last executing test programs: 11.966668694s ago: executing program 2 (id=5782): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000000c0)=0xa23c, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09", 0x38}], 0x1}}], 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000000c0)={0x2, 0x100}) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000000)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000180)={0x8, &(0x7f0000000240)=[{0x0, 0x0, 0x0, @multicast}, {}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}]}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={0x28, r7, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x84) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00d3ffff12a90e6bbe0000000000000006001000000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300004000000000000000000a000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b50200000000000085000000830000004ce300000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x1001, &(0x7f0000002e80)=""/4097, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 11.621480547s ago: executing program 2 (id=5787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000400000000001ff0200000000000000000000000000014f194e20001890"], 0x52) 11.207237599s ago: executing program 2 (id=5791): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x0, @val=@netfilter={0x3, 0x0, 0x6d}}, 0x20) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = socket(0x1e, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500"}) 6.53542542s ago: executing program 3 (id=5841): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendmmsg$inet6(r4, &(0x7f0000001ac0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2e1, @private1, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)="f852", 0x2}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000480)="bc", 0x1}], 0x1}}], 0x2, 0x8000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000380), 0x8) unshare(0x2a020400) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1c000}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5.162626773s ago: executing program 3 (id=5858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x20}]}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0xe0002006}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async) close(0xffffffffffffffff) (async, rerun: 64) close(0x4) (async, rerun: 64) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x6}, 0xc) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9147, 0x38}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x2c}}, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r10, 0x215eb000) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r9, 0xc0096616, 0x0) (async) socket(0x14, 0x2, 0x4) (async, rerun: 64) listen(r8, 0x0) (async, rerun: 64) close(0x4) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) (async) unshare(0x22020400) pread64(0xffffffffffffffff, 0x0, 0x0, 0xfffd) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 5.020639265s ago: executing program 3 (id=5859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="0000000000ff8100", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) 4.887344725s ago: executing program 3 (id=5862): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @binary="08ac0f00"}, @typed={0x4, 0x19}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0xc040) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="05804ab38284c7d5a5b66406d704", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000006000800feff0000050017000000000005001a000000000006000a00ffff00000500190004000000050007000700000005001b00ff00000005001f0001000000060008"], 0x6c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 3.851488739s ago: executing program 3 (id=5865): syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000005000000000000000000001d711872000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd261cace265537000fddbdf25140000000c000600010000000100", @ANYRES32, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4044040}, 0x4040) r2 = socket(0x400000000010, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xc, 0xd}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', r3, 0x2f, 0x2, 0xf, 0x4, 0x21, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x40, 0x1, 0x9}}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0xfffffea7, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="139ae229", @ANYRES16=r7, @ANYBLOB="010700000000feffffff6700000000000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000750000000800c300711300000800c400000000000000c40000000000"], 0x38}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000040600000008000300", @ANYRES16=r0, @ANYBLOB="d2aed991ec8d8b9be97f3a13085ecbd0ca56ac9a52cc6cb51ca5a78f49c0e9d9be8660f2a72fe4f95e2c68f8819b3a52cf7bc838a0e23c6847073d440ee950a50786a5d9a02b17cfc4922cb84ffb331b33656b171ec53de958eedaa683c86174"], 0x20}}, 0x4040) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRES16=r1, @ANYBLOB="a6e6326cbfaa5d70555c2b49f003b5021258071116189a213497b513971e628dffdbe349e3d75be53500629ca1a767b526dc40b423eebae9e704aa552d402459da240bc04f5e7f6747f8bdbd"], 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000440), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x840) write$nci(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="3fcecae4e4a6da0e31b99ff0918fdb34778a2e05e731b1783e6f19d374d3eda24bf4dd2ff8d89f0692a1cb40a3843029b1ee713cf44b05bca521a0e5b304658db41a8d238a0133e6d812bcf04141280e15711c99716435774ed4ba74ac4b927521c92af8648bcb9db06da5cac51a69719f4f0bbe7342fdcf265bd42f0a97a6aaa057a8f1ee05cef3a372299444842fb9f281febfc7cc944879fe826fc6b88514610a5b08c31bde8a780b9863", @ANYRESDEC=r6, @ANYRESDEC=r1, @ANYBLOB="8c21f998"], 0x10b9) r15 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r15, 0x29, 0x20, &(0x7f0000000300)={@loopback={0xffffffffffffc0fe, 0x7ffffffff000}, 0x800, 0x0, 0x2, 0x0, 0x2000, 0xffff}, 0x20) r16 = socket$pppl2tp(0x18, 0x1, 0x1) r17 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r16, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r17, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) 3.850975717s ago: executing program 1 (id=5866): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000040)=']\x00', 0x200000, &(0x7f0000000080)={@align=0x6, {0xe, 0x592, 0x5, 0x1}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x49}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x40c, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'vcan0\x00', 0x200}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@tracing={r4, 0xfffffffffffffff7}}, 0x20) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000000740)=@qipcrtr, 0x80, &(0x7f0000003980)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/100, 0x64}, {&(0x7f0000001840)=""/233, 0xe9}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/30, 0x1e}], 0x6, &(0x7f0000003a00)=""/58, 0x3a}, 0x3ff}], 0x1, 0x40000062, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000003a80)={'veth1_to_team\x00', 0x5}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000003ac0)=0x6, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000003bc0)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003b80)={&(0x7f0000003b40)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x240040d0) sendmsg$kcm(r1, &(0x7f0000005e80)={&(0x7f0000003c00)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0xb26, @remote, 0x6}}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003c80)="ecad7503d823", 0x6}], 0x1, &(0x7f0000003d00)=[{0x1010, 0x103, 0x2, "bc362ec44ba5fa16555bfaf46122352b5d62860fe0d39fc49505a96cfbfb08df924bbfd702c634a051cff236d58ab239f7ac8acd9fbd95f46ea785a46efd7bbc3563fdbd4a34d45e9136d13b4677efb91bfafd3dbd9a3af81b6e358c1f2e916aab65bbc73628ce02eb0d031cea8d2a1925989295edbef43413c29612661b48f4123d88179f4c0ba396d2cf14fd785a1c750497a6ac143afe8ea941c786590cc4e036afe5f3e36b356330142fdf50d70b62cd61cf0d82c91cbb45f0598cd0e190fd55dcf06efa6142895a557b6454b63af21d1b4f8a6931def5524406660be626b3a043726561eae74a269f3e3e588045d036ba48f970bcad63b5596f1d7e5ce251e9565962da403814facd56159105b68665d85247aaf4368a70a8d07406b51112eed1b35df18d0c61c348324889e0b0e1c50b620ae7d58fef4e4c20d7bdb965f0a73180de988760b8fe92ca806c80da35f7bd995b252343278e39bdddfc733c25484c17689aafa24ebab7cf8c7bf0b5ddde711988b96b1378c23f2ba4f1a22ffd8ac1937ed119df45b1184c2084acfba74c746a2dc145e86c53eacfb5c8aa4c2947b8141a4a2feafe833a2fd9943ae147369a859d33415cf218bc506b7fb4c42ed0d72b679ecbec93cc62cff8c788ae3fa0abaa8814e47d7d40d64b4be78d6b51f78a53ae06c784dec924be78443fd130e90b5a5ddb141b8010c9235b243e6919bf77932ce14624c904981424c556f69143f0db66cbbb7e9c7a6d3ff123f5ae025a0b2822463f5de6fc91121929673c3b40f141f82529c25f7bf3f29b7de7d4d98c7ef856cbe756169cf0520d8533bd3d148d484de68c4ac4a410a6da181a3d1163bb093e563b799e21839be01327d09fac572ceb085e45a7f726b2cb955a83019db573dfbd59bde26bf815b6572a99db8757605113c68887ca5586499b41e25ea50abf9f0220d71f3d8f3046a482c646278475af54424a583410595d6bffe64603fdd1ad6c352c69f634a7de9698da5dc065c5ea5bd3deae2adfc9ea41bb9aebc7b74af694b87b4f4d55d3c3a5030270e99e3668e904552d1f91ab1784092008e0cefe3dc810774b943fa874332fa1367b8f8516f6fd026ab95d25e50556534c6e335fd5c70e44d8f1f6d193a85de7cb1eaa9591542435af2b02f81d00501add7fb357a2e30d74e9feb9324a1cc3b70a93d4786812794b0c700c0dd1696884a6946def238e1fa04592fa2638e0cea1a3e9b603b3338dc6ea46f2f7a1952439bf705fb41e7815bf08ef296e3bab453b490dffbf5bb54c490b2f8bd0d26fbc1b410c0735f8d8747e861a95d6f3ca7677d91c3f66e4c345486559fb6c2cb9e0a70e923fed0f5ef6910410039cd44d20dcc5b81c868a197faeefa922d99880c596641e53e397033b188fc776ff4d973c63e75f32e50c3c7d25cf3a1d0a9c6ef12d4a29fdb88097d402d9674e6a4051665056a2656c317e25038f08e5ab2829f85d710da6f624e1e291cecc8956ec6db495f3f718bc74ba448b85ae3c41b82113afdf5572599b59d802ffd4e97b3d5dd28003e8d91132b7fe8d84b22214568985dc7782270159af37424fa48430d32760f9c7976fd4bbdf0cbb1bb2d2ec4a2d8ed1fbae12d949f39173c37b590c2108d1607ab0b258da483b743bfce1c5eb237f1ec8c705558a420b62e6fc829955052cfa2fce55551c8522392397c06fee0e0887da95267ebc203ce369e8f4db7f548a805465be2af56ea49e882ac3cf312fd122797a2cfb43e4d76219e7bed830c31aa11dbc7fa5f75d8cc2e2e44dc09b8f799b08f11fd1e82c139d625e6a63af1e343855ce9eac0dc3e22c36e9c1acd53f38ad54547413d867ab8ef9c4afc341c004551ed6d39152f7bf90bcad957397a8079f5dab420e502d3594d9db82ffe6bb2484987d8cda43a0af0622907f00ff467dda61d2e616d9432f4a22c45b9748862abb5707083df757b1a1fcacc969362a7aad67fbf6459bc923e4ac11836694a7155aefa644a42d6d28419fc574770d7122afdf2e08553be7bc2472f42e2ce1afdb8ab29c406e68038d17d2f20a5302be8ad38e9dbe79e33b2668cb1dbef950bdafab719198d9b149e6262a5ce09571a48d49f0b31adda30a2dad8eb298fe7b776b1a30783a87b18f2de391a5b89147ecde5bae25f2787d6bdc13dc77bb418a110653b8475803942e7478f65eca971d90c642ca94bbae0b0454e63c3a8696f9f61bfd6570dafe2d58159a381b9d48430756697472ba6a958d104e5732ade30ad40befff8f914e4ace5204cef7e61e6ed8e86ead96360d7217a3886e71fbc0526697d47dc63e1895ff46be53076f83c140e49bc9fefd2c1ed9e9806e8502b5d7eabf6da580b76affe055a992e9523c87a857f4b061ffdffe067027158940b1d4dff22697b93f3a0c397541d6950985b5678b520dd99e9a1d9f46dcbb5722dd7a63b7526afe717958f0f7421a9d0a0827df8fab59836ae2cd42bda9a28469019e430508faa20bf425de7e68a970778422fb9533e236cec4cabcf214df133e0e9774e70e29047a0efda0a5ffaa9de7aa4f9299e1e8dec51423d112de60ea3a4aeba7101aa889bfb11cb0a2dd10ff0ab8c6cb199577916c1de204ba2f82f7f3cd0c5da87425f417b1c7214ff233a5f24872847014e11e61797b5e6bb562395a953da2103e3c4c4243d05443d972301dd1ff8a14eb28f1da177f408e408303cbb144c59502729c8f5023de6aa52d03f99a5ddf891d19e78e089734752f8415e839f7ab2cef723c3c4280ad0c92b8958940f851b953f97dcf197d3b849705322d510bdf22e259151796f1cf40438985c15907f4111f4d60430d437cd5a3539e049eb03c397f519d289750f5845c6f16fb7672c1f2e43602f847dbe103f15dd89c5933fd8548d022a436c857d4c406e96641cc214775abe87d5e4a2408701d69963868ff3d0a7281b8775e0af83d3b4080abef78f101cec26662bb4a5d318fa9fe852f31e54a0eb2191dad10e74bd43a883bbaebb95699186c941da4342c6aefe77d5a79d7285c3921f6a7f0d661132dd0782503e5dad2f8fa4e47253b8014f8c717c81b877a5c02f0076f95dbc65c204b0eb99b2f0a742c0624de342cc2d8dbe7036e69ce89acaa36d9d6ea3944266b335711e019da85a849af5923367b04b355dca79026361a38956518c4fad79e75b5ee92ef7bece15741356fdb4faec88b3a9843c762b69f04cb43ed9825688ca6da8b470731e9e1507d269dc01d99e6b0c8cf5564e7899d753c04805023da86675d52c0bf5092226ebdc2d50f34901c29c7e0a58373b1731c61d54f4166230e2771bd17f7aa978edd6485ba1bb49bc1a4421eeff481eba4dab68b413ab306a1062e2180c564c880dc76e3da9f24c65e124820b0a2f9e35a14266a35c2a4dfc95299360ff45abf07224d45c7bacf374c4d77bb20361e8d6392aa17feea024c801eb18de2e1b0ff0cc920d20b29c45dbd50ee576c610f55fe8bddce452e276068ca245a88de7eafa70e23b238419f9b7d810070f9221e5626c8eb1a039dfda9ab21845566bc7c4e28f45015a6a6057dda6927fab428f2ed8970a86513da807db2c2269877cde47b9e2e0d637763c8aa7d75dfd23673f7a4261d93fed3aa53d62f6ff1c1210eb8e1076d8eba3f05e7280cb3b96932e3a2a9a73904af911652bd15dd82cfd5b6a3c112b72aa55124e5bac112c622fa5176fb35b675b47b3e7823b2bc1ab4e0e1d8b7ed9c21926d452b11df3d5f621e050d34eb24133f3bae642bafc5541441f717a5cbd872718f3d33c148608b01364dffcd41bf9aab4fc0f70b78cdf966341137ed4fcaf566615b1b91f57fa3e0bfc82bbeb125e6cde3f2759897468ba94325b8a96d6b20fb737a5a914f4f487fd35f07dbe8c904cba30ea3b2c84efa2674defdf14f201633403f1e11a273394c70ee36d95118fcbfaa816c619e2678e095e332661a90958699409d585899c5940245579126d508e34db1a8ee15b0ccf1b2504d7c4c70cced210a265789854b99514745d2199dd3a67f39dc869ec2a24b59adcf8301e96f748ae0c41b495075c696376c43c5defa183d778c71609b9e0d292c3b574cb3dc137499d85ed47a8c6f19c86b762c2aa0a2e3901fb2783c9020216e9830a3a8e6e84f703e805476a6f998b5a98bc12dadc1b2f56042e9ba1ea2f9e0e58daaa54554c7035bb8afbaece85bb5fcdbc7055537a01562bd9824a023a52491ab9b2809c06c08b9d4abe0663c4b3c0813bd94d655be175924e4e98658732e1f0efd360fcc867346f00040091a5c926b6183f938141e428b9e3053011c2e20ee42a271eb07e96ede2ab18d7ee542a53931f2f85edbb4c0a005237cf44d7381f4ff9f4a874025ec4c25701521c614d1a77444388bd08a1fb3d2790ddab255ce966ec769b2794d84b7b6f0c5bc56744b9b58f4aa4e824e0a5d76dd6fe8ec937bb30b72d341727b062109e7406dd58120d06175e0b1b0bdc86f07cec53cad7ed2a973e4bbe5e0a7cab92c6632a6c203c4184069a75778fea12d535dd6467baf3c76bc42ecd2ffe597af2154afdc18f36fdc1b432059c1933f270d75c96fccca336cea77e997c37ccc2641faf886be29b3597cd0ae68456fd133699900f4a83463e1d4eb30056593f1d9a2846feabca572fc60ce98e25e8c7d7ebfbdfaa73e2c937fbb2b79609a6f3ad4801dd333c0e45adf9f68893ecefa5e0775713d36c10bfa4ea69d12f3d2550f52f0556bfbc8ad7a5cddc8a4152b4fc89f15746a3b96a411c3f6955b6ccb10a8305545b35a4aa08ba7e786c3295cfab9e555dd68a5523aa7b1b5e88930e8c3ec63b610a304eb31ea0dd9e07ab68e2323f437bab4322025cf9d1dd242cdd3bae420f88d1a5f8ef5c4a4c310b7626419835157ef087eff70d2471a29d81ce158c3bd77a3d39cdcb31c7f3c9a3d041077720910bdf3bd06452fc728ce2033ce5a6b9efb880139899436aa9915178b7b539c7e9f7d8b18a82dc1e3fc24b797b7b5ad5188e03ff98d5eddeea30199f1b75af333c25ca212e49d8b00a70613eca962e8362d7aaae202f3296e47c081b000afd1f76da5bdf7d9e476067ac8724aabd7b333b355d77982fd140e0c3a7368b1e9af3337d9dcc46ff6cc895914d8709b9e96b9a0557d859829107247f0cd6f8b0e9b4760a846cf886b8fce495872ca13cbd8e497e25b4ee7f873d8a3ad4764e5a863f2873304f1786c26e9ac2368bbdc7b7049654ddc7a46f2cd43e2565d1358f26db69a0667ccb45c8b326b2dc331afe8d13a421dac5ef24a0c2b3cc4785b6becb63a9be78cbf30586627f10fdbaf7f16997bf0502bc83f2716903c0980d0f196ca736cc1c5afb85b3ea98f54faf732450dc8e5d1234d1b6c46024da47c2f9659e301af5e26bba9c9d49a318fd498d74f0a15887239bb065379a644c75fd480e989f5abf7ea76ad366014e63058442ccdd512f2652b7c218c3df2d62930b7b97c0a1ccdb44a80ade5dfe8f93c3fd9fba3c351b8a6c4996ae2f22d57f1f636fd191c55769afdbcb12ba8cb9dc05167dfc5e31c6434dc06b4e34a2f37d39740c572d34e55d5191c59e2461976b6a119baf4fb5448f32fcd9ff2c804b25039930aa41b85becf89721f58b5c4d83dc329230023c3fb4d61b26d400472b92f561f2b68ce2718abc2fe9899fbc114c5f5601e57506c4a3eec78f11b6540086cc66ad3a30bd036a4834bee0ec533637fd6548ad5b6c300862053a47c0001ba47b65e11b69765b7ed5023beeeb4602b"}, {0x80, 0x11, 0x5c, "c54811346e93e4104a581ad37b304001351ba27564fa2e2feb87857ead31730ae3e1f929fdbbd398c84b74907d7dd4aae3703a178dc1e86c67cd92fc0dadd7de8bd483ea932ef633efd685ae5bb9a836f5e299336bdea099e54f4ad0207dffafdb99f08c1f705116b0bc50c1222c"}, {0x40, 0x3a, 0x7ff, "4f9b1a6df05354ea1e53036928322d24b79ec36b7b22188bc1d532a15dbbdb3c54219b30cafcb5a6ac4e37be47"}, {0x10, 0x101}, {0x1010, 0x1, 0x67faccd6, "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"}, {0x60, 0x6, 0x79, "e54301a712bc742aff83e62678eb86154e0c99f3882862e698d265606b7c9b74ed63915cf22a89fafb6ae1dc9cf883bd46c37f602f001ad994942f19368d438121d547dbf46a5032053e38"}], 0x2150}, 0x20000004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000005fc0)={&(0x7f0000005ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005f80)={&(0x7f0000005f40)={0x40, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x110}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004090}, 0x4000001) sendmsg$nl_route_sched(r1, &(0x7f0000006100)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000060c0)={&(0x7f0000006040)=@deltfilter={0x78, 0x2d, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {0xffe0, 0x3}, {0x4, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x2}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}, @filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff1, 0xffe0}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x1000}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040}, 0x240480c0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000006140)={0x0, 0x2e, "c767890d36826b6604245ef6efca59eae4b81f617d64f04e54e8a3974ac7582951fe1912ebcea64ea9f23e65d14e"}, &(0x7f0000006180)=0x36) socket$igmp6(0xa, 0x3, 0x2) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000061c0)={0xb, 0x3, 0x7c02, 0x6}, 0x10) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000006200)=0x7ff) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000006280), r0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000006480)={&(0x7f0000006240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006440)={&(0x7f00000062c0)={0x148, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0xfffffc00}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x40}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xf4}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0xfffffff8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x2}}]}, 0x148}, 0x1, 0x0, 0x0, 0x40}, 0x4040000) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f00000065c0)={0x1, 0x4, 0xfd, &(0x7f00000064c0)=""/253}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000006880)=@base={0x8, 0x41a, 0x6, 0x589, 0x20020, r1, 0xfffffff7, '\x00', 0x0, r1, 0x1, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000006900)={&(0x7f0000006600)="07dd962e5d9e533a273d30f2198ac9a69155837151ea11aaffa918e0ddd7e2d727ea86ad74abc06be72541f86073bbc1ed30927e8f66a311155ae36312c8210ffe5a3cb75d5fec452a3db4735dc35d4ab157af053bd3fe62a84abc01806126d18089a34c5ba518889dc357d158ecc6adb0ed6a079dd7cdd95ddc7b19db3fb5ccbfa1a871cf9f5f44d26363f8a968ff1523b85d1fd11d229d4f7a09b3222a8f2de7483de6a1df0ef03accbfba86de2be4d030b838fdae528acc51d13277b07d10d1b535480db9867e61275aa1c6ca4b42dd97e9", &(0x7f0000006700)=""/36, &(0x7f0000006740)="04cdb7c4bf9acfc259d7a4335c0f7e34769903f79eb85a8c27bc8e206b8a7e899a2df9f883dd3b86367103d7971d607c10e9c4b251398712b807b15c1c0cf6b9c09ff144630a42b5282732c77545cf88b4715bb3d1479f18fd8bd3114c8a4a8751aa35bac58921d2243b6125b6c4937c972417fc2f18cef5e0d5095f9cac0d794a6deec40f9674b2fb9e76e84ca0ff0efc0e189066e57449035e3d10e5fb4d8878f7b03cd16a5a1fc889c78cf8941310", &(0x7f0000006800)="a48faaf00dc0b24f356d8f5277b1b39336e82d8095c1e75ac44a8c5da9d716008fa8b80d195c57443d3da59eb4fea57d6b78782307424b71b1f74642af4465970ce1db59142db282ac185d2179cfc38c1e7087ff7b", 0x2, r8, 0x4}, 0x38) 3.780307259s ago: executing program 1 (id=5867): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x72bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x51}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000000) 3.096244733s ago: executing program 0 (id=5873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x3, 0x0, &(0x7f0000000100)=0xfffffffffffffd7d) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f886411", 0x13}, {&(0x7f0000000080)='\x00\x00\x00Xa', 0x5}, {&(0x7f0000000740)="cc534a", 0x3}], 0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r3) vmsplice(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)="e6a2f8fc152c53bfd1fb7a0aa677263ab73713db73d8faeb1094e93cab7717d219e7c880276a5052632ff1c3", 