last executing test programs: 16.207641107s ago: executing program 0 (id=2330): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r2, 0x60b, 0x71bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4882}, 0x4080) 15.844157904s ago: executing program 2 (id=2333): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) socketpair(0x10, 0x2, 0x4, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 15.775612935s ago: executing program 2 (id=2334): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000400)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000240)='b', &(0x7f0000000000)=""/1, 0x2}, 0x20) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="182d1000000000000000000000000900000000002020702500000000002020207b1ad7ff000007010000f8ffffffb702000008000000b70300000000000085000000720000009580000000000000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2067000072009fb328bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="08000100feffff7f"], 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x20041040) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000300)=""/145, &(0x7f0000000000)=0x91) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) (async) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[], 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000006c0)=ANY=[], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e0009c9b91c6f0000000000040000000800180002ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e0009c9b91c6f0000000000040000000800180002ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000400c}, 0x4001) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x19}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x19}, @IFLA_BR_HELLO_TIME={0x8, 0x2, 0x5}]}}}]}, 0x44}}, 0x0) 15.614675422s ago: executing program 0 (id=2336): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r2, 0x5452, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x400}) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast1, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@loopback, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r5) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 15.522588208s ago: executing program 2 (id=2338): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x2000018c) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRESOCT=r6, @ANYRES64=r2, @ANYRESOCT=r0, @ANYRES32], 0x70}}, 0x4c081) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x3ef, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000010f7010000000000000000000000000a58000000060a0b0400000000000000000200fffeac11048028000180070001000800024000000011080004400000000c05000300010000000900010073797a3079dce09f1976f0a91138b628f10f000000000000000000807a3200000000140000001100000a000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f00000000c0)=0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={@private0, 0x4037, r10}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000010000108fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="19a904000000000000002b8008000800", @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'macvtap0\x00', {0x3}, 0x3}) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x3, 0xa2}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b8, 0x350, 0xa, 0x148, 0x350, 0x60, 0x420, 0x2a8, 0x2a8, 0x420, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {0xff}}, 0x0, 0x2e0, 0x350, 0x0, {0x200003ae, 0x7f00}, [@common=@set={{0x40}, {{0x0, [0x4, 0x2, 0x0, 0x0, 0x2], 0x1, 0x4}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 'lo\x00', 'syzkaller1\x00', {0xff}, {}, 0x1, 0x3, 0x33}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x0, 0x4, 0x4, 0x5, 0x2], 0x1}, {0x3, [0x4, 0x2, 0x9, 0x4, 0x0, 0x4], 0x5, 0x5}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x518) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003c00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20004000) socket(0x400000000010, 0x3, 0x0) 15.435591566s ago: executing program 0 (id=2339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0xff) getsockopt$sock_int(r1, 0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e0009c9b91c6f0000000000040000000800180002ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 15.131826337s ago: executing program 2 (id=2341): r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x140c, 0x200, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0xc040010}, 0x4800) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x3}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048055}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0xb7, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) 15.105343031s ago: executing program 0 (id=2344): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) socketpair(0x10, 0x2, 0x4, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 14.994759042s ago: executing program 2 (id=2345): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, r1, 0x60b, 0x71bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4882}, 0x4080) 14.984274189s ago: executing program 0 (id=2346): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r2, 0x60b, 0x71bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4882}, 0x4080) 14.7189792s ago: executing program 2 (id=2348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2}, 0x64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000001c0)={0x40, r4, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_a, @random="99ac3cc0d33d", {0xf, 0xa6}}, 0x6320, 0x31, @default, @void, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x44, r4, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4ce}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x24008041) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r8, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040084}, 0x24008004) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000500)={0x0, 0xe, 0x1, 0x7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 14.677846047s ago: executing program 0 (id=2350): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r2, 0x5452, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x400}) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast1, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@loopback, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 14.38237891s ago: executing program 32 (id=2348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2}, 0x64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000001c0)={0x40, r4, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_a, @random="99ac3cc0d33d", {0xf, 0xa6}}, 0x6320, 0x31, @default, @void, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x44, r4, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x4ce}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x24008041) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x53}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r8, &(0x7f0000003300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040084}, 0x24008004) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000500)={0x0, 0xe, 0x1, 0x7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 14.297830744s ago: executing program 33 (id=2350): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r2, 0x5452, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x400}) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@multicast1, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@loopback, 0xfe, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r6) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r9 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 4.87961831s ago: executing program 3 (id=2433): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x4c) (async) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x4c) r3 = accept4(r2, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000001c0)=[{&(0x7f0000000600)="a7", 0x1}, {&(0x7f0000000200)='\x00', 0x1}, {&(0x7f0000000080)='@', 0x1}, {&(0x7f00000000c0)="b3084622ff88", 0x6}], 0x4, 0xd) splice(r4, 0x0, r3, 0x0, 0x8000, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0x40, 0x4, {0x15, 0x4, 0x2, 0x1, 0x4, 0x67, 0x5, 0x5, 0x67, 0x598f, @local, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0xd6, 0x1, 0x3, [{@multicast2, 0xbede}, {@private=0xa010102, 0x2}, {@local, 0xb0e9}, {@loopback, 0x4}, {@multicast1, 0xf}, {@broadcast, 0xfffffffa}]}, @cipso={0x86, 0x6, 0x1}]}}}}}}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000), 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000000), 0x8) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800800010076746900140002800800030000020000080005000a010102"], 0x40}}, 0x40) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800800010076746900140002800800030000020000080005000a010102"], 0x40}}, 0x40) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) 4.683680199s ago: executing program 3 (id=2436): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000900), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYRES64], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 4.514589024s ago: executing program 3 (id=2438): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r1, 0x60b, 0x71bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4882}, 0x4080) (fail_nth: 4) 4.073686826s ago: executing program 3 (id=2441): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000001200)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c890}, 0xc081) bind$inet6(r4, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async) recvmmsg(r4, 0x0, 0x0, 0x3, 0x0) (async) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) (async) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 3.695191314s ago: executing program 3 (id=2447): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) socketpair(0x10, 0x2, 0x4, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000ff80fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3.619059809s ago: executing program 3 (id=2448): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'lo\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r6, &(0x7f0000000040)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x1, @remote, 0x10001}}, 0x24) close(r3) socket$inet6_udplite(0xa, 0x2, 0x88) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000080)=0x6, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x41) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.25547351s ago: executing program 5 (id=2457): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x64, 0x10, 0x437, 0x3, 0xffffffff, {0x0, 0x0, 0x0, r1, 0x59b4b}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}, @IFLA_GRE_LOCAL={0x14, 0x6, @remote}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x48800}, 0x4) 2.215463442s ago: executing program 6 (id=2459): r0 = socket(0x10, 0x3, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6a16, @local, 0x401}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x1c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1], 0x54}}, 0x0) socket(0x1e, 0x3, 0x3ff) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.059298167s ago: executing program 5 (id=2461): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000020000850000006b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r0 = socket$kcm(0x10, 0x2, 0x4) (async) r1 = accept(0xffffffffffffffff, &(0x7f0000000480)=@phonet, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0) (async) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x4, 0x3, 0x3]}, &(0x7f0000000080)=0x44) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010fffbdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036"], 0x5b0}, 0x20008001) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0x79, "b1af2c5f3820ab994e8141416735acbc0789a75d43009e243ac47a981e1b60dfbe2e33254c0b5a810ee942ef3d37161c34c9e76d6b316575af1791820ee8dcf92a288dacc973d908372c0837e8fb3951bba97ffc347022b9649277bf8e62a3588d6b2cca2f6bd19acd0dc1aeebc9b3e1b89edf81958a921733"}, &(0x7f0000000100)=0x81) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={r4, @in={{0x2, 0x4e21, @remote}}, 0x9, 0xd, 0x6, 0x7fffffff, 0x14, 0xb, 0x9}, &(0x7f0000000200)=0x9c) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYRES64=r3], 0xc8}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 2.058865027s ago: executing program 6 (id=2462): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in=@private=0xa010101, @in6=@empty, 0x4e21, 0x6, 0x4e23, 0xcf, 0x2, 0x120, 0x20, 0x2c, 0x0, 0xee00}, {0xf3ff, 0x7, 0x9, 0xf46, 0x9, 0x2, 0x4, 0xf}, {0x6, 0x9, 0x4, 0x3}, 0x101, 0x6e6bb0, 0x0, 0x1, 0x1, 0x1}, {{@in6=@loopback, 0x4d2, 0x6c}, 0xa, @in6=@empty, 0x0, 0x2, 0x3, 0x0, 0x3, 0x7f, 0x37e6d161}}, 0xe8) 1.913649724s ago: executing program 5 (id=2464): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r1, 0x60b, 0x71bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4882}, 0x4080) (fail_nth: 6) 1.351353622s ago: executing program 5 (id=2465): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, r2, 0x60b, 0x71bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4882}, 0x4080) 1.331448067s ago: executing program 5 (id=2466): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="03012abd7000fbdbdf251000000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x4010) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, r1, 0x400, 0x71bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4882}, 0x18880) 1.304014223s ago: executing program 6 (id=2467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="28010000100007000000000200000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900"], 0x128}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="0c0100001a0007000000000100000000fe80000000000000000000000000001be000000200000000000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000300000000000003000000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00ac1e000100000000000000000000000008001f0003000000"], 0x10c}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000d40)="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", 0x19f}], 0x1}, 0x40) (async) close(r1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r7) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x9, 0x3, 0x5) connect$inet(r10, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r10, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYBLOB="aeaea376b679aefb05124ee6d7f3987a387ff15f5d5cd5ed4116947e8da1bbc670030712fa4ba512874fd16b22116a2331c04bcad712b189cddecd2d84d678b791d800ff59e3b80abdc18df5eee027fa8e4d1336", @ANYRESDEC=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x4f, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x48804) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0x0, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private0}}}}}}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000000)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048850}, 0x10) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.303521424s ago: executing program 4 (id=2468): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="11cf3400000010003b040000000000000000000000005065f305177ec1670d8f336dcff23736c8fef38d", @ANYRES32=r3, @ANYBLOB="8106010000000000140012800b000100627269646765000004000280"], 0x34}}, 0x20044002) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000380)={0x0, 0xb}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r6, 0x7f, 0xc}, 0xc) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x98, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) 1.137936106s ago: executing program 4 (id=2470): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket(0x10, 0x3, 0x4) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) shutdown(r0, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x80003, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000140)={0x9, 0x2, 0x2, 0x9, 0x8, 0x3, 0x8, 0x40, 0x7, 0xff, 0x8, 0xf7, 0x6, 0xaa}, 0xe) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000090000000800000000000000", @ANYRES32, @ANYBLOB="04d41091342f0000001d00000000000000072e510700000042e3a7ff984d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.066663001s ago: executing program 1 (id=2471): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) socketpair(0x10, 0x2, 0x4, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000030fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 975.657328ms ago: executing program 6 (id=2472): unshare(0xc040480) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000100000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r1, 0x87, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000240)={0x0, 0x5, [0x7, 0x1, 0xfff, 0x401, 0x7fff, 0x68ca]}) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x0) write$nci(r3, &(0x7f0000000800)=ANY=[@ANYRESDEC=r2], 0x61) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x8000008) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) ioctl$AUTOFS_IOC_PROTOVER(r7, 0x80049363, &(0x7f0000000080)) r9 = accept(r7, &(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000340)=0x80) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000380)={{0xc, @rand_addr=0x64010102, 0x4e20, 0x3, 'lc\x00', 0x1, 0x19, 0x47}, {@empty, 0x4e20, 0x2000, 0xffffffff, 0xe, 0xe}}, 0x44) 914.713484ms ago: executing program 4 (id=2473): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000048000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 912.625808ms ago: executing program 1 (id=2474): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) (async) connect$vsock_stream(r1, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f00000003c0), &(0x7f0000000340)=@udp6}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x48, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) shutdown(r1, 0x1) (async) ppoll(&(0x7f0000000000)=[{r1, 0x205}], 0x1, 0x0, 0x0, 0x0) unshare(0x60600) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000280)={0x1f, @fixed}, 0x8) (async) listen(r5, 0x7) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x4, 0x0, 0x22}, [@NHA_GROUP={0xc, 0x2, [{0x0, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x6}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 904.158591ms ago: executing program 5 (id=2475): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000540)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xfffffffffffffffe, 0xd) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000008000000000000000000000008500009500"/32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d1501000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) unshare(0x20000400) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac00000021000100000000000000000000000000000000000000ffffac1414aaff01000000000000000000000000000100000000000000000a00000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000300000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa3c040000020000000a000a000c001c00", @ANYRES32=0x0, @ANYBLOB="03000800"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r7, 0x0, &(0x7f0000000300), 0x80800) r8 = accept4(r6, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002200000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xc, 0x0, &(0x7f00000004c0)="e02742e8780d81ff978286dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sendmsg$TIPC_NL_MEDIA_SET(r8, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44054}, 0x8010) 711.899454ms ago: executing program 1 (id=2476): socket$inet6(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r1, 0x60b, 0x71bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4882}, 0x4080) 657.822965ms ago: executing program 6 (id=2477): r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, r2, 0x60b, 0x71bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4882}, 0x4080) 656.035227ms ago: executing program 4 (id=2478): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x40, r1, 0x60b, 0x71bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4882}, 0x4080) (fail_nth: 7) 536.840254ms ago: executing program 1 (id=2479): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe800000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="81d089a2d3fdbacbd118a76554adfc140884491d61aa1c785e47812018f08a32ca0233de9faf00aa9c1a9c788fc2d90abc3bda44c135cf824caa08e4364d83ab1fa6d35bfd64cbc2267d113aeedfb4f879dbca048f5e069f5b971e7e6f4ae110cfa3dfb5df9f6439bca7103436c4c5c7a8394ab93e653b5944d23035c3dbc5ba1edeec7c3446143622bd42e7032b5101593cf129c417adf1806cb7f3b7673e488db283f398e09ab37329", 0xaa}, {&(0x7f0000000700)="fe9142e60364ad0dc8590ca64f9858cbea66771b10a086ae8a20d6b07350945741fd2d61d383034d8fe84f342a21c2ec8fd962e0359557f6d4450ad65b531f0c59f1904cbb029dbd94c4931ae28dfcfeef17352375810b9574d665a746368cc6cc1c692228e14e0e01c1f84b8eb668fab63063bf185bec7e1234f665f7083a6c7dde0e0315f95ff65425f3fc0dd42239c1105de651f9dfdf", 0x98}], 0x2, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x18}}, {{&(0x7f00000002c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)="95a0ee63660b540bd059f0ff80b835c35eadd1d980d63c178514996f398f4f6b5a24c61c5c38b751247d7d16db5609b1bf", 0x31}, {&(0x7f00000004c0)="28003cfcedde4309e42cdb7c99d70e551c22821220d7", 