last executing test programs: 5.146102648s ago: executing program 2 (id=10001): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.962407622s ago: executing program 0 (id=10004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@setlink={0x58, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x409}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x40, 0x7}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x7fffffff}]}, 0x58}}, 0x804) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b23b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d1cb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde314693f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c29fbab7d04d73a381c21f1c344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd4ef7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76b2e9a674448f3ee2cd29707468df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e3d5cba447c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000000000000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058c35febda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a976a9e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab814761819b0fc517239a6777dbb92a7462538dbd8a4b84b160a598c75bafa5a9b388a44303dbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bb9204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b0200897e505afb6f3f8eb5384e3300000000000000000000000000006b78992d5c13cc1e4da0c915f6008be5cbc0ba1eea48d5967c5e5106411dda3578c91d93ecf4a5efdf306f6b5378db3b22f5aae576342ff9a2eda7080027be316100af0ec6f0e9f227e239fe2d8c78555aaaa969581860f846df35757281a6d3f2e6de960c30f98987ba99d1edfb39dece89262a2e71cb50b7104f611b8db7639e6a5b485135bead15cfada2b5ffa490d60f6b8211f6ada947d06fac138f829b24f2c9d60f3d6672ef8e86ddcdf4dba4f20f370c58f49c9d0100b519f8bc685f176c3f305ced21df0c8acace252a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r10, @ANYBLOB="fe00d31ecf6400001c00120037000100626f6e64000000000c000200080001000466cae2ad00a82a6146faed6cf003ad30ab18cf6e6694fcfb1fb48b510645741b76cf07000048beab78f91bb7283e57d83888247f39fd2760555ccc360ea177211e075801af9ebc7d532d0300000000"], 0x3c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES16=r5], 0x54}}, 0x0) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="8db2aecdf464b0d315f304f76cf242228b9b1f17b1e5c546fcd46c7b0ee20e17a8b7b86617312482eef18cfb803313b9bb", @ANYRESHEX=r6, @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0xe8, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0x60, 0x7, 0x1, 0x0, "9055aa41eb74a666207dbf8896562fcf3f44f372403134383f01bc16a1523b3bf8174c23e155f0d7a6cdeeaad20a01702473a22ba8c11f8a5c31eb2766eac150c8a20dd6fc89d7a78d7abd7c8417e639727e18564c775642d11051cf"}, @NFTA_RULE_USERDATA={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[], 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYRESHEX=r2, @ANYRES32=r15, @ANYRES8=r11, @ANYBLOB='\x00\x00\x00\x00B\x00'/28], 0x50) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r16, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r16, &(0x7f0000000240), &(0x7f0000000340)=""/186}, 0x20) 4.586720631s ago: executing program 4 (id=10007): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r8, @ANYBLOB="28002b801c00038006000300feff000006000100039658fadc00020002000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4010084) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x1, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x54, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1d}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0xc080}, 0x40040) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r11) sendto$packet(r0, &(0x7f0000000240)="f3277b60d4e19ea5be6413ec7093", 0xe, 0x44890, &(0x7f0000000200)={0x11, 0x86dd, r12, 0x1, 0x4, 0x6, @local}, 0x14) 3.393799236s ago: executing program 2 (id=10011): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x4, 0x0, 0x8100348}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a40)="fe55fc2733656c99edc9bbe8b3ec7b6726cb14dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a74299ed60537972fe8b8a447f1527c441f5b1e437abbc829719f5531a60f5623f3d41c7478ee4f25d5dea47e18497224f28d5fd26232746c93223e497b8308db8e77f832efe87a66e6c6ec48a0a277424e1394787deab59f494386c91d6f99431f481e669b1230ada059e4155aaaaa29a421c8d86582e4f52a8fd1726482a1142c3b25e2e6f3496d0b656374ff21e2c", 0xc6}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11044}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x3a018, 0x10}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, @IFLA_IFNAME={0x14, 0x3, 'pimreg\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x8084}, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff3}}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x4e21, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r10, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) 3.233620851s ago: executing program 1 (id=10013): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x80d0) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x4, {0x0, 0x0, 0x12, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x4, 0x9, 0xa654, 0xff}}}}]}, 0x48}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026c170000400000027000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002480)={&(0x7f00000001c0)="935325dd4a66543a3a03cb7577dbc9da506e1384a09d608b5f56712d9a4503b2b0e1f9568c426c03cdf09c93a2bcd04babe5b22b4886579624737fddac3f66cc01f91ba16276a4d83c0d0a64d3388c47030fdcf910be609ccfe0", &(0x7f0000000340)=""/21, &(0x7f0000000380)="cbbd8bff70dc98195349660e418d8e18c94885abe96cbce77e7c6ed5ab8788fc272bc8226ec2e220c6a61a84daaf204c48ea7bb2945b3b2aba07e7921f34f9a4b4f6f09ea9060b2b54ef97ba69d5236afa4b310d66613aa20467b508fd20350f8a4ad40e4312a2961ca6dda4dedd545ccb424dd6973210bd5d4af832f75c5a7940", &(0x7f00000024c0)="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", 