last executing test programs: 4.718779009s ago: executing program 4 (id=3948): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x60000, 0x0) close(r3) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000240)={0x2e, @multicast1, 0x4e23, 0x0, 'lc\x00', 0x3, 0x5, 0x9}, 0x2c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r9, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x6, r8, 0x15}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="27130028590f314fea0a4436da339c6e9059056fa1021400499340000000000006e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x36}], 0x1}, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r10, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r10, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) 3.57071695s ago: executing program 4 (id=3954): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xcdd68600331fc8b7}, @TCA_TBF_PARMS={0x28, 0x1, {{0x10, 0x1, 0x0, 0x5, 0x0, 0x1}, {0x8, 0x2, 0xd, 0xf, 0x8, 0x7}, 0x0, 0x2, 0xde4}}, @TCA_TBF_PBURST={0x8, 0x7, 0x13de}, @TCA_TBF_RATE64={0xc, 0x4, 0x2ef0682d0c86cfd3}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r7, &(0x7f0000000040)=""/163, 0xa3, 0x2020, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, 0xfffffffffffffdb5) unshare(0x2020600) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x4, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xf, 0x1e}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}, @qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0xee}]}}]}, 0x60}}, 0x4000010) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r11, 0x0, 0x482, &(0x7f0000000140)={0x21, @local, 0x10, 0x3, 'none\x00', 0x1, 0x5460, 0x74}, 0x2c) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ff0000000000000000000000000000001500000000004e2200000000ffffffff000000000100000000000000fcffffa15b9721ebc4b04400", @ANYRES32=0x0, @ANYBLOB="0100000003000000000000000000000004000300"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4000014) setsockopt$IP_VS_SO_SET_ADDDEST(r11, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x36, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) 3.26248722s ago: executing program 3 (id=3960): socket$netlink(0x10, 0x3, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000006040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) (async) close(r0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000010000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$alg(r2, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="7583d68df4546aaccb2800c1c5ff8696e7965bc073d4c6f1f52d629a3dc9872e98ef9387f9e45fc4e51dfb31701cec0541f3b83fe53d408f419db68164d286cba2ffa850174f63c90c87baacbbdbbef8f4a239e0beaaf699ba45479bad9fb9f46037cf95", 0x64}, {&(0x7f0000000400)="8863a3ddcd11b1", 0x7}], 0x2, &(0x7f0000000600)=[@op={0x18}, @iv={0x70, 0x117, 0x2, 0x58, "d9b4045cf7c6573c0711ce1cb00f8afd535bcda3bddb64231476fbd158917361f318d3ae73708dc460db258dc25241d9173e768e5faba986e9fc1e2a6838e9825c8cc6618ac66b4d3c4274835d87a03afc35b24ead16f0a6"}, @iv={0x80, 0x117, 0x2, 0x66, "f3c755eb7cacc6bed16ed6367785f7397b2fd878eaedc8564518a1f8cb925fe9224b25eed75c14ebf5594e29e0edf75d82747488a676453bf118a41d1ba023473f0c3c7783d541d2f648fff503d44f4d8e5f5ceec9c5bbf5b6b223daaee856e758a8a90e284c"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xe8, 0x117, 0x2, 0xd2, "161880791a888b43cbf8d794aad13d30e8e616bf3ffdf813b454fd836a930d1057542292d3f4c9e6005de73c8a53a6d0f6a5843acf959901d940f05d7328166b2b5477e135b04685836a14abb066caa3399a721f23fadd27ad4f6e9d5eef35f3dd523054c3302b013170f3f445584f8c43985771a522db46b163e2d272a418667c08c50b34e32604fb12b8f97befe74cefb23aa09a568ebf36ca8620dc44da91ed1992e18cb0caec125dc058db0081f08981149873b8ae83270c5272ee580a2ae781791b1e98e614949c14d46edc98b7415e"}], 0x208, 0x48821}, {0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000000840)="6e03a6ded1dbb2aa12c9fb8eadb9a8a799849db9f5a7ad3f23caf01238ff4791f9d2d18529ce847fdba993cd85e10fa99d00f91f5414bedc3a816c0b25f9d5795483", 0x42}, {&(0x7f00000008c0)="69d1ca29e883c9212c813d276e6b23423a57ef89e3feb5b395324a5cdd62b41bceaa1192b771774efc06", 0x2a}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000002300)="f3d74256e40d823a7d3e2dde6f14a394ca907ccfd8dd9186ce007ed0c779d6faea3ff5d69d8e31457958db463234ebb550c6d423e9cd36d4c83f6e99beb5d9f4ff49dcfd8131e250473cc697d8e1b9b9d961777559cdffd5b5ebfafcec564c40cddeafb7ad8054da9814f597e9b65cac5d35335c538fa3d785351e1ce93c07c56d7183a043d51715f9802940f2a9", 0x8e}, {&(0x7f00000023c0)="cc7e8ae44b686d1325643efb16c4a659ecb3d9f93567117e6b8c1ee95e3ca91fbd35faae48c19fe159c3c179b3ede27b1518a8391925b76d9c80f396247f5e19a53cd6f625580e1d3234b293d6e2004ab3d2a755a8710bb5cf3f9ffb9c2ee0a971741dce19d35da7614419b2358d16b87f523bc4e183f0b89ba34925b7c247130f4d5857970b1600984f8d5c3983ead29210e22cd910e1affdd8291a213447225183c920795a8dc74edfaf4d1f1905b992b591a6f9c14d7bca0506322286ccf3519b6b3d6e9683b49bb232ccb6a66ee21e7722fb2db558df2dab520ba9", 0xdd}, {&(0x7f00000024c0)="8d49c8c2fd82dbcbadd8b321a7619cd5100150a4f5d1f0f16edcb61696248abee64f8036c718d8698da155cda1778f4ed712cb82908fb67fc5463a558db27ba1cd71aecc2975e698b2a4c254614bb369ce720c1458e0f553e7547ccdd5ea9a19d258ec8d62df2b48491363ed0d5fbfa0551d949c16b29ca2a22d2e97bd22ec282e06c44e2661fbd0f3f6005c7e9592bae650de7bbdb0ea780989066ec89a98d0d0ce0bc315695c7909e7fa5055cde7b9ee1742089a7cc4c9cd39f78aeb33a95f2febbb56", 0xc4}, {&(0x7f00000025c0)="ba0051d990edce3ea523251c139ca9b0460a43a32caeb4805024067adbcb3d080be0074f4858b17aa335a77f79bfa914c1e1792247704b71fe5eed50ff8db383585efe72cce2a47310b963e657f442fc33a6f40be80c5db162a934eb1ddbc999305f089b6cf08a24d39be3d1b219175f152f257937865a50f0c5", 0x7a}], 0x7, &(0x7f00000026c0)=[@iv={0x58, 0x117, 0x2, 0x44, "a17ac13391a1ce805950841e2f20030dfb8d4a8e79b00ea8e89d2bc59bb830652a71033eb8d59b570c9d729cc2a478d9ab7189050dd95f3d8b1fdf01df0583c6c107e129"}, @assoc={0x18, 0x117, 0x4, 0x9432}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x9f17}, @iv={0x50, 0x117, 0x2, 0x3c, "5c92433bcb02ba5bab16ade8780824e9ccd7f8f9fd7e1fcfb4e78cf5c50d6861a89af6fd80ccce6cec7e5c32d74064c8a28049f99f4c76bece77af19"}, @assoc={0x18, 0x117, 0x4, 0xe4c7}, @iv={0xd0, 0x117, 0x2, 0xba, "c56c00a360ca5c5fbcf5a4ae292d060b9fc489f18eff1684d6a9ac106fd55cca5a1d030e4119290f6e638030871894002ac7c594828460b1810a4a1356422b02121644183bdae5de29456335663abef2bc7d766e06213f489cccfac862f130def43d6e68e848994ed945724dccccdc1a72920ea319471cb1fbcfbbd3416b35db4de3b9e9edcfbb6ca821d407281ad4dc5f593e5c1da963da7de2664dc756a78468ad149eea62916ebb038b084136b6f7d706484a8bd3286f9dd0"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1f0, 0x40080}, {0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000028c0)="99d8a4f6c4e806d5066a041415200b5cea8b7e8e543ca98a61241afd4b3d232c188af05915ac62f62667c5c4737440fafbcb0c51885d00f7bcb0e6d1725a9a9092bf7352953dcfae24e0c5bb35ff8ca97a83d4f259b3a03397999348a076e507f9c19073b94cefca97b0f5892863d20a1806623fcfeaebb096200a61c8158eb683f0df82623b4a9217a622e634256b85af926f6c60b31dee80e1e95c5dae73eba9617b50f39b5cb8e7d54dd132a370c099ae818e824c71", 0xb7}, {&(0x7f0000002980)="5ead2f75afdf2978928caf8dedd50aaa8406d981dca3940a5e0132f5222dcfc27b3993128bc6ffdd01d45973610a82e3f7b25d7d4c3bd2d7847831", 0x3b}], 0x2, &(0x7f0000002a00), 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002a40)="53352fae8898ad886c5c217dd7706e74fc03615ba397aae3ddc086aa116ac3ebbc1a731cab6966a7e0bf521e4c7174ee6c33f1b462f0dc9fa52bd087205995f4c1a1783e001ef80c7814ae269d4aed6a", 0x50}, {&(0x7f0000002ac0)="b5d7d30dad9cb42ffc0ac94937bc7f4f78ae9bf8412e3e9df7b2d566ae0fcfeb242f2f605375d322021f80d7d4daefe92bdee67d1b5a73523884903db64b83069c15ee7662178be34f998bba3233f651421d0404b792096d1d494873bb985302dc75e2f743b152622b89549ad8485416cff6ea23bd69f842ccf20a2c8aa9", 0x7e}, {&(0x7f0000002b40)="c8bae8d4ca690fe7166187c6dc77a1fb436d185f47345b747cf6ddd13e43c15baaa4d0bd3d24aa4a1918ed491786d47114866beffb386c9f48cf7465330c1f1c7e430455aa40644997ab4dcdce3a5f7f04067128c5430d4d00b8ee2c98d0b95e7e3cd822ab6cc7935403684bf4b47e7c878a5f7a6f3837efee6204e1864464753358252bbcf2ad65bf76efe42e720753bc42d822c2bdc08ce69647d88bf929d9d9d2b6f68c6b62ca0f3cc6bfc3bc32e14a97f524c7ea131dfeeb8c285d37efe0e78fcd4e8db50ee2cb", 0xc9}], 0x3}, {0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002c80)="f5b4329817178cc91c60ac8ce79785d9b6984d5709ef75170bd9e675e542cc7426d7806c14256d438fb7d9a8323fc66517f485857e86f94fe2eaafede51b5ae06edccf08efd59496a9d0f32690958f7b245674bcf6a8471dde722dc5da9f7a437ff2a2efe0956be3c8997bcc63f85ee250e5191e71e84cc9c1620115c1faf42629c80a2f2c1c08dea10a4e00c35c8d4fc782abbbd7cfd34cdebac3850c32c3e162348a7f29b802652c88e17c4b82e7367bb7dc12cc15d28906b25816b5f3ec0de0", 0xc1}, {&(0x7f0000002d80)="de6f84d62debebe790ceaaeb6625b5e24967d1f6aa8103f3ff15d443407a96b5df89ae3b832a32f2b57094d226369a4f9771347793df4dcad576f0ffe09b45633bdbac2db9ad8d90ca3f2988cea351e7c713225513531c2cdb5f4520d2f8c68cf500a14b7db9e8b6610972fcd47a4c548f1745ee1a6491c8915e1eade3324ff8d7b70a898c983632", 0x88}, {&(0x7f0000002e40)="4857d1f45beb3f6e1f51dc04ea78d2b29380dbe87e2a13f28f919a0b81c7b7155c3ac3a3f5520b1ec07da1e1d0e232ee", 0x30}, {&(0x7f0000002e80)="4e11613dda56f54b0cd2dd8ac2", 0xd}, {&(0x7f0000002ec0)="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", 0xfd}], 0x5, &(0x7f0000003040)=[@assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xb8, 0x117, 0x2, 0xa4, "39f1ee376b318bde058249d2aadd3b598e785a303bc451dce3c0885e692a3d5875d3a6c1ab5d5a540e524495579ab4cf420360af9fe752bc8924fccb351f040080a75f2af89cf81c65b8eff506a73a71fb7d82d45f9a320749c1c8c3e34644a75c27076f3ff645a6e24ebb7fd80b39854b6b69586873d60db372e85a106649d38c1b861c578a2ab69336a79578c80e07856dce4209629016d3af76784aa53aa1dfde2b29"}], 0xd0}], 0x5, 0x20000000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x38}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x10, 0xffe0}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x28, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0xffffffffffffff62, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044828}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl1\x00', r8, 0x6, 0x1, 0xfb, 0x7, 0x8, @private0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x700, 0x0, 0x6, 0x6}}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r11}, 0x14) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)=@newchain={0x5c, 0x64, 0x5be4871aee6e285, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xffff, 0xffea}, {0xffff, 0xd}, {0x6, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_CHAIN={0x8, 0xb, 0xf}, @TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r11}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x840) (async) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r13 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r13, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r13, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) recvmmsg(r12, &(0x7f00000000c0)=[{{0x0, 0x5a, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00), 0x1}, 0x3}], 0x2, 0x0, 0x0) 3.049814988s ago: executing program 4 (id=3963): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r3, &(0x7f0000000100)='\t)', 0x2, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x4, @private0, 0x81}, 0x1c) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd8f7, @mcast1, 0x4}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@datasec={0x3, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x0, 0x3}, {0x0, 0x3, 0x400}], "098097"}, @datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "bf"}]}, {0x0, [0x2e, 0x61, 0x5f]}}, 0x0, 0x51, 0x0, 0x1, 0x5}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x40, r0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}]}]}, 0x40}}, 0x2008840) 2.903243802s ago: executing program 3 (id=3966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 2.649472169s ago: executing program 3 (id=3969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x8890) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0x17e8}}, 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4, @empty}}) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req={0x9, 0x769, 0x40, 0xffff}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x8) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x27dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xd1fda22cac0fecec}, @TCA_NETEM_RATE={0x14, 0x6, {0x5, 0x9, 0x0, 0x66adc453}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$tipc(0x1e, 0x5, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="210f00000000fedbdf252000000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000240)=0x4) 2.469073546s ago: executing program 0 (id=3971): socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r5, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x18}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "22bae349d9620a13ab862eadd2"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28040}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x3}, 0x50) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r6, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 2.145572552s ago: executing program 0 (id=3974): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000080)=0x8401, 0x4) close(0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xe}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x6ce435731f7106c4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x4c}}, 0x40800) 2.033563233s ago: executing program 3 (id=3976): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x80000001) close(r1) (async) close(r1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) listen(0xffffffffffffffff, 0xa) (async) listen(0xffffffffffffffff, 0xa) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000140)={0x61e1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @remote}}}, 0xffffff6e) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="080002800400338008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4004840) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="080002800400338008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4004840) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41100000000000000290000003b000000", 0xfe60) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = epoll_create1(0x0) r6 = socket$unix(0x1, 0x1, 0x0) close(r6) (async) close(r6) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f00000002c0)=0x80, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f00000002c0)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0x8002a000}) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x12, r6, 0xa2f54000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 1.754225994s ago: executing program 4 (id=3978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f0000000000)=0x400, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffaaaaaaaaaaaa8606694fd2cd00103aff0180000000000000b3ecc950a5cebb699c775d00000000000000bbff0200000000000000000000000000018600907800"], 0x4a) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000002c0)=0x5) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffc}}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r13) sendmsg$NFC_CMD_DISABLE_SE(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r14, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0xf39ca9827ccfe526) 1.066954071s ago: executing program 0 (id=3981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xfffffffc}}, 0x0, 0x0, 0x4a, 0x0, "a441bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed9015800"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4004, 0x0, 0x20, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x4}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfc}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xfffffffc}}, 0x0, 0x0, 0x4a, 0x0, "a441bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed9015800"}, 0xd8) (async) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) (async) listen(r0, 0x7c2) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x4004, 0x0, 0x20, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x4}}}}}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfc}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.037719824s ago: executing program 2 (id=3982): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000da8005476df930020000000000000044a", @ANYRES32=0x0, @ANYBLOB="0000000040c900002c00128009000100626f6e64000000001c0002800800050000000000050001000600000005001d0005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r1 = socket(0x29, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x5, @private0, 0x4}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0xf}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @empty}], 0x98) 1.022157716s ago: executing program 1 (id=3983): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000) socket(0x14, 0x2, 0x4) listen(r0, 0x0) close(0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x51, {0x440, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16=r4], &(0x7f0000000300)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) setsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000000000)=0xbc5, 0x4) 966.771397ms ago: executing program 3 (id=3984): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f0000000040)="d84f", 0x2) sendto$inet6(r4, &(0x7f0000000800)="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", 0x5a3, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @empty, 0xfffffffc}, 0x1c) listen(r7, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x8, 0x0, 0x4}}}}}}}, 0x0) write$cgroup_pid(r6, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) 958.141232ms ago: executing program 2 (id=3985): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x60, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc}, {0xfffffffffffffffd}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x22, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e76d4b1090000040000009b07000000", @ANYRES32=r8, @ANYBLOB="000002000a0002000000000000000000"], 0x28}}, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tw\nr'], 0xa) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x0, 'veth0_to_bridge\x00', {0x2}, 0x2d4d}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x9}, @TCA_HHF_RESET_TIMEOUT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf300000000000002500070007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 