last executing test programs: 2.841630326s ago: executing program 0 (id=2471): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @empty, 0x2000001}, 0x1c) setsockopt$sock_int(r4, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0x8001, 0x43}, 0xffff, [0xde99, 0x8e9, 0xc, 0xbf2, 0x10, 0xfffffffffffffffb, 0x4000000000, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x6, 0x4, 0x6, 0x8, 0x0, 0x4]}) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x7ff, 0x20000000, 0x1, 0x8}, @multicast2, @broadcast, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x60, 0x0, 0x1, 0x74bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xdc2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x400}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x7) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x5c, r7, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x65}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x84}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24044054}, 0x844) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xfffffffd}, &(0x7f0000000080)=0x8) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2.45295518s ago: executing program 4 (id=2476): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000000)=0x7b, 0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000100)=@proc={0x1d, 0x0, 0x25dfdbfc, 0x20000000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f00000001c0)=ANY=[], 0x28}, {&(0x7f0000000340)=ANY=[], 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='gretap0 8', @ANYRESOCT=r3], 0x6e) unshare(0x20480) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0)=0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x890, 0x4c0, 0x590, 0x2b8, 0x4c0, 0x3a8, 0x7c0, 0x7c0, 0x7c0, 0x7c0, 0x7c0, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x39}, @private1, [0x0, 0x0, 0xffffffff, 0xffffff00], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0x290, 0x2b8, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x2f, 0x0, 0xe, 0x0, 0x3ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xffffff00, 0xff000000, 0xff, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff000000], 0x1001, 0xb10}}, @common=@inet=@hashlimit3={{0x158}, {'team_slave_1\x00', {0xf76, 0xff, 0x20, 0x7, 0xb, 0xaeae, 0x7f, 0x6b1d1c17, 0x80, 0x78}, {0x8}}}]}, @HL={0x28, 'HL\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@rand_addr=0x64010101, 0x18, 0xfc, 0x7ff}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff000000, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xffffffff], 'dummy0\x00', 'bond_slave_0\x00', {}, {}, 0xff, 0x2, 0x0, 0x28}, 0x0, 0xa8, 0x118, 0x48000000}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1ff, 0x8, 0x4, 0x1, 0x0, "52146ee9ae44b62f269737ed481b837e8196a5702a25a4409e992b2c65fd4ce47d5510261c8694c511bcdcbca881691621e9e9f5a9cc6d7b009686f0fdb6fdc2"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private0, @private0, @empty, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x22}, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, @dev={0xfe, 0x80, '\x00', 0x10}, @ipv4={'\x00', '\xff\xff', @rand_addr=0xfffffff8}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8f0) r7 = getgid() setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={r5, 0xee00, r7}, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0xf7, r8, 0x1, 0x7, 0x6, @broadcast}, 0x47) r9 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) writev(r4, &(0x7f0000000740)=[{&(0x7f0000000040)="5f0baeb63c62", 0x6}], 0x1) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, 0x0, &(0x7f0000000100)=0x21) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ac14b93cecf36c601500ac1e0101ac1e00019f8ca3876e29d5e60b11be1de6a6afaa7782485962e9d67e836dc98e32100d9d7018de9ab9a9b1f42c3dd8e06564a3bcf462ccfdfc34031a1c83ecc5bbce36ba42cb87c3da7d79bfaa00f83cdf8565461a50ad765a565d40000c81f02b3a5a84d4db773062a0931ea6b30b1133dcf0000000000000000000000000000e00"], 0x18) socket$netlink(0x10, 0x3, 0xa) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000b050000000000000000000200000908000100753332000800024000000001080003"], 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0xc0) write$cgroup_pid(r9, &(0x7f0000000240)=r5, 0x12) 2.431913455s ago: executing program 1 (id=2477): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0x24, &(0x7f0000000180), &(0x7f00000001c0)=0xe) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a4000c8", @ANYRES32=r2, @ANYBLOB="140002"], 0x2c}}, 0x400c0c0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.199091866s ago: executing program 4 (id=2479): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) 2.198376312s ago: executing program 2 (id=2480): socket$inet6(0xa, 0xa, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x1f, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd2c, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffff}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x47e2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xd, 0x1}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfffffffffffffe6e, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x6, 0x1, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.031765518s ago: executing program 1 (id=2482): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r0 = socket(0x2, 0xa, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000)=0x2, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000001d80)={{}, {0xffffffffffffffff}, 0x0, 0x0, 0x0, &(0x7f0000001900)='./file0\x00', &(0x7f0000001940)='./file0\x00', &(0x7f0000001980)="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", 0x200, 0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x1df}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000002100010001000000000000000a00000000000000000000000600150002000000080003"], 0x50}}, 0x24004044) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @multicast1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) close(r0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1b}, {0x2, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x3e}]}}]}, 0x3c}}, 0x4814) (async, rerun: 32) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) (rerun: 32) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5, 0x4012, r4, 0x80000000000) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r5, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) (async, rerun: 32) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) (rerun: 32) close(r6) (async, rerun: 64) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000018c0)={&(0x7f0000000380), 0xc, &(0x7f0000001880)={&(0x7f0000000400)=ANY=[@ANYBLOB="74140000130001002bbd7000fcdbdf251501080b4e244e230300000000800400050000000700000004000000030000000100000000800000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1474}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000001) (async, rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r8, @ANYBLOB="01002dbd7000fedbdf250100000014000200776732000000000000000000000000002400030000000000000000000000000000000000000000000000000000000000000000005c0108806800008024000200935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c0824000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300020000001400040002004e2464010102000000000000000078000080200004000a004e2100000002fc0200000000000000000000000000010002000008000a00010000002400010000000000000000000000000000000000000000000000000000000000000000001400040002004e21ac1414aa00000000000000001400040002004e207f0000"], 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.720142511s ago: executing program 1 (id=2484): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d6ed0d20a0000000000"], &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1b, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09200000000000550901000000008095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa1000000d500000f010000f8ffffffb702000008000000b7030000faffffff8500000006000000181100001981c89191a4db5b84a1283e48b6ee82deb2214698c26134e70db62da6c917f87301d96eb2988d871c88462aff5119ac", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b702000003000000850000002a000000b7000000000500009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @local}}, 0x10, 0x2, 0x10001, 0xa63, 0x1}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r5, 0x7}, &(0x7f0000000440)=0xc) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d6ed0d20a0000000000"], &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x1}, 0x28) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1b, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf09200000000000550901000000008095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa1000000d500000f010000f8ffffffb702000008000000b7030000faffffff8500000006000000181100001981c89191a4db5b84a1283e48b6ee82deb2214698c26134e70db62da6c917f87301d96eb2988d871c88462aff5119ac", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b702000003000000850000002a000000b7000000000500009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @local}}, 0x10, 0x2, 0x10001, 0xa63, 0x1}, &(0x7f00000003c0)=0x98) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r5, 0x7}, &(0x7f0000000440)=0xc) (async) 1.590934523s ago: executing program 0 (id=2486): bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@mcast2, @private2, @remote, 0x1, 0x3, 0x7904, 0x500, 0x0, 0x41440000}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x328, 0x2e8, 0x2e8, 0x328, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x190, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x700, 0x100, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee0500000000000000ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06d7d4e252c3394fed47bf78c70f607b0178fa5ea3350ebc989f1f34a214e67442ce98bbaa8e0f7323a4ca0a7be6c60c527bac2b500", 0x1, 0x3}}, @common=@inet=@set2={{0x28}, {{0xfffe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@remote, @loopback, [], [], 'macvtap0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0xfffffffffffffffd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) unshare(0x20000400) splice(r5, &(0x7f0000000040), r3, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000280)={0xffffffffffffffff, 0x1, 0x8, r8, 0x7fffffff}, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.531186923s ago: executing program 2 (id=2487): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000780)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x38, 0x1, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffff, 0xb}, {0xa, 0xffff}, {0x5, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) socket(0x40000000015, 0x5, 0x0) r4 = socket(0x15, 0x5, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x60, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xfffffffffffffffc}, {0xfffffffffffffffd}}}, 0xb8}}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000170000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596f8aca1f26c4e54dd3c839c63ecba701f7518abef56"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)=ANY=[@ANYBLOB="140100002400010026bd7000fedbdf25020100800c00010002000000000000004c00648045000f800c00630092000000000000009d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f508009400", @ANYRES32=r9, @ANYBLOB="00000050bb2d6f67d29d6f95adb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b948256ab5863c14a6e60ccfc3f9cb87dcf285856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a"], 0x114}], 0x1}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r10, 0x2f, 0x0, 0x0, @void, @value=r11}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32=r10, @ANYRES32=r12, @ANYBLOB="2f0000003020000004000000", @ANYRES32=0x0, @ANYBLOB="d06049feda428d8e27b6e17b833abb7f595ec7286e7480789d78d4471f078e01096b9017f7b54eb07ca3872d49faa19c33c55c2a39ae6cecce354db6b4e8d47d09e10b0c8e19bc96681dd2240d0df49c0ce5135d95637f47ef1c73bcccc626399d2e9fe95c37ec2d7f007ece793d397ee91b51afc2354763360ed3d60433f4fe431e5890846639d2b4890130a1fcff8854dc03d669bbf4d374ebf9734fe0e15d8b92e93b6dc8", @ANYRES64=0x0], 0x20) 1.501627599s ago: executing program 3 (id=2488): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) unshare(0x22020400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1d, 0x7, 0x7, 0x9, 0x2000, r0, 0xff, '\x00', r3, r1, 0x0, 0x4, 0x1}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a4000140200009002cea19853626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.455137739s ago: executing program 1 (id=2489): unshare(0x20480) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r0, 0x3) unshare(0x20000400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r2, 0x701, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140"], 0x88}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @private0={0xfc, 0x0, '\x00', 0x5}, 0x8de}}}, 0x32) r11 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x32) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f0000000780)={0x0, 0xfffffffffffffffb, 0x1, [0xe431, 0xffffffffffffffff, 0xd, 0xfffffffffffffffc, 0x4d50], [0x2, 0xfffffffffffffffb, 0x9ef, 0xfffffffffffffd91, 0xe3, 0xfffffffffffffff9, 0x3, 0x5, 0xffffffff, 0x6, 0xb7, 0x7, 0x7, 0x9, 0x1, 0x0, 0x9, 0x1, 0x6, 0x92, 0x6359e287, 0x1, 0x0, 0xb, 0x9, 0xca6, 0x0, 0x3, 0x1, 0x5, 0x3, 0x5, 0x6, 0x8, 0x3, 0x6, 0x1, 0x6, 0x191, 0xffffffff, 0x9, 0x6, 0x7, 0xfffffffffffffff7, 0xc5cf, 0x1, 0x7, 0x3, 0x7f, 0x6, 0x471d, 0x6, 0x5, 0x6, 0xb, 0x2, 0x1, 0x100000001, 0x9, 0x9, 0x1, 0x6, 0x5, 0x9, 0xfff, 0x3736, 0x1, 0xb, 0x2, 0x4, 0x1, 0x6, 0x1, 0x8e, 0x10000, 0x5, 0xfb, 0xfffffffffffffff9, 0x1, 0xe, 0x0, 0x3, 0x491, 0x4, 0x8, 0x341, 0x56, 0x8, 0x94, 0x80, 0x400, 0x8, 0x6, 0xfffffffffffff464, 0x5483146d, 0x3, 0x100, 0x1, 0x10000000, 0x401, 0x1, 0xebfc, 0x6, 0xfffffffffffffffd, 0x200, 0xab, 0x0, 0x7, 0x7, 0xffffffffffffff00, 0x10000, 0xac, 0x800, 0x1, 0xf91, 0x5, 0x6, 0x9, 0x5, 0xca, 0xffffffff80000001]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000000e40)={{r6}, 0x0, 0x4, @inherit={0x58, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000002000000000000000104000000000000010000000000000004000000000000000104000000000000040000000000000007000000000000000700000000000000010000000000000000000000000000806f67e4e62ff6d873965245c5ec984b5d0fca59d8b3ac8ea726514d881fd65ad194c1c46c5cb7857792c526c2a10fef20e6938b5b246972afe26dfbdfdd4a7b8326ab8c038b133c7cdf9e142172c3e9f758a70d7fd641bbabe4090e5d342a1028472cdf555a682d402c8b531a0a48a18d"]}, @devid=r12}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r8, &(0x7f0000000140)={0x11, 0x0, r13, 0x1, 0x6, 0x6, @remote}, 0x14) 1.376277219s ago: executing program 0 (id=2490): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB="c200000000d6f51a8d645c24d9f2ecf579f80f4b05ba1703cc9842ca955a99d488710dd861e12bc547444f79e5dd7490944f5e94d7cefb7434c7c97a14d5ab00"/78, @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) (async) syz_genetlink_get_family_id$nl80211(0x0, r3) socket(0x1, 0x6, 0x0) (async) socket(0x1, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) accept(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080002807235ab6208000700", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080002807235ab6208000700", @ANYRES32=r6, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) socket$nl_netfilter(0x10, 0x3, 0xc) 1.28366835s ago: executing program 4 (id=2491): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x28, 0x4, 0x0, 0xfffff014}, {0x6, 0x1, 0x0, 0x4}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000140)=0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x368, 0x1f, 0x2, 0x70bd27, 0x25dfdc00, {0x3, 0x7c}, [@generic="7350d2d62d853406b38be18c1f96ecaeda86b2304832d8f0aa324d10f31cba47caa3cf5bdadde22230a5f93594b56e267d2c5a10fc290bf74570c6e76b6339a903d4412356016d6968ec037e1b2c65f298249dcedbf1c9b8460df91a6f8e99a0250151e99cf794d78fe26a6ac873ef3a43f38a9d703d9c5fc95f1fcc1c8fd389453b27621f629e3d91067a7014601e41ae337bd0a7f8ed2c2b9beaf913a077408c6a522902bb35e02815", @nested={0x0, 0x140, 0x0, 0x1, [@generic="f594425d02ac12bf5fba8fe4e66c97e2a2a4baad98c96a6f5e8c0f8a67219adc607d2fb88e2f97c7d08c84c1", @typed={0x0, 0x7d, 0x0, 0x0, @ipv4=@empty}, @generic="b34505ef6bab06c74a84a1da838ac4e7ddbe72ad4de549d974b828710a2be7e322b227b556e27b69cb7123c98591897abfdfdfd42ab4eb2de0101778632165bf738de7853fa0a687cb185b32b5eda17dcf228f", @nested={0x0, 0x143, 0x0, 0x1, [@typed={0x0, 0x41, 0x0, 0x0, @binary="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"}, @typed={0x0, 0x36, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="49b937b0eb0ef15bedec16d0ac69dcc04770b037f5d479977af02c22be497618c3ba943d0142f2c16bb109cfc07de5cc9febca56ee2179995ebaa3dbd0d85e19ab981e37ba9b6576e47c1bd09b3baadae4b8f571e3f9a81fcdc814655d95dc2b7c2eeafec6cc7809b24517c08cfc99b0977c0c9cffa9e70735fbbcbbc2664374ef94c679f92a974081cbb634b47b8651e0248e7663dad3b20298af3902fb2d6d6f6ded25995baac2f272f30243ab", @nested={0x0, 0x4e}, @nested={0x0, 0x13}, @typed={0x0, 0x13d, 0x0, 0x0, @str='@\x00'}, @generic="4522c303fa92151065e54dd6ceba9f5bc00209f5ace3a191ba738a2e78ae55dfee2bcc5aec6a8745ff4d18d8c0475f574cd911f4f9cafac783ca5d09e97fb1303ae65c8760e6b0d7cf53eb2aeace8908efccd4217b0e6b4addf203172755531db87f627651eca9a235df98566fcf47c6909666c24879afed35cbe7a5385b6613cc278978c90ab6e89cde374eb7cef2b0fc395a18d9dbe13e608242c2789be9c86b2d764e8cbd0a7b383f5de0e962e50b91e5d29596f4bcc79ee73c6318366a412a14e53fbb365a9554e30bd2dd69f44b", @typed={0x0, 0x130, 0x0, 0x0, @uid=r2}]}]}, @generic="eb1558cb20c8783e439e687e4ac1539c9f92a9a992c99c9e64da54f482d500b35b5a20f5dadb4363159f5d88ada47b9ffb55b7f9d8af37a118a36254c326eba8b719ede818480d997d680cf462458e482ea6eddad07bc0d21d97926232c2938bec8e54f8736cd34985c44e"]}, 0x368}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) 1.246225282s ago: executing program 2 (id=2492): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x4, 0x4}, {0x3, 0xfff3}}}, 0x24}}, 0x90) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf2512000000180001801400020076657468300000000000000008000000080009"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.134180409s ago: executing program 3 (id=2493): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x11) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x200, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xa, 0x9}, {0x6, 0x9}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x662}}]}, 0x38}}, 0x20004055) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001000010402000000ff0000003b3e5ea3", @ANYRES32=0x0, @ANYBLOB="2b03000000000000"], 0x20}}, 0x48000) (rerun: 64) r1 = socket$netlink(0x10, 0x3, 0xc) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000400"/20, @ANYRES32=r2, @ANYBLOB="8400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000400"/28], 0x50) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000011a05000000003100010000"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x40000d0) (async) close(0x3) (async, rerun: 32) r3 = socket(0x2, 0x80805, 0x0) (async, rerun: 32) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000280)={r6}, &(0x7f00000002c0)=0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="e800000040000701fcffffff00000100047c0000c8004280c400078008000200", @ANYRES32=0x0, @ANYBLOB="14008e00fc01000000000000000000000000000108009400ac1e00018387208b699867b9bd1cefabde3291166b5c9d51ed44de595a0dbc8840bcf0a1151318b83fc2d2b195cba9c6e5b61c2a5cf6b7e78cc95ef855bec181a7a6daf86edb291d2cb029d875096895872653148bf077da80fe816b638dd81a396eec95e773e4b7619c0dcf446089bc98604ba9e7b1c91f521d319da64680048803c9f5c68506ed4cda83c5208d7b48080c412e26ab7fa2babe0b1735139a6d0c0001800600060080"], 0xe8}, 0x1, 0x0, 0x0, 0x4040041}, 0xc000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010028bd700000dcf4250a000000", @ANYRES32, @ANYBLOB="060000001400010000000000000000000000000000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x400, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.124369742s ago: executing program 4 (id=2494): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f40)={0xffffffffffffffff, 0xe0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000001d40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001d80), &(0x7f0000001dc0), 