiscuous mode [ 184.088422][T10981] bridge0: entered promiscuous mode [ 184.190407][T10992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'. [ 184.223571][T10993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1483'. [ 184.541891][T11004] netlink: 'syz.2.1487': attribute type 4 has an invalid length. [ 184.676824][T11008] FAULT_INJECTION: forcing a failure. [ 184.676824][T11008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.692473][T11008] CPU: 0 UID: 0 PID: 11008 Comm: syz.2.1489 Not tainted syzkaller #0 PREEMPT(full) [ 184.692497][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.692507][T11008] Call Trace: [ 184.692514][T11008] [ 184.692522][T11008] dump_stack_lvl+0x189/0x250 [ 184.692546][T11008] ? __pfx____ratelimit+0x10/0x10 [ 184.692569][T11008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.692588][T11008] ? __pfx__printk+0x10/0x10 [ 184.692624][T11008] should_fail_ex+0x414/0x560 [ 184.692651][T11008] _copy_from_user+0x2d/0xb0 [ 184.692671][T11008] __copy_msghdr+0x3c5/0x5b0 [ 184.692695][T11008] ___sys_sendmsg+0x1a5/0x2a0 [ 184.692716][T11008] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.692773][T11008] ? __fget_files+0x2a/0x420 [ 184.692795][T11008] ? __fget_files+0x3a0/0x420 [ 184.692827][T11008] __sys_sendmmsg+0x227/0x430 [ 184.692851][T11008] ? __pfx___sys_sendmmsg+0x10/0x10 [ 184.692867][T11008] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 184.692917][T11008] ? ksys_write+0x22a/0x250 [ 184.692940][T11008] ? __pfx_ksys_write+0x10/0x10 [ 184.692957][T11008] ? rcu_is_watching+0x15/0xb0 [ 184.692982][T11008] __x64_sys_sendmmsg+0xa0/0xc0 [ 184.693002][T11008] do_syscall_64+0xfa/0x3b0 [ 184.693017][T11008] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.693037][T11008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.693053][T11008] ? clear_bhb_loop+0x60/0xb0 [ 184.693074][T11008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.693089][T11008] RIP: 0033:0x7eff7bb8ebe9 [ 184.693105][T11008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.693118][T11008] RSP: 002b:00007eff7c973038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 184.693136][T11008] RAX: ffffffffffffffda RBX: 00007eff7bdc5fa0 RCX: 00007eff7bb8ebe9 [ 184.693149][T11008] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 184.693159][T11008] RBP: 00007eff7c973090 R08: 0000000000000000 R09: 0000000000000000 [ 184.693169][T11008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.693179][T11008] R13: 00007eff7bdc6038 R14: 00007eff7bdc5fa0 R15: 00007fffa35a5558 [ 184.693208][T11008] [ 184.700755][T11010] tipc: Enabled bearer , priority 0 [ 184.954339][T11002] syzkaller0: entered promiscuous mode [ 184.961146][T11002] syzkaller0: entered allmulticast mode [ 184.979442][T11020] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 185.071356][T11002] tipc: Resetting bearer [ 185.103591][T11001] tipc: Resetting bearer [ 185.203808][T11029] netlink: 'syz.4.1495': attribute type 2 has an invalid length. [ 185.225566][T11001] tipc: Disabling bearer [ 185.327515][T11029] team0 (unregistering): Port device team_slave_0 removed [ 185.377174][T11029] team0 (unregistering): Port device team_slave_1 removed [ 185.414829][T11029] team0 (unregistering): Port device geneve0 removed [ 185.470457][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.498478][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.601109][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.634673][ T59] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.660112][T11052] FAULT_INJECTION: forcing a failure. [ 185.660112][T11052] name failslab, interval 1, probability 0, space 0, times 0 [ 185.695475][T11052] CPU: 0 UID: 0 PID: 11052 Comm: syz.1.1501 Not tainted syzkaller #0 PREEMPT(full) [ 185.695501][T11052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.695511][T11052] Call Trace: [ 185.695518][T11052] [ 185.695526][T11052] dump_stack_lvl+0x189/0x250 [ 185.695550][T11052] ? __pfx____ratelimit+0x10/0x10 [ 185.695573][T11052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.695592][T11052] ? __pfx__printk+0x10/0x10 [ 185.695616][T11052] ? __pfx___might_resched+0x10/0x10 [ 185.695633][T11052] ? fs_reclaim_acquire+0x7d/0x100 [ 185.695661][T11052] should_fail_ex+0x414/0x560 [ 185.695687][T11052] should_failslab+0xa8/0x100 [ 185.695711][T11052] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 185.695732][T11052] ? __alloc_skb+0x112/0x2d0 [ 185.695752][T11052] __alloc_skb+0x112/0x2d0 [ 185.695772][T11052] alloc_skb_with_frags+0xca/0x890 [ 185.695791][T11052] ? register_lock_class+0x51/0x320 [ 185.695824][T11052] sock_alloc_send_pskb+0x857/0x990 [ 185.695863][T11052] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 185.695888][T11052] ? dev_get_by_index+0x22/0x2e0 [ 185.695907][T11052] ? dev_get_by_index+0x22/0x2e0 [ 185.695934][T11052] packet_sendmsg+0x33a0/0x5080 [ 185.695965][T11052] ? aa_unix_file_perm+0xe36/0x1250 [ 185.696003][T11052] ? __pfx___might_resched+0x10/0x10 [ 185.696019][T11052] ? __lock_acquire+0xab9/0xd20 [ 185.696066][T11052] ? __pfx_packet_sendmsg+0x10/0x10 [ 185.696082][T11052] ? aa_sk_perm+0x81e/0x950 [ 185.696111][T11052] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 185.696141][T11052] ? __lock_acquire+0xab9/0xd20 [ 185.696160][T11052] ? aa_sock_msg_perm+0xf1/0x1d0 [ 185.696182][T11052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.696198][T11052] ? __pfx_packet_sendmsg+0x10/0x10 [ 185.696216][T11052] __sock_sendmsg+0x21c/0x270 [ 185.696242][T11052] ____sys_sendmsg+0x52d/0x830 [ 185.696266][T11052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.696294][T11052] ? import_iovec+0x74/0xa0 [ 185.696317][T11052] ___sys_sendmsg+0x21f/0x2a0 [ 185.696338][T11052] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.696393][T11052] ? __fget_files+0x2a/0x420 [ 185.696413][T11052] ? __fget_files+0x3a0/0x420 [ 185.696445][T11052] __sys_sendmmsg+0x227/0x430 [ 185.696469][T11052] ? __pfx___sys_sendmmsg+0x10/0x10 [ 185.696484][T11052] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 185.696534][T11052] ? ksys_write+0x22a/0x250 [ 185.696557][T11052] ? __pfx_ksys_write+0x10/0x10 [ 185.696574][T11052] ? rcu_is_watching+0x15/0xb0 [ 185.696599][T11052] __x64_sys_sendmmsg+0xa0/0xc0 [ 185.696619][T11052] do_syscall_64+0xfa/0x3b0 [ 185.696634][T11052] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.696655][T11052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.696672][T11052] ? clear_bhb_loop+0x60/0xb0 [ 185.696692][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.696708][T11052] RIP: 0033:0x7f2f4238ebe9 [ 185.696725][T11052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.696738][T11052] RSP: 002b:00007f2f43244038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 185.696758][T11052] RAX: ffffffffffffffda RBX: 00007f2f425c5fa0 RCX: 00007f2f4238ebe9 [ 185.696770][T11052] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000004 [ 185.696780][T11052] RBP: 00007f2f43244090 R08: 0000000000000000 R09: 0000000000000000 [ 185.696791][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.696800][T11052] R13: 00007f2f425c6038 R14: 00007f2f425c5fa0 R15: 00007ffc45ad0318 [ 185.696830][T11052] [ 186.117039][T11056] netlink: 'syz.4.1503': attribute type 23 has an invalid length. [ 186.185174][T11062] syzkaller1: entered promiscuous mode [ 186.203688][T11062] syzkaller1: entered allmulticast mode [ 186.269994][T11046] syzkaller1: entered promiscuous mode [ 186.277843][T11046] syzkaller1: entered allmulticast mode [ 186.314929][T11063] netlink: 'syz.4.1503': attribute type 23 has an invalid length. [ 186.416424][T11062] syzkaller0: entered promiscuous mode [ 186.423389][T11062] syzkaller0: entered allmulticast mode [ 186.585404][T11082] netlink: 'syz.1.1511': attribute type 1 has an invalid length. [ 186.758406][T11098] netlink: 'syz.0.1514': attribute type 1 has an invalid length. [ 188.570260][T11105] tipc: Enabled bearer , priority 0 [ 188.606203][T11106] syzkaller0: entered promiscuous mode [ 188.637014][T11106] syzkaller0: entered allmulticast mode [ 188.696287][T11114] tipc: Resetting bearer [ 188.750786][T11124] netlink: 'syz.4.1518': attribute type 5 has an invalid length. [ 188.804185][T11126] __nla_validate_parse: 3 callbacks suppressed [ 188.804204][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1519'. [ 188.830691][T11114] tipc: Resetting bearer [ 188.926390][T11114] tipc: Disabling bearer [ 189.104662][T11126] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.162348][T11138] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 189.212664][T11140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.710856][T11166] netlink: 'syz.2.1534': attribute type 2 has an invalid length. [ 189.757385][T11166] netlink: 'syz.2.1534': attribute type 3 has an invalid length. [ 190.019344][T11180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1539'. [ 190.180664][T11194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1542'. [ 190.216815][T11197] tipc: Enabled bearer , priority 12 [ 190.409827][T11214] netlink: 'syz.0.1549': attribute type 2 has an invalid length. [ 190.441322][T11215] netlink: 'syz.4.1546': attribute type 11 has an invalid length. [ 190.469676][T11214] netlink: 'syz.0.1549': attribute type 3 has an invalid length. [ 190.665164][T11225] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1552'. [ 190.721194][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 191.172476][T11254] netlink: 'syz.2.1564': attribute type 3 has an invalid length. [ 191.229990][T11254] netlink: 'syz.2.1564': attribute type 3 has an invalid length. [ 191.303265][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 191.400212][T11259] bond0: entered promiscuous mode [ 191.427751][T11259] bond0: left promiscuous mode [ 191.454259][T11273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.595622][T11274] netlink: 'syz.0.1571': attribute type 10 has an invalid length. [ 