last executing test programs: 6.190204889s ago: executing program 4 (id=2400): r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0x1000}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) 6.062256914s ago: executing program 4 (id=2402): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xeb64d656001b2f26) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="0002290800030006000000080002000100000008000300000000000800040099740000080004000e0000000800020006000000050005008000000004000680080003000600000034000680060001000200000008", @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x4000014}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r4, 0x103, 0x2, &(0x7f0000000040), 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.232980631s ago: executing program 4 (id=2409): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={r2, 0x561b}, &(0x7f0000000080)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'netdevsim0\x00', {}, 0xbb57}) r6 = accept$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) getsockopt$sock_int(r6, 0x1, 0x1e, &(0x7f0000000100), &(0x7f0000000180)=0x4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="34fc00000000000000000000000000001e240e42305b3303dd084f5e378ff642922aff4af6e72fb2cf4ce7530ed4709de9fa453ae22c0eb132f27c5a7cb6578bf74f4b3ddbb20039a97789", @ANYRES32=r5, @ANYBLOB="688100000000000014001680100001800c0003000100008007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0fe1709850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x7, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) sendmmsg$inet6(r7, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="bd", 0xf4240}], 0x1}}], 0x1, 0x41) sendmsg$sock(r7, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000180)="07fc", 0x2}], 0x1}, 0x4000014) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000340)={0x0, r3}, 0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r11) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000054c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000741000000000800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@private1, 0x4e24, 0x0, 0x4e24, 0x6, 0xa, 0x20, 0x130, 0x33, 0x0, 0xee01}, {0x7, 0xfffffffffffffffc, 0x100, 0xfffffffffffffffa, 0x0, 0x7fff, 0xfc, 0x6}, {0x5, 0x6, 0x5, 0xb5}, 0x3, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in=@broadcast, 0x3505, 0x4, 0x0, 0x9d, 0x2, 0x9, 0xc}}, 0xe8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000280)={r13, @in6={{0xa, 0x4e21, 0xb, @remote, 0x6}}, 0x304, 0x3}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 4.924797192s ago: executing program 4 (id=2415): syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6002173600442b00fc0206000000000000000000000000010420880b0000000000000800000086dd"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000040000000007020000", @ANYRES32, @ANYRES8], 0x38}}, 0x10) 4.761084206s ago: executing program 4 (id=2420): r0 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x268}}, 0x840) r2 = socket(0x22, 0x3, 0x0) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000080)) (async) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000080)) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "e40ba239bf1eed02", "8b49771b6748bd9ae26fd2cff96f40bf", "ddff108e", "3093257be2f151b6"}, 0x28) 4.570472402s ago: executing program 4 (id=2424): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}]}}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet(0xa, 0x801, 0x84) (async) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) accept4(r5, 0x0, 0x0, 0x800) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x40}, 0x8) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x40}, 0x8) getsockopt$packet_int(r6, 0x107, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x6, 0x2, 0x2, &(0x7f0000000040)) (async) socketpair(0x6, 0x2, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_raw(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@can={{0x0, 0x0, 0x0, 0x1}, 0x8e, 0x0, 0x4, 0x2, '\x00\x00\x00\x00\a\x00'}, 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}}, 0x0) 4.08828731s ago: executing program 0 (id=2428): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x0, 0x1, [0x4]}, &(0x7f0000000040)=0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0xb, 0x2, 0x1, 0x10}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r4, 0xf1, "3ce12db8328ddbae2dd416c0c1eea9ec0df8f91feb565ea85d2a4a2b2aa4c8577d590e5cd40d0216e907c20573f420fa0a99baabd312d071402779c9545d43bc29b7c90228e9312801e4ad58f46991a1157c2966d7e4c6c494c939181bebf8cfde7ffca384ee899e703e303a0d62321b2eb2a123f92a6abcc5a29498e9849835eae7acf7aa1c36e72fd6d05b1dd9d901407bb314e6e204f8606de977975382b1ec547282746a4861e933ca83a71c63d8e9b907b858ffe3b4236624219da1762786244f4b757c55b6ae95fb7945098e52c3b5776416bb49d81c5f9a0fd81627b07b3ec8d91f6b5c864d2a7eddd19b60f01f"}, &(0x7f00000001c0)=0xf9) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 3.737349322s ago: executing program 0 (id=2432): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x4044814) r1 = socket$inet6(0xa, 0x3, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x410880, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000200)={'batadv_slave_1\x00', @random="2a5f8175b9fc"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x28, r4, 0xf01, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x4f}}}}}, 0x28}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000100)=0xc) r6 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@multicast2, 0x0, 0x56, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r5}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0x8}, {0x7, 0x0, 0x4}, 0x932, 0x0, 0x1, 0x0, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x6c}, 0x2, @in=@loopback, 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 3.163252845s ago: executing program 2 (id=2442): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x355c32cef104cbbc}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x355c32cef104cbbc}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) (async) sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14}]}, 0x28}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58) 3.000496218s ago: executing program 3 (id=2444): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x44) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) r5 = socket(0x1, 0x800, 0x7) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0xffe0}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x6, 0x400}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}], 0x38, 0x4014}, 0x2c0408d0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f00000002c0)="de45805dcc3935abaa12b727fcb5d22308548cc5431a4d8031fc24bd562f4ec33b87de8ec1cad758a5a8dfd0d7f2fa876c7041da5c3f71a4cc43e36f9abd090aae448b1e045994", 0x47) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close(0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) 2.950475143s ago: executing program 2 (id=2445): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x82, &(0x7f0000001900)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff81000000080045000070000000000001907864010100ac1414aa0b009078032c000045000000000000000089000000000000e0000002862a00007fef009b5e000000ff00000000000000054eb8a600129606053d0006ff00800000b61af93a93831300ac141400ffffffff7f000001e0000002000000"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0xffffffff, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x4, 0xb}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x4008000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x4, 0xb}, {0xfff3, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x4008000) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) 2.775984011s ago: executing program 3 (id=2447): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, &(0x7f0000001980)=""/4096, 0x1000}, 0x3}], 0x1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) write(r1, &(0x7f0000003400)="d3", 0x1) 2.771843054s ago: executing program 0 (id=2448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000540)={0x4bc, 0x0, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [{{0x254, 0x1, {{0x0, 0x400}, 0x1, 0x7, 0x200, 0x40, 0x4, 'syz1\x00', "35cc2966c42a7dc87b7f5f7ad529f5072ad1709a6446fdfa94bda6bbe3277f09", "11b66439a1898f8abe66a8e0528732df85b062601275b20321cfefa06f12c8dd", [{0x2a, 0x81, {0x2, 0xfffffffa}}, {0x5fa, 0x7, {0x0, 0x8034}}, {0x1000, 0x2, {0x0, 0x7}}, {0x3, 0x5, {0x2}}, {0x3, 0x9, {0x3, 0x2}}, {0x5, 0xd, {0x0, 0x1}}, {0x2, 0x5, {0x0, 0x9}}, {0x5, 0x9, {0x2, 0xffff}}, {0x32c6, 0x8, {0x1, 0x7a0000}}, {0x0, 0x4, {0x1}}, {0x6, 0x4f, {0x1, 0x8000}}, {0xaa, 0x0, {0x1, 0x1}}, {0x6, 0x101, {0x3, 0x3}}, {0x1, 0xfc00}, {0x0, 0x10, {0x2, 0x800}}, {0x7, 0x1, {0x0, 0x3}}, {0x409f, 0x2, {0x2, 0x8}}, {0x2, 0x8, {0x1, 0x1}}, {0x3, 0x401, {0x0, 0x401}}, {0xfff, 0x149, {0x2, 0x1ff}}, {0x7, 0xe, {0x6, 0x9d3c}}, {0x80, 0xd246, {0x0, 0x2}}, {0x7, 0x403e, {0x0, 0x4}}, {0x7, 0x3ff0, {0x3, 0x6}}, {0x5, 0x1, {0x1, 0x80000000}}, {0x81, 0x5, {0x95d0c57ec752d4cb, 0x7}}, {0x0, 0x381, {0x1, 0x80000000}}, {0x4, 0x8, {0x3, 0x7ff}}, {0x9, 0x2, {0x1, 0x4}}, {0x4, 0x7, {0x0, 0xffffffff}}, {0x4, 0xa4ba, {0x1, 0x5}}, {0x100, 0x8, {0x1, 0x9}}, {0xc, 0xa714, {0x1, 0x80}}, {0x800, 0x6, {0x0, 0x9}}, {0x1, 0x6, {0x0, 0x9}}, {0x3ff, 0xad6, {0x0, 0x800}}, {0x7, 0xb4, {0x2, 0x6}}, {0x7fff, 0x7a41, {0x0, 0x6}}, {0x0, 0x0, {0x2, 0x7ff}}, {0xffff, 0x3, {0x2, 0x5}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x48, 0xa, 0x5, 0x2, 0x1c, 'syz1\x00', "19f461214c209e2a2f6f4c12e7b1c4bc954ceba987b8069480a961d83d87e37d", "7bcfa16b340503e924df068e4982963fe2d5364ea4c57202f7d7b03c1b02ea19", [{0x3, 0x8001, {0x2, 0x100}}, {0x27, 0x101, {0x0, 0x7}}, {0x1, 0x5, {0x2, 0xc55}}, {0x1, 0x3, {0x2, 0xa85}}, {0x3, 0x3, {0x2, 0x3}}, {0x9, 0xc, {0x3, 0x2ee6}}, {0xb, 0x3a8d}, {0x1, 0x3, {0x3, 0x8001}}, {0x1000, 0xfffe, {0x1, 0x4}}, {0x3bb, 0x8, {0x1, 0x10000}}, {0x1, 0x8, {0x2, 0x9}}, {0x4, 0xfffe, {0x0, 0x5}}, {0x7ff, 0x0, {0x1, 0x4}}, {0x9029, 0x0, {0x0, 0x9}}, {0x2, 0x1, {0x0, 0x9}}, {0x5, 0x5, {0x3, 0x54f}}, {0x2, 0x9, {0x1, 0xfffffb51}}, {0x9, 0x0, {0x0, 0x1}}, {0x6, 0x401, {0x2, 0x3}}, {0x38da, 0xe, {0x3, 0xd1f}}, {0x4, 0x6f2, {0x2, 0x9}}, {0x2, 0x400, {0x3, 0x8}}, {0xc, 0x101, {0x2, 0x74e64271}}, {0x200, 0x7, {0x1, 0x2}}, {0x800, 0x3}, {0x0, 0x6, {0x2, 0x5}}, {0x2, 0x8, {0x1, 0x2}}, {0x10, 0x8000, {0x0, 0x8}}, {0xe5fe, 0xb52c, {0x2, 0x8}}, {0x9, 0xffff, {0x0, 0x4}}, {0x8, 0xfffb, {0x0, 0x4d2}}, {0x5, 0x7, {0x2, 0x5}}, {0xffff, 0x6, {0x0, 0x3ff}}, {0x9, 0x0, {0x1, 0x3ff}}, {0x1, 0x1, {0x2, 0x2}}, {0xe, 0xde40, {0x0, 0x3}}, {0x2, 0x8, {0x1, 0x7ff}}, {0x1000, 0x4cf8, {0x0, 0xe2}}, {0xe, 0x3, {0x3, 0x3}}, {0x5, 0x16, {0x1, 0x6}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000500)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000500)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r5, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x14c, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4018800) 2.714893439s ago: executing program 1 (id=2449): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000cc0)=@add_del={0x3, &(0x7f0000000080)='geneve0\x00'}) 2.646537165s ago: executing program 0 (id=2450): syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 2.53612893s ago: executing program 0 (id=2451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r1, 0x0) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000e80000000000000a50000000120a09050000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x74}}, 0x0) (async, rerun: 64) r3 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x3, 0xdaa3}, &(0x7f0000000180)=0x8) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r3) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x7, 0xc}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff6, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004004) 1.006077875s ago: executing program 1 (id=2452): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000200000000000000000050019"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) (async) connect$inet(r4, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 930.686916ms ago: executing program 2 (id=2453): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x2, 0xfffd, 0x8200, 0x6, 0xb79, 0x32f4, 0x3, 0xfffffff3, r1}, &(0x7f00000000c0)=0x20) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}}, 0x69, 0x2, 0xfffffffa, 0x10001, 0x40, 0x8, 0x6}, &(0x7f0000000240)=0x9c) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x6, 0x1, 0xfff, 0xac5b, 0x0, 0x2, 0x3}, &(0x7f0000000340)=0x9c) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x6cbfc082f3d5970c}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x18}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x814}, 0x40011) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000500)={0xa, 0xe, 0x6, 0x6, 0x5, 0x4, 0x6, 0x8, 0x89, 0x4, 0xf7, 0x7d, 0x1, 0x6}, 0xe) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000540)={0x7, 0x202, 0x5, 0xadf, r3}, &(0x7f0000000580)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x7e}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x26b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004804}, 0x8002) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000006c0)=@assoc_value, &(0x7f0000000700)=0x8) recvmsg$unix(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)=""/98, 0x62}, {&(0x7f00000007c0)=""/13, 0xd}, {&(0x7f0000000800)=""/204, 0xcc}], 0x3, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x40000000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000a40)={r3, 0x8001}, &(0x7f0000000a80)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000ac0)={r1, 0x3}, 0x8) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000c00)={&(0x7f0000000b00)=""/200, 0x220000, 0x800, 0x6, 0x2}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000c40)=[@in6={0xa, 0x4e21, 0xfffffff4, @private1, 0x5}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e21, 0x80, @loopback, 0x1}, @in={0x2, 0x4e20, @private=0xa010101}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e24, 0x0, @loopback, 0x8000}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0xfbac, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}], 0xc0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r9, 0x8982, &(0x7f0000000d00)) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r11, 0x84, 0x7, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r12, 0x84, 0x70, &(0x7f0000000dc0)={r1, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x7}}, [0x9, 0x8, 0x4, 0x73ae, 0x1, 0x1, 0x2, 0x8, 0x4, 0x7, 0x3, 0x0, 0x1, 0x6, 0xd6820000000000]}, &(0x7f0000000ec0)=0x100) sendmmsg$inet_sctp(r9, &(0x7f0000002800)=[{&(0x7f0000000f00)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, &(0x7f0000002340)=[{&(0x7f0000000f40)="c16f4361b53109c6cc76f5dc23468fb56ec6c96a2f918142838c419220c272f1a7d06bc27e9092dc360ced6c3d4e37db5f049ae25d44f0dedc94b1bc1885bd10ad2b687a30003b308575c52db048ccb0a9efd55512231d0ebceff6bd", 0x5c}, {&(0x7f0000000fc0)="1201a8293112b8b84f6177bd1b6d8823b2a3eb2c5509de158956d752f03e077130a3af80fe6c6b01d6fd00dc05da8d1d21c6c01a9aadb3a0d3854cf4158e9d1949cc577e7300863003554bda131361c42f7d73e5126d224b484086deebb5d09c00a89a7d889f256430c3e0f7efd27d09d1f3f23c8edc5ceac5150a0d21c41418834e1b3fecd2156ee79cc21844cacbfb386f049a6bc11ee8fc2220d3fee6f6d36dec307ed834e88e04db52a8e0e6a8c66df61177604c46b52f50a8eb9768860d9f05e565c1f6b73ad93a57b28a2e064164ab635b7da5c4f4c5f89c3ab86569ac7147e3dec39e36dd4244eadb", 0xec}, {&(0x7f00000010c0)="05b9fb17d526304cde924b2ede0df9cfe8247b6387ad1ff403c30ce0a7ce39ca39764c7776742881b0dd339d8d3d205aa9dd91874d4fe0e21b5c7cb78fcd2499df65fb7c6c70f578ba225b7a1639a83795226aae99e14f607f2e542e253535b9ed4ebf8298dc5b102982489d2cb7b5cc4084f155cb970153166fba23527e9077876666acaacd51b29b9b94150fae0bf2cf0d15aaf521d827313ff4aab84460ff989af87bf8bab76177eb38aff44d405ea53b6df72f6d085899b81e035b03fd2e14f4730c0174f4f3bc00b6d78a2c95519b4c831c78ee68e16eee938ba593ac4b", 0xe0}, {&(0x7f00000011c0)="a13f3633fae060e30a7b57acab4767b3652c9b5cf875c42e8a867dfd04355d2239d2e66798b839fdfc056448073cc7283e788b573a12aa09410a0254898457", 0x3f}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="0a2fb821614ee2b737f2d433a74cda3dc8873dea2a7ec0566d3de5510f434ce60d7757d81052d6c4c2a102b4649a2f82239a2d7051b4563a2df4da1940ee5f101a48e426606117d7ad5c9438ba8b4c9cf22bf213b9e70623cc1b4f1a", 0x5c}, {&(0x7f0000002280)="c1e310164d2a4ba6e0f196095e642199df051d0f6719d718447c5d4db2b6b3", 0x1f}, {&(0x7f00000022c0)="dd731839f906d61a5f5d5fd538b1a88b6dcddeb0f1321d8f49edff5889db85ba53b8e84122fff22a24180bdbc862cb860df596b08c0113105c7bd5807d008c2c6639", 0x42}], 0x8, &(0x7f00000023c0)=[@authinfo={0x18, 0x84, 0x6, {0x3}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x2}}], 0x60, 0x4000001}, {&(0x7f0000002440)=@in6={0xa, 0x4e23, 0x7fffffff, @private0, 0x401}, 0x1c, &(0x7f0000002700)=[{&(0x7f0000002480)="bdbe3528674ddc68c25db84376ccf2c63e06c4b59cc958b950be8b4d2decdf3329a73bdd3e3cc98a210819e3d8314bf087e09e3c7a89c06dc18930356af49b534fa4955f6b7a9856adc32ccc963a0a67349aae8ce56b15bbeba1cc47b677f3b0282caffbdd39e37ece9ba01a05ba5eb7788373", 0x73}, {&(0x7f0000002500)="7e5aece17b48f1578d5594e3735b06e6820159375a9414d2460cd67309f3234096b9bf5c0294993d", 0x28}, {&(0x7f0000002540)="8766241358747104cb087f5211516cd5aa38551062f0b2ca4562fe13fd981d00a872ffbf35ac40f9c0c46a32dc501c59de6fcbd2d40aba69db10c1e0b3ced86aa96ee1a0a4c8e691e05eef444d595d3715a08a36fa69532a35b86326cca3ad64b811d7e34a85a7e8614f00e2866cd3cd2a22311e4a1ddb89e4e16a24e569fdefa9e90f1dc61b28b44eda3ef1d3cacf62f79a31a5250fdbef4fd4ff16999106946bb32133508c0843b29e76ff29db70057636a308c885c70fcf247aae4e72fd3b6841fa6622339cf8d5cc4b070de53196793cf248c3465ad6a6acf3f0ca7c00ba2de80e25e94b19885c32309f2c85", 0xee}, {&(0x7f0000002640)="2462bb1601cae68097bcabeb80a3a10f2d9540bf32c2acd316e99bbc09a5000836e744d43c858751f554253302e775340f59eeef670dc1325f39175779f56ab25e2651d6788ab411fabe7008f7af7ab8b4a87d7a5f7888478c02f3fd4217c66a02f8bd265e1c9f7a2281ef37777d7642f168ed02817649c0e5446439dd002939388fd86f76ece0ee8c8a79458456c2575dd9a5629addc008f725937e718217960c351571f6ddf0ff9ab2c2844d", 0xad}], 0x4, &(0x7f0000002740)=[@init={0x18, 0x84, 0x0, {0xc9c, 0x1, 0x5d6d, 0x80}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x28}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0xff}}], 0x90, 0x20000004}], 0x2, 0x4000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000002880)={r3, 0xaf, "8e124c2ef7b652b43d509c1300557b1d63781acd618f6d31d1af04142027530a21286bfa0e84eb7b6be92a77826c4a53ee3c7a5190a4ac0dd9de0e650dd4d8d2c10ea50e90b715ce2283acd7e813331fd48bdc253f7daf309f2c8f1550329763e7a7f9759240a34c28ae9701caddb54bbcabbff841fc56dda99c38f7c585af6fada559bf67c962dd3532232fadb01c04b9d1c9d7d96157dc2b8578add9de5787be4fefdf001be184bfaa6735d404b1"}, &(0x7f0000002940)=0xb7) socketpair(0x5, 0x80005, 0x4, &(0x7f0000002980)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a00), r8) sendmsg$IPVS_CMD_GET_CONFIG(r13, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x18, r14, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80080}, 0x4000) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r15, &(0x7f0000002c40)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 767.40048ms ago: executing program 3 (id=2454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x40, r2, 0x95d44e0b11e6521e, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x2c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg1\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffe38, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd0000fcdbdf253800000008000300", @ANYRES32=r4, @ANYBLOB="000099000500000013000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040014) 761.732109ms ago: executing program 1 (id=2455): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x30}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 735.418342ms ago: executing program 0 (id=2456): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x1000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}, {0x0, 0xa}}}, 0x24}}, 0x8080) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r3, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES32=r0, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES64=r1], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000440)={r4, &(0x7f0000000400), 0x0}, 0x20) r5 = socket(0x26, 0x5, 0xfffff805) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x0, 0x4e}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x4000002}, {0x3, 0xc, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', r6, 0x4, 0x7, 0x7, 0x7, 0xa, @private1={0xfc, 0x1, '\x00', 0x8}, @remote, 0x40, 0x10, 0x629a, 0x40}}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000d00)={0xfcb, 0x5, 0x8208, 0x40, 0xfffffffc, 0x80000001, 0x4719, 0x44}, &(0x7f0000000d40)=0x20) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e00000010000655800189078060000000000000086ddff6200000093022a"], 0xfdef) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x44890) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r9) r11 = accept4(r1, 0x0, &(0x7f0000000140), 0x80000) getsockopt(r11, 0x1, 0xd1dd, &(0x7f0000000180)=""/15, &(0x7f0000000c40)=0xf) 714.706497ms ago: executing program 2 (id=2457): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000020bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000006a030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000730a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$rds(0x15, 0x5, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) 633.412062ms ago: executing program 3 (id=2458): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x2, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x4c) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) 560.17292ms ago: executing program 1 (id=2459): r0 = socket(0x2, 0x3, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000019c0), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001a00)={0x18, r2, 0x802d21512708ad7b, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4040034) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket(0x1e, 0x5, 0x0) setsockopt$inet6_tcp_int(r3, 0x10f, 0x0, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000e40)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/250, 0xfa}, {0x0}], 0x2, 0x0, 0x0, 0x4c880}, 0x48800) 519.260971ms ago: executing program 2 (id=2460): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x34, r2, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000f200000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480), r6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x3c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xfffa, 0xfff2}, {0x0, 0xffe0}, {0x10, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000006, 0xfffffc00, 0x7, 0x1, {0x8, 0x2, 0xfffb, 0x800, 0x6, 0x8}, {0xfc, 0x0, 0x0, 0xd, 0x4b, 0x800}, 0x4, 0x4, 0x9}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, 0x0, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 485.10517ms ago: executing program 1 (id=2461): r0 = socket(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40012160, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x2, 0x10) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r4) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000140)=0x50a0accf, 0x4) (async) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) (rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@restrict, @fwd={0x2, 0x0, 0x0, 0x12}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x48}, 0x20) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x14, 0x22, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x800) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRESOCT=r0], 0x34}, 0x1, 0x0, 0x0, 0x24048000}, 0xa8c4) 408.075278ms ago: executing program 3 (id=2462): r0 = socket$kcm(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000002100)=0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x800, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=0x0) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000002000)=[{&(0x7f0000000100)={0x27, r1, 0x0, 0x2, 0x2, 0x2, "eaa5eea249074607e6adf2ddbc19a30e71eb1ce073e5eafdbabfbc22ea3bc9cae2fd6e20c4f5db9e109eb30087de59327de93f82e6de79ea3853d0de16f170", 0x4}, 0x60, &(0x7f00000001c0)=[{&(0x7f0000000180)="1fe7082f4c992533748a87295bb9960e55a58ac796969856d55b1234ed590a68af68ee5293ee458fc299303dd7ea14270936f8cc9003fd70cfad025832227722", 0x40}], 0x1, &(0x7f0000000200)={0x48, 0x113, 0x6, "903ab6a1615ae72f3d05f55486c850deeb8164f1c6dbe15885520fdf805897cce5382319d915669b7cd69bd5d3f16bc6dc0cb027b3"}, 0x48, 0x6008014}, {&(0x7f0000000280)={0x27, r5, 0xffffffffffffffff, 0x4, 0x3, 0xa, "0023e1ef850d2766f442518a514b381da44e23c52ec18bd8bd2b0d2dc40cfc69be1ff436b8fdd6e15836feea8bbae8824d4c5be58388fd66183eb9d5b6167b", 0x26}, 0x60, &(0x7f0000000a80)=[{&(0x7f0000000300)="a312a1fbad252241a79163adf39c56a2f73ca0a4466db7be9595cd3ce703e95bd236e9573b2c00f7b3a4ee0589c3d86e5691ff444c87b64e55e36a854247c7ab4d8c663a2f9ebc401ad641d2ded4691c688278f57a870ca5200cb367f6d65b008b3fb09f0e0ef87e4af7c71b68fbeb1080d71963083a7023bcef6007eb7349d4c361b86d906fc989d89ee7fc", 0x8c}, {&(0x7f00000003c0)="dfe70d98cbf4e080ba2af63840e225052ccdab775cc7a4fd2ac21724b17dd57998c4fabb4eaf2d69c32a204965897378065277af8e5d6cfbd8a4d01c12a8f6520dba0b55b9ac1bb19ca81b6c327e61b6e8401b41f2138e6b56a5f878f775c8aba768f3a65efc1edcbe5530fc99f5951446e0ab799f73c0fcfc87e58ec523810b93eb352080ed20fefb65c9a930647d7697846778f6fc0bf11f65", 0x9a}, {&(0x7f0000000480)="369801fdf78f71d47234360ff02d8456fd1aa69d745d218ccab0c4b442d28dc4c109c1e54c08c833c45e0d72ff3285ef93701730f949dc9d576aad4b31c93ae899aba34337411accd14910f559c1cd9b9870f09c61faa73d06dbe3709dedde5163cd8ab8a7bded6e2e0842dd06ca5779a55aa02505930a2af20641b5f31b430fa3626b011aa4ef4ef4e50415d054a0b21da8999057119628e73383bd0eb73b8f43891439ea0479c6a2b8f6a9d4c10a8e1a153162abcf", 0xb6}, {&(0x7f0000000540)="8b2d8adbb168a387a981901a0b2ef19b7e35d480a8b7a8338b1425d1783f7d5d0d928a5c0bd72e2ad13c0f45d61f68bc74e3ddeb0cf2b52c18c45d1d3c81599d916f21c0948b350921a983c44973755fbb2ae5561e63df988ecf00e8834a5957bf8192f573b682bd155860732a749cec46020cd48ecebc7e4b9565f8ed047558e6a0b40463df798be9130f6d99ee230b0f2843e1fe0621eb8306767a209956f8d140c49a48c6575f70de462d603ff3c5bc293954077320992b78d8440ef81d0cea495c", 0xc3}, {&(0x7f0000000640)="354e0e7608a77e8884b1ffac61c2a6823ae5fe62f740cb44fd5cec644e0c986f08ae09b91a6771759f6357573fac6ebf27028d5ed89ba3710a356b42ce48bbbdcc86b5f51970439b389c4346578013f24bc98dd64e3b9167f69599a9f7eca45a357ead24d9208dc6efaac6d1bdaba57160a1a3d78f86f5657dd5b84c88ae081e9aac7e267f6873f52e744f2e173d2dc60a96c009e99e063c8603ca11", 0x9c}, {&(0x7f0000000700)="15d9a8433537f48ee14678337ed7c3f10cab17d15c380cedcae85de84289f16253f13e8ade819a186df29557e2057eae9444f601809876e58fea2efd2f8ea8eab53dbaed81fe06ebf50b8b2fe131f21e9ec471060e53a44fed09a489716b0be2cb342a5a10c5e10d42bc7b195c498e393730a6653f6f52831ce0ee5e4add2bfc8e1ce589429a385b9715476de2be0fd93308799fa61a140eaf7b7a47c8f42d8ac022f48c4506958911a012774948999f34622626dafbac7a6d8e3fddf93973c42296ad348ef0f32bdf5cdc9aae7a4c", 0xcf}, {&(0x7f0000000800)="de183d7bebb6b6ad222d83df74e635b4eab6ddc29300bb0735cb622149b89639b0dde0d14fac2fb9baa1d90ac9a6d04eb3185024f5cdf7d705399f927896784964bd6907af330c3f540bbedae29b20377d54e0a20f2c55875c41c62d96e4187f0a02e7fcbe1c720b830479a29a09e39e65a08545e1ea5aef", 0x78}, {&(0x7f0000000880)="85ac0cca4dcc89ee698150444cca0cc2d6a5a8a15bdac967827d18ecda4fa69645f9d99f4a80c0c008b3e5829ba31bce61ac6eb2c319b974ac0941a728ef17a22bdc321e7a9fecffbcbad1b190e788317c06d631937857e5d37b53027438a4801dfba1ab594e6d658a148ea61e8a5bd4fd9135d483719c2f827935fe1f8dec3fbbe0f6fe0894102ccebb37293c4840e8bb12bb9406819732a4ed60561a057a6d304e340e3741498e7866050af0737799aadc07841cefa5f65015ebe5cbfd00f95a1ebbf19adb8a668cb65dc38d70ae318c37d3cbf7f7899789957623b60626c8698054", 0xe3}, {&(0x7f0000000980)="55e4679774a92a3fa9c97536b57ec5fe3082506fb34be75bb21cb7cf6013795e6f8a234b1d715ebab729c155c2e5729102c0e2f86397bd8048e485c8b153b92c3602736f480049c3913088a84dcbddd55f415a2120d718f385214c0f41b2a9c59a51eb92992cd5251ea54a169170d86721eb05a7b0dd3cc0c8b9239ba49aa29987aa8923695da7fea90f8cffc7d6d6b45f324697574b2237e7a56337c8667ae9b00c82069615ed7dd8ca6ab86f12e491d6aa6529534d70a92afef89546c30ea527b247b39cdcd161cd6e9bba0e5702c4874f240278a51d68bdc0", 0xda}], 0x9, &(0x7f0000000b40)={0xc0, 0x10e, 0x84, "f63a6c1e41519ecf6a7a5ab795b99f271f287d188e4ba90f340582404b2445e489053d50b508e677b8177768527cdef5a1ca132eccee2ea2df02d1fd9f6d058834bde55da0afc791af937ff143f576985a49a258cd0c4a2ffa09701604a3ebc83e22c720e8e9d10d0dd9119fc4cf5d8a8abfc66cc1ccd5e0bc5bff77942c5b1d6c28bb56f2df184a4adf33d5ec88d12f08a45256e0df3c62568a6d56ecfca749829f5ecb3d00746b00"}, 0xc0, 0x4}, {&(0x7f0000000c40)={0x27, r9, 0xffffffffffffffff, 0x2, 0x0, 0x81, "9dd6e9b2d091926537dbe435f8daa704cec6d93c658bfb2e9ab6111475e2ea6a3d6667a56f291164b2a89630793dba51681d94dc48724c1ad8c9a30711e8b1", 0x39}, 0x60, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)="e010", 0x2}, {&(0x7f0000000d00)="ad94cc4142d9f2e3966529bf52ba53715eed4a3006307e7d7243f0568f4ca61bb2e9ddd4993018bde26a6a05828fdba14e3a8a52f83b4adc", 0x38}, {&(0x7f0000000d40)="25c9e6807523c403d3c7839fe739bba91190a8a31b1ca9c426f275718648ef0e0654fff57beb86ca06620dcbb3c27b880e3923f71c6a6c3e87d46e2b51464b428958cafa153c53703e233883d0eda97def2e0867101ff62cab6d747870a258063e7e1c975630", 0x66}], 0x3, &(0x7f0000000e00)={0x70, 0x104, 0x6, "525793859451198649efaeef83e323aa6a1a370dae51d3bc963a151418a4feb2fe42a9686872c410151e97f75d0fbe856eea32133d1b04a270a8bbfecbcd171ea0f11ace987d8d54f452b0eeb620e0db53698a7501dbbd5a60628adf517b2ddf"}, 0x70, 0xd506346f4fc00ba0}, {&(0x7f0000000e80)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x8, 0x3, "6040efae1cf3ed09f4cc53f2e09655f8854d46fe0fc0cdd438d949c4ea0b7f9f3317cdf9592403217c3e6addc30327e5b0d1672dc26a1929aa08340b6a20c7", 0x2d}, 0x60, &(0x7f0000000f80)=[{&(0x7f0000000f00)="545f6e47bde39cd3fb22c72186836b47934e8873d971bb12f5294f", 0x1b}, {&(0x7f0000000f40)="3a847f13", 0x4}], 0x2, &(0x7f0000000fc0)={0x1010, 0x103, 0x40, "d7461d335f4f529c1ca84a739dde9bf9b91fdc37c1b2ebc8fdc1fb174910a75e29ec2612bb62279d10ca80a9dcd373cd39b72ddba4aba3ad8fd388446ad38f6c879cc2aeed0ad35f7073dca64dcddbea6ab8006ff2bb40e481f0407328d26c50bf973e6e144a56d4e4d7355a3921c5ef232443a0d4dea9e1982bdbc96dd1dce3e3dcdb8c5309e9676929b34c62a69ff48f15c53f3f19fc125b52cb66d99c052d03e5d3b29836085f887faba48d0f1611cb2d5a50353ff2ed6b3f57466f3327adbce75007f37e74fc7783e0ab48edc3da20f1edd58bcd864ca6c0cfd35684f7286531153fade2ac825471458c245a4aefe67b88431deb0263b61146f9be17f6aff5065c2c4e06378ff4c174dfee0cbeb2dd8b0998bb6d8976943812b7b125b309240b6528794b0bb6c212fd4f888733e0e2f9dacf8fab902f0421e976d68741e846aa5a86e2e32ac045e604042b21ac5ef58e9ff494616a26b704f870f8675325da19a883521665abffb9feefc5fc8e038ad5ab561212fc54178d3f9dcdfd31da0dbb1ca1af936317cbca3f18e572734c8c9fdba75a6a288a5984f84ccaf0fa944640047b601ff44f7ce5c7cd4197f665908dc5242dc51511cf097b66de8104a09f5becc3172c6de062cd07b9f941b352dfb30ae0b3a095359230093ed8f06200d5bd29f5e9eb0e76fac2b3bcdd4b514b1b45c76b38322ff380633113615c3394b3d18707e35002d05c0f364a1b3b56608db9098411ffd79fbdb62b8e089815f3bd48acd19c7838a8f82d0444b69e4107699352230c151e07d88a3484d2f3cfc72e6a6db3414bbd8658541bdb7a110cc1fc83ea5a6a72e16f4a9d090b61d03384a513c1ff44e7fe87cf0277964e93600d44b6506a363ede636dfad047ff6c5ab7f0b0e867b93ab00d1e97371c7141cb6b923b96c04c5340f3eb540faaec75defbe84e4ec8b12eca98fd352b4619a6db654c47aff637a0047540bc59f09fade7b6fdcffcda6e839afae80463b587a47027c4e3fbc1a1c00e060b3e97758ad525972fbb3f5eea9c08ff5f457d6ce477e4f2169afc680fe5fd6ac8c6288d59e2795430eff860a14092b8722c07bf23786effc10e21bc46d53d6e0fb455a57e43e81347ddc1fd0285fc4f229d62747bcc7236e5ab1e379f23c4df68c7005ac8aec7a7397fd3ff05b89872781e1758de1de3b643b6ae8b9e43ae74979f4edaf270c102c859b03860a202d530be7df7172082110fafac7c6ccd5e92bfe1ba28bc029d8518aadec9b542f4a1766b4a58cf334d3db1ca8078124969b52e080d0ea4b3291115ecc278a3771485d9ef593bcb98d3d4898843e2291c54829cf6a623ad6ccbb57ef5cb010d9d4c032e3eab1eec2eb1718ba9260fec6ad8b18827a230b3b97f7ee2e084ab5405d7dad14a567ce7fe21b1360a639ac8122662835792475cdf0b2b321a165c8703357a4f90936a244f480ae2f6132525b65261c1ee93e64127180e5aaed138e9b3b5a03b176e4fe63195c8c652be749d98bb8e7f2cdb3a64decc48f30ea10823ad99bea21c83dda619f9e3ed01ea0b3235ac19d6aa3178b512b19688cabd92dba1130b83cee9691549d14ebbd2ddc1383841bf8c5c4c868f2d133f5abc8049f4a57556bfc42670c7fe0906186acdeadfd34acc2caaef1c4c9ffb7ba71f7ec1c3d0d0c20a4ae3881fb0752594ff462ceb85e65e23e2faba0bfe1c79e74a8787ca27a32384148df4b60e790f6ccf5f0240ec00bafeff86ab8b47e5a1227411df499d78f649bf4413717e2411ba78a1d1ff95f8c22ee0f443f2c5f90aff84d214c893ab2397ae9dabee38445872e1114dfc8c787536a98032170b0646d9ded082a9bfb13a6524a31a8ab24edcf1567073f8f8bac1ded38cf8240bc8c48406b0a810a5971ad4fc98c0b248d0e3e2ef77b0ee21176185caa9dcc01f6e2ad2e5618b4cc5ed1e45dd6955f0231172a5a9870468190f22c0d87367acfe5c192c7dcfdf473487645deed0c8520263f8ea79f3206db984de1dc01fef1e8fa64386ec6ad2a37846c2eb4303ce3a2f553e3256aa1c05724468615825d6f9e0b23d7e4438a7ceed5b171da1da12da8d102c2894c7f45428ba63053f3d4af6549392b94b991444358d7625485855dfd884966ba2ec2328b252a7fe56cde8c79b8f39fe7cf14548131bd2b2881bbfdbc69a82924267fc311c16481a3ed14b18b9edc34d3de31eea498fa7b3e1c76c60c97c92efffedbded81713962085557d4093031bd7602c478cfd28b0b345074f746bdffcee7a079bb37071a726644f5a0be7303fdf84bfeb3239b67f21835cd2c08295020e60b86429e26ae0cd8c4aa7c09326c2177e271b81eb94b392e275a9841c6236beaf16d7703c30790392835a71e4a57078b8116cd067826faa19ec5091873934470f79d074f911c6c1dbbb8e0ecc6de09f0e985bd197dc7364ac13a1fca2e6e105c0670df10ade7746a276a40eecd6ae8a9debc99ca7f7a282caf0548005bacfd863678e88f02ba211565a4f4db542cb6ea64aff4f9755cf1e2dfec993cc0243944a9dcca2f723fb4ac4226bef83f81cd19ca3124d5409b5ca733885992c95a92ac3f230beb038ea6398d53b4466a9e0600de375a6577baf8a61bc6d5f91bebaa5e47015a7192016b0078423af050bc84a0fc680d665a9fc80f11322de516e5e40f46488b2b99d110724b4dd9324e022ff168b446f3d98cd3b0f34e5ccbe623c291eada6972df971ec6274c6661054a291c9301130e1d970328f9db7e78022d467e3b6f38e568fdf1a37e5ee478424579a5fb4462f46ed6fad672acdcf25f6b8790f4529fcd3b3da0a9b16e387ce35bebdf3b4ea566740ad54533796ca3e7b8e3dbc94b751ea89c3b471cce94ee43e1986759daf02e51edfd24e39fd44a198783600669213961d6b516b8d8cd4c7a3f6871ec77ca26478fe08fbf1db4ce246816940d1e5ade3946da99f12adced2483a52bc18459996229d6ff8f6c2c38ddd641f22407e9ad0c7611c68fe361653319679ba390157543448987c05308d473e3ffeb9c2d8523af75de995b2aec1aa86423c82d31921ad34cb3d8dfac1656c43e011dae5536b82c3b942807c8588dfca399c45662aa3cfdebcc6f3a1e922361d432c9964f381b2990fd481d9a99f17bff25927dee93d34d5a152671ab660dc9632b842c3de388a37aafbe81eeb60e5e80e26a01ad705818756cc8034ab0ff9f4f46dd4db351686d0444fe7ada98b7faee4365f29752ed45a23ed90c25e60882885190046029824bbe0ab9ddc48b9a2823776ce6c4839f0197217751d8a2fbba8a9b6fe1cb87770dbbf907f9ff0b82380c12f450a7e8d9596172899f3a2a3799210adba4a9135b53833e3ca38347806593c0a6a218005f0afe58f0b3282022896c5e10786ec087b4f8f1ccae7e4c485640fcc91dc003c6be0b1c1122b4bcb5743b1162ec391c95a87a86402b93f280f5ca3ee05409baae7225e2b0efddc17378a702e1c6b0d33c3d69ec44b1750ee3dfe5742e31a4b693bbf1a00f7b4a7fb0d7600e6cda081a2ca55dcd61744addb510f85493387331bc15762ba30ddeb99c322011cd446b1f50ef373c93156aacb54ac86bdadf60c26fff712d3ed9f8529ae4416d7fd42a7dbaea3746bd37f09d294dfb2d4cd46655985846947c65bab6ea06b0b36cbe8591bedda141d3e58a548556a66ad7be8732fc82e2012d8066a3f23a1ce8db40c6c6917694a98e5734286e18328963b595d8644850a822dc77ce6107e8f3c710c3526135bf1411c880749a62f2dd4a88429408169587b1e9634d70b06cd50ae8779f3d0c98a50e3bfea2e0391a67d2e645d27fbe7f7915ac57ccd05636bd63e73eb6c72483ec71935142f48ce042a672db261681c6f0ac98ba4981c6dfd1115cb7c76509998bfb3967652714fb283c9e6c23ee795836ac0d8aa0a2f3121503e96f2b5df8a99f326b656bb63fcce5672fefa71d3bbca677b1a88d0d897c910229177bebfffdba4bd873eace9a0ad3eb6e68fdca15005eb7689efe678c797f598ab7eff8130805166a1bc9156be91ab5192fddaa34496a451d958af4d49d83b78b0fef9f01c6e17b07191e9ee07e81da7392b30b33b46db5b43e3caaf669c28ec4df172423520986e66811f7847f54da8b936353f9563666e96a7c2f25fe61bf1510baa1c4109c81b1f4e5867dc26126b2d150f89f7f22444866353b0243f60c7bf9a02502fdbb1d99f4d8316317dc5f7ce89dc0c57d749f9ab374cb61eaf0bb143363db0f72939f2be4029fc2c3a9eed25f7d867126aaadaff51dda63255d1475bb02cc6800986240000a956d32f26a0ca41d9d83da598e102dd9e45e42adac18032ce486270058ecc08b6df3feaac3a6e0ab36dc9f0d35965723c22ea976aef38994a328e261d20245530e5fe10db8ccbb74046e3eab12f424b8fc367cb65f20397fcde171dd7fafca4bd4bc407762184d7fef112f04bb745ab302e04efe5605f04d9e427a71a5a6526789a624b696f51977706ab8ce6f409d5318a838ec135f1d5240f43a291bf03ef0d3d690d51f46470c3c84c53d1de854e620a2659ea1ec7862c68c480d7a7871d44e6d8ca6aba1545ee875ab1f97946855e01957deec23ce4ad27fda8f3c200e4ed6bd3e3579fda93b797096237c027855b30c97ce9166719d891f1734e5ab52d656f5caf8445a483ac14be21645ba0cd061cc2a95daa8c26b41216f4cede0522266c4a0e820873f1aadab77d499133641514cc410067b6e45b5d0689b469cfc7e37bd57e6141a16770efb5e8f6f5ca3e8472075e4f627f7196cae0d71177860dbf8c81be4e64ec756bb8988e88e283cd7d5514e43a07a93387fedcb7add2e5f294e0cb3396cbe03bb629fa032d943a4b9f403257d414ee4118b796fce398b0ab2be01c3ed06423dc7868a5f7f47b17b32c5705947602f36e70e036641453606f3c79e234012349f84967bfafec2b8b41ccbb8301a6b8bb978813b7f3106ffa660da606e31697f86214329b64178a79c3e74d41ffe4a89b74bff8a0d17d470e8fed2766dbd8063b66a3c09415b7d4ce18dd999ebd6743dfa6d3dbe07ffaf39923e3478a98a11c3458331bf950ee6a1541e8351b55bfc53ea1b291f3e16ff7e16d50415f6b3e266f8f5b7db7a154a3cb9d7e15d1b6c5ccf1de3e00e94c1cf6f6739557913dff09a44959c47079c81445245393a75c8fdea7aacdce38ae1d54eb3a9cad4fc12ea8026ca151ffa001134512157f783612cf653a6e3450073341f97b318d510dd4afdc2e980c92482c25e4306e83ab7230e3fc20aa9f867df2e11fd4fef06e7bc5fadaf26f93d0821b5a0ea08d3159d7a4502813ec610ed9fa514203ec2ef6ec61084032ae33a0aef72a352be08124c829187d1c6167d53d132b7986f1404aa3f449296f4d0c5c82aff295708a038150fa9f9c67df78516bcd4ef2030fb65409778c89ce3e3e8dd9f93188f73578b5795ade00d18020c4ed22ff5f02bdcc1862e59a68f648bc042ba1977d3c9e19be3881954048215ce1060c19d1310ccac555fc6a40ade2ec224da7bdc3fc806800fed88b30686b70c93f57dd466b809da2296503c04285754b724f40b9005f68fe4028d59c6dc9a7eba409d0db389dfaedd987c436e62a142d46fcfd808ded48eba060542162e978e3a3cfb23393bce041f9d71d5957d9431e1f5076be9d2a13e498837f3e62e13c4b8e54f14c93815874e093848bde4dd6742c7e24acd1441e86daf14f4958ea35208437a7c5611bfcc00"}, 0x1010, 0x4004000}], 0x4, 0x80) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 298.966663ms ago: executing program 1 (id=2463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000080), 0x12) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680"], 0x30}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @sack_perm, @window={0x3, 0x0, 0xfffd}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x9, @none, 0x79}, 0xe) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) setsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000200)={0x77359400}, 0x10) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fedbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0500530001e1ffff1300040077673100000000000000000000000000e44187097939849632c5501fbf26d8b0da0f663b9f0696694a57913d35d6bd4235b8bdd30b5da8318d673b88024ea5810cdc213b24878baf38c53d31c16a4eaba383d34df25845acce2551121435cc0733908f3e662d4210c6860c80f9e000160eb4eed4fc90e25e71cd79b0dda5cc2fc6aaf9baf9c42156"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8050) close(r1) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = accept(r1, 0x0, &(0x7f0000000100)) ioctl$SIOCX25SCUDMATCHLEN(r8, 0x89e7, &(0x7f0000000140)={0x6b}) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002100)=ANY=[@ANYRES64=r0], 0x84}, 0x1, 0x0, 0x0, 0x40280d1}, 0xc051) sendmsg$NFT_BATCH(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000004a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x40091}, 0x40) 98.314675ms ago: executing program 3 (id=2464): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) setsockopt(r2, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r4, &(0x7f0000000080), &(0x7f0000000100)=0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r3}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000010026bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="44d5050000000000140003006e657464657673696d3000000000000014001680100001800c0003"], 0x50}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) 0s ago: executing program 2 (id=2465): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x20800, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="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"], 0x3c}}, 0x2004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = socket(0x8, 0x6, 0x4) r5 = accept4$packet(r4, 0x0, 0x0, 0x800) (async) close(r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x1, 0x2}, 0x10) (rerun: 32) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES16=0x0, @ANYBLOB="00002abd7000fedbdf25010000000000000001410000001c00170000001c0000000969623a7465616d5f736c6176655f3000"], 0x38}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000040) (async) r7 = socket(0xa, 0x3, 0x4) sendmmsg$unix(r7, &(0x7f0000001340)=[{{&(0x7f0000000440)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="100000900f44e1d7f58451e7d8e76100000000000100000041000000"], 0x10}}], 0x1, 0x0) (async) bind$tipc(r6, 0x0, 0x0) (async) sendmsg$tipc(r6, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x11e8}}, 0x8000) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES64=r3], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94) (rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000029dd0000000000000000000041a2000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r7) sendmsg$SEG6_CMD_DUMPHMAC(r11, &(0x7f00000004c0)={&(0x7f0000000180), 0xc, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20000891}, 0x4) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r10}, &(0x7f00000003c0), &(0x7f0000000080)=r0}, 0x20) (async, rerun: 64) r13 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) setsockopt$XDP_UMEM_REG(r13, 0x11b, 0x4, &(0x7f0000000500)={0x0}, 0x20) kernel console output (not intermixed with test programs): 121.683328][ T7250] Use struct sctp_sack_info instead [ 121.709737][ T7245] tipc: Resetting bearer [ 121.769423][ T7244] tipc: Resetting bearer [ 121.842906][ T7244] tipc: Disabling bearer [ 121.858598][ T7263] netlink: 'syz.2.380': attribute type 10 has an invalid length. [ 121.898590][ T7263] team_slave_0: left promiscuous mode [ 122.170035][ T7281] netlink: 'syz.3.384': attribute type 1 has an invalid length. [ 122.196293][ T7282] netlink: 'syz.4.385': attribute type 13 has an invalid length. [ 122.251528][ T7285] netlink: 'syz.4.385': attribute type 13 has an invalid length. [ 122.284843][ T7281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.326540][ T7286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.336902][ T7286] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 122.349680][ T7286] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 122.374029][ T7282] veth0_macvtap: left promiscuous mode [ 122.380247][ T7282] macvtap0: entered allmulticast mode [ 122.392171][ T7282] macvtap0: refused to change device tx_queue_len [ 122.399391][ T7285] macvtap0: refused to change device tx_queue_len [ 122.484049][ T7281] veth5: entered promiscuous mode [ 122.499190][ T7281] bond1: (slave veth5): Enslaving as an active interface with a down link [ 122.530427][ T7301] gretap1: entered allmulticast mode [ 122.540405][ T7301] bond1: (slave gretap1): making interface the new active one [ 122.553114][ T7301] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 122.813620][ T7319] Bluetooth: MGMT ver 1.23 [ 123.320481][ T7326] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 123.694980][ T7350] hsr0 speed is unknown, defaulting to 1000 [ 123.969763][ T7371] C: renamed from lo (while UP) [ 124.079125][ T7379] syzkaller1: entered promiscuous mode [ 124.085176][ T7379] syzkaller1: entered allmulticast mode [ 124.185193][ T7383] RDS: rds_bind could not find a transport for fe80::2e, load rds_tcp or rds_rdma? [ 124.473515][ T7398] net_ratelimit: 46 callbacks suppressed [ 124.473535][ T7398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.021147][ T7428] netlink: 'syz.0.425': attribute type 11 has an invalid length. [ 125.029821][ T7430] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 125.066088][ T7428] netlink: 'syz.0.425': attribute type 11 has an invalid length. [ 125.085478][ T7428] __nla_validate_parse: 10 callbacks suppressed [ 125.085500][ T7428] netlink: 224 bytes leftover after parsing attributes in process `syz.0.425'. [ 125.150676][ T7430] bond1: entered promiscuous mode [ 125.155784][ T7430] bond1: entered allmulticast mode [ 125.161556][ T7430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.345097][ T7446] macvtap0: entered promiscuous mode [ 125.366569][ T7446] vlan0: entered promiscuous mode [ 125.372103][ T7446] macvtap0: entered allmulticast mode [ 125.424901][ T7446] vlan0: entered allmulticast mode [ 125.432317][ T7446] veth0_vlan: entered allmulticast mode [ 125.515883][ T7462] netlink: 'syz.1.436': attribute type 4 has an invalid length. [ 125.710164][ T7470] netlink: 32 bytes leftover after parsing attributes in process `syz.0.437'. [ 125.997825][ T7484] netlink: 'syz.0.441': attribute type 63 has an invalid length. [ 126.378191][ T7499] netlink: 52 bytes leftover after parsing attributes in process `syz.4.447'. [ 126.403591][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 138.101563][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 150.326449][ T7512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.453'. [ 150.348119][ T7512] nbd: must specify at least one socket [ 150.352403][ T7518] netlink: 'syz.0.450': attribute type 4 has an invalid length. [ 150.383143][ T7514] netlink: 'syz.0.450': attribute type 4 has an invalid length. [ 150.418938][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 150.421131][ T7518] netlink: 17 bytes leftover after parsing attributes in process `syz.0.450'. [ 150.446837][ T7514] netlink: 17 bytes leftover after parsing attributes in process `syz.0.450'. [ 150.546919][ T7525] block nbd3: not configured, cannot reconfigure [ 150.782784][ T7538] netlink: 'syz.4.458': attribute type 4 has an invalid length. [ 150.944677][ T7550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.462'. [ 150.975154][ T7548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.461'. [ 151.061488][ T7558] IPVS: length: 16 != 8 [ 151.238286][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'. [ 151.264693][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.470'. [ 151.437089][ T7583] netlink: 'syz.2.473': attribute type 2 has an invalid length. [ 151.445708][ T7585] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 151.560727][ T7585] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.569592][ T7585] bond3: (slave bond4): making interface the new active one [ 151.577917][ T7585] bond3: (slave bond4): Enslaving as an active interface with an up link [ 151.609276][ T7590] netlink: 240 bytes leftover after parsing attributes in process `syz.4.477'. [ 151.656975][ T7596] netlink: 'syz.1.478': attribute type 24 has an invalid length. [ 151.702917][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'. [ 151.732823][ T7599] netlink: 'syz.2.479': attribute type 2 has an invalid length. [ 151.773639][ T7585] bond3: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 151.806097][ T7585] bond3: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 152.119674][ T7621] netlink: 'syz.0.485': attribute type 3 has an invalid length. [ 152.821224][ T7657] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 153.231236][ T7681] sctp: [Deprecated]: syz.0.506 (pid 7681) Use of int in max_burst socket option. [ 153.231236][ T7681] Use struct sctp_assoc_value instead [ 153.489610][ T7688] netlink: 'syz.1.508': attribute type 2 has an invalid length. [ 153.577477][ T7691] netlink: 'syz.1.508': attribute type 2 has an invalid length. [ 153.630056][ T7708] IPVS: Unknown mcast interface: vcan0 [ 153.868203][ T7720] pim6reg: entered allmulticast mode [ 153.885770][ T7724] pim6reg: left allmulticast mode [ 154.065495][ T7726] bond0: left allmulticast mode [ 154.082741][ T7726] bond_slave_0: left allmulticast mode [ 154.088660][ T7726] bond_slave_1: left allmulticast mode [ 154.201150][ T7726] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 154.417516][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 154.649598][ T7750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.713617][ T7750] bond3: (slave bond4): making interface the new active one [ 154.774218][ T7750] bond3: (slave bond4): Enslaving as an active interface with an up link [ 154.822153][ T7760] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 155.045348][ T7783] tipc: Enabling of bearer rejected, failed to enable media [ 155.081944][ T7783] team0: Port device geneve0 added [ 155.280922][ T9] IPVS: starting estimator thread 0... [ 155.342471][ T7807] __nla_validate_parse: 15 callbacks suppressed [ 155.342494][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.4.545'. [ 155.386271][ T7802] IPVS: using max 26 ests per chain, 62400 per kthread [ 155.589116][ T7820] gretap1: entered promiscuous mode [ 155.611361][ T7821] netlink: 68 bytes leftover after parsing attributes in process `syz.4.547'. [ 155.677867][ T7820] validate_nla: 7 callbacks suppressed [ 155.677900][ T7820] netlink: 'syz.2.548': attribute type 4 has an invalid length. [ 155.923106][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.554'. [ 155.945057][ T7847] netlink: 60 bytes leftover after parsing attributes in process `syz.2.553'. [ 155.974234][ T7852] netlink: 'syz.0.554': attribute type 30 has an invalid length. [ 156.024276][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 156.231143][ T7860] netlink: 256 bytes leftover after parsing attributes in process `syz.2.556'. [ 156.488694][ T7862] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 156.506269][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 156.522389][ T7880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.561'. [ 156.570389][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 156.607152][ T7886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.564'. [ 157.259687][ T7917] macsec2: entered promiscuous mode [ 157.280157][ T7917] bridge0: entered promiscuous mode [ 157.292371][ T7917] macsec2: entered allmulticast mode [ 157.316373][ T7917] bridge0: entered allmulticast mode [ 157.339046][ T7917] bridge0: port 1(macsec2) entered blocking state [ 157.359312][ T7917] bridge0: port 1(macsec2) entered disabled state [ 157.384976][ T7917] bridge0: left allmulticast mode [ 157.398424][ T7917] bridge0: left promiscuous mode [ 157.718403][ T7948] netlink: 'syz.4.582': attribute type 1 has an invalid length. [ 157.728276][ T7950] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 157.852903][ T7950] netlink: 'syz.0.580': attribute type 3 has an invalid length. [ 157.918171][ T7957] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.931591][ T7957] bond5: (slave bond6): making interface the new active one [ 157.955016][ T7957] bond5: (slave bond6): Enslaving as an active interface with an up link [ 157.976667][ T7960] 8021q: adding VLAN 0 to HW filter on device bond5 [ 158.174133][ T7980] FAULT_INJECTION: forcing a failure. [ 158.174133][ T7980] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 158.219334][ T7980] CPU: 1 UID: 0 PID: 7980 Comm: syz.4.592 Not tainted syzkaller #0 PREEMPT(full) [ 158.219380][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.219400][ T7980] Call Trace: [ 158.219408][ T7980] [ 158.219417][ T7980] dump_stack_lvl+0x189/0x250 [ 158.219448][ T7980] ? __pfx____ratelimit+0x10/0x10 [ 158.219478][ T7980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.219502][ T7980] ? __pfx__printk+0x10/0x10 [ 158.219531][ T7980] ? __might_fault+0xb0/0x130 [ 158.219572][ T7980] should_fail_ex+0x414/0x560 [ 158.219604][ T7980] _copy_from_user+0x2d/0xb0 [ 158.219630][ T7980] ___sys_sendmsg+0x158/0x2a0 [ 158.219656][ T7980] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.219718][ T7980] ? __fget_files+0x2a/0x420 [ 158.219748][ T7980] ? __fget_files+0x3a0/0x420 [ 158.219791][ T7980] __x64_sys_sendmsg+0x19b/0x260 [ 158.219816][ T7980] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.219849][ T7980] ? __pfx_ksys_write+0x10/0x10 [ 158.219874][ T7980] ? rcu_is_watching+0x15/0xb0 [ 158.219900][ T7980] ? do_syscall_64+0xbe/0x3b0 [ 158.219923][ T7980] do_syscall_64+0xfa/0x3b0 [ 158.219940][ T7980] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.219969][ T7980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.219989][ T7980] ? clear_bhb_loop+0x60/0xb0 [ 158.220013][ T7980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.220040][ T7980] RIP: 0033:0x7f13ee38ebe9 [ 158.220063][ T7980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.220080][ T7980] RSP: 002b:00007f13ef1b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.220105][ T7980] RAX: ffffffffffffffda RBX: 00007f13ee5c5fa0 RCX: 00007f13ee38ebe9 [ 158.220119][ T7980] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 158.220132][ T7980] RBP: 00007f13ef1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 158.220143][ T7980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.220154][ T7980] R13: 00007f13ee5c6038 R14: 00007f13ee5c5fa0 R15: 00007ffe589995b8 [ 158.220186][ T7980] [ 158.665676][ T8006] netlink: 'syz.4.597': attribute type 21 has an invalid length. [ 159.066090][ T8036] FAULT_INJECTION: forcing a failure. [ 159.066090][ T8036] name failslab, interval 1, probability 0, space 0, times 1 [ 159.096969][ T8038] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 159.130110][ T8036] CPU: 0 UID: 0 PID: 8036 Comm: syz.3.606 Not tainted syzkaller #0 PREEMPT(full) [ 159.130140][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.130153][ T8036] Call Trace: [ 159.130161][ T8036] [ 159.130170][ T8036] dump_stack_lvl+0x189/0x250 [ 159.130199][ T8036] ? __pfx____ratelimit+0x10/0x10 [ 159.130230][ T8036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.130254][ T8036] ? __pfx__printk+0x10/0x10 [ 159.130289][ T8036] ? __pfx___might_resched+0x10/0x10 [ 159.130313][ T8036] should_fail_ex+0x414/0x560 [ 159.130346][ T8036] should_failslab+0xa8/0x100 [ 159.130377][ T8036] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 159.130406][ T8036] ? __alloc_skb+0x112/0x2d0 [ 159.130430][ T8036] __alloc_skb+0x112/0x2d0 [ 159.130453][ T8036] netlink_sendmsg+0x5c6/0xb30 [ 159.130503][ T8036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.130526][ T8036] ? aa_sock_msg_perm+0xf1/0x1d0 [ 159.130548][ T8036] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 159.130570][ T8036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.130590][ T8036] __sock_sendmsg+0x21c/0x270 [ 159.130622][ T8036] ____sys_sendmsg+0x505/0x830 [ 159.130660][ T8036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.130693][ T8036] ? import_iovec+0x74/0xa0 [ 159.130721][ T8036] ___sys_sendmsg+0x21f/0x2a0 [ 159.130746][ T8036] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.130808][ T8036] ? __fget_files+0x2a/0x420 [ 159.130838][ T8036] ? __fget_files+0x3a0/0x420 [ 159.130880][ T8036] __x64_sys_sendmsg+0x19b/0x260 [ 159.130904][ T8036] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.130937][ T8036] ? __pfx_ksys_write+0x10/0x10 [ 159.130970][ T8036] ? do_syscall_64+0xbe/0x3b0 [ 159.130993][ T8036] do_syscall_64+0xfa/0x3b0 [ 159.131010][ T8036] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.131038][ T8036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.131058][ T8036] ? clear_bhb_loop+0x60/0xb0 [ 159.131082][ T8036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.131102][ T8036] RIP: 0033:0x7f504a58ebe9 [ 159.131119][ T8036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.131136][ T8036] RSP: 002b:00007f504b3db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.131157][ T8036] RAX: ffffffffffffffda RBX: 00007f504a7c5fa0 RCX: 00007f504a58ebe9 [ 159.131171][ T8036] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 159.131184][ T8036] RBP: 00007f504b3db090 R08: 0000000000000000 R09: 0000000000000000 [ 159.131196][ T8036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.131207][ T8036] R13: 00007f504a7c6038 R14: 00007f504a7c5fa0 R15: 00007ffe311e17d8 [ 159.131239][ T8036] [ 159.928124][ T8072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.932394][ T8071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.574253][ T8104] __nla_validate_parse: 76 callbacks suppressed [ 160.574272][ T8104] netlink: 32 bytes leftover after parsing attributes in process `syz.3.629'. [ 160.598805][ T8105] netlink: 32 bytes leftover after parsing attributes in process `syz.3.629'. [ 160.863311][ T8116] FAULT_INJECTION: forcing a failure. [ 160.863311][ T8116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.913549][ T8116] CPU: 0 UID: 0 PID: 8116 Comm: syz.4.634 Not tainted syzkaller #0 PREEMPT(full) [ 160.913577][ T8116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.913589][ T8116] Call Trace: [ 160.913597][ T8116] [ 160.913606][ T8116] dump_stack_lvl+0x189/0x250 [ 160.913635][ T8116] ? __pfx____ratelimit+0x10/0x10 [ 160.913667][ T8116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.913692][ T8116] ? __pfx__printk+0x10/0x10 [ 160.913719][ T8116] ? __might_fault+0xb0/0x130 [ 160.913760][ T8116] should_fail_ex+0x414/0x560 [ 160.913793][ T8116] _copy_from_iter+0x1de/0x1790 [ 160.913823][ T8116] ? rcu_is_watching+0x15/0xb0 [ 160.913845][ T8116] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 160.913875][ T8116] ? __pfx__copy_from_iter+0x10/0x10 [ 160.913896][ T8116] ? __build_skb_around+0x257/0x3e0 [ 160.913920][ T8116] ? netlink_sendmsg+0x642/0xb30 [ 160.913937][ T8116] ? skb_put+0x11b/0x210 [ 160.913961][ T8116] netlink_sendmsg+0x6b2/0xb30 [ 160.913990][ T8116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.914013][ T8116] ? aa_sock_msg_perm+0xf1/0x1d0 [ 160.914035][ T8116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.914060][ T8116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.914081][ T8116] __sock_sendmsg+0x21c/0x270 [ 160.914112][ T8116] ____sys_sendmsg+0x505/0x830 [ 160.914141][ T8116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.914173][ T8116] ? import_iovec+0x74/0xa0 [ 160.914200][ T8116] ___sys_sendmsg+0x21f/0x2a0 [ 160.914225][ T8116] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.914288][ T8116] ? __fget_files+0x2a/0x420 [ 160.914318][ T8116] ? __fget_files+0x3a0/0x420 [ 160.914360][ T8116] __x64_sys_sendmsg+0x19b/0x260 [ 160.914386][ T8116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.914419][ T8116] ? __pfx_ksys_write+0x10/0x10 [ 160.914443][ T8116] ? rcu_is_watching+0x15/0xb0 [ 160.914469][ T8116] ? do_syscall_64+0xbe/0x3b0 [ 160.914492][ T8116] do_syscall_64+0xfa/0x3b0 [ 160.914514][ T8116] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.914543][ T8116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.914563][ T8116] ? clear_bhb_loop+0x60/0xb0 [ 160.914588][ T8116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.914607][ T8116] RIP: 0033:0x7f13ee38ebe9 [ 160.914625][ T8116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.914641][ T8116] RSP: 002b:00007f13ef1b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.914663][ T8116] RAX: ffffffffffffffda RBX: 00007f13ee5c5fa0 RCX: 00007f13ee38ebe9 [ 160.914677][ T8116] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 160.914690][ T8116] RBP: 00007f13ef1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 160.914702][ T8116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.914714][ T8116] R13: 00007f13ee5c6038 R14: 00007f13ee5c5fa0 R15: 00007ffe589995b8 [ 160.914747][ T8116] [ 161.375068][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'. [ 161.396866][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'. [ 161.467323][ T8129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.491342][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 161.501570][ T8149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.643'. [ 161.513534][ T8149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.643'. [ 161.521948][ T8129] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 161.524060][ T8149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.643'. [ 161.538223][ T8134] openvswitch: netlink: Flow key attr not present in new flow. [ 161.540243][ T8149] netlink: 32 bytes leftover after parsing attributes in process `syz.1.643'. [ 161.548912][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.4.644'. [ 161.651553][ T8147] netlink: 'syz.4.644': attribute type 1 has an invalid length. [ 162.104919][ T6274] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.134797][ T6274] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.161092][ T6274] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.209771][ T6274] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.255880][ T8175] netlink: 'syz.2.651': attribute type 6 has an invalid length. [ 162.299427][ T8175] netlink: 'syz.2.651': attribute type 6 has an invalid length. [ 162.439733][ T8181] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 162.985071][ T8214] netlink: 'syz.4.662': attribute type 19 has an invalid length. [ 163.445457][ T8238] syzkaller0: entered promiscuous mode [ 163.463705][ T8238] syzkaller0: entered allmulticast mode [ 163.485911][ T8241] openvswitch: netlink: IPv4 tun info is not correct [ 163.934607][ T8267] FAULT_INJECTION: forcing a failure. [ 163.934607][ T8267] name failslab, interval 1, probability 0, space 0, times 0 [ 163.963821][ T8267] CPU: 1 UID: 0 PID: 8267 Comm: syz.4.681 Not tainted syzkaller #0 PREEMPT(full) [ 163.963850][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.963863][ T8267] Call Trace: [ 163.963871][ T8267] [ 163.963880][ T8267] dump_stack_lvl+0x189/0x250 [ 163.963911][ T8267] ? __pfx____ratelimit+0x10/0x10 [ 163.963942][ T8267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.963966][ T8267] ? __pfx__printk+0x10/0x10 [ 163.964005][ T8267] ? __pfx___might_resched+0x10/0x10 [ 163.964023][ T8267] ? fs_reclaim_acquire+0x7d/0x100 [ 163.964060][ T8267] should_fail_ex+0x414/0x560 [ 163.964093][ T8267] should_failslab+0xa8/0x100 [ 163.964123][ T8267] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 163.964151][ T8267] ? __alloc_skb+0x112/0x2d0 [ 163.964176][ T8267] __alloc_skb+0x112/0x2d0 [ 163.964199][ T8267] netlink_ack+0x146/0xa50 [ 163.964226][ T8267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 163.964248][ T8267] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 163.964271][ T8267] ? __pfx_nl80211_post_doit+0x10/0x10 [ 163.964296][ T8267] ? __asan_memcpy+0x40/0x70 [ 163.964356][ T8267] ? __pfx_ref_tracker_free+0x10/0x10 [ 163.964395][ T8267] netlink_rcv_skb+0x28c/0x470 [ 163.964423][ T8267] ? __lock_acquire+0xab9/0xd20 [ 163.964453][ T8267] ? __pfx_genl_rcv_msg+0x10/0x10 [ 163.964479][ T8267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 163.964530][ T8267] ? down_read+0x1ad/0x2e0 [ 163.964554][ T8267] genl_rcv+0x28/0x40 [ 163.964576][ T8267] netlink_unicast+0x82c/0x9e0 [ 163.964614][ T8267] ? __pfx_netlink_unicast+0x10/0x10 [ 163.964649][ T8267] ? netlink_sendmsg+0x642/0xb30 [ 163.964666][ T8267] ? skb_put+0x11b/0x210 [ 163.964694][ T8267] netlink_sendmsg+0x805/0xb30 [ 163.964724][ T8267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.964747][ T8267] ? aa_sock_msg_perm+0xf1/0x1d0 [ 163.964768][ T8267] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 163.964790][ T8267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.964810][ T8267] __sock_sendmsg+0x21c/0x270 [ 163.964840][ T8267] ____sys_sendmsg+0x505/0x830 [ 163.964869][ T8267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.964902][ T8267] ? import_iovec+0x74/0xa0 [ 163.964930][ T8267] ___sys_sendmsg+0x21f/0x2a0 [ 163.964955][ T8267] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.965018][ T8267] ? __fget_files+0x2a/0x420 [ 163.965047][ T8267] ? __fget_files+0x3a0/0x420 [ 163.965090][ T8267] __x64_sys_sendmsg+0x19b/0x260 [ 163.965115][ T8267] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.965148][ T8267] ? __pfx_ksys_write+0x10/0x10 [ 163.965173][ T8267] ? rcu_is_watching+0x15/0xb0 [ 163.965199][ T8267] ? do_syscall_64+0xbe/0x3b0 [ 163.965222][ T8267] do_syscall_64+0xfa/0x3b0 [ 163.965239][ T8267] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.965267][ T8267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.965288][ T8267] ? clear_bhb_loop+0x60/0xb0 [ 163.965321][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.965340][ T8267] RIP: 0033:0x7f13ee38ebe9 [ 163.965358][ T8267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.965375][ T8267] RSP: 002b:00007f13ef1b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.965396][ T8267] RAX: ffffffffffffffda RBX: 00007f13ee5c5fa0 RCX: 00007f13ee38ebe9 [ 163.965411][ T8267] RDX: 0000000000004804 RSI: 0000200000000300 RDI: 0000000000000003 [ 163.965423][ T8267] RBP: 00007f13ef1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 163.965435][ T8267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.965446][ T8267] R13: 00007f13ee5c6038 R14: 00007f13ee5c5fa0 R15: 00007ffe589995b8 [ 163.965479][ T8267] [ 164.508984][ T8276] netlink: 'syz.1.684': attribute type 6 has an invalid length. [ 164.523220][ T8276] netlink: 'syz.1.684': attribute type 6 has an invalid length. [ 164.531593][ T8276] netlink: 'syz.1.684': attribute type 6 has an invalid length. [ 164.544809][ T8276] netlink: 'syz.1.684': attribute type 6 has an invalid length. [ 164.553234][ T8276] netlink: 'syz.1.684': attribute type 6 has an invalid length. [ 164.839400][ T8292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.906762][ T8292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.980206][ T8301] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 166.657284][ T8332] __nla_validate_parse: 70 callbacks suppressed [ 166.657305][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 166.684580][ T8329] sctp: [Deprecated]: syz.2.705 (pid 8329) Use of int in max_burst socket option deprecated. [ 166.684580][ T8329] Use struct sctp_assoc_value instead [ 167.116962][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 167.125894][ T8362] netlink: 224 bytes leftover after parsing attributes in process `syz.4.710'. [ 167.165534][ T8362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 167.187770][ T8365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.389299][ T8372] sctp: [Deprecated]: syz.1.713 (pid 8372) Use of int in maxseg socket option. [ 167.389299][ T8372] Use struct sctp_assoc_value instead [ 167.719163][ T8374] team0 (unregistering): Port device team_slave_0 removed [ 167.734433][ T8374] team0 (unregistering): Port device team_slave_1 removed [ 167.759894][ T8374] team0 (unregistering): Port device geneve0 removed [ 167.816518][ T8394] syz_tun: entered allmulticast mode [ 168.210783][ T8422] xt_policy: too many policy elements [ 168.229210][ T8391] syz_tun: left allmulticast mode [ 168.411001][ T8430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 168.436105][ T8432] netlink: 232 bytes leftover after parsing attributes in process `syz.2.730'. [ 168.722342][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 168.766579][ T8453] validate_nla: 46 callbacks suppressed [ 168.766603][ T8453] netlink: 'syz.2.737': attribute type 4 has an invalid length. [ 168.845652][ T8462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.738'. [ 168.848420][ T8457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 169.384614][ T8488] netlink: 40 bytes leftover after parsing attributes in process `syz.3.747'. [ 169.611603][ T8502] netlink: 'syz.1.752': attribute type 1 has an invalid length. [ 169.674784][ T8507] dummy0: entered promiscuous mode [ 169.683280][ T8507] batadv_slave_1: entered promiscuous mode [ 169.986562][ T8516] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 170.213098][ T8537] netlink: 'syz.3.764': attribute type 10 has an invalid length. [ 170.236994][ T8537] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 170.286632][ T8537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.583610][ T8558] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.681676][ T8562] openvswitch: netlink: Multiple metadata blocks provided [ 171.752058][ T8613] netlink: 'syz.2.786': attribute type 21 has an invalid length. [ 171.784331][ T8613] __nla_validate_parse: 16 callbacks suppressed [ 171.784352][ T8613] netlink: 128 bytes leftover after parsing attributes in process `syz.2.786'. [ 171.827318][ T8615] netem: change failed [ 171.864318][ T8615] netlink: 'syz.3.788': attribute type 1 has an invalid length. [ 171.885277][ T8613] netlink: 'syz.2.786': attribute type 4 has an invalid length. [ 171.916194][ T8613] netlink: 'syz.2.786': attribute type 5 has an invalid length. [ 171.959109][ T8613] netlink: 3 bytes leftover after parsing attributes in process `syz.2.786'. [ 171.971479][ T8628] netlink: 'syz.4.791': attribute type 11 has an invalid length. [ 172.213796][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 172.678037][ T8664] netlink: 'syz.4.799': attribute type 13 has an invalid length. [ 172.693950][ T8664] lo: entered promiscuous mode [ 172.700338][ T8664] lo: entered allmulticast mode [ 172.706706][ T8664] tunl0: entered promiscuous mode [ 172.715788][ T8664] tunl0: entered allmulticast mode [ 172.727816][ T8664] gre0: entered promiscuous mode [ 172.734406][ T8664] gre0: entered allmulticast mode [ 172.779632][ T8664] gretap0: entered promiscuous mode [ 172.800135][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.802'. [ 172.818034][ T8664] gretap0: entered allmulticast mode [ 172.837095][ T8664] gretap0: refused to change device tx_queue_len [ 172.843603][ T8664] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 172.867113][ T8666] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 172.879472][ T8666] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 172.888395][ T8666] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 173.100320][ T8685] 8021q: VLANs not supported on ip6gre0 [ 173.144857][ T8685] syzkaller1: entered promiscuous mode [ 173.154067][ T8685] syzkaller1: entered allmulticast mode [ 173.219621][ T8693] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 173.254844][ T8695] netlink: 84 bytes leftover after parsing attributes in process `syz.4.807'. [ 173.384657][ T8701] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 174.344312][ T8731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.815'. [ 174.733383][ T8759] 8021q: VLANs not supported on sit0 [ 175.000714][ T8769] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 175.227915][ T8791] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 175.349641][ T8797] bond1: (slave gretap1): making interface the new active one [ 175.362772][ T8797] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 175.477825][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 175.504974][ T8805] netlink: 576 bytes leftover after parsing attributes in process `syz.0.835'. [ 175.541011][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 175.558198][ C0] Illegal XDP return value 16128 on prog (id 118) dev team0, expect packet loss! [ 175.599440][ T8813] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:0 [ 175.601030][ T8812] syzkaller1: entered promiscuous mode [ 175.606619][ T8813] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:0 [ 175.612998][ T8812] syzkaller1: entered allmulticast mode [ 175.635124][ T8812] raw_sendmsg: syz.2.836 forgot to set AF_INET. Fix it! [ 175.800341][ T8820] : entered promiscuous mode [ 176.375740][ T5866] block nbd0: Receive control failed (result -32) [ 176.609798][ T8850] veth0_to_team: entered promiscuous mode [ 176.615589][ T8850] veth0_to_team: entered allmulticast mode [ 176.684873][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 176.934451][ T8874] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.037993][ T8883] netlink: 128 bytes leftover after parsing attributes in process `syz.4.858'. [ 177.069874][ T8883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.858'. [ 177.536939][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.867'. [ 178.237144][ T8935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.874'. [ 178.999375][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 179.006668][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 180.023750][ T8940] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 180.063382][ T8941] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 180.111702][ T37] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.141940][ T37] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.168663][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'. [ 180.194624][ T37] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.229234][ T37] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.243163][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.879'. [ 180.282980][ T8949] syz.2.880: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 180.302164][ T8955] netlink: 191164 bytes leftover after parsing attributes in process `syz.0.879'. [ 180.310242][ T8949] CPU: 1 UID: 0 PID: 8949 Comm: syz.2.880 Not tainted syzkaller #0 PREEMPT(full) [ 180.310276][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.310291][ T8949] Call Trace: [ 180.310300][ T8949] [ 180.310309][ T8949] dump_stack_lvl+0x189/0x250 [ 180.310349][ T8949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.310377][ T8949] ? __pfx__printk+0x10/0x10 [ 180.310410][ T8949] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 180.310437][ T8949] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 180.310465][ T8949] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 180.310495][ T8949] warn_alloc+0x214/0x310 [ 180.310531][ T8949] ? stack_depot_save_flags+0x40/0x860 [ 180.310566][ T8949] ? __pfx_warn_alloc+0x10/0x10 [ 180.310602][ T8949] ? kasan_save_track+0x4f/0x80 [ 180.310633][ T8949] ? xskq_create+0x56/0x170 [ 180.310670][ T8949] ? xsk_init_queue+0xb0/0x110 [ 180.310698][ T8949] ? xsk_setsockopt+0x4dc/0x8d0 [ 180.310725][ T8949] ? do_sock_setsockopt+0x17c/0x1b0 [ 180.310746][ T8949] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 180.310767][ T8949] ? do_syscall_64+0xfa/0x3b0 [ 180.310788][ T8949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.310819][ T8949] __vmalloc_node_range_noprof+0x125/0x12f0 [ 180.310889][ T8949] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.310924][ T8949] ? xskq_create+0x56/0x170 [ 180.310957][ T8949] ? __kasan_kmalloc+0x93/0xb0 [ 180.310991][ T8949] vmalloc_user_noprof+0xad/0xf0 [ 180.311023][ T8949] ? xskq_create+0xbf/0x170 [ 180.311056][ T8949] xskq_create+0xbf/0x170 [ 180.311092][ T8949] xsk_init_queue+0xb0/0x110 [ 180.311126][ T8949] xsk_setsockopt+0x4dc/0x8d0 [ 180.311166][ T8949] ? __pfx_xsk_setsockopt+0x10/0x10 [ 180.311196][ T8949] ? __pfx_aa_sk_perm+0x10/0x10 [ 180.311235][ T8949] ? aa_sock_opt_perm+0xff/0x1b0 [ 180.311259][ T8949] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 180.311284][ T8949] ? __pfx_xsk_setsockopt+0x10/0x10 [ 180.311316][ T8949] do_sock_setsockopt+0x17c/0x1b0 [ 180.311345][ T8949] __x64_sys_setsockopt+0x13f/0x1b0 [ 180.311375][ T8949] do_syscall_64+0xfa/0x3b0 [ 180.311394][ T8949] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.311422][ T8949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.311441][ T8949] ? clear_bhb_loop+0x60/0xb0 [ 180.311465][ T8949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.311483][ T8949] RIP: 0033:0x7f07ef78ebe9 [ 180.311501][ T8949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.311517][ T8949] RSP: 002b:00007f07f065a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.311537][ T8949] RAX: ffffffffffffffda RBX: 00007f07ef9c5fa0 RCX: 00007f07ef78ebe9 [ 180.311551][ T8949] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 180.311562][ T8949] RBP: 00007f07ef811e19 R08: 0000000000000004 R09: 0000000000000000 [ 180.311573][ T8949] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.311584][ T8949] R13: 00007f07ef9c6038 R14: 00007f07ef9c5fa0 R15: 00007ffcff661618 [ 180.311616][ T8949] [ 180.311624][ T8949] Mem-Info: [ 180.311637][ T8949] active_anon:4486 inactive_anon:0 isolated_anon:0 [ 180.311637][ T8949] active_file:3144 inactive_file:39870 isolated_file:0 [ 180.311637][ T8949] unevictable:768 dirty:113 writeback:0 [ 180.311637][ T8949] slab_reclaimable:11342 slab_unreclaimable:100075 [ 180.311637][ T8949] mapped:28990 shmem:1356 pagetables:1087 [ 180.311637][ T8949] sec_pagetables:0 bounce:0 [ 180.311637][ T8949] kernel_misc_reclaimable:0 [ 180.311637][ T8949] free:1323096 free_pcp:16212 free_cma:0 [ 180.311691][ T8949] Node 0 active_anon:17944kB inactive_anon:0kB active_file:12576kB inactive_file:159276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115960kB dirty:452kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13508kB pagetables:4180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.311741][ T8949] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.311789][ T8949] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.311845][ T8949] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 180.311893][ T8949] Node 0 DMA32 free:1397836kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17900kB inactive_anon:0kB active_file:12576kB inactive_file:157684kB unevictable:1536kB writepending:452kB present:3129332kB managed:2557452kB mlocked:0kB bounce:0kB free_pcp:42536kB local_pcp:17700kB free_cma:0kB [ 180.311951][ T8949] lowmem_reserve[]: 0 0 1 1 1 [ 180.311996][ T8949] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 180.312052][ T8949] lowmem_reserve[]: 0 0 0 0 0 [ 180.312103][ T8949] Node 1 Normal free:3879188kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22304kB local_pcp:11200kB free_cma:0kB [ 180.872453][ T8949] lowmem_reserve[]: 0 0 0 0 0 [ 180.877506][ T8949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 180.890819][ T8949] Node 0 DMA32: 2*4kB (UE) 82*8kB (UE) 38*16kB (U) 885*32kB (UM) 548*64kB (UME) 144*128kB (UM) 28*256kB (UM) 7*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 317*4096kB (M) = 1397400kB [ 180.910135][ T8949] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 180.922941][ T8949] Node 1 Normal: 199*4kB (UE) 43*8kB (UME) 46*16kB (UME) 62*32kB (UME) 28*64kB (UME) 6*128kB (UME) 4*256kB (UME) 4*512kB (UME) 1*1024kB (M) 1*2048kB (E) 944*4096kB (M) = 3879188kB [ 180.941300][ T8949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.950938][ T8949] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.960352][ T8949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 180.969975][ T8949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 180.979791][ T8949] 44369 total pagecache pages [ 180.984503][ T8949] 0 pages in swap cache [ 180.988773][ T8949] Free swap = 124996kB [ 180.993771][ T8949] Total swap = 124996kB [ 180.998280][ T8949] 2097051 pages RAM [ 181.002131][ T8949] 0 pages HighMem/MovableOnly [ 181.036050][ T8949] 425662 pages reserved [ 181.040268][ T8949] 0 pages cma reserved [ 181.144484][ T8972] xt_HMARK: spi-set and port-set can't be combined [ 181.194689][ T8973] xt_HMARK: spi-set and port-set can't be combined [ 181.487048][ T9005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.895'. [ 181.658462][ T9016] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 182.124089][ T9040] macvtap1: entered allmulticast mode [ 182.133155][ T9040] veth0_macvtap: entered allmulticast mode [ 182.159232][ T9042] netlink: 'syz.3.906': attribute type 21 has an invalid length. [ 182.182088][ T9042] __nla_validate_parse: 3 callbacks suppressed [ 182.182107][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 182.228684][ T6274] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.238628][ T9042] netlink: 'syz.3.906': attribute type 21 has an invalid length. [ 182.251672][ T6274] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.268761][ T9042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 182.282426][ T6274] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.296726][ T6274] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.444294][ T9055] tipc: Started in network mode [ 182.466102][ T9055] tipc: Node identity 0adb566d3661, cluster identity 4711 [ 182.485941][ T9055] tipc: Enabled bearer , priority 0 [ 182.512078][ T9055] syzkaller0: entered promiscuous mode [ 182.518708][ T9055] syzkaller0: entered allmulticast mode [ 182.548292][ T9055] syzkaller0: mtu less than device minimum [ 182.574548][ T9052] tipc: Resetting bearer [ 182.622248][ T9052] tipc: Disabling bearer [ 182.736850][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.915'. [ 183.904692][ T9146] netlink: 224 bytes leftover after parsing attributes in process `syz.0.939'. [ 184.056169][ T9155] netlink: 'syz.2.942': attribute type 1 has an invalid length. [ 184.063885][ T9155] netlink: 'syz.2.942': attribute type 1 has an invalid length. [ 184.100187][ T9155] netlink: 'syz.2.942': attribute type 1 has an invalid length. [ 184.154966][ T9163] netlink: 'syz.0.944': attribute type 11 has an invalid length. [ 184.181558][ T9163] netlink: 224 bytes leftover after parsing attributes in process `syz.0.944'. [ 184.277844][ T9163] tipc: Started in network mode [ 184.293669][ T9163] tipc: Node identity 3674c2be10fb, cluster identity 4711 [ 184.321593][ T9163] tipc: Enabled bearer , priority 0 [ 184.332014][ T9166] syzkaller0: entered promiscuous mode [ 184.376164][ T9166] syzkaller0: entered allmulticast mode [ 184.524377][ T9166] tipc: Resetting bearer [ 184.589129][ T9160] tipc: Resetting bearer [ 184.707135][ T9196] sctp: [Deprecated]: syz.3.951 (pid 9196) Use of int in max_burst socket option. [ 184.707135][ T9196] Use struct sctp_assoc_value instead [ 184.747933][ T9160] tipc: Disabling bearer [ 184.898839][ T9207] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 184.949434][ T9209] openvswitch: netlink: Key type 29 is not supported [ 184.971275][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 185.057322][ T9215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.959'. [ 185.270343][ T9230] netlink: 112 bytes leftover after parsing attributes in process `syz.2.961'. [ 185.288805][ T9230] ksmbd: Unknown IPC event: 1, ignore. [ 185.352089][ T9232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.368124][ T9232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.553392][ T9232] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 185.599659][ T9232] veth0_macvtap: left allmulticast mode [ 185.610211][ T10] hsr0 speed is unknown, defaulting to 1000 [ 185.626274][ T36] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.635211][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.666315][ T10] syz1: Port: 1 Link DOWN [ 185.683395][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.695772][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.726868][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.768430][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.796557][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.809128][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.903258][ T9249] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 186.108782][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.971'. [ 186.152844][ T9269] netlink: 'syz.4.971': attribute type 11 has an invalid length. [ 186.387057][ T9281] syzkaller1: entered promiscuous mode [ 186.395275][ T9281] syzkaller1: entered allmulticast mode [ 186.794195][ T9301] vlan0: entered promiscuous mode [ 186.803181][ T9301] bridge0: entered promiscuous mode [ 186.984318][ T9312] netlink: 'syz.1.990': attribute type 1 has an invalid length. [ 187.052923][ T9315] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 187.061206][ T9312] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.208496][ T9337] __nla_validate_parse: 19 callbacks suppressed [ 187.208520][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.994'. [ 187.273384][ T9341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.288708][ T9340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.995'. [ 187.332586][ T9341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.341101][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.996'. [ 187.503278][ T9357] netlink: 44 bytes leftover after parsing attributes in process `syz.1.997'. [ 187.664682][ T9363] tap0: tun_chr_ioctl cmd 1074025678 [ 187.671713][ T9363] tap0: group set to 0 [ 187.854928][ T9376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1005'. [ 187.871462][ T9376] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1005'. [ 187.887302][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 188.118022][ T9394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1009'. [ 