last executing test programs: 2.442839214s ago: executing program 2 (id=1624): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.284781587s ago: executing program 2 (id=1627): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000000080001006e00000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYRES16=r4, @ANYBLOB="0100000000e2ffffffff36000000080001007063690011000200303030303a30303a31302e300000000b08007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003"], 0x9b}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 2.115205936s ago: executing program 2 (id=1631): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x4, 0x4, 0x7fff}) sendmmsg$alg(r2, &(0x7f0000005300)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="3f450763d0334dd65efc12ccf2dac8ba3b91811e5dfa4756b50a9f0d5fd0b418e1087131567fab77", 0x28}, {&(0x7f0000000340)="c115aafe044a7792cf077e7f", 0xc}, {&(0x7f0000001780)="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", 0xfb}, {&(0x7f00000018c0)="5ffed8e3e89a42fa98bbcc95e2456008e726d795d61e4d4313850aa9b9686d3292209f942eed29b480cd9f54711b8e3bcc3e40d5b39849f6798264cfcb220d03d60719cfbf3a8e56837c90668e18ecdde6170f46731dedf9470e79f0255e6402c679e7ed70107a93d8067230d0a84219473a7f7265f3abf12d2aba01bc790c247b56b297236a40e2962f388edde906cd5bcc59b54319c72408ad2c788da8951df93f5ac01348eec674d4abae6e9ac7f4728c89cb0c99", 0xb6}], 0x4, &(0x7f0000003ac0)=[@assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18}, @op={0x18}, @iv={0x90, 0x117, 0x2, 0x7c, "1cdea3d53a42dbc08b561f4f7f61ee6710d0ff2d44603d9754ced34e523585524ff0895f42bece40dccbae35b274879272ba4e278fcd8f7c77e3c28b6ab641113b2e5855ef05e6a3c8b9553bc08f59cb7c835574160286a911468d881ae9dbdd073ecb2ea5ed926ff7a7644601ebfd4eb97243466c4b9fa568b12bfe"}, @assoc={0x18, 0x117, 0x4, 0x9}, @iv={0xc8, 0x117, 0x2, 0xad, "e2c82f7abd3fd8ce154b98e40d6bb5d9319c1d198552197019d4c831cba487649fd8f2d2e3ff5a5d703989a9b7b3959334fb84e7cb29c733f2b8005c0c3b35fee5e46a023baeb9fb7170bbcc2095c5c37e5b0fa18bcdf3b9ba6a2d82358209bc3eee90784d193fde1e31681e489bc1bc9d2904571dbbc71b786a2d7542ee185024bc6895f296bc6627e6c521d6c85f93ce9402abc83d4b6ea2b6361f09d991e8e8b871184951b4b971585a0a6c"}, @iv={0xd0, 0x117, 0x2, 0xb7, "727c85b80d9a272018de970d3aef4397cb273856e5234922b72e12b6a864583df6e4b7074bdcead15cdad8c9037c8af529201449bbd44c925e1b428086563e1ad0660046017b876180b063ffe6373f7d24f7c67204cef5b3feed1ab8bf2cf9ac85c6b1cabdb8d8939aab2edd451552dbb0c7733b67c8669f7bc38e319ffd37a8043307dffb978027fcc4aba538f37fd3d30aae1d31c2a24a97c184226a10113c18b5a3a5909131368bd7fed3b8fe7cddd3c5cf2c8f8415"}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x9923}], 0x2b8, 0x20008040}, {0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001980)="e9f1d67927a781666a6f02bbe0d3", 0xe}, {&(0x7f00000019c0)="eb9eb5c4af27a4242bec83d71b72ec46f89a1a43deb427d3d042a9ccb90710c588651fc7f5d260c74e403d891f", 0x2d}, {&(0x7f0000003d80)="62dc94b946ca8fbe80fa044856df25112224cdab2f954b399380d2a5435d6a2b69334b42e89903a9cf5667b769188e229fc7e46d91710fb580d89fa6dd11b0b13ad60743d5b9355fce4bb4733e55c6595f6a3fff55e61882e9b26b69798312f39823f476ab609a8a69de36708581f450818857a096706a2cdd9596a2fe8760de8213fa1364177b39eb1f73b016ce5dc08dfe5310fabd18bef405472f60e5695f478223bc0c3f6dd7ad7af0df547fa9f52fd7fbdc5b306f9ce95a96fd42a04d3e627fdaf8b8c3f6f518f7c0f75a21", 0xce}, {&(0x7f0000003e80)="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", 0x1000}], 0x4, &(0x7f0000004e80)=ANY=[@ANYBLOB="c8000000000000001701000002000000ae000000b98e1d51c13e7786a782acca9de45bd7253f37005edd8b73a3e56f731b3c7c5fe29cf7fa963a16ab36e068b4f4ab95cd7ac80f373a460e198663ce097a7c2487082b817f424ece701a1f5c18bf492b1d7cb61871932e71513ad1c100aeb9e6e083b5e1888e92d1a4ea4bf13398bb77d4561ec709c558b990ec41d187a6a22681af26751115fcc505ac2e7a1236ebc179c549614394027272f3f97eacf5d32857f6a5b45fc006a3bacc975aab317a3bd246f61e9aeeb988a73e0bb4dfe5000000000000180000000000000017"], 0xe0, 0x4004011}, {0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000004f80)="239dcce46a298736f523c435c30f6d50bcbf649cc9052b4838491122dfaac3971501b143684074ee52e23c37c4dd9f681b317b93d07cc4bfdfca78701204bba2c170d70243fc08aad7d56ea03d10f39d4f758a764e47506dd72df95c3b3196a4b12bc99985416c39464a2913ea5b2ec1aebc1bc95097320f9aef5b4809b2cc6d3d22872fbf32851aeece44ea39839be3b1051d033d0ee21be3f45f0a9ca316e40b354bc99a7d7506f4b5bb1db51905aad81b82339ff8a99d71042c09b109710fa62690f96d1a487caba910d84073807863ca629cacf7b68af240822f", 0xdc}, {&(0x7f0000005080)="5015b28059377767456f5de1bc2f3f71639c16788a0bfbd400000e6100903e9cf9ec350f8e98ed3d9f2874d13bcdbfa7e80be25e43398a9e5537c5bd96c4608c9194da3cb9c4e498c4c7e8def6279e70c8c9d0d66dca445cf7d4f80212a972717bb5f2db5775b6b8fff00195e5b9d214918c45c9a4f513", 0x77}, {&(0x7f0000005100)="a88cb05da91da4bb9200d7aa3bcffdd2e1240e1901e2090de8fa50ce30be2c48bb5e937d61421f921fd2a6be61080f429486b84b26cced67cb1bafeba8df33d37cec96ab78fa210a33b1e7a12169b941232b5f687a2f8988f0a5bfe4d6fad4e890acb6b3f02fb1e0b98437284b8e771739146344f8178a9509f59974ea3fd084d62b901b8f42f09382267b5cf523d406a8ebc4845b12a2421173718dcf33de1ac67ba9c5f4982af488584912b19efb82b034d712a53b61fe99648aa1cfd8fe18edbd337e61c1195afedbdcf02f5dc6ac2d6b71f68467304b60719765f55fd3960ddffc901657f87007db8b4cb0be6ffeb9010a05f4448b7ddea4d7", 0xfb}], 0x3, 0x0, 0x0, 0x2000c000}, {0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000005200)="c0cbf9d9631f2fc9ddd5830847e40303b9dc98f80abe2b6390421f110f85f322711dca5e500db2a3228221e8daba0599bd07c98e5e3ece5facf352b708411c29a69f154a9795aaff2ff28f41e73a7f67", 0x50}, {&(0x7f0000005280)="e1b5518a2b005110401e11a49612e2b1dd6dfc82d5cf5a5a286773821d15", 0x1e}], 0x2, 0x0, 0x0, 0x4040081}], 0x4, 0x24004040) r3 = accept(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0x1000, 0x1000, &(0x7f0000000680)="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", &(0x7f0000002ac0)=""/4096, 0x0, 0x0, 0xb2, 0xd0, &(0x7f0000000540)="234e03caecc949c37150f79b221fa1eb16e34c4a62953bd8bfd817e8ef63540260218c36505124bbda2595baf6d5c80f864d01f857bd4df544543159aa39c381d192f9d5d61578af55fc079d2d338754f9fc0164aa12e833126ae1f274e20366c9ab47d93714fe86dec691f8f5d474002af0a5ad47c1b7bc24c1a82c58a49d357584d4ec6d728eb12ba5f79134a5f00be85d2ed6268597fc94715403133de288935edb4b510f7a31de5992d7f3192c8d4cfd", &(0x7f0000001680)="e1444290edd6bc3e041454c1ecc7e8f293d48f4365220a3ddcb1b414de3e653182233e4003778b4c96ae9a3a571923e46701b093e2e53e685c5a5aeb0648a8c1dac25906b55b8573ebd23f4640b647c9781ee10b045cbc8d0812bc3cfbb642a464e2101efb1154cf25fb73af4c69bce859f61d56b8dd2556d3657b307e71059f37131476eec48c687442da6dba5bb8d2d2b6ef75de4a98ae8c37ad51b4199488b4c2d64172a1eab8c0690cac0f5d3accd935763b4ee5cc4dc760c72d3dc0898d410bc18c4c2faf51f64ae011416f2c80", 0xbec18517ed99043e, 0x0, 0x400}, 0x50) sendmmsg$alg(r3, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000004c0)="af1b3f1b205dad4ab38248541eb62165129e1210209045aa4f78bc81276c50a6d016c28087f3157d2364", 0x2a}, {&(0x7f0000000500)="6d87202237a75ac67aa150a62f55271985359ecfe8113ed49f37a4ef95d6d9667a10758b0f992025ec0b7f33da70f54f603199d85a2c709ce5bad007385804", 0x3f}, {&(0x7f0000000600)="fd3c34f687297c63c2ed81541b2fd0069ede3384d1510b67743c89856f53debfa70efe58c40fd9abc83bc715b9be5195951dc6e0ed6eac84eae8d2e170f3323d23605374391161394bf4f403f29fc05a3a17115bc2947ed04963c6e316d1cd73754bdb55632d2afd86d2aeee8b6eeecf280acbcfeaa282", 0x77}], 0x3, 0x0, 0x0, 0x4048848}], 0x1, 0x0) recvmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/222, 0xde}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x2}, 0x10102) listen(r0, 0x7fffffff) 1.939413484s ago: executing program 4 (id=1635): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000540)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x3c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="61a000fe00000000691a72000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) 1.939112426s ago: executing program 1 (id=1636): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2711, @host}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000480)=""/217, 0xd9}], 0x1}, 0x10101) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0xc000) socket(0x1d, 0x80000, 0x4) recvmmsg(r2, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000000700)=""/86, 0x56}], 0x1}, 0x7}], 0x1, 0x2, 0x0) 1.855175623s ago: executing program 4 (id=1637): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="8000b2000a000200aaaaaaaaaa1c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) getpeername$tipc(r1, &(0x7f00000000c0)=@id, &(0x7f00000001c0)=0x10) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) (async) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @mcast2}, 0x1c) (async) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000670015000100000008000200a1d9be365c32b5a272f7c846a015e35efcde6229aadbbfe3cbe26547aac11ed6ecca1300"/60, @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x20000080) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$BTRFS_IOC_FS_INFO(r7, 0x8400941f, &(0x7f0000000a40)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448cc, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x84}}, @common=@hbh={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x160, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f0000001240)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) 1.739647359s ago: executing program 4 (id=1638): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000913e38564f10b803000000000c000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newtaction={0x14, 0x30, 0x10, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000913e38564f10b803000000000c000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket(0x11, 0x800000003, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001240)=@newtaction={0x14, 0x30, 0x10, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x840) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 1.497532553s ago: executing program 3 (id=1641): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0xa, 0x6c}, [@mark={0xc, 0x15, {0x0, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x70bd29, 0x1, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000088}, 0x24000018) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xe373b684d2526e78, 0x1000}, 0x20) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.369637891s ago: executing program 0 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000200000106"], 0xffe) 1.354415607s ago: executing program 3 (id=1643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x80000000}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x200000c0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b25, &(0x7f0000000040)) bind$netlink(r5, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00012ffe0000000000000007000000a2091712e5a3", @ANYRES32=r3, @ANYBLOB="8000b2000a000200aaaaaaaaaa1c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 1.266729635s ago: executing program 4 (id=1644): unshare(0x20000400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f00000000c0)=0x7b, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4c081) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54010000100001002abd700000000000fc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000004d632000000ac1414bb0000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000008000000000000000000000000000000ffffffffffffffff000000001000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000000)=""/139, 0x8c}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0xfffffffffffffe4f, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/4096, 0x1000}], 0x3}, 0x8}], 0x3, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 1.220495143s ago: executing program 2 (id=1645): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5, 0xa000000}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.144404487s ago: executing program 0 (id=1646): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000005000000000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.035487881s ago: executing program 2 (id=1647): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)='z', 0x1}], 0x1}}], 0x2, 0x0) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000100)="6daf275a139899b8f68516039a597ff2bc6426b939f384566ab232538908a423b219e09dffb8b59d224a4f4db38da777de1e4700002c65ba2448248d57b774ded933302f74e26cda0dd2679f2dba9dbcd3ff3008208d44fd373d784d996214f9d358191f54d0a3837962d3eeb5c2f69fd40641ebefc06d3606496d7c1b480e698df77875a66376d0a7d6805467a47afcf83545b87dbde402a6e03d8c9ab432012b58b5cc90b9f01769ec71ab1bc620908cc19dbd22e84d51d57a5cc50b5dc7a738d99150c46c9680a5871c4a07340ee169184cf52037a41735ef4d0feea8c64bcdf011", 0xe3, 0x2044001, &(0x7f0000000200)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x6}, 0x1c) (rerun: 64) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip_vti0\x00', 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 990.531857ms ago: executing program 1 (id=1648): socket$igmp(0x2, 0x3, 0x2) (async, rerun: 32) r0 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x20) (async) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) close(r4) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x1d37, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (rerun: 32) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, 0x0, &(0x7f0000000280)=0x28) (async, rerun: 32) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) (async, rerun: 32) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) (async) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f00000004c0)=0x8001, 0x4) (async) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 985.849375ms ago: executing program 3 (id=1649): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302", 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r8, 0x84, 0x1d, &(0x7f0000000380), 0x8) r9 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r9) writev(r9, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xfd1}], 0x1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 982.083162ms ago: executing program 0 (id=1650): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r3], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1d00000003b5000001000100ff7f000008030000", @ANYRES32, @ANYBLOB="030000000000ce0b0000000000000010000000008561f64e2bc2279c8b7f6e4fe1bb12e4c909875d0dbe8cbe55a23e566274459de0c0cfd6a5ce73be490fa489d4a3dca4d16fe8b64ef01144c52b2876ff149f24024231aec239a7382134d48ee49f6abcfb78dbfce6ddc59d00"/123, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000500"/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xec0d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000400000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x72, &(0x7f0000000200)=""/114, 0x82000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x7, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r6, 0x1, 0xffffffffffffffff, r7], 0x0, 0x10, 0x80000000}, 0x94) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) ppoll(&(0x7f0000000180)=[{r10}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB, @ANYRES32=r12], 0x1c}}, 0x0) write$nci(r8, &(0x7f0000001800)=ANY=[@ANYBLOB="710502180102820681055a05997713b9affa06070203267a53"], 0x19) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000000000000800034000000000080004400000000008000540000000000800010001"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000003c0)={'macvlan0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="14000014300001002bbd70000000000002000000"], 0x14}}, 0x20004840) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030006000000080002400000000808000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000005a80)={0x1c6c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1808, 0x3, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x194, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x34, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xb08}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc}]}}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x48, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0xff}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1e}]}}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, {0x163c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}, @NFTA_SET_ELEM_EXPR={0x78, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xecd}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_USERDATA={0x80, 0x6, 0x1, 0x0, "2a5274aff26ad4016d3bf5272e6626bb118bf3ecfcc665f3a983bdf9d5b8cc860bfd1e5b27b54cd5d19366e6254542fbdc5bda091730fd6605dda3b1ada15e62bad5319a1c4428f38b1bd959575d41e52ea7730cfc22272e097e75dfd87c886246dbab674cb126c3f8943e962fc56bdbf7203b49b183be31b7686119"}, @NFTA_SET_ELEM_USERDATA={0x9f, 0x6, 0x1, 0x0, "ae13faa40bf9374c48ce938594e97c5547387c6ab0dea730b65103af1616e17a6057a65bd57682b04da45aaa0fd0f3e368ae8ff8204e7e70a3a76ce7d80e4276ba554267db231fe5892541b6ecf90edfca9e16169c17bd0a539c792e486df13c8f2f0541c922be2cf2069c98b29a1915e2e3907f2bf62e6fb52ff22450a9fcff47548c17be622a0a88b9d24fb9793a0d32b9ccf4f818a30f2d75f0"}, @NFTA_SET_ELEM_USERDATA={0xb6, 0x6, 0x1, 0x0, "bc22ff8f737cf9ba91bb8dddebeeccf2810ca764c1d4bee888312edee22c234bb188497e6825bb5edbf38594348cd4d0a83772ceccb11683c76ae1ba4830c3832bb5702ab1361c69ef56f5493e822a1ae3cecfcf43334143d342d995b4074dcdc06b67717300119ee62ff30e069b0c3eeb2aaec3baa589abb30ddd2ae8fd198c7cf01fa4ac931ec6c8d7bc46e7947908769aca0d6cefaa2f0f600b90ca83a449afdba78b6f4e58dc896cb63a024098b119a8"}, @NFTA_SET_ELEM_DATA={0x13d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "e91388684200f05853a3c412000dc5ab85eed3a05f91ca576001ac8bd36392b6ed"}, @NFTA_DATA_VALUE={0x10bb, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf4, 0x1, "9389a9b09070f1b1266670d2a9040db27d9158b89eb9c60f0a8cee2a5af7af6dd9d67659c66549a243c2fec1fa82993e9a0fbc071ddbd00aa31428c61d29e9ee27a4334fe85635337ddb8792c8b85847ca0c1bdc93caeee60de2619236367f48dad42fa7fbfe187ca44b5703ba89371e4fd90021eed2888c7e2c96caff7820dc5f0df6a4bab7b1c7343b3a5a19a3f87c1f85e8b7559cc7e20fbc366bab024002f1cc33934bbf325be41d3e2cd3cae88b3580509e303bb52db87e84983c76ac8b7c42d61a7ed42a5c737ea07c5e605b514b6e32e781e05a832590033099ec2232fa3d8219cc94b0c5e1b96139a5072689"}, @NFTA_DATA_VALUE={0xe6, 0x1, "eb9eb433f47787d0df526676548b2d39e6b9b76ffa54566d78b610b1214b6268bcb3d37a1dfde6f7049c4b3f3b0f562ce2ec15e96a47426fe77406e31b688530816bd345af8930c156414ec3d321cc3dab7be96cd69248c620f9d8673d98b9e425e78e14a78cdd80f2a910d92a48348a2f96947a61915ce7050474a6345af6d42dd979630ae756db80add83b52ac4fe737c1c10e741989e32668a617a75bf4f7ffe623758bd0836b217b413515af175bbbf929498b3e410494b788dbbe177aced9d3af9bd3b1a1628aa72ecf26c912e0de0e1f97f9f5e15a8a33cb31d3c3f875ce12"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x78, 0x1, "72af2001f6eca83b303cae929b4ab0999bc82d2fad2ec368cce07e09bc0fcfa6cad3ce1834ee6a1a27a7e09dbd64cf306d57ba4acec6a05501cb3df8120ec7fcc75834cb37c4f3283dfc4c383236e850fb620b9f5e841c17620bd8ef631950fefe0b65c32ce13b34873ae0256893b6b3828218cd"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x428, 0x3, 0x0, 0x1, [{0x28c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x7d, 0x6, 0x1, 0x0, "790542c8db8adbc274c14d6f8bb883ba15934b7e1e069f8d3bd881da812ff1159c9a6d5d3ab562f86e0236e941c1d58d7aaa3c034e273ea1c49834ff079aa158b2a08ed37e33425542688a1441a6426bc028488d586e69825d83d5e519ec675d6b625b7ce75179ba80699b4ce9a0ee4dec5f4ade99c8233efe"}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x45, 0x1, "c23a4972015fe88ad4e19f35f23f59bf166894ac16814923d14b57835fbf426cb775529793fc139bf3a4818e3793e14ac765a3cd7a36c55f69c66bfccc4995877f"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_DATA={0x12c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x69, 