0x16}, {&(0x7f00000007c0)="3fa1896727464e2afd8a4e7b596fd6919c6f408c0f887a69cc4c681cb1c0efe8af99d42b054dfda1ca367344b770e4e8a9aeef55051f7c34dd550153846c99aac030b0dae5edee31a11159c2c14a1e022da5d2b62d4f92786d929680d68dcfb060d297e357481cb98285ade0902f0b91b1cd238b2aee49770d105a4e60f27949edacac20a4bb1176907465030a90f8d87717bea1e3748453d351ceb360acaa03f1e90de55e2b7fe44a1d9a724a5ce6819e68ec42f82b3d1ff2901579b496fac4431fe68fdc210f7c579686d6d28dce9e2fb8df60794a4a6943b046d4c0efdd306f5fd2b7042caa52a9bb6370ca51d9143f22ccd73cbd9e04", 0xf8}], 0x3, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa4}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}], 0xf8}}, {{&(0x7f00000009c0)={0x2, 0x5, @broadcast}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001a00)="7316be2f9a85a94e47dc4c80a13b291f6b5172de65dbcf0038801d39f64416899312a8c27b26cd1554b4558844361cfc85195d37cf3e719e6087a7125c60d66a183253ef53b7c130e9517b094a91d838d38573ecfce0d20a736ce407ed3c4bd5efddba9e7e2ef67a49f36778617a95dae398bce609e6251dcaac7bad419e0fc26e68be047668a4a4d57f0d14d2ffa942c7372be7757cd3422a425fc90c75f527930a0beb6e09f7ca1f69b8a733716715f6156a12c314731edffd1d4a9dcc20146eaa1b802dab76f6cf177fac6ce3602a9d124b0df1a81c033e3fdcb968900e", 0xdf}, {&(0x7f0000001b00)="7127c4405a236c851cfe4da01eaa7ffd8db812a1edf20aebc700da1d2b60da8ab69157e18b748d52dbe2518c5c7ead11bfb365f8689d6e2db8d6c4f066a2b1b262e8077dd5ffd8bb4281c7d5c52c2ca098872a6f58129969d68366ae9b1203332fffeacf57c91261209910fa761c3822dff0162426", 0x75}, {&(0x7f0000001b80)="ff532be9a40613fd12f8f2f4e5478041fe8dedc490cf73a1a37219e7af1d4517cf1ce9a7f3e3b1760e27a4b78ccdd3a3ea95f1c76efd90f065d23766c5b41d50755edc4150284feb42bb500e4fa6d3b451cbc475b7adc7bc5f015debc4313ebded7382d2dd8f71e6870b3dbd7bc23752e97bbc905a669e55227dd60012b1733b34c350436757e40443580ba193456de294df03bf546337ffddcd4cf0438162cb65ac83b20ac6f0da46dba9daa5eb68a82c5a10deec0c85bf26d8ec4653cc0f7d6d48d22e55544649496ad11d1fd0ea37a3b7bd7e833292a77c74dfef993c23838ec5af9d7e5c92a8d1a8d6a17058c05044aa8f79d0", 0xf5}], 0x4, &(0x7f0000001cc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @local}}}], 0x38}}, {{&(0x7f0000001d00)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002e40)=[{&(0x7f0000001d40)="7af5d1034e24e11b631f98e7fc03d19ba0135305a478fc0eaddd651655ec547bb547f6c8318630e4e0b989f997ae069859c0efb47924aec2d73f9b2319c313b7bc3e070f4ba78a825add2f53660e24a6354eed18acc1272dcd90f163da456eb3002a1acb53c8cf5c5a99e57ba4e830804f06c2fa852e8f0fecb9d5dee3be88ccaba055f8e7e76d42eb4bd744bb63eb1a72991eebc800dc5bec0af01df884e985f3c92730f25bb7a1405483623c22e38e29da2b3259f26692573b13ed215e0fc6f10c47cb3e5aa804ce40b43a1305c24081dc65ce47fd5a1f61e34ac3937a4388501ec8bbd9aa4e98d4f88206337c3b4ad194e6807a87fbf2aab771de5de19a91563a91f5f7bac3ba6ee2f6a9c0cdd8091f41cb972f7ac479a38e8ef0f9966da81f06c2ee17a7ac2c0d97acbde0684d7514c6426ce56aa90fd4f6deaff6cba406ec84aa94bb8d21c1bbca33806a9a041145a90398debe482ef574c5de70ac25f3c31ef6e1fb5e37365471477d31aee95948f1f188c8e4b9342f9100ab30c238a6df2c471323d41ad1cb3cc72585b672d99770160ca5aea3cd4348379b75fa20d88df56bfb7a39e763662ac76bdf2fd7d201af5a819691b1da1e16549613af5d18517a1d938a3df7aaea62dca7338e40a4a6f4cc9c2e755985d21b31f8bb75d028ec048f709538d7a0fb0abdefaffb2270e360fdb5c75e6a7571c03ed5d242f9a892a3c33bd4c0d1455d7bd590ae47193e4814b815278a613f2e4dd18fe6e45067cecfde49f3c22295227a2ffe49bae6b252ae7f92b2faea4dcd88579ca54e5791ce37c11c571861fb894bb6511ccf4b1aa77cd9b3a41312fc398f8b299e32387f0717ac52bcc0daac4d8d5bc1e24247c50716249a59f86ce513ba889d69862a9fa13eba230ff9c899eeb98b9859375b9167cee0c137d196f110665fe1e8986e2e189f7f61b33031feab739c9da999a156277b0e18bca267b4f3578ea2b14ee3d7fc1c7aae4965ee0b730392f97e4430ad1e1375a3c2194ce363c041c065bb5bec44fbedb3849bb844d1a95fed5ba69043c20aef57717193c4aaeb28b5749881163a0a91ef117fffabc9f5227af8b6d02383bed61c2e3a5229807069f6efbe0e0a4a90dff66fcf8e307fe387e495a925d243349e26474de183796c3dc3788c4237d01b69583d0193be454f8e8a18e0982825b5b73ca4520b0bb2fb2a1433b761a2543871d06d67cd81df30394cf6773c58c0d2aedccc813a7e3bdc7e555850ea66ccc9053b4205247a7dc0776806b7fb3e66e3ab9f8eb8099d90cc688163fe3d481611629b4e589252bc44e7c97becaab4d81c375e20fc5f267370520d4acf8d64751d5c0a77f4d8bb263ad4bf509aa82cc9eea54392029a1d9d73afc2bcb7ea0fda65269878dcea181f2be5c776d795f35c5b0793622868fc8d0845d5e77c7f1e392d066a9059d4faee725608e54b6a83c5948b2781c2591dc21e8c362956ce229ea152605925e53d8c5d179d852f63b4ff172d0d6cc955604bb0db435a66d111d6d2a5335f1feedc8e375bedbf9bfd2598ced031b7a876047e842561cc12892bcce8f08cfc76986887888cd95b4df6aab60c4e995bcfa6fccfb1bf203047de0b279f1ca29eef175cf86bdac70f3e023d154b5cb7352c52f102d45c1db65d48ca76270002b8efb492e8471e8551ae18e4c5f0c507af6155cce1476d85fbb36cb1cb856ef41efba9adb4ce32344f9194957b99b7b602e3d9ec76aed83e457a3a496b8412b43c5a9c88d6290b08f9184951ddba275e690fcefb7e7e0ccd60e506ad92dcbcbbc49326146f29a6ef6e89d3a69a4746c30cf70dc8517c140857c923679f4042d58d6fcecc2154180b7a5a03ed3613451479a60848fdcd1d7c58e01ba7b0eccab1a9240e260aab9d37eaeba9931cc62a16a5f3e399c8b6ecd08541b1372f29bde1b0b75340faa1fe1d179d350de9a2041fc74f9f18d8f07e7b976a58403a9603bd69e9ff25e0569655c95519223fc5c663ef7f7390c8352e52545176d3597fa49ab9c8eb9841915e75fe4f866e7f2e63a454c4fb668d125b523db2516c1d36c1336e7de234fc1b9364fc380b2c847a613b755879e58933248a853af7605e80d5f9bb275e56aced17def641b9a02d1624a06d45f72c543faa6e0737615f63405675b7fc618a3f664887ba0a99dfc9ca3bddb823ba9a84c136f0befced48c3f751bdb7e5b33402263b65a3fff5ed554583d5d8278d6c3fd017d5c26569dd535cabbdf164be2873e3959454edd47803b77f2cd912209c2e4f8085b36909e3c12330bb707aedd10b1fbfd21befc477ccbb513fa40ad5155f86d72873e6c0d4ae3b035e45ac8c2b76f08d04aafb1e575768a36f87be4a4bd6bc9af0bb9a67eff5e5f92583de5c01c72423eeee51760ea129b15c4330cd691c66f22b87887a525770ba601bed2c83ef19ecb79f335c08796bd01c021479b1e6bb3bc4abdb4333cca11cff2a8cb5715063fa33c888780dacbb380b260e19612a090bcd3c3f0b2fc82d19dc9021d7e07473c5fc1d1f1c264f294705d60cc843d2adec443b26bc656437bf5ad862d16e68b6f68682539169e27bad54a191d12ae3db6581e0dd49607167f9bf2f74b063954bd910ed0bb747987abb15ccbf5f3da780b1f5795b9b6754c07343c0002690c5d53fef0e870fa32a08e73db37d423f4e1f27169b3f5664b70e90dfaf73d6f76a7791528277d3f6e7f4507c044ef48af9936de6e5c6a2ce4322194d9496e454f674f384dc652e84b61ffb9f19667725b8b4f4a82f9f89a6385f0b61139671c70b1a830ac9bd9564f55b8f81afba0505736d958421f774979e7c293905023a5a087c10041ac4fd82f892050c7f9d1d7ea77eb64f853f5bd18c5056f2d411a65bf2897f091dc2ad8a5d2cd26ea18b8865f3cfc502ae6f8c395d115cb683b941c55e6511e97c465341dfc57235b351475aa18c407cc07ab4f0e9b874697cffe77e18fab95bc2997e77779508670427a104a340bae1484e6b1b87efef72122d4a9fa3f0076b00133a64318f9d2c677a9aaa52fbc5fdebfcd0d29a7cc69f2267b245668a85cb16912caca93ae468063cdf16c8814c54b8ec55265293b141e0c276686d8e28c1d4b93ea686c24ff360b53213a477f9a7ede548efa8e6da6b1a0638834478861098f41755618a9eb06ce8acd04ee243f7f18991449ff8bad52d3ce67cf60171407f3f4eccff42ecb1f8504d1116a26ccc9f82b4f267f2b888eadc9fe5a2ca6ca5a1fc4dfcfb3dad9922a17bc2c1e5b50791971404fb188ced5bce0e777fdf8664360b7706a52d2d5fcbfc6a2781992abcc5c07920e2fcc49dc268c397be9cc00904388760ab22c49b779560128823c7f59bcec946a490729888dc081578683cd7006475bb44cff5c67edb701c4c90354292bc789e9cf1e9768e38e90361488147517d65b34e48d16730f3919521cb0b65a960f29d14a3f914ddb6a07562a2923a5f6f33eda10ea97d0040001de81e83a11c70209366fa0610f48645f8e8e466082efd8973f88f238de95d4686a26c8e2250ef59ce64f2694d2342e01648df35c66ec57f7938ef74be2322c6df1063e85606220e91ee198f8047dda5448509274931cd066a126392d1ee6101589997729c452aa2865c079fc030946986dd45ef7fc427fb0a608b9a3ca860d482e51463a75caaa31583cf673362055773a3919e4481c24272b3e708443bdfe66a1675ec45485f0a13b1011498ad1ef0539b072ce5b84859277277fe13241142fbe53d6beb468d9ed2cca185787fc0a0ce825e7ab189e6fd57640e269cc8d6928a90a1c442c1056d4f6bc3b14d671872a98fda27ceff27d769331c0afe3c7ebb43b51c83da89cb8abbdd9080bbab4bdfa40ef08a83b557d4522203276d8a8f3197f3aee15204fed024efbe2e45f49ca3ac102837a5b47d9b0308485b6f8a0259a8989433edb2c3ebd20cea305581998a336e3824bd1045c895543e0def357af04abb7fb1152e7abdae50edcfacd826e445d020a80b905c7f0410fbb70ba9dc64b769213ce008566c9b021a60c7788eddca845754e2e7ab77a3576f805f83af176d16105e3dc635b5aa656b70f220dbc48934831b8d41965c05515e9b373a28e1b238510ebe7dcd4d543fff6459e13388c1db6ba2a2f7be934400fa005175eae82168ac1b3f710307e05429ace8058b6d512751aac87a496519712f5e29e3c82afacc57d0c29cc86d7cfaa5b593da449433acf2f3833ffe86cf8ad256ff961b672c3443331d402df670430c79b6a5749392e075f633cf6ab11e6cc0265e398631c4781c8de006a61bb0a6025c38262a78bb4a2ace935de5b18ce0b667319581b77352f2da412d30d82e8f5a4e02767b72d92e2288df12b8edb63d747bb9091fad87b15e43f9fae92ae3f67949da4e89f3ac979fe8aaa588d0a58b77d983ea3e6ded2d6dae5b04f63c65bce6f0c83d29f49c773d598f0bcd9fc80ef73d5e5421335e21a71f60b7e41cb80cf11ecbcba4afbff727d0d3e679d7aedfd93b0cbab5b66ed63f13fe4d9ad31613672d6256cc5d8cb307f19c02b476bac85c6de8c8ebf684c71396f228845d161b86c80b47d31bc601f93c880bf5efe0f3f9b9daa41c40797118de3a11ddd05370104ad6bf36eae98aaef5bc043e855a7f69a9418c38ff2434a4b8b8383db91de11e0e8e76ac2fc09e9fea8c07dd104eccb10198b7e26d2ed7cd05575ee8a08e1d6071127c7425c563dd768f990282fb32b7c7d991a812668810748cdee2dcdc746cba7055acccbeb0e904f77696ed332b51e9d3dda8318b41cb8d9a6e915add8fbbcc5a1d7572dc26522abea0cd8b91a4cad626432d73b01c2852880ac97cf0b5dea416853967037ecab2afbc37e82cb4c3fcc8a82f5b19e03408d9295214d9c840a1b49b97803ac52b21fba9c43d2b8694c7b1126d39739d1144b8d2b85fdc26384f8dc38c742b07e2a0d888858aae75b6bd0234298653170fb7b95559492fe058529a0d2dde1be513bad5f9a522d04d7161bfc0a8575396a6ee67c00b1ed9842c52aecdfa8a2675de6d33019d562b4d3f47f156a1a6fc186f62875575590bf48244dcdd4b161a21cb514456e5b72b607460082ee4a15a0996fab6bc8f72c608ac6d6c4d253bf2dc7e4344f79000499d9bcbf4f6877044da3dca0a9e91469336888a0ffd55637cb6105fea801f1e3b93f6ed62dcd5e8c5ce009458ee79fb1bebf2cc4da2b507a2d2a4086540f77fba643098ad3633c11962c1c3ad99e71bdfa5fd9d4b529bdcf3b8c8dfae61faf79f50a2c38cf30885aea7738726f1e62afa12775c04da070ab0b1f6a1508671806ed46497a3aef6ea96d2264258bca43e969f948188a7e3e87e7be8e39d332c0729091b650d50c39bb55bf812076fccbc35387ad4b88c1d340a5a8842f01b37c5e735f1141a9ac37e51390bd196b75eb472b1154b8fc57168a8f554f76e7c45564c04ad5ce9f91dc58732ff0662222638283cab4a203e18cd2b09fe52fef542eaf22fb1eef9a54c496f9794367b82b0aee267ab2942a025480fe4c5cad1e7aee01345372141f26b843b49bb67bdd221ad3c9c05096ad7019a4ba244902d5b71742dd2b3cb5ef5b41c8fb24731e6471dd3f4261ea0ed5a02f1710266b83a43861a47318fd07bf383271dbe45634d40bcd7875b1dfde10166e5ab00d23227f37d78cec5e89ea0324eb726d9047fab190262354d787b1cdd16f9696085d6ff90a5d1f25a9c5c29b802fdc9b284c10df04706d0", 0x1000}, {&(0x7f0000002d40)="00a5d0fe61e17cf4bccbadf742c9ff2ce726c691d11c9e4015a87b13eb1f847ed7a70fee8533dae4591b420d29286e187fb84bc57fb8ad0e4cc7c67536a557476917d739aa9bedd4000744f7859a9e6a0bc8966b64d1f765130a141b6e1e8260bbf32f72be4d05c73819d9dbfb21af9c7fe34622607e474c1f4741bad4958a13fe8d0885a5079b00bea38a4c0db1fc0d374e785ba3e19dfb4cbdcd377dd94020198331a7f80df58c28774867718ff1129774cb47cbafcc7157cc891a51cfbc9fcdd15700de2d1d30e36c5ff86a7e497f", 0xd0}], 0x2, &(0x7f0000003240)=ANY=[@ANYBLOB="11000000000000000000000001000000000000000000000014000000000000000000000002000000060000000000000014000000000100000000000002000000090000000000000060000000000000000000000007000000072325e00000020a01010264010101640101020a010101ac1414210a010100ac1e0101442c62410a01010200000004ac1e010100000081ac14143100000009e0000001000000080a0101010000000600110000000000000000000000010000000d0000000000000014000000000000000000000002000000db8affff00000000ace5259d30ddc2ec"], 0xd8}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000004780)="81f2740c1b528fb7a40efe22e4dbb389b8fb1c4b501ca465a2349cf08fa8c0672fc839c565cca03e8d44710ed9252acf1cb833b3bdbdda2b91799e5905ac9c6088f0fd91385593499a95db0204199b946f87b357db5135cef73cc38692161d6c178df02cf572c8a3d1fcc8b0de768de3e507d280b3400f31c2e35e76f701f2b706bf73da32edb2b4fbf5de73dfde6f43746f0f3929eed57f79078f97631bc46df259c63555a5585047476909c9e95e3760cbd20543c7fb05478375c346d04b32491ad4afc261697bc529a83b897f9f5a2a220a09692b146e11976ac1f1c406432f2d557dbdbacdbd642d2990fd5ebb1ad6de0a440a6df8b486ae79b6c1a4f774fb2aedf6acb6cba7c4c4c27c90d9d43315c95c8be455fc2aa5780e0666dc614d272307e5e2bc81765c0748a604aa17dfe98f832df5d88bee44547c8ae7b5214c7eb93717f9df1d5972de98e69abf8132ea9cef8a9abefa9ae59a537e8d51264c917dbf02cf37f5176bf2888154ca93f7ac37a6745d9c6ad6985d243ff845e71cd5f89e474bfa0cbffe333a2a001252c273a68d443132cbdfd22bd94bd2d749ed8df449c52355a18115a4283187fc7e85ff28991c6f462f2331b0080ba286afc51c867c22a47223252a7af35b6fcc473a2a31c89944b817fb0df84caf2371d7118862e61433e8d2e9d6b57d0db79acec16a323444af34fd967b54f4b0b9e7460bd0fe0cd9d5af2fa42aba4f78109a52b41ff2ea519776f733420f063c4b8158263e7962893e72e99fd89abddbc9e00c61bc7e1a30e183826d8a44889376fffb7712868a029f7584550ddfd41358334233b9bc1a2962e8f6d2cf27a7fd84297e02245fa90bdc29759ea9e3bc385a40dadf48aec8101f739c974b07e318291531c2bfe5fc0b41fedbf81b0a6cfd65231403d509ab5b0426269d389c8c40d79d72dbb37137c699c47c6575ad2edd646e6cb975414b2417582399bdd82bbb47a4699512ef558e8e38e9011ff961e6812f6a95cdef073063b4a4e50988f0eb5c61834efa9d0cfb87f66d13f0ec6c2b8e93b54b81989c100209684bf1664ce1287b07c11a31688aea078445dee45dbd9a181fa7d6a3044fa0d1b576289f7d96485bcd9bcff3a1acb200f2bd5dea4b90bceadb83494983cbb552e0fa36425bafa0d0243b8e11fcd8ebaf41e69bb4d485f2311ad2551cca9470982a0b03879695b84fa73d5da6b3c7df2e8fbb9692a438d7585c93cc80ea8e60d9541b17b7e92215bb8d02024f93abcca0e9f89f93ade8c241f41b524313f1e4cced1f4c979453b3876f93bd0d20a53b2280987bd182270058cf5d77a2fcd184935f62ffc82cbc2f8bbafd3635431b5b0c6f8f8c46598085da9c15cdb963b22bf90e825e43395a2c694c3f8e6b37532b6f73a21944b3f0feae24f7f488e23d2e52d63f3eca373e03d7814340ca5dbf65a48b7df01a97d4dda70106e9b44dd7d0192ab5f6e6f0004449de3c2d53c6a9c2c4f6dff11cfbec629096f7cd988de565c9fcffb6a99a6f0193fc64e52f5db7b3873cb6b0b45012496e928e6ec356ab0ce945bc3b8f658e6d393dead062f5a044a03c54c553ffa6300a03c63047f84a3dd761d2ca9ccff0b9307e9b0d2e0a28004a782db5d493b303211d49801d80752e4e0d743c272724e7beb806a2dd46b3676821fbff20abec87f5ba284fd736838e32f44fc023cf06507f5bf4bc21aed8fbfa320845bc0186fc096a02acff45628ef7a4bb966f5e8395b79d5bfbcac4a4b106f1298cca419f7d416d214839c73c79510dab3fa5858a8e7089d7682c4f7b02abb74bed6da79bac6f91f7848cef7518893d49551bd5de78473d14f63f43dc10ba1a49af58cd722fafdfab2c3483295d67a90068e207574ee5df9195d99314dcd3dcedec22d52802b7df7efc813f60c01bd22d1dfc95788e502facbfd64d40b2902e24a0984d00a68ce0148ed5b29671f91765f443e94702fda6d3bad2f4aa4b3095bebd152c8bdb95b3c7e490f9bf7be045af7010843383275cac5b7cf56b247035a82911ad195502900e236d72b64b9174258295b6643b2e3317cf039f16b11eed8be2655ba65fad122774a7af0eb2501549c02ede16428a0b6d523faa110378ef434f445721c489d3ef9e0ebca8719e263ec1201ef426ecd42a2e69df035efaea897dc2cc86e25dce017a64fed30f620db7141929d627676cc72cc7a74a818818ca90af9b5bb9145c0acd59f16ed51e3c798ce9b2fadb7cee6d176387ae99d10ac2441bd3050673ddd41a7816c266b2121bb72360d80084fa20495a41a5044c99c247b4d17320905719600dae1e59dc46250b9198914984c90d67547f745a68d90881ef2f4bd898f5736b47b8597447304b6857852e1fd7f999f74247ad47b897f563c023cda116b5ca6fb12801546a2c70388f9f1b5293ed6170180db65788e63978813ce66e3ff5635ec74ddded12f0b828b15515d7dd4820557ed0b0582a7eca1e54e1e2375fd38c8bd2b4d96011ed2c6b76683fe07c8f76cde4c123119299255f6d0da5eae015240264ec6d355349abac4cc91c053d518b22283df9cd416b5273159f26e0916a18c6712a36422644af39ef323113567057d592fea275c748c844ce88303b489d37a7dea00100a77d4968caa56176904b460069f3196d1efdff895fbf0d47917b7eac38cf5a2e4295eede1d934aba5ea44d58a3e9bed87425f67dd803c840292ff542eb7edcdc046941ea88477e31b72a8b4cfe5c942c50351c6d3d8087e6fe56f61b36a208c91ae6b4f2f938b21ed1c275a1bdf2da92828ecd09858f45a833a87b3722af7fb06eedda7c61c93ee41512af355372980d82d1aece543c30aa8ba52db14e3e4c909edaeedba2876509940b2f09803dd94996ba163d1890be42708ab2e33f9b0db585b81bbb15d149d41df8e527a17a9d8b22df2c1008f328ca1865c632d237f04ae38b2c81522ce1b0ecffbc5871832eae326993f39110f7bae7460f66913b6f419c050ae962c3af1d1073cca086e2fffbea30fa0c355088be4591c5aafe3c037c7ad61119b336e674b458a746538351e2470c269e7a794c5e166872a74a12bfdd15eeb2df30d3de442f964659ca9918aee6c7ae5dbd8e4ef20e8b440363c0c2463f6cec40ce16800be01ea0505ddca75562dc2e69c36c594275ea23834fdc4cb7d9a7995ea217d9ca714010d0b6970ae88a766ecaacaca1d7d9887df7edace6e03dce3a0553835b08a4249c6ff9fc850428933eaeff70297bbf5e7be1318292437607f2a6dc33e3522fd2fbcbf0f5f2959bbe309df8fc4089c98157ac757e68b07cdb07dd661dca061238ba440382901ac8aea9806334644184788a8f0c4be43f9c5ed40a5cd1f0744a5d13f427b54c02dac16478f708ad8f323475308cf317534595dc46d65255c610d0b4eee8f80a44e7cd4927b9d91678decd1f19718ac57726f64615d1ab8ca2cf6e3e04a5ed878726de328168600e27e2673e25f9cb99bf2b303078031e04de3d548cadf77d2ee1433ff54b00db5d11875fcbd820b70aeaeb51bb4bfc0d26b7e7c343c76c0eb4c0ddd02572616b5803fa6683fb4f93730f51cb61f6122bde590264d57c5381d937155a3b7885da695a5f9a40d31202c59feadd8537e7b18efa3e350039d30b1514d24310783622db16faab0a1d7b70a66182763b926637e0559b79b7aa1f0d8beb812aa95c1a96c855ab3fea09834f132ef5b6894c08c93ef84db3810bcde6947af9b29ced9a1b1361fefc405290356ad2baf67d7a4a40dcca88185b16ab2a7f3a3271a5e53afe1c6d2cd6038626d843edcf144f9c539b8902779b25919d9f38f8e1baead826c86674e8dfd4cf40152e248c31c89444177e1f9aae08c408f9c784ef253d65c88bdd4a6f03ff8beafaf9a9b75558a881e750126a2ea61e5c719952f711ef35c5486c3d20596a8dd92ceccaae8faf554540b0889a41bf4d9567415ad7ff281e85601dece54667383d16c819a3019a098e06e64a79ffeb9dafba57277c194748a340f404e562b84f151fc3efbc6ba2b38f0fec4d570a7cc0b5855830d8f041e73f080fbade1971a45605eec9b9bc30fce0769f6c7a47afe30508543bc1336589bc3145fd56c994b38e5f290b81eb5979207d6d4234fac8314883ca0691eb9376778ac9a64cdfc4d09514dafc153a4e0b0204042ea6e61a0708b6f30b9c7995b2d0b7dc0d7b022a32dc81ded456b5c447a9173cb0d1fcd3fc848d1709e5f1a9bf9df1a7b15310df94b81f4c0c19cb6c13b71d52ed1b23f1e883f53fe176017d1282985f2fdf894818a822e9c0493d27c0e152eb3bab5e5e0f7a61b312a8e11118b6546892efd867b9192f266d8b07772b3d8a3e5a4172f45fb56bf70c58984d9be5ec176daa44d80b55b9a4427837644356caf8dbc72829255ecae0a0bfe2de031ee813e6b3da05cb542895aafc39e753121d62111fb396c426303c0323f534b5d74ad0fe07bb1ac1e6caa83e19476a4c3a4b2b8332560268bea374fb4e9263909bfc9467ed3e1743a1eee44d7dcc7dfaad58e065200389e4de21ff5c26be9769a2ca5ab06e90f09d561be4e8c225c69d7b0fb02ac1fd0df71871fbd887f3a35e62bc793bad114e6331ef5fd2ff636bf30079bc2fc9af278abf38597f7ebfb0a611d38b7ec31eaa18c1c7e30ff6c59ed1ad0c9bd7ca051be5b7e11acb7a34164d8947c6d41a802d9f24a98540447175552f34730341f79c6fb2e0b31593c86d40b71ad4ae5d41fdde59af14af62b141cf8236fe819c5163347def0c9c53676d2a8cc207183532b503514a948f306f372344ce70ad2773289b3395836ca924586db32f09485887ecd3daef49e005beffc2bcbe954afdf258c97b3df2245760900d8d2e5011e5eaa6188881933067f146f39f8749eb7269ffccc9fa1ebc3ebeb4bc02bc12bf7f91a8e0e9cdeab91857bb77df4137d4f81d74f5a6aa57a61b27af82cec00c06f356b09c56427c7dc3e16cc3dcd0ffad35764296e6fcf5f1bd92d9e37eca20080e8e80bc9f99346eb9cdcbb3ab16023165de26b2ceb4d27f888b786e898a1a16daf537f76696b671813e7bbf64c5f797d0ee7cb22c3cb26b32ed301347d7e5c713208c548efeedcde100dc245e0a07efd24f2981d398918bb1dfc3c367e265dd0be4690c5766af55da7b284e7c77feb37694422f65055d3d704187ed78ac6160858e2c41ca59030e73215095f7f28a4bba4ce6a13ed2fba2795359e5aed32c408ed5fdae8320806a5cbca4e6d8850a18390f0f05e26822521245f564dbb36efdc6783553f55ea41bf52512c7da65cd31721555ce1026d00eaf4c0d92c2af403e8f13df5ac04ee970ed8673e9cefa443f5df5be6f40ca3dcb10277107c07138edec4db9e485cb4973be3b8c873b5f2f400c97725fdd9ef55b2d51366d7e05c670c2557c7cceb39d95a54e28f47e39b4db14e8ed5068626e3e64249dde7cdd01a5a91e52aea18b0eb1cf9ee0318c0306ae763aab4b8de87e6b8c92a7eef8ea89cb0e7c67ea48b6a787514fb071cf02ba30e326ca21ed71322a89f0c8b195424b1933a43367d9ea46a1afe696b722ecafa25721fedf217d6f96d7e06208b0cba0e78cb72b3f5153825d53ba22db1bad55c991f20a7b9d90bcd4d2c9e730a9df9d3f4aee12615077f752c14a6939334c609670ef1368e979ca4e3f4d93c5f7e4ad25b85fe830bd5a07d6ccae0ec95157fa3d31e8dd5a98b27341d17e9401181e0b2a29040d46f1d3fba4bc571b118f0a5daa57eb19", 0x1000}, {&(0x7f0000002f80)="87873172f88f434d1eaed1b4785c2cc8580db2e8c915afb6dabf8e374b2227255ab9bd54d1f7b48a40a732c4844492e5e0321fd1e87aae7b8b371becb538aa977dcc44a9815ffbac0c153df6f74ae4c157373957465204fa1cefa9342f369f1b363012c9be39fbea1994261a1e30b8a4e3b36905af2d778dda1b07b0565fa38b56788fe0f9de8e07b3c3c3e4768cde0e4a5196b405c112b8ba7236b538ffd8e2de343c17", 0xa4}], 0x2, &(0x7f0000003080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14}}], 0x60}}], 0x5, 0x24008890) 472.812676ms ago: executing program 4 (id=2480): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) getsockopt$inet_tcp_int(r4, 0x6, 0x18, 0x0, &(0x7f0000000080)) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x48010}, 0x40044) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x7}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet_buf(r7, 0x118, 0x29, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x1fc}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400000e}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = accept4(r7, &(0x7f00000001c0)=@l2, &(0x7f0000000280)=0x80, 0x400) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r10, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800005b0dd44b93d259fa2a1e548322d91500", @ANYRES16=r3, @ANYBLOB="00032cbd7000fbdbdf256300000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000f00000073000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040814}, 