913.673043ms ago: executing program 4 (id=3986): syz_emit_ethernet(0xda, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000a42b00fc010000000000000000000000000001fe8000000000000000000000000000aa3b"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) r2 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x8, 0x0, 0x7, 0x4, 0x3]}, &(0x7f0000000200)=0x54) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r3, 0xffff, 0x4, [0x5, 0x2, 0x80, 0x2]}, &(0x7f0000000100)=0x10) 851.601908ms ago: executing program 0 (id=3987): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x7, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x810) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001400090527bd7000fddbdf25022010cbfa66336f891507be3bf777f76107023aee9a9d8babd1f977c3dd490290ee35be52c880bdd9eb75f9e73c1d64904f4f1357acb21c16fd858e807581187c94d6c8d758b5df7c5cf5e698417cf10c4bf26b3225459900cd1f73f9578f2ecc50a7e7f3d072b040cb6c8ad46ba8324a0b0c72b45cb9843de78a03ccbf202757385498851bcebcff25e925f0370d", @ANYRES32=r8, @ANYBLOB="1400060003000000040000000700000005000000080001000000000008000200e0000001"], 0x3c}, 0x1, 0x0, 0x0, 0x4008814}, 0x24040840) 744.621941ms ago: executing program 1 (id=3988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x0, 0xf, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x6e6bb6, 0x3, {0x6, 0x6c, 0x6, 0x5, 0x0, 0x3a, 0x0, @in=@broadcast, @in6=@mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd29, 0x3503}]}, 0x78}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x0, 0xf, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x6e6bb6, 0x3, {0x6, 0x6c, 0x6, 0x5, 0x0, 0x3a, 0x0, @in=@broadcast, @in6=@mcast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @empty}}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd29, 0x3503}]}, 0x78}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x44}}, 0x0) (async) 585.734881ms ago: executing program 4 (id=3989): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r1, @ANYRESOCT=r2], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x800, @empty}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x9, 0xf, 0x5b}, 0x2c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000940)=@security={'security\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x0, 0x0, 0x268, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x4, 0x1}, {0x1, 0x3, 0x7}, {0x0, 0x2, 0xd731213761a618e8}, 0x1000, 0x1}}}, {{@ipv6={@empty, @remote, [0xffffffff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0xffffffff, 0xff000000, 0xffff00], 'ip6gretap0\x00', 'nr0\x00', {}, {}, 0xc, 0x4, 0x6, 0x42}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x9, 0x5, 'bm\x00', "76a01a72e2613d0ee7ad7787fbb26e355194a7c263855d04659da0c71ffbf48415323371efbbe1a65823dca1915d6bc74879df977f0e6c9a0283533253ed194ef4d374f877fc5cf3d4854a1c47c1f6062635188ac84a374ba0bf4bc3a883228e6ecec1abb50879d13791571ddaef2c29d5cb5db45b69a551b210b57f1d445976", 0xf, 0x1, {0x3}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c00000001010101000500000000000000000006300004802c000380050001000200000008000240000000030500010007000020080015400000000418000d8008000200ac14140f08000100ac1414aa04000380080004800400018000"/108], 0x6c}, 0x1, 0x0, 0x0, 0x41005}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001180)=[{&(0x7f0000000080)="bddbceb17fc3303211", 0x9}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000002c0)={0x0, 0x41, "da5fd7c3a18604c44d7985c77d887e8d285d1e4fe4c6936bf734d630d47b6683e0e9750361a4886278193bc3eb37a213fa926067af0dd2a8e6aaa9aed5d581e068"}, &(0x7f0000000340)=0x49) 482.927113ms ago: executing program 2 (id=3990): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0xfffffffffffffffd) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x54, 0x0, 0x6e91, 0x20}) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000003b00)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000080)=ANY=[@ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000003000000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r7, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r7, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) 466.053387ms ago: executing program 1 (id=3991): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="35ab277163040018f24275bb08004564010100e00000014e240e22001090780201000080000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8=r4], 0xfc}}, 0x4080800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 400.332284ms ago: executing program 0 (id=3992): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x40010021, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="442200002000010027bd7000000000000a0000400000000000de000014000300687372300000000000000000000000001400110098657468315f746f5f62726964676500232d57ef2aa317"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) 299.170916ms ago: executing program 1 (id=3993): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="00000200000008000007db29623b3ec1ba688c3ff0100402", 0x18) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000200)={0x3, 'wlan0\x00', {0x1000}, 0x1}) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000140)={&(0x7f0000000100)=[{0x2000000000, 0x1, 0x0, {0x38b, 0x10, 0x2}}], 0x1, 0x20, 0x4}) 298.769971ms ago: executing program 2 (id=3994): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="40c20000000000001800128008000100677470000c00028008000200", @ANYRES32=r1, @ANYBLOB="080003"], 0x40}}, 0x0) close(0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x300084}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x13, 0x34, @random="c610b6b982245854780354c8195a7c"}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0xffffffffffffffd5, 0x17, 0x7ff}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffc6}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x0, 0x7, 0x9}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x3}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xf7}]}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b74417c2d20c"}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC={0xa}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4040) 231.156226ms ago: executing program 0 (id=3995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1bb50}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000020303000000000000000011000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000500)={0x20, 0x2, 0x3, 0x3, 0x0, 0x0, {0xa, 0x0, 0x10}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000054}, 0x4040004) 215.467498ms ago: executing program 1 (id=3996): r0 = gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) pwritev(r2, &(0x7f00000014c0)=[{&(0x7f0000000340)="0f4650817412d226a82d162f7cb05ec49c5e84d9776f17aaeb67d414eacabc13d86f1bb8ac023880478a4551a472e421b50d7b68b5ee705ed76f979122c4697feb3dc70edf576ecc44f7565874a9d93ee706a761c8ef144ff9e25af5e5cfbe48424a1e00897b3cf0ea3465613a695fbbdfe33a121a4c4bf3a785bad0ecf697a8d1407ec7870f0ffd15fd620199ea2b445b302d9dc44a447b1a468f71f6d0c071242356696f5892ac209ae8", 0xab}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="f543665b804eaaf557633cb063526aae1ed32a8c72bd767f9cf2120579dd0f0ff17462f2ee90250b375dc2d8d374ba8cd228079b642542ca40f1b8cca2d2cd176cbcc8d9bcc2704e8bfef7aec7c233b7140bdfab13c079f5941aed56030892b9a466a5ed2dd5d7143e1d201e0c48e51dba5d2f3aefbfafdfbd7f4f09ae2b6e0e71d065c4c70af8bf2056d382d6d36982f823775344401663d6bc082075af192ed3ee501f054c822b65200f7e519f89acdedfe7642328d7b3c41887549f", 0xbd}], 0x3, 0x8, 0xdba1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)={0x1c, 0x33, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid=r0}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 213.479736ms ago: executing program 2 (id=3997): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071100e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/237, 0xed}], 0x1}}], 0x1, 0x42, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r4, 0x3, 0x2, 0x81, 0x1}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) 6.098818ms ago: executing program 1 (id=3998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x61d000, 0x0) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x888e}, @val={0x2, 0x80, 0x8682, 0x9, 0x14, 0x8000}, @llc={@snap={0x1, 0x0, "1078", "61dbb9", 0x6558, "7e5562fb7696747f734302e9"}}}, 0x23) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r1, 0x29, 0x1, &(0x7f0000000080)={0x80, {{0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, {{0xa, 0x4e24, 0x10001, @local, 0x6}}}, 0x108) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xeb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4597}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x8800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x80, r4, 0x402, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}, [0x9, 0x5, 0x5, 0x6, 0x8001, 0x5, 0x9, 0x6, 0x4, 0x4, 0x2, 0x8, 0x7ff, 0xfffffffffffffff9, 0x2]}, &(0x7f0000000600)=0x100) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000640)={r6, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x1b2, 0x800}, &(0x7f0000000700)=0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000740)=@assoc_value, &(0x7f0000000780)=0x8) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000000800)={0x1d, r8}, 0x10) ioctl$NILFS_IOCTL_GET_SUSTAT(r2, 0x80306e85, &(0x7f0000000840)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000008c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@initdev}}, &(0x7f0000000a00)=0xe8) sendmsg$nl_netfilter(r9, &(0x7f0000001180)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000000a40)={0x6e0, 0x1, 0x8, 0x301, 0x70bd26, 0x25dfdbfc, {0x1, 0x0, 0x7}, [@typed={0x8, 0x103, 0x0, 0x0, @u32=0x8}, @generic="dc6bdb49b4595d3ae2d429fe7ceee5707159211f3fce01ed9ab9f2de66b2e0aad982944567d4c9d3f739baa7ac3dc0b0d5e277d045b592748bf9fda33477aaf3179cd8b05341af3c3d589884d7225b0ed9bda49e3cb28e7e8ad3df1ed51d56c3c3c1ab498abc9989964def9045b0244aa2f4202c771c21b4a8d5dd884951ec825d8ced2b5373a247e12da1342f0006f9f4ed5575953def37c46577dd40", @nested={0x387, 0x34, 0x0, 0x1, [@generic="c9640e8098d7175a8d5dcf5b4306c955e6029d94d41e1c1456f9aef5d4b47231eabca36c69422c29798df3135b5aeaa3fafc8ddd9e70973c9b7015390e1c3a73e30adad1dc0c7ed62352fbca5d48bf03a9a48055bc422da3d58b6b1d6c3a2b77e9a6c12bbd200784a5cf607f82fd195a1f5e639819fd8a36e730384e43b8636e", @nested={0x4, 0x11a}, @generic="f230665ac987659ab8cf8793e2640df066ecfc1870ac95d1b9b7aefc0eafc2048323600b2c30b3087cc9cfd5c0a094cc65614eb0d9ebf52ad9286f22aa69c7e5d4c5d8ff80a5bb6146b775306b08a2d6fcece22d65454e46baf3b449e0f844c0f7c4abb680d82fbe4bed5cf3000577120da65577d27a06e4addf4e8810", @generic="89675bf28c5454f5697e00514749950e760b461b7c8afcfe4f3016a841ee2cf5e1e058bb5bc23c6cfa2f6d7794741e4ff000777f55df9324835e0211539ac68feb274139faf04f1b01918523ac5916a0d927d397f8c113b409e469a123600eb1eb838e058c761db6241acdac283f823a8cef38ee2dc28895568356fc614c473f28351eef24d0bef307bc6bbe6033906dc565625541a365d9b4188ba9aa862482ec72673671d3a632ad2593f8b0670dfce6584c5f871a162479d5ebef158ea181661f542c178bcc9f035bbcb48a7e339adc0d8080abbd656c37292f4575209b1661f5ea86", @nested={0x4, 0x91}, @generic="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", @typed={0x8, 0x5d, 0x0, 0x0, @pid=r10}, @generic="605f411aabf116903601dbb2c0ce53d7d691f39ebf570d8e0a366b3a673599794f15b31432721024fd3a4075883882c502651b1b1423bddb85e784e471fc69cd4ad0c6e17e70535078208ffbaeaeb542c21726c77228a9afa82afcc19a78ccf740f368162c5821acd44da1cdb420f46382bcac3a9d769d29a25526d11a26ac09d2f520c2dc2332d7eb2ad10d72e2646b09", @nested={0x4, 0x1d}]}, @generic="38daed18e1a70924969e1ffa98bf081049ff45a628ad52fce90d575434e8a7021afbd062a6", @typed={0x4, 0x150}, @nested={0x112, 0x153, 0x0, 0x1, [@generic="e90c35c6686798cd05fc756993802eda295bce8d040441225b0d82f0bde2a477662585f257f4e03b45e618ab18a9eb2be11e07aecb1bb535768fce4fd48294f660d5e88652042bd2819b5d2020da2c05f572893d76c11fe2c172d895b353a59959b31db5b80b387b7b815183dd", @generic="9089ecfceb64440c98768605a17aff90c65ed0c8d7780c954678e5619c5c0e6ae772087663a889de15a4c3a3804fdf85e39b86fb7f3674b97ce6719e01c9cfc6b1c7a48b01e8024f1867c218273ddbeac4f6ae887de418b39ecfa980536df6574d43de8178567fdc64324646f5088eab577ab1538731307c221e96d46ac08601c74ac268f2b2ed0d35304c54ce9dc4bfa14b41d47c86687a50992a71e7aa2fbe76"]}, @typed={0xc, 0x14e, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x5d, 0x0, 0x0, @ipv6=@mcast1}, @nested={0xea, 0xea, 0x0, 0x1, [@typed={0x4, 0x88, 0x0, 0x0, @binary}, @generic="3699dc93ec149b94a598fc863cd484f86c7a53d1daaeef7edd178b20450c65d0331e14955149601bfc0852ceb875d36ce3e33c5c554c829f7d33ed3ff6cc66ca5ddc326e9d501e6c5ed30de346fd7c125eb1b110239c59822d749de9fe664d2789a5e56afa990659628067bb582a794f3fe8d190b144221af5042277fefdc61c05da3e64a35ceda05e30a8e1da4e169ca1c146d60c84a5658a55c6f84d908426aac9b1b4c849cd17dbf5dd57029748cb9fa760e148deea7d99541c84fa801895b75eafb8120fc8e7be390cb9b1470b852c4f", @typed={0x8, 0x11d, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0xbb, 0x0, 0x0, @u32=0xfffffff9}]}, @nested={0x51, 0x36, 0x0, 0x1, [@typed={0x14, 0x4f, 0x0, 0x0, @str=':}\'&&&{{#.-\x8f-:$\x00'}, @nested={0x4, 0x10c}, @typed={0xc, 0x104, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x1e, 0x0, 0x0, @uid=r11}, @generic="3b311e0659492e107483ccbd80dacf2b022cb677d63d3e2853337838fdd0b1be7e"]}]}, 0x6e0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000800) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000011c0)={'wlan1\x00'}) getsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f0000001200), &(0x7f0000001240)=0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x74, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc820}, 0x20040090) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r12, 0x8932, &(0x7f00000013c0)={'macvlan1\x00', @ifru_names='lo\x00'}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r13, 0x11a, 0x2, &(0x7f0000001400)=@gcm_256={{0x304}, "1d924e1f70523dc3", "f07c2de68b3ada9914e6bff9bdef96930c893507e785065d9628f45deb4ba151", "405293ef", "f08cd951b4b38c77"}, 0x38) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x10, 0x3e8, 0x20, 0x70bd25, 0x25dfdbfc, "", [""]}, 0x10}}, 0x20080c4) 4.653811ms ago: executing program 2 (id=3999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0xfffffffa, 0x1}}]}]}]}, 0x48}}, 0x0) 0s ago: executing program 3 (id=4000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async, rerun: 64) r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4}, 0xc) (async) socket$key(0xf, 0x3, 0x2) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, 0x0) (async) sendmsg$IPVS_CMD_GET_SERVICE(r3, 0x0, 0x41) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (rerun: 64) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0xa, 0xbf23) (async) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r8) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fddbdf25010000000800010003000000080002"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x20020000) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80082, 0x0) close(r10) (async) socket$unix(0x1, 0x2, 0x0) kernel console output (not intermixed with test programs): .2991': attribute type 58 has an invalid length. [ 504.414439][T15604] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.453792][T17913] lo speed is unknown, defaulting to 1000 [ 504.512376][T17992] ip6gre4: entered promiscuous mode [ 504.637190][ T4945] Bluetooth: hci2: command tx timeout [ 504.678782][T17996] netlink: 'syz.4.2992': attribute type 13 has an invalid length. [ 504.766235][T17996] netlink: 'syz.4.2992': attribute type 17 has an invalid length. [ 504.832782][T17996] netlink: 'syz.4.2992': attribute type 27 has an invalid length. [ 505.188646][T17998] »»»»»» speed is unknown, defaulting to 1000 [ 505.236008][T17998] lo speed is unknown, defaulting to 1000 [ 505.754632][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 505.993669][T15604] vlan2: left allmulticast mode [ 506.025717][T15604] geneve0: left allmulticast mode [ 506.048520][T15604] vlan2: left promiscuous mode [ 506.065344][T15604] geneve0: left promiscuous mode [ 506.085082][T15604] bridge0: port 3(vlan2) entered disabled state [ 506.117624][T15604] bridge_slave_1: left allmulticast mode [ 506.134395][T15604] bridge_slave_1: left promiscuous mode [ 506.143132][T15604] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.164918][T18044] __nla_validate_parse: 2 callbacks suppressed [ 506.164941][T18044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3001'. [ 506.183774][T15604] bridge_slave_0: left allmulticast mode [ 506.208315][T15604] bridge_slave_0: left promiscuous mode [ 506.221115][T15604] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.274887][T15604] veth0_to_bond: left allmulticast mode [ 506.284260][T15604] veth0_to_bond: left promiscuous mode [ 506.291532][T15604] bridge4: port 2(veth0_to_bond) entered disabled state [ 506.318953][T15604] veth7: left allmulticast mode [ 506.327221][T15604] veth7: left promiscuous mode [ 506.334271][T15604] bridge4: port 1(veth7) entered disabled state [ 506.717034][ T4945] Bluetooth: hci2: command tx timeout [ 506.915301][T15604] team0: Port device geneve1 removed [ 507.203829][T15604]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.218554][T15604]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.230265][T15604]  (unregistering): Released all slaves [ 507.244621][T15604] bond1 (unregistering): Released all slaves [ 507.261121][T15604] bond2 (unregistering): Released all slaves [ 507.279974][T15604] bond3 (unregistering): Released all slaves [ 507.304034][T15604] bond4 (unregistering): Released all slaves [ 507.320375][T15604] bond5 (unregistering): Released all slaves [ 507.339774][T15604] bond6 (unregistering): Released all slaves [ 507.369687][T15604] bond7 (unregistering): (slave lo): Releasing backup interface [ 507.378023][T15604] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 507.390047][T15604] bond7 (unregistering): Released all slaves [ 507.409029][T15604] bond8 (unregistering): Released all slaves [ 507.426511][T15604] bond9 (unregistering): (slave veth9): Releasing backup interface [ 507.438849][T15604] bond9 (unregistering): (slave batadv1): Releasing backup interface [ 507.452128][T15604] bond9 (unregistering): Released