0x2c}, {&(0x7f0000000300)="2335a5c4bb648bdeb56dbb3df549554ba65f035a2a8c65a04fc2751542ed2a9c1ab0950aa54cbbd0128255e7b082262b800c4ec75cdfe5365aeb3659c173f251f9ce", 0x42}, {&(0x7f0000000380)="dee1b479f86ea13047e9f2617b50f7a5d2ec33a375dd7e04612645eefc7bfecd38076101118a9975b85fb38410c8d6d2b335a2184f5888537deb3c92893acea42decb04c988b0eed2494cc914edd347d", 0x50}, {&(0x7f0000000400)='?', 0x1}], 0x4, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000004c0)='cpuset.effective_cpus\x00', 0x0, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) openat$cgroup_int(r10, &(0x7f0000000500)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x255fdbff, {0x0, 0x0, 0x0, r13, {}, {0x8, 0xfff1}, {0x4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20081054}, 0x24008088) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:audisp_exec_t:s0\x00'}]}, 0x44}}, 0x20048085) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.130974522s ago: executing program 4 (id=5876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r7, &(0x7f0000000000), 0xfdef) recvmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4bf40}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r12, &(0x7f0000000300)={0x2, 0x200, @remote}, 0x10) ioctl$int_in(r12, 0x5421, &(0x7f0000000000)=0x1) splice(r12, 0x0, r11, 0x0, 0x8a, 0xa) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) 1.18421405s ago: executing program 4 (id=5877): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r2 = socket(0x8, 0x3, 0x3) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x8001000d, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0, 0xcc4}, &(0x7f00000001c0)=0x8) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a92a4a298c54e01f93d31cb8d14142abd7000fbdbdf250a000000000057"], 0x14}}, 0x807) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r5], 0x5c}}, 0x4084) 990.257949ms ago: executing program 4 (id=5878): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r4, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x5, 0x0, 0x5, 0x2, 0x0, 0x0, 0x10000, 0xffffffff}}) bind$alg(r7, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0xfff1}, {0x2, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x7, 0x8, 0x8, 0x0, 0xe09, 0x0, 0x9, 0x717a, 0x2, 0xd, 0x8, 0x5, 0x10a1, 0x80000001, 0x200, 0x3, 0xeeb, 0x81, 0xc, 0xfffff7ee, 0xffffffff, 0xfff, 0x1, 0x99bd, 0xc, 0x10000, 0x9, 0xfc57c70, 0x3ff, 0x8, 0x6, 0xc, 0xa00, 0x1b, 0x8e, 0x4, 0x4, 0x9, 0x7, 0x6, 0xa160, 0xbee, 0x4, 0x100, 0xc2, 0x800, 0x3b1, 0x1, 0x100, 0x1000, 0x5, 0x9, 0xec4, 0x8000, 0x0, 0xedf, 0x5, 0xd, 0x2, 0x97, 0x7fffffff, 0x7, 0xd85, 0x81, 0x3, 0x6, 0x101, 0x6, 0x4, 0xfffffc00, 0x7, 0x9, 0x6, 0x4, 0x7c, 0x3, 0xd84e, 0x0, 0x1, 0x8, 0x7, 0xffffffff, 0xf8, 0x4, 0x5, 0x401, 0x440, 0xb3, 0x7fff, 0x400, 0x6, 0x7ff, 0x6, 0x3, 0x1, 0x5, 0x3, 0x9, 0x2, 0xffffffff, 0x7, 0x0, 0x375f, 0x8, 0x1, 0x4, 0x4, 0x0, 0x6, 0x0, 0xaa5, 0x9, 0x800, 0x2, 0x81, 0x4, 0x9, 0x4a20a1a8, 0x8, 0x80000001, 0x0, 0xfffffffa, 0x3, 0x7, 0x4, 0x5, 0xc, 0x36, 0xf, 0xff9b, 0x68, 0x80000001, 0x401, 0x4, 0xff, 0x2e3, 0xc, 0x9, 0x3, 0x2, 0x0, 0x2452, 0xab, 0x5, 0x8, 0x8, 0x9, 0x10000, 0x1000, 0x7, 0x5, 0x1ff, 0x4a0, 0x0, 0x3, 0xc0, 0xffffffff, 0x7, 0x1, 0xa94a, 0x4, 0x101, 0xffffffff, 0xd7, 0x5, 0x8, 0x395, 0x7, 0x8, 0x6, 0x7fff, 0x10000, 0x80000001, 0x0, 0x27, 0x18000, 0x5, 0x6, 0x5, 0x2, 0xd146, 0x8, 0x6, 0x1, 0xf17, 0x9, 0x7, 0xffffffff, 0x7, 0xff, 0x1, 0x7, 0x81, 0x2, 0x8, 0x101, 0xfff, 0xe, 0x6, 0xffff99a7, 0x5, 0xac000000, 0x8000, 0x9, 0xe, 0x9, 0xa39, 0x9, 0x25, 0x5, 0x7, 0x9, 0x928800, 0x80000001, 0x2, 0x0, 0x1, 0x1, 0x8ef1, 0x9, 0x404, 0x0, 0x0, 0x2, 0x10, 0x1, 0x7fffffff, 0x6, 0x5, 0x7, 0x200, 0x80, 0x7, 0x1000, 0x9, 0x71, 0x6, 0x7, 0x7, 0x3, 0x1, 0x5, 0x4cd, 0x0, 0x9, 0x7f, 0x800, 0x8, 0x40000000, 0x1, 0xfffffffd, 0x4, 0x80000000, 0x4cd, 0x200]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) recvmmsg(r0, &(0x7f0000006500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/4096, 0x1000}, 0x7}], 0x1, 0x10002, 0x0) 943.055329ms ago: executing program 4 (id=5879): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fe880000000000000000000000000001ac1414aa00000000000000000000000007944e230005000000003a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x1, 0x80, 0x8, 0x9, {{0xe, 0x4, 0x0, 0x12, 0x38, 0x68, 0x0, 0x3, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x1f, 0xc2, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @multicast2, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @end]}}}}}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xc, r3, 0x4}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) socket(0x1e, 0x3, 0x5) recvmmsg(r6, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r7, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r7, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000300)={'wg2\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0xb54, 0x7, {{0x1d, 0x4, 0x1, 0x2, 0x74, 0x66, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@generic={0x94, 0x3, "a9"}, @cipso={0x86, 0x2b, 0x3, [{0x7, 0x3, "a0"}, {0x1, 0x5, "51c272"}, {0x2, 0xa, "7c21cca9eb47f262"}, {0x1, 0xa, "e86606bac28b7b2c"}, {0x1, 0x9, "e7bc90a1cba94f"}]}, @end, @ssrr={0x89, 0x7, 0xcc, [@broadcast]}, @end, @rr={0x7, 0xf, 0xe9, [@broadcast, @loopback, @local]}, @timestamp_addr={0x44, 0x14, 0x7f, 0x1, 0x9, [{@multicast1, 0x7c}, {@multicast1}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x8000, 0x700, 0x10, 0x3ff, {{0x21, 0x4, 0x3, 0x3, 0x84, 0x67, 0x0, 0x7, 0x2f, 0x0, @empty, @private=0xa010101, {[@end, @noop, @cipso={0x86, 0x29, 0x1, [{0x0, 0x8, "e55e4126027e"}, {0x7, 0x4, "11a6"}, {0x7, 0x3, '0'}, {0x6, 0x4, "2ab3"}, {0x5, 0x10, "cdaa31f89a059c305ef8f61ac60b"}]}, @lsrr={0x83, 0x13, 0xd, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x14}]}, @end, @timestamp_prespec={0x44, 0x24, 0x9a, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast2, 0x3}, {@empty, 0xc}, {@local, 0x5}]}, @generic={0x83, 0xa, "8edb01708abd6029"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r9, @ANYBLOB="080003"], 0x80}}, 0x8000) socket(0x400000000010, 0x3, 0x0) 836.468363ms ago: executing program 4 (id=5880): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) read(r0, &(0x7f00000003c0)=""/184, 0xb8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f0000000040)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x0, 0x20}, 0xc) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080), 0x0) sendmmsg$inet6(r1, &(0x7f0000000200), 0x0, 0x8020) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r7, &(0x7f0000001040)={0x27, r9, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x39}, 0x60) close(r8) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)='X\x00\x00', 0x3}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000006100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000060c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x3154}, 0x1, 0x0, 0x0, 0x4004091}, 0x8000) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000000df821797eff62caf000046f0edefc7852f110b52f09c1e1ca589f0b862cab11501a377ccdb6ac36451b5be2b5666c4c9c380f8fb0537915c326f43e0a09800006300786b9e2d0d8846b2c63f47ffe746a03cb815daeb01e500000000000000265b7f26f16a56ca43fd83388499ceb9812814728b3d0ea11a330124e02cff1e35c4af857983214414da75c7b91eb0723bd53e16824263cb8c9adaf5543b738a0e4ddf3fed9232521ca489adf81e53290200318701a3f8a0e5c31ce00603f20bccbc59000050a0f3ef08ab3dbcae5c689787a1624c2d1092be79fafbf09a9075aab20200"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x8) 777.186389ms ago: executing program 0 (id=5881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708ffffff9000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 759.795775ms ago: executing program 1 (id=5882): sendto$inet6(0xffffffffffffffff, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='veno', 0x4) shutdown(0xffffffffffffffff, 0x1) 676.641717ms ago: executing program 3 (id=5883): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x5}, [@typed={0x4, 0x3}]}, 0x18}}, 0x2000c040) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000140)=""/105, 0x69, 0x40000102, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)=@gettaction={0x28, 0x32, 0x301, 0x70bd2b, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@bridge_getneigh={0x34, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x200}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x30008085) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r5, 0x0, 0x40004) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x5}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000200)={r7, 0x8001, 0x10, 0x2, 0x1}, &(0x7f0000000240)=0x18) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x60c5) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) 577.192981ms ago: executing program 0 (id=5884): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x30, 0xfffffff9}]}, 0x10) (async, rerun: 64) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000100)) (rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x44, 0x0, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r2, 0x0) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000200)=0xa, 0x4) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x9, [@union={0x8, 0x1, 0x0, 0x5, 0x0, 0xa, [{0x0, 0x5, 0x31b254ae}]}, @typedef={0x5}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x0, 0x5}, {0xe, 0x4}, {0x9}, {0xc, 0x3}, {0x7, 0x1}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x1, 0x3}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x2, 0x9}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x2}, @enum64={0xd, 0x2, 0x0, 0x13, 0x0, 0x5, [{0x7, 0x80000001, 0x10000}, {0xc, 0x5, 0xc}]}, @union={0xd, 0x6, 0x0, 0x5, 0x1, 0x76, [{0x1, 0x3, 0x7}, {0xc, 0x5, 0xd82c1c4}, {0x2, 0x5, 0xd1}, {0xd, 0x0, 0x7}, {0x4, 0x1}, {0x6, 0x3, 0x6}]}]}, {0x0, [0x2e, 0x2e, 0x0, 0x2e, 0x5f, 0x2e, 0x30]}}, &(0x7f0000000440)=""/124, 0x11d, 0x7c, 0x0, 0x7, 0x10000, @value=r2}, 0x28) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="3f000000010000", 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRESDEC=r2, @ANYRES16=r4], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x1009, &(0x7f00000009c0)=""/4105, 0x40f00, 0x1, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000400), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xe, &(0x7f0000001a00)=ANY=[@ANYRESDEC], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r2, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffe, 0xfffffffb}, 0x10, r5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) 523.80101ms ago: executing program 1 (id=5885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000cc70280080002400000001c0900010073797a30000000000900020073797a320000000014000000110001000000000000000000f500000a"], 0x74}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0xb) socket$vsock_stream(0x28, 0x1, 0x0) pipe(&(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x490, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3df, 0x9, 0x2, 0x800, 0x9, 0x0, 0x10, 0x40, 0x1, 0xfff, 0xfffffff8, 0x4, 0x7f, 0x2, 0x2135, 0x0, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0xa7fc, 0xffe, 0x6, 0xa7, 0x7, 0xffffffff, 0xff, 0x1400, 0x7, 0x3, 0x2, 0x7fff, 0x4, 0x4, 0xfffff89a, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x80004, 0x8, 0xa0, 0x1, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x4, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0x40000, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0xffffffff, 0x6, 0xa0, 0x8, 0x6, 0x7, 0x100, 0x200, 0x1, 0x0, 0xffff, 0x6, 0x1, 0x0, 0x4, 0xfff, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0x10e8, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x10000, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x400, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0xfffffffe, 0x8, 0xfffffffe, 0x0, 0x4, 0x7, 0x44, 0x3, 0x0, 0x8000, 0x2, 0x0, 0x9, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x0, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0xc, 0x0, 0x4, 0x7, 0x7f, 0x5, 0x4, 0x81, 0xffffffff, 0x8, 0x7f, 0x800009, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x7, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0xc, 0x8001, 0x10001ff, 0x2706, 0x2, 0x8001, 0x0, 0x2, 0x400, 0x107e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x3, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3ff, 0x200, 0xc8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0xb, 0x2, 0x3, 0x7, 0x6, 0x8}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000225bd7000fedbdf250f00000005002f000100000005002a000100000008003a000a00000008003b0007000000c75120cb40e177bae4b277d36b3c369fcf215528d7f0691beebf30dab9"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r8, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x1041}, 0x20000844) 490.284427ms ago: executing program 2 (id=5795): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0xfffffffffffffda8, 0x2, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xa1a3}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=[@dstopts_2292={{0x12, 0x29, 0x43}}], 0x18}}], 0x1, 0x40000000) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59510000000000000000a008800", @ANYRES32=r4, @ANYBLOB="1400000000000000ffff000000000800080070030000"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) socket$inet6(0xa, 0x2, 0x3a) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x14, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0xfffffffffffffda8, 0x2, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0xa1a3}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=[@dstopts_2292={{0x12, 0x29, 0x43}}], 0x18}}], 0x1, 0x40000000) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59510000000000000000a008800", @ANYRES32=r4, @ANYBLOB="1400000000000000ffff000000000800080070030000"], 0x34}}, 0x0) (async) 387.727874ms ago: executing program 0 (id=5886): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) (async) r2 = openat$cgroup_int(r1, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c8, 0x2e8, 0x218, 0x0, 0x2e8, 0x2e8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x70}, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@remote, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c8, 0x2e8, 0x218, 0x0, 0x2e8, 0x2e8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x70}, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@remote, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r4 = socket(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCSDEBUG(r5, 0x40047440, &(0x7f00000000c0)=0x7) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="1100d68a49000000780000", @ANYBLOB, @ANYRES64=0x0], 0xa) epoll_create1(0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f00000000c0)={0x1a0000010}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r2, &(0x7f0000000080)={0x2010}) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r2, &(0x7f0000000080)={0x2010}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206010100000000000000000700ffff140007800800124000000005050015000900000005000100f6ffff38050005000a00000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x0) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x7, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 383.060377ms ago: executing program 2 (id=5887): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000200)={@broadcast, @multicast1, r2}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x4048800) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x6e24, @empty}}, 0x24) listen(r5, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r4, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 261.096918ms ago: executing program 1 (id=5888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) 95.820272ms ago: executing program 0 (id=5889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000010000000000009f09002318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000006400b7020000200000008500000086000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b70200000000000085000000d4000000b70000000064000095"], &(0x7f0000004380)='syzkaller\x00', 0x6, 0x20, &(0x7f0000000000)=""/32, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 94.090262ms ago: executing program 2 (id=5890): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0xd, @loopback, 0xab2}, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1, {[0x9, 0x3, 0x400000, 0x1, 0x8000, 0xb56, 0x401]}}, 0x5c) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@dev, @initdev, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x3d, r1, 0x7}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000000)=0x8, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x90, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfff}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x16}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20}, 0x80) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c880}, 0x22040000) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000000780)={&(0x7f0000000500)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x4, 0x4}}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000540)="81cae327d52755f7fe23c5fb03dcb2c2fefde1f389e9971ce39059d7a583a78c9bcb5a901dcd09d88b0d0525b7914a2f39f7e9635eba556ba92b0d67bafd5addd915618ea98aabed6e39656f5e0392a247906ae76b3fb8330976b64ac3964930c9b15c22c6fececb12047c2bee8cddb84d3d4b1f999eee69a26bf966a066f2ec485ec31e8f20b0bfef034363509c723d7aebeb2b2a99", 0x96}, {&(0x7f0000000600)="ee64ec14313792cb1499ae30ee00068c19b278b83db1a79622fd91aed2ca3fb3e3ff389932a5c98a28fdb2405018bd85681abd35c9deac281356fa11eae889faef24a91e3dbb44df5a0f9101f6e4d1c2115fcdec7557f2e16499ee762b238ac6aaecf76c92b0a20755145d4b12d370a15095eb8c9bd73a", 0x77}, {&(0x7f0000000680)="817cbeff4e992cb1d641e33c0c3fd328d7d0b30337be85f73c965c1a5fab09b556634509412a774fd82222837d26077c10217edfb953b948c3b722b6aa1e95b3c2396d34ce112566887773149031eb61fa8f5b21e1aba0bd6bf2f45ee71c8fdf0c127d3c02a6e37aecda68932d8139ed7ea0eaed8fddd2e539c2c510844893c9f693502116750c0b15a4ce91c2031a429c08a613998760ff4bf7a93a257253e110e633ba95b5e5a2", 0xa8}], 0x3, 0x0, 0x0, 0x4c801}, 0x8b0) 92.968964ms ago: executing program 1 (id=5891): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)=""/4096, 0x1000}], 0x1}, 0x2ca998c3}], 0x1, 0x40000020, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x1, 0x13, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ba9ab97}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 66.731623ms ago: executing program 0 (id=5892): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x2, 0x24, 0x0, 0x3}, {0x34, 0xf2, 0x3}]}, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40096}, 0x8d4) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r5, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd70000e0000000100000008000100", @ANYRES32=r5, @ANYBLOB="08000200010002"], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x2, 0x6, 0x401, 0x4d5a, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x18}, 0x50) r6 = socket$isdn_base(0x22, 0x3, 0x0) socket(0x1b, 0x6, 0x1) ioctl$IMSETDEVNAME(r6, 0x80184947, &(0x7f0000000000)={0x8cc, 'syz1\x00'}) 0s ago: executing program 4 (id=5893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000009100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 77][T21955] tomoyo_encode+0x28b/0x550 [ 549.897501][T21955] tomoyo_realpath_from_path+0x58d/0x5d0 [ 549.897532][T21955] ? tomoyo_path_number_perm+0x219/0x630 [ 549.897561][T21955] tomoyo_path_number_perm+0x246/0x630 [ 549.897592][T21955] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 549.897621][T21955] ? __lock_acquire+0x6b5/0x2cf0 [ 549.897658][T21955] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 549.897707][T21955] ? __fget_files+0x2a/0x420 [ 549.897730][T21955] ? __fget_files+0x2a/0x420 [ 549.897747][T21955] ? __fget_files+0x3a0/0x420 [ 549.897764][T21955] ? __fget_files+0x2a/0x420 [ 549.897787][T21955] security_file_ioctl+0xc3/0x2a0 [ 549.897817][T21955] __se_sys_ioctl+0x47/0x170 [ 549.897846][T21955] do_syscall_64+0x14d/0xf80 [ 549.897869][T21955] ? trace_irq_disable+0x3b/0x150 [ 549.897887][T21955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.897907][T21955] ? clear_bhb_loop+0x40/0x90 [ 549.897932][T21955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.897951][T21955] RIP: 0033:0x7fc41439c819 [ 549.897970][T21955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.897988][T21955] RSP: 002b:00007fc4152ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.898010][T21955] RAX: ffffffffffffffda RBX: 