0x1, "c5fbd77d91fb474f3f2b73eacbb444055d59869a37a240708c297d074d23cf2315c45b1c97009ae816654e69563d5bf41818edb3d5a568f097fbcaf8dd945c9a77cc5997c3278aeca7066888be416701fb2381974d7a8df86c5ccd7ab05e3076600b685b6c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xed, 0x6, 0x1, 0x0, "e51475351c4ab9b46e99b81c0a718459d71f13f0ffbdbd399afbf7292c200ae5e82b04b540b6793e49707b14e0475b140a9c667dbc63e7c2bb7237c121e9c3f5de9b6804a1b518e7f0ea469d9045235f08a9b4715a4a68ee0823ba119032d03ceff25bde95c45a4545b2f0b2ca60406f8fe9378a436bcb81672ec39a841f4c9b6211b81f1fee9c40d71a603403630edb10914fd7e342aeade80c25ac70c6fc1d14c17cbecf95b10949590e568e3b646e17bf2f744354e3f1e867231529d1e4b00f17ee2dcd187acc0a2360b877bbc8d107ebc02a587ba741cde3bf58e8f7a443ff59a0ac15bcd4ba04"}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfe}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x1c6c}, 0x1, 0x0, 0x0, 0x4014}, 0x40004) 662.19098ms ago: executing program 3 (id=1651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffb, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x14, 0x5, {0xb, 0x0, 0x0, 0xe60, 0xc, 0x9, 0x0, 0x2}}]}}]}, 0x4c}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, r1, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) 651.564615ms ago: executing program 0 (id=1652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000801030000000000000000000000000c000480040007400000000005000300210000000900010073797a31000000000600024000000000"], 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0xa00, 0x0, {0x2}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000008c0)={0x48, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010102}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f0000000040)={0xfffffffe, 0x1, 0x2, @empty, 'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0xc090) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r8, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002740)=""/4090, 0xffa}, {&(0x7f0000000300)=""/130, 0x82}], 0x2}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000000700)=""/104, 0x68}, {&(0x7f0000001740)=""/4080, 0xff0}, {&(0x7f0000004740)=""/4083, 0xff3}], 0x4}, 0x8}], 0x3, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000840)=@broute={'broute\x00', 0x20, 0x3, 0x59a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000280], 0x0, &(0x7f0000000080), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x4c, 0x600, 'dvmrp0\x00', 'lo\x00', 'hsr0\x00', 'xfrm0\x00', @random="2447ff99afe0", [0x0, 0x0, 0xff], @random="fc8a30d05212", [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0xe6, 0x136, 0x166, [@ip={{'ip\x00', 0x0, 0x20}, {{@loopback, @multicast1, 0x0, 0xffffffff, 0x2, 0x8, 0x1, 0x2f, 0x4e20, 0x4e21, 0x4e24, 0x4e21}}}, @pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x1, 0x1}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz1\x00', {0x9}}}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x5, 0x9, 0x8917, 'team_slave_0\x00', 'gretap0\x00', 'veth1_macvtap\x00', 'bond_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0xff, 0x0, 0x181], @local, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], 0x156, 0x18e, 0x1de, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@private1={0xfc, 0x1, '\x00', 0x1}, @loopback, [0xffffff00, 0x0, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0x0, 0xff000000], 0x2, 0xc, 0x2, 0x2, 0x4e21, 0x4e21, 0x4e23, 0x4e23}}}, @physdev={{'physdev\x00', 0x0, 0x48}, {{'ip6erspan0\x00', {0xff}, 'veth0_to_hsr\x00', {}, 0x8, 0x1}}}], [@common=@dnat={'dnat\x00', 0x10, {{@local, 0xffffffffffffffff}}}], @common=@log={'log\x00', 0x28, {{0x2, "8c686e59a83bca3b2277029bf3c6f66ed48d1da42edbc93ce6c643c2d30f", 0x6}}}}, {0x11, 0xe, 0x886c, 'veth1_virt_wifi\x00', 'veth0_to_bridge\x00', 'batadv0\x00', 'netpci0\x00', @random="832f4d94ca40", [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @broadcast, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x11e, 0x196, 0x1c6, [@arp={{'arp\x00', 0x0, 0x38}, {{0x110, 0x19, 0xa, @broadcast, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, 0xffffffff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff], 0x0, 0x3c}}}, @nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x2689}}}], [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x80, 0x7, 0x6, 0x1, 0x0, "678b81c736b55843fe55b7e8b8bb4e476bfbec61da19c80ce3b77efd9e361a3c82eeb90e00c2710599b140f30e3155e7673db7c78ed930b955d7ebd982a404cc"}}}], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}]}, 0x612) 555.467389ms ago: executing program 1 (id=1653): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@getqdisc={0x30, 0x26, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xf, 0xc}, {0xe, 0x1}, {0x0, 0xa}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x2e, &(0x7f0000000140)="75eab5449cef440cd5d0d0f7514f921275e6c6f0e3e6213ea554851f612f512f826d79f6290bdb163d8957eb392816665cbe46ebb190f6e3dd9432b0df97102c13261fb356fcda95652323e054400805bb1d2f32ea6e06", 0x57) 503.945838ms ago: executing program 3 (id=1654): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0xfe}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 476.805633ms ago: executing program 1 (id=1655): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex, 0xffffffffffffffff, 0x13, 0x2030}, 0x20) r0 = socket$unix(0x1, 0x2, 0x0) sendto$unix(r0, &(0x7f0000000440)="97be39fce1cdb44d5337a50ceb2b01a49a3b362b4e78feb47ad3a968d56353a3f54a4173a18ef3958bb138252756ba8b4cbdbe676c4bf60cadc72b3c722c2d0cd82869ab0d06531bf9f36ca2d189c306fa8a7a886d8b7cb9be8aac1e3e", 0x5d, 0x41, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400), 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x4b4, 0x150, 0xd4feffff, 0x2a8, 0x20a, 0x278, 0x2a8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'wlan0\x00', {}, {}, 0x6}, 0x0, 0x120, 0x150, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0x3], [0x10]}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x3e}, [0xff, 0xffffff00, 0xffffffff, 0xff000000], 0x4e21, 0x5c, 0x7, 0x4e24, 0x2, 0x10}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x2, 0xa}, {0x1, 0x2, 0x6}, 0x7fffffff}}}, {{@ipv6={@rand_addr=' \x01\x00', @private1, [], [0xffffff00], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 475.699556ms ago: executing program 4 (id=1656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000300000106"], 0xffe) 393.871437ms ago: executing program 0 (id=1657): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5, 0xd000000}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 255.505358ms ago: executing program 1 (id=1658): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x6, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x36) 196.034148ms ago: executing program 3 (id=1659): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000200)=[@in={0x2, 0x4e22, @private=0xa010300}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$alg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x12, 0x117, 0x4, 0xe}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x2404c099}, 0x44000) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in6=@empty}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELSETELEM={0x1284, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1254, 0x3, 0x0, 0x1, [{0x1164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10dc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x3a, 0x1, "24443afa045f3c076299d69da14a825e6997e022218302506d1e42e56a33e2df71f601883cff69a49cf416f98df696b52e6786c23c3f"}, @NFTA_DATA_VALUE={0x97, 0x1, "e6c69358cf92df0574d96b8fb6be1f1b8958b44b1efef89ddc838a44c51365d6a01a14675507047ab005a6c48ace71becf4d14a210207a38fc165d31fa60975769d09f147effd5a10a9009e59ddac93644ea1a90653bdddb22fbfdf52be71c9be790111ddda8831f6391c38d650e462515971e00d3c4d0a9e52738dabb14764d60bfe89c174293a8ff5463e585324d57983e5e"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x70, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}, {0x4}, {0xe8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "d7fe67373b4de0e55d6b09fde151fb4f8251106511526664dd7622e2d71bcf497b3cd58b68f845bccbba95e442d4d498c7110dd0d40802e1f65067633a320b2c8815062690930336d5076452f3afa8788ec9656b49d40cb434bbd8e1b4216a708029107fc075c90d79d6699e755b7a3ec40ead434d5157abd9ee5e32c572fcf6d478dfe0eac06c6f1dc23b51d5f4aac62d7df808cc2ac38ff23560acd2421c30851931d3c5dd1fbc4ce796db486dcdca6d"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x40}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x140, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DESC={0x90, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0x7c, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xcb35}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}]}, @NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_USERDATA={0x7d, 0xd, 0x1, 0x0, "877bdbbc0330ccc0d35c27abf0ed2dbc886003c558790e0963ca138a1d4d117e8e68a2a93e19de9bcd76c7f748c4bd656414852df6e143870bf6268f48d8c5346d3af35600e3c79add29f9609790bc9e05fb33a77710d3dea585ba06180a09d5dea1644dae21b77d01225e96ab192ec43d0e80d254ad278daa"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x13ec}, 0x1, 0x0, 0x0, 0x4008884}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r8, @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) connect$ax25(r8, 0x0, 0x0) 166.326497ms ago: executing program 1 (id=1660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'pim6reg1\x00', @multicast}) 115.286324ms ago: executing program 0 (id=1661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000c0003006e657466657673696d3000000000000014000000110001000000000000"], 0xa4}}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x20}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c084}, 0xd0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x44, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x9, 0x3, 0x0, 0x1, [@generic="9e717292e1"]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 113.474324ms ago: executing program 4 (id=1662): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a30000000000800410072786500140033006c6f"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r3], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1d00000003b5000001000100ff7f000008030000", @ANYRES32, @ANYBLOB="030000000000ce0b0000000000000010000000008561f64e2bc2279c8b7f6e4fe1bb12e4c909875d0dbe8cbe55a23e566274459de0c0cfd6a5ce73be490fa489d4a3dca4d16fe8b64ef01144c52b2876ff149f24024231aec239a7382134d48ee49f6abcfb78dbfce6ddc59d00"/123, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000500"/28], 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xec0d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000400000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x72, &(0x7f0000000200)=""/114, 0x82000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x7, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r6, 0x1, 0xffffffffffffffff, r7], 0x0, 0x10, 0x80000000}, 0x94) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) ppoll(&(0x7f0000000180)=[{r10}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB, @ANYRES32=r12], 0x1c}}, 0x0) write$nci(r8, &(0x7f0000001800)=ANY=[@ANYBLOB="710502180102820681055a05997713b9affa06070203267a53"], 0x19) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000000000000800034000000000080004400000000008000540000000000800010001"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000003c0)={'macvlan0\x00'}) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="14000014300001002bbd70000000000002000000"], 0x14}}, 0x20004840) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030006000000080002400000000808000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000005a80)={0x1c6c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1808, 0x3, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x194, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xf}]}}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, {0x34, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xb08}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_LAST_MSECS={0xc}]}}}, {0x40, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x48, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_TTL={0x5, 0x2, 0xff}, @NFTA_OSF_TTL={0x5, 0x2, 0x5}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1e}]}}}, {0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, {0x163c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @hash={{0x9}, @void}}, @NFTA_SET_ELEM_EXPR={0x78, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xecd}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_USERDATA={0x80, 0x6, 0x1, 0x0, "2a5274aff26ad4016d3bf5272e6626bb118bf3ecfcc665f3a983bdf9d5b8cc860bfd1e5b27b54cd5d19366e6254542fbdc5bda091730fd6605dda3b1ada15e62bad5319a1c4428f38b1bd959575d41e52ea7730cfc22272e097e75dfd87c886246dbab674cb126c3f8943e962fc56bdbf7203b49b183be31b7686119"}, @NFTA_SET_ELEM_USERDATA={0x9f, 0x6, 0x1, 0x0, "ae13faa40bf9374c48ce938594e97c5547387c6ab0dea730b65103af1616e17a6057a65bd57682b04da45aaa0fd0f3e368ae8ff8204e7e70a3a76ce7d80e4276ba554267db231fe5892541b6ecf90edfca9e16169c17bd0a539c792e486df13c8f2f0541c922be2cf2069c98b29a1915e2e3907f2bf62e6fb52ff22450a9fcff47548c17be622a0a88b9d24fb9793a0d32b9ccf4f818a30f2d75f0"}, @NFTA_SET_ELEM_USERDATA={0xb6, 0x6, 0x1, 0x0, "bc22ff8f737cf9ba91bb8dddebeeccf2810ca764c1d4bee888312edee22c234bb188497e6825bb5edbf38594348cd4d0a83772ceccb11683c76ae1ba4830c3832bb5702ab1361c69ef56f5493e822a1ae3cecfcf43334143d342d995b4074dcdc06b67717300119ee62ff30e069b0c3eeb2aaec3baa589abb30ddd2ae8fd198c7cf01fa4ac931ec6c8d7bc46e7947908769aca0d6cefaa2f0f600b90ca83a449afdba78b6f4e58dc896cb63a024098b119a8"}, @NFTA_SET_ELEM_DATA={0x13d8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "e91388684200f05853a3c412000dc5ab85eed3a05f91ca576001ac8bd36392b6ed"}, @NFTA_DATA_VALUE={0x10bb, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xf4, 0x1, "9389a9b09070f1b1266670d2a9040db27d9158b89eb9c60f0a8cee2a5af7af6dd9d67659c66549a243c2fec1fa82993e9a0fbc071ddbd00aa31428c61d29e9ee27a4334fe85635337ddb8792c8b85847ca0c1bdc93caeee60de2619236367f48dad42fa7fbfe187ca44b5703ba89371e4fd90021eed2888c7e2c96caff7820dc5f0df6a4bab7b1c7343b3a5a19a3f87c1f85e8b7559cc7e20fbc366bab024002f1cc33934bbf325be41d3e2cd3cae88b3580509e303bb52db87e84983c76ac8b7c42d61a7ed42a5c737ea07c5e605b514b6e32e781e05a832590033099ec2232fa3d8219cc94b0c5e1b96139a5072689"}, @NFTA_DATA_VALUE={0xe6, 0x1, "eb9eb433f47787d0df526676548b2d39e6b9b76ffa54566d78b610b1214b6268bcb3d37a1dfde6f7049c4b3f3b0f562ce2ec15e96a47426fe77406e31b688530816bd345af8930c156414ec3d321cc3dab7be96cd69248c620f9d8673d98b9e425e78e14a78cdd80f2a910d92a48348a2f96947a61915ce7050474a6345af6d42dd979630ae756db80add83b52ac4fe737c1c10e741989e32668a617a75bf4f7ffe623758bd0836b217b413515af175bbbf929498b3e410494b788dbbe177aced9d3af9bd3b1a1628aa72ecf26c912e0de0e1f97f9f5e15a8a33cb31d3c3f875ce12"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x78, 0x1, "72af2001f6eca83b303cae929b4ab0999bc82d2fad2ec368cce07e09bc0fcfa6cad3ce1834ee6a1a27a7e09dbd64cf306d57ba4acec6a05501cb3df8120ec7fcc75834cb37c4f3283dfc4c383236e850fb620b9f5e841c17620bd8ef631950fefe0b65c32ce13b34873ae0256893b6b3828218cd"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x428, 0x3, 0x0, 0x1, [{0x28c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0x7d, 0x6, 0x1, 0x0, "790542c8db8adbc274c14d6f8bb883ba15934b7e1e069f8d3bd881da812ff1159c9a6d5d3ab562f86e0236e941c1d58d7aaa3c034e273ea1c49834ff079aa158b2a08ed37e33425542688a1441a6426bc028488d586e69825d83d5e519ec675d6b625b7ce75179ba80699b4ce9a0ee4dec5f4ade99c8233efe"}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x45, 0x1, "c23a4972015fe88ad4e19f35f23f59bf166894ac16814923d14b57835fbf426cb775529793fc139bf3a4818e3793e14ac765a3cd7a36c55f69c66bfccc4995877f"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x10001}, @NFTA_SET_ELEM_DATA={0x12c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x69, 0x1, "c5fbd77d91fb474f3f2b73eacbb444055d59869a37a240708c297d074d23cf2315c45b1c97009ae816654e69563d5bf41818edb3d5a568f097fbcaf8dd945c9a77cc5997c3278aeca7066888be416701fb2381974d7a8df86c5ccd7ab05e3076600b685b6c"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xed, 0x6, 0x1, 0x0, "e51475351c4ab9b46e99b81c0a718459d71f13f0ffbdbd399afbf7292c200ae5e82b04b540b6793e49707b14e0475b140a9c667dbc63e7c2bb7237c121e9c3f5de9b6804a1b518e7f0ea469d9045235f08a9b4715a4a68ee0823ba119032d03ceff25bde95c45a4545b2f0b2ca60406f8fe9378a436bcb81672ec39a841f4c9b6211b81f1fee9c40d71a603403630edb10914fd7e342aeade80c25ac70c6fc1d14c17cbecf95b10949590e568e3b646e17bf2f744354e3f1e867231529d1e4b00f17ee2dcd187acc0a2360b877bbc8d107ebc02a587ba741cde3bf58e8f7a443ff59a0ac15bcd4ba04"}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_EXPR={0x4c, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfe}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x1c6c}, 0x1, 0x0, 0x0, 0x4014}, 0x40004) 0s ago: executing program 2 (id=1663): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) r2 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) writev(r2, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x105}], 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x90}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x2a0008c1}, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) unshare(0x6020400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r5}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a40)={0x0, r6}, 0x8) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r8, 0x401c5820, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1a, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, r8, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r5, @ANYBLOB='\x00'/16, @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x88000}, 0x0) kernel console output (not intermixed with test programs): 845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.254573][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.267644][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.353087][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.432648][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.447429][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.465830][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.479533][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.495324][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.502693][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.516235][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.567447][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.574677][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.652879][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.710297][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.756813][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.765895][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.773065][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.806002][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.813222][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.926617][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.008971][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.047301][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.098782][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.106020][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.181909][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.189125][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.207706][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.215086][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.236233][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.243407][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.346802][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.436515][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.447222][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.478912][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.486214][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.515693][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.522876][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.544065][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.808288][ T5844] veth0_vlan: entered promiscuous mode [ 94.874109][ T5844] veth1_vlan: entered promiscuous mode [ 94.993913][ T5844] veth0_macvtap: entered promiscuous mode [ 95.032434][ T5844] veth1_macvtap: entered promiscuous mode [ 95.081532][ T5857] Bluetooth: hci1: command tx timeout [ 95.161224][ T51] Bluetooth: hci0: command tx timeout [ 95.162163][ T5167] Bluetooth: hci4: command tx timeout [ 95.166674][ T51] Bluetooth: hci3: command tx timeout [ 95.178538][ T5857] Bluetooth: hci2: command tx timeout [ 95.226896][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.305282][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.326912][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.363830][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.377995][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.387130][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.396253][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.449147][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.476314][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.619183][ T5848] veth0_vlan: entered promiscuous mode [ 95.630278][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.650021][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.705190][ T5848] veth1_vlan: entered promiscuous mode [ 95.750818][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.757045][ T5856] veth0_vlan: entered promiscuous mode [ 95.768970][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.789062][ T5845] veth0_vlan: entered promiscuous mode [ 95.807072][ T5846] veth0_vlan: entered promiscuous mode [ 95.832016][ T5856] veth1_vlan: entered promiscuous mode [ 95.875830][ T5845] veth1_vlan: entered promiscuous mode [ 95.900629][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.929098][ T5846] veth1_vlan: entered promiscuous mode [ 95.938441][ T5848] veth0_macvtap: entered promiscuous mode [ 95.975598][ T5848] veth1_macvtap: entered promiscuous mode [ 95.989830][ T5856] veth0_macvtap: entered promiscuous mode [ 96.050713][ T5856] veth1_macvtap: entered promiscuous mode [ 96.086449][ T5970] netlink: 'syz.0.1': attribute type 7 has an invalid length. [ 96.086534][ T5845] veth0_macvtap: entered promiscuous mode [ 96.120839][ T5845] veth1_macvtap: entered promiscuous mode [ 96.144198][ T5846] veth0_macvtap: entered promiscuous mode [ 96.188044][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.227046][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.239529][ T5846] veth1_macvtap: entered promiscuous mode [ 96.264959][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.282125][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.309195][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.318895][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.327941][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.337825][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.353981][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.368371][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.390124][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.402792][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.412088][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.420822][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.429827][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.451263][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.460046][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.474901][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.483850][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.526939][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.543156][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.552214][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.563338][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.573599][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.726066][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.746231][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.846757][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.868963][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.942591][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.960723][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.973082][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.983499][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.087813][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.111760][ T9] cfg80211: failed to load regulatory.db [ 97.121868][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.161218][ T5857] Bluetooth: hci1: command tx timeout [ 97.223232][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.235606][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.246014][ T51] Bluetooth: hci0: command tx timeout [ 97.246141][ T5167] Bluetooth: hci2: command tx timeout [ 97.252658][ T51] Bluetooth: hci3: command tx timeout [ 97.262428][ T5857] Bluetooth: hci4: command tx timeout [ 97.304030][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.326481][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.439830][ T5982] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 97.439924][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.484401][ T5982] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 97.491501][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.731197][ T5988] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 97.789442][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.798100][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.853815][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.861733][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.869919][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.877217][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.887476][ T5995] netlink: 'syz.1.2': attribute type 58 has an invalid length. [ 97.897296][ T5995] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 97.959225][ T5988] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 98.121952][ T5988] syz.2.3 (5988) used greatest stack depth: 20104 bytes left [ 98.203436][ T6005] pimreg: entered allmulticast mode [ 98.232733][ T6006] pimreg: left allmulticast mode [ 98.840608][ T6025] netlink: 'syz.1.18': attribute type 28 has an invalid length. [ 98.871193][ T6025] netlink: 'syz.1.18': attribute type 3 has an invalid length. [ 98.878823][ T6025] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18'. [ 98.905339][ T6030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17'. [ 98.932688][ T6028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.956203][ T6032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.20'. [ 98.974656][ T6028] netlink: 80 bytes leftover after parsing attributes in process `syz.2.19'. [ 98.979538][ T6031] netlink: 'syz.1.18': attribute type 28 has an invalid length. [ 98.994030][ T6031] netlink: 'syz.1.18': attribute type 3 has an invalid length. [ 99.022705][ T6038] netlink: 76 bytes leftover after parsing attributes in process `syz.2.19'. [ 99.026281][ T6031] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18'. [ 99.034543][ T6037] veth0: entered promiscuous mode [ 99.110456][ T6037] veth0: left promiscuous mode [ 99.273692][ T6041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22'. [ 99.304176][ T6041] FAULT_INJECTION: forcing a failure. [ 99.304176][ T6041] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.338729][ T6041] CPU: 1 UID: 0 PID: 6041 Comm: syz.1.22 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 99.338761][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.338783][ T6041] Call Trace: [ 99.338792][ T6041] [ 99.338801][ T6041] dump_stack_lvl+0x189/0x250 [ 99.338838][ T6041] ? __pfx____ratelimit+0x10/0x10 [ 99.338861][ T6041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.338887][ T6041] ? __pfx__printk+0x10/0x10 [ 99.338930][ T6041] should_fail_ex+0x414/0x560 [ 99.338959][ T6041] _copy_to_user+0x31/0xb0 [ 99.338993][ T6041] simple_read_from_buffer+0xe1/0x170 [ 99.339035][ T6041] proc_fail_nth_read+0x1df/0x250 [ 99.339060][ T6041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.339086][ T6041] ? rw_verify_area+0x258/0x650 [ 99.339113][ T6041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.339136][ T6041] vfs_read+0x1fd/0x980 [ 99.339170][ T6041] ? __pfx___mutex_lock+0x10/0x10 [ 99.339195][ T6041] ? __pfx_vfs_read+0x10/0x10 [ 99.339224][ T6041] ? __fget_files+0x2a/0x420 [ 99.339248][ T6041] ? __fget_files+0x3a0/0x420 [ 99.339265][ T6041] ? __fget_files+0x2a/0x420 [ 99.339293][ T6041] ksys_read+0x145/0x250 [ 99.339325][ T6041] ? __pfx_ksys_read+0x10/0x10 [ 99.339351][ T6041] ? rcu_is_watching+0x15/0xb0 [ 99.339384][ T6041] ? do_syscall_64+0xbe/0x3b0 [ 99.339413][ T6041] do_syscall_64+0xfa/0x3b0 [ 99.339435][ T6041] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.339457][ T6041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.339491][ T6041] ? clear_bhb_loop+0x60/0xb0 [ 99.339517][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.339538][ T6041] RIP: 0033:0x7f933f78d33c [ 99.339563][ T6041] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.339581][ T6041] RSP: 002b:00007f9340636030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.339604][ T6041] RAX: ffffffffffffffda RBX: 00007f933f9b5fa0 RCX: 00007f933f78d33c [ 99.339620][ T6041] RDX: 000000000000000f RSI: 00007f93406360a0 RDI: 0000000000000006 [ 99.339633][ T6041] RBP: 00007f9340636090 R08: 0000000000000000 R09: 0000000000000000 [ 99.339646][ T6041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.339659][ T6041] R13: 0000000000000000 R14: 00007f933f9b5fa0 R15: 00007fff83a05ae8 [ 99.339692][ T6041] [ 99.732924][ T6053] Zero length message leads to an empty skb [ 99.834360][ T6056] netlink: 'syz.3.25': attribute type 10 has an invalid length. [ 99.846852][ T6056] team0: Device ipvlan1 failed to register rx_handler [ 99.921371][ T6056] netlink: 'syz.3.25': attribute type 10 has an invalid length. [ 99.959679][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 99.979965][ T6056] team0: Device ipvlan1 failed to register rx_handler [ 99.988626][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.1.28'. [ 100.241178][ T6072] Bluetooth: MGMT ver 1.23 [ 100.286085][ T6078] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 100.312683][ T6077] ipvlan0: entered promiscuous mode [ 100.317970][ T6077] ipvlan0: entered allmulticast mode [ 100.362079][ T6077] veth0_vlan: entered allmulticast mode [ 100.859528][ T6104] netlink: 'syz.2.42': attribute type 10 has an invalid length. [ 100.868399][ T6104] bridge0: port 3(team0) entered blocking state [ 100.875857][ T6104] bridge0: port 3(team0) entered disabled state [ 100.883648][ T6104] team0: entered allmulticast mode [ 100.888996][ T6104] team_slave_0: entered allmulticast mode [ 100.896164][ T6104] team_slave_1: entered allmulticast mode [ 100.906034][ T6104] team0: entered promiscuous mode [ 100.912028][ T6104] team_slave_0: entered promiscuous mode [ 100.933157][ T6104] team_slave_1: entered promiscuous mode [ 100.944116][ T6104] bridge0: port 3(team0) entered blocking state [ 100.950631][ T6104] bridge0: port 3(team0) entered forwarding state [ 101.128277][ T6106] xt_CT: No such helper "syz0" [ 101.751937][ T6129] warning: `syz.4.50' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.904162][ T6139] lo speed is unknown, defaulting to 1000 [ 101.985305][ T6139] lo speed is unknown, defaulting to 1000 [ 102.071441][ T6149] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 102.143369][ T6148] : entered promiscuous mode [ 102.161558][ T6139] lo speed is unknown, defaulting to 1000 [ 102.291967][ T6159] delete_channel: no stack [ 102.556434][ T6139] infiniband syz0: set active [ 102.562386][ T5963] lo speed is unknown, defaulting to 1000 [ 102.568352][ T6139] infiniband syz0: added lo [ 102.635257][ T6139] RDS/IB: syz0: added [ 102.651894][ T6139] smc: adding ib device syz0 with port count 1 [ 102.663034][ T6139] smc: ib device syz0 port 1 has pnetid [ 102.673691][ T5917] lo speed is unknown, defaulting to 1000 [ 102.691987][ T6139] lo speed is unknown, defaulting to 1000 [ 102.913113][ T6174] vlan1: entered allmulticast mode [ 102.918515][ T6174] veth0_vlan: entered allmulticast mode [ 103.256352][ T6188] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.566483][ T6199] C: renamed from lo (while UP) [ 103.619746][ T6199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 103.650575][ T6139] lo speed is unknown, defaulting to 1000 [ 104.191798][ T6221] __nla_validate_parse: 7 callbacks suppressed [ 104.191817][ T6221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 104.230424][ T6223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.70'. [ 104.276264][ T6221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 104.350744][ T6225] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.493649][ T6233] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.745109][ T6240] netlink: 'syz.3.75': attribute type 15 has an invalid length. [ 104.792762][ T5917] IPVS: starting estimator thread 0... [ 104.815148][ T6241] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.825723][ T6241] bond0: (slave bond1): Enslaving as an active interface with an up link [ 104.865777][ T6139] lo speed is unknown, defaulting to 1000 [ 104.921061][ T6243] IPVS: using max 27 ests per chain, 64800 per kthread [ 105.563201][ T6264] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.81'. [ 105.732916][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 105.776118][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 105.846111][ T6271] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 106.103369][ T6139] lo speed is unknown, defaulting to 1000 [ 106.447050][ T51] Bluetooth: hci4: command tx timeout [ 107.064418][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.91'. [ 107.303890][ T6327] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 107.478460][ T6139] lo speed is unknown, defaulting to 1000 [ 107.672212][ T6340] (unnamed net_device) (uninitialized): option use_carrier: invalid value (7) [ 107.693167][ T6341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.053031][ T6349] netlink: 'syz.3.99': attribute type 3 has an invalid length. [ 108.098109][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.100'. [ 108.215307][ T6349] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 108.261027][ T6349] netlink: 'syz.3.99': attribute type 3 has an invalid length. [ 108.318633][ T6349] netlink: 224 bytes leftover after parsing attributes in process `syz.3.99'. [ 108.341401][ T6349] NCSI netlink: No device for ifindex 0 [ 108.373094][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.99'. [ 108.673606][ T6372] tipc: Can't bind to reserved service type 0 [ 108.689004][ T6368] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.987342][ T6385] netlink: 'syz.1.108': attribute type 2 has an invalid length. [ 109.031169][ T6385] netlink: 'syz.1.108': attribute type 1 has an invalid length. [ 109.082352][ T6386] netlink: 'syz.1.108': attribute type 2 has an invalid length. [ 109.105075][ T6386] netlink: 'syz.1.108': attribute type 1 has an invalid length. [ 109.209214][ T6390] __nla_validate_parse: 4 callbacks suppressed [ 109.209235][ T6390] netlink: 48 bytes leftover after parsing attributes in process `syz.3.110'. [ 109.519276][ T6393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.569883][ T6393] bond0: (slave bond1): Enslaving as an active interface with an up link [ 109.936853][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 109.946675][ T6412] netlink: 'syz.1.112': attribute type 2 has an invalid length. [ 109.997500][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 110.985358][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 111.014436][ T1102] wlan1: Trigger new scan to find an IBSS to join [ 111.114648][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 111.138788][ T6459] netlink: 96 bytes leftover after parsing attributes in process `syz.3.126'. [ 111.192013][ T6456] netlink: 1036 bytes leftover after parsing attributes in process `syz.0.124'. [ 111.206114][ T6456] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 111.246944][ T6459] netlink: 96 bytes leftover after parsing attributes in process `syz.3.126'. [ 111.748251][ T6488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 112.122541][ T6496] rdma_rxe: rxe_newlink: failed to add lo [ 112.245716][ T6502] netlink: 348 bytes leftover after parsing attributes in process `syz.3.135'. [ 113.199124][ T6531] x_tables: duplicate underflow at hook 1 [ 113.620266][ T6541] lo speed is unknown, defaulting to 1000 [ 114.005037][ T6557] Driver unsupported XDP return value 0 on prog (id 32) dev N/A, expect packet loss! [ 114.136844][ T6550] xt_CT: No such helper "syz0" [ 115.227844][ T6598] __nla_validate_parse: 6 callbacks suppressed [ 115.227866][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz.3.153'. [ 115.875579][ T6607] syzkaller0: entered promiscuous mode [ 115.924494][ T6607] syzkaller0: entered allmulticast mode [ 115.961108][ T13] wlan1: Trigger new scan to find an IBSS to join [ 116.696191][ T6637] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 116.710521][ T6637] netlink: 'syz.4.163': attribute type 2 has an invalid length. [ 116.724266][ T6637] raw_sendmsg: syz.4.163 forgot to set AF_INET. Fix it! [ 116.732647][ T6633] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.781570][ T6639] tipc: Enabling of bearer rejected, media not registered [ 116.882172][ T49] wlan1: Creating new IBSS network, BSSID 86:40:58:09:4d:31 [ 116.914095][ T6633] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.022492][ T6641] netlink: 182632 bytes leftover after parsing attributes in process `syz.4.164'. [ 117.049493][ T6633] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.129666][ T6633] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.340776][ T6633] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.433320][ T6633] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.502005][ T6633] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.614995][ T6633] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.798826][ T6657] rdma_rxe: rxe_newlink: failed to add lo [ 117.854101][ T6368] Set syz1 is full, maxelem 65536 reached [ 117.870037][ T6659] netlink: 'syz.0.170': attribute type 10 has an invalid length. [ 117.981707][ T6659] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.028966][ T6658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.619601][ T6678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.844967][ T6696] netlink: 'syz.3.182': attribute type 12 has an invalid length. [ 118.878141][ T6696] netlink: 'syz.3.182': attribute