0x7ee7, r4, 0x4}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r10 = epoll_create1(0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000a063f86725f276ab3e420efaf474e482a66287bb4b6590b023e12bd77e13f3d56a170d70331069e4a00f274413c08c01a0e4bab5b06da3710d14355bd197d9f6e6467edcb960436cee515d65da63b5dd12d7c3f2819e8bdb9eeb45558bf9820b9f7100335be75f3454892bda03276465ba6713491b5ecf0abd3a54c9cd3468aed204f0dd502c865360c133010773f07fdecae7ad15319d1301140b221c89855891075e0216b2269655e5c698b37cf5b0bbd2f573994647ff610ce8493244665fa14684091fb60b6006b3df4bc39733a07f", @ANYRES16=r12, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, 0x0) close(0xffffffffffffffff) r14 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r14, 0x0, 0x0) connect$pptp(r14, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) 3.228361406s ago: executing program 4 (id=10014): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.17183018s ago: executing program 0 (id=10015): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x312}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.790162195s ago: executing program 4 (id=10018): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000480000100180100002020782500000000cb0000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000100b703000000000040850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 2.707699038s ago: executing program 3 (id=10019): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e0"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="000000000000000017010000040000000400000000000000000000000000000017010000030000000000"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) close(r0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, 0x0, 0x0) 2.636439248s ago: executing program 0 (id=10020): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="58000000100003040100"/20, @ANYRES32=0x0, @ANYBLOB="00000000100000002c0012800e00010069703665727370616e000000180002801400070000000000000000000000000000e2ffff090001"], 0x58}}, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) epoll_create(0x8) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 2.572913676s ago: executing program 4 (id=10021): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000001b00)={{r0, &(0x7f0000000040), 0x101000, &(0x7f0000000080)={@align=0x6, {0x3, 0x7ff, 0xb, 0xa45}}, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6}, 0x6, &(0x7f0000001a40)=[{0x1, 0xc, &(0x7f0000000140)=')!@\\\x96@/.*^\x00', &(0x7f0000000180)}, {0x3, 0x0, &(0x7f00000001c0)='geneve\x00', &(0x7f0000000600)="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", 0x1000, 0x20}, {0x3, 0x5, &(0x7f0000001600)='geneve0\x00', &(0x7f0000001640)="5364bf425cc331e31e75a409eceb86850374a5a72995c759df78fe66b27c25f257e901d4be2a9a331cf3da9812e045d440fe28a18c72629c6adeea438714e5955b4cceaaaebbb037bca8c43c0027e1ae1ee88375c316e4f057dceb5190cf7be191789ace78d14c8975734fc619542606512dd7dcc93b31d532a187fe07b5762989cc163a69308722eb855493572e3c7b", 0x90, 0x12}, {0x3, 0x8, &(0x7f0000001700)='.&[:$]\x00', &(0x7f0000001740)="b3bc268f4dab21c7f33fc770e4a5ce4413db8754f27a6c62d976a403464d773852ce1500e11d937953037634fe4dc17f851969d0e258ea31e78951d7b92addced452578d14fe690d0381bb305d882031724b2ae4046671b297510235f08bd0a60f3ddf5ee9a8ae7396ef6fe19979952e66860eabcba2f7f309ff887b10154e9f94ddcc935b663634573867638d05e72e5ab4ce2759eda2d8dc6716f0a9328ef9fca9a780c2787f11bc1a8070f5a11f012e0b2699ad7828182d01da850f1778c7727a02c2493c0de4250d92ffdc420649ba1bd469", 0xd4, 0x12}, {0x3, 0xffffffff, &(0x7f0000001840)='.\x00', &(0x7f0000001880)="e6a59ab95b87eadbce7e9286b86d1d378e7e93a3dc8c332bb6cb8a2e4d59cad41b8aef07a20de32806e54699afa72f9adbf37c30a0e47454c32ff938eba24571c12e23dfdcf3d7fca4b139765b22078525665e3ec52f1ab9355e9b32e2764853afae19c5b4c9079f815f5238fcb187bf30e85f1db96c810cc766b2981a8ad492811088092616a69513cb27465d04e8c152951e268fd35105a0b78250f496", 0x9e, 0x12}, {0x2, 0xffffffff, &(0x7f0000001940)='geneve\x00', &(0x7f0000001980)="254688eeb555dfa6264187c5b844b65e402c7be3aed45f2dd3369ec606c809332e2e706748b63ab94cbd5e7b0476c26ed6eb31b98b62cc8648fde1f6ea4dc9e7c32afe78b87f4a23b86ac9595529ef958e6bd73f6931fc81bea5cb42e12ee0372ab4e95fd92706f243f2a60992c7b35e5ed3852a1f0218119ef72fd6c3acb5b30a5f", 0x82, 0xc}]}) unshare(0x6a040000) socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f00000002c0)={0x29, "51f2e0f358fe2fe7eb8452242bd93a19dfaa1c909dd6d3c0d0140a71260886bdfffb915b3d681250b5628eacd6c6ce4c003b79c4fd694ef99c1aac8249fafdfadbaa86bb3bb5439383aa02b5f48096922e78f46ce130b02a73de1ffbf0321764af1e6fc81f6456cc4689d8b43b846e5fc579d7bf3d38fe2f4455cff238cdd12d"}) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000002bc0)={0x1, {{0xa, 0x4e20, 0x1, @mcast1}}, 0x0, 0x2, [{{0xa, 0x4e21, 0x0, @private2, 0x7fff}}, {{0xa, 0x4e21, 0x9, @private2, 0x8}}]}, 0x190) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}}, 0x80) 2.430073237s ago: executing program 1 (id=10022): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000020101020000050000000000050000060800084000000081080003400000300008001a"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4048890) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x2c, r4, 0x701, 0x0, 0xfffffffd, {{}, {@val={0x8, 0x1, 0x8}, @val={0x8, 0x15}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x2c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffff00, 0xff000000], 'syz_tun\x00', 'veth1\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x12}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0xdf77782b65c3a720}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000, 0xffffffff], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x87, 