last executing test programs: 3m32.287642496s ago: executing program 4 (id=6002): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'erspan0\x00', 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000000c0)=0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x80cf}, 0x20008845) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd7000000000000400000048031180"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x1}, @IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 3m32.135240872s ago: executing program 4 (id=6004): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r0, 0x423, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3a}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5c}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004010}, 0x8000004) 3m31.951829214s ago: executing program 4 (id=6007): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000003900)={'gre0\x00', 0x0, 0x8000, 0x700, 0x8, 0x7, {{0x28, 0x4, 0x2, 0x27, 0xa0, 0x67, 0x0, 0x5, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x18}, {[@rr={0x7, 0xf, 0xd1, [@empty, @rand_addr=0x64010104, @private=0xa010100]}, @timestamp_addr={0x44, 0x4c, 0x36, 0x1, 0xc, [{@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x15}}, {@loopback, 0x37}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x6}, {@remote, 0x10001}, {@loopback, 0xdc}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010101, 0x6}, {@local, 0x8}]}, @ssrr={0x89, 0x27, 0x2d, [@empty, @loopback, @loopback, @loopback, @remote, @multicast2, @multicast1, @broadcast, @local]}, @cipso={0x86, 0x6, 0x1}, @end]}}}}}) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000800)={0xa, 0x0, 0x0, @local}, &(0x7f0000000840)=0x1c) sendmsg$inet6(r4, &(0x7f0000003c40)={&(0x7f0000000880)={0xa, 0x4e23, 0x9, @loopback, 0xc}, 0x1c, &(0x7f0000003c00)=[{&(0x7f00000039c0)="bdbc23841d15899564ff8618f883b952", 0x10}, {&(0x7f0000003a00)="2e5d257ddca412852e3b4a22497cba08fa56e6293344da66d3970d4787a14df4e80a0fa9da0eba02cfd3a5fe6fd87223f50909a291e37c3e009930b358", 0x3d}, {&(0x7f0000003a40)="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", 0xfa}, {&(0x7f0000003b40)="50e0ca7ef57a984ae7d52b7549d4a155cd5ba38bd0423de1947e6620ab88fc4034fa7418602447c071ca9f17d127b17a042cbf361b60f8c0fa38373414911e5b5d42f8f0860aaef4ee03f74dfae3ed806b931a33684b97b4fc91325d63a26ce3db1f2da3b254e2530870aa4736cf9803608108418f1c4fe4712e761b356e50d8cb2edc4fb619fa879c2cf68b178427f8ecdce87b185a3d0dda65e0147e06085759100c8435d06ecd6537377292d3bc6333dc079d981d96a51764", 0xba}], 0x4}, 0x1000) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000b40)={@remote, 0x0}, &(0x7f0000000b80)=0x14) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e80)={'veth1_to_bridge\x00', 0x0}) (rerun: 64) sendmmsg$inet(r1, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="5808f0dae9829ad5ba", 0x9}, {&(0x7f0000000200)="603062957791a7b176596a2f88655071c4c575470808d8997998f569b1bb2f9fda6291562a2695de540af44da4f61a6fc6b987334112396f11ef546f3e644743eb912190a10e15c64cd1d9f769ad0069ac29b91dea882c16a2f653ec2e336abfcd8a2bfe93a5fceb7cfb2907e90e79", 0x6f}, {&(0x7f0000000280)="e891685e936601f4072561bfaf223b1c61e14ce876cb020973349a1ea1bbd227d61c5bb0ef05f5fded1463fe17301f391bc3d1e21eec5b2ac780d5207367c545cfbeebb405255630f5f1785478aac89e", 0x50}, {&(0x7f0000000300)="ddc5531afa999bfe493567b5a4f3e7745aada38356424540c229984346669dad5c91f6d1c7d42e9dbbb0bebfe7681638705051094dd83d41c57745d7ca9e61615785cbbea1963f4947b79e1624c479c57bf451ac3113debe5c12ade142e113f8a42baa8c5b55943f374e727b70f54ad25576a3189a6a2278fbc40d72360d68a1fd00f9bce1c78f39", 0x88}, {&(0x7f00000003c0)="e3e8a6d9692b1327d31768430ce399f7717b26c59d26ce9e5b7d3f38f07a78b5ef49159e4319f98e738d9ba6e6a6b97baf68419e017a378bd5dbfa58d9b84c7d88548c04955835a53364cb7343523d9f545e6d497230a2604f66e776e92ba6e9e01db7e74476394948be65bed4750159b52823ea677c661709f1c29701ff712d1e02be202107481224a7cd008d359297494b", 0x92}, {&(0x7f0000000480)="ca3da694f3769fca000c5dfbb86e5ad397496fad4e6e241dae2f34b21b76bb6b25f31d761c88c2cbcf74947ba4f7314de13932ee5df24380d8bab73464cf0f8f2f4ff0915e0ac3a32c7e118b1f27d94e3007daa34999bbb614da3e3828f3052fb98cd3eb85dc67a6bf6bd1d9f040667191d7e97b57b781c39b7d6ec3467e1e6a10dc89813d47f0a85d555ebce6c32ecd75bf473651e7f1f31f1a5317819f40c4d8f84d9968db409d00157f35379c83b13be9497a294b38bd21fc380fa9e42d13aa1f82770c5c352144bceac80e7b58d29f474556a35216a953eb73740b1c4a8d4161b54471c64fcc4d6fd9a99eb98c49fbe2680c1117", 0xf6}, {&(0x7f0000000580)="22ac4980e40b0998d24a1c98dc681f2ef165bf1f67a1f0e6cf33a48207d99de2312c96177b403cf283a49974cf43459015f47a81d96170714a4a4e6b0e011743793d33d3df7f0e1235542c87f8f18cb540705c284c43693dd3d347d4a44a86ccc4c257f2bdd535e026d9a17878367666d39925a13f2c767f0a9521c3c21e2c1d05429c7752a2bdf65d958b129601c97b3a949288bf439a5f6289bb941c054dbb0b36a09ef9bbd3f9204ba38be5262941", 0xb0}, {&(0x7f0000000640)="0dcb72963a7c10e7038a533c610e88b642a03d81b134a62a42b98446cbb3e021b5824e5926d2f29adf4f6819ba3b2d65efd3187ea03ea2c396dc42912208dabc8aa95f6486d0d543e018acf586c91f41eb3cba078086b7440669f1dca22eaa00d68479643f3d05aee70b20ba5dcd45c32d69dad193461f998cf8f00543cb114a4dffc0b7763bcb63ff33a3b947e9cb1c9e6b40ded788533b10020f018871973ff2f4018656255afcfa8885271f4d89bba368430ea6e467c6bd746e4a932ac07ac64c91", 0xc3}], 0x8, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_retopts={{0xc8, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0xe3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x31}, @local]}, @cipso={0x86, 0x50, 0x1, [{0x1, 0x6, "f48f9745"}, {0x2, 0x3, "12"}, {0x6, 0x9, "6cfde3897b36b7"}, {0x6, 0x11, "ebcf5fcb9966072cee26c393e38df8"}, {0x5, 0x7, "4dc1bf6be7"}, {0x2, 0xe, "970de4f19aaf8a8b00d8d1b0"}, {0x0, 0x12, "27ce60a8b56cbb6dc8725e17bc94bc41"}]}, @noop, @noop, @noop, @timestamp_addr={0x44, 0x44, 0x8e, 0x1, 0x0, [{@loopback, 0x8c}, {@multicast1, 0x3ff}, {@local, 0xfffffff7}, {@remote, 0x7}, {@loopback, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x6}, {@loopback}, {@broadcast, 0xfffffffe}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}], 0x118}}, {{&(0x7f0000000a00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000a40)="561b8e090ed6b6beffbfbb87e87b9b0d290fc5b7b371cedba4a4f0effdefd0ac2643fe1fd748c8980cd813484f5c71970119a4b032ff89b4a770ad83563dfa5a71b7b708ebd5a4092d78e6dc85d9a457649c935142c9a835f318b76adab2e6d03a0198d362076b1d5d3078e1a419aabc102bc9532e973555579eb5a7303f0d18ea8168fb810f55d0cc6d721fc747740cb392bffff04022fa82b71d02", 0x9c}], 0x1, &(0x7f0000000bc0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c40)="40ee948622fec25a12daf656ead72d211b9534c2e5ff8b7059462b5c944d18b087c04e792fc60dc15fb684038d0d5bab6fa763b8d62b3ff8b1377b8c374aa22f8cdd260a9ce3395542314891d05bfd1543d54662f1ad1a0520b20525af86264ed37758b29281f89751ed4f4bd631788efef25f28f951612fd4d9bbc951feb199df3f97c4d1a604a32a8650b83619e6ec9a75be1dd7aa854ccd14fb76d704ba60", 0xa0}, {&(0x7f0000000d00)="c19b14367e34401e9a0f78a6f10f1fbd7ee380e3ae2e3a05761b50382bfcd4ca9d313ae7495b6371479df11b03d94d500f1637629f27b994108fa4f83dc67d35115453da31f325830e0a4aba30c5ba956195cd4e2d88196b81861f739a4f9ff4ddb3c6a1a9f301e02240e548fa985bde34b1b8f306f52660e81da4d321f84ff2f3b95b5c20d2cc7d12fd39fb9ed7dfc52931ea6341608eea", 0x98}, {&(0x7f0000000dc0)="81257235a4758ac49ba04d877c024780ad21d61d0f5bcc1567d524864245809d928eb2e137833950fc440419d00ba70cce6160d28d442291f40d7a108aa667653b8765b4b05ee7b4d94aab6fe7e4d917b5650bae1a3b69c2", 0x58}], 0x3, &(0x7f0000000ec0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x25}}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0xd7, 0x3, 0x4, [{@local, 0x3}]}, @end, @end, @cipso={0x86, 0x15, 0x2, [{0x0, 0xf, "4836c47e0a446aae3f8f1906b8"}]}, @lsrr={0x83, 0x1b, 0xa4, [@private=0xa010102, @multicast2, @rand_addr=0x64010102, @broadcast, @loopback, @empty]}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x108, 0x0, 0x7, {[@noop, @generic={0x94, 0xd, "f2fce4a046276f8d4cc90d"}, @rr={0x7, 0x23, 0x6b, [@private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty, @multicast2, @multicast2, @local]}, @lsrr={0x83, 0x17, 0x67, [@empty, @local, @multicast2, @empty, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0x8f, 0x3, 0x6, [{@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast2}, {@private=0xa010100, 0x2fb}, {@broadcast, 0x1}]}, @cipso={0x86, 0x2d, 0x0, [{0x7, 0xf, "947ac5007810f01388ae645b83"}, {0x5, 0x4, "c12b"}, {0x6, 0x9, "ca557e8425dc22"}, {0x1, 0xb, "e268c54882ba8b69db"}]}, @cipso={0x86, 0x4e, 0x2, [{0x1, 0x2}, {0x7, 0x11, "1bb4494da9f5b990fb6cbd6da1e688"}, {0x2, 0xc, "fc996ee2b2b71a507b72"}, {0x2, 0x7, "10cbb27d1a"}, {0x2, 0xa, "e7cc4935b05c5fd1"}, {0x1, 0x8, "0c984aec1ece"}, {0x5, 0xc, "3c106ccec5b68cd7005b"}, {0x6, 0x4, "a5e9"}]}, @ssrr={0x89, 0x7, 0x32, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x180}}, {{&(0x7f0000001040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001180)=[{&(0x7f0000001080)="b7fd16da5c79dfe594210742739f535e9535e7d97ca76f71b3e2ae49637035e884e0d33ef74c25c7fa12fe2944a0dc9d1d5f528d86cc86783c5f75200ca06588fd5dccfdff507454f42d58b90c6852182b5af2fdf7acb5385bf904b2e1d6fc51bb333584c3d714a2a4a12a2875fa1e2a5330d5c7d39efbbc1eca7bc4f69ffdee57c20194572c4b9a8525c7b1d9ca5ee31ab283acf0b63872445ee520ed1566c92a0884e690383f1b3fede1e585ef13c765c04163c6b4573f1666b89f7d5b9d08f210b4e4f0ec78d8e546f946584247", 0xcf}], 0x1}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000011c0)="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", 0x1000}], 0x1}}, {{&(0x7f0000002200)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000003700)=[{&(0x7f0000002240)="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", 0xfb}, {&(0x7f0000002340)="bfb1f1be4073e2747c7a35bf3a619b8f004afabfa0ad63793e0e1b219921a83425bd9f59dd865dba", 0x28}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="9098f746bb046fb39e2687bf0b5d96719b45b03b2bb90e1fa36184945a86d5d33f2d0638a9a64a5e9e6123a2b1471ebaed6a2e2e436b045a41f109972d47575e6d01e6b70d9c16362fa4d7cefc59136df795849c312d91747a4629171ba7e224639d002316360e4cc1aa53c0c7df90953fe17bd2265623af235319e79bfda3fc49c286c6a11550ebd1f61213e5592f79cf9609dc1545a840c2b0d59df2ef48b241", 0xa1}, {&(0x7f0000003440)="ac882f9459f10899624690e47ba75b2bba151ef67d6375df842c87ed750983c2ea6ffb72a6e3", 0x26}, {&(0x7f0000003480)="1821bc7729ad0fdcb4b69d8a5cac0ae30d8f274a9a4c41e96bb62f605a1accac3ca2275e9446114333b21726e643ab8cc82db46543f13fcdc4d699fa066c15db4cb413a4ac3507e8ff7ef3abcd98ff4011bc4ae478e08babb9103b799f56c2b7f8bd17ba", 0x64}, {&(0x7f0000003500)="09e88fa3ffc578b40b77b3c00f266caaa7ea4c3b365dfccf3bd994cb7a171cdfc99f13db6f2fc4b07ff4febd946e137201427cc5bb8923d5573126484c7017fb0fc7cbfe95385ad5248d3c23b7204477c49d57e0f7b4d5433b9c08ec96ca743af378a68568ba86c029694067c51fafdac5e6842a66903a4acc12e59e707d5f2c504483d77b2c311287fcc1228824444d513e520ae7b72ecd077b3350e094da2c34bb1e5d3c7db3363c661028f3d0272b36624fa6c211382bb20df422decc0a80ba5e6e79712d2ea2d18baaddae8230829d69ed16bb0da0f53c7c16a53a43e99eb3", 0xe1}, {&(0x7f0000003600)="3c44890b877066cdf7d50e7056b6aa2d103f9cc2381a760fbc35f8c6b07b60e1eb32b7559d8b542cbec2962712dd325c16fed4cb4eec545fe3670a0ecf0615f39231a2a4f39f7a2564715dd7e33952b202f6efd00e16669a0345aa3f2c0f622027401e7e5b2c05667653a8c0a159266a5fb9da0c1c43472a8ee64e88e3c9f799d2014c028b92fb75ed7c8281d609afd5293f8882193cd637fd4abbe008575aff718fa755f2af37483b71a175625f904581ceedf8f11792010404f66ba375ee755e009fc9cbab777d12", 0xc9}], 0x8}}], 0x6, 0x40800) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async) recvfrom(r2, 0x0, 0xfffffffffffffec0, 0xc0cd71bb9e81bf29, 0x0, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='X', 0x1}], 0x1) recvfrom$unix(r0, 0x0, 0x0, 0x40002122, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00012dbd7000fddbdf250b2000000c19060001000000e80000000c0006f86060d46307331d00"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 3m31.650648346s ago: executing program 4 (id=6008): sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="e801e21ec6fa8d63c9c1d9160dd4dd4d3584fe6c1cf509872a83ce6bb10d4d4edd03d100356100f7bbe985f5d93973b05803ae3204c6b943717a5b7c98ea97fa38b6533cc1d87ecccf462490214170d0f99675ecbf1c2520e9c393d071d751ccd0", @ANYRES16=0x0, @ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x40008c1}, 0x4000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="200000001800dd8d000000000000000002000000000000060029000025000880"], 0x20}}, 0x8c0) ioctl$FITHAW(r0, 0xc0045878) 3m31.422906429s ago: executing program 4 (id=6011): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x36204400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x240080d5}, 0x0) 3m31.252240945s ago: executing program 4 (id=6014): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000100)='reno\x00', 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0x80000001, 0xa, 0x4, 0xc0, 0x0, 0x7, 0xfb, 0x6f, 0xfd, [0x3, 0x1, 0x4, 0xaaa3, 0x8, 0xc, 0x9, 0x100000], [0x0, 0x101, 0x0, 0x9]}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r1}, 0x20) socket$packet(0x11, 0x3, 0x300) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m54.952254126s ago: executing program 32 (id=6014): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000100)='reno\x00', 0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x1}, 0x28) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0x80000001, 0xa, 0x4, 0xc0, 0x0, 0x7, 0xfb, 0x6f, 0xfd, [0x3, 0x1, 0x4, 0xaaa3, 0x8, 0xc, 0x9, 0x100000], [0x0, 0x101, 0x0, 0x9]}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000bc0), &(0x7f0000000c00)=@udp6=r1}, 0x20) socket$packet(0x11, 0x3, 0x300) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m48.048275334s ago: executing program 1 (id=6097): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000040)={0x4, 0x48ea}) socketpair(0xb, 0x6, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f00000000c0)=@bcast) r3 = socket(0x2b, 0x2, 0x400) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000100)=@generic={0x1, 0x2, 0x200}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000140)={r4, 0x9, 0xafd, "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"}) ioctl$XFS_IOC_FSGEOMETRY(r2, 0x8100587e, &(0x7f0000001180)) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000001280)={'nat\x00', 0x2c, "739c8d3ffa17be16907b9d0d8ac02eca6c55a9fbbc6cef15c0071d7ce22f368be03d54787a1d7c8a285476f5"}, &(0x7f0000001300)=0x50) r5 = accept$inet6(r2, &(0x7f0000001340)={0xa, 0x0, 0x0, @private0}, &(0x7f0000001380)=0x1c) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000013c0)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000001400), &(0x7f0000001440)=0x14) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000001480), 0x10) ioctl$SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f00000014c0)={'netdevsim0\x00', 0x600}) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000001500)) mkdirat$cgroup(r4, &(0x7f0000001540)='syz1\x00', 0x1ff) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001580)={0x0, 0x9}, &(0x7f00000015c0)=0x8) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001640), r2) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000001740)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x5c, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x5e}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004805) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r5, 0x8010671f, &(0x7f0000001880)={&(0x7f0000001780)=""/213, 0xd5}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000018c0)={@loopback, @rand_addr, 0x0}, &(0x7f0000001900)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000019c0)={'ip6_vti0\x00', &(0x7f0000001940)={'syztnl0\x00', r8, 0x29, 0x5, 0x7, 0x6, 0x2f, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x7800, 0x1, 0x4, 0x4}}) ioctl$OCFS2_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001a00)={0x0, 0x2, 0x4, 0xf, 0x18c6, 0x1}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001a80)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xf8, 0xffffffff, 0xffffffff, 0xf8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000001a40), {[{{@ip={@multicast1, @rand_addr=0x64010100, 0xffffffff, 0xff, 'veth1_to_bridge\x00', 'dummy0\x00', {0x8f2e532413c45429}, {0xff}, 0x88, 0x0, 0xd1}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x14}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0x0, 0xff, 0xffffffff, 0xffffff00], 0x4e21, 0x4e23, 0x4e21, 0x4e22, 0x3, 0x2, 0xab, 0x2, 0x3}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x3, 0xb, 0x2, 0x5, 0x1], 0x0, 0x3}, {0x4, [0x7, 0x6, 0x4, 0x1, 0x6, 0x1], 0x2, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000001d80)={0x0, 0x100000001, [0x100000001, 0x40, 0x1, 0x3, 0x81, 0x7f2143f8]}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001e40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x58, r9, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) 2m47.897588771s ago: executing program 1 (id=6100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x387901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x4e22, 0x3, 'rr\x00', 0x28, 0x5, 0x72}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@local, 0x0, 0x0, 0x1}, &(0x7f00000004c0)=0x20) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa0100fe, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x6, @loopback}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x20000000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r9 = socket(0x11, 0x5, 0x8000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 2m40.19972658s ago: executing program 1 (id=6124): socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6622b533, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0xa}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x140201020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x6, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}}, 0x48001) 2m35.863307122s ago: executing program 1 (id=6162): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000201000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 2m35.731487128s ago: executing program 1 (id=6164): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000040000100fe1af7ffffdbdf25017c34ef2a7ac41215020a80c233786e"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000040000100fe1af7ffffdbdf25017c34ef2a7ac41215020a80c233786e"], 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc840) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) (async) 2m35.553311173s ago: executing program 1 (id=6166): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x2, 0x2, {0x0, 0x0, 0x4, 0x0, 0x4300, 0x1000000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xf}]}}}]}, 0x40}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x24028044) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x2, 0x2, {0x0, 0x0, 0x4, 0x0, 0x4300, 0x1000000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xf}]}}}]}, 0x40}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x24028044) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf], 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf], 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x25dfdbfe, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="0000800000000000180034800500"], 0x38}, 0x1, 0x300}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) shutdown(r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000480)={{r0, &(0x7f00000001c0)='\x00', 0x200000, &(0x7f00000002c0)={@_ha_fsid={[0x1, 0x2]}, {0x2, 0x4, 0x5, 0x80}}, 0xce8, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x6}, {[0x401, 0x8, 0x7fffffff, 0x6]}, 0x3e, 0xb0, &(0x7f0000000380)=""/176}) bind$l2tp6(r6, &(0x7f0000000500)={0xa, 0x0, 0x8, @local, 0x6, 0x1}, 0x20) listen(r5, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) r7 = epoll_create1(0x0) r8 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1a000, r8, &(0x7f0000000000)={0x10000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1a000, r8, &(0x7f0000000000)={0x10000000}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1410, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1410, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) 2m20.496580524s ago: executing program 33 (id=6166): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x2, 0x2, {0x0, 0x0, 0x4, 0x0, 0x4300, 0x1000000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xf}]}}}]}, 0x40}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x24028044) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x403, 0x2, 0x2, {0x0, 0x0, 0x4, 0x0, 0x4300, 0x1000000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xf}]}}}]}, 0x40}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x24028044) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf], 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x12, &(0x7f0000000200)=@raw=[@func, @func, @func, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func, @snprintf], 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x25dfdbfe, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="0000800000000000180034800500"], 0x38}, 0x1, 0x300}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) shutdown(r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000480)={{r0, &(0x7f00000001c0)='\x00', 0x200000, &(0x7f00000002c0)={@_ha_fsid={[0x1, 0x2]}, {0x2, 0x4, 0x5, 0x80}}, 0xce8, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x6}, {[0x401, 0x8, 0x7fffffff, 0x6]}, 0x3e, 0xb0, &(0x7f0000000380)=""/176}) bind$l2tp6(r6, &(0x7f0000000500)={0xa, 0x0, 0x8, @local, 0x6, 0x1}, 0x20) listen(r5, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) (async) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) r7 = epoll_create1(0x0) r8 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1a000, r8, &(0x7f0000000000)={0x10000000}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1a000, r8, &(0x7f0000000000)={0x10000000}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1410, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1410, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x800) 40.884708166s ago: executing program 5 (id=6892): pipe(&(0x7f0000000000)) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000007340)={0x2a, 0xffffffffffffffff, 0x2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (rerun: 64) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r3, r4, 0x0, 0xffffffff000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f0000000600)={0x0, 0xfffffffffffffffa, 