00007fc414615fa0 RCX: 00007fc41439c819 [ 549.898024][T21955] RDX: 00002000000000c0 RSI: 00000000800442d2 RDI: 0000000000000004 [ 549.898037][T21955] RBP: 00007fc4152ef090 R08: 0000000000000000 R09: 0000000000000000 [ 549.898048][T21955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.898059][T21955] R13: 00007fc414616038 R14: 00007fc414615fa0 R15: 00007fff39bed2b8 [ 549.898092][T21955] [ 550.117507][T21955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 550.621930][T21980] syz_tun: entered promiscuous mode [ 550.628198][T21980] macvtap1: entered promiscuous mode [ 550.644993][T21980] macvtap1: entered allmulticast mode [ 550.658650][T21980] syz_tun: entered allmulticast mode [ 550.701534][T21980] syz_tun: left allmulticast mode [ 550.707898][T21980] syz_tun: left promiscuous mode [ 550.723449][T21982] netlink: 'syz.3.4263': attribute type 1 has an invalid length. [ 550.751368][T21985] netlink: 488 bytes leftover after parsing attributes in process `syz.2.4262'. [ 550.772566][T21985] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4262'. [ 550.868189][T21982] bond1: (slave bridge4): making interface the new active one [ 550.881986][T21993] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4265'. [ 550.912078][T21982] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 551.122338][T22007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4271'. [ 551.308137][T22018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4272'. [ 551.368256][T22018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4272'. [ 551.458213][T22025] vlan2: entered promiscuous mode [ 551.569572][T22028] x_tables: duplicate underflow at hook 1 [ 551.586146][T22028] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20001 [ 551.746023][T22035] netlink: 'syz.1.4278': attribute type 1 has an invalid length. [ 551.771847][T22034] netlink: 'syz.1.4278': attribute type 1 has an invalid length. [ 551.835508][T22035] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.949868][T22043] No such timeout policy "syz1" [ 552.014064][T22050] netlink: 'syz.2.4283': attribute type 1 has an invalid length. [ 552.074882][T22052] netlink: 'syz.3.4284': attribute type 39 has an invalid length. [ 552.523937][T22083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4292'. [ 552.747181][T22095] bridge0: entered promiscuous mode [ 552.753198][T22095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4297'. [ 552.763565][T22095] veth0_to_bridge: left allmulticast mode [ 552.772162][T22095] veth0_to_bridge: left promiscuous mode [ 552.778526][T22095] bridge0: port 1(veth0_to_bridge) entered disabled state [ 552.843140][T22097] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 552.850778][T22097] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 552.986112][T22104] syzkaller1: entered promiscuous mode [ 552.996171][T22104] syzkaller1: entered allmulticast mode [ 553.101225][T22109] 8021q: adding VLAN 0 to HW filter on device bond6 [ 553.133758][T22109] macsec1: entered allmulticast mode [ 553.141769][T22109] bond6: entered allmulticast mode [ 553.147483][T22109] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 553.157373][T22109] bond6: left allmulticast mode [ 553.483066][T22129] netlink: 'syz.4.4306': attribute type 1 has an invalid length. [ 554.006288][T22153] smc: adding net device veth1_to_team with user defined pnetid S [ 554.050224][T22159] vlan3: entered promiscuous mode [ 554.059901][T22159] erspan0: entered promiscuous mode [ 554.375623][T22186] netlink: 'syz.1.4320': attribute type 3 has an invalid length. [ 554.432711][T22191] SET target dimension over the limit! [ 554.656838][T22202] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 554.752567][T22207] syzkaller1: entered promiscuous mode [ 554.759258][T22207] syzkaller1: entered allmulticast mode [ 554.838686][T22212] netlink: 'syz.4.4330': attribute type 6 has an invalid length. [ 554.894681][T22217] xt_CT: You must specify a L4 protocol and not use inversions on it [ 554.916506][T22217] netlink: 'syz.0.4332': attribute type 2 has an invalid length. [ 555.062381][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 555.261914][T22224] __nla_validate_parse: 8 callbacks suppressed [ 555.261937][T22224] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4334'. [ 555.300963][T22230] netlink: 'syz.2.4336': attribute type 12 has an invalid length. [ 555.434854][T22231] syzkaller0: entered promiscuous mode [ 555.441004][T22231] syzkaller0: entered allmulticast mode [ 555.508796][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4339'. [ 555.676841][T22249] netlink: 'syz.2.4341': attribute type 1 has an invalid length. [ 555.762861][T22249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 556.114104][T22270] xt_hashlimit: size too large, truncated to 1048576 [ 558.638960][T22309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4352'. [ 558.708899][T22313] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 559.217721][T22339] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4360'. [ 559.475436][T22368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4368'. [ 559.495195][T22365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4368'. [ 559.525155][T22368] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4368'. [ 559.556367][T22365] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4368'. [ 559.710183][T22379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4369'. [ 559.924229][T22391] syzkaller1: entered promiscuous mode [ 559.936223][T22391] syzkaller1: entered allmulticast mode [ 559.952841][T22387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4372'. [ 560.178666][T21593] Bluetooth: hci5: command 0x0406 tx timeout [ 560.434133][T22403] netlink: 'syz.2.4376': attribute type 32 has an invalid length. [ 560.448274][T22403] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4376'. [ 560.472467][T22405] FAULT_INJECTION: forcing a failure. [ 560.472467][T22405] name failslab, interval 1, probability 0, space 0, times 0 [ 560.548632][T22405] CPU: 0 UID: 0 PID: 22405 Comm: syz.0.4377 Not tainted syzkaller #0 PREEMPT(full) [ 560.548663][T22405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 560.548676][T22405] Call Trace: [ 560.548684][T22405] [ 560.548694][T22405] dump_stack_lvl+0xe8/0x150 [ 560.548730][T22405] should_fail_ex+0x412/0x560 [ 560.548769][T22405] should_failslab+0xa8/0x100 [ 560.548798][T22405] __kmalloc_noprof+0xe8/0x760 [ 560.548825][T22405] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 560.548854][T22405] tomoyo_realpath_from_path+0xe3/0x5d0 [ 560.548886][T22405] ? tomoyo_path_number_perm+0x219/0x630 [ 560.548913][T22405] tomoyo_path_number_perm+0x246/0x630 [ 560.548945][T22405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 560.548978][T22405] ? __lock_acquire+0x6b5/0x2cf0 [ 560.549016][T22405] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 560.549066][T22405] ? __fget_files+0x2a/0x420 [ 560.549089][T22405] ? __fget_files+0x2a/0x420 [ 560.549108][T22405] ? __fget_files+0x3a0/0x420 [ 560.549126][T22405] ? __fget_files+0x2a/0x420 [ 560.549159][T22405] security_file_ioctl+0xc3/0x2a0 [ 560.549189][T22405] __se_sys_ioctl+0x47/0x170 [ 560.549216][T22405] do_syscall_64+0x14d/0xf80 [ 560.549238][T22405] ? trace_irq_disable+0x3b/0x150 [ 560.549256][T22405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.549276][T22405] ? clear_bhb_loop+0x40/0x90 [ 560.549302][T22405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.549322][T22405] RIP: 0033:0x7f326759c819 [ 560.549342][T22405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.549360][T22405] RSP: 002b:00007f32657f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.549383][T22405] RAX: ffffffffffffffda RBX: 00007f3267815fa0 RCX: 00007f326759c819 [ 560.549398][T22405] RDX: 0000200000000340 RSI: 00000000400442c8 RDI: 0000000000000007 [ 560.549411][T22405] RBP: 00007f32657f6090 R08: 0000000000000000 R09: 0000000000000000 [ 560.549422][T22405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.549435][T22405] R13: 00007f3267816038 R14: 00007f3267815fa0 R15: 00007ffdc97dfb08 [ 560.549469][T22405] [ 560.549478][T22405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 560.914915][T22419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4382'. [ 560.979574][T22419] team0: left promiscuous mode [ 560.995270][T22419] team_slave_0: left promiscuous mode [ 561.018717][T22419] team_slave_1: left promiscuous mode [ 561.203425][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4385'. [ 561.253372][T22434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.260938][ T2997] bond0: (slave bond_slave_0): interface is now down [ 561.288754][ T2997] bond0: (slave bond_slave_1): interface is now down [ 561.334352][ T2997] bond0: now running without any active interface! [ 561.374310][T22445] netlink: 39 bytes leftover after parsing attributes in process `syz.4.4388'. [ 561.423279][T22445] netlink: 'syz.4.4388': attribute type 1 has an invalid length. [ 561.531365][T22452] FAULT_INJECTION: forcing a failure. [ 561.531365][T22452] name failslab, interval 1, probability 0, space 0, times 0 [ 561.546838][T22452] CPU: 1 UID: 0 PID: 22452 Comm: syz.2.4392 Not tainted syzkaller #0 PREEMPT(full) [ 561.546878][T22452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 561.546891][T22452] Call Trace: [ 561.546900][T22452] [ 561.546909][T22452] dump_stack_lvl+0xe8/0x150 [ 561.546943][T22452] should_fail_ex+0x412/0x560 [ 561.546978][T22452] should_failslab+0xa8/0x100 [ 561.547007][T22452] __kmalloc_noprof+0xe8/0x760 [ 561.547033][T22452] ? tomoyo_encode+0x28b/0x550 [ 561.547060][T22452] tomoyo_encode+0x28b/0x550 [ 561.547089][T22452] tomoyo_realpath_from_path+0x58d/0x5d0 [ 561.547120][T22452] ? tomoyo_path_number_perm+0x219/0x630 [ 561.547147][T22452] tomoyo_path_number_perm+0x246/0x630 [ 561.547178][T22452] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 561.547209][T22452] ? __lock_acquire+0x6b5/0x2cf0 [ 561.547250][T22452] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 561.547299][T22452] ? __fget_files+0x2a/0x420 [ 561.547323][T22452] ? __fget_files+0x2a/0x420 [ 561.547341][T22452] ? __fget_files+0x3a0/0x420 [ 561.547359][T22452] ? __fget_files+0x2a/0x420 [ 561.547383][T22452] security_file_ioctl+0xc3/0x2a0 [ 561.547414][T22452] __se_sys_ioctl+0x47/0x170 [ 561.547443][T22452] do_syscall_64+0x14d/0xf80 [ 561.547468][T22452] ? trace_irq_disable+0x3b/0x150 [ 561.547486][T22452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.547507][T22452] ? clear_bhb_loop+0x40/0x90 [ 561.547531][T22452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.547552][T22452] RIP: 0033:0x7fc69479c819 [ 561.547572][T22452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.547591][T22452] RSP: 002b:00007fc6956d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.547615][T22452] RAX: ffffffffffffffda RBX: 00007fc694a15fa0 RCX: 00007fc69479c819 [ 561.547631][T22452] RDX: 0000200000000340 RSI: 00000000400442c8 RDI: 0000000000000007 [ 561.547645][T22452] RBP: 00007fc6956d7090 R08: 0000000000000000 R09: 0000000000000000 [ 561.547658][T22452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.547671][T22452] R13: 00007fc694a16038 R14: 00007fc694a15fa0 R15: 00007ffefec8b9d8 [ 561.547706][T22452] [ 561.547727][T22452] ERROR: Out of memory at tomoyo_realpath_from_path. [ 561.774593][T22449] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 561.903233][T22464] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20002 [ 561.923993][T22462] xfrm1: entered allmulticast mode [ 562.006788][T22469] syzkaller1: entered promiscuous mode [ 562.013043][T22469] syzkaller1: entered allmulticast mode [ 562.095152][T22473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.289485][T22473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.352357][T22473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.394602][T22473] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 562.469386][ T5928] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 563.105668][T22499] FAULT_INJECTION: forcing a failure. [ 563.105668][T22499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.139232][ T5928] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 563.158532][T22499] CPU: 1 UID: 0 PID: 22499 Comm: syz.3.4406 Not tainted syzkaller #0 PREEMPT(full) [ 563.158561][T22499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 563.158573][T22499] Call Trace: [ 563.158580][T22499] [ 563.158588][T22499] dump_stack_lvl+0xe8/0x150 [ 563.158623][T22499] should_fail_ex+0x412/0x560 [ 563.158658][T22499] _copy_from_user+0x2d/0xb0 [ 563.158686][T22499] do_bnep_sock_ioctl+0x293/0x650 [ 563.158720][T22499] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 563.158758][T22499] ? tomoyo_path_number_perm+0x219/0x630 [ 563.158811][T22499] sock_do_ioctl+0x101/0x320 [ 563.158839][T22499] ? __pfx_sock_do_ioctl+0x10/0x10 [ 563.158861][T22499] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 563.158906][T22499] sock_ioctl+0x5c6/0x7f0 [ 563.158932][T22499] ? __pfx_sock_ioctl+0x10/0x10 [ 563.158957][T22499] ? __fget_files+0x2a/0x420 [ 563.158976][T22499] ? __fget_files+0x3a0/0x420 [ 563.158995][T22499] ? __fget_files+0x2a/0x420 [ 563.159018][T22499] ? bpf_lsm_file_ioctl+0x9/0x20 [ 563.159046][T22499] ? __pfx_sock_ioctl+0x10/0x10 [ 563.159069][T22499] __se_sys_ioctl+0xfc/0x170 [ 563.159097][T22499] do_syscall_64+0x14d/0xf80 [ 563.159131][T22499] ? trace_irq_disable+0x3b/0x150 [ 563.159150][T22499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.159171][T22499] ? clear_bhb_loop+0x40/0x90 [ 563.159196][T22499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.159217][T22499] RIP: 0033:0x7fc1aad9c819 [ 563.159237][T22499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.159254][T22499] RSP: 002b:00007fc1abbf0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.159276][T22499] RAX: ffffffffffffffda RBX: 00007fc1ab015fa0 RCX: 00007fc1aad9c819 [ 563.159291][T22499] RDX: 0000200000000340 RSI: 00000000400442c8 RDI: 0000000000000007 [ 563.159303][T22499] RBP: 00007fc1abbf0090 R08: 0000000000000000 R09: 0000000000000000 [ 563.159317][T22499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.159330][T22499] R13: 00007fc1ab016038 R14: 00007fc1ab015fa0 R15: 00007ffe9ce73b38 [ 563.159364][T22499] [ 563.396281][T16918] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 563.523577][T22506] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4407'. [ 563.558850][T22506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4407'. [ 563.592291][T22510] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4411'. [ 563.601412][T22506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4407'. [ 563.738254][T22516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4413'. [ 563.760715][T22516] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4413'. [ 563.768043][T22519] ip6tnl2: entered allmulticast mode [ 563.789450][ T6662] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 563.803560][ T6662] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 563.819422][ T5928] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 563.840482][T22525] netlink: 'syz.0.4415': attribute type 30 has an invalid length. [ 563.848701][T18298] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 563.962090][T22534] sctp: [Deprecated]: syz.3.4418 (pid 22534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 563.962090][T22534] Use struct sctp_sack_info instead [ 564.047624][T22538] xt_CONNSECMARK: invalid mode: 0 [ 564.134016][T22546] FAULT_INJECTION: forcing a failure. [ 564.134016][T22546] name failslab, interval 1, probability 0, space 0, times 0 [ 564.147291][T22546] CPU: 1 UID: 0 PID: 22546 Comm: syz.4.4423 Not tainted syzkaller #0 PREEMPT(full) [ 564.147321][T22546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 564.147334][T22546] Call Trace: [ 564.147343][T22546] [ 564.147352][T22546] dump_stack_lvl+0xe8/0x150 [ 564.147388][T22546] should_fail_ex+0x412/0x560 [ 564.147425][T22546] should_failslab+0xa8/0x100 [ 564.147453][T22546] __kvmalloc_node_noprof+0x178/0x8a0 [ 564.147481][T22546] ? alloc_netdev_mqs+0xa6/0x11b0 [ 564.147505][T22546] ? do_syscall_64+0x14d/0xf80 [ 564.147537][T22546] alloc_netdev_mqs+0xa6/0x11b0 [ 564.147557][T22546] ? __pfx_bnep_net_setup+0x10/0x10 [ 564.147593][T22546] bnep_add_connection+0x214/0xca0 [ 564.147631][T22546] ? __pfx_bnep_add_connection+0x10/0x10 [ 564.147662][T22546] ? __fget_files+0x3a0/0x420 [ 564.147694][T22546] do_bnep_sock_ioctl+0x40b/0x650 [ 564.147727][T22546] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 564.147767][T22546] ? tomoyo_path_number_perm+0x219/0x630 [ 564.147817][T22546] sock_do_ioctl+0x101/0x320 [ 564.147845][T22546] ? __pfx_sock_do_ioctl+0x10/0x10 [ 564.147867][T22546] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 564.147961][T22546] sock_ioctl+0x5c6/0x7f0 [ 564.147986][T22546] ? __pfx_sock_ioctl+0x10/0x10 [ 564.148011][T22546] ? __fget_files+0x2a/0x420 [ 564.148030][T22546] ? __fget_files+0x3a0/0x420 [ 564.148049][T22546] ? __fget_files+0x2a/0x420 [ 564.148073][T22546] ? bpf_lsm_file_ioctl+0x9/0x20 [ 564.148100][T22546] ? __pfx_sock_ioctl+0x10/0x10 [ 564.148124][T22546] __se_sys_ioctl+0xfc/0x170 [ 564.148153][T22546] do_syscall_64+0x14d/0xf80 [ 564.148175][T22546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.148202][T22546] ? clear_bhb_loop+0x40/0x90 [ 564.148229][T22546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.148249][T22546] RIP: 0033:0x7fc41439c819 [ 564.148272][T22546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.148291][T22546] RSP: 002b:00007fc4152ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.148316][T22546] RAX: ffffffffffffffda RBX: 00007fc414615fa0 RCX: 00007fc41439c819 [ 564.148331][T22546] RDX: 0000200000000340 RSI: 00000000400442c8 RDI: 0000000000000007 [ 564.148344][T22546] RBP: 00007fc4152ef090 R08: 0000000000000000 R09: 0000000000000000 [ 564.148357][T22546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.148370][T22546] R13: 00007fc414616038 R14: 00007fc414615fa0 R15: 00007fff39bed2b8 [ 564.148404][T22546] [ 564.454461][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 564.464753][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 564.525893][T22550] xt_connbytes: Forcing CT accounting to be enabled [ 564.739228][ T5928] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 565.168481][T22562] tipc: Enabled bearer , priority 0 [ 565.179472][T22562] tipc: Resetting bearer [ 565.256005][T22583] netlink: 'syz.4.4433': attribute type 1 has an invalid length. [ 565.792922][T22611] netlink: 'syz.4.4442': attribute type 1 has an invalid length. [ 566.044066][T22619] __nla_validate_parse: 3 callbacks suppressed [ 566.044097][T22619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4444'. [ 566.158751][ T5928] tipc: Node number set to 1231110221 [ 566.335572][T22611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.490866][T22630] FAULT_INJECTION: forcing a failure. [ 566.490866][T22630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.517023][T22630] CPU: 0 UID: 0 PID: 22630 Comm: syz.3.4447 Not tainted syzkaller #0 PREEMPT(full) [ 566.517056][T22630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 566.517070][T22630] Call Trace: [ 566.517079][T22630] [ 566.517089][T22630] dump_stack_lvl+0xe8/0x150 [ 566.517126][T22630] should_fail_ex+0x412/0x560 [ 566.517172][T22630] _copy_from_user+0x2d/0xb0 [ 566.517200][T22630] ___sys_sendmsg+0x1c6/0x360 [ 566.517240][T22630] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.517302][T22630] ? __fget_files+0x2a/0x420 [ 566.517322][T22630] ? __fget_files+0x3a0/0x420 [ 566.517351][T22630] __x64_sys_sendmsg+0x1bd/0x2a0 [ 566.517385][T22630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 566.517427][T22630] ? __pfx_ksys_write+0x10/0x10 [ 566.517464][T22630] do_syscall_64+0x14d/0xf80 [ 566.517489][T22630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.517512][T22630] ? clear_bhb_loop+0x40/0x90 [ 566.517538][T22630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.517560][T22630] RIP: 0033:0x7fc1aad9c819 [ 566.517582][T22630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.517600][T22630] RSP: 002b:00007fc1abbcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.517624][T22630] RAX: ffffffffffffffda RBX: 00007fc1ab016090 RCX: 00007fc1aad9c819 [ 566.517640][T22630] RDX: 0000000000000800 RSI: 