last executing test programs: 6.896815695s ago: executing program 4 (id=1783): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000013002f0a253d7000fbdbdf2507006800", @ANYRES32=r1, @ANYBLOB="000900006522020024000c"], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x240480d4) 6.625463562s ago: executing program 4 (id=1786): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4c22, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, 0x8004}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @local, 0x8000}}, 0x3, 0x0, 0x21000, 0x81, 0xad, 0x4, 0x4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0xcb11}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000240)={0x3, 0x3, 0x400, 0x5b}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.487494214s ago: executing program 4 (id=1789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x1, 0x3, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r1, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500010006"], 0x6c}}, 0x40000) 6.319945817s ago: executing program 4 (id=1793): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0x6, 0x3, 0x5cf7, 0x9, @empty, @private1, 0x8000, 0x8, 0x7ff, 0x4}}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000140)={r4, 0x9, 0x6, 0x4}) getsockopt$MRT6(r5, 0x29, 0xd0, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r5, 0x20, &(0x7f00000001c0)={&(0x7f00000003c0)=""/235, 0xeb, 0x0, &(0x7f0000000580)=""/205, 0xcd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r3, &(0x7f0000000680)="c400fecc2818368b5819d1ad8ada0f9e1f5e12acad26ce12953e4f48951d319b42e0201017063c62bc61e7911a0ce9f1bf07a78098c1e384a49457530e726d05c520876aaf19f2edd0f24fa8822e4bc8a6f961f5ddf22c66db3aed1aaf67e4446589c239a5af9ffcf8c1dc8e5e6923d29fabd189620393d93f95cec406906c750e24690f3cc9acb989ac8cb16ebb2fc1379bf0f777cdeaf48297ea7aa802e45f26c0f3e5b7c59f2276ecaf696e4bca0b43913f1e52070648ce689340dd68be798f68c76067a0b3fa0670b2ce0031805b55eb891a28"}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x17, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x4}, @jmp={0x5, 0x0, 0x3, 0xb, 0x6, 0xfffffffffffffed1, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x7, 0x34, &(0x7f0000000140)=""/52, 0x41100, 0x0, '\x00', r2, @cgroup_sockopt=0x16, r3, 0x8, &(0x7f00000003c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, r6, r0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x5aa00}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="18000000700001000000000000000000070000002843"], 0x18}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000d40)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @empty}, {0x2, 0x4e23, @broadcast}, 0x1b0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000d00)='vlan1\x00', 0x4, 0x2, 0x100}) 5.571313617s ago: executing program 4 (id=1803): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x5, 0x1, 0x4042) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)={0x2f4, r3, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf44}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x339b3d1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x66}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffe01}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5be}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x52}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfe5}]}, @TIPC_NLA_MEDIA={0x100, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x414}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd04a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x21b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x800}, 0x4c800) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, 0x1412, 0x1, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x3b}, 0x1, 0x0, 0x0, 0x14}, 0x200c0082) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r7, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x8}, 0x18) 5.351545712s ago: executing program 0 (id=1806): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x3, 0x0, 0x0, 0x50}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x4508, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x16747c6d2baaace}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x7f, 0x1, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xfffffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x5, 0x0, 0x4000000f, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0xac) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000009280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a00)=[{0x1010, 0x10d, 0xbbc, "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"}, {0xff8, 0x3a, 0x8, "d6f8b9080aa630dcfc5b946728b1040ca062c679f215721acdc12654ba8fd002060611b57422637d55fbf5de5560f18227bc77b94dcb2daed681a61bd038d3fd06867aff4d7ba37b446e195ea94f0967ffb08a8bd1a132eba558872e6ef2d3a5910082520cf11a9f42ceca2fb0195a4359bec217681bf78100cd002b217ca284ae905508af41bf1f64f32adc6a5bc443626719f603189a336a4e3832ef150086449190840114d9528567d3b7453017b76dc1663ff5a3518568d34771bad8c5be306bda3856bf9daa02acf5eb84ff1a56f37241c94f1d1c9c84b1fe33eee0abb743c97f0bee6906b5bd4526ea5ac0273858a33f39e864b78c52da7a2e2967f9b542473713e008b0719080fea894a4ac79becaea958c0a941bc3237b003ab451aebd2799e81eae99f8762ecd13c33e45efd0bfb6aef0dfe9313c91fe2d762545ecda422e2bf6d23d91aaf4926989b9d8a962fe64756fc51edac3ced3fb3b9ed744c7d735db764b7ba8260cdf9f149171ce88a557c8ef12af445e19b5e793179a03185eb725f165e57dbdddcd4e1f481e291e3abac74cb998c184543cb9be0f1b9c6a5cd7a74266ea2d28c7960b227a26e8713f43b0b33f1a915fa90c12598905d22b08b4ff02f31848e8e48a8649e6438a0e02e61149db986831178b9887743a2e0dec12f7f3a8e44bf4859161579e4982d7e71b456a33c8a34fa12b81c0b7a6a2440f53c807da598b58ed7992599e8dfb16bb0e895d8bacdc7e66879e4111d4e3b497446032fa8e427281ff1ff3b539191f6ece07f50e306fb77955b93df3594915c724c943d10c6db0d4ea41cb86e6e97ebb6b8b135fe204759b498aa42802afa21c076f1c9fa21a365835fbad3fab77a78e5027f1e96649694c609a2ee59478d5995bccea528f044054f80a478599c2bf901705f01f13bcff64f89d87f24625b099390743ef34dd2f9eb3e508c8771b4df5e7a94974528f86aff605fef520b7e8f39150a1cdde5d5f2ad9bc2cb3cc5e91ee201d1af9751816e80fac03eb6af21b640a965209fafc5b5cf4f6f34bb89c9527e216108ddc4f9a2db8817757248e13686b1c5943854d0b225871b2d86e1464aa4f496b585fc15ea05f336b1f5cbd67f1f36548fb36af8974510b9e5c68c755f660937e4f9712f371b5ed009e6d7de29f79bd71fcc4eeb4dd63af7a652bb1ed54000d2dfb5e5e472b0314a9c43b2931b5cf4c94c3d073857444de2f51a1c0798cb29479b0bb663eb25870b0feee689f40766ed58be1dc78376023d874d564378b484cabd484cc963e816f308c717405eebb0dd82eb1beb091cd81575f9ca923150ea8cd61c9f8ab0399ee83e00d3ff282d15ef5c51c799c654f0b966fc4a85d40bc816250123d7715116cd4c6b7e5bc49131282007633f6e3372ef52115892cd52c564febcb7f519815b3060fe822f96dcf247dfabb04173038dafb9d3f95cd57181f5c74d4e4f71734b1fab7ab991c18aa513c83a147a5e927a81aafa96bbf4d033d40e06367c7140cd980d88a76b468ee543c639a8b9885d30c8b49214564fee5e4f039a0138fe05e246721086fc1401d08e78686b64cc1bd5cb237bf52e4403e2cd841a04fd90c1286f004345658beede48e08f32ee73dd14b26ea180ed76e486c7d06fa9855cdf19e1731beea2c5b548b1db74134a081804cf51776f02f717ace6dba332659fa1c71aa590f3ec62b842a486f7cff51e1fe472d2e57b4cd42a9c2475b0e86c6fdff7df12ae89942b80ca6d4f2555291701f58f16d897775d44f033196bd7697ef81be203b46c52266dd6f4684c8fb1d047d1e7b7d2a3517e1161899cf8a41b40e3536d01c5528895fa7baec3bd2340ed0d46165c7163d883c36c54ab29cb82fb5952a9385a1c5d0cae355463bdcbec4bb0b00253874209d967ffee219b334b850064a64b0d834add01b3e277687ab35e75110fcd5356c1a108989614648e456abf5297b0ff42643d8a687270ef029c32a18b0e258cb8a4cb9516b34251ae69f9d2bd1ea9467fbad512bb96841f4af76b97d6c0343e3ab3f2c6982867b16895fa4952a103140a8a6febe0f923d2db89a9dd94cc24c1a89ca78bffedb04d6bab1aa52af461b97f7f543b17f4e293886bd2621d8f2c68f1f258a04b87b58beec9113df50e463e28e6530e22732e3546e086470d81ebde56ada310eabd10f7d74feb7f201fe88bc1db7e83f0cddb64926a6031acca695c5b26945e0090bff7949491f3ca8271cacd3869b4eb8c5c1e5929b67e38a4ca90ece9bfc21334112bb2e57d96e110f0d5a6d8d6cbbfcf99d1ecb64f12b02e8a345a58cc6ef77b3fc5a7ec36a994cc8a76f5285c461c60d038eedce7e530fd8257bb4734615e7678a76b73ed00398886dce7ff33a0e8dcfceb0b36c73aab71b0bd9ccf992351bf20855838fd5dde48d0cb3a4ec5d3550090d32624a1d014861d08325e8e52b9651338d07c5ac23c950f7a37347b75d4e06ce32bef883f678995e296e653db02f8548c18e54afc4380ab0b1bb7b79162170bd8d5f6d125fd4675b531100e0ff4fe16509ae6825d61b322dfbab955f5c571b4d0fcf56fdff1f2f563c8a6061ab8768ec3d0f23a6810bf78e2e076b76ecb5fc60510aba69782e16b19421a7d59f804e83377d811c2504c6926e3134796c67b80a0dd932d4f7e98e3a42724fa48555cc84ded2da9a27fb1e3ecccf043380dcb38530694f97cbfe13dee5f78ebb89ac79a9bbbda364a8e7947aeb4b7f579c5c2244493a734ad028d0fd8e6c167239f0a68202690372bd0e67f340869c14d15d917ab48b6be1e6dabac279ceb476e6969651f2890d3f477d5756f6c7fd8f6c52a5425d5131dd5d06221c81ef2d9823917321b5d25b2454e00d0059d7bf90f6187179f83847d21bc87ced5bf1e8e4fb9d9d8646ed04033d7006a803f910bef0918d0f1ea44b427199684db6c623555d375bf108c179a8ac453bc64d32ce11e0f9b1a072fb35457f73d186ae54926f2e680eba4de31e99b95d91f840f9528afcd263a3f140e1f2f543c1abfd496243243d77367e0c9024d5f6724b57fa5b8fb0630b15aa85d6f466ce90e4f13515e53c8bdb2ccf7a898c3ff31bc0b16b92dd744f6d5f3c572486eef490a3488648a08bde6ede72a013e25bdf352b6b1bd9d26e328dc54d675a2e74a5b1ad98cc4d8c8c8559ecf877f6042eae812915fe92163df399243fc007604f20a3d20b6a0e1376d3dd1bfa9b223576e674f19c742a3b26f25f24d4214505dc70ece6cc536af4ace921c6fd870d24b7a8d52f92484e1d3504abd0e8910b054c9e408acdebdf3b5441c51b16e3516f0cc1900bc0fd7e80a364068eaf01446f2145a46535b36f7e416642732fc7aafa7d892383422acda9919f259b1abbf67e6e21b8e50a40da51dade376d515a65b70e2870bd5693a8bf9b408b8705d4098f44054dafd5b75b0616194f4824ce2c58ff5d5dbfec5cab019a38ec2d3789e301ba56a4afe25941325ec3d3a5dcbe734a8ab587fed47d00b40843e87bb7a4750bccea19789dbac05f273ab66c972702822a93e47d7d9dffcd693f0b8a56480ec103428c6621a3ba1cc2b69d55e2e224b048e39a8e1e8ac2ab6f991827556de6f25e47e3025db2e6632bcd75628ed894031343632d6d69673c523e63d6516969f3fe716b4efd46be34b4cc569d59f6d15282a3f53751cb7a4b8ef983226d48c1ae762ede12faee96a2111785bb610a2699502e46fe3df4436697b2e03aab7699c5c3fa767f742b0fc9472f256c891ebf33ee74c9bbdf1affcae368ee55129d9cd6507675278379e806f7f73194487f7db6d57fcc9be1a4c93c00c8bac1445a13abcbd1e40b137fcbda69a8f33a1155239d5f4c4ee5a934e43e04c266c4e5beb1698d4c60854837c024f28079668747c94b023e357172f84970c2335061f26e1c6950ba78d5b392833c59446bda05dfd44eb51f023dd2b4812e6c2f16d9ac076813a4d887e315662b4d89dd778ac7694f41d294724f1d37845596b992c3cae80609a9c5f1fcfabaf6f3c1ac2a5c4d476d97a1809a804c905dfb284ef0955d61562073257600a160def11f6c157dbe8f7e3794ea207a862529bd94713c5adca610020a3d141351a7e9ef4fb879ddc2b89b506e982a09c7c24944cef2ff0efd94230bd12ffe97a6be56540ba8840539630da998e181362502fa8c6afd85e1968cef9efc79e5014e50220aa2433be989ee549134ef542736e1295d798f440ef507d391be173158258385be1d3c30b81e4a75bf91fe09b718f0f65b647d077f3b91d70d504fed0b28ceff608a117c74301ec61cc7ad7a64315e931e754672a264e8e18fa45acfe49714e6dff23fd4f2982052f3c92cd75b61151a349171592e2f3d741b2bec0c1009dd96ac904c262aebcc6a309d8d436e9afa885f32cc3681a45c0971d92ee7bb2407ad1fb2c6a3d37782119e040db4948a630b4d8a37936aeba481dc7e78ed7e2c6d88558b0ad4ca3271a924466d6a817cb8e43b2db38fca462cac9ac1dae6274f86f7fd10248f5904cee7a6aec76650632109e54e8fcaf14efa1283d776f37c24bba40ca3f0b8e6ecbc263fcc427722f591b6b9bd827ee66022b4188bab6fc95245aa708d9ffbcd2cb43ac20588d21073244e69270b924255bb21c63507258d3001f7ed5296124ffeb847ac8d1ceaceaff20a002844d3c0cf44ca92edabb98de3fd38fdc7698083f8878640dbf33f78187b52eba25803bab14989df4029b11f93223a0cb40bd8e176f888775a615d7f08534e58dfe0ae18990736bbeb1562f6001d36e2a49ea73c6179aabf90db6cba6fa636194fc89f4fdbe096b6778bf1c9fab6b1942b01c15bd33be55470f1c70ab5b1c31f0e1ecd9fb2397a53e9376a643b72aca5e7580fdc12b4c34e1b5c5b33b8ad81204b01b9edbb5bee5acc25c708b041122851630c8880cc32a76ef8f07aa14d79397edf4b958dfcbf307de156c9cade8106723660409ffb7322b0b5b4378c9b8a78638dadf86250bf0cf1032079cfca785a11ac11cba66364b9a7b63d4a8f2b8d62ead877a8dced564426721e391ed2fdad43642d5cae23d5ff8242d3f06e0c5bb28c0b77768acb1844580c4c65fc9e3a6f27d211220526081bde49e0ca0f8a7e9f8abc8a13734d05d8c6476c864d08b4d96a5c55de376023fd6865799355943bac2817410c2542084f1a5fc003ce5686285924bb386f2dd45fe34ee752df15ea4205852ff198485711407d01d1e84c5e546b3449b86c1d6a17e02ca6055fc4d2df721ed9b4391c259d7c03187f3b65cc34e6efd53170cdfaf36880ba526cbb8f9d5fe4cdf82c02a8b0205b761de82aa2054352a97e063720059ee763d281ae19aeb90101a76d4c9635fc97dd04bd83989a9cf3e6b1c74af66ed35853839bd8b0c6e9db9d5fc5b9e73c309b33620633373152a3bf6365022d23869e9513cad58bbb30c14b8d7f623c61abf20b2535197de85187d9a32ac58e1dcd2a1dbf8a4b07617bb91467de26ed3e2303d611cc0777d0359d0b89ccbafa93f5b1151c795808dd1d3d1c242201f211a922f35d918e920316a99a3993ab83e34259d8d87e214128815dde6c81f90d1489956d7a7419229f4ddd66a5e920bfb1729efc0a2537a53e34194de2bfa2d8552c4223a72395a6767d1a5a3b2de4dbb679e8bd8826717f1cfd863eb0110683717e594ab5081d4fba9e213fa133125719a2e7662ccfab49"}], 0x2008}}], 0x1, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x4b, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4}, @ldst={0x3, 0x0, 0x6, 0x0, 0xa, 0x0, 0xa1}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x45833af96e4b28bd, 0x0) 5.342358441s ago: executing program 4 (id=1807): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1a, &(0x7f0000000100)="0978d05c5a83fd56c057f1d5da588848d5dedb6fefc1d5de3399928ecce8876affd689948ccfcd4686338d7d6e07169dbe0859eda4181333873dbae7ff1041e808d91a5ec529586e5672af41c65372aa28c0abd561571e30dc1a4c0000f377ff20304a9e2e93967a9b8772a832dc681263c032bf3f8b9802a4338a20bb41ef367118e233e6ebf1c557a384d46558508b96f358ce2e2262f8fe16b6477d36c42181ac28f19eb6920083e7074d18d658023b60") 4.547290645s ago: executing program 0 (id=1809): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000400000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f0000000200), 0x0}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) sendmsg$NLBL_CIPSOV4_C_LIST(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000a80)={0x9, {{0x2, 0x4e26, @multicast2}}, 0x0, 0x2, [{{0x2, 0x4e24, @rand_addr=0x64010102}}, {{0x2, 0x4e23, @loopback}}]}, 0x190) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002609000000dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0xa8, 0x9, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10001}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2c4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @random="4074dacef226"}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0xa8}}, 0x44865) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="71030907040609f34002b72cfef4195e1b02"], 0x12) 3.378300894s ago: executing program 0 (id=1817): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x40, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$unix(0x1, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010102}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) connect$inet(r9, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r9, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendmsg$inet(r9, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="a82f83fbbc0448b7eac7f8f066", 0xd}, {&(0x7f0000000100)="65b270e2b4539852a77efcb9259a883a2d76a0bdf0d98ab01d48e2cbdb883817f49921325cf2a56a8158552d16ca765d3464d973fdac4ccf29e3492d3cdaa959e888451e490db893e1888ab6af64e2cf03456238510b850901b0a5b6479f2cd2aa41a80e72cf4ae1a6c510cc9dc67f704ebe5bfbfc713646769f9bccedafe32263cc4d9275e68afd8f196f286febe5b69887bd22077ef326c349eaf232e753c720f90c10aaa2d8a980f621961857593650aaad", 0xb3}, {&(0x7f00000001c0)="427f491fb49c4d943d672845e32d44521a", 0x11}, {&(0x7f0000000240)="b16b681391bcd91c82e71f852a8ff9317d75400b5dba705defd30946c9b1a55dd7f9c1e8e13b9937d0054ac6121a8da5eaa03334b1a8eed77ca4feae608c5c3efaa6f84266d76580", 0x48}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="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", 0x1000}], 0x6, &(0x7f0000000440)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @empty, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x287e8d84}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_retopts={{0x11c, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0xce, 0x0, 0xe, [0x4, 0x3, 0x1, 0x101, 0xa, 0x10001, 0xaf, 0x3]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0xe, [{@rand_addr=0x64010101, 0xc5d}, {@local, 0xf8b}, {@multicast1, 0x3}, {@empty, 0x3}, {@private=0xa010102, 0x1}, {@broadcast, 0x3}]}, @timestamp_prespec={0x44, 0x4c, 0x1b, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800000}, {@multicast2, 0x28c1}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x9}, {@empty, 0x9}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x9}, {@remote, 0x9e}]}, @noop, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xc5, [@rand_addr=0x64010100, @multicast2, @loopback, @private=0xa010100]}, @ssrr={0x89, 0x2b, 0xa9, [@loopback, @broadcast, @remote, @multicast2, @multicast1, @rand_addr=0x64010102, @empty, @broadcast, @multicast1, @empty]}, @timestamp_prespec={0x44, 0x24, 0x77, 0x3, 0x7, [{@empty, 0x5bc3}, {@loopback, 0x10}, {@broadcast, 0x9}, {@local, 0x9}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @rand_addr=0x64010101, @local}}}], 0x1f8}, 0x4000000) (async, rerun: 32) sendmmsg$inet(r9, &(0x7f0000000400)=[{{&(0x7f0000000040)={0x2, 0x4e1e, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x1, 0x4000000) (rerun: 32) 2.962595743s ago: executing program 0 (id=1824): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x74, 0x1, 0x9, 0xbe842e2163812cb3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x800}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x99}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x300}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004050}, 0x4b8a40e905e0717a) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x4, 0x70bd29}, 0x14}}, 0x0) 2.920750832s ago: executing program 0 (id=1825): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) (async) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}}}}}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x100}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x0, 0x3, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x0, 0x6, 0x1, 0x0, "ed8450f48943686255f18cd4c2d736e09eab2863586b90b6198ae10caf28bb685957d590638b777fb447e80cf6b0e7"}, @NFTA_SET_ELEM_EXPRESSIONS={0x0, 0xb, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @masq={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x0, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x0, 0x3, 0x1, 0x0, 0xd}, @NFTA_MASQ_FLAGS]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0x0, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0x0, 0x4, 0x1, 0x0, 0x8000}, @NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @objref={{}, @void}}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}]}]}, {0x0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x0, 0x1, "ffdb7a13abe645eb3b8da8c8791ea7eed1273900104947ab79c92563a3c4cc10c2af536035cbddc109d731cb940fb1309acc99b540add94d570b64a3d80810d7166e011cd584a6ade8302f9e66a676bd226fdcb165c96f6a4874296fbad25b8aae4248d0de4737f6b0"}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @lookup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x0, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET_ID={0x0, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x0, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x0, 0x1, 'syz0\x00'}]}}}, @NFTA_SET_ELEM_EXPR={0x0, 0x7, 0x0, 0x1, @lookup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x0, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x0, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID, @NFTA_LOOKUP_SET={0x0, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_FLAGS={0x0, 0x5, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_FLAGS={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0x0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x0, 0x1, "4bff88e960"}]}, @NFTA_SET_ELEM_DATA]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0xfffffffffffffef1, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x0, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 2.885044821s ago: executing program 3 (id=1826): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="29002dfc3ac6a5415b", @ANYRESDEC=r0, @ANYBLOB="01002abd700000"], 0x14}}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, 0x0, 0x8000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r5, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @default}, [@rose, @remote, @default, @rose, @default, @bcast, @remote, @default]}, &(0x7f0000000200)=0x48, 0x80800) connect$ax25(r9, &(0x7f00000003c0)={{0x3, @bcast, 0x2}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_delroute={0x34, 0x19, 0x1, 0x70bd28, 0x25dfdbfd, {0x1d, 0x1, 