0x8, 0x26, 0x8, 0x8, &(0x7f0000001e00)}}, 0x10) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) getuid() r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x192}}, 0x20}}, 0x0) sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001640)="88b124f85a4ecd7eb5f515b9b195180d58aa373f9e7ef72285ea96a5c267cd35919c8d241cedc54830d379abc7b145757c2e14992bba34b6d6d2b6ba5d01caa6f76d5a10f6ffc638c4cdfa8d04c6cb5a76e6534a12d5afc71d6125aed277488dd331e045acb74dc5065ddbe14748fee863e21e4b59e37c6697d3ebef8d2c66c0dbe841f3b594a95403c2cb596b8a6c995ec9553e6381d7091398d55363863309ade9d718a4dc7779f1338a9da6d2cc119d8eea1e3255b0cc74c6f6a1f099372a596dd1", 0xc3}, {&(0x7f0000001740)="328979e2547cbf3cef00208db939f4db92daa509509eda3600f6a7ed98f3fff3dd730fd7e35b0de12e5487db5ba4", 0x2e}, {&(0x7f0000001780)="d1a88874f7cfdb8629ddf332342d486ea4909d23d1859703fa3efa402f8c631aa3ca854fb350c30df2b365c95bb8d947b0c28c897e145f217c413668a3843a428beef7302cc0818a1e62e600a075e621e7c0556493c9eef14b50ebe598cd4a6d8734bae8240b3cc67703145218e82348c09bb4962b8f99d6dc1332fb9c29dcbd6a083011137abdc1afd172fcc969c99110b0c7691d9c325bd326833cbaf90c46ac92578af887", 0xa6}, {&(0x7f0000001840)="96ae34dd59e7a0ec8fe3ea4fc944a1a1ab6b55b08f9dfa0779297b7ca3971bb5d9a4d710be8d2d6404063d7b05e5f264926f5fa508fede9e3155fb7a51c192caba374ad31615007a1075b2d5f330352bd48c607630872ba36821c7d3dc200b396d94ac62bc9b5400f8131058569838cb43b8954790a49d0afa52b35b20b34176381cb6849d8a5b074991f346fe81e77c975728fcda4d", 0x96}, {&(0x7f0000001900)="d2e619", 0x3}, {&(0x7f0000001940)="1c0db9fd56a9db3538f06c4aa523e17f6cfa803fe0a27c66819b15dfcee9c9b17afc74e440e69ac8237d49739ab924491f213a54f196e046cdab315958935cce6878a1571889ee25ed3e81dbd9c5c0323edde50b28839d8067e26681c61f66d95240809333babf450a7a8ce48fbf536f247deaf846b208afbe4db492bdc712d174d38cb10168dc620065550ac2c5a2807e98f7f031f43bf4c537eff5caa76ca6cd4dd362153ab253e160fcaf6604bd5bf0941075ae54ee1f1313e6c9165b2739e315aba40453a8011cd6f3bf6da6a831a8c858b2dfb86c", 0xd7}, {&(0x7f0000001a40)="eeb400f28ec39138154a6575c32d17ec4ece72970fb36203f255aa602f6500119a2fce7dff788f692f4b27efb7c0e5cde72ef3fb580f5ef7695ebc8c50acdec164631a80aa0b5c5f2cb46c291120f61fbfe76466edc3ef743da370a3013e93a8cdfcc35dc716fd84eb950dcbde90085934b06eb8b5d90f9fe145db53cc7a13e56fae9c5a4fdf9525de86810ea48440bc46f94bb411b2293d2619617d284779c463b0f0cb85cb7339d002e069fbc94a72e4e022569eeee5a7cf28dade25476b3176688580865151", 0xc7}, {&(0x7f0000001b40)="59fb864ba48ca00d91fd023fcc508a8e5c22805ee539ebf5377cb254f19ec8edce95f5daaef7fe35935afdc9e54e6a5c34a24daf7b4652706305c15e0b4da068716ce6d16cce0469bae5e4f2550098ba536354615e6de7c8203329da6d994ec56cc060aa7575c36f23feb32a4c1bcaa67caf1a5b290695ba0b1306927df2a4cc1b58e051a4f1d1bdbab3b8754f15f5734510c61b1a49d21a0717a863fb0c2ac241fafe0987259c14fb454543ae54ace76f5aa0d494db404dda2990d1e7c99c38", 0xc0}], 0x8, &(0x7f0000001f80)=[@ip_retopts={{0x60, 0x0, 0x7, {[@rr={0x7, 0x13, 0x8e, [@multicast2, @empty, @local, @remote]}, @rr={0x7, 0x23, 0x1d, [@remote, @remote, @broadcast, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local]}, @timestamp={0x44, 0x18, 0xb1, 0x0, 0x6, [0x7fff, 0xc1c, 0x8368, 0x8b, 0x0]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x29}, @dev={0xac, 0x14, 0x14, 0xe}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9e9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @local}}}], 0xb8}, 0x4000) (async) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r7], 0x30}}, 0x0) (async) r8 = accept4(r6, 0x0, &(0x7f0000000080), 0x80800) recvmsg$can_j1939(r8, &(0x7f0000001600)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/62, 0x3e}, {&(0x7f00000012c0)=""/68, 0x44}, {&(0x7f0000001340)=""/247, 0xf7}, {&(0x7f0000001440)=""/198, 0xc6}], 0x6, &(0x7f00000015c0)=""/49, 0x31}, 0x40012100) 1.051330633s ago: executing program 3 (id=2495): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/71, 0x47}, 0x6}], 0x2, 0x40010002, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61105c00000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916360000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x772}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000004d}, 0x4000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x4, 0x2, 0xff7f}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c045}, 0x40) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r5, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xb}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x84}, 0x40040) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) r6 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r6) 1.005006248s ago: executing program 2 (id=2496): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004850}, 0x40) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0xffffffffffffff6a, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="d8000000180081054e040000004cb9040a1df6e49b548059fe080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000f35b0461c1d67f6f94007134cf6efb726bd6dea290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc44121d9d322fe7c008775730d16a4683f5aeb4edbb57a5025ccd9e3bb9ad809d5e1cace815a531bc927b40bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/223, 0xdf}], 0x1}, 0x4000000) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x1}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000680)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '!\x00', 0x10, 0x6, 0x0, @private0, @mcast2, {[], @ndisc_ra}}}}}, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) (async) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x52, 0x0, 0xfffffffd, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r10, 0x20, &(0x7f00000001c0)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/89, 0x59}}, 0x10) 935.209514ms ago: executing program 4 (id=2497): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r3 = socket$kcm(0x29, 0xa, 0x0) recvmsg$kcm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/181, 0xb5}, {&(0x7f0000000280)=""/120, 0x78}, {&(0x7f0000000300)}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/119, 0x77}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f00000004c0)=""/74, 0x4a}, {&(0x7f0000000540)=""/32, 0x20}, {&(0x7f0000000580)=""/95, 0x5f}], 0x9, &(0x7f00000006c0)=""/91, 0x5b}, 0x40002020) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r1, @ANYBLOB="08004d01", @ANYRES32=r0], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) 749.840341ms ago: executing program 0 (id=2498): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x24, r1, 0x1, 0x70bd2b, 0x255fdbfc, {0x1, 0x0, 0x300}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x8c0) 748.68501ms ago: executing program 4 (id=2499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0x19}], 0x3) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r3], 0x50) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendto$packet(r8, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x85, 0x6, @broadcast}, 0x14) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa0000006}) close(0x3) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYRES32=r1, @ANYRES32], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYRESHEX=r5], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) 734.178485ms ago: executing program 3 (id=2500): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close(r2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x24040084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002940)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r4, {0x0, 0x2281965a7a17aedf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0xffff, 0x3, 0x2, 0xb9c}, {0xfa, 0x0, 0x6, 0x4, 0x2, 0x87d}, 0x80, 0x91e, 0x217}}, @TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PRATE64={0xc, 0x5, 0x5a90d3d52efb08c}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100e0187eb8d8d8cd00000000000000000000000a50000000060a0b0400000000000000000200fffe2400048020000180080001006e61740014000280080901400000000108000340000000130900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500000a"], 0x78}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000040)='\x00', 0x1) 642.613933ms ago: executing program 2 (id=2501): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2, 0x8880, 0xb18a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}, @IFLA_PHYS_SWITCH_ID={0x1a, 0x24, "0016fdda770af9eee343bf61d5c221cac400fe4ba594"}]}, 0x4c}}, 0x24000880) socket$unix(0x1, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r9, 0xc0385869, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8084) writev(r10, &(0x7f0000000480)=[{&(0x7f0000000080)='X\x00\x00', 0x3}], 0x1) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) 560.546417ms ago: executing program 0 (id=2502): r0 = socket$kcm(0x29, 0x4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'lo\x00'}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) unshare(0x30000800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r6) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r7, 0x112, 0xb, 0x0, &(0x7f00000000c0)) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='nicvf0\x00', 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x52, 0x0, 0x0, 0x1}, 0x28) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r9, 0x6, 0x4, 0x0, &(0x7f0000000000)=0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000170000004c0006803c00040067000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca419890400050008000600ffffffff00"/90], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) unshare(0x400) recvmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2022) ioctl$SIOCSIFHWADDR(r11, 0xff04, 0x0) socket$kcm(0x2, 0x7, 0x0) 515.572518ms ago: executing program 1 (id=2503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0000000202010400000000000000000200000004000180300003802ce1018014000300fc0000000000000000000000000000001400040000000000000000000000000000000001240002801400018008000100ac1414aa08000200ac14143b0c000280040001", @ANYRES64=r0, @ANYRESOCT=r0], 0x6c}, 0x1, 0x0, 0x0, 0x4028005}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c5610a600000000000000000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x80003, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "000b0000000236c5b301b2fb0c7400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000140)=0x80) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r10], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11}, 0xc) (async) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) r13 = accept4(r12, 0x0, 0x0, 0x80800) (async) r14 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f00000002c0)={0x10000018}) (async, rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x28}}, 0x81) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_newneigh={0x48, 0x1c, 0x4, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x0, 0x0, r7, 0x20, 0x62, 0x4}, [@NDA_VNI={0x8, 0x7, 0xb}, @NDA_IFINDEX={0x8, 0x8, r9}, @NDA_PROBES={0x8, 0x4, 0xfffffffa}, @NDA_LINK_NETNSID={0x8, 0xa, 0xdb0a}, @NDA_LLADDR={0xa, 0x2, @random="1600"}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040011) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_generic(0x10, 0x3, 0x10) 194.837406ms ago: executing program 3 (id=2504): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r3], 0x50}}, 0x2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000a, 0x10, r0, 0xe95f7000) 193.994255ms ago: executing program 1 (id=2505): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x480, 0x278, 0x98, 0x278, 0x278, 0x278, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x3e8, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1e0}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x10}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x2, 0x0, 0x2, 0x4, 0x3, 0x3]}}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ppoll(&(0x7f0000000080)=[{r1, 0x800}], 0x1, &(0x7f0000000180)={0x0, 0x3938700}, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)={0x88, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x60a}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc6}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) syz_emit_ethernet(0x16, &(0x7f0000000240)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, 'c', "f876a7", 0x6c0c}}}}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000)=0x420, 0x4) 115.127071ms ago: executing program 2 (id=2506): r0 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x6, 0x6}]}, 0x10) r1 = socket(0x2b, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x10200, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000740)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 22.000098ms ago: executing program 3 (id=2507): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000c00)={{r2, &(0x7f0000000980)='geneve1\x00', 0x50000, &(0x7f0000000a40)={@_ha_fsid={[0x10000, 0x8]}, {0x4, 0x6, 0x6, 0x1503}}, 0x2, &(0x7f0000000a80)={@_ha_fsid}, &(0x7f0000000ac0)=0x2}, {[0x400, 0x3, 0x6, 0x5]}, 0x3, 0xc4, &(0x7f0000000b00)=""/196}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x10, &(0x7f0000000840)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x1}], &(0x7f00000008c0)='GPL\x00', 0x72, 0x43, &(0x7f0000000900)=""/67, 0x40f00, 0x20, '\x00', r3, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', r3, 0x40, 0x7, 0xd, 0x1000, {{0x2c, 0x4, 0x0, 0x3, 0xb0, 0x65, 0x0, 0x1, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x54, 0xc7, 0x3, 0x3, [{@rand_addr=0x64010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x4}, {@rand_addr=0x64010101, 0x7}, {@empty}, {@broadcast, 0x656d}, {@broadcast, 0xb}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x1}, {@multicast2, 0xfffffff9}]}, @cipso={0x86, 0x44, 0x3, [{0x1, 0x11, "c56c16c9c17eb07764963068433129"}, {0x0, 0xb, "f25f9d23c8e8f587b9"}, {0x6, 0x4, "9022"}, {0x7, 0x2}, {0x2, 0xb, "0caf3bdfd1f47e5110"}, {0x2, 0x8, "2cbb73f6ea63"}, {0x0, 0x9, "47fd2894f4e946"}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x14c, r10, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20040844}, 0x0) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x5) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="7400000010001fff00000000010000", @ANYRES32=0x0, @ANYBLOB="10000000000000004c0012800b00010067726574617000003c00028008000500080000002c90651de1b9c3050017000000000005000a0000000000080006007f0000010500170000000000060002000900000008000700e0", @ANYRES32=r12, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 0s ago: executing program 0 (id=2508): syz_emit_ethernet(0x82, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ee527e004c3c0000000000000000000000000000000100ff02000000000000000000000000000133"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x6, 0x4f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}, @in={0x2, 0x4e21, @local}], 0x20) clock_gettime(0x0, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x8f71, 0x100, 0x4, 0x6, 0x3ae2, 0x2, 0xb, 0x7ff}, &(0x7f00000000c0)={0x7, 0xfff, 0xe5, 0xc, 0xfffffffffffffff2, 0xf, 0xf, 0x1}, &(0x7f0000000100)={0x100000001, 0x7, 0x5, 0x8, 0x4057eadb, 0x4000000, 0x5, 0x6}, &(0x7f00000001c0)={r3, r4+60000000}, &(0x7f0000000340)={&(0x7f0000000240)={[0x1]}, 0x8}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}], 0x10) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}], 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000800000000200000085000000610000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): s in process `syz.1.857'. [ 190.938510][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.859'. [ 191.072299][ T9452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 191.750633][ T9471] netlink: 216 bytes leftover after parsing attributes in process `syz.4.866'. [ 191.798710][ T9471] netlink: 'syz.4.866': attribute type 2 has an invalid length. [ 191.808389][ T9471] netlink: 'syz.4.866': attribute type 1 has an invalid length. [ 192.640905][ T9509] netlink: 'syz.1.874': attribute type 29 has an invalid length. [ 192.703663][ T9501] netlink: 'syz.1.874': attribute type 29 has an invalid length. [ 192.723259][ T9501] netlink: 'syz.1.874': attribute type 29 has an invalid length. [ 192.851698][ T9515] xt_hashlimit: size too large, truncated to 1048576 [ 193.012954][ T9520] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 193.210691][ T9495] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 193.927997][ T9554] __nla_validate_parse: 26 callbacks suppressed [ 193.928018][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 194.062166][ T9555] netlink: 120 bytes leftover after parsing attributes in process `syz.0.887'. [ 194.073123][ T9555] netlink: 64 bytes leftover after parsing attributes in process `syz.0.887'. [ 194.371090][ T9566] netlink: 44 bytes leftover after parsing attributes in process `syz.4.893'. [ 194.382344][ T9569] netlink: 44 bytes leftover after parsing attributes in process `syz.4.893'. [ 194.630387][ T9578] sock: sock_set_timeout: `syz.4.897' (pid 9578) tries to set negative timeout [ 194.805287][ T9590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.901'. [ 195.162470][ T9613] netlink: 312 bytes leftover after parsing attributes in process `syz.1.907'. [ 195.255331][ T9613] validate_nla: 20 callbacks suppressed [ 195.255351][ T9613] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 195.980421][ T9646] macsec1: entered promiscuous mode [ 195.995980][ T9646] bridge0: entered promiscuous mode [ 196.469890][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 196.561647][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 196.827111][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.924'. [ 197.038746][ T9688] ip6gretap0: entered promiscuous mode [ 197.302830][ T9703] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 197.371983][ T9708] netlink: 'syz.1.932': attribute type 2 has an invalid length. [ 197.395486][ T9708] netlink: 'syz.1.932': attribute type 2 has an invalid length. [ 197.707340][ T9717] pimreg9: entered allmulticast mode [ 197.828240][ T9723] netlink: 'syz.2.935': attribute type 2 has an invalid length. [ 199.589351][ T9723] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 199.621371][ T9723] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 199.641244][ T9723] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 199.997999][ T9759] __nla_validate_parse: 5 callbacks suppressed [ 199.998018][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.946'. [ 200.016094][ T9754] netlink: 52 bytes leftover after parsing attributes in process `syz.2.944'. [ 200.038851][ T9757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 200.174775][ T9759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.224386][ T9760] bond1: entered promiscuous mode [ 200.244920][ T9760] bond1: entered allmulticast mode [ 200.276187][ T9760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.298408][ T9760] team0: Port device bond1 added [ 200.355787][ T9757] macsec1: entered promiscuous mode [ 200.361371][ T9757] macsec1: entered allmulticast mode [ 200.388824][ T9764] syzkaller1: entered promiscuous mode [ 200.406719][ T9764] syzkaller1: entered allmulticast mode [ 200.728923][ T9784] pim6reg: entered allmulticast mode [ 200.750541][ T9786] netlink: 40 bytes leftover after parsing attributes in process `syz.4.951'. [ 201.092167][ T9792] netlink: 'syz.4.952': attribute type 10 has an invalid length. [ 201.136014][ T9792] netlink: 'syz.4.952': attribute type 10 has an invalid length. [ 201.164330][ T9792] team0: Port device netdevsim1 removed [ 201.186096][ T9792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.217271][ T9792] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 201.568170][ T9806] FAULT_INJECTION: forcing a failure. [ 201.568170][ T9806] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 201.626295][ T9806] CPU: 1 UID: 0 PID: 9806 Comm: syz.3.956 Not tainted syzkaller #0 PREEMPT(full) [ 201.626326][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 201.626347][ T9806] Call Trace: [ 201.626358][ T9806] [ 201.626366][ T9806] dump_stack_lvl+0xe8/0x150 [ 