0x40000) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) poll(&(0x7f00000000c0)=[{r1, 0x4048}, {r8, 0x108}, {r9, 0x21}, {r0}, {r7, 0x4200}, {r1, 0x100}, {r11, 0x80}], 0x7, 0x0) 471.004303ms ago: executing program 6 (id=2481): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r1, 0x3) close(0x4) r2 = socket$inet(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x40080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000240)="c2", 0x1}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) sendmsg$kcm(r3, &(0x7f0000002bc0)={&(0x7f0000002500)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x1, 0x3}}, 0x80, 0x0, 0x0, 0x0, 0x3d8}, 0xc801) setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4c0001}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)=@ipv6_getanyicast={0x14, 0x3e, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000014c0)=@newqdisc={0xc4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x94, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0xfffc, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x28b}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xc4}}, 0x0) 323.310335ms ago: executing program 1 (id=2482): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ffff00ff71122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ffff00ff71122d000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101, 0x4018}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x8db1b}]}}}]}, 0x44}}, 0x0) 296.887916ms ago: executing program 1 (id=2483): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="05dff72e1800cd13381600000000000100006cfb42280826f4155e9cb6b63eaccce002b05b3c0683b684fe1d46522b1367cac1b5632f677a670a90c9b12052dda443a38747e0fab6d9e660947893f001309a160774c502b8d4a743a700002c3cd3cd4e91703d518d2cb9aaab34966a5077c546e04b0dcd01f32896260e14395cf4c31eb64923b1d90f294e76a1dbb6c18a664758fc455d0f2f0f4c4070550b1f9651153ab31364ec2d8da71ff843bccca3e1a9927a64c689b29dad6c4fcd9cb55ace1ba9e322e8ccf70ef9a85ab882caf0533cb609d0118819b22b64afb55a5b49a709d30876d62544365329d4332ca40a4da425abf00ae3", @ANYRESOCT=r0, @ANYRESHEX=r0], 0x2c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x80d5) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000440)={0x0, 0x3}, 0x8) (async) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000440)={0x0, 0x3}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r5, @ANYBLOB="100001800400"], 0x28}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000080), &(0x7f0000000200)=r7}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000080), &(0x7f0000000200)=r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 0s ago: executing program 4 (id=2484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x18, 0x3, 0xfffffffc) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, @in={0x2, 0x4e24, @remote}], 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000120500010002000000", 0x24) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe04, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x10, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0xffff, 0x0, 0x7540}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) kernel console output (not intermixed with test programs): 9811] IPv6: Can't replace route, no match found [ 205.878152][ T9790] tipc: Disabling bearer [ 206.023971][ T9820] IPv6: sit2: Disabled Multicast RS [ 206.525706][ T9835] validate_nla: 1 callbacks suppressed [ 206.525726][ T9835] netlink: 'syz.3.1020': attribute type 18 has an invalid length. [ 208.160110][ T9883] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 208.353020][ T9890] netlink: 'syz.2.1036': attribute type 29 has an invalid length. [ 208.371249][ T9890] __nla_validate_parse: 4 callbacks suppressed [ 208.371269][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 208.892858][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1043'. [ 208.922616][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1043'. [ 208.959622][ T9917] tipc: Failed to remove unknown binding: 66,1,1/0:681271639/681271641 [ 208.968869][ T9917] tipc: Failed to remove unknown binding: 66,1,1/0:681271639/681271641 [ 208.982237][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1044'. [ 209.429508][ T9939] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 209.768146][ T9954] wg1 speed is unknown, defaulting to 1000 [ 209.792472][ T9954] lo speed is unknown, defaulting to 1000 [ 210.874107][ T9992] tipc: Enabled bearer , priority 0 [ 210.885485][ T9992] syzkaller0: entered promiscuous mode [ 210.891381][ T9992] syzkaller0: entered allmulticast mode [ 210.991432][ T9992] tipc: Resetting bearer [ 211.017123][ T9990] tipc: Resetting bearer [ 211.116949][ T9990] tipc: Disabling bearer [ 211.482759][T10016] wg1 speed is unknown, defaulting to 1000 [ 211.491018][T10016] lo speed is unknown, defaulting to 1000 [ 211.812863][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 211.820265][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 211.826473][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 375.081596][T10026] wg1 speed is unknown, defaulting to 1000 [ 375.090590][T10026] lo speed is unknown, defaulting to 1000 [ 375.162819][T10035] netlink: 'syz.3.1073': attribute type 4 has an invalid length. [ 375.291576][T10040] bridge0: port 3(hsr0) entered blocking state [ 375.336372][T10040] bridge0: port 3(hsr0) entered disabled state [ 375.372864][T10040] hsr0: entered allmulticast mode [ 375.387497][T10040] hsr_slave_0: entered allmulticast mode [ 375.399584][T10040] hsr0: entered promiscuous mode [ 375.417964][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1078'. [ 375.536585][T10047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 375.594410][T10047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1078'. [ 375.676408][T10054] sctp: [Deprecated]: syz.0.1080 (pid 10054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.676408][T10054] Use struct sctp_sack_info instead [ 376.800829][T10107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1094'. [ 376.815002][T10093] wg1 speed is unknown, defaulting to 1000 [ 376.833281][T10093] lo speed is unknown, defaulting to 1000 [ 376.998695][T10116] netlink: 'syz.3.1096': attribute type 1 has an invalid length. [ 377.041278][T10122] netlink: 'syz.1.1095': attribute type 13 has an invalid length. [ 377.092959][T10125] bond1: entered promiscuous mode [ 377.098076][T10125] bond1: entered allmulticast mode [ 377.163721][T10125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 377.365625][T10135] syzkaller1: entered promiscuous mode [ 377.372871][T10135] syzkaller1: entered allmulticast mode [ 377.475266][T10132] af_packet: tpacket_rcv: packet too big, clamped from 3960 to 3942. macoff=106 [ 377.737665][T10155] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1102'. [ 378.480383][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 378.696856][T10199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.730430][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'. [ 378.762526][T10205] erspan0: entered promiscuous mode [ 378.774650][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 378.818244][T10197] wg1 speed is unknown, defaulting to 1000 [ 378.839934][T10204] pim6reg1: entered promiscuous mode [ 378.868566][T10204] pim6reg1: entered allmulticast mode [ 378.903153][T10197] lo speed is unknown, defaulting to 1000 [ 379.302064][T10225] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1118'. [ 379.410237][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1119'. [ 379.424132][T10233] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1118'. [ 379.728749][T10245] geneve3: entered promiscuous mode [ 379.753509][T10245] geneve3: entered allmulticast mode [ 379.910268][T10251] netlink: 'syz.3.1123': attribute type 6 has an invalid length. [ 379.945969][T10251] netem: change failed [ 380.102840][T10258] nftables ruleset with unbound chain [ 380.259402][T10262] netlink: 'syz.0.1127': attribute type 6 has an invalid length. [ 381.152496][T10275] __nla_validate_parse: 6 callbacks suppressed [ 381.152516][T10275] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1129'. [ 381.191157][T10275] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1129'. [ 381.267548][T10274] IPv6: sit3: Disabled Multicast RS [ 381.301975][T10274] sit3: entered promiscuous mode [ 381.307180][T10274] sit3: entered allmulticast mode [ 381.347357][T10282] wg1 speed is unknown, defaulting to 1000 [ 381.372765][T10282] lo speed is unknown, defaulting to 1000 [ 381.651971][T10284] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1132'. [ 382.614400][T10305] netlink: 'syz.0.1137': attribute type 61 has an invalid length. [ 382.637353][T10305] netlink: 'syz.0.1137': attribute type 62 has an invalid length. [ 382.767017][T10307] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1138'. [ 383.144999][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 383.186744][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 383.200563][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 383.213300][T10326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1143'. [ 383.222955][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 383.234877][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 383.244562][T10315] ip_vti0: left allmulticast mode [ 383.275680][T10315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.284996][T10315] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.310919][T10315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 383.950028][T10349] wg1 speed is unknown, defaulting to 1000 [ 383.958522][T10349] lo speed is unknown, defaulting to 1000 [ 384.757794][T10374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.238990][T10383] wg1 speed is unknown, defaulting to 1000 [ 385.261155][T10383] lo speed is unknown, defaulting to 1000 [ 385.659473][T10393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.006775][T10393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.593363][T10422] __nla_validate_parse: 18 callbacks suppressed [ 386.593385][T10422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1166'. [ 386.646626][T10422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1166'. [ 386.910485][T10393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.090232][T10393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.143702][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1169'. [ 387.311842][ T3428] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.427740][ T3428] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.477587][ T3428] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.507556][ T50] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.668079][T10448] netlink: 'syz.3.1174': attribute type 1 has an invalid length. [ 388.891910][T10506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1186'. [ 388.923319][T10506] bond2: entered allmulticast mode [ 388.929089][T10506] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.949724][T10506] bridge1: entered allmulticast mode [ 388.958884][T10506] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 389.052596][T10509] wg1 speed is unknown, defaulting to 1000 [ 389.059807][T10509] lo speed is unknown, defaulting to 1000 [ 389.217757][T10516] syzkaller1: entered promiscuous mode [ 389.230315][T10516] syzkaller1: entered allmulticast mode [ 389.376362][T10491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.414588][T10512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.636680][T10532] netlink: 'syz.1.1192': attribute type 5 has an invalid length. [ 389.735996][T10527] syzkaller1: entered promiscuous mode [ 389.749720][T10527] syzkaller1: entered allmulticast mode [ 389.788886][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1192'. [ 389.987392][T10537] netlink: 'syz.3.1194': attribute type 1 has an invalid length. [ 390.138125][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1197'. [ 390.149480][T10550] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1197'. [ 390.181851][T10552] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 390.761607][T10572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1204'. [ 390.832980][T10575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1204'. [ 391.664975][T10607] tipc: Enabled bearer , priority 0 [ 391.716058][T10614] syzkaller0: entered promiscuous mode [ 391.761025][T10614] syzkaller0: entered allmulticast mode [ 391.999618][T10604] tipc: Resetting bearer [ 392.029236][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1213'. [ 392.047486][T10604] tipc: Disabling bearer [ 392.080311][T10632] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1213'. [ 392.273628][T10640] netlink: 'syz.3.1216': attribute type 39 has an invalid length. [ 392.291460][T10641] netlink: 'syz.3.1216': attribute type 39 has an invalid length. [ 392.325310][T10638] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.435967][T10638] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.545545][T10638] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.611075][T10649] wg1 speed is unknown, defaulting to 1000 [ 392.652623][T10638] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.697816][T10649] lo speed is unknown, defaulting to 1000 [ 392.890993][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.944559][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.011407][ T50] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.057015][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.093586][T10637] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.172860][T10637] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.272697][T10637] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.372935][T10637] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.903856][T10687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 393.913957][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 393.930550][T10689] IPVS: sync thread started: state = MASTER, mcast_ifn = erspan0, syncid = 1, id = 0 [ 394.072887][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1229'. [ 394.341065][ T3664] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.382737][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.434617][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.483522][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.842752][T10706] netlink: 'syz.3.1234': attribute type 10 has an invalid length. [ 394.860923][T10704] netlink: 'syz.3.1234': attribute type 10 has an invalid length. [ 394.946448][T10713] wg1 speed is unknown, defaulting to 1000 [ 394.983871][T10713] lo speed is unknown, defaulting to 1000 [ 395.169472][T10720] wg1 speed is unknown, defaulting to 1000 [ 395.179022][T10720] lo speed is unknown, defaulting to 1000 [ 396.001921][T10729] netlink: 'syz.0.1238': attribute type 1 has an invalid length. [ 396.026791][T10729] netlink: 'syz.0.1238': attribute type 3 has an invalid length. [ 396.050722][T10729] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1238'. [ 396.406790][T10741] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 397.015732][T10760] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1246'. [ 397.068509][T10760] IPv6: sit3: Disabled Multicast RS [ 397.087685][T10760] sit3: entered allmulticast mode [ 397.158700][T10764] 8021q: VLANs not supported on xfrm0 [ 397.476213][T10778] tipc: Enabling of bearer rejected, failed to enable media [ 397.559554][T10776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.635317][T10789] --map-set only usable from mangle table [ 397.661079][T10787] erspan0: entered promiscuous mode [ 397.666875][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1252'. [ 397.706337][T10783] bond3 (unregistering): Released all slaves [ 397.750033][T10793] netlink: 'syz.3.1256': attribute type 16 has an invalid length. [ 397.766149][T10786] vlan0: entered promiscuous mode [ 397.782481][T10786] veth1: entered promiscuous mode [ 397.889409][T10785] vlan0: entered promiscuous mode [ 398.134958][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1259'. [ 398.461337][T10828] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1263'. [ 398.526984][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1266'. [ 398.564084][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1265'. [ 398.630739][ T5847] Bluetooth: hci2: link tx timeout [ 398.636023][ T5847] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 398.711659][T10841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1269'. [ 398.798113][T10841] sctp: [Deprecated]: syz.3.1269 (pid 10841) Use of int in max_burst socket option deprecated. [ 398.798113][T10841] Use struct sctp_assoc_value instead [ 399.093524][T10860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1274'. [ 399.105483][T10865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1274'. [ 399.253178][T10869] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1277'. [ 399.814740][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1285'. [ 400.043869][T10923] netlink: 'syz.2.1288': attribute type 2 has an invalid length. [ 400.192797][T10927] wg1 speed is unknown, defaulting to 1000 [ 400.200132][T10927] lo speed is unknown, defaulting to 1000 [ 400.249816][T10928] wg1 speed is unknown, defaulting to 1000 [ 400.258306][T10928] lo speed is unknown, defaulting to 1000 [ 400.693447][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 400.871130][T10955] netlink: 'syz.0.1297': attribute type 83 has an invalid length. [ 401.210374][T10959] xfrm1: entered allmulticast mode [ 401.424529][T10946] delete_channel: no stack [ 401.553085][T10971] openvswitch: netlink: Flow key attr not present in new flow. [ 401.996785][T10988] wg1 speed is unknown, defaulting to 1000 [ 402.038676][T10981] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 402.091378][T10988] lo speed is unknown, defaulting to 1000 [ 402.186107][T10995] FAULT_INJECTION: forcing a failure. [ 402.186107][T10995] name failslab, interval 1, probability 0, space 0, times 0 [ 402.221210][T10995] CPU: 0 UID: 0 PID: 10995 Comm: syz.3.1308 Not tainted syzkaller #0 PREEMPT(full) [ 402.221243][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.221265][T10995] Call Trace: [ 402.221274][T10995] [ 402.221284][T10995] dump_stack_lvl+0xe8/0x150 [ 402.221324][T10995] should_fail_ex+0x414/0x560 [ 402.221373][T10995] should_failslab+0xa8/0x100 [ 402.221406][T10995] __kmalloc_noprof+0xdf/0x800 [ 402.221429][T10995] ? bpf_test_init+0x9f/0x150 [ 402.221461][T10995] bpf_test_init+0x9f/0x150 [ 402.221493][T10995] bpf_prog_test_run_xdp+0x503/0x10e0 [ 402.221540][T10995] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 402.221574][T10995] ? __fget_files+0x2a/0x420 [ 402.221608][T10995] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 402.221638][T10995] bpf_prog_test_run+0x2c7/0x340 [ 402.221675][T10995] __sys_bpf+0x562/0x860 [ 402.221708][T10995] ? __pfx___sys_bpf+0x10/0x10 [ 402.221755][T10995] ? ksys_write+0x22a/0x250 [ 402.221779][T10995] ? __pfx_ksys_write+0x10/0x10 [ 402.221808][T10995] __x64_sys_bpf+0x7c/0x90 [ 402.221836][T10995] do_syscall_64+0xec/0xf80 [ 402.221863][T10995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.221879][T10995] ? trace_irq_disable+0x37/0x100 [ 402.221900][T10995] ? clear_bhb_loop+0x60/0xb0 [ 402.221919][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.221938][T10995] RIP: 0033:0x7f3eea78f749 [ 402.221953][T10995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.221966][T10995] RSP: 002b:00007f3eeb607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.221983][T10995] RAX: ffffffffffffffda RBX: 00007f3eea9e5fa0 RCX: 00007f3eea78f749 [ 402.221995][T10995] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 402.222005][T10995] RBP: 00007f3eeb607090 R08: 0000000000000000 R09: 0000000000000000 [ 402.222014][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.222024][T10995] R13: 00007f3eea9e6038 R14: 00007f3eea9e5fa0 R15: 00007ffcfc0edbd8 [ 402.222048][T10995] [ 402.719579][T11003] __nla_validate_parse: 6 callbacks suppressed [ 402.719603][T11003] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1310'. [ 403.155878][T11020] wg1 speed is unknown, defaulting to 1000 [ 403.183205][T11020] lo speed is unknown, defaulting to 1000 [ 403.266402][T11026] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.413655][T11032] 8021q: VLANs not supported on vxcan0 [ 403.512071][T11034] FAULT_INJECTION: forcing a failure. [ 403.512071][T11034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.525866][T11034] CPU: 0 UID: 0 PID: 11034 Comm: syz.4.1319 Not tainted syzkaller #0 PREEMPT(full) [ 403.525897][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.525912][T11034] Call Trace: [ 403.525921][T11034] [ 403.525930][T11034] dump_stack_lvl+0xe8/0x150 [ 403.525962][T11034] should_fail_ex+0x414/0x560 [ 403.526002][T11034] _copy_from_user+0x2d/0xb0 [ 403.526030][T11034] bpf_test_init+0xd8/0x150 [ 403.526063][T11034] bpf_prog_test_run_xdp+0x503/0x10e0 [ 403.526110][T11034] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 403.526145][T11034] ? __fget_files+0x2a/0x420 [ 403.526179][T11034] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 403.526209][T11034] bpf_prog_test_run+0x2c7/0x340 [ 403.526246][T11034] __sys_bpf+0x562/0x860 [ 403.526279][T11034] ? __pfx___sys_bpf+0x10/0x10 [ 403.526327][T11034] ? ksys_write+0x22a/0x250 [ 403.526351][T11034] ? __pfx_ksys_write+0x10/0x10 [ 403.526378][T11034] __x64_sys_bpf+0x7c/0x90 [ 403.526406][T11034] do_syscall_64+0xec/0xf80 [ 403.526430][T11034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.526452][T11034] ? trace_irq_disable+0x37/0x100 [ 403.526487][T11034] ? clear_bhb_loop+0x60/0xb0 [ 403.526515][T11034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.526536][T11034] RIP: 0033:0x7fe929f8f749 [ 403.526555][T11034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.526574][T11034] RSP: 002b:00007fe92ad75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.526600][T11034] RAX: ffffffffffffffda RBX: 00007fe92a1e5fa0 RCX: 00007fe929f8f749 [ 403.526617][T11034] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 403.526631][T11034] RBP: 00007fe92ad75090 R08: 0000000000000000 R09: 0000000000000000 [ 403.526645][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.526658][T11034] R13: 00007fe92a1e6038 R14: 00007fe92a1e5fa0 R15: 00007fff7de3c568 [ 403.526695][T11034] [ 403.847946][T11030] wg1 speed is unknown, defaulting to 1000 [ 403.856706][T11030] lo speed is unknown, defaulting to 1000 [ 403.864141][T11036] wg1 speed is unknown, defaulting to 1000 [ 403.874441][T11036] lo speed is unknown, defaulting to 1000 [ 404.278322][T11039] wg1 speed is unknown, defaulting to 1000 [ 404.289440][T11039] lo speed is unknown, defaulting to 1000 [ 404.671286][T11048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.953022][T11054] netlink: 'syz.0.1324': attribute type 1 has an invalid length. [ 405.018434][T11056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1324'. [ 405.083025][T11054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.208367][T11057] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 405.259006][T11057] bond3: (slave wlan0): Opening slave failed [ 405.349075][T11054] bridge4: entered allmulticast mode [ 405.638762][T11062] wg1 speed is unknown, defaulting to 1000 [ 405.700539][T11062] lo speed is unknown, defaulting to 1000 [ 405.763777][T11060] syzkaller0: entered promiscuous mode [ 405.769317][T11060] syzkaller0: entered allmulticast mode [ 405.841438][T11066] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1326'. [ 406.335128][T11076] netlink: 'syz.3.1328': attribute type 11 has an invalid length. [ 406.359437][T11076] netlink: 'syz.3.1328': attribute type 11 has an invalid length. [ 406.417795][T11076] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1328'. [ 406.818839][T11070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.834488][T11082] syzkaller1: entered promiscuous mode [ 406.841665][T11082] syzkaller1: entered allmulticast mode [ 406.989600][T11085] wg1 speed is unknown, defaulting to 1000 [ 407.059495][T11093] veth1_vlan: left allmulticast mode [ 407.079971][T11093] batman_adv: batadv0: Interface deactivated: gretap1 [ 407.095695][T11085] lo speed is unknown, defaulting to 1000 [ 407.414572][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1335'. [ 407.502504][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1335'. [ 407.602819][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1335'. [ 407.670441][T11103] IPVS: Error connecting to the multicast addr [ 408.003931][T11114] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1337'. [ 408.439285][T11129] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1341'. [ 408.477600][T11129] bond0: (slave bridge0): Releasing backup interface [ 408.543018][T11129] bond0: (slave dummy0): Releasing backup interface [ 408.633101][T11129] bridge_slave_0: left allmulticast mode [ 408.661543][T11129] bridge_slave_0: left promiscuous mode [ 408.667422][T11129] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.753810][T11129] bond0: (slave bond_slave_0): Releasing backup interface [ 408.775233][T11129] bond0: (slave bond_slave_1): Releasing backup interface [ 408.806272][T11129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.815293][T11129] batman_adv: batadv0: Removing interface: gretap1 [ 408.826561][T11129] batman_adv: batadv0: Removing interface: ip6gretap2 [ 408.871143][T11141] netlink: 'syz.3.1343': attribute type 10 has an invalid length. [ 408.919316][T11141] team0: Device dummy0 failed to register rx_handler [ 408.946758][T11136] wg1 speed is unknown, defaulting to 1000 [ 408.987267][T11136] lo speed is unknown, defaulting to 1000 [ 409.016565][T11143] wg1 speed is unknown, defaulting to 1000 [ 409.057121][T11143] lo speed is unknown, defaulting to 1000 [ 409.103153][T11151] wg1 speed is unknown, defaulting to 1000 [ 409.141837][T11151] lo speed is unknown, defaulting to 1000 [ 409.178160][T11165] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20003 [ 409.389283][T11170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1350'. [ 409.827265][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1352'. [ 409.973440][T11180] IPVS: Error connecting to the multicast addr [ 409.988954][T11182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1354'. [ 410.074146][T11182] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 410.094336][T11182] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1354'. [ 410.223592][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1356'. [ 410.660046][T11214] smc: net device hsr0 applied user defined pnetid SYZ2 [ 410.729283][T11207] wg1 speed is unknown, defaulting to 1000 [ 410.745020][T11207] lo speed is unknown, defaulting to 1000 [ 410.758033][T11214] smc: net device hsr0 erased user defined pnetid SYZ2 [ 410.886445][T11223] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1363'. [ 411.147721][T11213] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 411.557923][T11240] Cannot find add_set index 2 as target [ 411.593026][T11240] netlink: 'syz.2.1368': attribute type 1 has an invalid length. [ 411.750477][T11240] bond3: entered promiscuous mode [ 411.768027][T11240] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.851026][T11244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.865551][T11244] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 411.884180][T11244] bond3: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 411.907195][T11244] bond3: (slave gre2): making interface the new active one [ 411.922956][T11244] gre2: entered promiscuous mode [ 411.934478][T11244] bond3: (slave gre2): Enslaving as an active interface with an up link [ 411.960801][T11253] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1371'. [ 412.285615][T11256] wg1 speed is unknown, defaulting to 1000 [ 412.328828][T11256] lo speed is unknown, defaulting to 1000 [ 412.564699][T11267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1374'. [ 412.762746][T11270] wg1 speed is unknown, defaulting to 1000 [ 412.770858][T11270] lo speed is unknown, defaulting to 1000 [ 413.169966][T11283] __nla_validate_parse: 1 callbacks suppressed [ 413.169989][T11283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1378'. [ 413.680404][T11292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.726199][T11292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'. [ 413.743460][T11295] netlink: 'syz.1.1383': attribute type 13 has an invalid length. [ 414.537245][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1388'. [ 414.607550][T11313] bond4: entered allmulticast mode [ 414.613517][T11313] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.778709][T11324] netlink: 'syz.2.1389': attribute type 10 has an invalid length. [ 414.788997][T11324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1389'. [ 414.827242][T11324] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 414.939318][T11333] netlink: 'syz.1.1392': attribute type 1 has an invalid length. [ 415.162619][T11335] syzkaller0: entered promiscuous mode [ 415.170680][T11335] syzkaller0: entered allmulticast mode [ 415.186094][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 415.204709][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 415.231170][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 415.255112][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 415.279047][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 415.300469][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 415.321092][T11339] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.152528][T11399] veth7: entered promiscuous mode [ 417.683185][T11446] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 417.713618][T11447] syzkaller0: entered promiscuous mode [ 417.719161][T11447] syzkaller0: entered allmulticast mode [ 417.795082][T11445] netlink: 'syz.3.1422': attribute type 6 has an invalid length. [ 417.978117][T11464] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 418.108936][T11467] syzkaller0: entered promiscuous mode [ 418.116045][T11467] syzkaller0: entered allmulticast mode [ 418.201626][T11478] __nla_validate_parse: 19 callbacks suppressed [ 418.201648][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1431'. [ 418.281841][T11483] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1427'. [ 418.292880][ T8084] IPVS: starting estimator thread 0... [ 418.352395][T11484] wg1 speed is unknown, defaulting to 1000 [ 418.376548][T11484] lo speed is unknown, defaulting to 1000 [ 418.421175][T11485] IPVS: using max 25 ests per chain, 60000 per kthread [ 418.435640][T11490] FAULT_INJECTION: forcing a failure. [ 418.435640][T11490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.476043][T11490] CPU: 1 UID: 0 PID: 11490 Comm: syz.4.1433 Not tainted syzkaller #0 PREEMPT(full) [ 418.476075][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.476089][T11490] Call Trace: [ 418.476098][T11490] [ 418.476108][T11490] dump_stack_lvl+0xe8/0x150 [ 418.476142][T11490] should_fail_ex+0x414/0x560 [ 418.476184][T11490] _copy_to_user+0x31/0xb0 [ 418.476215][T11490] simple_read_from_buffer+0xe1/0x170 [ 418.476248][T11490] proc_fail_nth_read+0x1b3/0x220 [ 418.476276][T11490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.476303][T11490] ? rw_verify_area+0x2a6/0x4d0 [ 418.476336][T11490] ? __fget_files+0x2a/0x420 [ 418.476360][T11490] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.476385][T11490] vfs_read+0x200/0xa30 [ 418.476405][T11490] ? fdget_pos+0x247/0x320 [ 418.476438][T11490] ? __pfx___mutex_lock+0x10/0x10 [ 418.476464][T11490] ? __pfx_vfs_read+0x10/0x10 [ 418.476487][T11490] ? __fget_files+0x2a/0x420 [ 418.476519][T11490] ? __fget_files+0x3a0/0x420 [ 418.476546][T11490] ? __fget_files+0x2a/0x420 [ 418.476584][T11490] ksys_read+0x145/0x250 [ 418.476608][T11490] ? __pfx_ksys_read+0x10/0x10 [ 418.476642][T11490] do_syscall_64+0xec/0xf80 [ 418.476666][T11490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.476687][T11490] ? trace_irq_disable+0x37/0x100 [ 418.476716][T11490] ? clear_bhb_loop+0x60/0xb0 [ 418.476744][T11490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.476765][T11490] RIP: 0033:0x7fe929f8e15c [ 418.476785][T11490] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 418.476804][T11490] RSP: 002b:00007fe92ad75030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.476828][T11490] RAX: ffffffffffffffda RBX: 00007fe92a1e5fa0 RCX: 00007fe929f8e15c [ 418.476845][T11490] RDX: 000000000000000f RSI: 00007fe92ad750a0 RDI: 0000000000000004 [ 418.476858][T11490] RBP: 00007fe92ad75090 R08: 0000000000000000 R09: 0000000000000000 [ 418.476873][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.476886][T11490] R13: 00007fe92a1e6038 R14: 00007fe92a1e5fa0 R15: 00007fff7de3c568 [ 418.476923][T11490] [ 418.876516][T11492] netlink: 'syz.4.1434': attribute type 10 has an invalid length. [ 418.924753][T11492] hsr0: entered promiscuous mode [ 418.951038][T11492] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 418.961733][T11492] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 419.020707][T11492] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 419.127724][T11493] wg1 speed is unknown, defaulting to 1000 [ 419.291628][T11493] lo speed is unknown, defaulting to 1000 [ 419.321557][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 419.438894][T11505] macvtap1: entered promiscuous mode [ 419.444773][T11505] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 419.501544][T11509] bond3: (slave gre2): Releasing backup interface [ 419.511562][T11509] gre2: left promiscuous mode [ 420.077699][T11538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1445'. [ 420.301645][T11543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1447'. [ 420.330923][T11543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1447'. [ 420.558735][T11556] netlink: 'syz.0.1450': attribute type 6 has an invalid length. [ 420.597847][T11556] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1450'. [ 420.641065][T11560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1449'. [ 420.661955][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1450'. [ 420.812497][T11560] wg1 speed is unknown, defaulting to 1000 [ 420.820057][T11560] lo speed is unknown, defaulting to 1000 [ 421.046492][T11571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1454'. [ 421.249727][T11573] netlink: 'syz.0.1455': attribute type 1 has an invalid length. [ 421.281228][T11578] netlink: 'syz.2.1456': attribute type 1 has an invalid length. [ 421.540161][T11581] netlink: 'syz.2.1457': attribute type 4 has an invalid length. [ 421.716587][T11563] bridge_slave_0: left allmulticast mode [ 421.772149][T11563] bridge_slave_0: left promiscuous mode [ 421.807123][T11563] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.853168][T11563] bridge_slave_1: left allmulticast mode [ 421.874556][T11563] bridge_slave_1: left promiscuous mode [ 421.920965][T11563] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.949938][T11563] bond0: (slave bond_slave_0): Releasing backup interface [ 421.969892][T11563] bond0: (slave bond_slave_1): Releasing backup interface [ 421.981531][T11607] netlink: 'syz.4.1463': attribute type 30 has an invalid length. [ 421.997423][T11563] team0: Port device team_slave_0 removed [ 422.010908][T11563] team0: Port device team_slave_1 removed [ 422.017323][T11563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.026699][T11563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.034837][T11563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.156842][T11603] wg1 speed is unknown, defaulting to 1000 [ 422.190931][T11603] lo speed is unknown, defaulting to 1000 [ 422.767791][T11642] sctp: [Deprecated]: syz.4.1472 (pid 11642) Use of int in maxseg socket option. [ 422.767791][T11642] Use struct sctp_assoc_value instead [ 423.067177][T11654] wg1 speed is unknown, defaulting to 1000 [ 423.082817][T11654] lo speed is unknown, defaulting to 1000 [ 423.309075][T11668] __nla_validate_parse: 6 callbacks suppressed [ 423.309095][T11668] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1476'. [ 423.355535][T11664] sch_fq: defrate 4294967293 ignored. [ 423.439912][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 423.453342][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1477'. [ 423.468750][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1477'. [ 423.507503][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 423.647520][T11678] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 423.671678][T11678] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 423.696687][T11679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1477'. [ 423.732362][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 423.760776][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 423.902736][T11673] macvlan2: entered promiscuous mode [ 423.908217][T11673] macvlan2: entered allmulticast mode [ 423.922973][T11673] bond4: (slave macvlan2): Error -98 calling set_mac_address [ 423.967464][T11689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1480'. [ 424.062608][T11692] netlink: 'syz.4.1481': attribute type 11 has an invalid length. [ 424.073681][T11692] netlink: 173856 bytes leftover after parsing attributes in process `syz.4.1481'. [ 425.177736][T11734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.191168][T11734] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.203810][T11734] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.224290][T11763] netlink: 'syz.3.1497': attribute type 3 has an invalid length. [ 425.250327][ T8084] lo speed is unknown, defaulting to 1000 [ 425.271851][ T8084] syz2: Port: 1 Link ACTIVE [ 425.634867][T11796] rdma_op ffff88802877a1f0 conn xmit_rdma 0000000000000000 [ 426.770891][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 427.243110][T11820] wg1 speed is unknown, defaulting to 1000 [ 427.255954][T11820] lo speed is unknown, defaulting to 1000 [ 427.315994][T11832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.096337][T11862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.325966][T11868] wg1 speed is unknown, defaulting to 1000 [ 428.344377][T11868] lo speed is unknown, defaulting to 1000 [ 428.523052][T11879] syzkaller1: entered promiscuous mode [ 428.535909][T11879] syzkaller1: entered allmulticast mode [ 428.912803][T11906] __nla_validate_parse: 5 callbacks suppressed [ 428.912820][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 429.579198][T11930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1538'. [ 429.757697][T11944] wg1 speed is unknown, defaulting to 1000 [ 429.782868][T11944] lo speed is unknown, defaulting to 1000 [ 430.023900][T11957] wg1 speed is unknown, defaulting to 1000 [ 430.063496][T11957] lo speed is unknown, defaulting to 1000 [ 430.078822][T11961] ip6gre1: entered promiscuous mode [ 430.432972][T11978] netlink: 'syz.2.1550': attribute type 13 has an invalid length. [ 430.449960][T11978] netlink: 'syz.2.1550': attribute type 12 has an invalid length. [ 430.487368][T11981] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1550'. [ 430.556688][T11979] dvmrp0: entered allmulticast mode [ 430.803195][T11758] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 431.031247][T11996] wg1 speed is unknown, defaulting to 1000 [ 431.126438][T11996] lo speed is unknown, defaulting to 1000 [ 431.797045][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 431.823216][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 431.891167][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1561'. [ 432.256021][T12042] syzkaller1: entered promiscuous mode [ 432.261703][T12042] syzkaller1: entered allmulticast mode [ 432.388538][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 432.697248][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1567'. [ 433.086415][T12074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1571'. [ 433.122721][T12074] --map-set only usable from mangle table [ 433.235459][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1571'. [ 433.515463][T12088] netlink: 'syz.4.1572': attribute type 13 has an invalid length. [ 433.523784][T12088] netlink: 'syz.4.1572': attribute type 17 has an invalid length. [ 433.585071][T12088] gre0: left promiscuous mode [ 433.589833][T12088] gre0: left allmulticast mode [ 433.637864][T12088] erspan0: left promiscuous mode [ 433.772319][T12088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.785580][T12088] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.821730][T12088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 433.918755][T12096] wg1 speed is unknown, defaulting to 1000 [ 433.942861][T12096] lo speed is unknown, defaulting to 1000 [ 433.993551][T12099] netlink: 'syz.3.1577': attribute type 1 has an invalid length. [ 434.024131][T12101] netlink: 'syz.2.1578': attribute type 3 has an invalid length. [ 434.097092][T12099] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.119563][T12099] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 434.133074][T12099] bond3: (slave wlan0): Opening slave failed [ 434.143651][T12099] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1577'. [ 434.598426][T12121] batadv1: entered promiscuous mode [ 434.652889][ T30] audit: type=1804 audit(1768148802.778:5): pid=12125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1584" name="/newroot/365/cgroup.controllers" dev="tmpfs" ino=1876 res=1 errno=0 [ 434.690529][ T30] audit: type=1800 audit(1768148802.788:6): pid=12125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1584" name="cgroup.controllers" dev="tmpfs" ino=1876 res=0 errno=0 [ 434.713581][ T30] audit: type=1804 audit(1768148802.818:7): pid=12125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1584" name="/newroot/365/cgroup.controllers" dev="tmpfs" ino=1876 res=1 errno=0 [ 435.127249][T12139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1587'. [ 435.265464][T12135] wg1 