0x1}, [@CGW_CS_XOR={0x8, 0x5, {0x7, 0x7, 0xfffffffffffffffc, 0xc}}, @CGW_MOD_AND={0x15, 0x1, {{{0x2, 0x1, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "fc0600f8ae754ae2"}, 0x1}}]}, 0x34}}, 0x0) r10 = socket$inet(0xa, 0x801, 0x84) listen(r10, 0xfffffffd) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000791010000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.747544638s ago: executing program 0 (id=1827): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) ioctl$TUNGETVNETBE(r5, 0x800454df, &(0x7f00000005c0)) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000001c0)={0x87}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4, 0x1}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={r4, @in={{0x2, 0x4e22, @empty}}, 0xcb8, 0x7f0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000380)={r4, @in={{0x2, 0x4e22, @empty}}, 0xcb8, 0x7f0}, 0x90) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) r6 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, &(0x7f0000000040)=0xfffffffffffffffe, r7, 0x0, 0xb, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.451839259s ago: executing program 2 (id=1829): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x4, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000280)="32780f64398323756224d03ac5cb3838e854cf6fe7e38c09daa0e76828c158699b396cff6b5ef9b454e678333fb7c00be87d", 0x32, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'tunl0\x00', 0x400}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 2.33116324s ago: executing program 3 (id=1831): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0005000600"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.239180575s ago: executing program 2 (id=1833): syz_emit_ethernet(0x7e, &(0x7f0000000400)={@random="a5050f0000b1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x68, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x1, 0x23, 0x0, {0x15, 0x4, 0x2, 0x8, 0x3, 0x66, 0x6, 0x5, 0x32, 0x6e, @empty, @remote, {[@timestamp_addr={0x44, 0x24, 0x9a, 0x1, 0x7, [{@local}, {@local, 0x17}, {@multicast2, 0xfffffff9}, {@private=0xa010102, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x94, 0x1, 0x0, [{@rand_addr=0x64010101, 0x800}, {@empty, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}]}]}}}}}}}, 0x0) r0 = socket(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x3c, r3, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac01, 0xfac0c, 0xfac04, 0xfac04, 0xfac04]}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000100)) r5 = epoll_create(0x1200000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x40000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04803005c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19932a8146f6a15e6996c7096ffe4f3a4745a8f762b9649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2fe09fccc89238819a663aec5f51ff2ad057fade5aa772bfa45b648ebe687c6cdb97f8f8cc5e3809817a805974e8866d17dd113c893c86f"], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f00000017c0)=""/130, 0x82}], 0x1}, 0xa1}], 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000080)={0x2000a212}) 2.14750737s ago: executing program 3 (id=1834): r0 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/454], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd74}, 0x48) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) syz_emit_ethernet(0xfffffc69, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa2402544aadcccaba772be1cd1e6d43aa0308060000003c0000000003019078ac1e0001ac1e010144140a01ac1414f1cd8f7e620bb29b68cf5e1bf8bc5d0000000000e0000002000000000d00907800"/103], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000206010300000000000000000000000005000100070000000900020073797a3100000036056b9b2ab75d9100"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="37d92ffcb92554620ac47b7e09918d211b54c0db44330d2d0dc500c456e457182fe5f1e564ff9e775b3a12daa61fe365b7068433a33012cbaf5e0de58c54f63fccf28bbce8bd51b9535164ffede7446f301d9900be35198d291bb1c076a50e0580cd3929e774a65e1bb316a2b98eae0676324c887a2f5b94dd5222271a60a312a7c6a581adae683a0c62eebb2505919f36bf6556482fc94f9048f03f7ffffba33740861a543c131a2c54c01f261434d0e6858869cbb748cdcf6ce05eefd6cb5972eee4980debc506638e6303ef1a32cc281b74be25c800dd6ae66790e87280b43919235a14dd5c886559"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x1, [0x1]}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x9303, 0x30, 0x7, 0x4}, &(0x7f0000000500)=0x18) socket$kcm(0xf, 0x0, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000007c0)={{0x0, 0x2, 0x9, 0x4, 0x7, 0x4ae, 0x1, 0xf, 0x4, 0x6, 0xff, 0x7f, 0x7fffffffffffffff, 0xffffffffffff8001, 0x5}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000017c0)={0x0, r7, "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", "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"}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth1_to_bond\x00', 0x200}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @private, @rand_addr, {[@ra={0x94, 0x4, 0x1000}]}}}}}}, 0x0) 1.809444141s ago: executing program 3 (id=1836): unshare(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) getsockopt$sock_buf(r1, 0x1, 0x1e, &(0x7f0000000e80)=""/155, &(0x7f0000000f40)=0x9b) sendto$l2tp(r0, &(0x7f0000000200)="02fcfbe50ae505ef69271544383ad2277ac983cbdb32cf875a652678430e2f8963320cdc25fccebec9ec0df018a954b92e6fcaf732322569c16d7f8b0e00000037ae0b217d697cb2b2d5c8d0e4fe7e30c35b74c5f87ae96fcaa83227d3e81b5e4d1e380d9b52cdd8106d678389ec0d74e975c1070a69e7858144833730890c2d167a6487622b7d503bd02c678fecc76524210387cb775ff7e9afe249f5691ad01dd7ab16037884cfef52beba41a7205a2300"/191, 0xbf, 0x804, &(0x7f0000000000)={0x2, 0x0, @loopback, 0x4}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@local, 0x80000000, 0x1}, 0x20) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f0000000040)) unshare(0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) socket$netlink(0x10, 0x3, 0xf) (async) getsockopt$sock_buf(r1, 0x1, 0x1e, &(0x7f0000000e80)=""/155, &(0x7f0000000f40)=0x9b) (async) sendto$l2tp(r0, &(0x7f0000000200)="02fcfbe50ae505ef69271544383ad2277ac983cbdb32cf875a652678430e2f8963320cdc25fccebec9ec0df018a954b92e6fcaf732322569c16d7f8b0e00000037ae0b217d697cb2b2d5c8d0e4fe7e30c35b74c5f87ae96fcaa83227d3e81b5e4d1e380d9b52cdd8106d678389ec0d74e975c1070a69e7858144833730890c2d167a6487622b7d503bd02c678fecc76524210387cb775ff7e9afe249f5691ad01dd7ab16037884cfef52beba41a7205a2300"/191, 0xbf, 0x804, &(0x7f0000000000)={0x2, 0x0, @loopback, 0x4}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@local, 0x80000000, 0x1}, 0x20) (async) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f0000000040)) (async) 1.662358762s ago: executing program 3 (id=1838): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r0, &(0x7f0000000000)="0c000000010001", 0x7) (async, rerun: 64) socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 64) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)) (async) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24000080) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x7, @empty}, 0x1c) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbb450000380000000000019078ac1e0001ac1414aa030090781200183f2500000000000000000100007f0000017f000001001863718a1d383e000200000000"], 0x0) 1.617473906s ago: executing program 1 (id=1839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x74e9}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x84) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x2, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x74e9}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x84) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) 1.475486491s ago: executing program 1 (id=1840): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180)="7ee66b5daaa8da882852cd18b44f0f20efdd134b5064b9a3256d51ab55c30da3b29f86c206ef8396fcee5d2e7b2d5218ae8a60fdb433d2e1f2c97cf6d9604357528e9edc62842c7d6730bce59bf5166ea5ee279677aad04ce39262c96bae799ed7b302fe8cf551235234e8763560057632bcbf6a96af3d63765755e543263f88043fd255673aaee16a5da5bfdc1ac8ceb4ab9774cf1c4107954454de3b7d75e905c500"/176, 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r2}, 0x18) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfdc7, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000140)="41000200010007", 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x4, 0x6, 0x305, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffa}, 0x50) 1.444211418s ago: executing program 3 (id=1841): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000002c0)="23000000010006", 0x7) r1 = socket$inet6(0xa, 0x4, 0x7) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) (async) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/231, 0xe7}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) (async) recvmmsg(r6, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/231, 0xe7}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000140)=r11, 0x4) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) (async) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010d0000000000000000030000002800018014000280080003000f00000008000400060000000d0001007564703a73797a3100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 1.175201328s ago: executing program 2 (id=1842): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0x10) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) (async) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0x10) (async) 932.615217ms ago: executing program 1 (id=1843): socket(0x11, 0x800000003, 0x3) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x0, 0x0, 0x1a8, 0x3d8, 0x1a8, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000087000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000000000071122a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 64) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000600)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f00000009c0)=[@iv={0x88, 0x117, 0x2, 0x73, "8a847d409c19a2f927a30d195a686f56f223ff34a4ec33d70be17e77172c8855509b2928de6730e1afba7c2ac7fd155fe19d39d5e8807e1b8c9e6903f79b302c16bef4dcccf89f015d95009f8093c08b0342f72c92acf32f80db3c8fe14b4b5769591ec6f13fe7c91120174e15f1e597fd92e9"}], 0x88, 0x40084}], 0x1, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, &(0x7f00000006c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES16=r3, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000008000000428854afb13c0c7cf5e90000000000000000001c801c1757b7ef98c5d97dc01de896340cdd662a3ee35b9eee6b0902d18a2b4d1339c3ec4a01ae0bec71628e593fd00d6236417c064d04045c6e9f790e2985e4da1faa3492541683"], 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x17, 0x1b, &(0x7f0000000c80)=ANY=[@ANYBLOB="fdfad9935143", @ANYRES32, @ANYBLOB="0000000000000000b7080000ecd100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000a70b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000082000000"], &(0x7f0000000700)='GPL\x00', 0x9, 0xf1, &(0x7f0000000740)=""/241, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x8, 0x46}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff], &(0x7f0000000b40), 0x10, 0x2}, 0x94) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x4}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000005200010000000000000000001c00fa00040004805f34c46b5fb24a455c5e056022b6500aa4fbb45ef609ffbd1ade72605d738763f28b80b9f9a196c5f966d04ff62c33cee2143b0fd82d2f7422011192cfc97f1957b1d357f4ee75b369c6373a0782ddd17dac8e8c24a039d700"], 0x18}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async, rerun: 64) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) (rerun: 64) close(r9) (async, rerun: 64) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000980)=0x681, 0x4) (async, rerun: 64) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r10, 0x2, 0x6}, 0x10) 499.609937ms ago: executing program 2 (id=1844): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x22200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x7c2}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000480)=[{0xffffffffffffffff, 0x1, {0x0, 0xf0}, {0x2, 0x1}, 0xfe, 0xfe}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xffff, 0x15}, {0x1, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x90) 499.038477ms ago: executing program 1 (id=1845): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085002000610000009500000000000000c4dd7f4044e3be527566e3627e861f62"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) pipe(&(0x7f0000000100)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000001440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0xcb, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000001680), 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x20, &(0x7f0000001880)={&(0x7f0000001740)=""/240, 0xf0, 0x0, &(0x7f0000001840)=""/34, 0x22}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = socket(0x10, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x400c844) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x400c844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x8045) r4 = socket$igmp(0x2, 0x3, 0x2) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0xd, 0x0, @vifc_lcl_ifindex=r5, @private}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x1, 0x0, &(0x7f0000002180)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 295.176119ms ago: executing program 2 (id=1846): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001, 0x1, 0x2, 0x0, 0x5, 0x40}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001, 0x1, 0x2, 0x0, 0x5, 0x40}, 0x20) (async) 264.529096ms ago: executing program 1 (id=1847): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$kcm(0x29, 0x5, 0x0) unshare(0x24020400) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) r2 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 87.264596ms ago: executing program 2 (id=1848): r0 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe8, 0x2a, 0x6, 0x53, @dev={0xfe, 0x80, '\x00', 0x25}, @private2, 0x20, 0x8000, 0x0, 0x4}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000500)={0x1, 0x2, 0x1000, 0x76, &(0x7f0000000440)="44589b76a2c1ccd8e5c7c236093a7989d35d33349879d06416c2fb3e4505ae5a9146bfd231127eac13fbeb685cbcbb8a5f8d98ad29bda584a5de08a7acd608f60d10c1084ad00fbf900da030ce530de387f4aaf41839796a1acf09d4895f4b62a459ec74ed4f96987eab92a4982a974e0417efae3a08", 0x4, 0x0, &(0x7f00000004c0)="b6bfad47"}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1816238bd568be6027c2960000fc00000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) sendmsg$key(r5, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000200)=ANY=[@ANYBLOB="581133a14a980f8e3fff6a4f000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fddbdf2509000000440003800800010001000000140002006272696467655f736c6176655f300000080003000000000014000600ff010000000000000000000000000001060007004e230000"], 0x58}}, 0x48040) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="00090402", @ANYRES16=r9, @ANYBLOB="01002abd7000fbdbdf250e00000008000500d70a000008000400bde60000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) r10 = socket(0x10, 0x80003, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "00000f0000000000000f00000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 0s ago: executing program 1 (id=1849): socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x23, 0x0, 0xe) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$kcm(0x10, 0x3, 0x10) (rerun: 64) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) (async) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x24004011) kernel console output (not intermixed with test programs): 0: left promiscuous mode [ 120.003456][ T6986] bond_slave_0: left promiscuous mode [ 120.009235][ T6986] bond_slave_1: left promiscuous mode [ 120.068831][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.248'. [ 120.123671][ T7002] netlink: 'syz.2.248': attribute type 1 has an invalid length. [ 120.461871][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806e211000: rx timeout, send abort [ 120.471208][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806e211000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.876937][ T7034] netlink: 22 bytes leftover after parsing attributes in process `syz.0.255'. [ 120.900755][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 121.098081][ T7042] netlink: 'syz.4.257': attribute type 1 has an invalid length. [ 121.109008][ T7044] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 121.138436][ T7042] netlink: 224 bytes leftover after parsing attributes in process `syz.4.257'. [ 121.234988][ T7044] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 122.349931][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 122.382648][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 122.419615][ T7103] netlink: 124 bytes leftover after parsing attributes in process `syz.3.270'. [ 122.836818][ T7123] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 122.933014][ T7131] sctp: [Deprecated]: syz.2.279 (pid 7131) Use of int in max_burst socket option. [ 122.933014][ T7131] Use struct sctp_assoc_value instead [ 123.041270][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 123.065906][ T7123] bond1: entered promiscuous mode [ 123.085534][ T7123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.255871][ T7135] bond1: (slave bridge1): making interface the new active one [ 123.279994][ T7135] bridge1: entered promiscuous mode [ 123.316734][ T7135] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 123.392733][ T7131] bridge_slave_1: left allmulticast mode [ 123.416523][ T7131] bridge_slave_1: left promiscuous mode [ 123.433361][ T7131] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.546381][ T7131] bridge_slave_0: left allmulticast mode [ 123.552912][ T7131] bridge_slave_0: left promiscuous mode [ 123.558863][ T7131] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.693220][ T7149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.796500][ T7166] netlink: 'syz.4.284': attribute type 12 has an invalid length. [ 123.804527][ T7166] netlink: 'syz.4.284': attribute type 11 has an invalid length. [ 124.214409][ T7190] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 124.513816][ T7198] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 124.625270][ T7204] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 124.669026][ T7204] netlink: 'syz.4.291': attribute type 10 has an invalid length. [ 124.695811][ T7209] bridge_slave_0: left allmulticast mode [ 124.733157][ T5944] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 124.745397][ T7209] bridge_slave_0: left promiscuous mode [ 124.773615][ T7209] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.876241][ T7209] bridge_slave_1: left allmulticast mode [ 124.899303][ T7209] bridge_slave_1: left promiscuous mode [ 124.931058][ T7209] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.957247][ T7209] bond0: (slave bond_slave_0): Releasing backup interface [ 125.001369][ T7209] bond0: (slave bond_slave_1): Releasing backup interface [ 125.026231][ T7209] team0: Port device team_slave_0 removed [ 125.094666][ T7209] team0: Port device team_slave_1 removed [ 125.140070][ T7209] bond1: (slave bridge1): Releasing backup interface [ 125.146970][ T7209] bridge1: left promiscuous mode [ 125.176589][ T7204] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 125.215830][ T7204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.256620][ T7204] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 125.312937][ T7221] __nla_validate_parse: 7 callbacks suppressed [ 125.312955][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 125.336538][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'. [ 125.364104][ T7206] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 125.399083][ T7206] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 125.451725][ T30] audit: type=1800 audit(1754187673.151:2): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.291" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 125.476441][ T7206] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 125.767330][ T24] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 126.655025][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'. [ 126.779173][ T7292] 8021q: VLANs not supported on ip_vti0 [ 127.035986][ T7309] netlink: 248 bytes leftover after parsing attributes in process `syz.0.310'. [ 127.065873][ T7314] bond0: option xmit_hash_policy: invalid value (8) [ 127.120596][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.311'. [ 127.306833][ T7330] netlink: 52 bytes leftover after parsing attributes in process `syz.4.315'. [ 127.402025][ T7333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.317'. [ 127.428001][ T7338] netlink: 40 bytes leftover after parsing attributes in process `syz.2.317'. [ 127.462533][ T7336] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 127.687452][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.319'. [ 127.724975][ T7330] syzkaller1: entered promiscuous mode [ 127.727556][ T7347] netlink: 277 bytes leftover after parsing attributes in process `syz.1.318'. [ 127.755114][ T7330] syzkaller1: entered allmulticast mode [ 129.036914][ T7383] infiniband syz1: set down [ 129.075378][ T7383] infiniband syz1: added veth1_to_bond [ 129.508904][ T7383] RDS/IB: syz1: added [ 129.530334][ T7383] smc: adding ib device syz1 with port count 1 [ 129.536723][ T7383] smc: ib device syz1 port 1 has pnetid [ 129.721815][ T7428] netlink: 'syz.2.337': attribute type 29 has an invalid length. [ 129.752888][ T7428] netlink: 'syz.2.337': attribute type 29 has an invalid length. [ 130.177326][ T7438] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 130.273336][ T7438] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.872776][ T7440] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.889454][ T7440] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 131.982331][ T7440] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 132.105965][ T7438] veth5: entered promiscuous mode [ 132.145112][ T7441] erspan0: entered allmulticast mode [ 132.454281][ T7463] tipc: Enabled bearer , priority 0 [ 132.468741][ T7463] syzkaller0: entered allmulticast mode [ 132.488074][ T7463] tipc: Resetting bearer [ 132.516076][ T7460] tipc: Disabling bearer [ 132.530819][ T7466] __nla_validate_parse: 4 callbacks suppressed [ 132.530837][ T7466] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.345'. [ 132.650672][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.657019][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.676798][ T7466] bridge0: entered promiscuous mode [ 132.712785][ T7466] macsec1: entered promiscuous mode [ 132.742838][ T7466] bridge0: port 3(macsec1) entered blocking state [ 132.751312][ T7466] bridge0: port 3(macsec1) entered disabled state [ 132.770455][ T7466] macsec1: entered allmulticast mode [ 132.784079][ T7466] bridge0: entered allmulticast mode [ 132.814786][ T7466] macsec1: left allmulticast mode [ 132.820989][ T7466] bridge0: left allmulticast mode [ 132.839235][ T7466] bridge0: left promiscuous mode [ 133.804886][ T7431] siw: device registration error -23 [ 134.222405][ T7497] netlink: 140 bytes leftover after parsing attributes in process `syz.2.348'. [ 135.221276][ T7525] netlink: 'syz.1.355': attribute type 23 has an invalid length. [ 135.283605][ T7527] syz.1.355: vmalloc error: size 4722688, failed to allocated page array size 9224, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.319761][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.1.355 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 135.319792][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.319812][ T7527] Call Trace: [ 135.319821][ T7527] [ 135.319834][ T7527] dump_stack_lvl+0x189/0x250 [ 135.319875][ T7527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.319897][ T7527] ? __pfx__printk+0x10/0x10 [ 135.319923][ T7527] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 135.319947][ T7527] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 135.319973][ T7527] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 135.319999][ T7527] warn_alloc+0x214/0x310 [ 135.320027][ T7527] ? __pfx_warn_alloc+0x10/0x10 [ 135.320059][ T7527] ? __get_vm_area_node+0x28f/0x300 [ 135.320093][ T7527] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 135.320129][ T7527] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 135.320181][ T7527] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.320203][ T7527] ? __pfx_aa_get_newest_label+0x10/0x10 [ 135.320241][ T7527] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 135.320270][ T7527] __vmalloc_noprof+0xb1/0xf0 [ 135.320290][ T7527] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 135.320324][ T7527] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 135.320361][ T7527] bpf_prog_alloc+0x3c/0x1a0 [ 135.320402][ T7527] bpf_prog_load+0x735/0x1930 [ 135.320445][ T7527] ? __pfx_bpf_prog_load+0x10/0x10 [ 135.320500][ T7527] ? bpf_lsm_bpf+0x9/0x20 [ 135.320526][ T7527] ? security_bpf+0x7e/0x300 [ 135.320555][ T7527] __sys_bpf+0x528/0x870 [ 135.320587][ T7527] ? __pfx___sys_bpf+0x10/0x10 [ 135.320630][ T7527] ? exc_page_fault+0x76/0xf0 [ 135.320675][ T7527] __x64_sys_bpf+0x7c/0x90 [ 135.320702][ T7527] do_syscall_64+0xfa/0x3b0 [ 135.320731][ T7527] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.320760][ T7527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.320781][ T7527] ? clear_bhb_loop+0x60/0xb0 [ 135.320825][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.320846][ T7527] RIP: 0033:0x7f68d598eb69 [ 135.320872][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.320890][ T7527] RSP: 002b:00007f68d683c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.320914][ T7527] RAX: ffffffffffffffda RBX: 00007f68d5bb6160 RCX: 00007f68d598eb69 [ 135.320929][ T7527] RDX: 0000000000000094 RSI: 00002000000007c0 RDI: 0000000000000005 [ 135.320943][ T7527] RBP: 00007f68d5a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 135.320956][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.320968][ T7527] R13: 0000000000000001 R14: 00007f68d5bb6160 R15: 00007fff23d705c8 [ 135.321001][ T7527] [ 135.321023][ T7527] Mem-Info: [ 135.354494][ T7527] active_anon:11644 inactive_anon:0 isolated_anon:0 [ 135.354494][ T7527] active_file:1345 inactive_file:39848 isolated_file:0 [ 135.354494][ T7527] unevictable:3593 dirty:167 writeback:0 [ 135.354494][ T7527] slab_reclaimable:10654 slab_unreclaimable:115783 [ 135.354494][ T7527] mapped:29344 shmem:1375 pagetables:1225 [ 135.354494][ T7527] sec_pagetables:0 bounce:0 [ 135.354494][ T7527] kernel_misc_reclaimable:0 [ 135.354494][ T7527] free:1304795 free_pcp:13471 free_cma:0 [ 135.589640][ T7526] netlink: 'syz.1.355': attribute type 23 has an invalid length. [ 135.649275][ T7527] Node 0 active_anon:57076kB inactive_anon:0kB active_file:5380kB inactive_file:159188kB unevictable:1636kB isolated(anon):0kB isolated(file):0kB mapped:121476kB dirty:660kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12288kB pagetables:4760kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.693480][ T7527] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.742331][ T7527] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 135.868876][ T7527] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 135.896223][ T7533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.356'. [ 135.930479][ T7527] Node 0 DMA32 free:1305800kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47540kB inactive_anon:0kB active_file:5380kB inactive_file:157384kB unevictable:1548kB writepending:664kB present:3129332kB managed:2560292kB mlocked:12kB bounce:0kB free_pcp:42860kB local_pcp:26528kB free_cma:0kB [ 135.966631][ T7527] lowmem_reserve[]: 0 0 1 1 1 [ 135.987466][ T7533] openvswitch: netlink: Multiple metadata blocks provided [ 135.998216][ T7527] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1804kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 136.119664][ T7527] lowmem_reserve[]: 0 0 0 0 0 [ 136.124456][ T7527] Node 1 Normal free:3898756kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19072kB local_pcp:12192kB free_cma:0kB [ 136.217941][ T7527] lowmem_reserve[]: 0 0 0 0 0 [ 136.257134][ T7527] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 136.306684][ T7527] Node 0 DMA32: 74*4kB (UME) 38*8kB (UME) 2*16kB (UM) 224*32kB (UM) 118*64kB (UE) 18*128kB (UM) 10*256kB (UM) 4*512kB (U) 9*1024kB (UME) 4*2048kB (UM) 309*4096kB (M) = 1305336kB [ 136.339649][ T7527] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 136.369618][ T7527] Node 1 Normal: 221*4kB (UME) 46*8kB (UME) 32*16kB (UME) 77*32kB (UME) 14*64kB (UM) 7*128kB (UME) 6*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3898756kB [ 136.404239][ T7544] tc_dump_action: action bad kind [ 136.413722][ T7544] netlink: 'syz.2.358': attribute type 12 has an invalid length. [ 136.424754][ T7544] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.358'. [ 136.478328][ T7527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.541219][ T7527] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.620238][ T7527] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 136.638886][ T7527] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 136.659768][ T7527] 42564 total pagecache pages [ 136.670378][ T7527] 0 pages in swap cache [ 136.674551][ T7527] Free swap = 124996kB [ 136.699446][ T7527] Total swap = 124996kB [ 136.705853][ T7527] 2097051 pages RAM [ 136.729610][ T7527] 0 pages HighMem/MovableOnly [ 136.734327][ T7527] 424872 pages reserved [ 136.738493][ T7527] 0 pages cma reserved [ 137.175685][ T7556] bridge0: port 3(team0) entered disabled state [ 137.182652][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.190433][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.201855][ T7571] netlink: 'syz.3.366': attribute type 16 has an invalid length. [ 137.213720][ T7570] netlink: 'syz.3.366': attribute type 16 has an invalid length. [ 137.223410][ T7570] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 137.233478][ T7571] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 137.254630][ T7570] netlink: 'syz.3.366': attribute type 2 has an invalid length. [ 137.271842][ T7571] netlink: 'syz.3.366': attribute type 2 has an invalid length. [ 137.627290][ T7588] Unsupported ieee802154 address type: 0 [ 137.642952][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.673568][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.965566][ T7556] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 138.032978][ T3016] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.056842][ T3016] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.096437][ T3016] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.136854][ T3016] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.840970][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 138.874115][ T7624] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 2, id = 0 [ 139.033032][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 139.231408][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 139.998617][ T7671] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 140.052798][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.387'. [ 140.552038][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 140.561992][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 140.887949][ T7661] tipc: Enabled bearer , priority 0 [ 140.975553][ T7671] bond3: entered promiscuous mode [ 140.982759][ T7671] bond3: entered allmulticast mode [ 141.022756][ T7673] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 141.053938][ T7673] bond3: (slave bridge1): making interface the new active one [ 141.062231][ T7673] bridge1: entered promiscuous mode [ 141.067690][ T7673] bridge1: entered allmulticast mode [ 141.074047][ T7673] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 141.095559][ T7682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'. [ 141.115992][ T7661] tipc: Disabling bearer [ 141.123500][ T7682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.389'. [ 141.298353][ T7699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.391'. [ 141.338964][ T7704] netlink: 'syz.3.391': attribute type 8 has an invalid length. [ 141.363426][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 141.666205][ T7724] netlink: 'syz.4.398': attribute type 3 has an invalid length. [ 141.682685][ T7724] netlink: 'syz.4.398': attribute type 3 has an invalid length. [ 142.511590][ T7751] netlink: 'syz.4.406': attribute type 1 has an invalid length. [ 142.523277][ T7751] netlink: 'syz.4.406': attribute type 1 has an invalid length. [ 142.544470][ T7751] block nbd0: shutting down sockets [ 142.967110][ T7768] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.132327][ T7776] netlink: 'syz.4.415': attribute type 21 has an invalid length. [ 143.157704][ T7776] netlink: 'syz.4.415': attribute type 4 has an invalid length. [ 143.173283][ T7776] netlink: 'syz.4.415': attribute type 3 has an invalid length. [ 143.396644][ T7792] netlink: 'syz.4.419': attribute type 10 has an invalid length. [ 143.435999][ T7792] team0: Port device dummy0 added [ 143.976594][ T7819] netlink: 'syz.4.426': attribute type 9 has an invalid length. [ 144.295920][ T7826] syzkaller0: entered promiscuous mode [ 144.338607][ T7826] syzkaller0: entered allmulticast mode [ 144.387721][ T7828] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 144.410538][ T7828] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 144.920674][ T7847] __nla_validate_parse: 64 callbacks suppressed [ 144.920703][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 145.277955][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.436'. [ 145.965531][ T7861] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) ! [ 146.234489][ T7872] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.285362][ T7879] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 146.288032][ T7872] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 146.312705][ T7879] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 146.349848][ T7879] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 146.505578][ T7887] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 146.714049][ T7891] netlink: 88 bytes leftover after parsing attributes in process `syz.3.445'. [ 146.814206][ T7900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.445'. [ 146.824665][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 147.053118][ T7909] netlink: 36 bytes leftover after parsing attributes in process `syz.1.447'. [ 147.356478][ T7914] pim6reg1: entered allmulticast mode [ 147.397047][ T7921] tipc: Enabled bearer , priority 0 [ 147.473302][ T7928] syzkaller0: entered promiscuous mode [ 147.478858][ T7928] syzkaller0: entered allmulticast mode [ 147.513047][ T7935] syzkaller0: entered promiscuous mode [ 147.518577][ T7935] syzkaller0: entered allmulticast mode [ 147.591732][ T7928] tipc: Resetting bearer [ 147.638362][ T7928] tipc: Disabling bearer [ 147.832649][ T7946] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.858484][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 147.928700][ T7953] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 148.331373][ T7946] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.424796][ T7946] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.545292][ T7946] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.914289][ T7979] veth3: entered promiscuous mode [ 148.934144][ T7979] bond0: (slave veth3): Enslaving as an active interface with an up link [ 149.173653][ T7996] nbd: couldn't find device at index 536870912 [ 149.182719][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.194902][ T7996] validate_nla: 1 callbacks suppressed [ 149.194916][ T7996] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 149.234504][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.373263][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 149.395656][ T8004] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 149.468652][ T7996] 8021q: adding VLAN 0 to HW filter on device bond4 [ 149.568058][ T7999] bond4: (slave ip6gretap1): making interface the new active one [ 149.597507][ T7999] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 149.788955][ T8001] veth3: entered promiscuous mode [ 149.800253][ T8001] bond4: (slave veth3): Enslaving as an active interface with a down link [ 149.809267][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.925201][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.117097][ T8013] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:19999 [ 150.126962][ T43] IPVS: starting estimator thread 0... [ 150.221442][ T8014] IPVS: using max 32 ests per chain, 76800 per kthread [ 150.262936][ T8018] netlink: 5 bytes leftover after parsing attributes in process `syz.2.472'. [ 150.516789][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 151.759495][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 151.783209][ T8052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 153.490374][ T8102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.484'. [ 153.512314][ T8102] netlink: 48 bytes leftover after parsing attributes in process `syz.3.484'. [ 153.650455][ T3016] nci: nci_rx_work: unknown MT 0x1 [ 154.109092][ T8129] netlink: 'syz.1.489': attribute type 10 has an invalid length. [ 154.130258][ T8129] team0: left allmulticast mode [ 154.135166][ T8129] team_slave_0: left allmulticast mode [ 154.182373][ T8129] team_slave_1: left allmulticast mode [ 154.187876][ T8129] team0: left promiscuous mode [ 154.210339][ T8129] team_slave_0: left promiscuous mode [ 154.226340][ T8129] team_slave_1: left promiscuous mode [ 154.236645][ T8129] bridge0: port 3(team0) entered disabled state [ 154.279076][ T8129] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.288674][ T8129] bond0: (slave team0): Enslaving as an active interface with an up link [ 155.664587][ T8165] veth0_virt_wifi: renamed from veth0_vlan [ 155.904159][ T8166] !: renamed from dummy0 (while UP) [ 156.049204][ T8178] batman_adv: batadv0: Adding interface: gretap1 [ 156.081474][ T8178] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.129581][ T8178] batman_adv: batadv0: Interface activated: gretap1 [ 156.380149][ T8208] netlink: 'syz.0.502': attribute type 7 has an invalid length. [ 156.439366][ T8205] netlink: 72 bytes leftover after parsing attributes in process `syz.1.503'. [ 156.479940][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.502'. [ 156.608442][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 157.600271][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 158.025189][ T5504] veth0_virt_wifi: left promiscuous mode [ 158.107615][ T5504] veth0_virt_wifi: entered promiscuous mode [ 158.229950][ T8251] netlink: 'syz.0.509': attribute type 6 has an invalid length. [ 158.237749][ T8251] netlink: 176 bytes leftover after parsing attributes in process `syz.0.509'. [ 158.594735][ T8257] syzkaller0: entered promiscuous mode [ 158.600719][ T8257] syzkaller0: entered allmulticast mode [ 158.815581][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.515'. [ 158.852182][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.515'. [ 158.874023][ T8273] netlink: 'syz.2.515': attribute type 18 has an invalid length. [ 159.191682][ T8291] netlink: 60 bytes leftover after parsing attributes in process `syz.4.518'. [ 159.234353][ T8291] netlink: 'syz.4.518': attribute type 3 has an invalid length. [ 159.844760][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.524'. [ 160.058508][ T8323] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 160.750849][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 160.780770][ T8329] netlink: 24 bytes leftover after parsing attributes in process `syz.2.527'. [ 161.007860][ T8340] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ1 [ 161.210417][ T8358] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 161.269636][ T8356] bond0: option mode: unable to set because the bond device has slaves [ 161.278907][ T8358] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 161.372734][ T8361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.523063][ T8369] syzkaller0: Caught tx_queue_len zero misconfig [ 161.876916][ T8393] netlink: 'syz.4.545': attribute type 5 has an invalid length. [ 162.075107][ T8399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.247259][ T8409] __nla_validate_parse: 5 callbacks suppressed [ 162.247277][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'. [ 162.263394][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'. [ 162.278616][ T8409] netlink: 58 bytes leftover after parsing attributes in process `syz.1.550'. [ 162.360691][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 162.435905][ T8423] netlink: 'syz.4.553': attribute type 2 has an invalid length. [ 162.447167][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 162.588872][ T8435] netlink: 'syz.1.556': attribute type 9 has an invalid length. [ 162.601011][ T8434] bridge0: entered promiscuous mode [ 162.613311][ T8435] netlink: 184 bytes leftover after parsing attributes in process `syz.1.556'. [ 