all slaves [ 507.472211][T15604] bond10 (unregistering): Released all slaves [ 507.493091][T15604] bond0 (unregistering): Released all slaves [ 507.511365][T15604] bond11 (unregistering): Released all slaves [ 507.538382][T15604] bond12 (unregistering): Released all slaves [ 507.555667][T15604] bond13 (unregistering): Released all slaves [ 507.639003][T18055] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 507.654921][T17729] syz1: Port: 1 Link DOWN [ 507.703505][T18055] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 507.769476][T18055] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 507.864073][T18067] openvswitch: netlink: Key 6 has unexpected len 468 expected 2 [ 508.794785][ T4945] Bluetooth: hci2: command tx timeout [ 508.903320][T18096] ipip0: entered promiscuous mode [ 508.980158][T18101] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip0 [ 509.008023][T18101] gretap2: entered promiscuous mode [ 509.018440][T18101] gretap2: entered allmulticast mode [ 509.027028][T17913] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.038569][T17913] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.057980][T17913] bridge_slave_0: entered allmulticast mode [ 509.079714][T17913] bridge_slave_0: entered promiscuous mode [ 509.140718][T17913] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.163035][T17913] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.189859][T17913] bridge_slave_1: entered allmulticast mode [ 509.219191][T17913] bridge_slave_1: entered promiscuous mode [ 509.321792][T18124] netlink: 'syz.3.3014': attribute type 1 has an invalid length. [ 509.339582][T18124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.345777][ T5291] 8021q: adding VLAN 0 to HW filter on device eth1 [ 509.388815][T17913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.407806][T17913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.548033][T17913] team0: Port device team_slave_0 added [ 509.576171][T17913] team0: Port device team_slave_1 added [ 509.638317][T18134] xt_ecn: cannot match TCP bits for non-tcp packets [ 509.713134][T18136] netlink: 296 bytes leftover after parsing attributes in process `syz.4.3018'. [ 509.769646][T17913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.801107][T17913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.858670][T17913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.873901][T17913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.884419][T17913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.968644][T17913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.261342][T17913] hsr_slave_0: entered promiscuous mode [ 510.269248][T17913] hsr_slave_1: entered promiscuous mode [ 510.276531][T17913] debugfs: 'hsr0' already exists in 'hsr' [ 510.282480][T17913] Cannot create hsr debugfs directory [ 510.473814][T18171] syzkaller1: entered promiscuous mode [ 510.480724][T18171] syzkaller1: entered allmulticast mode [ 510.757083][T18187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3025'. [ 510.773816][T18187] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3025'. [ 510.796838][ T5291] 8021q: adding VLAN 0 to HW filter on device eth2 [ 510.803961][T18187] .70·X: renamed from veth1_virt_wifi (while UP) [ 510.822858][T18187] .70·X: entered allmulticast mode [ 510.834888][T18187] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check. [ 510.874737][ T4945] Bluetooth: hci2: command tx timeout [ 511.379053][T18214] netlink: 'syz.1.3028': attribute type 4 has an invalid length. [ 511.432012][T18208] netlink: 'syz.1.3028': attribute type 4 has an invalid length. [ 511.586493][T18226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 511.630715][T18215] syzkaller0: entered promiscuous mode [ 511.637907][T18215] syzkaller0: entered allmulticast mode [ 511.662663][ T10] »»»»»» speed is unknown, defaulting to 1000 [ 511.668927][ T6853] »»»»»» speed is unknown, defaulting to 1000 [ 511.683380][T18232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3031'. [ 511.723627][T18232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3031'. [ 511.732958][T18232] netlink: 'syz.4.3031': attribute type 14 has an invalid length. [ 512.531440][T18275] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3036'. [ 512.616796][T18279] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3039'. [ 512.653477][T18265] netlink: 'syz.1.3036': attribute type 1 has an invalid length. [ 512.750820][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3040'. [ 513.070816][T18302] sctp: [Deprecated]: syz.2.3045 (pid 18302) Use of int in max_burst socket option deprecated. [ 513.070816][T18302] Use struct sctp_assoc_value instead [ 513.298192][T18306] wg1: entered promiscuous mode [ 513.320351][T18306] wg1: entered allmulticast mode [ 513.406193][T17913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 513.436812][T18318] syz.3.3049: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 513.491283][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.498388][T18318] CPU: 0 UID: 0 PID: 18318 Comm: syz.3.3049 Not tainted syzkaller #0 PREEMPT(full) [ 513.498469][T18318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 513.498488][T18318] Call Trace: [ 513.498501][T18318] [ 513.498509][T18318] dump_stack_lvl+0xe8/0x150 [ 513.498540][T18318] warn_alloc+0x249/0x340 [ 513.498571][T18318] ? stack_trace_save+0xa9/0x100 [ 513.498655][T18318] ? __pfx_warn_alloc+0x10/0x10 [ 513.498788][T18318] ? kasan_save_track+0x4f/0x80 [ 513.498862][T18318] ? kasan_save_track+0x3e/0x80 [ 513.498936][T18318] ? __kasan_kmalloc+0x93/0xb0 [ 513.499013][T18318] ? __kmalloc_cache_noprof+0x31c/0x660 [ 513.499087][T18318] ? xskq_create+0x56/0x170 [ 513.499160][T18318] ? xsk_setsockopt+0x54c/0x990 [ 513.499240][T18318] ? do_sock_setsockopt+0x17c/0x1b0 [ 513.499324][T18318] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 513.499393][T18318] ? do_syscall_64+0x15f/0xf80 [ 513.499472][T18318] __vmalloc_node_range_noprof+0x132/0x1750 [ 513.499640][T18318] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 513.499743][T18318] ? __kasan_kmalloc+0x93/0xb0 [ 513.499845][T18318] vmalloc_user_noprof+0xad/0xe0 [ 513.499921][T18318] ? xskq_create+0xbf/0x170 [ 513.500000][T18318] xskq_create+0xbf/0x170 [ 513.500105][T18318] xsk_init_queue+0x8a/0xe0 [ 513.500206][T18318] xsk_setsockopt+0x54c/0x990 [ 513.500289][T18318] ? __pfx_xsk_setsockopt+0x10/0x10 [ 513.500370][T18318] ? __pfx_aa_sk_perm+0x10/0x10 [ 513.500463][T18318] ? aa_sock_opt_perm+0xff/0x1a0 [ 513.500549][T18318] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 513.500630][T18318] ? __pfx_xsk_setsockopt+0x10/0x10 [ 513.500711][T18318] do_sock_setsockopt+0x17c/0x1b0 [ 513.500806][T18318] __x64_sys_setsockopt+0x13d/0x1b0 [ 513.500893][T18318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.500958][T18318] do_syscall_64+0x15f/0xf80 [ 513.501004][T18318] ? trace_irq_disable+0x3b/0x140 [ 513.501089][T18318] ? clear_bhb_loop+0x40/0x90 [ 513.501164][T18318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.501225][T18318] RIP: 0033:0x7fcbbd79cdd9 [ 513.501286][T18318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.501335][T18318] RSP: 002b:00007fcbbe715028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 513.501423][T18318] RAX: ffffffffffffffda RBX: 00007fcbbda15fa0 RCX: 00007fcbbd79cdd9 [ 513.501480][T18318] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 513.501524][T18318] RBP: 00007fcbbd832d69 R08: 0000000000000004 R09: 0000000000000000 [ 513.501570][T18318] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.501610][T18318] R13: 00007fcbbda16038 R14: 00007fcbbda15fa0 R15: 00007ffe9bd40228 [ 513.501703][T18318] [ 513.531648][T18318] Mem-Info: [ 513.668797][T17913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 513.691853][T18318] active_anon:9856 inactive_anon:6 isolated_anon:0 [ 513.691853][T18318] active_file:3156 inactive_file:40340 isolated_file:0 [ 513.691853][T18318] unevictable:768 dirty:227 writeback:0 [ 513.691853][T18318] slab_reclaimable:12048 slab_unreclaimable:221586 [ 513.691853][T18318] mapped:29759 shmem:1287 pagetables:1242 [ 513.691853][T18318] sec_pagetables:0 bounce:0 [ 513.691853][T18318] kernel_misc_reclaimable:0 [ 513.691853][T18318] free:1197509 free_pcp:10309 free_cma:0 [ 513.839887][T18318] Node 0 active_anon:39524kB inactive_anon:24kB active_file:12624kB inactive_file:161152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119036kB dirty:908kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14440kB pagetables:4928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 513.892319][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.907383][T17913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 513.935087][T18318] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 513.967912][T18318] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.024698][T18318] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 514.034569][T18318] Node 0 DMA32 free:828352kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39332kB inactive_anon:24kB active_file:12624kB inactive_file:161152kB unevictable:1536kB writepending:908kB zspages:0kB present:3129332kB managed:2552532kB mlocked:0kB bounce:0kB free_pcp:41508kB local_pcp:21376kB free_cma:0kB [ 514.073133][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 514.102015][T17913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 514.141350][T17913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.212468][T18318] lowmem_reserve[]: 0 0 0 0 0 [ 514.231052][T18318] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 514.305312][T18318] lowmem_reserve[]: 0 0 0 0 0 [ 514.321666][T18318] Node 1 Normal free:3947296kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.375011][T18318] lowmem_reserve[]: 0 0 0 0 0 [ 514.382637][T18318] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 514.425167][T18348] netlink: 'syz.2.3054': attribute type 3 has an invalid length. [ 514.432015][T18318] Node 0 DMA32: 5140*4kB (UME) 3905*8kB (UM) 2214*16kB (UME) 720*32kB (UM) 242*64kB (UM) 368*128kB (UME) 344*256kB (UM) 177*512kB (UE) 104*1024kB (UME) 41*2048kB (UME) 70*4096kB (UM) = 828728kB [ 514.446863][T18348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3054'. [ 514.476596][T18318] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 514.488848][T18318] Node 1 Normal: 0*4kB 6*8kB (UM) 15*16kB (UM) 4*32kB (UM) 8*64kB (UM) 3*128kB (UM) 2*256kB (M) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3947296kB [ 514.523705][T18318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.565394][T18318] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 514.576135][T18318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.611100][T18318] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 514.645441][T18318] 44779 total pagecache pages [ 514.658295][T18318] 0 pages in swap cache [ 514.673631][T18318] Free swap = 124996kB [ 514.683772][T18318] Total swap = 124996kB [ 514.717836][T18318] 2097051 pages RAM [ 514.732724][T18318] 0 pages HighMem/MovableOnly [ 514.738818][T17913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.755531][T18318] 427136 pages reserved [ 514.769435][T18318] 0 pages cma reserved [ 514.818286][T17913] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.855784][ T9648] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.863035][ T9648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.912754][ T9648] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.920017][ T9648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.990490][T18363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3059'. [ 515.033794][T18363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3059'. [ 515.102397][T18363] vxcan3: entered allmulticast mode [ 515.287906][T18377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3062'. [ 515.346912][T18381] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 515.423297][T18377] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 516.126877][T18431] 8021q: VLANs not supported on gre0 [ 516.439612][T18446] Bluetooth: MGMT ver 1.23 [ 516.583058][T18446] bond1 (unregistering): Released all slaves [ 516.810967][T18466] ip6erspan0: entered promiscuous mode [ 516.831220][T18466] ip6erspan0: entered allmulticast mode [ 516.933757][T17913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.181827][T18484] netlink: 'syz.4.3079': attribute type 12 has an invalid length. [ 517.214722][T18484] __nla_validate_parse: 1 callbacks suppressed [ 517.214741][T18484] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3079'. [ 517.286011][T17913] veth0_vlan: entered promiscuous mode [ 517.361880][T17913] veth1_vlan: entered promiscuous mode [ 517.381574][T18479] »»»»»» speed is unknown, defaulting to 1000 [ 517.417878][T18479] lo speed is unknown, defaulting to 1000 [ 517.498965][T18494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3081'. [ 517.593767][T17913] veth0_macvtap: entered promiscuous mode [ 517.648130][T17913] veth1_macvtap: entered promiscuous mode [ 517.760068][T17913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.794065][T18498] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3082'. [ 517.862612][T17913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.928226][ T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.957387][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.998986][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.073079][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.244076][T18512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3086'. [ 518.273362][T18515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3088'. [ 518.295714][T18515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3088'. [ 518.430123][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3089'. [ 518.441851][T18524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3089'. [ 518.455595][T18524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3089'. [ 518.474683][ T4945] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 518.478314][T18447] Bluetooth: hci0: command 0x0c1a tx timeout [ 518.515869][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.549119][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.573227][T18526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.616594][T18526] netlink: 'syz.4.3090': attribute type 1 has an invalid length. [ 518.710929][T18524] .70·X: left allmulticast mode [ 518.796630][ T5731] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.823521][T18524] bond8: left promiscuous mode [ 518.842164][T18524] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 518.995369][T18526] bond1: entered promiscuous mode [ 519.009729][T18526] 8021q: adding VLAN 0 to HW filter on device bond1 [ 519.102670][T18532] bond1: (slave bridge1): making interface the new active one [ 519.175258][T18532] bridge1: entered promiscuous mode [ 519.260858][T18532] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 519.362957][ T9648] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 519.434131][ T9648] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 519.563648][T18566] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3092'. [ 519.613078][ T9648] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 519.632686][ T9648] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 519.646014][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.671051][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.760584][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.033938][ T3339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.062262][ T3339] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.112487][ T3339] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 520.140923][ T5731] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 520.148972][ T3339] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 520.404693][ T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 520.576753][ T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 520.655673][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 520.682088][ T4945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 520.702027][ T4945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 520.712194][ T4945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 520.727126][ T4945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 520.738903][ T4945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 520.789477][T18596] netlink: 'syz.0.3099': attribute type 1 has an invalid length. [ 521.072001][T18614] x_tables: ip6_tables: dccp match: only valid for protocol 33 [ 521.120272][ T5644] syz_tun (unregistering): left allmulticast mode [ 521.444147][T18628] veth1_macvtap: left promiscuous mode [ 521.449869][T18628] macsec0: entered promiscuous mode [ 521.642108][T18598] »»»»»» speed is unknown, defaulting to 1000 [ 521.650874][T18641] netlink: 'syz.2.3109': attribute type 21 has an invalid length. [ 521.662589][T18598] lo speed is unknown, defaulting to 1000 [ 521.671043][T18641] netlink: 'syz.2.3109': attribute type 21 has an invalid length. [ 521.885015][T18653] tipc: Started in network mode [ 521.905846][T18653] tipc: Node identity 8eeef418d9da, cluster identity 4711 [ 521.925618][T18653] tipc: Enabled bearer , priority 0 [ 521.945986][T18646] syzkaller0: entered promiscuous mode [ 521.963959][T18646] syzkaller0: entered allmulticast mode [ 521.991567][T18646] tipc: Resetting bearer [ 522.044115][T18644] tipc: Resetting bearer [ 522.081422][T18644] tipc: Disabling bearer [ 522.670145][T18671] "syz.4.3116" (18671) uses obsolete ecb(arc4) skcipher [ 522.795129][T18447] Bluetooth: hci1: command tx timeout [ 522.978942][T18708] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 522.994320][T18708] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 522.996586][T18706] IPv6: addrconf: prefix option has invalid lifetime [ 523.050311][T18598] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.059486][T18598] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.067333][T18598] bridge_slave_0: entered allmulticast mode [ 523.075841][T18598] bridge_slave_0: entered promiscuous mode [ 