201.626409][ T9806] should_fail_ex+0x412/0x560 [ 201.626438][ T9806] _copy_from_user+0x2d/0xb0 [ 201.626472][ T9806] do_sock_getsockopt+0x200/0x7e0 [ 201.626501][ T9806] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 201.626539][ T9806] ? __fget_files+0x3a0/0x420 [ 201.626563][ T9806] ? __fget_files+0x2a/0x420 [ 201.626594][ T9806] __x64_sys_getsockopt+0x1a4/0x240 [ 201.626623][ T9806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.626644][ T9806] do_syscall_64+0x174/0x580 [ 201.626665][ T9806] ? trace_irq_disable+0x3b/0x140 [ 201.626696][ T9806] ? clear_bhb_loop+0x40/0x90 [ 201.626720][ T9806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.626739][ T9806] RIP: 0033:0x7f3c3539ce59 [ 201.626765][ T9806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.626785][ T9806] RSP: 002b:00007f3c36313028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 201.626809][ T9806] RAX: ffffffffffffffda RBX: 00007f3c35615fa0 RCX: 00007f3c3539ce59 [ 201.626824][ T9806] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000004 [ 201.626835][ T9806] RBP: 00007f3c36313090 R08: 0000200000001340 R09: 0000000000000000 [ 201.626847][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.626858][ T9806] R13: 00007f3c35616038 R14: 00007f3c35615fa0 R15: 00007ffc815e87d8 [ 201.626889][ T9806] [ 202.476870][ T9821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.542259][ T9835] netlink: 'syz.4.966': attribute type 1 has an invalid length. [ 202.568340][ T9835] netlink: 96 bytes leftover after parsing attributes in process `syz.4.966'. [ 202.631686][ T9835] netlink: 'syz.4.966': attribute type 1 has an invalid length. [ 202.664394][ T9835] netlink: 'syz.4.966': attribute type 8 has an invalid length. [ 202.683625][ T9835] netlink: 582 bytes leftover after parsing attributes in process `syz.4.966'. [ 202.757476][ T9835] netlink: 1 bytes leftover after parsing attributes in process `syz.4.966'. [ 203.252113][ T9863] netlink: 'syz.1.972': attribute type 29 has an invalid length. [ 203.376980][ T9866] tls_set_device_offload: netdev not found [ 203.569510][ T9875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.974'. [ 203.786089][ T5645] Bluetooth: hci4: link tx timeout [ 203.803724][ T5645] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.938143][ T9886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.981'. [ 204.030576][ T9890] netlink: 40 bytes leftover after parsing attributes in process `syz.3.983'. [ 204.103659][ T9892] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20003 [ 204.613837][ T9918] FAULT_INJECTION: forcing a failure. [ 204.613837][ T9918] name failslab, interval 1, probability 0, space 0, times 1 [ 204.637600][ T9918] CPU: 1 UID: 0 PID: 9918 Comm: syz.2.989 Not tainted syzkaller #0 PREEMPT(full) [ 204.637629][ T9918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 204.637642][ T9918] Call Trace: [ 204.637650][ T9918] [ 204.637659][ T9918] dump_stack_lvl+0xe8/0x150 [ 204.637689][ T9918] should_fail_ex+0x412/0x560 [ 204.637719][ T9918] should_failslab+0xa8/0x100 [ 204.637741][ T9918] ? security_inode_alloc+0x39/0x310 [ 204.637775][ T9918] kmem_cache_alloc_noprof+0x87/0x650 [ 204.637816][ T9918] security_inode_alloc+0x39/0x310 [ 204.637853][ T9918] inode_init_always_gfp+0x995/0xd50 [ 204.637886][ T9918] ? __pfx_sock_alloc_inode+0x10/0x10 [ 204.637916][ T9918] alloc_inode+0x82/0x1b0 [ 204.637943][ T9918] __sock_create+0x12d/0x9d0 [ 204.637986][ T9918] mptcp_subflow_create_socket+0xfb/0x800 [ 204.638023][ T9918] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 204.638056][ T9918] ? do_raw_spin_lock+0x12b/0x2f0 [ 204.638086][ T9918] ? lock_sock_nested+0x6a/0x100 [ 204.638120][ T9918] __mptcp_nmpc_sk+0x155/0x790 [ 204.638153][ T9918] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 204.638188][ T9918] ? mptcp_getsockopt+0x1030/0x1ed0 [ 204.638221][ T9918] ? __local_bh_enable_ip+0xd0/0x130 [ 204.638249][ T9918] mptcp_getsockopt+0x106e/0x1ed0 [ 204.638290][ T9918] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 204.638320][ T9918] ? filemap_map_pages+0x1e6/0x2100 [ 204.638358][ T9918] ? filemap_map_pages+0x1c96/0x2100 [ 204.638409][ T9918] ? __lock_acquire+0x6b5/0x2cf0 [ 204.638442][ T9918] ? __pfx_filemap_map_pages+0x10/0x10 [ 204.638475][ T9918] ? __css_rstat_updated+0x23a/0x530 [ 204.638499][ T9918] ? __pfx___css_rstat_updated+0x10/0x10 [ 204.638531][ T9918] ? count_memcg_event_mm+0x21/0x260 [ 204.638565][ T9918] ? count_memcg_event_mm+0x21/0x260 [ 204.638590][ T9918] ? count_memcg_event_mm+0x21/0x260 [ 204.638622][ T9918] ? handle_mm_fault+0x245d/0x3170 [ 204.638666][ T9918] ? handle_mm_fault+0xf1/0x3170 [ 204.638702][ T9918] ? __pfx_handle_mm_fault+0x10/0x10 [ 204.638736][ T9918] ? __up_read+0x291/0x6b0 [ 204.638772][ T9918] ? __pfx___up_read+0x10/0x10 [ 204.638804][ T9918] ? do_user_addr_fault+0xbad/0x1340 [ 204.638835][ T9918] ? do_user_addr_fault+0xc6f/0x1340 [ 204.638865][ T9918] ? irqentry_exit+0x218/0x8b0 [ 204.638888][ T9918] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.638912][ T9918] ? irqentry_exit+0x218/0x8b0 [ 204.638934][ T9918] ? trace_irq_disable+0x3b/0x140 [ 204.638985][ T9918] ? rep_movs_alternative+0xf/0x90 [ 204.639013][ T9918] ? sock_common_getsockopt+0x2d/0xb0 [ 204.639049][ T9918] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 204.639082][ T9918] do_sock_getsockopt+0x51d/0x7e0 [ 204.639113][ T9918] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 204.639156][ T9918] ? __fget_files+0x3a0/0x420 [ 204.639191][ T9918] ? __fget_files+0x2a/0x420 [ 204.639225][ T9918] __x64_sys_getsockopt+0x1a4/0x240 [ 204.639256][ T9918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.639279][ T9918] do_syscall_64+0x174/0x580 [ 204.639302][ T9918] ? trace_irq_disable+0x3b/0x140 [ 204.639333][ T9918] ? clear_bhb_loop+0x40/0x90 [ 204.639360][ T9918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.639381][ T9918] RIP: 0033:0x7f0b5439ce59 [ 204.639401][ T9918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.639418][ T9918] RSP: 002b:00007f0b551ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 204.639440][ T9918] RAX: ffffffffffffffda RBX: 00007f0b54615fa0 RCX: 00007f0b5439ce59 [ 204.639456][ T9918] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000004 [ 204.639468][ T9918] RBP: 00007f0b551ce090 R08: 0000200000001340 R09: 0000000000000000 [ 204.639482][ T9918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.639494][ T9918] R13: 00007f0b54616038 R14: 00007f0b54615fa0 R15: 00007ffd419b0e58 [ 204.639529][ T9918] [ 205.029671][ T9918] socket: no more sockets [ 205.097172][ T9920] __nla_validate_parse: 4 callbacks suppressed [ 205.097193][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.991'. [ 205.196186][ T9927] netlink: 72 bytes leftover after parsing attributes in process `syz.3.994'. [ 205.319672][ T9933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'. [ 205.542321][ T9939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.825209][ T9958] netlink: 'syz.1.1005': attribute type 1 has an invalid length. [ 205.869740][ T5650] Bluetooth: hci4: command 0x0405 tx timeout [ 206.183195][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 206.198753][ T9965] netlink: 'syz.0.1006': attribute type 15 has an invalid length. [ 206.207249][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1006'. [ 206.359639][ T9941] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 206.391054][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1002'. [ 206.563298][ T9958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.579494][ T5645] Bluetooth: hci1: command 0x0406 tx timeout [ 206.585712][ T5650] Bluetooth: hci2: command 0x0406 tx timeout [ 206.592046][ T5650] Bluetooth: hci3: command 0x0406 tx timeout [ 206.678833][ T9960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.691624][ T9960] bond2: (slave gre2): The slave device specified does not support setting the MAC address [ 206.704349][ T9960] bond2: (slave gre2): Error -95 calling set_mac_address [ 206.746945][ T9962] gretap1: entered promiscuous mode [ 206.778538][ T9962] bond2: (slave gretap1): making interface the new active one [ 206.811428][ T9962] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 206.881907][ T9963] macvlan3: entered promiscuous mode [ 206.903235][ T9963] macvlan3: entered allmulticast mode [ 206.917720][ T9963] bond2: entered promiscuous mode [ 206.932304][ T9963] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 206.961804][ T9963] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 206.985595][ T9963] bond2: left promiscuous mode [ 207.273690][T10006] tipc: Enabled bearer , priority 0 [ 207.331944][T10006] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 207.377659][T10006] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 207.443115][T10006] tipc: Resetting bearer [ 207.623892][T10019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1016'. [ 207.759962][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'. [ 208.081329][T10043] SET target dimension over the limit! [ 208.340294][ T2176] tipc: Node number set to 1174835385 [ 208.371683][T10052] syzkaller0: entered promiscuous mode [ 208.384357][T10052] syzkaller0: entered allmulticast mode [ 208.432516][T10052] tipc: Started in network mode [ 208.447964][T10052] tipc: Node identity 9e8ffd5ad411, cluster identity 4711 [ 208.486094][T10052] tipc: Enabled bearer , priority 0 [ 208.503044][T10058] netlink: 'syz.1.1029': attribute type 11 has an invalid length. [ 208.511224][T10051] tipc: Resetting bearer [ 208.565041][T10051] tipc: Disabling bearer [ 208.627363][T10058] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1029'. [ 208.636748][T10071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1032'. [ 209.600086][T10120] netlink: 'syz.3.1045': attribute type 10 has an invalid length. [ 209.665379][T10120] team0: Device vxcan1 is of different type [ 210.044021][T10138] dvmrp0: entered allmulticast mode [ 210.384852][T10154] netlink: 'syz.1.1053': attribute type 1 has an invalid length. [ 210.412488][T10154] __nla_validate_parse: 2 callbacks suppressed [ 210.412509][T10154] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1053'. [ 210.447286][T10154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1053'. [ 210.640805][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 210.691319][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 210.846335][T10169] netlink: 'syz.0.1059': attribute type 1 has an invalid length. [ 212.077190][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 212.128139][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 212.202288][T10199] tipc: Started in network mode [ 212.223658][T10199] tipc: Node identity 56a1ca2481a, cluster identity 4711 [ 212.248734][T10199] tipc: Enabled bearer , priority 0 [ 212.402609][T10200] syzkaller0: entered promiscuous mode [ 212.416050][T10200] syzkaller0: entered allmulticast mode [ 212.429691][T10200] tipc: Resetting bearer [ 212.447541][T10206] gre1: entered allmulticast mode [ 212.453869][T10198] tipc: Resetting bearer [ 212.575614][T10220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1070'. [ 214.265120][T10198] tipc: Disabling bearer [ 214.303761][ T5801] tipc: Node number set to 3607218724 [ 214.537152][T10232] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 214.575356][T10225] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 214.585201][T10236] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 214.594708][ T5801] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 214.633734][T10237] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1075'. [ 214.678763][T10232] bridge2: entered promiscuous mode [ 214.703115][T10232] bridge2: entered allmulticast mode [ 214.727633][T10232] team0: Port device bridge2 added [ 214.766479][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1078'. [ 214.933395][T10251] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1081'. [ 215.062291][T10259] netlink: 'syz.3.1081': attribute type 10 has an invalid length. [ 215.165974][T10259] team0: Port device dummy0 added [ 215.175832][T10268] netlink: 'syz.0.1085': attribute type 21 has an invalid length. [ 215.183994][T10258] : renamed from bond0 (while UP) [ 215.294610][T10261] team1: entered promiscuous mode [ 215.302733][T10261] team1: entered allmulticast mode [ 215.308426][T10261] 8021q: adding VLAN 0 to HW filter on device team1 [ 215.329415][T10269] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 215.450767][T10269] team2: entered promiscuous mode [ 215.485348][T10269] team2: entered allmulticast mode [ 215.510090][T10269] 8021q: adding VLAN 0 to HW filter on device team2 [ 215.646504][T10282] syzkaller0: entered promiscuous mode [ 215.658602][T10282] syzkaller0: entered allmulticast mode [ 215.688679][T10282] tipc: Enabled bearer , priority 0 [ 215.721223][T10282] tipc: Resetting bearer [ 215.788441][T10281] tipc: Resetting bearer [ 215.855342][T10281] tipc: Disabling bearer [ 215.923456][T10294] netlink: 'syz.1.1095': attribute type 13 has an invalid length. [ 216.216859][T10312] netlink: 'syz.1.1095': attribute type 2 has an invalid length. [ 216.247048][T10312] __nla_validate_parse: 4 callbacks suppressed [ 216.247067][T10312] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1095'. [ 216.313447][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1101'. [ 216.417093][T10301] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig [ 216.436102][T10314] netlink: 'syz.0.1098': attribute type 16 has an invalid length. [ 216.461869][T10314] netlink: 'syz.0.1098': attribute type 17 has an invalid length. [ 216.470311][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1095'. [ 216.705431][T10328] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 216.714901][T10314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.734692][T10314] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.753015][T10314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.809122][T10314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.831009][T10314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 216.841977][T10314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.859950][T10314] veth1_vlan: left promiscuous mode [ 216.867110][T10314] veth0_vlan: left promiscuous mode [ 216.874138][T10314] veth0_vlan: entered promiscuous mode [ 216.884981][T10314] veth1_vlan: entered promiscuous mode [ 216.899845][T10314] veth1_macvtap: left promiscuous mode [ 216.908050][T10314] veth0_macvtap: left promiscuous mode [ 216.916028][T10314] veth0_macvtap: entered promiscuous mode [ 216.924197][T10314] veth1_macvtap: entered promiscuous mode [ 216.941910][T10314] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.968221][T10314] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.981886][T10314] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.992802][T10314] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.000679][T10314] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 217.037326][T10315] team0: Port device dummy0 removed [ 217.217270][ T9968] IPVS: starting estimator thread 0... [ 217.319412][T10336] IPVS: using max 34 ests per chain, 81600 per kthread [ 217.616894][T10315] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.649774][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.657007][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.674502][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.681749][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.775124][ T160] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.900142][ T160] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.910010][ T160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.942373][ T160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.227051][T10361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1111'. [ 218.304638][T10357] bridge0: port 3(vlan0) entered blocking state [ 218.319738][T10357] bridge0: port 3(vlan0) entered disabled state [ 218.336534][T10357] vlan0: entered allmulticast mode [ 218.360313][T10357] dummy0: entered allmulticast mode [ 218.403678][T10357] vlan0: entered promiscuous mode [ 218.408935][T10357] dummy0: entered promiscuous mode [ 218.465191][T10368] bond4: Unable to set up delay as MII monitoring is disabled [ 218.478974][T10368] bond4 (unregistering): Released all slaves [ 218.683062][T10387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1114'. [ 218.714387][T10387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1114'. [ 218.761790][T10387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1114'. [ 218.777030][T10387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1114'. [ 219.307894][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 219.331617][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 219.468712][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.507179][T10419] syzkaller1: entered promiscuous mode [ 219.523624][T10419] syzkaller1: entered allmulticast mode [ 219.859522][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 219.911167][T10425] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 220.087121][T10432] smc: net device wlan0 applied user defined pnetid SYZ0 [ 220.321487][T10438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.532586][T10448] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 220.696571][T10448] 8021q: adding VLAN 0 to HW filter on device bond8 [ 220.796734][T10455] bond8: (slave geneve2): making interface the new active one [ 220.813883][T10455] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 220.925763][T10460] netlink: 'syz.4.1137': attribute type 5 has an invalid length. [ 221.179774][T10474] nbd: socks must be embedded in a SOCK_ITEM attr [ 221.463932][T10483] __nla_validate_parse: 5 callbacks suppressed [ 221.463950][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1142'. [ 221.607917][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1143'. [ 221.845648][T10497] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1146'. [ 222.169172][T10504] netlink: 'syz.4.1149': attribute type 1 has an invalid length. [ 222.197621][T10504] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1149'. [ 222.270050][T10504] netlink: 'syz.4.1149': attribute type 10 has an invalid length. [ 222.320291][T10504] : (slave netdevsim1): Releasing backup interface [ 222.335338][T10504] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 222.362540][T10504] team0: Port device netdevsim1 added [ 222.649058][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1156'. [ 222.814335][T10527] netlink: 'syz.3.1157': attribute type 2 has an invalid length. [ 222.841656][T10529] netlink: 'syz.3.1157': attribute type 12 has an invalid length. [ 222.852601][T10529] netlink: 'syz.3.1157': attribute type 11 has an invalid length. [ 222.869580][T10529] netlink: 212004 bytes leftover after parsing attributes in process `syz.3.1157'. [ 223.095886][T10529] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.121769][T10529] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 223.254815][T10535] netlink: 480 bytes leftover after parsing attributes in process `syz.0.1158'. [ 223.266074][T10535] netlink: 480 bytes leftover after parsing attributes in process `syz.0.1158'. [ 223.394272][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 223.439438][T10543] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 223.760846][T10555] netlink: 'syz.2.1163': attribute type 3 has an invalid length. [ 223.768990][T10555] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 223.777474][T10555] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1163'. [ 224.098439][T10564] tipc: New replicast peer: 255.255.255.255 [ 224.106613][T10564] tipc: Enabled bearer , priority 10 [ 224.123764][T10564] xt_hashlimit: size too large, truncated to 1048576 [ 224.131954][T10564] xt_hashlimit: max too large, truncated to 1048576 [ 224.345558][T10576] No such timeout policy "syz1" [ 224.727458][T10601] syzkaller1: entered promiscuous