0x24f, 0x1}) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, 0x0) (async) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfc}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc006}, 0x0) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r4, 0x0, 0x1) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="e2c0b49a9bff657fdf8eda8d56f75f0ac85f79ae5484ada6f645bf36e263a0bdf5f4934cf7f40a3d6af1c106b19fd9e4f2a8ed6cc6c4291ac6b5ac6dae02c6f08c7c039d35a52ce95a999998e161e25f701486eebd38c8973cd633b8265914131cb429de5ebb414d3b9726a3d7f91e0fd5200577b903dd5f716ed12a8b469ada3d6ec45a243eac425820e838207fdc4cb47e6553e03a32213a9dd34fdd6a3dc5bbf40917b7e9b25a86c2d65d70b756965a31", 0xb2}], 0x1, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe434}}], 0x18}}, {{&(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000300)="6c89902c2e0bf39cbb2ef4d2a77956436894fadce816eddacafc4e6be3341ab625e85fa7ab6476757324a8fb3237b5104d573b66d56a930d52613b146b3d379d3e1d5ba555e233dba47fe203f164c9c7cc89828596879cffbaf7c46f32b3b0dd63b9366ecc7cd590f1714d2518bdf8ab8665a89b1d1c7d65210448d12906df3a0f6dd7270713dcc66f42e28ea1130500be6f23e01891162a0f", 0x99}, {&(0x7f00000003c0)="08ac6f9425822fb63d3f46ee523eeddd8597f8580362630757f50e8cf86f7f720f51f2e6240c229a1825e9f23f46f18d2e2ae1523d5b7ab95edd64b2dca91944fb1ef168a26799afd150d7ab617f0348aa5eed180753898a088556797e7dd62909", 0x61}, {&(0x7f0000000540)="e9d850072b3469ac42fd2e393703e654959b47b9b974894e741e4fe156bf67ac9c5dad03404efd3ea2f2b030a5b9caf6437e853557e2a529d6893148a1059dacff4eab56b7984dcde0f5990c2938395ba091bd0587a368f15dddac3bb548e7a3cffe2bf49749695db35493c3d5b2923eb7f00f2dcdd645340a9fc5", 0x7b}, {&(0x7f00000005c0)="b33e6abd480b3cdb1271f96dfc3cdc6770d1fc151f7601ec0585b3dc08a7b7bbd9baad2c1e26a7091e932eac7b5f8ef107092dbd6490999daf5b7541fb26a61dd4cf8cbb89bd1b6a12c2b5d6cd3ab45c8d890cc7e31bb827fb09f7b600f46b8e9b502368e6c053381bd37637cd57f13e761150da87188c1e055510b55f3d7acb998beb5630f4c7ce414a839635c0db640aac514648085ec18e9b22b22f2b125ebfdc2d4328a6a3d264fa78b2e451676c1bba31f3f6536046498d61884575", 0xbe}, {&(0x7f0000000680)="a5b26061bd0c7509f906008a341e6602cd33bf1164ecd3e383bf327390c23ed2a5e430bdec107b3f231f52b053b40c8c5038c9da140a8423345902bf77f8ef68b8261797bb91434cb859b39bf80988ce0195a5231d76d0e864d33482677a1404aeee57bb745934c7a90596e0fa0b8083a6442fb1b4ad4308d88af21cae133fcf6bc2632b300d6e2da1ccc26614e39fc85b343557a6d999d033c7fda7f74093979cf7e4efeb2e95ee6b4cda45a108708e59c04749ff5269632a193099d60460d29c947f91c558d20d5794fe93e5d573249ced4f5d88e9", 0xd6}], 0x5}}, {{&(0x7f0000000840)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000880)="802681ee6cab94a89267402bea77609acab3426e3307121bb828ade5cd1a6207c3c62709326530c3e5ab36ac4cef9e376d22418afb3cfda734ce5041fcdab5c49dc9596d41aca0b36fa440ac5d4217c1252487b1d196", 0x56}], 0x1, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x14}}], 0x80}}], 0x3, 0x20004000) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (rerun: 32) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200ff05140100140e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x79}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 40.691009908s ago: executing program 5 (id=6898): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfa, 0x2ffffffff}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x60}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xd, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86", 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x24040000) close(r7) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) setsockopt$MRT_ADD_MFC(r11, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @loopback, 0xffffffffffffffff, "e28b2166fc79c686e8aa1d860d6332e0d71b6b969bb6c540c0cfb7ae4b6726ed", 0x2, 0x8f, 0x1, 0x81}, 0x3c) 2.430902572s ago: executing program 2 (id=6901): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x38, r2, 0x731, 0x0, 0x0, {0x38}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x38}, 0x1, 0x2, 0x0, 0x40000d0}, 0x4010) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001e0001002bbd7000fedbdf25ffffffff000000000000000000000000000004d302001c3300000000000000000000000000000001000200000035000008000c000300be7d7808b01bd2a8e44a3213f197b3a6642957628194bcf0429f5b7d41d45a8ed1dc83654be0aeabbf8c3b2e22da21808a29f4941ce75b2f55902d17a0349ef14bc2bf2bdfc99ed38d3c6b1384d2e1"], 0x48}}, 0x4050) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 2.425071897s ago: executing program 2 (id=6905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88800, 0x0) readv(r1, &(0x7f0000002640)=[{&(0x7f00000014c0)=""/160, 0xa0}, {0x0}], 0x2) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xf0000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) unshare(0x6020400) (async) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$netlink(0x10, 0x3, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xfffffffc) (async) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, &(0x7f0000000040)=0x3, 0x4) (async) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0xc) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, 0x140f, 0x1, 0x70bd23, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) (async) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) close(0x4) 2.423740245s ago: executing program 2 (id=6907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xa, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4, 0x1], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0x1cc32a6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x5, 0xe, 0x0, &(0x7f0000000080)="0000000000040000000002015370", 0x0, 0xff, 0x0, 0xfffffd0a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) 2.417873308s ago: executing program 2 (id=6912): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x61e0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101}}}], 0x20}, 0x400c804) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r3) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) recvmsg$can_bcm(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/225, 0xe1}, {&(0x7f0000001a80)=""/114, 0x72}, {&(0x7f0000001b00)=""/197, 0xc5}], 0x5, &(0x7f0000001c80)=""/38, 0x26}, 0x40002020) close(r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) connect$unix(r4, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000000600008500000019000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) r8 = socket$nl_route(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 2.417267656s ago: executing program 5 (id=6914): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.329201631s ago: executing program 6 (id=6915): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async) unshare(0x62040400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400420008001d001b31a0e69ee517d34460bc0600e8ea2c0000a705251e6182949a3651f60a84c9f4d4938000e70e4509c5bb937762376e5eb58a72", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) (async) close(r0) (async) socket(0x2b, 0x80801, 0x1) (async, rerun: 32) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async, rerun: 32) listen(r1, 0xfffffffc) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000006ab1c0c8007e00e0ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000280), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0xa4}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x194) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) 2.26752404s ago: executing program 5 (id=6916): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}, 0x1, 0x0, 0x0, 0x4004454}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.267143166s ago: executing program 3 (id=6917): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f80)) sendmmsg$sock(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)="d42d921e2450f4f57ee0c0afde90b94ba486fcd50c36eb2d6ff54b520914ac6b049813054fe16ed49b1c555750c05df9127744fbe286644d69027aa8d804de16f6b9dfabe63ec75a1e783cd7eb973f185b8b4fd89a9122b597b534be516f66119da6640137b34a7cc9499eb0b8c2bdd5edc97fd3c6e272b93d1f44a2dfb6ce89af085575a728bb5bf4f582a0f1ccd3c74ada9ddb6ae7617e65c1c73e3cafdb91ac3b38de618af9442344fb76e84d7168e07da14129cadd7643b589931ab0dee2472e89dd54e627b2764762", 0xcb}, {&(0x7f0000000900)="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", 0xff}], 0x2, &(0x7f0000000a40)=[@txtime={{0x18, 0x1, 0x3d, 0x6083cca50000}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x30}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b00)="08841fe88c1ce1991ba8cf", 0xb}, {&(0x7f0000000b40)="10c445cb5a0d238abecc48e61df78fd8859b68b449b5a7d6c3ee69ef6963cac4963a67ad02427fd8952302d48fd049e2daeedd61f24f09118152fb74c8b581c052f703805da9a2e4f83b426ac523bf7367c9f6e7da255b3f0e084beacaa566864ac808da05c247e489373cff705fdb0be736f7130d2c465aa6af7f45ee92607c83ff0a9af4a653c3f6300b716dd4882233547f0eda53d3327f31c3d9ee32a1bdf3fa588f712949a13afdcd572316e3a3e09506692def99f5d7cb6fd31e03fa36cf429981f086f80a76f4c5cec89bdfe1cbeac68eb0e9d75b32893114fcb08d67d1d15760c6d701740b96338ae1cc4acc2a513770060048", 0xf7}, {&(0x7f0000000c40)="996be345f432376b2e4c7f95d1da8e4a7a9949116d74d48607fb55ee27d468a1137770fb4b75003711af17f7a1a625a750530853e449e96379dcbb4b4f893464d28d2869d57c379710f89286eddd496b2aa80eab607273d9a6404fff6e7e708ba0424b1aa54c65f79b54b4eb90ded8226ad24d210564973d9ea248b486cccdf435573a323f4c5e787337255fd6eb3c150bc372469213d7a6711754d53b78d609c33faad0dc6d99", 0xa7}, {&(0x7f0000000d00)="65e55c10a93c694b1a248975", 0xc}, {&(0x7f0000000d40)="6bf9c5fa3538b3715626f813ec2bfe56e1a773eadd6f84a6fce4b91824a64ee1e784f21f2f03701d9e73646ae5f6d74a7189dd8af3285298b8cf7adc2ea0e906", 0x40}], 0x5}}, {{&(0x7f0000000e00)=@can, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="de4a68b88c71029c2d619b2e66cbba026fbc048cc74ff0b1949342b1486b9dfd43f24ef3fa52265674474e5daf11c1d96b7b48bfbf2f718fd4eb41", 0x3b}], 0x1, &(0x7f0000000f00)=[@mark={{0x14, 0x1, 0x24, 0x65}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x78}}], 0x3, 0x24040888) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @tipc={{0x12, 0x4, 0x0, 0x1f, 0x74, 0x67, 0x0, 0x8, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010100, {[@end, @noop, @noop, @lsrr={0x83, 0x17, 0x80, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @local, @private=0xa010100]}, @timestamp={0x44, 0x18, 0x52, 0x0, 0xe, [0xda6, 0x8, 0x0, 0x3324, 0x9]}, @end]}}, @payload_named={{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x2, 0x60d5, 0x0, 0x1, 0x7, 0x3, 0x2, 0x6, 0x7fff, 0x0, 0x4e23, 0x4e20}, 0x2, 0x3}, 0x1, 0x1}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) 2.020306494s ago: executing program 6 (id=6919): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000600db0000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='memory.current\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000049000000490000000b0000000500000000000002020400000d00000000000012010000000b0000000000000b040000000e0000000000000700000000060000000100000f010000000100000000000000010000002d0000000061002e2e3000307f2e00"], &(0x7f00000004c0)=""/139, 0x6f, 0x8b, 0x1, 0x7fff, 0x10000, @value=r1}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) splice(r3, 0x0, r6, 0x0, 0x8000000000025a5, 0x0) shutdown(r5, 0x0) close(0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000100)="146d7d1fe23f2a38ae8e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8905, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r4, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pS \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="190000000400000004000000020000000000000060bfaba4f5768ff05e74d1ccd8e30b62d9fe8154b153a10214b74e7a379a02f894bf1b04397e7b160ce7a0c1c308ae31a70effc6941600f245be07ccb725ca5921dc98b6b6e09be42df964ea8fd12fbcfd2a407d9c4c5cccf8036f8bdd7be6b6639b990d9eb100"/132, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r10, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000cc0)={{r6, &(0x7f0000000980)=']%\x00', 0x100, &(0x7f00000009c0)={@align=0x7fff, {0x9000, 0x1, 0x6, 0x2}}, 0x9e, &(0x7f0000000a00), &(0x7f0000000a40)=0x200}, 0x2, &(0x7f0000000c80)=[{0x1, 0xf39b, &(0x7f0000000a80)='memory.current\x00', &(0x7f0000000ac0)="ff5984c2d10028a33c2137d687e22401c4d5af7b8199a4e41426499b394a5810dfbb6a7d1f2f7313021b75487b554fb1217213129a14fd2b2777a0739e297532f45f20", 0x43, 0x20}, {0x1, 0x101, &(0x7f0000000b40)='erspan0\x00', &(0x7f0000000b80)="b313a0bfb05f495b2077a7ffe7814392971879dca227d36af8e26f3c3acdaf08d2a36d598b31005e3bbc636564f3015913c960c900cb0ca27745abe4b6d8384318934c387f39dc297898c7c2507b74fb7444519bda0b84337a484aded28f41da1eb0e318a6a7dc44c46568b98a1a69a96a1fad3e59e30111820a544701e626db7d1f7d0917ecbb3dc7fcce35d06ebb729db0c1debc54b6723d3cff216feb1a52a3673b96aa89541147483b385eafb2304b6640bbdd3ce96de6e9f33e466d119478", 0xc1, 0x10}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x19, 0xf, &(0x7f0000000640)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xab}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x2}, @ldst={0x0, 0x0, 0x6, 0x9, 0x5, 0x18, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}], &(0x7f00000006c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, r4, 0x8, &(0x7f00000007c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xa, 0x5, 0x6}, 0x10, 0xffffffffffffffff, r1, 0x8, &(0x7f0000000d40)=[r4, r4, 0xffffffffffffffff, r4, r2, r9, r3, r10, r4, r11], &(0x7f0000000d80)=[{0x5, 0x4, 0xd, 0x2}, {0x1, 0x1, 0x1, 0x63afdd3390ca17a}, {0x4, 0x3, 0x8, 0x1}, {0x2, 0x2, 0x4, 0x6}, {0x1, 0x4, 0xf, 0xa}, {0x2, 0x5, 0x1}, {0x5, 0x1, 0x5}, {0x3, 0x4, 0x5, 0x4}], 0x10, 0xc5f}, 0x94) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3}]}, @int={0x5, 0x0, 0x0, 0x1, 0x5, 0x20}, @enum={0x7}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x61, 0x61, 0x2e, 0x0, 0x5f]}}, 0x0, 0x58}, 0x28) ioctl$sock_ifreq(r0, 0x8937, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_addrs=@ax25={0x3, @null, 0xa}}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000000000008000500070000000226a84a76289aa3272e2e35530b02de4f518024d717860d935e8eae6d5ea616fb39e0b1f6c62c62a3acfab9189d11719e2c3d2bab20bea3133b5a123c4ae245ae860aee3cb7c1d5b612b1d7e6edc89b32d647a3e1468bae8d44341e648340c1b2a3dc22c0e1cd0aad33ed64613a380b142ed287f17d463b800ba15c9a00c1d9ea8ab68553e67ced36c298b69c03a4e2a37a61a3cbb92df403b0f1361b5ccf374012fd24b3ebc52f12a6fd7b"], 0x34}}, 0x0) ioctl$TUNSETTXFILTER(r12, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000400aaaaaaaaaa3faaaaaaaa3ea403a0cef61fb4aaaaaaaaaa04"]) 1.903629199s ago: executing program 0 (id=6920): syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@routing={0x2f, 0x0, 0x0, 0x5}], "13d86558da0a7f6b"}}}}}}}, 0x0) socket$kcm(0x29, 0x7, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff2059249b379086dd600153000064110000000000000000000000000000000000ff020000000000000000000000000001fffe0e220064907802000000000000000200000075462d59cf0d72118137e1d8c01d4641aa2936006171375e0c0d70a00038f8cb85bf05267ec510575a1cdf03bc75bb00850d58622eee20383302f89ac8f594829c32d9c122aabe7075f071ffd6f854a9c51535886ee02e0af9"], 0x0) 1.845835713s ago: executing program 0 (id=6921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000080)={0x34, r1, 0xf03, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x2b}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x2000c814}, 0x2) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000000)=""/98, &(0x7f00000000c0)=0x62) 1.794596473s ago: executing program 5 (id=6922): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x205}], 0x1, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket(0xa, 0x1, 0x0) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008000c11ff20010000040000000000000000000001ff0200000000000000000000000000014f194e20000c9078810800010f834ef90c37"], 0x46) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000240)="fb90c853a7271f692de35b", 0xb}], 0x1, 0x1) close(r6) r7 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0xea, 0x4) splice(r5, 0x0, r6, 0x0, 0xfffd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.685730099s ago: executing program 3 (id=6923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000057c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000005ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="010028bd7000fcdbdf25080000001800048013"], 0x2c}, 0x1, 0x0, 0x0, 0xd0c0}, 0x880) 1.531234802s ago: executing program 0 (id=6924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f00000005c0)={{r1}, "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"}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000026c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '\b'}]}, 0x24}}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f00000000c0), 0x8) listen(r8, 0x3) r9 = epoll_create(0x6) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e22, 0xefb9, @loopback, 0x3}, {0xa, 0x3, 0xffffffff, @mcast2, 0x101}, 0x1, {[0xde06, 0x8, 0x3, 0x9, 0x4, 0x5, 0xd90e, 0x2]}}, 0x5c) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000003c0)={0x3000000c}) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f00000005c0)={{r1}, "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"}) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x8000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000026c0)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '\b'}]}, 0x24}}, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) bind$bt_sco(r8, &(0x7f00000000c0), 0x8) (async) listen(r8, 0x3) (async) epoll_create(0x6) (async) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e22, 0xefb9, @loopback, 0x3}, {0xa, 0x3, 0xffffffff, @mcast2, 0x101}, 0x1, {[0xde06, 0x8, 0x3, 0x9, 0x4, 0x5, 0xd90e, 0x2]}}, 0x5c) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000003c0)={0x3000000c}) (async) close(0x4) (async) 1.449324056s ago: executing program 2 (id=6925): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x0, 0x0, 0x0, 0x4, 0x47, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, 0x1}, 0xc) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000040000090000000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c200000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) 1.31976395s ago: executing program 0 (id=6926): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000008900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xd0ff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.191150014s ago: executing program 0 (id=6927): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.179118408s ago: executing program 3 (id=6928): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808fffffff810c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.055168106s ago: executing program 0 (id=6929): r0 = socket$kcm(0x10, 0x2, 0x4) socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500002c00fe8000000000000000000000000000bbfe800000000000000002"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000098", @ANYRESOCT=r0, @ANYRES64=r1, @ANYRES16=0x0], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40046f01, &(0x7f0000000180)=0x31) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 998.500028ms ago: executing program 5 (id=6930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r2, 0x80186e82, &(0x7f00000007c0)={0x0, 0x0, 0x38, 0x0, 0x10001}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1830000001000000000000000300000018130000", @ANYRES32, @ANYBLOB="00040000f2ff0000950000000000dd00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r3, 0x0, 0x1000, 0x39, &(0x7f0000000800)="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", &(0x7f0000001800)=""/57, 0x10000000, 0x0, 0xcd, 0xa7, &(0x7f0000001840)="68e4ec68d322749db7b59eb9db58b6367606fc1e3a0f645e8f39745dc78668c36a2586da3740b73e2ccc642e87b554ecdaeaac4c7f72b24d52a0e52be77202884c858cc7e8046272b8ecd5850afaad09d0d24c631385b9c6ad17eb5a657c2d05ad3bb1a2e039980af841cd89fce698c01c879f2e255e567e3dedc0e7eecd246fa41cd7f3852b4cb7c48f96e38bffabdc8959f5456253484756af376ef7eab1621a33cc1d9417460986c21606ee54aceac93a72dec1a1e5d14202b5f0146b21d66f2c0f9e9041468af75937ad04", &(0x7f0000001940)="c677a9feb2a273c0f64491579acb3e8695bb8a16acf82f41bb7098ebbd9f5986609a421988c364d761fd67512ee2ef8651679441c03d5546abcd46fc09cd26cae874f4cbf04559830124c7f9c57941cb1fb107f43e36588d58dd82eafd92d0cefba9e6b7567f5355645634f1c4617a289dbafef4e027ef3338699c723b404046f88ca4beeab51c1ddd79fed93a786b407d60fb6b055dc2c406bbae88dd831d5e19e8651bbd6c49", 0x1, 0x0, 0x1}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, 0x0, 0x10000011) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x850) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) close(0x3) 998.091216ms ago: executing program 6 (id=6931): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/170, 0xaa}, {&(0x7f0000001b40)=""/100, 0x64}, {&(0x7f0000001bc0)=""/204, 0xcc}, {&(0x7f0000001cc0)=""/5, 0x5}, {&(0x7f0000001d00)=""/172, 0xac}], 0x6, &(0x7f0000001e40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x2) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000009c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="604de7b85bacc20000907800001e020000a394c92375c225ed3f00f52f7c2c225bdfe918dcc66af2a28e220ff6602230dc69e078fef6cfb41db8c7f4563ff7318b79700dc256649dd93b60820a9e73a6d01aaede4d14f375"], 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newlink={0x2c0, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x48091}, [@IFLA_IFALIAS={0x14, 0x14, 'macvlan0\x00'}, @IFLA_VFINFO_LIST={0x27c, 0x16, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xbd, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8001, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x47}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x381, 0x9}}, @IFLA_VF_RATE={0x10, 0x6, {0x0, 0x0, 0x260c11a2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x1}}]}, {0x54, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x4, @multicast}}, @IFLA_VF_VLAN={0x10, 0x2, {0x1, 0x8d1, 0x4}}, @IFLA_VF_TRUST={0xc, 0x9, {0x3, 0xc89d}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffc01, 0x7ff}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x416, 0x3, 0x8100}}, {0x14, 0x1, {0x1, 0xa10, 0x80, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xde3c, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3ff, 0xb5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0xfffffffe}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x3, 