0000200000000640 RDI: 000000000000000b [ 566.517654][T22630] RBP: 00007fc1abbcf090 R08: 0000000000000000 R09: 0000000000000000 [ 566.517667][T22630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.517680][T22630] R13: 00007fc1ab016128 R14: 00007fc1ab016090 R15: 00007ffe9ce73b38 [ 566.517715][T22630] [ 566.907997][T22638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4453'. [ 567.103281][T22646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4455'. [ 567.184622][T22658] netlink: 'syz.1.4454': attribute type 1 has an invalid length. [ 567.202382][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4454'. [ 567.614446][T22665] netlink: 'syz.3.4458': attribute type 1 has an invalid length. [ 567.799262][T22668] macvlan3: entered promiscuous mode [ 567.815942][T22668] macvlan3: entered allmulticast mode [ 567.857218][T22668] bond2: entered promiscuous mode [ 567.937619][T22668] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 567.973042][T22668] bond2: left promiscuous mode [ 568.178668][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 568.178691][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 568.548000][T22692] netlink: 'syz.3.4463': attribute type 13 has an invalid length. [ 568.569314][T22692] netlink: 'syz.3.4463': attribute type 17 has an invalid length. [ 568.640188][T22685] batadv_slave_1: left promiscuous mode [ 568.664582][T22695] FAULT_INJECTION: forcing a failure. [ 568.664582][T22695] name failslab, interval 1, probability 0, space 0, times 0 [ 568.691431][T22695] CPU: 1 UID: 0 PID: 22695 Comm: syz.4.4466 Not tainted syzkaller #0 PREEMPT(full) [ 568.691463][T22695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 568.691477][T22695] Call Trace: [ 568.691486][T22695] [ 568.691496][T22695] dump_stack_lvl+0xe8/0x150 [ 568.691535][T22695] should_fail_ex+0x412/0x560 [ 568.691574][T22695] should_failslab+0xa8/0x100 [ 568.691605][T22695] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 568.691631][T22695] ? __alloc_skb+0x186/0x7d0 [ 568.691660][T22695] ? __alloc_skb+0x1d0/0x7d0 [ 568.691685][T22695] ? __local_bh_enable_ip+0xd0/0x130 [ 568.691720][T22695] __alloc_skb+0x1d0/0x7d0 [ 568.691755][T22695] netlink_sendmsg+0x5d4/0xb40 [ 568.691797][T22695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.691831][T22695] ? aa_sock_msg_perm+0xf1/0x1b0 [ 568.691855][T22695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 568.691883][T22695] ____sys_sendmsg+0x972/0x9f0 [ 568.691933][T22695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.691970][T22695] ? import_iovec+0x73/0xa0 [ 568.691997][T22695] ___sys_sendmsg+0x2a5/0x360 [ 568.692032][T22695] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.692101][T22695] ? __fget_files+0x2a/0x420 [ 568.692119][T22695] ? __fget_files+0x3a0/0x420 [ 568.692149][T22695] __x64_sys_sendmsg+0x1bd/0x2a0 [ 568.692183][T22695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.692224][T22695] ? __pfx_ksys_write+0x10/0x10 [ 568.692262][T22695] do_syscall_64+0x14d/0xf80 [ 568.692287][T22695] ? trace_irq_disable+0x3b/0x150 [ 568.692305][T22695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.692324][T22695] ? clear_bhb_loop+0x40/0x90 [ 568.692350][T22695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.692369][T22695] RIP: 0033:0x7fc41439c819 [ 568.692389][T22695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.692406][T22695] RSP: 002b:00007fc4152ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.692429][T22695] RAX: ffffffffffffffda RBX: 00007fc414616090 RCX: 00007fc41439c819 [ 568.692444][T22695] RDX: 0000000000000800 RSI: 0000200000000640 RDI: 000000000000000b [ 568.692457][T22695] RBP: 00007fc4152ce090 R08: 0000000000000000 R09: 0000000000000000 [ 568.692470][T22695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.692482][T22695] R13: 00007fc414616128 R14: 00007fc414616090 R15: 00007fff39bed2b8 [ 568.692514][T22695] [ 568.930995][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 569.030162][T22684] netlink: 'syz.2.4464': attribute type 8 has an invalid length. [ 569.167282][T22702] netlink: 'syz.1.4468': attribute type 1 has an invalid length. [ 569.210261][T22692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.231866][T22692] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.272827][T22692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 569.292856][ T49] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.302267][ T49] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.394770][T22702] bond5: entered promiscuous mode [ 569.402655][T22702] 8021q: adding VLAN 0 to HW filter on device bond5 [ 569.486914][T22703] 8021q: adding VLAN 0 to HW filter on device bond6 [ 569.571390][T22703] bond5: (slave bond6): making interface the new active one [ 569.616399][T22703] bond6: entered promiscuous mode [ 569.628574][T22703] bond5: (slave bond6): Enslaving as an active interface with an up link [ 569.637487][ T49] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.670201][ T49] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.841035][T22726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4473'. [ 569.863098][T22723] syzkaller0: entered promiscuous mode [ 569.869175][T22723] syzkaller0: entered allmulticast mode [ 571.048226][T22755] FAULT_INJECTION: forcing a failure. [ 571.048226][T22755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.062237][T22755] CPU: 0 UID: 0 PID: 22755 Comm: syz.2.4482 Not tainted syzkaller #0 PREEMPT(full) [ 571.062267][T22755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 571.062280][T22755] Call Trace: [ 571.062288][T22755] [ 571.062297][T22755] dump_stack_lvl+0xe8/0x150 [ 571.062332][T22755] should_fail_ex+0x412/0x560 [ 571.062368][T22755] _copy_from_iter+0x1d3/0x1670 [ 571.062396][T22755] ? rcu_is_watching+0x15/0xb0 [ 571.062433][T22755] ? __pfx__copy_from_iter+0x10/0x10 [ 571.062464][T22755] ? netlink_sendmsg+0x650/0xb40 [ 571.062493][T22755] ? skb_put+0x11b/0x210 [ 571.062527][T22755] netlink_sendmsg+0x6c0/0xb40 [ 571.062566][T22755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 571.062599][T22755] ? aa_sock_msg_perm+0xf1/0x1b0 [ 571.062622][T22755] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 571.062650][T22755] ____sys_sendmsg+0x972/0x9f0 [ 571.062692][T22755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 571.062733][T22755] ? import_iovec+0x73/0xa0 [ 571.062762][T22755] ___sys_sendmsg+0x2a5/0x360 [ 571.062799][T22755] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.062869][T22755] ? __fget_files+0x2a/0x420 [ 571.062888][T22755] ? __fget_files+0x3a0/0x420 [ 571.062928][T22755] __x64_sys_sendmsg+0x1bd/0x2a0 [ 571.062963][T22755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.063005][T22755] ? __pfx_ksys_write+0x10/0x10 [ 571.063042][T22755] do_syscall_64+0x14d/0xf80 [ 571.063066][T22755] ? trace_irq_disable+0x3b/0x150 [ 571.063084][T22755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.063106][T22755] ? clear_bhb_loop+0x40/0x90 [ 571.063132][T22755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.063151][T22755] RIP: 0033:0x7fc69479c819 [ 571.063172][T22755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.063191][T22755] RSP: 002b:00007fc6956b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.063215][T22755] RAX: ffffffffffffffda RBX: 00007fc694a16090 RCX: 00007fc69479c819 [ 571.063231][T22755] RDX: 0000000000000800 RSI: 0000200000000640 RDI: 000000000000000b [ 571.063245][T22755] RBP: 00007fc6956b6090 R08: 0000000000000000 R09: 0000000000000000 [ 571.063259][T22755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.063273][T22755] R13: 00007fc694a16128 R14: 00007fc694a16090 R15: 00007ffefec8b9d8 [ 571.063308][T22755] [ 572.409281][T22774] netlink: 632 bytes leftover after parsing attributes in process `syz.2.4489'. [ 572.630480][T22786] syzkaller0: entered promiscuous mode [ 572.643317][T22786] syzkaller0: entered allmulticast mode [ 572.681659][T22789] xt_hashlimit: size too large, truncated to 1048576 [ 572.739304][T22797] xt_hashlimit: size too large, truncated to 1048576 [ 572.746368][T22797] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 573.127525][T22798] tipc: Started in network mode [ 573.138160][T22798] tipc: Node identity 429fcc172a25, cluster identity 4711 [ 573.159765][T22798] tipc: Enabled bearer , priority 0 [ 573.181264][T22808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4496'. [ 573.191550][T22809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4496'. [ 573.206628][T22809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4496'. [ 573.321696][T22812] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4497'. [ 573.339325][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 573.350610][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 573.360520][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 573.378325][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 573.392025][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4497'. [ 573.431201][T22784] tipc: Resetting bearer [ 573.455596][T22784] tipc: Disabling bearer [ 573.593482][T22817] syzkaller0: entered promiscuous mode [ 573.599927][T22817] syzkaller0: entered allmulticast mode [ 575.662898][T22845] macsec1: entered promiscuous mode [ 575.662908][T22855] FAULT_INJECTION: forcing a failure. [ 575.662908][T22855] name failslab, interval 1, probability 0, space 0, times 0 [ 575.662941][T22855] CPU: 1 UID: 0 PID: 22855 Comm: syz.2.4508 Not tainted syzkaller #0 PREEMPT(full) [ 575.662961][T22855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 575.662972][T22855] Call Trace: [ 575.662980][T22855] [ 575.662987][T22855] dump_stack_lvl+0xe8/0x150 [ 575.663021][T22855] should_fail_ex+0x412/0x560 [ 575.663056][T22855] should_failslab+0xa8/0x100 [ 575.663083][T22855] __kmalloc_noprof+0xe8/0x760 [ 575.663114][T22855] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 575.663144][T22855] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 575.663167][T22855] ? kernel_text_address+0xa5/0xe0 [ 575.663194][T22855] genl_family_rcv_msg_doit+0xd9/0x330 [ 575.663216][T22855] ? __asan_memcpy+0x40/0x70 [ 575.663239][T22855] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 575.663269][T22855] ? apparmor_capable+0x126/0x170 [ 575.663295][T22855] ? bpf_lsm_capable+0x9/0x20 [ 575.663320][T22855] ? security_capable+0x7e/0x2c0 [ 575.663356][T22855] genl_rcv_msg+0x61c/0x7a0 [ 575.663384][T22855] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.663403][T22855] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 575.663422][T22855] ? __pfx_nl802154_new_interface+0x10/0x10 [ 575.663442][T22855] ? __pfx_nl802154_post_doit+0x10/0x10 [ 575.663478][T22855] netlink_rcv_skb+0x232/0x4b0 [ 575.663506][T22855] ? __pfx_genl_rcv_msg+0x10/0x10 [ 575.663528][T22855] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.663577][T22855] ? down_read+0x272/0x2e0 [ 575.663600][T22855] ? genl_rcv+0xd/0x40 [ 575.663622][T22855] genl_rcv+0x28/0x40 [ 575.663640][T22855] netlink_unicast+0x75c/0x8e0 [ 575.663676][T22855] netlink_sendmsg+0x813/0xb40 [ 575.663713][T22855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.663743][T22855] ? aa_sock_msg_perm+0xf1/0x1b0 [ 575.663764][T22855] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 575.663789][T22855] ____sys_sendmsg+0x972/0x9f0 [ 575.663827][T22855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.663865][T22855] ? import_iovec+0x73/0xa0 [ 575.663892][T22855] ___sys_sendmsg+0x2a5/0x360 [ 575.663927][T22855] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.663993][T22855] ? __fget_files+0x2a/0x420 [ 575.664010][T22855] ? __fget_files+0x3a0/0x420 [ 575.664039][T22855] __x64_sys_sendmsg+0x1bd/0x2a0 [ 575.664071][T22855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.664116][T22855] ? __pfx_ksys_write+0x10/0x10 [ 575.664151][T22855] do_syscall_64+0x14d/0xf80 [ 575.664173][T22855] ? trace_irq_disable+0x3b/0x150 [ 575.664190][T22855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.664209][T22855] ? clear_bhb_loop+0x40/0x90 [ 575.664232][T22855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.664251][T22855] RIP: 0033:0x7fc69479c819 [ 575.664269][T22855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.664285][T22855] RSP: 002b:00007fc6956b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.664306][T22855] RAX: ffffffffffffffda RBX: 00007fc694a16090 RCX: 00007fc69479c819 [ 575.664319][T22855] RDX: 0000000000000800 RSI: 0000200000000640 RDI: 000000000000000b [ 575.664332][T22855] RBP: 00007fc6956b6090 R08: 0000000000000000 R09: 0000000000000000 [ 575.664344][T22855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.664355][T22855] R13: 00007fc694a16128 R14: 00007fc694a16090 R15: 00007ffefec8b9d8 [ 575.664387][T22855] [ 576.012302][T22845] virt_wifi0: entered promiscuous mode [ 576.493471][T22891] sctp: [Deprecated]: syz.3.4520 (pid 22891) Use of int in max_burst socket option deprecated. [ 576.493471][T22891] Use struct sctp_assoc_value instead [ 576.658685][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 576.729551][T22901] openvswitch: netlink: IPv4 tun info is not correct [ 577.350351][ T5836] block nbd2: Receive control failed (result -1) [ 577.486706][T22936] syzkaller0: entered promiscuous mode [ 577.502776][T22936] syzkaller0: entered allmulticast mode [ 577.539748][T22934] netlink: 'syz.2.4536': attribute type 13 has an invalid length. [ 577.662075][T22956] __nla_validate_parse: 95 callbacks suppressed [ 577.662097][T22956] netlink: 51 bytes leftover after parsing attributes in process `syz.1.4539'. [ 578.579088][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 580.518737][T22934] batman_adv: batadv0: Interface deactivated: gretap1 [ 580.611000][T22964] syzkaller0: entered promiscuous mode [ 580.616709][T22964] syzkaller0: entered allmulticast mode [ 580.630647][T22975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4542'. [ 580.640828][ T6662] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.651093][ T6662] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.716567][ T6662] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.737215][ T6662] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.384484][T23009] syzkaller0: entered promiscuous mode [ 581.408775][T23009] syzkaller0: entered allmulticast mode [ 581.436384][T22988] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4549'. [ 581.486585][T23012] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4554'. [ 581.515961][T23012] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 583.576090][T23029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4560'. [ 583.931328][T23051] netlink: 'syz.2.4567': attribute type 1 has an invalid length. [ 584.082848][T23057] erspan0: entered promiscuous mode [ 584.103401][T23061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4570'. [ 584.187490][T18298] IPVS: starting estimator thread 0... [ 584.308913][T23062] IPVS: using max 29 ests per chain, 69600 per kthread [ 584.364675][T23074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4573'. [ 584.374603][T23074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4573'. [ 584.377503][T23070] bond7: entered allmulticast mode [ 584.389591][T23074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4573'. [ 584.396573][T23069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4576'. [ 584.418304][T23074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4573'. [ 584.517494][T23074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4573'. [ 584.556943][T23085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4579'. [ 584.566853][T23074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4573'. [ 584.603652][T23085] bond0: option resend_igmp: invalid value (18446744072210219584) [ 584.615470][T23085] bond0: option resend_igmp: allowed values 0 - 255 [ 585.270967][T23120] netlink: 'syz.3.4593': attribute type 5 has an invalid length. [ 586.136226][T23165] 8021q: adding VLAN 0 to HW filter on device bond8 [ 586.623838][T23195] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20004 [ 586.817679][T23206] netlink: 'syz.2.4619': attribute type 2 has an invalid length. [ 586.830884][T23206] tipc: Started in network mode [ 586.835896][T23206] tipc: Node identity 340008, cluster identity 4711 [ 586.844101][T23206] tipc: Node number set to 3407880 [ 587.070853][T23220] netlink: 'syz.3.4625': attribute type 1 has an invalid length. [ 587.137107][T23220] bond4: entered promiscuous mode [ 587.162108][T23220] 8021q: adding VLAN 0 to HW filter on device bond4 [ 587.640491][T23251] syzkaller0: entered promiscuous mode [ 587.646044][T23251] syzkaller0: entered allmulticast mode [ 588.045773][T23265] Bluetooth: MGMT ver 1.23 [ 588.320857][T23278] tipc: Enabling of bearer rejected, already enabled [ 588.619635][T23287] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 588.632425][T23287] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 589.031208][T23323] __nla_validate_parse: 55 callbacks suppressed [ 589.031233][T23323] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.4654'. [ 589.118524][T23329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4655'. [ 589.550716][T23347] delete_channel: no stack [ 589.647865][T23346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 590.379440][T23392] netlink: 'syz.2.4676': attribute type 5 has an invalid length. [ 590.405980][T23391] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4678'. [ 590.765007][T23399] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 590.781191][T23401] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 590.798296][T23399] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 590.990760][T23409] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4683'. [ 591.000260][T23409] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 591.011477][T23405] bond7 (unregistering): Released all slaves [ 591.027851][T23419] xt_hashlimit: size too large, truncated to 1048576 [ 591.124987][T23417] bond7 (unregistering): Released all slaves [ 591.349679][T23433] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4688'. [ 591.630840][T23444] netlink: 'syz.3.4692': attribute type 8 has an invalid length. [ 591.660328][T23444] netlink: 'syz.3.4692': attribute type 4 has an invalid length. [ 591.689077][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4692'. [ 591.705585][T23444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4692'. [ 591.743349][T23451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.743735][T23453] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4693'. [ 592.052870][T23465] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4698'. [ 592.133692][T23468] netlink: 'syz.3.4701': attribute type 2 has an invalid length. [ 592.167582][T23468] : entered promiscuous mode [ 592.221269][T23468] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4701'. [ 592.471190][ T3096] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 592.558710][ T5928] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 592.667994][T23482] tipc: Resetting bearer [ 592.830158][T23482] tipc: Resetting bearer [ 593.039917][T16918] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 593.289303][T23530] tipc: Invalid UDP bearer configuration [ 593.289368][T23530] tipc: Enabling of bearer rejected, failed to enable media [ 593.309292][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 593.444963][T23535] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 593.536528][T23535] bond7: option resend_igmp: invalid value (2878) [ 593.546381][T23535] bond7: option resend_igmp: allowed values 0 - 255 [ 593.577837][T23535] bond7 (unregistering): Released all slaves [ 593.611578][T23541] netlink: 'syz.1.4717': attribute type 29 has an invalid length. [ 593.668917][T23544] netlink: 'syz.1.4717': attribute type 29 has an invalid length. [ 593.683810][T23534] mac80211_hwsim hwsim41 wlan1: left allmulticast mode [ 593.735874][T23544] openvswitch: netlink: Flow actions attr not present in new flow. [ 594.150769][T16918] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 594.176051][T16918] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 594.356949][T23583] __nla_validate_parse: 8 callbacks suppressed [ 594.356985][T23583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4726'. [ 594.416514][T23585] netlink: 'syz.4.4727': attribute type 16 has an invalid length. [ 