191.604388][T11274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1571'. [ 191.770934][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 191.793511][T11294] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 191.814982][T11294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.853211][T11298] netlink: 'syz.3.1580': attribute type 3 has an invalid length. [ 191.864061][T11298] netlink: 'syz.3.1580': attribute type 3 has an invalid length. [ 191.915911][T11300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.941471][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 191.957266][T11302] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 192.018945][T11302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.431964][T11329] netlink: 'syz.4.1590': attribute type 142 has an invalid length. [ 193.447428][T11388] FAULT_INJECTION: forcing a failure. [ 193.447428][T11388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.495934][T11388] CPU: 0 UID: 0 PID: 11388 Comm: syz.1.1604 Not tainted syzkaller #0 PREEMPT(full) [ 193.495961][T11388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 193.495971][T11388] Call Trace: [ 193.495980][T11388] [ 193.495988][T11388] dump_stack_lvl+0x189/0x250 [ 193.496013][T11388] ? __pfx____ratelimit+0x10/0x10 [ 193.496036][T11388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.496056][T11388] ? __pfx__printk+0x10/0x10 [ 193.496077][T11388] ? __might_fault+0xb0/0x130 [ 193.496112][T11388] should_fail_ex+0x414/0x560 [ 193.496139][T11388] _copy_from_user+0x2d/0xb0 [ 193.496159][T11388] ___sys_sendmsg+0x158/0x2a0 [ 193.496180][T11388] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.496524][T11388] ? __fget_files+0x2a/0x420 [ 193.496554][T11388] ? __fget_files+0x3a0/0x420 [ 193.496590][T11388] __x64_sys_sendmsg+0x19b/0x260 [ 193.496648][T11388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.496681][T11388] ? __pfx_ksys_write+0x10/0x10 [ 193.496701][T11388] ? rcu_is_watching+0x15/0xb0 [ 193.496728][T11388] ? do_syscall_64+0xbe/0x3b0 [ 193.496752][T11388] do_syscall_64+0xfa/0x3b0 [ 193.496769][T11388] ? lockdep_hardirqs_on+0x9c/0x150 [ 193.496793][T11388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.496811][T11388] ? clear_bhb_loop+0x60/0xb0 [ 193.496834][T11388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.496853][T11388] RIP: 0033:0x7f2f4238ebe9 [ 193.496875][T11388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.496890][T11388] RSP: 002b:00007f2f43244038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.496910][T11388] RAX: ffffffffffffffda RBX: 00007f2f425c5fa0 RCX: 00007f2f4238ebe9 [ 193.496921][T11388] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 193.496935][T11388] RBP: 00007f2f43244090 R08: 0000000000000000 R09: 0000000000000000 [ 193.496944][T11388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.496953][T11388] R13: 00007f2f425c6038 R14: 00007f2f425c5fa0 R15: 00007ffc45ad0318 [ 193.496980][T11388] [ 193.816316][T11393] __nla_validate_parse: 6 callbacks suppressed [ 193.816336][T11393] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1607'. [ 193.897843][T11395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1605'. [ 193.908399][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1605'. [ 193.942150][T11394] veth3: entered promiscuous mode [ 193.991541][T11411] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 194.054910][T11412] wlan0: mtu less than device minimum [ 194.092953][T11416] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1614'. [ 194.115858][T11415] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1614'. [ 194.314685][T11428] FAULT_INJECTION: forcing a failure. [ 194.314685][T11428] name failslab, interval 1, probability 0, space 0, times 0 [ 194.324112][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.371634][T11428] CPU: 1 UID: 0 PID: 11428 Comm: syz.2.1619 Not tainted syzkaller #0 PREEMPT(full) [ 194.371659][T11428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.371669][T11428] Call Trace: [ 194.371676][T11428] [ 194.371683][T11428] dump_stack_lvl+0x189/0x250 [ 194.371709][T11428] ? __pfx____ratelimit+0x10/0x10 [ 194.371733][T11428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.371751][T11428] ? __pfx__printk+0x10/0x10 [ 194.371779][T11428] ? __pfx___might_resched+0x10/0x10 [ 194.371799][T11428] should_fail_ex+0x414/0x560 [ 194.371826][T11428] should_failslab+0xa8/0x100 [ 194.371871][T11428] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 194.371894][T11428] ? __alloc_skb+0x112/0x2d0 [ 194.371916][T11428] __alloc_skb+0x112/0x2d0 [ 194.371936][T11428] netlink_sendmsg+0x5c6/0xb30 [ 194.371967][T11428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.371987][T11428] ? aa_sock_msg_perm+0xf1/0x1d0 [ 194.372005][T11428] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 194.372022][T11428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.372038][T11428] __sock_sendmsg+0x21c/0x270 [ 194.372062][T11428] ____sys_sendmsg+0x505/0x830 [ 194.372088][T11428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 194.372116][T11428] ? import_iovec+0x74/0xa0 [ 194.372138][T11428] ___sys_sendmsg+0x21f/0x2a0 [ 194.372159][T11428] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.372215][T11428] ? __fget_files+0x2a/0x420 [ 194.372238][T11428] ? __fget_files+0x3a0/0x420 [ 194.372269][T11428] __x64_sys_sendmsg+0x19b/0x260 [ 194.372291][T11428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.372320][T11428] ? __pfx_ksys_write+0x10/0x10 [ 194.372339][T11428] ? rcu_is_watching+0x15/0xb0 [ 194.372363][T11428] ? do_syscall_64+0xbe/0x3b0 [ 194.372391][T11428] do_syscall_64+0xfa/0x3b0 [ 194.372405][T11428] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.372426][T11428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.372441][T11428] ? clear_bhb_loop+0x60/0xb0 [ 194.372459][T11428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.372473][T11428] RIP: 0033:0x7eff7bb8ebe9 [ 194.372487][T11428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.372499][T11428] RSP: 002b:00007eff7c973038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.372515][T11428] RAX: ffffffffffffffda RBX: 00007eff7bdc5fa0 RCX: 00007eff7bb8ebe9 [ 194.372527][T11428] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 194.372535][T11428] RBP: 00007eff7c973090 R08: 0000000000000000 R09: 0000000000000000 [ 194.372544][T11428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.372553][T11428] R13: 00007eff7bdc6038 R14: 00007eff7bdc5fa0 R15: 00007fffa35a5558 [ 194.372576][T11428] [ 194.758216][T11434] validate_nla: 2 callbacks suppressed [ 194.758235][T11434] netlink: 'syz.3.1621': attribute type 3 has an invalid length. [ 194.795380][T11434] netlink: 'syz.3.1621': attribute type 3 has an invalid length. [ 195.077216][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'. [ 195.208386][T11457] netlink: 'syz.2.1631': attribute type 1 has an invalid length. [ 195.225451][T11457] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1631'. [ 195.252383][T11457] nbd: illegal input index 1048576 [ 195.351746][T11469] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1634'. [ 195.367192][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1634'. [ 195.654865][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 195.929467][T11495] nbd1: detected capacity change from 0 to 127 [ 195.961466][ T5875] block nbd1: Receive control failed (result -104) [ 196.316429][T11535] bridge0: port 1(syz_tun) entered blocking state [ 196.351704][T11535] bridge0: port 1(syz_tun) entered disabled state [ 196.360063][T11535] syz_tun: entered allmulticast mode [ 196.374720][T11535] syz_tun: entered promiscuous mode [ 196.407182][T11535] bridge0: port 1(syz_tun) entered blocking state [ 196.415126][T11535] bridge0: port 1(syz_tun) entered forwarding state [ 196.508610][T11545] tipc: Enabled bearer , priority 0 [ 196.519873][T11545] syzkaller0: entered promiscuous mode [ 196.526370][T11545] syzkaller0: entered allmulticast mode [ 196.585589][T11545] tipc: Resetting bearer [ 196.618387][T11544] tipc: Resetting bearer [ 196.658308][T11544] tipc: Disabling bearer [ 196.836555][T11556] 8021q: adding VLAN 0 to HW filter on device bond7 [ 196.871655][T11556] team0: Failed to send port change of device bond7 via netlink (err -105) [ 196.886651][T11556] team0: Failed to send options change via netlink (err -105) [ 196.900895][T11556] team0: Port device bond7 added [ 197.656507][T11609] bond5: entered promiscuous mode [ 197.670592][T11613] FAULT_INJECTION: forcing a failure. [ 197.670592][T11613] name failslab, interval 1, probability 0, space 0, times 0 [ 197.676056][T11609] bond5: entered allmulticast mode [ 197.693557][T11609] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.725469][T11613] CPU: 1 UID: 0 PID: 11613 Comm: syz.0.1680 Not tainted syzkaller #0 PREEMPT(full) [ 197.725493][T11613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.725503][T11613] Call Trace: [ 197.725511][T11613] [ 197.725519][T11613] dump_stack_lvl+0x189/0x250 [ 197.725543][T11613] ? __pfx____ratelimit+0x10/0x10 [ 197.725566][T11613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.725586][T11613] ? __pfx__printk+0x10/0x10 [ 197.725608][T11613] ? __lock_acquire+0xab9/0xd20 [ 197.725639][T11613] should_fail_ex+0x414/0x560 [ 197.725663][T11613] should_failslab+0xa8/0x100 [ 197.725688][T11613] kmem_cache_alloc_noprof+0x73/0x3c0 [ 197.725709][T11613] ? skb_clone+0x212/0x3a0 [ 197.725732][T11613] skb_clone+0x212/0x3a0 [ 197.725753][T11613] __netlink_deliver_tap+0x404/0x850 [ 197.725787][T11613] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.725810][T11613] netlink_deliver_tap+0x19c/0x1b0 [ 197.725833][T11613] netlink_unicast+0x7fa/0x9e0 [ 197.725863][T11613] ? __pfx_netlink_unicast+0x10/0x10 [ 197.725886][T11613] ? netlink_sendmsg+0x642/0xb30 [ 197.725899][T11613] ? skb_put+0x11b/0x210 [ 197.725918][T11613] netlink_sendmsg+0x805/0xb30 [ 