0xe374}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x5}}]}, {0x120, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x400}}, @IFLA_VF_RATE={0x10, 0x6, {0x673ddc12, 0x8, 0x26}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x9, 0x6}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xd7a, 0xf11, 0xa9e, 0x88a8}}, {0x14, 0x1, {0xe, 0x9df, 0x3, 0x8100}}, {0x14, 0x1, {0x7a, 0x66b, 0x9, 0x88a8}}, {0x14, 0x1, {0x3, 0x229, 0x3, 0x88a8}}]}, @IFLA_VF_RATE={0x10, 0x6, {0xffffffff, 0xa36, 0x3}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xfffffffd, 0x85b, 0x5, 0x88a8}}, {0x14, 0x1, {0x9, 0xb06, 0x681, 0x8100}}, {0x14, 0x1, {0x9, 0xd33, 0x2, 0x88a8}}, {0x14, 0x1, {0x4, 0x369, 0x0, 0x88a8}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x4, 0x79}}]}]}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x2c0}, 0x1, 0x600, 0x0, 0x8014}, 0x40040) 997.752442ms ago: executing program 3 (id=6932): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000001100000000000000a00000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000000), &(0x7f0000000140)=r3}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000064f3ffbf7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000064f3ffbf7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="21a0ffff030000e34300128009000100626f6e64"], 0x64}, 0x1, 0x0, 0x0, 0x2004001c}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="21a0ffff030000e34300128009000100626f6e64"], 0x64}, 0x1, 0x0, 0x0, 0x2004001c}, 0x0) 836.298808ms ago: executing program 6 (id=6933): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_INFO(r4, 0x0, 0x481, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000f80)) sendmmsg$sock(r0, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)="d42d921e2450f4f57ee0c0afde90b94ba486fcd50c36eb2d6ff54b520914ac6b049813054fe16ed49b1c555750c05df9127744fbe286644d69027aa8d804de16f6b9dfabe63ec75a1e783cd7eb973f185b8b4fd89a9122b597b534be516f66119da6640137b34a7cc9499eb0b8c2bdd5edc97fd3c6e272b93d1f44a2dfb6ce89af085575a728bb5bf4f582a0f1ccd3c74ada9ddb6ae7617e65c1c73e3cafdb91ac3b38de618af9442344fb76e84d7168e07da14129cadd7643b589931ab0dee2472e89dd54e627b2764762", 0xcb}, {&(0x7f0000000900)="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", 0xff}], 0x2, &(0x7f0000000a40)=[@txtime={{0x18, 0x1, 0x3d, 0x6083cca50000}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x30}}, {{&(0x7f0000000a80)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b00)="08841fe88c1ce1991ba8cf", 0xb}, {&(0x7f0000000b40)="10c445cb5a0d238abecc48e61df78fd8859b68b449b5a7d6c3ee69ef6963cac4963a67ad02427fd8952302d48fd049e2daeedd61f24f09118152fb74c8b581c052f703805da9a2e4f83b426ac523bf7367c9f6e7da255b3f0e084beacaa566864ac808da05c247e489373cff705fdb0be736f7130d2c465aa6af7f45ee92607c83ff0a9af4a653c3f6300b716dd4882233547f0eda53d3327f31c3d9ee32a1bdf3fa588f712949a13afdcd572316e3a3e09506692def99f5d7cb6fd31e03fa36cf429981f086f80a76f4c5cec89bdfe1cbeac68eb0e9d75b32893114fcb08d67d1d15760c6d701740b96338ae1cc4acc2a513770060048", 0xf7}, {&(0x7f0000000c40)="996be345f432376b2e4c7f95d1da8e4a7a9949116d74d48607fb55ee27d468a1137770fb4b75003711af17f7a1a625a750530853e449e96379dcbb4b4f893464d28d2869d57c379710f89286eddd496b2aa80eab607273d9a6404fff6e7e708ba0424b1aa54c65f79b54b4eb90ded8226ad24d210564973d9ea248b486cccdf435573a323f4c5e787337255fd6eb3c150bc372469213d7a6711754d53b78d609c33faad0dc6d99", 0xa7}, {&(0x7f0000000d00)="65e55c10a93c694b1a248975", 0xc}, {&(0x7f0000000d40)="6bf9c5fa3538b3715626f813ec2bfe56e1a773eadd6f84a6fce4b91824a64ee1e784f21f2f03701d9e73646ae5f6d74a7189dd8af3285298b8cf7adc2ea0e906", 0x40}], 0x5}}, {{&(0x7f0000000e00)=@can, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e80)="de4a68b88c71029c2d619b2e66cbba026fbc048cc74ff0b1949342b1486b9dfd43f24ef3fa52265674474e5daf11c1d96b7b48bfbf2f718fd4eb41", 0x3b}], 0x1, &(0x7f0000000f00)=[@mark={{0x14, 0x1, 0x24, 0x65}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x78}}], 0x3, 0x24040888) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @tipc={{0x12, 0x4, 0x0, 0x1f, 0x74, 0x67, 0x0, 0x8, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010100, {[@end, @noop, @noop, @lsrr={0x83, 0x17, 0x80, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @remote, @local, @private=0xa010100]}, @timestamp={0x44, 0x18, 0x52, 0x0, 0xe, [0xda6, 0x8, 0x0, 0x3324, 0x9]}, @end]}}, @payload_named={{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x2, 0x60d5, 0x0, 0x1, 0x7, 0x3, 0x2, 0x6, 0x7fff, 0x0, 0x4e23, 0x4e20}, 0x2, 0x3}, 0x1, 0x1}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r8 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) 351.899828ms ago: executing program 2 (id=6934): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000080)='c', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="480000000000000029000000370000002b0500000000000007280000000308480400030000000000000008000000000000000104000000000000080000000000000004010300000014000000000000002900000043"], 0xb0}}], 0x1, 0x4000801) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0xc41, 0xdf, 0x0, 0x0) pipe(0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06000000"], 0x1c}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) shutdown(r3, 0x1) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x4c, 0x1, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xffffffffffffffff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x4010) getsockopt$bt_hci(r3, 0x84, 0x6c, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) 203.05225ms ago: executing program 3 (id=6935): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x6, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) (async) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) close(r2) (async) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000009000000000000130800000000002fe4840cc84c50295d4662c0cba8851a2062"], 0x0, 0x26, 0x0, 0x1, 0x100, 0x10000, @value=r3}, 0x28) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xd) 201.754268ms ago: executing program 6 (id=6936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x12}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff3, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x94) 83.538016ms ago: executing program 6 (id=6937): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000035c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {0xd, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket(0x14, 0x2, 0x4) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x48, 0x1402, 0x100, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x400461f5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000010000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000000a8a532c45c69015b934872ca31ac9649aa1dd1a12f343f575465bfb019387613203c3b290fc936a2aa5d9de3fb6b0564d8893647911125f3a6f007b622470060f27b77d19121bdd45fe2ac243704078445654ea315c75297737aee3ca02743a8eab6030c0a38cf7478537be04a8fef43c88dc2f24090a06bc51b5fc1ce24f8e50346fd0f54ed173bc24df62e766"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff80}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x27, 0xe, 0x55, &(0x7f00000003c0)="f9ad48cc42cb29fc99d41a08320a", 0x0, 0x13fd, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000080)=r7}, 0x20) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x400) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000afdff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x4040) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) 0s ago: executing program 3 (id=6938): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000d1400042abd7000fedbdf25080003000300000008020000020000000800030004000000e4a0f335e3b858e91c206427aef2042abae75593e5834725a12d9855a31a937901018af66b6659"], 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x4) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x61d8, 0x0) kernel console output (not intermixed with test programs): 86816][T28431] macsec2: entered allmulticast mode [ 853.001236][T28431] bridge8: entered allmulticast mode [ 853.024071][T28431] bridge8: port 1(macsec2) entered blocking state [ 853.042535][T28431] bridge8: port 1(macsec2) entered disabled state [ 853.057620][T28431] bridge8: left allmulticast mode [ 853.063233][T28431] bridge8: left promiscuous mode [ 853.097827][T28432] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 853.381226][T28450] netlink: 'syz.1.5970': attribute type 2 has an invalid length. [ 853.551895][T28456] FAULT_INJECTION: forcing a failure. [ 853.551895][T28456] name failslab, interval 1, probability 0, space 0, times 0 [ 853.625699][T28456] CPU: 0 UID: 0 PID: 28456 Comm: syz.1.5972 Not tainted syzkaller #0 PREEMPT(full) [ 853.625725][T28456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 853.625736][T28456] Call Trace: [ 853.625744][T28456] [ 853.625753][T28456] dump_stack_lvl+0xe8/0x150 [ 853.625783][T28456] should_fail_ex+0x412/0x560 [ 853.625813][T28456] should_failslab+0xa8/0x100 [ 853.625833][T28456] __kmalloc_noprof+0xe8/0x760 [ 853.625858][T28456] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 853.625886][T28456] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 853.625914][T28456] genl_family_rcv_msg_doit+0xd9/0x330 [ 853.625948][T28456] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 853.625975][T28456] ? apparmor_capable+0x126/0x170 [ 853.625995][T28456] ? bpf_lsm_capable+0x9/0x20 [ 853.626014][T28456] ? security_capable+0x7e/0x2c0 [ 853.626042][T28456] genl_rcv_msg+0x61c/0x7a0 [ 853.626067][T28456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 853.626085][T28456] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 853.626123][T28456] netlink_rcv_skb+0x232/0x4b0 [ 853.626147][T28456] ? __pfx_genl_rcv_msg+0x10/0x10 [ 853.626168][T28456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 853.626205][T28456] ? down_read+0x270/0x2e0 [ 853.626226][T28456] ? genl_rcv+0xd/0x40 [ 853.626244][T28456] genl_rcv+0x28/0x40 [ 853.626261][T28456] netlink_unicast+0x75c/0x8e0 [ 853.626294][T28456] netlink_sendmsg+0x813/0xb40 [ 853.626327][T28456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.626356][T28456] ? aa_sock_msg_perm+0xf1/0x1b0 [ 853.626381][T28456] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 853.626410][T28456] ____sys_sendmsg+0x972/0x9f0 [ 853.626436][T28456] ? __might_fault+0xaf/0x130 [ 853.626466][T28456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 853.626500][T28456] ? import_iovec+0x73/0xa0 [ 853.626523][T28456] ___sys_sendmsg+0x2a5/0x360 [ 853.626548][T28456] ? __lock_acquire+0x6b5/0x2cf0 [ 853.626576][T28456] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.626639][T28456] ? __fget_files+0x2a/0x420 [ 853.626659][T28456] ? __fget_files+0x3a0/0x420 [ 853.626690][T28456] __x64_sys_sendmsg+0x1bd/0x2a0 [ 853.626718][T28456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 853.626750][T28456] ? __pfx_ksys_write+0x10/0x10 [ 853.626784][T28456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.626803][T28456] do_syscall_64+0x15f/0xf80 [ 853.626824][T28456] ? trace_irq_disable+0x3b/0x140 [ 853.626844][T28456] ? clear_bhb_loop+0x40/0x90 [ 853.626866][T28456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.626884][T28456] RIP: 0033:0x7fe99e19c819 [ 853.626902][T28456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.626917][T28456] RSP: 002b:00007fe99f07f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.626944][T28456] RAX: ffffffffffffffda RBX: 00007fe99e415fa0 RCX: 00007fe99e19c819 [ 853.626958][T28456] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 853.626970][T28456] RBP: 00007fe99f07f090 R08: 0000000000000000 R09: 0000000000000000 [ 853.626981][T28456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.626992][T28456] R13: 00007fe99e416038 R14: 00007fe99e415fa0 R15: 00007ffe0fea8138 [ 853.627025][T28456] [ 854.119118][ T5147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 854.142539][ T5147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 854.156719][ T5147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 854.167561][ T5147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 854.176314][T28465] bridge_slave_1: left allmulticast mode [ 854.192643][ T5147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 854.278751][T28465] bridge_slave_1: left promiscuous mode [ 854.312750][T28465] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.354012][T28465] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 854.451371][T28471] __nla_validate_parse: 2 callbacks suppressed [ 854.451391][T28471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5979'. [ 854.543230][T28462] lo speed is unknown, defaulting to 1000 [ 854.572418][T28471] netlink: 'syz.4.5979': attribute type 2 has an invalid length. [ 854.616282][T28471] netlink: 'syz.4.5979': attribute type 2 has an invalid length. [ 855.037771][T28479] lo speed is unknown, defaulting to 1000 [ 855.143383][T28496] FAULT_INJECTION: forcing a failure. [ 855.143383][T28496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.166119][T28496] CPU: 0 UID: 0 PID: 28496 Comm: syz.1.5985 Not tainted syzkaller #0 PREEMPT(full) [ 855.166145][T28496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 855.166156][T28496] Call Trace: [ 855.166164][T28496] [ 855.166172][T28496] dump_stack_lvl+0xe8/0x150 [ 855.166202][T28496] should_fail_ex+0x412/0x560 [ 855.166232][T28496] _copy_from_user+0x2d/0xb0 [ 855.166253][T28496] kstrtouint_from_user+0xd6/0x180 [ 855.166280][T28496] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 855.166321][T28496] proc_fail_nth_write+0x8e/0x210 [ 855.166345][T28496] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 855.166374][T28496] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 855.166399][T28496] vfs_write+0x29a/0xb90 [ 855.166433][T28496] ? __pfx_vfs_write+0x10/0x10 [ 855.166460][T28496] ? __fget_files+0x2a/0x420 [ 855.166486][T28496] ? __fget_files+0x3a0/0x420 [ 855.166506][T28496] ? __fget_files+0x2a/0x420 [ 855.166536][T28496] ksys_write+0x150/0x270 [ 855.166573][T28496] ? __pfx_ksys_write+0x10/0x10 [ 855.166605][T28496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.166625][T28496] do_syscall_64+0x15f/0xf80 [ 855.166647][T28496] ? trace_irq_disable+0x3b/0x140 [ 855.166666][T28496] ? clear_bhb_loop+0x40/0x90 [ 855.166689][T28496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.166707][T28496] RIP: 0033:0x7fe99e15d04e [ 855.166725][T28496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 855.166740][T28496] RSP: 002b:00007fe99f05dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 855.166761][T28496] RAX: ffffffffffffffda RBX: 00007fe99f05e6c0 RCX: 00007fe99e15d04e [ 855.166774][T28496] RDX: 0000000000000001 RSI: 00007fe99f05e0a0 RDI: 0000000000000003 [ 855.166786][T28496] RBP: 00007fe99f05e090 R08: 0000000000000000 R09: 0000000000000000 [ 855.166796][T28496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.166807][T28496] R13: 00007fe99e416128 R14: 00007fe99e416090 R15: 00007ffe0fea8138 [ 855.166837][T28496] [ 855.620087][T28462] chnl_net:caif_netlink_parms(): no params data found [ 855.867948][T28462] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.877355][T28462] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.885599][T28462] bridge_slave_0: entered allmulticast mode [ 855.894120][T28462] bridge_slave_0: entered promiscuous mode [ 855.919191][T28462] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.927186][T28462] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.938839][T28462] bridge_slave_1: entered allmulticast mode [ 855.948842][T28462] bridge_slave_1: entered promiscuous mode [ 856.029916][T28462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.068820][T28462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.111628][T28462] team0: Port device team_slave_0 added [ 856.125566][T28462] team0: Port device team_slave_1 added [ 856.144374][T28507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5986'. [ 856.161707][T28462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.169959][T28462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.198783][T28462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.295614][ T5147] Bluetooth: hci5: command tx timeout [ 856.342716][T28462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.374666][T28462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.436687][T28462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.643715][T28462] hsr_slave_0: entered promiscuous mode [ 856.661397][T28462] hsr_slave_1: entered promiscuous mode [ 856.686142][T28462] debugfs: 'hsr0' already exists in 'hsr' [ 856.692314][T28462] Cannot create hsr debugfs directory [ 856.902957][T28462] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.979135][T28462] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.052621][T28462] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.136775][T28462] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.826123][T28482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 857.868678][T28462] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 857.923348][T28462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 857.959120][T28462] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 858.057891][T28462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 858.070196][T28531] netlink: 'syz.4.5993': attribute type 2 has an invalid length. [ 858.078817][T28462] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 858.118352][T28462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 858.225839][T28539] netlink: 'syz.2.5995': attribute type 1 has an invalid length. [ 858.249807][T28530] veth11: entered allmulticast mode [ 858.375086][ T5147] Bluetooth: hci5: command tx timeout [ 858.401026][T28462] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 858.413568][T28462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 858.422595][T28538] netlink: 'syz.3.5994': attribute type 4 has an invalid length. [ 858.646153][T28462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.664425][T28558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6000'. [ 858.690047][T28558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6000'. [ 858.728356][T28462] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.841590][T28557] lo speed is unknown, defaulting to 1000 [ 858.843230][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.855687][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.971895][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.979754][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.303719][T28583] netlink: 'syz.2.6006': attribute type 1 has an invalid length. [ 859.335136][T28583] netlink: 'syz.2.6006': attribute type 1 has an invalid length. [ 859.355388][T28583] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6006'. [ 859.487482][T28595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6008'. [ 859.628634][T28600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6010'. [ 859.637363][T28462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.688380][T28602] netlink: 'syz.4.6011': attribute type 10 has an invalid length. [ 859.714959][T28602] netlink: 228 bytes leftover after parsing attributes in process `syz.4.6011'. [ 859.872099][T28462] veth0_vlan: entered promiscuous mode [ 859.908020][T28462] veth1_vlan: entered promiscuous mode [ 859.917944][T28614] delete_channel: no stack [ 860.017814][T28462] veth0_macvtap: entered promiscuous mode [ 860.070939][T28462] veth1_macvtap: entered promiscuous mode [ 860.133014][T28462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.148015][T28618] netlink: 'syz.3.6017': attribute type 61 has an invalid length. [ 860.175428][T28462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.193836][T28618] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6017'. [ 860.261063][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.298230][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.310199][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.321548][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.455062][ T5147] Bluetooth: hci5: command tx timeout [ 860.612273][T28633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6022'. [ 860.989033][T28620] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 860.997710][T28620] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 861.015339][T28620] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 861.023859][T28620] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 861.041733][T28620] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 861.048309][T28620] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 861.067970][T28620] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 861.074278][T28620] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 861.118142][T28620] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 861.124658][T28620] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 861.233438][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.248211][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.273417][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.281852][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.360454][ T6664] lec:lec_start_xmit: lec0:No lecd attached [ 872.375865][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 872.384445][ C0] lec:lec_tx_timeout: lec0 [ 872.389771][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 877.404906][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 877.413869][ C0] lec:lec_tx_timeout: lec0 [ 896.203400][T28649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6023'. [ 896.269220][T28659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6026'. [ 896.322156][T28666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6026'. [ 896.362707][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 896.379771][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 896.404175][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 896.416386][T28659] macvtap0: entered promiscuous mode [ 896.429459][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 896.434160][T28659] veth1: entered promiscuous mode [ 896.444159][T28659] macvtap0: entered allmulticast mode [ 896.448742][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 896.454215][T28659] veth1: entered allmulticast mode [ 896.476589][T28669] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 