594.425390][T23583] vlan0: entered promiscuous mode [ 594.431251][T18296] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 594.444934][T23585] netlink: 'syz.4.4727': attribute type 17 has an invalid length. [ 594.459145][T23592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4729'. [ 594.537947][T23585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 594.604893][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4731'. [ 594.619833][ T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 594.660412][T18296] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 594.824075][T23607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4733'. [ 594.959021][T23609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4732'. [ 595.330624][T23635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 595.331819][T23634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4735'. [ 595.409484][ T55] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.418879][T23634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4735'. [ 595.438179][ T55] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.472139][T16917] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.486857][T16917] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 595.517126][T23644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4736'. [ 596.248961][T23677] netlink: 87 bytes leftover after parsing attributes in process `syz.1.4748'. [ 596.614043][T23697] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4751'. [ 596.902532][T23718] ip6erspan1: entered allmulticast mode [ 597.218898][T23695] syzkaller0: entered promiscuous mode [ 597.224541][T23695] syzkaller0: entered allmulticast mode [ 597.868922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.877894][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 599.771644][T23774] netlink: 'syz.0.4763': attribute type 1 has an invalid length. [ 599.798554][T23774] __nla_validate_parse: 2 callbacks suppressed [ 599.798578][T23774] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4763'. [ 600.259227][T23802] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4767'. [ 601.176100][T23795] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 601.274364][T23822] x_tables: duplicate underflow at hook 1 [ 602.305224][T23848] netlink: 'syz.4.4774': attribute type 5 has an invalid length. [ 603.023308][T23869] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 603.409031][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4786'. [ 603.714396][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4788'. [ 603.724052][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4788'. [ 603.834856][T23887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4786'. [ 604.513637][T23908] netlink: 'syz.4.4793': attribute type 5 has an invalid length. [ 604.771349][T23911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4793'. [ 604.782739][T23911] IPv6: NLM_F_CREATE should be specified when creating new route [ 605.244285][T23916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.374585][T23822] Set syz1 is full, maxelem 65536 reached [ 605.390969][T23924] netlink: 'syz.2.4797': attribute type 4 has an invalid length. [ 605.446749][T23923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4798'. [ 605.458631][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 605.613625][T23931] vlan3: entered promiscuous mode [ 605.642778][T23923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4798'. [ 605.803706][T23938] veth1_macvtap: renamed from veth0_vlan [ 606.143550][T23954] bond7: option mode: invalid value (254) [ 606.153311][T23954] bond7 (unregistering): Released all slaves [ 606.220716][T23967] netlink: 'syz.0.4812': attribute type 10 has an invalid length. [ 606.257260][T23967] team0 (unregistering): Port device team_slave_0 removed [ 606.296890][T23967] team0 (unregistering): Port device team_slave_1 removed [ 606.343615][T23969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4812'. [ 606.705621][T23996] x_tables: duplicate underflow at hook 1 [ 607.566759][ T5489] veth1_macvtap: left promiscuous mode [ 607.630817][ T5489] veth1_macvtap: entered promiscuous mode [ 607.692276][ T5836] Bluetooth: hci1: link tx timeout [ 607.697481][ T5836] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 607.734410][T24036] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 607.888222][T24056] FAULT_INJECTION: forcing a failure. [ 607.888222][T24056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.919439][T24056] CPU: 0 UID: 0 PID: 24056 Comm: syz.1.4837 Not tainted syzkaller #0 PREEMPT(full) [ 607.919471][T24056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 607.919484][T24056] Call Trace: [ 607.919493][T24056] [ 607.919503][T24056] dump_stack_lvl+0xe8/0x150 [ 607.919539][T24056] should_fail_ex+0x412/0x560 [ 607.919577][T24056] _copy_from_iter+0x1d3/0x1670 [ 607.919606][T24056] ? txopt_get+0x79/0x3f0 [ 607.919635][T24056] ? txopt_get+0x79/0x3f0 [ 607.919661][T24056] ? txopt_get+0x79/0x3f0 [ 607.919689][T24056] ? __pfx__copy_from_iter+0x10/0x10 [ 607.919708][T24056] ? txopt_get+0x343/0x3f0 [ 607.919740][T24056] ? __pfx_txopt_get+0x10/0x10 [ 607.919770][T24056] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 607.919799][T24056] ? tomoyo_check_inet_address+0x289/0x950 [ 607.919829][T24056] rawv6_sendmsg+0xbbd/0x18e0 [ 607.919881][T24056] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 607.919923][T24056] ? aa_sk_perm+0x6d5/0x900 [ 607.919961][T24056] ? __pfx_aa_sk_perm+0x10/0x10 [ 607.919994][T24056] ? sock_rps_record_flow+0x19/0x350 [ 607.920026][T24056] ? inet_sendmsg+0x2f4/0x370 [ 607.920044][T24056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 607.920073][T24056] ____sys_sendmsg+0x80a/0x9f0 [ 607.920115][T24056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.920156][T24056] ? import_iovec+0x73/0xa0 [ 607.920185][T24056] ___sys_sendmsg+0x2a5/0x360 [ 607.920223][T24056] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.920293][T24056] ? __fget_files+0x2a/0x420 [ 607.920313][T24056] ? __fget_files+0x3a0/0x420 [ 607.920344][T24056] __x64_sys_sendmsg+0x1bd/0x2a0 [ 607.920378][T24056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 607.920420][T24056] ? __pfx_ksys_write+0x10/0x10 [ 607.920457][T24056] do_syscall_64+0x14d/0xf80 [ 607.920483][T24056] ? trace_irq_disable+0x3b/0x150 [ 607.920501][T24056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.920523][T24056] ? clear_bhb_loop+0x40/0x90 [ 607.920570][T24056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.920590][T24056] RIP: 0033:0x7f600459c819 [ 607.920611][T24056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.920629][T24056] RSP: 002b:00007f6005436028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.920652][T24056] RAX: ffffffffffffffda RBX: 00007f6004815fa0 RCX: 00007f600459c819 [ 607.920668][T24056] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 607.920682][T24056] RBP: 00007f6005436090 R08: 0000000000000000 R09: 0000000000000000 [ 607.920695][T24056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.920709][T24056] R13: 00007f6004816038 R14: 00007f6004815fa0 R15: 00007ffcf5d7ba48 [ 607.920743][T24056] [ 608.319946][T24062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4838'. [ 608.723982][T24079] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4843'. [ 609.052403][T24099] FAULT_INJECTION: forcing a failure. [ 609.052403][T24099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.158604][T24099] CPU: 1 UID: 0 PID: 24099 Comm: syz.2.4846 Not tainted syzkaller #0 PREEMPT(full) [ 609.158636][T24099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 609.158648][T24099] Call Trace: [ 609.158658][T24099] [ 609.158667][T24099] dump_stack_lvl+0xe8/0x150 [ 609.158828][T24099] should_fail_ex+0x412/0x560 [ 609.158867][T24099] _copy_to_user+0x31/0xb0 [ 609.158901][T24099] simple_read_from_buffer+0xe1/0x170 [ 609.158938][T24099] proc_fail_nth_read+0x1bb/0x230 [ 609.158973][T24099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.159008][T24099] ? rw_verify_area+0x2a6/0x4d0 [ 609.159031][T24099] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.159063][T24099] vfs_read+0x20c/0xa70 [ 609.159085][T24099] ? fdget_pos+0x246/0x320 [ 609.159111][T24099] ? __pfx___mutex_lock+0x10/0x10 [ 609.159138][T24099] ? __pfx_vfs_read+0x10/0x10 [ 609.159163][T24099] ? __fget_files+0x2a/0x420 [ 609.159187][T24099] ? __fget_files+0x3a0/0x420 [ 609.159206][T24099] ? __fget_files+0x2a/0x420 [ 609.159233][T24099] ksys_read+0x150/0x270 [ 609.159257][T24099] ? __pfx_ksys_read+0x10/0x10 [ 609.159292][T24099] do_syscall_64+0x14d/0xf80 [ 609.159315][T24099] ? trace_irq_disable+0x3b/0x150 [ 609.159334][T24099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.159355][T24099] ? clear_bhb_loop+0x40/0x90 [ 609.159381][T24099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.159401][T24099] RIP: 0033:0x7fc69475d04e [ 609.159422][T24099] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 609.159441][T24099] RSP: 002b:00007fc6956b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 609.159465][T24099] RAX: ffffffffffffffda RBX: 00007fc6956b66c0 RCX: 00007fc69475d04e [ 609.159480][T24099] RDX: 000000000000000f RSI: 00007fc6956b60a0 RDI: 0000000000000009 [ 609.159493][T24099] RBP: 00007fc6956b6090 R08: 0000000000000000 R09: 0000000000000000 [ 609.159506][T24099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.159518][T24099] R13: 00007fc694a16128 R14: 00007fc694a16090 R15: 00007ffefec8b9d8 [ 609.159553][T24099] [ 609.441049][T24100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4848'. [ 609.461633][T24100] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4848'. [ 609.779780][T21593] Bluetooth: hci1: command 0x040f tx timeout [ 610.217650][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4857'. [ 610.282953][T24130] macvlan4: entered allmulticast mode [ 610.308572][T24130] hsr0: entered allmulticast mode [ 610.328170][T24130] hsr_slave_0: entered allmulticast mode [ 610.348528][T24130] hsr_slave_1: entered allmulticast mode [ 610.362279][T24130] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 610.606908][T24148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4860'. [ 610.636968][T24148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4860'. [ 610.759250][T24157] netlink: 'syz.0.4861': attribute type 1 has an invalid length. [ 611.040930][T24167] netlink: 'syz.1.4864': attribute type 58 has an invalid length. [ 611.049852][T24167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4864'. [ 611.356315][T24167] netlink: 'syz.1.4864': attribute type 29 has an invalid length. [ 612.145564][T24189] "syz.1.4865" (24189) uses obsolete ecb(arc4) skcipher [ 612.173504][T24189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4865'. [ 612.183004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.202741][T24189] netlink: 'syz.1.4865': attribute type 1 has an invalid length. [ 612.216547][T24189] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4865'. [ 613.123215][T24222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4867'. [ 613.354393][T24146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.593152][T24238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4870'. [ 613.753697][T24247] netlink: 'syz.0.4873': attribute type 1 has an invalid length. [ 613.773765][T24251] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4874'. [ 613.883998][T24260] netlink: 'syz.3.4874': attribute type 3 has an invalid length. [ 613.892920][T24257] wg2: entered allmulticast mode [ 613.919393][T24257] sctp: [Deprecated]: syz.1.4876 (pid 24257) Use of int in max_burst socket option. [ 613.919393][T24257] Use struct sctp_assoc_value instead [ 613.921934][T24251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.971124][T24251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.986477][T24251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.996132][T24260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.006327][T24260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.060412][T24264] netlink: 'syz.1.4878': attribute type 1 has an invalid length. [ 614.096312][T24264] netlink: 'syz.1.4878': attribute type 2 has an invalid length. [ 614.120070][T24271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4878'. [ 614.140983][T24267] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4879'. [ 614.145223][T24264] netlink: 'syz.1.4878': attribute type 2 has an invalid length. [ 614.224467][T24264] netlink: 'syz.1.4878': attribute type 2 has an invalid length. [ 615.116138][T24323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.184838][T24323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.196601][T24323] bond0 (unregistering): Released all slaves [ 615.302267][T24339] syzkaller1: entered promiscuous mode [ 615.307817][T24339] syzkaller1: entered allmulticast mode [ 615.869736][T24348] bond0 (unregistering): Released all slaves [ 616.343400][T24381] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 616.371749][T24381] bond0 (unregistering): Released all slaves [ 616.488195][T24396] validate_nla: 5 callbacks suppressed [ 616.488218][T24396] netlink: 'syz.2.4910': attribute type 4 has an invalid length. [ 616.775995][T24391] geneve2: entered promiscuous mode [ 616.796834][T24391] geneve2: entered allmulticast mode [ 616.810903][T24393] __nla_validate_parse: 12 callbacks suppressed [ 616.810925][T24393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4910'. [ 616.828266][T24393] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4910'. [ 616.850272][T24397] netlink: 'syz.2.4910': attribute type 12 has an invalid length. [ 616.866294][T24399] mac80211_hwsim hwsim52 ªªªªª;: renamed from wlan0 [ 617.325123][T24432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4920'. [ 617.425593][T24438] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 617.469616][T24439] team0 (unregistering): Port device C removed [ 617.493049][T24439] team0 (unregistering): Port device team_slave_1 removed [ 617.512491][T24444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4921'. [ 617.565046][T24438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4921'. [ 617.587915][T24449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4923'. [ 617.856835][T24464] bond0: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 617.869371][T24464] bond0 (unregistering): Released all slaves [ 618.286821][T24485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4934'. [ 618.638322][T24496] netlink: 'syz.4.4940': attribute type 5 has an invalid length. [ 618.680917][T24496] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4940'. [ 618.972241][T24523] sctp: [Deprecated]: syz.4.4948 (pid 24523) Use of int in max_burst socket option. [ 618.972241][T24523] Use struct sctp_assoc_value instead [ 619.029055][T24523] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4948'. [ 619.086111][T24528] IPVS: set_ctl: invalid protocol: 44 0.0.0.2:0 [ 619.257196][T24540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4954'. [ 619.358802][T24540] 8021q: adding VLAN 0 to HW filter on device bond5 [ 619.486700][T24551] bond5: (slave veth5): Enslaving as an active interface with an up link [ 619.513465][T24555] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 619.523346][T24555] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 619.737385][T24574] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 619.765015][T24574] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 620.393856][T24604] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 620.562815][T24620] netlink: zone id is out of range [ 620.666417][T24623] syzkaller1: entered promiscuous mode [ 620.675989][T24623] syzkaller1: entered allmulticast mode [ 620.818765][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 621.667657][T24697] netlink: 'syz.4.4998': attribute type 1 has an invalid length. [ 621.761944][T24697] bond0 (unregistering): Released all slaves [ 621.834222][T24711] netlink: 'syz.0.5001': attribute type 12 has an invalid length. [ 622.045575][T24724] __nla_validate_parse: 5 callbacks suppressed [ 622.045598][T24724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5005'. [ 622.083452][T24724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.415264][T24747] netlink: 'syz.0.5012': attribute type 11 has an invalid length. [ 622.600742][T24753] netlink: 'syz.1.5014': attribute type 2 has an invalid length. [ 622.615615][T24755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5015'. [ 622.636788][T24755] bond0: Unable to set up delay as MII monitoring is disabled [ 622.673864][T24753] netlink: 'syz.1.5014': attribute type 2 has an invalid length. [ 622.919256][T24774] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5021'. [ 623.019485][T24780] dummy0: entered promiscuous mode [ 623.024737][T24780] dummy0: entered allmulticast mode [ 623.246291][T24799] netlink: 'syz.2.5026': attribute type 3 has an invalid length. [ 623.257861][T24794] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.433014][T24794] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.530972][T24794] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.668846][T24817] netlink: 596 bytes leftover after parsing attributes in process `syz.4.5031'. [ 623.844243][T24794] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.885643][T24814] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 623.894844][T24814] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 623.959571][T24822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.020208][T24822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.049173][T24822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.105799][ T6682] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.111303][T24822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.157761][ T105] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.181413][T24822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.232647][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.379851][T16917] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.541793][T24822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.836380][T24871] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5042'. [ 624.882361][T24875] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5042'. [ 625.122757][T24885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.131888][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.564910][ T29] audit: type=1107 audit(1776229785.055:11): pid=24892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 625.649409][T24896] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5048'. [ 625.700903][T24898] tipc: Failed to remove unknown binding: 66,1,1/1231110221:1589845057/1589845059 [ 625.721441][T24896] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5048'. [ 625.747342][T24902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.757192][T24896] 0ªî{X¹¦: renamed from gretap0 [ 625.766745][T24896] 0ªî{X¹¦: left promiscuous mode [ 625.790907][T24896] 0ªî{X¹¦: entered allmulticast mode [ 625.807976][T24896] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 625.916899][T24907] netlink: 'syz.2.5052': attribute type 1 has an invalid length. [ 625.957734][T24906] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5051'. [ 626.578654][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 626.864376][T24964] netlink: 'syz.2.5063': attribute type 8 has an invalid length. [ 627.136294][T24981] SET target dimension over the limit! [ 627.174422][T24984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5069'. [ 627.194816][T24984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5069'. [ 627.231588][T24984] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5069'. [ 627.248821][T24984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5069'. [ 627.268949][T24987] netlink: 'syz.1.5070': attribute type 2 has an invalid length. [ 627.304077][T24987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5070'. [ 627.665288][T25003] netlink: 364 bytes leftover after parsing attributes in process `syz.2.5072'. [ 628.058057][T25012] netlink: 'syz.2.5075': attribute type 13 has an invalid length. [ 628.066170][T25012] netlink: 'syz.2.5075': attribute type 17 has an invalid length. [ 628.103119][T25012] 0ªî{X¹¦: left allmulticast mode [ 