last executing test programs: 2m40.918939366s ago: executing program 4 (id=1202): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x1f0, 0x120, 0x120, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0x0, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0x0, 0xffffff00], 'xfrm0\x00', 'veth1\x00', {}, {0xff}, 0xc, 0x21, 0x1, 0x20}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x21, 0x14, 0x1}}, @common=@icmp6={{0x28}, {0x10, 'h7', 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "9800"}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000300)={0x1, [0x0]}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000380)={r2, 0x9f, "66a9a4156003eb72ca25980e7540a3c54109fcb82e82c6126c4c90b1179754de8ac6b77adca148b46152dc5cba0370bdbd989f94eb60b57ce791df813c5ad6e40a4033d4d3408a83bdaeacd4cb06c4927cb7f9a0e2e78497b385f38064c11fd2e312ebb69ca1a66216355dbdbf18b50e038cdb76a52d9e8fa90385679e687a972493c56a229336164cfb5563c88fe6918152027e4da4effc39a645ca1b34d5"}, &(0x7f0000000440)=0xa7) r3 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002480)={0x14, 0x36, 0x1, 0x70bd29, 0x25dfdbfc, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x1, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000480)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000080), 0x2, 0x0) r7 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000a200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800020d8}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0xe0000014}) epoll_wait(r7, &(0x7f0000000040)=[{}], 0x1, 0x400) 2m40.765434753s ago: executing program 4 (id=1203): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001100b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async, rerun: 64) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 64) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000240)={@initdev, @dev, 0x0}, &(0x7f0000000280)=0xc) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x5, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x40, 0xa95, {{0x1a, 0x4, 0x1, 0x7, 0x68, 0x64, 0x0, 0x64, 0x2f, 0x0, @loopback, @loopback, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xc, 0x1, 0x4, [{@local, 0x800}]}, @generic={0x83, 0x3, '\\'}, @lsrr={0x83, 0x1f, 0x2a, [@multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}, @remote]}, @lsrr={0x83, 0x1f, 0x29, [@dev={0xac, 0x14, 0x14, 0x33}, @remote, @broadcast, @private=0xa010102, @remote, @multicast1, @remote]}]}}}}}) (async, rerun: 64) r7 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xfff1}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)={0x2b4, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r1}, {0x298, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xdbc2, 0x4, 0x8, 0x10}, {0x2da2, 0x6, 0xff, 0x80000000}, {0x4, 0x5, 0x6, 0x5b4}, {0xff01, 0xff, 0x10, 0xfffeffff}, {0x3, 0x0, 0x3c, 0x5}, {0x9, 0xdc, 0x5, 0xf}, {0x131c, 0x7, 0xff, 0x4627}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r12}}}]}}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x20040880}, 0x8814) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x3c, r14, 0x1, 0x0, 0x25dfdbfc, {0x49}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2m40.654454519s ago: executing program 4 (id=1204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xc5) sendto$inet6(r2, 0x0, 0x0, 0x200c8004, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f0000000240)="2501d77b330b7e73d6b1d1b8079abc7bd28519d7e0861f000000714fa228ee1f5b48", 0x22, 0x0, 0x0, 0x0) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, 0x0, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) recvmmsg(r3, &(0x7f0000001180)=[{{&(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000001280)=""/32, 0x20}, {&(0x7f0000000540)=""/13, 0xd}, {&(0x7f0000000580)=""/33, 0x21}], 0x3, &(0x7f0000000780)=""/160, 0xa0}, 0x3}, {{0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000980)=""/37, 0x25}, 0x203}, {{&(0x7f0000000bc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000c40)=""/31, 0x1f}], 0x1, &(0x7f0000000cc0)=""/182, 0xb6}, 0x3}, {{&(0x7f0000000d80)=@pppoe, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e80)=""/45, 0x2d}, {&(0x7f0000000ec0)=""/13, 0xd}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/124, 0x7c}, {&(0x7f0000000f80)=""/103, 0x67}], 0x5, &(0x7f0000001080)=""/232, 0xe8}, 0x3ff}], 0x4, 0x0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x24, 0x3a, 0x4, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x58, 0x0, 0x0, @u64}, @typed={0x5, 0xc1, 0x0, 0x0, @str='\x00'}]}, 0x24}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x30, 0x1, 0x1, [r7, r8, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, r10, 0xffffffffffffffff]}}], 0x50, 0x50}, 0x200400c4) getgid() bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8000, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m39.655247904s ago: executing program 4 (id=1210): socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xab2b57ad8030305e}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1}}) 2m38.939132572s ago: executing program 4 (id=1213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100040000000c000200110000001300000008000500", @ANYRES32=r5, @ANYBLOB="08e20a00", @ANYRES32=r5, @ANYBLOB="0a000100aaaaaaaaaa160000"], 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m35.762042523s ago: executing program 4 (id=1224): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000180)) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 2m30.167936501s ago: executing program 3 (id=1236): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d80)=@deltfilter={0xf80, 0x2d, 0x300, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x15, 0x8}, {0xfff1, 0x4}, {0xe, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @filter_kind_options=@f_u32={{0x8}, {0xe14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x3}, @TCA_U32_POLICE={0xc5c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3, 0x1d, 0x9, 0x8, 0x5, 0x28, 0xcfbe, 0x1ff, 0x8001, 0x80, 0x5, 0x80000001, 0x8, 0x1, 0xd, 0x32, 0x0, 0x7fff, 0xfffffff7, 0x7, 0x1, 0x636d, 0x530b0dd8, 0x6, 0x9, 0x7, 0x3, 0xa4, 0x8, 0x3, 0x8, 0xcde8, 0x2, 0x7, 0x8, 0x5, 0x0, 0x7, 0x5, 0x6, 0xe, 0x7fff, 0x4, 0x157, 0x5, 0x9, 0xe, 0x7b6, 0x761, 0x2, 0x200, 0xfffffffa, 0x40000000, 0x5, 0x4, 0x400, 0x6, 0x7fff, 0x80, 0x8, 0x4, 0xfffffffa, 0x0, 0x3, 0x5, 0x6, 0xfffffff9, 0x1, 0xfffffffb, 0x4, 0x7ff, 0x0, 0x8, 0x0, 0x1000, 0x2, 0x195, 0x1, 0x5, 0x6784, 0xde0f, 0xd5, 0x0, 0x4, 0x8, 0x6a, 0x8000, 0x6ce0, 0x4, 0x80000000, 0x101, 0xad3, 0x0, 0x9e37, 0xe, 0x0, 0x6, 0x8, 0xfffffffa, 0x7f, 0x0, 0x9, 0x7, 0x9, 0x8a5, 0x6, 0x8, 0xaea, 0x8, 0xfffffffe, 0x10001, 0x1a, 0x8, 0x9, 0x8, 0x8c, 0xd126, 0x1, 0xfffffffd, 0x8, 0x200, 0xd88, 0x0, 0x2, 0x8, 0x5, 0x7, 0x1e2a, 0x7d7, 0x7fff, 0x6, 0x68, 0x400, 0x8, 0x6, 0x5, 0x1ff, 0x1, 0x9, 0x4, 0xfff, 0x0, 0x8, 0x19c, 0xfff, 0x8, 0xc, 0x53, 0xfffffff4, 0x80, 0x1, 0x7, 0x5, 0x332, 0x5, 0x51, 0x5, 0x0, 0x9, 0x9, 0x89b8, 0x7ff, 0x1, 0x79, 0x7fff, 0xd03, 0x10, 0xb, 0xde4, 0x4, 0xb, 0x8, 0x4, 0x6, 0x4, 0x101, 0x1, 0x100, 0x8, 0x7f, 0x0, 0x81, 0xe3, 0x1, 0x3, 0x6032, 0x91e0, 0x4, 0x6, 0xce, 0x6, 0x1, 0x5, 0x0, 0x7, 0x2c7, 0x85, 0x80000000, 0x10, 0x5, 0x10000, 0x1, 0x3, 0x6, 0x1ff, 0x0, 0x101, 0x8, 0x3, 0x8, 0x2, 0x1000, 0x5, 0x7, 0x4, 0xfffffffa, 0x6, 0x1, 0x1, 0x40, 0x0, 0x77a, 0x0, 0x6, 0x6141, 0x7, 0x3, 0x37d, 0x6, 0x0, 0x2, 0x3, 0xa, 0x0, 0x8, 0x7, 0x9, 0x7fff, 0x7, 0xff, 0x2, 0x40, 0x400, 0x4, 0x40, 0x1, 0xc, 0x93, 0x200, 0x5, 0x7, 0x401, 0x7, 0x1, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffb}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x20000000, 0x1, 0x2, 0x2, {0xc, 0x1, 0x7f, 0xa5, 0x8, 0x2}, {0x7, 0x0, 0xa69, 0x8, 0x2, 0x1}, 0x0, 0x80000000, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x8, 0x7, 0xf, 0x1, 0x99, 0xc3, 0x5, 0x80, 0x0, 0x3, 0x5, 0x4, 0x7, 0x1, 0x37, 0x8, 0x9, 0x0, 0x4, 0x80, 0x10000, 0x3, 0x2, 0x3188, 0x0, 0x10001, 0x6, 0x9, 0x200, 0x7ff, 0x3ff, 0x90b, 0x5, 0x80, 0x8, 0xffffffff, 0x2, 0x2, 0x4, 0x4, 0x59, 0xc, 0x10001, 0x4, 0x3, 0x5, 0x80000001, 0x0, 0x6, 0x314c, 0x7ff, 0xffff, 0x3, 0xfaa, 0x81, 0x8, 0x8, 0x6, 0x3, 0x8, 0x3d, 0x9f, 0x3, 0x2, 0x80000000, 0x40, 0x44d41ad6, 0x0, 0x2, 0xfffffff1, 0x9, 0xa, 0x6, 0x5, 0xffff, 0x5, 0x6, 0x8, 0x4, 0x3, 0x10, 0xd, 0x9, 0x401, 0x1, 0x9, 0x200, 0x0, 0x6, 0x0, 0xfffffff8, 0xfffffff9, 0x9, 0x9, 0x2, 0x8001, 0x80, 0x10001, 0x0, 0x0, 0xffff, 0x4, 0x2, 0x4, 0x583, 0x1, 0xffde, 0xe0a9, 0xc71, 0x4, 0x0, 0x6, 0x3, 0xb, 0x8000, 0x790, 0x8, 0x4, 0x80000000, 0x81, 0x1ff, 0xffff, 0xe, 0x9, 0x9, 0x6, 0xa22, 0x7fff, 0x1, 0x5, 0x80000001, 0x5, 0x12d2, 0x5, 0x8000, 0x2, 0xd0, 0x3, 0xc8f, 0xfffffffa, 0x3, 0x2bc6, 0xe, 0x5, 0x8, 0x80000001, 0x8e3f, 0xd, 0x8001, 0x7ff, 0x7ff, 0x7bb, 0x9, 0xfffffffc, 0x5, 0x4, 0xb, 0x949a, 0xfffff8b8, 0x2, 0x0, 0x80010000, 0x309a400, 0xffff138b, 0x2, 0x4, 0x800, 0x4ed, 0x7, 0x7, 0x4000000, 0x7d8, 0x6, 0x6, 0x4, 0x7d, 0x1, 0x4, 0x5, 0x10001, 0x9, 0x4, 0x101, 0x4, 0xffffffff, 0x2, 0x0, 0xe, 0x9, 0x80, 0x7fffffff, 0x3, 0x200, 0x0, 0x33a, 0x1, 0xaf1b, 0xc, 0x2, 0x70c5, 0x5, 0x9, 0x92d5, 0xff, 0x6, 0x9, 0x3, 0x5, 0x4, 0x7, 0x7fff, 0x80000001, 0x5dce, 0x5, 0x1, 0x4, 0x863, 0x7, 0x8, 0x5acb, 0xb7fb, 0x6bd, 0x4, 0x200, 0x2, 0x8001, 0x7, 0x4, 0x2, 0x6, 0x3ff, 0x4, 0x7, 0x7, 0x5, 0x1, 0x10, 0x7, 0x6, 0x1, 0x8000, 0xf2, 0x6, 0xec83, 0x6, 0xca, 0x800, 0x80000001, 0xa, 0x300, 0x4, 0xa, 0xfff, 0x6, 0x8000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10, 0x9, 0x9, 0x5, 0x27f7, 0x9, 0xffff, 0x4, 0x6, 0x9, 0x401, 0x4, 0x5, 0x8, 0xff, 0x100, 0x3ff, 0x4, 0x8000, 0x1, 0x9, 0x2, 0x7f35, 0xfff, 0x2, 0x6, 0x3f, 0x8, 0x0, 0x1, 0x3, 0xe9, 0x9, 0x3, 0x100, 0x6b0, 0x4, 0x401, 0x95, 0x7, 0x3, 0xad, 0x10000, 0xec, 0x3, 0x1, 0x307e, 0x5, 0x67779480, 0x6, 0xc78b, 0xdce, 0xc77, 0x8000, 0xd88, 0x6, 0x80, 0x8, 0x2, 0x5d, 0x7, 0x7, 0x9, 0x9, 0x8, 0x5, 0x4, 0x43, 0x3, 0x5, 0x4, 0x0, 0x1, 0x842, 0xfffffffe, 0xbff, 0x6e, 0x101, 0xf18, 0x0, 0x7dd, 0xd6c7, 0xe0e7, 0x8, 0x4, 0x2, 0xe, 0x99, 0x2, 0x6c09d4ee, 0x10001, 0x3, 0x101, 0x1, 0x9, 0x6, 0x80000000, 0xe, 0x0, 0xe, 0x0, 0x80000001, 0x10, 0xac4, 0x10001, 0x8, 0x2, 0xe6, 0x3ff, 0x0, 0x1d26, 0x8, 0x8, 0x0, 0x1be0, 0xdb, 0x5, 0x1, 0x9, 0xf4ba, 0x8ced, 0xc0000, 0x4, 0xd, 0x3, 0x31780000, 0x7, 0x831e, 0x0, 0xffff7fff, 0x9, 0x5b2, 0xb, 0x6, 0xb, 0x40, 0x6, 0x7, 0xffffff30, 0x7fff, 0xc, 0xe, 0x8, 0x558, 0x7fffffff, 0x10001, 0xa, 0x9, 0x9, 0xf, 0x43, 0xffff, 0x7f, 0x7, 0x1, 0x1, 0x1, 0xea, 0x8, 0x8, 0x7f, 0x5, 0x1000, 0xb, 0x286, 0x7, 0x4, 0x0, 0x6, 0x15c0, 0x80000000, 0x6, 0x73, 0x3, 0x3, 0x7ff, 0x400, 0x8000, 0x2, 0x3, 0x10001, 0x1, 0x101, 0x5, 0x7, 0x0, 0x7, 0x9, 0x3, 0x6, 0x0, 0xf454, 0xffff, 0xe9b, 0x471, 0x0, 0x0, 0x8, 0x3, 0x5, 0x10001, 0x8, 0x1, 0xc6, 0x0, 0xfffffffc, 0x3, 0x992d, 0x500f, 0x7fffffff, 0x2fa9660f, 0x1d3dd00f, 0x3, 0x3, 0x0, 0x9, 0xc6a, 0x7, 0x1c61485, 0x9, 0x4, 0x7, 0x100, 0xa63b, 0xfffffffa, 0x10000, 0x8, 0x3, 0x1, 0x6589, 0x2f083ca2, 0x1, 0x7fff, 0x8, 0xf5a, 0x0, 0x5, 0x7, 0x4, 0x9, 0x8, 0x9, 0x200, 0x9, 0x8, 0x9, 0x9, 0x4, 0x9, 0x7fff, 0x2, 0x8, 0xfffffff8, 0x7, 0x1, 0x2]}]}, @TCA_U32_HASH={0x8, 0x2, 0x9}, @TCA_U32_MARK={0x10, 0xa, {0x5, 0x6}}, @TCA_U32_SEL={0x194, 0x5, {0x5, 0x0, 0x4, 0x3, 0xfffe, 0x100, 0x7, 0x8001, [{0x3, 0x4, 0x6, 0x2}, {0x10, 0x3, 0x6}, {0x5, 0x5, 0x2, 0x9}, {0x9, 0x6, 0x2de1, 0x8c}, {0x9, 0x8a, 0x5, 0xb4}, {0x4, 0x3ff, 0x3, 0x800000}, {0xfffffffb, 0x3, 0x4420, 0x10001}, {0xffffffff, 0x100, 0x7, 0xcf}, {0x8, 0x4, 0x1, 0x8}, {0x6, 0x9, 0x765, 0x7fffffff}, {0x6, 0x81, 0x7, 0x5b2}, {0x9, 0x6, 0x75bad7ad, 0x3}, {0x8, 0x7, 0x80000000, 0x1}, {0x8, 0x40, 0x0, 0x1}, {0x25c44, 0xffffffff, 0x80, 0x7}, {0x9, 0x3, 0x8, 0x6}, {0xffff9711, 0x6, 0x7, 0xc}, {0x1, 0x7, 0x80000000, 0x8}, {0x3358bea7, 0xc19, 0xfffffff0, 0x7}, {0x6, 0x9, 0x9, 0x5}, {0x9, 0x401f, 0x7, 0x7f8}, {0x2, 0x2, 0x8, 0x101}, {0x37e, 0x4, 0x8, 0x40}, {0x1000, 0x10001, 0x8, 0x7fffffff}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7069}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff, 0xff000000, 0xff000000, 0xff000000]}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x8000}, @TCA_FLOWER_KEY_TCP_DST={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_flower={{0xb}, {0x70, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @multicast}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x48, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x44, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x10000}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}]}]}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x8}]}}, @filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x19}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_IP_TOS={0x5}, @TCA_FLOWER_KEY_TCP_FLAGS={0x6, 0x47, 0x8}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0xff000000, 0xff, 0xffffffff]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0xf}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xf, 0x10}}]}}]}, 0xf80}, 0x1, 0x0, 0x0, 0x40014}, 0x8044811) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfff}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r5) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x18, r6, 0x251bdc399c801d71, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) 2m29.225554371s ago: executing program 3 (id=1241): r0 = socket(0x28, 0x5, 0x0) connect$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000580)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc) sendmsg$nl_route(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x44}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0xc000) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="29002dfc3ac6a5415bc1ea28e8ee696a7a55", @ANYRES16, @ANYBLOB="01002abd70000000000009000000"], 0x14}}, 0x20000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x64, 0xb, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xf6}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x7ff}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) sendmmsg$inet(r8, &(0x7f0000008b80)=[{{0x0, 0x0, 0x0}}], 0x1a000, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_getaddr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @empty}]}, 0x2c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @default}, [@rose, @remote, @default, @rose, @default, @bcast, @remote, @default]}, &(0x7f0000000200)=0x48, 0x80800) connect$ax25(r12, &(0x7f00000003c0)={{0x3, @bcast, 0x2}, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) 2m28.488053798s ago: executing program 3 (id=1244): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)="89e7ee0c7cdad9b4b47380c988ca050000000000f8008bc98470cca692fa002f6f7c6a00249fd5", 0x27}, {&(0x7f0000000440)="448b7ce57c8e6d051b9f", 0xa}], 0x2) 2m27.811885815s ago: executing program 1 (id=1249): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000e000000200000000000000000000000023030000000000000000000000000000000000000000000000000000010000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00200000004e2200000000ac1414bb0000000000000000000000001c0004"], 0x1ac}}, 0x0) 2m26.777677628s ago: executing program 1 (id=1251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000540)={0x6, {{0xa, 0x4e23, 0x4c8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x419}}, 0x0, 0x1, [{{0xa, 0x4e22, 0xdd8d, @local}}]}, 0x110) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m21.518391167s ago: executing program 0 (id=1260): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xe8, 0xa8, 0x6, 0x53, @mcast1, @private2, 0x20, 0x8000, 0x0, 0x4}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) unshare(0x2a020400) getsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x58, r9, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}]}, 0x58}}, 0x48040) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r9, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xad7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe6bd}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x80) recvmsg(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}}]}, 0x30}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c0000001800ef0100000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r11, @ANYBLOB="1400050000000000000000000000e3"], 0x3c}, 0x1, 0x11}, 0x0) 2m20.646965681s ago: executing program 0 (id=1261): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x26) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000540)={0x1, 0x6d1, 0xb, {}, {}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x5, 0x5, 0x0, 0x0, "c84b0f70ed9a476e"}}, 0x48}}, 0x0) 2m20.547216254s ago: executing program 32 (id=1224): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000180)) (async) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 2m20.529644001s ago: executing program 0 (id=1263): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000009c0)="af8d195ac29a2a0fe48238e1543d21ee817644e51046a895ff2b7e18d764b6e016752938c9d661e72f7cc56a70a2967587d23dfbef4857038e1cf33269f981efe0dc9d60409b63866620856ebf18d3dc1efe26620cef44f9311cc7b4fb0aee4581ccb941afd07c76517b7cee360ef44217cf70bfb7f34b8cef568000e6a94f0e3a2a35edbe8739bc4203acd8179229f375ff9c71210818738eabb1988fa217f608427624c073807576e4dfbc6cae39f311d1aacfd5a6ee473edeb0947459", 0xbe}], 0x1}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000140)="39cf2a43b36375c8fc27", 0xa}, {&(0x7f00000018c0)="c80308947503af258859e0be5946a385f4b8494e6acd7c90dc2ad0297a4dc8e29392c13b2d8c589e8e7e2bc111c01b6c3e87c59a97e57db614b4be21c101e1c5af685176986b24f636f1a77f75b6005d7c7d2580c19f6ebe3b51226b96113fcb14db1fdc7c100c9f9bf33be9a022f4ba2bfd568f1fb7ec6bc5cca808d9ca36999f4ca6818cd6d6eebe3ea9f4f846d2c548d1bb87931cff150afa35eab1b059636efbfc21dbfd41b8e4c00e28c98c60fe81cf41a4ef6e889002a191e28b09fd4dad0e42fec4e97a64190507d9718b1092eba1fcec6f", 0xd5}, {&(0x7f00000019c0)="46813196e6a84f286f5c34523818c5d6069c3d068f0c57e97d418e3566c8e2bb2b0ca8d3a16e81357c81bb47e2916311615ecdf4da861713becc", 0x3a}, {&(0x7f0000001a80)="cc15fe0530ed7899ffef88a735d3e154c702c6a3fccffda6f61f7523150742c198aaa84e07951efd0078ec28619f6e6d0164cd62383a9fb326471c9a6664dba2315fbfd4861c1753f0c577ab5127fcbdd3545e2eecc9996e4d6de2432a8d2e73ec49702654e72ceb5f2eaf", 0x6b}, {&(0x7f0000000080)}], 0x5}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000001ec0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000003240)="ffc74af594e3d59c35681d3ed9ed59684a2a2d84a1d60585b888797600eaa4911052cee7c5f5f210392fdb3bec0d84d4102116ae7567153b5f9359b65a80f341ada2af53c028694e069e7ebd7ffbfdbdd1bd39ea410c1cb0440f72e5f580180284251b248b43d463d3aab9", 0x6b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="194129cc7d4d5a140f1f749697f9304a16fe9a812c1393a8b28af6b73d22a9348d4146e171e424b36a245bbbfe6910cc2011059d90799b56b4730c9147ebfb06f4e56fa79974240bebebe7fb1d9c42ec1017ea7838bf9b1656bb64c907a01a2567448645aa39d6d780bcbe890706b29f4d6565c89138726bda82f90a8043f1d9a1340bc47d8ef644637a62aaf393", 