type 29 has an invalid length. [ 118.928920][ T6696] netlink: 148 bytes leftover after parsing attributes in process `syz.3.182'. [ 118.946405][ T6696] netlink: 43 bytes leftover after parsing attributes in process `syz.3.182'. [ 119.326207][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'. [ 119.352989][ T6719] tc_dump_action: action bad kind [ 119.368279][ T6726] netlink: 44 bytes leftover after parsing attributes in process `syz.1.190'. [ 119.517721][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 119.717938][ T6743] netlink: 36 bytes leftover after parsing attributes in process `syz.1.192'. [ 119.785528][ T6743] sit0: Master is either lo or non-ether device [ 119.988956][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.195'. [ 120.427917][ T6768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.202'. [ 120.451573][ T6771] tipc: Started in network mode [ 120.457156][ T6771] tipc: Node identity 6606ab3faf12, cluster identity 4711 [ 120.522184][ T6771] tipc: Enabled bearer , priority 0 [ 120.555801][ T6781] syzkaller0: entered promiscuous mode [ 120.589837][ T6781] syzkaller0: entered allmulticast mode [ 120.679099][ T6767] tipc: Resetting bearer [ 120.784576][ T6767] tipc: Disabling bearer [ 120.857852][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 120.895299][ T6793] veth0_to_hsr: mtu less than device minimum [ 121.132166][ T6801] netlink: 'syz.1.212': attribute type 1 has an invalid length. [ 121.371303][ T6817] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.915993][ T6840] netlink: 52 bytes leftover after parsing attributes in process `syz.3.222'. [ 121.965140][ T6840] netlink: 216 bytes leftover after parsing attributes in process `syz.3.222'. [ 122.001788][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 122.044249][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 122.135183][ T6847] tipc: Started in network mode [ 122.150929][ T6847] tipc: Node identity ac1414aa, cluster identity 8 [ 122.179710][ T6847] tipc: Enabled bearer , priority 10 [ 122.861822][ T6885] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'. [ 122.898414][ T6883] Bluetooth: MGMT ver 1.23 [ 122.989401][ T6887] block nbd0: Unsupported socket: shutdown callout must be supported. [ 123.014111][ T6890] xt_connbytes: Forcing CT accounting to be enabled [ 123.030146][ T6890] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.302945][ T9] tipc: Node number set to 2886997162 [ 123.426021][ T6907] bridge_slave_0: left allmulticast mode [ 123.432105][ T6907] bridge_slave_0: left promiscuous mode [ 123.438157][ T6907] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.455755][ T6907] bridge_slave_1: left allmulticast mode [ 123.462143][ T6907] bridge_slave_1: left promiscuous mode [ 123.468090][ T6907] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.499938][ T6907] bond0: (slave bond_slave_0): Releasing backup interface [ 123.572708][ T6907] bond0: (slave bond_slave_1): Releasing backup interface [ 123.650469][ T6907] team0: Port device team_slave_0 removed [ 123.767198][ T6907] team0: Port device team_slave_1 removed [ 123.812238][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.845126][ T6907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.879864][ T6907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.901329][ T6907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.926642][ T6925] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 123.936648][ T6925] netlink: 'syz.2.243': attribute type 4 has an invalid length. [ 123.949086][ T6925] netlink: 192 bytes leftover after parsing attributes in process `syz.2.243'. [ 123.998339][ T6907] bond0: (slave bond1): Releasing backup interface [ 124.734742][ T6952] No such timeout policy "syz0" [ 124.736924][ T6954] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 124.949294][ T6963] netlink: 'syz.4.254': attribute type 4 has an invalid length. [ 124.989531][ T6963] netlink: 17 bytes leftover after parsing attributes in process `syz.4.254'. [ 125.231181][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 125.380604][ T6984] netlink: 36 bytes leftover after parsing attributes in process `syz.4.260'. [ 125.560712][ T6988] __nla_validate_parse: 3 callbacks suppressed [ 125.560733][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.261'. [ 126.103236][ T7005] sock: sock_set_timeout: `syz.3.266' (pid 7005) tries to set negative timeout [ 126.241393][ T7010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.267'. [ 126.289814][ T7005] veth1: entered promiscuous mode [ 126.366275][ T7005] macsec1: entered promiscuous mode [ 126.384351][ T7014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.266'. [ 126.491399][ T7017] netlink: 'syz.2.268': attribute type 4 has an invalid length. [ 126.601661][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.269'. [ 126.687954][ T7022] geneve2: entered promiscuous mode [ 126.794081][ T7031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'. [ 126.862846][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 126.893260][ T7031] x_tables: duplicate underflow at hook 4 [ 127.229545][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 127.513444][ T7063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.279'. [ 127.727926][ T7071] veth1_macvtap: left promiscuous mode [ 127.741562][ T7071] macsec0: entered promiscuous mode [ 127.757074][ T7071] macsec0: entered allmulticast mode [ 127.793200][ T7076] veth1_macvtap: entered promiscuous mode [ 127.820986][ T7076] veth1_macvtap: entered allmulticast mode [ 127.843562][ T7076] macsec0: left promiscuous mode [ 127.878014][ T7076] macsec0: left allmulticast mode [ 127.909241][ T7076] veth1_macvtap: left allmulticast mode [ 128.026433][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.285'. [ 128.034982][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.285'. [ 128.051882][ T7079] : entered promiscuous mode [ 128.461876][ T1102] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.536613][ T5934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.549952][ T1102] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.648865][ T7112] netlink: 'syz.1.293': attribute type 10 has an invalid length. [ 128.660774][ T7116] openvswitch: netlink: Actions may not be safe on all matching packets [ 128.679239][ T7112] bridge0: port 3(team0) entered blocking state [ 128.711417][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 128.760525][ T7112] bridge0: port 3(team0) entered disabled state [ 128.778164][ T7112] team0: entered allmulticast mode [ 128.785581][ T7112] team_slave_0: entered allmulticast mode [ 128.792735][ T7112] team_slave_1: entered allmulticast mode [ 128.805035][ T7112] team0: entered promiscuous mode [ 128.810492][ T7112] team_slave_0: entered promiscuous mode [ 128.817479][ T7112] team_slave_1: entered promiscuous mode [ 128.825682][ T7112] bridge0: port 3(team0) entered blocking state [ 128.832196][ T7112] bridge0: port 3(team0) entered forwarding state [ 128.867010][ T7117] xt_CT: No such helper "snmp" [ 129.001739][ T5934] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 129.384901][ T7145] xt_l2tp: v2 doesn't support IP mode [ 129.477792][ T7150] netlink: 'syz.1.303': attribute type 1 has an invalid length. [ 129.581437][ T7152] syzkaller0: entered promiscuous mode [ 129.587027][ T7152] syzkaller0: entered allmulticast mode [ 130.264047][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.274046][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.283128][ T7180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.322245][ T7185] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 130.750136][ T7207] netlink: 'syz.0.317': attribute type 10 has an invalid length. [ 130.780340][ T7207] __nla_validate_parse: 4 callbacks suppressed [ 130.780360][ T7207] netlink: 40 bytes leftover after parsing attributes in process `syz.0.317'. [ 130.932785][ T7207] team0: Port device geneve0 added [ 131.012171][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 131.075536][ T7215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.115050][ T7218] netlink: 20 bytes leftover after parsing attributes in process `syz.1.322'. [ 131.198394][ T7218] veth3: entered allmulticast mode [ 131.275387][ T7225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.324'. [ 131.285065][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 131.361546][ T7229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.324'. [ 131.378459][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 131.434379][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'. [ 131.580613][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.329'. [ 131.984542][ T7249] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 132.441118][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.118507][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 133.207375][ T7291] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 133.343079][ T7291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.398316][ T7296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 133.413788][ T7296] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 133.426970][ T7296] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 133.550620][ T7301] veth3: entered promiscuous mode [ 133.563080][ T7301] bond1: (slave veth3): Enslaving as an active interface with a down link [ 133.589577][ T7291] bond1: (slave vlan2): Opening slave failed [ 133.819823][ T7313] ipvlan0: entered promiscuous mode [ 133.841837][ T7313] ipvlan0: entered allmulticast mode [ 133.847225][ T7313] veth0_vlan: entered allmulticast mode [ 133.890121][ T7315] netlink: 'syz.2.355': attribute type 1 has an invalid length. [ 134.050983][ T7317] netlink: 'syz.3.356': attribute type 1 has an invalid length. [ 134.062623][ T7317] netlink: 'syz.3.356': attribute type 1 has an invalid length. [ 134.130334][ T7315] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.254388][ T7322] bond2: (slave gretap1): making interface the new active one [ 134.301601][ T7322] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 134.340282][ T7330] netlink: 'syz.3.358': attribute type 2 has an invalid length. [ 134.418305][ T7333] Bluetooth: MGMT ver 1.23 [ 134.999380][ T7358] xt_policy: neither incoming nor outgoing policy selected [ 135.158517][ T7363] veth1_macvtap: left promiscuous mode [ 135.431558][ T7369] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 135.616394][ T7374] bond3: entered promiscuous mode [ 135.629676][ T7374] bond3: entered allmulticast mode [ 135.648851][ T7374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 135.688729][ T7384] syzkalle: renamed from vxcan1 (while UP) [ 135.863846][ T7391] __nla_validate_parse: 4 callbacks suppressed [ 135.863867][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.381'. [ 135.929817][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 135.946071][ T7397] netlink: 'syz.2.382': attribute type 19 has an invalid length. [ 135.964348][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 136.521185][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 136.528648][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 136.573567][ T7423] netlink: 52 bytes leftover after parsing attributes in process `syz.2.388'. [ 136.611910][ T7424] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 136.642774][ T7424] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 136.749749][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 136.774606][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 137.537046][ T7466] netlink: 'syz.0.407': attribute type 2 has an invalid length. [ 137.544855][ T7466] netlink: 119 bytes leftover after parsing attributes in process `syz.0.407'. [ 137.560547][ T7468] tipc: Started in network mode [ 137.569839][ T7468] tipc: Node identity 080211000001, cluster identity 4711 [ 137.590817][ T7468] tipc: Enabled bearer , priority 0 [ 137.618671][ T7472] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 137.658567][ T7472] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 137.698642][ T7474] bond0: Error: Cannot enslave bond to itself. [ 137.770086][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'. [ 137.970539][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 137.993817][ T7488] xt_hashlimit: size too large, truncated to 1048576 [ 138.046994][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.056003][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.064854][ T7488] syz.2.412: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 138.147297][ T7488] CPU: 1 UID: 0 PID: 7488 Comm: syz.2.412 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 138.147332][ T7488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.147346][ T7488] Call Trace: [ 138.147355][ T7488] [ 138.147365][ T7488] dump_stack_lvl+0x189/0x250 [ 138.147406][ T7488] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 138.147443][ T7488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.147470][ T7488] ? __pfx__printk+0x10/0x10 [ 138.147501][ T7488] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 138.147529][ T7488] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 138.147567][ T7488] warn_alloc+0x214/0x310 [ 138.147596][ T7488] ? __pfx_warn_alloc+0x10/0x10 [ 138.147627][ T7488] ? __get_vm_area_node+0x28f/0x300 [ 138.147660][ T7488] ? htable_create+0xfc/0x7a0 [ 138.147687][ T7488] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 138.147754][ T7488] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 138.147796][ T7488] ? rcu_is_watching+0x15/0xb0 [ 138.147823][ T7488] ? htable_create+0xfc/0x7a0 [ 138.147844][ T7488] ? htable_create+0xfc/0x7a0 [ 138.147862][ T7488] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 138.147896][ T7488] ? htable_create+0xfc/0x7a0 [ 138.147914][ T7488] ? hashlimit_pernet+0x23/0x240 [ 138.147944][ T7488] htable_create+0xfc/0x7a0 [ 138.147974][ T7488] hashlimit_mt_check_common+0x719/0xa10 [ 138.148008][ T7488] xt_check_match+0x3d1/0xab0 [ 138.148041][ T7488] ? __pfx___mutex_lock+0x10/0x10 [ 138.148070][ T7488] ? __pfx_xt_check_match+0x10/0x10 [ 138.148107][ T7488] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 138.148160][ T7488] ? xt_find_match+0x1f7/0x250 [ 138.148201][ T7488] translate_table+0x1553/0x2040 [ 138.148259][ T7488] ? __pfx_translate_table+0x10/0x10 [ 138.148297][ T7488] ? __might_fault+0xb0/0x130 [ 138.148349][ T7488] ? _copy_from_user+0x94/0xb0 [ 138.148387][ T7488] do_ip6t_set_ctl+0x970/0xce0 [ 138.148427][ T7488] ? rcu_is_watching+0x15/0xb0 [ 138.148453][ T7488] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 138.148507][ T7488] ? __pfx___mutex_lock+0x10/0x10 [ 138.148532][ T7488] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 138.148568][ T7488] ? __lock_acquire+0xab9/0xd20 [ 138.148599][ T7488] nf_setsockopt+0x26f/0x290 [ 138.148640][ T7488] rawv6_setsockopt+0x23b/0x5b0 [ 138.148666][ T7488] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 138.148687][ T7488] ? aa_sock_opt_perm+0x74/0x110 [ 138.148711][ T7488] ? sock_common_setsockopt+0x36/0xc0 [ 138.148738][ T7488] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 138.148768][ T7488] do_sock_setsockopt+0x179/0x1b0 [ 138.148806][ T7488] __x64_sys_setsockopt+0x13f/0x1b0 [ 138.148845][ T7488] do_syscall_64+0xfa/0x3b0 [ 138.148869][ T7488] ? lockdep_hardirqs_on+0x9c/0x150 [ 138.148890][ T7488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.148912][ T7488] ? clear_bhb_loop+0x60/0xb0 [ 138.148939][ T7488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.148960][ T7488] RIP: 0033:0x7f952018e929 [ 138.148989][ T7488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.149008][ T7488] RSP: 002b:00007f952107b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 138.149031][ T7488] RAX: ffffffffffffffda RBX: 00007f95203b6080 RCX: 00007f952018e929 [ 138.149047][ T7488] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 138.149060][ T7488] RBP: 00007f9520210ca1 R08: 00000000000005c0 R09: 0000000000000000 [ 138.149074][ T7488] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 138.149088][ T7488] R13: 0000000000000000 R14: 00007f95203b6080 R15: 00007ffe640930e8 [ 138.149122][ T7488] [ 138.204468][ T7488] Mem-Info: [ 138.257615][ T7503] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 138.338512][ T7506] netlink: 'syz.0.416': attribute type 21 has an invalid length. [ 138.340354][ T7488] active_anon:4380 inactive_anon:0 isolated_anon:0 [ 138.340354][ T7488] active_file:1419 inactive_file:39840 isolated_file:0 [ 138.340354][ T7488] unevictable:771 dirty:150 writeback:0 [ 138.340354][ T7488] slab_reclaimable:10271 slab_unreclaimable:100733 [ 138.340354][ T7488] mapped:29057 shmem:1364 pagetables:1109 [ 138.340354][ T7488] sec_pagetables:0 bounce:0 [ 138.340354][ T7488] kernel_misc_reclaimable:0 [ 138.340354][ T7488] free:1327949 free_pcp:15535 free_cma:0 [ 138.383475][ T7503] netlink: 'syz.4.415': attribute type 2 has an invalid length. [ 138.387096][ T7488] Node 0 active_anon:17520kB inactive_anon:0kB active_file:5676kB inactive_file:159156kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:116228kB dirty:596kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12028kB pagetables:4184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 138.396745][ T7503] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 138.402655][ T7488] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 138.684578][ T5968] tipc: Node number set to 134418688 [ 138.728853][ T7488] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 138.782201][ T7511] SET target dimension over the limit! [ 138.814690][ T7488] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 138.831696][ T7488] Node 0 DMA32 free:1402340kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17476kB inactive_anon:0kB active_file:5676kB inactive_file:157576kB unevictable:1548kB writepending:596kB present:3129332kB managed:2558508kB mlocked:12kB bounce:0kB free_pcp:41612kB local_pcp:20768kB free_cma:0kB [ 138.971124][ T7488] lowmem_reserve[]: 0 0 1 1 1 [ 138.976153][ T7488] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 139.072181][ T7488] lowmem_reserve[]: 0 0 0 0 0 [ 139.077038][ T7488] Node 1 Normal free:3893860kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21380kB local_pcp:12356kB free_cma:0kB [ 139.133613][ T7527] tipc: Started in network mode [ 139.169939][ T7527] tipc: Node identity f6cbcd4a2a96, cluster identity 4711 [ 139.191483][ T7527] tipc: Enabled bearer , priority 0 [ 139.198683][ T7488] lowmem_reserve[]: 0 0 0 0 0 [ 139.231373][ T7535] syzkaller0: entered promiscuous mode [ 139.236938][ T7535] syzkaller0: entered allmulticast mode [ 139.275722][ T7488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 139.355573][ T7488] Node 0 DMA32: 797*4kB (UM) 573*8kB (UME) 101*16kB (ME) 234*32kB (UME) 35*64kB (UME) 18*128kB (UM) 4*256kB (UM) 6*512kB (M) 13*1024kB (UME) 6*2048kB (ME) 330*4096kB (M) = 1402796kB [ 139.387905][ T7526] tipc: Resetting bearer [ 139.400410][ T7488] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 139.448709][ T7526] tipc: Disabling bearer [ 139.470767][ T7488] Node 1 Normal: 181*4kB (UM) 50*8kB (UME) 40*16kB (UME) 60*32kB (UME) 20*64kB (UME) 4*128kB (UME) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3893860kB [ 139.502648][ T7488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.530549][ T7488] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.554803][ T7488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 