628.305972][T25023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.338658][T25023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.355837][T25012] bridge0: left promiscuous mode [ 628.438810][T25023] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.441555][T25012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.483736][T25028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.512658][T25012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 628.512725][T25028] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.168757][T25048] debugfs: 'netdev:syzkaller0' already exists in 'phy36' [ 629.341527][T25048] netlink: 'syz.2.5083': attribute type 2 has an invalid length. [ 629.498033][T25055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5084'. [ 629.527498][T25055] tipc: Enabled bearer , priority 10 [ 629.980156][T25071] netlink: 'syz.2.5088': attribute type 1 has an invalid length. [ 630.157204][T25074] bond5: entered promiscuous mode [ 630.163101][T25074] bond5: entered allmulticast mode [ 630.169012][T25074] 8021q: adding VLAN 0 to HW filter on device bond5 [ 630.210056][T25081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5090'. [ 630.270200][T25077] veth5: entered promiscuous mode [ 630.275647][T25077] veth5: entered allmulticast mode [ 630.286489][T25077] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 630.418278][T25071] veth7: entered promiscuous mode [ 630.424896][T25071] veth7: entered allmulticast mode [ 630.433808][T25071] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 630.450439][T25096] x_tables: unsorted entry at hook 3 [ 630.495779][T25091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5093'. [ 630.559860][T25091] netlink: 'syz.1.5093': attribute type 10 has an invalid length. [ 630.609200][T25091] bond0: (slave wlan1): Opening slave failed [ 630.640557][ T10] tipc: Node number set to 1914531387 [ 630.814317][T25117] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5103'. [ 630.869189][T25117] 0ªX¹¦À: renamed from caif0 [ 630.901329][T25117] 0ªX¹¦À: entered allmulticast mode [ 630.914419][T25117] net_ratelimit: 6 callbacks suppressed [ 630.914439][T25117] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 630.999378][T25125] netlink: 'syz.4.5106': attribute type 8 has an invalid length. [ 631.045008][T25123] netlink: 'syz.3.5105': attribute type 1 has an invalid length. [ 631.089451][T25123] netlink: 'syz.3.5105': attribute type 2 has an invalid length. [ 631.157939][T25129] 8021q: adding VLAN 0 to HW filter on device bond6 [ 631.222671][T25129] bond6: (slave geneve2): making interface the new active one [ 631.234645][T25129] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 631.246958][ T6666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.278742][ T6666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.307747][ T6666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.341045][ T6666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.604808][T25155] 8021q: VLANs not supported on nlmon0 [ 631.659746][T25156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.787640][T25156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 631.829940][T25163] openvswitch: netlink: Missing key (keys=40, expected=100) [ 631.904877][T25156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.006986][T25156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.177353][T24954] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.196632][T25179] validate_nla: 5 callbacks suppressed [ 632.196654][T25179] netlink: 'syz.0.5122': attribute type 2 has an invalid length. [ 632.260228][T24949] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.307507][T24948] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.322516][T25183] netlink: 'syz.1.5124': attribute type 4 has an invalid length. [ 632.351314][T25184] __nla_validate_parse: 6 callbacks suppressed [ 632.351335][T25184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5123'. [ 632.373092][T24948] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.382582][T25184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5123'. [ 632.401961][T25187] netlink: 'syz.1.5124': attribute type 4 has an invalid length. [ 632.480741][T25183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5124'. [ 632.626157][T25203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5127'. [ 632.682277][ T5836] block nbd3: Receive control failed (result -1) [ 632.796275][T25203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.834821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.897809][T25203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.946176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.026713][T25208] wg2: left allmulticast mode [ 633.072837][T25222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.093126][T25208] .70·: left allmulticast mode [ 633.118584][T25208] hsr_slave_0: left allmulticast mode [ 633.127501][T25208] hsr_slave_1: left allmulticast mode [ 633.154436][T25208] hsr1: left promiscuous mode [ 633.171248][T25208] mac80211_hwsim hwsim30 syzkaller0: left promiscuous mode [ 633.180107][T25208] mac80211_hwsim hwsim30 syzkaller0: left allmulticast mode [ 633.288858][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.337766][T25208] geneve2: left allmulticast mode [ 633.353136][T25208] bond5: left promiscuous mode [ 633.358202][T25208] bond6: left promiscuous mode [ 633.366194][T25201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.401061][T25208] bond7: left allmulticast mode [ 633.416582][T25208] ip6erspan1: left allmulticast mode [ 633.484833][ T6666] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.512126][ T6666] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.590905][ T6666] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.605851][ T6666] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.638123][ T10] IPVS: starting estimator thread 0... [ 633.728531][T25251] IPVS: using max 28 ests per chain, 67200 per kthread [ 633.911349][T25262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 634.126572][T25266] netlink: 'syz.4.5142': attribute type 21 has an invalid length. [ 634.182596][T25268] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 634.204137][T25266] netlink: 'syz.4.5142': attribute type 32 has an invalid length. [ 634.748873][T25246] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5138'. [ 635.175654][T25308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5151'. [ 635.635456][T25329] netlink: 'syz.2.5160': attribute type 1 has an invalid length. [ 635.816583][T25331] veth9: entered promiscuous mode [ 635.910682][T25338] netlink: 'syz.1.5162': attribute type 11 has an invalid length. [ 636.391993][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5167'. [ 636.409474][T25366] ip6gretap3: entered allmulticast mode [ 636.417610][T25366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5167'. [ 636.633875][T25381] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5174'. [ 636.646323][T25381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5174'. [ 636.730366][T25391] netlink: 'syz.1.5178': attribute type 9 has an invalid length. [ 637.020572][T25408] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 637.594575][T25432] __nla_validate_parse: 2 callbacks suppressed [ 637.594598][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5188'. [ 637.883589][T25443] netlink: 'syz.2.5191': attribute type 11 has an invalid length. [ 637.897593][T25443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5191'. [ 639.292479][T25495] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 639.305727][T25495] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 639.409577][T25499] batadv_slave_1: entered promiscuous mode [ 639.454713][T25500] batadv_slave_1: left promiscuous mode [ 639.463574][T25507] net_ratelimit: 5 callbacks suppressed [ 639.463596][T25507] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 639.684646][T25522] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 639.711942][T25522] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 639.728048][T25528] xt_CT: You must specify a L4 protocol and not use inversions on it [ 640.071233][T25541] syzkaller0: entered promiscuous mode [ 640.076936][T25541] syzkaller0: entered allmulticast mode [ 640.229206][T25548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5213'. [ 642.720425][T25565] netlink: 'syz.0.5221': attribute type 1 has an invalid length. [ 642.971009][T25580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 643.022299][T25583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5225'. [ 643.196238][T25595] syz_tun: entered allmulticast mode [ 643.207925][T25595] syz_tun: left allmulticast mode [ 643.252570][T25598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5230'. [ 643.279279][T25598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5230'. [ 643.302608][T25598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5230'. [ 643.522439][T25619] netlink: 'syz.0.5238': attribute type 50 has an invalid length. [ 643.528778][T25614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5236'. [ 643.531733][T25619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5238'. [ 643.562441][T25614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5236'. [ 643.600460][T25624] netlink: 'syz.2.5240': attribute type 1 has an invalid length. [ 643.616808][T25624] netlink: 732 bytes leftover after parsing attributes in process `syz.2.5240'. [ 643.628283][T25624] netlink: 'syz.2.5240': attribute type 1 has an invalid length. [ 643.692449][T25627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.700940][T25624] rdma_rxe: rxe_newlink: failed to add lo [ 644.035301][T25648] xt_CONNSECMARK: invalid mode: 254 [ 644.051995][T25642] tipc: Invalid UDP bearer configuration [ 644.052064][T25642] tipc: Enabling of bearer rejected, failed to enable media [ 644.101728][T25650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5248'. [ 644.189070][T25650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5248'. [ 644.264773][T25654] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 646.615498][T25727] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 646.673923][T25734] netlink: 'syz.2.5272': attribute type 1 has an invalid length. [ 646.770878][T25739] netlink: 'syz.0.5275': attribute type 1 has an invalid length. [ 646.782697][T25740] netlink: 'syz.0.5275': attribute type 1 has an invalid length. [ 646.816017][T25739] netlink: 'syz.0.5275': attribute type 1 has an invalid length. [ 646.837562][T25739] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 646.940565][T25742] Set syz1 is full, maxelem 65536 reached [ 647.017195][T25755] netlink: 'syz.0.5279': attribute type 3 has an invalid length. [ 647.266862][T25775] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 647.276691][T25775] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 647.296430][T25777] netlink: 'syz.2.5284': attribute type 1 has an invalid length. [ 647.325158][T25777] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 647.891256][T25806] openvswitch: netlink: Message has 584 unknown bytes. [ 647.935376][T25806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 648.124686][T25817] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 648.178748][T25819] __nla_validate_parse: 10 callbacks suppressed [ 648.178771][T25819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5295'. [ 648.239260][T25819] netlink: 'syz.0.5295': attribute type 2 has an invalid length. [ 648.247318][T25819] netlink: 119 bytes leftover after parsing attributes in process `syz.0.5295'. [ 648.540828][ T5836] block nbd4: Receive control failed (result -32) [ 648.791265][T25846] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 648.813581][T24949] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 648.832605][T24949] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 648.840664][T18297] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 648.873255][T25854] syz_tun: entered promiscuous mode [ 648.889137][T25854] macvtap1: entered promiscuous mode [ 648.896868][T25854] macvtap1: entered allmulticast mode [ 648.912684][T25854] syz_tun: left promiscuous mode [ 648.954371][T18297] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 648.982716][T25852] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 648.986735][T25864] openvswitch: netlink: IP tunnel dst address not specified [ 649.032983][T25860] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 649.220654][T25883] Cannot find del_set index 3 as target [ 649.399213][T25894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5317'. [ 649.438725][T18297] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 649.549626][T25905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5322'. [ 649.865755][T25926] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 650.041546][T25939] sctp: [Deprecated]: syz.4.5330 (pid 25939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 650.041546][T25939] Use struct sctp_sack_info instead [ 650.259036][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 650.509889][T25976] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 650.520327][T25981] bridge0: port 1(syz_tun) entered blocking state [ 650.527123][T25981] bridge0: port 1(syz_tun) entered disabled state [ 650.535383][T25981] syz_tun: entered allmulticast mode [ 650.543942][T25981] syz_tun: entered promiscuous mode [ 650.669093][T25988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5345'. [ 650.821132][T26000] validate_nla: 1 callbacks suppressed [ 650.821155][T26000] netlink: 'syz.1.5347': attribute type 4 has an invalid length. [ 650.875936][T26002] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5347'. [ 651.059555][T26009] netlink: 'syz.0.5349': attribute type 1 has an invalid length. [ 651.083100][T26009] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5349'. [ 651.142257][T26011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5350'. [ 651.164700][T26011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5350'. [ 651.370427][T26011] veth5: entered allmulticast mode [ 651.382586][T26011] bond0: (slave veth5): Enslaving as an active interface with an up link [ 651.397537][T26017] bond0 (unregistering): (slave veth5): Releasing backup interface [ 651.409186][T26017] bond0 (unregistering): Released all slaves [ 651.581633][T26032] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 651.647362][T26035] netlink: 'syz.3.5356': attribute type 35 has an invalid length. [ 651.921854][T26039] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 652.129938][T26060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5362'. [ 652.658702][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 652.759950][T26079] openvswitch: netlink: nsh attr 1647 is out of range max 3 [ 652.803747][ T6666] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.819532][ T6666] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.848465][ T6666] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.873205][ T6666] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.021975][T26101] bridge6: entered promiscuous mode [ 653.027862][T26101] bridge6: entered allmulticast mode [ 653.037334][T26101] team0: Port device bridge6 added [ 653.053561][T26114] netlink: 'syz.2.5378': attribute type 10 has an invalid length. [ 653.064839][T26101] bridge0: port 1(team0) entered blocking state [ 653.071957][T26101] bridge0: port 1(team0) entered disabled state [ 653.079446][T26101] team0: entered allmulticast mode [ 653.084784][T26101] bridge2: entered allmulticast mode [ 653.090671][T26101] bridge3: entered allmulticast mode [ 653.098151][T26101] team0: entered promiscuous mode [ 653.104089][T26101] bridge2: entered promiscuous mode [ 653.110447][T26101] bridge3: entered promiscuous mode [ 653.249334][T26124] __nla_validate_parse: 1 callbacks suppressed [ 653.249358][T26124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5379'. [ 653.312242][T26119] netlink: 'syz.2.5379': attribute type 4 has an invalid length. [ 653.323258][T26119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5379'. [ 653.377724][T26129] netlink: 'syz.2.5382': attribute type 8 has an invalid length. [ 655.926561][T26145] delete_channel: no stack [ 655.951799][T26106] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 656.319373][T26169] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 656.621052][T26192] netlink: 'syz.2.5398': attribute type 13 has an invalid length. [ 656.646785][T26192] netlink: 'syz.2.5398': attribute type 17 has an invalid length. [ 656.677384][T26192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.705237][T26196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5398'. [ 657.040011][T26207] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5402'. [ 657.213025][T26219] netlink: 'syz.2.5404': attribute type 1 has an invalid length. [ 657.237769][T26218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5405'. [ 657.260520][T26219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5404'. [ 657.281961][T26218] netlink: 'syz.1.5405': attribute type 8 has an invalid length. [ 657.466042][T26239] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5410'. [ 657.610699][T26248] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5412'. [ 657.638195][T26248] ip6gre1: entered promiscuous mode [ 657.672222][T26248] ip6gre1: entered allmulticast mode [ 657.685222][T26249] netlink: 'syz.2.5412': attribute type 6 has an invalid length. [ 657.693322][T26249] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5412'. [ 657.808495][T26254] netlink: 'syz.4.5415': attribute type 10 has an invalid length. [ 657.901556][T26254] syz_tun: entered promiscuous mode [ 658.011431][T26267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5417'. [ 658.048239][T26260] bond8: invalid ARP target 0.0.0.0 specified for addition [ 658.052826][T26267] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 658.058395][T26260] bond8: option arp_ip_target: invalid value (0) [ 658.085425][T26260] bond8 (unregistering): Released all slaves [ 658.212339][T26279] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 658.410704][T26290] tipc: Enabling of bearer rejected, failed to enable media [ 658.623039][T26304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5429'. [ 658.661144][T26304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5429'. [ 658.696419][T26302] netlink: 'syz.0.5427': attribute type 1 has an invalid length. [ 658.760058][T26302] bond8: entered promiscuous mode [ 658.768143][T26302] 8021q: adding VLAN 0 to HW filter on device bond8 [ 658.779821][T26261] delete_channel: no stack [ 658.838135][T26310] netlink: 'syz.3.5430': attribute type 10 has an invalid length. [ 658.858592][T26310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5430'. [ 658.870222][T26311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5429'. [ 658.909850][T26302] bond8: (slave bridge4): making interface the new active one [ 658.918215][T26302] bridge4: entered promiscuous mode [ 658.926762][T26302] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 658.927764][T26310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5430'. [ 658.964430][T26310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5430'. [ 659.194993][T26322] netlink: 'syz.0.5432': attribute type 3 has an invalid length. [ 659.205300][T26322] netlink: 'syz.0.5432': attribute type 3 has an invalid length. [ 659.366167][T26335] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5437'. [ 659.457000][T26341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5439'. [ 659.504695][T24950] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.540904][T24950] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.559522][T24950] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.577990][T24950] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.668219][T26349] bridge0: port 3(erspan0) entered blocking state [ 659.714447][T26349] bridge0: port 3(erspan0) entered disabled state [ 659.724014][T26349] erspan0: entered allmulticast mode [ 659.747950][T26349] erspan0: entered promiscuous mode [ 659.767890][T26349] bridge0: port 3(erspan0) entered blocking state [ 659.774693][T26349] bridge0: port 3(erspan0) entered forwarding state [ 659.809922][T26352] erspan0: left allmulticast mode [ 659.817614][T26352] erspan0: left promiscuous mode [ 