0x8e}, {&(0x7f00000001c0)="72f6cd754bdd0954a2c5c00394", 0xd}, {&(0x7f0000000500)="2ea0fbb5b5acfba63dc1af7dcab574d01320ecdadbbd3068ba5f714acf60a480725f07945c823b001d54900e4fbca493b951b3fdd19e86ca7d6d2c260d8f0ede9df30695a2f2c0d0eb28e359e9e975e2ee05d2fe33ce50ef15cdb58dc1f01b37e8b1b1c90431a6139519929291f8b3af2990826f4fe727d3ef5d79a14d8e9fa7ae19e6233817e6f694ea90dae5b93b0dd986adc63b6cc53319a20d5e73f73a5d10b1c0f765e84a1686c15df780de8eefc415776f8148040f00801c897076391b8d305e", 0xc3}, {&(0x7f0000000600)="e33268b53a6cefd73876b72a5ce8c491492442b968e256d21576d23f20d4c904a1255bdc9da62b51bcaaa2a0944f192955dc8a5ae453c6c57c88ab4bff57fbbd9f085a00196f7b332cff900be5428cfb220b331e8ab5333014ba6ee6742a54678e3c757676a306e8db8eb356b369d5cdb95f80b4b8c8f44aea7980229f2e52348b00c5ec09be6b6c55f6ec919bffd9a643f4a8685b9235f73f9ab2755b3f92a3af1ad9d152b71832aa0c2ee7ad27bcbbd76d6b56db0c4296f6edc5597a8a8fa93783662528fee10d225075fb0ff671a38d4ee061d40aba5f4d46354a77", 0xdd}], 0x4}}], 0x5, 0x44008090) recvmmsg(r1, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2m20.316372992s ago: executing program 0 (id=1264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) write(r1, &(0x7f0000000340)="3f000000010003", 0x7) 2m20.167270042s ago: executing program 0 (id=1265): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010003904000000000000000000000000519e5f824466a8af057ae68f525f59426bbaa15a1f77c0fb89d6b1ad746ebd0f536ff4c0d801525c12ece0f1e5d0eb7244f906de3dd8f50ab9d5c19c858b115327492766978c8f2882f77765f7cfe3c917a824e47b02cc66025b2bfa0b6a41336bad54cbdc5ecf466b56af0100bc2eb232f31e7f7076175ac2438fe4", @ANYRES32=r1, @ANYBLOB="21010000000000001c0012800b00010062726964676500000c00028006002700a1000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f", 0x1f) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYRESDEC=r3], 0xfe33) 2m19.980944718s ago: executing program 0 (id=1266): r0 = socket$inet6(0xa, 0x80003, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x8000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffdfe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x8040) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) 2m19.913672825s ago: executing program 1 (id=1267): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0) 2m19.773576746s ago: executing program 3 (id=1268): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f3030a7d3f408004a00003c0003000302059078ac1414000a0101004408f57000007fff070909b173380000010000004e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6100000090780003"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x8c, r8, 0x1, 0x0, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x64, 0x8, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_ALLOWEDIPS={0x7, 0x9, 0x0, 0x1, [{0x4}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1000, @mcast1, 0xb}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x24, 0x3a, 0x4, 0x70bd27, 0x25dfdbfd, "", [@typed={0xc, 0x58, 0x0, 0x0, @u64}, @typed={0x5, 0xc1, 0x0, 0x0, @str='\x00'}]}, 0x24}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x30, 0x1, 0x1, [r6, r9, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff, r11, 0xffffffffffffffff]}}], 0x70, 0x50}, 0x200400c4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r12 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000380)={0x0, 0x0, "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", "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"}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r13, 0x0) (async) recvmsg$unix(r13, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r14, 0x0) sendmsg$netlink(r12, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="34000000110001000000000000000000100003400c"], 0x34}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000080)) 2m19.148355613s ago: executing program 3 (id=1269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001000)='veno\x00', 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @mcast2, 0x83}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x89b1, &(0x7f0000000040)={'vlan1\x00'}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0143f77474668566bce917af3d89c8ef5e062a214b60f159d1b3cce309f4f1021efe5b3fb2f810d2551372adf344a9bbe135076a435f0a0f576adec2eb6b51236ac8765de8f66212ef4b390d4ce620039f3f3fd165efecdd91837a2cd", 0x8b) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r6, &(0x7f0000001340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000001300)={&(0x7f00000010c0)={0x80, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x79}, @val={0x8}, @val={0xc, 0x99, {0x4d, 0x33}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7d, 0x34}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x3f}}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) unshare(0x20040600) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000000000d900000032ed19d06c4f802e83497b3262ded8e5eb6170cde9ec3f8d1356e6c20efc8de9781767dd2c8ca8b39e551d9090a74c98e9c29bfbbaeccffa6d811a8d234860b6a757699a7ce6d7ea7c1e1a365861060cbd77855c824ff2b08c66821aa2a5afabb54d360b047c81c607ebf7b7c73fd306eb5ebe0c5e5b41fc5d6663f7813dbc6d632525cd8f3e0c2ec353c9f68fd4a108949fb74af59f99873e8c2762ab43b70975543d7df305cd1c3f121923fc0ef6466b"], &(0x7f0000000080)=0xfd) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xc0}}, 0x0) 2m18.79018772s ago: executing program 1 (id=1270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0901000100000055090100000000409500000000000000bf91100000000000b70200000000000085000000950000fdb60000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x2}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2m17.875231184s ago: executing program 3 (id=1271): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000002c0)="23000000010006", 0x7) r2 = socket$inet6(0xa, 0x4, 0x7) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r8, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r10, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) 2m17.241862856s ago: executing program 2 (id=1273): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x62}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1000}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xb0}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x401}}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0xa}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x59}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x48800}, 0x20004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000940)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x4c}}, 0x880) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r5 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01f917"], 0x0, 0x4c}, 0x28) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYRES16=r4, @ANYRES64=r5, @ANYRES64=r3, @ANYRES16=r5, @ANYRESOCT=r5], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x34) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r6, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) sendto$inet6(r2, &(0x7f0000000280)='RMRB', 0x4, 0x404c007, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6e01010018000000000000001400000014000000090000000400000001000006040000000600000007000000002e713061302e5f00"], 0x0, 0x35, 0x0, 0x1, 0x80000001}, 0x28) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r6) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, r8, 0x100, 0x10, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="f26eb6a1cfe8"}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x2000000, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r10, 0x0, 0x0, 0x40, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0xd, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4000844) 2m16.602992082s ago: executing program 2 (id=1274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xc829}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x30}}, 0xd4) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x93, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 2m16.47022362s ago: executing program 2 (id=1275): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b', @ANYRES32=0x0, @ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x4004084}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000400)="fa", 0x1) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x33}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r7, &(0x7f0000001540)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd62639eff001011ff00000000000000000000ffffac1e0001ff0200000000000000000000000000010213000e000000004e204e2300089078"], 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r10, 0x65, 0x4, 0x0, &(0x7f0000000380)) r11 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r5, @ANYRESDEC=r6], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 2m15.277161509s ago: executing program 1 (id=1276): r0 = socket(0x2, 0x3, 0xff) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440), &(0x7f00000006c0), 0x1, r3}, 0x38) sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7b8523bfbf4a6cbcc911b443e673a8fa77ce58a13432ac99e4be38c9c2661a892682d81d9b9022ea90797fb45a74a588fdabe42", 0x47}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000580)="c7bace4ebe91b42a7bf8f86453e0ec420e051dc8", 0x14}, {0x0}, {&(0x7f0000000780)="3ce6c498bfc50136f2c47c20cf1a66c10fd74dd25b683183546aeadab27363e9811872eca5570c55b4ec97197dd48b3d35142a2c28aae0f19fef2b33cf00e949f96f5c28da936bdcd3b340fca079ce748c6a885a3215ac5f2986d52a4b43424aad79c75dceb42e20b00c69d6b7b2f9b883e52e876d68c646df1b0a2b0f4f193e146a728d8f43f603e3a78208c00586c54ed3a7c425", 0x95}, {&(0x7f0000000640)="a50f6202000000000000005bf0", 0xd}, {&(0x7f0000001080)="3c077982452f1e1497d128b4a4dcff3bc1fc253498237a078ed7328b2e629de0e7f73cafe0f99f9228b71a18a0e7f778e6f12663bff64f428a5687d2fb4b40744f7d77ca26cf1015484ec237c4f8ef7316bdfc1e348cf8fab1eeffa008941bad6860044a95b5c85738c5362234cd3d9fc729479c04f46240a61f272cbecfd482e95d0b7ea4ca3bef58f6708c29325c27dfed9ab6b0d0eba695efdc505190e991df78b19b1115acdcf8e8a42af7", 0xfffffe49}], 0x5}}], 0x2, 0x488c4) 2m15.016521275s ago: executing program 1 (id=1277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)="89e7ee0c7cdad9b4b47380c988ca050000000000f8008bc98470cca692fa002f6f7c6a00249fd5", 0x27}, {&(0x7f0000000440)="448b7ce57c", 0x5}], 0x2) 2m11.103156441s ago: executing program 2 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}]}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x5090}, 0x44000) 2m10.938786693s ago: executing program 2 (id=1279): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0100001000330600000f0000000000fc000000000000000000000000000000ffffffff00ffffffff00000000ffff0000004000000080010000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1ac}}, 0x0) 2m10.154911955s ago: executing program 2 (id=1280): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000010400e700"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000300), &(0x7f00000002c0)=""/25}, 0x20) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000480)="580000001500add427323b472545b4560fa27fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000c13500000000020000965cdf54f488ce83a205be", 0x61}, {&(0x7f00000000c0)}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x800, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x28) unshare(0x40020000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3, 0x0, 0x2}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000005200000a4824843074dd594340fde609551c43ef99d1e6799a131c10ef6", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001400"/28], 0x65) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7947999edb14cccd4427b19028966d282af04d0d0316b2b21f3af3f1b99a29eab71cfa8ecc783e5b0719fec087d1c5ca635fca1bf872ef998cdb8dfe14c1b402b9c156288ef66e31560cea59e2411d7309c2a532"], 0x47) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8) poll(&(0x7f0000000180)=[{r4}], 0x1, 0x107f) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32=0x0, @ANYBLOB="40fafecc82518de7a58bd2b486bbd50cad08f42093886a6ccf493d637b9afab235d2a7e4ef993c92225429e04c7c47bb6289d026dce1f0af8835c34d5c3624e930f09c7abfe10ffc3c6f9f09d5614a82c5d9b6e8416602045a97fa69761b2724f35fdf39677c8bf38702708a2ac408fce5fe4419974a6cf81a16c4918faef228bed633fe0d66e6c4cc83b016ee6ddae68a09cd33af7e4321c07b9e6b7fa261519cfd2f0199ab415192d6f241d49cc5167c1f825b7e", @ANYBLOB], 0x50) socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2m3.565384983s ago: executing program 33 (id=1266): r0 = socket$inet6(0xa, 0x80003, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x8000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffdfe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x8040) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) 1m20.57501594s ago: executing program 34 (id=1277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)="89e7ee0c7cdad9b4b47380c988ca050000000000f8008bc98470cca692fa002f6f7c6a00249fd5", 0x27}, {&(0x7f0000000440)="448b7ce57c", 0x5}], 0x2) 58.665385568s ago: executing program 35 (id=1280): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000010400e700"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000300), &(0x7f00000002c0)=""/25}, 0x20) bind$inet6(r0, &(0x7f0000000600)={0xa, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000480)="580000001500add427323b472545b4560fa27fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000c13500000000020000965cdf54f488ce83a205be", 0x61}, {&(0x7f00000000c0)}], 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6(0xa, 0x800, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x6}, 0x28) unshare(0x40020000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r3, 0x0, 0x2}, 0x18) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000005200000a4824843074dd594340fde609551c43ef99d1e6799a131c10ef6", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001400"/28], 0x65) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="7947999edb14cccd4427b19028966d282af04d0d0316b2b21f3af3f1b99a29eab71cfa8ecc783e5b0719fec087d1c5ca635fca1bf872ef998cdb8dfe14c1b402b9c156288ef66e31560cea59e2411d7309c2a532"], 0x47) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8) poll(&(0x7f0000000180)=[{r4}], 0x1, 0x107f) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="080000020001000000", @ANYRES32=0x0, @ANYBLOB="40fafecc82518de7a58bd2b486bbd50cad08f42093886a6ccf493d637b9afab235d2a7e4ef993c92225429e04c7c47bb6289d026dce1f0af8835c34d5c3624e930f09c7abfe10ffc3c6f9f09d5614a82c5d9b6e8416602045a97fa69761b2724f35fdf39677c8bf38702708a2ac408fce5fe4419974a6cf81a16c4918faef228bed633fe0d66e6c4cc83b016ee6ddae68a09cd33af7e4321c07b9e6b7fa261519cfd2f0199ab415192d6f241d49cc5167c1f825b7e", @ANYBLOB], 0x50) socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 0s ago: executing program 36 (id=1271): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8916, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f00000003c0)=0x5, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000002c0)="23000000010006", 0x7) r2 = socket$inet6(0xa, 0x4, 0x7) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r8, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x8}, 0x80000002}], 0x4, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x3c, r10, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x851}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) kernel console output (not intermixed with test programs): 6363][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.146577][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.171933][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.194629][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.266833][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.266970][ T5875] veth0_vlan: entered promiscuous mode [ 99.277195][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.313588][ T5863] veth0_macvtap: entered promiscuous mode [ 99.325851][ T5863] veth1_macvtap: entered promiscuous mode [ 99.349983][ T5875] veth1_vlan: entered promiscuous mode [ 99.400927][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.423975][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.476408][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.485453][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.511636][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.515521][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.539971][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.548665][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.558770][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.586880][ T5875] veth0_macvtap: entered promiscuous mode [ 99.668466][ T5875] veth1_macvtap: entered promiscuous mode [ 99.675724][ T1336] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.688697][ T1336] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.709469][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.719302][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.762252][ T1336] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.794310][ T1336] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.823940][ T5986] bridge_slave_0: left allmulticast mode [ 99.830029][ T5986] bridge_slave_0: left promiscuous mode [ 99.837387][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.870279][ T5986] bridge_slave_1: left allmulticast mode [ 99.876216][ T5986] bridge_slave_1: left promiscuous mode [ 99.882727][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.899457][ T5986] bond0: (slave bond_slave_0): Releasing backup interface [ 99.913703][ T5986] bond0: (slave bond_slave_1): Releasing backup interface [ 99.934529][ T5986] team0: Port device team_slave_0 removed [ 99.952094][ T5986] team0: Port device team_slave_1 removed [ 99.959836][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.967985][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.977628][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.985336][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.116717][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.201784][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.232188][ T5993] netlink: 'syz.1.2': attribute type 13 has an invalid length. [ 100.272144][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.300527][ T5993] netlink: 'syz.1.2': attribute type 17 has an invalid length. [ 100.328392][ T5869] Bluetooth: hci3: command tx timeout [ 100.344318][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.409939][ T5864] Bluetooth: hci0: command tx timeout [ 100.410154][ T5183] Bluetooth: hci4: command tx timeout [ 100.415657][ T5864] Bluetooth: hci2: command tx timeout [ 100.429904][ T5869] Bluetooth: hci1: command tx timeout [ 100.627908][ T5993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.656971][ T6003] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7'. [ 100.658802][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.704919][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.890635][ T5991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.939967][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.961065][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.175755][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.183855][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.308202][ T1336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.335712][ T1336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.391744][ T1336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.420777][ T6017] warning: `syz.0.