162.626264][ T8435] netlink: 32 bytes leftover after parsing attributes in process `syz.1.556'. [ 162.821173][ T5944] IPVS: starting estimator thread 0... [ 162.909564][ T8446] IPVS: using max 29 ests per chain, 69600 per kthread [ 163.007014][ T8448] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20001 [ 163.224224][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 163.242757][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.560'. [ 163.314379][ T8458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.561'. [ 163.542240][ T8471] netlink: 'syz.0.566': attribute type 21 has an invalid length. [ 163.606108][ T8476] netlink: 'syz.0.566': attribute type 1 has an invalid length. [ 163.627210][ T8471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.672336][ T8528] netlink: 'syz.1.582': attribute type 21 has an invalid length. [ 164.683950][ T8528] netlink: 'syz.1.582': attribute type 15 has an invalid length. [ 164.696147][ T8533] netlink: 'syz.1.582': attribute type 21 has an invalid length. [ 164.720809][ T8533] netlink: 'syz.1.582': attribute type 15 has an invalid length. [ 164.722513][ T8534] tipc: MTU too low for tipc bearer [ 164.766338][ T8534] netlink: 'syz.3.584': attribute type 10 has an invalid length. [ 164.783350][ T8534] team0: Port device dummy0 added [ 164.803987][ T8534] team0: Port device dummy0 removed [ 164.818463][ T8534] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 165.032500][ T8538] tipc: Started in network mode [ 165.072977][ T8538] tipc: Node identity ac1414aa, cluster identity 4711 [ 165.093636][ T8538] tipc: Enabling of bearer rejected, failed to enable media [ 165.280059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.477207][ T8628] ip6gretap0: entered promiscuous mode [ 166.485728][ T8628] vlan3: entered promiscuous mode [ 167.301528][ T8665] validate_nla: 3 callbacks suppressed [ 167.301545][ T8665] netlink: 'syz.3.622': attribute type 1 has an invalid length. [ 167.448165][ T8673] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 167.706397][ T8686] __nla_validate_parse: 16 callbacks suppressed [ 167.706414][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 167.777451][ T8686] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 167.849914][ T8691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.631'. [ 167.985784][ T8704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.633'. [ 167.989264][ T8691] netlink: 9 bytes leftover after parsing attributes in process `syz.4.631'. [ 168.008340][ T8691] 0·: renamed from hsr0 (while UP) [ 168.045037][ T8691] 0·: entered allmulticast mode [ 168.070804][ T8691] hsr_slave_0: entered allmulticast mode [ 168.085515][ T8691] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 168.415073][ T8723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.527779][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.642'. [ 168.595123][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 168.622590][ T8729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 168.644088][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 168.663029][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 169.519918][ T51] Bluetooth: hci0: command tx timeout [ 169.584212][ T8769] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 169.661297][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.649'. [ 170.058716][ T8786] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 170.079274][ T8786] netlink: 'syz.3.656': attribute type 1 has an invalid length. [ 170.331925][ T8801] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 172.016822][ T8853] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 144 [ 172.500472][ T8887] netlink: 'syz.1.674': attribute type 3 has an invalid length. [ 172.772698][ T8895] ipvlan2: entered promiscuous mode [ 172.792562][ T8895] bridge0: port 3(ipvlan2) entered blocking state [ 172.807835][ T8895] bridge0: port 3(ipvlan2) entered disabled state [ 172.820237][ T8895] ipvlan2: entered allmulticast mode [ 172.826249][ T8895] bridge0: entered allmulticast mode [ 172.858263][ T8895] ipvlan2: left allmulticast mode [ 172.868215][ T8895] bridge0: left allmulticast mode [ 172.884000][ T8902] __nla_validate_parse: 13 callbacks suppressed [ 172.884015][ T8902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'. [ 172.996727][ T8910] netlink: 132 bytes leftover after parsing attributes in process `syz.3.682'. [ 173.086826][ T8916] netlink: 'syz.4.683': attribute type 10 has an invalid length. [ 173.241455][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.684'. [ 173.306479][ T8916] team0: Port device 0! removed [ 174.208808][ T8970] bond2: entered promiscuous mode [ 174.214174][ T8970] bond2: entered allmulticast mode [ 174.220347][ T8970] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.283596][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 174.349753][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 174.420896][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.696'. [ 174.921622][ T9016] ÿ: renamed from bond_slave_0 (while UP) [ 175.126214][ T9018] erspan0: left allmulticast mode [ 175.190292][ T9018] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.197923][ T9018] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.258875][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.707'. [ 175.317194][ T9041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.707'. [ 175.323459][ T9033] netlink: 168 bytes leftover after parsing attributes in process `syz.1.709'. [ 175.373849][ T9034] netlink: 248 bytes leftover after parsing attributes in process `syz.1.709'. [ 175.504389][ T9018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.526120][ T9018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.701755][ T9018] batman_adv: batadv0: Interface deactivated: macvlan2 [ 175.729439][ T9018] veth5: left promiscuous mode [ 175.744377][ T9018] bond3: left promiscuous mode [ 175.749188][ T9018] bridge1: left promiscuous mode [ 175.757092][ T9018] bond3: left allmulticast mode [ 175.763364][ T9018] bridge1: left allmulticast mode [ 175.865238][ T1151] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.899579][ T1151] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.929169][ T1151] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.957328][ T1151] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.774517][ T9111] vlan3: entered promiscuous mode [ 176.803781][ T9111] bridge0: entered promiscuous mode [ 177.188683][ T9138] netlink: 'syz.1.727': attribute type 13 has an invalid length. [ 177.306933][ T9144] netlink: 'syz.3.728': attribute type 9 has an invalid length. [ 177.307665][ T9145] netlink: 'syz.4.729': attribute type 1 has an invalid length. [ 177.339367][ T9144] netlink: 'syz.3.728': attribute type 6 has an invalid length. [ 177.418067][ T9145] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.716558][ T9151] bond6: (slave veth7): Enslaving as an active interface with a down link [ 177.765603][ T9153] vlan3: entered allmulticast mode [ 177.771373][ T9153] veth1: entered allmulticast mode [ 177.777336][ T9153] veth1: entered promiscuous mode [ 177.784074][ T9153] veth1: left promiscuous mode [ 177.794615][ T9153] bond6: (slave vlan3): making interface the new active one [ 177.820453][ T9153] veth1: entered promiscuous mode [ 177.850490][ T9153] vlan3: entered promiscuous mode [ 177.866582][ T9153] bond6: (slave vlan3): Enslaving as an active interface with an up link [ 177.917464][ T9142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.736714][ T9195] bridge0: entered promiscuous mode [ 178.754007][ T9195] bridge0: port 1(macvlan3) entered blocking state [ 178.781704][ T9195] bridge0: port 1(macvlan3) entered disabled state [ 178.788610][ T9195] macvlan3: entered allmulticast mode [ 178.795538][ T9195] bridge0: entered allmulticast mode [ 178.817201][ T9195] macvlan3: left allmulticast mode [ 178.836378][ T9195] bridge0: left allmulticast mode [ 178.911197][ T9195] bridge0: left promiscuous mode [ 179.198465][ T9213] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 179.534142][ T9231] __nla_validate_parse: 7 callbacks suppressed [ 179.534161][ T9231] netlink: 34 bytes leftover after parsing attributes in process `syz.4.744'. [ 180.755300][ T9271] netlink: 'syz.4.750': attribute type 21 has an invalid length. [ 180.780191][ T9271] netlink: 128 bytes leftover after parsing attributes in process `syz.4.750'. [ 180.808354][ T9274] gretap0: entered promiscuous mode [ 180.840863][ T9274] macsec1: entered promiscuous mode [ 180.873007][ T9274] macsec1: entered allmulticast mode [ 180.887536][ T9274] gretap0: entered allmulticast mode [ 180.906189][ T9280] netlink: 'syz.4.750': attribute type 10 has an invalid length. [ 180.928794][ T9274] gretap0: left allmulticast mode [ 180.955845][ T9274] gretap0: left promiscuous mode [ 181.007853][ T9271] netlink: 'syz.4.750': attribute type 5 has an invalid length. [ 181.019662][ T9271] netlink: 3 bytes leftover after parsing attributes in process `syz.4.750'. [ 181.056632][ T9284] netlink: 24 bytes leftover after parsing attributes in process `syz.2.754'. [ 181.100867][ T9280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.110971][ T9286] netlink: 40 bytes leftover after parsing attributes in process `syz.1.755'. [ 181.128354][ T9280] team0: Port device bond0 added [ 181.326805][ T9291] netlink: 364 bytes leftover after parsing attributes in process `syz.0.756'. [ 181.336713][ T9291] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 181.443443][ T9303] netlink: 72 bytes leftover after parsing attributes in process `syz.4.757'. [ 181.720103][ T9311] vlan3: entered allmulticast mode [ 181.738376][ T9311] syz_tun: entered allmulticast mode [ 182.118337][ T9325] team0: Port device bond0 removed [ 182.139803][ T43] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 182.231990][ T9325] bond0: (slave wlan1): Releasing backup interface [ 182.335069][ T9325] bond4: (slave ip6gretap1): Releasing active interface [ 182.360503][ T9325] bond4: (slave ip6gretap1): the permanent HWaddr of slave - 46:28:6b:ab:e3:e9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 182.362174][ T9340] netlink: 'syz.4.763': attribute type 10 has an invalid length. [ 182.446476][ T9325] bond4: (slave veth3): Releasing active interface [ 182.475815][ T9325] bond6: (slave veth7): Releasing active interface [ 182.489545][ T9325] bond6: (slave veth7): the permanent HWaddr of slave - 6e:03:29:c7:08:97 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 182.542535][ T9325] bond6: (slave vlan3): Releasing active interface [ 182.551545][ T9325] vlan3: left promiscuous mode [ 182.563464][ T9325] veth1: left promiscuous mode [ 182.612301][ T9340] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 182.629966][ T43] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 182.733638][ T9349] vlan2: entered promiscuous mode [ 182.740163][ T9349] vlan2: entered allmulticast mode [ 182.745398][ T9349] hsr_slave_1: entered allmulticast mode [ 182.809165][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 182.868531][ T9352] sock: sock_timestamping_bind_phc: sock not bind to device [ 183.032701][ T9356] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 183.270913][ T9372] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 183.292209][ T9372] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 183.343786][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.774'. [ 183.518493][ T9379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.776'. [ 184.741225][ T9420] __nla_validate_parse: 2 callbacks suppressed [ 184.741243][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 184.798034][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'. [ 184.850289][ T9420] netlink: 'syz.3.788': attribute type 20 has an invalid length. [ 184.894297][ T9428] openvswitch: netlink: Message has 4 unknown bytes. [ 184.993860][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.002870][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'. [ 185.023478][ T36] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.040667][ T9420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.788'. [ 185.049567][ T51] Bluetooth: hci0: command tx timeout [ 185.078022][ T9420] netlink: 'syz.3.788': attribute type 20 has an invalid length. [ 185.114168][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.151831][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.360650][ T9448] bridge0: port 3(erspan0) entered blocking state [ 185.401266][ T9448] bridge0: port 3(erspan0) entered disabled state [ 185.410088][ T9448] erspan0: entered allmulticast mode [ 185.477810][ T9448] erspan0: entered promiscuous mode [ 185.524682][ T9455] FAULT_INJECTION: forcing a failure. [ 185.524682][ T9455] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 185.559786][ T9449] erspan0: left allmulticast mode [ 185.565069][ T9455] CPU: 0 UID: 0 PID: 9455 Comm: syz.3.796 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 185.565094][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.565105][ T9455] Call Trace: [ 185.565113][ T9455] [ 185.565120][ T9455] dump_stack_lvl+0x189/0x250 [ 185.565145][ T9455] ? __pfx____ratelimit+0x10/0x10 [ 185.565172][ T9455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.565191][ T9455] ? __pfx__printk+0x10/0x10 [ 185.565227][ T9455] should_fail_ex+0x414/0x560 [ 185.565261][ T9455] _copy_from_user+0x2d/0xb0 [ 185.565288][ T9455] __copy_msghdr+0x3c5/0x5b0 [ 185.565311][ T9455] ___sys_sendmsg+0x1a5/0x2a0 [ 185.565333][ T9455] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.565385][ T9455] ? __fget_files+0x2a/0x420 [ 185.565403][ T9455] ? __fget_files+0x3a0/0x420 [ 185.565431][ T9455] __x64_sys_sendmsg+0x19b/0x260 [ 185.565453][ T9455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.565482][ T9455] ? __pfx_ksys_write+0x10/0x10 [ 185.565506][ T9455] ? rcu_is_watching+0x15/0xb0 [ 185.565540][ T9455] ? do_syscall_64+0xbe/0x3b0 [ 185.565571][ T9455] do_syscall_64+0xfa/0x3b0 [ 185.565614][ T9455] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.565641][ T9455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.565667][ T9455] ? clear_bhb_loop+0x60/0xb0 [ 185.565691][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.565710][ T9455] RIP: 0033:0x7f19da18eb69 [ 185.565727][ T9455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.565743][ T9455] RSP: 002b:00007f19dafe3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.565765][ T9455] RAX: ffffffffffffffda RBX: 00007f19da3b5fa0 RCX: 00007f19da18eb69 [ 185.565779][ T9455] RDX: 00000000000000ee RSI: 0000200000000100 RDI: 0000000000000004 [ 185.565791][ T9455] RBP: 00007f19dafe3090 R08: 0000000000000000 R09: 0000000000000000 [ 185.565803][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.565814][ T9455] R13: 0000000000000000 R14: 00007f19da3b5fa0 R15: 00007ffd7421c518 [ 185.565844][ T9455] [ 185.807812][ T9449] erspan0: left promiscuous mode [ 185.820721][ T9449] bridge0: port 3(erspan0) entered disabled state [ 186.616734][ T9501] netlink: 36 bytes leftover after parsing attributes in process `syz.2.803'. [ 186.643348][ T9487] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 186.673983][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.693870][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.732324][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.774529][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.806241][ T9504] syz_tun: entered promiscuous mode [ 186.819543][ T9504] syz_tun: entered allmulticast mode [ 186.843430][ T9509] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 186.889775][ T9509] netlink: 224 bytes leftover after parsing attributes in process `syz.3.805'. [ 186.963834][ T9510] bond4: entered promiscuous mode [ 186.969277][ T9510] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.292912][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880554e7400: rx timeout, send abort [ 187.334319][ T9529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.810'. [ 187.358830][ T9530] netlink: 56 bytes leftover after parsing attributes in process `syz.1.810'. [ 187.528644][ T9545] netlink: 28 bytes leftover after parsing attributes in process `syz.2.813'. [ 187.749770][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.813'. [ 187.801327][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880554e7400: abort rx timeout. Force session deactivation [ 187.926133][ T9545] team0: Port device team_slave_0 removed [ 187.959870][ T9560] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 188.472834][ T9595] openvswitch: netlink: IP tunnel dst address not specified [ 188.637025][ T9595] can: request_module (can-proto-0) failed. [ 211.521849][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 211.530522][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 211.534010][ T5853] Bluetooth: hci3: command 0x0406 tx timeout [ 229.574497][ T9619] __nla_validate_parse: 4 callbacks suppressed [ 229.574516][ T9619] netlink: 16 bytes leftover after parsing attributes in process `syz.1.837'. [ 229.628499][ T9624] syzkaller1: entered promiscuous mode [ 229.636583][ T9624] syzkaller1: entered allmulticast mode [ 229.803979][ T9643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 229.817301][ T9640] netlink: 68 bytes leftover after parsing attributes in process `syz.1.843'. [ 229.889955][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.4.844'. [ 229.901523][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.844'. [ 229.940189][ T9649] tls_set_device_offload_rx: netdev not found [ 229.977863][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 230.864942][ T9654] netlink: 44 bytes leftover after parsing attributes in process `syz.1.846'. [ 230.976990][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'. [ 231.047063][ T9672] netlink: 428 bytes leftover after parsing attributes in process `syz.4.850'. [ 231.153329][ T9691] sctp: [Deprecated]: syz.0.854 (pid 9691) Use of int in maxseg socket option. [ 231.153329][ T9691] Use struct sctp_assoc_value instead [ 231.235263][ T9699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.856'. [ 231.630421][ T9719] netlink: 'syz.0.864': attribute type 6 has an invalid length. [ 231.703295][ T9721] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 231.975003][ T9742] erspan0: entered promiscuous mode [ 232.095417][ T9744] tipc: Started in network mode [ 232.115370][ T9744] tipc: Node identity 1e87985dc064, cluster identity 4711 [ 232.144599][ T9744] tipc: Enabled bearer , priority 0 [ 232.165509][ T9754] syzkaller0: entered promiscuous mode [ 232.174761][ T9754] syzkaller0: entered allmulticast mode [ 232.200599][ T9755] tipc: Enabling of bearer rejected, failed to enable media [ 232.247921][ T9744] tipc: Resetting bearer [ 232.274084][ T9743] tipc: Resetting bearer [ 232.309335][ T9743] tipc: Disabling bearer [ 232.575827][ T9779] netlink: 'syz.0.879': attribute type 3 has an invalid length. [ 233.046849][ T9800] bond0: (slave team0): Releasing backup interface [ 233.063759][ T9800] bridge_slave_0: left allmulticast mode [ 233.070902][ T9800] bridge_slave_0: left promiscuous mode [ 233.083773][ T9800] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.107797][ T9800] bridge_slave_1: left allmulticast mode [ 233.122003][ T9800] bridge_slave_1: left promiscuous mode [ 233.139985][ T9800] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.155278][ T9800] bond0: (slave bond_slave_0): Releasing backup interface [ 233.166417][ T9800] bond0: (slave bond_slave_1): Releasing backup interface [ 233.181341][ T9800] team0: Port device team_slave_0 removed [ 233.189366][ T9800] team0: Port device team_slave_1 removed [ 233.195732][ T9800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.207334][ T9800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.217372][ T9800] bond0: (slave veth3): Releasing backup interface [ 233.227725][ T9800] batman_adv: batadv0: Interface deactivated: gretap1 [ 233.234695][ T9800] batman_adv: batadv0: Removing interface: gretap1 [ 233.354334][ T9814] : entered promiscuous mode [ 233.477249][ T9826] netlink: 'syz.2.894': attribute type 4 has an invalid length. [ 233.503245][ T9826] netlink: 'syz.2.894': attribute type 4 has an invalid length. [ 234.643691][ T9881] netlink: 'syz.3.909': attribute type 1 has an invalid length. [ 234.675668][ T9881] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.710273][ T9874] __nla_validate_parse: 11 callbacks suppressed [ 234.710290][ T9874] netlink: 156 bytes leftover after