896.506035][T28664] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 896.543842][T28666] veth1: left allmulticast mode [ 896.550511][T28666] veth1: left promiscuous mode [ 896.638213][T28672] lo speed is unknown, defaulting to 1000 [ 896.782210][T28680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6031'. [ 896.824441][T28682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6032'. [ 896.863470][T28682] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6032'. [ 896.994212][T28665] lo speed is unknown, defaulting to 1000 [ 897.120042][T28688] netlink: 'syz.1.6034': attribute type 11 has an invalid length. [ 897.226947][T28701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6037'. [ 897.361593][T28707] netlink: 'syz.1.6041': attribute type 1 has an invalid length. [ 897.542618][T28707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6041'. [ 897.564414][T28712] bond15: (slave geneve5): making interface the new active one [ 897.586907][T28712] bond15: (slave geneve5): Enslaving as an active interface with an up link [ 897.630351][T28707] 8021q: adding VLAN 0 to HW filter on device bond15 [ 897.643159][ T3524] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 897.767926][T28712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.787796][T28712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.811851][T28712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 897.843147][T28712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.902644][T28712] tipc: Resetting bearer [ 897.933645][T28712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.945461][T28712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.967856][ T3524] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 897.978197][ T1159] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 898.043016][ T1159] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 898.077793][T28718] lo speed is unknown, defaulting to 1000 [ 898.448668][T28665] chnl_net:caif_netlink_parms(): no params data found [ 898.539394][ T5836] Bluetooth: hci4: command tx timeout [ 898.545847][T28737] lo speed is unknown, defaulting to 1000 [ 898.708995][T28758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6052'. [ 898.758476][T28665] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.767787][T28665] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.780362][T28665] bridge_slave_0: entered allmulticast mode [ 898.799460][T28665] bridge_slave_0: entered promiscuous mode [ 898.809880][T28761] IPv6: Can't replace route, no match found [ 898.819246][T28665] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.825821][T28761] IPv6: Can't replace route, no match found [ 898.827477][T28665] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.842460][T28665] bridge_slave_1: entered allmulticast mode [ 898.857107][T28665] bridge_slave_1: entered promiscuous mode [ 899.016929][T28665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.076089][T28766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6053'. [ 899.140249][T28665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 899.388145][T28769] veth11: entered allmulticast mode [ 899.402301][T28769] bond16: (slave veth11): Enslaving as an active interface with an up link [ 899.425438][T28770] bond16 (unregistering): (slave veth11): Releasing backup interface [ 899.437251][T28770] bond16 (unregistering): Released all slaves [ 899.495467][T28665] team0: Port device team_slave_0 added [ 899.569345][T28665] team0: Port device team_slave_1 added [ 899.601385][T28665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.611752][T28665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.643867][T28665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.670945][T28665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.707122][T28665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.769621][T28665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.033159][T28665] hsr_slave_0: entered promiscuous mode [ 900.042701][T28665] hsr_slave_1: entered promiscuous mode [ 900.052231][T28665] debugfs: 'hsr0' already exists in 'hsr' [ 900.059498][T28665] Cannot create hsr debugfs directory [ 900.176888][T28793] xt_ipcomp: unknown flags 1D [ 900.250692][T28790] IPv6: Can't replace route, no match found [ 900.268977][T28790] IPv6: Can't replace route, no match found [ 900.571719][T28799] team_slave_1: entered promiscuous mode [ 900.605960][T28799] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 900.614986][ T5836] Bluetooth: hci4: command tx timeout [ 900.944403][T28665] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 900.972966][T28665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 901.004170][T28665] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 901.030698][T28665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 901.058184][T28665] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 901.080295][T28665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 901.133946][T28665] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 901.168522][T28665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 901.281954][T28832] IPv6: Can't replace route, no match found [ 901.292663][T28832] IPv6: Can't replace route, no match found [ 901.330985][T28851] xt_hashlimit: size too large, truncated to 1048576 [ 901.632607][T28665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.718054][T28665] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.742831][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.750713][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.813604][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.821284][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.373027][T28894] netlink: zone id is out of range [ 902.387264][T28665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 902.396237][T28894] netlink: zone id is out of range [ 902.418924][T28894] netlink: zone id is out of range [ 902.447573][T28894] netlink: zone id is out of range [ 902.462231][T28898] openvswitch: netlink: Key 6 has unexpected len 214 expected 2 [ 902.466639][T28894] netlink: zone id is out of range [ 902.502881][T28894] netlink: zone id is out of range [ 902.520883][T28894] netlink: zone id is out of range [ 902.539795][T28894] netlink: zone id is out of range [ 902.555186][T28894] netlink: zone id is out of range [ 902.558278][T28901] bond16: entered promiscuous mode [ 902.568369][T28901] 8021q: adding VLAN 0 to HW filter on device bond16 [ 902.677979][T28907] IPv6: Can't replace route, no match found [ 902.695151][ T5836] Bluetooth: hci4: command tx timeout [ 902.704059][T28907] IPv6: Can't replace route, no match found [ 903.020808][T28909] syzkaller0: entered promiscuous mode [ 903.026776][T28909] syzkaller0: entered allmulticast mode [ 903.157712][T28665] veth0_vlan: entered promiscuous mode [ 903.199200][T28665] veth1_vlan: entered promiscuous mode [ 903.283505][T28939] netlink: 'syz.0.6099': attribute type 1 has an invalid length. [ 903.354445][T28665] veth0_macvtap: entered promiscuous mode [ 903.385560][T28665] veth1_macvtap: entered promiscuous mode [ 903.438534][T28944] lo speed is unknown, defaulting to 1000 [ 903.463422][T28949] __nla_validate_parse: 4 callbacks suppressed [ 903.463444][T28949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6101'. [ 904.572674][T28964] IPv6: Can't replace route, no match found [ 904.582380][T28964] IPv6: Can't replace route, no match found [ 904.789556][ T5836] Bluetooth: hci4: command tx timeout [ 908.236243][T28963] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 908.280474][ T7670] dvmrp0: left allmulticast mode [ 908.422099][T28979] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6110'. [ 908.587896][ T7670] bond12 (unregistering): (slave erspan1): Releasing active interface [ 908.596500][ T7670] erspan1 (unregistering): left promiscuous mode [ 909.009288][ T7670] bond0 (unregistering): Released all slaves [ 909.020998][ T7670] bond1 (unregistering): (slave veth3): Releasing active interface [ 909.030808][ T7670] bond1 (unregistering): Released all slaves [ 909.046524][ T7670] bond2 (unregistering): Released all slaves [ 909.062913][ T7670] bond3 (unregistering): Released all slaves [ 909.080444][ T7670] bond4 (unregistering): Released all slaves [ 909.098626][ T7670] bond5 (unregistering): Released all slaves [ 909.114609][ T7670] bond6 (unregistering): Released all slaves [ 909.131272][ T7670] bond7 (unregistering): Released all slaves [ 909.148435][ T7670] bond8 (unregistering): Released all slaves [ 909.164551][ T7670] bond9 (unregistering): Released all slaves [ 909.183601][ T7670] bond10 (unregistering): Released all slaves [ 909.203121][ T7670] bond11 (unregistering): (slave veth5): Releasing backup interface [ 909.211641][ T7670] veth5: left promiscuous mode [ 909.220951][ T7670] bond11 (unregistering): Released all slaves [ 909.239135][ T7670] bond12 (unregistering): Released all slaves [ 909.256158][ T7670] bond13 (unregistering): (slave veth13): Releasing active interface [ 909.266336][ T7670] bond13 (unregistering): Released all slaves [ 909.281491][ T7670] bond14 (unregistering): (slave veth15): Releasing backup interface [ 909.301503][ T7670] bond14 (unregistering): (slave batadv1): Releasing backup interface [ 909.312507][ T7670] bond14 (unregistering): Released all slaves [ 909.328693][ T7670] bond15 (unregistering): Released all slaves [ 909.344398][ T7670] bond16 (unregistering): Released all slaves [ 909.363042][ T7670] bond17 (unregistering): Released all slaves [ 909.377425][ T7670] bond18 (unregistering): Released all slaves [ 909.454293][T28665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.539348][T28665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.640899][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.697612][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.844072][T29001] IPv6: Can't replace route, no match found [ 909.846403][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.861603][T29001] IPv6: Can't replace route, no match found [ 909.879186][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.900400][ T7670] tipc: Disabling bearer [ 909.910593][ T7670] tipc: Left network mode [ 909.980891][T29000] bond1: entered promiscuous mode [ 909.988719][T29000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.715996][T29032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6123'. [ 910.787230][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.810324][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.905041][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.937045][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.123517][T29040] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 911.200614][T29037] lo speed is unknown, defaulting to 1000 [ 911.839242][T29067] netlink: 'syz.2.6134': attribute type 1 has an invalid length. [ 912.034043][T29077] netlink: 'syz.0.6137': attribute type 18 has an invalid length. [ 912.060393][T29077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6137'. [ 912.081791][T29083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6134'. [ 912.224728][T29083] bond2: (slave bridge1): making interface the new active one [ 912.250002][T29083] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 912.282591][T29067] macvlan2: entered promiscuous mode [ 912.294356][T29067] macvlan2: entered allmulticast mode [ 912.311743][T29067] bond2: entered promiscuous mode [ 912.318149][T29067] bridge1: entered promiscuous mode [ 912.325158][T29067] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 912.334105][T29067] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 912.352498][T29067] bond2: left promiscuous mode [ 912.362682][T29067] bridge1: left promiscuous mode [ 912.387267][ T48] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.397995][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.443325][ T48] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.500363][ T48] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.533891][T29058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 912.951917][T29112] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6148'. [ 913.048484][ T7670] veth1_to_team: left promiscuous mode [ 913.087426][ T7670] veth1: left promiscuous mode [ 913.161239][ T7670] hsr_slave_0: left promiscuous mode [ 913.199305][ T7670] hsr_slave_1: left promiscuous mode [ 913.472382][ T7670] smc: removing net device hsr0 with user defined pnetid SYZ2 [ 913.595162][ T5147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 913.615282][ T5147] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 913.627216][ T5147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 913.640656][ T5147] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 913.652168][ T5147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 913.892435][ T7670] team0 (unregistering): Port device vxcan1 removed [ 914.071182][T29119] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.079240][T29119] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.242337][T29119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.270453][T29119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.458859][T17292] syz_tun (unregistering): left allmulticast mode [ 914.476327][T17292] syz_tun (unregistering): left promiscuous mode [ 914.500563][T17292] bridge0: port 3(syz_tun) entered disabled state [ 914.573797][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.628306][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.655348][ T36] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.675332][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.676229][T29141] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.6156'. [ 914.702205][T29137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6154'. [ 914.735740][ T36] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.747819][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.783991][ T36] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 914.804274][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.960365][T29137] 8021q: adding VLAN 0 to HW filter on device bond3 [ 914.994921][T29136] lo speed is unknown, defaulting to 1000 [ 915.002948][T29154] netlink: 'syz.0.6160': attribute type 1 has an invalid length. [ 915.021941][ T7670] IPVS: stop unused estimator thread 0... [ 915.073740][T29155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6160'. [ 915.095440][T29155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6160'. [ 915.373674][T29163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6164'. [ 915.394893][T29163] net_ratelimit: 17 callbacks suppressed [ 915.394913][T29163] openvswitch: netlink: Flow key attr not present in new flow. [ 915.431648][T29163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6164'. [ 915.444535][T29163] openvswitch: netlink: Flow key attr not present in new flow. [ 915.470667][T29125] lo speed is unknown, defaulting to 1000 [ 915.746217][ T5836] Bluetooth: hci6: command tx timeout [ 915.900157][T29177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6167'. [ 915.920162][T29146] lo speed is unknown, defaulting to 1000 [ 915.928362][T29177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6167'. [ 916.036409][T29181] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 916.059412][T29181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.384137][ T7670] hsr0: left allmulticast mode [ 916.396946][ T7670] hsr_slave_0: left allmulticast mode [ 916.414346][ T7670] hsr_slave_1: left allmulticast mode [ 916.432639][ T7670] bridge0: port 4(hsr0) entered disabled state [ 916.451844][ T7670] bridge_slave_0: left allmulticast mode [ 916.471622][ T7670] bridge_slave_0: left promiscuous mode [ 916.479469][ T8200] IPVS: starting estimator thread 0... [ 916.496010][ T7670] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.534476][T29197] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6173'. [ 916.552811][ T7670] dvmrp6: left allmulticast mode [ 916.575269][T29195] IPVS: using max 43 ests per chain, 103200 per kthread [ 916.690463][T29206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6172'. [ 916.834509][ T7670] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 916.843842][ T7670] bond1 (unregistering): (slave gretap1): the permanent HWaddr of slave - 6e:d6:c0:96:7b:bf - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 916.867034][ T7670] bond1 (unregistering): (slave bond2): making interface the new active one [ 917.141474][ T7670] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 917.154397][ T7670] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.164101][ T7670] .` (unregistering): Released all slaves [ 917.183925][ T7670] bond1 (unregistering): (slave bond2): Releasing backup interface [ 917.193012][ T7670] bond1 (unregistering): Released all slaves [ 917.207921][ T7670] bond2 (unregistering): Released all slaves [ 917.226081][ T7670] bond0 (unregistering): Released all slaves [ 917.242639][ T7670] bond3 (unregistering): (slave veth5): Releasing active interface [ 917.251694][ T7670] bond3 (unregistering): Released all slaves [ 917.268138][ T7670] bond4 (unregistering): Released all slaves [ 917.286264][ T7670] bond5 (unregistering): Released all slaves [ 917.304274][ T7670] bond6 (unregistering): Released all slaves [ 917.323074][ T7670] bond7 (unregistering): Released all slaves [ 917.348615][ T7670] bond8 (unregistering): Released all slaves [ 917.363213][ T7670] bond9 (unregistering): Released all slaves [ 917.377954][ T7670] bond10 (unregistering): Released all slaves [ 917.393478][ T7670] bond11 (unregistering): (slave veth7): Releasing active interface [ 917.408026][ T7670] bond11 (unregistering): Released all slaves [ 917.431048][ T7670] bond12 (unregistering): Released all slaves [ 917.447474][ T7670] bond13 (unregistering): Released all slaves [ 917.468072][ T7670] bond14 (unregistering): Released all slaves [ 917.485882][ T7670] bond15 (unregistering): Released all slaves [ 917.507293][ T7670] bond16 (unregistering): Released all slaves [ 917.523049][T29199] netlink: 320 bytes leftover after parsing attributes in process `syz.0.6172'. [ 917.533833][T29199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6172'. [ 917.545320][T29199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6172'. [ 917.555913][T29199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6172'. [ 917.586966][ T5492] 8021q: adding VLAN 0 to HW filter on device eth1 [ 917.816616][ T5836] Bluetooth: hci6: command tx timeout [ 917.826524][T29214] batman_adv: batadv0: Adding interface: dummy0 [ 917.851863][T29214] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.882053][T29214] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 917.919968][T29212] batman_adv: batadv0: Adding interface: vlan2 [ 917.927097][T29212] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.955440][T29212] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 918.100043][ T7670] tipc: Left network mode [ 918.240574][T29223] FAULT_INJECTION: forcing a failure. [ 918.240574][T29223] name failslab, interval 1, probability 0, space 0, times 0 [ 918.254416][T29223] CPU: 1 UID: 0 PID: 29223 Comm: syz.0.6177 Not tainted syzkaller #0 PREEMPT(full) [ 918.254440][T29223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 918.254451][T29223] Call Trace: [ 918.254458][T29223] [ 918.254465][T29223] dump_stack_lvl+0xe8/0x150 [ 918.254497][T29223] should_fail_ex+0x412/0x560 [ 918.254526][T29223] should_failslab+0xa8/0x100 [ 918.254545][T29223] __kmalloc_noprof+0xe8/0x760 [ 918.254566][T29223] ? __kasan_kmalloc+0x93/0xb0 [ 918.254580][T29223] ? nla_strdup+0x9d/0x140 [ 918.254594][T29223] ? __kmalloc_cache_noprof+0x31c/0x660 [ 918.254618][T29223] nla_strdup+0x9d/0x140 [ 918.254634][T29223] nf_tables_newtable+0x491/0x1910 [ 918.254649][T29223] ? nfnetlink_subsys_unregister+0x1a2/0x1b0 [ 918.254685][T29223] nfnetlink_rcv+0x123e/0x27b0 [ 918.254731][T29223] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 918.254812][T29223] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.254843][T29223] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.254862][T29223] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.254886][T29223] netlink_unicast+0x75c/0x8e0 [ 918.254914][T29223] netlink_sendmsg+0x813/0xb40 [ 918.254942][T29223] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.254966][T29223] ? aa_sock_msg_perm+0xf1/0x1b0 [ 918.254987][T29223] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 918.255013][T29223] ____sys_sendmsg+0x972/0x9f0 [ 918.255034][T29223] ? __might_fault+0xaf/0x130 [ 918.255059][T29223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 918.255088][T29223] ? import_iovec+0x73/0xa0 [ 918.255107][T29223] ___sys_sendmsg+0x2a5/0x360 [ 918.255127][T29223] ? __lock_acquire+0x6b5/0x2cf0 [ 918.255150][T29223] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.255201][T29223] ? __fget_files+0x2a/0x420 [ 918.255218][T29223] ? __fget_files+0x3a0/0x420 [ 918.255252][T29223] __x64_sys_sendmsg+0x1bd/0x2a0 [ 918.255284][T29223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 918.255319][T29223] ? __pfx_ksys_write+0x10/0x10 [ 918.255347][T29223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.255364][T29223] do_syscall_64+0x15f/0xf80 [ 918.255381][T29223] ? trace_irq_disable+0x3b/0x140 [ 918.255398][T29223] ? clear_bhb_loop+0x40/0x90 [ 918.255420][T29223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.255436][T29223] RIP: 0033:0x7fc1bff9c819 [ 918.255451][T29223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.255468][T29223] RSP: 002b:00007fc1c0d92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.255486][T29223] RAX: ffffffffffffffda RBX: 00007fc1c0215fa0 RCX: 00007fc1bff9c819 [ 918.255497][T29223] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 918.255507][T29223] RBP: 00007fc1c0d92090 R08: 0000000000000000 R09: 0000000000000000 [ 918.255516][T29223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.255525][T29223] R13: 00007fc1c0216038 R14: 00007fc1c0215fa0 R15: 00007ffc9ad95b38 [ 918.255551][T29223] [ 918.704405][T29226] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 919.150702][T29234] vlan2: entered