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.438406][ T1336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.465403][ T6017] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10'. [ 101.697750][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 101.707601][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 101.710928][ T6005] syz.2.8 (6005) used greatest stack depth: 18008 bytes left [ 101.723532][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 101.733847][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 101.798561][ T6028] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 102.004298][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 102.660739][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 103.788862][ T6077] netlink: 'syz.1.21': attribute type 3 has an invalid length. [ 104.754051][ T6114] netlink: 'syz.1.30': attribute type 1 has an invalid length. [ 104.826305][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 104.938466][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.946617][ T6120] batadv_slave_1: entered promiscuous mode [ 105.034426][ T6120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.32'. [ 105.409513][ T6136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.831651][ T6148] Zero length message leads to an empty skb [ 105.863440][ T6154] IPVS: length: 56 != 8 [ 106.181423][ T6163] sctp: failed to load transform for md5: -4 [ 106.255534][ T6173] netlink: 48 bytes leftover after parsing attributes in process `syz.0.41'. [ 106.928158][ T6194] syz.3.48 uses obsolete (PF_INET,SOCK_PACKET) [ 107.008290][ T6192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 107.375731][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 107.382404][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 107.390410][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 107.398304][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 107.406263][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 107.414273][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 107.422271][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 107.430301][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 107.438323][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 107.446293][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 107.454356][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 107.462351][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 107.470440][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 107.478337][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 107.486331][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 107.494244][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 107.502247][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 107.510165][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 107.518156][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 107.526008][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 107.534016][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 107.541923][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 107.549933][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 107.557819][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 108.036996][ T6223] ipvlan2: entered promiscuous mode [ 108.122096][ T6225] netlink: 'syz.1.55': attribute type 10 has an invalid length. [ 108.157824][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.165854][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.238438][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.245845][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.254124][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.261406][ T6225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.361800][ T6225] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 108.767356][ T6239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.58'. [ 109.153477][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 109.682633][ T6271] netlink: 'syz.1.64': attribute type 32 has an invalid length. [ 109.745176][ T6271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.64'. [ 110.167482][ T6285] netlink: 'syz.4.67': attribute type 1 has an invalid length. [ 110.336391][ T6293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.67'. [ 110.374638][ T6285] bond1 (unregistering): Released all slaves [ 110.446982][ T6256] netlink: 60 bytes leftover after parsing attributes in process `syz.0.62'. [ 111.723841][ T6325] netlink: 84 bytes leftover after parsing attributes in process `syz.4.72'. [ 111.733005][ T6325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.72'. [ 111.776931][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.71'. [ 112.455406][ T6348] netlink: 'syz.3.77': attribute type 1 has an invalid length. [ 112.495325][ T6353] FAULT_INJECTION: forcing a failure. [ 112.495325][ T6353] name failslab, interval 1, probability 0, space 0, times 1 [ 112.525765][ T6353] CPU: 1 UID: 0 PID: 6353 Comm: syz.1.79 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 112.525800][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.525822][ T6353] Call Trace: [ 112.525831][ T6353] [ 112.525841][ T6353] dump_stack_lvl+0x189/0x250 [ 112.525882][ T6353] ? __pfx____ratelimit+0x10/0x10 [ 112.525911][ T6353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.525938][ T6353] ? __pfx__printk+0x10/0x10 [ 112.525975][ T6353] ? __pfx___might_resched+0x10/0x10 [ 112.525996][ T6353] ? fs_reclaim_acquire+0x7d/0x100 [ 112.526036][ T6353] should_fail_ex+0x414/0x560 [ 112.526067][ T6353] should_failslab+0xa8/0x100 [ 112.526101][ T6353] __kmalloc_noprof+0xcb/0x4f0 [ 112.526128][ T6353] ? kfree+0x4d/0x440 [ 112.526151][ T6353] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 112.526188][ T6353] tomoyo_realpath_from_path+0xe3/0x5d0 [ 112.526221][ T6353] ? tomoyo_domain+0xd9/0x130 [ 112.526267][ T6353] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 112.526294][ T6353] tomoyo_path_number_perm+0x1e8/0x5a0 [ 112.526325][ T6353] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.526367][ T6353] ? __lock_acquire+0xab9/0xd20 [ 112.526418][ T6353] ? __fget_files+0x2a/0x420 [ 112.526455][ T6353] ? __fget_files+0x2a/0x420 [ 112.526486][ T6353] ? __fget_files+0x3a0/0x420 [ 112.526517][ T6353] ? __fget_files+0x2a/0x420 [ 112.526567][ T6353] security_file_ioctl+0xcb/0x2d0 [ 112.526594][ T6353] __se_sys_ioctl+0x47/0x170 [ 112.526623][ T6353] do_syscall_64+0xfa/0x3b0 [ 112.526651][ T6353] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.526678][ T6353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.526700][ T6353] ? clear_bhb_loop+0x60/0xb0 [ 112.526728][ T6353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.526750][ T6353] RIP: 0033:0x7fd911b8ebe9 [ 112.526778][ T6353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.526797][ T6353] RSP: 002b:00007fd912988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.526826][ T6353] RAX: ffffffffffffffda RBX: 00007fd911db5fa0 RCX: 00007fd911b8ebe9 [ 112.526842][ T6353] RDX: 0000200000002b40 RSI: 0000000000008946 RDI: 0000000000000003 [ 112.526855][ T6353] RBP: 00007fd912988090 R08: 0000000000000000 R09: 0000000000000000 [ 112.526868][ T6353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.526880][ T6353] R13: 00007fd911db6038 R14: 00007fd911db5fa0 R15: 00007ffd8da83198 [ 112.526914][ T6353] [ 112.526925][ T6353] ERROR: Out of memory at tomoyo_realpath_from_path. [ 113.016967][ T6365] vlan2: entered promiscuous mode [ 113.052263][ T6365] bridge0: entered promiscuous mode [ 113.079736][ T6365] vlan2: entered allmulticast mode [ 113.084938][ T6365] bridge0: entered allmulticast mode [ 113.197726][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 113.243786][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 113.273431][ T6366] team_slave_0: entered promiscuous mode [ 113.279540][ T6366] team_slave_1: entered promiscuous mode [ 113.286635][ T6366] vlan3: entered promiscuous mode [ 113.302848][ T6366] team0: entered promiscuous mode [ 113.745033][ T6391] netlink: 72 bytes leftover after parsing attributes in process `syz.3.88'. [ 113.973613][ T6401] geneve2: entered promiscuous mode [ 114.690871][ T6424] FAULT_INJECTION: forcing a failure. [ 114.690871][ T6424] name failslab, interval 1, probability 0, space 0, times 0 [ 114.717373][ T6424] CPU: 1 UID: 0 PID: 6424 Comm: syz.1.93 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 114.717405][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.717417][ T6424] Call Trace: [ 114.717426][ T6424] [ 114.717435][ T6424] dump_stack_lvl+0x189/0x250 [ 114.717469][ T6424] ? __pfx____ratelimit+0x10/0x10 [ 114.717498][ T6424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.717524][ T6424] ? __pfx__printk+0x10/0x10 [ 114.717558][ T6424] ? __pfx___might_resched+0x10/0x10 [ 114.717580][ T6424] ? fs_reclaim_acquire+0x7d/0x100 [ 114.717620][ T6424] should_fail_ex+0x414/0x560 [ 114.717652][ T6424] should_failslab+0xa8/0x100 [ 114.717693][ T6424] __kmalloc_noprof+0xcb/0x4f0 [ 114.717723][ T6424] ? tomoyo_encode+0x28b/0x550 [ 114.717759][ T6424] tomoyo_encode+0x28b/0x550 [ 114.717797][ T6424] tomoyo_realpath_from_path+0x58d/0x5d0 [ 114.717831][ T6424] ? tomoyo_domain+0xd9/0x130 [ 114.717869][ T6424] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 114.717895][ T6424] tomoyo_path_number_perm+0x1e8/0x5a0 [ 114.717925][ T6424] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.717971][ T6424] ? __lock_acquire+0xab9/0xd20 [ 114.718026][ T6424] ? __fget_files+0x2a/0x420 [ 114.718062][ T6424] ? __fget_files+0x2a/0x420 [ 114.718093][ T6424] ? __fget_files+0x3a0/0x420 [ 114.718124][ T6424] ? __fget_files+0x2a/0x420 [ 114.718161][ T6424] security_file_ioctl+0xcb/0x2d0 [ 114.718187][ T6424] __se_sys_ioctl+0x47/0x170 [ 114.718216][ T6424] do_syscall_64+0xfa/0x3b0 [ 114.718242][ T6424] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.718268][ T6424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.718291][ T6424] ? clear_bhb_loop+0x60/0xb0 [ 114.718319][ T6424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.718341][ T6424] RIP: 0033:0x7fd911b8ebe9 [ 114.718368][ T6424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.718387][ T6424] RSP: 002b:00007fd912988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.718410][ T6424] RAX: ffffffffffffffda RBX: 00007fd911db5fa0 RCX: 00007fd911b8ebe9 [ 114.718426][ T6424] RDX: 0000200000002b40 RSI: 0000000000008946 RDI: 0000000000000003 [ 114.718439][ T6424] RBP: 00007fd912988090 R08: 0000000000000000 R09: 0000000000000000 [ 114.718452][ T6424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.718463][ T6424] R13: 00007fd911db6038 R14: 00007fd911db5fa0 R15: 00007ffd8da83198 [ 114.718498][ T6424] [ 114.718530][ T6424] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.092921][ T6430] tipc: Started in network mode [ 115.113297][ T6430] tipc: Node identity beec6cc8eebb, cluster identity 4711 [ 115.157869][ T6430] tipc: Enabled bearer , priority 0 [ 115.217969][ T6430] tipc: Resetting bearer [ 115.225852][ T6432] syzkaller0: entered promiscuous mode [ 115.276315][ T6432] syzkaller0: entered allmulticast mode [ 115.351344][ T6428] tipc: Resetting bearer [ 115.428388][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.97'. [ 115.470904][ T6428] tipc: Disabling bearer [ 115.652349][ T6453] netlink: 64 bytes leftover after parsing attributes in process `syz.1.100'. [ 115.916148][ T6461] batadv1: entered promiscuous mode [ 116.090253][ T6461] tipc: Enabled bearer , priority 0 [ 116.107705][ T6461] netlink: 156 bytes leftover after parsing attributes in process `syz.3.102'. [ 116.187823][ T6461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 116.245400][ T6467] syzkaller0: entered promiscuous mode [ 116.251529][ T6467] syzkaller0: entered allmulticast mode [ 116.303720][ T6460] tipc: Resetting bearer [ 116.356760][ T6460] tipc: Disabling bearer [ 117.098146][ T6502] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20000 [ 117.432678][ T6515] netlink: 87 bytes leftover after parsing attributes in process `syz.0.114'. [ 117.684060][ T6512] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 117.740651][ T6512] syzkaller0: entered promiscuous mode [ 117.747681][ T6512] syzkaller0: entered allmulticast mode [ 118.155325][ T6542] netlink: 68 bytes leftover after parsing attributes in process `syz.1.125'. [ 118.390733][ T6549] netlink: 16 bytes leftover after parsing attributes in process `syz.1.127'. [ 118.500097][ T6551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 118.640244][ T6558] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.967546][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 120.246933][ T6577] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 120.406265][ T6577] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.463140][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.137'. [ 120.484949][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'. [ 120.553859][ T6582] bond1: (slave ip6gretap1): making interface the new active one [ 120.565242][ T6582] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 120.605870][ T6577] veth3: entered promiscuous mode [ 120.624980][ T6577] bond1: (slave veth3): Enslaving as an active interface with a down link [ 120.660572][ T6593] erspan0: entered allmulticast mode [ 120.678774][ T6601] netlink: 64 bytes leftover after parsing attributes in process `syz.4.139'. [ 120.708574][ T6593] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 120.896383][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.142'. [ 120.915447][ T6609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.143'. [ 121.080303][ T6585] syz.1.138 (6585) used greatest stack depth: 17896 bytes left [ 121.154779][ T6619] netlink: 'syz.2.147': attribute type 64 has an invalid length. [ 121.654224][ T6630] xfrm1: entered allmulticast mode [ 121.934582][ T6642] Bluetooth: MGMT ver 1.23 [ 123.089349][ T6670] bond0: (slave bridge0): Releasing backup interface [ 123.142682][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.150329][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.219708][ T6670] bridge_slave_0: left allmulticast mode [ 123.236562][ T6670] bridge_slave_0: left promiscuous mode [ 123.260711][ T6676] __nla_validate_parse: 5 callbacks suppressed [ 123.260735][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 123.387616][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.464833][ T6679] netlink: 72 bytes leftover after parsing attributes in process `syz.4.162'. [ 123.521460][ T6670] bridge_slave_1: left allmulticast mode [ 123.534291][ T6670] bridge_slave_1: left promiscuous mode [ 123.550800][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.632972][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 123.685927][ T6670] bond0: (slave bond_slave_0): Releasing backup interface [ 123.778864][ T6670] bond0: (slave bond_slave_1): Releasing backup interface [ 123.883516][ T6670] team0: Port device team_slave_0 removed [ 123.959436][ T6670] team0: Port device team_slave_1 removed [ 123.984779][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.031116][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.062454][ T6670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.074283][ T6670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.079332][ T6691] netlink: 'syz.3.165': attribute type 1 has an invalid length. [ 124.117446][ T6672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.297646][ T6691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.165'. [ 124.320137][ T6700] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.356678][ T6692] bond2: (slave gretap1): making interface the new active one [ 124.406729][ T6692] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 125.075708][ T6733] netlink: 56 bytes leftover after parsing attributes in process `syz.1.176'. [ 125.635724][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 125.871525][ T6757] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 125.973530][ T6757] netlink: 'syz.4.181': attribute type 10 has an invalid length. [ 126.017476][ T6757] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 126.053574][ T6757] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 126.080454][ T6758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.181'. [ 126.489957][ T5934] IPVS: starting estimator thread 0... [ 126.515011][ T6775] netlink: 116 bytes leftover after parsing attributes in process `syz.0.187'. [ 126.640298][ T6776] IPVS: using max 30 ests per chain, 72000 per kthread [ 126.754138][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 126.974957][ T6791] netlink: 'syz.1.191': attribute type 3 has an invalid length. [ 127.025124][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 128.098666][ T6789] delete_channel: no stack [ 128.422688][ T6830] veth0_virt_wifi: renamed from veth0_vlan [ 128.525447][ T6839] FAULT_INJECTION: forcing a failure. [ 128.525447][ T6839] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.539502][ T6839] CPU: 1 UID: 0 PID: 6839 Comm: syz.1.203 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 128.539533][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.539545][ T6839] Call Trace: [ 128.539553][ T6839] [ 128.539562][ T6839] dump_stack_lvl+0x189/0x250 [ 128.539597][ T6839] ? __pfx____ratelimit+0x10/0x10 [ 128.539626][ T6839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.539652][ T6839] ? __pfx__printk+0x10/0x10 [ 128.539685][ T6839] ? __might_fault+0xb0/0x130 [ 128.539726][ T6839] should_fail_ex+0x414/0x560 [ 128.539758][ T6839] _copy_from_iter+0x1db/0x16f0 [ 128.539794][ T6839] ? rcu_is_watching+0x15/0xb0 [ 128.539818][ T6839] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 128.539857][ T6839] ? __pfx__copy_from_iter+0x10/0x10 [ 128.539890][ T6839] ? __build_skb_around+0x257/0x3e0 [ 128.539934][ T6839] ? netlink_sendmsg+0x642/0xb30 [ 128.539961][ T6839] ? skb_put+0x11b/0x210 [ 128.539995][ T6839] netlink_sendmsg+0x6b2/0xb30 [ 128.540034][ T6839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.540067][ T6839] ? aa_sock_msg_perm+0xf1/0x1d0 [ 128.540099][ T6839] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.540123][ T6839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.540153][ T6839] __sock_sendmsg+0x21c/0x270 [ 128.540181][ T6839] ____sys_sendmsg+0x505/0x830 [ 128.540220][ T6839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.540264][ T6839] ? import_iovec+0x74/0xa0 [ 128.540289][ T6839] ___sys_sendmsg+0x21f/0x2a0 [ 128.540324][ T6839] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.540398][ T6839] ? __fget_files+0x2a/0x420 [ 128.540430][ T6839] ? __fget_files+0x3a0/0x420 [ 128.540475][ T6839] __x64_sys_sendmsg+0x19b/0x260 [ 128.540511][ T6839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.540556][ T6839] ? __pfx_ksys_write+0x10/0x10 [ 128.540582][ T6839] ? rcu_is_watching+0x15/0xb0 [ 128.540610][ T6839] ? do_syscall_64+0xbe/0x3b0 [ 128.540644][ T6839] do_syscall_64+0xfa/0x3b0 [ 128.540671][ T6839] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.540697][ T6839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.540720][ T6839] ? clear_bhb_loop+0x60/0xb0 [ 128.540746][ T6839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.540768][ T6839] RIP: 0033:0x7fd911b8ebe9 [ 128.540788][ T6839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.540806][ T6839] RSP: 002b:00007fd912988038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.540830][ T6839] RAX: ffffffffffffffda RBX: 00007fd911db5fa0 RCX: 00007fd911b8ebe9 [ 128.540845][ T6839] RDX: 0000000004008000 RSI: 0000200000000300 RDI: 0000000000000004 [ 128.540858][ T6839] RBP: 00007fd912988090 R08: 0000000000000000 R09: 0000000000000000 [ 128.540871][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.540883][ T6839] R13: 00007fd911db6038 R14: 00007fd911db5fa0 R15: 00007ffd8da83198 [ 128.541029][ T6839] [ 129.936659][ T6626] Set syz1 is full, maxelem 65536 reached [ 129.972593][ T6876] ieee802154 phy0 wpan0: encryption failed: -22 [ 129.980998][ T6876] __nla_validate_parse: 2 callbacks suppressed [ 129.981022][ T6876] netlink: 196 bytes leftover after parsing attributes in process `syz.0.211'. [ 130.202117][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 130.450380][ T6898] tipc: Started in network mode [ 130.487584][ T6898] tipc: Node identity cac7655af716, cluster identity 4711 [ 130.507800][ T6898] tipc: Enabled bearer , priority 0 [ 130.545955][ T6903] syzkaller0: entered promiscuous mode [ 130.582667][ T6903] syzkaller0: entered allmulticast mode [ 130.787294][ T6903] tipc: Resetting bearer [ 130.829503][ T6908] Illegal XDP return value 4294967289 on prog (id 90) dev N/A, expect packet loss! [ 130.915682][ T6903] tipc: Disabling bearer [ 130.967778][ T5528] veth0_virt_wifi: left promiscuous mode [ 131.048333][ T6919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 131.099361][ T5528] veth0_virt_wifi: entered promiscuous mode [ 131.300875][ T6929] tun0: tun_chr_ioctl cmd 2148553947 [ 131.911188][ T6952] netlink: 156 bytes leftover after parsing attributes in process `syz.0.226'. [ 132.376828][ T6967] tipc: Enabled bearer , priority 0 [ 132.402967][ T6967] syzkaller0: entered promiscuous mode [ 132.425774][ T6967] syzkaller0: entered allmulticast mode [ 132.526248][ T6967] tipc: Resetting bearer [ 132.545431][ T6970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.231'. [ 132.575900][ T6970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.231'. [ 133.127685][ T6963] tipc: Resetting bearer [ 133.286924][ T6989] netlink: 'syz.0.234': attribute type 1 has an invalid length. [ 133.295743][ T6963] tipc: Disabling bearer [ 133.304257][ T6989] netlink: 244 bytes leftover after parsing attributes in process `syz.0.234'. [ 133.562528][ T6995] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 133.641751][ T7001] openvswitch: netlink: Key type 30 is not supported [ 133.660951][ T6995] team0: Device ipvlan1 failed to register rx_handler [ 133.718460][ T7001] @: renamed from bond_slave_0 (while UP) [ 134.332474][ T7017] lo speed is unknown, defaulting to 1000 [ 134.339333][ T7017] lo speed is unknown, defaulting to 1000 [ 134.348303][ T7017] lo speed is unknown, defaulting to 1000 [ 134.363046][ T7017] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.403606][ T7017] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 134.597019][ T7017] lo speed is unknown, defaulting to 1000 [ 134.632166][ T7017] lo speed is unknown, defaulting to 1000 [ 134.642145][ T7017] lo speed is unknown, defaulting to 1000 [ 134.661301][ T7017] lo speed is unknown, defaulting to 1000 [ 134.719634][ T7017] lo speed is unknown, defaulting to 1000 [ 134.966203][ T7031] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 135.006904][ T7038] FAULT_INJECTION: forcing a failure. [ 135.006904][ T7038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.052319][ T7042] netlink: 'syz.3.248': attribute type 4 has an invalid length. [ 135.074381][ T7042] netlink: 152 bytes leftover after parsing attributes in process `syz.3.248'. [ 135.087030][ T7038] CPU: 1 UID: 0 PID: 7038 Comm: syz.0.251 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 135.087062][ T7038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.087073][ T7038] Call Trace: [ 135.087080][ T7038] [ 135.087089][ T7038] dump_stack_lvl+0x189/0x250 [ 135.087132][ T7038] ? __pfx____ratelimit+0x10/0x10 [ 135.087159][ T7038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.087185][ T7038] ? __pfx__printk+0x10/0x10 [ 135.087228][ T7038] should_fail_ex+0x414/0x560 [ 135.087258][ T7038] _copy_to_user+0x31/0xb0 [ 135.087279][ T7038] simple_read_from_buffer+0xe1/0x170 [ 135.087313][ T7038] proc_fail_nth_read+0x1b3/0x220 [ 135.087337][ T7038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.087359][ T7038] ? rw_verify_area+0x2a6/0x4d0 [ 135.087381][ T7038] ? __lock_acquire+0xab9/0xd20 [ 135.087406][ T7038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.087427][ T7038] vfs_read+0x200/0x980 [ 135.087449][ T7038] ? fdget_pos+0x247/0x320 [ 135.087468][ T7038] ? __pfx___mutex_lock+0x10/0x10 [ 135.087493][ T7038] ? __pfx_vfs_read+0x10/0x10 [ 135.087518][ T7038] ? __fget_files+0x2a/0x420 [ 135.087557][ T7038] ? __fget_files+0x3a0/0x420 [ 135.087582][ T7038] ? __fget_files+0x2a/0x420 [ 135.087616][ T7038] ksys_read+0x145/0x250 [ 135.087642][ T7038] ? __pfx_ksys_read+0x10/0x10 [ 135.087662][ T7038] ? rcu_is_watching+0x15/0xb0 [ 135.087687][ T7038] ? do_syscall_64+0xbe/0x3b0 [ 135.087718][ T7038] do_syscall_64+0xfa/0x3b0 [ 135.087741][ T7038] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.087763][ T7038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.087782][ T7038] ? clear_bhb_loop+0x60/0xb0 [ 135.087807][ T7038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.087825][ T7038] RIP: 0033:0x7efe3e78d5fc [ 135.087842][ T7038] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 135.087857][ T7038] RSP: 002b:00007efe3f68b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.087879][ T7038] RAX: ffffffffffffffda RBX: 00007efe3e9b5fa0 RCX: 00007efe3e78d5fc [ 135.087892][ T7038] RDX: 000000000000000f RSI: 00007efe3f68b0a0 RDI: 0000000000000005 [ 135.087902][ T7038] RBP: 00007efe3f68b090 R08: 0000000000000000 R09: 0000000000000000 [ 135.087913][ T7038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.087923][ T7038] R13: 00007efe3e9b6038 R14: 00007efe3e9b5fa0 R15: 00007ffd08f8d558 [ 135.087955][ T7038] [ 135.615091][ T7042] : renamed from bond0 (while UP) [ 135.753419][ T7067] netlink: 44 bytes leftover after parsing attributes in process `syz.1.255'. [ 135.848194][ T5864] Bluetooth: hci4: command tx timeout [ 135.959625][ T7072] netlink: 48 bytes leftover after parsing attributes in process `syz.2.256'. [ 135.984898][ T7074] netlink: 80 bytes leftover after parsing attributes in process `syz.0.257'. [ 136.203545][ T7087] netlink: 'syz.1.260': attribute type 5 has an invalid length. [ 136.317740][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 136.345722][ T7090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 136.413823][ T7093] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 136.449337][ T7093] netlink: 'syz.0.262': attribute type 2 has an invalid length. [ 136.505718][ T7093] netlink: 1508 bytes leftover after parsing attributes in process `syz.0.262'. [ 136.592206][ T7098] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 136.603928][ T7098] netlink: 2 bytes leftover after parsing attributes in process `syz.4.264'. [ 136.685064][ T7103] TCP: TCP_TX_DELAY enabled [ 137.109594][ T7122] netlink: 68 bytes leftover after parsing attributes in process `syz.2.270'. [ 137.313623][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 137.459818][ T7139] netlink: 'syz.1.276': attribute type 83 has an invalid length. [ 138.006280][ T7154] lo speed is unknown, defaulting to 1000 [ 138.416805][ T7178] lo speed is unknown, defaulting to 1000 [ 138.478254][ T7180] tipc: Enabled bearer , priority 0 [ 138.492611][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.502567][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.551518][ T7180] syzkaller0: entered promiscuous mode [ 138.557069][ T7180] syzkaller0: entered allmulticast mode [ 138.891142][ T7179] tipc: Resetting bearer [ 138.914787][ T7198] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 138.926523][ T7179] tipc: Disabling bearer [ 138.938535][ T7198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.535671][ T7245] __nla_validate_parse: 2 callbacks suppressed [ 140.535703][ T7245] netlink: 40 bytes leftover after parsing attributes in process `syz.3.298'. [ 141.494707][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.307'. [ 141.992431][ T7305] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 142.585050][ T7330] tipc: Enabled bearer , priority 0 [ 142.764611][ T7330] tipc: Disabling bearer [ 142.821114][ T7345] IPv6: addrconf: prefix option has invalid lifetime [ 142.888858][ T7348] IPv6: addrconf: prefix option has invalid lifetime [ 142.911446][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'. [ 143.583161][ T7377] lo speed is unknown, defaulting to 1000 [ 143.801174][ T7389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.328'. [ 143.845200][ T7389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.328'. [ 143.886395][ T7389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.328'. [ 143.904024][ T7378] lo speed is unknown, defaulting to 1000 [ 143.925542][ T7389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.328'. [ 143.994707][ T7394] netlink: 'syz.4.328': attribute type 10 has an invalid length. [ 144.099847][ T7394] team0: Device ipvlan1 failed to register rx_handler [ 144.211523][ T7407] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.330'. [ 144.540829][ T7419] netlink: 'syz.2.333': attribute type 29 has an invalid length. [ 144.630801][ T7419] netlink: 'syz.2.333': attribute type 29 has an invalid length. [ 144.645726][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 144.657100][ T7419] netlink: 500 bytes leftover after parsing attributes in process `syz.2.333'. [ 144.680328][ T7419] unsupported nla_type 58 [ 144.701376][ T7423] 8021q: adding VLAN 0 to HW filter on device  [ 144.712638][ T7423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.367025][ T7443] syzkaller0: entered promiscuous mode [ 145.384472][ T7443] syzkaller0: entered allmulticast mode [ 146.112774][ T7475] __nla_validate_parse: 1 callbacks suppressed [ 146.112794][ T7475] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.348'. [ 146.724114][ T7470] lo speed is unknown, defaulting to 1000 [ 147.016169][ T7496] lo speed is unknown, defaulting to 1000 [ 147.160041][ T7493] lo speed is unknown, defaulting to 1000 [ 147.357658][ T5866] IPVS: starting estimator thread 0... [ 147.457430][ T7514] IPVS: using max 24 ests per chain, 57600 per kthread [ 147.474208][ T7517] tipc: Started in network mode [ 147.484463][ T7517] tipc: Node identity 12d0dba43bed, cluster identity 4711 [ 147.493595][ T7517] tipc: Enabled bearer , priority 0 [ 147.519801][ T7517] syzkaller0: entered promiscuous mode [ 147.525466][ T7517] syzkaller0: entered allmulticast mode [ 147.616897][ T7517] tipc: Resetting bearer [ 147.654796][ T7516] tipc: Resetting bearer [ 147.721619][ T7516] tipc: Disabling bearer [ 147.749020][ T7526] netlink: 52 bytes leftover after parsing attributes in process `syz.4.361'. [ 148.082597][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'. [ 148.310306][ T7535] syzkaller0: entered promiscuous mode [ 148.316982][ T7535] syzkaller0: entered allmulticast mode [ 148.398808][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.406586][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.513232][ T7533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.532909][ T7533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.926783][ T7558] netlink: 'syz.3.368': attribute type 32 has an invalid length. [ 148.936787][ T7558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.368'. [ 149.389558][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.369'. [ 149.591856][ T7573] netlink: 52 bytes leftover after parsing attributes in process `syz.3.370'. [ 149.616693][ T7573] netlink: 52 bytes leftover after parsing attributes in process `syz.3.370'. [ 149.682037][ T7574] netlink: 'syz.3.370': attribute type 10 has an invalid length. [ 150.224621][ T1158] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.334128][ T7571] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 150.405058][ T7572] bond1: (slave erspan0): Releasing active interface [ 150.413158][ T7572] ip6gretap1: entered promiscuous mode [ 150.463899][ T7572] bridge_slave_0: left allmulticast mode [ 150.470216][ T7572] bridge_slave_0: left promiscuous mode [ 150.477041][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.503376][ T7572] bridge_slave_1: left allmulticast mode [ 150.533187][ T7572] bridge_slave_1: left promiscuous mode [ 150.542573][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.581011][ T7572] : (slave bond_slave_0): Releasing backup interface [ 150.618572][ T7572] : (slave bond_slave_1): Releasing backup interface [ 150.663657][ T7572] team_slave_0: left promiscuous mode [ 150.679339][ T7572] team0: Port device team_slave_0 removed [ 150.686875][ T7572] team_slave_1: left promiscuous mode [ 150.701776][ T7572] team0: Port device team_slave_1 removed [ 150.711132][ T7572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.720172][ T7572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.730370][ T7572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.738525][ T7572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.762517][ T7572] bond1: (slave ip6gretap1): Releasing active interface [ 150.770541][ T7572] bond1: (slave ip6gretap1): the permanent HWaddr of slave - ca:84:e0:38:d1:b7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 150.798518][ T7572] ip6gretap1: left promiscuous mode [ 150.810617][ T7572] bond1: (slave veth3): Releasing active interface [ 150.823022][ T7572] bond2: (slave gretap1): Releasing active interface [ 150.847669][ T7574] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 150.855436][ T7574] wlan1: mtu less than device minimum [ 150.861445][ T7574] : (slave wlan1): Error -22 calling dev_set_mtu [ 150.870108][ T7575] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 150.880596][ T1158] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.892163][ T7575] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 150.904156][ T1158] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.916021][ T7575] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 150.962635][ T7577] team0: Device gtp0 is of different type [ 151.033408][ T1158] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.174646][ T7601] netlink: 'syz.4.379': attribute type 32 has an invalid length. [ 151.192810][ T7601] netlink: 60 bytes leftover after parsing attributes in process `syz.4.379'. [ 151.317991][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 151.403570][ T7616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.381'. [ 151.605999][ T7608] bridge_slave_1: left allmulticast mode [ 151.635088][ T7608] bridge_slave_1: left promiscuous mode [ 151.645501][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.669019][ T7608] bridge_slave_0: left allmulticast mode [ 151.679842][ T7608] bridge_slave_0: left promiscuous mode [ 151.685942][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.862691][ T7619] tipc: Started in network mode [ 151.874729][ T7619] tipc: Node identity 1a7fcc0364d8, cluster identity 4711 [ 151.896707][ T7619] tipc: Enabled bearer , priority 0 [ 151.906337][ T7630] veth0_to_bond: entered allmulticast mode [ 151.935438][ T7626] syzkaller0: entered promiscuous mode [ 151.941191][ T7626] syzkaller0: entered allmulticast mode [ 151.977082][ T7634] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 152.018046][ T7619] tipc: Disabling bearer [ 152.051644][ T7640] tipc: Enabled bearer , priority 0 [ 152.065110][ T7636] netlink: 48 bytes leftover after parsing attributes in process `syz.4.384'. [ 152.081387][ T7636] syzkaller0: entered promiscuous mode [ 152.088677][ T7636] syzkaller0: entered allmulticast mode [ 152.199110][ T7639] syzkaller0: entered promiscuous mode [ 152.204810][ T7639] syzkaller0: entered allmulticast mode [ 152.296833][ T7646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.348864][ T7640] tipc: Resetting bearer [ 153.078535][ T5967] tipc: Node number set to 1037133146 [ 153.683400][ T7670] netlink: 'syz.0.394': attribute type 32 has an invalid length. [ 153.694910][ T7670] netlink: 60 bytes leftover after parsing attributes in process `syz.0.394'. [ 153.823048][ T7652] IPv6: sit1: Disabled Multicast RS [ 153.836655][ T7636] tipc: Resetting bearer [ 153.874294][ T7636] tipc: Disabling bearer [ 153.969643][ T7646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.996854][ T7677] netlink: 'syz.2.395': attribute type 83 has an invalid length. [ 154.023560][ T7655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.389'. [ 154.085809][ T7680] netlink: 32 bytes leftover after parsing attributes in process `syz.4.396'. [ 