523.085411][T18598] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.092964][T18598] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.100525][T18598] bridge_slave_1: entered allmulticast mode [ 523.110165][T18598] bridge_slave_1: entered promiscuous mode [ 523.136859][T18706] __nla_validate_parse: 6 callbacks suppressed [ 523.136879][T18706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3125'. [ 523.192936][T18598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.214321][T18598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.362941][T18598] team0: Port device team_slave_0 added [ 523.405245][T18598] team0: Port device team_slave_1 added [ 523.509622][T18717] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3130'. [ 523.556478][T18598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.566239][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.592639][T18598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.621620][T18717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3130'. [ 523.637224][T18598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.645766][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.702606][T18598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.930226][T18598] hsr_slave_0: entered promiscuous mode [ 523.937090][T18727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3132'. [ 523.956316][T18598] hsr_slave_1: entered promiscuous mode [ 523.974072][T18598] debugfs: 'hsr0' already exists in 'hsr' [ 523.989467][T18598] Cannot create hsr debugfs directory [ 524.315278][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 524.394740][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 524.875271][T18447] Bluetooth: hci1: command tx timeout [ 524.931938][T18761] bridge_slave_0: left allmulticast mode [ 524.947343][T18761] bridge_slave_0: left promiscuous mode [ 524.957190][T18761] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.979156][T18761] bridge_slave_1: left allmulticast mode [ 524.989602][T18761] bridge_slave_1: left promiscuous mode [ 524.995962][T18761] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.012542][T18761] bond0: (slave bond_slave_0): Releasing backup interface [ 525.029121][T18761] bond0: (slave bond_slave_1): Releasing backup interface [ 525.075562][T18761] team0: Port device team_slave_0 removed [ 525.097637][T18761] team0: Port device team_slave_1 removed [ 525.108371][T18761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.118095][T18761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.127788][T18761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.144235][T18761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.159745][T18761] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 525.433888][T18772] tap0: tun_chr_ioctl cmd 1074025681 [ 525.488213][T18772] 8021q: VLANs not supported on lo [ 525.848990][T18794] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 526.001780][T18797] tipc: Resetting bearer [ 526.148182][ T6854] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.256310][ T6854] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 526.404513][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.466394][T18810] netlink: 'syz.0.3153': attribute type 1 has an invalid length. [ 526.696206][ T6854] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 526.737057][T18817] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3156'. [ 526.802146][T18598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 526.941373][T18598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.962965][T18447] Bluetooth: hci1: command tx timeout [ 526.983476][T18598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 527.012547][T18598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.025770][T18598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 527.051383][T18598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.073563][T18598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 527.101422][T18837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3161'. [ 527.116861][T18598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.200458][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3161'. [ 527.208321][T18837] bond1 (unregistering): Released all slaves [ 527.253801][T18845] xt_bpf: check failed: parse error [ 527.507043][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'. [ 527.535071][T18861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'. [ 527.552302][T18598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.602752][T18864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3168'. [ 527.617368][T18598] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.672913][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.680185][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.730063][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.737335][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.270202][T18889] Bluetooth: MGMT ver 1.23 [ 528.278334][T18889] Bluetooth: hci1: too big key_count value 29096 [ 528.299852][T18889] __nla_validate_parse: 1 callbacks suppressed [ 528.299873][T18889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3173'. [ 528.412131][T18891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3173'. [ 528.495889][T18891] nbd: device at index 64 is going down [ 528.771026][T18798] udevd[18798]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 528.840746][T18805] udevd[18805]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 529.035025][T18447] Bluetooth: hci1: command tx timeout [ 529.360281][T18917] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3177'. [ 529.425971][T18919] netlink: 'syz.2.3178': attribute type 10 has an invalid length. [ 529.529027][T18919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.552739][T18919] team0: Port device netdevsim1 added [ 529.672790][T18598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.702483][T18923] netlink: 'syz.4.3179': attribute type 33 has an invalid length. [ 529.811891][T18931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3180'. [ 529.884096][T18598] veth0_vlan: entered promiscuous mode [ 529.920568][T18598] veth1_vlan: entered promiscuous mode [ 529.989502][T18598] veth0_macvtap: entered promiscuous mode [ 530.021931][T18598] veth1_macvtap: entered promiscuous mode [ 530.071483][T18598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.113993][T18598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.187131][ T9645] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.220713][ T9645] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.258576][ T9645] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.286405][ T9645] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.366059][T18964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3189'. [ 530.415261][T18961] »»»»»» speed is unknown, defaulting to 1000 [ 530.535338][T18961] lo speed is unknown, defaulting to 1000 [ 530.555600][T18977] IPv6: NLM_F_CREATE should be specified when creating new route [ 530.758316][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.789644][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.843522][ T9649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.880894][ T9649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.393723][T19006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.445307][T19013] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 531.531245][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3199'. [ 531.897467][T19037] tipc: Started in network mode [ 531.922371][T18997] sctp: [Deprecated]: syz.2.3195 (pid 18997) Use of int in max_burst socket option deprecated. [ 531.922371][T18997] Use struct sctp_assoc_value instead [ 531.934973][T19037] tipc: Node identity 961c508233d9, cluster identity 4711 [ 531.964599][T19037] tipc: Enabled bearer , priority 0 [ 531.990972][T19038] syzkaller0: entered promiscuous mode [ 531.999021][T19040] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3202'. [ 532.010581][T19038] syzkaller0: entered allmulticast mode [ 532.119645][T19037] tipc: Resetting bearer [ 532.166724][T19035] tipc: Resetting bearer [ 532.235408][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 532.276372][T19035] tipc: Disabling bearer [ 532.392063][T19047] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 532.404030][T19051] netlink: 'syz.1.3206': attribute type 1 has an invalid length. [ 532.469040][T19049] : entered promiscuous mode [ 532.593214][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3207'. [ 532.641406][T18447] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 532.656370][T18447] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 532.666592][T18447] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 532.679618][T18447] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 532.687515][T18447] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 532.718862][T19056] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3207'. [ 532.773052][T19056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3207'. [ 533.164067][T19082] netlink: 'syz.1.3214': attribute type 29 has an invalid length. [ 533.411761][T19090] netlink: 'syz.4.3215': attribute type 10 has an invalid length. [ 533.424927][T19087] »»»»»» speed is unknown, defaulting to 1000 [ 533.437483][T19090] __nla_validate_parse: 2 callbacks suppressed [ 533.437505][T19090] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3215'. [ 533.497202][T19087] lo speed is unknown, defaulting to 1000 [ 533.515261][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 533.741021][T19091] x_tables: duplicate underflow at hook 1 [ 533.747167][T19057] »»»»»» speed is unknown, defaulting to 1000 [ 533.886488][T19057] lo speed is unknown, defaulting to 1000 [ 534.348183][T19121] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3222'. [ 534.448694][T19128] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 534.457948][T19128] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 534.520348][T19131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3224'. [ 534.545146][T19131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3224'. [ 534.596262][T19121] netlink: 'syz.4.3222': attribute type 11 has an invalid length. [ 534.639270][T19131] ip6gre1: entered promiscuous mode [ 534.661627][T19131] ip6gre1: entered allmulticast mode [ 534.795025][ T4945] Bluetooth: hci4: command tx timeout [ 535.633170][T19057] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.653104][T19057] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.663475][T19057] bridge_slave_0: entered allmulticast mode [ 535.683879][T19057] bridge_slave_0: entered promiscuous mode [ 535.835319][T19057] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.853216][T19057] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.868207][T19057] bridge_slave_1: entered allmulticast mode [ 535.878731][T19057] bridge_slave_1: entered promiscuous mode [ 535.945231][T19057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.954716][T19161] »»»»»» speed is unknown, defaulting to 1000 [ 535.962407][T19057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.017060][T19178] syzkaller0: entered promiscuous mode [ 536.024305][T19178] syzkaller0: entered allmulticast mode [ 536.052390][T19161] lo speed is unknown, defaulting to 1000 [ 536.099341][T19178] veth3: entered promiscuous mode [ 536.113572][T19057] team0: Port device team_slave_0 added [ 536.137945][T19057] team0: Port device team_slave_1 added [ 536.189466][T19057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.196804][T19057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.232420][T19057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.250207][T19057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.257353][T19057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.284460][T19057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.360846][T19057] hsr_slave_0: entered promiscuous mode [ 536.368223][T19057] hsr_slave_1: entered promiscuous mode [ 536.374963][T19057] debugfs: 'hsr0' already exists in 'hsr' [ 536.380769][T19057] Cannot create hsr debugfs directory [ 536.884459][ T4945] Bluetooth: hci4: command tx timeout [ 538.379646][T19163] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 538.964503][ T4945] Bluetooth: hci4: command tx timeout [ 539.601781][T19210] netlink: 'syz.1.3233': attribute type 2 has an invalid length. [ 539.632259][T19210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'. [ 539.690198][T19057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 539.704718][T19057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.717520][T19057] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.038865][T19230] netlink: 'syz.4.3239': attribute type 61 has an invalid length. [ 540.071704][T19230] netlink: 'syz.4.3239': attribute type 62 has an invalid length. [ 540.072184][T19057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.110693][T19057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.121556][T19057] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.147213][T19235] netlink: 'syz.3.3241': attribute type 1 has an invalid length. [ 540.211100][T19212] syzkaller0: entered promiscuous mode [ 540.218403][T19212] syzkaller0: entered allmulticast mode [ 540.338514][T19235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.394064][T19057] team0: Port device netdevsim1 removed [ 540.411911][T19057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 540.426277][T19057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.437958][T19057] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 540.478899][T19238] bond1: (slave gretap1): making interface the new active one [ 540.489542][T19238] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 540.838958][T19256] sctp: [Deprecated]: syz.3.3246 (pid 19256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.838958][T19256] Use struct sctp_sack_info instead [ 541.045025][ T4945] Bluetooth: hci4: command tx timeout [ 541.374031][T19264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 541.488533][T19266] netlink: 'syz.1.3249': attribute type 1 has an invalid length. [ 541.497262][T19266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.350004][T19245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.109421][T19253] batman_adv: batadv0: Adding interface: dummy0 [ 544.116435][T19253] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.142429][T19253] batman_adv: batadv0: Interface activated: dummy0 [ 544.246812][T19057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.266290][T19057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.277365][T19057] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 544.686781][T19304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3258'. [ 544.723316][T19303] geneve2: entered promiscuous mode [ 544.736265][T19303] geneve2: entered allmulticast mode [ 544.759658][ T9645] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 544.783192][T19057] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 544.786615][T19303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.808844][T19057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.817411][ T9645] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 544.827311][ T9645] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 544.836631][T19057] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 544.846497][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 544.858811][T19057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.867072][T19303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 544.877987][T19057] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 544.891386][T19057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.906270][ T9645] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 544.960914][T19057] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 544.996025][T19057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 545.083020][T19318] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3261'. [ 545.262665][T19329] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 545.312298][T19057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.377086][T19057] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.393068][T19334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3266'. [ 545.410179][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.417455][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.479676][ T9643] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.486982][ T9643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.733718][T19348] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 545.812604][T19348] netlink: 'syz.4.3270': attribute type 83 has an invalid length. [ 546.341685][T19376] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3276'. [ 546.448005][T19374] bridge0: port 3(erspan0) entered blocking state [ 546.459059][T19374] bridge0: port 3(erspan0) entered disabled state [ 546.501611][T19378] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3277'. [ 546.633835][T19374] erspan0: entered allmulticast mode [ 546.673728][T19374] erspan0: entered promiscuous mode [ 546.687841][T19374] bridge0: port 3(erspan0) entered blocking state [ 546.696899][T19374] bridge0: port 3(erspan0) entered forwarding state [ 546.887353][T19386] vlan2: entered promiscuous mode [ 546.892494][T19386] bridge0: entered promiscuous mode [ 546.942319][T19057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.145622][T19057] veth0_vlan: entered promiscuous mode [ 547.185590][T19057] veth1_vlan: entered promiscuous mode [ 547.265967][T19405] netlink: 'syz.3.3287': attribute type 1 has an invalid length. [ 547.280253][T19057] veth0_macvtap: entered promiscuous mode [ 547.299294][T19409] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 547.377673][T19405] 8021q: adding VLAN 0 to HW filter on device bond2 [ 547.408051][T19409] IPVS: Scheduler module ip_vs_sip not found [ 547.439813][T19057] veth1_macvtap: entered promiscuous mode [ 547.507394][T19057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.569684][T19405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3287'. [ 