allmulticast mode [ 919.168934][T29234] bond0: entered allmulticast mode [ 919.195556][T29234] bond_slave_0: entered allmulticast mode [ 919.213543][T29234] bond_slave_1: entered allmulticast mode [ 919.660070][T29125] chnl_net:caif_netlink_parms(): no params data found [ 919.763520][ T5492] 8021q: adding VLAN 0 to HW filter on device eth2 [ 919.863273][T29263] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6184'. [ 919.905734][ T5836] Bluetooth: hci6: command tx timeout [ 920.136374][T29276] FAULT_INJECTION: forcing a failure. [ 920.136374][T29276] name failslab, interval 1, probability 0, space 0, times 0 [ 920.153026][T29276] CPU: 1 UID: 0 PID: 29276 Comm: syz.5.6187 Not tainted syzkaller #0 PREEMPT(full) [ 920.153053][T29276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 920.153064][T29276] Call Trace: [ 920.153072][T29276] [ 920.153081][T29276] dump_stack_lvl+0xe8/0x150 [ 920.153112][T29276] should_fail_ex+0x412/0x560 [ 920.153142][T29276] should_failslab+0xa8/0x100 [ 920.153164][T29276] __kmalloc_noprof+0xe8/0x760 [ 920.153187][T29276] ? __kasan_kmalloc+0x93/0xb0 [ 920.153203][T29276] ? nla_strdup+0x9d/0x140 [ 920.153218][T29276] ? __kmalloc_cache_noprof+0x31c/0x660 [ 920.153245][T29276] nla_strdup+0x9d/0x140 [ 920.153264][T29276] nf_tables_newtable+0x491/0x1910 [ 920.153283][T29276] ? nfnetlink_subsys_unregister+0x1a1/0x1b0 [ 920.153322][T29276] nfnetlink_rcv+0x123e/0x27b0 [ 920.153371][T29276] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 920.153405][T29276] ? ref_tracker_free+0x693/0x840 [ 920.153472][T29276] ? __netlink_deliver_tap+0x807/0x850 [ 920.153505][T29276] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.153525][T29276] ? netlink_deliver_tap+0x2e/0x1b0 [ 920.153551][T29276] netlink_unicast+0x75c/0x8e0 [ 920.153579][T29276] netlink_sendmsg+0x813/0xb40 [ 920.153599][T29276] ? irqentry_exit+0x218/0x730 [ 920.153619][T29276] ? trace_irq_disable+0x3b/0x140 [ 920.153642][T29276] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.153667][T29276] ? ____sys_sendmsg+0x959/0x9f0 [ 920.153697][T29276] ____sys_sendmsg+0x972/0x9f0 [ 920.153718][T29276] ? __might_fault+0xaf/0x130 [ 920.153744][T29276] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.153777][T29276] ? import_iovec+0x73/0xa0 [ 920.153804][T29276] ___sys_sendmsg+0x2a5/0x360 [ 920.153825][T29276] ? __lock_acquire+0x6b5/0x2cf0 [ 920.153852][T29276] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.153908][T29276] ? __fget_files+0x2a/0x420 [ 920.153928][T29276] ? __fget_files+0x3a0/0x420 [ 920.153955][T29276] __x64_sys_sendmsg+0x1bd/0x2a0 [ 920.153983][T29276] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 920.154016][T29276] ? __pfx_ksys_write+0x10/0x10 [ 920.154046][T29276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.154066][T29276] do_syscall_64+0x15f/0xf80 [ 920.154085][T29276] ? trace_irq_disable+0x3b/0x140 [ 920.154103][T29276] ? clear_bhb_loop+0x40/0x90 [ 920.154123][T29276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.154148][T29276] RIP: 0033:0x7fb3aeb9c819 [ 920.154165][T29276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.154179][T29276] RSP: 002b:00007fb3afa02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.154200][T29276] RAX: ffffffffffffffda RBX: 00007fb3aee15fa0 RCX: 00007fb3aeb9c819 [ 920.154212][T29276] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 920.154222][T29276] RBP: 00007fb3afa02090 R08: 0000000000000000 R09: 0000000000000000 [ 920.154232][T29276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.154242][T29276] R13: 00007fb3aee16038 R14: 00007fb3aee15fa0 R15: 00007fff380f7848 [ 920.154269][T29276] [ 920.521686][ T7670] hsr_slave_0: left promiscuous mode [ 920.529667][ T7670] hsr_slave_1: left promiscuous mode [ 920.542174][ T7670] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.552591][ T7670] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.669841][ T7670] pim6reg (unregistering): left allmulticast mode [ 920.761071][ T7670] team_slave_1 (unregistering): left allmulticast mode [ 920.773492][ T7670] team0 (unregistering): Port device team_slave_1 removed [ 920.791512][ T7670] team_slave_0 (unregistering): left allmulticast mode [ 920.800233][ T7670] team0 (unregistering): Port device team_slave_0 removed [ 920.894618][ T7670] dummy0 (unregistering): left allmulticast mode [ 920.909057][ T7670] team0 (unregistering): Port device dummy0 removed [ 920.987454][T29125] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.013993][T29125] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.022637][T29125] bridge_slave_0: entered allmulticast mode [ 921.030725][T29125] bridge_slave_0: entered promiscuous mode [ 921.044523][T29279] syzkaller1: entered promiscuous mode [ 921.052549][T29279] syzkaller1: entered allmulticast mode [ 921.142781][T29125] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.151738][T29125] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.160053][T29125] bridge_slave_1: entered allmulticast mode [ 921.168218][T29125] bridge_slave_1: entered promiscuous mode [ 921.209681][T29286] lo speed is unknown, defaulting to 1000 [ 921.332571][T29125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.392539][T29125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.530784][T29125] team0: Port device team_slave_0 added [ 921.562517][T29125] team0: Port device team_slave_1 added [ 921.726598][T29125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.750820][T29125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.840563][T29125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.896807][T29125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.929649][T29125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.983180][ T5836] Bluetooth: hci6: command tx timeout [ 921.998959][T29125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.036512][T29287] lo speed is unknown, defaulting to 1000 [ 922.231211][T29125] hsr_slave_0: entered promiscuous mode [ 922.246132][T29125] hsr_slave_1: entered promiscuous mode [ 922.263223][T29125] debugfs: 'hsr0' already exists in 'hsr' [ 922.269490][T29125] Cannot create hsr debugfs directory [ 922.287853][ T5492] 8021q: adding VLAN 0 to HW filter on device eth3 [ 922.303359][T29335] tipc: Started in network mode [ 922.309581][ T7670] IPVS: stop unused estimator thread 0... [ 922.317815][T29335] tipc: Node identity ac14140f, cluster identity 4711 [ 922.336037][T29335] tipc: New replicast peer: 255.255.255.255 [ 922.346122][T29335] tipc: Enabled bearer , priority 5 [ 922.353992][T29336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6199'. [ 922.365401][T29336] tipc: Disabling bearer [ 922.464242][T28268] IPVS: starting estimator thread 0... [ 922.472251][T29336] IPVS: nq: FWM 3 0x00000003 - no destination available [ 922.486647][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 922.539002][T29341] batadv_slave_1: entered promiscuous mode [ 922.558117][T29335] lo speed is unknown, defaulting to 1000 [ 922.569295][T29339] IPVS: using max 57 ests per chain, 136800 per kthread [ 922.574604][T29341] netlink: 'syz.0.6201': attribute type 14 has an invalid length. [ 922.595440][T29341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6201'. [ 922.625618][T29341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.905846][T29344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 922.929825][T29344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6201'. [ 923.070428][T29344] batadv_slave_1 (unregistering): left promiscuous mode [ 923.101592][T29344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.726158][T29125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 924.769521][T29125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 924.799122][T29125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 924.838846][T29125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 924.849518][T29125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 924.890488][T29125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 924.921630][T29125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 924.960972][T29125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 925.258363][T29125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.344456][T29125] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.390414][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.398017][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.439270][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.447574][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.008086][T29125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 926.024398][T29440] netlink: 'syz.5.6215': attribute type 2 has an invalid length. [ 926.044471][T29440] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6215'. [ 926.257607][T29125] veth0_vlan: entered promiscuous mode [ 926.312502][T29125] veth1_vlan: entered promiscuous mode [ 926.356106][T29452] netlink: 'syz.5.6217': attribute type 3 has an invalid length. [ 926.399916][T29125] veth0_macvtap: entered promiscuous mode [ 926.447642][T29125] veth1_macvtap: entered promiscuous mode [ 926.459219][T29457] netlink: 'syz.5.6217': attribute type 1 has an invalid length. [ 926.517606][T29125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.526365][T29457] netlink: 'syz.5.6217': attribute type 2 has an invalid length. [ 926.556291][T29125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.585790][ T7670] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.632852][T29457] netlink: 204 bytes leftover after parsing attributes in process `syz.5.6217'. [ 926.633674][ T7670] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.675619][ T7670] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.695979][T29457] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6217'. [ 926.730912][ T7670] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.969001][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.014967][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.097790][T29473] netlink: 'syz.2.6222': attribute type 7 has an invalid length. [ 927.142020][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.158000][T29473] netlink: 'syz.2.6222': attribute type 8 has an invalid length. [ 927.177706][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.302295][T29485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6225'. [ 927.312497][T29482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6224'. [ 927.354946][T29482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6224'. [ 927.411031][T29482] batadv0: entered promiscuous mode [ 927.432879][T29482] batadv0: left promiscuous mode [ 927.920024][T29518] netlink: 'syz.2.6227': attribute type 1 has an invalid length. [ 928.152784][T29521] 8021q: adding VLAN 0 to HW filter on device bond5 [ 928.192191][T29521] bond4: (slave bond5): making interface the new active one [ 928.205590][T29521] bond4: (slave bond5): Enslaving as an active interface with an up link [ 928.800284][T29570] syzkaller1: entered promiscuous mode [ 928.810384][T29570] syzkaller1: entered allmulticast mode [ 929.165923][T29585] lo speed is unknown, defaulting to 1000 [ 929.489803][T29595] syzkaller0: entered promiscuous mode [ 929.497259][T29595] syzkaller0: entered allmulticast mode [ 929.661693][T29599] netlink: 284 bytes leftover after parsing attributes in process `syz.0.6244'. [ 929.767305][T29606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6246'. [ 929.778135][T29606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6246'. [ 929.789868][T29606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6246'. [ 929.821440][T29606] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6246'. [ 929.851113][T29606] netlink: 'syz.0.6246': attribute type 6 has an invalid length. [ 929.921239][T29609] netlink: 'syz.3.6247': attribute type 6 has an invalid length. [ 929.933374][T29609] IPv6: NLM_F_CREATE should be specified when creating new route [ 930.330837][T29631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6252'. [ 930.360647][T29634] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6253'. [ 930.380917][T29634] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6253'. [ 930.486165][T29636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6252'. [ 930.758317][T29640] netlink: 'syz.5.6255': attribute type 1 has an invalid length. [ 930.816658][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 930.837953][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 930.846905][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 930.858988][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 930.872466][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 930.989845][T29641] lo speed is unknown, defaulting to 1000 [ 931.494498][T29660] lo speed is unknown, defaulting to 1000 [ 931.542324][T29675] tipc: Enabling of bearer rejected, failed to enable media [ 931.907416][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 932.037851][T29692] netlink: 'syz.2.6269': attribute type 13 has an invalid length. [ 932.047173][T29692] netlink: 'syz.2.6269': attribute type 17 has an invalid length. [ 932.080900][T29687] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.089206][T29687] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.301538][T29687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.381648][T29687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.757071][T29692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.767325][T29692] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.817555][T29692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 932.847771][T29695] tipc: Started in network mode [ 932.853902][T29695] tipc: Node identity 82e614f3cfd3, cluster identity 4711 [ 932.864488][T29695] tipc: Enabled bearer , priority 0 [ 932.877007][T29698] syzkaller0: MTU too low for tipc bearer [ 932.883214][T29698] tipc: Disabling bearer [ 932.891032][ T7670] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.916686][ T7670] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.935837][ T5836] Bluetooth: hci2: command tx timeout [ 933.020415][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.034228][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.056504][T29641] chnl_net:caif_netlink_parms(): no params data found [ 933.576318][T29716] __nla_validate_parse: 7 callbacks suppressed [ 933.576337][T29716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6274'. [ 933.592315][T29716] tipc: Enabled bearer , priority 0 [ 933.856194][T29641] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.874288][T29641] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.891606][T29641] bridge_slave_0: entered allmulticast mode [ 933.907863][T29641] bridge_slave_0: entered promiscuous mode [ 933.957093][T29641] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.976241][T29641] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.993502][T29641] bridge_slave_1: entered allmulticast mode [ 934.008814][T29641] bridge_slave_1: entered promiscuous mode [ 934.158779][T29641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.221446][T29641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.369620][T29641] team0: Port device team_slave_0 added [ 934.393403][T29641] team0: Port device team_slave_1 added [ 934.523598][T29641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.532495][T29641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.563199][T29641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.594236][T29641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.612333][T29641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.666165][T29641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.832688][ T24] tipc: Node number set to 1295324403 [ 934.852285][T29641] hsr_slave_0: entered promiscuous mode [ 934.870801][T29641] hsr_slave_1: entered promiscuous mode [ 934.880691][T29641] debugfs: 'hsr0' already exists in 'hsr' [ 934.887997][T29641] Cannot create hsr debugfs directory [ 934.926207][T29750] FAULT_INJECTION: forcing a failure. [ 934.926207][T29750] name failslab, interval 1, probability 0, space 0, times 0 [ 934.957847][T29750] CPU: 1 UID: 0 PID: 29750 Comm: syz.0.6284 Not tainted syzkaller #0 PREEMPT(full) [ 934.957873][T29750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 934.957883][T29750] Call Trace: [ 934.957891][T29750] [ 934.957899][T29750] dump_stack_lvl+0xe8/0x150 [ 934.957930][T29750] should_fail_ex+0x412/0x560 [ 934.957958][T29750] should_failslab+0xa8/0x100 [ 934.957980][T29750] __kmalloc_cache_noprof+0x88/0x660 [ 934.958004][T29750] ? __pfx___mutex_trylock_common+0x10/0x10 [ 934.958029][T29750] ? nft_netdev_hook_alloc+0x5a/0x570 [ 934.958055][T29750] nft_netdev_hook_alloc+0x5a/0x570 [ 934.958085][T29750] nf_tables_parse_netdev_hooks+0x138/0x950 [ 934.958117][T29750] nft_flowtable_parse_hook+0x46a/0x920 [ 934.958149][T29750] ? queue_delayed_work_on+0x12f/0x1e0 [ 934.958176][T29750] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 934.958210][T29750] ? nf_flow_table_init+0x280/0x2a0 [ 934.958238][T29750] nf_tables_newflowtable+0x14e4/0x23d0 [ 934.958275][T29750] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 934.958297][T29750] ? nfnl_pernet+0x23/0x240 [ 934.958334][T29750] ? __nla_parse+0x40/0x60 [ 934.958356][T29750] nfnetlink_rcv+0x123e/0x27b0 [ 934.958412][T29750] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 934.958482][T29750] ? netlink_deliver_tap+0x2e/0x1b0 [ 934.958516][T29750] ? netlink_deliver_tap+0x2e/0x1b0 [ 934.958539][T29750] ? netlink_deliver_tap+0x2e/0x1b0 [ 934.958566][T29750] netlink_unicast+0x75c/0x8e0 [ 934.958599][T29750] netlink_sendmsg+0x813/0xb40 [ 934.958630][T29750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.958658][T29750] ? aa_sock_msg_perm+0xf1/0x1b0 [ 934.958683][T29750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 934.958719][T29750] ____sys_sendmsg+0x972/0x9f0 [ 934.958743][T29750] ? __might_fault+0xaf/0x130 [ 934.958776][T29750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.958810][T29750] ? import_iovec+0x73/0xa0 [ 934.958832][T29750] ___sys_sendmsg+0x2a5/0x360 [ 934.958857][T29750] ? __lock_acquire+0x6b5/0x2cf0 [ 934.958884][T29750] ? __pfx____sys_sendmsg+0x10/0x10 [ 934.958943][T29750] ? __fget_files+0x2a/0x420 [ 934.958964][T29750] ? __fget_files+0x3a0/0x420 [ 934.958995][T29750] __x64_sys_sendmsg+0x1bd/0x2a0 [ 934.959024][T29750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 934.959059][T29750] ? __pfx_ksys_write+0x10/0x10 [ 934.959092][T29750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.959112][T29750] do_syscall_64+0x15f/0xf80 [ 934.959134][T29750] ? trace_irq_disable+0x3b/0x140 [ 934.959153][T29750] ? clear_bhb_loop+0x40/0x90 [ 934.959175][T29750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.959192][T29750] RIP: 0033:0x7fc1bff9c819 [ 934.959211][T29750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 934.959226][T29750] RSP: 002b:00007fc1c0d92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.959246][T29750] RAX: ffffffffffffffda RBX: 00007fc1c0215fa0 RCX: 00007fc1bff9c819 [ 934.959259][T29750] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 934.959270][T29750] RBP: 00007fc1c0d92090 R08: 0000000000000000 R09: 0000000000000000 [ 934.959281][T29750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 934.959292][T29750] R13: 00007fc1c0216038 R14: 00007fc1c0215fa0 R15: 00007ffc9ad95b38 [ 934.959323][T29750] [ 935.356040][ T5836] Bluetooth: hci2: command tx timeout [ 935.477344][T29754] IPv6: Can't replace route, no match found [ 935.487949][T29752] lo speed is unknown, defaulting to 1000 [ 935.505559][T29754] IPv6: Can't replace route, no match found [ 935.622363][T29641] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 935.817532][T29641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 935.942167][T29761] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.950131][T29761] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.280959][T29761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.300765][T29761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.372896][T29694] Set syz1 is full, maxelem 65536 reached [ 936.809268][T29781] openvswitch: netlink: IP tunnel dst address not specified [ 936.817560][T29641] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 936.840081][T29641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 936.874487][ T1159] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.888311][ T1159] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.917777][T29641] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 936.941857][T29784] FAULT_INJECTION: forcing a failure. [ 936.941857][T29784] name failslab, interval 1, probability 0, space 0, times 0 [ 936.957411][T29784] CPU: 1 UID: 0 PID: 29784 Comm: syz.3.6294 Not tainted syzkaller #0 PREEMPT(full) [ 936.957447][T29784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 936.957464][T29784] Call Trace: [ 936.957472][T29784] [ 936.957480][T29784] dump_stack_lvl+0xe8/0x150 [ 936.957512][T29784] should_fail_ex+0x412/0x560 [ 936.957543][T29784] should_failslab+0xa8/0x100 [ 936.957690][T29784] __kmalloc_cache_noprof+0x88/0x660 [ 936.957718][T29784] ? nft_netdev_hook_alloc+0x220/0x570 [ 936.957747][T29784] nft_netdev_hook_alloc+0x220/0x570 [ 936.957780][T29784] nf_tables_parse_netdev_hooks+0x138/0x950 [ 936.957812][T29784] nft_flowtable_parse_hook+0x46a/0x920 [ 936.957845][T29784] ? queue_delayed_work_on+0x12f/0x1e0 [ 936.957873][T29784] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 936.957908][T29784] ? nf_flow_table_init+0x280/0x2a0 [ 936.957933][T29784] nf_tables_newflowtable+0x14e4/0x23d0 [ 936.957971][T29784] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 936.957993][T29784] ? nfnl_pernet+0x23/0x240 [ 936.958030][T29784] ? __nla_parse+0x40/0x60 [ 936.958052][T29784] nfnetlink_rcv+0x123e/0x27b0 [ 936.958110][T29784] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 936.958150][T29784] ? ref_tracker_free+0x693/0x840 [ 936.958205][T29784] ? __netlink_deliver_tap+0x807/0x850 [ 936.958239][T29784] ? netlink_deliver_tap+0x2e/0x1b0 [ 936.958263][T29784] ? netlink_deliver_tap+0x2e/0x1b0 [ 936.958292][T29784] netlink_unicast+0x75c/0x8e0 [ 936.958325][T29784] netlink_sendmsg+0x813/0xb40 [ 936.958360][T29784] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.958387][T29784] ? aa_sock_msg_perm+0xf1/0x1b0 [ 936.958412][T29784] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 936.958446][T29784] ____sys_sendmsg+0x972/0x9f0 [ 936.958471][T29784] ? __might_fault+0xaf/0x130 [ 936.958501][T29784] ? __pfx_____sys_sendmsg+0x10/0x10 [ 936.958536][T29784] ? import_iovec+0x73/0xa0 [ 936.958566][T29784] ___sys_sendmsg+0x2a5/0x360 [ 936.958591][T29784] ? __lock_acquire+0x6b5/0x2cf0 [ 936.958618][T29784] ? __pfx____sys_sendmsg+0x10/0x10 [ 936.958679][T29784] ? __fget_files+0x2a/0x420 [ 936.958700][T29784] ? __fget_files+0x3a0/0x420 [ 936.958733][T29784] __x64_sys_sendmsg+0x1bd/0x2a0 [ 936.958762][T29784] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 936.958797][T29784] ? __pfx_ksys_write+0x10/0x10 [ 936.958831][T29784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.958851][T29784] do_syscall_64+0x15f/0xf80 [ 936.958872][T29784] ? trace_irq_disable+0x3b/0x140 [ 936.958891][T29784] ? clear_bhb_loop+0x40/0x90 [ 936.958914][T29784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.958932][T29784] RIP: 0033:0x7fa3a1b9c819 [ 936.958950][T29784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.958965][T29784] RSP: 002b:00007fa3a2a6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 936.958986][T29784] RAX: ffffffffffffffda RBX: 00007fa3a1e15fa0 RCX: 00007fa3a1b9c819 [ 936.958999][T29784] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 936.959011][T29784] RBP: 00007fa3a2a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 936.959022][T29784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 936.959032][T29784] R13: 00007fa3a1e16038 R14: 00007fa3a1e15fa0 R15: 00007ffd890078b8 [ 936.959063][T29784] [ 937.019319][T29641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 937.261657][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5350 ms [ 937.261678][ C0] lec:lec_tx_timeout: lec0 [ 937.271237][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 937.390797][ T1159] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.407441][T29641] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 937.416221][ T5836] Bluetooth: hci2: command tx timeout [ 937.432056][T29641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 937.480958][ T1159] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.761039][T29641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 937.826213][T29641] 8021q: adding VLAN 0 to HW filter on device team0 [ 937.993714][ T1010] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.001160][ T1010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.048537][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.055797][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.087959][T29802] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 938.107931][T29802] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 938.140870][T29802] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 938.169890][T29802] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 938.227158][T29802] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 938.240984][T29802] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 938.249275][T29802] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 938.292250][T29802] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 938.305801][T29802] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 938.314640][T29802] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 938.355264][T29802] netlink: 2678 bytes leftover after parsing attributes in process `syz.3.6297'. [ 938.972742][T29641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.208105][T29829] lo speed is unknown, defaulting to 1000 [ 939.444353][T29835] FAULT_INJECTION: forcing a failure. [ 939.444353][T29835] name failslab, interval 1, probability 0, space 0, times 0 [ 939.466747][T29835] CPU: 0 UID: 0 PID: 29835 Comm: syz.2.6304 Not tainted syzkaller #0 PREEMPT(full) [ 939.466774][T29835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 939.466786][T29835] Call Trace: [ 939.466793][T29835] [ 939.466801][T29835] dump_stack_lvl+0xe8/0x150 [ 939.466833][T29835] should_fail_ex+0x412/0x560 [ 939.466862][T29835] should_failslab+0xa8/0x100 [ 939.466883][T29835] __kmalloc_cache_noprof+0x88/0x660 [ 939.466908][T29835] ? nft_netdev_hook_alloc+0x5a/0x570 [ 939.466930][T29835] ? __kmalloc_cache_noprof+0x15b/0x660 [ 939.466959][T29835] nft_netdev_hook_alloc+0x5a/0x570 [ 939.466995][T29835] nf_tables_parse_netdev_hooks+0x138/0x950 [ 939.467027][T29835] nft_flowtable_parse_hook+0x46a/0x920 [ 939.467059][T29835] ? queue_delayed_work_on+0x12f/0x1e0 [ 939.467083][T29835] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 939.467113][T29835] ? nf_flow_table_init+0x280/0x2a0 [ 939.467135][T29835] nf_tables_newflowtable+0x14e4/0x23d0 [ 939.467173][T29835] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 939.467194][T29835] ? nfnl_pernet+0x23/0x240 [ 939.467231][T29835] ? __nla_parse+0x40/0x60 [ 939.467253][T29835] nfnetlink_rcv+0x123e/0x27b0 [ 939.467310][T29835] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 939.467348][T29835] ? ref_tracker_free+0x693/0x840 [ 939.467400][T29835] ? __netlink_deliver_tap+0x807/0x850 [ 939.467434][T29835] ? netlink_deliver_tap+0x2e/0x1b0 [ 939.467456][T29835] ? netlink_deliver_tap+0x2e/0x1b0 [ 939.467486][T29835] netlink_unicast+0x75c/0x8e0 [ 939.467520][T29835] netlink_sendmsg+0x813/0xb40 [ 939.467553][T29835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 939.467589][T29835] ? aa_sock_msg_perm+0xf1/0x1b0 [ 939.467614][T29835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 939.467644][T29835] ____sys_sendmsg+0x972/0x9f0 [ 939.467670][T29835] ? __might_fault+0xaf/0x130 [ 939.467699][T29835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.467733][T29835] ? import_iovec+0x73/0xa0 [ 939.467755][T29835] ___sys_sendmsg+0x2a5/0x360 [ 939.467778][T29835] ? __lock_acquire+0x6b5/0x2cf0 [ 939.467805][T29835] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.467866][T29835] ? __fget_files+0x2a/0x420 [ 939.467886][T29835] ? __fget_files+0x3a0/0x420 [ 939.467918][T29835] __x64_sys_sendmsg+0x1bd/0x2a0 [ 939.467946][T29835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 939.467981][T29835] ? __pfx_ksys_write+0x10/0x10 [ 939.468015][T29835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.468035][T29835] do_syscall_64+0x15f/0xf80 [ 939.468056][T29835] ? trace_irq_disable+0x3b/0x140 [ 939.468075][T29835] ? clear_bhb_loop+0x40/0x90 [ 939.468098][T29835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.468116][T29835] RIP: 0033:0x7f978fb9c819 [ 939.468135][T29835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.468150][T29835] RSP: 002b:00007f9790b1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.468171][T29835] RAX: ffffffffffffffda RBX: 00007f978fe15fa0 RCX: 00007f978fb9c819 [ 939.468184][T29835] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 939.468195][T29835] RBP: 00007f9790b1b090 R08: 0000000000000000 R09: 0000000000000000 [ 939.468207][T29835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 939.468217][T29835] R13: 00007f978fe16038 R14: 00007f978fe15fa0 R15: 00007ffcb1378108 [ 939.468248][T29835] [ 939.495775][ T5836] Bluetooth: hci2: command tx timeout [ 940.581604][T29847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6308'. [ 940.634250][T29848] delete_channel: no stack [ 940.919630][T29641] veth0_vlan: entered promiscuous mode [ 940.980794][T29641] veth1_vlan: entered promiscuous mode [ 941.098695][T29851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6309'. [ 941.150711][T29854] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6309'. [ 941.196731][T29851] bond1: option coupled_control: invalid value (12) [ 941.206760][T29851] bond1 (unregistering): Released all slaves [ 941.260438][T29641] veth0_macvtap: entered promiscuous mode [ 941.301342][T29766] Set syz1 is full, maxelem 65536 reached [ 941.312649][T29641] veth1_macvtap: entered promiscuous mode [ 941.434357][T29641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.471051][T29641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.487265][T29866] xt_hashlimit: size too large, truncated to 1048576 [ 941.501890][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.555748][T29868] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6314'. [ 941.563694][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.619317][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.630993][T29870] xt_hashlimit: size too large, truncated to 1048576 [ 941.639141][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.068695][T29875] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6315'. [ 942.117812][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.151001][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.248154][T29883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6319'. [ 942.261890][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.275276][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 942.281037][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.283551][ C0] lec:lec_tx_timeout: lec0 [ 942.298136][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 942.322630][T29890] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20000 [ 942.329859][T29891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6320'. [ 942.413671][T29883] veth5: entered promiscuous mode [ 942.718329][T29917] tipc: Cannot configure node identity twice [ 942.754353][T29917] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6326'. [ 942.863180][T29928] bpq0: entered promiscuous mode [ 943.196512][T29939] syzkaller0: entered promiscuous mode [ 943.202298][T29939] syzkaller0: entered allmulticast mode [ 943.218241][T29925] syzkaller0: entered promiscuous mode [ 943.227207][T29925] syzkaller0: entered allmulticast mode [ 943.398181][T29953] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6336'. [ 947.310560][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 947.319348][ C0] lec:lec_tx_timeout: lec0 [ 947.324657][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 948.251774][T29974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6340'. [ 948.307362][T29986] openvswitch: netlink: Duplicate or invalid key (type 0). [ 948.332982][T29986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 948.334582][T29949] lo speed is unknown, defaulting to 1000 [ 948.568722][T29993] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6344'. [ 948.583483][T29996] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6345'. [ 948.605511][T29993] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6344'. [ 948.636043][T30001] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6345'. [ 948.648537][T29993] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6344'. [ 948.676856][T29993] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6344'. [ 948.689052][T29993] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6344'. [ 948.717640][T29993] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6344'. [ 948.740494][T29993] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6344'. [ 948.962595][T29993] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.970829][T29993] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.367673][T29993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.415763][T29993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.048319][T29946] lo speed is unknown, defaulting to 1000 [ 950.089746][T30009] sctp: [Deprecated]: syz.6.6349 (pid 30009) Use of int in max_burst socket option. [ 950.089746][T30009] Use struct sctp_assoc_value instead [ 950.111983][ T1159] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.131097][ T1159] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.198680][T30011] netlink: ct family unspecified [ 950.220854][T30011] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.283874][ T1159] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.311884][ T1159] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.383354][T30013] RDS: rds_bind could not find a transport for 0:0:900:0:9500::, load rds_tcp or rds_rdma? [ 950.491468][T30017] tipc: Started in network mode [ 950.506034][T30017] tipc: Node identity ac14140f, cluster identity 4711 [ 950.532567][T30017] tipc: New replicast peer: 255.255.255.255 [ 950.547204][T30017] tipc: Enabled bearer , priority 5 [ 950.717728][T30024] validate_nla: 6 callbacks suppressed [ 950.717748][T30024] netlink: 'syz.5.6353': attribute type 9 has an invalid length. [ 950.773140][T30015] lo speed is unknown, defaulting to 1000 [ 951.668440][T30040] netlink: 'syz.3.6357': attribute type 21 has an invalid length. [ 951.676615][ T794] tipc: Node number set to 2886997007 [ 952.334861][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 952.343916][ C0] lec:lec_tx_timeout: lec0 [ 952.349060][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 953.009086][ T7670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.036653][ T7670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.378531][T30109] netlink: 'syz.5.6380': attribute type 1 has an invalid length. [ 953.410464][T30109] __nla_validate_parse: 145 callbacks suppressed [ 953.410482][T30109] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6380'. [ 953.467200][T30109] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6380'. [ 953.496416][T30109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6380'. [ 953.677770][T30123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6385'. [ 953.716288][ T7671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.741041][ T7671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.046661][T30153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6391'. [ 954.137184][ T5931] IPVS: starting estimator thread 0... [ 954.265424][T30158] IPVS: using max 39 ests per chain, 93600 per kthread [ 954.364258][T30165] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6398'. [ 954.381788][T30161] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6398'. [ 954.596380][T30176] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6401'. [ 954.681584][T30178] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6402'. [ 954.710495][T30181] FAULT_INJECTION: forcing a failure. [ 954.710495][T30181] name failslab, interval 1, probability 0, space 0, times 0 [ 954.731318][T30181] CPU: 0 UID: 0 PID: 30181 Comm: syz.3.6403 Not tainted syzkaller #0 PREEMPT(full) [ 954.731345][T30181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 954.731356][T30181] Call Trace: [ 954.731364][T30181] [ 954.731372][T30181] dump_stack_lvl+0xe8/0x150 [ 954.731408][T30181] should_fail_ex+0x412/0x560 [ 954.731437][T30181] should_failslab+0xa8/0x100 [ 954.731456][T30181] ? skb_clone+0x212/0x3a0 [ 954.731474][T30181] kmem_cache_alloc_noprof+0x87/0x650 [ 954.731499][T30181] ? __netlink_lookup+0xc6/0x8b0 [ 954.731529][T30181] skb_clone+0x212/0x3a0 [ 954.731551][T30181] __netlink_deliver_tap+0x404/0x850 [ 954.731587][T30181] ? netlink_deliver_tap+0x2e/0x1b0 [ 954.731612][T30181] netlink_deliver_tap+0x19c/0x1b0 [ 954.731638][T30181] netlink_unicast+0x730/0x8e0 [ 954.731671][T30181] netlink_sendmsg+0x813/0xb40 [ 954.731704][T30181] ? __pfx_netlink_sendmsg+0x10/0x10 [ 954.731730][T30181] ? aa_sock_msg_perm+0xf1/0x1b0 [ 954.731756][T30181] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 954.731785][T30181] ____sys_sendmsg+0x972/0x9f0 [ 954.731810][T30181] ? __might_fault+0xaf/0x130 [ 954.731839][T30181] ? __pfx_____sys_sendmsg+0x10/0x10 [ 954.731870][T30181] ? import_iovec+0x73/0xa0 [ 954.731890][T30181] ___sys_sendmsg+0x2a5/0x360 [ 954.731912][T30181] ? __lock_acquire+0x6b5/0x2cf0 [ 954.731937][T30181] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.731998][T30181] ? __fget_files+0x2a/0x420 [ 954.732019][T30181] ? __fget_files+0x3a0/0x420 [ 954.732071][T30181] __x64_sys_sendmsg+0x1bd/0x2a0 [ 954.732100][T30181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 954.732136][T30181] ? __pfx_ksys_write+0x10/0x10 [ 954.732168][T30181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.732188][T30181] do_syscall_64+0x15f/0xf80 [ 954.732208][T30181] ? trace_irq_disable+0x3b/0x140 [ 954.732227][T30181] ? clear_bhb_loop+0x40/0x90 [ 954.732249][T30181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.732273][T30181] RIP: 0033:0x7fa3a1b9c819 [ 954.732291][T30181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.732306][T30181] RSP: 002b:00007fa3a2a6a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 954.732326][T30181] RAX: ffffffffffffffda RBX: 00007fa3a1e15fa0 RCX: 00007fa3a1b9c819 [ 954.732340][T30181] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003 [ 954.732352][T30181] RBP: 00007fa3a2a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 954.732363][T30181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.732374][T30181] R13: 00007fa3a1e16038 R14: 00007fa3a1e15fa0 R15: 00007ffd890078b8 [ 954.732405][T30181] [ 955.296577][T30202] lo speed is unknown, defaulting to 1000 [ 955.373305][T30209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6410'. [ 955.482462][T30221] netlink: 'syz.0.6413': attribute type 15 has an invalid length. [ 955.509433][T30220] netlink: 'syz.2.6414': attribute type 4 has an invalid length. [ 955.660696][T30220] macsec1: entered promiscuous mode [ 956.041175][T30246] FAULT_INJECTION: forcing a failure. [ 956.041175][T30246] name failslab, interval 1, probability 0, space 0, times 0 [ 956.099526][T30248] netlink: 'syz.3.6421': attribute type 13 has an invalid length. [ 956.114989][T30246] CPU: 0 UID: 0 PID: 30246 Comm: syz.2.6420 Not tainted syzkaller #0 PREEMPT(full) [ 956.115006][T30246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 956.115013][T30246] Call Trace: [ 956.115018][T30246] [ 956.115024][T30246] dump_stack_lvl+0xe8/0x150 [ 956.115044][T30246] should_fail_ex+0x412/0x560 [ 956.115062][T30246] should_failslab+0xa8/0x100 [ 956.115073][T30246] ? skb_clone+0x212/0x3a0 [ 956.115084][T30246] kmem_cache_alloc_noprof+0x87/0x650 [ 956.115106][T30246] ? __netlink_lookup+0xc6/0x8b0 [ 956.115123][T30246] skb_clone+0x212/0x3a0 [ 956.115135][T30246] __netlink_deliver_tap+0x404/0x850 [ 956.115154][T30246] ? netlink_deliver_tap+0x2e/0x1b0 [ 956.115168][T30246] netlink_deliver_tap+0x19c/0x1b0 [ 956.115182][T30246] netlink_unicast+0x730/0x8e0 [ 956.115200][T30246] netlink_sendmsg+0x813/0xb40 [ 956.115218][T30246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.115233][T30246] ? aa_sock_msg_perm+0xf1/0x1b0 [ 956.115248][T30246] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 956.115265][T30246] ____sys_sendmsg+0x972/0x9f0 [ 956.115279][T30246] ? __might_fault+0xaf/0x130 [ 956.115295][T30246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 956.115314][T30246] ? import_iovec+0x73/0xa0 [ 956.115326][T30246] ___sys_sendmsg+0x2a5/0x360 [ 956.115341][T30246] ? __lock_acquire+0x6b5/0x2cf0 [ 956.115357][T30246] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.115390][T30246] ? __fget_files+0x2a/0x420 [ 956.115402][T30246] ? __fget_files+0x3a0/0x420 [ 956.115418][T30246] __x64_sys_sendmsg+0x1bd/0x2a0 [ 956.115434][T30246] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 956.115453][T30246] ? __pfx_ksys_write+0x10/0x10 [ 956.115472][T30246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.115482][T30246] do_syscall_64+0x15f/0xf80 [ 956.115495][T30246] ? trace_irq_disable+0x3b/0x140 [ 956.115506][T30246] ? clear_bhb_loop+0x40/0x90 [ 956.115518][T30246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.115528][T30246] RIP: 0033:0x7f978fb9c819 [ 956.115538][T30246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.115547][T30246] RSP: 002b:00007f9790b1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.115559][T30246] RAX: ffffffffffffffda RBX: 00007f978fe15fa0 RCX: 00007f978fb9c819 [ 956.115566][T30246] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000003 [ 956.115573][T30246] RBP: 00007f9790b1b090 R08: 0000000000000000 R09: 0000000000000000 [ 956.115579][T30246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 956.115585][T30246] R13: 00007f978fe16038 R14: 00007f978fe15fa0 R15: 00007ffcb1378108 [ 956.115601][T30246] [ 956.406138][T30248] netlink: 'syz.3.6421': attribute type 17 has an invalid length. [ 956.633361][T30256] netlink: 'syz.6.6423': attribute type 1 has an invalid length. [ 956.854000][T30248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 957.345678][T30284] netlink: 'syz.0.6432': attribute type 14 has an invalid length. [ 957.360498][T30284] netlink: 'syz.0.6432': attribute type 14 has an invalid length. [ 957.374932][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 957.384361][ C0] lec:lec_tx_timeout: lec0 [ 957.389690][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 958.080688][T30326] FAULT_INJECTION: forcing a failure. [ 958.080688][T30326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.117516][T30326] CPU: 1 UID: 0 PID: 30326 Comm: syz.3.6444 Not tainted syzkaller #0 PREEMPT(full) [ 958.117542][T30326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 958.117554][T30326] Call Trace: [ 958.117562][T30326] [ 958.117570][T30326] dump_stack_lvl+0xe8/0x150 [ 958.117601][T30326] should_fail_ex+0x412/0x560 [ 958.117630][T30326] _copy_from_user+0x2d/0xb0 [ 958.117650][T30326] __sys_sendto+0x2b0/0x710 [ 958.117674][T30326] ? __pfx___sys_sendto+0x10/0x10 [ 958.117720][T30326] ? exc_page_fault+0x6a/0xc0 [ 958.117744][T30326] ? do_user_addr_fault+0xc6f/0x1340 [ 958.117772][T30326] __x64_sys_sendto+0xde/0x100 [ 958.117794][T30326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.117812][T30326] do_syscall_64+0x15f/0xf80 [ 958.117832][T30326] ? trace_irq_disable+0x3b/0x140 [ 958.117851][T30326] ? clear_bhb_loop+0x40/0x90 [ 958.117873][T30326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.117891][T30326] RIP: 0033:0x7fa3a1b5d04e [ 958.117908][T30326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 958.117923][T30326] RSP: 002b:00007fa3a2a68e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 958.117942][T30326] RAX: ffffffffffffffda RBX: 00007fa3a2a6a6c0 RCX: 00007fa3a1b5d04e [ 958.117953][T30326] RDX: 0000000000000020 RSI: 00007fa3a2a69000 RDI: 0000000000000004 [ 958.117962][T30326] RBP: 0000000000000000 R08: 00007fa3a2a68f04 R09: 000000000000000c [ 958.117973][T30326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 958.117984][T30326] R13: 00007fa3a2a68f58 R14: 00007fa3a2a69000 R15: 0000000000000000 [ 958.118010][T30326] [ 958.441079][T30336] __nla_validate_parse: 13 callbacks suppressed [ 958.441100][T30336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6445'. [ 958.709240][T30347] netlink: 92 bytes leftover after parsing attributes in process `syz.5.6447'. [ 959.039172][T30362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6451'. [ 959.076905][T30362] veth1_to_bridge: entered promiscuous mode [ 959.079209][T30363] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6453'. [ 959.093875][T30362] veth1_to_bridge: entered allmulticast mode [ 959.115459][T30359] lo speed is unknown, defaulting to 1000 [ 959.204922][T30368] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6454'. [ 959.349843][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.375374][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.471189][T30376] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20002 [ 959.629696][T30382] lo speed is unknown, defaulting to 1000 [ 959.630175][T30385] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6459'. [ 959.648533][T30387] netlink: 'syz.0.6458': attribute type 2 has an invalid length. [ 959.648677][T30388] netlink: 'syz.0.6458': attribute type 2 has an invalid length. [ 959.724685][T30387] !