0x0, 0x0, 0x21}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xffff], 0x6, 0x5, 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000290f00"/20, @ANYRES32=0x0, @ANYBLOB="02000000000000001c00128009000100626f6e64000000000c00028008001e002010fd00"], 0x3c}, 0x1, 0x0, 0x0, 0x24000046}, 0x0) 2.00765241s ago: executing program 3 (id=10023): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x68, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.970586801s ago: executing program 0 (id=10024): r0 = socket(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4008094) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000010c708fcb5036a2700000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 1.75765525s ago: executing program 3 (id=10025): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100004800c00058008"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)="f9dd7ae75326780b4401482af114278acb43e1fc33ac27e549667924ef7be5c9b298e47e43a09e93c0d6471ac7f9520573bb3059ae3a11fc07ff56757086e37f41e121320e628f7b7779358f53a5304940022133ea47fd364f4d7325fb7d75023b9dbc153e7f7a4d1a3246d4cf79019e33a92bdeb642e2c42e52eb3862dcfeb2f567928b8653dcbeb0ef4a0d6f42c9eef38adbf0b5b5cad235946eb6b4d4ab677ac0249cad3e5c63d2aafa041d609a45d3958e72f4a07b812b0f52ef0b109ef146", 0xc1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x26a, @remote, 0x6d}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000100)="3d4ca6e83d154c8b123fda08dde7985017d84600c4911dbf213ddf3b2b5b281204396781e1ae8793cd8ef6fade1f07e76e03d0fc8cbcf8fe9dc96881c07732bbaddfc95f32673584410a7f562bb63554902d96d713b00ca5e007146c59", 0x5d}, {&(0x7f0000000380)="b0e4521bb2305b105556df940beea31bf97fb643bf092caab5d049e24c2cb9abdedb10cf41a60a82bdfbb83523616d1f7fd934cbbf142477bda1ebadddcd8a35d9b35ce26f9d9b507d85b710b41a", 0x4e}], 0x2, &(0x7f0000000440)=[@hopopts={{0x108, 0x29, 0x36, {0x2c, 0x1e, '\x00', [@generic={0xe, 0xd6, "83738ae713465c39f97eb58c4c404a01c0236ce12d705a32307f38a9dacce34fdb0b30421ca3c0a45abbc678a02623708676f927e8bc894f724e68e860869fe87a62b8774a49f73adf9715d5a45dc9e01ab40f67711911e1ccafe300b7d3962246698ef76830615601ad0b315f206bf0abe3c59e6945340d7ac7a0f201eba7eaa67a60c8589e7c2f6982fd946dd49f652eb505056885dd88b33aca0838a189eb4767cc83c76e49fa529967c4d7c22b7fa8cedc490c079c1ea67a4c8bb706fa6af1e963808df6ecddac915242b8f540c67788cc243bde"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3f}}, @jumbo={0xc2, 0x4, 0x2}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x120}}, {{&(0x7f0000000580)={0xa, 0x4e22, 0xa5f, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffb}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000005c0)="d4a887410ccc65c70ed17ecd1ddc07b9becc3ef301e0477335f887bbfe23cddfa904fe6c921742c72a9adc73e327bf640894723cfd17e86acbf728d2b1bb05460943501433c14fa6c3cae6f4c5f04f496cf368173ddacd8d18b1bc83b4f9118e969022499a8452067c2aff46bc5277ecf0721564c6926753d818df614ca262e059de56740e8a9f08f221afd6c223b195e03be113bddc7a7a411844438dbb704c8ae2e17fa1", 0xa5}, {&(0x7f0000000680)="27edc0a6aa74557aac6cfd3f440d2d3062aad702027a3eae62ba8f87038627e9e7004af577ac54de4d00228155722eac0c0d2fbb35a24aaa4a16eceeb6866f45614f15ba79038c34d8ef8c4046cd7fa1155a43edc2556421f5beab4c5fc18918770635e50a", 0x65}, {&(0x7f0000000700)="50b38397114d73704acbcd3702413d75d93da672bfc0f56beaf29a7369dbf1571583b8", 0x23}], 0x3}}, {{&(0x7f0000000780)={0xa, 0x4e20, 0xfd0a, @private1, 0x2}, 0x1c, &(0x7f00000007c0), 0x0, &(0x7f0000001900)=[@rthdrdstopts={{0x1078, 0x29, 0x37, {0x3c, 0x20b, '\x00', [@enc_lim={0x4, 0x1, 0xa6}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0x8, 0x4, [0x6d, 0xfffffffffffffff1]}}, @calipso={0x7, 0x28, {0xe97e570904328ecf, 0x8, 0xcc, 0x7f, [0x9, 0x10001, 0x3, 0xfffffffffffffff8]}}, @ra={0x5, 0x2, 0x1000}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x7, 0x1000, "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"}]}}}, @dstopts={{0x150, 0x29, 0x37, {0x67, 0x26, '\x00', [@hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x7}, @hao={0xc9, 0x10, @private0}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x43}}, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0xa3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x48, 0x99, "9013f5d8b132a3c7410ee0f6c4ad0efed1c41b976f8bc3e9fe1d2ebf3179499ac221d87b378777e12092e3dc729c12dffef14c0a2000c73619dd87f148b43b2cd0b038bfb6609c20c19f5c0945ca009ea540f3d6d7cf7bb820c6fba780dad4d3cb1fa333ee63ec06b32ac78c2e6e9a3a5f175d41b6d4f77a8b463de8a76159344dbdb7cc48b0e3bba9a1931ad3b7563e34f1d1d176b447303b"}, @generic={0x6, 0x4c, "215cfb6aed4722cfd5864a82cacd59dd22c71887c77a329ca11a945a5cf45115292784cc8c28fd75b21f6d56d24eb6c1d716b924c3db836e4f698d107d1c9e86f6e335f6e050bb420f156c2c"}]}}}, @dstopts_2292={{0xf0, 0x29, 0x4, {0x0, 0x1a, '\x00', [@hao={0xc9, 0x10, @mcast2}, @hao={0xc9, 0x10, @loopback}, @generic={0x6, 0xb0, "b696324e453156a2d8cb65656509d2b809829e4a840fb8f342f22b8aaa374a9a57a9a8dd9a43d2763cafde726a14f6063f20b47c7bdb72e00f4f84b363718ddea310f9d3fa1958fe8d9a41034ceaad9da80c92a785391823b9dd40c0a12d1be8410e181d423cb5c3f7f98f26c5ceab869c69936383cba3b4813b8ace2451e6de74fc57bf82d2ec1ed6e461caddddaa7ff295edd6020e9efab5076e371e83d28d9b1ede50d7b61f4e5917494805802ebb"}]}}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x0, 0x3, '\x00', [@pad1, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @mcast2}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x504}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r2}}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x29, 0x6, '\x00', [@generic={0x4}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo, @hao={0xc9, 0x10, @local}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x13b0}}], 0x4, 0x20000004) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000000c0)=ANY=[], 