659.823628][T26352] bridge0: port 3(erspan0) entered disabled state [ 659.911145][T26351] : option downdelay: invalid value (18446744073709547007) [ 659.929341][T26351] : option downdelay: allowed values 0 - 2147483647 [ 659.943382][T26351]  (unregistering): Released all slaves [ 660.175001][T26367] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5447'. [ 660.209614][T26363] vlan3: entered promiscuous mode [ 660.380832][T26378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5451'. [ 660.508937][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 660.769129][T26397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.509508][T26434] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 661.915030][T26462] xt_bpf: check failed: parse error [ 662.062800][T26464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.631337][T26483] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 662.916888][T26492] "syz.4.5486" (26492) uses obsolete ecb(arc4) skcipher [ 662.933984][T26491] validate_nla: 4 callbacks suppressed [ 662.934006][T26491] netlink: 'syz.3.5487': attribute type 1 has an invalid length. [ 663.031483][T26491] 8021q: adding VLAN 0 to HW filter on device bond6 [ 663.059406][ T5836] Bluetooth: hci3: command 0x040f tx timeout [ 663.115414][T26499] bond7: entered promiscuous mode [ 663.121134][T26499] 8021q: adding VLAN 0 to HW filter on device bond7 [ 663.150138][T26506] 8021q: adding VLAN 0 to HW filter on device bond7 [ 663.198897][T26506] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 663.235741][T26506] bond7: (slave ip6gre2): Error -95 calling set_mac_address [ 663.292901][T26501] bond6: (slave dummy0): making interface the new active one [ 663.320806][T26501] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 663.443831][T26521] netlink: 'syz.4.5494': attribute type 11 has an invalid length. [ 663.504441][T26525] pim6reg: entered allmulticast mode [ 663.640219][T26525] pim6reg: left allmulticast mode [ 663.735600][T26540] netlink: 'syz.2.5501': attribute type 10 has an invalid length. [ 663.746395][T26540] __nla_validate_parse: 21 callbacks suppressed [ 663.746420][T26540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5501'. [ 663.848795][T26545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5503'. [ 663.890166][T26549] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 663.946178][T26550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5504'. [ 663.968298][T26550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.197862][T26565] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 664.216705][T26570] netlink: 'syz.0.5507': attribute type 1 has an invalid length. [ 665.003411][T26612] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5520'. [ 665.468088][T26621] bond9: (slave bond_slave_1): Device is not bonding slave [ 665.475781][T26621] bond9: option active_slave: invalid value (bond_slave_1) [ 665.507918][T26621] bond9 (unregistering): Released all slaves [ 665.789400][T26639] netlink: 'syz.2.5526': attribute type 1 has an invalid length. [ 665.936626][T26644] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 666.071424][T26653] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 666.078963][T26653] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 666.362184][T26661] bond8: Removing last ns target with arp_interval on [ 666.399910][T26671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5535'. [ 666.605946][T26675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5536'. [ 666.661114][T26675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5536'. [ 666.706513][T26675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5536'. [ 667.445517][ T6666] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.461998][ T6666] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.492709][ T6666] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.502694][ T6666] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.570060][T26734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5553'. [ 667.579446][T26734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5553'. [ 668.215837][T26767] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.260830][T26767] netlink: 'syz.2.5564': attribute type 1 has an invalid length. [ 668.357001][T26774] gretap0: entered allmulticast mode [ 668.375969][T26774] bond9: (slave gretap0): making interface the new active one [ 668.406086][T26774] bond9: (slave gretap0): Enslaving as an active interface with an up link [ 668.421310][T26780] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 668.555368][T26788] 8021q: VLANs not supported on vcan0 [ 668.801214][T26800] __nla_validate_parse: 2 callbacks suppressed [ 668.801238][T26800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5576'. [ 669.114145][T26814] xt_time: unknown flags 0xf4 [ 669.441505][T26838] netlink: 'syz.3.5589': attribute type 15 has an invalid length. [ 669.906159][T26851] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5593'. [ 669.918673][T26851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5593'. [ 670.083268][T26857] netlink: 'syz.1.5594': attribute type 13 has an invalid length. [ 670.105035][T26857] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5594'. [ 670.189431][T26865] ipt_REJECT: TCP_RESET invalid for non-tcp [ 670.214727][T26870] tipc: Failed to remove unknown binding: 66,1,1/1231110221:2375762339/2375762341 [ 670.228301][T26870] tipc: Failed to remove unknown binding: 66,1,1/1231110221:2375762339/2375762341 [ 670.248754][T26870] tipc: Failed to remove unknown binding: 66,1,1/1231110221:2375762339/2375762341 [ 670.379176][T26877] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 670.715037][T26894] veth0: entered promiscuous mode [ 670.793784][T26894] veth0: left promiscuous mode [ 670.911094][T26897] netlink: 'syz.1.5607': attribute type 1 has an invalid length. [ 670.951878][T26897] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5607'. [ 671.230708][T26902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5609'. [ 671.269564][T26902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5609'. [ 671.289581][T26904] netlink: 'syz.1.5610': attribute type 4 has an invalid length. [ 671.306238][T26901] delete_channel: no stack [ 671.311657][T26904] netlink: 'syz.1.5610': attribute type 4 has an invalid length. [ 671.350866][T26906] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 672.100815][T26934] tipc: Resetting bearer [ 672.868621][T26979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.868927][T26978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.898029][T26975] netlink: 'syz.4.5630': attribute type 1 has an invalid length. [ 672.906043][T26975] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5630'. [ 673.051044][T21593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 673.068788][T21593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 673.090829][T21593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 673.100805][T21593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 673.113574][T21593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 673.439688][T26996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5633'. [ 673.617405][T26985] chnl_net:caif_netlink_parms(): no params data found [ 673.671096][T27001] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5634'. [ 673.980838][T26985] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.990185][T26985] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.997564][T26985] bridge_slave_0: entered allmulticast mode [ 674.006882][T26985] bridge_slave_0: entered promiscuous mode [ 674.026759][T26985] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.040245][T26985] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.047756][T26985] bridge_slave_1: entered allmulticast mode [ 674.060115][T26985] bridge_slave_1: entered promiscuous mode [ 674.143087][T26985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.163081][T26985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.212735][T26985] team0: Port device team_slave_0 added [ 674.222224][T26985] team0: Port device team_slave_1 added [ 674.284165][T26985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.291606][T26985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.317801][T26985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.400920][T27044] netlink: 'syz.0.5646': attribute type 39 has an invalid length. [ 674.447232][T26985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.540541][T26985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.583413][T26985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.765752][T26985] hsr_slave_0: entered promiscuous mode [ 674.773235][T26985] hsr_slave_1: entered promiscuous mode [ 674.782249][T26985] debugfs: 'hsr0' already exists in 'hsr' [ 674.788265][T26985] Cannot create hsr debugfs directory [ 675.068146][T27071] netlink: 'syz.0.5653': attribute type 1 has an invalid length. [ 675.219790][ T5836] Bluetooth: hci0: command tx timeout [ 675.729672][T26985] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 675.745397][T26985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 675.765343][T26985] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 675.790973][T26985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 675.802551][T26985] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 675.819268][T26985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 675.829321][T26985] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 675.848755][T26985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 675.858620][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 675.880488][T27118] __nla_validate_parse: 2 callbacks suppressed [ 675.880510][T27118] netlink: 1084 bytes leftover after parsing attributes in process `syz.0.5669'. [ 676.040426][T26985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.091087][T26985] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.108221][T24954] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.115572][T24954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.137105][T24948] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.144495][T24948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.354107][T27138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5673'. [ 676.373482][T27138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.395352][T27133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5672'. [ 676.444886][T27138] netlink: 'syz.3.5673': attribute type 10 has an invalid length. [ 676.445727][T27139] netlink: 'syz.3.5673': attribute type 10 has an invalid length. [ 676.471336][T27138] bond0: (slave wlan1): Opening slave failed [ 676.484699][T27139] bond0: (slave wlan1): Opening slave failed [ 676.793631][T26985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.957002][T26985] veth0_vlan: entered promiscuous mode [ 676.974915][T26985] veth1_vlan: entered promiscuous mode [ 677.028247][T27159] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5679'. [ 677.040473][T27159] netlink: 'syz.2.5679': attribute type 9 has an invalid length. [ 677.041106][T26985] veth0_macvtap: entered promiscuous mode [ 677.066213][T26985] veth1_macvtap: entered promiscuous mode [ 677.075143][T27157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5678'. [ 677.115318][T26985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.156422][T26985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.202352][ T6666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.227234][ T6666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.298540][ T5836] Bluetooth: hci0: command tx timeout [ 677.300479][T27171] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5682'. [ 677.328496][ T6666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.361459][ T6666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.444520][T24948] dvmrp1: left allmulticast mode [ 677.627402][T27180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5686'. [ 677.659046][T27181] netlink: 'syz.0.5685': attribute type 1 has an invalid length. [ 677.677329][T27181] netlink: 'syz.0.5685': attribute type 6 has an invalid length. [ 677.706187][T27181] netlink: 'syz.0.5685': attribute type 3 has an invalid length. [ 677.871542][T24948] gretap0 (unregistering): left promiscuous mode [ 678.189236][T24948] bond0 (unregistering): left promiscuous mode [ 678.195641][T24948] bond_slave_0: left promiscuous mode [ 678.203142][T24948] bond_slave_1: left promiscuous mode [ 678.238474][T24948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.263492][T24948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.281832][T24948] bond0 (unregistering): Released all slaves [ 678.296380][T24948] bond1 (unregistering): Released all slaves [ 678.319776][T24948] bond2 (unregistering): Released all slaves [ 678.345858][T24948] bond3 (unregistering): Released all slaves [ 678.367215][T24948] bond4 (unregistering): Released all slaves [ 678.399540][T24948] bond5 (unregistering): (slave bond6): Releasing backup interface [ 678.409510][T24948] bond5 (unregistering): Released all slaves [ 678.434722][T24948] bond6 (unregistering): Released all slaves [ 678.464684][T24948] bond7 (unregistering): Released all slaves [ 678.487548][T24948] bond8 (unregistering): Released all slaves [ 678.518217][T24948] bond9 (unregistering): Released all slaves [ 678.543133][T24948] bond10 (unregistering): Released all slaves [ 678.567146][T27180] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 678.639697][T27184] veth7: entered allmulticast mode [ 678.753330][T24948] tipc: Disabling bearer [ 678.788030][T24948] tipc: Left network mode [ 679.108612][T27199] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 679.253967][T24950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.281005][T24950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.379105][ T5836] Bluetooth: hci0: command tx timeout [ 679.384962][T24951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.406602][T24951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.196263][T27224] lo: entered allmulticast mode [ 680.202168][T27224] lo: left allmulticast mode [ 680.302062][ T10] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 680.328651][T24950] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 680.356687][T24948] hsr_slave_0: left promiscuous mode [ 680.370034][T24948] hsr_slave_1: left promiscuous mode [ 680.535798][T27230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5699'. [ 680.588840][ T10] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 681.112677][T27236] openvswitch: netlink: Missing key (keys=40, expected=80) [ 681.126883][T27230] netlink: 'syz.3.5699': attribute type 1 has an invalid length. [ 681.135408][T27230] netlink: 'syz.3.5699': attribute type 2 has an invalid length. [ 681.393425][ T105] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 681.418728][ T105] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 681.458889][ T5836] Bluetooth: hci0: command tx timeout [ 682.042528][T24948] IPVS: stop unused estimator thread 0... [ 682.048553][T27274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5713'. [ 682.261179][ T10] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 682.728545][T27297] syzkaller0: entered promiscuous mode [ 682.734176][T27297] syzkaller0: entered allmulticast mode [ 682.759351][T27301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5722'. [ 682.902993][T27310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5725'. [ 683.148926][T27329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5730'. [ 683.356765][T27335] netlink: 'syz.4.5731': attribute type 25 has an invalid length. [ 683.365482][T27335] netlink: 'syz.4.5731': attribute type 3 has an invalid length. [ 683.385191][T27335] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5731'. [ 683.832115][T27349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5735'. [ 683.858151][T27346] tipc: Enabled bearer , priority 0 [ 683.891601][T27346] tipc: Resetting bearer [ 683.916788][T27352] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5736'. [ 684.073477][T27351] bridge0: port 1(syz_tun) entered disabled state [ 684.094377][T27351] batman_adv: batadv0: Interface deactivated: dummy0 [ 684.123282][T27351] 0ªX¹¦À: left allmulticast mode [ 684.142177][T27351] vlan0: left promiscuous mode [ 684.153376][T27351] mac80211_hwsim hwsim44 wlan1: left allmulticast mode [ 684.165432][T27351] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode [ 684.173764][T27351] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode [ 684.191532][T27351] bond3: left promiscuous mode [ 684.294718][T27351] bond6: left promiscuous mode [ 684.301115][T27351] xfrm1: left allmulticast mode [ 684.320308][T27351] hsr0: left allmulticast mode [ 684.325144][T27351] hsr_slave_0: left allmulticast mode [ 684.339043][T27351] hsr_slave_1: left allmulticast mode [ 684.344819][T27351] macvlan4: left allmulticast mode [ 684.366679][T27351] veth9: left promiscuous mode [ 684.372555][T27351] bond8: left promiscuous mode [ 684.378685][T27351] bridge4: left promiscuous mode [ 684.409229][T27343] tipc: Disabling bearer [ 684.510735][T27380] xt_bpf: check failed: parse error [ 684.547727][T27373] tipc: Started in network mode [ 684.561980][T27373] tipc: Node identity bbbbbb01, cluster identity 4711 [ 684.580402][T27373] tipc: Enabled bearer , priority 10 [ 684.629075][ T105] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.658818][ T105] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.694923][ T105] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.704098][ T105] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 685.039586][T27411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5750'. [ 685.230447][T27418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5755'. [ 685.325715][T27418] team0: entered promiscuous mode [ 685.333825][T27418] team0: entered allmulticast mode [ 685.340164][T27418] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.400760][T27426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 685.642469][T27446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5763'. [ 685.698608][ T5830] tipc: Node number set to 3149642497 [ 685.742667][T27457] openvswitch: netlink: Flow key attr not present in new flow. [ 685.860863][T27461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 685.976900][T27469] netlink: ct family unspecified [ 685.990942][T27469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.257417][T27480] netlink: 'syz.0.5771': attribute type 29 has an invalid length. [ 686.269349][T27480] netlink: 'syz.0.5771': attribute type 29 has an invalid length. [ 686.439828][T27490] netlink: 'syz.1.5773': attribute type 1 has an invalid length. [ 686.594463][T27490] veth3: entered promiscuous mode [ 686.806212][T27505] netlink: zone id is out of range [ 686.839857][T27505] netlink: zone id is out of range [ 686.845095][T27505] netlink: zone id is out of range [ 686.872054][T27505] netlink: zone id is out of range [ 686.877285][T27505] netlink: zone id is out of range [ 686.882593][T27505] netlink: zone id is out of range [ 686.887736][T27505] netlink: zone id is out of range [ 686.893082][T27505] netlink: zone id is out of range [ 686.905427][T27505] netlink: zone id is out of range [ 686.928485][T27505] netlink: zone id is out of range [ 687.018121][T27515] bridge6: entered promiscuous mode [ 687.032576][T27515] bridge6: entered allmulticast mode [ 687.216992][T27529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.247691][T27529] batadv_slave_0: entered promiscuous mode [ 687.275367][T27529] batadv_slave_0: entered allmulticast mode [ 687.282166][T27532] x_tables: duplicate underflow at hook 2 [ 687.302615][T27535] x_tables: duplicate underflow at hook 2 [ 687.412945][T27542] __nla_validate_parse: 5 callbacks suppressed [ 687.412968][T27542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5788'. [ 688.285187][T21593] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 688.299975][T21593] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 688.302138][T27572] xt_hashlimit: size too large, truncated to 1048576 [ 688.325524][T21593] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 688.339548][T27573] x_tables: duplicate underflow at hook 1 [ 688.345687][T21593] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 