154.191597][ T7646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.213140][ T7683] sctp: [Deprecated]: syz.2.397 (pid 7683) Use of int in max_burst socket option. [ 154.213140][ T7683] Use struct sctp_assoc_value instead [ 154.288405][ T7683] netlink: 'syz.2.397': attribute type 7 has an invalid length. [ 154.418740][ T7683] : entered promiscuous mode [ 154.462923][ T7691] netlink: 24 bytes leftover after parsing attributes in process `syz.0.399'. [ 154.584789][ T7693] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.399'. [ 154.663233][ T7646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.718772][ T7689] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.400'. [ 154.780577][ T7689] lo speed is unknown, defaulting to 1000 [ 154.852346][ T7698] lo speed is unknown, defaulting to 1000 [ 155.167803][ T7716] tipc: Can't bind to reserved service type 2 [ 155.483633][ T7725] bond0 (unregistering): Released all slaves [ 155.504704][ T30] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.531828][ T7715] lo speed is unknown, defaulting to 1000 [ 155.574655][ T30] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.741205][ T7735] netlink: 'syz.4.410': attribute type 1 has an invalid length. [ 155.764402][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.841418][ T7735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.892526][ T7739] bond1: (slave gretap1): making interface the new active one [ 155.912348][ T7739] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 155.942626][ T30] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.205874][ T7750] netlink: 'syz.2.414': attribute type 1 has an invalid length. [ 156.215759][ T7750] __nla_validate_parse: 6 callbacks suppressed [ 156.215782][ T7750] netlink: 224 bytes leftover after parsing attributes in process `syz.2.414'. [ 156.690174][ T7768] netlink: 212924 bytes leftover after parsing attributes in process `syz.2.418'. [ 156.862657][ T7775] FAULT_INJECTION: forcing a failure. [ 156.862657][ T7775] name failslab, interval 1, probability 0, space 0, times 0 [ 156.895940][ T7775] CPU: 1 UID: 0 PID: 7775 Comm: syz.1.420 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 156.895976][ T7775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.895989][ T7775] Call Trace: [ 156.895998][ T7775] [ 156.896007][ T7775] dump_stack_lvl+0x189/0x250 [ 156.896042][ T7775] ? __pfx____ratelimit+0x10/0x10 [ 156.896071][ T7775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.896098][ T7775] ? __pfx__printk+0x10/0x10 [ 156.896136][ T7775] ? __pfx___might_resched+0x10/0x10 [ 156.896157][ T7775] ? fs_reclaim_acquire+0x7d/0x100 [ 156.896198][ T7775] should_fail_ex+0x414/0x560 [ 156.896230][ T7775] should_failslab+0xa8/0x100 [ 156.896266][ T7775] __kmalloc_noprof+0xcb/0x4f0 [ 156.896293][ T7775] ? kfree+0x4d/0x440 [ 156.896316][ T7775] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 156.896356][ T7775] tomoyo_realpath_from_path+0xe3/0x5d0 [ 156.896391][ T7775] ? tomoyo_domain+0xd9/0x130 [ 156.896437][ T7775] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 156.896465][ T7775] tomoyo_path_number_perm+0x1e8/0x5a0 [ 156.896495][ T7775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 156.896543][ T7775] ? __lock_acquire+0xab9/0xd20 [ 156.896600][ T7775] ? __fget_files+0x2a/0x420 [ 156.896637][ T7775] ? __fget_files+0x2a/0x420 [ 156.896668][ T7775] ? __fget_files+0x3a0/0x420 [ 156.896700][ T7775] ? __fget_files+0x2a/0x420 [ 156.896737][ T7775] security_file_ioctl+0xcb/0x2d0 [ 156.896766][ T7775] __se_sys_ioctl+0x47/0x170 [ 156.896797][ T7775] do_syscall_64+0xfa/0x3b0 [ 156.896825][ T7775] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.896851][ T7775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.896873][ T7775] ? clear_bhb_loop+0x60/0xb0 [ 156.896900][ T7775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.896922][ T7775] RIP: 0033:0x7fd911b8ebe9 [ 156.896942][ T7775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.896959][ T7775] RSP: 002b:00007fd912988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.896981][ T7775] RAX: ffffffffffffffda RBX: 00007fd911db5fa0 RCX: 00007fd911b8ebe9 [ 156.896996][ T7775] RDX: 0000200000000040 RSI: 000000004008b100 RDI: 0000000000000003 [ 156.897009][ T7775] RBP: 00007fd912988090 R08: 0000000000000000 R09: 0000000000000000 [ 156.897022][ T7775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.897035][ T7775] R13: 00007fd911db6038 R14: 00007fd911db5fa0 R15: 00007ffd8da83198 [ 156.897068][ T7775] [ 156.897078][ T7775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.292356][ T5941] IPVS: starting estimator thread 0... [ 157.304023][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.423'. [ 157.387382][ T7787] IPVS: using max 24 ests per chain, 57600 per kthread [ 157.466143][ T7784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.782730][ T7807] lo speed is unknown, defaulting to 1000 [ 157.904885][ T7809] netlink: 316 bytes leftover after parsing attributes in process `syz.0.429'. [ 158.907285][ T7844] trusted_key: syz.0.439 sent an empty control message without MSG_MORE. [ 159.173585][ T7867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.444'. [ 159.194539][ T7867] netlink: 28 bytes leftover after parsing attributes in process `syz.2.444'. [ 159.215247][ T7867] netlink: 'syz.2.444': attribute type 4 has an invalid length. [ 159.528303][ T7888] FAULT_INJECTION: forcing a failure. [ 159.528303][ T7888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.550728][ T7888] CPU: 1 UID: 0 PID: 7888 Comm: syz.1.451 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 159.550763][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.550776][ T7888] Call Trace: [ 159.550785][ T7888] [ 159.550794][ T7888] dump_stack_lvl+0x189/0x250 [ 159.550830][ T7888] ? __pfx____ratelimit+0x10/0x10 [ 159.550860][ T7888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.550886][ T7888] ? __pfx__printk+0x10/0x10 [ 159.550918][ T7888] ? __might_fault+0xb0/0x130 [ 159.550963][ T7888] should_fail_ex+0x414/0x560 [ 159.550996][ T7888] _copy_from_user+0x2d/0xb0 [ 159.551018][ T7888] pppoe_ioctl+0x364/0x5d0 [ 159.551053][ T7888] pppox_ioctl+0x1bc/0x300 [ 159.551084][ T7888] sock_do_ioctl+0xd9/0x300 [ 159.551113][ T7888] ? __pfx_sock_do_ioctl+0x10/0x10 [ 159.551146][ T7888] ? __lock_acquire+0xab9/0xd20 [ 159.551196][ T7888] sock_ioctl+0x576/0x790 [ 159.551221][ T7888] ? __pfx_sock_ioctl+0x10/0x10 [ 159.551244][ T7888] ? __fget_files+0x2a/0x420 [ 159.551276][ T7888] ? __fget_files+0x3a0/0x420 [ 159.551308][ T7888] ? __fget_files+0x2a/0x420 [ 159.551344][ T7888] ? bpf_lsm_file_ioctl+0x9/0x20 [ 159.551373][ T7888] ? __pfx_sock_ioctl+0x10/0x10 [ 159.551395][ T7888] __se_sys_ioctl+0xfc/0x170 [ 159.551425][ T7888] do_syscall_64+0xfa/0x3b0 [ 159.551453][ T7888] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.551480][ T7888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.551502][ T7888] ? clear_bhb_loop+0x60/0xb0 [ 159.551530][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.551551][ T7888] RIP: 0033:0x7fd911b8ebe9 [ 159.551572][ T7888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.551591][ T7888] RSP: 002b:00007fd912988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.551615][ T7888] RAX: ffffffffffffffda RBX: 00007fd911db5fa0 RCX: 00007fd911b8ebe9 [ 159.551630][ T7888] RDX: 0000200000000040 RSI: 000000004008b100 RDI: 0000000000000003 [ 159.551643][ T7888] RBP: 00007fd912988090 R08: 0000000000000000 R09: 0000000000000000 [ 159.551655][ T7888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.551667][ T7888] R13: 00007fd911db6038 R14: 00007fd911db5fa0 R15: 00007ffd8da83198 [ 159.551700][ T7888] [ 160.409752][ T7919] netlink: 'syz.3.458': attribute type 13 has an invalid length. [ 160.410262][ T7916] lo speed is unknown, defaulting to 1000 [ 160.417865][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 160.503769][ T7917] lo speed is unknown, defaulting to 1000 [ 160.690945][ T7930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 160.708353][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.462'. [ 160.741095][ T7925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.837229][ T7935] IPv6: Can't replace route, no match found [ 160.863803][ T7932] FAULT_INJECTION: forcing a failure. [ 160.863803][ T7932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.883580][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.0.464 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(full) [ 160.883612][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.883625][ T7932] Call Trace: [ 160.883634][ T7932] [ 160.883643][ T7932] dump_stack_lvl+0x189/0x250 [ 160.883678][ T7932] ? __pfx____ratelimit+0x10/0x10 [ 160.883706][ T7932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.883734][ T7932] ? __pfx__printk+0x10/0x10 [ 160.883779][ T7932] should_fail_ex+0x414/0x560 [ 160.883810][ T7932] _copy_to_user+0x31/0xb0 [ 160.883833][ T7932] simple_read_from_buffer+0xe1/0x170 [ 160.883872][ T7932] proc_fail_nth_read+0x1b3/0x220 [ 160.883901][ T7932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.883930][ T7932] ? rw_verify_area+0x2a6/0x4d0 [ 160.883957][ T7932] ? __lock_acquire+0xab9/0xd20 [ 160.883988][ T7932] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.884014][ T7932] vfs_read+0x200/0x980 [ 160.884040][ T7932] ? fdget_pos+0x247/0x320 [ 160.884064][ T7932] ? __pfx___mutex_lock+0x10/0x10 [ 160.884095][ T7932] ? __pfx_vfs_read+0x10/0x10 [ 160.884125][ T7932] ? __fget_files+0x2a/0x420 [ 160.884164][ T7932] ? __fget_files+0x3a0/0x420 [ 160.884204][ T7932] ? __fget_files+0x2a/0x420 [ 160.884248][ T7932] ksys_read+0x145/0x250 [ 160.884276][ T7932] ? __fget_files+0x3a0/0x420 [ 160.884311][ T7932] ? __pfx_ksys_read+0x10/0x10 [ 160.884346][ T7932] ? do_syscall_64+0xbe/0x3b0 [ 160.884380][ T7932] do_syscall_64+0xfa/0x3b0 [ 160.884407][ T7932] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.884434][ T7932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.884456][ T7932] ? clear_bhb_loop+0x60/0xb0 [ 160.884484][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.884505][ T7932] RIP: 0033:0x7efe3e78d5fc [ 160.884525][ T7932] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 160.884544][ T7932] RSP: 002b:00007efe3f68b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.884566][ T7932] RAX: ffffffffffffffda RBX: 00007efe3e9b5fa0 RCX: 00007efe3e78d5fc [ 160.884582][ T7932] RDX: 000000000000000f RSI: 00007efe3f68b0a0 RDI: 0000000000000005 [ 160.884598][ T7932] RBP: 00007efe3f68b090 R08: 0000000000000000 R09: 0000000000000000 [ 160.884611][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.884623][ T7932] R13: 00007efe3e9b6038 R14: 00007efe3e9b5fa0 R15: 00007ffd08f8d558 [ 160.884659][ T7932] [ 161.161042][ T7925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.392718][ T7944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.465'. [ 161.655681][ T7963] netlink: 'syz.0.471': attribute type 1 has an invalid length. [ 161.721064][ T7957] netlink: 36 bytes leftover after parsing attributes in process `syz.0.471'. [ 162.109647][ T7981] netlink: 128 bytes leftover after parsing attributes in process `syz.4.477'. [ 162.124122][ T7983] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 162.144106][ T7981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.477'. [ 162.461849][ T8002] netlink: 48 bytes leftover after parsing attributes in process `syz.3.483'. [ 162.502736][ T8005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.484'. [ 162.564066][ T8008] netlink: zone id is out of range [ 162.569737][ T8008] netlink: zone id is out of range [ 162.575511][ T8008] netlink: zone id is out of range [ 162.580948][ T8008] netlink: zone id is out of range [ 162.586846][ T8008] netlink: zone id is out of range [ 162.593930][ T8008] netlink: zone id is out of range [ 162.642383][ T8011] vlan3: entered allmulticast mode [ 162.647829][ T8011] veth1: entered allmulticast mode [ 162.654460][ T8011] batman_adv: batadv0: Adding interface: vlan3 [ 162.662980][ T8008] netlink: set zone limit has 4 unknown bytes [ 162.672407][ T8011] batman_adv: batadv0: The MTU of interface vlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.699380][ T8011] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 162.714038][ T8009] netlink: 56 bytes leftover after parsing attributes in process `syz.1.485'. [ 162.723223][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.486'. [ 162.906390][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 162.906417][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 163.104056][ T8030] bridge0: entered allmulticast mode [ 163.159299][ T8030] bridge0 (unregistering): left allmulticast mode [ 163.244334][ T8036] netlink: 'syz.0.496': attribute type 13 has an invalid length. [ 163.414502][ T8040] netlink: 'syz.0.498': attribute type 21 has an invalid length. [ 163.446656][ T8040] netlink: 'syz.0.498': attribute type 4 has an invalid length. [ 163.467726][ T8040] netlink: 'syz.0.498': attribute type 3 has an invalid length. [ 163.490158][ T8044] batadv_slave_0: mtu greater than device maximum [ 163.673309][ T5941] lo speed is unknown, defaulting to 1000 [ 163.716516][ T8056] tipc: Enabled bearer , priority 0 [ 163.755978][ T8056] syzkaller0: entered promiscuous mode [ 163.773425][ T8056] syzkaller0: entered allmulticast mode [ 164.018783][ T8056] tipc: Resetting bearer [ 164.061091][ T8056] tipc: Disabling bearer [ 165.336147][ T8122] netlink: 'syz.4.522': attribute type 10 has an invalid length. [ 165.418048][ T8128] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 165.575387][ T8119] syzkaller0: entered promiscuous mode [ 165.594925][ T8119] syzkaller0: entered allmulticast mode [ 165.623852][ T8122] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.656915][ T8122] bond0: (slave team0): Enslaving as an active interface with an up link [ 166.158261][ T8144] netlink: 'syz.1.525': attribute type 10 has an invalid length. [ 167.551085][ T8144] veth0_vlan: left promiscuous mode [ 167.591781][ T8144] veth0_vlan: entered promiscuous mode [ 167.650073][ T8144] team0: Device veth0_vlan failed to register rx_handler [ 167.730392][ T8174] Bluetooth: MGMT ver 1.23 [ 167.942116][ T8183] __nla_validate_parse: 13 callbacks suppressed [ 167.942150][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 168.050454][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 168.150435][ T8190] netlink: 64 bytes leftover after parsing attributes in process `syz.2.537'. [ 168.418966][ T8193] netlink: 96 bytes leftover after parsing attributes in process `syz.3.538'. [ 168.629959][ T8205] IPv6: NLM_F_REPLACE set, but no existing node found! [ 168.775227][ T8207] lo speed is unknown, defaulting to 1000 [ 168.955855][ T8217] netlink: ct family unspecified [ 168.980726][ T8217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.043207][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.546'. [ 169.407732][ T8234] vlan0: entered promiscuous mode [ 169.609067][ T8241] netlink: 'syz.1.551': attribute type 10 has an invalid length. [ 169.682568][ T8241] syz_tun: entered promiscuous mode [ 169.765777][ T8241] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 169.803403][ T8250] veth1_to_team: entered allmulticast mode [ 170.066615][ T8256] tipc: Enabled bearer , priority 0 [ 170.103018][ T8256] tipc: Resetting bearer [ 170.123072][ T8256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.556'. [ 170.182631][ T8255] tipc: Disabling bearer [ 170.203533][ T8262] tipc: Enabled bearer , priority 0 [ 170.211928][ T8262] syzkaller0: entered promiscuous mode [ 170.220372][ T8262] syzkaller0: entered allmulticast mode [ 170.294425][ T8262] tipc: Resetting bearer [ 170.323649][ T8261] tipc: Resetting bearer [ 170.399700][ T8261] tipc: Disabling bearer [ 170.429032][ T8268] netlink: 96 bytes leftover after parsing attributes in process `syz.2.558'. [ 170.507939][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 170.783099][ T8283] lo speed is unknown, defaulting to 1000 [ 170.783122][ T8276] netlink: 68 bytes leftover after parsing attributes in process `syz.0.560'. [ 171.377790][ T8303] syzkaller0: entered promiscuous mode [ 171.383042][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.566'. [ 171.395585][ T8303] syzkaller0: entered allmulticast mode [ 171.664471][ T8313] netlink: 'syz.1.568': attribute type 11 has an invalid length. [ 171.714047][ T8313] netlink: 'syz.1.568': attribute type 12 has an invalid length. [ 172.070247][ T8326] netlink: 'syz.3.573': attribute type 13 has an invalid length. [ 172.089951][ T8331] ip6gre1: entered allmulticast mode [ 172.604602][ T8334] lo speed is unknown, defaulting to 1000 [ 172.868999][ T8348] lo speed is unknown, defaulting to 1000 [ 173.432514][ T8371] __nla_validate_parse: 6 callbacks suppressed [ 173.432538][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 173.943383][ T8391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.587'. [ 174.844549][ T8451] netlink: 'syz.2.602': attribute type 1 has an invalid length. [ 174.938817][ T8451] bond1 (unregistering): Released all slaves [ 174.973594][ T8459] vlan2: entered promiscuous mode [ 174.983713][ T8459] vlan2: entered allmulticast mode [ 174.996677][ T8459] hsr_slave_1: entered allmulticast mode [ 175.066781][ T8451] bond1 (unregistering): Released all slaves [ 175.131699][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.603'. [ 175.159893][ T8464] netlink: 'syz.3.606': attribute type 3 has an invalid length. [ 175.179257][ T8464] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.606'. [ 175.416928][ T8451] bond1 (unregistering): Released all slaves [ 175.585981][ T8451] bond1 (unregistering): Released all slaves [ 175.653868][ T8472] lo speed is unknown, defaulting to 1000 [ 175.733196][ T8481] tipc: Enabled bearer , priority 0 [ 175.778625][ T8481] syzkaller0: entered promiscuous mode [ 175.802124][ T8481] syzkaller0: entered allmulticast mode [ 176.118262][ T8481] tipc: Resetting bearer [ 176.140228][ T8493] netlink: 'syz.2.614': attribute type 5 has an invalid length. [ 176.179478][ T8479] tipc: Resetting bearer [ 176.252502][ T8479] tipc: Disabling bearer [ 176.314211][ T8510] netlink: 'syz.4.620': attribute type 9 has an invalid length. [ 176.325186][ T8510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.620'. [ 176.462202][ T8510] vlan2: entered promiscuous mode [ 176.491368][ T8510] bond0: entered promiscuous mode [ 176.504704][ T8510] @: entered promiscuous mode [ 176.517657][ T8510] bond_slave_1: entered promiscuous mode [ 176.526035][ T8510] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 176.535603][ T8519] netlink: 'syz.3.621': attribute type 4 has an invalid length. [ 176.539789][ T8510] team0: entered promiscuous mode [ 176.551640][ T8510] team_slave_0: entered promiscuous mode [ 176.558907][ T8510] team_slave_1: entered promiscuous mode [ 176.894483][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 177.094121][ T5967] lo speed is unknown, defaulting to 1000 [ 177.098260][ T7563] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.122758][ T5967] syz1: Port: 1 Link DOWN [ 177.127323][ T7563] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.173393][ T7563] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.207251][ T7563] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.315036][ T8537] ip6tnl2: entered promiscuous mode [ 177.335323][ T8537] ip6tnl2: entered allmulticast mode [ 177.466409][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'. [ 177.522952][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 177.570050][ T1336] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.592852][ T1336] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.611026][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 177.634867][ T1336] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.650982][ T8551] netlink: 180 bytes leftover after parsing attributes in process `syz.3.631'. [ 177.654020][ T1336] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.841592][ T8559] netlink: 'syz.1.633': attribute type 10 has an invalid length. [ 177.866962][ T8559] netlink: 'syz.1.633': attribute type 49 has an invalid length. [ 178.630814][ T8583] netlink: 'syz.1.641': attribute type 1 has an invalid length. [ 178.827087][ T8595] lo speed is unknown, defaulting to 1000 [ 178.965078][ T8604] __nla_validate_parse: 1 callbacks suppressed [ 178.965102][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'. [ 179.128846][ T8613] tipc: Enabled bearer , priority 0 [ 179.140742][ T8613] syzkaller0: entered promiscuous mode [ 179.146985][ T8613] syzkaller0: entered allmulticast mode [ 179.212149][ T8613] tipc: Resetting bearer [ 179.220732][ T8612] tipc: Resetting bearer [ 179.240891][ T8612] tipc: Disabling bearer [ 179.415611][ T8624] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 179.442312][ T8624] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.460286][ T8624] bond0: (slave team0): Enslaving as an active interface with an up link [ 179.625849][ T8639] netlink: 'syz.3.655': attribute type 46 has an invalid length. [ 179.628971][ T8641] netlink: 48 bytes leftover after parsing attributes in process `syz.2.656'. [ 179.755190][ T8646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.658'. [ 179.784431][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 179.788548][ T8646] geneve0: entered promiscuous mode [ 179.806392][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.659'. [ 179.808128][ T8646] team0: Port device geneve0 added [ 179.836009][ T8654] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 179.854338][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 179.878701][ T8654] netlink: 28 bytes leftover after parsing attributes in process `syz.1.660'. [ 179.901158][ T8654] openvswitch: netlink: Flow key attr not present in new flow. [ 179.983583][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 179.999396][ T8662] validate_nla: 2 callbacks suppressed [ 179.999416][ T8662] netlink: 'syz.2.662': attribute type 30 has an invalid length. [ 180.029979][ T3500] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.030219][ T8662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 180.045712][ T1336] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.050407][ T8662] netlink: 'syz.2.662': attribute type 30 has an invalid length. [ 180.065352][ T1336] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.085573][ T1336] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.763652][ T8703] netlink: 116 bytes leftover after parsing attributes in process `syz.2.669'. [ 181.116367][ T8711] lo speed is unknown, defaulting to 1000 [ 181.155124][ T8713] lo speed is unknown, defaulting to 1000 [ 181.564524][ T8731] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 181.772748][ T8738] lo speed is unknown, defaulting to 1000 [ 181.903008][ T8744] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20004 [ 182.102394][ T8757] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 182.791651][ T8779] netlink: 'syz.1.691': attribute type 9 has an invalid length. [ 182.911471][ T8779] hsr0: entered promiscuous mode [ 182.921022][ T8779] macvlan2: entered promiscuous mode [ 182.931370][ T8779] macvlan2: entered allmulticast mode [ 182.949303][ T8779] hsr0: entered allmulticast mode [ 182.961421][ T8779] hsr_slave_0: entered allmulticast mode [ 182.984771][ T8779] hsr_slave_1: entered allmulticast mode [ 183.583120][ T8829] tipc: Enabling of bearer rejected, failed to enable media [ 183.760135][ T8823] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 184.139713][ T8829] syzkaller0: entered promiscuous mode [ 184.165620][ T8829] syzkaller0: entered allmulticast mode [ 184.543434][ T8854] netlink: 'syz.2.708': attribute type 1 has an invalid length. [ 184.558305][ T8851] __nla_validate_parse: 6 callbacks suppressed [ 184.558327][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 184.593571][ T8854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 184.715987][ T8859] geneve2: entered allmulticast mode [ 184.924307][ T8867] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 185.187423][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 185.200972][ T8881] sctp: [Deprecated]: syz.1.715 (pid 8881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.200972][ T8881] Use struct sctp_sack_info instead [ 185.256976][ T8885] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 185.270625][ T8885] netlink: 220 bytes leftover after parsing attributes in process `syz.0.717'. [ 185.282840][ T8885] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 186.055164][ T8914] IPVS: Unknown mcast interface: bridge0 [ 186.146039][ T8918] tipc: Enabled bearer , priority 0 [ 186.187781][ T8920] tipc: Enabling of bearer rejected, already enabled [ 186.230988][ T8918] syzkaller0: entered promiscuous mode [ 186.236536][ T8918] syzkaller0: entered allmulticast mode [ 186.319613][ T8918] tipc: Resetting bearer [ 186.383117][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 186.393592][ T8917] tipc: Resetting bearer [ 186.427039][ T8933] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 186.435418][ T8933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.448459][ T8917] tipc: Disabling bearer [ 186.479777][ T8937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.734'. [ 186.530090][ T8940] syzkaller0: entered allmulticast mode [ 186.568487][ T8925] syzkaller0 (unregistering): left allmulticast mode [ 186.681849][ T8946] sctp: [Deprecated]: syz.2.736 (pid 8946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.681849][ T8946] Use struct sctp_sack_info instead [ 186.891327][ T8958] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 186.967875][ T8960] tipc: Enabled bearer , priority 0 [ 187.057035][ T8961] syzkaller0: entered promiscuous mode [ 187.103774][ T8961] syzkaller0: entered allmulticast mode [ 187.134552][ T8960] tipc: Enabling of bearer rejected, already enabled [ 187.252978][ T8961] tipc: Resetting bearer [ 187.318887][ T8961] tipc: Disabling bearer [ 187.360838][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 187.381585][ T8977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 187.541743][ T8985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.748'. [ 187.575819][ T8987] netlink: 40 bytes leftover after parsing attributes in process `syz.3.749'. [ 187.751769][ T8995] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 187.759655][ T8995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.771760][ T8998] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 187.780627][ T8996] syzkaller1: entered allmulticast mode [ 187.823292][ T8999] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 187.917674][ T9000] netlink: 'syz.4.752': attribute type 10 has an invalid length. [ 187.965006][ T8998] bond0: (slave team0): Releasing backup interface [ 187.978181][ T8998] team0: left promiscuous mode [ 187.988082][ T8998] team_slave_0: left promiscuous mode [ 188.010078][ T8998] team_slave_1: left promiscuous mode [ 188.032789][ T8998] batman_adv: batadv0: Adding interface: team0 [ 188.055945][ T8998] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.142224][ T8998] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 188.199570][ T8999] team0: entered promiscuous mode [ 188.221742][ T8999] team_slave_0: entered promiscuous mode [ 188.244301][ T8999] team_slave_1: entered promiscuous mode [ 188.285613][ T8999] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.326250][ T8999] batman_adv: batadv0: Interface activated: team0 [ 188.342076][ T8999] batman_adv: batadv0: Interface deactivated: team0 [ 188.369757][ T8999] batman_adv: batadv0: Removing interface: team0 [ 188.379895][ T8999] bridge0: port 3(team0) entered blocking state [ 188.386586][ T8999] bridge0: port 3(team0) entered disabled state [ 188.421580][ T8999] team0: entered allmulticast mode [ 188.431184][ T8999] team_slave_0: entered allmulticast mode [ 188.447529][ T8999] team_slave_1: entered allmulticast mode [ 188.458484][ T8999] bridge0: port 3(team0) entered blocking state [ 188.464978][ T8999] bridge0: port 3(team0) entered forwarding state [ 188.645144][ T9019] bridge0: entered promiscuous mode [ 188.663878][ T9007] lo speed is unknown, defaulting to 1000 [ 188.691857][ T9022] ip6tnl1: entered promiscuous mode [ 188.727682][ T9022] ip6tnl1: entered allmulticast mode [ 189.008308][ T9047] sock: sock_timestamping_bind_phc: sock not bind to device [ 189.260365][ T9062] bond0: (slave wlan1): Releasing backup interface [ 189.271652][ T9062] mac80211_hwsim hwsim11 wlan1 (unregistering): left promiscuous mode [ 189.702966][ T9071] lo speed is unknown, defaulting to 1000 [ 191.226002][ T9122] netlink: 'syz.4.784': attribute type 13 has an invalid length. [ 191.256501][ T9122] netlink: 'syz.4.784': attribute type 17 has an invalid length. [ 191.405242][ T9125] netlink: 'syz.2.785': attribute type 3 has an invalid length. [ 191.434529][ T9125] __nla_validate_parse: 8 callbacks suppressed [ 191.434555][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 191.471140][ T9125] openvswitch: netlink: Unknown nsh attribute 0 [ 191.504100][ T9125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.678835][ T9122] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.716341][ T9126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.931303][ T5864] Bluetooth: hci4: link tx timeout [ 191.938258][ T5864] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 191.945937][ T9139] veth1_to_team: left allmulticast mode [ 191.959651][ T9146] netlink: zone id is out of range [ 191.970656][ T9146] netlink: zone id is out of range [ 191.975925][ T9119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.976430][ T9146] netlink: zone id is out of range [ 191.989283][ T9139] ip6gre1: left allmulticast mode [ 191.992604][ T9146] netlink: zone id is out of range [ 192.001626][ T9146] netlink: zone id is out of range [ 192.021177][ T9146] netlink: zone id is out of range [ 192.026832][ T9146] netlink: zone id is out of range [ 192.166310][ T9123] lo speed is unknown, defaulting to 1000 [ 192.174533][ T3544] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.202442][ T3544] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.265854][ T3544] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.280282][ T3544] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 192.333203][ T9161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.792'. [ 192.352767][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'. [ 192.413826][ T5967] lo speed is unknown, defaulting to 1000 [ 192.427292][ T5967] sz1: Port: 1 Link ACTIVE [ 192.537071][ T9174] netlink: 'syz.3.794': attribute type 10 has an invalid length. [ 192.565344][ T9174] syz_tun: entered promiscuous mode [ 192.617539][ T9174] : (slave syz_tun): Enslaving as an active interface with an up link [ 192.780696][ T9184] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 192.857844][ T9187] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 192.936510][ T9184] team0: Port device dummy0 added [ 193.013628][ T9187] team0: Port device dummy0 removed [ 193.039908][ T9187] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 193.063145][ T9183] lo speed is unknown, defaulting to 1000 [ 193.159949][ T9190] lo speed is unknown, defaulting to 1000 [ 193.579299][ T9200] tipc: Enabled bearer , priority 0 [ 193.593702][ T9200] syzkaller0: entered promiscuous mode [ 193.602864][ T9200] syzkaller0: entered allmulticast mode [ 193.646777][ T9200] tipc: Resetting bearer [ 193.675838][ T9199] tipc: Resetting bearer [ 193.726609][ T9199] tipc: Disabling bearer [ 193.739780][ T9205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.805'. [ 194.007525][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 194.147633][ T9228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.814'. [ 194.162884][ T9231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.813'. [ 194.190232][ T9228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.814'. [ 194.215546][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.815'. [ 194.242688][ T9228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.814'. [ 194.260198][ T9228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.814'. [ 194.272135][ T5934] lo speed is unknown, defaulting to 1000 [ 194.282660][ T5934] sz1: Port: 1 Link DOWN [ 194.647492][ T9239] !: renamed from dummy0 (while UP) [ 194.740117][ T9249] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 194.952454][ T9262] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 194.998013][ T9262] sctp: [Deprecated]: syz.1.823 (pid 9262) Use of int in max_burst socket option deprecated. [ 194.998013][ T9262] Use struct sctp_assoc_value instead [ 195.066001][ T9247] lo speed is unknown, defaulting to 1000 [ 195.590886][ T9287] lo speed is unknown, defaulting to 1000 [ 196.730722][ T9319] netlink: 'syz.3.830': attribute type 4 has an invalid length. [ 196.755418][ T9319] netlink: 'syz.3.830': attribute type 4 has an invalid length. [ 197.742877][ T9356] __nla_validate_parse: 22 callbacks suppressed [ 197.742902][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 197.793413][ T9356] netlink: 120 bytes leftover after parsing attributes in process `syz.0.833'. [ 197.809368][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.833'. [ 197.915473][ T9371] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 197.933256][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 197.944949][ T9371] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 197.960939][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.839'. [ 197.974757][ T9371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.837'. [ 197.994880][ T9373] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 198.040335][ T9371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.837'. [ 198.331259][ T9391] lo speed is unknown, defaulting to 1000 [ 198.348579][ T9392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.843'. [ 198.475628][ T9395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.842'. [ 198.517441][ T9395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.842'. [ 198.745596][ T9403] netlink: 'syz.0.846': attribute type 30 has an invalid length. [ 199.454241][ T9442] : (slave syz_tun): Releasing backup interface [ 199.535568][ T9442] geneve0: left promiscuous mode [ 199.564923][ T9442] team0: Port device geneve0 removed [ 199.588699][ T9442] batman_adv: batadv0: Removing interface: vlan3 [ 199.733738][ T9447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.910339][ T9447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.936746][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.944445][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.064258][ T9447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.146820][ T9470] RDS: rds_bind could not find a transport for fe88::2, load rds_tcp or rds_rdma? [ 200.170349][ T9447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.228246][ T9471] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.337842][ T9476] net_ratelimit: 12 callbacks suppressed [ 200.337861][ T9476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.372094][ T7563] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.462818][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.514317][ T7563] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.656544][ T9491] netlink: 'syz.4.866': attribute type 21 has an invalid length. [ 200.775160][ T7563] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.444806][ T9532] netlink: 'syz.0.876': attribute type 21 has an invalid length. [ 201.465489][ T9534] veth0: entered promiscuous mode [ 201.472634][ T9532] netlink: 'syz.0.876': attribute type 22 has an invalid length. [ 201.480788][ T9532] netlink: 'syz.0.876': attribute type 23 has an invalid length. [ 201.511503][ T9532] netlink: 'syz.0.876': attribute type 25 has an invalid length. [ 201.672914][ T9533] veth0: left promiscuous mode [ 201.782091][ T9548] lo: entered allmulticast mode [ 201.792287][ T9548] tunl0: entered allmulticast mode [ 201.802002][ T9548] gre0: entered allmulticast mode [ 201.820874][ T9548] gretap0: entered allmulticast mode [ 201.835795][ T9548] erspan0: entered allmulticast mode [ 201.881355][ T9548] ip_vti0: entered allmulticast mode [ 201.903834][ T9548] ip6_vti0: entered allmulticast mode [ 201.922138][ T9548] sit0: entered allmulticast mode [ 201.938640][ T9548] ip6tnl0: entered allmulticast mode [ 201.944729][ T9548] ip6gre0: entered allmulticast mode [ 201.953333][ T9548] syz_tun: entered allmulticast mode [ 201.962563][ T9548] ip6gretap0: entered allmulticast mode [ 201.969100][ T9548] vcan0: entered allmulticast mode [ 201.974597][ T5967] IPVS: starting estimator thread 0... [ 201.981296][ T9548] team0: entered allmulticast mode [ 202.007639][ T9548] dummy0: entered allmulticast mode [ 202.015555][ T9548] nlmon0: entered allmulticast mode [ 202.032348][ T9548] caif0: entered allmulticast mode [ 202.046725][ T9548] vxcan0: entered allmulticast mode [ 202.059679][ T9548] vxcan1: entered allmulticast mode [ 202.073743][ T9548] veth0: entered