mode [ 224.775641][T10601] syzkaller1: entered allmulticast mode [ 225.084849][T10622] syzkaller0: entered promiscuous mode [ 225.090769][T10622] syzkaller0: entered allmulticast mode [ 225.116718][ T9968] tipc: Node number set to 2523338691 [ 225.807404][T10643] ipt_rpfilter: unknown options [ 227.636239][T10591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.209065][T10668] netlink: 'syz.1.1189': attribute type 8 has an invalid length. [ 228.295066][T10674] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004 [ 228.667224][T10674] bond1: left promiscuous mode [ 228.701993][T10674] bridge2: left promiscuous mode [ 228.745650][T10674] veth5: left promiscuous mode [ 228.810726][T10674] bond7: left promiscuous mode [ 228.827713][T10674] geneve2: left promiscuous mode [ 228.847061][T10674] macsec1: left promiscuous mode [ 228.854248][T10674] team1: left promiscuous mode [ 228.883731][T10674] team2: left promiscuous mode [ 228.930019][T10676] pim6reg: entered allmulticast mode [ 229.283753][T10701] x_tables: duplicate underflow at hook 1 [ 229.347473][T10706] __nla_validate_parse: 68 callbacks suppressed [ 229.347492][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1200'. [ 229.388265][T10711] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1201'. [ 230.361661][T10756] netlink: 'syz.2.1212': attribute type 1 has an invalid length. [ 230.405329][T10758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.412700][T10758] IPv6: NLM_F_CREATE should be set when creating new route [ 230.420245][T10758] IPv6: NLM_F_CREATE should be set when creating new route [ 230.927491][T10756] 8021q: adding VLAN 0 to HW filter on device bond5 [ 231.424737][T10793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1222'. [ 231.634028][T10796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1225'. [ 231.659006][T10796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1225'. [ 232.268129][T10822] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 232.487092][T10832] netlink: 'syz.1.1233': attribute type 10 has an invalid length. [ 232.571777][T10832] team0 (unregistering): Failed to send port change of device bond1 via netlink (err -105) [ 232.599887][T10832] team0 (unregistering): Port device bond1 removed [ 232.635643][T10834] bridge0: port 4() entered blocking state [ 232.642631][T10834] bridge0: port 4() entered disabled state [ 232.649091][T10834] : entered allmulticast mode [ 232.654664][T10834] bond_slave_0: entered allmulticast mode [ 232.665617][T10834] bond_slave_1: entered allmulticast mode [ 232.677092][T10834] : entered promiscuous mode [ 232.695558][T10834] bond_slave_0: entered promiscuous mode [ 232.719648][T10834] bond_slave_1: entered promiscuous mode [ 232.875279][T10846] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1238'. [ 232.904327][T10850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1238'. [ 233.208919][T10865] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.380791][T10868] pimreg9: entered allmulticast mode [ 233.404284][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1245'. [ 233.451652][T10875] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 233.477272][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1245'. [ 233.622307][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 233.676510][T10886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.351553][T10911] openvswitch: netlink: Flow key attr not present in new flow. [ 234.698123][T10931] __nla_validate_parse: 1 callbacks suppressed [ 234.698143][T10931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1256'. [ 234.780833][T10931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1256'. [ 234.828901][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1257'. [ 235.115748][T10946] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1258'. [ 235.151521][T10950] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1260'. [ 235.188420][T10954] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1260'. [ 235.499456][T10966] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1265'. [ 235.672037][ T5295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 235.858241][T10979] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan1, syncid = 4, id = 0 [ 235.905812][T10983] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1269'. [ 236.151309][T11002] netlink: 'syz.4.1273': attribute type 1 has an invalid length. [ 236.184906][T11002] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 236.296424][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1276'. [ 236.928773][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 237.390884][T11020] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 237.409375][T11020] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 237.480735][T11020] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 237.497054][T11020] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 237.543962][T11020] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 237.573311][T11020] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 237.670603][T11020] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 237.691568][T11020] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 237.705665][T11049] netlink: 'syz.1.1288': attribute type 27 has an invalid length. [ 238.127282][T11063] erspan0: entered promiscuous mode [ 238.335686][T11069] netlink: 'syz.1.1293': attribute type 8 has an invalid length. [ 239.067248][T11092] bond4: entered promiscuous mode [ 239.080458][T11092] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.177105][T11103] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.283097][T11094] bridge8: entered promiscuous mode [ 239.302411][T11094] bond4: (slave bridge8): Enslaving as an active interface with an up link [ 239.366987][T11107] netlink: 'syz.1.1304': attribute type 1 has an invalid length. [ 239.565056][T11117] syzkaller0: entered promiscuous mode [ 239.583852][T11117] syzkaller0: entered allmulticast mode [ 239.749804][ T5647] block nbd3: Receive control failed (result -32) [ 239.989014][T11139] __nla_validate_parse: 7 callbacks suppressed [ 239.989033][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 240.054027][T11136] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 240.074156][T11136] bond9 (unregistering): Released all slaves [ 240.111048][T11139] vlan1: entered promiscuous mode [ 240.116273][T11139] gretap0: entered promiscuous mode [ 240.487147][T11162] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1321'. [ 240.610005][T11168] netlink: 'syz.1.1323': attribute type 4 has an invalid length. [ 240.632314][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1322'. [ 240.649713][T11168] netlink: 'syz.1.1323': attribute type 4 has an invalid length. [ 240.915372][T11183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1328'. [ 240.953815][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'. [ 241.077443][T11188] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1329'. [ 241.234862][T11196] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.1331'. [ 241.384461][T11201] syzkaller1: entered promiscuous mode [ 241.400204][T11201] syzkaller1: entered allmulticast mode [ 241.416707][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 241.745016][T11217] syzkaller0: entered promiscuous mode [ 241.752042][T11217] syzkaller0: entered allmulticast mode [ 242.134569][T11237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1342'. [ 242.149440][T11237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1342'. [ 242.160136][T11239] netlink: 'syz.4.1341': attribute type 5 has an invalid length. [ 242.603899][T11269] sctp: [Deprecated]: syz.1.1347 (pid 11269) Use of int in maxseg socket option. [ 242.603899][T11269] Use struct sctp_assoc_value instead [ 242.716106][T11267] : entered promiscuous mode [ 245.270734][T11279] __nla_validate_parse: 2 callbacks suppressed [ 245.270756][T11279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1348'. [ 245.303605][T11292] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 245.327789][T11284] ip6tnl0: Caught tx_queue_len zero misconfig [ 246.019016][T11349] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1359'. [ 246.368362][T11372] netlink: 'syz.1.1367': attribute type 49 has an invalid length. [ 246.730907][T11364] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 246.841032][T11364] netlink: 5508 bytes leftover after parsing attributes in process `syz.3.1365'. [ 246.921227][T11382] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1368'. [ 247.032863][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 247.065618][T11385] netlink: 'syz.4.1370': attribute type 5 has an invalid length. [ 247.362550][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 247.579087][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1374'. [ 247.620904][T11414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1376'. [ 247.697460][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 247.736193][T11393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.755218][T11393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.946590][T11401] batadv0: entered promiscuous mode [ 247.974675][T11401] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 248.152351][T11411] bond0: option arp_all_targets: invalid value (8) [ 248.179178][T11411] bond0 (unregistering): Released all slaves [ 248.215796][ T133] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.232917][ T133] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.244944][ T133] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.741966][T11455] openvswitch: netlink: Missing key (keys=40, expected=100) [ 248.794331][T11447] bond3: option fail_over_mac: invalid value (127) [ 248.821120][T11447] bond3 (unregistering): Released all slaves [ 249.540222][ T160] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.552321][ T160] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.635628][ T160] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.723053][ T160] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.376181][T11508] __nla_validate_parse: 10 callbacks suppressed [ 250.376204][T11508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1402'. [ 250.414560][T11516] netlink: 'syz.0.1403': attribute type 3 has an invalid length. [ 250.552384][T11507] syzkaller0: entered promiscuous mode [ 250.568217][T11507] syzkaller0: entered allmulticast mode [ 250.594843][T11517] syzkaller0: entered promiscuous mode [ 250.612393][T11517] syzkaller0: entered allmulticast mode [ 250.723754][T11513] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 250.747204][T11523] tipc: Enabled bearer , priority 0 [ 250.768724][T11506] tipc: Resetting bearer [ 250.827097][T11506] tipc: Disabling bearer [ 250.902669][T11502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1400'. [ 253.360294][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 253.404131][T11551] ip6tnl2: entered allmulticast mode [ 253.445836][T11555] netlink: 'syz.4.1411': attribute type 8 has an invalid length. [ 253.590748][T11542] syzkaller0: entered promiscuous mode [ 253.609687][T11542] syzkaller0: entered allmulticast mode [ 254.077031][T11575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.971527][T11554] ip6erspan0: entered allmulticast mode [ 256.018412][T11582] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 256.359641][T11604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1417'. [ 256.983216][T11628] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1428'. [ 257.007387][T11631] netlink: 'syz.2.1427': attribute type 21 has an invalid length. [ 257.045444][T11631] netlink: 'syz.2.1427': attribute type 21 has an invalid length. [ 257.170719][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 257.208245][T11649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1432'. [ 257.242988][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1431'. [ 257.420697][T11657] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1435'. [ 257.740548][T11672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1438'. [ 258.082122][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 258.228349][T11701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1446'. [ 258.398472][T11704] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1447'. [ 259.812089][T11764] netlink: 'syz.2.1463': attribute type 3 has an invalid length. [ 259.873410][T11764] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 260.832741][T11839] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 261.338237][T11867] sctp: [Deprecated]: syz.3.1484 (pid 11867) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.338237][T11867] Use struct sctp_sack_info instead [ 261.442089][T11867] __nla_validate_parse: 7 callbacks suppressed [ 261.442107][T11867] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1484'. [ 261.874812][T11895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1490'. [ 261.906335][ T5647] block nbd4: Receive control failed (result -32) [ 261.958573][T11899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1491'. [ 262.253467][T11917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1495'. [ 262.253822][T11916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1497'. [ 262.301142][T11918] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1497'. [ 262.321708][T11917] vlan2: entered promiscuous mode [ 262.348482][T11917] geneve1: entered promiscuous mode [ 262.359537][T11917] vlan2: entered allmulticast mode [ 262.368775][T11917] geneve1: entered allmulticast mode [ 262.426985][T11922] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 262.621569][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1501'. [ 262.634015][T11929] x_tables: duplicate underflow at hook 1 [ 265.338818][T11946] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 265.684741][T11967] netlink: 'syz.3.1515': attribute type 11 has an invalid length. [ 265.711140][T11967] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1515'. [ 265.993815][T11986] pimreg: entered allmulticast mode [ 266.034827][T11985] pimreg: left allmulticast mode [ 267.203004][T12037] netlink: 'syz.4.1535': attribute type 83 has an invalid length. [ 267.338903][T12053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1538'. [ 267.550401][T12061] netlink: 'syz.0.1541': attribute type 1 has an invalid length. [ 267.614424][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1541'. [ 267.630130][T12061] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1541'. [ 267.670023][T12068] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 268.020284][T12087] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1548'. [ 268.141445][T12099] syzkaller1: entered promiscuous mode [ 268.156001][T12099] syzkaller1: entered allmulticast mode [ 268.292818][T12108] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 268.301082][T12108] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1552'. [ 268.778571][T12123] netlink: 'syz.1.1560': attribute type 1 has an invalid length. [ 268.791113][T12123] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1560'. [ 268.836021][T12119] geneve4: entered promiscuous mode [ 268.847044][T12119] geneve4: entered allmulticast mode [ 268.855408][ T1168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 268.865092][ T1168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 268.879589][T12123] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 268.890720][ T1168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 268.956103][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1561'. [ 269.198608][T12145] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001 [ 269.277826][T12148] trusted_key: syz.4.1564 sent an empty control message without MSG_MORE. [ 269.366300][T12150] sctp: [Deprecated]: syz.2.1567 (pid 12150) Use of int in maxseg socket option. [ 269.366300][T12150] Use struct sctp_assoc_value instead [ 269.827856][T12168] netlink: 'syz.1.1571': attribute type 10 has an invalid length. [ 269.874538][T12168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1571'. [ 269.891581][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1574'. [ 269.955209][T12182] bond0: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 269.990399][T12182] bond0 (unregistering): Released all slaves [ 270.412759][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1581'. [ 270.635859][T12214] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.691072][T12208] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 270.780586][T12208] macvlan0: entered promiscuous mode [ 270.796500][T12208] macvlan0: entered allmulticast mode [ 270.805373][T12208] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 270.977318][T12226] sock: sock_set_timeout: `syz.2.1587' (pid 12226) tries to set negative timeout [ 271.251908][T12233] tipc: Enabled bearer , priority 0 [ 271.284424][T12233] syzkaller0: entered promiscuous mode [ 271.318556][T12233] syzkaller0: entered allmulticast mode [ 271.345648][T12235] SET target dimension over the limit! [ 271.360509][T12231] tipc: Resetting bearer [ 271.410000][T12238] xt_bpf: check failed: parse error [ 271.480405][T12231] tipc: Disabling bearer [ 271.810536][T12245] bond5: entered allmulticast mode [ 272.116188][T12263] sctp: [Deprecated]: syz.1.1598 (pid 12263) Use of int in max_burst socket option. [ 272.116188][T12263] Use struct sctp_assoc_value instead [ 272.171168][T12263] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 272.315074][T12266] bond6: option primary_reselect: invalid value (6) [ 272.440038][T12266] bond6 (unregistering): Released all slaves [ 272.789637][T12293] tipc: Enabled bearer , priority 0 [ 272.808636][T12289] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 272.835084][T12289] __nla_validate_parse: 11 callbacks suppressed [ 272.835104][T12289] netlink: 1008 bytes leftover after parsing attributes in process `syz.2.1605'. [ 272.964695][T12291] tipc: Disabling bearer [ 272.980481][T12304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1608'. [ 273.180901][T12315] netlink: 'syz.1.1611': attribute type 2 has an invalid length. [ 273.210207][T12315] netlink: 'syz.1.1611': attribute type 8 has an invalid length. [ 273.235458][T12315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1611'. [ 273.325167][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1613'. [ 273.371885][T12326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1613'. [ 273.530464][T12333] bond0: option arp_validate: invalid value (55553) [ 273.648348][T12339] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1616'. [ 273.700408][T12345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1616'. [ 273.806971][T12345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1616'. [ 273.825033][T12341] bond6: option all_slaves_active: invalid value (127) [ 273.866219][T12341] bond6 (unregistering): Released all slaves [ 273.961585][T12345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1616'. [ 274.430219][T12370] netlink: 'syz.1.1622': attribute type 39 has an invalid length. [ 274.752353][T12387] xt_TCPMSS: Only works on TCP SYN packets [ 274.799635][T12388] vlan3: entered promiscuous mode [ 274.813416][T12388] bond_slave_1: entered promiscuous mode [ 275.342681][T12409] bridge4: entered promiscuous mode [ 275.356776][T12409] bridge4: entered allmulticast mode [ 275.646779][T12416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1637'. [ 275.761490][T12422] netlink: 'syz.2.1635': attribute type 1 has an invalid length. [ 275.920552][T12422] bond6: entered promiscuous mode [ 275.937400][T12422] 8021q: adding VLAN 0 to HW filter on device bond6 [ 276.065723][T12435] bond6: (slave bridge7): making interface the new active one [ 276.104113][T12435] bridge7: entered promiscuous mode [ 276.154805][T12435] bridge7: left promiscuous mode [ 277.171801][T12486] macsec2: entered promiscuous mode [ 277.245326][T12492] can: request_module (can-proto-5) failed. [ 278.237096][T12528] ipt_REJECT: TCP_RESET invalid for non-tcp [ 279.103860][T12550] __nla_validate_parse: 5 callbacks suppressed [ 279.103880][T12550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 279.160508][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1670'. [ 279.211949][T12547] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 279.547397][T12547] bond8 (unregistering): Released all slaves [ 279.713335][T12559] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1672'. [ 279.924830][T12566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1673'. [ 279.958197][T12566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1673'. [ 280.063043][T12577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1676'. [ 280.195850][ T30] audit: type=1804 audit(1780694369.921:4): pid=12577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1676" name="/newroot/329/cgroup.controllers" dev="tmpfs" ino=1709 res=1 errno=0 [ 280.300738][ T30] audit: type=1800 audit(1780694369.921:5): pid=12577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1676" name="cgroup.controllers" dev="tmpfs" ino=1709 res=0 errno=0 [ 280.409453][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 280.622406][T12596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.014644][T12606] netlink: 'syz.3.1683': attribute type 10 has an invalid length. [ 281.077178][T12606] team0: Port device veth1_to_hsr added [ 281.733037][T12634] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 281.763246][T12635] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 282.215536][T12660] tipc: Enabled bearer , priority 0 [ 282.252900][T12666] tipc: Enabling of bearer rejected, already enabled [ 282.390514][T12672] netlink: 'syz.4.1701': attribute type 23 has an invalid length. [ 282.452308][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1701'. [ 282.461792][T12672] openvswitch: netlink: Flow key attr not present in new flow. [ 282.586715][T12660] tipc: Disabling bearer [ 282.666177][T12674] netlink: 'syz.4.1702': attribute type 21 has an invalid length. [ 282.683333][T12674] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1702'. [ 282.694348][T12674] netlink: 'syz.4.1702': attribute type 4 has an invalid length. [ 282.703466][T12674] netlink: 'syz.4.1702': attribute type 3 has an invalid length. [ 282.714669][T12674] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1702'. [ 282.973003][T12677] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 283.078068][T12688] 8021q: adding VLAN 0 to HW filter on device bond7 [ 283.191955][T12700] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 283.684313][T12694] bond7: (slave wireguard1): refused to change device type [ 283.766290][T12699] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 283.798731][T12702] ip6gre1: entered promiscuous mode [ 283.805230][T12702] ip6gre1: entered allmulticast mode [ 284.057827][T12719] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.215016][T12732] __nla_validate_parse: 3 callbacks suppressed [ 284.215039][T12732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1715'. [ 284.996047][T12763] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1724'. [ 285.542550][T12790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1733'. [ 285.595330][T12795] netlink: 'syz.3.1735': attribute type 39 has an invalid length. [ 285.646840][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1737'. [ 285.688901][T12807] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1734'. [ 285.736476][ T5647] block nbd5: Receive control failed (result -32) [ 285.963774][T12817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1741'. [ 285.982553][T12817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.989920][T12817] IPv6: NLM_F_CREATE should be set when creating new route [ 285.997246][T12817] IPv6: NLM_F_CREATE should be set when creating new route [ 286.004570][T12817] IPv6: NLM_F_CREATE should be set when creating new route [ 286.014973][T12817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.219827][T12827] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 286.310356][T12827] bond9: (slave lo): Enslaving as an active interface with an up link [ 286.320809][T12827] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 286.449333][T12845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1749'. [ 286.624292][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1750'. [ 286.783121][T12859] netlink: 'syz.4.1751': attribute type 12 has an invalid length. [ 286.819652][T12862] netlink: 'syz.3.1753': attribute type 2 has an invalid length. [ 286.849473][T12862] netlink: 'syz.3.1753': attribute type 2 has an invalid length. [ 286.924233][T12868] syzkaller1: entered promiscuous mode [ 286.948427][T12868] syzkaller1: entered allmulticast mode [ 286.981468][T12870] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1754'. [ 287.193917][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'. [ 287.511021][T12882] syzkaller0: entered promiscuous mode [ 287.526692][T12882] syzkaller0: entered allmulticast mode [ 289.842690][T12898] veth1_macvtap: left promiscuous mode [ 289.945906][T12898] veth1_macvtap: entered promiscuous mode [ 290.127816][T12910] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.135463][T12910] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.173000][T12929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.298803][T12910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.447977][T12924] bond10: Removing last ns target with arp_interval on [ 290.486452][ T138] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.502932][ T138] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.522159][ T138] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.546268][ T138] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.741905][T12945] __nla_validate_parse: 5 callbacks suppressed [ 290.741926][T12945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1772'. [ 290.926123][T12943] bridge0: left promiscuous mode [ 290.942623][T12943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.954485][T12943] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.974053][T12943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.012534][T12943] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.019829][T12943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.032540][T12943] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.039768][T12943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.063631][T12943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.085589][T12943] veth1_vlan: left promiscuous mode [ 291.092851][T12943] veth0_vlan: left promiscuous mode [ 291.099937][T12943] veth0_vlan: entered promiscuous mode [ 291.110792][T12943] veth1_vlan: entered promiscuous mode [ 291.124297][T12943] veth1_macvtap: left promiscuous mode [ 291.131600][T12943] veth0_macvtap: left promiscuous mode [ 291.139061][T12943] veth0_macvtap: entered promiscuous mode [ 291.147528][T12943] veth1_macvtap: entered promiscuous mode [ 291.164596][T12943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 291.173529][T12943] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.182449][T12943] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 291.191819][T12943] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 291.200923][T12943] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 291.242159][T12961] gre1: entered allmulticast mode [ 291.323187][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.407518][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.448951][ T7449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.503378][ T7449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.595320][T12985] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1784'. [ 291.715476][T12988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.012757][T13005] netlink: 'syz.0.1788': attribute type 5 has an invalid length. [ 292.163249][T13009] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1793'. [ 292.608455][T13037] tipc: MTU too low for tipc bearer [ 292.961578][T13049] sctp: [Deprecated]: syz.4.1800 (pid 13049) Use of int in max_burst socket option. [ 292.961578][T13049] Use struct sctp_assoc_value instead [ 292.983815][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 293.011215][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1801'. [ 293.048446][T13053] netlink: 'syz.1.1801': attribute type 1 has an invalid length. [ 293.080200][T13053] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1801'. [ 293.115999][T13053] netlink: 'syz.1.1801': attribute type 1 has an invalid length. [ 293.151040][T13053] netlink: 'syz.1.1801': attribute type 8 has an invalid length. [ 293.194195][T13053] netlink: 582 bytes leftover after parsing attributes in process `syz.1.1801'. [ 293.229529][T13053] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1801'. [ 293.731265][T13073] netlink: 'syz.3.1805': attribute type 10 has an invalid length. [ 293.772417][T13073] team0: Port device dummy0 added [ 294.065581][T13090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.438164][T13097] C: renamed from veth1_to_team (while UP) [ 294.457556][T13097] netlink: 'syz.4.1813': attribute type 2 has an invalid length. [ 294.467906][T13097] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1813'. [ 294.488067][T13097] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 294.656903][T13103] netlink: 'syz.3.1814': attribute type 1 has an invalid length. [ 294.827653][T13110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 294.865718][T13101] 8021q: adding VLAN 0 to HW filter on device bond10 [ 294.875345][T13101] bond9: (slave bond10): making interface the new active one [ 294.883558][T13101] bond9: (slave bond10): Enslaving as an active interface with an up link [ 294.917840][T13110] 8021q: adding VLAN 0 to HW filter on device bond9 [ 295.572008][T13136] bridge5: entered promiscuous mode [ 295.675822][T13135] bridge6: entered promiscuous mode [ 295.696880][T13145] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 295.806542][T13145] bond6: entered promiscuous mode [ 295.839132][T13145] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.217252][T13171] __nla_validate_parse: 6 callbacks suppressed [ 296.217272][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1832'. [ 296.528844][T13195] netlink: 'syz.2.1838': attribute type 1 has an invalid length. [ 296.561146][T13195] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1838'. [ 296.611993][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1840'. [ 296.631608][T13200] raw_sendmsg: syz.4.1840 forgot to set AF_INET. Fix it! [ 296.777270][T13203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1842'. [ 296.823492][T13203] vlan2: entered promiscuous mode [ 296.835045][T13203] geneve1: entered promiscuous mode [ 296.844663][T13203] vlan2: entered allmulticast mode [ 296.851864][T13203] geneve1: entered allmulticast mode [ 297.008669][T13213] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1844'. [ 297.040594][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1844'. [ 297.064547][T13214] syzkaller0: entered promiscuous mode [ 297.085183][T13214] syzkaller0: entered allmulticast mode [ 297.108187][T13216] sctp: [Deprecated]: syz.1.1846 (pid 13216) Use of int in max_burst socket option. [ 297.108187][T13216] Use struct sctp_assoc_value instead [ 297.299124][T13224] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 297.862478][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1853'. [ 298.640287][T13288] --map-set only usable from mangle table [ 298.921925][T13306] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1868'. [ 299.104726][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1869'. [ 299.121017][T13312] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 299.455466][T13318] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1870'. [ 299.553046][T13333] netlink: 'syz.0.1874': attribute type 6 has an invalid length. [ 299.697339][T13333] netlink: 'syz.0.1874': attribute type 9 has an invalid length. [ 300.400519][T13354] bond11 (unregistering): Released all slaves [ 300.674184][T13376] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 301.237950][T13392] __nla_validate_parse: 4 callbacks suppressed [ 301.237974][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 301.295593][T13392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1889'. [ 301.320050][T13393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1890'. [ 301.337269][T13393] netlink: 'syz.0.1890': attribute type 18 has an invalid length. [ 301.956067][T13408] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1893'. [ 301.995180][T13413] nbd: illegal input index -1 [ 302.318820][T13423] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1897'. [ 302.363781][T13423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1897'. [ 302.685047][ T30] audit: type=1800 audit(1780694392.411:6): pid=13409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1894" name="memory.events" dev="tmpfs" ino=1924 res=0 errno=0 [ 303.682279][T13465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1910'. [ 303.842814][T13466] tipc: Enabled bearer , priority 5 [ 304.129063][T13469] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 304.168824][T13469] bond6 (unregistering): Released all slaves [ 304.545925][T13498] netlink: 'syz.0.1916': attribute type 1 has an invalid length. [ 304.570410][T13498] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1916'. [ 304.936391][T13521] 8021q: VLANs not supported on ip_vti0 [ 305.955117][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1930'. [ 306.252449][T13581] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 306.321157][T13594] mac80211_hwsim hwsim4 wlan0: Caught tx_queue_len zero misconfig [ 306.884953][T13610] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 306.913124][T13610] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 306.925366][T13617] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1940'. [ 307.189639][T13635] netlink: 1152 bytes leftover after parsing attributes in process `syz.2.1945'. [ 307.376760][T13638] bond11: option min_links: invalid value (18446744073709551612) [ 307.405024][T13638] bond11: option min_links: allowed values 0 - 2147483647 [ 307.429602][T13638] bond11 (unregistering): Released all slaves [ 307.503004][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1945'. [ 307.574599][T13648] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 308.044510][T13681] bond0: entered promiscuous mode [ 308.082233][T13681] bond_slave_0: entered promiscuous mode [ 308.089033][T13681] bond_slave_1: entered promiscuous mode [ 308.134878][T13689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1954'. [ 308.277818][T13685] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.285531][T13685] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.378236][T13685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.448606][T13685] macsec1: left promiscuous mode [ 308.455969][T13685] gre1: left allmulticast mode [ 308.461850][T13685] bond4: left promiscuous mode [ 308.466692][T13685] bridge8: left promiscuous mode [ 308.474996][T13685] vlan2: left promiscuous mode [ 308.481051][T13685] geneve1: left promiscuous mode [ 308.486199][T13685] vlan2: left allmulticast mode [ 308.491202][T13685] geneve1: left allmulticast mode [ 308.496482][T13685] vlan3: left promiscuous mode [ 308.501478][T13685] bond_slave_1: left promiscuous mode [ 308.516411][T13690] team0: entered allmulticast mode [ 308.522013][T13690] team_slave_0: entered allmulticast mode [ 308.528014][T13690] team_slave_1: entered allmulticast mode [ 308.534866][T13690] batadv1: entered allmulticast mode [ 308.542873][T13690] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 308.560710][ T138] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.582450][ T138] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.599660][ T138] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.615031][ T138] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.639360][T13692] team0: left allmulticast mode [ 308.649406][T13692] team_slave_0: left allmulticast mode [ 308.655110][T13692] team_slave_1: left allmulticast mode [ 308.662793][T13692] batadv1: left allmulticast mode [ 308.671261][T13692] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 309.217101][T13729] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1963'. [ 309.516119][T13739] netlink: 'syz.3.1965': attribute type 1 has an invalid length. [ 309.703540][T13739] 8021q: adding VLAN 0 to HW filter on device bond11 [ 309.742589][T13739] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1965'. [ 309.759064][T13744] vlan3: entered promiscuous mode [ 309.766563][T13744] bond11: entered promiscuous mode [ 309.772765][T13744] vlan3: entered allmulticast mode [ 309.778420][T13744] bond11: entered allmulticast mode [ 310.309633][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1973'. [ 310.351230][T13768] nbd: must specify a size in bytes for the device [ 310.543904][T13783] can: request_module (can-proto-0) failed. [ 310.913252][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 310.935820][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1979'. [ 310.977797][ T5619] af_packet: tpacket_rcv: packet too big, clamped from 64834 to 3966. macoff=82 [ 311.137738][T13807] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1985'. [ 311.161964][T13812] netlink: 'syz.1.1983': attribute type 1 has an invalid length. [ 311.201131][T13807] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 311.209069][T13807] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 311.231420][T13812] bond7: option mode: invalid value (7) [ 311.245950][T13812] bond7 (unregistering): Released all slaves [ 311.317549][T13824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.356811][T13810] geneve3: entered promiscuous mode [ 311.363930][T13810] geneve3: entered allmulticast mode [ 311.572793][T13834] netlink: 'syz.1.1988': attribute type 13 has an invalid length. [ 311.587753][T13835] netlink: 'syz.2.1987': attribute type 1 has an invalid length. [ 311.613836][T13835] netlink: 'syz.2.1987': attribute type 2 has an invalid length. [ 311.626654][T13839] netlink: 'syz.4.1991': attribute type 1 has an invalid length. [ 311.646560][T13834] gretap0: refused to change device tx_queue_len [ 311.701592][T13834] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 311.960810][T13856] __nla_validate_parse: 4 callbacks suppressed [ 311.960831][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1993'. [ 312.037966][T13856] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1993'. [ 312.271044][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 312.278630][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 312.704865][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1998'. [ 312.717289][T13890] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 312.726559][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 312.736070][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 312.914613][T13899] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2008'. [ 313.299448][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 313.306031][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 313.536530][T13919] netlink: 'syz.1.2014': attribute type 1 has an invalid length. [ 313.576266][T13921] Cannot find del_set index 2 as target [ 313.652508][T13924] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2014'. [ 313.703578][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2017'. [ 313.718997][T13919] 8021q: adding VLAN 0 to HW filter on device bond7 [ 313.785232][T13931] netlink: 'syz.4.2017': attribute type 1 has an invalid length. [ 313.869116][T13931] bond8: entered promiscuous mode [ 313.875008][T13931] 8021q: adding VLAN 0 to HW filter on device bond8 [ 314.567294][T13961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.594605][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'. [ 