688.355894][T21593] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 689.098959][T27570] chnl_net:caif_netlink_parms(): no params data found [ 689.301727][T27602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5803'. [ 689.536729][T27614] netlink: 'syz.4.5807': attribute type 1 has an invalid length. [ 689.550930][T27570] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.560802][T27570] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.572021][T27616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5808'. [ 689.581974][T27570] bridge_slave_0: entered allmulticast mode [ 689.592351][T27570] bridge_slave_0: entered promiscuous mode [ 689.638358][T27619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5808'. [ 689.649981][T27614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.686746][T27616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 689.698661][T27570] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.705983][T27570] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.714497][T27570] bridge_slave_1: entered allmulticast mode [ 689.723846][T27570] bridge_slave_1: entered promiscuous mode [ 690.070276][T27570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.091371][T27627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5811'. [ 690.153622][T27570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.316731][T27570] team0: Port device team_slave_0 added [ 690.326936][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5816'. [ 690.384357][T27570] team0: Port device team_slave_1 added [ 690.418813][ T5836] Bluetooth: hci5: command tx timeout [ 690.535239][T27570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.544683][T27570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.627569][T27570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.645411][T27654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5821'. [ 690.651203][T27570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.662182][T27570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.695530][T27570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.762107][T27652] bond9: entered promiscuous mode [ 690.767375][T27652] bond9: entered allmulticast mode [ 690.773266][T27652] 8021q: adding VLAN 0 to HW filter on device bond9 [ 690.939515][T27656] macvlan2: entered promiscuous mode [ 690.945839][T27656] bond_slave_0: entered promiscuous mode [ 690.952132][T27656] bond_slave_1: entered promiscuous mode [ 690.998498][T27656] bond0: entered promiscuous mode [ 691.006384][T27656] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 691.030171][T27656] team0: Port device macvlan2 added [ 691.061989][T27570] hsr_slave_0: entered promiscuous mode [ 691.071444][T27570] hsr_slave_1: entered promiscuous mode [ 691.079192][T27570] debugfs: 'hsr0' already exists in 'hsr' [ 691.085119][T27570] Cannot create hsr debugfs directory [ 691.119782][T27679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5828'. [ 691.160140][T27680] Cannot find map_set index 2 as target [ 691.627453][T27675] netlink: 'syz.4.5826': attribute type 1 has an invalid length. [ 691.726348][T27675] 8021q: adding VLAN 0 to HW filter on device bond7 [ 691.777114][T27708] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5826'. [ 691.806246][T27710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5835'. [ 691.821024][T27697] vlan2: entered promiscuous mode [ 691.826340][T27697] bond7: entered promiscuous mode [ 691.836984][T27697] vlan2: entered allmulticast mode [ 691.842963][T27697] bond7: entered allmulticast mode [ 691.867489][T27708] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 691.880031][T27708] bond7: (slave batadv1): making interface the new active one [ 691.889234][T27708] batadv1: entered promiscuous mode [ 691.894789][T27708] batadv1: entered allmulticast mode [ 691.902661][T27708] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 691.913595][T27710] bridge_slave_1: left allmulticast mode [ 691.929555][T27710] bridge_slave_1: left promiscuous mode [ 691.935412][T27710] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.970958][T27710] bridge_slave_0: left allmulticast mode [ 691.988373][T27710] bridge_slave_0: left promiscuous mode [ 692.003136][T27710] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.394956][T27733] net_ratelimit: 353 callbacks suppressed [ 692.394982][T27733] Dead loop on virtual device ip6_vti0 (net 657), fix it urgently! [ 692.490310][T27733] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 692.516983][ T5836] Bluetooth: hci5: command tx timeout [ 692.525012][T27730] dvmrp1: entered allmulticast mode [ 692.600839][T27737] bond10: option xmit_hash_policy: invalid value (10) [ 692.615076][T27737] bond10 (unregistering): Released all slaves [ 692.642145][T27749] __nla_validate_parse: 2 callbacks suppressed [ 692.642161][T27749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5844'. [ 692.672468][T27731] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.842798][T27755] veth3: entered allmulticast mode [ 692.870052][T27731] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 692.909374][T27749] bond2 (unregistering): Released all slaves [ 692.947852][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5846'. [ 693.027199][T27731] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.117424][T27731] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.207697][T27768] netlink: 'syz.4.5850': attribute type 22 has an invalid length. [ 693.218727][T27768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5850'. [ 693.235925][T27570] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 693.255744][T27570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 693.264578][T27570] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 693.277219][T27769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5851'. [ 693.294735][T27570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 693.303537][T27570] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 693.323713][T27570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 693.352090][T27570] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 693.380970][T27570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 693.390625][T27771] tipc: Resetting bearer [ 693.429834][T24947] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.477655][T24947] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.530417][T24948] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.563459][T24948] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 693.742611][T27793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.771551][T27792] team0: left allmulticast mode [ 693.776900][T27792] bridge2: left allmulticast mode [ 693.799355][T27792] bridge3: left allmulticast mode [ 693.804552][T27792] team0: left promiscuous mode [ 693.815695][T27792] bridge2: left promiscuous mode [ 693.821608][T27792] bridge3: left promiscuous mode [ 693.827344][T27792] bridge0: port 1(team0) entered disabled state [ 693.854640][T27792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 693.922200][T27792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 693.968070][T27792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 693.993303][T27792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 694.053216][T27792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 694.091711][T27792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 694.156136][T27792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 694.196010][T27792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 694.321741][T27570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.462630][T27570] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.541324][T24947] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.548724][T24947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.578897][ T5836] Bluetooth: hci5: command tx timeout [ 694.585261][T24947] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.592953][T24947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.026295][T27823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5865'. [ 695.087037][T27823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5865'. [ 695.222546][T24950] nci: nci_rx_work: unknown MT 0x1 [ 695.232471][T27570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.321762][T27570] veth0_vlan: entered promiscuous mode [ 695.346897][T27570] veth1_vlan: entered promiscuous mode [ 695.409489][T27570] veth0_macvtap: entered promiscuous mode [ 695.439433][T27570] veth1_macvtap: entered promiscuous mode [ 695.469871][T27570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.499178][T27570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.517063][T24950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.527985][T24950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.542543][T24950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.577694][T27846] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 695.584444][T24950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.338754][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 696.605929][T27857] vlan3: entered promiscuous mode [ 696.612851][T27857] bridge0: entered promiscuous mode [ 696.658710][ T5836] Bluetooth: hci5: command tx timeout [ 696.694555][T27859] netlink: 'syz.4.5876': attribute type 1 has an invalid length. [ 697.880476][T27868] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5879'. [ 697.973818][T27829] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 698.121562][T24948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.145418][T24948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.194416][T27871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5880'. [ 698.204305][T24948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.220915][T24948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.304004][T27884] netlink: 'syz.3.5883': attribute type 5 has an invalid length. [ 698.343961][T27888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5795'. [ 698.360381][T27888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5795'. [ 698.382289][T27890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5885'. [ 698.393163][T27890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5885'. [ 698.775382][T27916] pim6reg: entered allmulticast mode [ 698.789767][T27915] pim6reg: left allmulticast mode [ 698.844484][T27917] ================================================================== [ 698.852641][T27917] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 698.860396][T27917] Read of size 8 at addr ffff888035904ae0 by task syz.1.5891/27917 [ 698.868292][T27917] [ 698.870629][T27917] CPU: 0 UID: 0 PID: 27917 Comm: syz.1.5891 Not tainted syzkaller #0 PREEMPT(full) [ 698.870649][T27917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 698.870660][T27917] Call Trace: [ 698.870667][T27917] [ 698.870674][T27917] dump_stack_lvl+0xe8/0x150 [ 698.870701][T27917] print_report+0xba/0x230 [ 698.870721][T27917] ? af_alg_pull_tsgl+0x1c6/0x740 [ 698.870746][T27917] kasan_report+0x117/0x150 [ 698.870770][T27917] ? af_alg_pull_tsgl+0x1c6/0x740 [ 698.870798][T27917] af_alg_pull_tsgl+0x1c6/0x740 [ 698.870829][T27917] skcipher_recvmsg+0x5df/0x1140 [ 698.870855][T27917] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 698.870873][T27917] ? aa_sock_msg_perm+0xf1/0x1b0 [ 698.870889][T27917] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 698.870908][T27917] ? security_socket_recvmsg+0x7e/0x2c0 [ 698.870927][T27917] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 698.870945][T27917] sock_recvmsg+0x172/0x1b0 [ 698.870967][T27917] ____sys_recvmsg+0x1e6/0x4a0 [ 698.870985][T27917] ? __pfx_____sys_recvmsg+0x10/0x10 [ 698.871006][T27917] ? import_iovec+0x73/0xa0 [ 698.871028][T27917] ___sys_recvmsg+0x215/0x590 [ 698.871046][T27917] ? __pfx____sys_recvmsg+0x10/0x10 [ 698.871060][T27917] ? get_futex_key+0x8cd/0x1690 [ 698.871095][T27917] ? __fget_files+0x3a0/0x420 [ 698.871115][T27917] do_recvmmsg+0x334/0x800 [ 698.871132][T27917] ? do_accept+0x5e2/0x760 [ 698.871152][T27917] ? __pfx_do_recvmmsg+0x10/0x10 [ 698.871172][T27917] ? __pfx_do_futex+0x10/0x10 [ 698.871198][T27917] __x64_sys_recvmmsg+0x198/0x250 [ 698.871216][T27917] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 698.871236][T27917] do_syscall_64+0x14d/0xf80 [ 698.871255][T27917] ? trace_irq_disable+0x3b/0x150 [ 698.871270][T27917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.871287][T27917] ? clear_bhb_loop+0x40/0x90 [ 698.871307][T27917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.871325][T27917] RIP: 0033:0x7fedb039c819 [ 698.871342][T27917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.871357][T27917] RSP: 002b:00007fedb12b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 698.871376][T27917] RAX: ffffffffffffffda RBX: 00007fedb0615fa0 RCX: 00007fedb039c819 [ 698.871389][T27917] RDX: 0000000000000001 RSI: 0000200000004c00 RDI: 0000000000000004 [ 698.871400][T27917] RBP: 00007fedb0432c91 R08: 0000000000000000 R09: 0000000000000000 [ 698.871411][T27917] R10: 0000000040000020 R11: 0000000000000246 R12: 0000000000000000 [ 698.871422][T27917] R13: 00007fedb0616038 R14: 00007fedb0615fa0 R15: 00007ffc52c613c8 [ 698.871441][T27917] [ 698.871448][T27917] [ 699.128839][T27917] Allocated by task 27917: [ 699.133259][T27917] kasan_save_track+0x3e/0x80 [ 699.137944][T27917] __kasan_kmalloc+0x93/0xb0 [ 699.142975][T27917] __kmalloc_noprof+0x35c/0x760 [ 699.147838][T27917] sock_kmalloc+0xd6/0x160 [ 699.152289][T27917] skcipher_recvmsg+0x54d/0x1140 [ 699.157245][T27917] sock_recvmsg+0x172/0x1b0 [ 699.161793][T27917] ____sys_recvmsg+0x1e6/0x4a0 [ 699.166592][T27917] ___sys_recvmsg+0x215/0x590 [ 699.171282][T27917] do_recvmmsg+0x334/0x800 [ 699.175708][T27917] __x64_sys_recvmmsg+0x198/0x250 [ 699.180731][T27917] do_syscall_64+0x14d/0xf80 [ 699.185327][T27917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.191332][T27917] [ 699.193663][T27917] The buggy address belongs to the object at ffff888035904ac0 [ 699.193663][T27917] which belongs to the cache kmalloc-32 of size 32 [ 699.207552][T27917] The buggy address is located 0 bytes to the right of [ 699.207552][T27917] allocated 32-byte region [ffff888035904ac0, ffff888035904ae0) [ 699.221979][T27917] [ 699.224324][T27917] The buggy address belongs to the physical page: [ 699.230741][T27917] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x35904 [ 699.239509][T27917] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 699.246627][T27917] page_type: f5(slab) [ 699.250631][T27917] raw: 00fff00000000000 ffff88813feac780 dead000000000100 dead000000000122 [ 699.259220][T27917] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 699.267819][T27917] page dumped because: kasan: bad access detected [ 699.274232][T27917] page_owner tracks the page as allocated [ 699.279952][T27917] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5489, tgid 5489 (dhcpcd), ts 57877347351, free_ts 57875428838 [ 699.299165][T27917] post_alloc_hook+0x231/0x280 [ 699.303944][T27917] get_page_from_freelist+0x24dc/0x2580 [ 699.309511][T27917] __alloc_frozen_pages_noprof+0x18d/0x380 [ 699.315327][T27917] allocate_slab+0x77/0x660 [ 699.319845][T27917] refill_objects+0x331/0x3c0 [ 699.324535][T27917] __pcs_replace_empty_main+0x2e6/0x730 [ 699.330091][T27917] __kmalloc_cache_noprof+0x392/0x660 [ 699.335493][T27917] kmem_cache_free+0x15b/0x630 [ 699.340271][T27917] vms_complete_munmap_vmas+0x929/0xc60 [ 699.345843][T27917] do_vmi_align_munmap+0x3b7/0x4b0 [ 699.350963][T27917] do_vmi_munmap+0x252/0x2d0 [ 699.355562][T27917] __vm_munmap+0x22c/0x3d0 [ 699.359993][T27917] __x64_sys_munmap+0x60/0x70 [ 699.364671][T27917] do_syscall_64+0x14d/0xf80 [ 699.369357][T27917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.375252][T27917] page last free pid 5489 tgid 5489 stack trace: [ 699.381574][T27917] __free_frozen_pages+0xc2b/0xdb0 [ 699.386694][T27917] __kasan_populate_vmalloc+0x1b2/0x1d0 [ 699.392244][T27917] alloc_vmap_area+0xd73/0x14b0 [ 699.397109][T27917] __get_vm_area_node+0x1f8/0x300 [ 699.402138][T27917] __vmalloc_node_range_noprof+0x372/0x1730 [ 699.408078][T27917] __vmalloc_node_noprof+0xc2/0x100 [ 699.413284][T27917] dup_task_struct+0x275/0x9a0 [ 699.418068][T27917] copy_process+0x508/0x3cd0 [ 699.422665][T27917] kernel_clone+0x248/0x8e0 [ 699.427179][T27917] __se_sys_clone3+0x33c/0x360 [ 699.432041][T27917] do_syscall_64+0x14d/0xf80 [ 699.436644][T27917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.442539][T27917] [ 699.444863][T27917] Memory state around the buggy address: [ 699.450490][T27917] ffff888035904980: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 699.458550][T27917] ffff888035904a00: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 699.466614][T27917] >ffff888035904a80: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 699.474762][T27917] ^ [ 699.481954][T27917] ffff888035904b00: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 699.490021][T27917] ffff888035904b80: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 699.498088][T27917] ================================================================== [ 699.533429][T27917] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 699.540699][T27917] CPU: 1 UID: 0 PID: 27917 Comm: syz.1.5891 Not tainted syzkaller #0 PREEMPT(full) [ 699.550085][T27917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 699.560242][T27917] Call Trace: [ 699.563525][T27917] [ 699.566463][T27917] vpanic+0x56c/0xa60 [ 699.570461][T27917] ? __pfx_vpanic+0x10/0x10 [ 699.574991][T27917] ? __pfx___schedule+0x10/0x10 [ 699.579856][T27917] panic+0xc5/0xd0 [ 699.583611][T27917] ? __pfx_panic+0x10/0x10 [ 699.588302][T27917] ? preempt_schedule_common+0x82/0xd0 [ 699.593778][T27917] ? af_alg_pull_tsgl+0x1c6/0x740 [ 699.598816][T27917] check_panic_on_warn+0x89/0xb0 [ 699.603763][T27917] ? af_alg_pull_tsgl+0x1c6/0x740 [ 699.608811][T27917] end_report+0x73/0x180 [ 699.613072][T27917] ? af_alg_pull_tsgl+0x1c6/0x740 [ 699.618117][T27917] kasan_report+0x128/0x150 [ 699.622634][T27917] ? af_alg_pull_tsgl+0x1c6/0x740 [ 699.627762][T27917] af_alg_pull_tsgl+0x1c6/0x740 [ 699.632637][T27917] skcipher_recvmsg+0x5df/0x1140 [ 699.637709][T27917] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 699.643119][T27917] ? aa_sock_msg_perm+0xf1/0x1b0 [ 699.648093][T27917] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 699.653394][T27917] ? security_socket_recvmsg+0x7e/0x2c0 [ 699.658963][T27917] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 699.664359][T27917] sock_recvmsg+0x172/0x1b0 [ 699.668959][T27917] ____sys_recvmsg+0x1e6/0x4a0 [ 699.673738][T27917] ? __pfx_____sys_recvmsg+0x10/0x10 [ 699.679151][T27917] ? import_iovec+0x73/0xa0 [ 699.683753][T27917] ___sys_recvmsg+0x215/0x590 [ 699.688444][T27917] ? __pfx____sys_recvmsg+0x10/0x10 [ 699.693644][T27917] ? get_futex_key+0x8cd/0x1690 [ 699.698514][T27917] ? __fget_files+0x3a0/0x420 [ 699.703198][T27917] do_recvmmsg+0x334/0x800 [ 699.707635][T27917] ? do_accept+0x5e2/0x760 [ 699.712063][T27917] ? __pfx_do_recvmmsg+0x10/0x10 [ 699.717020][T27917] ? __pfx_do_futex+0x10/0x10 [ 699.721802][T27917] __x64_sys_recvmmsg+0x198/0x250 [ 699.726831][T27917] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 699.732411][T27917] do_syscall_64+0x14d/0xf80 [ 699.737078][T27917] ? trace_irq_disable+0x3b/0x150 [ 699.742116][T27917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.748385][T27917] ? clear_bhb_loop+0x40/0x90 [ 699.753084][T27917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.758992][T27917] RIP: 0033:0x7fedb039c819 [ 699.763417][T27917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.783219][T27917] RSP: 002b:00007fedb12b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 699.791920][T27917] RAX: ffffffffffffffda RBX: 00007fedb0615fa0 RCX: 00007fedb039c819 [ 699.799904][T27917] RDX: 0000000000000001 RSI: 0000200000004c00 RDI: 0000000000000004 [ 699.807894][T27917] RBP: 00007fedb0432c91 R08: 0000000000000000 R09: 0000000000000000 [ 699.815873][T27917] R10: 0000000040000020 R11: 0000000000000246 R12: 0000000000000000 [ 699.823853][T27917] R13: 00007fedb0616038 R14: 00007fedb0615fa0 R15: 00007ffc52c613c8 [ 699.831930][T27917] [ 699.835559][T27917] Kernel Offset: disabled [ 699.839891][T27917] Rebooting in 86400 seconds..