0x78) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x6, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r7) write(r4, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r8, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x82, &(0x7f0000000340)={0x0, 0x6}, &(0x7f00000000c0)=0x8) 1.713583316s ago: executing program 1 (id=10026): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r0) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r1, 0x811, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (fail_nth: 3) 1.546133757s ago: executing program 0 (id=10027): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) epoll_create(0x8) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 1.477223942s ago: executing program 1 (id=10028): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x2081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xfffffff7}]}}}]}, 0x3c}}, 0x28000000) 1.200244242s ago: executing program 2 (id=10029): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000000c00000003"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.179469972s ago: executing program 0 (id=10030): socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x3, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x7f2e, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x18, 0x80000001, 0x0, 0x7, 0x20002, 0x0, 0x2, 0x0, 0x3ff}}) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x17, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x10000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x1}}}}]}, 0x38}}, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.112147892s ago: executing program 2 (id=10031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c895}, 0x20040004) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x138, 0xb, 0x148, 0x0, 0x148, 0x210, 0x230, 0x242, 0x210, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {0x7f}, {}, 0x73, 0x0, 0x70}, 0x0, 0xd8, 0x138, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0xee00, 0x3, 0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x4, 0x1, 0x0, 0x4], 0x9, 0x4}, {0x0, [0x1, 0x2, 0x0, 0x0, 0x4, 0x2], 0x1, 0x5}}}}, {{@uncond, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x4, 0xffffffff, 0x101, 'pptp\x00', 'syz1\x00', {0x333}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x4, &(0x7f0000000080)=0x3, 0x4) getsockopt$inet_tcp_int(r6, 0x6, 0x4, 0x0, &(0x7f0000000280)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800) socket$inet6(0xa, 0x3, 0x6) 825.143161ms ago: executing program 3 (id=10032): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) (fail_nth: 2) 783.565241ms ago: executing program 1 (id=10033): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r3, @ANYBLOB="8300040000000000400012800800010073697400340002800500090029000000060010000b00000008000c000000008006000d000900000008000300e0"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="000000000000000017010000040000000400000000000000000000000000000017010000030000000000"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0) close(r0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 675.995501ms ago: executing program 4 (id=10034): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x170bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000b00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000000c000400040018000100"/33], 0x38}}, 0x4040004) 294.799753ms ago: executing program 1 (id=10035): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000a1000000000055cae3cc50a011632eee3662323396362f8ad6397005a61fda38ef9ec67260bedf712a800eddd663ac879142ee4c4ef4c797aec4a5000000000000000000006eeba9afe3b3f300000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) close(0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e15}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32=0x0], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) 224.705463ms ago: executing program 3 (id=10036): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000500000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) 223.989697ms ago: executing program 2 (id=10037): r0 = socket(0x10, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, 0xffffffffffffffff, 0x39, 0x0, @void}, 0x10) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4008094) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000010c708fcb5036a2700000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 62.633645ms ago: executing program 4 (id=10038): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async, rerun: 64) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async, rerun: 64) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x4000, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ff0f0000850000002d000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) read$alg(r0, &(0x7f0000000300)=""/74, 0x4a) (async) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) read$alg(r3, &(0x7f0000000000)=""/106, 0x6a) 1.368876ms ago: executing program 3 (id=10039): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0xb, 0x4, 0x5, 0x1ff, 0xfb9d, 0x9, {0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x81, 0x2, 0x80000001, 0x4b, 0x9}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0x80000000}, {0x6, 0xba, 0x2, 0x10000}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x242001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001200)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec970000382c00fe8000000000000000000000000000aafcea010000000000000000000000000001"], 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0xa000000) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x60091) connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x23c, 0x30, 0xb, 0x5, 0x0, {}, [{0xcc, 