197.725944][T11613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.725965][T11613] ? aa_sock_msg_perm+0xf1/0x1d0 [ 197.725982][T11613] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.725999][T11613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.726029][T11613] __sock_sendmsg+0x21c/0x270 [ 197.726053][T11613] ____sys_sendmsg+0x505/0x830 [ 197.726079][T11613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.726107][T11613] ? import_iovec+0x74/0xa0 [ 197.726131][T11613] ___sys_sendmsg+0x21f/0x2a0 [ 197.726151][T11613] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.726210][T11613] ? __fget_files+0x2a/0x420 [ 197.726231][T11613] ? __fget_files+0x3a0/0x420 [ 197.726264][T11613] __x64_sys_sendmsg+0x19b/0x260 [ 197.726286][T11613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.726316][T11613] ? __pfx_ksys_write+0x10/0x10 [ 197.726333][T11613] ? rcu_is_watching+0x15/0xb0 [ 197.726356][T11613] ? do_syscall_64+0xbe/0x3b0 [ 197.726375][T11613] do_syscall_64+0xfa/0x3b0 [ 197.726390][T11613] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.726412][T11613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.726433][T11613] ? clear_bhb_loop+0x60/0xb0 [ 197.726454][T11613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.726470][T11613] RIP: 0033:0x7fd1d598ebe9 [ 197.726487][T11613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.726502][T11613] RSP: 002b:00007fd1d687e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.726520][T11613] RAX: ffffffffffffffda RBX: 00007fd1d5bc5fa0 RCX: 00007fd1d598ebe9 [ 197.726533][T11613] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 197.726544][T11613] RBP: 00007fd1d687e090 R08: 0000000000000000 R09: 0000000000000000 [ 197.726555][T11613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.726566][T11613] R13: 00007fd1d5bc6038 R14: 00007fd1d5bc5fa0 R15: 00007ffc9b402878 [ 197.726597][T11613] [ 198.486927][T11632] "syz.3.1685" (11632) uses obsolete ecb(arc4) skcipher [ 198.714041][T11653] netlink: 'syz.0.1691': attribute type 12 has an invalid length. [ 198.740171][T11653] netlink: 'syz.0.1691': attribute type 15 has an invalid length. [ 198.811594][T11663] FAULT_INJECTION: forcing a failure. [ 198.811594][T11663] name failslab, interval 1, probability 0, space 0, times 0 [ 198.830213][T11663] CPU: 1 UID: 0 PID: 11663 Comm: syz.2.1694 Not tainted syzkaller #0 PREEMPT(full) [ 198.830239][T11663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.830249][T11663] Call Trace: [ 198.830257][T11663] [ 198.830265][T11663] dump_stack_lvl+0x189/0x250 [ 198.830290][T11663] ? __pfx____ratelimit+0x10/0x10 [ 198.830314][T11663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.830333][T11663] ? __pfx__printk+0x10/0x10 [ 198.830361][T11663] ? __pfx___might_resched+0x10/0x10 [ 198.830377][T11663] ? fs_reclaim_acquire+0x7d/0x100 [ 198.830406][T11663] should_fail_ex+0x414/0x560 [ 198.830433][T11663] should_failslab+0xa8/0x100 [ 198.830457][T11663] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 198.830481][T11663] ? __alloc_skb+0x112/0x2d0 [ 198.830502][T11663] __alloc_skb+0x112/0x2d0 [ 198.830522][T11663] netlink_ack+0x146/0xa50 [ 198.830563][T11663] netlink_rcv_skb+0x28c/0x470 [ 198.830587][T11663] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 198.830611][T11663] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.830646][T11663] ? bpf_lsm_capable+0x9/0x20 [ 198.830666][T11663] ? security_capable+0x7e/0x2e0 [ 198.830694][T11663] nfnetlink_rcv+0x26a/0x2520 [ 198.830727][T11663] ? __dev_queue_xmit+0x1d79/0x3b50 [ 198.830755][T11663] ? __dev_queue_xmit+0x27b/0x3b50 [ 198.830785][T11663] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 198.830804][T11663] ? __pfx___dev_queue_xmit+0x10/0x10 [ 198.830834][T11663] ? ref_tracker_free+0x63a/0x7d0 [ 198.830857][T11663] ? __asan_memcpy+0x40/0x70 [ 198.830873][T11663] ? __pfx_ref_tracker_free+0x10/0x10 [ 198.830909][T11663] ? skb_clone+0x246/0x3a0 [ 198.830928][T11663] ? __netlink_deliver_tap+0x807/0x850 [ 198.830948][T11663] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.831102][T11663] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.831153][T11663] netlink_unicast+0x82c/0x9e0 [ 198.831182][T11663] ? __pfx_netlink_unicast+0x10/0x10 [ 198.831200][T11663] ? netlink_sendmsg+0x642/0xb30 [ 198.831212][T11663] ? skb_put+0x11b/0x210 [ 198.831229][T11663] netlink_sendmsg+0x805/0xb30 [ 198.831250][T11663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.831266][T11663] ? aa_sock_msg_perm+0xf1/0x1d0 [ 198.831282][T11663] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.831299][T11663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.831314][T11663] __sock_sendmsg+0x21c/0x270 [ 198.831353][T11663] ____sys_sendmsg+0x505/0x830 [ 198.831375][T11663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.831397][T11663] ? import_iovec+0x74/0xa0 [ 198.831418][T11663] ___sys_sendmsg+0x21f/0x2a0 [ 198.831436][T11663] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.831483][T11663] ? __fget_files+0x2a/0x420 [ 198.831646][T11663] ? __fget_files+0x3a0/0x420 [ 198.831681][T11663] __x64_sys_sendmsg+0x19b/0x260 [ 198.831704][T11663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.831731][T11663] ? __pfx_ksys_write+0x10/0x10 [ 198.831750][T11663] ? rcu_is_watching+0x15/0xb0 [ 198.831769][T11663] ? do_syscall_64+0xbe/0x3b0 [ 198.831791][T11663] do_syscall_64+0xfa/0x3b0 [ 198.831805][T11663] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.831825][T11663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.831841][T11663] ? clear_bhb_loop+0x60/0xb0 [ 198.831860][T11663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.831875][T11663] RIP: 0033:0x7eff7bb8ebe9 [ 198.831894][T11663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.831909][T11663] RSP: 002b:00007eff7c973038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.831930][T11663] RAX: ffffffffffffffda RBX: 00007eff7bdc5fa0 RCX: 00007eff7bb8ebe9 [ 198.831943][T11663] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 198.831954][T11663] RBP: 00007eff7c973090 R08: 0000000000000000 R09: 0000000000000000 [ 198.831964][T11663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.831975][T11663] R13: 00007eff7bdc6038 R14: 00007eff7bdc5fa0 R15: 00007fffa35a5558 [ 198.832006][T11663] [ 199.294532][T11665] sctp: [Deprecated]: syz.4.1693 (pid 11665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.294532][T11665] Use struct sctp_sack_info instead [ 199.326600][T11665] __nla_validate_parse: 10 callbacks suppressed [ 199.326630][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1693'. [ 199.333765][T11669] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1695'. [ 199.337517][T11665] nbd: nbd0 already in use [ 199.373573][T11670] bond_slave_0: entered allmulticast mode [ 199.823092][T11694] sctp: [Deprecated]: syz.0.1702 (pid 11694) Use of int in max_burst socket option. [ 199.823092][T11694] Use struct sctp_assoc_value instead [ 199.852232][T11694] sctp: [Deprecated]: syz.0.1702 (pid 11694) Use of int in max_burst socket option. [ 199.852232][T11694] Use struct sctp_assoc_value instead [ 199.893997][T11694] sctp: [Deprecated]: syz.0.1702 (pid 11694) Use of int in max_burst socket option. [ 199.893997][T11694] Use struct sctp_assoc_value instead [ 199.921796][T11694] sctp: [Deprecated]: syz.0.1702 (pid 11694) Use of int in max_burst socket option. [ 199.921796][T11694] Use struct sctp_assoc_value instead [ 199.965207][T11694] sctp: [Deprecated]: syz.0.1702 (pid 11694) Use of int in max_burst socket option. [ 199.965207][T11694] Use struct sctp_assoc_value instead [ 200.009803][T11694] sctp: [Deprecated]: syz.0.1702 (pid 11694) Use of int in max_burst socket option. [ 200.009803][T11694] Use struct sctp_assoc_value instead [ 200.086826][T11694] sctp: [Deprecated]: syz.0.1702 (pid 11694) Use of int in max_burst socket option. [ 200.086826][T11694] Use struct sctp_assoc_value instead [ 200.110593][T11694] sctp: [Deprecated]: syz.0.1702 (pid 11694) Use of int in max_burst socket option. [ 200.110593][T11694] Use struct sctp_assoc_value instead [ 200.139590][T11713] sctp: [Deprecated]: syz.4.1705 (pid 11713) Use of int in maxseg socket option. [ 200.139590][T11713] Use struct sctp_assoc_value instead [ 200.178877][T11694] sctp: [Deprecated]: syz.0.1702 (pid 11694) Use of int in max_burst socket option. [ 200.178877][T11694] Use struct sctp_assoc_value instead [ 200.219416][T11715] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1708'. [ 200.251178][T11694] sctp: [Deprecated]: syz.0.1702 (pid 11694) Use of int in max_burst socket option. [ 200.251178][T11694] Use struct sctp_assoc_value instead [ 200.622737][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1714'. [ 200.686025][T11739] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 200.933600][T11755] FAULT_INJECTION: forcing a failure. [ 200.933600][T11755] name failslab, interval 1, probability 0, space 0, times 0 [ 200.947213][T11755] CPU: 1 UID: 0 PID: 11755 Comm: syz.0.1720 Not tainted syzkaller #0 PREEMPT(full) [ 200.947237][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.947246][T11755] Call Trace: [ 200.947252][T11755] [ 200.947259][T11755] dump_stack_lvl+0x189/0x250 [ 200.947283][T11755] ? __pfx____ratelimit+0x10/0x10 [ 200.947306][T11755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.947324][T11755] ? __pfx__printk+0x10/0x10 [ 200.947343][T11755] ? nfnetlink_rcv+0x26a/0x2520 [ 200.947364][T11755] ? ____sys_sendmsg+0x505/0x830 [ 200.947382][T11755] ? __x64_sys_sendmsg+0x19b/0x260 [ 200.947411][T11755] should_fail_ex+0x414/0x560 [ 200.947438][T11755] should_failslab+0xa8/0x100 [ 200.947470][T11755] kmem_cache_alloc_noprof+0x73/0x3c0 [ 200.947491][T11755] ? skb_clone+0x212/0x3a0 [ 200.947514][T11755] skb_clone+0x212/0x3a0 [ 200.947536][T11755] __netlink_deliver_tap+0x404/0x850 [ 200.947572][T11755] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.947596][T11755] netlink_deliver_tap+0x19c/0x1b0 [ 200.947621][T11755] netlink_sendskb+0x68/0x140 [ 200.947645][T11755] netlink_unicast+0x397/0x9e0 [ 200.947664][T11755] ? __asan_memcpy+0x40/0x70 [ 200.947691][T11755] ? __pfx_netlink_unicast+0x10/0x10 [ 200.947723][T11755] netlink_rcv_skb+0x28c/0x470 [ 200.947747][T11755] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 200.947770][T11755] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 200.947805][T11755] ? bpf_lsm_capable+0x9/0x20 [ 200.947824][T11755] ? security_capable+0x7e/0x2e0 [ 200.947855][T11755] nfnetlink_rcv+0x26a/0x2520 [ 200.947879][T11755] ? __dev_queue_xmit+0x1d79/0x3b50 [ 200.947910][T11755] ? __dev_queue_xmit+0x27b/0x3b50 [ 200.947942][T11755] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 200.947963][T11755] ? __pfx___dev_queue_xmit+0x10/0x10 [ 200.947996][T11755] ? ref_tracker_free+0x63a/0x7d0 [ 200.948019][T11755] ? __asan_memcpy+0x40/0x70 [ 200.948037][T11755] ? __pfx_ref_tracker_free+0x10/0x10 [ 200.948076][T11755] ? skb_clone+0x246/0x3a0 [ 200.948098][T11755] ? __netlink_deliver_tap+0x807/0x850 [ 200.948120][T11755] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.948154][T11755] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.948185][T11755] netlink_unicast+0x82c/0x9e0 [ 200.948215][T11755] ? __pfx_netlink_unicast+0x10/0x10 [ 200.948238][T11755] ? netlink_sendmsg+0x642/0xb30 [ 200.948252][T11755] ? skb_put+0x11b/0x210 [ 200.948273][T11755] netlink_sendmsg+0x805/0xb30 [ 200.948300][T11755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.948319][T11755] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.948339][T11755] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.948358][T11755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.948374][T11755] __sock_sendmsg+0x21c/0x270 [ 200.948400][T11755] ____sys_sendmsg+0x505/0x830 [ 200.948425][T11755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.948459][T11755] ? import_iovec+0x74/0xa0 [ 200.948485][T11755] ___sys_sendmsg+0x21f/0x2a0 [ 200.948505][T11755] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.948564][T11755] ? __fget_files+0x2a/0x420 [ 200.948586][T11755] ? __fget_files+0x3a0/0x420 [ 200.948616][T11755] __x64_sys_sendmsg+0x19b/0x260 [ 200.948636][T11755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.948666][T11755] ? __pfx_ksys_write+0x10/0x10 [ 200.948685][T11755] ? rcu_is_watching+0x15/0xb0 [ 200.948709][T11755] ? do_syscall_64+0xbe/0x3b0 [ 200.948730][T11755] do_syscall_64+0xfa/0x3b0 [ 200.948743][T11755] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.948765][T11755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.948780][T11755] ? clear_bhb_loop+0x60/0xb0 [ 200.948798][T11755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.948811][T11755] RIP: 0033:0x7fd1d598ebe9 [ 200.948828][T11755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.948842][T11755] RSP: 002b:00007fd1d687e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.948860][T11755] RAX: ffffffffffffffda RBX: 00007fd1d5bc5fa0 RCX: 00007fd1d598ebe9 [ 200.948873][T11755] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 200.948884][T11755] RBP: 00007fd1d687e090 R08: 0000000000000000 R09: 0000000000000000 [ 200.948894][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.948904][T11755] R13: 00007fd1d5bc6038 R14: 00007fd1d5bc5fa0 R15: 00007ffc9b402878 [ 200.948931][T11755] [ 201.528700][T11764] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1722'. [ 201.538157][ T5184] Bluetooth: hci3: command 0x0406 tx timeout [ 201.538309][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 201.538345][ T5872] Bluetooth: hci2: command 0x0401 tx timeout [ 201.853460][T11786] netlink: 'syz.3.1731': attribute type 3 has an invalid length. [ 202.049803][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1734'. [ 202.061876][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 202.085219][T11796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1735'. [ 202.235984][T11802] netlink: 'syz.0.1736': attribute type 1 has an invalid length. [ 202.414518][T11813] netlink: 'syz.3.1743': attribute type 3 has an invalid length. [ 202.444755][T11802] veth5: entered promiscuous mode [ 202.455955][T11802] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 202.518188][T11816] syzkaller1: entered promiscuous mode [ 202.534953][T11818] FAULT_INJECTION: forcing a failure. [ 202.534953][T11818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.549056][T11816] syzkaller1: entered allmulticast mode [ 202.575785][T11818] CPU: 0 UID: 0 PID: 11818 Comm: syz.0.1744 Not tainted syzkaller #0 PREEMPT(full) [ 202.575808][T11818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 202.575818][T11818] Call Trace: [ 202.575825][T11818] [ 202.575833][T11818] dump_stack_lvl+0x189/0x250 [ 202.575858][T11818] ? __pfx____ratelimit+0x10/0x10 [ 202.575880][T11818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.575898][T11818] ? __pfx__printk+0x10/0x10 [ 202.575920][T11818] ? __might_fault+0xb0/0x130 [ 202.575953][T11818] should_fail_ex+0x414/0x560 [ 202.575979][T11818] _copy_from_user+0x2d/0xb0 [ 202.576000][T11818] kstrtouint_from_user+0xc4/0x170 [ 202.576026][T11818] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 202.576065][T11818] proc_fail_nth_write+0x88/0x200 [ 202.576084][T11818] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 202.576106][T11818] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 202.576127][T11818] vfs_write+0x27e/0xb30 [ 202.576156][T11818] ? __pfx_vfs_write+0x10/0x10 [ 202.576178][T11818] ? __fget_files+0x2a/0x420 [ 202.576206][T11818] ? __fget_files+0x3a0/0x420 [ 202.576226][T11818] ? __fget_files+0x2a/0x420 [ 202.576256][T11818] ksys_write+0x145/0x250 [ 202.576279][T11818] ? __pfx_ksys_write+0x10/0x10 [ 202.576307][T11818] ? rcu_is_watching+0x15/0xb0 [ 202.576329][T11818] ? do_syscall_64+0xbe/0x3b0 [ 202.576350][T11818] do_syscall_64+0xfa/0x3b0 [ 202.576364][T11818] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.576385][T11818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.576401][T11818] ? clear_bhb_loop+0x60/0xb0 [ 202.576422][T11818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.576438][T11818] RIP: 0033:0x7fd1d598d69f [ 202.576454][T11818] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 202.576468][T11818] RSP: 002b:00007fd1d687e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 202.576486][T11818] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd1d598d69f [ 202.576498][T11818] RDX: 0000000000000001 RSI: 00007fd1d687e0a0 RDI: 0000000000000004 [ 202.576508][T11818] RBP: 00007fd1d687e090 R08: 0000000000000000 R09: 0000000000000000 [ 202.576517][T11818] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 202.576526][T11818] R13: 00007fd1d5bc6038 R14: 00007fd1d5bc5fa0 R15: 00007ffc9b402878 [ 202.576554][T11818] [ 202.871650][T11824] netlink: 'syz.3.1747': attribute type 16 has an invalid length. [ 202.880050][T11824] netlink: 'syz.3.1747': attribute type 17 has an invalid length. [ 202.979058][T11829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1746'. [ 203.070751][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1749'. [ 203.273756][T11849] netlink: 'syz.3.1755': attribute type 5 has an invalid length. [ 203.340530][T11849] netlink: 'syz.3.1755': attribute type 3 has an invalid length. [ 203.364981][T11856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.553877][ T5234] udevd[5234]: worker [5990] terminated by signal 33 (Unknown signal 33) [ 203.567313][T11866] netlink: 'syz.3.1761': attribute type 7 has an invalid length. [ 203.586108][ T5234] udevd[5234]: worker [5990] failed while handling '/devices/virtual/block/loop2' [ 203.618336][T11866] : entered promiscuous mode [ 203.866408][T11887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.003318][T11894] netlink: 'syz.4.1771': attribute type 3 has an invalid length. [ 204.011923][T11894] netlink: 'syz.4.1771': attribute type 3 has an invalid length. [ 204.781380][T11925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.974365][T11933] __nla_validate_parse: 4 callbacks suppressed [ 204.974384][T11933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1782'. [ 205.163305][T11936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1783'. [ 205.565538][T11954] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1789'. [ 205.582626][T11954] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1789'. [ 205.603565][T11954] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1789'. [ 205.956335][T11984] bond5: (slave geneve3): making interface the new active one [ 205.975458][T11984] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 205.995043][ T181] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 206.004465][ T181] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 206.054820][ T181] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 206.085669][ T181] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 206.126179][T11997] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:bb, vlan:0) [ 207.041984][T12037] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1818'. [ 207.138997][T12037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1818'. [ 207.184018][T12049] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 207.261551][T12049] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.276376][T12049] gretap1: entered promiscuous mode [ 207.285475][T12049] gretap1: entered allmulticast mode [ 207.456403][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'. [ 207.473525][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1829'. [ 207.735597][T12085] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1835'. [ 207.934404][T12100] validate_nla: 3 callbacks suppressed [ 207.934422][T12100] netlink: 'syz.0.1843': attribute type 39 has an invalid length. [ 208.608149][T12135] xt_time: unknown flags 0xf4 [ 208.615224][T12135] netlink: 'syz.1.1856': attribute type 11 has an invalid length. [ 