Мо: entered promiscuous mode [ 959.831971][T30393] netlink: 'syz.0.6460': attribute type 10 has an invalid length. [ 960.000671][T30398] IPv6: Can't replace route, no match found [ 960.013447][T30398] IPv6: Can't replace route, no match found [ 960.369598][T30409] xt_bpf: check failed: parse error [ 960.772640][T30429] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6470'. [ 960.862793][T30432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6472'. [ 960.953727][T30429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6470'. [ 961.201814][T30448] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6476'. [ 961.249340][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.267304][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.470305][T30463] netlink: 'syz.3.6482': attribute type 5 has an invalid length. [ 961.492135][ T7671] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.503884][T30463] netlink: 'syz.3.6482': attribute type 5 has an invalid length. [ 961.524888][ T7671] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.557513][ T7671] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.574503][T30470] netlink: 'syz.5.6485': attribute type 1 has an invalid length. [ 961.586574][ T7671] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 961.688754][T30477] netlink: 'syz.3.6486': attribute type 4 has an invalid length. [ 962.404831][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 962.413348][ C0] lec:lec_tx_timeout: lec0 [ 962.418514][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 962.464227][T30526] xt_CT: You must specify a L4 protocol and not use inversions on it [ 962.474146][T30526] xt_policy: too many policy elements [ 962.630748][T30538] netlink: 'syz.5.6504': attribute type 1 has an invalid length. [ 962.639348][T30538] netlink: 'syz.5.6504': attribute type 1 has an invalid length. [ 962.858598][T30549] atomic_op ffff88807abff198 conn xmit_atomic 0000000000000000 [ 963.650344][T30585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 963.692891][T30587] tipc: New replicast peer: 255.255.255.255 [ 963.728488][T30587] tipc: Enabled bearer , priority 5 [ 963.760328][T30590] __nla_validate_parse: 18 callbacks suppressed [ 963.760349][T30590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6518'. [ 963.778059][T30589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6519'. [ 963.790694][T30589] tipc: Disabling bearer [ 963.923066][T30595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6520'. [ 964.170080][T30605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6523'. [ 964.230964][T30605] IPv6: Can't replace route, no match found [ 964.245696][T30605] IPv6: Can't replace route, no match found [ 964.373641][T30612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.402967][T30612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6527'. [ 964.437755][T30616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6528'. [ 964.448075][T30617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6528'. [ 964.704680][T30626] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6532'. [ 964.964664][T30642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6537'. [ 964.975582][T30637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6535'. [ 965.182520][T30651] netlink: 'syz.2.6540': attribute type 1 has an invalid length. [ 965.311166][T30648] lo speed is unknown, defaulting to 1000 [ 965.799307][T30678] IPv6: Can't replace route, no match found [ 965.858272][T30678] IPv6: Can't replace route, no match found [ 966.661416][T30708] netlink: 'syz.6.6547': attribute type 1 has an invalid length. [ 966.831411][T30701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 966.919405][T30704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 966.931984][T30704] bond1: (slave bond2): Enslaving as an active interface with an up link [ 966.974668][T30705] bond1 (unregistering): (slave bond2): Releasing backup interface [ 966.988294][T30705] bond1 (unregistering): Released all slaves [ 967.162549][T30730] netlink: 'syz.2.6552': attribute type 61 has an invalid length. [ 967.373138][T30733] IPv6: Can't replace route, no match found [ 967.399912][T30733] IPv6: Can't replace route, no match found [ 967.424783][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 967.433607][ C0] lec:lec_tx_timeout: lec0 [ 967.438513][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 968.021771][T30772] lo speed is unknown, defaulting to 1000 [ 968.066831][T30776] bond2: option ad_select: invalid value (34) [ 968.080361][T30776] bond2 (unregistering): Released all slaves [ 968.128347][T30779] bridge0: port 3(syz_tun) entered blocking state [ 968.138110][T30779] bridge0: port 3(syz_tun) entered disabled state [ 968.175047][T30779] syz_tun: entered allmulticast mode [ 968.192243][T30779] syz_tun: entered promiscuous mode [ 968.212061][T30779] bridge0: port 3(syz_tun) entered blocking state [ 968.219120][T30779] bridge0: port 3(syz_tun) entered forwarding state [ 968.309142][T30788] IPv6: Can't replace route, no match found [ 968.325988][T30788] IPv6: Can't replace route, no match found [ 968.456430][T30798] x_tables: duplicate underflow at hook 1 [ 968.753542][T30806] netlink: 'syz.3.6576': attribute type 1 has an invalid length. [ 968.943732][T30821] __nla_validate_parse: 14 callbacks suppressed [ 968.943753][T30821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6579'. [ 968.956489][T30806] bond1: entered promiscuous mode [ 968.998111][T30806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 969.033612][T30830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6584'. [ 969.147522][T30830] IPv6: Can't replace route, no match found [ 969.175698][T30830] IPv6: Can't replace route, no match found [ 969.504184][T30851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6589'. [ 969.627392][T30853] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6590'. [ 973.494842][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6060 ms [ 973.503749][ C0] lec:lec_tx_timeout: lec0 [ 973.508888][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 979.254840][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 979.262995][ C0] lec:lec_tx_timeout: lec0 [ 979.268327][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 984.284911][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 984.293291][ C0] lec:lec_tx_timeout: lec0 [ 984.298595][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 989.315023][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 989.323425][ C0] lec:lec_tx_timeout: lec0 [ 989.328148][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 994.335059][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 994.344148][ C0] lec:lec_tx_timeout: lec0 [ 994.349054][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 999.364999][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 999.373387][ C0] lec:lec_tx_timeout: lec0 [ 999.378885][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1001.112418][T30865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6595'. [ 1001.152584][T30867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6592'. [ 1001.212746][T30870] netlink: 'syz.3.6595': attribute type 14 has an invalid length. [ 1001.235783][T30870] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6595'. [ 1001.387576][T30872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6597'. [ 1001.436259][T30877] syzkaller0: entered promiscuous mode [ 1001.442490][T30877] syzkaller0: entered allmulticast mode [ 1001.821722][T30892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6603'. [ 1001.852404][T30888] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6604'. [ 1001.888432][T30892] IPv6: Can't replace route, no match found [ 1001.900601][T30892] IPv6: Can't replace route, no match found [ 1002.172426][T30916] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6612'. [ 1002.182780][T30916] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6612'. [ 1002.193903][T30909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6610'. [ 1002.202087][T30917] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6612'. [ 1002.464601][T30915] bond2: Removing last ns target with arp_interval on [ 1002.480761][T30925] netlink: 'syz.6.6613': attribute type 7 has an invalid length. [ 1002.617697][T30929] lo speed is unknown, defaulting to 1000 [ 1002.808310][T30940] bridge1: entered promiscuous mode [ 1002.818653][T30940] bridge1: entered allmulticast mode [ 1002.833309][T30940] team0: Port device bridge1 added [ 1002.859964][T30944] macsec1: entered promiscuous mode [ 1002.871183][T30944] virt_wifi0: entered promiscuous mode [ 1002.890731][T30940] bridge0: port 3(team0) entered blocking state [ 1002.917210][T30940] bridge0: port 3(team0) entered disabled state [ 1002.935081][T30940] team0: entered allmulticast mode [ 1002.960144][T30940] team_slave_0: entered allmulticast mode [ 1002.988692][T30940] team_slave_1: entered allmulticast mode [ 1003.020108][T30940] team0: entered promiscuous mode [ 1003.036585][T30940] team_slave_0: entered promiscuous mode [ 1003.044117][T30940] team_slave_1: entered promiscuous mode [ 1003.089145][T30954] IPv6: Can't replace route, no match found [ 1003.115335][T30954] IPv6: Can't replace route, no match found [ 1003.225127][T30963] netlink: 'syz.0.6623': attribute type 1 has an invalid length. [ 1003.471678][T30966] lo speed is unknown, defaulting to 1000 [ 1004.062688][T30968] netlink: 'syz.2.6625': attribute type 8 has an invalid length. [ 1004.394760][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1004.403164][ C0] lec:lec_tx_timeout: lec0 [ 1004.408212][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1004.592249][T31001] IPv6: Can't replace route, no match found [ 1004.606996][T31001] IPv6: Can't replace route, no match found [ 1004.614281][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1004.632034][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.161354][T31012] lo speed is unknown, defaulting to 1000 [ 1005.412361][T31032] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1005.427192][T31027] bridge2: entered promiscuous mode [ 1005.714667][T31042] netlink: 'syz.0.6649': attribute type 1 has an invalid length. [ 1005.902278][T31042] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1005.911923][T31048] batman_adv: batadv0: Removing interface: dummy0 [ 1005.929482][T31048] bond3: (slave dummy0): making interface the new active one [ 1005.939471][T31048] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1006.096753][T31054] lo speed is unknown, defaulting to 1000 [ 1006.130130][T31059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1006.268689][T31057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.290914][T31057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.303379][T31057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1006.329020][T31067] __nla_validate_parse: 10 callbacks suppressed [ 1006.329040][T31067] netlink: 1100 bytes leftover after parsing attributes in process `syz.3.6654'. [ 1006.350230][T31065] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6655'. [ 1006.377135][T31069] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6654'. [ 1006.420407][T31071] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6656'. [ 1006.449052][T31071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6656'. [ 1006.597632][T31078] IPVS: Scheduler module ip_vs_sip not found [ 1006.612402][T31078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6657'. [ 1006.683804][T31078] vlan3: entered allmulticast mode [ 1006.701788][T31078] macvtap0: entered allmulticast mode [ 1007.435709][T31107] netlink: 'syz.3.6665': attribute type 4 has an invalid length. [ 1007.789744][T31109] lo speed is unknown, defaulting to 1000 [ 1008.004068][T31126] netlink: 'syz.3.6670': attribute type 21 has an invalid length. [ 1008.396904][T31145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.412387][T31145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1008.893843][T31159] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1008.942639][T31159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6682'. [ 1009.176448][T31167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6684'. [ 1009.189492][T31164] lo speed is unknown, defaulting to 1000 [ 1009.229274][T31175] openvswitch: netlink: IP tunnel TTL not specified. [ 1009.415038][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1009.423790][ C0] lec:lec_tx_timeout: lec0 [ 1009.429205][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1010.023505][T31200] FAULT_INJECTION: forcing a failure. [ 1010.023505][T31200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.059219][T31200] CPU: 0 UID: 0 PID: 31200 Comm: syz.5.6693 Not tainted syzkaller #0 PREEMPT(full) [ 1010.059247][T31200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1010.059257][T31200] Call Trace: [ 1010.059265][T31200] [ 1010.059273][T31200] dump_stack_lvl+0xe8/0x150 [ 1010.059307][T31200] should_fail_ex+0x412/0x560 [ 1010.059336][T31200] _copy_from_user+0x2d/0xb0 [ 1010.059354][T31200] __sys_bpf+0x229/0x950 [ 1010.059375][T31200] ? __pfx___sys_bpf+0x10/0x10 [ 1010.059418][T31200] ? ksys_write+0x242/0x270 [ 1010.059442][T31200] ? __pfx_ksys_write+0x10/0x10 [ 1010.059468][T31200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.059485][T31200] __x64_sys_bpf+0x7c/0x90 [ 1010.059502][T31200] do_syscall_64+0x15f/0xf80 [ 1010.059521][T31200] ? trace_irq_disable+0x3b/0x140 [ 1010.059538][T31200] ? clear_bhb_loop+0x40/0x90 [ 1010.059558][T31200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.059573][T31200] RIP: 0033:0x7fb3aeb9c819 [ 1010.059590][T31200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.059605][T31200] RSP: 002b:00007fb3afa02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1010.059625][T31200] RAX: ffffffffffffffda RBX: 00007fb3aee15fa0 RCX: 00007fb3aeb9c819 [ 1010.059636][T31200] RDX: 0000000000000078 RSI: 0000200000000440 RDI: 0000000000000005 [ 1010.059646][T31200] RBP: 00007fb3afa02090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.059656][T31200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.059665][T31200] R13: 00007fb3aee16038 R14: 00007fb3aee15fa0 R15: 00007fff380f7848 [ 1010.059691][T31200] [ 1010.434203][T31211] openvswitch: netlink: Unknown key attributes 2 [ 1010.450151][T31211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6698'. [ 1010.893835][T31231] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1010.968694][T31232] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 1011.020084][T31241] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6705'. [ 1011.716535][T31275] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6711'. [ 1012.009293][T31294] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6721'. [ 1012.039053][T31295] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6722'. [ 1012.177928][T31307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6726'. [ 1012.298228][T31318] netlink: 'syz.0.6730': attribute type 21 has an invalid length. [ 1012.306457][T31315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6729'. [ 1012.326123][T31318] IPv6: NLM_F_CREATE should be specified when creating new route [ 1012.349820][T31321] netlink: 'syz.0.6730': attribute type 21 has an invalid length. [ 1012.381507][T31318] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1012.390267][T31318] IPv6: NLM_F_CREATE should be set when creating new route [ 1012.398560][T31318] IPv6: NLM_F_CREATE should be set when creating new route [ 1012.406456][T31318] IPv6: NLM_F_CREATE should be set when creating new route [ 1012.418009][T31321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1012.510683][T31329] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6733'. [ 1012.553501][T31329] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 1012.873977][T31352] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6741'. [ 1012.914442][T31352] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6741'. [ 1012.992331][T31351] lo speed is unknown, defaulting to 1000 [ 1013.421009][T31386] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6749'. [ 1013.457064][T31383] bridge0: entered promiscuous mode [ 1013.457570][T31386] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6749'. [ 1013.518967][T31386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1013.533596][T31383] macsec1: entered promiscuous mode [ 1013.599047][T31390] syzkaller0: entered promiscuous mode [ 1013.617064][T31390] syzkaller0: entered allmulticast mode [ 1013.900943][T31402] netlink: 'syz.6.6755': attribute type 1 has an invalid length. [ 1013.982778][T31402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1014.011486][T31401] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1014.022504][T31401] bridge1: entered allmulticast mode [ 1014.311931][T31402] bond3: (slave veth3): Enslaving as an active interface with a down link [ 1014.333933][T31409] geneve2: entered promiscuous mode [ 1014.347444][T31410] bond3: (slave dummy0): making interface the new active one [ 1014.359134][T31410] dummy0: entered promiscuous mode [ 1014.366509][T31410] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 1014.389678][T31411] batadv0: entered promiscuous mode [ 1014.398955][T31411] macsec1: entered promiscuous mode [ 1014.408456][T31411] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1014.433816][T31415] bond3: (slave dummy0): Releasing active interface [ 1014.452449][T31415] dummy0 (unregistering): left promiscuous mode [ 1014.636839][T31417] macsec2: entered promiscuous mode [ 1014.740915][T31432] bridge0: port 4(vlan2) entered blocking state [ 1014.749657][T31432] bridge0: port 4(vlan2) entered disabled state [ 1014.773354][T31432] vlan2: entered allmulticast mode [ 1014.792378][T31432] geneve0: entered allmulticast mode [ 1014.810456][T31432] vlan2: entered promiscuous mode [ 1014.819794][T31432] geneve0: entered promiscuous mode [ 1014.829344][T31431] tipc: Enabled bearer , priority 0 [ 1014.911419][T31422] syzkaller0: entered promiscuous mode [ 1014.918158][T31422] syzkaller0: entered allmulticast mode [ 1014.945528][T31423] tipc: Resetting bearer [ 1014.948609][T31442] sctp: [Deprecated]: syz.6.6766 (pid 31442) Use of int in maxseg socket option. [ 1014.948609][T31442] Use struct sctp_assoc_value instead [ 1014.973222][T31425] tipc: Resetting bearer [ 1015.270223][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 1015.280318][ C0] lec:lec_tx_timeout: lec0 [ 1015.286394][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1019.831053][T31425] tipc: Disabling bearer [ 1019.870164][T31428] lo speed is unknown, defaulting to 1000 [ 1020.218828][T31466] syzkaller1: entered promiscuous mode [ 1020.243713][T31466] syzkaller1: entered allmulticast mode [ 1020.294373][T31466] __nla_validate_parse: 4 callbacks suppressed [ 1020.294392][T31466] netlink: 276 bytes leftover after parsing attributes in process `syz.0.6770'. [ 1020.302022][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1020.302058][ C0] lec:lec_tx_timeout: lec0 [ 1020.313110][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1020.660829][T31488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1020.763595][T31489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6773'. [ 1020.866523][T31492] netlink: 'syz.0.6778': attribute type 1 has an invalid length. [ 1021.095905][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 1021.222480][T31480] udevd[31480]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1021.432983][T31492] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1021.450570][T31500] bond3: (slave dummy0): Releasing active interface [ 1021.486711][T31500] bond4: (slave dummy0): making interface the new active one [ 1021.502293][T31500] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 1021.537264][T31506] bond4 (unregistering): (slave dummy0): Releasing active interface [ 1021.551136][T31506] bond4 (unregistering): Released all slaves [ 1022.066274][T31533] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6791'. [ 1022.211763][T31544] netlink: 'syz.0.6793': attribute type 1 has an invalid length. [ 1022.268952][T31533] netlink: 'syz.5.6791': attribute type 29 has an invalid length. [ 1022.281727][T31545] IPv6: Can't replace route, no match found [ 1022.293134][T31545] IPv6: Can't replace route, no match found [ 1022.340289][T31544] bond4: entered promiscuous mode [ 1022.347468][T31544] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1022.450650][T31550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6794'. [ 1022.462010][T31550] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6794'. [ 1022.739946][T31566] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6801'. [ 1022.823371][T31573] netlink: 