188.382238][ T9415] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 188.425262][ T9418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1018'. [ 188.596181][ T9429] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1020'. [ 188.644795][ T9433] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 188.673493][ T9433] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 188.684340][ T9433] netlink: 'syz.4.1021': attribute type 2 has an invalid length. [ 189.872616][ T9498] tipc: New replicast peer: 255.255.255.255 [ 189.908734][ T9498] tipc: Enabled bearer , priority 10 [ 189.971780][ T9506] netlink: 'syz.2.1040': attribute type 11 has an invalid length. [ 190.184446][ T9513] dvmrp0: entered allmulticast mode [ 190.257046][ T9522] netlink: 'syz.3.1045': attribute type 1 has an invalid length. [ 190.535217][ T9543] netlink: 'syz.2.1049': attribute type 12 has an invalid length. [ 190.543828][ T9543] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 190.780321][ T9549] hsr0 speed is unknown, defaulting to 1000 [ 191.223919][ T9590] tipc: Enabling of bearer rejected, failed to enable media [ 191.282231][ T9582] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 191.428839][ T9590] syzkaller0: entered promiscuous mode [ 191.459502][ T9590] syzkaller0: entered allmulticast mode [ 191.756138][ T9611] tipc: Started in network mode [ 191.771166][ T9611] tipc: Node identity 2afffd3a5053, cluster identity 4711 [ 191.801111][ T9611] tipc: Enabled bearer , priority 0 [ 191.844254][ T9615] syzkaller0: entered promiscuous mode [ 191.861312][ T9615] syzkaller0: entered allmulticast mode [ 191.929257][ T9611] tipc: Resetting bearer [ 191.985794][ T9610] tipc: Resetting bearer [ 192.028613][ T9610] tipc: Disabling bearer [ 192.095198][ T9620] veth5: entered allmulticast mode [ 192.275558][ T9631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.296636][ T9631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.499465][ T9637] hsr0 speed is unknown, defaulting to 1000 [ 192.782132][ T9657] tipc: Enabled bearer , priority 0 [ 193.068784][ T9657] syzkaller0: entered promiscuous mode [ 193.097992][ T9657] syzkaller0: entered allmulticast mode [ 193.151791][ T9665] tipc: Resetting bearer [ 193.214023][ T9654] tipc: Resetting bearer [ 193.425198][ T9688] netlink: 'syz.4.1085': attribute type 2 has an invalid length. [ 193.446248][ T9688] __nla_validate_parse: 12 callbacks suppressed [ 193.446270][ T9688] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1085'. [ 193.602228][ T9701] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1087'. [ 193.606879][ T9703] IPVS: set_ctl: invalid protocol: 50 10.1.1.2:20002 [ 193.807744][ T5975] tipc: Node number set to 1018844781 [ 195.034854][ T9654] tipc: Disabling bearer [ 195.095208][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'. [ 195.156537][ T9714] tipc: Enabling of bearer rejected, failed to enable media [ 195.219837][ T9735] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1093'. [ 196.565417][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1109'. [ 196.989407][ T9824] IPv6: sit1: Disabled Multicast RS [ 197.006260][ T9824] sit1: entered allmulticast mode [ 197.509504][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1119'. [ 197.632284][ T9861] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 198.255867][ T9875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1124'. [ 198.267566][ T9875] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 198.445890][ T9882] netem: change failed [ 198.469280][ T9883] tipc: Enabled bearer , priority 0 [ 198.477160][ T9883] syzkaller0: entered promiscuous mode [ 198.482707][ T9883] syzkaller0: entered allmulticast mode [ 198.511521][ T9887] netlink: 'syz.1.1127': attribute type 5 has an invalid length. [ 198.524627][ T9883] tipc: Resetting bearer [ 198.543287][ T9881] tipc: Resetting bearer [ 198.584134][ T9881] tipc: Disabling bearer [ 198.691398][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'. [ 198.915859][ T9901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 198.930843][ T9879] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 198.950785][ T9879] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 198.961574][ T9879] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 198.975056][ T9901] tipc: Invalid UDP bearer configuration [ 198.975114][ T9901] tipc: Enabling of bearer rejected, failed to enable media [ 199.102596][ T9911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1138'. [ 199.267396][ T9916] pim6reg: entered allmulticast mode [ 199.540710][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.663047][ T9930] syzkaller0: entered allmulticast mode [ 199.674746][ T9949] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1146'. [ 199.696604][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 201.100791][ T9973] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1153'. [ 201.266818][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1158'. [ 201.578306][T10007] netlink: 'syz.4.1164': attribute type 83 has an invalid length. [ 201.777225][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 202.108244][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1173'. [ 202.199342][T10038] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 202.274435][T10036] scsi_nl_rcv_msg: discarding partial skb [ 202.279096][T10042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 202.324897][T10038] scsi_nl_rcv_msg: discarding partial skb [ 202.493090][T10053] netlink: 'syz.0.1181': attribute type 21 has an invalid length. [ 202.504369][T10056] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 202.510978][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 202.536298][T10056] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1182'. [ 202.540875][T10053] netlink: 'syz.0.1181': attribute type 21 has an invalid length. [ 202.547841][ T36] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.583140][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.617702][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.653726][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.830035][T10073] syzkaller0: entered promiscuous mode [ 202.835659][T10073] syzkaller0: entered allmulticast mode [ 202.851562][T10076] tipc: Enabled bearer , priority 0 [ 203.016408][T10073] tipc: Resetting bearer [ 203.073090][T10094] tipc: Enabling of bearer rejected, media not registered [ 203.085372][T10070] tipc: Resetting bearer [ 204.401011][T10070] tipc: Disabling bearer [ 204.723730][T10114] __nla_validate_parse: 5 callbacks suppressed [ 204.723752][T10114] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1199'. [ 204.773511][T10114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1199'. [ 204.792984][T10114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1199'. [ 204.879946][T10127] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 204.906182][ C0] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 205.014524][T10136] netlink: 'syz.0.1206': attribute type 23 has an invalid length. [ 205.395277][T10156] netlink: 'syz.1.1213': attribute type 7 has an invalid length. [ 205.419264][T10156] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1213'. [ 205.468937][T10161] netlink: 'syz.4.1216': attribute type 1 has an invalid length. [ 205.583854][T10169] netlink: 'syz.0.1217': attribute type 9 has an invalid length. [ 205.591833][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 205.614760][T10169] netlink: 'syz.0.1217': attribute type 9 has an invalid length. [ 205.638171][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 205.694719][T10168] bond3: entered promiscuous mode [ 205.714819][T10168] bond3: entered allmulticast mode [ 205.733874][T10168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.963412][T10168] bond3 (unregistering): Released all slaves [ 206.143218][T10201] FAULT_INJECTION: forcing a failure. [ 206.143218][T10201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.173588][T10201] CPU: 0 UID: 0 PID: 10201 Comm: syz.4.1225 Not tainted syzkaller #0 PREEMPT(full) [ 206.173618][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.173630][T10201] Call Trace: [ 206.173638][T10201] [ 206.173647][T10201] dump_stack_lvl+0x189/0x250 [ 206.173677][T10201] ? __pfx____ratelimit+0x10/0x10 [ 206.173707][T10201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.173731][T10201] ? __pfx__printk+0x10/0x10 [ 206.173774][T10201] should_fail_ex+0x414/0x560 [ 206.173807][T10201] _copy_to_user+0x31/0xb0 [ 206.173833][T10201] simple_read_from_buffer+0xe1/0x170 [ 206.173868][T10201] proc_fail_nth_read+0x1b3/0x220 [ 206.173895][T10201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.173922][T10201] ? rw_verify_area+0x2a6/0x4d0 [ 206.173946][T10201] ? __lock_acquire+0xab9/0xd20 [ 206.173973][T10201] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.173998][T10201] vfs_read+0x1fd/0xa30 [ 206.174023][T10201] ? fdget_pos+0x247/0x320 [ 206.174046][T10201] ? __pfx___mutex_lock+0x10/0x10 [ 206.174065][T10201] ? __pfx_vfs_read+0x10/0x10 [ 206.174094][T10201] ? __fget_files+0x2a/0x420 [ 206.174129][T10201] ? __fget_files+0x3a0/0x420 [ 206.174157][T10201] ? __fget_files+0x2a/0x420 [ 206.174198][T10201] ksys_read+0x145/0x250 [ 206.174228][T10201] ? __pfx_ksys_read+0x10/0x10 [ 206.174252][T10201] ? rcu_is_watching+0x15/0xb0 [ 206.174278][T10201] ? do_syscall_64+0xbe/0x3b0 [ 206.174301][T10201] do_syscall_64+0xfa/0x3b0 [ 206.174318][T10201] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.174347][T10201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.174367][T10201] ? clear_bhb_loop+0x60/0xb0 [ 206.174392][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.174411][T10201] RIP: 0033:0x7f13ee38d5fc [ 206.174429][T10201] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.174445][T10201] RSP: 002b:00007f13ef1b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.174466][T10201] RAX: ffffffffffffffda RBX: 00007f13ee5c5fa0 RCX: 00007f13ee38d5fc [ 206.174481][T10201] RDX: 000000000000000f RSI: 00007f13ef1b40a0 RDI: 0000000000000004 [ 206.174493][T10201] RBP: 00007f13ef1b4090 R08: 0000000000000000 R09: 0000000000000000 [ 206.174505][T10201] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 206.174517][T10201] R13: 00007f13ee5c6038 R14: 00007f13ee5c5fa0 R15: 00007ffe589995b8 [ 206.174559][T10201] [ 206.521709][T10204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1228'. [ 206.749528][T10204] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.813309][T10204] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.865541][T10219] hsr0 speed is unknown, defaulting to 1000 [ 206.946400][T10204] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.959211][T10204] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.992407][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1235'. [ 207.025915][T10239] syzkaller1: entered promiscuous mode [ 207.035274][T10239] syzkaller1: entered allmulticast mode [ 207.094362][T10204] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.120086][T10204] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.160473][T10244] syzkaller1: left promiscuous mode [ 207.165916][T10244] syzkaller1: left allmulticast mode [ 207.244801][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 207.259321][T10204] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.269870][T10204] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.439424][ T6296] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.453847][ T6296] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.493237][ T6296] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.501719][ T6296] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.529353][T10265] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1243'. [ 207.544408][ T36] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.554452][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.582773][ T36] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.594669][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.773776][T10280] netlink: 'syz.3.1246': attribute type 21 has an invalid length. [ 207.889193][T10280] netlink: 'syz.3.1246': attribute type 1 has an invalid length. [ 208.145024][T10299] pimreg3: entered allmulticast mode [ 208.178469][T10299] openvswitch: netlink: Missing valid actions attribute. [ 208.185584][T10299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.248966][T10309] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 208.404092][T10305] netlink: 'syz.4.1256': attribute type 2 has an invalid length. [ 209.291628][T10373] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.626445][T10391] IPv6: sit1: Disabled Multicast RS [ 209.637787][T10391] sit1: entered allmulticast mode [ 209.784957][T10397] xt_socket: unknown flags 0x50 [ 210.094627][T10414] syzkaller0: entered promiscuous mode [ 210.110694][T10414] syzkaller0: entered allmulticast mode [ 210.150373][T10416] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 210.180139][T10420] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 210.210042][T10414] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 210.457102][T10432] __nla_validate_parse: 8 callbacks suppressed [ 210.457123][T10432] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1291'. [ 210.538570][T10434] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1292'. [ 210.797983][T10452] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 210.823087][T10450] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 211.038338][T10467] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 211.860121][ T5184] Bluetooth: hci1: command 0x0406 tx timeout [ 211.867105][ T5184] Bluetooth: hci0: command 0x0406 tx timeout [ 211.872796][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 211.894430][T10505] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1309'. [ 212.011075][T10520] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1314'. [ 212.168923][T10527] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.174076][T10530] macsec0: entered promiscuous mode [ 212.185725][T10532] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.203840][T10530] macsec0: entered allmulticast mode [ 212.245474][T10538] veth0: entered promiscuous mode [ 212.287431][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'. [ 212.385200][T10537] veth0 (unregistering): left promiscuous mode [ 212.493661][ T37] nci: nci_rsp_packet: unknown rsp opcode 0x221 [ 212.631872][T10566] syzkaller0: entered promiscuous mode [ 212.638844][T10566] syzkaller0: entered allmulticast mode [ 212.673662][T10572] netlink: 'syz.1.1327': attribute type 16 has an invalid length. [ 212.682006][T10572] netlink: 'syz.1.1327': attribute type 17 has an invalid length. [ 212.720122][T10572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.307523][T10584] netlink: 'syz.0.1329': attribute type 1 has an invalid length. [ 213.332947][T10590] netlink: 'syz.2.1332': attribute type 49 has an invalid length. [ 213.440885][T10584] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1329'. [ 213.452792][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1333'. [ 213.521689][T10584] 8021q: adding VLAN 0 to HW filter on device bond7 [ 213.772644][T10616] bridge2: entered promiscuous mode [ 213.785692][T10616] bridge2: entered allmulticast mode [ 213.885103][T10625] netlink: 'syz.2.1342': attribute type 1 has an invalid length. [ 214.128993][T10625] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.148559][T10625] bond2: (slave bond3): making interface the new active one [ 214.181547][T10625] bond2: (slave bond3): Enslaving as an active interface with an up link [ 214.221268][T10639] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 214.235149][T10639] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 214.385033][T10646] netlink: 'syz.4.1347': attribute type 178 has an invalid length. [ 214.449147][T10648] ip6gre1: entered allmulticast mode [ 214.475568][T10650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1346'. [ 214.541885][T10650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1346'. [ 214.572882][T10654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1349'. [ 215.522177][T10698] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.530958][T10698] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.548387][T10715] __nla_validate_parse: 4 callbacks suppressed [ 215.548407][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 215.564249][T10715] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 215.572178][T10715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.659061][T10720] netlink: 'syz.4.1370': attribute type 1 has an invalid length. [ 215.660523][T10698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.669137][T10720] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1370'. [ 215.684249][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 215.691103][T10698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.694580][T10721] netlink: 'syz.4.1370': attribute type 1 has an invalid length. [ 215.709173][T10721] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1370'. [ 215.721525][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 215.731397][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 215.731396][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1370'. [ 215.731422][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 215.741301][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 215.741340][T10720] netlink: 'syz.4.1370': attribute type 11 has an invalid length. [ 216.042462][T10727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.070504][T10727] bond0: (slave rose0): Enslaving as an active interface with an up link [ 216.091375][ T6275] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.109742][T10732] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 216.119878][ T6275] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.144374][ T6275] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.160210][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 216.199991][ T6275] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.267812][ T6275] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.292487][ T6275] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.361148][ T6275] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.414042][ T6275] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.677621][T10766] validate_nla: 1 callbacks suppressed [ 216.677640][T10766] netlink: 'syz.4.1382': attribute type 3 has an invalid length. [ 216.728919][T10772] netlink: 'syz.4.1382': attribute type 3 has an invalid length. [ 216.998862][T10787] netlink: 'syz.2.1386': attribute type 5 has an invalid length. [ 217.023734][T10787] netlink: 'syz.2.1386': attribute type 39 has an invalid length. [ 217.180106][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.239376][T10794] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 218.039755][T10843] netlink: 'syz.4.1401': attribute type 4 has an invalid length. [ 218.621539][T10877] netlink: 'syz.3.1408': attribute type 1 has an invalid length. [ 218.646395][T10877] netlink: 'syz.3.1408': attribute type 1 has an invalid length. [ 219.301814][T10918] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 219.396535][T10925] netlink: 'syz.3.1422': attribute type 50 has an invalid length. [ 219.741003][T10952] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 219.868419][T10960] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 219.934847][T10970] Bluetooth: MGMT ver 1.23 [ 219.950812][T10970] bridge3: entered promiscuous mode [ 219.956940][T10970] bridge3: entered allmulticast mode [ 220.060553][T10979] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 220.123859][T10979] bridge_slave_0: left allmulticast mode [ 220.134843][T10979] bridge_slave_0: left promiscuous mode [ 220.148390][T10979] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.185605][T10979] bond0: (slave bond_slave_0): Releasing backup interface [ 220.235874][T10979] bond0: (slave bond_slave_1): Releasing backup interface [ 220.292494][T10979] team0: Port device team_slave_0 removed [ 220.334093][T10979] team0: Port device team_slave_1 removed [ 220.344386][T10979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.352247][T10979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.361489][T10979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.372327][T10979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.393230][T10979] team0: Port device geneve0 removed [ 220.405122][T10979] bond1: (slave veth5): Releasing active interface [ 220.413303][T10979] gretap1: entered promiscuous mode [ 220.423312][T10979] bond1: (slave gretap1): Releasing active interface [ 220.432631][T10979] gretap1: left promiscuous mode [ 220.700004][T10989] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 220.735271][T10990] __nla_validate_parse: 20 callbacks suppressed [ 220.735293][T10990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1435'. [ 220.816980][T10998] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 221.194961][T11026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1444'. [ 