547.590378][T19057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.618550][ T9645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.641139][ T9645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.687517][ T9645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.726247][ T9645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.911659][T19430] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3294'. [ 547.968355][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.001176][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.218417][ T9648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.235010][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 548.284346][ T9648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.497037][T19447] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.505634][T19447] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.752600][T19453] »»»»»» speed is unknown, defaulting to 1000 [ 548.801065][T19460] netlink: 'syz.2.3301': attribute type 1 has an invalid length. [ 548.801208][T19453] lo speed is unknown, defaulting to 1000 [ 548.838844][T19460] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3301'. [ 549.201480][T19475] netlink: 'syz.2.3306': attribute type 3 has an invalid length. [ 549.621640][T19484] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 549.643930][T19486] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 549.662726][T19484] bond1 (unregistering): Released all slaves [ 549.676692][T19493] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 549.824564][T19490] syzkaller1: entered promiscuous mode [ 549.853143][T19490] syzkaller1: entered allmulticast mode [ 549.918465][T19503] __nla_validate_parse: 2 callbacks suppressed [ 549.918487][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3314'. [ 549.999028][T19503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3314'. [ 550.031406][T19505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3314'. [ 550.078965][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.093456][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.114770][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.145564][T19490] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 550.201223][T19490] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 550.271576][T19490] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 550.350457][T19490] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 550.457507][T19518] netlink: 'syz.0.3318': attribute type 1 has an invalid length. [ 550.566329][T19518] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 550.571343][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.600992][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.616704][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.630921][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.672672][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.686651][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.697988][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.711532][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.730147][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.749445][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.768449][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.788264][T19490] hsr0 speed is unknown, defaulting to 1000 [ 550.789026][T19524] xt_TCPMSS: Only works on TCP SYN packets [ 550.843887][T19524] netlink: 'syz.0.3319': attribute type 10 has an invalid length. [ 550.927528][T19527] netlink: 'syz.0.3319': attribute type 10 has an invalid length. [ 550.940227][T19524] team0: Port device dummy0 added [ 551.017114][T19527] team0: Port device dummy0 removed [ 551.069842][T19527] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 551.594715][ T4945] Bluetooth: hci0: command 0x0c1a tx timeout [ 551.719699][T19559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3327'. [ 551.742937][T19558] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 552.074522][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 552.379088][T19589] netlink: 20520 bytes leftover after parsing attributes in process `syz.4.3332'. [ 552.467391][T19557] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 552.740240][T19601] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3336'. [ 552.863315][T19601] team0 (unregistering): Port device team_slave_0 removed [ 552.923342][T19601] team0 (unregistering): Port device team_slave_1 removed [ 553.568428][T19640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3347'. [ 553.674475][ T4945] Bluetooth: hci0: command 0x0c1a tx timeout [ 554.538128][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3348'. [ 555.766065][ T4945] Bluetooth: hci0: command 0x0c1a tx timeout [ 558.707886][T19623] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3344'. [ 559.258309][T19686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3357'. [ 559.317619][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3358'. [ 559.354746][T19688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3358'. [ 559.370187][T19688] netlink: 304 bytes leftover after parsing attributes in process `syz.4.3358'. [ 559.468363][T19686] tipc: Started in network mode [ 559.481982][T19686] tipc: Node identity 268c2b252daa, cluster identity 4711 [ 559.505642][T19686] tipc: Enabled bearer , priority 0 [ 559.531911][T19686] syzkaller0: entered promiscuous mode [ 559.555718][T19686] syzkaller0: entered allmulticast mode [ 559.690827][T19686] tipc: Resetting bearer [ 559.720943][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3357'. [ 559.887331][T19684] tipc: Resetting bearer [ 559.916449][T18447] Bluetooth: hci5: command 0x0406 tx timeout [ 560.019561][T19684] tipc: Disabling bearer [ 560.143948][T19711] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 560.273925][T19717] veth0_vlan: entered allmulticast mode [ 560.559775][T19725] sctp: [Deprecated]: syz.3.3364 (pid 19725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 560.559775][T19725] Use struct sctp_sack_info instead [ 560.865156][T19741] batman_adv: batadv0: Adding interface: ipvlan2 [ 560.871675][T19741] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 560.898720][T19741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.910788][T19741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.941092][T19741] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 561.125110][T19741] syzkaller0: entered promiscuous mode [ 561.141311][T19741] syzkaller0: entered allmulticast mode [ 561.795160][T19757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3373'. [ 561.860603][ T9648] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.143078][T19782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3383'. [ 562.154442][T19781] openvswitch: netlink: Message has 4 unknown bytes. [ 562.181553][T19781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 562.268044][T19787] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3383'. [ 562.318618][T19782] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3383'. [ 562.482827][T19799] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20000 [ 562.609077][ T9648] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.645967][ T9648] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 562.719047][T19787] bond3 (unregistering): Released all slaves [ 562.780157][T19795] syzkaller1: entered promiscuous mode [ 562.786024][T19795] syzkaller1: entered allmulticast mode [ 562.881711][ T9648] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.017146][T19804] netlink: 'syz.3.3386': attribute type 1 has an invalid length. [ 563.171200][T19804] bond3: entered promiscuous mode [ 563.197163][T19804] 8021q: adding VLAN 0 to HW filter on device bond3 [ 563.382002][T19808] bond3: (slave veth3): making interface the new active one [ 563.398499][T19808] veth3: entered promiscuous mode [ 563.427123][T19808] bond3: (slave veth3): Enslaving as an active interface with an up link [ 564.138360][T19854] __nla_validate_parse: 4 callbacks suppressed [ 564.138382][T19854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3396'. [ 564.174763][T19853] xfrm0: entered allmulticast mode [ 564.464110][T19865] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 564.496956][T19865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.534403][T19869] xt_hashlimit: size too large, truncated to 1048576 [ 564.651103][T19865] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.823305][T19865] bridge_slave_0 (unregistering): left allmulticast mode [ 564.875965][T19879] netlink: 'syz.3.3403': attribute type 1 has an invalid length. [ 564.912301][T19865] bridge_slave_0 (unregistering): left promiscuous mode [ 564.937516][T19865] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.147480][T19889] IPVS: set_ctl: invalid protocol: 56 172.30.1.1:20000 [ 565.397141][T19897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3408'. [ 565.479854][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3408'. [ 565.499442][T19898] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3408'. [ 565.544309][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3408'. [ 565.572354][T19898] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3408'. [ 565.638950][T19898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3408'. [ 565.665123][T19905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3409'. [ 565.686525][T19879] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 565.862184][T19911] rdma_rxe: rxe_newlink: failed to add lo [ 566.040527][T19923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3413'. [ 566.225559][T19935] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3416'. [ 566.257069][T19915] syzkaller0: entered promiscuous mode [ 566.264725][T19915] syzkaller0: entered allmulticast mode [ 566.730060][T19943] xt_connbytes: Forcing CT accounting to be enabled [ 569.808486][T19942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.965597][T19973] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 569.980336][T19945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.018256][T19967] netlink: 'syz.0.3421': attribute type 11 has an invalid length. [ 570.065246][T19967] netlink: 'syz.0.3421': attribute type 11 has an invalid length. [ 570.073573][T19967] __nla_validate_parse: 1 callbacks suppressed [ 570.073593][T19967] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3421'. [ 570.171855][T19978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3424'. [ 570.196800][T19971] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3422'. [ 570.242513][T19978] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3424'. [ 570.437469][T19989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3427'. [ 570.493886][T19989] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.536094][T19989] 8021q: adding VLAN 0 to HW filter on device bond5 [ 570.545730][T19989] bond4: (slave bond5): Enslaving as an active interface with an up link [ 570.557930][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3427'. [ 570.611868][T19989] bond4 (unregistering): (slave bond5): Releasing backup interface [ 570.622107][T20002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3431'. [ 570.655228][T19989] bond4 (unregistering): Released all slaves [ 570.696670][T20002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3431'. [ 570.755964][T20009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3431'. [ 570.961770][T20014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3434'. [ 571.091492][T20033] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 571.124710][T20028] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 571.153901][T20028] bond1: (slave lo): Enslaving as an active interface with an up link [ 571.166083][T20028] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 571.350606][T20045] netlink: 'syz.2.3442': attribute type 1 has an invalid length. [ 571.470438][T20045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.491703][T20046] ip6tnl1: entered allmulticast mode [ 571.550972][T20050] bond1: (slave gretap1): making interface the new active one [ 571.590712][T20050] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 571.792970][T20058] sctp: [Deprecated]: syz.2.3444 (pid 20058) Use of int in maxseg socket option. [ 571.792970][T20058] Use struct sctp_assoc_value instead [ 572.607845][T20084] »»»»»» speed is unknown, defaulting to 1000 [ 572.627085][T20084] lo speed is unknown, defaulting to 1000 [ 572.688665][T20091] bridge3: entered promiscuous mode [ 572.708628][T20091] bridge3: entered allmulticast mode [ 573.171388][T20108] bridge4: entered promiscuous mode [ 573.216432][T20108] bridge4: entered allmulticast mode [ 573.348674][T20084] hsr0 speed is unknown, defaulting to 1000 [ 573.387218][T20114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.470538][T20122] netlink: 'syz.4.3461': attribute type 1 has an invalid length. [ 573.629920][T20129] netlink: 'syz.2.3463': attribute type 1 has an invalid length. [ 573.669444][T20122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.759182][T20129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 573.822997][T20132] bond2: (slave ip6gretap1): making interface the new active one [ 573.849570][T20132] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 573.982132][T20124] bond2: (slave bridge5): making interface the new active one [ 574.016401][T20124] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 574.233977][T20145] netlink: 'syz.2.3467': attribute type 39 has an invalid length. [ 574.300017][T20145] hsr_slave_0 (unregistering): left promiscuous mode [ 574.352276][T20153] x_tables: duplicate underflow at hook 1 [ 574.831292][T20170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.173513][T20191] netlink: 'syz.1.3474': attribute type 3 has an invalid length. [ 575.198682][T20191] __nla_validate_parse: 10 callbacks suppressed [ 575.198706][T20191] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3474'. [ 575.279099][ T4945] Bluetooth: hci0: command 0x0c1a tx timeout [ 575.390741][T20194] veth0_vlan: left promiscuous mode [ 575.419700][T20194] veth0_vlan: entered promiscuous mode [ 575.495860][T20194] veth1_macvtap: entered promiscuous mode [ 575.623655][T20194] batman_adv: batadv0: Interface activated: ipvlan2 [ 575.651766][T20194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 575.936918][T20219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3486'. [ 576.056574][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3488'. [ 576.673959][T20249] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3491'. [ 576.715780][T20251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3493'. [ 576.725182][T20251] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3493'. [ 579.610889][T20245] tipc: Enabled bearer , priority 0 [ 579.635966][T20251] 8021q: VLANs not supported on ip6_vti0 [ 579.817625][T20246] syzkaller0: entered promiscuous mode [ 579.827777][T20246] syzkaller0: entered allmulticast mode [ 579.834485][T20246] tipc: Resetting bearer [ 579.931008][ T9650] tipc: Resetting bearer [ 579.951837][T20235] tipc: Resetting bearer [ 580.876340][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 583.000114][T20235] tipc: Disabling bearer [ 583.023187][T20260] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 583.080186][ T5731] tipc: Node number set to 1463088152 [ 583.269143][T20273] bond3: ARP target 9.0.0.0 is already present [ 583.275784][T20273] bond3: option arp_ip_target: invalid value (9) [ 583.286642][T20273] bond3 (unregistering): Released all slaves [ 583.488382][T20294] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 583.580231][T20300] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3505'. [ 583.593069][T20294] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 583.605248][T20294] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 583.626937][T20303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3502'. [ 583.636277][T20304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3506'. [ 583.655938][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3505'. [ 583.698816][T20307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3502'. [ 583.732423][T20304] bond3: option ad_actor_sys_prio: invalid value (0) [ 583.741591][T20304] bond3: option ad_actor_sys_prio: allowed values 1 - 65535 [ 583.761029][T20304] bond3 (unregistering): Released all slaves [ 583.860258][T20303] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 583.894636][T20307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.923926][T20294] vlan0: entered promiscuous mode [ 583.940633][T20308] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3506'. [ 583.969573][T20308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3506'. [ 583.999266][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3506'. [ 584.009439][T20294] team0: Port device vlan0 added [ 584.276275][T20332] netlink: 'syz.1.3511': attribute type 1 has an invalid length. [ 584.343845][T20339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3511'. [ 584.385277][T20339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.406553][T20332] macvlan2: entered promiscuous mode [ 584.411933][T20332] macvlan2: entered allmulticast mode [ 584.419086][T20332] bond2: entered promiscuous mode [ 584.425447][T20332] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 584.443603][T20332] bond2: left promiscuous mode [ 584.531732][T20342] »»»»»» speed is unknown, defaulting to 1000 [ 584.551075][T20342] lo speed is unknown, defaulting to 1000 [ 584.618307][T20348] bond3: entered allmulticast mode [ 584.656504][T20355] veth3: entered promiscuous mode [ 584.662246][T20355] veth3: entered allmulticast mode [ 584.681362][T20355] bond3: (slave veth3): Enslaving as an active interface with an up link [ 584.792880][T20361] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3518'. [ 585.193727][T20342] hsr0 speed is unknown, defaulting to 1000 [ 585.467684][T20393] netlink: 'syz.1.3527': attribute type 1 has an invalid length. [ 585.813946][T20393] 8021q: adding VLAN 0 to HW filter on device bond3 [ 585.847622][T20400] vlan2: entered allmulticast mode [ 585.853225][T20400] bond3: entered allmulticast mode [ 585.860267][T20402] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 585.904548][T20410] syzkaller0: entered promiscuous mode [ 585.965942][T20410] syzkaller0: entered allmulticast mode [ 586.037258][T20421] veth1_to_hsr: entered allmulticast mode [ 587.915569][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 588.298699][T20431] netlink: 'syz.0.3534': attribute type 1 has an invalid length. [ 588.312343][T20431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 588.475751][T20456] netlink: 'syz.1.3540': attribute type 1 has an invalid length. [ 588.483803][T20456] netlink: 'syz.1.3540': attribute type 3 has an invalid length. [ 588.775075][T20467] syzkaller0: entered promiscuous mode [ 588.781498][T20467] syzkaller0: entered allmulticast mode [ 588.857999][T20463] netem: change failed [ 588.868504][T20466] syz.3.3543: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 588.898545][T20466] CPU: 1 UID: 0 PID: 20466 Comm: syz.3.3543 Not tainted syzkaller #0 PREEMPT(full) [ 588.898592][T20466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 588.898608][T20466] Call Trace: [ 588.898618][T20466] [ 588.898627][T20466] dump_stack_lvl+0xe8/0x150 [ 588.898660][T20466] warn_alloc+0x249/0x340 [ 588.898697][T20466] ? stack_trace_save+0xa9/0x100 [ 588.898737][T20466] ? __pfx_warn_alloc+0x10/0x10 [ 588.898778][T20466] ? kasan_save_track+0x4f/0x80 [ 588.898806][T20466] ? kasan_save_track+0x3e/0x80 [ 588.898833][T20466] ? __kasan_kmalloc+0x93/0xb0 [ 588.898861][T20466] ? __kmalloc_cache_noprof+0x31c/0x660 [ 588.898890][T20466] ? xskq_create+0x56/0x170 [ 588.898921][T20466] ? xsk_setsockopt+0x54c/0x990 [ 588.898948][T20466] ? do_sock_setsockopt+0x17c/0x1b0 [ 588.898980][T20466] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 588.899011][T20466] ? do_syscall_64+0x15f/0xf80 [ 588.899036][T20466] __vmalloc_node_range_noprof+0x132/0x1750 [ 588.899103][T20466] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 588.899143][T20466] ? __kasan_kmalloc+0x93/0xb0 [ 588.899182][T20466] vmalloc_user_noprof+0xad/0xe0 [ 588.899211][T20466] ? xskq_create+0xbf/0x170 [ 588.899243][T20466] xskq_create+0xbf/0x170 [ 588.899279][T20466] xsk_init_queue+0x8a/0xe0 [ 588.899312][T20466] xsk_setsockopt+0x54c/0x990 [ 588.899346][T20466] ? __pfx_xsk_setsockopt+0x10/0x10 [ 588.899375][T20466] ? __pfx_aa_sk_perm+0x10/0x10 [ 588.899410][T20466] ? aa_sock_opt_perm+0xff/0x1a0 [ 588.899444][T20466] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 588.899475][T20466] ? __pfx_xsk_setsockopt+0x10/0x10 [ 588.899506][T20466] do_sock_setsockopt+0x17c/0x1b0 [ 588.899545][T20466] __x64_sys_setsockopt+0x13d/0x1b0 [ 588.899598][T20466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.899625][T20466] do_syscall_64+0x15f/0xf80 [ 588.899646][T20466] ? trace_irq_disable+0x3b/0x140 [ 588.899682][T20466] ? clear_bhb_loop+0x40/0x90 [ 588.899711][T20466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.899733][T20466] RIP: 0033:0x7fcbbd79cdd9 [ 588.899754][T20466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.899773][T20466] RSP: 002b:00007fcbbe715028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 588.899798][T20466] RAX: ffffffffffffffda RBX: 00007fcbbda15fa0 RCX: 00007fcbbd79cdd9 [ 588.899815][T20466] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 588.899828][T20466] RBP: 00007fcbbd832d69 R08: 0000000000000004 R09: 0000000000000000 [ 588.899840][T20466] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.899854][T20466] R13: 00007fcbbda16038 R14: 00007fcbbda15fa0 R15: 00007ffe9bd40228 [ 588.899890][T20466] [ 588.901918][T20466] Mem-Info: [ 589.272786][T20466] active_anon:10538 inactive_anon:6 isolated_anon:0 [ 589.272786][T20466] active_file:2637 inactive_file:40852 isolated_file:0 [ 589.272786][T20466] unevictable:768 dirty:218 writeback:0 [ 589.272786][T20466] slab_reclaimable:12697 slab_unreclaimable:222568 [ 589.272786][T20466] mapped:30846 shmem:1292 pagetables:1306 [ 589.272786][T20466] sec_pagetables:0 bounce:0 [ 589.272786][T20466] kernel_misc_reclaimable:0 [ 589.272786][T20466] free:1168941 free_pcp:35710 free_cma:0 [ 589.318705][T20466] Node 0 active_anon:42152kB inactive_anon:24kB active_file:10548kB inactive_file:163200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123384kB dirty:872kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16136kB pagetables:5084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 589.359381][T20466] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 589.413898][T20466] Node 0 DMA free:15300kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:44kB free_cma:0kB [ 589.451311][T20482] __nla_validate_parse: 7 callbacks suppressed [ 589.451332][T20482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3545'. [ 589.514725][T20466] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 589.531605][T20466] Node 0 DMA32 free:769792kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38952kB inactive_anon:24kB active_file:10548kB inactive_file:163200kB unevictable:1536kB writepending:872kB zspages:0kB present:3129332kB managed:2552532kB mlocked:0kB bounce:0kB free_pcp:85488kB local_pcp:13912kB free_cma:0kB [ 589.572486][T20466] lowmem_reserve[]: 0 0 0 0 0 [ 589.577596][T20466] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 589.610150][T20466] lowmem_reserve[]: 0 0 0 0 0 [ 589.615713][T20466] Node 1 Normal free:3888640kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:58508kB local_pcp:27880kB free_cma:0kB [ 589.648640][T20466] lowmem_reserve[]: 0 0 0 0 0 [ 589.653471][T20466] Node 0 DMA: 1*4kB (U) 0*8kB 2*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15300kB [ 589.673359][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3545'. [ 589.682672][T20466] Node 0 DMA32: 5966*4kB (UME) 3901*8kB (UM) 2172*16kB (UME) 232*32kB (UM) 439*64kB (UM) 695*128kB (UME) 567*256kB (UM) 318*512kB (U) 182*1024kB (UME) 30*2048kB (UM) 0*4096kB = 770080kB [ 589.707982][T20466] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 589.720743][T20466] Node 1 Normal: 2*4kB (U) 6*8kB (UM) 17*16kB (UM) 5*32kB (UM) 10*64kB (UM) 4*128kB (UM) 4*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (U) 947*4096kB (UM) = 3888744kB [ 589.738119][T20466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 589.748144][T20466] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 589.758247][T20466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 589.769883][T20492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3545'. [ 589.794337][T20466] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 589.815993][T20466] 44777 total pagecache pages [ 589.827166][T20466] 0 pages in swap cache [ 589.837666][T20466] Free swap = 124996kB [ 589.846241][T20466] Total swap = 124996kB [ 589.851973][T20466] 2097051 pages RAM [ 589.863577][T20466] 0 pages HighMem/MovableOnly [ 589.872387][T20466] 427136 pages reserved [ 589.895025][T20466] 0 pages cma reserved [ 593.341525][T20517] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3549'. [ 593.586843][T20519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3550'. [ 596.523302][T20519] team0: entered promiscuous mode [ 596.554099][T20519] team_slave_0: entered promiscuous mode [ 596.574553][T20519] team_slave_1: entered promiscuous mode [ 596.692463][T20526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3551'. [ 596.839425][T20543] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 596.861546][T20544] netlink: 'syz.4.3556': attribute type 1 has an invalid length. [ 596.961367][T20552] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3557'. [ 597.005768][T20555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3556'. [ 597.020884][T20552] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3557'. [ 597.139783][T20554] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 597.155503][T20554] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 597.342347][T20571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3559'. [ 597.354998][T20555] bond3: (slave bridge6): Enslaving as an active interface with a down link [ 597.424237][ T29] audit: type=1804 audit(1778613871.108:15): pid=20571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3559" name="/newroot/88/cgroup.controllers" dev="tmpfs" ino=476 res=1 errno=0 [ 597.445122][T20544] macvlan2: entered promiscuous mode [ 597.464012][T20544] macvlan2: entered allmulticast mode [ 597.475907][T20544] bond3: entered promiscuous mode [ 597.482131][T20544] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 597.490117][ T29] audit: type=1800 audit(1778613871.148:16): pid=20571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3559" name="cgroup.controllers" dev="tmpfs" ino=476 res=0 errno=0 [ 597.521993][T20544] bond3: left promiscuous mode [ 597.523993][ T29] audit: type=1804 audit(1778613871.208:17): pid=20571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3559" name="/newroot/88/cgroup.controllers" dev="tmpfs" ino=476 res=1 errno=0 [ 597.586527][T20576] tipc: Enabling of bearer rejected, failed to enable media [ 597.779629][T20582] netlink: 'syz.3.3562': attribute type 6 has an invalid length. [ 598.009294][T20595] netlink: 'syz.1.3566': attribute type 4 has an invalid length. [ 598.067119][T20595] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3566'. [ 598.117462][T20601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3568'. [ 598.164736][T20601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3568'. [ 598.327722][T20610] netlink: 'syz.2.3570': attribute type 1 has an invalid length. [ 598.377667][T20610] 8021q: adding VLAN 0 to HW filter on device bond4 [ 598.485281][T20610] vlan2: entered allmulticast mode [ 598.508465][T20610] bond4: entered allmulticast mode [ 598.555187][T20622] IPv6: NLM_F_CREATE should be specified when creating new route [ 598.594320][T20619] bond4: (slave gretap2): making interface the new active one [ 598.602018][T20622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3574'. [ 598.624358][T20619] gretap2: entered allmulticast mode [ 598.634227][T20619] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 598.757400][T20627] netlink: 'syz.1.3575': attribute type 1 has an invalid length. [ 598.912137][T20627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 598.976925][T20627] bond4 (unregistering): Released all slaves [ 599.008468][T20632] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3575'. [ 599.073243][T20635] ªªªªª»: renamed from bond_slave_0 (while UP) [ 599.140324][T20639] veth1_to_hsr: entered allmulticast mode [ 599.334341][T20653] tipc: Enabling of bearer rejected, failed to enable media [ 600.178143][T20687] netlink: 'syz.3.3591': attribute type 1 has an invalid length. [ 600.441958][T20691] netlink: 'syz.3.3593': attribute type 5 has an invalid length. [ 600.542774][T20691] geneve3: entered promiscuous mode [ 600.564467][T20691] geneve3: entered allmulticast mode [ 600.587917][ T9649] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 600.608721][ T9649] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 600.618211][ T9649] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 600.629555][ T9649] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 600.784543][T20706] tipc: Enabling of bearer rejected, failed to enable media [ 600.929104][T20714] syzkaller0: entered promiscuous mode [ 600.948827][T20714] syzkaller0: entered allmulticast mode [ 600.971216][T20715] netlink: 'syz.3.3597': attribute type 1 has an invalid length. [ 601.003536][T20709] netlink: 'syz.4.3596': attribute type 33 has an invalid length. [ 601.033636][T20715] netlink: 'syz.3.3597': attribute type 2 has an invalid length. [ 602.902280][T20762] validate_nla: 10 callbacks suppressed [ 602.902305][T20762] netlink: 'syz.3.3608': attribute type 33 has an invalid length. [ 603.102386][ T808] IPVS: starting estimator thread 0... [ 603.126094][T20778] netlink: 'syz.1.3611': attribute type 8 has an invalid length. [ 603.155635][T20773] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 603.224255][T20776] IPVS: using max 28 ests per chain, 67200 per kthread [ 603.408142][T20793] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 603.482285][T20795] netlink: 'syz.2.3619': attribute type 1 has an invalid length. [ 603.509195][T20801] __nla_validate_parse: 6 callbacks suppressed [ 603.509215][T20801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3622'. [ 603.593312][T20795] 8021q: adding VLAN 0 to HW filter on device bond5 [ 603.679798][T20804] bond5: (slave gretap3): making interface the new active one [ 603.709779][T20804] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 603.911791][T20822] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 603.955506][T20822] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 604.043819][T20828] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3629'. [ 604.092450][T20828] »»»»»» speed is unknown, defaulting to 1000 [ 604.101935][T20828] lo speed is unknown, defaulting to 1000 [ 604.522633][T20828] hsr0 speed is unknown, defaulting to 1000 [ 604.628078][T20839] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3634'. [ 604.690710][T20843] netlink: 'syz.1.3635': attribute type 4 has an invalid length. [ 604.736065][T20844] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 604.836548][T20851] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3637'. [ 605.058769][T20864] netlink: 'syz.3.3641': attribute type 3 has an invalid length. [ 605.351573][T20879] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3646'. [ 605.948871][T20905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 606.274307][ T29] audit: type=1800 audit(1778613879.958:18): pid=20894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3650" name="memory.events" dev="tmpfs" ino=585 res=0 errno=0 [ 606.325273][T20932] tc_dump_action: action bad kind [ 606.569438][T20944] bridge_slave_0: left allmulticast mode [ 606.588096][T20944] bridge_slave_0: left promiscuous mode [ 606.602701][T20944] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.649180][T20944] bridge_slave_1: left allmulticast mode [ 606.666959][T20944] bridge_slave_1: left promiscuous mode [ 606.687252][T20944] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.721652][T20944] bond0: (slave bond_slave_0): Releasing backup interface [ 606.765786][T20956] netlink: 'syz.3.3664': attribute type 2 has an invalid length. [ 606.806708][T20944] bond0: (slave bond_slave_1): Releasing backup interface [ 606.841297][T20944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.851809][T20958] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3666'. [ 606.862583][T20944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.897922][T20944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.910341][T20944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.927462][T20944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 607.155420][ T10] hsr0 speed is unknown, defaulting to 1000 [ 607.161505][T17580] hsr0 speed is unknown, defaulting to 1000 [ 607.505477][T20977] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3671'. [ 607.983120][T20991] xt_hashlimit: size too large, truncated to 1048576 [ 608.013928][T20992] syzkaller0: entered promiscuous mode [ 608.023673][T20995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3676'. [ 608.032792][T20992] syzkaller0: entered allmulticast mode [ 608.161658][T21002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3677'. [ 608.241830][T18447] block nbd3: Receive control failed (result -1) [ 609.449997][T21055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3681'. [ 609.989665][T21079] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.093672][T21085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3689'. [ 610.408060][T21079] A link change request failed with some changes committed already. Interface veth1_to_bod may have been left with an inconsistent configuration, please check. [ 610.473449][ T9648] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.510375][ T9648] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.187861][ T9648] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 611.214712][ T9648] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.421711][T21164] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3705'. [ 612.467981][T21164] gretap0: entered promiscuous mode [ 612.747527][T21193] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3709'. [ 613.067513][T21197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3713'. [ 613.106209][T21197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3713'. [ 613.155268][T21197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3713'. [ 613.179570][T21203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3713'. [ 613.179619][T21197] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3713'. [ 613.209034][T21202] syzkaller1: entered promiscuous mode [ 613.221766][T21202] syzkaller1: entered allmulticast mode [ 613.569713][T21226] netlink: 16170 bytes leftover after parsing attributes in process `syz.0.3720'. [ 613.819342][T21234] »»»»»» speed is unknown, defaulting to 1000 [ 613.840332][T21234] lo speed is unknown, defaulting to 1000 [ 614.490095][T21270] __nla_validate_parse: 2 callbacks suppressed [ 614.490116][T21270] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3731'. [ 614.890709][T21281] hmac(sha2: entered promiscuous mode [ 615.162432][T21234] hsr0 speed is unknown, defaulting to 1000 [ 615.432299][T21299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3739'. [ 616.129998][T21330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3747'. [ 616.185505][T21332] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3748'. [ 616.195595][T21332] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3748'. [ 616.206128][T21332] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3748'. [ 616.339209][T21337] netlink: 'syz.0.3750': attribute type 8 has an invalid length. [ 616.840448][T21359] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3758'. [ 617.176526][T21375] netlink: 'syz.1.3764': attribute type 1 has an invalid length. [ 617.346162][T21375] 8021q: adding VLAN 0 to HW filter on device bond4 [ 