parsing attributes in process `syz.0.893'. [ 235.142066][ T9902] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 235.177200][ T9902] bond3: entered promiscuous mode [ 235.182704][ T9902] bond3: entered allmulticast mode [ 235.188225][ T9902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.205969][ T9902] ip6gretap1: entered promiscuous mode [ 235.211826][ T9902] ip6gretap1: entered allmulticast mode [ 235.217927][ T9902] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 235.293873][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 235.439909][ T5159] Bluetooth: hci4: command 0x0405 tx timeout [ 235.474046][ T8088] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 235.621467][ T9918] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.919'. [ 235.637578][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.919'. [ 235.666600][ T9927] netlink: 108 bytes leftover after parsing attributes in process `syz.3.921'. [ 235.828402][ T9931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'. [ 236.254496][ T30] audit: type=1804 audit(1754187784.041:3): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.930" name="/newroot/192/cgroup.controllers" dev="tmpfs" ino=1004 res=1 errno=0 [ 236.290759][ T30] audit: type=1800 audit(1754187784.041:4): pid=9953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.930" name="cgroup.controllers" dev="tmpfs" ino=1004 res=0 errno=0 [ 237.446518][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.937'. [ 237.503646][ T9989] netlink: 'syz.1.937': attribute type 10 has an invalid length. [ 237.825338][T10006] tipc: Enabling of bearer rejected, failed to enable media [ 237.849077][T10006] netlink: 'syz.2.942': attribute type 1 has an invalid length. [ 237.886700][T10006] netlink: 'syz.2.942': attribute type 2 has an invalid length. [ 237.905613][T10005] Â: renamed from pim6reg1 [ 237.923713][T10011] netlink: 'syz.1.943': attribute type 10 has an invalid length. [ 237.924463][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.942'. [ 238.187671][T10020] netlink: 60 bytes leftover after parsing attributes in process `syz.0.946'. [ 238.215031][T10017] macsec1: entered promiscuous mode [ 238.220532][T10017] macsec1: entered allmulticast mode [ 238.294187][T10026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.948'. [ 238.331566][T10024] netlink: 44 bytes leftover after parsing attributes in process `syz.1.947'. [ 238.359094][T10024] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 238.396434][T10024] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 238.662504][T10049] syzkaller0: entered promiscuous mode [ 238.671612][T10049] syzkaller0: entered allmulticast mode [ 238.689823][T10049] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 238.850376][T10070] netlink: 'syz.4.956': attribute type 3 has an invalid length. [ 239.124071][T10078] tipc: Enabled bearer , priority 0 [ 239.150967][T10078] tipc: Resetting bearer [ 239.173500][T10078] team0: Mode changed to "broadcast" [ 239.789273][T10127] __nla_validate_parse: 6 callbacks suppressed [ 239.789291][T10127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.972'. [ 239.816340][T10126] netlink: 156 bytes leftover after parsing attributes in process `syz.2.970'. [ 239.833037][T10133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.973'. [ 239.844969][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 239.885018][T10133] netlink: 'syz.1.973': attribute type 5 has an invalid length. [ 240.001568][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 240.077000][T10147] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 240.091480][T10147] syzkaller1: ignored: set checksum disabled [ 240.106500][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 240.124104][T10142] team0: entered promiscuous mode [ 240.129792][T10142] team_slave_1: entered promiscuous mode [ 240.137325][T10142] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 240.147213][T10142] bridge1: port 1(macvlan0) entered blocking state [ 240.154509][ T923] tipc: Node number set to 1864780226 [ 240.162390][T10142] bridge1: port 1(macvlan0) entered disabled state [ 240.169096][T10142] macvlan0: entered allmulticast mode [ 240.174704][T10142] team0: entered allmulticast mode [ 240.179903][T10142] team_slave_1: entered allmulticast mode [ 240.188572][T10142] macvlan0: entered promiscuous mode [ 240.389354][T10157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.980'. [ 240.460479][T10159] netlink: 92 bytes leftover after parsing attributes in process `syz.2.982'. [ 240.541356][T10163] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 240.694202][T10173] batman_adv: batadv0: Adding interface: dummy0 [ 240.712130][T10173] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.749802][T10173] batman_adv: batadv0: Interface activated: dummy0 [ 240.863952][T10182] tipc: Enabled bearer , priority 0 [ 240.872285][T10182] syzkaller0: entered promiscuous mode [ 240.877857][T10182] syzkaller0: entered allmulticast mode [ 240.911122][T10182] tipc: Resetting bearer [ 240.922123][T10187] netlink: 256 bytes leftover after parsing attributes in process `syz.1.990'. [ 240.932379][T10181] tipc: Resetting bearer [ 240.949983][T10181] tipc: Disabling bearer [ 240.989267][T10190] netlink: 3 bytes leftover after parsing attributes in process `syz.1.991'. [ 241.012224][T10190] batadv1: entered promiscuous mode [ 241.017609][T10190] batadv1: entered allmulticast mode [ 241.453083][T10214] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 242.681209][T10229] netlink: 'syz.1.998': attribute type 6 has an invalid length. [ 243.605215][T10282] hsr_slave_0: left promiscuous mode [ 243.620842][T10282] hsr_slave_1: left promiscuous mode [ 243.825308][T10296] netlink: 'syz.2.1016': attribute type 3 has an invalid length. [ 243.845831][T10298] netlink: 'syz.2.1016': attribute type 3 has an invalid length. [ 243.913073][T10294] tipc: Started in network mode [ 243.918806][T10302] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 243.942540][T10294] tipc: Node identity 5a7774ab282e, cluster identity 4711 [ 243.962329][T10294] tipc: Enabled bearer , priority 0 [ 243.998552][T10310] syzkaller0: entered promiscuous mode [ 244.043238][T10310] syzkaller0: entered allmulticast mode [ 244.163077][T10319] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 244.271069][T10323] vlan3: entered promiscuous mode [ 244.276174][T10323] batadv0: entered promiscuous mode [ 244.327277][T10328] tipc: Enabled bearer , priority 0 [ 244.496217][T10328] syzkaller0: entered promiscuous mode [ 244.505706][T10328] syzkaller0: entered allmulticast mode [ 244.521603][T10328] tipc: Resetting bearer [ 244.566859][T10318] tipc: Resetting bearer [ 244.578470][T10337] TCP: TCP_TX_DELAY enabled [ 244.813047][T10343] __nla_validate_parse: 13 callbacks suppressed [ 244.813066][T10343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1028'. [ 245.082804][ T43] tipc: Node number set to 1918465195 [ 245.188924][T10353] netlink: 'syz.2.1030': attribute type 32 has an invalid length. [ 245.367759][ T5890] tipc: Node number set to 2886997162 [ 245.729399][T10365] netlink: 'syz.4.1032': attribute type 2 has an invalid length. [ 246.059312][T10318] tipc: Disabling bearer [ 246.069202][T10290] tipc: Resetting bearer [ 246.088104][T10290] tipc: Disabling bearer [ 246.117267][T10356] batman_adv: batadv0: Interface deactivated: dummy0 [ 246.174188][T10356] batman_adv: batadv0: Removing interface: dummy0 [ 246.214080][T10365] þ`Ì: entered promiscuous mode [ 246.261667][T10377] netlink: 'syz.3.1035': attribute type 1 has an invalid length. [ 246.289143][T10377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1035'. [ 246.369648][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1036'. [ 246.389584][T10381] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1036'. [ 246.422053][T10387] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1039'. [ 246.426048][T10381] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1036'. [ 246.572952][T10394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1041'. [ 246.669066][T10401] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1044'. [ 246.711570][T10401] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1044'. [ 247.828368][T10451] syzkaller0: entered promiscuous mode [ 247.867084][T10451] syzkaller0: entered allmulticast mode [ 247.913310][T10450] tipc: Enabled bearer , priority 0 [ 248.090712][T10450] tipc: Resetting bearer [ 248.210140][T10450] tipc: Disabling bearer [ 248.272382][T10462] netlink: 'syz.3.1051': attribute type 41 has an invalid length. [ 248.535474][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1055'. [ 248.697646][T10480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.719126][T10480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.754753][T10480] batman_adv: batadv0: Removing interface: macvlan2 [ 249.463515][ T30] audit: type=1800 audit(1754187797.251:5): pid=10499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1060" name="cgroup.controllers" dev="tmpfs" ino=1065 res=0 errno=0 [ 250.067816][T10532] tipc: Enabling of bearer rejected, already enabled [ 250.532528][T10545] __nla_validate_parse: 4 callbacks suppressed [ 250.532548][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 250.638524][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 250.673083][T10548] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1070'. [ 250.875849][T10556] batadv_slave_1: entered promiscuous mode [ 251.073887][T10557] batadv_slave_1: left promiscuous mode [ 251.239173][T10572] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1076'. [ 251.388015][T10572] bond0 (unregistering): left allmulticast mode [ 251.396860][T10572] bond_slave_0: left allmulticast mode [ 251.402407][T10572] bond_slave_1: left allmulticast mode [ 251.407947][T10572] bond0 (unregistering): left promiscuous mode [ 251.416909][T10572] bond_slave_0: left promiscuous mode [ 251.423862][T10572] bond_slave_1: left promiscuous mode [ 251.437088][T10572] bond1: (slave macvlan2): Releasing backup interface [ 251.452461][T10572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.463934][T10572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.474384][T10572] bond0 (unregistering): Released all slaves [ 302.072658][T10587] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1081'. [ 302.082169][T10583] 8021q: VLANs not supported on vcan0 [ 302.105090][T10582] IPVS: stopping backup sync thread 7624 ... [ 302.133937][T10582] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1080'. [ 302.255504][T10603] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1087'. [ 302.341997][T10610] batadv_slave_1: entered promiscuous mode [ 302.373530][ T24] IPVS: starting estimator thread 0... [ 302.408280][T10620] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 302.423692][T10610] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1089'. [ 302.460146][T10616] IPVS: using max 27 ests per chain, 64800 per kthread [ 302.496106][T10609] batadv_slave_1: left promiscuous mode [ 302.806513][T10632] syzkaller0: entered promiscuous mode [ 302.814865][T10632] syzkaller0: entered allmulticast mode [ 302.825392][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 302.849202][T10632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1095'. [ 302.855308][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 302.868139][T10636] Bluetooth: MGMT ver 1.23 [ 302.881198][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 303.204222][T10645] netlink: 'syz.3.1100': attribute type 10 has an invalid length. [ 303.226706][T10645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.237827][T10645] team0: Port device bond0 added [ 303.274259][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1100'. [ 303.315149][T10654] netlink: 'syz.4.1103': attribute type 2 has an invalid length. [ 303.813418][T10675] netlink: 'syz.0.1108': attribute type 1 has an invalid length. [ 304.039291][T10675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.088078][T10678] gretap1: entered promiscuous mode [ 304.098617][T10678] bond1: (slave gretap1): making interface the new active one [ 304.107930][T10678] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 304.234882][T10683] macvlan3: entered promiscuous mode [ 304.248167][T10683] macvlan3: entered allmulticast mode [ 304.264370][T10683] bond1: entered promiscuous mode [ 304.281519][T10683] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 304.296503][T10683] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 304.355972][T10683] bond1: left promiscuous mode [ 304.662859][T10706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'. [ 304.680432][T10706] pim6reg: entered allmulticast mode [ 304.689291][T10706] pim6reg: left allmulticast mode [ 304.982773][T10713] netlink: 'syz.0.1114': attribute type 3 has an invalid length. [ 305.737112][T10725] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20002 [ 305.852659][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.045014][T10747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.844305][T10786] 8021q: VLANs not supported on caif0 [ 306.894046][T10787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.086729][T10799] __nla_validate_parse: 7 callbacks suppressed [ 307.086750][T10799] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1135'. [ 307.412703][T10812] tipc: Enabling of bearer rejected, already enabled [ 307.800874][T10832] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1147'. [ 307.875590][T10834] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 307.883767][T10834] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1148'. [ 307.893883][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 307.903499][T10835] netlink: 'syz.1.1148': attribute type 1 has an invalid length. [ 307.912428][T10835] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1148'. [ 307.928952][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 308.076239][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'. [ 308.086843][T10846] veth1: entered promiscuous mode [ 308.120667][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'. [ 308.162769][T10846] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 309.181551][T10897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1162'. [ 309.183593][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1162'. [ 309.466961][T10912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.502192][T10912] batadv_slave_1: entered promiscuous mode [ 309.575455][T10922] tipc: Enabling of bearer rejected, failed to enable media [ 309.662169][T10920] nbd4: detected capacity change from 0 to 63 [ 309.708146][T10931] block nbd4: NBD_DISCONNECT [ 309.715911][T10931] block nbd4: Disconnected due to user request. [ 309.725785][T10931] block nbd4: shutting down sockets [ 310.100395][T10935] infiniband syz2: set down [ 310.103828][T10948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.105114][T10935] infiniband syz2: added syzkaller0 [ 310.135183][T10948] macvlan1: entered promiscuous mode [ 310.140686][T10948] macvlan1: entered allmulticast mode [ 310.156761][T10935] RDS/IB: syz2: added [ 310.161181][T10935] smc: adding ib device syz2 with port count 1 [ 310.167361][T10935] smc: ib device syz2 port 1 has pnetid [ 311.244156][T10995] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 311.341850][T10995] 8021q: adding VLAN 0 to HW filter on device bond7 [ 311.383470][T10995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.397975][T10995] bond7: (slave batadv0): making interface the new active one [ 311.407082][T10995] bond7: (slave batadv0): Enslaving as an active interface with an up link [ 311.533350][T11009] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.844068][ T36] smc: removing ib device syz2 [ 311.880652][T11009] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.036791][T11009] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.168505][T11009] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.211029][T11033] netlink: 'syz.4.1199': attribute type 6 has an invalid length. [ 312.264439][T11035] netlink: 'syz.4.1199': attribute type 6 has an invalid length. [ 312.347153][ T43] hid-generic 0005:0C45:FFF9.0001: item fetching failed at offset 0/1 [ 312.364236][ T43] hid-generic 0005:0C45:FFF9.0001: probe with driver hid-generic failed with error -22 [ 312.522061][ T3016] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.561022][ T8090] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.651360][ T8090] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.701207][ T3016] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.721178][T11048] __nla_validate_parse: 9 callbacks suppressed [ 312.721194][T11048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1203'. [ 313.065721][T11066] openvswitch: netlink: Message has 4 unknown bytes. [ 313.136977][T11072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1208'. [ 313.386839][T11085] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 313.478573][T11090] macsec1: entered promiscuous mode [ 313.506412][T11090] gretap0: entered promiscuous mode [ 313.544265][T11090] gretap0: left promiscuous mode [ 313.611625][T11089] macsec1: entered promiscuous mode [ 313.617248][T11089] gretap0: entered promiscuous mode [ 313.693637][T11089] gretap0: left promiscuous mode [ 313.783751][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 313.943214][T11105] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1220'. [ 313.952594][T11105] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 314.207641][T11116] netlink: 'syz.1.1222': attribute type 83 has an invalid length. [ 314.264990][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 314.308231][T11116] chnl_net:caif_netlink_parms(): no params data found [ 314.546041][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1227'. [ 314.568948][T11141] netlink: 'syz.0.1230': attribute type 1 has an invalid length. [ 314.637550][T11136] veth1: entered promiscuous mode [ 314.657291][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1227'. [ 314.668113][T11136] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 314.711445][T11140] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 314.719377][T11140] netlink: 'syz.1.1229': attribute type 2 has an invalid length. [ 314.740656][T11140] netlink: 'syz.1.1229': attribute type 2 has an invalid length. [ 314.779249][T11140] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 314.840142][T11140] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 315.006220][T11163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1235'. [ 315.034538][T11165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1233'. [ 315.130822][T11163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 315.327684][T11179] syzkaller1: entered promiscuous mode [ 315.333438][T11179] syzkaller1: entered allmulticast mode [ 315.354210][T11179] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 316.130886][T11210] 8021q: adding VLAN 0 to HW filter on device bond8 [ 316.167188][T11213] bond8: (slave batadv1): Opening slave failed [ 316.202881][T11215] bridge_slave_0: invalid flags given to default FDB implementation [ 316.280146][T11219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.489811][T11227] geneve2: entered promiscuous mode [ 316.495244][T11227] geneve2: entered allmulticast mode [ 316.503471][ T1151] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.518214][ T1151] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.571539][T11229] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 316.597657][ T1151] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.613578][ T1151] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.647829][T11232] tipc: Enabled bearer , priority 0 [ 316.656122][T11237] validate_nla: 3 callbacks suppressed [ 316.656138][T11237] netlink: 'syz.1.1252': attribute type 7 has an invalid length. [ 316.657167][T11232] syzkaller0: entered promiscuous mode [ 316.679360][T11232] syzkaller0: entered allmulticast mode [ 316.773667][T11232] tipc: Resetting bearer [ 316.809968][T11231] tipc: Resetting bearer [ 316.854265][T11231] tipc: Disabling bearer [ 317.521273][T11264] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 317.562113][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.002412][T11281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.223252][T11292] __nla_validate_parse: 11 callbacks suppressed [ 318.223271][T11292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1266'. [ 318.515664][T11299] netlink: 