allmulticast mode [ 202.086966][ T9548] veth1: entered allmulticast mode [ 202.096934][ T9548] wg0: entered allmulticast mode [ 202.102705][ T9557] IPVS: using max 28 ests per chain, 67200 per kthread [ 202.117535][ T9548] wg1: entered allmulticast mode [ 202.123693][ T9548] wg2: entered allmulticast mode [ 202.133398][ T9548] veth0_to_bridge: entered allmulticast mode [ 202.138748][ T9564] validate_nla: 1 callbacks suppressed [ 202.138773][ T9564] netlink: 'syz.2.884': attribute type 32 has an invalid length. [ 202.140791][ T9548] bridge_slave_0: entered allmulticast mode [ 202.190188][ T9548] veth1_to_bridge: entered allmulticast mode [ 202.216899][ T9548] bridge_slave_1: entered allmulticast mode [ 202.229138][ T9570] netlink: 'syz.1.883': attribute type 2 has an invalid length. [ 202.249764][ T9548] veth0_to_bond: entered allmulticast mode [ 202.255883][ T9548] bond_slave_0: entered allmulticast mode [ 202.264080][ T9548] veth1_to_bond: entered allmulticast mode [ 202.276006][ T9548] bond_slave_1: entered allmulticast mode [ 202.284805][ T9548] veth0_to_team: entered allmulticast mode [ 202.306060][ T9548] team_slave_0: entered allmulticast mode [ 202.313210][ T9548] veth1_to_team: entered allmulticast mode [ 202.356013][ T9548] team_slave_1: entered allmulticast mode [ 202.375597][ T9548] veth0_to_batadv: entered allmulticast mode [ 202.384217][ T9548] batadv_slave_0: entered allmulticast mode [ 202.428410][ T9548] xfrm0: entered allmulticast mode [ 202.433887][ T9548] veth0_to_hsr: entered allmulticast mode [ 202.443536][ T9548] hsr_slave_0: entered allmulticast mode [ 202.449688][ T9548] veth1_to_hsr: entered allmulticast mode [ 202.455649][ T9548] hsr_slave_1: entered allmulticast mode [ 202.474730][ T9548] hsr0: entered allmulticast mode [ 202.482802][ T9548] veth1_virt_wifi: entered allmulticast mode [ 202.489709][ T9548] veth0_virt_wifi: entered allmulticast mode [ 202.496905][ T9548] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 202.508069][ T9548] veth1_vlan: entered allmulticast mode [ 202.514157][ T9548] veth0_vlan: entered allmulticast mode [ 202.520583][ T9548] vlan0: entered allmulticast mode [ 202.526193][ T9548] vlan1: entered allmulticast mode [ 202.550050][ T9548] macvlan1: entered allmulticast mode [ 202.556388][ T9548] ipvlan0: entered allmulticast mode [ 202.576873][ T9548] ipvlan1: entered allmulticast mode [ 202.589034][ T9548] geneve0: entered allmulticast mode [ 202.595754][ T9548] geneve1: entered allmulticast mode [ 202.614479][ T9548] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 202.624518][ T9548] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 202.633240][ T9548] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 202.641753][ T9548] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 202.649609][ T9548] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 202.660582][ T9548] syztnl2: entered allmulticast mode [ 202.666257][ T9548] ip6erspan0: entered allmulticast mode [ 202.672610][ T9548] veth2: entered allmulticast mode [ 202.678211][ T9548] veth3: entered allmulticast mode [ 202.684039][ T9548] bridge1: entered allmulticast mode [ 202.689958][ T9548] gretap1: entered allmulticast mode [ 202.695898][ T9548] ip6tnl1: entered allmulticast mode [ 202.701858][ T9548] syztnl0: entered allmulticast mode [ 202.710126][ T9548] ip6tnl2: left promiscuous mode [ 202.721849][ T9548] @: entered allmulticast mode [ 202.733352][ T9548] bond0: entered allmulticast mode [ 202.739742][ T9548] bridge0: left promiscuous mode [ 202.745880][ T9548] bridge0: entered allmulticast mode [ 202.802255][ T9572] bridge0: entered promiscuous mode [ 202.810348][ T3544] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.839476][ T3544] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.874899][ T3544] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.902759][ T3544] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.962605][ T9593] __nla_validate_parse: 10 callbacks suppressed [ 202.962629][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.889'. [ 202.989611][ T9594] netlink: 68 bytes leftover after parsing attributes in process `syz.0.889'. [ 203.000089][ T9593] netlink: 68 bytes leftover after parsing attributes in process `syz.0.889'. [ 203.162406][ T9600] netlink: 'syz.1.892': attribute type 10 has an invalid length. [ 203.257972][ T9600] bond0: (slave team0): Releasing backup interface [ 203.302020][ T9600] team0: Cannot enslave team device to itself [ 203.555256][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.898'. [ 203.576611][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.898'. [ 203.853041][ T9634] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 203.969395][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.907'. [ 204.026656][ T9643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.905'. [ 204.341474][ T9657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.351400][ T9657] bridge0: port 4(bond2) entered blocking state [ 204.359261][ T9657] bridge0: port 4(bond2) entered disabled state [ 204.366138][ T9657] bond2: entered allmulticast mode [ 204.375730][ T9657] bond2: entered promiscuous mode [ 204.382536][ T9657] bridge0: port 4(bond2) entered blocking state [ 204.389365][ T9657] bridge0: port 4(bond2) entered forwarding state [ 204.483400][ T9666] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 204.524521][ T9669] tipc: Enabled bearer , priority 0 [ 204.542244][ T9669] syzkaller0: entered promiscuous mode [ 204.554756][ T9669] syzkaller0: entered allmulticast mode [ 204.590408][ T9671] netlink: 40 bytes leftover after parsing attributes in process `syz.1.918'. [ 204.941989][ T9685] tipc: Enabled bearer , priority 0 [ 204.959685][ T9685] syzkaller0: entered promiscuous mode [ 204.965238][ T9685] syzkaller0: entered allmulticast mode [ 205.006723][ T1336] bridge0: port 4(bond2) entered disabled state [ 205.034195][ T9668] tipc: Resetting bearer [ 205.042214][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.925'. [ 205.068870][ T9698] sctp: [Deprecated]: syz.0.924 (pid 9698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.068870][ T9698] Use struct sctp_sack_info instead [ 205.106408][ T9668] tipc: Disabling bearer [ 205.169930][ T9700] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.183842][ T9702] tipc: Resetting bearer [ 205.194870][ T9698] sctp: [Deprecated]: syz.0.924 (pid 9698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.194870][ T9698] Use struct sctp_sack_info instead [ 205.211880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.212030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.251114][ T9684] tipc: Resetting bearer [ 205.281170][ T9684] tipc: Disabling bearer [ 205.306628][ T9708] syzkaller1: entered promiscuous mode [ 205.315588][ T9708] syzkaller1: entered allmulticast mode [ 205.406972][ T9714] netlink: 'syz.0.929': attribute type 12 has an invalid length. [ 205.430608][ T9714] netlink: 132 bytes leftover after parsing attributes in process `syz.0.929'. [ 205.533278][ T9727] netlink: 'syz.3.930': attribute type 4 has an invalid length. [ 205.884357][ T9736] ip6tnl2: entered promiscuous mode [ 205.890123][ T9736] ip6tnl2: entered allmulticast mode [ 205.896948][ T9736] team0: Device ip6tnl2 is of different type [ 206.142019][ T9743] lo speed is unknown, defaulting to 1000 [ 206.435466][ T31] audit: type=1800 audit(1754698166.823:2): pid=9751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.939" name=E6F8A45EF37A608041A4F98E5A26F9664D5899121AB1E8C0FB1DB392FD64A170FAD5B64CD0E239546555045D8A843EABA2DA1F978AFAF33883A6C2D7F60E79A6672ACA9F5797F19FD54C96B4CA9B31D6BA2B1A228FCB2479373720347FDF10ED8BA38AD4509A dev="tmpfs" ino=981 res=0 errno=0 [ 206.481584][ T9756] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 206.517401][ T31] audit: type=1804 audit(1754698166.823:3): pid=9751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.939" name=E6F8A45EF37A608041A4F98E5A26F9664D5899121AB1E8C0FB1DB392FD64A170FAD5B64CD0E239546555045D8A843EABA2DA1F978AFAF33883A6C2D7F60E79A6672ACA9F5797F19FD54C96B4CA9B31D6BA2B1A228FCB2479373720347FDF10ED8BA38AD4509A dev="tmpfs" ino=981 res=1 errno=0 [ 206.889125][ T9772] netlink: 'syz.4.944': attribute type 4 has an invalid length. [ 206.948212][ T9773] netlink: 'syz.4.944': attribute type 4 has an invalid length. [ 207.164318][ T9772] bridge0: port 5(gretap0) entered blocking state [ 207.195322][ T9772] bridge0: port 5(gretap0) entered disabled state [ 207.223190][ T9772] gretap0: entered allmulticast mode [ 207.242171][ T9772] gretap0: entered promiscuous mode [ 207.259136][ T9772] bridge0: port 5(gretap0) entered blocking state [ 207.265915][ T9772] bridge0: port 5(gretap0) entered forwarding state [ 207.589757][ T9792] tipc: Started in network mode [ 207.596427][ T9792] tipc: Node identity 4ee289ad1876, cluster identity 4711 [ 207.610868][ T9792] tipc: Enabled bearer , priority 0 [ 207.623602][ T9788] syzkaller0: entered promiscuous mode [ 207.637328][ T9788] syzkaller0: entered allmulticast mode [ 207.726106][ T9788] tipc: Resetting bearer [ 207.739334][ T9796] netlink: 'syz.2.950': attribute type 1 has an invalid length. [ 207.756282][ T9787] tipc: Resetting bearer [ 207.787647][ T9787] tipc: Disabling bearer [ 208.085904][ T9816] __nla_validate_parse: 4 callbacks suppressed [ 208.085926][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 208.118749][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 208.147270][ T9816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 208.165148][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 208.178495][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.956'. [ 208.253760][ T9816] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 208.290374][ T9827] netlink: 'syz.1.960': attribute type 10 has an invalid length. [ 208.298706][ T9827] netlink: 2 bytes leftover after parsing attributes in process `syz.1.960'. [ 208.334797][ T9827] team0: entered promiscuous mode [ 208.346101][ T9827] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.954786][ T9859] lo speed is unknown, defaulting to 1000 [ 209.023243][ T9862] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.053505][ T9862] netlink: 196 bytes leftover after parsing attributes in process `syz.2.969'. [ 209.077942][ T9868] netlink: 'syz.0.971': attribute type 29 has an invalid length. [ 209.094832][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.0.971'. [ 209.566812][ T9894] net veth1_virt_wifi : renamed from virt_wifi0 [ 210.033616][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.987'. [ 210.062424][ T9916] netlink: 32 bytes leftover after parsing attributes in process `syz.4.987'. [ 210.361271][ T9922] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.573803][ T9947] syz.4.991 uses old SIOCAX25GETINFO [ 210.590555][ T9922] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.701536][ T9922] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.783889][ T9922] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.941049][ T49] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.968367][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.998540][ T3544] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.023543][ T3544] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.562490][ T9991] sctp: [Deprecated]: syz.2.1002 (pid 9991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.562490][ T9991] Use struct sctp_sack_info instead [ 211.633401][ T9997] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 211.750798][T10007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.771978][T10007] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.014576][T10018] smc: adding net device bond0 with user defined pnetid SYZ2 [ 212.082229][T10029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.095807][T10018] macvlan2: entered promiscuous mode [ 212.149723][T10018] macvlan2: entered allmulticast mode [ 212.264129][T10018] bond0: (slave macvlan2): Opening slave failed [ 212.296245][T10014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.608526][T10065] netlink: 'syz.4.1017': attribute type 29 has an invalid length. [ 213.670616][T10068] netlink: 'syz.4.1017': attribute type 29 has an invalid length. [ 213.739645][T10070] lo speed is unknown, defaulting to 1000 [ 213.841683][T10067] lo speed is unknown, defaulting to 1000 [ 214.100303][T10095] __nla_validate_parse: 6 callbacks suppressed [ 214.100324][T10095] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1025'. [ 214.116270][T10095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1025'. [ 214.248421][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 214.263799][T10073] lo speed is unknown, defaulting to 1000 [ 214.288350][T10081] lo: left allmulticast mode [ 214.296741][T10081] tunl0: left allmulticast mode [ 214.312211][T10103] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1026'. [ 214.322651][T10081] gre0: left allmulticast mode [ 214.336555][T10103] NCSI netlink: No device for ifindex 0 [ 214.357503][T10081] gretap0: left allmulticast mode [ 214.362941][T10081] erspan0: left allmulticast mode [ 214.370727][T10081] ip_vti0: left allmulticast mode [ 214.392433][T10081] ip6_vti0: left allmulticast mode [ 214.413500][T10081] sit0: left allmulticast mode [ 214.420287][T10081] ip6tnl0: left allmulticast mode [ 214.436642][T10081] ip6gre0: left allmulticast mode [ 214.458517][T10081] syz_tun: left allmulticast mode [ 214.465416][T10081] ip6gretap0: left allmulticast mode [ 214.474758][T10081] vcan0: left allmulticast mode [ 214.480529][T10081] team0: left allmulticast mode [ 214.495874][T10081] dummy0: left allmulticast mode [ 214.530011][T10081] nlmon0: left allmulticast mode [ 214.535362][T10081] caif0: left allmulticast mode [ 214.563498][T10081] vxcan0: left allmulticast mode [ 214.585478][T10081] vxcan1: left allmulticast mode [ 214.600491][T10081] veth0: left allmulticast mode [ 214.616294][T10081] veth1: left allmulticast mode [ 214.624714][T10081] wg0: left allmulticast mode [ 214.650195][T10081] wg1: left allmulticast mode [ 214.655152][T10081] wg2: left allmulticast mode [ 214.667655][T10081] veth0_to_bridge: left allmulticast mode [ 214.683887][T10081] bridge_slave_0: left allmulticast mode [ 214.704256][T10081] veth1_to_bridge: left allmulticast mode [ 214.718839][T10081] bridge_slave_1: left allmulticast mode [ 214.739016][T10081] veth0_to_bond: left allmulticast mode [ 214.768655][T10081] bond_slave_0: left allmulticast mode [ 214.784861][T10081] veth1_to_bond: left allmulticast mode [ 214.797600][T10081] bond_slave_1: left allmulticast mode [ 214.803536][T10081] veth0_to_team: left allmulticast mode [ 214.849353][T10081] team_slave_0: left allmulticast mode [ 214.882229][T10081] veth1_to_team: left allmulticast mode [ 214.890974][T10081] team_slave_1: left allmulticast mode [ 214.901573][T10081] veth0_to_batadv: left allmulticast mode [ 214.913627][T10081] batadv_slave_0: left allmulticast mode [ 214.922951][T10081] xfrm0: left allmulticast mode [ 214.929669][T10081] veth0_to_hsr: left allmulticast mode [ 214.940587][T10081] veth1_to_hsr: left allmulticast mode [ 214.951996][T10081] hsr0: left allmulticast mode [ 214.957053][T10081] hsr_slave_0: left allmulticast mode [ 214.963076][T10081] hsr_slave_1: left allmulticast mode [ 214.972110][T10081] veth1_virt_wifi: left allmulticast mode [ 214.978478][T10081] veth0_virt_wifi: left allmulticast mode [ 214.996454][T10081] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 215.004467][T10081] veth1_vlan: left allmulticast mode [ 215.013566][T10081] vlan0: left allmulticast mode [ 215.019116][T10081] vlan1: left allmulticast mode [ 215.024368][T10081] macvlan1: left allmulticast mode [ 215.033407][T10081] ipvlan1: left allmulticast mode [ 215.039384][T10081] geneve0: left allmulticast mode [ 215.044775][T10081] geneve1: left allmulticast mode [ 215.054307][T10081] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 215.061777][T10081] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 215.072131][T10081] syztnl2: left allmulticast mode [ 215.077538][T10081] ip6erspan0: left allmulticast mode [ 215.083198][T10081] veth2: left allmulticast mode [ 215.092269][T10081] veth3: left allmulticast mode [ 215.097872][T10081] bridge1: left allmulticast mode [ 215.112094][T10081] gretap1: left allmulticast mode [ 215.123045][T10081] ip6tnl1: left allmulticast mode [ 215.140563][T10081] syztnl0: left allmulticast mode [ 215.155881][T10081] ip6tnl2: left allmulticast mode [ 215.171668][T10081] @: left allmulticast mode [ 215.183339][T10081] bond0: left allmulticast mode [ 215.192918][T10081] bridge0: left allmulticast mode [ 215.292140][T10080] @: renamed from veth0_vlan [ 215.331300][T10126] tipc: Enabled bearer , priority 0 [ 215.718125][T10161] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1034'. [ 215.845980][T10151] lo speed is unknown, defaulting to 1000 [ 215.866304][T10131] tipc: Disabling bearer [ 216.061544][T10164] tipc: Enabled bearer , priority 0 [ 216.115295][T10165] syzkaller0: entered promiscuous mode [ 216.143829][T10165] syzkaller0: entered allmulticast mode [ 216.166429][T10167] lo speed is unknown, defaulting to 1000 [ 216.250058][T10174] tipc: Resetting bearer [ 216.310019][T10163] tipc: Resetting bearer [ 216.334389][T10163] tipc: Disabling bearer [ 216.559370][T10189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1040'. [ 216.621366][T10189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1040'. [ 216.701932][T10195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1043'. [ 216.779283][T10192] tipc: Enabling of bearer rejected, failed to enable media [ 216.838279][ T31] audit: type=1804 audit(1754698177.223:4): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1044" name="memory.events" dev="tmpfs" ino=1126 res=1 errno=0 [ 216.875870][T10195] lo speed is unknown, defaulting to 1000 [ 216.901148][ T31] audit: type=1800 audit(1754698177.233:5): pid=10197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1044" name="memory.events" dev="tmpfs" ino=1126 res=0 errno=0 [ 217.265209][T10221] netlink: 'syz.2.1050': attribute type 11 has an invalid length. [ 217.280092][T10221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1050'. [ 217.371221][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 217.372425][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 217.377372][ T5874] Bluetooth: hci1: command 0x0406 tx timeout [ 217.553163][T10231] tipc: Enabling of bearer rejected, failed to enable media [ 217.666610][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 