speed is unknown, defaulting to 1000 [ 435.361274][T12135] lo speed is unknown, defaulting to 1000 [ 435.771458][T12176] wg1 speed is unknown, defaulting to 1000 [ 435.779735][T12176] lo speed is unknown, defaulting to 1000 [ 436.112960][T12189] netlink: 'syz.1.1599': attribute type 10 has an invalid length. [ 436.278138][T12203] netlink: 'syz.1.1599': attribute type 10 has an invalid length. [ 436.336838][T12207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1601'. [ 436.521158][T12189] team0: Port device v added [ 436.526387][T12198] netlink: 'syz.3.1601': attribute type 1 has an invalid length. [ 436.534395][T12198] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.584006][T12203] team0: Port device v removed [ 436.596699][T12203] bond0: (slave v): Enslaving as an active interface with an up link [ 436.725911][T12214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1604'. [ 436.728546][T12211] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1603'. [ 436.744375][T12202] wg1 speed is unknown, defaulting to 1000 [ 436.745917][T12216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1604'. [ 436.765908][T12202] lo speed is unknown, defaulting to 1000 [ 437.115711][T12224] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1605'. [ 437.276809][T12220] bond5: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 437.298667][T12220] bond5: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 437.922955][T12240] wg1 speed is unknown, defaulting to 1000 [ 437.936540][T12240] lo speed is unknown, defaulting to 1000 [ 438.196893][T12264] syzkaller1: entered promiscuous mode [ 438.206627][T12264] syzkaller1: entered allmulticast mode [ 438.294561][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1619'. [ 438.887805][T12287] wg1 speed is unknown, defaulting to 1000 [ 438.934358][T12287] lo speed is unknown, defaulting to 1000 [ 439.123366][T12303] wg1 speed is unknown, defaulting to 1000 [ 439.178794][T12303] lo speed is unknown, defaulting to 1000 [ 439.357198][T12308] tipc: Started in network mode [ 439.363521][T12308] tipc: Node identity 1a5904eb9e11, cluster identity 4711 [ 439.371428][T12308] tipc: Enabled bearer , priority 0 [ 439.422685][T12308] tipc: Disabling bearer [ 439.956537][T12317] Ï: option downdelay: invalid value (18446744073709547007) [ 439.970929][T12317] Ï: option downdelay: allowed values 0 - 2147483647 [ 439.980003][T12317] Ï (unregistering): Released all slaves [ 440.052365][T12320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 440.164232][T12328] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 440.216524][T12328] bond5: (slave lo): speed changed to 0 on port 1 [ 440.237870][T12328] bond5: (slave lo): Enslaving as a backup interface with an up link [ 440.251906][T12328] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 440.283127][T12331] xt_hashlimit: size too large, truncated to 1048576 [ 440.655777][T12343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1636'. [ 440.665469][T12346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1636'. [ 440.692977][T12347] netlink: 'syz.4.1637': attribute type 11 has an invalid length. [ 440.702721][T12347] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1637'. [ 441.149663][T12375] netlink: 'syz.4.1644': attribute type 8 has an invalid length. [ 441.582168][T12401] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 441.846131][T12413] wg1 speed is unknown, defaulting to 1000 [ 441.866258][T12413] lo speed is unknown, defaulting to 1000 [ 441.904576][T12423] cgroup: fork rejected by pids controller in /syz4 [ 441.966507][T12417] xt_TCPMSS: Only works on TCP SYN packets [ 441.988335][T12417] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1652'. [ 442.372131][T12539] netlink: 'syz.2.1659': attribute type 8 has an invalid length. [ 443.260972][T12562] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 443.349213][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 443.360440][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 443.369047][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 443.377922][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 443.391482][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 443.474923][T12568] wg1 speed is unknown, defaulting to 1000 [ 443.492514][T12568] lo speed is unknown, defaulting to 1000 [ 443.504104][T12572] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1668'. [ 443.818853][T12579] wg1 speed is unknown, defaulting to 1000 [ 443.844488][T12579] lo speed is unknown, defaulting to 1000 [ 444.304305][T12568] chnl_net:caif_netlink_parms(): no params data found [ 444.889101][T12616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'. [ 445.028109][T12568] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.059079][T12568] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.088031][T12568] bridge_slave_0: entered allmulticast mode [ 445.113210][T12568] bridge_slave_0: entered promiscuous mode [ 445.278234][T12568] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.299136][T12568] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.317857][T12568] bridge_slave_1: entered allmulticast mode [ 445.363305][T12568] bridge_slave_1: entered promiscuous mode [ 445.490882][ T5847] Bluetooth: hci4: command tx timeout [ 445.519080][T12568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.545579][T12568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.605556][T12568] team0: Port device team_slave_0 added [ 445.625267][T12568] team0: Port device team_slave_1 added [ 445.752180][T12568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.770738][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.810223][T12568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.828823][T12638] wg1 speed is unknown, defaulting to 1000 [ 445.854857][T12638] lo speed is unknown, defaulting to 1000 [ 445.863726][T12568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.875478][T12568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.902184][T12568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.038058][T12652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1687'. [ 446.064483][T12568] hsr_slave_0: entered promiscuous mode [ 446.081505][T12568] hsr_slave_1: entered promiscuous mode [ 446.717254][T12568] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.756580][ T30] audit: type=1804 audit(1768148814.888:8): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1693" name="/newroot/321/cgroup.controllers" dev="tmpfs" ino=1656 res=1 errno=0 [ 446.819059][ T30] audit: type=1800 audit(1768148814.888:9): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1693" name="cgroup.controllers" dev="tmpfs" ino=1656 res=0 errno=0 [ 446.854201][T12568] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.861297][T12673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1694'. [ 446.873920][ T30] audit: type=1800 audit(1768148814.918:10): pid=12671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1693" name="cgroup.controllers" dev="tmpfs" ino=1656 res=0 errno=0 [ 446.913698][T12673] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1694'. [ 446.963720][T12683] netlink: 'syz.1.1696': attribute type 10 has an invalid length. [ 447.023917][T12681] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1695'. [ 447.076338][T12568] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.222049][T12568] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.266313][T12693] tipc: New replicast peer: 255.255.255.255 [ 447.282195][T12693] tipc: Enabled bearer , priority 10 [ 447.292274][T12693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1698'. [ 447.391482][T12698] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1700'. [ 447.411073][T12698] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1700'. [ 447.543361][T12568] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 447.565837][T12702] wg1 speed is unknown, defaulting to 1000 [ 447.568181][T12568] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 447.581002][ T5847] Bluetooth: hci4: command tx timeout [ 447.596717][T12702] lo speed is unknown, defaulting to 1000 [ 447.598102][T12568] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 447.633860][T12707] gretap0: entered promiscuous mode [ 447.647156][T12707] vlan0: entered promiscuous mode [ 447.699497][T12568] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 447.997169][T12568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.054011][T12568] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.085858][T11758] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.093084][T11758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.136167][T11775] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.143410][T11775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.185275][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 448.194855][T12736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 448.274933][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1707'. [ 448.414519][ T9] tipc: Node number set to 1982213540 [ 448.822838][T12568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.917326][T12767] x_tables: ip_tables: ah match: only valid for protocol 51 [ 449.146450][ T10] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 449.272269][T12783] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.333107][T12781] bond4 (unregistering): Released all slaves [ 449.341077][T12789] --map-set only usable from mangle table [ 449.395266][T12783] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.485834][T12783] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.500937][ T10] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 449.542757][T12568] veth0_vlan: entered promiscuous mode [ 449.594118][T12783] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.632245][T12568] veth1_vlan: entered promiscuous mode [ 449.652893][ T5847] Bluetooth: hci4: command tx timeout [ 449.756926][T11752] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.766142][T11752] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.804910][T11752] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.814295][T11752] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.859889][T12568] veth0_macvtap: entered promiscuous mode [ 449.883109][T12568] veth1_macvtap: entered promiscuous mode [ 449.915625][T12568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.937090][T12568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.960536][T12810] wg1 speed is unknown, defaulting to 1000 [ 449.986766][T11757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.996039][T12810] lo speed is unknown, defaulting to 1000 [ 450.011587][T11757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.025985][T11757] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.033085][T12813] netlink: 'syz.3.1726': attribute type 2 has an invalid length. [ 450.083010][T12813] !: entered promiscuous mode [ 450.121963][T11757] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.175819][ T1927] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 450.355775][T11757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.369492][T11757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.484845][T11752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.503150][T11752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.757228][T12840] netlink: 'syz.0.1735': attribute type 1 has an invalid length. [ 450.894201][T12840] xt_policy: output policy not valid in PREROUTING and INPUT [ 451.368968][T12853] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.376577][T12853] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.476740][T12853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.493120][T12853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.685791][T12879] tap0: tun_chr_ioctl cmd 1074025676 [ 451.691353][T12879] tap0: owner set to 0 [ 451.695858][T12872] syzkaller0: entered promiscuous mode [ 451.702742][T12863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.721158][T12872] syzkaller0: entered allmulticast mode [ 451.738133][ T5847] Bluetooth: hci4: command tx timeout [ 451.758871][T11775] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.788071][T11752] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 451.796819][T11752] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 451.825067][T11775] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.855957][T11775] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.861473][ T8084] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 451.883410][T12867] wg1 speed is unknown, defaulting to 1000 [ 451.904393][T12867] lo speed is unknown, defaulting to 1000 [ 451.912538][T11775] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.298360][T12903] wg1 speed is unknown, defaulting to 1000 [ 452.308715][T12903] lo speed is unknown, defaulting to 1000 [ 452.988852][T12918] netlink: 'syz.4.1750': attribute type 13 has an invalid length. [ 452.996832][T12919] netlink: 'syz.4.1750': attribute type 13 has an invalid length. [ 453.265783][T12932] netlink: 'syz.3.1754': attribute type 178 has an invalid length. [ 453.530447][T12940] netlink: 'syz.0.1756': attribute type 5 has an invalid length. [ 455.159795][T12971] __nla_validate_parse: 5 callbacks suppressed [ 455.159816][T12971] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1765'. [ 455.180031][T12964] pim6reg1: entered promiscuous mode [ 455.185546][T12964] pim6reg1: entered allmulticast mode [ 455.271275][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1766'. [ 455.334705][T12977] wg1 speed is unknown, defaulting to 1000 [ 455.365309][T12977] lo speed is unknown, defaulting to 1000 [ 455.492911][T12986] vlan2: entered promiscuous mode [ 455.498065][T12986] bridge0: entered promiscuous mode [ 455.693901][T12991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1770'. [ 455.727465][T12984] bond4: option arp_validate: invalid value (18446744073491447809) [ 455.767499][T12984] bond4 (unregistering): Released all slaves [ 455.914435][T12995] 8021q: VLANs not supported on ip_vti0 [ 455.970895][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 456.227360][T13016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1773'. [ 456.432763][T13027] netlink: 'syz.3.1780': attribute type 30 has an invalid length. [ 456.548399][T13030] bridge5: entered promiscuous mode [ 456.565205][T13034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1781'. [ 456.570734][T13030] bridge5: entered allmulticast mode [ 456.637902][T13030] team0: Port device bridge5 added [ 456.894659][T13050] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1786'. [ 457.294877][T13062] wg1 speed is unknown, defaulting to 1000 [ 457.309610][T13062] lo speed is unknown, defaulting to 1000 [ 457.365897][T13066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1789'. [ 457.515720][T13068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'. [ 457.657670][ T30] audit: type=1804 audit(1768148825.788:11): pid=13075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1791" name="/newroot/11/cgroup.controllers" dev="tmpfs" ino=76 res=1 errno=0 [ 457.741121][ T30] audit: type=1800 audit(1768148825.828:12): pid=13075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1791" name="cgroup.controllers" dev="tmpfs" ino=76 res=0 errno=0 [ 457.884982][T13080] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1794'. [ 458.492967][T13108] IPVS: length: 35 != 1272 [ 458.886944][T13121] ipvlan1: entered promiscuous mode [ 458.935187][T13119] ipvlan1: left promiscuous mode [ 459.179826][T13139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1808'. [ 459.296699][T13143] IPVS: Error connecting to the multicast addr [ 459.476114][T13146] wg1 speed is unknown, defaulting to 1000 [ 459.490158][T13146] lo speed is unknown, defaulting to 1000 [ 459.610173][T13154] wg1 speed is unknown, defaulting to 1000 [ 459.668267][T13154] lo speed is unknown, defaulting to 1000 [ 459.787886][T13172] wg1 speed is unknown, defaulting to 1000 [ 459.822327][T13172] lo speed is unknown, defaulting to 1000 [ 461.586289][T13226] __nla_validate_parse: 6 callbacks suppressed [ 461.586394][T13226] netlink: 996 bytes leftover after parsing attributes in process `syz.1.1832'. [ 462.017804][T13231] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1833'. [ 462.087378][T13238] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 462.432868][T13258] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 462.504927][T13258] bond1: (slave lo): Enslaving as a backup interface with an up link [ 462.557635][T13258] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 462.667470][T13275] siw: device registration error -23 [ 462.848672][T13294] siw: device registration error -23 [ 462.936389][T13294] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1849'. [ 462.955369][T13296] wg1 speed is unknown, defaulting to 1000 [ 462.963291][T13296] lo speed is unknown, defaulting to 1000 [ 463.099658][T13294] ip6tnl2: entered allmulticast mode [ 463.511088][T11755] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.640267][T11755] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.656351][T13332] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 463.737701][T11755] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.779001][T11755] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.798045][T13336] syzkaller1: entered promiscuous mode [ 463.804445][T13336] syzkaller1: entered allmulticast mode [ 463.824788][T13331] wg1 speed is unknown, defaulting to 1000 [ 463.886490][T13331] lo speed is unknown, defaulting to 1000 [ 464.078195][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1860'. [ 464.252714][T11755] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.271113][T11755] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.280569][T11755] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.290037][ T3664] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.375464][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 464.385465][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 464.450808][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 464.783629][T13375] netlink: 'syz.2.1869': attribute type 23 has an invalid length. [ 464.801673][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1869'. [ 464.928015][T13384] netlink: 'syz.0.1871': attribute type 1 has an invalid length. [ 464.958136][T13383] netlink: 'syz.0.1871': attribute type 1 has an invalid length. [ 465.120858][T13383] 8021q: adding VLAN 0 to HW filter on device bond5 [ 465.343057][T13403] wg1 speed is unknown, defaulting to 1000 [ 465.381590][T13403] lo speed is unknown, defaulting to 1000 [ 465.761385][T13431] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 465.959374][T13442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1886'. [ 466.142158][T13448] tipc: Enabled bearer , priority 0 [ 466.152618][T13448] syzkaller0: entered promiscuous mode [ 466.158875][T13448] syzkaller0: entered allmulticast mode [ 466.169202][T13448] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 466.213829][T13446] Bluetooth: hci1: too big key_count value 29096 [ 466.235124][T13448] tipc: Resetting bearer [ 466.274348][T13447] tipc: Resetting bearer [ 466.300540][T13447] tipc: Disabling bearer [ 466.418052][T13457] wg1 speed is unknown, defaulting to 1000 [ 466.429403][T13457] lo speed is unknown, defaulting to 1000 [ 466.447748][T13455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1891'. [ 466.530510][T13466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1892'. [ 466.869734][T13475] wg1 speed is unknown, defaulting to 1000 [ 466.881441][T13475] lo speed is unknown, defaulting to 1000 [ 467.194253][T13481] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1895'. [ 467.351406][T13481] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.391676][T13484] netlink: 'syz.3.1895': attribute type 10 has an invalid length. [ 467.594167][T13492] x_tables: duplicate underflow at hook 2 [ 467.620862][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 467.630438][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 467.692881][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 467.761356][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 467.936726][T13513] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1901'. [ 467.973082][T13511] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1903'. [ 468.124714][T13516] netlink: zone id is out of range [ 468.143184][T13516] netlink: zone id is out of range [ 468.151360][T13516] netlink: zone id is out of range [ 468.156739][T13516] netlink: zone id is out of range [ 468.186988][T13516] netlink: zone id is out of range [ 468.206276][T13516] netlink: zone id is out of range [ 468.240705][T13516] netlink: zone id is out of range [ 468.258509][T13516] netlink: zone id is out of range [ 468.271047][T13516] netlink: zone id is out of range [ 468.276442][T13516] netlink: zone id is out of range [ 