221.304240][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 221.351274][T11042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1449'. [ 221.802324][T11071] netlink: 'syz.4.1456': attribute type 58 has an invalid length. [ 221.821322][T11071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1456'. [ 221.885616][T11070] netlink: 'syz.0.1457': attribute type 16 has an invalid length. [ 221.894065][T11070] netlink: 'syz.0.1457': attribute type 17 has an invalid length. [ 221.902574][T11070] erspan0: left promiscuous mode [ 221.907948][T11070] erspan0: left allmulticast mode [ 221.920450][T11070] gretap1: left promiscuous mode [ 221.925551][T11070] gretap1: left allmulticast mode [ 221.931661][T11070] gretap2: left promiscuous mode [ 221.943960][T11070] macsec0: left promiscuous mode [ 221.949319][T11070] macsec0: left allmulticast mode [ 221.964571][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 222.640385][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'. [ 222.662292][ T5942] IPVS: starting estimator thread 0... [ 222.701448][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1459'. [ 222.786176][T11085] IPVS: using max 27 ests per chain, 64800 per kthread [ 223.028493][T11114] syzkaller0: entered promiscuous mode [ 223.057828][T11114] syzkaller0: entered allmulticast mode [ 223.079103][T11113] tipc: Enabled bearer , priority 0 [ 223.108773][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1470'. [ 223.246513][T11113] tipc: Resetting bearer [ 223.289790][T11113] tipc: Disabling bearer [ 223.312694][T11134] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 223.323345][T11134] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1474'. [ 223.335021][T11134] netlink: 'syz.1.1474': attribute type 1 has an invalid length. [ 223.423530][T11140] openvswitch: netlink: IP tunnel dst address not specified [ 223.572315][T11152] sctp: [Deprecated]: syz.1.1481 (pid 11152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 223.572315][T11152] Use struct sctp_sack_info instead [ 223.772356][T11165] bridge0: port 3(veth0_to_bridge) entered blocking state [ 223.782564][T11165] bridge0: port 3(veth0_to_bridge) entered disabled state [ 223.793421][T11165] veth0_to_bridge: entered allmulticast mode [ 223.802223][T11165] veth0_to_bridge: entered promiscuous mode [ 223.815519][T11165] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.835549][T11165] bridge0: port 3(veth0_to_bridge) entered blocking state [ 223.843255][T11165] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 224.015044][T11185] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.077733][T11187] netlink: 'syz.0.1491': attribute type 11 has an invalid length. [ 224.158674][T11191] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 224.324513][T11204] netlink: 'syz.1.1496': attribute type 1 has an invalid length. [ 224.397148][T11209] openvswitch: netlink: Key type 29 is not supported [ 224.424487][T11204] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.480384][T11212] 8021q: adding VLAN 0 to HW filter on device bond3 [ 224.495299][T11212] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 224.519881][T11212] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 224.703438][T11221] sctp: [Deprecated]: syz.0.1499 (pid 11221) Use of int in max_burst socket option. [ 224.703438][T11221] Use struct sctp_assoc_value instead [ 224.861913][T11234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.910865][T11243] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 225.119017][T11255] netlink: 'syz.0.1507': attribute type 1 has an invalid length. [ 225.164881][T11255] bridge3: entered promiscuous mode [ 225.209508][T11255] bridge3: entered allmulticast mode [ 225.601810][T11284] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 225.695917][T11284] 8021q: adding VLAN 0 to HW filter on device bond8 [ 225.782086][T11300] ipvlan0: entered promiscuous mode [ 225.808116][T11300] ipvlan0: entered allmulticast mode [ 225.843794][T11298] bridge0: port 4(batadv1) entered blocking state [ 225.855437][T11298] bridge0: port 4(batadv1) entered disabled state [ 225.866117][T11298] batadv1: entered allmulticast mode [ 225.888860][T11298] batadv1: entered promiscuous mode [ 226.011282][T11315] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:20000 [ 226.113894][T11320] __nla_validate_parse: 7 callbacks suppressed [ 226.113916][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 226.136993][T11319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1525'. [ 226.163973][T11323] netlink: 'syz.0.1527': attribute type 1 has an invalid length. [ 226.212900][T11320] netlink: 'syz.0.1527': attribute type 11 has an invalid length. [ 226.348648][ T6294] batman_adv: batadv1: IGMP Querier appeared [ 226.354973][ T6294] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 226.700501][T11348] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 226.890247][T11355] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1537'. [ 226.949516][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1537'. [ 227.152836][T11370] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1540'. [ 227.175134][T11374] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1542'. [ 227.225839][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'. [ 227.601860][T11407] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1552'. [ 228.156890][T11433] pim6reg527: entered allmulticast mode [ 228.184934][T11436] validate_nla: 1 callbacks suppressed [ 228.184955][T11436] netlink: 'syz.2.1562': attribute type 1 has an invalid length. [ 228.358999][T11449] batman_adv: batadv0: Removing interface: team0 [ 228.400134][T11449] veth0_to_bridge: left allmulticast mode [ 228.433580][T11453] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1569'. [ 228.436935][T11449] veth0_to_bridge: left promiscuous mode [ 228.469936][T11451] IPv6: NLM_F_CREATE should be specified when creating new route [ 228.477214][T11449] bridge0: port 3(veth0_to_bridge) entered disabled state [ 228.512087][T11449] bridge_slave_0: left allmulticast mode [ 228.513091][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 228.519092][T11449] bridge_slave_0: left promiscuous mode [ 228.537572][T11449] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.553289][T11449] bridge_slave_1: left allmulticast mode [ 228.565368][T11449] bridge_slave_1: left promiscuous mode [ 228.585897][T11449] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.621090][T11449] bond0: (slave bond_slave_0): Releasing backup interface [ 228.674187][T11449] bond0: (slave bond_slave_1): Releasing backup interface [ 228.733014][T11449] team0: Port device team_slave_0 removed [ 228.754060][T11449] team0: Port device team_slave_1 removed [ 228.761429][T11449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.769539][T11449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.782038][T11449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.790217][T11449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.810878][T11449] bond3: (slave bond4): Releasing backup interface [ 228.818489][T11449] bond3: (slave bond4): the permanent HWaddr of slave - 96:49:be:1a:93:fd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 228.838021][T11449] bond3: (slave gretap1): making interface the new active one [ 228.851326][T11449] bond3: (slave gretap1): Releasing backup interface [ 228.871108][T11449] bond5: (slave bond6): Releasing backup interface [ 228.892306][T11449] batadv1: left allmulticast mode [ 228.897977][T11449] batadv1: left promiscuous mode [ 228.908916][T11449] bridge0: port 4(batadv1) entered disabled state [ 229.088898][T11479] tipc: Enabled bearer , priority 0 [ 229.141560][T11477] syzkaller0: entered promiscuous mode [ 229.155261][T11477] syzkaller0: entered allmulticast mode [ 229.197599][T11474] syzkaller0: entered promiscuous mode [ 229.207834][T11474] syzkaller0: entered allmulticast mode [ 229.259048][T11474] tipc: Resetting bearer [ 229.384247][T11473] tipc: Resetting bearer [ 229.415246][T11473] tipc: Disabling bearer [ 229.651339][T11518] tipc: Enabling of bearer rejected, media not registered [ 229.782781][T11522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.054061][T11540] sctp: [Deprecated]: syz.2.1590 (pid 11540) Use of int in maxseg socket option. [ 230.054061][T11540] Use struct sctp_assoc_value instead [ 230.096661][T11540] netlink: 'syz.2.1590': attribute type 4 has an invalid length. [ 230.150144][T11552] netlink: 'syz.2.1590': attribute type 4 has an invalid length. [ 230.370012][T11562] netlink: 'syz.2.1595': attribute type 2 has an invalid length. [ 230.385355][T11555] bond0: (slave bond_slave_0): Releasing backup interface [ 230.399437][T11555] bond0: (slave bond_slave_1): Releasing backup interface [ 230.419258][T11555] team0: Port device team_slave_0 removed [ 230.443815][T11555] team0: Port device team_slave_1 removed [ 230.464119][T11555] bond1: (slave gretap1): Releasing active interface [ 230.688238][T11583] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 230.928624][T11592] netlink: 'syz.4.1602': attribute type 1 has an invalid length. [ 231.144821][T11599] __nla_validate_parse: 8 callbacks suppressed [ 231.144841][T11599] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1604'. [ 231.952106][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1610'. [ 232.096182][ T5866] Bluetooth: hci4: command 0x0405 tx timeout [ 232.319985][T11663] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1613'. [ 232.480306][T11672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1618'. [ 232.494113][T11670] netlink: 'syz.4.1616': attribute type 7 has an invalid length. [ 232.548946][T11670] : entered promiscuous mode [ 232.860596][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 233.029722][T11701] tipc: Enabled bearer , priority 0 [ 233.047338][T11701] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 233.091248][T11704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1626'. [ 233.095285][T11705] tipc: Disabling bearer [ 233.209833][T11708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1627'. [ 233.294844][T11714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1629'. [ 233.349734][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'. [ 233.412944][T11723] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1632'. [ 233.704402][T11740] tipc: Enabled bearer , priority 0 [ 233.735052][T11740] syzkaller0: entered promiscuous mode [ 233.768440][T11740] syzkaller0: entered allmulticast mode [ 233.807732][T11740] tipc: Resetting bearer [ 233.887090][T11739] tipc: Resetting bearer [ 233.907358][T11750] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 233.970662][T11739] tipc: Disabling bearer [ 234.672525][T11802] vlan1: entered allmulticast mode [ 234.679560][T11802] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 234.851490][T11815] syzkaller1: entered promiscuous mode [ 234.864861][T11815] syzkaller1: entered allmulticast mode [ 235.256642][T11847] delete_channel: no stack [ 235.654446][T11871] netlink: 'syz.2.1673': attribute type 2 has an invalid length. [ 236.350673][T11911] __nla_validate_parse: 3 callbacks suppressed [ 236.350693][T11911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'. [ 236.824605][T11935] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1689'. [ 236.895108][T11930] bond8 (unregistering): Released all slaves [ 237.253196][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1692'. [ 237.269448][T11964] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1693'. [ 237.329791][T11969] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1693'. [ 237.364831][T11962] 8021q: adding VLAN 0 to HW filter on device bond8 [ 237.528149][T11977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1696'. [ 237.569400][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1699'. [ 237.947631][T12004] netlink: 'syz.3.1704': attribute type 30 has an invalid length. [ 238.379456][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'. [ 238.394754][T12022] netlink: zone id is out of range [ 238.400447][T12022] netlink: zone id is out of range [ 238.405871][T12029] tipc: Enabled bearer , priority 0 [ 238.412916][T12022] netlink: zone id is out of range [ 238.419447][T12022] netlink: zone id is out of range [ 238.429516][T12030] syzkaller0: entered promiscuous mode [ 238.435031][T12030] syzkaller0: entered allmulticast mode [ 238.461537][T12022] netlink: zone id is out of range [ 238.471239][T12022] netlink: zone id is out of range [ 238.476665][T12030] tipc: Resetting bearer [ 238.482693][T12022] netlink: zone id is out of range [ 238.494351][T12022] netlink: del zone limit has 4 unknown bytes [ 238.520088][T12030] tipc: Disabling bearer [ 238.539754][T12040] netlink: 'syz.3.1715': attribute type 1 has an invalid length. [ 238.561789][T12040] netlink: 'syz.3.1715': attribute type 4 has an invalid length. [ 238.591444][T12040] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1715'. [ 238.624888][T12040] NCSI netlink: No device for ifindex 458760 [ 238.636181][T12042] netlink: 'syz.4.1716': attribute type 26 has an invalid length. [ 238.666547][T12042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1716'. [ 238.684451][T12042] netlink: 'syz.4.1716': attribute type 26 has an invalid length. [ 238.714304][T12053] netlink: 'syz.4.1716': attribute type 26 has an invalid length. [ 238.732728][T12053] netlink: 'syz.4.1716': attribute type 26 has an invalid length. [ 238.803626][T12054] syzkaller1: entered promiscuous mode [ 238.810333][T12054] syzkaller1: entered allmulticast mode [ 239.237250][T12078] IPVS: persistence engine module ip_vs_pe_À not found [ 239.786211][T12120] !€ÿ: renamed from bond_slave_0 [ 239.824869][T12120] netlink: 'syz.4.1735': attribute type 4 has an invalid length. [ 240.177170][T12145] netlink: 'syz.3.1742': attribute type 21 has an invalid length. [ 240.423366][T12157] nbd: couldn't find a device at index -373156329 [ 240.902314][T12186] netlink: 'syz.1.1753': attribute type 2 has an invalid length. [ 240.928832][T12186] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 241.064976][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 241.108180][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 241.133094][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 241.153795][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 241.399573][T12214] __nla_validate_parse: 13 callbacks suppressed [ 241.399594][T12214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1763'. [ 241.442079][T12214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1763'. [ 241.475010][T12214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1763'. [ 241.504325][T12214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1763'. [ 242.214156][T12261] nftables ruleset with unbound set [ 242.319523][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'. [ 242.485703][T12259] hsr_slave_0 (unregistering): left promiscuous mode [ 242.590862][T12281] tipc: Enabled bearer , priority 0 [ 242.602451][T12283] tipc: Enabling of bearer rejected, already enabled [ 242.620883][T12280] tipc: Disabling bearer [ 242.631428][T12277] tipc: Enabled bearer , priority 0 [ 242.640267][T12277] syzkaller0: entered promiscuous mode [ 242.646262][T12277] syzkaller0: entered allmulticast mode [ 242.680992][T12275] tipc: Resetting bearer [ 242.704907][T12286] netlink: ct family unspecified [ 242.714943][T12275] tipc: Disabling bearer [ 242.885552][T12297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1790'. [ 243.065420][T12308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1795'. [ 243.082150][T12308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1795'. [ 243.242729][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 243.495695][T12347] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1802'. [ 244.200781][T12354] lo: entered allmulticast mode [ 244.213306][T12352] lo: left allmulticast mode [ 244.329699][T12354] batadv_slave_1 (unregistering): left promiscuous mode [ 244.521403][T12364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.563462][T12364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.700539][T12364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.726377][T12364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.878583][T12388] block nbd1: server does not support multiple connections per device. [ 244.907474][T12364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.936389][T12388] block nbd1: shutting down sockets [ 244.941715][T12364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.107218][T12364] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.124227][T12364] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.204979][T12408] bond6: entered promiscuous mode [ 245.215701][T12408] bond6: entered allmulticast mode [ 245.221478][T12408] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.322548][T12408] bond7: entered promiscuous mode [ 245.327951][T12408] bond7: entered allmulticast mode [ 245.346635][T12408] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.444872][T12408] bond8: entered promiscuous mode [ 245.450227][T12408] bond8: entered allmulticast mode [ 245.456164][T12408] 8021q: adding VLAN 0 to HW filter on device bond8 [ 245.510970][T12408] bond9: entered promiscuous mode [ 245.516890][T12408] bond9: entered allmulticast mode [ 245.522634][T12408] 8021q: adding VLAN 0 to HW filter on device bond9 [ 245.562934][T12408] bond10: entered promiscuous mode [ 245.575082][T12408] bond10: entered allmulticast mode [ 245.591376][T12408] 8021q: adding VLAN 0 to HW filter on device bond10 [ 245.772761][T12408] bond11: entered promiscuous mode [ 245.783979][T12408] bond11: entered allmulticast mode [ 245.794484][T12408] 8021q: adding VLAN 0 to HW filter on device bond11 [ 245.850292][T12408] bond12: entered promiscuous mode [ 245.855487][T12408] bond12: entered allmulticast mode [ 245.861662][T12408] 8021q: adding VLAN 0 to HW filter on device bond12 [ 245.879654][ T6309] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.888129][ T6309] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.925306][ T6294] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.953136][ T6294] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.991613][T12447] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 246.012747][T12447] tipc: Enabled bearer , priority 10 [ 246.036587][ T6309] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.059915][ T6309] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.117154][ T6294] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.125580][ T6294] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.381018][T12470] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:19997 [ 246.453625][T12476] net_ratelimit: 2 callbacks suppressed [ 246.453646][T12476] openvswitch: netlink: IP tunnel dst address not specified [ 246.772094][T12486] __nla_validate_parse: 8 callbacks suppressed [ 246.772113][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1841'. [ 246.802914][T12495] tipc: Enabled bearer , priority 0 [ 246.812066][T12496] syzkaller0: entered promiscuous mode [ 246.817966][T12496] syzkaller0: entered allmulticast mode [ 246.856877][T12497] tipc: Resetting bearer [ 246.901172][T12497] tipc: Disabling bearer [ 247.208445][T12519] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 247.356260][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1856'. [ 247.394562][T12525] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 247.781949][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1864'. [ 247.856278][ T10] tipc: Node number set to 2058157370 [ 247.946579][T12571] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1867'. [ 247.987808][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 248.029529][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'. [ 248.133491][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 248.134138][ T6295] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.199867][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'. [ 248.223005][ T6295] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.239826][ T6295] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.320846][ T6295] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 248.543550][T12593] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1873'. [ 248.711302][T12599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1876'. [ 248.998508][T12624] netlink: 'syz.2.1882': attribute type 1 has an invalid length. [ 249.354729][T12636] tap0: tun_chr_ioctl cmd 2148553947 [ 249.421077][T12640] netlink: 'syz.2.1885': attribute type 1 has an invalid length. [ 249.612636][T12645] gretap1: entered promiscuous mode [ 249.618518][T12645] gretap1: entered allmulticast mode [ 249.776177][T12658] netlink: 'syz.2.1891': attribute type 1 has an invalid length. [ 249.902848][T12659] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.312756][T12688] tipc: Enabled bearer , priority 0 [ 250.348042][T12688] syzkaller0: entered promiscuous mode [ 250.372053][T12688] syzkaller0: entered allmulticast mode [ 250.392025][T12693] netlink: 'syz.4.1903': attribute type 