314.613096][T13961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2025'. [ 314.684270][T13964] vlan4: entered allmulticast mode [ 314.702172][T13964] macvtap0: entered allmulticast mode [ 314.722722][T13964] veth0_macvtap: entered allmulticast mode [ 315.022433][T13981] tipc: Enabled bearer , priority 0 [ 315.042286][T13981] syzkaller0: entered promiscuous mode [ 315.056916][T13981] syzkaller0: entered allmulticast mode [ 315.084854][T13981] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 315.144566][T13981] tipc: Resetting bearer [ 315.184588][T13977] tipc: Resetting bearer [ 315.243396][T13977] tipc: Disabling bearer [ 316.739803][T14057] netlink: 'syz.4.2054': attribute type 1 has an invalid length. [ 316.856296][T14057] bond9: (slave dummy0): making interface the new active one [ 316.884818][T14057] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 316.893952][T14060] bond9: entered promiscuous mode [ 317.421150][T14057] : left allmulticast mode [ 317.437654][T14057] bond_slave_0: left allmulticast mode [ 317.445489][T14057] bond_slave_1: left allmulticast mode [ 317.459514][T14057] : left promiscuous mode [ 317.470384][T14057] bond_slave_0: left promiscuous mode [ 317.481535][T14057] bond_slave_1: left promiscuous mode [ 317.487605][T14057] bridge0: port 4() entered disabled state [ 317.558057][T14057] bond9: (slave dummy0): Releasing active interface [ 317.816170][T14057] bridge_slave_0: left allmulticast mode [ 317.830774][T14057] bridge_slave_0: left promiscuous mode [ 317.846070][T14057] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.892594][T14057] bridge_slave_1: left allmulticast mode [ 317.908763][T14057] bridge_slave_1: left promiscuous mode [ 317.919121][T14057] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.945923][T14057] : (slave bond_slave_0): Releasing backup interface [ 318.007929][T14057] : (slave bond_slave_1): Releasing backup interface [ 318.064830][T14057] team0: Port device team_slave_0 removed [ 318.123519][T14057] team0: Port device team_slave_1 removed [ 318.144940][T14057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.184353][T14057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.224775][T14057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.243885][T14057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.278205][T14057] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 318.392698][T14062] veth7: entered promiscuous mode [ 318.467986][T14056] bond9: left promiscuous mode [ 318.640641][T14077] IPVS: set_ctl: invalid protocol: 255 10.1.1.0:20002 [ 318.842038][T14089] __nla_validate_parse: 4 callbacks suppressed [ 318.842087][T14089] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2058'. [ 320.031900][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2070'. [ 320.043368][T14130] nbd: must specify a size in bytes for the device [ 320.421963][T14142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2074'. [ 320.700149][T14149] netlink: 'syz.0.2076': attribute type 1 has an invalid length. [ 320.734444][T14149] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2076'. [ 320.752188][T14150] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2077'. [ 320.779947][T14150] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2077'. [ 320.815558][T14151] xt_CT: No such helper "snmp_trap" [ 320.844632][T14155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.867440][ T57] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 320.883277][T14156] netlink: 'syz.2.2080': attribute type 13 has an invalid length. [ 320.899391][ T57] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 320.908520][T14156] netlink: 'syz.2.2080': attribute type 17 has an invalid length. [ 320.921815][ T57] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 320.954686][T14155] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 321.082185][T14169] netlink: 'syz.3.2082': attribute type 1 has an invalid length. [ 321.147038][T14156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.159175][T14172] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2082'. [ 321.195413][T14156] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.266155][T14156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.389047][T14156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.408145][T14156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.444893][T14156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 321.481918][T14156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 321.501147][T14156] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 321.536251][T14156] veth1_macvtap: left promiscuous mode [ 321.563616][T14156] veth0_macvtap: left promiscuous mode [ 321.582959][T14156] veth0_macvtap: entered promiscuous mode [ 321.604330][T14156] veth1_macvtap: entered promiscuous mode [ 321.620520][T14156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.647063][T14156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.661677][T14156] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 321.670328][T14156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.686019][T14156] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 321.693097][T14156] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 321.717268][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.724560][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.736645][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.743948][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.784661][T14159] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.888552][T14169] 8021q: adding VLAN 0 to HW filter on device bond12 [ 321.917819][T14172] bond12: (slave gretap0): Enslaving as a backup interface with an up link [ 321.947048][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.963639][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.990347][ T160] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 322.024538][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.121470][ T1168] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 322.481196][T14236] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2096'. [ 322.531885][T14232] xt_CT: No such helper "netbios-ns" [ 322.643780][T14232] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2096'. [ 322.975971][T14248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'. [ 323.022486][T14250] syzkaller0: entered promiscuous mode [ 323.038966][T14250] syzkaller0: entered allmulticast mode [ 323.283574][T14266] sit0: entered promiscuous mode [ 323.314706][T14266] netlink: 'syz.1.2102': attribute type 1 has an invalid length. [ 323.405029][T14272] syzkaller1: entered promiscuous mode [ 323.415629][T14272] syzkaller1: entered allmulticast mode [ 323.718012][T14288] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 324.136079][T14299] __nla_validate_parse: 2 callbacks suppressed [ 324.136100][T14299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2113'. [ 324.154851][T14299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2113'. [ 324.520385][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2118'. [ 324.675437][T14313] syzkaller0: entered promiscuous mode [ 324.690740][T14313] syzkaller0: entered allmulticast mode [ 324.781033][T14313] FAULT_INJECTION: forcing a failure. [ 324.781033][T14313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.797909][T14313] CPU: 1 UID: 0 PID: 14313 Comm: syz.3.2119 Not tainted syzkaller #0 PREEMPT(full) [ 324.797941][T14313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 324.797971][T14313] Call Trace: [ 324.797980][T14313] [ 324.797988][T14313] dump_stack_lvl+0xe8/0x150 [ 324.798020][T14313] should_fail_ex+0x412/0x560 [ 324.798049][T14313] _copy_from_user+0x2d/0xb0 [ 324.798077][T14313] __sys_sendto+0x2b0/0x710 [ 324.798104][T14313] ? __pfx___sys_sendto+0x10/0x10 [ 324.798124][T14313] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 324.798164][T14313] ? __fget_files+0x3a0/0x420 [ 324.798210][T14313] ? ksys_write+0x242/0x270 [ 324.798245][T14313] ? __pfx_ksys_write+0x10/0x10 [ 324.798284][T14313] __x64_sys_sendto+0xde/0x100 [ 324.798308][T14313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.798332][T14313] do_syscall_64+0x174/0x580 [ 324.798354][T14313] ? trace_irq_disable+0x3b/0x140 [ 324.798388][T14313] ? clear_bhb_loop+0x40/0x90 [ 324.798414][T14313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.798436][T14313] RIP: 0033:0x7f3c3539ce59 [ 324.798457][T14313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.798476][T14313] RSP: 002b:00007f3c36313028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 324.798500][T14313] RAX: ffffffffffffffda RBX: 00007f3c35615fa0 RCX: 00007f3c3539ce59 [ 324.798516][T14313] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 324.798528][T14313] RBP: 00007f3c36313090 R08: 00002000000001c0 R09: 0000000000000014 [ 324.798542][T14313] R10: 0000000000048040 R11: 0000000000000246 R12: 0000000000000001 [ 324.798554][T14313] R13: 00007f3c35616038 R14: 00007f3c35615fa0 R15: 00007ffc815e87d8 [ 324.798588][T14313] [ 325.019135][T14313] tipc: Enabled bearer , priority 0 [ 325.055660][T14319] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2121'. [ 325.077701][T14312] tipc: Resetting bearer [ 325.154468][T14312] tipc: Disabling bearer [ 325.169981][T14319] : renamed from veth0_to_bond (while UP) [ 325.671768][T14349] netlink: 'syz.1.2129': attribute type 1 has an invalid length. [ 325.879057][T14362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2132'. [ 325.908951][T14362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2132'. [ 325.936592][T14362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2132'. [ 325.974930][T14362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2132'. [ 325.984775][T14362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2132'. [ 326.000345][T14362] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2132'. [ 326.396910][T14362] veth0_macvtap: left allmulticast mode [ 326.911205][ T138] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.933084][ T138] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.944459][ T138] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.954040][ T138] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.965068][ T138] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.975398][ T138] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.991189][ T160] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.007946][ T160] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.136083][T14375] __nla_validate_parse: 217 callbacks suppressed [ 343.136104][T14375] netlink: 45 bytes leftover after parsing attributes in process `syz.0.2133'. [ 343.276307][T14374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.338301][T14380] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2134'. [ 343.490671][T14386] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2139'. [ 343.531961][T14384] syzkaller0: entered promiscuous mode [ 343.542078][T14384] syzkaller0: entered allmulticast mode [ 343.594158][T14386] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2139'. [ 343.700745][T14384] FAULT_INJECTION: forcing a failure. [ 343.700745][T14384] name failslab, interval 1, probability 0, space 0, times 0 [ 343.752541][T14388] tipc: Enabled bearer , priority 0 [ 343.754017][T14384] CPU: 0 UID: 0 PID: 14384 Comm: syz.0.2138 Not tainted syzkaller #0 PREEMPT(full) [ 343.754103][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.754154][T14384] Call Trace: [ 343.754181][T14384] [ 343.754209][T14384] dump_stack_lvl+0xe8/0x150 [ 343.754293][T14384] should_fail_ex+0x412/0x560 [ 343.754370][T14384] should_failslab+0xa8/0x100 [ 343.754434][T14384] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 343.754516][T14384] ? __alloc_skb+0x186/0x7d0 [ 343.754569][T14384] ? __alloc_skb+0x1d0/0x7d0 [ 343.754620][T14384] ? __local_bh_enable_ip+0xd0/0x130 [ 343.754701][T14384] __alloc_skb+0x1d0/0x7d0 [ 343.754753][T14384] ? __lock_acquire+0x6b5/0x2cf0 [ 343.754825][T14384] alloc_skb_with_frags+0xc8/0x760 [ 343.754887][T14384] ? __lock_acquire+0x6b5/0x2cf0 [ 343.754969][T14384] sock_alloc_send_pskb+0x878/0x990 [ 343.755061][T14384] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 343.755146][T14384] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 343.755232][T14384] ? dev_get_by_index+0x22/0x2e0 [ 343.755312][T14384] ? dev_get_by_index+0x22/0x2e0 [ 343.755399][T14384] packet_sendmsg+0x315a/0x4fb0 [ 343.755520][T14384] ? __lock_acquire+0x6b5/0x2cf0 [ 343.755632][T14384] ? __lock_acquire+0x6b5/0x2cf0 [ 343.755747][T14384] ? __pfx_packet_sendmsg+0x10/0x10 [ 343.755809][T14384] ? aa_sk_perm+0x6d5/0x900 [ 343.755910][T14384] ? __pfx_aa_sk_perm+0x10/0x10 [ 343.755977][T14384] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 343.756088][T14384] ? aa_sock_msg_perm+0xf1/0x1b0 [ 343.756166][T14384] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.756240][T14384] ? __pfx_packet_sendmsg+0x10/0x10 [ 343.756319][T14384] __sys_sendto+0x672/0x710 [ 343.756382][T14384] ? __pfx___sys_sendto+0x10/0x10 [ 343.756436][T14384] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 343.756538][T14384] ? __fget_files+0x3a0/0x420 [ 343.756648][T14384] ? ksys_write+0x242/0x270 [ 343.756732][T14384] ? __pfx_ksys_write+0x10/0x10 [ 343.756836][T14384] __x64_sys_sendto+0xde/0x100 [ 343.756917][T14384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.757002][T14384] do_syscall_64+0x174/0x580 [ 343.757062][T14384] ? trace_irq_disable+0x3b/0x140 [ 343.757137][T14384] ? clear_bhb_loop+0x40/0x90 [ 343.757200][T14384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.757251][T14384] RIP: 0033:0x7f18eef9ce59 [ 343.757301][T14384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.757350][T14384] RSP: 002b:00007f18efe5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 343.757409][T14384] RAX: ffffffffffffffda RBX: 00007f18ef215fa0 RCX: 00007f18eef9ce59 [ 343.757450][T14384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 343.757481][T14384] RBP: 00007f18efe5b090 R08: 00002000000001c0 R09: 0000000000000014 [ 343.757519][T14384] R10: 0000000000048040 R11: 0000000000000246 R12: 0000000000000001 [ 343.757550][T14384] R13: 00007f18ef216038 R14: 00007f18ef215fa0 R15: 00007ffe8daa9028 [ 343.757630][T14384] [ 344.077216][T14383] tipc: Resetting bearer [ 344.199485][T14383] tipc: Disabling bearer [ 344.567029][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'. [ 344.608910][T14415] hsr_slave_0: left promiscuous mode [ 344.927822][T14432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2148'. [ 345.142402][T14437] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2149'. [ 345.227302][T14435] syzkaller0: entered promiscuous mode [ 345.266502][T14435] syzkaller0: entered allmulticast mode [ 345.346709][T14443] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 345.368629][T14443] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 345.399469][T14443] netlink: 'syz.4.2151': attribute type 1 has an invalid length. [ 345.417685][T14443] netlink: 'syz.4.2151': attribute type 3 has an invalid length. [ 345.436489][T14443] netlink: 'syz.4.2151': attribute type 3 has an invalid length. [ 345.469594][T14443] netlink: 'syz.4.2151': attribute type 2 has an invalid length. [ 345.493093][T14443] netlink: 'syz.4.2151': attribute type 2 has an invalid length. [ 345.516162][T14443] netlink: 'syz.4.2151': attribute type 3 has an invalid length. [ 345.535138][T14457] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2152'. [ 345.549623][T14443] netlink: 'syz.4.2151': attribute type 2 has an invalid length. [ 345.577907][T14443] netlink: 'syz.4.2151': attribute type 2 has an invalid length. [ 345.603640][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2151'. [ 346.111826][T14473] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2159'. [ 347.666759][T14495] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 347.859485][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 348.396823][T14531] __nla_validate_parse: 2 callbacks suppressed [ 348.398483][T14531] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2175'. [ 348.950962][T14552] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2180'. [ 349.035694][T14552] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2180'. [ 349.057338][T14554] xt_hashlimit: size too large, truncated to 1048576 [ 349.345767][T14566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.353144][T14566] IPv6: NLM_F_CREATE should be set when creating new route [ 349.481281][T14566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2184'. [ 349.523826][T14566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2184'. [ 349.665448][T14575] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2187'. [ 349.701058][T14575] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2187'. [ 349.722199][T14575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2187'. [ 350.436778][T14618] tipc: Enabled bearer , priority 0 [ 350.469001][T14615] tipc: Enabling of bearer rejected, already enabled [ 350.513949][T14618] syzkaller0: entered promiscuous mode [ 350.538150][T14618] syzkaller0: entered allmulticast mode [ 350.727568][T14618] tipc: Resetting bearer [ 350.780692][T14614] tipc: Resetting bearer [ 350.905378][T14614] tipc: Disabling bearer [ 350.973344][T14635] pimreg: entered allmulticast mode [ 350.994903][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 351.051040][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 351.475375][T14666] tipc: Enabling of bearer rejected, failed to enable media [ 351.486489][T14667] tipc: Enabling of bearer rejected, failed to enable media [ 351.737013][T14683] validate_nla: 3 callbacks suppressed [ 351.737115][T14683] netlink: 'syz.0.2215': attribute type 11 has an invalid length. [ 351.967533][T14693] netlink: 'syz.3.2218': attribute type 3 has an invalid length. [ 352.936993][T14731] syzkaller0: entered promiscuous mode [ 352.947464][T14731] syzkaller0: entered allmulticast mode [ 353.013822][T14736] FAULT_INJECTION: forcing a failure. [ 353.013822][T14736] name failslab, interval 1, probability 0, space 0, times 0 [ 353.033459][T14736] CPU: 1 UID: 0 PID: 14736 Comm: syz.2.2230 Not tainted syzkaller #0 PREEMPT(full) [ 353.033503][T14736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 353.033517][T14736] Call Trace: [ 353.033617][T14736] [ 353.033663][T14736] dump_stack_lvl+0xe8/0x150 [ 353.033801][T14736] should_fail_ex+0x412/0x560 [ 353.033897][T14736] should_failslab+0xa8/0x100 [ 353.033952][T14736] __kmalloc_noprof+0xe8/0x760 [ 353.033992][T14736] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 353.034094][T14736] tomoyo_realpath_from_path+0xe3/0x5d0 [ 353.034118][T14736] ? tomoyo_domain+0xd7/0x130 [ 353.034147][T14736] ? tomoyo_path_number_perm+0x219/0x630 [ 353.034197][T14736] tomoyo_path_number_perm+0x246/0x630 [ 353.034230][T14736] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 353.034259][T14736] ? __lock_acquire+0x6b5/0x2cf0 [ 353.034325][T14736] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 353.034455][T14736] ? __fget_files+0x2a/0x420 [ 353.034507][T14736] ? __fget_files+0x2a/0x420 [ 353.034533][T14736] ? __fget_files+0x3a0/0x420 [ 353.034559][T14736] ? __fget_files+0x2a/0x420 [ 353.034591][T14736] security_file_ioctl+0xc3/0x2a0 [ 353.034673][T14736] __se_sys_ioctl+0x47/0x170 [ 353.034712][T14736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.034785][T14736] do_syscall_64+0x174/0x580 [ 353.034830][T14736] ? trace_irq_disable+0x3b/0x140 [ 353.034883][T14736] ? clear_bhb_loop+0x40/0x90 [ 353.034910][T14736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.034932][T14736] RIP: 0033:0x7f0b5439ce59 [ 353.034982][T14736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.035029][T14736] RSP: 002b:00007f0b551ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 353.035086][T14736] RAX: ffffffffffffffda RBX: 00007f0b54615fa0 RCX: 00007f0b5439ce59 [ 