468.344394][T13524] xt_limit: Overflow, try lower: 271964/0 [ 468.377763][T13524] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1907'. [ 468.402066][T13524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1907'. [ 468.450058][T13525] wg1 speed is unknown, defaulting to 1000 [ 468.476177][T13525] lo speed is unknown, defaulting to 1000 [ 468.511334][T13531] netlink: 'syz.4.1908': attribute type 16 has an invalid length. [ 468.519218][T13531] netlink: 'syz.4.1908': attribute type 17 has an invalid length. [ 468.532206][T13531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1908'. [ 468.561579][T13531] lo: Caught tx_queue_len zero misconfig [ 468.792775][T13543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 468.800099][T13543] IPv6: NLM_F_CREATE should be set when creating new route [ 468.807480][T13543] IPv6: NLM_F_CREATE should be set when creating new route [ 468.831759][T13543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.573061][T13576] wg1 speed is unknown, defaulting to 1000 [ 469.583958][T13576] lo speed is unknown, defaulting to 1000 [ 470.060779][T13595] Bluetooth: MGMT ver 1.23 [ 470.954278][T13637] ip6gre2: entered promiscuous mode [ 471.108800][T13642] policy can only be matched on NF_INET_PRE_ROUTING [ 471.108833][T13642] unable to load match [ 471.699163][T13697] wg1 speed is unknown, defaulting to 1000 [ 471.720034][T13697] lo speed is unknown, defaulting to 1000 [ 471.764947][T13700] dummy0: entered promiscuous mode [ 471.770433][T13700] dummy0: entered allmulticast mode [ 472.064793][T13715] netlink: 'syz.2.1961': attribute type 8 has an invalid length. [ 472.185698][T13719] wg1 speed is unknown, defaulting to 1000 [ 472.214396][T13727] __nla_validate_parse: 8 callbacks suppressed [ 472.214418][T13727] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1964'. [ 472.234496][T13719] lo speed is unknown, defaulting to 1000 [ 472.274115][T13728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.523201][T13736] netlink: 'syz.3.1967': attribute type 1 has an invalid length. [ 472.549949][T13736] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1967'. [ 473.148417][T13743] wg1 speed is unknown, defaulting to 1000 [ 473.223192][T13743] lo speed is unknown, defaulting to 1000 [ 473.934621][T13772] wg1 speed is unknown, defaulting to 1000 [ 474.042309][T13772] lo speed is unknown, defaulting to 1000 [ 474.117710][T13783] netlink: 'syz.3.1979': attribute type 13 has an invalid length. [ 474.495127][T13790] batadv_slave_1: entered promiscuous mode [ 474.516175][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 474.611824][T13790] batadv_slave_1 (unregistering): left promiscuous mode [ 474.786290][T13797] wg1 speed is unknown, defaulting to 1000 [ 474.842805][T13797] lo speed is unknown, defaulting to 1000 [ 475.124519][T13811] wg1 speed is unknown, defaulting to 1000 [ 475.132676][T13811] lo speed is unknown, defaulting to 1000 [ 475.754599][T13842] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 475.808552][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'. [ 476.175155][T13859] netlink: 'syz.0.2000': attribute type 3 has an invalid length. [ 476.203850][T13859] dvmrp6: left allmulticast mode [ 476.258077][T13860] siw: device registration error -23 [ 476.305836][T13863] atomic_op ffff888033b9e998 conn xmit_atomic 0000000000000000 [ 476.314263][T13860] net_ratelimit: 36 callbacks suppressed [ 476.314276][T13860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 476.318500][T13863] netlink: 'syz.4.2002': attribute type 23 has an invalid length. [ 476.373296][T13864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.405251][T13864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.608107][T13873] bond0: Device is already in use. [ 476.765797][T13883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2008'. [ 476.778712][T13882] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 476.807955][T13882] bond6 (unregistering): Released all slaves [ 476.830808][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2008'. [ 477.107558][T13901] siw: device registration error -23 [ 477.447532][T13915] wg1 speed is unknown, defaulting to 1000 [ 477.455562][T13915] lo speed is unknown, defaulting to 1000 [ 478.199402][T13953] syzkaller1: entered promiscuous mode [ 478.225443][T13953] syzkaller1: entered allmulticast mode [ 478.389025][T13959] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2031'. [ 478.584124][T13961] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 478.997049][T13983] wg1 speed is unknown, defaulting to 1000 [ 479.027553][T13983] lo speed is unknown, defaulting to 1000 [ 479.114448][T13990] wg1 speed is unknown, defaulting to 1000 [ 479.155596][T13990] lo speed is unknown, defaulting to 1000 [ 479.277692][T14000] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 479.305725][T14000] batman_adv: batadv0: Adding interface: gretap3 [ 479.312916][T14000] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 479.351462][T14000] batman_adv: batadv0: Interface activated: gretap3 [ 479.357809][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2042'. [ 479.413184][T14000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2042'. [ 479.991141][T14016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2047'. [ 480.329913][T14028] xt_TCPMSS: Only works on TCP SYN packets [ 480.450813][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 481.156353][T14050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2052'. [ 481.213757][T14050] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2052'. [ 481.306607][T14064] netlink: 'syz.0.2055': attribute type 10 has an invalid length. [ 481.803859][T14097] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2066'. [ 481.833004][T14097] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 482.091796][T14103] wg1 speed is unknown, defaulting to 1000 [ 482.101750][T14103] lo speed is unknown, defaulting to 1000 [ 482.416748][T14111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'. [ 482.437165][T14112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'. [ 482.694471][T14127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 482.720085][T14127] netlink: 'syz.4.2074': attribute type 13 has an invalid length. [ 482.730521][T14126] netlink: 'syz.2.2075': attribute type 1 has an invalid length. [ 482.769896][T14127] netlink: 'syz.4.2074': attribute type 11 has an invalid length. [ 482.880057][T14129] vlan0: entered allmulticast mode [ 482.900692][T14129] veth1: entered allmulticast mode [ 483.114327][T14140] netlink: 'syz.0.2078': attribute type 10 has an invalid length. [ 483.166856][T14140] dummy0: entered promiscuous mode [ 483.178808][T14140] team0: Port device dummy0 added [ 483.192636][T14139] wg1 speed is unknown, defaulting to 1000 [ 483.201802][T14139] lo speed is unknown, defaulting to 1000 [ 483.500546][T14161] wg1 speed is unknown, defaulting to 1000 [ 483.552045][T14161] lo speed is unknown, defaulting to 1000 [ 483.859575][T14170] wg1 speed is unknown, defaulting to 1000 [ 483.874875][T14170] lo speed is unknown, defaulting to 1000 [ 484.275072][T14181] pim6reg1: entered promiscuous mode [ 484.280650][T14181] pim6reg1: entered allmulticast mode [ 484.724476][T14189] __nla_validate_parse: 6 callbacks suppressed [ 484.724491][T14189] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2091'. [ 485.023651][T14191] syzkaller1: entered promiscuous mode [ 485.030431][T14191] syzkaller1: entered allmulticast mode [ 485.795928][T14202] veth3: entered promiscuous mode [ 485.821512][T14217] wg1 speed is unknown, defaulting to 1000 [ 485.829959][T14217] lo speed is unknown, defaulting to 1000 [ 486.391823][T14261] netlink: 'syz.3.2109': attribute type 1 has an invalid length. [ 486.453883][T14265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2109'. [ 486.510233][T14261] 8021q: adding VLAN 0 to HW filter on device bond5 [ 486.604675][T14265] bond5: entered promiscuous mode [ 486.797185][T14284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2114'. [ 486.823709][T14284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'. [ 486.845141][T14284] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2114'. [ 486.869468][T14284] netlink: 'syz.0.2114': attribute type 3 has an invalid length. [ 486.895894][T14284] netlink: 'syz.0.2114': attribute type 2 has an invalid length. [ 486.925144][T14284] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2114'. [ 486.946184][T14284] netlink: 'syz.0.2114': attribute type 2 has an invalid length. [ 487.274569][T14306] veth6: entered allmulticast mode [ 487.462763][T14320] netlink: 'syz.4.2123': attribute type 2 has an invalid length. [ 487.543777][T14321] wg1 speed is unknown, defaulting to 1000 [ 487.561602][T14321] lo speed is unknown, defaulting to 1000 [ 487.699510][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2125'. [ 487.774090][T14339] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2129'. [ 488.100947][T14350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2132'. [ 488.181574][T14352] netlink: 'syz.2.2134': attribute type 21 has an invalid length. [ 488.212518][T14352] netlink: 'syz.2.2134': attribute type 22 has an invalid length. [ 488.223261][T14352] netlink: 'syz.2.2134': attribute type 23 has an invalid length. [ 488.231682][T14352] netlink: 'syz.2.2134': attribute type 25 has an invalid length. [ 488.239820][T14352] netlink: 'syz.2.2134': attribute type 26 has an invalid length. [ 488.248032][T14352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2134'. [ 488.483566][T14363] wg1 speed is unknown, defaulting to 1000 [ 488.629717][T14363] lo speed is unknown, defaulting to 1000 [ 488.699878][T14369] bond4: Removing last ns target with arp_interval on [ 489.209776][T14394] wg1 speed is unknown, defaulting to 1000 [ 489.217704][T14394] lo speed is unknown, defaulting to 1000 [ 489.326693][T14395] FAULT_INJECTION: forcing a failure. [ 489.326693][T14395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.384234][T14395] CPU: 0 UID: 0 PID: 14395 Comm: syz.1.2146 Not tainted syzkaller #0 PREEMPT(full) [ 489.384267][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.384282][T14395] Call Trace: [ 489.384291][T14395] [ 489.384301][T14395] dump_stack_lvl+0xe8/0x150 [ 489.384339][T14395] should_fail_ex+0x414/0x560 [ 489.384388][T14395] _copy_from_user+0x2d/0xb0 [ 489.384417][T14395] ___sys_sendmsg+0x158/0x2a0 [ 489.384448][T14395] ? __pfx____sys_sendmsg+0x10/0x10 [ 489.384481][T14395] ? kstrtouint+0x6e/0xe0 [ 489.384544][T14395] ? __fget_files+0x2a/0x420 [ 489.384570][T14395] ? __fget_files+0x3a0/0x420 [ 489.384609][T14395] __sys_sendmmsg+0x227/0x430 [ 489.384642][T14395] ? __pfx___sys_sendmmsg+0x10/0x10 [ 489.384667][T14395] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 489.384720][T14395] ? ksys_write+0x22a/0x250 [ 489.384744][T14395] ? __pfx_ksys_write+0x10/0x10 [ 489.384773][T14395] __x64_sys_sendmmsg+0xa0/0xc0 [ 489.384803][T14395] do_syscall_64+0xec/0xf80 [ 489.384825][T14395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.384846][T14395] ? clear_bhb_loop+0x60/0xb0 [ 489.384872][T14395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.384894][T14395] RIP: 0033:0x7f4f3978f749 [ 489.384914][T14395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.384933][T14395] RSP: 002b:00007f4f3a6cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 489.384957][T14395] RAX: ffffffffffffffda RBX: 00007f4f399e5fa0 RCX: 00007f4f3978f749 [ 489.384974][T14395] RDX: 0000000000000001 RSI: 0000200000005ec0 RDI: 0000000000000004 [ 489.384988][T14395] RBP: 00007f4f3a6cf090 R08: 0000000000000000 R09: 0000000000000000 [ 489.385003][T14395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.385016][T14395] R13: 00007f4f399e6038 R14: 00007f4f399e5fa0 R15: 00007fff51d60378 [ 489.385051][T14395] [ 489.647372][T14399] wg1 speed is unknown, defaulting to 1000 [ 489.694799][T14399] lo speed is unknown, defaulting to 1000 [ 489.848766][T14415] __nla_validate_parse: 1 callbacks suppressed [ 489.848786][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2150'. [ 489.865269][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2150'. [ 489.880480][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2150'. [ 489.890721][T14416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2150'. [ 489.916586][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2150'. [ 490.107481][T14422] pim6reg1: entered promiscuous mode [ 490.113296][T14422] pim6reg1: entered allmulticast mode [ 490.131026][T14422] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2152'. [ 490.168942][T14404] wg1 speed is unknown, defaulting to 1000 [ 490.227139][T14404] lo speed is unknown, defaulting to 1000 [ 490.331486][T14427] tipc: Enabled bearer , priority 0 [ 490.338958][T14427] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 490.346502][T14427] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 490.462720][T14427] tipc: Resetting bearer [ 490.480530][T14434] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2157'. [ 490.513256][T14434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2157'. [ 490.705398][T14430] wg1 speed is unknown, defaulting to 1000 [ 490.745909][T14430] lo speed is unknown, defaulting to 1000 [ 490.791296][T14438] wg1 speed is unknown, defaulting to 1000 [ 490.820024][T14438] lo speed is unknown, defaulting to 1000 [ 491.237066][T14451] wg1 speed is unknown, defaulting to 1000 [ 491.246186][T14451] lo speed is unknown, defaulting to 1000 [ 491.529302][T14455] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2163'. [ 491.604678][T14458] validate_nla: 2 callbacks suppressed [ 491.604699][T14458] netlink: 'syz.3.2164': attribute type 4 has an invalid length. [ 491.747638][T14461] syzkaller1: entered promiscuous mode [ 491.763474][T14461] syzkaller1: entered allmulticast mode [ 493.031025][T14481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2170'. [ 493.220359][T14490] wg1 speed is unknown, defaulting to 1000 [ 493.269503][T14490] lo speed is unknown, defaulting to 1000 [ 493.640005][T14506] netlink: 'syz.3.2177': attribute type 39 has an invalid length. [ 493.979486][T14527] syz.3.2181 (14527) used obsolete PPPIOCDETACH ioctl [ 494.085177][T14525] wg1 speed is unknown, defaulting to 1000 [ 494.104389][T14525] lo speed is unknown, defaulting to 1000 [ 494.954250][T14554] wg1 speed is unknown, defaulting to 1000 [ 495.146342][T14563] netlink: 'syz.3.2191': attribute type 39 has an invalid length. [ 495.161115][T14554] lo speed is unknown, defaulting to 1000 [ 495.255331][T14575] __nla_validate_parse: 2 callbacks suppressed [ 495.255352][T14575] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2195'. [ 495.662264][T14589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2197'. [ 496.098663][T14601] FAULT_INJECTION: forcing a failure. [ 496.098663][T14601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.163112][T14601] CPU: 1 UID: 0 PID: 14601 Comm: syz.4.2201 Not tainted syzkaller #0 PREEMPT(full) [ 496.163145][T14601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.163158][T14601] Call Trace: [ 496.163167][T14601] [ 496.163177][T14601] dump_stack_lvl+0xe8/0x150 [ 496.163212][T14601] should_fail_ex+0x414/0x560 [ 496.163254][T14601] _copy_from_user+0x2d/0xb0 [ 496.163284][T14601] kstrtouint_from_user+0xc4/0x170 [ 496.163308][T14601] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 496.163347][T14601] proc_fail_nth_write+0x88/0x200 [ 496.163373][T14601] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 496.163403][T14601] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 496.163429][T14601] vfs_write+0x27e/0xb30 [ 496.163458][T14601] ? __pfx_vfs_write+0x10/0x10 [ 496.163481][T14601] ? __fget_files+0x2a/0x420 [ 496.163514][T14601] ? __fget_files+0x3a0/0x420 [ 496.163539][T14601] ? __fget_files+0x2a/0x420 [ 496.163577][T14601] ksys_write+0x145/0x250 [ 496.163600][T14601] ? __pfx_ksys_write+0x10/0x10 [ 496.163635][T14601] do_syscall_64+0xec/0xf80 [ 496.163659][T14601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.163680][T14601] ? trace_irq_disable+0x37/0x100 [ 496.163709][T14601] ? clear_bhb_loop+0x60/0xb0 [ 496.163733][T14601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.163751][T14601] RIP: 0033:0x7f7cb018e1ff [ 496.163768][T14601] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 496.163784][T14601] RSP: 002b:00007f7cb0f89030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 496.163803][T14601] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7cb018e1ff [ 496.163824][T14601] RDX: 0000000000000001 RSI: 00007f7cb0f890a0 RDI: 0000000000000005 [ 496.163835][T14601] RBP: 00007f7cb0f89090 R08: 0000000000000000 R09: 0000000000000000 [ 496.163845][T14601] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 496.163855][T14601] R13: 00007f7cb03e6218 R14: 00007f7cb03e6180 R15: 00007ffe9fd3fac8 [ 496.163884][T14601] [ 496.505925][T14599] wg1 speed is unknown, defaulting to 1000 [ 496.601360][T14594] wg1 speed is unknown, defaulting to 1000 [ 496.601401][T14599] lo speed is unknown, defaulting to 1000 [ 496.618652][T14594] lo speed is unknown, defaulting to 1000 [ 496.712255][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2203'. [ 497.033924][T14615] netlink: 'syz.3.2207': attribute type 39 has an invalid length. [ 497.110821][T14619] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2209'. [ 497.337267][T14626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2212'. [ 497.718759][T14634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.818321][T14637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2215'. [ 498.196515][T14650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2218'. [ 498.362319][T14657] netlink: 'syz.0.2217': attribute type 13 has an invalid length. [ 498.406341][T14653] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2218'. [ 498.574974][T14665] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2222'. [ 498.955592][T14657] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 498.982508][T14679] netlink: 'syz.2.2221': attribute type 39 has an invalid length. [ 499.056537][T14687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2226'. [ 499.144075][ T1927] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.154810][ T1927] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.210961][ T1927] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.246300][ T1927] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.355021][T14692] wg1 speed is unknown, defaulting to 1000 [ 499.384252][T14692] lo speed is unknown, defaulting to 1000 [ 499.690081][T14707] wg1 speed is unknown, defaulting to 1000 [ 499.739538][T14712] bond6: (slave bond_slave_1): Device is not bonding slave [ 499.748155][T14712] bond6: option active_slave: invalid value (bond_slave_1) [ 499.757489][T14712] bond6 (unregistering): Released all slaves [ 499.786945][T14707] lo speed is unknown, defaulting to 1000 [ 500.256233][T14724] netlink: 'syz.1.2238': attribute type 39 has an invalid length. [ 500.582260][T14745] netlink: 'syz.0.2243': attribute type 10 has an invalid length. [ 500.656447][T14748] netlink: 'syz.0.2243': attribute type 10 has an invalid length. [ 500.703977][T14748] dummy0: left promiscuous mode [ 500.735138][T14748] team0: Port device dummy0 removed [ 500.814090][T14748] dummy0: entered promiscuous mode [ 500.826620][T14760] __nla_validate_parse: 3 callbacks suppressed [ 500.826640][T14760] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2247'. [ 500.843539][T14748] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 501.148306][T14772] netlink: 'syz.2.2253': attribute type 3 has an invalid length. [ 501.156275][T14772] netlink: 'syz.2.2253': attribute type 3 has an invalid length. [ 501.173940][T14772] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2253'. [ 501.184459][T14782] x_tables: unsorted entry at hook 2 [ 501.235677][T14779] netlink: 'syz.0.2252': attribute type 39 has an invalid length. [ 501.862896][T14812] netlink: 'syz.2.2260': attribute type 1 has an invalid length. [ 501.969380][T14810] wg1 speed is unknown, defaulting to 1000 [ 502.007302][T14810] lo speed is unknown, defaulting to 1000 [ 502.372207][T14797] wg1 speed is unknown, defaulting to 1000 [ 502.380013][T14797] lo speed is unknown, defaulting to 1000 [ 502.725071][T14842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2268'. [ 502.813300][T14845] ip6tnl0: Caught tx_queue_len zero misconfig [ 502.918669][T14851] netlink: 'syz.4.2272': attribute type 39 has an invalid length. [ 502.992350][T14847] wg1 speed is unknown, defaulting to 1000 [ 503.043375][T14847] lo speed is unknown, defaulting to 1000 [ 503.365679][T14855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2273'. [ 503.721547][T14863] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 504.184541][T14886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2282'. [ 504.380816][T14895] netlink: 464 bytes leftover after parsing attributes in process `syz.4.2286'. [ 