33 has an invalid length. [ 250.410968][T12694] 8021q: VLANs not supported on wg1 [ 250.426614][T12693] 8021q: VLANs not supported on wg1 [ 250.437927][T12693] netlink: 'syz.4.1903': attribute type 4 has an invalid length. [ 250.446182][T12693] netlink: 'syz.4.1903': attribute type 4 has an invalid length. [ 250.454194][T12694] netlink: 'syz.4.1903': attribute type 4 has an invalid length. [ 250.534528][T12700] tipc: Resetting bearer [ 250.653925][T12687] tipc: Resetting bearer [ 250.700502][T12687] tipc: Disabling bearer [ 250.726782][T12705] netlink: 'syz.3.1906': attribute type 6 has an invalid length. [ 250.943874][T12723] vlan2: entered promiscuous mode [ 250.953796][T12723] bridge0: entered promiscuous mode [ 251.017830][T12729] netlink: 'syz.3.1915': attribute type 4 has an invalid length. [ 251.649858][T12775] netlink: 'syz.0.1924': attribute type 5 has an invalid length. [ 251.664782][T12763] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 251.697498][T12763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.423758][T12791] infiniband syz!: set down [ 252.441946][T12791] infiniband syz!: added team_slave_0 [ 252.576594][T12831] __nla_validate_parse: 22 callbacks suppressed [ 252.576616][T12831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1943'. [ 252.593481][T12831] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1943'. [ 252.625221][T12791] RDS/IB: syz!: added [ 252.647599][T12791] smc: adding ib device syz! with port count 1 [ 252.670397][T12791] smc: ib device syz! port 1 has pnetid [ 252.952790][T12852] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1947'. [ 252.966925][T12852] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1947'. [ 253.006629][T12852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1947'. [ 253.135310][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1951'. [ 253.769194][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1956'. [ 253.903161][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1956'. [ 254.257986][T12905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.265622][T12905] IPv6: NLM_F_CREATE should be set when creating new route [ 254.312955][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 254.587905][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 254.660463][T12918] syzkaller0: entered promiscuous mode [ 254.674838][T12918] syzkaller0: entered allmulticast mode [ 254.738820][T12923] netlink: 'syz.0.1967': attribute type 1 has an invalid length. [ 255.202921][T12937] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 255.410251][T12950] netlink: 'syz.2.1974': attribute type 10 has an invalid length. [ 255.422593][T12951] netlink: 'syz.2.1974': attribute type 10 has an invalid length. [ 255.438842][T12950] hsr0: mtu greater than device maximum [ 255.486432][T12951] hsr0: mtu greater than device maximum [ 255.656539][T12965] netlink: 'syz.2.1978': attribute type 10 has an invalid length. [ 255.687384][T12965] netlink: 'syz.2.1978': attribute type 4 has an invalid length. [ 255.770420][T12969] netlink: 'syz.2.1978': attribute type 10 has an invalid length. [ 255.808867][T12969] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 255.879126][T12969] 8021q: adding VLAN 0 to HW filter on device bond15 [ 255.907134][T12969] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 255.917318][T12969] bond15: (slave macvlan2): Enslaving as a backup interface with an up link [ 257.102862][T13031] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 257.255194][T13035] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 257.278863][T13035] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 257.306192][T13035] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 257.374113][T13008] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 257.390451][T13008] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 257.419203][T13008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 257.425168][T13008] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 257.443869][T13040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.461818][T13008] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 257.468323][T13008] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 257.528071][T13008] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 257.561176][T13008] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 257.586844][T13050] __nla_validate_parse: 7 callbacks suppressed [ 257.586864][T13050] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2003'. [ 258.185318][T13073] tipc: MTU too low for tipc bearer [ 258.205508][T13077] tipc: MTU too low for tipc bearer [ 258.552365][T13091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2012'. [ 258.894632][T13103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2015'. [ 258.923545][T13103] netlink: 'syz.1.2015': attribute type 16 has an invalid length. [ 259.012723][T13103] netlink: 'syz.1.2015': attribute type 17 has an invalid length. [ 259.133824][T13103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.303600][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2030'. [ 260.376130][T13174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 260.417572][T13175] tipc: Enabling of bearer rejected, failed to enable media [ 260.471569][T13177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2033'. [ 260.547559][T13181] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2034'. [ 260.583740][T13181] hsr0 speed is unknown, defaulting to 1000 [ 260.776992][T13194] netlink: 'syz.2.2037': attribute type 3 has an invalid length. [ 260.886397][T13196] openvswitch: netlink: IPv6 tunnel dst address is zero [ 261.962798][T13249] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 262.497431][T13279] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 262.681203][T13284] netlink: 'syz.0.2060': attribute type 1 has an invalid length. [ 262.692412][T13285] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2059'. [ 262.742524][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 262.809149][T13296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2062'. [ 262.827435][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 262.897988][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 263.304997][T13317] pim6reg: entered allmulticast mode [ 263.321261][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2067'. [ 264.141008][T13366] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2078'. [ 264.187354][T13370] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2078'. [ 264.188892][T13363] netlink: 'syz.2.2079': attribute type 4 has an invalid length. [ 264.485658][T13385] batadv2: entered allmulticast mode [ 264.873072][T13409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2088'. [ 265.405679][T13434] lo: entered promiscuous mode [ 265.412047][T13434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.552104][T13452] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 265.592292][T13452] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 265.908893][T13464] netlink: 'syz.1.2100': attribute type 10 has an invalid length. [ 265.922748][T13464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2100'. [ 265.950538][T13464] team0: Port device geneve0 added [ 268.196688][T13526] __nla_validate_parse: 1 callbacks suppressed [ 268.196724][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2112'. [ 268.272409][T13533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2115'. [ 268.283647][T13533] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2115'. [ 268.293353][T13533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2115'. [ 268.303975][T13534] netlink: 'syz.4.2112': attribute type 11 has an invalid length. [ 268.409947][T13539] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 268.421801][T13539] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 268.433991][T13539] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 268.494157][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2118'. [ 268.519143][T13550] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2119'. [ 268.693257][T13556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2120'. [ 268.963880][T13576] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2126'. [ 269.033712][T13582] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2127'. [ 269.151764][T13592] netlink: 'syz.4.2129': attribute type 6 has an invalid length. [ 269.337749][T13603] netlink: 165 bytes leftover after parsing attributes in process `syz.0.2131'. [ 269.344668][T13600] netlink: 'syz.4.2132': attribute type 1 has an invalid length. [ 269.418857][T13600] netlink: 'syz.4.2132': attribute type 1 has an invalid length. [ 269.478453][T13600] netlink: 'syz.4.2132': attribute type 2 has an invalid length. [ 269.715757][T13626] syzkaller0: entered promiscuous mode [ 269.730697][T13626] syzkaller0: entered allmulticast mode [ 269.848966][ T10] IPVS: starting estimator thread 0... [ 269.861888][T13638] netlink: zone id is out of range [ 269.882542][T13638] netlink: zone id is out of range [ 269.909029][T13638] netlink: zone id is out of range [ 269.922522][T13638] netlink: zone id is out of range [ 269.938742][T13639] IPVS: using max 27 ests per chain, 64800 per kthread [ 269.968375][T13638] netlink: zone id is out of range [ 269.988958][T13638] netlink: zone id is out of range [ 270.013613][T13638] netlink: zone id is out of range [ 270.058178][T13638] netlink: zone id is out of range [ 270.063367][T13638] netlink: zone id is out of range [ 270.072247][T13638] netlink: zone id is out of range [ 270.270637][T13658] netlink: 'syz.2.2147': attribute type 1 has an invalid length. [ 270.469708][T13668] bond4 (unregistering): Released all slaves [ 270.499366][T13664] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 270.852584][T13694] bond0: (slave sit0): Error: Device type is different from other slaves [ 271.072671][T13712] tipc: Enabled bearer , priority 0 [ 271.103076][T13712] syzkaller0: entered promiscuous mode [ 271.135186][T13712] syzkaller0: entered allmulticast mode [ 271.203545][T13712] tipc: Resetting bearer [ 271.258821][T13719] !€ÿ: renamed from bond_slave_0 [ 271.345834][T13710] tipc: Resetting bearer [ 271.427012][T13710] tipc: Disabling bearer [ 271.687090][T13745] validate_nla: 2 callbacks suppressed [ 271.687113][T13745] netlink: 'syz.0.2174': attribute type 8 has an invalid length. [ 271.964921][T13749] team0: Port device geneve0 removed [ 272.011791][T13759] netlink: 'syz.0.2180': attribute type 5 has an invalid length. [ 273.003058][T13804] tipc: Invalid UDP bearer configuration [ 273.003118][T13804] tipc: Enabling of bearer rejected, failed to enable media [ 273.045190][T13804] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 273.269345][T13818] netlink: 'syz.2.2199': attribute type 11 has an invalid length. [ 273.281309][T13818] __nla_validate_parse: 13 callbacks suppressed [ 273.281330][T13818] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2199'. [ 273.313653][T13823] netlink: 'syz.1.2198': attribute type 1 has an invalid length. [ 273.350682][T13823] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2198'. [ 273.380909][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'. [ 273.449947][T13829] netlink: 'syz.2.2201': attribute type 7 has an invalid length. [ 273.739102][T13843] netlink: 'syz.0.2206': attribute type 58 has an invalid length. [ 273.747802][T13843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2206'. [ 273.770314][T13845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 273.788770][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2205'. [ 273.803149][T13850] netlink: 'syz.0.2206': attribute type 58 has an invalid length. [ 273.808193][T13844] bond0: entered promiscuous mode [ 273.811837][T13850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2206'. [ 273.823004][T13844] !€ÿ: entered promiscuous mode [ 273.831064][T13844] bond_slave_1: entered promiscuous mode [ 273.837698][T13844] syz_tun: entered promiscuous mode [ 273.844700][T13844] bond0: left promiscuous mode [ 273.849941][T13844] !€ÿ: left promiscuous mode [ 273.854962][T13844] bond_slave_1: left promiscuous mode [ 273.860910][T13844] syz_tun: left promiscuous mode [ 274.089894][T13858] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2208'. [ 274.143200][T13863] sctp: [Deprecated]: syz.0.2211 (pid 13863) Use of int in maxseg socket option. [ 274.143200][T13863] Use struct sctp_assoc_value instead [ 274.192946][T13863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2211'. [ 274.285205][T13875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2215'. [ 274.294855][T13875] netlink: 'syz.0.2215': attribute type 7 has an invalid length. [ 274.302962][T13875] netlink: 'syz.0.2215': attribute type 8 has an invalid length. [ 274.304138][T13872] syzkaller1: entered promiscuous mode [ 274.317504][T13872] syzkaller1: entered allmulticast mode [ 274.349047][T13873] sch_tbf: burst 0 is lower than device lo mtu (24) ! [ 274.388458][T13873] 8021q: adding VLAN 0 to HW filter on device bond16 [ 274.839168][T13911] netlink: 'syz.0.2227': attribute type 15 has an invalid length. [ 274.901123][T13914] netlink: 'syz.1.2228': attribute type 1 has an invalid length. [ 275.244966][T13932] net_ratelimit: 18 callbacks suppressed [ 275.244989][T13932] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 275.717642][T13956] delete_channel: no stack [ 275.792795][T13954] delete_channel: no stack [ 275.836309][T13954] delete_channel: no stack [ 275.840985][T13954] delete_channel: no stack [ 275.845611][T13954] delete_channel: no stack [ 275.870602][T13954] delete_channel: no stack [ 275.883782][T13954] delete_channel: no stack [ 275.891998][T13954] delete_channel: no stack [ 275.898240][T13954] delete_channel: no stack [ 275.903650][T13954] delete_channel: no stack [ 275.957088][T13954] delete_channel: no stack [ 275.961816][T13954] delete_channel: no stack [ 275.979230][T13954] delete_channel: no stack [ 275.984001][T13954] delete_channel: no stack [ 276.028675][T13971] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.036333][T13954] delete_channel: no stack [ 276.040993][T13954] delete_channel: no stack [ 276.045615][T13954] delete_channel: no stack [ 276.095838][T13954] delete_channel: no stack [ 276.100772][T13954] delete_channel: no stack [ 276.105460][T13954] delete_channel: no stack [ 276.110266][T13954] delete_channel: no stack [ 276.115047][T13954] delete_channel: no stack [ 276.122928][T13954] delete_channel: no stack [ 276.127825][T13954] delete_channel: no stack [ 276.132487][T13954] delete_channel: no stack [ 276.137326][T13954] delete_channel: no stack [ 276.142166][T13954] delete_channel: no stack [ 276.146983][T13954] delete_channel: no stack [ 276.151753][T13954] delete_channel: no stack [ 276.156982][T13954] delete_channel: no stack [ 276.161850][T13954] delete_channel: no stack [ 276.167215][T13954] delete_channel: no stack [ 276.172275][T13954] delete_channel: no stack [ 276.177193][T13971] bond3: (slave geneve2): making interface the new active one [ 276.182479][T13954] delete_channel: no stack [ 276.192431][T13971] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 276.203635][T13954] delete_channel: no stack [ 276.218965][T13954] delete_channel: no stack [ 276.246621][T13954] delete_channel: no stack [ 276.251411][T13954] delete_channel: no stack [ 276.276299][T13954] delete_channel: no stack [ 276.283532][T13954] delete_channel: no stack [ 276.305128][T13954] delete_channel: no stack [ 276.313309][T13954] delete_channel: no stack [ 276.344016][T13954] delete_channel: no stack [ 276.359441][T13954] delete_channel: no stack [ 276.364138][T13954] delete_channel: no stack [ 276.370973][T13980] hsr0 speed is unknown, defaulting to 1000 [ 276.406576][T13954] delete_channel: no stack [ 276.411241][T13954] delete_channel: no stack [ 276.432590][T13954] delete_channel: no stack [ 276.444636][T13954] delete_channel: no stack [ 276.456205][T13954] delete_channel: no stack [ 276.460882][T13954] delete_channel: no stack [ 276.486330][T13954] delete_channel: no stack [ 276.491066][T13954] delete_channel: no stack [ 276.495686][T13954] delete_channel: no stack [ 276.525142][T13954] delete_channel: no stack [ 276.552156][T13954] delete_channel: no stack [ 276.574002][T13954] delete_channel: no stack [ 276.596684][T13954] delete_channel: no stack [ 276.616413][T13954] delete_channel: no stack [ 276.621092][T13954] delete_channel: no stack [ 276.642522][T13954] delete_channel: no stack [ 276.667640][T13954] delete_channel: no stack [ 276.672456][T13954] delete_channel: no stack [ 276.682297][T13954] delete_channel: no stack [ 276.701141][T13954] delete_channel: no stack [ 276.974298][T14008] veth7: entered allmulticast mode [ 277.409475][T14027] validate_nla: 5 callbacks suppressed [ 277.409498][T14027] netlink: 'syz.0.2260': attribute type 16 has an invalid length. [ 277.439739][T14027] netlink: 'syz.0.2260': attribute type 17 has an invalid length. [ 277.490820][T14027] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 277.549240][T14045] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 277.630818][T14048] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 278.243236][T14033] lec:lec_atm_close: lec0: Shut down! [ 278.502538][T14079] __nla_validate_parse: 26 callbacks suppressed [ 278.502561][T14079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2274'. [ 278.562826][T14079] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2274'. [ 278.604834][T14083] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2275'. [ 278.801521][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2277'. [ 278.962437][T14097] netlink: 'syz.3.2277': attribute type 3 has an invalid length. [ 279.054364][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2279'. [ 279.081550][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2280'. [ 279.135291][T14106] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 279.402233][T14121] netlink: 'syz.3.2285': attribute type 14 has an invalid length. [ 279.435067][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 279.444899][T14124] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.2287'. [ 279.466771][T14121] netlink: 'syz.3.2285': attribute type 14 has an invalid length. [ 279.488621][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2285'. [ 279.633031][T14129] syzkaller0: entered promiscuous mode [ 279.643657][T14129] syzkaller0: entered allmulticast mode [ 279.672854][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2289'. [ 279.700276][T14132] veth9: entered allmulticast mode [ 279.754668][T14136] veth11: entered allmulticast mode [ 279.932516][T14149] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 279.976394][T14149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.495896][T14186] netlink: 'syz.1.2305': attribute type 2 has an invalid length. [ 280.522888][T14186] nbd: must specify at least one socket [ 280.779463][T14196] syz_tun: entered promiscuous mode [ 280.812963][T14196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.930515][T14196] netlink: 'syz.2.2306': attribute type 1 has an invalid length. [ 280.938485][T14196] netlink: 'syz.2.2306': attribute type 1 has an invalid length. [ 281.143379][T14176] hsr0 speed is unknown, defaulting to 1000 [ 281.494698][T14238] netlink: 'syz.2.2321': attribute type 1 has an invalid length. [ 281.722288][T14246] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 281.771129][T14246] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.804565][T14250] gtp0: entered promiscuous mode [ 281.820022][T14250] gtp0: entered allmulticast mode [ 282.028965][T14264] 8021q: VLANs not supported on ipvlan1 [ 282.039464][T14260] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 282.226566][T14277] IPv6: NLM_F_REPLACE set, but no existing node found! [ 282.694426][T14297] netlink: 'syz.3.2339': attribute type 1 has an invalid length. [ 282.759184][T14298] tipc: Enabled bearer , priority 0 [ 282.891521][T14297] 8021q: adding VLAN 0 to HW filter on device bond5 [ 282.933631][T14297] bond4: (slave bond5): making interface the new active one [ 282.960741][T14297] bond4: (slave bond5): Enslaving as an active interface with an up link [ 282.980963][T14289] tipc: Disabling bearer [ 283.014578][T14303] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 283.031578][T14308] 8021q: adding VLAN 0 to HW filter on device bond4 [ 283.453289][ T6275] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.529489][ T6275] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.569511][ T6275] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.604157][ T6275] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.820692][T14353] __nla_validate_parse: 18 callbacks suppressed [ 283.820711][T14353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2352'. [ 283.852694][T14354] tipc: Enabling of bearer rejected, media not registered [ 283.934926][T14361] syzkaller1: entered promiscuous mode [ 283.963847][T14361] syzkaller1: entered allmulticast mode [ 284.165777][T14369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2358'. [ 284.358359][T14379] sctp: [Deprecated]: syz.1.2361 (pid 14379) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.358359][T14379] Use struct sctp_sack_info instead [ 284.395411][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2362'. [ 284.637624][T14396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2365'. [ 284.730622][T14396] vxcan5: entered allmulticast mode [ 284.806630][T14407] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2369'. [ 284.832451][T14409] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 284.925503][T14409] 8021q: adding VLAN 0 to HW filter on device bond17 [ 284.972424][T14422] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2374'. [ 284.992140][T14411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2371'. [ 285.005722][T14411] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2371'. [ 285.021179][T14411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2371'. [ 285.031939][T14415] veth11: entered promiscuous mode [ 285.034087][T14411] netlink: 'syz.4.2371': attribute type 21 has an invalid length. [ 285.043599][T14415] bond17: (slave veth11): Enslaving as an active interface with an up link [ 285.059930][T14411] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2371'. [ 285.462455][T14443] bond18 (unregistering): Released all slaves [ 286.222365][T14479] IPVS: set_ctl: invalid protocol: 44 172.20.20.42:20001 [ 286.655198][T14508] netlink: 'syz.2.2399': attribute type 11 has an invalid length. [ 287.134359][T14509] ipvlan0: left promiscuous mode [ 287.144066][T14509] ipvlan0: left allmulticast mode [ 287.217976][T14509] vlan0: left allmulticast mode [ 287.223120][T14509] veth0_vlan: left allmulticast mode [ 287.229599][T14509] vlan0: left promiscuous mode [ 287.235215][T14509] macvtap0: left promiscuous mode [ 287.240621][T14509] macvtap0: left allmulticast mode [ 287.266984][T14509] veth7: left allmulticast mode [ 287.301461][ T37] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.336340][ T37] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.356591][ T37] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.385438][ T37] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.399986][T14530] syzkaller1: entered promiscuous mode [ 287.415779][T14530] syzkaller1: entered allmulticast mode [ 287.436488][ T37] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.445832][ T37] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.457940][ T37] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.468547][ T37] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.520857][T14536] tipc: Enabling of bearer rejected, failed to enable media [ 287.543458][T14539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.819914][T14557] veth0: entered promiscuous mode [ 287.828152][T14556] veth0: left promiscuous mode [ 288.087173][T14570] pim6reg527: entered allmulticast mode [ 288.097888][T14570] tls_set_device_offload: netdev not found [ 288.213066][T14583] Dead loop on virtual device ip6_vti0, fix it urgently! [ 288.279661][T14588] geneve2: entered promiscuous mode [ 288.284939][T14588] geneve2: entered allmulticast mode [ 288.306766][ T37] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 288.328674][ T37] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 288.366885][T14592] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.407334][T14592] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.497008][ T37] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 288.941772][T14618] __nla_validate_parse: 7 callbacks suppressed [ 288.941793][T14618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2430'. [ 289.598709][T14660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2440'. [ 289.679095][T14665] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2442'. [ 289.702850][T14666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2442'. [ 290.048097][T14675] syzkaller0: entered allmulticast mode [ 290.079025][T14688] netlink: 'syz.3.2447': attribute type 10 has an invalid length. [ 290.132594][T14691] netlink: 'syz.3.2447': attribute type 10 has an invalid length. [ 291.680367][T14592] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.690914][T14592] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.707464][T14592] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 291.760904][T14691] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 291.788692][T14694] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 291.840908][T14592] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 291.863850][T14592] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.874899][T14592] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 291.971820][T14592] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.015122][T14592] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.029921][T14592] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 292.218520][ T3562] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.264252][ T3562] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 292.289873][ T3562] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 292.364972][ T3562] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.377594][ T3562] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 292.410339][T14734] netlink: 'syz.3.2462': attribute type 3 has an invalid length. [ 292.426313][ T3562] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 292.458470][T14734] netlink: 184256 bytes leftover after parsing attributes in process `syz.3.2462'. [ 292.532963][ T6295] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.550748][ T6295] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 292.562937][ T6295] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 292.620027][ T37] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.636152][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 292.656052][ T37] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 292.690361][T14588] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.726945][T14588] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 292.745637][T14588] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 292.781733][ T37] ================================================================== [ 292.789871][ T37] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 292.797452][ T37] Read of size 8 at addr ffff88807dc702b0 by task kworker/u8:3/37 [ 292.805285][ T37] [ 292.807647][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 292.807674][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.807688][ T37] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 292.807735][ T37] Call Trace: [ 292.807744][ T37] [ 292.807754][ T37] dump_stack_lvl+0x189/0x250 [ 292.807780][ T37] ? __kasan_check_byte+0x12/0x40 [ 292.807811][ T37] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.807834][ T37] ? lock_release+0x4b/0x3e0 [ 292.807868][ T37] ? __virt_addr_valid+0x4a5/0x5c0 [ 292.807896][ T37] print_report+0xca/0x240 [ 292.807915][ T37] ? __mutex_lock+0x147/0x1350 [ 292.807933][ T37] kasan_report+0x118/0x150 [ 292.807959][ T37] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 292.807989][ T37] ? __mutex_lock+0x147/0x1350 [ 292.808011][ T37] __mutex_lock+0x147/0x1350 [ 292.808032][ T37] ? __mutex_lock+0x5bb/0x1350 [ 292.808052][ T37] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 292.808084][ T37] ? __pfx___mutex_lock+0x10/0x10 [ 292.808106][ T37] ? __lock_acquire+0xab9/0xd20 [ 292.808142][ T37] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 292.808183][ T37] ? process_scheduled_works+0x9ef/0x17b0 [ 292.808203][ T37] ? process_scheduled_works+0x9ef/0x17b0 [ 292.808223][ T37] process_scheduled_works+0xae1/0x17b0 [ 292.808260][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 292.808290][ T37] worker_thread+0x8a0/0xda0 [ 292.808312][ T37] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 292.808346][ T37] ? __kthread_parkme+0x7b/0x200 [ 292.808373][ T37] kthread+0x70e/0x8a0 [ 292.808400][ T37] ? __pfx_worker_thread+0x10/0x10 [ 292.808420][ T37] ? __pfx_kthread+0x10/0x10 [ 292.808444][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 292.808471][ T37] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.808499][ T37] ? __pfx_kthread+0x10/0x10 [ 292.808523][ T37] ret_from_fork+0x3f9/0x770 [ 292.808546][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 292.808569][ T37] ? __switch_to_asm+0x39/0x70 [ 292.808595][ T37] ? __switch_to_asm+0x33/0x70 [ 292.808620][ T37] ? __pfx_kthread+0x10/0x10 [ 292.808645][ T37] ret_from_fork_asm+0x1a/0x30 [ 292.808682][ T37] [ 292.808689][ T37] [ 293.024556][ T37] Allocated by task 14592: [ 293.028975][ T37] kasan_save_track+0x3e/0x80 [ 293.033756][ T37] __kasan_kmalloc+0x93/0xb0 [ 293.038358][ T37] __kmalloc_noprof+0x27a/0x4f0 [ 293.043219][ T37] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 293.049482][ T37] notifier_call_chain+0x1b6/0x3e0 [ 293.054620][ T37] register_netdevice+0x1608/0x1ae0 [ 293.059830][ T37] nsim_create+0xae8/0xf10 [ 293.064351][ T37] __nsim_dev_port_add+0x6b6/0xb10 [ 293.069481][ T37] nsim_dev_port_add_all+0x37/0xf0 [ 293.074609][ T37] nsim_dev_reload_up+0x451/0x780 [ 293.079653][ T37] devlink_reload+0x4e9/0x8d0 [ 293.084521][ T37] devlink_nl_reload_doit+0xb35/0xd50 [ 293.089996][ T37] genl_family_rcv_msg_doit+0x215/0x300 [ 293.095557][ T37] genl_rcv_msg+0x60e/0x790 [ 293.100076][ T37] netlink_rcv_skb+0x205/0x470 [ 293.104917][ T37] genl_rcv+0x28/0x40 [ 293.108915][ T37] netlink_unicast+0x82c/0x9e0 [ 293.113880][ T37] netlink_sendmsg+0x805/0xb30 [ 293.118774][ T37] __sock_sendmsg+0x21c/0x270 [ 293.123483][ T37] ____sys_sendmsg+0x505/0x830 [ 293.128358][ T37] ___sys_sendmsg+0x21f/0x2a0 [ 293.133223][ T37] __x64_sys_sendmsg+0x19b/0x260 [ 293.138257][ T37] do_syscall_64+0xfa/0x3b0 [ 293.142856][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.148918][ T37] [ 293.151249][ T37] Freed by task 14588: [ 293.155401][ T37] kasan_save_track+0x3e/0x80 [ 293.160276][ T37] kasan_save_free_info+0x46/0x50 [ 293.165344][ T37] __kasan_slab_free+0x5b/0x80 [ 293.170126][ T37] kfree+0x18e/0x440 [ 293.174128][ T37] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 293.180405][ T37] notifier_call_chain+0x1b6/0x3e0 [ 293.185527][ T37] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 293.191958][ T37] unregister_netdevice_queue+0x33c/0x380 [ 293.197687][ T37] nsim_destroy+0x1dd/0x670 [ 293.202367][ T37] __nsim_dev_port_del+0x14d/0x1b0 [ 293.207487][ T37] nsim_dev_reload_destroy+0x288/0x490 [ 293.213066][ T37] nsim_dev_reload_down+0x8a/0xc0 [ 293.218124][ T37] devlink_reload+0x1b6/0x8d0 [ 293.222994][ T37] devlink_nl_reload_doit+0xb35/0xd50 [ 293.228392][ T37] genl_family_rcv_msg_doit+0x215/0x300 [ 293.233961][ T37] genl_rcv_msg+0x60e/0x790 [ 293.238488][ T37] netlink_rcv_skb+0x205/0x470 [ 293.243276][ T37] genl_rcv+0x28/0x40 [ 293.247359][ T37] netlink_unicast+0x82c/0x9e0 [ 293.252135][ T37] netlink_sendmsg+0x805/0xb30 [ 293.256992][ T37] __sock_sendmsg+0x21c/0x270 [ 293.261678][ T37] ____sys_sendmsg+0x505/0x830 [ 293.266535][ T37] ___sys_sendmsg+0x21f/0x2a0 [ 293.271223][ T37] __x64_sys_sendmsg+0x19b/0x260 [ 293.276180][ T37] do_syscall_64+0xfa/0x3b0 [ 293.280691][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.286608][ T37] [ 293.288941][ T37] Last potentially related work creation: [ 293.294654][ T37] kasan_save_stack+0x3e/0x60 [ 293.299341][ T37] kasan_record_aux_stack+0xbd/0xd0 [ 293.304546][ T37] insert_work+0x3d/0x330 [ 293.308885][ T37] __queue_work+0xbaf/0xfb0 [ 293.313398][ T37] queue_work_on+0x181/0x270 [ 293.318002][ T37] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 293.323648][ T37] udp_tunnel_push_rx_port+0x180/0x200 [ 293.329153][ T37] geneve_offload_rx_ports+0xd7/0x160 [ 293.334544][ T37] geneve_netdevice_event+0x6a/0x80 [ 293.339753][ T37] notifier_call_chain+0x1b6/0x3e0 [ 293.344873][ T37] call_netdevice_notifiers+0x88/0xc0 [ 293.350265][ T37] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 293.356526][ T37] notifier_call_chain+0x1b6/0x3e0 [ 293.361741][ T37] register_netdevice+0x1608/0x1ae0 [ 293.367040][ T37] nsim_create+0xae8/0xf10 [ 293.371486][ T37] __nsim_dev_port_add+0x6b6/0xb10 [ 293.376612][ T37] nsim_dev_port_add_all+0x37/0xf0 [ 293.381825][ T37] nsim_dev_reload_up+0x451/0x780 [ 293.386912][ T37] devlink_reload+0x4e9/0x8d0 [ 293.391602][ T37] devlink_nl_reload_doit+0xb35/0xd50 [ 293.397161][ T37] genl_family_rcv_msg_doit+0x215/0x300 [ 293.402717][ T37] genl_rcv_msg+0x60e/0x790 [ 293.407420][ T37] netlink_rcv_skb+0x205/0x470 [ 293.412208][ T37] genl_rcv+0x28/0x40 [ 293.416212][ T37] netlink_unicast+0x82c/0x9e0 [ 293.420997][ T37] netlink_sendmsg+0x805/0xb30 [ 293.425768][ T37] __sock_sendmsg+0x21c/0x270 [ 293.430472][ T37] ____sys_sendmsg+0x505/0x830 [ 293.435253][ T37] ___sys_sendmsg+0x21f/0x2a0 [ 293.439940][ T37] __x64_sys_sendmsg+0x19b/0x260 [ 293.444983][ T37] do_syscall_64+0xfa/0x3b0 [ 293.449495][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.455399][ T37] [ 293.457756][ T37] Second to last potentially related work creation: [ 293.464519][ T37] kasan_save_stack+0x3e/0x60 [ 293.469215][ T37] kasan_record_aux_stack+0xbd/0xd0 [ 293.474446][ T37] insert_work+0x3d/0x330 [ 293.478827][ T37] __queue_work+0xcd2/0xfb0 [ 293.483425][ T37] queue_work_on+0x181/0x270 [ 293.488023][ T37] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 293.493752][ T37] udp_tunnel_push_rx_port+0x180/0x200 [ 293.499221][ T37] vxlan_offload_rx_ports+0x139/0x200 [ 293.504603][ T37] vxlan_netdevice_event+0x111/0x470 [ 293.510076][ T37] notifier_call_chain+0x1b6/0x3e0 [ 293.515288][ T37] call_netdevice_notifiers+0x88/0xc0 [ 293.520777][ T37] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 293.527042][ T37] notifier_call_chain+0x1b6/0x3e0 [ 293.532174][ T37] register_netdevice+0x1608/0x1ae0 [ 293.537390][ T37] nsim_create+0xae8/0xf10 [ 293.541817][ T37] __nsim_dev_port_add+0x6b6/0xb10 [ 293.547001][ T37] nsim_dev_port_add_all+0x37/0xf0 [ 293.552448][ T37] nsim_dev_reload_up+0x451/0x780 [ 293.557518][ T37] devlink_reload+0x4e9/0x8d0 [ 293.562229][ T37] devlink_nl_reload_doit+0xb35/0xd50 [ 293.567831][ T37] genl_family_rcv_msg_doit+0x215/0x300 [ 293.573399][ T37] genl_rcv_msg+0x60e/0x790 [ 293.577916][ T37] netlink_rcv_skb+0x205/0x470 [ 293.582785][ T37] genl_rcv+0x28/0x40 [ 293.586861][ T37] netlink_unicast+0x82c/0x9e0 [ 293.591659][ T37] netlink_sendmsg+0x805/0xb30 [ 293.596430][ T37] __sock_sendmsg+0x21c/0x270 [ 293.601226][ T37] ____sys_sendmsg+0x505/0x830 [ 293.605996][ T37] ___sys_sendmsg+0x21f/0x2a0 [ 293.611147][ T37] __x64_sys_sendmsg+0x19b/0x260 [ 293.616196][ T37] do_syscall_64+0xfa/0x3b0 [ 293.620917][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.626837][ T37] [ 293.629190][ T37] The buggy address belongs to the object at ffff88807dc70200 [ 293.629190][ T37] which belongs to the cache kmalloc-256 of size 256 [ 293.644241][ T37] The buggy address is located 176 bytes inside of [ 293.644241][ T37] freed 256-byte region [ffff88807dc70200, ffff88807dc70300) [ 293.658095][ T37] [ 293.660456][ T37] The buggy address belongs to the physical page: [ 293.667240][ T37] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7dc70 [ 293.676199][ T37] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 293.684722][ T37] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 293.692631][ T37] page_type: f5(slab) [ 293.696622][ T37] raw: 00fff00000000040 ffff88801a441b40 ffffea000045c280 dead000000000003 [ 293.705220][ T37] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 293.713816][ T37] head: 00fff00000000040 ffff88801a441b40 ffffea000045c280 dead000000000003 [ 293.722508][ T37] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 293.731365][ T37] head: 00fff00000000001 ffffea0001f71c01 00000000ffffffff 00000000ffffffff [ 293.740062][ T37] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 293.748810][ T37] page dumped because: kasan: bad access detected [ 293.755443][ T37] page_owner tracks the page as allocated [ 293.761171][ T37] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5862, tgid 5862 (syz-executor), ts 88752088709, free_ts 88536285596 [ 293.782551][ T37] post_alloc_hook+0x240/0x2a0 [ 293.787339][ T37] get_page_from_freelist+0x21e4/0x22c0 [ 293.792985][ T37] __alloc_frozen_pages_noprof+0x181/0x370 [ 293.798800][ T37] alloc_pages_mpol+0x232/0x4a0 [ 293.803671][ T37] allocate_slab+0x8a/0x370 [ 293.808275][ T37] ___slab_alloc+0xbeb/0x1410 [ 293.813055][ T37] __kmalloc_noprof+0x305/0x4f0 [ 293.817927][ T37] __register_sysctl_table+0xba1/0x1340 [ 293.823489][ T37] mpls_dev_sysctl_register+0x188/0x270 [ 293.829059][ T37] mpls_dev_notify+0x357/0x7a0 [ 293.834013][ T37] notifier_call_chain+0x1b6/0x3e0 [ 293.839136][ T37] register_netdevice+0x1608/0x1ae0 [ 293.844424][ T37] macvlan_common_newlink+0x120a/0x1980 [ 293.850068][ T37] rtnl_newlink_create+0x30d/0xb00 [ 293.855197][ T37] rtnl_newlink+0x16d6/0x1c70 [ 293.859902][ T37] rtnetlink_rcv_msg+0x7cc/0xb70 [ 293.864908][ T37] page last free pid 5875 tgid 5875 stack trace: [ 293.871336][ T37] __free_frozen_pages+0xbc4/0xd30 [ 293.876467][ T37] __slab_free+0x303/0x3c0 [ 293.880901][ T37] qlist_free_all+0x97/0x140 [ 293.885674][ T37] kasan_quarantine_reduce+0x148/0x160 [ 293.891169][ T37] __kasan_slab_alloc+0x22/0x80 [ 293.896044][ T37] __kmalloc_cache_noprof+0x1be/0x3d0 [ 293.901463][ T37] __netdev_adjacent_dev_insert+0x158/0x8d0 [ 293.907409][ T37] __netdev_upper_dev_link+0x341/0x590 [ 293.913176][ T37] netdev_upper_dev_link+0x9d/0xf0 [ 293.918321][ T37] hsr_add_port+0x5e2/0x890 [ 293.922855][ T37] hsr_dev_finalize+0x685/0xaa0 [ 293.927720][ T37] hsr_newlink+0x7d7/0x940 [ 293.932154][ T37] rtnl_newlink_create+0x30d/0xb00 [ 293.937288][ T37] rtnl_newlink+0x16d6/0x1c70 [ 293.941995][ T37] rtnetlink_rcv_msg+0x7cc/0xb70 [ 293.946955][ T37] netlink_rcv_skb+0x205/0x470 [ 293.951784][ T37] [ 293.954119][ T37] Memory state around the buggy address: [ 293.959754][ T37] ffff88807dc70180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 293.967853][ T37] ffff88807dc70200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 293.976096][ T37] >ffff88807dc70280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 293.984174][ T37] ^ [ 293.989817][ T37] ffff88807dc70300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 293.997891][ T37] ffff88807dc70380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 294.005995][ T37] ================================================================== [ 294.024947][ T37] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.032212][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 294.041528][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.051707][ T37] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 294.059059][ T37] Call Trace: [ 294.062364][ T37] [ 294.065317][ T37] dump_stack_lvl+0x99/0x250 [ 294.069947][ T37] ? __asan_memcpy+0x40/0x70 [ 294.074578][ T37] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.079854][ T37] ? __pfx__printk+0x10/0x10 [ 294.084519][ T37] vpanic+0x281/0x750 [ 294.088544][ T37] ? preempt_schedule+0xae/0xc0 [ 294.093542][ T37] ? __pfx_vpanic+0x10/0x10 [ 294.098173][ T37] ? preempt_schedule_common+0x83/0xd0 [ 294.103685][ T37] ? preempt_schedule+0xae/0xc0 [ 294.108608][ T37] ? __pfx_preempt_schedule+0x10/0x10 [ 294.114130][ T37] panic+0xb9/0xc0 [ 294.117923][ T37] ? __pfx_panic+0x10/0x10 [ 294.122381][ T37] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 294.128325][ T37] ? __mutex_lock+0x147/0x1350 [ 294.133130][ T37] check_panic_on_warn+0x89/0xb0 [ 294.138296][ T37] ? __mutex_lock+0x147/0x1350 [ 294.143096][ T37] end_report+0x78/0x160 [ 294.147387][ T37] kasan_report+0x129/0x150 [ 294.152050][ T37] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 294.158008][ T37] ? __mutex_lock+0x147/0x1350 [ 294.162843][ T37] __mutex_lock+0x147/0x1350 [ 294.167609][ T37] ? __mutex_lock+0x5bb/0x1350 [ 294.172445][ T37] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 294.178751][ T37] ? __pfx___mutex_lock+0x10/0x10 [ 294.183926][ T37] ? __lock_acquire+0xab9/0xd20 [ 294.188928][ T37] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 294.195152][ T37] ? process_scheduled_works+0x9ef/0x17b0 [ 294.201055][ T37] ? process_scheduled_works+0x9ef/0x17b0 [ 294.206843][ T37] process_scheduled_works+0xae1/0x17b0 [ 294.212463][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.218607][ T37] worker_thread+0x8a0/0xda0 [ 294.223419][ T37] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 294.230067][ T37] ? __kthread_parkme+0x7b/0x200 [ 294.235076][ T37] kthread+0x70e/0x8a0 [ 294.239248][ T37] ? __pfx_worker_thread+0x10/0x10 [ 294.244428][ T37] ? __pfx_kthread+0x10/0x10 [ 294.249067][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 294.254377][ T37] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.259624][ T37] ? __pfx_kthread+0x10/0x10 [ 294.264252][ T37] ret_from_fork+0x3f9/0x770 [ 294.268977][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 294.274215][ T37] ? __switch_to_asm+0x39/0x70 [ 294.278993][ T37] ? __switch_to_asm+0x33/0x70 [ 294.283774][ T37] ? __pfx_kthread+0x10/0x10 [ 294.288403][ T37] ret_from_fork_asm+0x1a/0x30 [ 294.293201][ T37] [ 294.296410][ T37] Kernel Offset: disabled [ 294.300740][ T37] Rebooting in 86400 seconds..