209.815752][T12224] openvswitch: netlink: Message has 4 unknown bytes. [ 209.824479][T12224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.001887][T12235] __nla_validate_parse: 6 callbacks suppressed [ 210.001928][T12235] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1884'. [ 210.056613][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1884'. [ 210.125311][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 210.172162][T12237] hsr0 speed is unknown, defaulting to 1000 [ 210.376626][T12256] netlink: 'syz.0.1893': attribute type 10 has an invalid length. [ 210.400209][T12256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1893'. [ 210.423522][T12256] ipvlan1: entered promiscuous mode [ 210.433054][T12256] ipvlan1: entered allmulticast mode [ 210.439808][T12256] veth0_vlan: entered allmulticast mode [ 210.457879][T12256] bridge0: port 4(ipvlan1) entered blocking state [ 210.466428][T12256] bridge0: port 4(ipvlan1) entered disabled state [ 210.477281][T12256] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 210.509491][T12254] IPVS: Error connecting to the multicast addr [ 210.588424][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'. [ 211.122125][T12297] netlink: 'syz.4.1905': attribute type 33 has an invalid length. [ 211.133986][T12297] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1905'. [ 211.172931][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1905'. [ 211.336812][T12314] team0: Device vti0 is up. Set it down before adding it as a team port [ 211.716521][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 211.753788][T12331] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 212.330867][T12361] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1924'. [ 212.393341][T12361] NCSI netlink: No device for ifindex 0 [ 212.424279][T12375] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1928'. [ 212.681635][T12394] netlink: 'syz.1.1932': attribute type 2 has an invalid length. [ 212.773600][T12388] vlan3: entered allmulticast mode [ 212.829538][T12388] bridge0: entered allmulticast mode [ 212.856144][T12388] bridge5: port 1(vlan3) entered blocking state [ 212.869113][T12388] bridge5: port 1(vlan3) entered disabled state [ 212.893972][T12388] vlan3: entered promiscuous mode [ 212.918164][T12388] bridge0: entered promiscuous mode [ 213.378088][T12434] netlink: 'syz.2.1945': attribute type 4 has an invalid length. [ 213.620351][T12454] FAULT_INJECTION: forcing a failure. [ 213.620351][T12454] name failslab, interval 1, probability 0, space 0, times 0 [ 213.664918][T12454] CPU: 0 UID: 0 PID: 12454 Comm: syz.1.1951 Not tainted syzkaller #0 PREEMPT(full) [ 213.664949][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.664959][T12454] Call Trace: [ 213.664967][T12454] [ 213.664975][T12454] dump_stack_lvl+0x189/0x250 [ 213.664999][T12454] ? __pfx____ratelimit+0x10/0x10 [ 213.665020][T12454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.665040][T12454] ? __pfx__printk+0x10/0x10 [ 213.665068][T12454] ? __pfx___might_resched+0x10/0x10 [ 213.665087][T12454] should_fail_ex+0x414/0x560 [ 213.665114][T12454] should_failslab+0xa8/0x100 [ 213.665139][T12454] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 213.665161][T12454] ? __alloc_skb+0x112/0x2d0 [ 213.665183][T12454] __alloc_skb+0x112/0x2d0 [ 213.665203][T12454] netlink_sendmsg+0x5c6/0xb30 [ 213.665230][T12454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.665257][T12454] ? aa_sock_msg_perm+0xf1/0x1d0 [ 213.665276][T12454] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 213.665301][T12454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.665319][T12454] __sock_sendmsg+0x21c/0x270 [ 213.665344][T12454] ____sys_sendmsg+0x505/0x830 [ 213.665376][T12454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.665404][T12454] ? import_iovec+0x74/0xa0 [ 213.665425][T12454] ___sys_sendmsg+0x21f/0x2a0 [ 213.665592][T12454] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.665650][T12454] ? __fget_files+0x2a/0x420 [ 213.665671][T12454] ? __fget_files+0x3a0/0x420 [ 213.665702][T12454] __x64_sys_sendmsg+0x19b/0x260 [ 213.665723][T12454] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.665747][T12454] ? __pfx_ksys_write+0x10/0x10 [ 213.665764][T12454] ? rcu_is_watching+0x15/0xb0 [ 213.665785][T12454] ? do_syscall_64+0xbe/0x3b0 [ 213.665803][T12454] do_syscall_64+0xfa/0x3b0 [ 213.665816][T12454] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.665835][T12454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.665849][T12454] ? clear_bhb_loop+0x60/0xb0 [ 213.665866][T12454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.665883][T12454] RIP: 0033:0x7f2f4238ebe9 [ 213.665901][T12454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.665916][T12454] RSP: 002b:00007f2f43244038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.665934][T12454] RAX: ffffffffffffffda RBX: 00007f2f425c5fa0 RCX: 00007f2f4238ebe9 [ 213.665946][T12454] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000007 [ 213.665958][T12454] RBP: 00007f2f43244090 R08: 0000000000000000 R09: 0000000000000000 [ 213.665968][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.665979][T12454] R13: 00007f2f425c6038 R14: 00007f2f425c5fa0 R15: 00007ffc45ad0318 [ 213.666009][T12454] [ 214.921870][T12523] netlink: 'syz.3.1969': attribute type 83 has an invalid length. [ 215.183065][T12534] netlink: 'syz.4.1974': attribute type 2 has an invalid length. [ 215.231593][T12538] netlink: 'syz.0.1976': attribute type 1 has an invalid length. [ 215.235853][T12534] netlink: 'syz.4.1974': attribute type 3 has an invalid length. [ 215.240316][T12538] __nla_validate_parse: 5 callbacks suppressed [ 215.240332][T12538] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1976'. [ 215.280526][T12542] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:0 [ 215.282712][T12537] delete_channel: no stack [ 215.294285][T12538] netlink: 'syz.0.1976': attribute type 1 has an invalid length. [ 215.313406][T12545] openvswitch: netlink: Missing key (keys=40, expected=80) [ 215.321582][T12543] openvswitch: netlink: Missing key (keys=40, expected=80) [ 215.481803][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1979'. [ 215.830336][T12575] netlink: 'syz.1.1987': attribute type 1 has an invalid length. [ 215.841107][T12575] netlink: 'syz.1.1987': attribute type 2 has an invalid length. [ 215.945617][T12582] netlink: 'syz.3.1990': attribute type 3 has an invalid length. [ 215.956214][T12582] netlink: 'syz.3.1990': attribute type 3 has an invalid length. [ 216.013053][T12584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.141202][T12594] syzkaller0: entered promiscuous mode [ 216.147279][T12594] syzkaller0: entered allmulticast mode [ 216.172663][T12593] hsr0 speed is unknown, defaulting to 1000 [ 216.271649][T12599] tipc: Enabled bearer , priority 0 [ 216.329804][T12599] tipc: Resetting bearer [ 216.370271][T12598] tipc: Disabling bearer [ 216.585263][T12607] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 216.712780][T12609] pim6reg1: entered promiscuous mode [ 216.718348][T12609] pim6reg1: entered allmulticast mode [ 216.809888][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2003'. [ 216.864621][T12617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2004'. [ 217.112986][T12636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2011'. [ 217.126055][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2010'. [ 217.156580][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2010'. [ 217.162943][T12636] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2011'. [ 217.291706][T12648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.329907][T12648] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2016'. [ 217.766049][T12681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.798496][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2026'. [ 217.817202][T12683] syzkaller1: entered promiscuous mode [ 217.824704][T12683] syzkaller1: entered allmulticast mode [ 217.923600][T12688] openvswitch: netlink: Actions may not be safe on all matching packets [ 218.451519][T12715] sctp: [Deprecated]: syz.1.2038 (pid 12715) Use of int in maxseg socket option. [ 218.451519][T12715] Use struct sctp_assoc_value instead [ 218.510821][T12718] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 218.607578][ T30] audit: type=1800 audit(1756762188.713:3): pid=12728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2042" name="memory.events" dev="tmpfs" ino=1877 res=0 errno=0 [ 218.661552][ T30] audit: type=1804 audit(1756762188.713:4): pid=12728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2042" name="/newroot/367/memory.events" dev="tmpfs" ino=1877 res=1 errno=0 [ 218.764895][T12735] NCSI netlink: No device for ifindex 0 [ 218.777999][T12735] validate_nla: 4 callbacks suppressed [ 218.778019][T12735] netlink: 'syz.3.2044': attribute type 12 has an invalid length. [ 218.861433][T12735] netlink: 'syz.3.2044': attribute type 11 has an invalid length. [ 219.061220][T12755] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.135649][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.169687][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.196437][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.211597][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.585016][T12798] netlink: 'syz.2.2067': attribute type 3 has an invalid length. [ 219.832728][T12814] netlink: 'syz.1.2072': attribute type 10 has an invalid length. [ 219.853952][T12814] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.886763][T12814] team0: entered allmulticast mode [ 219.934420][T12814] bond0: (slave team0): Enslaving as an active interface with an up link [ 220.031258][T12825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.103789][T12828] (unnamed net_device) (uninitialized): up delay (1965) is not a multiple of miimon (4), value rounded to 1964 ms [ 