139.617257][ T7488] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 139.658911][ T7488] 42619 total pagecache pages [ 139.671429][ T7488] 0 pages in swap cache [ 139.678970][ T7554] team0: Device vti0 is up. Set it down before adding it as a team port [ 139.682317][ T7488] Free swap = 124996kB [ 139.709374][ T7488] Total swap = 124996kB [ 139.735178][ T7488] 2097051 pages RAM [ 139.749667][ T7488] 0 pages HighMem/MovableOnly [ 139.763755][ T7488] 425382 pages reserved [ 139.775032][ T7488] 0 pages cma reserved [ 139.805894][ T7556] syzkaller1: entered promiscuous mode [ 139.814845][ T7556] syzkaller1: entered allmulticast mode [ 139.961046][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.015865][ T7565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.432'. [ 140.030201][ T7567] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 140.153115][ T7571] netlink: 'syz.0.434': attribute type 21 has an invalid length. [ 140.176397][ T7571] netlink: 'syz.0.434': attribute type 5 has an invalid length. [ 140.567714][ T7591] tipc: Enabled bearer , priority 0 [ 140.595475][ T7591] syzkaller0: entered promiscuous mode [ 140.610381][ T7591] syzkaller0: entered allmulticast mode [ 140.650419][ T7591] tipc: Resetting bearer [ 140.709492][ T7585] tipc: Resetting bearer [ 140.773086][ T7585] tipc: Disabling bearer [ 140.810692][ T7605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.819677][ T7605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.830510][ T7605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.838781][ T7605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.923996][ T7609] __nla_validate_parse: 7 callbacks suppressed [ 140.924016][ T7609] netlink: 11 bytes leftover after parsing attributes in process `syz.4.447'. [ 140.949100][ T7609] netlink: 11 bytes leftover after parsing attributes in process `syz.4.447'. [ 141.139573][ T7629] lo speed is unknown, defaulting to 1000 [ 141.541177][ T7607] netlink: 'syz.4.447': attribute type 1 has an invalid length. [ 141.701957][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.455'. [ 141.741263][ T7638] netlink: 256 bytes leftover after parsing attributes in process `syz.0.455'. [ 141.856682][ T7643] tipc: Enabled bearer , priority 0 [ 141.882644][ T7642] netlink: 48 bytes leftover after parsing attributes in process `syz.2.458'. [ 141.893105][ T7643] syzkaller0: entered promiscuous mode [ 141.899083][ T7643] syzkaller0: entered allmulticast mode [ 142.032671][ T7643] tipc: Resetting bearer [ 142.057086][ T7641] tipc: Resetting bearer [ 142.142103][ T7641] tipc: Disabling bearer [ 142.187776][ T7661] netlink: 'syz.3.464': attribute type 2 has an invalid length. [ 142.219575][ T7661] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 142.249429][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 142.258856][ T7664] netlink: 'syz.1.465': attribute type 21 has an invalid length. [ 142.287959][ T7664] netlink: 156 bytes leftover after parsing attributes in process `syz.1.465'. [ 142.317788][ T7661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.423799][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 142.572961][ T7685] netlink: 36 bytes leftover after parsing attributes in process `syz.1.472'. [ 142.712052][ T7693] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 142.891659][ T7700] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.906397][ T7700] bond2: (slave bond3): making interface the new active one [ 142.921107][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.475'. [ 142.939034][ T7700] bond2: (slave bond3): Enslaving as an active interface with an up link [ 142.965773][ T7693] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 142.980207][ T7706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.087023][ T7713] syzkaller0: entered promiscuous mode [ 143.102412][ T7713] syzkaller0: entered allmulticast mode [ 143.818353][ T7744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.826390][ T7744] bridge0: port 3(bond2) entered blocking state [ 143.833114][ T7744] bridge0: port 3(bond2) entered disabled state [ 143.839772][ T7744] bond2: entered allmulticast mode [ 143.848961][ T7744] bond2: entered promiscuous mode [ 143.855264][ T7744] bridge0: port 3(bond2) entered blocking state [ 143.862078][ T7744] bridge0: port 3(bond2) entered forwarding state [ 143.999846][ T7755] rdma_rxe: rxe_newlink: failed to add lo [ 144.074518][ T7762] netlink: 'syz.4.493': attribute type 12 has an invalid length. [ 144.082592][ T7762] netlink: 'syz.4.493': attribute type 29 has an invalid length. [ 144.102719][ T7762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.128671][ T1087] bridge0: port 3(bond2) entered disabled state [ 145.568951][ T7819] rdma_rxe: rxe_newlink: failed to add lo [ 146.920644][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 150.841983][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 154.691115][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.845212][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 183.481118][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 196.204348][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 196.248660][ T7875] syz0: rxe_newlink: already configured on lo [ 196.376862][ T7884] __nla_validate_parse: 15 callbacks suppressed [ 196.376883][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 196.519385][ T7891] netlink: 52 bytes leftover after parsing attributes in process `syz.2.535'. [ 196.543039][ T7894] netlink: 'syz.4.536': attribute type 4 has an invalid length. [ 196.753430][ T7906] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 197.251544][ T7914] 8021q: VLANs not supported on lo [ 197.257019][ T7914] 8021q: VLANs not supported on lo [ 197.296053][ T7914] 8021q: VLANs not supported on lo [ 197.321235][ T7914] 8021q: VLANs not supported on lo [ 197.334377][ T7914] 8021q: VLANs not supported on lo [ 197.351343][ T7914] 8021q: VLANs not supported on lo [ 197.393512][ T7922] geneve2: entered promiscuous mode [ 197.400516][ T7914] 8021q: VLANs not supported on lo [ 197.406110][ T7914] 8021q: VLANs not supported on lo [ 197.427220][ T7914] 8021q: VLANs not supported on lo [ 197.441889][ T7914] 8021q: VLANs not supported on lo [ 197.453291][ T7914] 8021q: VLANs not supported on lo [ 197.466247][ T7914] 8021q: VLANs not supported on lo [ 197.492415][ T7914] 8021q: VLANs not supported on lo [ 197.511174][ T7914] 8021q: VLANs not supported on lo [ 197.531465][ T7914] 8021q: VLANs not supported on lo [ 197.556514][ T7934] netlink: 156 bytes leftover after parsing attributes in process `syz.2.549'. [ 197.568976][ T7914] 8021q: VLANs not supported on lo [ 197.579144][ T7914] 8021q: VLANs not supported on lo [ 197.598865][ T7914] 8021q: VLANs not supported on lo [ 197.610055][ T7914] 8021q: VLANs not supported on lo [ 197.617275][ T7939] sctp: [Deprecated]: syz.3.547 (pid 7939) Use of int in maxseg socket option. [ 197.617275][ T7939] Use struct sctp_assoc_value instead [ 197.638714][ T7914] 8021q: VLANs not supported on lo [ 197.680014][ T7914] 8021q: VLANs not supported on lo [ 197.708231][ T7914] 8021q: VLANs not supported on lo [ 197.723122][ T7914] 8021q: VLANs not supported on lo [ 197.735204][ T7914] 8021q: VLANs not supported on lo [ 197.754430][ T7914] 8021q: VLANs not supported on lo [ 197.767410][ T7914] 8021q: VLANs not supported on lo [ 197.785711][ T7914] 8021q: VLANs not supported on lo [ 197.814918][ T7914] 8021q: VLANs not supported on lo [ 197.825075][ T7914] 8021q: VLANs not supported on lo [ 197.844386][ T7914] 8021q: VLANs not supported on lo [ 197.851995][ T7914] 8021q: VLANs not supported on lo [ 197.894085][ T7914] 8021q: VLANs not supported on lo [ 197.896859][ T7949] rdma_rxe: rxe_newlink: failed to add lo [ 197.900268][ T7914] 8021q: VLANs not supported on lo [ 198.318770][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 198.344966][ T7981] syzkaller0: entered promiscuous mode [ 198.350719][ T7981] syzkaller0: entered allmulticast mode [ 198.415594][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 198.493651][ T7984] netlink: 84 bytes leftover after parsing attributes in process `syz.4.560'. [ 198.896515][ T7993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.561'. [ 199.168832][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 199.223591][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.233864][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.306351][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 199.488131][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.494726][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.737775][ T8037] netlink: 'syz.3.575': attribute type 10 has an invalid length. [ 199.820164][ T8037] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 199.832080][ T8041] netlink: 20 bytes leftover after parsing attributes in process `syz.0.577'. [ 199.856315][ T8033] syz.4.574 (8033) used greatest stack depth: 15736 bytes left [ 200.121193][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 200.822041][ T8082] openvswitch: netlink: Message has 8 unknown bytes. [ 201.133697][ T8079] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.142060][ T8079] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.614896][ T8079] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 201.831257][ T8105] __nla_validate_parse: 1 callbacks suppressed [ 201.831279][ T8105] netlink: 256 bytes leftover after parsing attributes in process `syz.1.599'. [ 201.979603][ T8117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.599'. [ 201.994481][ T8116] netlink: 108 bytes leftover after parsing attributes in process `syz.3.603'. [ 202.047988][ T8119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.602'. [ 202.114512][ T8119] netlink: 'syz.4.602': attribute type 7 has an invalid length. [ 202.129320][ T8120] netlink: 'syz.4.602': attribute type 12 has an invalid length. [ 202.137456][ T8119] netlink: 'syz.4.602': attribute type 8 has an invalid length. [ 202.150432][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 202.159931][ T8120] netlink: 'syz.4.602': attribute type 29 has an invalid length. [ 202.182524][ T8124] FAULT_INJECTION: forcing a failure. [ 202.182524][ T8124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.195816][ T8124] CPU: 1 UID: 0 PID: 8124 Comm: syz.0.605 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 202.195846][ T8124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 202.195859][ T8124] Call Trace: [ 202.195868][ T8124] [ 202.195878][ T8124] dump_stack_lvl+0x189/0x250 [ 202.195909][ T8124] ? __pfx____ratelimit+0x10/0x10 [ 202.195933][ T8124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.195959][ T8124] ? __pfx__printk+0x10/0x10 [ 202.195990][ T8124] ? __might_fault+0xb0/0x130 [ 202.196034][ T8124] should_fail_ex+0x414/0x560 [ 202.196062][ T8124] _copy_from_user+0x2d/0xb0 [ 202.196094][ T8124] ___sys_sendmsg+0x158/0x2a0 [ 202.196132][ T8124] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.196207][ T8124] ? __fget_files+0x2a/0x420 [ 202.196226][ T8124] ? __fget_files+0x3a0/0x420 [ 202.196258][ T8124] __sys_sendmmsg+0x227/0x430 [ 202.196298][ T8124] ? __pfx___sys_sendmmsg+0x10/0x10 [ 202.196329][ T8124] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 202.196383][ T8124] ? ksys_write+0x22a/0x250 [ 202.196416][ T8124] ? __pfx_ksys_write+0x10/0x10 [ 202.196442][ T8124] ? rcu_is_watching+0x15/0xb0 [ 202.196476][ T8124] __x64_sys_sendmmsg+0xa0/0xc0 [ 202.196512][ T8124] do_syscall_64+0xfa/0x3b0 [ 202.196535][ T8124] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.196557][ T8124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.196578][ T8124] ? clear_bhb_loop+0x60/0xb0 [ 202.196605][ T8124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.196626][ T8124] RIP: 0033:0x7f26de58e929 [ 202.196646][ T8124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.196665][ T8124] RSP: 002b:00007f26df4dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 202.196687][ T8124] RAX: ffffffffffffffda RBX: 00007f26de7b5fa0 RCX: 00007f26de58e929 [ 202.196703][ T8124] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 202.196727][ T8124] RBP: 00007f26df4dc090 R08: 0000000000000000 R09: 0000000000000000 [ 202.196740][ T8124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.196752][ T8124] R13: 0000000000000000 R14: 00007f26de7b5fa0 R15: 00007ffd7a150078 [ 202.196785][ T8124] [ 202.200102][ T8120] netlink: 148 bytes leftover after parsing attributes in process `syz.4.602'. [ 202.458025][ T8131] netlink: 80 bytes leftover after parsing attributes in process `syz.1.606'. [ 202.637483][ T8136] rdma_rxe: rxe_newlink: failed to add lo [ 202.714560][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 202.811483][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 202.841161][ T8155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.613'. [ 202.850361][ T8155] netlink: 'syz.0.613': attribute type 7 has an invalid length. [ 202.860737][ T8155] netlink: 'syz.0.613': attribute type 8 has an invalid length. [ 202.903569][ T8155] ip6gretap0: entered promiscuous mode [ 202.910299][ T8155] syz_tun: entered promiscuous mode [ 202.925511][ T8155] ip6gretap0: left promiscuous mode [ 202.960528][ T8155] syz_tun: left promiscuous mode [ 203.075800][ T8161] lo speed is unknown, defaulting to 1000 [ 203.093157][ T8169] xt_policy: too many policy elements [ 203.110258][ T8170] veth0_to_team: mtu less than device minimum [ 203.118466][ T8166] sctp: [Deprecated]: syz.4.616 (pid 8166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.118466][ T8166] Use struct sctp_sack_info instead [ 203.245620][ T8176] FAULT_INJECTION: forcing a failure. [ 203.245620][ T8176] name failslab, interval 1, probability 0, space 0, times 1 [ 203.270928][ T8176] CPU: 0 UID: 0 PID: 8176 Comm: syz.0.617 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 203.270962][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.270975][ T8176] Call Trace: [ 203.270984][ T8176] [ 203.270993][ T8176] dump_stack_lvl+0x189/0x250 [ 203.271024][ T8176] ? __pfx____ratelimit+0x10/0x10 [ 203.271046][ T8176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.271071][ T8176] ? __pfx__printk+0x10/0x10 [ 203.271109][ T8176] ? __pfx___might_resched+0x10/0x10 [ 203.271134][ T8176] ? fs_reclaim_acquire+0x7d/0x100 [ 203.271162][ T8176] should_fail_ex+0x414/0x560 [ 203.271189][ T8176] should_failslab+0xa8/0x100 [ 203.271223][ T8176] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 203.271253][ T8176] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.271272][ T8176] ? __alloc_skb+0x112/0x2d0 [ 203.271307][ T8176] __alloc_skb+0x112/0x2d0 [ 203.271341][ T8176] sock_wmalloc+0xb2/0x130 [ 203.271364][ T8176] l2tp_ip_sendmsg+0x1bb/0x1630 [ 203.271405][ T8176] ? inet_sendmsg+0x2f4/0x370 [ 203.271429][ T8176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.271458][ T8176] __sock_sendmsg+0x19c/0x270 [ 203.271487][ T8176] ____sys_sendmsg+0x52d/0x830 [ 203.271527][ T8176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.271570][ T8176] ? import_iovec+0x74/0xa0 [ 203.271606][ T8176] ___sys_sendmsg+0x21f/0x2a0 [ 203.271641][ T8176] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.271713][ T8176] ? __fget_files+0x2a/0x420 [ 203.271732][ T8176] ? __fget_files+0x3a0/0x420 [ 203.271763][ T8176] __sys_sendmmsg+0x227/0x430 [ 203.271801][ T8176] ? __pfx___sys_sendmmsg+0x10/0x10 [ 203.271831][ T8176] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 203.271885][ T8176] ? ksys_write+0x22a/0x250 [ 203.271917][ T8176] ? __pfx_ksys_write+0x10/0x10 [ 203.271943][ T8176] ? rcu_is_watching+0x15/0xb0 [ 203.271977][ T8176] __x64_sys_sendmmsg+0xa0/0xc0 [ 203.272014][ T8176] do_syscall_64+0xfa/0x3b0 [ 203.272037][ T8176] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.272059][ T8176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.272080][ T8176] ? clear_bhb_loop+0x60/0xb0 [ 203.272107][ T8176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.272128][ T8176] RIP: 0033:0x7f26de58e929 [ 203.272146][ T8176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.272164][ T8176] RSP: 002b:00007f26df4bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 203.272186][ T8176] RAX: ffffffffffffffda RBX: 00007f26de7b6080 RCX: 00007f26de58e929 [ 203.272201][ T8176] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 203.272215][ T8176] RBP: 00007f26df4bb090 R08: 0000000000000000 R09: 0000000000000000 [ 203.272228][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.272240][ T8176] R13: 0000000000000000 R14: 00007f26de7b6080 R15: 00007ffd7a150078 [ 203.272274][ T8176] [ 203.752866][ T8179] syzkaller0: entered promiscuous mode [ 203.758433][ T8179] syzkaller0: entered allmulticast mode [ 203.974923][ T8194] xt_cgroup: invalid path, errno=-2 [ 204.192452][ T8199] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 204.211897][ T8203] netlink: 'syz.1.623': attribute type 21 has an invalid length. [ 204.672760][ T8221] netlink: 'syz.2.632': attribute type 1 has an invalid length. [ 204.907307][ T8221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.651585][ T8265] netlink: 'syz.1.646': attribute type 28 has an invalid length. [ 205.684602][ T8265] netlink: 'syz.1.646': attribute type 3 has an invalid length. [ 205.785905][ T8269] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 205.836479][ T8269] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 206.847008][ T8324] __nla_validate_parse: 9 callbacks suppressed [ 206.847029][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.664'. [ 206.958178][ T8331] pim6reg1: entered promiscuous mode [ 206.966995][ T8331] pim6reg1: entered allmulticast mode [ 207.172009][ T8347] validate_nla: 1 callbacks suppressed [ 207.172029][ T8347] netlink: 'syz.2.671': attribute type 6 has an invalid length. [ 207.222068][ T8349] netlink: 80 bytes leftover after parsing attributes in process `syz.1.674'. [ 207.280751][ T8352] netlink: 'syz.0.675': attribute type 39 has an invalid length. [ 207.574787][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 207.603202][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.681'. [ 207.634823][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.681'. [ 207.652418][ T8365] netlink: 264 bytes leftover after parsing attributes in process `syz.1.681'. [ 207.878982][ T8379] netlink: 72 bytes leftover after parsing attributes in process `syz.4.685'. [ 208.001385][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.687'. [ 208.033075][ T8394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.690'. [ 208.044526][ T8393] sctp: [Deprecated]: syz.4.689 (pid 8393) Use of int in maxseg socket option. [ 208.044526][ T8393] Use struct sctp_assoc_value instead [ 208.127683][ T8397] netlink: 'syz.3.691': attribute type 1 has an invalid length. [ 208.227174][ T8397] bond4: entered promiscuous mode [ 208.236764][ T8397] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.243393][ T8402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.256058][ T8406] tipc: Enabling of bearer rejected, failed to enable media [ 208.329056][ T8407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 208.337459][ T8407] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 208.348362][ T8407] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 208.368210][ T8407] bond4: (slave wireguard0): making interface the new active one [ 208.380438][ T8407] wireguard0: entered promiscuous mode [ 208.389509][ T8407] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 208.441030][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 208.770715][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 208.901114][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.702'. [ 209.080114][ T8454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 209.263644][ T8469] geneve2: entered promiscuous mode [ 209.279266][ T8469] geneve2: entered allmulticast mode [ 209.329248][ T8467] openvswitch: netlink: Actions may not be safe on all matching packets [ 209.346692][ T8467] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 209.546555][ T8485] sctp: [Deprecated]: syz.1.717 (pid 8485) Use of int in maxseg socket option. [ 209.546555][ T8485] Use struct sctp_assoc_value instead [ 209.643799][ T8492] netlink: 'syz.0.718': attribute type 3 has an invalid length. [ 209.805721][ T8499] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 210.628589][ T8547] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 210.646455][ T8545] netlink: 'syz.4.734': attribute type 21 has an invalid length. [ 210.691749][ T8549] tipc: Enabled bearer , priority 0 [ 210.703342][ T8549] syzkaller0: entered promiscuous mode [ 210.709123][ T8549] syzkaller0: entered allmulticast mode [ 210.786742][ T8549] tipc: Resetting bearer [ 210.824283][ T8554] macvtap1: entered promiscuous mode [ 210.830165][ T8554] vlan0: entered promiscuous mode [ 210.836790][ T8554] macvtap1: entered allmulticast mode [ 210.843625][ T8554] vlan0: entered allmulticast mode [ 210.865038][ T8554] vlan0: left allmulticast mode [ 210.870688][ T8554] vlan0: left promiscuous mode [ 210.907566][ T8548] tipc: Resetting bearer [ 210.936278][ T8548] tipc: Disabling bearer [ 211.137405][ T8573] openvswitch: netlink: IP tunnel TTL not specified. [ 211.375180][ T8592] netlink: 'syz.1.749': attribute type 1 has an invalid length. [ 211.804318][ T5854] Bluetooth: hci3: command 0x0406 tx timeout [ 211.804450][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 211.810570][ T5854] Bluetooth: hci2: command 0x0401 tx timeout [ 213.254610][ T8575] vlan2: entered allmulticast mode [ 213.259971][ T8575] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 213.268495][ T8576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.303409][ T8576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.591106][ T8620] FAULT_INJECTION: forcing a failure. [ 213.591106][ T8620] name failslab, interval 1, probability 0, space 0, times 0 [ 213.616442][ T8620] CPU: 0 UID: 0 PID: 8620 Comm: syz.4.752 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 213.616474][ T8620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.616488][ T8620] Call Trace: [ 213.616496][ T8620] [ 213.616506][ T8620] dump_stack_lvl+0x189/0x250 [ 213.616539][ T8620] ? __pfx____ratelimit+0x10/0x10 [ 213.616562][ T8620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.616588][ T8620] ? __pfx__printk+0x10/0x10 [ 213.616614][ T8620] ? ___sys_sendmsg+0x21f/0x2a0 [ 213.616647][ T8620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.616689][ T8620] should_fail_ex+0x414/0x560 [ 213.616719][ T8620] should_failslab+0xa8/0x100 [ 213.616755][ T8620] __kmalloc_noprof+0xcb/0x4f0 [ 213.616785][ T8620] ? ___neigh_create+0x6d5/0x2260 [ 213.616817][ T8620] ___neigh_create+0x6d5/0x2260 [ 213.616873][ T8620] ip_neigh_gw4+0x289/0x3b0 [ 213.616903][ T8620] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 213.616940][ T8620] ip_finish_output2+0x57a/0x1160 [ 213.616974][ T8620] ? ip_finish_output2+0x452/0x1160 [ 213.617002][ T8620] ? __pfx_ip_finish_output2+0x10/0x10 [ 213.617024][ T8620] ? ip_skb_dst_mtu+0x147/0xc50 [ 213.617044][ T8620] ? ip_skb_dst_mtu+0x147/0xc50 [ 213.617067][ T8620] ? ip_skb_dst_mtu+0x970/0xc50 [ 213.617093][ T8620] ? ip_finish_output+0x33a/0x3f0 [ 213.617117][ T8620] ? __ip_queue_xmit+0x63/0x1b00 [ 213.617137][ T8620] __ip_queue_xmit+0x1101/0x1b00 [ 213.617166][ T8620] ? __ip_queue_xmit+0x63/0x1b00 [ 213.617195][ T8620] l2tp_ip_sendmsg+0x663/0x1630 [ 213.617219][ T8620] ? l2tp_ip_sendmsg+0x43e/0x1630 [ 213.617253][ T8620] __sock_sendmsg+0x19c/0x270 [ 213.617283][ T8620] ____sys_sendmsg+0x52d/0x830 [ 213.617324][ T8620] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.617369][ T8620] ? import_iovec+0x74/0xa0 [ 213.617404][ T8620] ___sys_sendmsg+0x21f/0x2a0 [ 213.617440][ T8620] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.617521][ T8620] ? __fget_files+0x2a/0x420 [ 213.617540][ T8620] ? __fget_files+0x3a0/0x420 [ 213.617573][ T8620] __sys_sendmmsg+0x227/0x430 [ 213.617615][ T8620] ? __pfx___sys_sendmmsg+0x10/0x10 [ 213.617646][ T8620] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 213.617712][ T8620] ? ksys_write+0x22a/0x250 [ 213.617745][ T8620] ? __pfx_ksys_write+0x10/0x10 [ 213.617772][ T8620] ? rcu_is_watching+0x15/0xb0 [ 213.617807][ T8620] __x64_sys_sendmmsg+0xa0/0xc0 [ 213.617844][ T8620] do_syscall_64+0xfa/0x3b0 [ 213.617867][ T8620] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.617889][ T8620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.617910][ T8620] ? clear_bhb_loop+0x60/0xb0 [ 213.617939][ T8620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.617960][ T8620] RIP: 0033:0x7f923378e929 [ 213.617980][ T8620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.617999][ T8620] RSP: 002b:00007f923462d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 213.618023][ T8620] RAX: ffffffffffffffda RBX: 00007f92339b5fa0 RCX: 00007f923378e929 [ 213.618039][ T8620] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 213.618053][ T8620] RBP: 00007f923462d090 R08: 0000000000000000 R09: 0000000000000000 [ 213.618066][ T8620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.618079][ T8620] R13: 0000000000000000 R14: 00007f92339b5fa0 R15: 00007fff7775ce28 [ 213.618114][ T8620] [ 213.707311][ T8624] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 213.996589][ T8639] tipc: Enabling of bearer rejected, already enabled [ 214.068456][ T8639] tipc: Resetting bearer [ 214.169333][ T8642] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 214.199992][ T8645] tc_dump_action: action bad kind [ 214.261344][ T8648] __nla_validate_parse: 19 callbacks suppressed [ 214.261365][ T8648] netlink: 36 bytes leftover after parsing attributes in process `syz.3.759'. [ 214.297108][ T8650] netlink: 68 bytes leftover after parsing attributes in process `syz.0.760'. [ 214.416293][ T8654] ip6tnl1: entered allmulticast mode [ 214.508972][ T8657] xt_CT: No such helper "snmp" [ 214.547974][ T8657] openvswitch: netlink: Key type 12048 is out of range max 32 [ 214.650784][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'. [ 214.672999][ T8669] v: renamed from ip6_vti0 (while UP) [ 214.884573][ T8678] netlink: 204 bytes leftover after parsing attributes in process `syz.1.769'. [ 214.974609][ T8682] netlink: 'syz.2.771': attribute type 10 has an invalid length. [ 215.104496][ T8682] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 215.119008][ T8695] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 215.125022][ T8679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.358832][ T8703] sctp: [Deprecated]: syz.4.776 (pid 8703) Use of int in maxseg socket option. [ 215.358832][ T8703] Use struct sctp_assoc_value instead [ 215.377974][ T8705] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 215.401807][ T8705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.777'. [ 215.525456][ T8710] netlink: 'syz.0.780': attribute type 29 has an invalid length. [ 215.641659][ T8710] netlink: 'syz.0.780': attribute type 29 has an invalid length. [ 215.858439][ T8722] netlink: 'syz.0.784': attribute type 21 has an invalid length. [ 215.891405][ T8722] netlink: 128 bytes leftover after parsing attributes in process `syz.0.784'. [ 215.900507][ T8722] netlink: 3 bytes leftover after parsing attributes in process `syz.0.784'. [ 216.227953][ T8745] lo speed is unknown, defaulting to 1000 [ 216.257581][ T8737] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 216.741520][ T8758] rdma_rxe: rxe_newlink: failed to add lo [ 216.853689][ T8783] IPv6: sit1: Disabled Multicast RS [ 216.866610][ T8783] sit1: entered allmulticast mode [ 217.519468][ T8807] netlink: 48 bytes leftover after parsing attributes in process `syz.3.809'. [ 217.981310][ T8833] syz0: rxe_newlink: already configured on lo [ 218.216801][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 218.367698][ T8861] openvswitch: netlink: IP tunnel dst address not specified [ 218.383570][ T8863] openvswitch: netlink: IP tunnel dst address not specified [ 218.445518][ T8864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 218.493636][ T8867] gretap1: entered promiscuous mode [ 218.500982][ T8867] gretap1: entered allmulticast mode [ 218.545685][ T8867] veth3: entered allmulticast mode [ 219.001343][ T1152] wlan1: Trigger new scan to find an IBSS to join [ 219.046903][ T8889] Set syz1 is full, maxelem 65536 reached [ 219.154698][ T8894] C: renamed from team_slave_0 (while UP) [ 219.173759][ T8894] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 219.182456][ T8894] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 219.203876][ T8901] netlink: 'syz.4.837': attribute type 5 has an invalid length. [ 219.394531][ T8909] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 219.434026][ T8909] __nla_validate_parse: 6 callbacks suppressed [ 219.434047][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 219.635879][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 219.734563][ T8929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.172322][ T8945] netlink: 240 bytes leftover after parsing attributes in process `syz.0.851'. [ 220.559568][ T9] IPVS: starting estimator thread 0... [ 220.661104][ T8959] IPVS: using max 24 ests per chain, 57600 per kthread [ 220.670661][ T8963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.679032][ T8963] IPv6: NLM_F_CREATE should be set when creating new route [ 221.024389][ T8975] batadv1: entered allmulticast mode [ 221.174830][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 221.200933][ T8987] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 221.215738][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 221.244174][ T8987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.864'. [ 221.244517][ T8993] netlink: 36 bytes leftover after parsing attributes in process `syz.4.865'. [ 221.268137][ T8987] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 221.384474][ T8998] netlink: 72 bytes leftover after parsing attributes in process `syz.3.868'. [ 221.456650][ T9005] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.486889][ T9005] netlink: 'syz.4.870': attribute type 6 has an invalid length. [ 221.617106][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'. [ 221.923118][ T9033] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 221.971900][ T9033] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 221.988011][ T9033] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 221.999275][ T9033] geneve2: entered promiscuous mode [ 222.007710][ T9033] geneve2: entered allmulticast mode [ 222.016159][ T9038] netlink: 'syz.2.876': attribute type 11 has an invalid length. [ 222.025691][ T9038] netlink: 224 bytes leftover after parsing attributes in process `syz.2.876'. [ 222.139155][ T9042] netlink: 'syz.2.876': attribute type 11 has an invalid length. [ 222.158514][ T9042] netlink: 'syz.2.876': attribute type 11 has an invalid length. [ 222.624284][ T9065] netlink: 'syz.2.886': attribute type 1 has an invalid length. [ 222.759196][ T9075] bond4: entered promiscuous mode [ 222.834992][ T9075] bond4: entered allmulticast mode [ 222.859423][ T9075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 222.924622][ T9065] ip6gretap1: entered promiscuous mode [ 222.944462][ T9065] ip6gretap1: entered allmulticast mode [ 222.955873][ T9065] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 222.987352][ T1087] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 223.112417][ T9093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.144450][ T59] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 223.196669][ T9097] netlink: 'syz.2.895': attribute type 11 has an invalid length. [ 223.540436][ T9115] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 223.735775][ T9126] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20003 [ 223.741686][ T9127] netlink: 'syz.1.904': attribute type 11 has an invalid length. [ 223.801013][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 223.968707][ T59] wlan1: Trigger new scan to find an IBSS to join [ 224.091293][ T9147] sctp: [Deprecated]: syz.1.911 (pid 9147) Use of int in max_burst socket option. [ 224.091293][ T9147] Use struct sctp_assoc_value instead [ 224.134654][ T9147] sctp: [Deprecated]: syz.1.911 (pid 9147) Use of int in max_burst socket option deprecated. [ 224.134654][ T9147] Use struct sctp_assoc_value instead [ 224.937738][ T13] wlan1: Creating new IBSS network, BSSID fa:7a:76:5b:f5:9b [ 225.188468][ T9181] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 225.210058][ T9181] __nla_validate_parse: 6 callbacks suppressed [ 225.210080][ T9181] netlink: 232 bytes leftover after parsing attributes in process `syz.2.924'. [ 225.296589][ T9187] netlink: 'syz.3.926': attribute type 24 has an invalid length. [ 225.409869][ T9194] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 225.420249][ T9194] netlink: 244 bytes leftover after parsing attributes in process `syz.1.929'. [ 226.240076][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.4.940'. [ 226.355599][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'. [ 226.496018][ T9244] netlink: 'syz.1.946': attribute type 8 has an invalid length. [ 227.861328][ T9237] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 228.259581][ T9267] netlink: 48 bytes leftover after parsing attributes in process `syz.3.952'. [ 228.271613][ T9264] block nbd1: server does not support multiple connections per device. [ 228.301438][ T9264] block nbd1: shutting down sockets [ 228.343579][ T9264] lo: renamed from C [ 228.396381][ T9264] lo: entered allmulticast mode [ 228.706971][ T9296] block nbd1: Unsupported socket: shutdown callout must be supported. [ 228.754653][ T9298] netlink: 'syz.1.962': attribute type 2 has an invalid length. [ 228.967060][ T9314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.965'. [ 229.145931][ T9322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.970'. [ 229.455739][ T9335] netlink: 'syz.2.974': attribute type 12 has an invalid length. [ 229.464558][ T9335] netlink: 'syz.2.974': attribute type 29 has an invalid length. [ 229.477274][ T9335] netlink: 148 bytes leftover after parsing attributes in process `syz.2.974'. [ 229.490769][ T9335] netlink: 51 bytes leftover after parsing attributes in process `syz.2.974'. [ 229.616587][ T9342] tipc: Enabling of bearer rejected, failed to enable media [ 229.666274][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 230.124216][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032c3e400: rx timeout, send abort [ 230.558434][ T9371] netlink: 'syz.3.984': attribute type 8 has an invalid length. [ 230.633709][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032c3e400: abort rx timeout. Force session deactivation [ 230.747632][ T9378] delete_channel: no stack [ 230.898909][ T9387] __nla_validate_parse: 1 callbacks suppressed [ 230.898929][ T9387] netlink: 256 bytes leftover after parsing attributes in process `syz.3.988'. [ 231.207892][ T9396] netlink: 24 bytes leftover after parsing attributes in process `syz.0.992'. [ 231.354289][ T9403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.542095][ T9413] pimreg3: entered allmulticast mode [ 232.039960][ T9440] netlink: 'syz.2.1001': attribute type 1 has an invalid length. [ 232.073967][ T9440] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1001'. [ 232.299361][ T9454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1006'. [ 232.798133][ T9480] Cannot find map_set index 65532 as target [ 232.841956][ T9481] xt_policy: output policy not valid in PREROUTING and INPUT [ 232.857901][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1013'. [ 232.909772][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 232.916597][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 232.923216][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 233.088451][ T9491] netlink: 'syz.3.1016': attribute type 58 has an invalid length. [ 233.108264][ T9495] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1017'. [ 233.113054][ T9491] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1016'. [ 233.622947][ T9517] lo speed is unknown, defaulting to 1000 [ 233.647826][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 233.678077][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 233.679735][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff8880586d5400: rx timeout, send abort [ 234.196736][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff8880586d5400: abort rx timeout. Force session deactivation [ 234.281424][ T9543] netlink: 'syz.2.1032': attribute type 11 has an invalid length. [ 234.719268][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1037'. [ 234.810319][ T9561] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 235.069597][ T9566] netlink: 'syz.1.1042': attribute type 4 has an invalid length. [ 235.357755][ T9576] bridge_slave_0: left allmulticast mode [ 235.383350][ T9576] bridge_slave_0: left promiscuous mode [ 235.420216][ T9576] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.463866][ T9576] bridge_slave_1: left allmulticast mode [ 235.476966][ T9576] bridge_slave_1: left promiscuous mode [ 235.488157][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.505761][ T9576] bond0: (slave bond_slave_0): Releasing backup interface [ 235.517032][ T9576] bond0: (slave bond_slave_1): Releasing backup interface [ 235.538917][ T9576] team0: Port device team_slave_0 removed [ 235.544804][ T9588] netlink: 'syz.1.1047': attribute type 11 has an invalid length. [ 235.544846][ T9588] netlink: 'syz.1.1047': attribute type 11 has an invalid length. [ 235.746474][ T9576] team0: Port device team_slave_1 removed [ 235.756241][ T9576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.771109][ T9576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.897220][ T9576] team0: Port device geneve0 removed [ 235.907856][ T9576] bond0: (slave geneve1): Releasing backup interface [ 235.919599][ T9576] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.929260][ T9576] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.938336][ T9576] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.953287][ T9576] bond0: (slave wlan1): Releasing backup interface [ 236.120451][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.146028][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.577590][ T9622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.694355][ T9630] __nla_validate_parse: 67 callbacks suppressed [ 236.694376][ T9630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1060'. [ 237.340483][ T9642] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1063'. [ 237.476661][ T9639] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 237.878163][ T9664] sctp: [Deprecated]: syz.1.1069 (pid 9664) Use of int in max_burst socket option. [ 237.878163][ T9664] Use struct sctp_assoc_value instead [ 237.879600][ T9659] syzkaller0: entered promiscuous mode [ 237.908928][ T9659] syzkaller0: entered allmulticast mode [ 237.912705][ T9665] netlink: 'syz.2.1066': attribute type 4 has an invalid length. [ 237.994897][ T9667] bridge0: entered allmulticast mode [ 238.022928][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 238.027967][ T9669] tipc: Enabled bearer , priority 0 [ 238.059524][ T9669] netlink: 'syz.4.1070': attribute type 2 has an invalid length. [ 238.498333][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 238.527760][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1076'. [ 238.631698][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 238.705699][ T9702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1079'. [ 238.830001][ T9704] sctp: [Deprecated]: syz.3.1079 (pid 9704) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.830001][ T9704] Use struct sctp_sack_info instead [ 240.167321][ T9700] vlan0: entered allmulticast mode [ 240.177336][ T9700] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 240.350517][ T9712] netlink: 'syz.0.1080': attribute type 33 has an invalid length. [ 240.375940][ T9712] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1080'. [ 240.441067][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.457431][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1084'. [ 240.575273][ T9726] netlink: 'syz.0.1085': attribute type 13 has an invalid length. [ 240.685054][ T9734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1086'. [ 240.850581][ T9726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.280007][ T9759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.313276][ T9766] netlink: 'syz.3.1095': attribute type 10 has an invalid length. [ 241.333382][ T9759] bond0: (slave rose0): Enslaving as an active interface with an up link [ 241.391653][ T9759] nbd: must specify an index to disconnect [ 241.410155][ T9766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.437948][ T9759] netlink: 'syz.3.1095': attribute type 10 has an invalid length. [ 241.479354][ T9766] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 241.503991][ T9759] batadv0: entered promiscuous mode [ 241.516582][ T9759] batadv0: entered allmulticast mode [ 241.548057][ T9759] bond0: (slave batadv0): Releasing backup interface [ 241.572360][ T9759] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 241.774779][ T9783] __nla_validate_parse: 4 callbacks suppressed [ 241.774801][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 241.803910][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 241.818165][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 241.867802][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 242.030727][ T9796] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1103'. [ 242.254332][ T9804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.293416][ T9806] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1105'. [ 242.526680][ T9813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1108'. [ 242.558147][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 242.748974][ T9825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1111'. [ 242.763860][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1110'. [ 242.793849][ T9828] netlink: 'syz.4.1110': attribute type 1 has an invalid length. [ 243.225166][ T9853] hsr_slave_0: left promiscuous mode [ 243.249999][ T9853] hsr_slave_1: left promiscuous mode [ 243.545261][ T59] nci: nci_rx_work: unknown MT 0x6 [ 243.583787][ T9866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.806733][ T9885] netlink: 'syz.2.1124': attribute type 39 has an invalid length. [ 244.075565][ T9890] lo speed is unknown, defaulting to 1000 [ 244.082972][ T9890] lo speed is unknown, defaulting to 1000 [ 244.090012][ T9890] lo speed is unknown, defaulting to 1000 [ 244.137788][ T9890] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 244.179124][ T9897] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 244.179321][ T24] IPVS: starting estimator thread 0... [ 244.214871][ T9890] lo speed is unknown, defaulting to 1000 [ 244.223287][ T9890] lo speed is unknown, defaulting to 1000 [ 244.245226][ T9890] lo speed is unknown, defaulting to 1000 [ 244.257683][ T9890] lo speed is unknown, defaulting to 1000 [ 244.298393][ T9890] lo speed is unknown, defaulting to 1000 [ 244.311101][ T9903] IPVS: using max 25 ests per chain, 60000 per kthread [ 245.013194][ T36] wlan1: Trigger new scan to find an IBSS to join [ 245.124742][ T9935] netlink: 'syz.3.1136': attribute type 2 has an invalid length. [ 245.827577][ T9967] rdma_rxe: rxe_newlink: failed to add lo [ 245.953062][ T9980] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 245.975469][ T9980] team0: Port device batadv1 added [ 246.222568][T10000] FAULT_INJECTION: forcing a failure. [ 246.222568][T10000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.253793][T10000] CPU: 0 UID: 0 PID: 10000 Comm: syz.1.1154 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 246.253826][T10000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.253840][T10000] Call Trace: [ 246.253848][T10000] [ 246.253858][T10000] dump_stack_lvl+0x189/0x250 [ 246.253890][T10000] ? __pfx____ratelimit+0x10/0x10 [ 246.253913][T10000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.253940][T10000] ? __pfx__printk+0x10/0x10 [ 246.253970][T10000] ? __might_fault+0xb0/0x130 [ 246.254014][T10000] should_fail_ex+0x414/0x560 [ 246.254041][T10000] _copy_from_user+0x2d/0xb0 [ 246.254073][T10000] ___sys_sendmsg+0x158/0x2a0 [ 246.254110][T10000] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.254182][T10000] ? __fget_files+0x2a/0x420 [ 246.254201][T10000] ? __fget_files+0x3a0/0x420 [ 246.254233][T10000] __x64_sys_sendmsg+0x19b/0x260 [ 246.254269][T10000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.254313][T10000] ? __pfx_ksys_write+0x10/0x10 [ 246.254340][T10000] ? rcu_is_watching+0x15/0xb0 [ 246.254372][T10000] ? do_syscall_64+0xbe/0x3b0 [ 246.254401][T10000] do_syscall_64+0xfa/0x3b0 [ 246.254423][T10000] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.254444][T10000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.254471][T10000] ? clear_bhb_loop+0x60/0xb0 [ 246.254497][T10000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.254518][T10000] RIP: 0033:0x7f933f78e929 [ 246.254538][T10000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.254555][T10000] RSP: 002b:00007f9340636038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.254578][T10000] RAX: ffffffffffffffda RBX: 00007f933f9b5fa0 RCX: 00007f933f78e929 [ 246.254594][T10000] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 246.254607][T10000] RBP: 00007f9340636090 R08: 0000000000000000 R09: 0000000000000000 [ 246.254620][T10000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.254633][T10000] R13: 0000000000000000 R14: 00007f933f9b5fa0 R15: 00007fff83a05ae8 [ 246.254667][T10000] [ 246.847236][T10014] netlink: 'syz.2.1158': attribute type 39 has an invalid length. [ 246.918240][T10023] netlink: 'syz.2.1158': attribute type 39 has an invalid length. [ 247.293621][T10043] FAULT_INJECTION: forcing a failure. [ 247.293621][T10043] name failslab, interval 1, probability 0, space 0, times 0 [ 247.310544][T10043] CPU: 0 UID: 0 PID: 10043 Comm: syz.2.1167 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 247.310577][T10043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.310590][T10043] Call Trace: [ 247.310599][T10043] [ 247.310608][T10043] dump_stack_lvl+0x189/0x250 [ 247.310640][T10043] ? __pfx____ratelimit+0x10/0x10 [ 247.310661][T10043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.310692][T10043] ? __pfx__printk+0x10/0x10 [ 247.310728][T10043] ? __pfx___might_resched+0x10/0x10 [ 247.310759][T10043] should_fail_ex+0x414/0x560 [ 247.310791][T10043] should_failslab+0xa8/0x100 [ 247.310825][T10043] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 247.310856][T10043] ? __alloc_skb+0x112/0x2d0 [ 247.310891][T10043] __alloc_skb+0x112/0x2d0 [ 247.310926][T10043] netlink_sendmsg+0x5c6/0xb30 [ 247.310968][T10043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.310999][T10043] ? aa_sock_msg_perm+0x94/0x160 [ 247.311023][T10043] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.311046][T10043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.311077][T10043] __sock_sendmsg+0x21c/0x270 [ 247.311106][T10043] ____sys_sendmsg+0x505/0x830 [ 247.311146][T10043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.311190][T10043] ? import_iovec+0x74/0xa0 [ 247.311225][T10043] ___sys_sendmsg+0x21f/0x2a0 [ 247.311261][T10043] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.311336][T10043] ? __fget_files+0x2a/0x420 [ 247.311355][T10043] ? __fget_files+0x3a0/0x420 [ 247.311387][T10043] __x64_sys_sendmsg+0x19b/0x260 [ 247.311424][T10043] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.311469][T10043] ? __pfx_ksys_write+0x10/0x10 [ 247.311506][T10043] ? do_syscall_64+0xbe/0x3b0 [ 247.311534][T10043] do_syscall_64+0xfa/0x3b0 [ 247.311557][T10043] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.311578][T10043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.311600][T10043] ? clear_bhb_loop+0x60/0xb0 [ 247.311626][T10043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.311647][T10043] RIP: 0033:0x7f952018e929 [ 247.311667][T10043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.311691][T10043] RSP: 002b:00007f952109c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.311713][T10043] RAX: ffffffffffffffda RBX: 00007f95203b5fa0 RCX: 00007f952018e929 [ 247.311728][T10043] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 247.311741][T10043] RBP: 00007f952109c090 R08: 0000000000000000 R09: 0000000000000000 [ 247.311754][T10043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.311766][T10043] R13: 0000000000000000 R14: 00007f95203b5fa0 R15: 00007ffe640930e8 [ 247.311800][T10043] [ 247.757074][T10051] netlink: 'syz.1.1170': attribute type 10 has an invalid length. [ 247.777397][T10062] __nla_validate_parse: 7 callbacks suppressed [ 247.777417][T10062] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1173'. [ 247.790673][T10051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1170'. [ 247.798635][T10062] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1173'. [ 247.915070][T10059] lo speed is unknown, defaulting to 1000 [ 247.926084][T10051] dummy0: entered promiscuous mode [ 247.934604][T10051] bridge0: port 4(dummy0) entered blocking state [ 247.947243][T10051] bridge0: port 4(dummy0) entered disabled state [ 247.954992][T10051] dummy0: entered allmulticast mode [ 248.001349][T10051] bridge0: port 4(dummy0) entered blocking state [ 248.008134][T10051] bridge0: port 4(dummy0) entered forwarding state [ 248.035422][T10065] syzkaller1: entered promiscuous mode [ 248.062071][T10065] syzkaller1: entered allmulticast mode [ 248.391026][T10059] lo speed is unknown, defaulting to 1000 [ 248.434379][T10092] netlink: 'syz.1.1182': attribute type 3 has an invalid length. [ 248.450846][T10092] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1182'. [ 249.102836][T10114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1189'. [ 249.213449][T10126] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 249.249859][T10126] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 249.260562][T10126] gretap2: entered promiscuous mode [ 249.266254][T10126] gretap2: entered allmulticast mode [ 249.278152][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 249.285537][T10129] openvswitch: netlink: IP tunnel TTL not specified. [ 249.346295][T10129] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 249.455526][T10134] rdma_rxe: rxe_newlink: failed to add lo [ 249.667651][T10151] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 249.962002][ T36] wlan1: Trigger new scan to find an IBSS to join [ 250.071463][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 250.622604][T10184] netlink: 'syz.2.1206': attribute type 11 has an invalid length. [ 250.632010][T10184] netlink: 'syz.2.1206': attribute type 12 has an invalid length. [ 250.639905][T10184] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1206'. [ 250.870574][T10195] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1213'. [ 250.978290][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.518007][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 251.722478][ T5167] Bluetooth: hci1: command 0x0406 tx timeout [ 251.961219][ T5167] Bluetooth: hci2: command 0x0401 tx timeout [ 252.102743][T10262] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 252.109490][T10262] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 252.533937][T10288] tipc: Invalid UDP bearer configuration [ 252.534006][T10288] tipc: Enabling of bearer rejected, failed to enable media [ 252.609143][T10291] netlink: 'syz.1.1240': attribute type 8 has an invalid length. [ 252.945039][T10311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.970525][T10308] __nla_validate_parse: 8 callbacks suppressed [ 252.970657][T10308] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1245'. [ 252.994329][T10311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 253.030288][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 253.033675][T10311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1246'. [ 253.084874][T10316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1248'. [ 253.189134][T10316] IPVS: Unknown mcast interface: vcan0 [ 253.207047][T10322] netlink: 'syz.0.1250': attribute type 39 has an invalid length. [ 253.672089][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1255'. [ 253.700966][T10341] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 253.719087][T10341] netlink: 'syz.4.1255': attribute type 1 has an invalid length. [ 253.757399][T10341] netlink: 'syz.4.1255': attribute type 2 has an invalid length. [ 253.777479][T10341] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1255'. [ 253.881022][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 253.975219][T10361] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1259'. [ 253.994671][T10355] netlink: 'syz.4.1258': attribute type 2 has an invalid length. [ 254.551123][ T9] IPVS: starting estimator thread 0... [ 254.581405][T10383] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1265'. [ 254.597578][T10383] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1265'. [ 254.637770][T10379] xt_hashlimit: overflow, rate too high: 0 [ 254.641307][T10382] IPVS: using max 25 ests per chain, 60000 per kthread [ 254.952150][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.187757][T10408] x_tables: duplicate underflow at hook 3 [ 256.981471][T10394] vlan2: entered allmulticast mode [ 256.986681][T10394] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 257.387648][T10436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.717259][T10454] lo: entered allmulticast mode [ 257.773643][ T5934] lo speed is unknown, defaulting to 1000 [ 257.779931][ T5934] syz0: Port: 1 Link DOWN [ 257.878593][ T9] lo speed is unknown, defaulting to 1000 [ 258.539634][T10508] netlink: 'syz.0.1296': attribute type 10 has an invalid length. [ 258.558823][T10503] __nla_validate_parse: 4 callbacks suppressed [ 258.558865][T10503] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1294'. [ 258.592533][T10509] nbd: must specify a device to reconfigure [ 258.650638][T10508] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 258.968935][T10521] netlink: 'syz.1.1301': attribute type 10 has an invalid length. [ 258.982861][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'. [ 258.983580][T10525] netlink: 'syz.2.1303': attribute type 13 has an invalid length. [ 259.013593][T10525] netlink: 'syz.2.1303': attribute type 58 has an invalid length. [ 259.029126][T10525] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1303'. [ 259.234349][T10537] netlink: 'syz.2.1305': attribute type 2 has an invalid length. [ 259.274995][T10536] ip6tnl0: mtu less than device minimum [ 259.395242][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 259.413671][T10544] FAULT_INJECTION: forcing a failure. [ 259.413671][T10544] name failslab, interval 1, probability 0, space 0, times 0 [ 259.438022][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.3.1308 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 259.438056][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.438070][T10544] Call Trace: [ 259.438078][T10544] [ 259.438088][T10544] dump_stack_lvl+0x189/0x250 [ 259.438120][T10544] ? __pfx____ratelimit+0x10/0x10 [ 259.438143][T10544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.438169][T10544] ? __pfx__printk+0x10/0x10 [ 259.438196][T10544] ? xfrm_dump_sa+0x1c2/0x530 [ 259.438243][T10544] should_fail_ex+0x414/0x560 [ 259.438272][T10544] should_failslab+0xa8/0x100 [ 259.438308][T10544] kmem_cache_alloc_noprof+0x73/0x3c0 [ 259.438338][T10544] ? skb_clone+0x212/0x3a0 [ 259.438364][T10544] skb_clone+0x212/0x3a0 [ 259.438390][T10544] __netlink_deliver_tap+0x404/0x850 [ 259.438436][T10544] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.438468][T10544] netlink_deliver_tap+0x19c/0x1b0 [ 259.438500][T10544] netlink_dump+0x91c/0xe60 [ 259.438551][T10544] ? __pfx_netlink_dump+0x10/0x10 [ 259.438595][T10544] ? netlink_lookup+0x30/0x200 [ 259.438623][T10544] ? netlink_lookup+0x30/0x200 [ 259.438648][T10544] ? netlink_lookup+0x30/0x200 [ 259.438683][T10544] __netlink_dump_start+0x5cb/0x7e0 [ 259.438723][T10544] xfrm_user_rcv_msg+0x42f/0xab0 [ 259.438761][T10544] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 259.438831][T10544] ? __mutex_trylock_common+0x153/0x260 [ 259.438865][T10544] ? __pfx_xfrm_dump_sa+0x10/0x10 [ 259.438892][T10544] ? __pfx_xfrm_dump_sa_done+0x10/0x10 [ 259.438925][T10544] ? rcu_is_watching+0x15/0xb0 [ 259.438951][T10544] ? trace_contention_end+0x39/0x120 [ 259.438988][T10544] netlink_rcv_skb+0x208/0x470 [ 259.439019][T10544] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 259.439052][T10544] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.439108][T10544] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.439138][T10544] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.439171][T10544] xfrm_netlink_rcv+0x79/0x90 [ 259.439201][T10544] netlink_unicast+0x759/0x8e0 [ 259.439242][T10544] netlink_sendmsg+0x805/0xb30 [ 259.439284][T10544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.439319][T10544] ? aa_sock_msg_perm+0x94/0x160 [ 259.439345][T10544] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 259.439368][T10544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.439400][T10544] __sock_sendmsg+0x21c/0x270 [ 259.439430][T10544] ____sys_sendmsg+0x505/0x830 [ 259.439470][T10544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.439515][T10544] ? import_iovec+0x74/0xa0 [ 259.439556][T10544] ___sys_sendmsg+0x21f/0x2a0 [ 259.439593][T10544] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.439671][T10544] ? __fget_files+0x2a/0x420 [ 259.439689][T10544] ? __fget_files+0x3a0/0x420 [ 259.439723][T10544] __x64_sys_sendmsg+0x19b/0x260 [ 259.439760][T10544] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 259.439806][T10544] ? __pfx_ksys_write+0x10/0x10 [ 259.439833][T10544] ? rcu_is_watching+0x15/0xb0 [ 259.439866][T10544] ? do_syscall_64+0xbe/0x3b0 [ 259.439894][T10544] do_syscall_64+0xfa/0x3b0 [ 259.439916][T10544] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.439938][T10544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.439959][T10544] ? clear_bhb_loop+0x60/0xb0 [ 259.439987][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.440008][T10544] RIP: 0033:0x7f5e2058e929 [ 259.440028][T10544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.440048][T10544] RSP: 002b:00007f5e21374038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.440070][T10544] RAX: ffffffffffffffda RBX: 00007f5e207b5fa0 RCX: 00007f5e2058e929 [ 259.440087][T10544] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 259.440101][T10544] RBP: 00007f5e21374090 R08: 0000000000000000 R09: 0000000000000000 [ 259.440115][T10544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.440128][T10544] R13: 0000000000000000 R14: 00007f5e207b5fa0 R15: 00007ffde2620898 [ 259.440164][T10544] [ 260.111683][T10553] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1312'. [ 260.167056][T10556] rdma_rxe: rxe_newlink: failed to add lo [ 260.438483][T10571] netlink: 'syz.1.1316': attribute type 27 has an invalid length. [ 260.759378][T10581] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1319'. [ 261.129623][T10602] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1326'. [ 261.187321][T10604] netlink: 'syz.3.1328': attribute type 11 has an invalid length. [ 261.196847][T10604] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1328'. [ 261.706787][T10630] sock: sock_timestamping_bind_phc: sock not bind to device [ 262.118838][T10651] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1341'. [ 262.135822][T10651] TCP: TCP_TX_DELAY enabled [ 262.255910][T10657] netlink: 'syz.1.1344': attribute type 8 has an invalid length. [ 262.272707][T10659] rdma_rxe: rxe_newlink: failed to add lo [ 262.576784][T10681] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1351'. [ 262.594956][T10679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.702829][T10719] netlink: 'syz.3.1361': attribute type 58 has an invalid length. [ 263.746249][T10719] __nla_validate_parse: 4 callbacks suppressed [ 263.746281][T10719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1361'. [ 263.766668][T10722] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1361'. [ 263.837308][T10722] sctp: [Deprecated]: syz.3.1361 (pid 10722) Use of int in max_burst socket option. [ 263.837308][T10722] Use struct sctp_assoc_value instead [ 263.881846][T10727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1363'. [ 264.456197][T10750] syzkaller0: entered promiscuous mode [ 264.465280][T10750] syzkaller0: entered allmulticast mode [ 264.626455][T10762] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 264.640700][T10762] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 264.654946][T10762] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 265.242780][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1382'. [ 266.860435][T10802] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1386'. [ 266.887362][T10808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1387'. [ 267.090537][T10821] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1390'. [ 267.220491][T10821] 0ªX¹¦D: renamed from gretap0 (while UP) [ 267.253666][T10821] 0ªX¹¦D: entered allmulticast mode [ 267.259391][T10821] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 267.387590][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 267.522723][T10812] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1388'. [ 267.642396][T10858] nbd: socks must be embedded in a SOCK_ITEM attr [ 267.704095][T10857] dvmrp0: entered allmulticast mode [ 268.083031][T10879] netlink: 'syz.2.1404': attribute type 13 has an invalid length. [ 268.108204][T10879] lo: entered promiscuous mode [ 268.127917][T10879] lo: entered allmulticast mode [ 268.157932][T10879] tunl0: entered promiscuous mode [ 268.187601][T10879] tunl0: entered allmulticast mode [ 268.268074][T10879] gre0: entered promiscuous mode [ 268.291891][T10879] gre0: entered allmulticast mode [ 268.305006][T10879] gretap0: entered promiscuous mode [ 268.322335][T10879] gretap0: entered allmulticast mode [ 268.367132][T10879] gretap0: refused to change device tx_queue_len [ 268.397423][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1404'. [ 268.419352][T10879] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 268.469221][T10902] team0: left allmulticast mode [ 268.474800][T10902] team_slave_0: left allmulticast mode [ 268.490732][T10902] team_slave_1: left allmulticast mode [ 268.501394][T10902] team0: left promiscuous mode [ 268.519915][T10902] team_slave_0: left promiscuous mode [ 268.537703][T10902] team_slave_1: left promiscuous mode [ 268.555571][T10902] bridge0: port 3(team0) entered disabled state [ 268.579776][T10902] bridge_slave_1: left allmulticast mode [ 268.586765][T10902] bridge_slave_1: left promiscuous mode [ 268.594581][T10902] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.609195][T10902] bridge_slave_0: left allmulticast mode [ 268.618890][T10902] bridge_slave_0: left promiscuous mode [ 268.626006][T10902] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.689430][T10902] bond0: (slave bridge0): Releasing backup interface [ 268.796485][T10905] lo speed is unknown, defaulting to 1000 [ 268.888437][T10920] macvtap1: entered promiscuous mode [ 268.919027][T10920] vlan0: entered promiscuous mode [ 268.927941][T10920] macvtap1: entered allmulticast mode [ 268.942885][T10920] vlan0: entered allmulticast mode [ 268.955311][T10920] vlan0: left allmulticast mode [ 268.960546][T10920] vlan0: left promiscuous mode [ 269.210747][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1415'. [ 269.382944][T10937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1417'. [ 269.439518][T10905] lo speed is unknown, defaulting to 1000 [ 269.895462][T10954] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1422'. [ 270.096377][T10968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1428'. [ 270.346980][T10979] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1432'. [ 270.389153][T10977] rdma_rxe: rxe_newlink: failed to add lo [ 270.563307][T10982] hsr0: entered allmulticast mode [ 270.579635][T10982] hsr_slave_0: entered allmulticast mode [ 270.590742][T10982] hsr_slave_1: entered allmulticast mode [ 270.605484][T10994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 270.789750][T10998] netlink: 'syz.1.1437': attribute type 30 has an invalid length. [ 270.807570][T10998] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 270.840147][T10998] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 270.887602][T11002] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1438'. [ 271.075451][T11017] netlink: 'syz.1.1443': attribute type 1 has an invalid length. [ 271.110666][T11012] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 271.207562][T11020] bond4: (slave gretap2): making interface the new active one [ 271.216075][T11020] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 271.618290][T11043] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1450'. [ 271.665819][T11040] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1448'. [ 271.686764][T11043] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1450'. [ 271.696946][T11043] netlink: 'syz.3.1450': attribute type 39 has an invalid length. [ 271.949225][T11052] netlink: 'syz.4.1453': attribute type 8 has an invalid length. [ 272.072500][T11060] netlink: 'syz.0.1456': attribute type 1 has an invalid length. [ 272.177135][T11063] lo speed is unknown, defaulting to 1000 [ 272.400011][T11078] netlink: 'syz.4.1460': attribute type 11 has an invalid length. [ 272.842290][T11102] netlink: 'syz.0.1465': attribute type 29 has an invalid length. [ 273.328270][T11125] IPVS: set_ctl: invalid protocol: 43 172.30.1.3:20007 [ 273.585844][T11063] lo speed is unknown, defaulting to 1000 [ 273.956367][T11161] netlink: 'syz.0.1482': attribute type 5 has an invalid length. [ 274.131211][T11168] netlink: 'syz.4.1485': attribute type 2 has an invalid length. [ 274.139237][T11170] netlink: 'syz.4.1485': attribute type 2 has an invalid length. [ 274.472164][T11182] rdma_rxe: rxe_newlink: failed to add lo [ 274.938250][T11208] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.968713][T11207] __nla_validate_parse: 8 callbacks suppressed [ 274.968738][T11207] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1500'. [ 274.985000][T11208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.992309][T11208] IPv6: NLM_F_CREATE should be set when creating new route [ 274.999637][T11208] IPv6: NLM_F_CREATE should be set when creating new route [ 275.006973][T11208] IPv6: NLM_F_CREATE should be set when creating new route [ 275.280298][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 275.771310][T11238] rdma_rxe: rxe_newlink: failed to add lo [ 275.969351][T11254] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1513'. [ 276.136925][T11264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.151233][T11263] openvswitch: netlink: Message has 168 unknown bytes. [ 276.846327][T11287] validate_nla: 4 callbacks suppressed [ 276.846348][T11287] netlink: 'syz.3.1520': attribute type 1 has an invalid length. [ 276.889003][T11287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1520'. [ 277.057259][T11290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.248341][T11296] siw: device registration error -23 [ 277.261226][T11290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.385776][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 277.395428][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 277.422634][T11294] netlink: 'syz.2.1522': attribute type 20 has an invalid length. [ 277.441868][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 277.468328][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1522'. [ 277.478903][T11294] netlink: 'syz.2.1522': attribute type 20 has an invalid length. [ 277.521259][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 277.668666][T11265] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1511'. [ 277.847112][T11319] !€ÿ: renamed from bond_slave_0 [ 277.954315][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1528'. [ 278.640863][T11352] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 278.663230][T11352] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 278.883982][T11355] xt_CT: No such helper "pptp" [ 279.762227][T11411] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 279.878708][T11411] netlink: 'syz.1.1554': attribute type 10 has an invalid length. [ 279.992131][T11411] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 280.205842][T11433] netlink: 'syz.4.1562': attribute type 1 has an invalid length. [ 280.331337][T11438] __nla_validate_parse: 3 callbacks suppressed [ 280.331357][T11438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 280.354968][T11440] netlink: 'syz.2.1566': attribute type 8 has an invalid length. [ 280.386979][T11443] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 280.513416][T11438] bond0: (slave bridge_slave_1): Releasing backup interface [ 280.794670][T11461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'. [ 280.977588][T11470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1572'. [ 281.169016][T11480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1577'. [ 281.276747][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'. [ 281.380601][T11492] netlink: 'syz.1.1583': attribute type 10 has an invalid length. [ 281.413649][T11492] bridge0: port 3(team0) entered disabled state [ 281.423610][T11492] team0: left allmulticast mode [ 281.428722][T11492] C: left allmulticast mode [ 281.433719][T11492] team_slave_1: left allmulticast mode [ 281.439418][T11492] team0: left promiscuous mode [ 281.448570][T11492] C: left promiscuous mode [ 281.456797][T11492] team_slave_1: left promiscuous mode [ 281.465763][T11492] bridge0: port 3(team0) entered disabled state [ 281.477834][T11492] batman_adv: batadv0: Adding interface: team0 [ 281.490106][T11492] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 281.513351][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1584'. [ 281.518094][T11492] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 281.589153][T11495] tc_dump_action: action bad kind [ 281.699425][T11506] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1587'. [ 281.937977][T11524] IPVS: set_ctl: invalid protocol: 19 172.20.20.187:20002 [ 281.975080][T11527] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 282.033676][T11522] ip6t_srh: unknown srh match flags 4001 [ 282.055913][T11528] pim6reg1: entered promiscuous mode [ 282.101033][T11528] pim6reg1: entered allmulticast mode [ 282.266241][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1600'. [ 282.318737][T11539] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 282.446474][T11546] tipc: Enabling of bearer rejected, already enabled [ 282.525275][T11548] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 282.550007][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 282.559665][T11548] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1603'. [ 282.623582][T11560] sit2: entered promiscuous mode [ 282.637251][T11560] sit2: entered allmulticast mode [ 283.268904][T11589] validate_nla: 2 callbacks suppressed [ 283.268927][T11589] netlink: 'syz.1.1617': attribute type 1 has an invalid length. [ 283.290908][T11589] nbd: couldn't find device at index 1048576 [ 283.617377][T11608] netlink: 'syz.4.1622': attribute type 8 has an invalid length. [ 283.835313][T11622] netlink: 'syz.2.1627': attribute type 11 has an invalid length. [ 284.228425][T11646] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 284.290713][T11642] can: request_module (can-proto-4) failed. [ 284.412055][T11656] netlink: 'syz.4.1638': attribute type 30 has an invalid length. [ 284.556145][T11661] netlink: 'syz.0.1640': attribute type 8 has an invalid length. [ 284.569195][T11656] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.579103][T11656] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.588243][T11656] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.597504][T11656] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.615993][T11656] netlink: 'syz.4.1638': attribute type 30 has an invalid length. [ 285.147375][T11691] rdma_rxe: rxe_newlink: failed to add lo [ 285.526225][T11709] netlink: 'syz.0.1652': attribute type 8 has an invalid length. [ 285.660140][T11718] Cannot find add_set index 1 as target [ 285.978953][T11730] pim6reg1: entered promiscuous mode [ 285.981193][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.999597][T11730] pim6reg1: entered allmulticast mode [ 286.011941][T11734] __nla_validate_parse: 10 callbacks suppressed [ 286.011966][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 286.042587][ T13] ------------[ cut here ]------------ [ 286.071211][T11736] rdma_rxe: rxe_newlink: failed to add lo [ 286.075152][ T13] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 286.130951][ T13] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 286.152206][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 286.152244][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.152259][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 286.152294][ T13] Call Trace: [ 286.152302][ T13] [ 286.152311][ T13] dump_stack_lvl+0x189/0x250 [ 286.152345][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.152373][ T13] ? __pfx__printk+0x10/0x10 [ 286.152420][ T13] ubsan_epilogue+0xa/0x40 [ 286.152452][ T13] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 286.152490][ T13] ieee80211_request_ibss_scan+0x600/0x8b0 [ 286.152530][ T13] ieee80211_ibss_work+0xd85/0x1060 [ 286.152566][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.152591][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 286.152627][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 286.152660][ T13] ? kcov_remote_stop+0x17e/0x6d0 [ 286.152694][ T13] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 286.152736][ T13] ? skb_dequeue+0x10e/0x150 [ 286.152760][ T13] ? ieee80211_iface_work+0xcd4/0xfe0 [ 286.152787][ T13] ? ieee80211_iface_work+0xf39/0xfe0 [ 286.152820][ T13] cfg80211_wiphy_work+0x2dc/0x460 [ 286.152848][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 286.152876][ T13] process_scheduled_works+0xae1/0x17b0 [ 286.152935][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.152977][ T13] worker_thread+0x8a0/0xda0 [ 286.153038][ T13] kthread+0x70e/0x8a0 [ 286.153070][ T13] ? __pfx_worker_thread+0x10/0x10 [ 286.153093][ T13] ? __pfx_kthread+0x10/0x10 [ 286.153124][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.153158][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.153178][ T13] ? __pfx_kthread+0x10/0x10 [ 286.153211][ T13] ret_from_fork+0x3fc/0x770 [ 286.153239][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 286.153270][ T13] ? __switch_to_asm+0x39/0x70 [ 286.153299][ T13] ? __switch_to_asm+0x33/0x70 [ 286.153326][ T13] ? __pfx_kthread+0x10/0x10 [ 286.153358][ T13] ret_from_fork_asm+0x1a/0x30 [ 286.153407][ T13] [ 286.155798][ T13] ---[ end trace ]--- [ 286.416228][ T13] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 286.423516][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc5-syzkaller-00212-g9f735b6f8a77 #0 PREEMPT(full) [ 286.435546][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.445743][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 286.452059][ T13] Call Trace: [ 286.455387][ T13] [ 286.458356][ T13] dump_stack_lvl+0x99/0x250 [ 286.463020][ T13] ? __asan_memcpy+0x40/0x70 [ 286.467853][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.473141][ T13] ? __pfx__printk+0x10/0x10 [ 286.477815][ T13] panic+0x2db/0x790 [ 286.481873][ T13] ? __pfx_panic+0x10/0x10 [ 286.486345][ T13] ? _printk+0xcf/0x120 [ 286.490571][ T13] ? __pfx__printk+0x10/0x10 [ 286.495228][ T13] check_panic_on_warn+0x89/0xb0 [ 286.502325][ T13] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 286.508640][ T13] ieee80211_request_ibss_scan+0x600/0x8b0 [ 286.515220][ T13] ieee80211_ibss_work+0xd85/0x1060 [ 286.520451][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.525712][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 286.532436][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 286.538891][ T13] ? kcov_remote_stop+0x17e/0x6d0 [ 286.544000][ T13] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 286.549695][ T13] ? skb_dequeue+0x10e/0x150 [ 286.554317][ T13] ? ieee80211_iface_work+0xcd4/0xfe0 [ 286.559726][ T13] ? ieee80211_iface_work+0xf39/0xfe0 [ 286.565142][ T13] cfg80211_wiphy_work+0x2dc/0x460 [ 286.570280][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 286.576029][ T13] process_scheduled_works+0xae1/0x17b0 [ 286.581632][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.587760][ T13] worker_thread+0x8a0/0xda0 [ 286.592455][ T13] kthread+0x70e/0x8a0 [ 286.597416][ T13] ? __pfx_worker_thread+0x10/0x10 [ 286.602594][ T13] ? __pfx_kthread+0x10/0x10 [ 286.607222][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.612454][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.617676][ T13] ? __pfx_kthread+0x10/0x10 [ 286.622325][ T13] ret_from_fork+0x3fc/0x770 [ 286.626955][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 286.632403][ T13] ? __switch_to_asm+0x39/0x70 [ 286.637219][ T13] ? __switch_to_asm+0x33/0x70 [ 286.642011][ T13] ? __pfx_kthread+0x10/0x10 [ 286.646638][ T13] ret_from_fork_asm+0x1a/0x30 [ 286.651454][ T13] [ 286.654778][ T13] Kernel Offset: disabled [ 286.659817][ T13] Rebooting in 86400 seconds..