504.385891][T14893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2285'. [ 504.430666][T14889] wg1 speed is unknown, defaulting to 1000 [ 504.445975][T14889] lo speed is unknown, defaulting to 1000 [ 504.641681][T14907] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2289'. [ 504.676954][T14909] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2288'. [ 504.688695][T14909] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2288'. [ 504.839433][T14907] wg1 speed is unknown, defaulting to 1000 [ 504.854748][T14907] lo speed is unknown, defaulting to 1000 [ 505.743174][T14961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.338064][T14967] wg1 speed is unknown, defaulting to 1000 [ 506.368887][T14972] __nla_validate_parse: 3 callbacks suppressed [ 506.368906][T14972] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2302'. [ 506.395927][T14967] lo speed is unknown, defaulting to 1000 [ 506.433888][T14969] wg1 speed is unknown, defaulting to 1000 [ 506.483093][T14969] lo speed is unknown, defaulting to 1000 [ 506.527031][T14971] wg1 speed is unknown, defaulting to 1000 [ 506.534790][T14971] lo speed is unknown, defaulting to 1000 [ 506.983510][T14984] wg1 speed is unknown, defaulting to 1000 [ 506.999133][T14981] pim6reg1: entered promiscuous mode [ 507.008178][T14981] pim6reg1: entered allmulticast mode [ 507.054802][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2311'. [ 507.084713][T14984] lo speed is unknown, defaulting to 1000 [ 507.140193][T14993] netlink: 'syz.4.2311': attribute type 8 has an invalid length. [ 507.148290][T14993] sch_fq: defrate 0 ignored. [ 507.269928][T14997] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2312'. [ 507.299441][T14999] tipc: Enabling of bearer rejected, failed to enable media [ 507.613482][T15011] bond1: Removing last ns target with arp_interval on [ 507.722799][T15014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2316'. [ 507.786244][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2318'. [ 507.795882][T15019] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2318'. [ 508.076625][T15026] netlink: 'syz.3.2321': attribute type 9 has an invalid length. [ 508.084801][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2321'. [ 508.148628][T15027] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 508.382128][T15036] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2323'. [ 508.397693][T15036] veth1_to_bridge: mtu greater than device maximum [ 508.545882][T15038] netlink: 'syz.3.2324': attribute type 39 has an invalid length. [ 508.684892][T15042] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2326'. [ 508.774346][T15046] syzkaller0: entered promiscuous mode [ 508.780188][T15046] syzkaller0: entered allmulticast mode [ 508.871476][T15046] macsec1: entered promiscuous mode [ 508.877574][T15046] macsec1: entered allmulticast mode [ 509.365668][T15065] macvlan0: entered promiscuous mode [ 509.371425][T15065] bond0: entered promiscuous mode [ 509.376706][T15065] macvlan0: entered allmulticast mode [ 509.382383][T15065] bond0: entered allmulticast mode [ 509.388245][T15065] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 509.527474][T15076] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2333'. [ 509.831107][T15089] netlink: 'syz.0.2336': attribute type 39 has an invalid length. [ 509.967775][T15092] Cannot find add_set index 3 as target [ 510.254839][T15110] netlink: 'syz.4.2342': attribute type 1 has an invalid length. [ 510.366288][T15118] wg2: left promiscuous mode [ 510.371220][T15118] wg2: left allmulticast mode [ 510.379835][T15118] macvlan0: left allmulticast mode [ 510.389146][T15118] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 510.397911][T15118] macvtap1: left promiscuous mode [ 510.403053][T15118] macvtap1: left allmulticast mode [ 510.409493][T15118] bond1: left promiscuous mode [ 510.414837][T15118] bond1: left allmulticast mode [ 510.420320][T15118] xfrm1: left allmulticast mode [ 510.452530][T15118] ip6tnl2: left allmulticast mode [ 510.526045][T15118] bond5: left promiscuous mode [ 510.533568][T15118] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 510.541113][T15118] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 510.548813][T15118] veth6: left allmulticast mode [ 510.562123][T15122] hsr_slave_0: left promiscuous mode [ 510.588510][T15122] hsr_slave_1: left promiscuous mode [ 511.259787][T15143] netlink: 'syz.4.2356': attribute type 12 has an invalid length. [ 511.281494][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 511.292292][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 511.301420][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 511.326801][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 511.337494][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 511.425236][T15146] wg1 speed is unknown, defaulting to 1000 [ 511.458679][T15146] lo speed is unknown, defaulting to 1000 [ 511.465304][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 511.474188][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 511.490476][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 511.499758][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 511.508194][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 511.633776][T15154] wg1 speed is unknown, defaulting to 1000 [ 511.656529][T15154] lo speed is unknown, defaulting to 1000 [ 511.762025][T15164] xt_hashlimit: size too large, truncated to 1048576 [ 511.852121][T15169] –: renamed from veth1_to_team [ 512.001022][T15173] __nla_validate_parse: 10 callbacks suppressed [ 512.001044][T15173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 512.411510][T15183] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 512.537362][T15146] chnl_net:caif_netlink_parms(): no params data found [ 512.667301][T15201] sch_tbf: burst 1447 is lower than device macvtap0 mtu (1514) ! [ 512.703376][T15192] wg1 speed is unknown, defaulting to 1000 [ 512.704001][T15201] netlink: 'syz.1.2368': attribute type 2 has an invalid length. [ 512.715179][T15192] lo speed is unknown, defaulting to 1000 [ 512.868396][T15146] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.876395][T15146] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.890427][T15146] bridge_slave_0: entered allmulticast mode [ 512.917539][T15146] bridge_slave_0: entered promiscuous mode [ 512.955558][T15146] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.971293][T15219] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2371'. [ 512.982326][T15146] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.989659][T15146] bridge_slave_1: entered allmulticast mode [ 513.017321][T15146] bridge_slave_1: entered promiscuous mode [ 513.122033][T15146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.171914][T15146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.309036][T15146] team0: Port device team_slave_0 added [ 513.346509][T15154] chnl_net:caif_netlink_parms(): no params data found [ 513.359637][T15146] team0: Port device team_slave_1 added [ 513.410826][ T5847] Bluetooth: hci0: command tx timeout [ 513.475445][T15146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.484832][T15146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.511969][T15146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.551885][T15146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.559129][T15146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.585424][T15146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.587504][ T5847] Bluetooth: hci1: command tx timeout [ 513.699437][T15234] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 513.802598][T15154] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.819128][T15154] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.826559][T15154] bridge_slave_0: entered allmulticast mode [ 513.834379][T15154] bridge_slave_0: entered promiscuous mode [ 513.859734][T15154] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.867313][T15154] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.874743][T15154] bridge_slave_1: entered allmulticast mode [ 513.882185][T15154] bridge_slave_1: entered promiscuous mode [ 513.896498][T15146] hsr_slave_0: entered promiscuous mode [ 513.903261][T15146] hsr_slave_1: entered promiscuous mode [ 513.909523][T15146] debugfs: 'hsr0' already exists in 'hsr' [ 513.916706][T15146] Cannot create hsr debugfs directory [ 513.976752][T15154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.022801][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 514.037112][T15154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.067115][T15240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2376'. [ 514.099224][T15154] team0: Port device team_slave_0 added [ 514.124091][T15154] team0: Port device team_slave_1 added [ 514.219496][T15154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.227842][T15154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.254343][T15154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.307835][T15154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.326217][T15154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.366119][T15154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.389935][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2378'. [ 514.426987][T15246] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2378'. [ 514.568403][T15154] hsr_slave_0: entered promiscuous mode [ 514.575666][T15154] hsr_slave_1: entered promiscuous mode [ 514.582776][T15154] debugfs: 'hsr0' already exists in 'hsr' [ 514.588677][T15154] Cannot create hsr debugfs directory [ 514.697735][T15258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2380'. [ 514.732776][T15258] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2380'. [ 514.745460][T15260] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2381'. [ 514.880399][T15264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2383'. [ 514.966964][T15146] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 515.046190][T15146] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 515.087162][T15146] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 515.094750][T15271] netlink: 'syz.4.2387': attribute type 9 has an invalid length. [ 515.117207][T15146] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 515.329941][T15154] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 515.374767][T15154] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 515.395640][T15286] netlink: 'syz.1.2388': attribute type 11 has an invalid length. [ 515.409519][T15154] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 515.447811][T15154] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 515.464730][T15282] wg1 speed is unknown, defaulting to 1000 [ 515.492017][ T5847] Bluetooth: hci0: command tx timeout [ 515.522866][T15282] lo speed is unknown, defaulting to 1000 [ 515.651008][ T5847] Bluetooth: hci1: command tx timeout [ 515.656892][T15146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.882135][T15146] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.909167][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.916716][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.008367][ T3664] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.015656][ T3664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.053760][T15154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.237322][T15154] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.277044][ T3664] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.284267][ T3664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.357782][T11773] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.365053][T11773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.393368][T15320] FAULT_INJECTION: forcing a failure. [ 516.393368][T15320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.469594][T15320] CPU: 1 UID: 0 PID: 15320 Comm: syz.4.2398 Not tainted syzkaller #0 PREEMPT(full) [ 516.469626][T15320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 516.469640][T15320] Call Trace: [ 516.469649][T15320] [ 516.469659][T15320] dump_stack_lvl+0xe8/0x150 [ 516.469692][T15320] should_fail_ex+0x414/0x560 [ 516.469731][T15320] _copy_from_user+0x2d/0xb0 [ 516.469759][T15320] ___sys_sendmsg+0x158/0x2a0 [ 516.469791][T15320] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.469855][T15320] ? __fget_files+0x2a/0x420 [ 516.469881][T15320] ? __fget_files+0x3a0/0x420 [ 516.469918][T15320] __x64_sys_sendmsg+0x19b/0x260 [ 516.469948][T15320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.469985][T15320] ? __pfx_ksys_write+0x10/0x10 [ 516.470018][T15320] do_syscall_64+0xec/0xf80 [ 516.470042][T15320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.470063][T15320] ? trace_irq_disable+0x37/0x100 [ 516.470092][T15320] ? clear_bhb_loop+0x60/0xb0 [ 516.470119][T15320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.470150][T15320] RIP: 0033:0x7f7cb018f749 [ 516.470168][T15320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.470187][T15320] RSP: 002b:00007f7cb0fcb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.470209][T15320] RAX: ffffffffffffffda RBX: 00007f7cb03e5fa0 RCX: 00007f7cb018f749 [ 516.470226][T15320] RDX: 0000000000004080 RSI: 0000200000000040 RDI: 0000000000000004 [ 516.470240][T15320] RBP: 00007f7cb0fcb090 R08: 0000000000000000 R09: 0000000000000000 [ 516.470254][T15320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.470268][T15320] R13: 00007f7cb03e6038 R14: 00007f7cb03e5fa0 R15: 00007ffe9fd3fac8 [ 516.470303][T15320] [ 517.051906][T15341] __nla_validate_parse: 4 callbacks suppressed [ 517.051926][T15341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2404'. [ 517.122812][T15348] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2402'. [ 517.419411][T15353] netlink: 'syz.3.2407': attribute type 13 has an invalid length. [ 517.460790][T15353] netlink: 'syz.3.2407': attribute type 17 has an invalid length. [ 517.573397][ T5847] Bluetooth: hci0: command tx timeout [ 517.607354][T15353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.620823][T15353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.644360][T15358] team0: entered promiscuous mode [ 517.659708][T15358] team0: entered allmulticast mode [ 517.681516][T15358] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 517.731173][ T5847] Bluetooth: hci1: command tx timeout [ 517.731182][T15146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.798971][T15154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.003604][T15372] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2412'. [ 518.153033][T15377] FAULT_INJECTION: forcing a failure. [ 518.153033][T15377] name failslab, interval 1, probability 0, space 0, times 0 [ 518.200679][T15377] CPU: 0 UID: 0 PID: 15377 Comm: syz.3.2413 Not tainted syzkaller #0 PREEMPT(full) [ 518.200709][T15377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 518.200723][T15377] Call Trace: [ 518.200732][T15377] [ 518.200741][T15377] dump_stack_lvl+0xe8/0x150 [ 518.200775][T15377] should_fail_ex+0x414/0x560 [ 518.200816][T15377] should_failslab+0xa8/0x100 [ 518.200845][T15377] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 518.200881][T15377] ? __alloc_skb+0x198/0x3a0 [ 518.200904][T15377] ? __alloc_skb+0x1dc/0x3a0 [ 518.200925][T15377] ? __local_bh_enable_ip+0xd0/0x130 [ 518.200949][T15377] ? __alloc_skb+0x198/0x3a0 [ 518.200973][T15377] __alloc_skb+0x1dc/0x3a0 [ 518.201002][T15377] netlink_sendmsg+0x5c6/0xb30 [ 518.201048][T15377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.201081][T15377] ? aa_sock_msg_perm+0xf1/0x1b0 [ 518.201113][T15377] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 518.201133][T15377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 518.201163][T15377] __sock_sendmsg+0x21c/0x270 [ 518.201213][T15377] ____sys_sendmsg+0x505/0x820 [ 518.201246][T15377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 518.201283][T15377] ? import_iovec+0x74/0xa0 [ 518.201313][T15377] ___sys_sendmsg+0x21f/0x2a0 [ 518.201342][T15377] ? __pfx____sys_sendmsg+0x10/0x10 [ 518.201407][T15377] ? __fget_files+0x2a/0x420 [ 518.201433][T15377] ? __fget_files+0x3a0/0x420 [ 518.201471][T15377] __x64_sys_sendmsg+0x19b/0x260 [ 518.201502][T15377] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 518.201538][T15377] ? __pfx_ksys_write+0x10/0x10 [ 518.201571][T15377] do_syscall_64+0xec/0xf80 [ 518.201596][T15377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.201617][T15377] ? trace_irq_disable+0x37/0x100 [ 518.201645][T15377] ? clear_bhb_loop+0x60/0xb0 [ 518.201672][T15377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.201694][T15377] RIP: 0033:0x7f3eea78f749 [ 518.201713][T15377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.201733][T15377] RSP: 002b:00007f3eeb607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 518.201757][T15377] RAX: ffffffffffffffda RBX: 00007f3eea9e5fa0 RCX: 00007f3eea78f749 [ 518.201774][T15377] RDX: 0000000000004080 RSI: 0000200000000040 RDI: 0000000000000004 [ 518.201788][T15377] RBP: 00007f3eeb607090 R08: 0000000000000000 R09: 0000000000000000 [ 518.201803][T15377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 518.201815][T15377] R13: 00007f3eea9e6038 R14: 00007f3eea9e5fa0 R15: 00007ffcfc0edbd8 [ 518.201849][T15377] [ 518.625538][T15146] veth0_vlan: entered promiscuous mode [ 518.662943][T15146] veth1_vlan: entered promiscuous mode [ 518.754609][T15154] veth0_vlan: entered promiscuous mode [ 518.771728][T15393] nbd0: detected capacity change from 0 to 63 [ 518.796847][T15154] veth1_vlan: entered promiscuous mode [ 518.834820][T15146] veth0_macvtap: entered promiscuous mode [ 518.858085][T15146] veth1_macvtap: entered promiscuous mode [ 518.945275][T15154] veth0_macvtap: entered promiscuous mode [ 518.951672][ T5847] block nbd0: Receive control failed (result -32) [ 518.972569][T15146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.990082][T15154] veth1_macvtap: entered promiscuous mode [ 519.024758][T15146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.061967][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.096236][T15154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.104608][T15409] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2421'. [ 519.126820][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.157589][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.170381][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.184755][T15154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.239319][T15412] sctp: [Deprecated]: syz.1.2423 (pid 15412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.239319][T15412] Use struct sctp_sack_info instead [ 519.277332][T15413] geneve2: entered promiscuous mode [ 519.288798][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.310414][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.356427][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.367026][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.392059][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 519.443559][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 519.456851][T11757] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 519.475095][T15420] dummy0: Caught tx_queue_len zero misconfig [ 519.488668][T11757] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 519.529726][T15424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2426'. [ 519.551521][T15424] dummy0: Device is already in use. [ 519.641241][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.651409][ T5847] Bluetooth: hci0: command tx timeout [ 519.669251][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.724785][ T1927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.747782][ T1927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.810959][ T5847] Bluetooth: hci1: command tx timeout [ 519.914586][T11759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.923570][T11757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.940796][T11759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.950793][T11757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.218733][T15444] netlink: zone id is out of range [ 520.229471][T15444] netlink: zone id is out of range [ 520.239554][T15444] netlink: zone id is out of range [ 520.255454][T15444] netlink: zone id is out of range [ 520.264720][T15444] netlink: zone id is out of range [ 520.286806][T15444] netlink: zone id is out of range [ 520.314110][T15444] netlink: zone id is out of range [ 520.319369][T15444] netlink: zone id is out of range [ 520.345894][T15453] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2432'. [ 520.780347][T15466] tipc: Started in network mode [ 520.795658][T15466] tipc: Node identity 0a049cd7106b, cluster identity 4711 [ 520.822530][T15466] tipc: Enabled bearer , priority 0 [ 520.840533][T15466] syzkaller0: entered promiscuous mode [ 520.846320][T15466] syzkaller0: entered allmulticast mode [ 520.883646][T15472] FAULT_INJECTION: forcing a failure. [ 