'syz.6.6803': attribute type 1 has an invalid length. [ 1022.841919][T31575] netlink: 'syz.5.6804': attribute type 13 has an invalid length. [ 1022.935156][T31581] netlink: 'syz.3.6805': attribute type 1 has an invalid length. [ 1022.978589][T31576] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1023.022970][T31584] IPv6: Can't replace route, no match found [ 1023.062277][T31584] IPv6: Can't replace route, no match found [ 1023.108773][T31581] bond3: entered promiscuous mode [ 1023.156204][T31581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1023.266952][T31605] syzkaller0: entered promiscuous mode [ 1023.284871][T31605] syzkaller0: entered allmulticast mode [ 1023.401486][T31602] netlink: 'syz.0.6808': attribute type 1 has an invalid length. [ 1023.509734][T31605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6808'. [ 1023.634205][T31602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1023.680671][T31625] netlink: 'syz.6.6815': attribute type 3 has an invalid length. [ 1023.690970][T31608] bond5: (slave gretap1): making interface the new active one [ 1023.706273][T31608] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1023.720600][T31605] bond5 (unregistering): (slave gretap1): Releasing active interface [ 1023.738096][T31605] bond5 (unregistering): Released all slaves [ 1023.769506][T31630] netlink: 'syz.3.6810': attribute type 1 has an invalid length. [ 1024.040829][T31643] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6819'. [ 1024.082793][T31640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6818'. [ 1024.232851][T31648] netlink: 'syz.5.6821': attribute type 1 has an invalid length. [ 1024.270058][T31648] bond2: entered promiscuous mode [ 1024.277588][T31648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1024.294011][T31648] IPv6: Can't replace route, no match found [ 1024.302665][T31648] IPv6: Can't replace route, no match found [ 1024.380905][T31651] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1024.429014][T31645] lo speed is unknown, defaulting to 1000 [ 1024.530900][T31654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6823'. [ 1024.724505][T31658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1024.873720][T31662] bond5: (slave geneve2): making interface the new active one [ 1024.888603][T31662] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1025.039829][T31685] tipc: Resetting bearer [ 1025.081674][ T7671] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.128128][ T7671] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.156189][ T7671] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.191037][ T7671] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.314762][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1025.323544][ C0] lec:lec_tx_timeout: lec0 [ 1025.329342][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1025.406883][T31704] IPv6: Can't replace route, no match found [ 1025.447327][T31704] IPv6: Can't replace route, no match found [ 1025.468020][T31700] bond6: entered promiscuous mode [ 1025.475687][T31700] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1025.978813][T31711] vlan2: left allmulticast mode [ 1025.983973][T31711] bond0: left allmulticast mode [ 1025.992467][T31711] bond_slave_0: left allmulticast mode [ 1025.999493][T31711] bond_slave_1: left allmulticast mode [ 1026.013817][T31711] veth5: left promiscuous mode [ 1026.022273][T31711] virt_wifi0: left promiscuous mode [ 1026.033752][T31711] macsec1: left promiscuous mode [ 1026.049621][T31711] macsec2: left promiscuous mode [ 1026.065398][T31711] bond4: left promiscuous mode [ 1026.081471][T31711] bond6: left promiscuous mode [ 1026.277048][T31725] validate_nla: 3 callbacks suppressed [ 1026.277070][T31725] netlink: 'syz.3.6841': attribute type 13 has an invalid length. [ 1026.830079][T31749] __nla_validate_parse: 1 callbacks suppressed [ 1026.830106][T31749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6845'. [ 1026.851095][T31749] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6845'. [ 1026.960686][T31746] syzkaller0: entered promiscuous mode [ 1026.970848][T31755] netlink: 'syz.2.6848': attribute type 1 has an invalid length. [ 1027.001998][T31746] syzkaller0: entered allmulticast mode [ 1027.042427][T31756] IPv6: Can't replace route, no match found [ 1027.078450][T31756] IPv6: Can't replace route, no match found [ 1027.225058][T31755] bond7: entered promiscuous mode [ 1027.231049][T31755] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1027.303673][T31766] netlink: 'syz.2.6851': attribute type 2 has an invalid length. [ 1027.315023][T31765] bridge_slave_0: left allmulticast mode [ 1027.321819][T31765] bridge_slave_0: left promiscuous mode [ 1027.328195][T31765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.352729][T31765] bridge_slave_1: left allmulticast mode [ 1027.360965][T31765] bridge_slave_1: left promiscuous mode [ 1027.367883][T31765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.400823][T31765] bond0: (slave bond_slave_0): Releasing backup interface [ 1027.428142][T31765] bond0: (slave bond_slave_1): Releasing backup interface [ 1027.455639][T31765] team0: Port device team_slave_0 removed [ 1027.485649][T31765] team0: Port device team_slave_1 removed [ 1027.507499][T31765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.536894][T31765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.578904][T31765] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1027.596505][T31775] netlink: 66 bytes leftover after parsing attributes in process `syz.3.6853'. [ 1027.613184][T31781] bridge0: port 4(syz_tun) entered blocking state [ 1027.625739][T31781] bridge0: port 4(syz_tun) entered disabled state [ 1027.651103][T31781] syz_tun: entered allmulticast mode [ 1027.678820][T31781] syz_tun: entered promiscuous mode [ 1027.838497][T31789] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6857'. [ 1027.876695][T31796] netlink: 'syz.3.6861': attribute type 1 has an invalid length. [ 1027.963977][T31801] IPv6: Can't replace route, no match found [ 1027.966492][T31796] bond4: entered promiscuous mode [ 1027.981810][T31796] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1028.013333][T31801] IPv6: Can't replace route, no match found [ 1028.029107][T31803] netlink: 'syz.2.6857': attribute type 1 has an invalid length. [ 1028.153280][T31810] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6864'. [ 1028.184641][T31810] netlink: ct family unspecified [ 1028.195500][T31810] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.400716][T31817] netlink: 'syz.2.6865': attribute type 1 has an invalid length. [ 1028.426646][T31817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.824684][T31835] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6871'. [ 1029.351020][T31862] Cannot find del_set index 0 as target [ 1029.449203][T31863] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.6882'. [ 1029.477420][T31863] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 1029.496773][T31854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1029.547765][T31864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6881'. [ 1029.561250][T31848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1029.660381][T31864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6881'. [ 1030.344784][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1030.353228][ C0] lec:lec_tx_timeout: lec0 [ 1030.358438][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1030.397092][T31917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6896'. [ 1030.579831][T31932] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 1030.588561][T31935] netlink: 'syz.2.6901': attribute type 21 has an invalid length. [ 1030.705035][T31935] netlink: 'syz.2.6901': attribute type 4 has an invalid length. [ 1030.714620][T31935] netlink: 'syz.2.6901': attribute type 5 has an invalid length. [ 1030.879491][T31929] netlink: 'syz.6.6897': attribute type 2 has an invalid length. [ 1031.057673][T31929] : entered promiscuous mode [ 1031.155572][T31957] hsr0: entered promiscuous mode [ 1031.175982][T31957] hsr_slave_0: left promiscuous mode [ 1031.188926][T31957] hsr_slave_1: left promiscuous mode [ 1031.210808][T31957] hsr0 (unregistering): left promiscuous mode [ 1031.240855][T31962] SET target dimension over the limit! [ 1035.374861][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1035.383482][ C0] lec:lec_tx_timeout: lec0 [ 1035.388806][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1036.374902][ T5836] Bluetooth: hci6: command 0x0406 tx timeout [ 1040.404903][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1040.413319][ C0] lec:lec_tx_timeout: lec0 [ 1040.418831][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1046.214808][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 1046.223744][ C0] lec:lec_tx_timeout: lec0 [ 1046.229292][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1051.254932][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1051.263782][ C0] lec:lec_tx_timeout: lec0 [ 1051.269561][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1056.294965][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1056.305125][ C0] lec:lec_tx_timeout: lec0 [ 1056.310793][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1056.855363][T31967] Bluetooth: hci2: command 0x0406 tx timeout [ 1061.324920][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1061.333769][ C0] lec:lec_tx_timeout: lec0 [ 1061.338809][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1066.355196][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1066.371798][ C0] lec:lec_tx_timeout: lec0 [ 1066.385046][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1069.006803][T31989] bond3: option ad_user_port_key: invalid value (65535) [ 1069.061480][T31989] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 1069.110991][T31989] bond3 (unregistering): Released all slaves [ 1069.721407][T32028] validate_nla: 1 callbacks suppressed [ 1069.721428][T32028] netlink: 'syz.2.6925': attribute type 1 has an invalid length. [ 1070.031726][T32028] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1070.062124][T32028] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1070.192430][T32057] __nla_validate_parse: 5 callbacks suppressed [ 1070.192450][T32057] netlink: 51 bytes leftover after parsing attributes in process `syz.3.6932'. [ 1070.270197][T32058] netlink: 51 bytes leftover after parsing attributes in process `syz.3.6932'. [ 1070.296736][T32036] bond8: (slave gretap1): making interface the new active one [ 1070.335667][T32036] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 1070.383686][T32042] macvlan2: entered promiscuous mode [ 1070.403865][T32042] macvlan2: entered allmulticast mode [ 1070.418894][T32042] bond8: entered promiscuous mode [ 1070.443572][T32042] gretap1: entered promiscuous mode [ 1070.467355][T32042] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1070.502385][T32042] bond8: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1070.542756][T32042] bond8: left promiscuous mode [ 1070.568148][T32042] gretap1: left promiscuous mode [ 1070.739265][T32058] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1070.807350][T32082] netlink: 'syz.2.6934': attribute type 1 has an invalid length. [ 1070.808198][T32057] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1070.910712][T32083] IPv6: Can't replace route, no match found [ 1070.956879][T32083] IPv6: Can't replace route, no match found [ 1071.415133][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1071.424296][ C0] lec:lec_tx_timeout: lec0 [ 1071.429099][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1072.088163][ T31] INFO: task syz.1.6166:29168 blocked for more than 143 seconds. [ 1072.097073][ T31] Not tainted syzkaller #0 [ 1072.103058][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1072.114262][ T31] task:syz.1.6166 state:D stack:23272 pid:29168 tgid:29166 ppid:18225 task_flags:0x400140 flags:0x00080002 [ 1072.129885][ T31] Call Trace: [ 1072.134166][ T31] [ 1072.137496][ T31] __schedule+0x17b4/0x5680 [ 1072.142638][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1072.148994][ T31] ? __pfx_clockevents_program_event+0x10/0x10 [ 1072.155877][ T31] ? __pfx___schedule+0x10/0x10 [ 1072.161199][ T31] ? schedule+0x90/0x360 [ 1072.165730][ T31] schedule+0x164/0x360 [ 1072.170385][ T31] schedule_preempt_disabled+0x13/0x30 [ 1072.176169][ T31] __mutex_lock+0x7f5/0x1550 [ 1072.181693][ T31] ? __mutex_lock+0x606/0x1550 [ 1072.187353][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1072.193963][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1072.199285][ T31] ? __nlmsg_put+0xef/0x1b0 [ 1072.204444][ T31] ? genlmsg_put+0x137/0x2e0 [ 1072.209602][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1072.216717][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1072.224618][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1072.231816][ T31] genl_family_rcv_msg_doit+0x22a/0x330 [ 1072.238019][ T31] ? __asan_memcpy+0x40/0x70 [ 1072.242920][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1072.250237][ T31] genl_rcv_msg+0x61c/0x7a0 [ 1072.255704][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1072.261374][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 1072.269113][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 1072.275667][ T31] netlink_rcv_skb+0x232/0x4b0 [ 1072.280756][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1072.287069][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1072.293993][ T31] ? down_read+0x270/0x2e0 [ 1072.300042][ T31] ? genl_rcv+0xd/0x40 [ 1072.306187][ T31] genl_rcv+0x28/0x40 [ 1072.310717][ T31] netlink_unicast+0x75c/0x8e0 [ 1072.315862][ T31] netlink_sendmsg+0x813/0xb40 [ 1072.321641][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1072.327909][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1072.333356][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1072.339488][ T31] ____sys_sendmsg+0x972/0x9f0 [ 1072.345073][ T31] ? __might_fault+0xaf/0x130 [ 1072.351055][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1072.357076][ T31] ? import_iovec+0x73/0xa0 [ 1072.362259][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1072.367921][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1072.373893][ T31] ? __fget_files+0x2a/0x420 [ 1072.378965][ T31] ? __fget_files+0x3a0/0x420 [ 1072.384264][ T31] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1072.389800][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1072.397638][ T31] ? rcu_is_watching+0x15/0xb0 [ 1072.403160][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.410062][ T31] do_syscall_64+0x15f/0xf80 [ 1072.415166][ T31] ? trace_irq_disable+0x3b/0x140 [ 1072.420818][ T31] ? clear_bhb_loop+0x40/0x90 [ 1072.427340][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.433988][ T31] RIP: 0033:0x7fe99e19c819 [ 1072.438504][ T31] RSP: 002b:00007fe99f07f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.448631][ T31] RAX: ffffffffffffffda RBX: 00007fe99e415fa0 RCX: 00007fe99e19c819 [ 1072.458695][ T31] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 1072.468979][ T31] RBP: 00007fe99e232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1072.479158][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1072.489302][ T31] R13: 00007fe99e416038 R14: 00007fe99e415fa0 R15: 00007ffe0fea8138 [ 1072.501001][ T31] [ 1072.505589][ T31] [ 1072.505589][ T31] Showing all locks held in the system: [ 1072.517822][ T31] 1 lock held by khungtaskd/31: [ 1072.523776][ T31] #0: ffffffff8e95d020 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1072.539596][ T31] 3 locks held by kworker/u8:9/1113: [ 1072.546976][ T31] #0: ffff88801ae94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1072.564101][ T31] #1: ffffc9000563fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1072.580086][ T31] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1072.592291][ T31] 1 lock held by klogd/5185: [ 1072.597990][ T31] #0: ffff8880b863aea0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1072.612040][ T31] 1 lock held by dhcpcd/5492: [ 1072.618062][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1072.631259][ T31] 2 locks held by getty/5587: [ 1072.637113][ T31] #0: ffff8880376e90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1072.651977][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1072.663943][ T31] 2 locks held by syz.4.6014/28613: [ 1072.670858][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1072.680343][ T31] #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1072.694230][ T31] 2 locks held by syz.1.6166/29168: [ 1072.701424][ T31] #0: ffffffff8fe3ddc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1072.712769][ T31] #1: ffffffff8ec88660 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1072.726563][ T31] 2 locks held by syz.0.6929/32044: [ 1072.733023][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1072.744147][ T31] #1: ffffffff8e963328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1072.757361][ T31] 3 locks held by syz.5.6930/32050: [ 1072.763377][ T31] #0: ffff88807725b840 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1072.776025][ T31] #1: ffffffff8fe3be28 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 1072.789318][ T31] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 1072.800332][ T31] 2 locks held by syz.2.6934/32082: [ 1072.806232][ T31] #0: ffffffff90324f50 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1072.817416][ T31] #1: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1072.827149][ T31] 1 lock held by syz.6.6937/32090: [ 1072.833235][ T31] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1072.844322][ T31] 3 locks held by syz.3.6938/32096: [ 1072.851594][ T31] #0: ffffffff8fffb1c0 (ioctl_mutex){+.+.}-{4:4}, at: do_vcc_ioctl+0x2fa/0x9d0 [ 1072.865873][ T31] #1: ffffffff8fdc01c8 (pernet_ops_rwsem){++++}-{4:4}, at: register_netdevice_notifier+0x90/0x440 [ 1072.879992][ T31] #2: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier+0x95/0x440 [ 1072.892256][ T31] [ 1072.895208][ T31] ============================================= [ 1072.895208][ T31] [ 1072.906033][ T31] NMI backtrace for cpu 1 [ 1072.906054][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1072.906071][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1072.906080][ T31] Call Trace: [ 1072.906087][ T31] [ 1072.906096][ T31] dump_stack_lvl+0xe8/0x150 [ 1072.906123][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1072.906145][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1072.906169][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1072.906192][ T31] sys_info+0x135/0x170 [ 1072.906210][ T31] watchdog+0xfaa/0x1000 [ 1072.906232][ T31] ? watchdog+0x209/0x1000 [ 1072.906253][ T31] kthread+0x388/0x470 [ 1072.906269][ T31] ? __pfx_watchdog+0x10/0x10 [ 1072.906282][ T31] ? __pfx_kthread+0x10/0x10 [ 1072.906298][ T31] ret_from_fork+0x514/0xb70 [ 1072.906322][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1072.906340][ T31] ? __switch_to+0xc79/0x1410 [ 1072.906361][ T31] ? __pfx_kthread+0x10/0x10 [ 1072.906376][ T31] ret_from_fork_asm+0x1a/0x30 [ 1072.906409][ T31] [ 1072.906416][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1073.038384][ C0] NMI backtrace for cpu 0 [ 1073.038402][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1073.038420][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1073.038430][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1073.038454][ C0] Code: 5b 74 02 e9 c3 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 4d 16 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1073.038468][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000242 [ 1073.038482][ C0] RAX: 00000000004935f1 RBX: ffffffff819a67ea RCX: 0000000080000001 [ 1073.038494][ C0] RDX: 0000000000000001 RSI: ffffffff8dfb65fa RDI: ffffffff8c27f000 [ 1073.038505][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 1073.038517][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 1073.038527][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 1073.038539][ C0] FS: 0000000000000000(0000) GS:ffff888125245000(0000) knlGS:0000000000000000 [ 1073.038551][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1073.038562][ C0] CR2: 00007f7e1b002d39 CR3: 00000000758b6000 CR4: 00000000003526f0 [ 1073.038576][ C0] Call Trace: [ 1073.038584][ C0] [ 1073.038590][ C0] default_idle+0x9/0x20 [ 1073.038610][ C0] default_idle_call+0x72/0xb0 [ 1073.038630][ C0] do_idle+0x36a/0x5f0 [ 1073.038655][ C0] ? __pfx_do_idle+0x10/0x10 [ 1073.038676][ C0] ? do_idle+0x5c1/0x5f0 [ 1073.038703][ C0] cpu_startup_entry+0x43/0x60 [ 1073.038724][ C0] rest_init+0x2de/0x300 [ 1073.038744][ C0] start_kernel+0x38a/0x3e0 [ 1073.038766][ C0] x86_64_start_reservations+0x24/0x30 [ 1073.038782][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1073.038797][ C0] common_startup_64+0x13e/0x147 [ 1073.038822][ C0] [ 1073.259492][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1073.267046][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1073.277643][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1073.288851][ T31] Call Trace: [ 1073.293209][ T31] [ 1073.297347][ T31] vpanic+0x56c/0xa60 [ 1073.301851][ T31] ? __pfx___schedule+0x10/0x10 [ 1073.307383][ T31] ? __pfx_vpanic+0x10/0x10 [ 1073.312738][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1073.318258][ T31] panic+0xc5/0xd0 [ 1073.322963][ T31] ? __pfx_panic+0x10/0x10 [ 1073.327922][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1073.333842][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1073.340809][ T31] watchdog+0xff4/0x1000 [ 1073.345354][ T31] ? watchdog+0x209/0x1000 [ 1073.350269][ T31] kthread+0x388/0x470 [ 1073.355497][ T31] ? __pfx_watchdog+0x10/0x10 [ 1073.361072][ T31] ? __pfx_kthread+0x10/0x10 [ 1073.366282][ T31] ret_from_fork+0x514/0xb70 [ 1073.371191][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1073.376756][ T31] ? __switch_to+0xc79/0x1410 [ 1073.382147][ T31] ? __pfx_kthread+0x10/0x10 [ 1073.387511][ T31] ret_from_fork_asm+0x1a/0x30 [ 1073.393571][ T31] [ 1073.397653][ T31] Kernel Offset: disabled [ 1073.402085][ T31] Rebooting in 86400 seconds..