617.412477][T21393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3769'. [ 617.563683][T21396] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3771'. [ 617.777684][T21400] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3772'. [ 617.822623][T21406] xt_CT: No such helper "netbios-ns" [ 618.120178][T21425] syzkaller0: entered promiscuous mode [ 618.134930][T21425] syzkaller0: entered allmulticast mode [ 618.427718][T21440] netlink: 'syz.3.3783': attribute type 1 has an invalid length. [ 618.436761][T21440] netlink: 'syz.3.3783': attribute type 1 has an invalid length. [ 618.469307][T21435] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 618.965947][T21467] netlink: 'syz.2.3791': attribute type 4 has an invalid length. [ 619.515862][T21487] netlink: 'syz.4.3798': attribute type 1 has an invalid length. [ 619.537786][T21485] netlink: 'syz.4.3798': attribute type 1 has an invalid length. [ 619.568255][T21490] netlink: 'syz.0.3800': attribute type 11 has an invalid length. [ 619.615666][T21487] bond4: entered promiscuous mode [ 619.622573][T21487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 619.840377][T21496] __nla_validate_parse: 8 callbacks suppressed [ 619.840432][T21496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3799'. [ 620.227817][T21509] »»»»»» speed is unknown, defaulting to 1000 [ 620.236121][T21514] tipc: Enabled bearer , priority 0 [ 620.249958][T21514] syzkaller0: entered promiscuous mode [ 620.272310][T21514] syzkaller0: entered allmulticast mode [ 620.311355][T21509] lo speed is unknown, defaulting to 1000 [ 620.427539][T21514] syzkaller1: entered promiscuous mode [ 620.453130][T21514] syzkaller1: entered allmulticast mode [ 620.575553][T21520] syzkaller0: mtu less than device minimum [ 621.223589][T21513] tipc: Resetting bearer [ 621.316441][T21513] tipc: Disabling bearer [ 621.344911][T21536] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 621.347465][T21509] hsr0 speed is unknown, defaulting to 1000 [ 621.914009][T21542] »»»»»» speed is unknown, defaulting to 1000 [ 621.973405][T21542] lo speed is unknown, defaulting to 1000 [ 622.707080][T21559] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3817'. [ 622.709789][T21542] hsr0 speed is unknown, defaulting to 1000 [ 623.518427][T21576] openvswitch: netlink: IP tunnel attribute has 4460 unknown bytes. [ 624.190074][T21588] vxcan5: entered allmulticast mode [ 624.354713][T21590] xt_cgroup: invalid path, errno=-2 [ 624.389268][T21590] syzkaller0: entered promiscuous mode [ 624.409498][T21590] syzkaller0: entered allmulticast mode [ 624.447044][T21596] macvlan1: entered allmulticast mode [ 624.850989][T21606] x_tables: duplicate underflow at hook 2 [ 624.998543][T21611] syzkaller0: entered promiscuous mode [ 625.011304][T21611] syzkaller0: entered allmulticast mode [ 625.389477][T21625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3833'. [ 626.439965][T21483] Set syz1 is full, maxelem 65536 reached [ 629.680751][T21625] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 629.681961][T21627] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 629.829966][T21646] FAULT_INJECTION: forcing a failure. [ 629.829966][T21646] name failslab, interval 1, probability 0, space 0, times 0 [ 629.866591][T21646] CPU: 0 UID: 0 PID: 21646 Comm: syz.1.3837 Not tainted syzkaller #0 PREEMPT(full) [ 629.866620][T21646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 629.866635][T21646] Call Trace: [ 629.866643][T21646] [ 629.866652][T21646] dump_stack_lvl+0xe8/0x150 [ 629.866685][T21646] should_fail_ex+0x412/0x560 [ 629.866720][T21646] should_failslab+0xa8/0x100 [ 629.866756][T21646] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 629.866787][T21646] ? __alloc_skb+0x186/0x7d0 [ 629.866816][T21646] ? __alloc_skb+0x1d0/0x7d0 [ 629.866842][T21646] ? __local_bh_enable_ip+0xd0/0x130 [ 629.866871][T21646] __alloc_skb+0x1d0/0x7d0 [ 629.866905][T21646] netlink_sendmsg+0x5d4/0xb40 [ 629.866949][T21646] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.866985][T21646] ? aa_sock_msg_perm+0xf1/0x1b0 [ 629.867017][T21646] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 629.867051][T21646] ____sys_sendmsg+0x972/0x9f0 [ 629.867084][T21646] ? __might_fault+0xaf/0x130 [ 629.867119][T21646] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.867164][T21646] ? import_iovec+0x73/0xa0 [ 629.867200][T21646] ___sys_sendmsg+0x2a5/0x360 [ 629.867231][T21646] ? __lock_acquire+0x6b5/0x2cf0 [ 629.867260][T21646] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.867334][T21646] ? __fget_files+0x2a/0x420 [ 629.867359][T21646] ? __fget_files+0x3a0/0x420 [ 629.867397][T21646] __x64_sys_sendmsg+0x1bd/0x2a0 [ 629.867434][T21646] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 629.867478][T21646] ? rcu_is_watching+0x15/0xb0 [ 629.867523][T21646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.867547][T21646] do_syscall_64+0x15f/0xf80 [ 629.867568][T21646] ? trace_irq_disable+0x3b/0x140 [ 629.867600][T21646] ? clear_bhb_loop+0x40/0x90 [ 629.867627][T21646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.867649][T21646] RIP: 0033:0x7fc722d9cdd9 [ 629.867669][T21646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.867691][T21646] RSP: 002b:00007fc723c35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.867715][T21646] RAX: ffffffffffffffda RBX: 00007fc723015fa0 RCX: 00007fc722d9cdd9 [ 629.867731][T21646] RDX: 0000000002008840 RSI: 0000200000000080 RDI: 0000000000000003 [ 629.867745][T21646] RBP: 00007fc723c35090 R08: 0000000000000000 R09: 0000000000000000 [ 629.867759][T21646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.867772][T21646] R13: 00007fc723016038 R14: 00007fc723015fa0 R15: 00007ffffe483fb8 [ 629.867807][T21646] [ 630.257361][T21655] ipt_ECN: cannot use operation on non-tcp rule [ 630.265571][T21656] ipt_ECN: cannot use operation on non-tcp rule [ 630.310513][T21661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3838'. [ 630.929144][T21697] FAULT_INJECTION: forcing a failure. [ 630.929144][T21697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.973724][T21697] CPU: 1 UID: 0 PID: 21697 Comm: syz.3.3850 Not tainted syzkaller #0 PREEMPT(full) [ 630.973753][T21697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 630.973766][T21697] Call Trace: [ 630.973774][T21697] [ 630.973783][T21697] dump_stack_lvl+0xe8/0x150 [ 630.973813][T21697] should_fail_ex+0x412/0x560 [ 630.973842][T21697] _copy_from_iter+0x1d3/0x1670 [ 630.973869][T21697] ? rcu_is_watching+0x15/0xb0 [ 630.973897][T21697] ? __pfx__copy_from_iter+0x10/0x10 [ 630.973927][T21697] ? netlink_sendmsg+0x650/0xb40 [ 630.973951][T21697] ? skb_put+0x11b/0x210 [ 630.973979][T21697] netlink_sendmsg+0x6c0/0xb40 [ 630.974014][T21697] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.974043][T21697] ? aa_sock_msg_perm+0xf1/0x1b0 [ 630.974069][T21697] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 630.974096][T21697] ____sys_sendmsg+0x972/0x9f0 [ 630.974127][T21697] ? __might_fault+0xaf/0x130 [ 630.974157][T21697] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.974191][T21697] ? import_iovec+0x73/0xa0 [ 630.974219][T21697] ___sys_sendmsg+0x2a5/0x360 [ 630.974245][T21697] ? __lock_acquire+0x6b5/0x2cf0 [ 630.974267][T21697] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.974324][T21697] ? __fget_files+0x2a/0x420 [ 630.974345][T21697] ? __fget_files+0x3a0/0x420 [ 630.974375][T21697] __x64_sys_sendmsg+0x1bd/0x2a0 [ 630.974404][T21697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.974439][T21697] ? __pfx_ksys_write+0x10/0x10 [ 630.974480][T21697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.974499][T21697] do_syscall_64+0x15f/0xf80 [ 630.974525][T21697] ? trace_irq_disable+0x3b/0x140 [ 630.974553][T21697] ? clear_bhb_loop+0x40/0x90 [ 630.974574][T21697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.974591][T21697] RIP: 0033:0x7fcbbd79cdd9 [ 630.974609][T21697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.974624][T21697] RSP: 002b:00007fcbbe715028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.974644][T21697] RAX: ffffffffffffffda RBX: 00007fcbbda15fa0 RCX: 00007fcbbd79cdd9 [ 630.974656][T21697] RDX: 0000000002008840 RSI: 0000200000000080 RDI: 0000000000000003 [ 630.974668][T21697] RBP: 00007fcbbe715090 R08: 0000000000000000 R09: 0000000000000000 [ 630.974679][T21697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.974688][T21697] R13: 00007fcbbda16038 R14: 00007fcbbda15fa0 R15: 00007ffe9bd40228 [ 630.974715][T21697] [ 631.480302][T21708] netlink: 'syz.4.3853': attribute type 3 has an invalid length. [ 631.563174][T21707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3854'. [ 631.843455][T21720] netlink: 'syz.0.3857': attribute type 9 has an invalid length. [ 631.865937][T21721] netlink: 'syz.0.3857': attribute type 3 has an invalid length. [ 631.917707][T21721] netlink: 'syz.0.3857': attribute type 3 has an invalid length. [ 631.939491][T21721] netlink: 'syz.0.3857': attribute type 3 has an invalid length. [ 631.958783][T21721] netlink: 'syz.0.3857': attribute type 3 has an invalid length. [ 631.978997][T21721] netlink: 'syz.0.3857': attribute type 3 has an invalid length. [ 632.005609][T21721] netlink: 'syz.0.3857': attribute type 3 has an invalid length. [ 632.025205][T21721] netlink: 'syz.0.3857': attribute type 3 has an invalid length. [ 632.042912][T21721] netlink: 'syz.0.3857': attribute type 3 has an invalid length. [ 632.364041][T21739] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.3862'. [ 632.567501][T21743] FAULT_INJECTION: forcing a failure. [ 632.567501][T21743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.618603][T21743] CPU: 0 UID: 0 PID: 21743 Comm: syz.2.3864 Not tainted syzkaller #0 PREEMPT(full) [ 632.618632][T21743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 632.618646][T21743] Call Trace: [ 632.618656][T21743] [ 632.618665][T21743] dump_stack_lvl+0xe8/0x150 [ 632.618702][T21743] should_fail_ex+0x412/0x560 [ 632.618737][T21743] _copy_from_iter+0x1d3/0x1670 [ 632.618772][T21743] ? rcu_is_watching+0x15/0xb0 [ 632.618813][T21743] ? __pfx__copy_from_iter+0x10/0x10 [ 632.618851][T21743] ? netlink_sendmsg+0x650/0xb40 [ 632.618916][T21743] ? skb_put+0x11b/0x210 [ 632.618950][T21743] netlink_sendmsg+0x6c0/0xb40 [ 632.618991][T21743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.619025][T21743] ? aa_sock_msg_perm+0xf1/0x1b0 [ 632.619056][T21743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 632.619090][T21743] ____sys_sendmsg+0x972/0x9f0 [ 632.619123][T21743] ? __might_fault+0xaf/0x130 [ 632.619158][T21743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.619201][T21743] ? import_iovec+0x73/0xa0 [ 632.619236][T21743] ___sys_sendmsg+0x2a5/0x360 [ 632.619267][T21743] ? __lock_acquire+0x6b5/0x2cf0 [ 632.619295][T21743] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.619369][T21743] ? __fget_files+0x2a/0x420 [ 632.619394][T21743] ? __fget_files+0x3a0/0x420 [ 632.619431][T21743] __x64_sys_sendmsg+0x1bd/0x2a0 [ 632.619468][T21743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 632.619509][T21743] ? __pfx_ksys_write+0x10/0x10 [ 632.619543][T21743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.619563][T21743] do_syscall_64+0x15f/0xf80 [ 632.619579][T21743] ? trace_irq_disable+0x3b/0x140 [ 632.619606][T21743] ? clear_bhb_loop+0x40/0x90 [ 632.619628][T21743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.619646][T21743] RIP: 0033:0x7f2b3839cdd9 [ 632.619663][T21743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.619678][T21743] RSP: 002b:00007f2b3921c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.619698][T21743] RAX: ffffffffffffffda RBX: 00007f2b38615fa0 RCX: 00007f2b3839cdd9 [ 632.619711][T21743] RDX: 0000000002008840 RSI: 0000200000000080 RDI: 0000000000000003 [ 632.619723][T21743] RBP: 00007f2b3921c090 R08: 0000000000000000 R09: 0000000000000000 [ 632.619733][T21743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.619744][T21743] R13: 00007f2b38616038 R14: 00007f2b38615fa0 R15: 00007ffe5ea50af8 [ 632.619772][T21743] [ 632.907375][T21748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3865'. [ 633.348685][T21762] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3869'. [ 633.501868][T21775] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3872'. [ 634.123649][T21784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3875'. [ 634.481630][T21790] geneve0: MTU too low for tipc bearer [ 634.495017][T21790] tipc: Enabling of bearer rejected, failed to enable media [ 634.551854][T21800] veth0_vlan: mtu less than device minimum [ 634.575776][T21806] FAULT_INJECTION: forcing a failure. [ 634.575776][T21806] name failslab, interval 1, probability 0, space 0, times 0 [ 634.612528][T21806] CPU: 1 UID: 0 PID: 21806 Comm: syz.0.3878 Not tainted syzkaller #0 PREEMPT(full) [ 634.612562][T21806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.612575][T21806] Call Trace: [ 634.612585][T21806] [ 634.612596][T21806] dump_stack_lvl+0xe8/0x150 [ 634.612629][T21806] should_fail_ex+0x412/0x560 [ 634.612664][T21806] should_failslab+0xa8/0x100 [ 634.612702][T21806] __kmalloc_noprof+0xe8/0x760 [ 634.612734][T21806] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 634.612769][T21806] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 634.612805][T21806] genl_family_rcv_msg_doit+0xd9/0x330 [ 634.612832][T21806] ? __asan_memcpy+0x40/0x70 [ 634.612863][T21806] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 634.612897][T21806] ? apparmor_capable+0x126/0x170 [ 634.612922][T21806] ? bpf_lsm_capable+0x9/0x20 [ 634.612943][T21806] ? security_capable+0x7e/0x2c0 [ 634.612979][T21806] genl_rcv_msg+0x61c/0x7a0 [ 634.613011][T21806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.613035][T21806] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 634.613061][T21806] ? __pfx_ref_tracker_free+0x10/0x10 [ 634.613104][T21806] netlink_rcv_skb+0x232/0x4b0 [ 634.613146][T21806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.613173][T21806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.613222][T21806] ? down_read+0x270/0x2e0 [ 634.613244][T21806] ? genl_rcv+0xd/0x40 [ 634.613270][T21806] genl_rcv+0x28/0x40 [ 634.613292][T21806] netlink_unicast+0x75c/0x8e0 [ 634.613334][T21806] netlink_sendmsg+0x813/0xb40 [ 634.613378][T21806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.613415][T21806] ? aa_sock_msg_perm+0xf1/0x1b0 [ 634.613446][T21806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.613480][T21806] ____sys_sendmsg+0x972/0x9f0 [ 634.613514][T21806] ? __might_fault+0xaf/0x130 [ 634.613549][T21806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.613593][T21806] ? import_iovec+0x73/0xa0 [ 634.613634][T21806] ___sys_sendmsg+0x2a5/0x360 [ 634.613667][T21806] ? __lock_acquire+0x6b5/0x2cf0 [ 634.613696][T21806] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.613772][T21806] ? __fget_files+0x2a/0x420 [ 634.613798][T21806] ? __fget_files+0x3a0/0x420 [ 634.613836][T21806] __x64_sys_sendmsg+0x1bd/0x2a0 [ 634.613874][T21806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.613919][T21806] ? __pfx_ksys_write+0x10/0x10 [ 634.613961][T21806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.613986][T21806] do_syscall_64+0x15f/0xf80 [ 634.614006][T21806] ? trace_irq_disable+0x3b/0x140 [ 634.614039][T21806] ? clear_bhb_loop+0x40/0x90 [ 634.614067][T21806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.614089][T21806] RIP: 0033:0x7f71fd59cdd9 [ 634.614108][T21806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.614132][T21806] RSP: 002b:00007f71fe425028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.614155][T21806] RAX: ffffffffffffffda RBX: 00007f71fd815fa0 RCX: 00007f71fd59cdd9 [ 634.614170][T21806] RDX: 0000000002008840 RSI: 0000200000000080 RDI: 0000000000000003 [ 634.614184][T21806] RBP: 00007f71fe425090 R08: 0000000000000000 R09: 0000000000000000 [ 634.614197][T21806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.614209][T21806] R13: 00007f71fd816038 R14: 00007f71fd815fa0 R15: 00007fff65cc68b8 [ 634.614242][T21806] [ 635.411740][T21835] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3885'. [ 635.694201][T21847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3889'. [ 635.792257][T18447] block nbd6: Receive control failed (result -1) [ 635.883902][T21856] FAULT_INJECTION: forcing a failure. [ 635.883902][T21856] name failslab, interval 1, probability 0, space 0, times 0 [ 635.901790][T21858] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3892'. [ 635.957763][T21856] CPU: 1 UID: 0 PID: 21856 Comm: syz.0.3893 Not tainted syzkaller #0 PREEMPT(full) [ 635.957795][T21856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 635.957808][T21856] Call Trace: [ 635.957816][T21856] [ 635.957826][T21856] dump_stack_lvl+0xe8/0x150 [ 635.957857][T21856] should_fail_ex+0x412/0x560 [ 635.957892][T21856] should_failslab+0xa8/0x100 [ 635.957929][T21856] __kmalloc_noprof+0xe8/0x760 [ 635.957962][T21856] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 635.957996][T21856] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 635.958032][T21856] genl_family_rcv_msg_doit+0xd9/0x330 [ 635.958059][T21856] ? __asan_memcpy+0x40/0x70 [ 635.958090][T21856] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 635.958126][T21856] ? apparmor_capable+0x126/0x170 [ 635.958150][T21856] ? bpf_lsm_capable+0x9/0x20 [ 635.958172][T21856] ? security_capable+0x7e/0x2c0 [ 635.958208][T21856] genl_rcv_msg+0x61c/0x7a0 [ 635.958240][T21856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.958265][T21856] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 635.958291][T21856] ? __pfx_ref_tracker_free+0x10/0x10 [ 635.958335][T21856] netlink_rcv_skb+0x232/0x4b0 [ 635.958369][T21856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.958396][T21856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.958447][T21856] ? down_read+0x270/0x2e0 [ 635.958470][T21856] ? genl_rcv+0xd/0x40 [ 635.958495][T21856] genl_rcv+0x28/0x40 [ 635.958518][T21856] netlink_unicast+0x75c/0x8e0 [ 635.958564][T21856] netlink_sendmsg+0x813/0xb40 [ 635.958609][T21856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.958646][T21856] ? aa_sock_msg_perm+0xf1/0x1b0 [ 