'syz.2.1266': attribute type 4 has an invalid length. [ 318.615120][T11300] netlink: 'syz.2.1266': attribute type 4 has an invalid length. [ 318.773529][T11293] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 318.813529][T11293] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 318.849024][T11313] netlink: 'syz.4.1272': attribute type 1 has an invalid length. [ 318.856863][T11313] netlink: 'syz.4.1272': attribute type 2 has an invalid length. [ 318.864746][T11313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1272'. [ 318.887928][T11310] macsec1: entered allmulticast mode [ 318.893378][T11310] ip6gretap0: entered allmulticast mode [ 318.906108][T11310] ip6gretap0: left allmulticast mode [ 319.000717][T11302] syzkaller0: entered promiscuous mode [ 319.006319][T11302] syzkaller0: entered allmulticast mode [ 319.235508][T11322] xt_socket: unknown flags 0xd0 [ 320.275774][ T5837] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 320.288932][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 320.288962][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.288983][ T5837] Call Trace: [ 320.288992][ T5837] [ 320.289001][ T5837] dump_stack_lvl+0x189/0x250 [ 320.289031][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.289051][ T5837] ? __pfx__printk+0x10/0x10 [ 320.289090][ T5837] dump_header+0xd3/0x480 [ 320.289120][ T5837] oom_kill_process+0x387/0x920 [ 320.289145][ T5837] out_of_memory+0xf09/0x12a0 [ 320.289177][ T5837] ? __pfx_out_of_memory+0x10/0x10 [ 320.289207][ T5837] mem_cgroup_out_of_memory+0x145/0x240 [ 320.289231][ T5837] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 320.289264][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 320.289288][ T5837] ? memcg1_oom_prepare+0x37f/0x450 [ 320.289318][ T5837] try_charge_memcg+0xdff/0x1290 [ 320.289353][ T5837] ? __pfx_try_charge_memcg+0x10/0x10 [ 320.289387][ T5837] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 320.289414][ T5837] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 320.289444][ T5837] obj_cgroup_charge_pages+0x1e/0xa0 [ 320.289471][ T5837] obj_cgroup_charge_account+0xcf/0x660 [ 320.289508][ T5837] ? obj_cgroup_charge_account+0x13b/0x660 [ 320.289538][ T5837] __memcg_slab_post_alloc_hook+0x3e6/0x7f0 [ 320.289584][ T5837] kmem_cache_alloc_noprof+0x2bf/0x3c0 [ 320.289611][ T5837] ? alloc_empty_file+0x55/0x1d0 [ 320.289637][ T5837] alloc_empty_file+0x55/0x1d0 [ 320.289659][ T5837] path_openat+0x107/0x3830 [ 320.289695][ T5837] ? arch_stack_walk+0xfc/0x150 [ 320.289744][ T5837] ? kasan_save_track+0x4f/0x80 [ 320.289768][ T5837] ? kasan_save_track+0x3e/0x80 [ 320.289803][ T5837] ? __kasan_slab_alloc+0x6c/0x80 [ 320.289827][ T5837] ? getname_flags+0xb8/0x540 [ 320.289844][ T5837] ? __pfx_path_openat+0x10/0x10 [ 320.289864][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.289912][ T5837] do_filp_open+0x1fa/0x410 [ 320.289931][ T5837] ? __lock_acquire+0xab9/0xd20 [ 320.289955][ T5837] ? __pfx_do_filp_open+0x10/0x10 [ 320.289996][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 320.290015][ T5837] ? alloc_fd+0x64c/0x6c0 [ 320.290051][ T5837] do_sys_openat2+0x121/0x1c0 [ 320.290069][ T5837] ? __pfx___up_read+0x10/0x10 [ 320.290086][ T5837] ? __pfx_do_sys_openat2+0x10/0x10 [ 320.290112][ T5837] ? do_user_addr_fault+0xc8a/0x1390 [ 320.290138][ T5837] __x64_sys_openat+0x138/0x170 [ 320.290162][ T5837] do_syscall_64+0xfa/0x3b0 [ 320.290185][ T5837] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.290207][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.290223][ T5837] ? clear_bhb_loop+0x60/0xb0 [ 320.290242][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.290258][ T5837] RIP: 0033:0x7f68d598e461 [ 320.290274][ T5837] Code: 44 24 18 31 c0 41 83 e2 40 75 3e 89 f0 25 00 00 41 00 3d 00 00 41 00 74 30 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 3f 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 320.290287][ T5837] RSP: 002b:00007fff23d708e0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 320.290306][ T5837] RAX: ffffffffffffffda RBX: 0000000000000339 RCX: 00007f68d598e461 [ 320.290317][ T5837] RDX: 0000000000090800 RSI: 00007f68d5a12111 RDI: 00000000ffffff9c [ 320.290328][ T5837] RBP: 00007fff23d7098c R08: 0000000000000000 R09: 0000000000000000 [ 320.290337][ T5837] R10: 0000000000000000 R11: 0000000000000287 R12: 00000000000000f5 [ 320.290346][ T5837] R13: 0000000000000000 R14: 000000000004d89a R15: 00007fff23d709e0 [ 320.290390][ T5837] [ 320.626198][ T5837] memory: usage 229720kB, limit 307200kB, failcnt 220 [ 320.633009][ T5837] memory+swap: usage 229928kB, limit 9007199254740988kB, failcnt 0 [ 320.640990][ T5837] kmem: usage 229316kB, limit 9007199254740988kB, failcnt 0 [ 320.648295][ T5837] Memory cgroup stats for /syz1: [ 320.648506][ T5837] cache 0 [ 320.656445][ T5837] rss 0 [ 320.659229][ T5837] rss_huge 0 [ 320.662553][ T5837] shmem 0 [ 320.665517][ T5837] mapped_file 0 [ 320.669315][ T5837] dirty 0 [ 320.672293][ T5837] writeback 0 [ 320.675598][ T5837] workingset_refault_anon 10 [ 320.680222][ T5837] workingset_refault_file 0 [ 320.684785][ T5837] swap 212992 [ 320.688112][ T5837] swapcached 20480 [ 320.691912][ T5837] pgpgin 43352 [ 320.695300][ T5837] pgpgout 43347 [ 320.698795][ T5837] pgfault 72328 [ 320.702292][ T5837] pgmajfault 10 [ 320.705789][ T5837] inactive_anon 20480 [ 320.709828][ T5837] active_anon 0 [ 320.713315][ T5837] inactive_file 0 [ 320.716971][ T5837] active_file 0 [ 320.720830][ T5837] unevictable 0 [ 320.724297][ T5837] hierarchical_memory_limit 314572800 [ 320.729902][ T5837] hierarchical_memsw_limit 9223372036854771712 [ 320.736071][ T5837] total_cache 0 [ 320.739612][ T5837] total_rss 0 [ 320.742937][ T5837] total_rss_huge 0 [ 320.746727][ T5837] total_shmem 0 [ 320.750250][ T5837] total_mapped_file 0 [ 320.754263][ T5837] total_dirty 0 [ 320.757729][ T5837] total_writeback 0 [ 320.761691][ T5837] total_workingset_refault_anon 10 [ 320.766856][ T5837] total_workingset_refault_file 0 [ 320.772186][ T5837] total_swap 212992 [ 320.776001][ T5837] total_swapcached 20480 [ 320.780340][ T5837] total_pgpgin 43352 [ 320.784254][ T5837] total_pgpgout 43347 [ 320.788283][ T5837] total_pgfault 72328 [ 320.792307][ T5837] total_pgmajfault 10 [ 320.796292][ T5837] total_inactive_anon 20480 [ 320.800882][ T5837] total_active_anon 0 [ 320.804872][ T5837] total_inactive_file 0 [ 320.809033][ T5837] total_active_file 0 [ 320.813057][ T5837] total_unevictable 0 [ 320.817045][ T5837] anon_cost 0 [ 320.820460][ T5837] file_cost 0 [ 320.823763][ T5837] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1253,pid=11240,uid=0 [ 320.840294][ T5837] Memory cgroup out of memory: Killed process 11241 (syz.1.1253) total-vm:101888kB, anon-rss:1076kB, file-rss:22884kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 321.327060][T11328] tipc: Enabling of bearer rejected, failed to enable media [ 321.508822][T11351] bond0: (slave wlan1): Releasing backup interface [ 321.526180][T11351] tipc: Resetting bearer [ 321.642874][T11364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1280'. [ 321.675524][T11351] netlink: 'syz.4.1280': attribute type 10 has an invalid length. [ 321.697006][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 321.697620][T11351] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 321.730757][T11368] tipc: Enabled bearer , priority 0 [ 321.757588][T11367] tipc: Disabling bearer [ 321.830449][T11351] sock: sock_timestamping_bind_phc: sock not bind to device [ 322.052602][T11379] tipc: Enabling of bearer rejected, failed to enable media [ 322.446001][T11398] tipc: MTU too low for tipc bearer [ 322.479071][T11400] syzkaller1: entered promiscuous mode [ 322.502591][T11400] syzkaller1: entered allmulticast mode [ 322.526987][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1293'. [ 322.732501][T11408] netlink: 'syz.0.1295': attribute type 5 has an invalid length. [ 322.974713][T11383] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1288'. [ 323.548578][T11442] tipc: Enabled bearer , priority 0 [ 323.564340][T11442] tipc: Resetting bearer [ 323.617279][T11442] tipc: Disabling bearer [ 323.715263][T11448] syzkaller1: entered promiscuous mode [ 323.730022][T11448] syzkaller1: entered allmulticast mode [ 324.490916][T11476] ¾x9ÿ: renamed from bridge_slave_0 [ 325.683852][T11518] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1319'. [ 325.700262][T11506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1319'. [ 325.905953][T11527] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 325.915731][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 326.322399][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1328'. [ 326.364775][T11542] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1329'. [ 326.777030][T11575] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1337'. [ 326.848794][T11579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1338'. [ 326.862600][T11580] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 327.000500][T11586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1340'. [ 327.010917][T11586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1340'. [ 327.190186][T11595] bridge_slave_0: left allmulticast mode [ 327.195913][T11595] bridge_slave_0: left promiscuous mode [ 327.214334][T11595] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.250124][T11595] bridge_slave_1: left allmulticast mode [ 327.263978][T11595] bridge_slave_1: left promiscuous mode [ 327.281359][T11595] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.301723][T11595] bond0: (slave 77ÿ): Releasing backup interface [ 327.317717][T11595] bond0: (slave bond_slave_1): Releasing backup interface [ 327.337474][T11595] team0: Port device team_slave_0 removed [ 327.348145][T11595] team0: Port device team_slave_1 removed [ 327.354978][T11595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.362747][T11595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.379149][T11595] vxlan0: left allmulticast mode [ 327.384338][T11595] vxlan0: left promiscuous mode [ 327.390542][T11595] bridge0: port 3(vxlan0) entered disabled state [ 327.412659][T11595] bond1: (slave gretap1): Releasing active interface [ 327.757212][T11620] netlink: 'syz.0.1348': attribute type 1 has an invalid length. [ 327.769996][T11620] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1348'. [ 328.081618][T11633] netlink: 'syz.2.1351': attribute type 21 has an invalid length. [ 328.092074][T11633] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 328.107372][T11633] netlink: 'syz.2.1351': attribute type 21 has an invalid length. [ 328.116954][T11633] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 329.159211][T11691] macvlan0: entered allmulticast mode [ 329.165202][T11691] veth1_vlan: entered allmulticast mode [ 329.182936][T11691] team0: Port device macvlan0 added [ 329.705239][T11705] syzkaller1: entered promiscuous mode [ 329.713351][T11705] syzkaller1: entered allmulticast mode [ 329.860298][T11721] netlink: 'syz.3.1379': attribute type 13 has an invalid length. [ 330.052182][T11739] tc_dump_action: action bad kind [ 330.232598][T11745] syz.0.1385 (11745) used obsolete PPPIOCDETACH ioctl [ 330.382445][T11758] netlink: 'syz.4.1390': attribute type 10 has an invalid length. [ 330.394493][T11758] veth0_vlan: left promiscuous mode [ 330.404251][T11758] veth0_vlan: entered promiscuous mode [ 330.414382][T11758] veth0_vlan: entered allmulticast mode [ 330.428244][T11758] bridge0: port 1(veth0_vlan) entered blocking state [ 330.436686][T11758] bridge0: port 1(veth0_vlan) entered disabled state [ 330.453517][T11758] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 330.519274][T11773] netlink: 'syz.3.1393': attribute type 1 has an invalid length. [ 330.921217][T11802] netlink: 'syz.3.1401': attribute type 1 has an invalid length. [ 331.043671][T11802] 8021q: adding VLAN 0 to HW filter on device bond9 [ 331.387186][T11821] __nla_validate_parse: 12 callbacks suppressed [ 331.387206][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1405'. [ 331.790120][T11832] tipc: Enabling of bearer rejected, failed to enable media [ 331.827600][T11834] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 331.883304][T11836] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1409'. [ 332.767923][T11866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1418'. [ 333.054264][T11878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1422'. [ 333.372523][T11891] ip_vti0: entered allmulticast mode [ 333.386563][T11891] netlink: 87 bytes leftover after parsing attributes in process `syz.4.1425'. [ 333.414771][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1424'. [ 333.843145][T11897] netlink: 'syz.0.1426': attribute type 10 has an invalid length. [ 333.864290][T11897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.876185][T11897] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 334.626560][T11920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1432'. [ 334.694721][T11925] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1433'. [ 334.766986][T11925] sctp: [Deprecated]: syz.1.1433 (pid 11925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.766986][T11925] Use struct sctp_sack_info instead [ 334.892852][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 334.976903][T11933] bridge_slave_1: left allmulticast mode [ 334.993881][T11933] bridge_slave_1: left promiscuous mode [ 335.000661][T11933] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.013067][T11944] netlink: 'syz.0.1437': attribute type 39 has an invalid length. [ 335.022371][T11933] bridge_slave_0: left allmulticast mode [ 335.028045][T11933] bridge_slave_0: left promiscuous mode [ 335.034972][T11937] netlink: 'syz.2.1427': attribute type 1 has an invalid length. [ 335.042871][T11937] netlink: 'syz.2.1427': attribute type 4 has an invalid length. [ 335.059325][T11937] netlink: 15538 bytes leftover after parsing attributes in process `syz.2.1427'. [ 335.066836][T11933] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.075239][T11937] netlink: 'syz.2.1427': attribute type 1 has an invalid length. [ 335.227692][T11947] bridge4: entered allmulticast mode [ 335.293951][T11949] veth5: entered promiscuous mode [ 336.421015][T11996] __nla_validate_parse: 1 callbacks suppressed [ 336.421032][T11996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1449'. [ 336.549961][T11996] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1449'. [ 336.577284][T12003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1449'. [ 337.235084][T12008] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1454'. [ 337.478433][T12024] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1458'. [ 337.500281][T12025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1457'. [ 337.633341][T12026] sctp: [Deprecated]: syz.2.1458 (pid 12026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.633341][T12026] Use struct sctp_sack_info instead [ 337.855305][T12041] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1462'. [ 337.872787][T12043] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1463'. [ 337.905027][ T8097] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 337.916254][ T8097] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 337.930029][ T5944] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 338.017503][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 338.080035][ T5944] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 338.122657][ T5944] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 339.396528][T12075] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20004 [ 339.484822][T12087] netlink: 'syz.2.1477': attribute type 8 has an invalid length. [ 339.507293][T12087] bond0: entered promiscuous mode [ 339.512946][T12087] bond0: entered allmulticast mode [ 339.529117][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1474'. [ 339.534537][T12084] netlink: 'syz.0.1475': attribute type 6 has an invalid length. [ 339.538885][T12090] netlink: 'syz.1.1474': attribute type 7 has an invalid length. [ 339.569781][T12090] netlink: 'syz.1.1474': attribute type 8 has an invalid length. [ 339.604325][T12090] ip6gretap0: entered promiscuous mode [ 339.641427][T12090] syz_tun: entered promiscuous mode [ 339.741921][T12090] ip6gretap0: left promiscuous mode [ 339.755245][T12090] syz_tun: left promiscuous mode [ 339.796155][T12096] !: renamed from dummy0 [ 340.108235][T12110] netlink: 'syz.0.1482': attribute type 1 has an invalid length. [ 340.782401][T12141] netlink: 'syz.4.1488': attribute type 11 has an invalid length. [ 341.376934][T12159] netlink: 'syz.0.1493': attribute type 2 has an invalid length. [ 341.464064][T12159] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.506792][T12159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 341.560881][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 341.839771][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 341.946910][T12167] netlink: 'syz.0.1496': attribute type 1 has an invalid length. [ 342.245879][ T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 342.399691][ T8097] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 342.401999][T12180] sctp: [Deprecated]: syz.4.1500 (pid 12180) Use of int in max_burst socket option. [ 342.401999][T12180] Use struct sctp_assoc_value instead [ 342.662356][T12194] __nla_validate_parse: 7 callbacks suppressed [ 342.662374][T12194] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1504'. [ 342.803164][T12202] syzkaller0: entered promiscuous mode [ 342.808692][T12202] syzkaller0: entered allmulticast mode [ 342.840618][T12205] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 342.848392][T12205] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1503'. [ 343.100259][T12222] tipc: New replicast peer: 0.0.0.0 [ 343.107282][T12222] tipc: Enabled bearer , priority 10 [ 343.119079][T12222] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 343.133457][T12222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1510'. [ 343.207579][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1512'. [ 343.422854][T12174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.446556][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 343.485607][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 343.646849][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1516'. [ 343.650647][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1520'. [ 343.690629][T12252] netlink: 'syz.0.1521': attribute type 29 has an invalid length. [ 343.720398][T12252] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1521'. [ 343.730472][T12254] netlink: 'syz.0.1521': attribute type 29 has an invalid length. [ 343.990879][T12261] tipc: Enabling of bearer rejected, failed to enable media [ 344.029680][ T5890] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 344.220748][ T5890] tipc: Node number set to 3739457629 [ 344.869925][T12295] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 344.932114][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1535'. [ 344.985084][T12306] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1535'. [ 345.029813][T12307] syzkaller0: entered promiscuous mode [ 345.035352][T12307] syzkaller0: entered allmulticast mode [ 345.114981][T12313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1536'. [ 345.238564][T12317] netlink: 'syz.4.1538': attribute type 1 has an invalid length. [ 345.248831][T12317] netlink: 'syz.4.1538': attribute type 4 has an invalid length. [ 345.260784][T12317] netlink: 'syz.4.1538': attribute type 1 has an invalid length. [ 345.268543][T12317] netlink: 'syz.4.1538': attribute type 4 has an invalid length. [ 345.535854][T12329] netlink: 'syz.4.1541': attribute type 5 has an invalid length. [ 345.732564][T12340] netlink: 'syz.3.1546': attribute type 5 has an invalid length. [ 345.748542][T12340] netlink: 'syz.3.1546': attribute type 5 has an invalid length. [ 345.757845][T12340] netlink: 'syz.3.1546': attribute type 5 has an invalid length. [ 345.766380][T12340] netlink: 'syz.3.1546': attribute type 5 has an invalid length. [ 345.774486][T12340] netlink: 'syz.3.1546': attribute type 5 has an invalid length. [ 345.996115][T12347] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.029183][T12354] veth0: entered promiscuous mode [ 346.066117][T12354] veth0 (unregistering): left promiscuous mode [ 346.141688][T12347] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.298665][T12347] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.384657][T12363] sctp: [Deprecated]: syz.2.1552 (pid 12363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.384657][T12363] Use struct sctp_sack_info instead [ 346.424291][T12363] sctp: [Deprecated]: syz.2.1552 (pid 12363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.424291][T12363] Use struct sctp_sack_info instead [ 346.425861][T12347] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.586063][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.614709][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.635988][ T1151] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.661901][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.676722][T12346] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.757034][T12346] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.880585][T12346] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.974741][T12346] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.096023][T12393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.169366][T12396] bond1: (slave veth7): Enslaving as an active interface with a down link [ 347.182515][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.405278][T12402] FAULT_INJECTION: forcing a failure. [ 347.405278][T12402] name failslab, interval 1, probability 0, space 0, times 1 [ 347.418772][T12402] CPU: 1 UID: 0 PID: 12402 Comm: syz.3.1561 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 347.418801][T12402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.418814][T12402] Call Trace: [ 347.418822][T12402] [ 347.418835][T12402] dump_stack_lvl+0x189/0x250 [ 347.418864][T12402] ? __pfx____ratelimit+0x10/0x10 [ 347.418895][T12402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.418918][T12402] ? __pfx__printk+0x10/0x10 [ 347.418952][T12402] ? __pfx___might_resched+0x10/0x10 [ 347.418990][T12402] should_fail_ex+0x414/0x560 [ 347.419032][T12402] should_failslab+0xa8/0x100 [ 347.419056][T12402] __kmalloc_cache_noprof+0x70/0x3d0 [ 347.419088][T12402] ? sctp_association_new+0x89/0x25f0 [ 347.419109][T12402] ? __asan_memcpy+0x40/0x70 [ 347.419141][T12402] sctp_association_new+0x89/0x25f0 [ 347.419163][T12402] ? sctp_do_bind+0x657/0x940 [ 347.419192][T12402] ? __ipv6_addr_type+0x247/0x2f0 [ 347.419227][T12402] sctp_connect_new_asoc+0x2c5/0x690 [ 347.419253][T12402] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 347.419284][T12402] ? __local_bh_enable_ip+0x12d/0x1c0 [ 347.419322][T12402] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 347.419347][T12402] ? security_sctp_bind_connect+0x7e/0x2e0 [ 347.419373][T12402] sctp_sendmsg+0x155c/0x2810 [ 347.419428][T12402] ? __pfx_sctp_sendmsg+0x10/0x10 [ 347.419464][T12402] ? aa_sk_perm+0x81e/0x950 [ 347.419494][T12402] ? __pfx_aa_sk_perm+0x10/0x10 [ 347.419523][T12402] ? sock_rps_record_flow+0x19/0x410 [ 347.419551][T12402] ? inet_sendmsg+0x2f4/0x370 [ 347.419580][T12402] __sock_sendmsg+0x19c/0x270 [ 347.419610][T12402] __sys_sendto+0x3bd/0x520 [ 347.419655][T12402] ? __pfx___sys_sendto+0x10/0x10 [ 347.419681][T12402] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 347.419722][T12402] ? __fget_files+0x3a0/0x420 [ 347.419753][T12402] ? ksys_write+0x22a/0x250 [ 347.419782][T12402] ? __pfx_ksys_write+0x10/0x10 [ 347.419833][T12402] __x64_sys_sendto+0xde/0x100 [ 347.419867][T12402] do_syscall_64+0xfa/0x3b0 [ 347.419895][T12402] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.419922][T12402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.419957][T12402] ? clear_bhb_loop+0x60/0xb0 [ 347.419981][T12402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.419998][T12402] RIP: 0033:0x7f19da18eb69 [ 347.420015][T12402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.420031][T12402] RSP: 002b:00007f19dafe3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 347.420052][T12402] RAX: ffffffffffffffda RBX: 00007f19da3b5fa0 RCX: 00007f19da18eb69 [ 347.420066][T12402] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 347.420078][T12402] RBP: 00007f19dafe3090 R08: 000020000005ffe4 R09: 000000000000001c [ 347.420090][T12402] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 347.420101][T12402] R13: 0000000000000000 R14: 00007f19da3b5fa0 R15: 00007ffd7421c518 [ 347.420131][T12402] [ 347.529854][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 347.823209][T12417] __nla_validate_parse: 12 callbacks suppressed [ 347.823228][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'. [ 347.852051][T12417] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1566'. [ 347.883000][T12417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 348.053171][T12434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1571'. [ 348.458126][T12431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1570'. [ 348.573288][T12441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.720308][T12448] syzkaller0: entered promiscuous mode [ 348.726991][T12448] syzkaller0: entered allmulticast mode [ 349.304199][T12478] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 349.349295][T12472] 8021q: adding VLAN 0 to HW filter on device bond5 [ 349.357441][T12472] bridge0: port 1(bond5) entered blocking state [ 349.370846][T12472] bridge0: port 1(bond5) entered disabled state [ 349.377373][T12472] bond5: entered allmulticast mode [ 349.387914][T12472] bond5: entered promiscuous mode [ 349.394366][T12472] bridge0: port 1(bond5) entered blocking state [ 349.401802][T12472] bridge0: port 1(bond5) entered forwarding state [ 349.412030][T12474] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 349.489815][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1583'. [ 349.559864][T12488] netlink: 'syz.4.1584': attribute type 11 has an invalid length. [ 349.615992][T12488] netlink: 308 bytes leftover after parsing attributes in process `syz.4.1584'. [ 349.654934][T12492] bridge5: entered promiscuous mode [ 349.682860][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1584'. [ 349.698966][T12488] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 349.894818][T12507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1593'. [ 350.031720][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1594'. [ 350.204643][T12527] sctp: [Deprecated]: syz.2.1600 (pid 12527) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.204643][T12527] Use struct sctp_sack_info instead [ 350.227773][T12524] tipc: Enabling of bearer rejected, already enabled [ 350.239622][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 350.265287][ T49] bridge0: port 1(bond5) entered disabled state [ 350.311405][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1602'. [ 350.342917][T12532] validate_nla: 69 callbacks suppressed [ 350.342935][T12532] netlink: 'syz.1.1603': attribute type 28 has an invalid length. [ 350.374474][T12531] geneve3: entered promiscuous mode [ 350.380380][T12531] geneve3: entered allmulticast mode [ 351.049233][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.111962][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.123592][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.184519][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.203797][T12580] netlink: 'syz.1.1619': attribute type 3 has an invalid length. [ 351.230770][T12580] gretap0: entered promiscuous mode [ 351.241607][T12580] batadv_slave_1: entered promiscuous mode [ 351.252799][T12580] hsr0: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 351.263555][T12580] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.338269][T12581] netlink: 'syz.3.1612': attribute type 15 has an invalid length. [ 351.679047][T12597] team0: left promiscuous mode [ 351.714455][T12597] team_slave_1: left promiscuous mode [ 351.792430][T12597] netlink: 'syz.2.1622': attribute type 1 has an invalid length. [ 351.948822][T12616] tipc: Enabling of bearer rejected, already enabled [ 352.141063][T12629] FAULT_INJECTION: forcing a failure. [ 352.141063][T12629] name failslab, interval 1, probability 0, space 0, times 0 [ 352.209876][T12629] CPU: 1 UID: 0 PID: 12629 Comm: syz.3.1632 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 352.209904][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 352.209916][T12629] Call Trace: [ 352.209923][T12629] [ 352.209932][T12629] dump_stack_lvl+0x189/0x250 [ 352.209958][T12629] ? __pfx____ratelimit+0x10/0x10 [ 352.209986][T12629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.210006][T12629] ? __pfx__printk+0x10/0x10 [ 352.210030][T12629] ? crng_make_state+0x3fc/0x700 [ 352.210058][T12629] ? crng_make_state+0x13a/0x700 [ 352.210089][T12629] should_fail_ex+0x414/0x560 [ 352.210123][T12629] should_failslab+0xa8/0x100 [ 352.210144][T12629] __kmalloc_cache_noprof+0x70/0x3d0 [ 352.210171][T12629] ? sctp_add_bind_addr+0x8c/0x370 [ 352.210200][T12629] sctp_add_bind_addr+0x8c/0x370 [ 352.210229][T12629] sctp_copy_local_addr_list+0x30b/0x4e0 [ 352.210258][T12629] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 352.210282][T12629] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 352.210316][T12629] ? sctp_v6_is_any+0x64/0x80 [ 352.210344][T12629] ? sctp_copy_one_addr+0x93/0x360 [ 352.210373][T12629] sctp_bind_addr_copy+0xb3/0x3c0 [ 352.210400][T12629] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 352.210426][T12629] sctp_connect_new_asoc+0x2e0/0x690 [ 352.210447][T12629] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 352.210464][T12629] ? __local_bh_enable_ip+0x12d/0x1c0 [ 352.210500][T12629] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 352.210522][T12629] ? security_sctp_bind_connect+0x7e/0x2e0 [ 352.210546][T12629] sctp_sendmsg+0x155c/0x2810 [ 352.210587][T12629] ? __pfx_sctp_sendmsg+0x10/0x10 [ 352.210620][T12629] ? aa_sk_perm+0x81e/0x950 [ 352.210646][T12629] ? __pfx_aa_sk_perm+0x10/0x10 [ 352.210671][T12629] ? sock_rps_record_flow+0x19/0x410 [ 352.210696][T12629] ? inet_sendmsg+0x2f4/0x370 [ 352.210722][T12629] __sock_sendmsg+0x19c/0x270 [ 352.210748][T12629] __sys_sendto+0x3bd/0x520 [ 352.210777][T12629] ? __pfx___sys_sendto+0x10/0x10 [ 352.210803][T12629] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 352.210843][T12629] ? __fget_files+0x3a0/0x420 [ 352.210871][T12629] ? ksys_write+0x22a/0x250 [ 352.210899][T12629] ? __pfx_ksys_write+0x10/0x10 [ 352.210926][T12629] ? rcu_is_watching+0x15/0xb0 [ 352.210958][T12629] __x64_sys_sendto+0xde/0x100 [ 352.210989][T12629] do_syscall_64+0xfa/0x3b0 [ 352.211015][T12629] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.211040][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.211059][T12629] ? clear_bhb_loop+0x60/0xb0 [ 352.211082][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.211101][T12629] RIP: 0033:0x7f19da18eb69 [ 352.211118][T12629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.211134][T12629] RSP: 002b:00007f19dafe3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 352.211156][T12629] RAX: ffffffffffffffda RBX: 00007f19da3b5fa0 RCX: 00007f19da18eb69 [ 352.211196][T12629] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 352.211209][T12629] RBP: 00007f19dafe3090 R08: 000020000005ffe4 R09: 000000000000001c [ 352.211225][T12629] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 352.211237][T12629] R13: 0000000000000000 R14: 00007f19da3b5fa0 R15: 00007ffd7421c518 [ 352.211274][T12629] [ 352.590047][T12597] siw: device registration error -23 [ 353.087513][T12655] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 353.497237][T12674] netlink: 'syz.0.1643': attribute type 4 has an invalid length. [ 353.519029][T12674] sit0: entered promiscuous mode [ 353.536636][T12674] __nla_validate_parse: 10 callbacks suppressed [ 353.536655][T12674] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1643'. [ 353.835980][T12706] netlink: del zone limit has 4 unknown bytes [ 354.013628][T12721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'. [ 354.026646][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 354.529036][T12757] netlink: 'syz.0.1664': attribute type 1 has an invalid length. [ 354.549966][T12757] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1664'. [ 354.626218][T12762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1665'. [ 354.738610][T12764] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 354.980916][T12783] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1672'. [ 355.198669][T12796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.221476][T12796] netlink: 'syz.4.1675': attribute type 1 has an invalid length. [ 355.318818][T12796] 8021q: adding VLAN 0 to HW filter on device bond9 [ 355.738943][T12819] netlink: 'syz.2.1683': attribute type 5 has an invalid length. [ 355.786164][T12822] pim6reg1: entered promiscuous mode [ 355.810210][T12822] pim6reg1: entered allmulticast mode [ 355.988099][T12838] netlink: 'syz.4.1686': attribute type 3 has an invalid length. [ 356.009574][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 356.040409][T12838] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1686'. [ 356.188700][T12856] sch_fq: defrate 4294967295 ignored. [ 356.292525][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 356.333307][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1696'. [ 356.518110][T12879] pim6reg1: entered promiscuous mode [ 356.620235][T12879] pim6reg1: entered allmulticast mode [ 356.814742][T12887] netlink: 'syz.4.1704': attribute type 3 has an invalid length. [ 356.851612][T12888] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 356.880261][T12887] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1704'. [ 357.281791][T12905] netlink: 'syz.2.1710': attribute type 4 has an invalid length. [ 357.496404][T12918] ip6tnl1: entered promiscuous mode [ 357.523112][T12918] ip6tnl1: entered allmulticast mode [ 357.537396][ T9] hid-generic 0005:04F3:100C.0002: item fetching failed at offset 0/1 [ 357.547518][T12922] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 357.570374][ T9] hid-generic 0005:04F3:100C.0002: probe with driver hid-generic failed with error -22 [ 358.315213][T12921] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 358.422496][T12976] bridge5: entered allmulticast mode [ 358.643289][T12988] __nla_validate_parse: 3 callbacks suppressed [ 358.643303][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 358.665093][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1732'. [ 358.676271][T12988] netlink: 'syz.4.1732': attribute type 20 has an invalid length. [ 358.910735][T13003] netlink: 'syz.4.1735': attribute type 1 has an invalid length. [ 358.939101][T13003] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1735'. [ 359.599558][ T5159] Bluetooth: hci4: command 0x0405 tx timeout [ 360.282911][T13048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1745'. [ 360.287284][T13053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1747'. [ 360.469965][T13063] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1749'. [ 360.643777][T13073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1752'. [ 360.769924][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 360.949706][ T24] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 361.362926][T13108] netlink: 788 bytes leftover after parsing attributes in process `syz.3.1762'. [ 361.588566][T13116] FAULT_INJECTION: forcing a failure. [ 361.588566][T13116] name failslab, interval 1, probability 0, space 0, times 0 [ 361.659830][T13116] CPU: 1 UID: 0 PID: 13116 Comm: syz.0.1765 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 361.659860][T13116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.659871][T13116] Call Trace: [ 361.659879][T13116] [ 361.659887][T13116] dump_stack_lvl+0x189/0x250 [ 361.659912][T13116] ? __pfx____ratelimit+0x10/0x10 [ 361.659940][T13116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.659961][T13116] ? __pfx__printk+0x10/0x10 [ 361.660001][T13116] should_fail_ex+0x414/0x560 [ 361.660038][T13116] should_failslab+0xa8/0x100 [ 361.660059][T13116] __kmalloc_cache_noprof+0x70/0x3d0 [ 361.660089][T13116] ? sctp_add_bind_addr+0x8c/0x370 [ 361.660121][T13116] sctp_add_bind_addr+0x8c/0x370 [ 361.660153][T13116] sctp_copy_local_addr_list+0x30b/0x4e0 [ 361.660183][T13116] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 361.660210][T13116] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 361.660240][T13116] ? sctp_v6_is_any+0x64/0x80 [ 361.660270][T13116] ? sctp_copy_one_addr+0x93/0x360 [ 361.660300][T13116] sctp_bind_addr_copy+0xb3/0x3c0 [ 361.660327][T13116] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 361.660355][T13116] sctp_connect_new_asoc+0x2e0/0x690 [ 361.660379][T13116] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 361.660396][T13116] ? __local_bh_enable_ip+0x12d/0x1c0 [ 361.660434][T13116] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 361.660459][T13116] ? security_sctp_bind_connect+0x7e/0x2e0 [ 361.660485][T13116] sctp_sendmsg+0x155c/0x2810 [ 361.660530][T13116] ? __pfx_sctp_sendmsg+0x10/0x10 [ 361.660566][T13116] ? aa_sk_perm+0x81e/0x950 [ 361.660596][T13116] ? __pfx_aa_sk_perm+0x10/0x10 [ 361.660636][T13116] ? sock_rps_record_flow+0x19/0x410 [ 361.660665][T13116] ? inet_sendmsg+0x2f4/0x370 [ 361.660693][T13116] __sock_sendmsg+0x19c/0x270 [ 361.660724][T13116] __sys_sendto+0x3bd/0x520 [ 361.660758][T13116] ? __pfx___sys_sendto+0x10/0x10 [ 361.660786][T13116] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 361.660831][T13116] ? __fget_files+0x3a0/0x420 [ 361.660863][T13116] ? ksys_write+0x22a/0x250 [ 361.660894][T13116] ? __pfx_ksys_write+0x10/0x10 [ 361.660919][T13116] ? rcu_is_watching+0x15/0xb0 [ 361.660955][T13116] __x64_sys_sendto+0xde/0x100 [ 361.660990][T13116] do_syscall_64+0xfa/0x3b0 [ 361.661018][T13116] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.661046][T13116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.661066][T13116] ? clear_bhb_loop+0x60/0xb0 [ 361.661091][T13116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.661110][T13116] RIP: 0033:0x7feac638eb69 [ 361.661128][T13116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.661145][T13116] RSP: 002b:00007feac71d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 361.661167][T13116] RAX: ffffffffffffffda RBX: 00007feac65b5fa0 RCX: 00007feac638eb69 [ 361.661182][T13116] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 361.661195][T13116] RBP: 00007feac71d3090 R08: 000020000005ffe4 R09: 000000000000001c [ 361.661208][T13116] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 361.661220][T13116] R13: 0000000000000000 R14: 00007feac65b5fa0 R15: 00007ffda1968618 [ 361.661253][T13116] [ 362.176307][T13141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1770'. [ 362.707033][T13164] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1777'. [ 362.760899][T13169] FAULT_INJECTION: forcing a failure. [ 362.760899][T13169] name failslab, interval 1, probability 0, space 0, times 0 [ 362.777615][T13169] CPU: 0 UID: 0 PID: 13169 Comm: syz.2.1780 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 362.777643][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.777659][T13169] Call Trace: [ 362.777667][T13169] [ 362.777679][T13169] dump_stack_lvl+0x189/0x250 [ 362.777704][T13169] ? __pfx____ratelimit+0x10/0x10 [ 362.777732][T13169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.777751][T13169] ? __pfx__printk+0x10/0x10 [ 362.777780][T13169] ? __pfx___might_resched+0x10/0x10 [ 362.777806][T13169] ? fs_reclaim_acquire+0x7d/0x100 [ 362.777831][T13169] should_fail_ex+0x414/0x560 [ 362.777865][T13169] should_failslab+0xa8/0x100 [ 362.777885][T13169] kmem_cache_alloc_noprof+0x73/0x3c0 [ 362.777911][T13169] ? _sctp_make_chunk+0x14e/0x430 [ 362.777943][T13169] _sctp_make_chunk+0x14e/0x430 [ 362.777993][T13169] sctp_make_datafrag_empty+0x122/0x230 [ 362.778025][T13169] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 362.778054][T13169] ? __kasan_kmalloc+0x93/0xb0 [ 362.778085][T13169] ? sctp_auth_send_cid+0x69/0x250 [ 362.778137][T13169] sctp_datamsg_from_user+0x726/0xef0 [ 362.778189][T13169] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 362.778209][T13169] ? __asan_memcpy+0x40/0x70 [ 362.778246][T13169] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 362.778286][T13169] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 362.778321][T13169] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 362.778345][T13169] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 362.778367][T13169] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 362.778386][T13169] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 362.778409][T13169] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 362.778437][T13169] ? security_sctp_bind_connect+0x7e/0x2e0 [ 362.778465][T13169] sctp_sendmsg+0x1941/0x2810 [ 362.778521][T13169] ? __pfx_sctp_sendmsg+0x10/0x10 [ 362.778561][T13169] ? aa_sk_perm+0x81e/0x950 [ 362.778593][T13169] ? __pfx_aa_sk_perm+0x10/0x10 [ 362.778624][T13169] ? sock_rps_record_flow+0x19/0x410 [ 362.778655][T13169] ? inet_sendmsg+0x2f4/0x370 [ 362.778680][T13169] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 362.778709][T13169] __sock_sendmsg+0x19c/0x270 [ 362.778741][T13169] __sys_sendto+0x3bd/0x520 [ 362.778778][T13169] ? __pfx___sys_sendto+0x10/0x10 [ 362.778808][T13169] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 362.778857][T13169] ? __fget_files+0x3a0/0x420 [ 362.778891][T13169] ? ksys_write+0x22a/0x250 [ 362.778925][T13169] ? __pfx_ksys_write+0x10/0x10 [ 362.778953][T13169] ? rcu_is_watching+0x15/0xb0 [ 362.778993][T13169] __x64_sys_sendto+0xde/0x100 [ 362.779031][T13169] do_syscall_64+0xfa/0x3b0 [ 362.779066][T13169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.779086][T13169] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 362.779107][T13169] ? clear_bhb_loop+0x60/0xb0 [ 362.779135][T13169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.779156][T13169] RIP: 0033:0x7f6fb298eb69 [ 362.779175][T13169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.779194][T13169] RSP: 002b:00007f6fb38cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 362.779218][T13169] RAX: ffffffffffffffda RBX: 00007f6fb2bb5fa0 RCX: 00007f6fb298eb69 [ 362.779234][T13169] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 362.779248][T13169] RBP: 00007f6fb38cb090 R08: 000020000005ffe4 R09: 000000000000001c [ 362.779263][T13169] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 362.779276][T13169] R13: 0000000000000000 R14: 00007f6fb2bb5fa0 R15: 00007ffe1d757f68 [ 362.779311][T13169] [ 363.173855][T13167] tipc: Enabled bearer , priority 0 [ 363.195495][T13167] syzkaller0: entered promiscuous mode [ 363.223267][T13167] syzkaller0: entered allmulticast mode [ 363.387394][T13167] tipc: Resetting bearer [ 363.448839][T13165] tipc: Resetting bearer [ 363.561608][T13165] tipc: Disabling bearer [ 364.246932][T13216] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 364.353457][T13214] __nla_validate_parse: 5 callbacks suppressed [ 364.353477][T13214] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1793'. [ 364.415577][T13214] 1·: renamed from 70· [ 364.476380][T13231] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1796'. [ 364.593567][T13214] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 364.605220][T13214] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.618718][T13214] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 364.904762][T13252] tipc: Enabled bearer , priority 0 [ 364.952085][T13254] netlink: 'syz.3.1804': attribute type 5 has an invalid length. [ 365.307334][T13266] ipvlan0: entered promiscuous mode [ 365.668771][T13246] tipc: Disabling bearer [ 365.973763][T13278] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1812'. [ 366.002241][T13278] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1812'. [ 366.131161][ T8088] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 366.178000][T13291] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1814'. [ 366.239653][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 367.057184][T13305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1818'. [ 367.392677][T13324] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1823'. [ 367.503468][T13327] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1825'. [ 367.519837][T13320] block nbd0: server does not support multiple connections per device. [ 367.528692][T13320] block nbd0: shutting down sockets [ 367.812071][T13344] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1828'. [ 367.840135][T13344] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1828'. [ 367.960393][T13349] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 368.237059][T13364] netlink: 'syz.3.1834': attribute type 2 has an invalid length. [ 368.262315][T13364] k›*·]‘: entered promiscuous mode [ 368.391274][T13364] erspan0: left promiscuous mode [ 368.437920][T13364] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.455336][T13364] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 368.867172][T13392] Bluetooth: MGMT ver 1.23 [ 369.047144][T13397] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.067504][T13397] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.258267][T13397] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.288910][T13397] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.370862][T13401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1842'. [ 369.571737][T13397] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.582072][T13397] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.693554][T13397] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.720632][T13397] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.892564][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1844'. [ 370.015944][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.068459][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.164346][ T8088] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.189461][ T8088] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.213341][ T8088] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.229742][ T8088] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.263025][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.280458][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.316447][T13396] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.329505][T13396] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.366600][ T36] ================================================================== [ 370.374693][ T36] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1340 [ 370.382268][ T36] Read of size 8 at addr ffff88804b98fcb0 by task kworker/u8:2/36 [ 370.390088][ T36] [ 370.392423][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 370.392449][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 370.392463][ T36] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 370.392498][ T36] Call Trace: [ 370.392507][ T36] [ 370.392515][ T36] dump_stack_lvl+0x189/0x250 [ 370.392536][ T36] ? __kasan_check_byte+0x12/0x40 [ 370.392567][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.392587][ T36] ? lock_release+0x4b/0x3e0 [ 370.392617][ T36] ? __virt_addr_valid+0x4a5/0x5c0 [ 370.392641][ T36] print_report+0xca/0x240 [ 370.392669][ T36] ? __mutex_lock+0x147/0x1340 [ 370.392695][ T36] kasan_report+0x118/0x150 [ 370.392729][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 370.392756][ T36] ? __mutex_lock+0x147/0x1340 [ 370.392788][ T36] __mutex_lock+0x147/0x1340 [ 370.392820][ T36] ? __mutex_lock+0x5b6/0x1340 [ 370.392850][ T36] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 370.392880][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 370.392911][ T36] ? __lock_acquire+0xab9/0xd20 [ 370.392944][ T36] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 370.392982][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 370.393010][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 370.393040][ T36] process_scheduled_works+0xae1/0x17b0 [ 370.393084][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.393122][ T36] worker_thread+0x8a0/0xda0 [ 370.393165][ T36] kthread+0x70e/0x8a0 [ 370.393189][ T36] ? __pfx_worker_thread+0x10/0x10 [ 370.393218][ T36] ? __pfx_kthread+0x10/0x10 [ 370.393240][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 370.393264][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.393290][ T36] ? __pfx_kthread+0x10/0x10 [ 370.393311][ T36] ret_from_fork+0x3fc/0x770 [ 370.393343][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 370.393375][ T36] ? __switch_to_asm+0x39/0x70 [ 370.393396][ T36] ? __switch_to_asm+0x33/0x70 [ 370.393417][ T36] ? __pfx_kthread+0x10/0x10 [ 370.393439][ T36] ret_from_fork_asm+0x1a/0x30 [ 370.393470][ T36] [ 370.393476][ T36] [ 370.598892][ T36] Allocated by task 13397: [ 370.603319][ T36] kasan_save_track+0x3e/0x80 [ 370.608007][ T36] __kasan_kmalloc+0x93/0xb0 [ 370.612617][ T36] __kmalloc_noprof+0x27a/0x4f0 [ 370.617471][ T36] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 370.623653][ T36] notifier_call_chain+0x1b3/0x3e0 [ 370.628767][ T36] register_netdevice+0x1608/0x1ae0 [ 370.633978][ T36] nsim_create+0xae8/0xf10 [ 370.638407][ T36] __nsim_dev_port_add+0x6b6/0xb10 [ 370.643533][ T36] nsim_dev_port_add_all+0x37/0xf0 [ 370.648681][ T36] nsim_dev_reload_up+0x451/0x780 [ 370.653717][ T36] devlink_reload+0x4e9/0x8d0 [ 370.658396][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 370.663861][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 370.669410][ T36] genl_rcv_msg+0x60e/0x790 [ 370.673923][ T36] netlink_rcv_skb+0x205/0x470 [ 370.678707][ T36] genl_rcv+0x28/0x40 [ 370.682687][ T36] netlink_unicast+0x82c/0x9e0 [ 370.687471][ T36] netlink_sendmsg+0x805/0xb30 [ 370.692235][ T36] __sock_sendmsg+0x219/0x270 [ 370.696905][ T36] ____sys_sendmsg+0x505/0x830 [ 370.701658][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 370.706325][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 370.711256][ T36] do_syscall_64+0xfa/0x3b0 [ 370.715782][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.721668][ T36] [ 370.723985][ T36] Freed by task 13396: [ 370.728068][ T36] kasan_save_track+0x3e/0x80 [ 370.732770][ T36] kasan_save_free_info+0x46/0x50 [ 370.737793][ T36] __kasan_slab_free+0x62/0x70 [ 370.742552][ T36] kfree+0x18e/0x440 [ 370.746461][ T36] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 370.752701][ T36] notifier_call_chain+0x1b3/0x3e0 [ 370.757897][ T36] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 370.764317][ T36] unregister_netdevice_queue+0x33c/0x380 [ 370.770036][ T36] nsim_destroy+0x1dd/0x670 [ 370.774537][ T36] __nsim_dev_port_del+0x14d/0x1b0 [ 370.779653][ T36] nsim_dev_reload_destroy+0x288/0x490 [ 370.785119][ T36] nsim_dev_reload_down+0x8a/0xc0 [ 370.790148][ T36] devlink_reload+0x1b6/0x8d0 [ 370.794845][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 370.800210][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 370.805751][ T36] genl_rcv_msg+0x60e/0x790 [ 370.810252][ T36] netlink_rcv_skb+0x205/0x470 [ 370.815012][ T36] genl_rcv+0x28/0x40 [ 370.818992][ T36] netlink_unicast+0x82c/0x9e0 [ 370.823762][ T36] netlink_sendmsg+0x805/0xb30 [ 370.828536][ T36] __sock_sendmsg+0x219/0x270 [ 370.833217][ T36] ____sys_sendmsg+0x505/0x830 [ 370.837974][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 370.842651][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 370.847598][ T36] do_syscall_64+0xfa/0x3b0 [ 370.852102][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.857986][ T36] [ 370.860315][ T36] Last potentially related work creation: [ 370.866024][ T36] kasan_save_stack+0x3e/0x60 [ 370.870710][ T36] kasan_record_aux_stack+0xbd/0xd0 [ 370.875906][ T36] insert_work+0x3d/0x330 [ 370.880237][ T36] __queue_work+0xbd9/0xfe0 [ 370.884748][ T36] queue_work_on+0x181/0x270 [ 370.889345][ T36] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 370.894990][ T36] udp_tunnel_push_rx_port+0x180/0x200 [ 370.900460][ T36] geneve_offload_rx_ports+0xd7/0x160 [ 370.905837][ T36] geneve_netdevice_event+0x6a/0x80 [ 370.911038][ T36] notifier_call_chain+0x1b3/0x3e0 [ 370.916144][ T36] call_netdevice_notifiers+0x88/0xc0 [ 370.921513][ T36] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 370.927752][ T36] notifier_call_chain+0x1b3/0x3e0 [ 370.932852][ T36] register_netdevice+0x1608/0x1ae0 [ 370.938044][ T36] nsim_create+0xae8/0xf10 [ 370.942458][ T36] __nsim_dev_port_add+0x6b6/0xb10 [ 370.947567][ T36] nsim_dev_port_add_all+0x37/0xf0 [ 370.952677][ T36] nsim_dev_reload_up+0x451/0x780 [ 370.957702][ T36] devlink_reload+0x4e9/0x8d0 [ 370.962390][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 370.967774][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 370.974539][ T36] genl_rcv_msg+0x60e/0x790 [ 370.979036][ T36] netlink_rcv_skb+0x205/0x470 [ 370.983814][ T36] genl_rcv+0x28/0x40 [ 370.987871][ T36] netlink_unicast+0x82c/0x9e0 [ 370.992726][ T36] netlink_sendmsg+0x805/0xb30 [ 370.997494][ T36] __sock_sendmsg+0x219/0x270 [ 371.002174][ T36] ____sys_sendmsg+0x505/0x830 [ 371.006935][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 371.011608][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 371.016539][ T36] do_syscall_64+0xfa/0x3b0 [ 371.021042][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.026933][ T36] [ 371.029254][ T36] Second to last potentially related work creation: [ 371.035843][ T36] kasan_save_stack+0x3e/0x60 [ 371.040520][ T36] kasan_record_aux_stack+0xbd/0xd0 [ 371.045714][ T36] insert_work+0x3d/0x330 [ 371.050050][ T36] __queue_work+0xcfc/0xfe0 [ 371.054542][ T36] queue_work_on+0x181/0x270 [ 371.059122][ T36] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 371.064773][ T36] udp_tunnel_push_rx_port+0x180/0x200 [ 371.070231][ T36] vxlan_offload_rx_ports+0x139/0x200 [ 371.075602][ T36] vxlan_netdevice_event+0x111/0x470 [ 371.080886][ T36] notifier_call_chain+0x1b3/0x3e0 [ 371.086001][ T36] call_netdevice_notifiers+0x88/0xc0 [ 371.091368][ T36] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 371.097611][ T36] notifier_call_chain+0x1b3/0x3e0 [ 371.102725][ T36] register_netdevice+0x1608/0x1ae0 [ 371.107917][ T36] nsim_create+0xae8/0xf10 [ 371.112340][ T36] __nsim_dev_port_add+0x6b6/0xb10 [ 371.117453][ T36] nsim_dev_port_add_all+0x37/0xf0 [ 371.122578][ T36] nsim_dev_reload_up+0x451/0x780 [ 371.127625][ T36] devlink_reload+0x4e9/0x8d0 [ 371.132307][ T36] devlink_nl_reload_doit+0xb35/0xd50 [ 371.137682][ T36] genl_family_rcv_msg_doit+0x215/0x300 [ 371.143237][ T36] genl_rcv_msg+0x60e/0x790 [ 371.147743][ T36] netlink_rcv_skb+0x205/0x470 [ 371.152515][ T36] genl_rcv+0x28/0x40 [ 371.156516][ T36] netlink_unicast+0x82c/0x9e0 [ 371.161372][ T36] netlink_sendmsg+0x805/0xb30 [ 371.166144][ T36] __sock_sendmsg+0x219/0x270 [ 371.170820][ T36] ____sys_sendmsg+0x505/0x830 [ 371.175589][ T36] ___sys_sendmsg+0x21f/0x2a0 [ 371.180262][ T36] __x64_sys_sendmsg+0x19b/0x260 [ 371.185198][ T36] do_syscall_64+0xfa/0x3b0 [ 371.189715][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.195614][ T36] [ 371.197937][ T36] The buggy address belongs to the object at ffff88804b98fc00 [ 371.197937][ T36] which belongs to the cache kmalloc-256 of size 256 [ 371.211989][ T36] The buggy address is located 176 bytes inside of [ 371.211989][ T36] freed 256-byte region [ffff88804b98fc00, ffff88804b98fd00) [ 371.225791][ T36] [ 371.228120][ T36] The buggy address belongs to the physical page: [ 371.234524][ T36] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b98e [ 371.243288][ T36] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 371.251803][ T36] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 371.259694][ T36] page_type: f5(slab) [ 371.263772][ T36] raw: 00fff00000000040 ffff88801a441b40 ffffea0001f96e00 0000000000000003 [ 371.272350][ T36] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 371.280924][ T36] head: 00fff00000000040 ffff88801a441b40 ffffea0001f96e00 0000000000000003 [ 371.289589][ T36] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 371.298269][ T36] head: 00fff00000000001 ffffea00012e6381 00000000ffffffff 00000000ffffffff [ 371.306947][ T36] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 371.315614][ T36] page dumped because: kasan: bad access detected [ 371.322056][ T36] page_owner tracks the page as allocated [ 371.327765][ T36] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12437, tgid 12433 (syz.1.1572), ts 348592066269, free_ts 345923890277 [ 371.349306][ T36] post_alloc_hook+0x240/0x2a0 [ 371.354086][ T36] get_page_from_freelist+0x21e4/0x22c0 [ 371.359627][ T36] __alloc_frozen_pages_noprof+0x181/0x370 [ 371.365428][ T36] alloc_pages_mpol+0x232/0x4a0 [ 371.370344][ T36] allocate_slab+0x8a/0x3b0 [ 371.374843][ T36] ___slab_alloc+0xbfc/0x1480 [ 371.379536][ T36] __kmalloc_cache_noprof+0x296/0x3d0 [ 371.384913][ T36] nat_init_net+0x65/0x190 [ 371.389331][ T36] ops_init+0x35c/0x5c0 [ 371.393486][ T36] setup_net+0x10c/0x320 [ 371.397728][ T36] copy_net_ns+0x31b/0x4d0 [ 371.402142][ T36] create_new_namespaces+0x3f3/0x720 [ 371.407429][ T36] unshare_nsproxy_namespaces+0x11c/0x170 [ 371.413154][ T36] ksys_unshare+0x4c8/0x8c0 [ 371.417663][ T36] __x64_sys_unshare+0x38/0x50 [ 371.422424][ T36] do_syscall_64+0xfa/0x3b0 [ 371.426929][ T36] page last free pid 12348 tgid 12348 stack trace: [ 371.433420][ T36] __free_frozen_pages+0xc71/0xe70 [ 371.438528][ T36] __slab_free+0x326/0x400 [ 371.442960][ T36] qlist_free_all+0x97/0x140 [ 371.447900][ T36] kasan_quarantine_reduce+0x148/0x160 [ 371.453361][ T36] __kasan_slab_alloc+0x22/0x80 [ 371.458217][ T36] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 371.463683][ T36] vm_area_dup+0x2b/0x680 [ 371.468020][ T36] __split_vma+0x1a9/0xa00 [ 371.472432][ T36] vma_modify+0x12c3/0x1970 [ 371.476929][ T36] vma_modify_flags+0x1e8/0x230 [ 371.481773][ T36] mprotect_fixup+0x400/0x9b0 [ 371.486448][ T36] do_mprotect_pkey+0x8cd/0xce0 [ 371.491292][ T36] __x64_sys_mprotect+0x80/0x90 [ 371.496146][ T36] do_syscall_64+0xfa/0x3b0 [ 371.500663][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.506557][ T36] [ 371.508885][ T36] Memory state around the buggy address: [ 371.514513][ T36] ffff88804b98fb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 371.522573][ T36] ffff88804b98fc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 371.530637][ T36] >ffff88804b98fc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 371.538695][ T36] ^ [ 371.544333][ T36] ffff88804b98fd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 371.552394][ T36] ffff88804b98fd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 371.560447][ T36] ================================================================== [ 371.578188][T13425] netlink: 'syz.2.1848': attribute type 16 has an invalid length. [ 371.589579][ T36] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 371.596807][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 371.608450][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.618521][ T36] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 371.625837][ T36] Call Trace: [ 371.629139][ T36] [ 371.632079][ T36] dump_stack_lvl+0x99/0x250 [ 371.636682][ T36] ? __asan_memcpy+0x40/0x70 [ 371.641277][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.646568][ T36] ? __pfx__printk+0x10/0x10 [ 371.651170][ T36] panic+0x2db/0x790 [ 371.655076][ T36] ? __pfx_panic+0x10/0x10 [ 371.659508][ T36] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 371.665416][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 371.671763][ T36] ? print_memory_metadata+0x314/0x400 [ 371.677258][ T36] ? __mutex_lock+0x147/0x1340 [ 371.682038][ T36] check_panic_on_warn+0x89/0xb0 [ 371.686997][ T36] ? __mutex_lock+0x147/0x1340 [ 371.691785][ T36] end_report+0x78/0x160 [ 371.696048][ T36] kasan_report+0x129/0x150 [ 371.700563][ T36] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 371.706479][ T36] ? __mutex_lock+0x147/0x1340 [ 371.711270][ T36] __mutex_lock+0x147/0x1340 [ 371.715883][ T36] ? __mutex_lock+0x5b6/0x1340 [ 371.720670][ T36] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 371.727023][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 371.732075][ T36] ? __lock_acquire+0xab9/0xd20 [ 371.736956][ T36] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 371.743045][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 371.748777][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 371.754517][ T36] process_scheduled_works+0xae1/0x17b0 [ 371.760096][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.766090][ T36] worker_thread+0x8a0/0xda0 [ 371.770698][ T36] kthread+0x70e/0x8a0 [ 371.774770][ T36] ? __pfx_worker_thread+0x10/0x10 [ 371.779917][ T36] ? __pfx_kthread+0x10/0x10 [ 371.784517][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.789725][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.794926][ T36] ? __pfx_kthread+0x10/0x10 [ 371.799524][ T36] ret_from_fork+0x3fc/0x770 [ 371.804151][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 371.809291][ T36] ? __switch_to_asm+0x39/0x70 [ 371.814052][ T36] ? __switch_to_asm+0x33/0x70 [ 371.818822][ T36] ? __pfx_kthread+0x10/0x10 [ 371.823438][ T36] ret_from_fork_asm+0x1a/0x30 [ 371.828236][ T36] [ 371.831638][ T36] Kernel Offset: disabled [ 371.835962][ T36] Rebooting in 86400 seconds..