520.883646][T15472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.905045][T15466] tipc: Resetting bearer [ 520.913210][T15472] CPU: 1 UID: 0 PID: 15472 Comm: syz.3.2438 Not tainted syzkaller #0 PREEMPT(full) [ 520.913241][T15472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 520.913255][T15472] Call Trace: [ 520.913264][T15472] [ 520.913272][T15472] dump_stack_lvl+0xe8/0x150 [ 520.913307][T15472] should_fail_ex+0x414/0x560 [ 520.913348][T15472] _copy_from_iter+0x1cd/0x1630 [ 520.913386][T15472] ? __pfx__copy_from_iter+0x10/0x10 [ 520.913411][T15472] ? __build_skb_around+0x22d/0x3c0 [ 520.913438][T15472] ? __alloc_skb+0x198/0x3a0 [ 520.913462][T15472] ? netlink_sendmsg+0x642/0xb30 [ 520.913488][T15472] ? skb_put+0x11b/0x210 [ 520.913516][T15472] netlink_sendmsg+0x6b2/0xb30 [ 520.913557][T15472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.913591][T15472] ? aa_sock_msg_perm+0xf1/0x1b0 [ 520.913621][T15472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 520.913642][T15472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 520.913672][T15472] __sock_sendmsg+0x21c/0x270 [ 520.913709][T15472] ____sys_sendmsg+0x505/0x820 [ 520.913743][T15472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.913781][T15472] ? import_iovec+0x74/0xa0 [ 520.913819][T15472] ___sys_sendmsg+0x21f/0x2a0 [ 520.913847][T15472] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.913910][T15472] ? __fget_files+0x2a/0x420 [ 520.913935][T15472] ? __fget_files+0x3a0/0x420 [ 520.913971][T15472] __x64_sys_sendmsg+0x19b/0x260 [ 520.914001][T15472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 520.914039][T15472] ? trace_sys_enter+0x5e/0xf0 [ 520.914065][T15472] ? rcu_is_watching+0x15/0xb0 [ 520.914093][T15472] ? trace_sys_enter+0x25/0xf0 [ 520.914123][T15472] do_syscall_64+0xec/0xf80 [ 520.914147][T15472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.914168][T15472] ? trace_irq_disable+0x37/0x100 [ 520.914196][T15472] ? clear_bhb_loop+0x60/0xb0 [ 520.914222][T15472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.914244][T15472] RIP: 0033:0x7f3eea78f749 [ 520.914263][T15472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.914281][T15472] RSP: 002b:00007f3eeb607038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.914304][T15472] RAX: ffffffffffffffda RBX: 00007f3eea9e5fa0 RCX: 00007f3eea78f749 [ 520.914320][T15472] RDX: 0000000000004080 RSI: 0000200000000040 RDI: 0000000000000004 [ 520.914334][T15472] RBP: 00007f3eeb607090 R08: 0000000000000000 R09: 0000000000000000 [ 520.914347][T15472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.914361][T15472] R13: 00007f3eea9e6038 R14: 00007f3eea9e5fa0 R15: 00007ffcfc0edbd8 [ 520.914397][T15472] [ 521.173824][T15464] tipc: Resetting bearer [ 521.211234][T15464] tipc: Disabling bearer [ 521.259550][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2440'. [ 521.294803][T15447] delete_channel: no stack [ 521.349858][T15481] netlink: 'syz.3.2441': attribute type 1 has an invalid length. [ 521.481609][T15489] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2443'. [ 521.485199][T15481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 521.539778][T15494] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2444'. [ 521.563329][T15483] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2440'. [ 521.676749][T15504] No such timeout policy "syz0" [ 522.115845][T15527] FAULT_INJECTION: forcing a failure. [ 522.115845][T15527] name failslab, interval 1, probability 0, space 0, times 0 [ 522.148481][T15527] CPU: 0 UID: 0 PID: 15527 Comm: syz.5.2453 Not tainted syzkaller #0 PREEMPT(full) [ 522.148514][T15527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 522.148529][T15527] Call Trace: [ 522.148539][T15527] [ 522.148548][T15527] dump_stack_lvl+0xe8/0x150 [ 522.148584][T15527] should_fail_ex+0x414/0x560 [ 522.148626][T15527] should_failslab+0xa8/0x100 [ 522.148656][T15527] __kmalloc_noprof+0xdf/0x800 [ 522.148677][T15527] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 522.148702][T15527] ? rcu_is_watching+0x15/0xb0 [ 522.148735][T15527] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 522.148767][T15527] genl_family_rcv_msg_doit+0xb8/0x300 [ 522.148798][T15527] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 522.148830][T15527] ? apparmor_capable+0x137/0x1a0 [ 522.148868][T15527] ? bpf_lsm_capable+0x9/0x20 [ 522.148894][T15527] ? security_capable+0x7e/0x2e0 [ 522.148935][T15527] genl_rcv_msg+0x60e/0x790 [ 522.148964][T15527] ? __pfx_genl_rcv_msg+0x10/0x10 [ 522.148984][T15527] ? __pfx_ieee802154_llsec_add_seclevel+0x10/0x10 [ 522.149069][T15527] netlink_rcv_skb+0x208/0x470 [ 522.149108][T15527] ? __pfx_genl_rcv_msg+0x10/0x10 [ 522.149132][T15527] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 522.149158][T15527] ? genl_rcv+0x19/0x40 [ 522.149203][T15527] ? down_read+0x274/0x2e0 [ 522.149228][T15527] ? genl_rcv+0xd/0x40 [ 522.149250][T15527] genl_rcv+0x28/0x40 [ 522.149268][T15527] netlink_unicast+0x82f/0x9e0 [ 522.149303][T15527] ? __pfx_netlink_unicast+0x10/0x10 [ 522.149327][T15527] ? __alloc_skb+0x198/0x3a0 [ 522.149350][T15527] ? netlink_sendmsg+0x642/0xb30 [ 522.149377][T15527] ? skb_put+0x11b/0x210 [ 522.149410][T15527] netlink_sendmsg+0x805/0xb30 [ 522.149451][T15527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.149486][T15527] ? aa_sock_msg_perm+0xf1/0x1b0 [ 522.149517][T15527] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 522.149537][T15527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.149568][T15527] __sock_sendmsg+0x21c/0x270 [ 522.149606][T15527] ____sys_sendmsg+0x505/0x820 [ 522.149645][T15527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.149683][T15527] ? import_iovec+0x74/0xa0 [ 522.149714][T15527] ___sys_sendmsg+0x21f/0x2a0 [ 522.149745][T15527] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.149815][T15527] ? __fget_files+0x2a/0x420 [ 522.149842][T15527] ? __fget_files+0x3a0/0x420 [ 522.149882][T15527] __x64_sys_sendmsg+0x19b/0x260 [ 522.149913][T15527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.149961][T15527] ? __pfx_ksys_write+0x10/0x10 [ 522.149996][T15527] do_syscall_64+0xec/0xf80 [ 522.150019][T15527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.150041][T15527] ? trace_irq_disable+0x37/0x100 [ 522.150069][T15527] ? clear_bhb_loop+0x60/0xb0 [ 522.150096][T15527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.150118][T15527] RIP: 0033:0x7fe546b8f749 [ 522.150138][T15527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.150157][T15527] RSP: 002b:00007fe54797e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.150180][T15527] RAX: ffffffffffffffda RBX: 00007fe546de5fa0 RCX: 00007fe546b8f749 [ 522.150197][T15527] RDX: 0000000000004080 RSI: 0000200000000040 RDI: 0000000000000004 [ 522.150211][T15527] RBP: 00007fe54797e090 R08: 0000000000000000 R09: 0000000000000000 [ 522.150225][T15527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.150239][T15527] R13: 00007fe546de6038 R14: 00007fe546de5fa0 R15: 00007fffacccb7f8 [ 522.150277][T15527] [ 522.917792][T15521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.982510][T15536] net_ratelimit: 46 callbacks suppressed [ 522.982531][T15536] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 523.154085][T15543] __nla_validate_parse: 2 callbacks suppressed [ 523.154111][T15543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2459'. [ 523.178421][T15544] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2456'. [ 523.354160][T15551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2463'. [ 523.425379][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2463'. [ 523.501348][T15560] FAULT_INJECTION: forcing a failure. [ 523.501348][T15560] name failslab, interval 1, probability 0, space 0, times 0 [ 523.556970][T15560] CPU: 1 UID: 0 PID: 15560 Comm: syz.5.2464 Not tainted syzkaller #0 PREEMPT(full) [ 523.557002][T15560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 523.557016][T15560] Call Trace: [ 523.557025][T15560] [ 523.557034][T15560] dump_stack_lvl+0xe8/0x150 [ 523.557068][T15560] should_fail_ex+0x414/0x560 [ 523.557110][T15560] should_failslab+0xa8/0x100 [ 523.557140][T15560] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 523.557177][T15560] ? __alloc_skb+0x1dc/0x3a0 [ 523.557198][T15560] ? __local_bh_enable_ip+0xd0/0x130 [ 523.557223][T15560] ? __alloc_skb+0x198/0x3a0 [ 523.557247][T15560] __alloc_skb+0x1dc/0x3a0 [ 523.557277][T15560] netlink_ack+0x146/0xa50 [ 523.557302][T15560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.557343][T15560] netlink_rcv_skb+0x28c/0x470 [ 523.557373][T15560] ? __pfx_genl_rcv_msg+0x10/0x10 [ 523.557396][T15560] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 523.557421][T15560] ? genl_rcv+0x19/0x40 [ 523.557460][T15560] ? down_read+0x274/0x2e0 [ 523.557485][T15560] ? genl_rcv+0xd/0x40 [ 523.557507][T15560] genl_rcv+0x28/0x40 [ 523.557533][T15560] netlink_unicast+0x82f/0x9e0 [ 523.557570][T15560] ? __pfx_netlink_unicast+0x10/0x10 [ 523.557595][T15560] ? __alloc_skb+0x198/0x3a0 [ 523.557617][T15560] ? netlink_sendmsg+0x642/0xb30 [ 523.557645][T15560] ? skb_put+0x11b/0x210 [ 523.557672][T15560] netlink_sendmsg+0x805/0xb30 [ 523.557713][T15560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.557746][T15560] ? aa_sock_msg_perm+0xf1/0x1b0 [ 523.557778][T15560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 523.557799][T15560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.557830][T15560] __sock_sendmsg+0x21c/0x270 [ 523.557874][T15560] ____sys_sendmsg+0x505/0x820 [ 523.557908][T15560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 523.557951][T15560] ? import_iovec+0x74/0xa0 [ 523.557983][T15560] ___sys_sendmsg+0x21f/0x2a0 [ 523.558012][T15560] ? __pfx____sys_sendmsg+0x10/0x10 [ 523.558082][T15560] ? __fget_files+0x2a/0x420 [ 523.558108][T15560] ? __fget_files+0x3a0/0x420 [ 523.558148][T15560] __x64_sys_sendmsg+0x19b/0x260 [ 523.558179][T15560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 523.558218][T15560] ? __pfx_ksys_write+0x10/0x10 [ 523.558253][T15560] do_syscall_64+0xec/0xf80 [ 523.558276][T15560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.558297][T15560] ? trace_irq_disable+0x37/0x100 [ 523.558325][T15560] ? clear_bhb_loop+0x60/0xb0 [ 523.558353][T15560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.558374][T15560] RIP: 0033:0x7fe546b8f749 [ 523.558393][T15560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.558412][T15560] RSP: 002b:00007fe54797e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.558436][T15560] RAX: ffffffffffffffda RBX: 00007fe546de5fa0 RCX: 00007fe546b8f749 [ 523.558452][T15560] RDX: 0000000000004080 RSI: 0000200000000040 RDI: 0000000000000004 [ 523.558467][T15560] RBP: 00007fe54797e090 R08: 0000000000000000 R09: 0000000000000000 [ 523.558481][T15560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.558494][T15560] R13: 00007fe546de6038 R14: 00007fe546de5fa0 R15: 00007fffacccb7f8 [ 523.558531][T15560] [ 524.150045][T15567] netlink: 'syz.6.2467': attribute type 33 has an invalid length. [ 524.207316][T15567] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2467'. [ 524.229919][T15567] `: renamed from team0 (while UP) [ 524.473810][T15585] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2473'. [ 524.499742][T15588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2475'. [ 524.520317][T15588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2475'. [ 525.315162][ C1] hrtimer: interrupt took 260140341 ns [ 630.410540][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 630.417560][ C0] rcu: (detected by 0, t=10504 jiffies, g=67333, q=1028 ncpus=2) [ 630.426264][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 7755 (4295000148-4294992393), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 630.439666][ C0] rcu: rcu_preempt kthread starved for 7755 jiffies! g67333 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 630.450883][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 630.460879][ C0] rcu: RCU grace-period kthread stack dump: [ 630.466791][ C0] task:rcu_preempt state:R running task stack:27776 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 630.480381][ C0] Call Trace: [ 630.483690][ C0] [ 630.486655][ C0] __schedule+0x149b/0x4fd0 [ 630.491193][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 630.496161][ C0] ? do_raw_spin_lock+0x121/0x290 [ 630.501247][ C0] ? __pfx___schedule+0x10/0x10 [ 630.506137][ C0] ? schedule+0x91/0x360 [ 630.510437][ C0] schedule+0x165/0x360 [ 630.514638][ C0] schedule_timeout+0x12b/0x270 [ 630.519527][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 630.524940][ C0] ? __pfx_process_timeout+0x10/0x10 [ 630.530285][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 630.536130][ C0] ? prepare_to_swait_event+0x341/0x380 [ 630.541725][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 630.546620][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 630.552807][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 630.558138][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 630.563389][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 630.569240][ C0] rcu_gp_kthread+0x99/0x390 [ 630.573863][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 630.579089][ C0] ? __kthread_parkme+0x7b/0x200 [ 630.584057][ C0] ? __kthread_parkme+0x1a1/0x200 [ 630.589126][ C0] kthread+0x711/0x8a0 [ 630.593235][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 630.598474][ C0] ? __pfx_kthread+0x10/0x10 [ 630.603099][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 630.608336][ C0] ? __pfx_kthread+0x10/0x10 [ 630.612961][ C0] ret_from_fork+0x510/0xa50 [ 630.617584][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 630.622719][ C0] ? __switch_to+0xc9e/0x1480 [ 630.627438][ C0] ? __pfx_kthread+0x10/0x10 [ 630.632067][ C0] ret_from_fork_asm+0x1a/0x30 [ 630.636882][ C0] [ 630.639930][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 630.646279][ C0] Sending NMI from CPU 0 to CPUs 1: [ 630.651512][ C1] NMI backtrace for cpu 1 [ 630.651528][ C1] CPU: 1 UID: 0 PID: 15595 Comm: syz.5.2475 Not tainted syzkaller #0 PREEMPT(full) [ 630.651547][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 630.651559][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5d/0x70 [ 630.651584][ C1] Code: 48 16 00 00 83 fa 02 75 21 48 8b 91 50 16 00 00 48 8b 32 48 8d 7e 01 8b 89 4c 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 fe a7 9b 09 cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 [ 630.651600][ C1] RSP: 0000:ffffc90000a08bf8 EFLAGS: 00000006 [ 630.651615][ C1] RAX: ffffffff89709090 RBX: 0000000000000000 RCX: ffff88802558bd00 [ 630.651628][ C1] RDX: 0000000000010000 RSI: 0000000000000004 RDI: ffff88802a011480 [ 630.651640][ C1] RBP: ffff88802a011480 R08: ffff88802a011483 R09: 1ffff11005402290 [ 630.651653][ C1] R10: dffffc0000000000 R11: ffffed1005402291 R12: 0000000000000000 [ 630.651665][ C1] R13: 0000000000000000 R14: ffff88805735c2a0 R15: ffff88802a011400 [ 630.651678][ C1] FS: 0000000000000000(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 630.651693][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.651705][ C1] CR2: 00007f7cb03e5f88 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 630.651720][ C1] Call Trace: [ 630.651727][ C1] [ 630.651734][ C1] taprio_set_budgets+0x290/0x3b0 [ 630.651767][ C1] advance_sched+0x963/0xc90 [ 630.651800][ C1] ? __pfx_advance_sched+0x10/0x10 [ 630.651824][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 630.651858][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 630.651879][ C1] ? read_tsc+0x9/0x20 [ 630.651908][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 630.651951][ C1] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 630.651974][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 630.651992][ C1] [ 630.651998][ C1] [ 630.652004][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 630.652023][ C1] RIP: 0010:unwind_next_frame+0x51a/0x23d0 [ 630.652045][ C1] Code: 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 <4c> 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8 [ 630.652059][ C1] RSP: 0000:ffffc900045ded78 EFLAGS: 00000246 [ 630.652074][ C1] RAX: fffffffff1ed1922 RBX: ffffffff8f9a9230 RCX: dffffc0000000000 [ 630.652087][ C1] RDX: ffffffff8f9a9230 RSI: ffffffff9016d18e RDI: ffffffff8bc08300 [ 630.652100][ C1] RBP: ffffffff8f9a9230 R08: 0000000000000001 R09: ffffffff8df41aa0 [ 630.652113][ C1] R10: ffffc900045dee98 R11: ffffffff81acf3d0 R12: ffffffff8187ac54 [ 630.652126][ C1] R13: ffffffff8f9a9230 R14: ffffc900045dee48 R15: ffffffff8f9a9230 [ 630.652141][ C1] ? get_signal+0x1284/0x1340 [ 630.652157][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.652192][ C1] ? unwind_next_frame+0xd4/0x23d0 [ 630.652216][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 630.652237][ C1] ? get_signal+0x1285/0x1340 [ 630.652252][ C1] ? get_signal+0x1285/0x1340 [ 630.652269][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.652297][ C1] arch_stack_walk+0x11c/0x150 [ 630.652320][ C1] ? get_signal+0x1285/0x1340 [ 630.652338][ C1] stack_trace_save+0x9c/0xe0 [ 630.652383][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 630.652411][ C1] ? stack_depot_save_flags+0x33/0x810 [ 630.652444][ C1] save_stack+0xf5/0x1f0 [ 630.652464][ C1] ? __pfx_save_stack+0x10/0x10 [ 630.652480][ C1] ? page_ext_get+0x22/0x2f0 [ 630.652494][ C1] ? free_unref_folios+0xdb3/0x14f0 [ 630.652512][ C1] ? folios_put_refs+0x584/0x670 [ 630.652532][ C1] ? shmem_undo_range+0x49e/0x1490 [ 630.652553][ C1] ? shmem_evict_inode+0x26e/0xa70 [ 630.652569][ C1] ? evict+0x5f4/0xae0 [ 630.652583][ C1] ? __dentry_kill+0x209/0x660 [ 630.652599][ C1] ? finish_dput+0xc9/0x480 [ 630.652620][ C1] ? __fput+0x68e/0xa70 [ 630.652642][ C1] ? task_work_run+0x1d4/0x260 [ 630.652666][ C1] ? do_exit+0x694/0x22f0 [ 630.652689][ C1] ? do_group_exit+0x21c/0x2d0 [ 630.652712][ C1] ? get_signal+0x1285/0x1340 [ 630.652731][ C1] ? page_ext_put+0x97/0xc0 [ 630.652750][ C1] __reset_page_owner+0x71/0x1f0 [ 630.652769][ C1] free_unref_folios+0xdb3/0x14f0 [ 630.652797][ C1] folios_put_refs+0x584/0x670 [ 630.652823][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 630.652846][ C1] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 630.652872][ C1] shmem_undo_range+0x49e/0x1490 [ 630.652901][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 630.652926][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 630.652981][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 630.653001][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 630.653031][ C1] shmem_evict_inode+0x26e/0xa70 [ 630.653053][ C1] ? inode_wait_for_writeback+0x14d/0x370 [ 630.653081][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 630.653099][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 630.653126][ C1] ? do_raw_spin_lock+0x121/0x290 [ 630.653156][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 630.653182][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 630.653200][ C1] evict+0x5f4/0xae0 [ 630.653221][ C1] ? __pfx_evict+0x10/0x10 [ 630.653236][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 630.653263][ C1] ? _raw_spin_unlock+0x28/0x50 [ 630.653290][ C1] ? iput+0xcc6/0x1030 [ 630.653318][ C1] __dentry_kill+0x209/0x660 [ 630.653337][ C1] ? finish_dput+0xad/0x480 [ 630.653360][ C1] finish_dput+0xc9/0x480 [ 630.653383][ C1] __fput+0x68e/0xa70 [ 630.653414][ C1] task_work_run+0x1d4/0x260 [ 630.653441][ C1] ? __pfx_task_work_run+0x10/0x10 [ 630.653466][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 630.653496][ C1] do_exit+0x694/0x22f0 [ 630.653523][ C1] ? futex_hash+0x40/0x2d0 [ 630.653551][ C1] ? __pfx_do_exit+0x10/0x10 [ 630.653595][ C1] do_group_exit+0x21c/0x2d0 [ 630.653618][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 630.653648][ C1] get_signal+0x1285/0x1340 [ 630.653675][ C1] arch_do_signal_or_restart+0x9a/0x7a0 [ 630.653702][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 630.653733][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 630.653756][ C1] exit_to_user_mode_loop+0x87/0x4e0 [ 630.653774][ C1] ? rcu_is_watching+0x15/0xb0 [ 630.653797][ C1] do_syscall_64+0x2c1/0xf80 [ 630.653815][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.653832][ C1] ? trace_irq_disable+0x37/0x100 [ 630.653855][ C1] ? clear_bhb_loop+0x60/0xb0 [ 630.653874][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.653892][ C1] RIP: 0033:0x7fe546b8f749 [ 630.653906][ C1] Code: Unable to access opcode bytes at 0x7fe546b8f71f. [ 630.653920][ C1] RSP: 002b:00007fe54795d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 630.653937][ C1] RAX: fffffffffffffe00 RBX: 00007fe546de6098 RCX: 00007fe546b8f749 [ 630.653950][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe546de6098 [ 630.653961][ C1] RBP: 00007fe546de6090 R08: 0000000000000000 R09: 0000000000000000 [ 630.653972][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.653983][ C1] R13: 00007fe546de6128 R14: 00007fffacccb710 R15: 00007fffacccb7f8 [ 630.654006][ C1]