635.958685][T21856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.958719][T21856] ____sys_sendmsg+0x972/0x9f0 [ 635.958752][T21856] ? __might_fault+0xaf/0x130 [ 635.958789][T21856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.958833][T21856] ? import_iovec+0x73/0xa0 [ 635.958870][T21856] ___sys_sendmsg+0x2a5/0x360 [ 635.958902][T21856] ? __lock_acquire+0x6b5/0x2cf0 [ 635.958931][T21856] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.959003][T21856] ? __fget_files+0x2a/0x420 [ 635.959029][T21856] ? __fget_files+0x3a0/0x420 [ 635.959069][T21856] __x64_sys_sendmsg+0x1bd/0x2a0 [ 635.959106][T21856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.959150][T21856] ? __pfx_ksys_write+0x10/0x10 [ 635.959192][T21856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.959217][T21856] do_syscall_64+0x15f/0xf80 [ 635.959237][T21856] ? trace_irq_disable+0x3b/0x140 [ 635.959270][T21856] ? clear_bhb_loop+0x40/0x90 [ 635.959298][T21856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.959320][T21856] RIP: 0033:0x7f71fd59cdd9 [ 635.959340][T21856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.959359][T21856] RSP: 002b:00007f71fe425028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.959382][T21856] RAX: ffffffffffffffda RBX: 00007f71fd815fa0 RCX: 00007f71fd59cdd9 [ 635.959397][T21856] RDX: 0000000002008840 RSI: 0000200000000080 RDI: 0000000000000003 [ 635.959411][T21856] RBP: 00007f71fe425090 R08: 0000000000000000 R09: 0000000000000000 [ 635.959425][T21856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.959438][T21856] R13: 00007f71fd816038 R14: 00007f71fd815fa0 R15: 00007fff65cc68b8 [ 635.959474][T21856] [ 636.027141][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3892'. [ 636.162008][T21862] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 636.336862][T21862] syzkaller1: Refused to change device type [ 636.616562][T21879] validate_nla: 122 callbacks suppressed [ 636.616587][T21879] netlink: 'syz.4.3899': attribute type 22 has an invalid length. [ 636.638792][T21879] bond0: option ad_select: unable to set because the bond device is up [ 636.658980][T21879] __nla_validate_parse: 3 callbacks suppressed [ 636.659005][T21879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3899'. [ 636.842994][T21882] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 636.883468][ T5756] team_slave_0: entered promiscuous mode [ 636.891490][ T5756] team_slave_1: entered promiscuous mode [ 636.959499][T21892] netlink: 'syz.4.3903': attribute type 33 has an invalid length. [ 636.971981][ T6853] IPVS: starting estimator thread 0... [ 637.095163][T21901] IPVS: using max 23 ests per chain, 55200 per kthread [ 637.129116][T21889] »»»»»» speed is unknown, defaulting to 1000 [ 637.165964][T21889] lo speed is unknown, defaulting to 1000 [ 637.255698][T21908] FAULT_INJECTION: forcing a failure. [ 637.255698][T21908] name failslab, interval 1, probability 0, space 0, times 0 [ 637.300362][T21908] CPU: 0 UID: 0 PID: 21908 Comm: syz.1.3906 Not tainted syzkaller #0 PREEMPT(full) [ 637.300394][T21908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 637.300407][T21908] Call Trace: [ 637.300416][T21908] [ 637.300425][T21908] dump_stack_lvl+0xe8/0x150 [ 637.300457][T21908] should_fail_ex+0x412/0x560 [ 637.300493][T21908] should_failslab+0xa8/0x100 [ 637.300529][T21908] __kmalloc_noprof+0xe8/0x760 [ 637.300561][T21908] ? ethnl_default_set_doit+0x16a/0xad0 [ 637.300592][T21908] ethnl_default_set_doit+0x16a/0xad0 [ 637.300617][T21908] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 637.300644][T21908] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 637.300680][T21908] genl_family_rcv_msg_doit+0x22a/0x330 [ 637.300707][T21908] ? __asan_memcpy+0x40/0x70 [ 637.300736][T21908] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 637.300774][T21908] ? bpf_lsm_capable+0x9/0x20 [ 637.300796][T21908] ? security_capable+0x7e/0x2c0 [ 637.300831][T21908] genl_rcv_msg+0x61c/0x7a0 [ 637.300863][T21908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 637.300887][T21908] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 637.300911][T21908] ? __pfx_ref_tracker_free+0x10/0x10 [ 637.300954][T21908] netlink_rcv_skb+0x232/0x4b0 [ 637.300988][T21908] ? __pfx_genl_rcv_msg+0x10/0x10 [ 637.301015][T21908] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 637.301075][T21908] ? down_read+0x270/0x2e0 [ 637.301098][T21908] ? genl_rcv+0xd/0x40 [ 637.301124][T21908] genl_rcv+0x28/0x40 [ 637.301146][T21908] netlink_unicast+0x75c/0x8e0 [ 637.301192][T21908] netlink_sendmsg+0x813/0xb40 [ 637.301237][T21908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 637.301275][T21908] ? aa_sock_msg_perm+0xf1/0x1b0 [ 637.301308][T21908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 637.301343][T21908] ____sys_sendmsg+0x972/0x9f0 [ 637.301377][T21908] ? __might_fault+0xaf/0x130 [ 637.301413][T21908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 637.301458][T21908] ? import_iovec+0x73/0xa0 [ 637.301495][T21908] ___sys_sendmsg+0x2a5/0x360 [ 637.301527][T21908] ? __lock_acquire+0x6b5/0x2cf0 [ 637.301557][T21908] ? __pfx____sys_sendmsg+0x10/0x10 [ 637.301630][T21908] ? __fget_files+0x2a/0x420 [ 637.301656][T21908] ? __fget_files+0x3a0/0x420 [ 637.301695][T21908] __x64_sys_sendmsg+0x1bd/0x2a0 [ 637.301731][T21908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 637.301773][T21908] ? __pfx_ksys_write+0x10/0x10 [ 637.301815][T21908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.301839][T21908] do_syscall_64+0x15f/0xf80 [ 637.301859][T21908] ? trace_irq_disable+0x3b/0x140 [ 637.301891][T21908] ? clear_bhb_loop+0x40/0x90 [ 637.301917][T21908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.301938][T21908] RIP: 0033:0x7fc722d9cdd9 [ 637.301958][T21908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.301977][T21908] RSP: 002b:00007fc723c35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.302000][T21908] RAX: ffffffffffffffda RBX: 00007fc723015fa0 RCX: 00007fc722d9cdd9 [ 637.302016][T21908] RDX: 0000000002008840 RSI: 0000200000000080 RDI: 0000000000000003 [ 637.302031][T21908] RBP: 00007fc723c35090 R08: 0000000000000000 R09: 0000000000000000 [ 637.302044][T21908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.302065][T21908] R13: 00007fc723016038 R14: 00007fc723015fa0 R15: 00007ffffe483fb8 [ 637.302101][T21908] [ 637.702111][T21910] netlink: 'syz.0.3907': attribute type 6 has an invalid length. [ 637.729054][T21910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3907'. [ 637.785582][T21905] »»»»»» speed is unknown, defaulting to 1000 [ 637.849923][T21889] hsr0 speed is unknown, defaulting to 1000 [ 637.861653][T21905] lo speed is unknown, defaulting to 1000 [ 637.955153][T21919] netlink: 758 bytes leftover after parsing attributes in process `syz.1.3909'. [ 638.070372][T21910] »»»»»» speed is unknown, defaulting to 1000 [ 638.343139][T21926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3911'. [ 638.378696][T21926] bridge4: entered promiscuous mode [ 638.384279][T21926] bridge4: entered allmulticast mode [ 638.404876][T21910] lo speed is unknown, defaulting to 1000 [ 638.507955][T21940] veth1_to_hsr: entered allmulticast mode [ 638.709779][T21910] hsr0 speed is unknown, defaulting to 1000 [ 638.740805][T21905] hsr0 speed is unknown, defaulting to 1000 [ 639.659590][T21949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3916'. [ 639.919942][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3918'. [ 639.970734][T21960] FAULT_INJECTION: forcing a failure. [ 639.970734][T21960] name failslab, interval 1, probability 0, space 0, times 0 [ 640.029233][T21960] CPU: 0 UID: 0 PID: 21960 Comm: syz.1.3919 Not tainted syzkaller #0 PREEMPT(full) [ 640.029265][T21960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 640.029286][T21960] Call Trace: [ 640.029295][T21960] [ 640.029305][T21960] dump_stack_lvl+0xe8/0x150 [ 640.029340][T21960] should_fail_ex+0x412/0x560 [ 640.029376][T21960] should_failslab+0xa8/0x100 [ 640.029413][T21960] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 640.029449][T21960] ? ethnl_default_set_doit+0x59d/0xad0 [ 640.029472][T21960] ? __kmalloc_noprof+0x37d/0x760 [ 640.029507][T21960] kmemdup_noprof+0x2b/0x70 [ 640.029531][T21960] ethnl_default_set_doit+0x59d/0xad0 [ 640.029569][T21960] genl_family_rcv_msg_doit+0x22a/0x330 [ 640.029596][T21960] ? __asan_memcpy+0x40/0x70 [ 640.029628][T21960] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 640.029670][T21960] ? bpf_lsm_capable+0x9/0x20 [ 640.029692][T21960] ? security_capable+0x7e/0x2c0 [ 640.029727][T21960] genl_rcv_msg+0x61c/0x7a0 [ 640.029761][T21960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 640.029785][T21960] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 640.029811][T21960] ? __pfx_ref_tracker_free+0x10/0x10 [ 640.029855][T21960] netlink_rcv_skb+0x232/0x4b0 [ 640.029889][T21960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 640.029916][T21960] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 640.029968][T21960] ? down_read+0x270/0x2e0 [ 640.029989][T21960] ? genl_rcv+0xd/0x40 [ 640.030015][T21960] genl_rcv+0x28/0x40 [ 640.030037][T21960] netlink_unicast+0x75c/0x8e0 [ 640.030080][T21960] netlink_sendmsg+0x813/0xb40 [ 640.030124][T21960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.030161][T21960] ? aa_sock_msg_perm+0xf1/0x1b0 [ 640.030193][T21960] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 640.030226][T21960] ____sys_sendmsg+0x972/0x9f0 [ 640.030260][T21960] ? __might_fault+0xaf/0x130 [ 640.030302][T21960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.030347][T21960] ? import_iovec+0x73/0xa0 [ 640.030383][T21960] ___sys_sendmsg+0x2a5/0x360 [ 640.030413][T21960] ? __lock_acquire+0x6b5/0x2cf0 [ 640.030440][T21960] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.030517][T21960] ? __fget_files+0x2a/0x420 [ 640.030543][T21960] ? __fget_files+0x3a0/0x420 [ 640.030581][T21960] __x64_sys_sendmsg+0x1bd/0x2a0 [ 640.030618][T21960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 640.030664][T21960] ? __pfx_ksys_write+0x10/0x10 [ 640.030708][T21960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.030733][T21960] do_syscall_64+0x15f/0xf80 [ 640.030753][T21960] ? trace_irq_disable+0x3b/0x140 [ 640.030787][T21960] ? clear_bhb_loop+0x40/0x90 [ 640.030815][T21960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.030836][T21960] RIP: 0033:0x7fc722d9cdd9 [ 640.030856][T21960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.030874][T21960] RSP: 002b:00007fc723c35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.030897][T21960] RAX: ffffffffffffffda RBX: 00007fc723015fa0 RCX: 00007fc722d9cdd9 [ 640.030912][T21960] RDX: 0000000002008840 RSI: 0000200000000080 RDI: 0000000000000003 [ 640.030927][T21960] RBP: 00007fc723c35090 R08: 0000000000000000 R09: 0000000000000000 [ 640.030940][T21960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.030954][T21960] R13: 00007fc723016038 R14: 00007fc723015fa0 R15: 00007ffffe483fb8 [ 640.030990][T21960] [ 640.375267][T21963] IPVS: Error connecting to the multicast addr [ 640.657901][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3922'. [ 641.190480][T21972] veth1_to_hsr: entered allmulticast mode [ 641.336646][T21982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3927'. [ 641.410580][T21982] netlink: 'syz.1.3927': attribute type 33 has an invalid length. [ 641.608076][T21993] FAULT_INJECTION: forcing a failure. [ 641.608076][T21993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.628726][T21993] CPU: 1 UID: 0 PID: 21993 Comm: syz.1.3931 Not tainted syzkaller #0 PREEMPT(full) [ 641.628757][T21993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.628769][T21993] Call Trace: [ 641.628778][T21993] [ 641.628787][T21993] dump_stack_lvl+0xe8/0x150 [ 641.628818][T21993] should_fail_ex+0x412/0x560 [ 641.628852][T21993] _copy_to_user+0x31/0xb0 [ 641.628887][T21993] simple_read_from_buffer+0xe1/0x170 [ 641.628920][T21993] proc_fail_nth_read+0x1bb/0x230 [ 641.628950][T21993] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 641.628981][T21993] ? rw_verify_area+0x2a6/0x4d0 [ 641.629010][T21993] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 641.629038][T21993] vfs_read+0x20c/0xa70 [ 641.629074][T21993] ? __pfx___mutex_lock+0x10/0x10 [ 641.629098][T21993] ? __pfx_vfs_read+0x10/0x10 [ 641.629129][T21993] ? __fget_files+0x2a/0x420 [ 641.629160][T21993] ? __fget_files+0x3a0/0x420 [ 641.629185][T21993] ? __fget_files+0x2a/0x420 [ 641.629221][T21993] ksys_read+0x150/0x270 [ 641.629255][T21993] ? __pfx_ksys_read+0x10/0x10 [ 641.629296][T21993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.629320][T21993] do_syscall_64+0x15f/0xf80 [ 641.629339][T21993] ? trace_irq_disable+0x3b/0x140 [ 641.629373][T21993] ? clear_bhb_loop+0x40/0x90 [ 641.629401][T21993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.629422][T21993] RIP: 0033:0x7fc722d5d60e [ 641.629442][T21993] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 641.629459][T21993] RSP: 002b:00007fc723c34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 641.629482][T21993] RAX: ffffffffffffffda RBX: 00007fc723c356c0 RCX: 00007fc722d5d60e [ 641.629498][T21993] RDX: 000000000000000f RSI: 00007fc723c350a0 RDI: 0000000000000004 [ 641.629511][T21993] RBP: 00007fc723c35090 R08: 0000000000000000 R09: 0000000000000000 [ 641.629523][T21993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.629535][T21993] R13: 00007fc723016038 R14: 00007fc723015fa0 R15: 00007ffffe483fb8 [ 641.629571][T21993] [ 641.633531][T21987] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3929'. [ 641.947252][T22000] Bluetooth: MGMT ver 1.23 [ 642.123802][T22007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3935'. [ 642.936596][T22031] netlink: 'syz.0.3941': attribute type 1 has an invalid length. [ 643.206792][T22044] netlink: 'syz.1.3944': attribute type 13 has an invalid length. [ 643.241058][T22044] netlink: 'syz.1.3944': attribute type 17 has an invalid length. [ 643.440148][T22058] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3947'. [ 643.698853][T22037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.713333][T22037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.906721][T22044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.922997][T22044] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.952476][T22044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.994970][ T4945] Bluetooth: hci2: command 0x0401 tx timeout [ 643.999466][T18447] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 644.169979][T22044] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.177376][T22044] bridge0: port 1(bridge_slave_0) entered listening state [ 644.199812][T22044] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.207045][T22044] bridge0: port 2(bridge_slave_1) entered listening state [ 644.233746][T22044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.248162][T22044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.261400][T22044] veth1_to_hsr: left allmulticast mode [ 644.277207][T22044] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 644.355314][T22066] ip6gretap1: entered promiscuous mode [ 644.398155][ T9648] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.401842][T22085] netlink: 'syz.0.3950': attribute type 1 has an invalid length. [ 644.440039][ T9648] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.495625][ T9648] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.518919][ T9648] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.837351][T22098] syzkaller0: entered promiscuous mode [ 644.867088][T22098] syzkaller0: entered allmulticast mode [ 644.917318][T22098] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:16 [ 644.944846][T22108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3957'. [ 644.956951][T22098] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:19999 [ 645.941037][T22166] vlan4: entered allmulticast mode [ 645.953795][T22166] bridge_slave_0: entered allmulticast mode [ 645.968332][T22166] bridge0: port 1(vlan4) entered blocking state [ 645.982115][T22166] bridge0: port 1(vlan4) entered disabled state [ 646.005997][T22166] vlan4: entered promiscuous mode [ 646.019195][T22166] bridge_slave_0: entered promiscuous mode [ 646.380541][T22174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3974'. [ 646.567183][T22188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3977'. [ 646.633261][T22174] bond2: option ad_actor_sys_prio: invalid value (0) [ 646.666126][T22174] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 646.728485][T22174] bond2 (unregistering): Released all slaves [ 646.841155][T22196] netlink: 'syz.4.3978': attribute type 1 has an invalid length. [ 646.899141][T22188] vlan0: entered promiscuous mode [ 646.954921][T18447] Bluetooth: hci1: command 0x0406 tx timeout [ 647.006399][T22197] bond1: (slave lo): Releasing backup interface [ 647.020966][T22197] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 647.103702][T22197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 647.159871][T22203] smc: net device lo applied user defined pnetid SYZ2 [ 647.420883][T22216] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3985'. [ 647.471005][T22216] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3985'. [ 647.676012][T22222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3987'. [ 647.933263][T17580] IPVS: starting estimator thread 0... [ 648.034947][T22246] IPVS: using max 24 ests per chain, 57600 per kthread [ 648.131341][T22256] netlink: 'syz.2.3997': attribute type 1 has an invalid length. [ 648.148355][T22256] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3997'. [ 648.183971][T22258] syzkaller0: entered promiscuous mode [ 648.190956][T22258] syzkaller0: entered allmulticast mode [ 648.203866][T22214] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 648.251825][T15604] unregister_netdevice: waiting for bond7 to become free. Usage count = 2 [ 648.338719][T22263] netlink: 1732 bytes leftover after parsing attributes in process `syz.1.3998'. [ 648.388830][T22269] mac80211_hwsim hwsim56 wlan0: entered promiscuous mode [ 649.996317][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!