220.341382][T12850] netlink: 'syz.3.2082': attribute type 3 has an invalid length. [ 220.370070][T12854] netlink: 'syz.2.2083': attribute type 1 has an invalid length. [ 220.389063][T12854] __nla_validate_parse: 15 callbacks suppressed [ 220.389083][T12854] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2083'. [ 220.502649][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2083'. [ 220.521425][T12863] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2083'. [ 220.540731][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2083'. [ 220.776793][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2092'. [ 220.800606][T12876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2090'. [ 220.836789][T12878] team1: entered promiscuous mode [ 220.859647][T12878] team1: entered allmulticast mode [ 220.897296][T12888] netlink: 'syz.4.2095': attribute type 2 has an invalid length. [ 220.929323][T12888] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2095'. [ 220.941074][T12890] netlink: 'syz.1.2096': attribute type 5 has an invalid length. [ 220.967358][T12890] netlink: 'syz.1.2096': attribute type 3 has an invalid length. [ 220.996975][T12893] xt_socket: unknown flags 0x50 [ 221.120458][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2101'. [ 221.562105][T12929] netlink: 'syz.4.2109': attribute type 3 has an invalid length. [ 221.656502][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2111'. [ 221.848429][T12948] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2115'. [ 221.963627][T12954] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 222.617730][T12995] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 222.788707][T12998] syz.4.2130 (12998) used greatest stack depth: 17768 bytes left [ 223.563916][T13052] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.872080][T13070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.094949][T13086] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 224.639220][ T5878] Bluetooth: hci0: command tx timeout [ 224.702743][T13110] syzkaller0: entered promiscuous mode [ 224.708522][T13110] syzkaller0: entered allmulticast mode [ 226.324114][ T11] block nbd1: Possible stuck request ffff8880253f0000: control (read@0,1024B). Runtime 30 seconds [ 226.336061][ T11] block nbd1: Possible stuck request ffff8880253f01c0: control (read@1024,1024B). Runtime 30 seconds [ 226.348411][ T11] block nbd1: Possible stuck request ffff8880253f0380: control (read@2048,1024B). Runtime 30 seconds [ 226.360960][ T11] block nbd1: Possible stuck request ffff8880253f0540: control (read@3072,1024B). Runtime 30 seconds [ 227.215666][ T1144] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 227.295781][T13190] __nla_validate_parse: 14 callbacks suppressed [ 227.295800][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2189'. [ 227.300996][T13200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2192'. [ 227.311376][T13190] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 227.311413][T13190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.171869][T13227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2200'. [ 228.581812][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2207'. [ 228.612185][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2207'. [ 228.642692][T13257] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2209'. [ 228.673174][T13257] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 228.706157][T13263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2211'. [ 228.772622][T13268] validate_nla: 2 callbacks suppressed [ 228.772642][T13268] netlink: 'syz.3.2212': attribute type 2 has an invalid length. [ 228.807887][T13268] netlink: 'syz.3.2212': attribute type 8 has an invalid length. [ 228.821754][T13268] netlink: 1148 bytes leftover after parsing attributes in process `syz.3.2212'. [ 228.848008][T13272] netlink: 'syz.1.2214': attribute type 5 has an invalid length. [ 228.991282][T13282] syzkaller1: entered promiscuous mode [ 229.007324][T13282] syzkaller1: entered allmulticast mode [ 229.274174][T13303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2224'. [ 229.293906][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2223'. [ 229.402672][T13299] openvswitch: netlink: Flow actions attr not present in new flow. [ 229.526582][T13313] netlink: 'syz.0.2227': attribute type 18 has an invalid length. [ 229.582035][T13313] macvlan2: entered promiscuous mode [ 229.587556][T13313] macvlan2: entered allmulticast mode [ 229.670122][T13313] bond7: entered promiscuous mode [ 229.689128][T13313] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 229.751628][T13313] bond7: left promiscuous mode [ 229.861808][T13331] pimreg: entered allmulticast mode [ 229.940358][T13331] tipc: Enabling of bearer rejected, failed to enable media [ 230.357702][T13350] netlink: 'syz.0.2237': attribute type 1 has an invalid length. [ 230.379866][T13350] netlink: 'syz.0.2237': attribute type 1 has an invalid length. [ 230.543934][T13360] netlink: 'syz.0.2240': attribute type 1 has an invalid length. [ 230.552080][T13360] netlink: 'syz.0.2240': attribute type 1 has an invalid length. [ 230.560822][T13360] netlink: 'syz.0.2240': attribute type 2 has an invalid length. [ 230.568649][T13360] netlink: 'syz.0.2240': attribute type 2 has an invalid length. [ 230.632454][T13359] sctp: [Deprecated]: syz.2.2241 (pid 13359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.632454][T13359] Use struct sctp_sack_info instead [ 231.545292][T13427] sctp_getsockopt_maxburst: 23 callbacks suppressed [ 231.545311][T13427] sctp: [Deprecated]: syz.0.2260 (pid 13427) Use of int in max_burst socket option. [ 231.545311][T13427] Use struct sctp_assoc_value instead [ 233.706015][T13454] wg2: entered promiscuous mode [ 233.713066][T13454] wg2: entered allmulticast mode [ 233.733015][T13457] team0: Port device dummy0 added [ 233.929413][T13467] __nla_validate_parse: 16 callbacks suppressed [ 233.929435][T13467] netlink: 616 bytes leftover after parsing attributes in process `syz.4.2270'. [ 234.016240][T13472] validate_nla: 3 callbacks suppressed [ 234.016261][T13472] netlink: 'syz.2.2273': attribute type 1 has an invalid length. [ 234.067682][T13472] bond5: entered promiscuous mode [ 234.074436][T13472] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.096419][T13487] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2276'. [ 234.192927][T13482] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.202863][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2278'. [ 234.229605][T13482] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 234.234011][T13497] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 234.242037][T13482] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 234.268081][T13497] netlink: 'syz.0.2280': attribute type 2 has an invalid length. [ 234.284409][T13482] bond5: (slave wireguard0): making interface the new active one [ 234.293948][T13482] wireguard0: entered promiscuous mode [ 234.305356][T13482] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 234.316049][T13490] unknown channel width for channel at 909000KHz? [ 234.486958][T13509] veth0: entered promiscuous mode [ 234.557531][T13509] can: request_module (can-proto-0) failed. [ 234.584643][T13508] veth0: left promiscuous mode [ 234.782260][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2289'. [ 234.797222][T13524] openvswitch: netlink: Unknown key attributes 2 [ 234.824623][T13522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2289'. [ 234.854604][T13530] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 234.871637][T13524] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 234.910529][T13529] netlink: 'syz.4.2291': attribute type 8 has an invalid length. [ 234.968326][T13534] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2292'. [ 235.011062][T13538] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2294'. [ 235.347443][T13562] netlink: 'syz.4.2301': attribute type 83 has an invalid length. [ 235.364543][T13566] netlink: 'syz.0.2303': attribute type 5 has an invalid length. [ 235.370446][T13572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2296'. [ 235.399547][T13572] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2296'. [ 235.757987][T13596] netlink: 'syz.0.2309': attribute type 21 has an invalid length. [ 235.776341][T13595] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2310'. [ 235.861569][T13601] netlink: 'syz.3.2312': attribute type 33 has an invalid length. [ 236.249851][T13631] delete_channel: no stack [ 236.271457][T13629] hsr0 speed is unknown, defaulting to 1000 [ 237.082650][T13675] tipc: Enabled bearer , priority 0 [ 237.107048][T13675] syzkaller0: entered promiscuous mode [ 237.128916][T13675] syzkaller0: entered allmulticast mode [ 237.400435][T13675] tipc: Resetting bearer [ 237.472382][T13671] tipc: Resetting bearer [ 237.553369][T13671] tipc: Disabling bearer [ 237.895424][T13724] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 237.914949][T13724] netlink: 'syz.2.2341': attribute type 1 has an invalid length. [ 237.932522][T13721] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 238.228624][T13741] syzkaller1: entered allmulticast mode [ 238.457716][T13757] tipc: Enabled bearer , priority 0 [ 238.480343][T13757] syzkaller0: entered promiscuous mode [ 238.493193][T13757] syzkaller0: entered allmulticast mode [ 238.517490][T13757] tipc: Resetting bearer [ 238.558424][T13757] tipc: Disabling bearer [ 238.738000][T13770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.822471][T13777] IPVS: length: 30 != 8 [ 238.904439][T13784] pimreg3: entered allmulticast mode [ 238.983359][T13790] __nla_validate_parse: 15 callbacks suppressed [ 238.983378][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2361'. [ 239.030887][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2361'. [ 239.036117][T13792] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2363'. [ 