218.161683][T10254] gtp0: entered promiscuous mode [ 218.202158][T10254] gtp0: entered allmulticast mode [ 218.462759][T10272] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 218.583259][T10272] netlink: 'syz.3.1059': attribute type 10 has an invalid length. [ 218.594930][T10272] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 218.613997][T10272] wlan1: mtu less than device minimum [ 218.624653][T10272] : (slave wlan1): Error -22 calling dev_set_mtu [ 219.487445][ T5869] Bluetooth: hci4: command 0x0406 tx timeout [ 219.660917][T10296] __nla_validate_parse: 3 callbacks suppressed [ 219.660943][T10296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1060'. [ 220.478509][T10302] block nbd2: server does not support multiple connections per device. [ 220.497724][T10302] block nbd2: shutting down sockets [ 221.342895][T10334] lo speed is unknown, defaulting to 1000 [ 221.706943][T10338] lo speed is unknown, defaulting to 1000 [ 222.045194][T10356] dvmrp1: entered allmulticast mode [ 223.475962][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 223.850701][T10391] lo speed is unknown, defaulting to 1000 [ 224.925775][T10427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1095'. [ 224.981493][T10427] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1095'. [ 225.004042][T10427] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1095'. [ 225.031988][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1095'. [ 225.584266][T10437] lo speed is unknown, defaulting to 1000 [ 226.746161][T10464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1104'. [ 226.948550][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 228.015334][T10490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1110'. [ 228.464738][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1112'. [ 228.502065][T10501] gtp0: entered promiscuous mode [ 228.509609][T10501] gtp0: entered allmulticast mode [ 228.525439][T10502] tipc: Enabled bearer , priority 0 [ 228.534668][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1112'. [ 228.549410][T10502] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 228.562928][T10502] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 228.572593][T10502] tipc: Resetting bearer [ 228.596795][T10502] tipc: Resetting bearer [ 229.032457][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1117'. [ 229.587465][ T24] tipc: Node number set to 691919780 [ 230.032821][T10523] netlink: 'syz.4.1120': attribute type 10 has an invalid length. [ 230.044467][T10523] __nla_validate_parse: 1 callbacks suppressed [ 230.044493][T10523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1120'. [ 230.108552][T10523] geneve0: entered promiscuous mode [ 230.124712][T10523] geneve0: entered allmulticast mode [ 230.136991][T10523] team0: Port device geneve0 added [ 231.769313][T10544] tipc: New replicast peer: 255.255.255.255 [ 231.788741][T10544] tipc: Enabled bearer , priority 10 [ 231.799582][T10546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1129'. [ 231.841484][T10541] tipc: Enabling of bearer rejected, already enabled [ 232.021240][T10554] netlink: 'syz.4.1126': attribute type 11 has an invalid length. [ 232.756785][T10570] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1133'. [ 233.080369][T10583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.120626][T10583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1137'. [ 233.575721][T10570] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 233.615341][T10570] bond0 (unregistering): Released all slaves [ 234.245970][T10597] lo speed is unknown, defaulting to 1000 [ 234.782566][T10616] syzkaller0: entered promiscuous mode [ 234.824036][T10616] syzkaller0: entered allmulticast mode [ 234.864618][T10615] tipc: Enabled bearer , priority 0 [ 235.043894][T10615] tipc: Resetting bearer [ 235.058908][T10633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.312996][T10615] tipc: Disabling bearer [ 235.407073][T10639] lo speed is unknown, defaulting to 1000 [ 236.156465][T10653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1155'. [ 236.365855][T10657] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1153'. [ 236.435293][T10657] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 236.704368][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 236.756243][T10662] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 236.772202][T10662] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1157'. [ 236.793130][T10662] openvswitch: netlink: Unknown key attributes 2 [ 236.837666][T10653] lo speed is unknown, defaulting to 1000 [ 237.021751][T10667] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1159'. [ 237.090265][T10666] tipc: Enabled bearer , priority 0 [ 237.117584][T10666] syzkaller0: entered promiscuous mode [ 237.133453][T10666] syzkaller0: entered allmulticast mode [ 237.337496][T10666] tipc: Resetting bearer [ 237.363640][T10664] tipc: Resetting bearer [ 237.424707][T10664] tipc: Disabling bearer [ 237.474620][T10678] tipc: Enabled bearer , priority 0 [ 237.546807][T10678] syzkaller0: entered promiscuous mode [ 237.554432][T10678] syzkaller0: entered allmulticast mode [ 237.562797][T10678] tipc: Resetting bearer [ 237.584703][T10677] tipc: Resetting bearer [ 238.568130][ T24] tipc: Node number set to 1452575149 [ 238.673908][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1165'. [ 238.744214][T10695] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 238.754669][T10696] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 242.022641][T10677] tipc: Disabling bearer [ 242.076507][T10694] batman_adv: batadv0: Adding interface: ipvlan2 [ 242.083256][T10694] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.113553][T10694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.126464][T10694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.139920][T10694] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 242.313831][T10703] netlink: 'syz.4.1168': attribute type 1 has an invalid length. [ 242.325390][T10704] netlink: 'syz.4.1168': attribute type 1 has an invalid length. [ 242.410530][T10709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1169'. [ 242.423474][T10710] netlink: 'syz.1.1167': attribute type 10 has an invalid length. [ 242.523363][T10703] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 242.563327][T10704] 8021q: adding VLAN 0 to HW filter on device bond3 [ 243.115296][T10726] netlink: 'syz.4.1175': attribute type 32 has an invalid length. [ 243.135558][T10726] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1175'. [ 243.355020][T10731] syzkaller1: entered promiscuous mode [ 243.371542][T10731] syzkaller1: entered allmulticast mode [ 243.610609][T10739] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 243.696642][T10739] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 243.723889][ T49] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 243.740238][T10739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.872710][ T7563] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 243.924325][T10741] veth3: entered promiscuous mode [ 243.950150][T10741] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 244.078796][T10739] bond0: (slave ip6gretap1): Removing an active aggregator [ 244.101770][T10739] bond0: (slave ip6gretap1): Releasing backup interface [ 244.123503][T10739] bond0: (slave ip6gretap1): the permanent HWaddr of slave - ae:ac:62:d5:fe:48 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 244.224167][T10739] bond0: (slave veth3): Releasing backup interface [ 244.515561][T10751] netlink: 'syz.0.1180': attribute type 39 has an invalid length. [ 244.684554][T10753] pimreg: entered allmulticast mode [ 244.705802][T10759] dummy0: entered promiscuous mode [ 244.712011][T10759] vlan2: entered promiscuous mode [ 244.811754][T10760] pimreg: left allmulticast mode [ 247.771968][T10770] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1185'. [ 247.953582][T10775] netlink: 'syz.1.1188': attribute type 32 has an invalid length. [ 247.991178][T10775] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1188'. [ 249.043977][T10770]  (unregistering): Released all slaves [ 249.064982][T10804] openvswitch: netlink: Message has 16 unknown bytes. [ 249.381402][T10790] tipc: Enabling of bearer rejected, failed to enable media [ 249.845217][T10813] netlink: 'syz.4.1194': attribute type 1 has an invalid length. [ 250.029572][T10813] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1194'. [ 250.232215][T10816] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 250.245290][T10813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1194'. [ 250.353758][T10821] veth5: entered promiscuous mode [ 250.363668][T10821] bond4: (slave veth5): Enslaving as a backup interface with a down link [ 250.376160][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'. [ 250.400162][T10813] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.412364][ T7563] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 250.558042][ T49] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 250.582549][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 252.976112][T10881] 8021q: adding VLAN 0 to HW filter on device bond5 [ 252.985414][T10881] bridge0: port 6(bond5) entered blocking state [ 252.994777][T10881] bridge0: port 6(bond5) entered disabled state [ 253.002686][T10881] bond5: entered allmulticast mode [ 253.045645][T10881] bond5: entered promiscuous mode [ 253.076840][T10881] bridge0: port 6(bond5) entered blocking state [ 253.083448][T10881] bridge0: port 6(bond5) entered forwarding state [ 253.136732][ T1158] bridge0: port 6(bond5) entered disabled state [ 253.457770][T10891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1213'. [ 253.533226][T10891] vlan2: entered promiscuous mode [ 253.545457][T10891] macvtap0: entered promiscuous mode [ 253.562680][T10895] tipc: Enabled bearer , priority 0 [ 253.595758][T10893] geneve3: entered promiscuous mode [ 253.635581][ T9342] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.657780][T10891] syzkaller0: entered promiscuous mode [ 253.663419][T10891] syzkaller0: entered allmulticast mode [ 253.695105][ T9342] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.758807][ T9342] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.780606][ T9342] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 253.812711][T10891] tipc: Resetting bearer [ 253.849727][T10890] tipc: Resetting bearer [ 253.946196][T10890] tipc: Disabling bearer [ 254.005194][T10903] tipc: Enabled bearer , priority 0 [ 254.093403][T10907] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1217'. [ 254.140236][T10905] syzkaller0: entered promiscuous mode [ 254.146057][T10905] syzkaller0: entered allmulticast mode [ 254.155775][T10905] tipc: Resetting bearer [ 254.255846][ T49] tipc: Resetting bearer [ 254.322547][T10898] tipc: Resetting bearer [ 255.230923][T10910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.666822][T10898] tipc: Disabling bearer [ 259.864473][T10938] lo speed is unknown, defaulting to 1000 [ 261.374691][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.382544][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.663671][T10972] lo speed is unknown, defaulting to 1000 [ 262.164047][T10982] netlink: 'syz.0.1237': attribute type 32 has an invalid length. [ 262.172580][T10982] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1237'. [ 263.930767][T11015] tipc: Enabled bearer , priority 0 [ 264.126010][T11015] syzkaller0: entered promiscuous mode [ 264.131943][T11015] syzkaller0: entered allmulticast mode [ 264.142218][T11015] tipc: Resetting bearer [ 264.259338][T11013] tipc: Resetting bearer [ 264.539363][T11026] netlink: 'syz.1.1249': attribute type 32 has an invalid length. [ 264.571714][T11026] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1249'. [ 264.767870][T11030] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1250'. [ 264.998017][ T5941] tipc: Node number set to 1347906760 [ 266.467818][T11057] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1254'. [ 266.607274][T11059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1255'. [ 269.861826][T11013] tipc: Disabling bearer [ 269.925312][T11041] tipc: Enabled bearer , priority 0 [ 269.948230][T11044] syzkaller0: entered promiscuous mode [ 269.953788][T11044] syzkaller0: entered allmulticast mode [ 270.064597][T11061] lo speed is unknown, defaulting to 1000 [ 270.196988][T11044] tipc: Resetting bearer [ 270.246816][T11044] tipc: Disabling bearer [ 270.445372][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 270.484250][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1257'. [ 270.593018][T11071] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (7) [ 270.832533][T11076] IPVS: Error connecting to the multicast addr [ 270.841737][T11076] netlink: 'syz.0.1260': attribute type 16 has an invalid length. [ 270.858949][T11076] netlink: 'syz.0.1260': attribute type 17 has an invalid length. [ 270.877941][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1260'. [ 270.899620][T11076] IPv6: NLM_F_REPLACE set, but no existing node found! [ 271.427107][ C0] sched: DL replenish lagged too much [ 272.001464][T11083] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1264'. [ 272.192468][T11085] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1265'. [ 272.558070][T11089] netlink: 'syz.1.1267': attribute type 32 has an invalid length. [ 272.606204][T11089] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1267'. [ 273.058224][ T5869] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 273.080129][ T5869] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 273.089409][ T5869] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 273.099671][ T5869] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 273.120890][ T5869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 273.478092][T11097] lo speed is unknown, defaulting to 1000 [ 274.434259][T11097] chnl_net:caif_netlink_parms(): no params data found [ 274.542495][T11118] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.584626][T11118] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 275.207602][ T5869] Bluetooth: hci5: command tx timeout [ 275.229607][T11097] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.238207][T11129] netlink: 'syz.2.1273': attribute type 12 has an invalid length. [ 275.250601][T11097] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.263660][T11129] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1273'. [ 275.279588][T11097] bridge_slave_0: entered allmulticast mode [ 275.293557][T11097] bridge_slave_0: entered promiscuous mode [ 275.304602][T11097] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.317113][T11097] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.324710][T11097] bridge_slave_1: entered allmulticast mode [ 275.339519][T11097] bridge_slave_1: entered promiscuous mode [ 275.552662][T11097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.593862][T11097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.680781][T11133] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1274'. [ 275.778354][T11097] team0: Port device team_slave_0 added [ 275.805964][T11097] team0: Port device team_slave_1 added [ 275.861229][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 275.999164][T11097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.019456][T11097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.051416][T11097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.083530][T11097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.099502][T11097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.138463][T11097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.190914][T11137] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1275'. [ 276.394062][T11097] hsr_slave_0: entered promiscuous mode [ 276.410255][T11097] hsr_slave_1: entered promiscuous mode [ 276.417426][T11097] debugfs: 'hsr0' already exists in 'hsr' [ 276.423677][T11097] Cannot create hsr debugfs directory [ 277.094624][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1276'. [ 277.287671][ T5869] Bluetooth: hci5: command tx timeout [ 277.814035][T11144] tipc: Enabled bearer , priority 0 [ 277.920253][T11145] syzkaller0: entered promiscuous mode [ 277.926019][T11145] syzkaller0: entered allmulticast mode [ 277.938755][T11145] tipc: Resetting bearer [ 278.010493][T11141] tipc: Resetting bearer [ 278.857882][ T43] tipc: Node number set to 2124925955 [ 279.373518][ T5869] Bluetooth: hci5: command tx timeout [ 281.332513][T11152] netlink: 'syz.2.1279': attribute type 32 has an invalid length. [ 281.355654][T11152] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1279'. [ 281.447562][ T5869] Bluetooth: hci5: command tx timeout [ 322.978951][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.001522][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.385488][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.401741][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 399.004502][ T5183] Bluetooth: hci5: command 0x0406 tx timeout [ 422.480683][T11141] tipc: Disabling bearer [ 436.984898][ T32] INFO: task kworker/u8:1:13 blocked for more than 145 seconds. [ 437.005485][ T32] Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 [ 437.026736][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.891628][ T32] task:kworker/u8:1 state:D stack:20520 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 439.894170][ T32] Workqueue: netns cleanup_net [ 439.908128][ T32] Call Trace: [ 439.911507][ T32] [ 439.914709][ T32] __schedule+0x1798/0x4cc0 [ 440.155769][ T32] ? __lock_acquire+0xab9/0xd20 [ 440.169279][ T32] ? __lock_acquire+0xab9/0xd20 [ 440.174219][ T32] ? __pfx___schedule+0x10/0x10 [ 440.567123][ T32] ? schedule+0x91/0x360 [ 440.581103][ T32] schedule+0x165/0x360 [ 440.585345][ T32] schedule_preempt_disabled+0x13/0x30 [ 441.084049][ T32] __mutex_lock+0x7e6/0x1360 [ 441.098473][ T32] ? __mutex_lock+0x5b6/0x1360 [ 441.103354][ T32] ? mpls_net_exit+0x79/0x270 [ 441.498761][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 441.504106][ T32] ? kasan_quarantine_put+0xdd/0x220 [ 442.828554][ T32] ? kfree+0x18e/0x440 [ 442.832756][ T32] ? do_raw_spin_unlock+0x122/0x240 [ 443.834668][ T32] mpls_net_exit+0x79/0x270 [ 443.849194][ T32] ops_undo_list+0x497/0x990 [ 443.853886][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 444.359577][ T32] ? do_raw_spin_unlock+0x122/0x240 [ 446.211023][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.252217][ T1302] ieee802154 phy1 wpan1: encryption failed: -22