353.035103][T14736] RDX: 0000200000000240 RSI: 0000000000008933 RDI: 0000000000000003 [ 353.035117][T14736] RBP: 00007f0b551ce090 R08: 0000000000000000 R09: 0000000000000000 [ 353.035131][T14736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.035144][T14736] R13: 00007f0b54616038 R14: 00007f0b54615fa0 R15: 00007ffd419b0e58 [ 353.035181][T14736] [ 353.035220][T14736] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.506003][T14739] bond10: option lacp_active: invalid value (8) [ 353.547150][T14739] bond10 (unregistering): Released all slaves [ 354.363046][T14774] FAULT_INJECTION: forcing a failure. [ 354.363046][T14774] name failslab, interval 1, probability 0, space 0, times 0 [ 354.389569][T14774] CPU: 1 UID: 0 PID: 14774 Comm: syz.3.2242 Not tainted syzkaller #0 PREEMPT(full) [ 354.389599][T14774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 354.389612][T14774] Call Trace: [ 354.389620][T14774] [ 354.389630][T14774] dump_stack_lvl+0xe8/0x150 [ 354.389662][T14774] should_fail_ex+0x412/0x560 [ 354.389693][T14774] should_failslab+0xa8/0x100 [ 354.389718][T14774] __kmalloc_noprof+0xe8/0x760 [ 354.389751][T14774] ? tomoyo_encode+0x28b/0x550 [ 354.389778][T14774] tomoyo_encode+0x28b/0x550 [ 354.389807][T14774] tomoyo_realpath_from_path+0x58d/0x5d0 [ 354.389831][T14774] ? tomoyo_domain+0xd7/0x130 [ 354.389860][T14774] ? tomoyo_path_number_perm+0x219/0x630 [ 354.389891][T14774] tomoyo_path_number_perm+0x246/0x630 [ 354.389924][T14774] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 354.389954][T14774] ? __lock_acquire+0x6b5/0x2cf0 [ 354.389995][T14774] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 354.390052][T14774] ? __fget_files+0x2a/0x420 [ 354.390084][T14774] ? __fget_files+0x2a/0x420 [ 354.390108][T14774] ? __fget_files+0x3a0/0x420 [ 354.390134][T14774] ? __fget_files+0x2a/0x420 [ 354.390166][T14774] security_file_ioctl+0xc3/0x2a0 [ 354.390196][T14774] __se_sys_ioctl+0x47/0x170 [ 354.390231][T14774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.390255][T14774] do_syscall_64+0x174/0x580 [ 354.390278][T14774] ? trace_irq_disable+0x3b/0x140 [ 354.390312][T14774] ? clear_bhb_loop+0x40/0x90 [ 354.390339][T14774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.390361][T14774] RIP: 0033:0x7f3c3539ce59 [ 354.390382][T14774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.390408][T14774] RSP: 002b:00007f3c36313028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.390431][T14774] RAX: ffffffffffffffda RBX: 00007f3c35615fa0 RCX: 00007f3c3539ce59 [ 354.390447][T14774] RDX: 0000200000000240 RSI: 0000000000008933 RDI: 0000000000000003 [ 354.390461][T14774] RBP: 00007f3c36313090 R08: 0000000000000000 R09: 0000000000000000 [ 354.390475][T14774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.390488][T14774] R13: 00007f3c35616038 R14: 00007f3c35615fa0 R15: 00007ffc815e87d8 [ 354.390526][T14774] [ 354.390571][T14774] ERROR: Out of memory at tomoyo_realpath_from_path. [ 354.837669][T14785] __nla_validate_parse: 4 callbacks suppressed [ 354.837692][T14785] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2245'. [ 354.897877][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2246'. [ 355.008000][T14785] can: request_module (can-proto-0) failed. [ 355.183168][T14798] netlink: 'syz.2.2249': attribute type 1 has an invalid length. [ 355.265430][T14806] Cannot find map_set index 17 as target [ 355.266286][T14795] syzkaller0: entered promiscuous mode [ 355.302885][T14795] syzkaller0: entered allmulticast mode [ 355.364131][T14800] bond12: Unable to set down delay as MII monitoring is disabled [ 355.390719][T14800] bond12 (unregistering): Released all slaves [ 355.432191][T14798] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 355.652881][T14819] FAULT_INJECTION: forcing a failure. [ 355.652881][T14819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.717046][T14819] CPU: 1 UID: 0 PID: 14819 Comm: syz.2.2254 Not tainted syzkaller #0 PREEMPT(full) [ 355.717078][T14819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 355.717092][T14819] Call Trace: [ 355.717101][T14819] [ 355.717111][T14819] dump_stack_lvl+0xe8/0x150 [ 355.717141][T14819] should_fail_ex+0x412/0x560 [ 355.717171][T14819] _copy_from_user+0x2d/0xb0 [ 355.717318][T14819] sock_do_ioctl+0x195/0x320 [ 355.717408][T14819] ? __pfx_sock_do_ioctl+0x10/0x10 [ 355.717436][T14819] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 355.717482][T14819] sock_ioctl+0x5c6/0x7f0 [ 355.717515][T14819] ? __pfx_sock_ioctl+0x10/0x10 [ 355.717545][T14819] ? __fget_files+0x2a/0x420 [ 355.717572][T14819] ? __fget_files+0x3a0/0x420 [ 355.717598][T14819] ? __fget_files+0x2a/0x420 [ 355.717629][T14819] ? bpf_lsm_file_ioctl+0x9/0x20 [ 355.717677][T14819] ? __pfx_sock_ioctl+0x10/0x10 [ 355.717706][T14819] __se_sys_ioctl+0xfc/0x170 [ 355.717740][T14819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.717772][T14819] do_syscall_64+0x174/0x580 [ 355.717795][T14819] ? trace_irq_disable+0x3b/0x140 [ 355.717829][T14819] ? clear_bhb_loop+0x40/0x90 [ 355.717856][T14819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.717878][T14819] RIP: 0033:0x7f0b5439ce59 [ 355.717899][T14819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.717917][T14819] RSP: 002b:00007f0b551ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.717941][T14819] RAX: ffffffffffffffda RBX: 00007f0b54615fa0 RCX: 00007f0b5439ce59 [ 355.717957][T14819] RDX: 0000200000000240 RSI: 0000000000008933 RDI: 0000000000000003 [ 355.717972][T14819] RBP: 00007f0b551ce090 R08: 0000000000000000 R09: 0000000000000000 [ 355.717986][T14819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.717999][T14819] R13: 00007f0b54616038 R14: 00007f0b54615fa0 R15: 00007ffd419b0e58 [ 355.718040][T14819] [ 356.709893][T14839] FAULT_INJECTION: forcing a failure. [ 356.709893][T14839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.759268][T14839] CPU: 1 UID: 0 PID: 14839 Comm: syz.3.2258 Not tainted syzkaller #0 PREEMPT(full) [ 356.759299][T14839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 356.759312][T14839] Call Trace: [ 356.759321][T14839] [ 356.759329][T14839] dump_stack_lvl+0xe8/0x150 [ 356.759359][T14839] should_fail_ex+0x412/0x560 [ 356.759389][T14839] _copy_from_iter+0x1d3/0x1670 [ 356.759507][T14839] ? rcu_is_watching+0x15/0xb0 [ 356.759548][T14839] ? __pfx__copy_from_iter+0x10/0x10 [ 356.759588][T14839] ? netlink_sendmsg+0x650/0xb40 [ 356.759663][T14839] ? skb_put+0x11b/0x210 [ 356.759716][T14839] netlink_sendmsg+0x6c0/0xb40 [ 356.759752][T14839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.759781][T14839] ? aa_sock_msg_perm+0xf1/0x1b0 [ 356.759867][T14839] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 356.759902][T14839] ____sys_sendmsg+0x972/0x9f0 [ 356.759929][T14839] ? __might_fault+0xaf/0x130 [ 356.759972][T14839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.760009][T14839] ? import_iovec+0x73/0xa0 [ 356.760038][T14839] ___sys_sendmsg+0x2a5/0x360 [ 356.760063][T14839] ? __lock_acquire+0x6b5/0x2cf0 [ 356.760091][T14839] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.760154][T14839] ? __fget_files+0x2a/0x420 [ 356.760180][T14839] ? __fget_files+0x3a0/0x420 [ 356.760219][T14839] __x64_sys_sendmsg+0x1bd/0x2a0 [ 356.760253][T14839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 356.760290][T14839] ? __pfx_ksys_write+0x10/0x10 [ 356.760332][T14839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.760358][T14839] do_syscall_64+0x174/0x580 [ 356.760381][T14839] ? trace_irq_disable+0x3b/0x140 [ 356.760414][T14839] ? clear_bhb_loop+0x40/0x90 [ 356.760441][T14839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.760463][T14839] RIP: 0033:0x7f3c3539ce59 [ 356.760484][T14839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.760503][T14839] RSP: 002b:00007f3c36313028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.760527][T14839] RAX: ffffffffffffffda RBX: 00007f3c35615fa0 RCX: 00007f3c3539ce59 [ 356.760543][T14839] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 356.760557][T14839] RBP: 00007f3c36313090 R08: 0000000000000000 R09: 0000000000000000 [ 356.760580][T14839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.760593][T14839] R13: 00007f3c35616038 R14: 00007f3c35615fa0 R15: 00007ffc815e87d8 [ 356.760639][T14839] [ 359.233225][T14823] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 359.245546][T14850] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 359.368435][T14864] FAULT_INJECTION: forcing a failure. [ 359.368435][T14864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.452960][T14867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2267'. [ 359.461731][T14864] CPU: 1 UID: 0 PID: 14864 Comm: syz.2.2265 Not tainted syzkaller #0 PREEMPT(full) [ 359.461807][T14864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 359.461847][T14864] Call Trace: [ 359.461869][T14864] [ 359.461891][T14864] dump_stack_lvl+0xe8/0x150 [ 359.461989][T14864] should_fail_ex+0x412/0x560 [ 359.462054][T14864] _copy_to_user+0x31/0xb0 [ 359.462084][T14864] put_user_ifreq+0x6a/0xc0 [ 359.462113][T14864] sock_do_ioctl+0x26d/0x320 [ 359.462146][T14864] ? __pfx_sock_do_ioctl+0x10/0x10 [ 359.462173][T14864] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 359.462217][T14864] sock_ioctl+0x5c6/0x7f0 [ 359.462249][T14864] ? __pfx_sock_ioctl+0x10/0x10 [ 359.462279][T14864] ? __fget_files+0x2a/0x420 [ 359.462306][T14864] ? __fget_files+0x3a0/0x420 [ 359.462332][T14864] ? __fget_files+0x2a/0x420 [ 359.462362][T14864] ? bpf_lsm_file_ioctl+0x9/0x20 [ 359.462397][T14864] ? __pfx_sock_ioctl+0x10/0x10 [ 359.462450][T14864] __se_sys_ioctl+0xfc/0x170 [ 359.462573][T14864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.462643][T14864] do_syscall_64+0x174/0x580 [ 359.462706][T14864] ? trace_irq_disable+0x3b/0x140 [ 359.462790][T14864] ? clear_bhb_loop+0x40/0x90 [ 359.462865][T14864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.462911][T14864] RIP: 0033:0x7f0b5439ce59 [ 359.462965][T14864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.463009][T14864] RSP: 002b:00007f0b551ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.463072][T14864] RAX: ffffffffffffffda RBX: 00007f0b54615fa0 RCX: 00007f0b5439ce59 [ 359.463115][T14864] RDX: 0000200000000240 RSI: 0000000000008933 RDI: 0000000000000003 [ 359.463154][T14864] RBP: 00007f0b551ce090 R08: 0000000000000000 R09: 0000000000000000 [ 359.463186][T14864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.463219][T14864] R13: 00007f0b54616038 R14: 00007f0b54615fa0 R15: 00007ffd419b0e58 [ 359.463310][T14864] [ 359.801350][T14882] FAULT_INJECTION: forcing a failure. [ 359.801350][T14882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.839154][T14882] CPU: 0 UID: 0 PID: 14882 Comm: syz.3.2270 Not tainted syzkaller #0 PREEMPT(full) [ 359.839189][T14882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 359.839202][T14882] Call Trace: [ 359.839210][T14882] [ 359.839219][T14882] dump_stack_lvl+0xe8/0x150 [ 359.839249][T14882] should_fail_ex+0x412/0x560 [ 359.839279][T14882] _copy_from_iter+0x1d3/0x1670 [ 359.839307][T14882] ? rcu_is_watching+0x15/0xb0 [ 359.839339][T14882] ? __pfx__copy_from_iter+0x10/0x10 [ 359.839372][T14882] ? netlink_sendmsg+0x650/0xb40 [ 359.839399][T14882] ? skb_put+0x11b/0x210 [ 359.839426][T14882] netlink_sendmsg+0x6c0/0xb40 [ 359.839464][T14882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.839494][T14882] ? aa_sock_msg_perm+0xf1/0x1b0 [ 359.839530][T14882] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 359.839564][T14882] ____sys_sendmsg+0x972/0x9f0 [ 359.839590][T14882] ? __might_fault+0xaf/0x130 [ 359.839627][T14882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.839663][T14882] ? import_iovec+0x73/0xa0 [ 359.839693][T14882] ___sys_sendmsg+0x2a5/0x360 [ 359.839717][T14882] ? __lock_acquire+0x6b5/0x2cf0 [ 359.839745][T14882] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.839809][T14882] ? __fget_files+0x2a/0x420 [ 359.839836][T14882] ? __fget_files+0x3a0/0x420 [ 359.839874][T14882] __x64_sys_sendmsg+0x1bd/0x2a0 [ 359.839913][T14882] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.839950][T14882] ? __pfx_ksys_write+0x10/0x10 [ 359.839992][T14882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.840016][T14882] do_syscall_64+0x174/0x580 [ 359.840040][T14882] ? trace_irq_disable+0x3b/0x140 [ 359.840073][T14882] ? clear_bhb_loop+0x40/0x90 [ 359.840100][T14882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.840121][T14882] RIP: 0033:0x7f3c3539ce59 [ 359.840141][T14882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.840159][T14882] RSP: 002b:00007f3c36313028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.840183][T14882] RAX: ffffffffffffffda RBX: 00007f3c35615fa0 RCX: 00007f3c3539ce59 [ 359.840199][T14882] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 359.840212][T14882] RBP: 00007f3c36313090 R08: 0000000000000000 R09: 0000000000000000 [ 359.840226][T14882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.840238][T14882] R13: 00007f3c35616038 R14: 00007f3c35615fa0 R15: 00007ffc815e87d8 [ 359.840273][T14882] [ 360.198980][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 360.588715][T14913] pim6reg1: entered promiscuous mode [ 360.604734][T14913] pim6reg1: entered allmulticast mode [ 360.642811][T14916] FAULT_INJECTION: forcing a failure. [ 360.642811][T14916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.668125][T14916] CPU: 1 UID: 0 PID: 14916 Comm: syz.3.2279 Not tainted syzkaller #0 PREEMPT(full) [ 360.668153][T14916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.668165][T14916] Call Trace: [ 360.668173][T14916] [ 360.668181][T14916] dump_stack_lvl+0xe8/0x150 [ 360.668210][T14916] should_fail_ex+0x412/0x560 [ 360.668237][T14916] _copy_to_user+0x31/0xb0 [ 360.668264][T14916] simple_read_from_buffer+0xe1/0x170 [ 360.668296][T14916] proc_fail_nth_read+0x1bb/0x230 [ 360.668374][T14916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.668412][T14916] ? rw_verify_area+0x2a6/0x4d0 [ 360.668439][T14916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 360.668467][T14916] vfs_read+0x20c/0xa70 [ 360.668501][T14916] ? __pfx___mutex_lock+0x10/0x10 [ 360.668525][T14916] ? __pfx_vfs_read+0x10/0x10 [ 360.668555][T14916] ? __fget_files+0x2a/0x420 [ 360.668584][T14916] ? __fget_files+0x3a0/0x420 [ 360.668607][T14916] ? __fget_files+0x2a/0x420 [ 360.668640][T14916] ksys_read+0x150/0x270 [ 360.668670][T14916] ? __pfx_ksys_read+0x10/0x10 [ 360.668698][T14916] ? __pfx_sock_ioctl+0x10/0x10 [ 360.668731][T14916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.668753][T14916] do_syscall_64+0x174/0x580 [ 360.668779][T14916] ? trace_irq_disable+0x3b/0x140 [ 360.668809][T14916] ? clear_bhb_loop+0x40/0x90 [ 360.668833][T14916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.668852][T14916] RIP: 0033:0x7f3c3535d68e [ 360.668872][T14916] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.668889][T14916] RSP: 002b:00007f3c36312fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.668910][T14916] RAX: ffffffffffffffda RBX: 00007f3c363136c0 RCX: 00007f3c3535d68e [ 360.668925][T14916] RDX: 000000000000000f RSI: 00007f3c363130a0 RDI: 0000000000000004 [ 360.668936][T14916] RBP: 00007f3c36313090 R08: 0000000000000000 R09: 0000000000000000 [ 360.668948][T14916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.668960][T14916] R13: 00007f3c35616038 R14: 00007f3c35615fa0 R15: 00007ffc815e87d8 [ 360.668992][T14916] [ 361.403486][T14944] netlink: 'syz.0.2286': attribute type 4 has an invalid length. [ 361.519899][T14953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.551154][T14955] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2290'. [ 361.605505][T14957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2290'. [ 361.704069][T14964] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2291'. [ 361.734025][ T30] audit: type=1804 audit(1780694451.461:7): pid=14964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2291" name="/newroot/462/cgroup.controllers" dev="tmpfs" ino=2377 res=1 errno=0 [ 361.777288][ T30] audit: type=1800 audit(1780694451.461:8): pid=14964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2291" name="cgroup.controllers" dev="tmpfs" ino=2377 res=0 errno=0 [ 361.832249][T14970] tipc: Enabling of bearer rejected, failed to enable media [ 362.018729][T14982] netlink: 'syz.2.2297': attribute type 11 has an invalid length. [ 362.029932][T14983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2295'. [ 362.144063][T14983] bond_slave_0: entered promiscuous mode [ 362.164733][T14988] sctp: [Deprecated]: syz.1.2298 (pid 14988) Use of int in maxseg socket option. [ 362.164733][T14988] Use struct sctp_assoc_value instead [ 362.185512][T14983] bond_slave_0: entered allmulticast mode [ 362.256396][T14982] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 362.275232][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.282483][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.598578][T14998] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2300'. [ 362.650542][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2300'. [ 362.733223][T15007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.913938][T14999] syzkaller1: entered promiscuous mode [ 362.921936][T14999] syzkaller1: entered allmulticast mode [ 363.378831][T15044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2311'. [ 363.491309][T15044] 8021q: adding VLAN 0 to HW filter on device bond13 [ 363.571830][T15048] 8021q: adding VLAN 0 to HW filter on device bond13 [ 363.594672][T15048] bond13: (slave vti1): The slave device specified does not support setting the MAC address [ 363.606025][T15048] bond13: (slave vti1): Error -95 calling set_mac_address [ 363.797859][T15060] netlink: 'syz.3.2314': attribute type 1 has an invalid length. [ 363.897203][T15060] 8021q: adding VLAN 0 to HW filter on device bond14 [ 363.954691][T15064] vlan5: entered promiscuous mode [ 363.977355][T15064] bond14: entered promiscuous mode [ 363.989650][T15064] vlan5: entered allmulticast mode [ 363.998343][T15064] bond14: entered allmulticast mode [ 364.293792][ T30] audit: type=1800 audit(1780694454.021:9): pid=15084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2317" name=20 dev="tmpfs" ino=2417 res=0 errno=0 [ 364.309951][T15085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2319'. [ 364.340731][T15085] netlink: 'syz.2.2319': attribute type 2 has an invalid length. [ 364.594847][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2322'. [ 364.667051][T15108] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0 [ 365.125751][T15136] netlink: 'syz.2.2330': attribute type 30 has an invalid length. [ 365.179663][T15138] netlink: 'syz.2.2330': attribute type 30 has an invalid length. [ 365.196693][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.217531][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.239556][T15144] __nla_validate_parse: 3 callbacks suppressed [ 365.239577][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'. [ 365.243606][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 365.265865][T15144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2332'. [ 366.118914][T15176] syzkaller1: entered promiscuous mode [ 366.133060][T15176] syzkaller1: entered allmulticast mode [ 366.264004][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 366.415978][T15191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2345'. [ 366.483704][T15199] netlink: 'syz.0.2347': attribute type 10 has an invalid length. [ 366.537226][T15197] netdevsim netdevsim3 €Â: renamed from netdevsim0 [ 366.605875][T15197] bond0: option fail_over_mac: invalid value (255) [ 366.657959][T15197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2346'. [ 366.686457][T15210] x_tables: duplicate underflow at hook 1 [ 366.763793][T15215] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2351'. [ 366.779740][T15205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2348'. [ 366.819914][T15205] IPVS: set_ctl: invalid protocol: 1 172.20.20.170:20001 [ 366.863222][T15205] netlink: 'syz.4.2348': attribute type 4 has an invalid length. [ 366.863830][T15219] netlink: 'syz.1.2352': attribute type 3 has an invalid length. [ 366.910375][T15205] netlink: 'syz.4.2348': attribute type 4 has an invalid length. [ 367.657307][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2362'. [ 367.679903][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2362'. [ 367.701986][T15251] netlink: 'syz.2.2362': attribute type 11 has an invalid length. [ 367.723028][T15251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2362'. [ 368.109776][T15267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.474894][T15278] netlink: 'syz.2.2370': attribute type 12 has an invalid length. [ 368.601515][T15280] 8021q: adding VLAN 0 to HW filter on device bond8 [ 368.698286][T15284] bond8: (slave veth5): Enslaving as an active interface with an up link [ 369.000887][T15300] bridge4: entered promiscuous mode [ 369.016979][T15300] bridge4: entered allmulticast mode [ 369.067757][T15306] syzkaller0: entered promiscuous mode [ 369.079968][T15306] syzkaller0: entered allmulticast mode [ 369.314849][T15322] netlink: 'syz.4.2383': attribute type 1 has an invalid length. [ 369.694752][T15349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.873993][T15357] netlink: 'syz.0.2391': attribute type 1 has an invalid length. [ 370.047659][T15363] netlink: 'syz.0.2393': attribute type 1 has an invalid length. [ 370.057972][T15363] netlink: 'syz.0.2393': attribute type 1 has an invalid length. [ 370.125732][T15365] netlink: 'syz.2.2394': attribute type 3 has an invalid length. [ 370.282456][T15370] __nla_validate_parse: 12 callbacks suppressed [ 370.282477][T15370] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2396'. [ 370.307314][T15370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2396'. [ 370.697382][T15386] xt_hashlimit: max too large, truncated to 1048576 [ 370.704644][T15386] xt_hashlimit: overflow, try lower: 2/0 [ 371.092407][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'. [ 371.172021][T15415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2411'. [ 371.325082][T15419] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 371.394871][T15428] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2413'. [ 371.517334][T15428] syzkaller0: entered promiscuous mode [ 371.532411][T15428] syzkaller0: entered allmulticast mode [ 373.949644][T15463] geneve0: Caught tx_queue_len zero misconfig [ 374.456935][T15468] validate_nla: 3 callbacks suppressed [ 374.456950][T15468] netlink: 'syz.2.2422': attribute type 14 has an invalid length. [ 374.796484][T15486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2427'. [ 374.809147][T15484] netlink: 'syz.1.2428': attribute type 21 has an invalid length. [ 374.849907][T15484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2428'. [ 374.956119][T15484] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2428'. [ 375.265964][T15504] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2431'. [ 375.276276][T15505] netlink: 'syz.3.2433': attribute type 1 has an invalid length. [ 375.330972][T15501] netlink: 'syz.2.2431': attribute type 11 has an invalid length. [ 375.438252][T15505] 8021q: adding VLAN 0 to HW filter on device bond15 [ 375.565977][T15503] vlan6: entered allmulticast mode [ 375.610323][T15503] bond15: entered allmulticast mode [ 375.747181][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2431'. [ 375.952057][T15536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2437'. [ 376.034933][T15536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2437'. [ 376.250642][T15549] netlink: 'syz.1.2438': attribute type 13 has an invalid length. [ 376.274553][T15549] netlink: 'syz.1.2438': attribute type 17 has an invalid length. [ 376.693888][T15566] netlink: 'syz.2.2441': attribute type 9 has an invalid length. [ 376.719564][T15566] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2441'. [ 376.731028][T15569] netlink: 'syz.3.2442': attribute type 30 has an invalid length. [ 379.110968][T15549] erspan0: left promiscuous mode [ 379.136178][T15549] sit0: left promiscuous mode [ 379.186170][T15549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.200658][T15549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.262177][T15549] veth1_vlan: left promiscuous mode [ 379.275391][T15549] veth1_vlan: entered promiscuous mode [ 379.294670][T15549] veth0_macvtap: left promiscuous mode [ 379.302352][T15549] veth0_macvtap: entered promiscuous mode [ 379.326539][T15549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 379.341910][T15549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 379.355697][T15549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 379.370386][T15549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 379.384198][T15549] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 379.391047][T15549] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 379.398054][T15549] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 379.424042][T15569] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 379.598898][T15600] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2445'. [ 379.978220][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2454'. [ 380.070640][T15622] bond16: option min_links: invalid value (18446744073709551612) [ 380.104217][T15622] bond16: option min_links: allowed values 0 - 2147483647 [ 380.122957][T15622] bond16 (unregistering): Released all slaves [ 380.308173][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2454'. [ 380.576612][T15652] syzkaller0: entered promiscuous mode [ 380.585561][T15652] syzkaller0: entered allmulticast mode [ 380.690105][T15652] tipc: Enabled bearer , priority 0 [ 380.760621][T15651] tipc: Resetting bearer [ 380.812506][T15651] tipc: Disabling bearer [ 380.835802][T15657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2463'. [ 380.867916][T15665] dummy0: entered promiscuous mode [ 380.888965][T15665] dummy0: left promiscuous mode [ 380.981968][T15668] netlink: 'syz.2.2465': attribute type 12 has an invalid length. [ 381.254894][ T30] audit: type=1800 audit(1780694470.981:10): pid=15679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2468" name="r" dev="tmpfs" ino=2546 res=0 errno=0 [ 382.008008][T15711] netlink: 'syz.3.2478': attribute type 11 has an invalid length. [ 382.047308][T15696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2471'. [ 382.077073][T15696] netlink: 'syz.0.2471': attribute type 8 has an invalid length. [ 382.158700][T15696] geneve2: entered promiscuous mode [ 382.193462][T15696] geneve2: entered allmulticast mode [ 382.275469][ T138] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.287488][T15726] netlink: 'syz.1.2482': attribute type 21 has an invalid length. [ 382.308145][ T138] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.315330][T15726] netlink: 'syz.1.2482': attribute type 21 has an invalid length. [ 382.330634][T15718] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2480'. [ 382.349457][ T138] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.372176][ T138] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.751917][T15746] netlink: 'syz.2.2487': attribute type 4 has an invalid length. [ 382.785876][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'. [ 382.798936][T15746] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2487'. [ 382.808750][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'. [ 382.835271][T15748] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2488'. [ 382.860999][T15748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.891115][T15748] 8021q: VLANs not supported on ip6gre0 [ 382.985689][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2492'. [ 383.042038][T15761] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2492'. [ 383.101569][T15769] batadv_slave_1: entered promiscuous mode [ 383.250615][T15780] netlink: 'syz.2.2496': attribute type 10 has an invalid length. [ 383.271813][T15772] netlink: 'syz.3.2495': attribute type 2 has an invalid length. [ 383.279826][T15780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2496'. [ 383.358209][T15780] team0: Port device geneve1 added [ 383.561055][T15796] netlink: 'syz.3.2500': attribute type 13 has an invalid length. [ 383.573648][T15797] netlink: 'syz.2.2501': attribute type 8 has an invalid length. [ 383.746099][T15799] sch_tbf: burst 6 is lower than device gretap0 mtu (1514) ! [ 383.817206][T15797] bond9: (slave lo): Releasing backup interface [ 383.831108][T15797] bond9: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 383.865561][T15797] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 384.094981][T15819] ipt_rpfilter: unknown options [ 384.225972][ C1] ================================================================== [ 384.234193][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 384.242378][ C1] Read of size 2 at addr ffff88816aebb474 by task syz.2.2506/15821 [ 384.250369][ C1] [ 384.252800][ C1] CPU: 1 UID: 0 PID: 15821 Comm: syz.2.2506 Not tainted syzkaller #0 PREEMPT(full) [ 384.252884][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 384.252899][ C1] Call Trace: [ 384.252908][ C1] [ 384.252918][ C1] dump_stack_lvl+0xe8/0x150 [ 384.252958][ C1] print_address_description+0x55/0x1e0 [ 384.252993][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 384.253024][ C1] print_report+0x58/0x70 [ 384.253043][ C1] kasan_report+0x117/0x150 [ 384.253063][ C1] ? __pskb_pull_tail+0x115d/0x17b0 [ 384.253131][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 384.253164][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 384.253202][ C1] __netif_receive_skb_core+0x13bd/0x3170 [ 384.253259][ C1] ? lock_acquire+0x106/0x350 [ 384.253288][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 384.253317][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 384.253350][ C1] ? kernel_text_address+0xa5/0xe0 [ 384.253415][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 384.253448][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 384.253478][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 384.253513][ C1] ? rcu_is_watching+0x15/0xb0 [ 384.253542][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 384.253573][ C1] ? lock_acquire+0x106/0x350 [ 384.253598][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 384.253629][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 384.253660][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 384.253710][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 384.253736][ C1] napi_complete_done+0x299/0x730 [ 384.253770][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 384.253804][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 384.253862][ C1] gro_cell_poll+0x5a9/0x5d0 [ 384.253888][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 384.253908][ C1] __napi_poll+0xae/0x340 [ 384.253936][ C1] ? skb_defer_free_flush+0x233/0x260 [ 384.253976][ C1] net_rx_action+0x627/0xf70 [ 384.254022][ C1] ? lock_acquire+0x106/0x350 [ 384.254051][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 384.254078][ C1] ? sched_clock+0x3f/0x60 [ 384.254133][ C1] handle_softirqs+0x22a/0x840 [ 384.254158][ C1] ? do_softirq+0x76/0xd0 [ 384.254181][ C1] ? tun_rx_batched+0x185/0x790 [ 384.254263][ C1] do_softirq+0x76/0xd0 [ 384.254283][ C1] [ 384.254290][ C1] [ 384.254298][ C1] __local_bh_enable_ip+0xf8/0x130 [ 384.254319][ C1] ? tun_rx_batched+0x185/0x790 [ 384.254340][ C1] tun_rx_batched+0x617/0x790 [ 384.254366][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 384.254387][ C1] ? tun_get_user+0x2787/0x43e0 [ 384.254409][ C1] ? tun_get_user+0x2787/0x43e0 [ 384.254430][ C1] ? tun_get_user+0x2394/0x43e0 [ 384.254451][ C1] ? tun_get_user+0x2394/0x43e0 [ 384.254471][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 384.254495][ C1] tun_get_user+0x2bbc/0x43e0 [ 384.254517][ C1] ? tun_get_user+0x2787/0x43e0 [ 384.254542][ C1] ? aa_file_perm+0x192/0x15e0 [ 384.254566][ C1] ? aa_file_perm+0x50e/0x15e0 [ 384.254586][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 384.254608][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 384.254634][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 384.254664][ C1] ? preempt_schedule_common+0x82/0xd0 [ 384.254689][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 384.254749][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 384.254775][ C1] ? tun_get+0x1c/0x2f0 [ 384.254796][ C1] ? tun_get+0x1c/0x2f0 [ 384.254819][ C1] ? tun_get+0x1c/0x2f0 [ 384.254845][ C1] ? tun_get+0x1c/0x2f0 [ 384.254872][ C1] tun_chr_write_iter+0x113/0x200 [ 384.254900][ C1] vfs_write+0x61d/0xb90 [ 384.254937][ C1] ? __pfx_vfs_write+0x10/0x10 [ 384.254979][ C1] ? __fget_files+0x2a/0x420 [ 384.255014][ C1] ksys_write+0x150/0x270 [ 384.255047][ C1] ? __pfx_ksys_write+0x10/0x10 [ 384.255083][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.255106][ C1] do_syscall_64+0x174/0x580 [ 384.255130][ C1] ? trace_irq_disable+0x3b/0x140 [ 384.255163][ C1] ? clear_bhb_loop+0x40/0x90 [ 384.255187][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.255208][ C1] RIP: 0033:0x7f0b5439ce59 [ 384.255228][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.255248][ C1] RSP: 002b:00007f0b551ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.255273][ C1] RAX: ffffffffffffffda RBX: 00007f0b54615fa0 RCX: 00007f0b5439ce59 [ 384.255290][ C1] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005 [ 384.255305][ C1] RBP: 00007f0b54432d6f R08: 0000000000000000 R09: 0000000000000000 [ 384.255319][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.255333][ C1] R13: 00007f0b54616038 R14: 00007f0b54615fa0 R15: 00007ffd419b0e58 [ 384.255360][ C1] [ 384.255367][ C1] [ 384.727153][ C1] The buggy address belongs to the physical page: [ 384.733599][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16aebb [ 384.742467][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 384.749701][ C1] raw: 057ff00000000000 ffffea0005abaec8 ffffea0005abaec8 0000000000000000 [ 384.758295][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 384.766887][ C1] page dumped because: kasan: bad access detected [ 384.773335][ C1] page_owner info is not present (never set?) [ 384.779411][ C1] [ 384.781749][ C1] Memory state around the buggy address: [ 384.787465][ C1] ffff88816aebb300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 384.795539][ C1] ffff88816aebb380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 384.803610][ C1] >ffff88816aebb400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 384.811679][ C1] ^ [ 384.819411][ C1] ffff88816aebb480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 384.827483][ C1] ffff88816aebb500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 384.835554][ C1] ================================================================== [ 384.843777][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 384.851027][ C1] CPU: 1 UID: 0 PID: 15821 Comm: syz.2.2506 Not tainted syzkaller #0 PREEMPT(full) [ 384.860430][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 384.870523][ C1] Call Trace: [ 384.873838][ C1] [ 384.876719][ C1] vpanic+0x56c/0xa60 [ 384.880747][ C1] ? __pfx_vpanic+0x10/0x10 [ 384.885297][ C1] panic+0xc5/0xd0 [ 384.889064][ C1] ? __pfx_panic+0x10/0x10 [ 384.893523][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 384.899209][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 384.904886][ C1] check_panic_on_warn+0x89/0xb0 [ 384.909897][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 384.915585][ C1] end_report+0x73/0x170 [ 384.919869][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 384.925554][ C1] kasan_report+0x128/0x150 [ 384.930091][ C1] ? __pskb_pull_tail+0x115d/0x17b0 [ 384.935341][ C1] ? qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 384.941025][ C1] qdisc_pkt_len_segs_init+0x7f8/0xa30 [ 384.946629][ C1] __netif_receive_skb_core+0x13bd/0x3170 [ 384.952403][ C1] ? lock_acquire+0x106/0x350 [ 384.957128][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 384.962370][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 384.968492][ C1] ? kernel_text_address+0xa5/0xe0 [ 384.973671][ C1] __netif_receive_skb_list_core+0x24d/0x810 [ 384.979704][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 384.984697][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 384.991256][ C1] ? rcu_is_watching+0x15/0xb0 [ 384.996068][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 385.002272][ C1] ? lock_acquire+0x106/0x350 [ 385.006994][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 385.013374][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 385.020102][ C1] ? dev_gro_receive+0x1108/0x23c0 [ 385.025262][ C1] ? dev_gro_receive+0x1773/0x23c0 [ 385.030431][ C1] napi_complete_done+0x299/0x730 [ 385.035510][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 385.041112][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 385.045918][ C1] gro_cell_poll+0x5a9/0x5d0 [ 385.050559][ C1] ? gro_cell_poll+0x16c/0x5d0 [ 385.055363][ C1] __napi_poll+0xae/0x340 [ 385.059746][ C1] ? skb_defer_free_flush+0x233/0x260 [ 385.065180][ C1] net_rx_action+0x627/0xf70 [ 385.069799][ C1] ? lock_acquire+0x106/0x350 [ 385.074529][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 385.079682][ C1] ? sched_clock+0x3f/0x60 [ 385.084158][ C1] handle_softirqs+0x22a/0x840 [ 385.088967][ C1] ? do_softirq+0x76/0xd0 [ 385.093341][ C1] ? tun_rx_batched+0x185/0x790 [ 385.098236][ C1] do_softirq+0x76/0xd0 [ 385.102441][ C1] [ 385.105405][ C1] [ 385.108367][ C1] __local_bh_enable_ip+0xf8/0x130 [ 385.113517][ C1] ? tun_rx_batched+0x185/0x790 [ 385.118407][ C1] tun_rx_batched+0x617/0x790 [ 385.123151][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 385.128375][ C1] ? tun_get_user+0x2787/0x43e0 [ 385.133263][ C1] ? tun_get_user+0x2787/0x43e0 [ 385.138148][ C1] ? tun_get_user+0x2394/0x43e0 [ 385.143035][ C1] ? tun_get_user+0x2394/0x43e0 [ 385.147917][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 385.153233][ C1] tun_get_user+0x2bbc/0x43e0 [ 385.157937][ C1] ? tun_get_user+0x2787/0x43e0 [ 385.162838][ C1] ? aa_file_perm+0x192/0x15e0 [ 385.167660][ C1] ? aa_file_perm+0x50e/0x15e0 [ 385.172460][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 385.177512][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 385.182485][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 385.187897][ C1] ? preempt_schedule_common+0x82/0xd0 [ 385.193391][ C1] ? ref_tracker_alloc+0x35c/0x4c0 [ 385.198542][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 385.204033][ C1] ? tun_get+0x1c/0x2f0 [ 385.208213][ C1] ? tun_get+0x1c/0x2f0 [ 385.212387][ C1] ? tun_get+0x1c/0x2f0 [ 385.216558][ C1] ? tun_get+0x1c/0x2f0 [ 385.220733][ C1] tun_chr_write_iter+0x113/0x200 [ 385.225778][ C1] vfs_write+0x61d/0xb90 [ 385.230065][ C1] ? __pfx_vfs_write+0x10/0x10 [ 385.234859][ C1] ? __fget_files+0x2a/0x420 [ 385.239478][ C1] ksys_write+0x150/0x270 [ 385.243840][ C1] ? __pfx_ksys_write+0x10/0x10 [ 385.248717][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.254809][ C1] do_syscall_64+0x174/0x580 [ 385.259417][ C1] ? trace_irq_disable+0x3b/0x140 [ 385.264466][ C1] ? clear_bhb_loop+0x40/0x90 [ 385.269161][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.275128][ C1] RIP: 0033:0x7f0b5439ce59 [ 385.279562][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.299184][ C1] RSP: 002b:00007f0b551ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 385.307638][ C1] RAX: ffffffffffffffda RBX: 00007f0b54615fa0 RCX: 00007f0b5439ce59 [ 385.315634][ C1] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000005 [ 385.323624][ C1] RBP: 00007f0b54432d6f R08: 0000000000000000 R09: 0000000000000000 [ 385.331611][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.339637][ C1] R13: 00007f0b54616038 R14: 00007f0b54615fa0 R15: 00007ffd419b0e58 [ 385.347635][ C1] [ 385.351297][ C1] Kernel Offset: disabled [ 385.355629][ C1] Rebooting in 86400 seconds..