239.058882][T13794] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2364'. [ 239.083423][T13794] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2364'. [ 239.227547][T13803] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2367'. [ 239.256208][T13807] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2368'. [ 239.272969][T13807] validate_nla: 2 callbacks suppressed [ 239.272986][T13807] netlink: 'syz.3.2368': attribute type 1 has an invalid length. [ 239.298474][T13810] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2366'. [ 239.308589][T13807] netlink: 'syz.3.2368': attribute type 1 has an invalid length. [ 239.325783][T13807] netlink: 'syz.3.2368': attribute type 1 has an invalid length. [ 239.346727][T13807] netlink: 'syz.3.2368': attribute type 2 has an invalid length. [ 239.372938][T13807] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2368'. [ 239.623269][T13826] syzkaller0: entered promiscuous mode [ 239.629331][T13826] syzkaller0: entered allmulticast mode [ 239.696400][T13830] hsr0 speed is unknown, defaulting to 1000 [ 240.051776][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2380'. [ 240.299539][T13871] netlink: 'syz.4.2386': attribute type 126 has an invalid length. [ 240.476312][T13886] netlink: 'syz.1.2390': attribute type 10 has an invalid length. [ 240.479527][T13884] netlink: 'syz.0.2391': attribute type 39 has an invalid length. [ 240.495163][T13886] dummy0: entered promiscuous mode [ 240.501858][T13886] bridge0: port 2(dummy0) entered blocking state [ 240.512933][T13886] bridge0: port 2(dummy0) entered disabled state [ 240.520059][T13886] dummy0: entered allmulticast mode [ 240.542318][T13886] bridge0: port 2(dummy0) entered blocking state [ 240.548930][T13886] bridge0: port 2(dummy0) entered forwarding state [ 241.676651][T13938] pimreg: left allmulticast mode [ 241.695875][T13938] dvmrp1: left allmulticast mode [ 241.867423][T13951] tipc: Enabled bearer , priority 0 [ 241.877454][T13951] syzkaller0: entered promiscuous mode [ 241.896245][T13951] syzkaller0: entered allmulticast mode [ 241.907498][T13953] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:20000 [ 241.934338][T13951] tipc: Resetting bearer [ 241.946109][T13950] tipc: Resetting bearer [ 241.996325][T13950] tipc: Disabling bearer [ 242.157996][T13966] netlink: 'syz.0.2414': attribute type 30 has an invalid length. [ 242.642906][T13973] bridge_slave_0: left promiscuous mode [ 243.003227][T13973] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 243.068196][T13973] veth3: left promiscuous mode [ 243.076392][T13973] geneve2: left promiscuous mode [ 243.097762][T13973] vlan2: left promiscuous mode [ 243.105662][T13973] gretap1: left promiscuous mode [ 243.153779][T13973] team1: left promiscuous mode [ 243.162430][T13973] bond5: left promiscuous mode [ 243.167245][T13973] wireguard0: left promiscuous mode [ 243.221330][T10812] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.249065][T10812] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 243.271191][T10812] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.284530][T10812] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 243.325371][T10812] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.361597][T10812] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 243.421608][T10812] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.462773][T10812] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 243.613775][T14023] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 243.845800][T14028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 243.905251][T14028] bond3: (slave bond4): making interface the new active one [ 243.941516][T14028] bond3: (slave bond4): Enslaving as an active interface with an up link [ 243.974773][T14034] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.094026][T14047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.620968][T14091] __nla_validate_parse: 10 callbacks suppressed [ 244.620988][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2443'. [ 244.962569][T14113] sock: sock_timestamping_bind_phc: sock not bind to device [ 245.157018][T14129] netlink: 'syz.2.2455': attribute type 3 has an invalid length. [ 245.178673][T14116] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 245.215129][T13980] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 245.230932][T14116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2451'. [ 245.613907][T14157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2461'. [ 245.772121][T14169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2464'. [ 246.028577][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 246.068086][T14189] netlink: 'syz.2.2469': attribute type 3 has an invalid length. [ 246.079075][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 246.093680][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2470'. [ 246.105868][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 246.156242][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2470'. [ 246.292355][T14205] netlink: 'syz.2.2473': attribute type 29 has an invalid length. [ 246.313775][T14205] netlink: 'syz.2.2473': attribute type 29 has an invalid length. [ 246.554943][T14217] : renamed from veth0_vlan (while UP) [ 246.596006][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2477'. [ 246.616485][T14222] netlink: 'syz.4.2478': attribute type 10 has an invalid length. [ 246.787149][T14228] netlink: 'syz.1.2479': attribute type 1 has an invalid length. [ 246.811665][T14230] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2482'. [ 246.893090][T14239] netlink: 'syz.0.2483': attribute type 3 has an invalid length. [ 247.199100][ C1] ================================================================== [ 247.208194][ C1] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 247.216651][ C1] Read of size 1 at addr ffff88802f910770 by task syz.1.2491/14261 [ 247.224559][ C1] [ 247.226903][ C1] CPU: 1 UID: 0 PID: 14261 Comm: syz.1.2491 Not tainted syzkaller #0 PREEMPT(full) [ 247.226926][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.226946][ C1] Call Trace: [ 247.226954][ C1] [ 247.226962][ C1] dump_stack_lvl+0x189/0x250 [ 247.226989][ C1] ? __kasan_check_byte+0x12/0x40 [ 247.227014][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.227037][ C1] ? lock_release+0x4b/0x3e0 [ 247.227068][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 247.227093][ C1] print_report+0xca/0x240 [ 247.227111][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 247.227129][ C1] kasan_report+0x118/0x150 [ 247.227155][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 247.227215][ C1] xfrm_state_find+0x2cf2/0x5400 [ 247.227231][ C1] ? __lock_acquire+0xab9/0xd20 [ 247.227261][ C1] ? unwind_next_frame+0xa5/0x2390 [ 247.227283][ C1] ? xfrm_state_find+0x1da/0x5400 [ 247.227304][ C1] ? __pfx_xfrm_state_find+0x10/0x10 [ 247.227329][ C1] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 247.227362][ C1] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 247.227387][ C1] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 247.227412][ C1] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 247.227436][ C1] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 247.227475][ C1] ? xfrm_expand_policies+0x41f/0x6a0 [ 247.227500][ C1] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 247.227527][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 247.227551][ C1] ? dst_cache_get+0x10e/0x5b0 [ 247.227576][ C1] xfrm_lookup_route+0x3c/0x1c0 [ 247.227600][ C1] tipc_udp_xmit+0x1c3/0xaa0 [ 247.227621][ C1] ? tipc_udp_xmit+0xa4/0xaa0 [ 247.227639][ C1] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 247.227660][ C1] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 247.227683][ C1] ? __asan_memcpy+0x40/0x70 [ 247.227703][ C1] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 247.227739][ C1] tipc_udp_send_msg+0x27f/0x3f0 [ 247.227760][ C1] tipc_bearer_xmit_skb+0x2b0/0x400 [ 247.227787][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 247.227810][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 247.227836][ C1] tipc_disc_timeout+0x580/0x6d0 [ 247.227861][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 247.227890][ C1] call_timer_fn+0x17e/0x5f0 [ 247.227912][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 247.227932][ C1] ? call_timer_fn+0xbe/0x5f0 [ 247.227953][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 247.227979][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 247.228001][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.228022][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 247.228045][ C1] __run_timer_base+0x61a/0x860 [ 247.228064][ C1] ? ktime_get+0x3e/0x1f0 [ 247.228088][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 247.228117][ C1] run_timer_softirq+0xb7/0x180 [ 247.228138][ C1] handle_softirqs+0x283/0x870 [ 247.228156][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 247.228180][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 247.228200][ C1] __irq_exit_rcu+0xca/0x1f0 [ 247.228216][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 247.228236][ C1] irq_exit_rcu+0x9/0x30 [ 247.228251][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 247.228276][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 247.228296][ C1] RIP: 0033:0x7f2f42261640 [ 247.228314][ C1] Code: 05 3d 41 e9 00 48 83 ed 01 83 e5 03 c6 40 01 00 0f 85 93 fa ff ff 48 8b 05 25 41 e9 00 c6 40 02 00 e9 83 fa ff ff 0f 1f 40 00 fb d4 00 00 e9 45 f9 ff ff 66 0f 1f 44 00 00 e8 3b dd 00 00 e9 [ 247.228330][ C1] RSP: 002b:00007ffc45ad03c0 EFLAGS: 00000202 [ 247.228347][ C1] RAX: 00007f2f425c5fa0 RBX: 00007f2f430f5720 RCX: 0000000000000000 [ 247.228361][ C1] RDX: 00007f2f425c6038 RSI: 0000000000000002 RDI: 00007f2f430f5720 [ 247.228372][ C1] RBP: 00007f2f425c6038 R08: 0000000000000000 R09: 0000000000000000 [ 247.228383][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000fffffc03 [ 247.228395][ C1] R13: 0000000000000000 R14: 00007ffc45ad0438 R15: 00007ffc45ad0590 [ 247.228416][ C1] [ 247.228423][ C1] [ 247.622882][ C1] Allocated by task 12055: [ 247.627282][ C1] kasan_save_track+0x3e/0x80 [ 247.631963][ C1] __kasan_slab_alloc+0x6c/0x80 [ 247.637313][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 247.642847][ C1] xfrm_state_alloc+0x24/0x2f0 [ 247.647649][ C1] __find_acq_core+0x8a7/0x1c00 [ 247.652546][ C1] xfrm_find_acq+0x78/0xa0 [ 247.656954][ C1] xfrm_alloc_userspi+0x6b3/0xc90 [ 247.661973][ C1] xfrm_user_rcv_msg+0x7a0/0xab0 [ 247.666904][ C1] netlink_rcv_skb+0x205/0x470 [ 247.671867][ C1] xfrm_netlink_rcv+0x79/0x90 [ 247.676774][ C1] netlink_unicast+0x82c/0x9e0 [ 247.681558][ C1] netlink_sendmsg+0x805/0xb30 [ 247.686386][ C1] __sock_sendmsg+0x21c/0x270 [ 247.691076][ C1] ____sys_sendmsg+0x505/0x830 [ 247.695865][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 247.700658][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 247.705717][ C1] do_syscall_64+0xfa/0x3b0 [ 247.710302][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.716489][ C1] [ 247.718981][ C1] Freed by task 5955: [ 247.722954][ C1] kasan_save_track+0x3e/0x80 [ 247.727646][ C1] kasan_save_free_info+0x46/0x50 [ 247.732790][ C1] __kasan_slab_free+0x5b/0x80 [ 247.738174][ C1] kmem_cache_free+0x18f/0x400 [ 247.743120][ C1] xfrm_state_gc_task+0x52d/0x6b0 [ 247.748142][ C1] process_scheduled_works+0xae1/0x17b0 [ 247.753693][ C1] worker_thread+0x8a0/0xda0 [ 247.758600][ C1] kthread+0x70e/0x8a0 [ 247.763004][ C1] ret_from_fork+0x3f9/0x770 [ 247.767603][ C1] ret_from_fork_asm+0x1a/0x30 [ 247.772463][ C1] [ 247.774876][ C1] The buggy address belongs to the object at ffff88802f910440 [ 247.774876][ C1] which belongs to the cache xfrm_state of size 928 [ 247.789209][ C1] The buggy address is located 816 bytes inside of [ 247.789209][ C1] freed 928-byte region [ffff88802f910440, ffff88802f9107e0) [ 247.803118][ C1] [ 247.805454][ C1] The buggy address belongs to the physical page: [ 247.811877][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f913740 pfn:0x2f910 [ 247.821949][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 247.830535][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 247.838092][ C1] page_type: f5(slab) [ 247.842080][ C1] raw: 00fff00000000040 ffff88801a523a00 dead000000000122 0000000000000000 [ 247.850803][ C1] raw: ffff88802f913740 00000000800f0009 00000000f5000000 0000000000000000 [ 247.859562][ C1] head: 00fff00000000040 ffff88801a523a00 dead000000000122 0000000000000000 [ 247.868225][ C1] head: ffff88802f913740 00000000800f0009 00000000f5000000 0000000000000000 [ 247.876911][ C1] head: 00fff00000000002 ffffea0000be4401 00000000ffffffff 00000000ffffffff [ 247.885784][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 247.894895][ C1] page dumped because: kasan: bad access detected [ 247.901323][ C1] page_owner tracks the page as allocated [ 247.907143][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5996, tgid 5994 (syz.2.8), ts 83827067551, free_ts 83817269058 [ 247.925975][ C1] post_alloc_hook+0x240/0x2a0 [ 247.930847][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 247.936409][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 247.942222][ C1] alloc_pages_mpol+0x232/0x4a0 [ 247.947099][ C1] allocate_slab+0x8a/0x370 [ 247.951797][ C1] ___slab_alloc+0xbeb/0x1410 [ 247.956482][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 247.961948][ C1] xfrm_state_alloc+0x24/0x2f0 [ 247.966726][ C1] xfrm_add_sa+0x17d1/0x4070 [ 247.971514][ C1] xfrm_user_rcv_msg+0x7a0/0xab0 [ 247.976534][ C1] netlink_rcv_skb+0x205/0x470 [ 247.981379][ C1] xfrm_netlink_rcv+0x79/0x90 [ 247.986056][ C1] netlink_unicast+0x82c/0x9e0 [ 247.990809][ C1] netlink_sendmsg+0x805/0xb30 [ 247.995681][ C1] __sock_sendmsg+0x21c/0x270 [ 248.000550][ C1] ____sys_sendmsg+0x505/0x830 [ 248.005933][ C1] page last free pid 5994 tgid 5994 stack trace: [ 248.012357][ C1] __free_frozen_pages+0xbc4/0xd30 [ 248.017476][ C1] stack_depot_save_flags+0x436/0x860 [ 248.022845][ C1] kasan_save_track+0x4f/0x80 [ 248.027522][ C1] __kasan_kmalloc+0x93/0xb0 [ 248.032102][ C1] __kmalloc_node_noprof+0x276/0x4e0 [ 248.037421][ C1] allocate_slab+0x16a/0x370 [ 248.042031][ C1] ___slab_alloc+0xbeb/0x1410 [ 248.046718][ C1] __kvmalloc_node_noprof+0x429/0x5f0 [ 248.052191][ C1] futex_hash_allocate+0x3c3/0xde0 [ 248.057320][ C1] copy_process+0x21aa/0x3c00 [ 248.062000][ C1] kernel_clone+0x21e/0x840 [ 248.066513][ C1] __se_sys_clone3+0x256/0x2d0 [ 248.071398][ C1] do_syscall_64+0xfa/0x3b0 [ 248.075921][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.081845][ C1] [ 248.084161][ C1] Memory state around the buggy address: [ 248.089804][ C1] ffff88802f910600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.098236][ C1] ffff88802f910680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.106836][ C1] >ffff88802f910700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 248.115196][ C1] ^ [ 248.122954][ C1] ffff88802f910780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 248.131217][ C1] ffff88802f910800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 248.139288][ C1] ================================================================== [ 248.147536][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 248.154900][ C1] CPU: 1 UID: 0 PID: 14261 Comm: syz.1.2491 Not tainted syzkaller #0 PREEMPT(full) [ 248.164638][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.175060][ C1] Call Trace: [ 248.178351][ C1] [ 248.181331][ C1] dump_stack_lvl+0x99/0x250 [ 248.186025][ C1] ? __asan_memcpy+0x40/0x70 [ 248.190797][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.197250][ C1] ? __pfx__printk+0x10/0x10 [ 248.202365][ C1] vpanic+0x281/0x750 [ 248.206679][ C1] ? __pfx_vpanic+0x10/0x10 [ 248.211380][ C1] ? irqentry_exit+0x74/0x90 [ 248.216339][ C1] panic+0xb9/0xc0 [ 248.220343][ C1] ? __pfx_panic+0x10/0x10 [ 248.225824][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 248.233284][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 248.240280][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 248.246087][ C1] check_panic_on_warn+0x89/0xb0 [ 248.251482][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 248.256795][ C1] end_report+0x78/0x160 [ 248.261071][ C1] kasan_report+0x129/0x150 [ 248.265686][ C1] ? xfrm_state_find+0x2cf2/0x5400 [ 248.270952][ C1] xfrm_state_find+0x2cf2/0x5400 [ 248.276188][ C1] ? __lock_acquire+0xab9/0xd20 [ 248.281062][ C1] ? unwind_next_frame+0xa5/0x2390 [ 248.286190][ C1] ? xfrm_state_find+0x1da/0x5400 [ 248.291211][ C1] ? __pfx_xfrm_state_find+0x10/0x10 [ 248.296602][ C1] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 248.302815][ C1] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 248.308824][ C1] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 248.315459][ C1] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 248.321372][ C1] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 248.327511][ C1] ? xfrm_expand_policies+0x41f/0x6a0 [ 248.332926][ C1] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 248.338394][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 248.344231][ C1] ? dst_cache_get+0x10e/0x5b0 [ 248.349357][ C1] xfrm_lookup_route+0x3c/0x1c0 [ 248.354252][ C1] tipc_udp_xmit+0x1c3/0xaa0 [ 248.358962][ C1] ? tipc_udp_xmit+0xa4/0xaa0 [ 248.363798][ C1] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 248.369277][ C1] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 248.374591][ C1] ? __asan_memcpy+0x40/0x70 [ 248.379378][ C1] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 248.384597][ C1] tipc_udp_send_msg+0x27f/0x3f0 [ 248.389714][ C1] tipc_bearer_xmit_skb+0x2b0/0x400 [ 248.395119][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 248.400439][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 248.406260][ C1] tipc_disc_timeout+0x580/0x6d0 [ 248.411229][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 248.416823][ C1] call_timer_fn+0x17e/0x5f0 [ 248.421450][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 248.426943][ C1] ? call_timer_fn+0xbe/0x5f0 [ 248.431810][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 248.437112][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 248.442419][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.447627][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 248.453147][ C1] __run_timer_base+0x61a/0x860 [ 248.458091][ C1] ? ktime_get+0x3e/0x1f0 [ 248.462423][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 248.467833][ C1] run_timer_softirq+0xb7/0x180 [ 248.472819][ C1] handle_softirqs+0x283/0x870 [ 248.477624][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 248.482488][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 248.487786][ C1] __irq_exit_rcu+0xca/0x1f0 [ 248.492399][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 248.497808][ C1] irq_exit_rcu+0x9/0x30 [ 248.502190][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 248.508125][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 248.514116][ C1] RIP: 0033:0x7f2f42261640 [ 248.518529][ C1] Code: 05 3d 41 e9 00 48 83 ed 01 83 e5 03 c6 40 01 00 0f 85 93 fa ff ff 48 8b 05 25 41 e9 00 c6 40 02 00 e9 83 fa ff ff 0f 1f 40 00 fb d4 00 00 e9 45 f9 ff ff 66 0f 1f 44 00 00 e8 3b dd 00 00 e9 [ 248.538885][ C1] RSP: 002b:00007ffc45ad03c0 EFLAGS: 00000202 [ 248.545495][ C1] RAX: 00007f2f425c5fa0 RBX: 00007f2f430f5720 RCX: 0000000000000000 [ 248.553672][ C1] RDX: 00007f2f425c6038 RSI: 0000000000000002 RDI: 00007f2f430f5720 [ 248.561922][ C1] RBP: 00007f2f425c6038 R08: 0000000000000000 R09: 0000000000000000 [ 248.570265][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 00000000fffffc03 [ 248.578606][ C1] R13: 0000000000000000 R14: 00007ffc45ad0438 R15: 00007ffc45ad0590 [ 248.588130][ C1] [ 248.592573][ C1] Kernel Offset: disabled [ 248.599008][ C1] Rebooting in 86400 seconds..