0x1, [@m_ct={0xc8, 0x1, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0x0, 0x4, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x42}}]}, {0x4e, 0x6, "3fd51359812c6454b1636f0ddf8e135a9f5a6300609cac34cac073e2cddf504c6ea8a0ca7847e8157031cf4aa65b54fad471abcd95eb066d3d615bcfc0a74012d12026faaafa71fcfb5c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}, {0x15c, 0x1, [@m_nat={0x54, 0x19, 0x0, 0x0, {{0x8}, {0x4}, {0x2c, 0x6, "49ef1a24bacf95cd0454ff7a9e122b8faeedb2c9ca6ebcdd0489ea09becdda916c8e655f0430dba6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x104, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0xd8, 0x6, "33fd958df9e7ab192bbf02bbe3bf6e7b92410e4c8b5a2e8a8cc697efc0ce6341332529f62296c476870368ab828ad32b5e9a4b159847d631b6c4351baaf65655f9ba8673479ebbe201a7b82c834ba3e4fb7223e1dc5e2e37e2672f542cfd47c780e9f0b41be12ed703066275202b6bee5060f0a648e8b80ef6e662adc4d881b7deda671879241c5c221fefecf7658cf66ee9eb3b2459538832274adce4655d77ff27a48b7c4a6c10133d51dfbba9a7273464d9a46facfdb417a65de9fd778ed4a179ac2d81fc15fd2119ca85d77bf0ac737c40e0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x45e922a75a594233}, 0x40) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmsg$nl_generic(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x4c, 0x0, 0x0) recvmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/147, 0x93}], 0x1}, 0x40000000) 0s ago: executing program 2 (id=10040): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x80d0) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x4, {0x0, 0x0, 0x12, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x4, 0x9, 0xa654, 0xff}}}}]}, 0x48}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026c170000400000027000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2048050}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000008f0b000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002480)={&(0x7f00000001c0)="935325dd4a66543a3a03cb7577dbc9da506e1384a09d608b5f56712d9a4503b2b0e1f9568c426c03cdf09c93a2bcd04babe5b22b4886579624737fddac3f66cc01f91ba16276a4d83c0d0a64d3388c47030fdcf910be609ccfe0", &(0x7f0000000340)=""/21, &(0x7f0000000380)="cbbd8bff70dc98195349660e418d8e18c94885abe96cbce77e7c6ed5ab8788fc272bc8226ec2e220c6a61a84daaf204c48ea7bb2945b3b2aba07e7921f34f9a4b4f6f09ea9060b2b54ef97ba69d5236afa4b310d66613aa20467b508fd20350f8a4ad40e4312a2961ca6dda4dedd545ccb424dd6973210bd5d4af832f75c5a7940", &(0x7f00000024c0)="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", 0x7ee7, r4, 0x4}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r10 = epoll_create1(0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000a063f86725f276ab3e420efaf474e482a66287bb4b6590b023e12bd77e13f3d56a170d70331069e4a00f274413c08c01a0e4bab5b06da3710d14355bd197d9f6e6467edcb960436cee515d65da63b5dd12d7c3f2819e8bdb9eeb45558bf9820b9f7100335be75f3454892bda03276465ba6713491b5ecf0abd3a54c9cd3468aed204f0dd502c865360c133010773f07fdecae7ad15319d1301140b221c89855891075e0216b2269655e5c698b37cf5b0bbd2f573994647ff610ce8493244665fa14684091fb60b6006b3df4bc39733a07f", @ANYRES16=r12, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, 0x0) close(0xffffffffffffffff) r13 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r13, 0x0, 0x0) connect$pptp(r13, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) kernel console output (not intermixed with test programs): sendmsg+0x10/0x10 [ 1036.444434][ T1449] ? __pfx_ksys_write+0x10/0x10 [ 1036.444476][ T1449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.444501][ T1449] do_syscall_64+0x15f/0xf80 [ 1036.444521][ T1449] ? trace_irq_disable+0x3b/0x140 [ 1036.444556][ T1449] ? clear_bhb_loop+0x40/0x90 [ 1036.444583][ T1449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.444604][ T1449] RIP: 0033:0x7f5360b9cdd9 [ 1036.444642][ T1449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.444661][ T1449] RSP: 002b:00007f53619de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1036.444685][ T1449] RAX: ffffffffffffffda RBX: 00007f5360e16090 RCX: 00007f5360b9cdd9 [ 1036.444701][ T1449] RDX: 000000002008c010 RSI: 0000200000000200 RDI: 0000000000000003 [ 1036.444716][ T1449] RBP: 00007f53619de090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.444730][ T1449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.444743][ T1449] R13: 00007f5360e16128 R14: 00007f5360e16090 R15: 00007fffb8c2a128 [ 1036.444779][ T1449] [ 1036.701671][T32097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.710389][T32097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.129227][ T1470] hsr0 speed is unknown, defaulting to 1000 [ 1037.202976][ T138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.723474][ T1490] netlink: 'syz.3.8625': attribute type 1 has an invalid length. [ 1037.750553][ T1490] nbd: illegal input index 871591272 [ 1038.099126][ T1500] hsr0 speed is unknown, defaulting to 1000 [ 1038.193473][ T1509] FAULT_INJECTION: forcing a failure. [ 1038.193473][ T1509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.250770][ T1509] CPU: 0 UID: 0 PID: 1509 Comm: syz.4.8631 Not tainted syzkaller #0 PREEMPT(full) [ 1038.250800][ T1509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1038.250814][ T1509] Call Trace: [ 1038.250823][ T1509] [ 1038.250832][ T1509] dump_stack_lvl+0xe8/0x150 [ 1038.250863][ T1509] should_fail_ex+0x412/0x560 [ 1038.250899][ T1509] _copy_from_iter+0x1d3/0x1670 [ 1038.250926][ T1509] ? unwind_next_frame+0xa6/0x2550 [ 1038.250972][ T1509] ? __lock_acquire+0x6b5/0x2cf0 [ 1038.250998][ T1509] ? __pfx__copy_from_iter+0x10/0x10 [ 1038.251046][ T1509] tun_get_user+0x267/0x43e0 [ 1038.251079][ T1509] ? aa_file_perm+0x192/0x15e0 [ 1038.251123][ T1509] ? aa_file_perm+0x192/0x15e0 [ 1038.251160][ T1509] ? aa_file_perm+0x50e/0x15e0 [ 1038.251196][ T1509] ? __pfx_tun_get_user+0x10/0x10 [ 1038.251229][ T1509] ? __lock_acquire+0x6b5/0x2cf0 [ 1038.251257][ T1509] ? kstrtoull+0x12f/0x1d0 [ 1038.251292][ T1509] ? ref_tracker_alloc+0x35c/0x4c0 [ 1038.251327][ T1509] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1038.251360][ T1509] ? tun_get+0x1c/0x2f0 [ 1038.251387][ T1509] ? tun_get+0x1c/0x2f0 [ 1038.251422][ T1509] ? tun_get+0x1c/0x2f0 [ 1038.251448][ T1509] ? tun_get+0x1c/0x2f0 [ 1038.251480][ T1509] tun_chr_write_iter+0x113/0x200 [ 1038.251512][ T1509] vfs_write+0x61d/0xb90 [ 1038.251553][ T1509] ? __pfx_vfs_write+0x10/0x10 [ 1038.251596][ T1509] ? __fget_files+0x2a/0x420 [ 1038.251632][ T1509] ksys_write+0x150/0x270 [ 1038.251672][ T1509] ? __pfx_ksys_write+0x10/0x10 [ 1038.251714][ T1509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.251738][ T1509] do_syscall_64+0x15f/0xf80 [ 1038.251759][ T1509] ? trace_irq_disable+0x3b/0x140 [ 1038.251793][ T1509] ? clear_bhb_loop+0x40/0x90 [ 1038.251821][ T1509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.251844][ T1509] RIP: 0033:0x7fc84159cdd9 [ 1038.251866][ T1509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.251884][ T1509] RSP: 002b:00007fc84242f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1038.251908][ T1509] RAX: ffffffffffffffda RBX: 00007fc841815fa0 RCX: 00007fc84159cdd9 [ 1038.251924][ T1509] RDX: 000000000000002e RSI: 00002000000024c0 RDI: 0000000000000003 [ 1038.251947][ T1509] RBP: 00007fc84242f090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.251961][ T1509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.251974][ T1509] R13: 00007fc841816038 R14: 00007fc841815fa0 R15: 00007ffff6ef2638 [ 1038.252011][ T1509] [ 1038.532110][ T1512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8632'. [ 1038.798385][ T1521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8634'. [ 1038.810422][ T1521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8634'. [ 1038.821748][ T1518] hsr0 speed is unknown, defaulting to 1000 [ 1039.085925][ T1532] FAULT_INJECTION: forcing a failure. [ 1039.085925][ T1532] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.100759][ T1532] CPU: 1 UID: 0 PID: 1532 Comm: syz.1.8638 Not tainted syzkaller #0 PREEMPT(full) [ 1039.100789][ T1532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1039.100804][ T1532] Call Trace: [ 1039.100813][ T1532] [ 1039.100824][ T1532] dump_stack_lvl+0xe8/0x150 [ 1039.100856][ T1532] should_fail_ex+0x412/0x560 [ 1039.100896][ T1532] should_failslab+0xa8/0x100 [ 1039.100956][ T1532] __kmalloc_noprof+0xe8/0x760 [ 1039.100988][ T1532] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1039.101023][ T1532] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1039.101058][ T1532] genl_family_rcv_msg_doit+0xd9/0x330 [ 1039.101085][ T1532] ? __asan_memcpy+0x40/0x70 [ 1039.101115][ T1532] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1039.101158][ T1532] ? apparmor_capable+0x126/0x170 [ 1039.101208][ T1532] ? bpf_lsm_capable+0x9/0x20 [ 1039.101229][ T1532] ? security_capable+0x7e/0x2c0 [ 1039.101261][ T1532] genl_rcv_msg+0x61c/0x7a0 [ 1039.101293][ T1532] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1039.101318][ T1532] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1039.101343][ T1532] ? __pfx_ref_tracker_free+0x10/0x10 [ 1039.101384][ T1532] netlink_rcv_skb+0x232/0x4b0 [ 1039.101416][ T1532] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1039.101443][ T1532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1039.101492][ T1532] ? down_read+0x270/0x2e0 [ 1039.101512][ T1530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8637'. [ 1039.101514][ T1532] ? genl_rcv+0xd/0x40 [ 1039.101540][ T1532] genl_rcv+0x28/0x40 [ 1039.101587][ T1532] netlink_unicast+0x75c/0x8e0 [ 1039.101746][ T1532] netlink_sendmsg+0x813/0xb40 [ 1039.101871][ T1532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.101975][ T1532] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1039.102063][ T1532] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1039.102143][ T1532] ____sys_sendmsg+0x972/0x9f0 [ 1039.102249][ T1532] ? __might_fault+0xaf/0x130 [ 1039.102353][ T1532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1039.102470][ T1532] ? import_iovec+0x73/0xa0 [ 1039.102566][ T1532] ___sys_sendmsg+0x2a5/0x360 [ 1039.102653][ T1532] ? __lock_acquire+0x6b5/0x2cf0 [ 1039.102728][ T1532] ? __pfx____sys_sendmsg+0x10/0x10 [ 1039.102914][ T1532] ? __fget_files+0x2a/0x420 [ 1039.102982][ T1532] ? __fget_files+0x3a0/0x420 [ 1039.103106][ T1532] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1039.103226][ T1532] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1039.103348][ T1532] ? __pfx_ksys_write+0x10/0x10 [ 1039.103467][ T1532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.103526][ T1532] do_syscall_64+0x15f/0xf80 [ 1039.103579][ T1532] ? trace_irq_disable+0x3b/0x140 [ 1039.103671][ T1532] ? clear_bhb_loop+0x40/0x90 [ 1039.103740][ T1532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.103800][ T1532] RIP: 0033:0x7f01f9d9cdd9 [ 1039.103855][ T1532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.103895][ T1532] RSP: 002b:00007f01fabc5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.103954][ T1532] RAX: ffffffffffffffda RBX: 00007f01fa015fa0 RCX: 00007f01f9d9cdd9 [ 1039.104011][ T1532] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000010 [ 1039.104052][ T1532] RBP: 00007f01fabc5090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.104099][ T1532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.104139][ T1532] R13: 00007f01fa016038 R14: 00007f01fa015fa0 R15: 00007fff0586a688 [ 1039.104236][ T1532] [ 1039.499930][T32097] bridge_slave_1: left promiscuous mode [ 1039.508652][T32097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.527533][T32097] bridge_slave_0: left allmulticast mode [ 1039.540551][T32097] bridge_slave_0: left promiscuous mode [ 1039.548823][T32097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.609685][T32097] pimreg9: left allmulticast mode [ 1040.252831][T32097] bond7 (unregistering): (slave bridge4): Releasing backup interface [ 1040.330106][T32097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1040.348837][T32097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1040.370344][T32097] bond0 (unregistering): Released all slaves [ 1040.393166][T32097] bond1 (unregistering): Released all slaves [ 1040.422027][T32097] bond2 (unregistering): Released all slaves [ 1040.450383][T32097] bond3 (unregistering): Released all slaves [ 1040.484292][T32097] bond4 (unregistering): Released all slaves [ 1040.510773][T32097] bond5 (unregistering): Released all slaves [ 1040.552661][T32097] bond6 (unregistering): Released all slaves [ 1040.587374][T32097] bond7 (unregistering): (slave veth3): Releasing backup interface [ 1040.600704][T32097] bond7 (unregistering): Released all slaves [ 1040.627428][T32097] bond8 (unregistering): Released all slaves [ 1040.651416][T32097] bond9 (unregistering): Released all slaves [ 1040.683189][T32097] bond10 (unregistering): Released all slaves [ 1040.710359][T32097] bond11 (unregistering): Released all slaves [ 1040.832256][ T1526] hsr0 speed is unknown, defaulting to 1000 [ 1041.101519][T32097] tipc: Left network mode [ 1041.328479][ T1565] hsr0 speed is unknown, defaulting to 1000 [ 1041.560713][ T1570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8645'. [ 1041.820778][ T1567] hsr0 speed is unknown, defaulting to 1000 [ 1042.393436][ T1589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8651'. [ 1042.441291][ T1587] netlink: 'syz.2.8650': attribute type 1 has an invalid length. [ 1042.461672][ T1587] netlink: 248 bytes leftover after parsing attributes in process `syz.2.8650'. [ 1042.888739][ T1601] bond0: (slave vlan2): Opening slave failed [ 1042.967500][T32097] veth1_to_team: left promiscuous mode [ 1042.983936][T32097] dummy0: left promiscuous mode [ 1043.029087][T32097] hsr_slave_0: left promiscuous mode [ 1043.048831][T32097] hsr_slave_1: left promiscuous mode [ 1043.069053][T32097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1043.096192][T32097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1043.111815][T32097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1043.126047][T32097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.166326][T32097] veth1_macvtap: left promiscuous mode [ 1043.171989][T32097] veth0_macvtap: left promiscuous mode [ 1043.205547][ T1613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8657'. [ 1043.516566][T32097] team0 (unregistering): Port device team_slave_1 removed [ 1043.543502][T32097] team0 (unregistering): Port device team_slave_0 removed [ 1043.826328][ T1605] hsr0 speed is unknown, defaulting to 1000 [ 1043.911042][ T1612] hsr0 speed is unknown, defaulting to 1000 [ 1043.946463][ T1616] netlink: 'syz.4.8658': attribute type 1 has an invalid length. [ 1043.988389][ T1618] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 1044.201476][ T1628] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8660'. [ 1044.309016][ T1632] tls_set_device_offload_rx: netdev not found [ 1044.491690][T32097] IPVS: stop unused estimator thread 0... [ 1044.604294][ T1642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8665'. [ 1044.867243][ T1650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8668'. [ 1045.219272][ T1667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8672'. [ 1045.458110][ T1671] hsr0 speed is unknown, defaulting to 1000 [ 1045.528728][ T1674] netlink: 'syz.4.8676': attribute type 1 has an invalid length. [ 1045.545547][ T1674] netlink: 'syz.4.8676': attribute type 2 has an invalid length. [ 1045.563529][ T1674] netlink: 'syz.4.8676': attribute type 1 has an invalid length. [ 1045.584735][ T1674] netlink: 'syz.4.8676': attribute type 2 has an invalid length. [ 1046.140582][ T1708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8683'. [ 1046.229637][ T1689] hsr0 speed is unknown, defaulting to 1000 [ 1046.332830][ T1699] hsr0 speed is unknown, defaulting to 1000 [ 1047.027019][ T1721] hsr0 speed is unknown, defaulting to 1000 [ 1047.724128][ T1745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8693'. [ 1047.771077][ T1745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8693'. [ 1049.126800][ T1758] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8695'. [ 1050.840163][ T1741] hsr0 speed is unknown, defaulting to 1000 [ 1051.015853][ T1763] netlink: 268 bytes leftover after parsing attributes in process `syz.4.8697'. [ 1051.253696][ T1775] netlink: zone id is out of range [ 1051.268015][ T1775] netlink: zone id is out of range [ 1051.284242][ T1775] netlink: zone id is out of range [ 1051.295010][ T1775] netlink: zone id is out of range [ 1051.307684][ T1775] netlink: zone id is out of range [ 1051.323374][ T1775] netlink: zone id is out of range [ 1051.338972][ T1779] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1051.352828][ T1775] netlink: zone id is out of range [ 1051.369562][ T1775] netlink: zone id is out of range [ 1051.393385][ T1775] netlink: zone id is out of range [ 1051.430457][ T1775] netlink: zone id is out of range [ 1051.558305][ T1778] syzkaller0: entered promiscuous mode [ 1051.572031][ T1778] syzkaller0: entered allmulticast mode [ 1055.331056][ T1859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8727'. [ 1055.749102][ T1881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8732'. [ 1055.776214][ T1881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8732'. [ 1055.812974][ T1883] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8732'. [ 1055.836134][ T1883] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8732'. [ 1055.847625][ T1885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8736'. [ 1055.860996][ T1883] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8732'. [ 1055.890599][ T1890] netlink: 272 bytes leftover after parsing attributes in process `syz.3.8737'. [ 1056.623565][ T1932] netlink: 272 bytes leftover after parsing attributes in process `syz.1.8751'. [ 1056.636542][ T1928] hsr0 speed is unknown, defaulting to 1000 [ 1057.259901][ T1959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8761'. [ 1057.432320][ T1964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8763'. [ 1057.544237][ T1973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8767'. [ 1057.783560][ T1987] hsr0 speed is unknown, defaulting to 1000 [ 1058.085493][ T1998] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8773'. [ 1058.441113][ T2013] FAULT_INJECTION: forcing a failure. [ 1058.441113][ T2013] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.485935][ T2013] CPU: 0 UID: 0 PID: 2013 Comm: syz.3.8777 Not tainted syzkaller #0 PREEMPT(full) [ 1058.485966][ T2013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1058.485985][ T2013] Call Trace: [ 1058.485995][ T2013] [ 1058.486005][ T2013] dump_stack_lvl+0xe8/0x150 [ 1058.486036][ T2013] should_fail_ex+0x412/0x560 [ 1058.486072][ T2013] should_failslab+0xa8/0x100 [ 1058.486128][ T2013] __kmalloc_noprof+0xe8/0x760 [ 1058.486166][ T2013] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1058.486215][ T2013] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1058.486250][ T2013] ? tomoyo_domain+0xd7/0x130 [ 1058.486288][ T2013] ? tomoyo_path_number_perm+0x219/0x630 [ 1058.486312][ T2013] tomoyo_path_number_perm+0x246/0x630 [ 1058.486338][ T2013] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1058.486361][ T2013] ? __lock_acquire+0x6b5/0x2cf0 [ 1058.486395][ T2013] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1058.486433][ T2013] ? __fget_files+0x2a/0x420 [ 1058.486460][ T2013] ? __fget_files+0x2a/0x420 [ 1058.486484][ T2013] ? __fget_files+0x3a0/0x420 [ 1058.486508][ T2013] ? __fget_files+0x2a/0x420 [ 1058.486539][ T2013] security_file_ioctl+0xc3/0x2a0 [ 1058.486565][ T2013] __se_sys_ioctl+0x47/0x170 [ 1058.486599][ T2013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.486623][ T2013] do_syscall_64+0x15f/0xf80 [ 1058.486643][ T2013] ? trace_irq_disable+0x3b/0x140 [ 1058.486676][ T2013] ? clear_bhb_loop+0x40/0x90 [ 1058.486704][ T2013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.486727][ T2013] RIP: 0033:0x7f5360b9cdd9 [ 1058.486748][ T2013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.486768][ T2013] RSP: 002b:00007f53619ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1058.486791][ T2013] RAX: ffffffffffffffda RBX: 00007f5360e15fa0 RCX: 00007f5360b9cdd9 [ 1058.486808][ T2013] RDX: 0000200000000340 RSI: 00000000000089fe RDI: 0000000000000003 [ 1058.486823][ T2013] RBP: 00007f53619ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.486837][ T2013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.486849][ T2013] R13: 00007f5360e16038 R14: 00007f5360e15fa0 R15: 00007fffb8c2a128 [ 1058.486886][ T2013] [ 1058.486936][ T2013] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1058.908212][ T2024] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1058.991843][ T2020] tipc: Enabled bearer , priority 0 [ 1059.049597][ T2037] netlink: 272 bytes leftover after parsing attributes in process `syz.4.8783'. [ 1059.294350][ T2001] tipc: Disabling bearer [ 1060.000545][ T2062] FAULT_INJECTION: forcing a failure. [ 1060.000545][ T2062] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.071402][ T2063] hsr0 speed is unknown, defaulting to 1000 [ 1060.084037][ T2062] CPU: 0 UID: 0 PID: 2062 Comm: syz.4.8794 Not tainted syzkaller #0 PREEMPT(full) [ 1060.084069][ T2062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1060.084083][ T2062] Call Trace: [ 1060.084092][ T2062] [ 1060.084101][ T2062] dump_stack_lvl+0xe8/0x150 [ 1060.084134][ T2062] should_fail_ex+0x412/0x560 [ 1060.084170][ T2062] should_failslab+0xa8/0x100 [ 1060.084206][ T2062] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1060.084245][ T2062] ? __alloc_skb+0x186/0x7d0 [ 1060.084275][ T2062] ? __alloc_skb+0x1d0/0x7d0 [ 1060.084302][ T2062] ? __local_bh_enable_ip+0xd0/0x130 [ 1060.084331][ T2062] __alloc_skb+0x1d0/0x7d0 [ 1060.084367][ T2062] netlink_sendmsg+0x5d4/0xb40 [ 1060.084412][ T2062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1060.084450][ T2062] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1060.084482][ T2062] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1060.084516][ T2062] ____sys_sendmsg+0x972/0x9f0 [ 1060.084550][ T2062] ? __might_fault+0xaf/0x130 [ 1060.084588][ T2062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1060.084631][ T2062] ? import_iovec+0x73/0xa0 [ 1060.084667][ T2062] ___sys_sendmsg+0x2a5/0x360 [ 1060.084705][ T2062] ? __lock_acquire+0x6b5/0x2cf0 [ 1060.084734][ T2062] ? __pfx____sys_sendmsg+0x10/0x10 [ 1060.084805][ T2062] ? __fget_files+0x2a/0x420 [ 1060.084832][ T2062] ? __fget_files+0x3a0/0x420 [ 1060.084871][ T2062] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1060.084908][ T2062] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1060.084953][ T2062] ? __pfx_ksys_write+0x10/0x10 [ 1060.084994][ T2062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.085019][ T2062] do_syscall_64+0x15f/0xf80 [ 1060.085040][ T2062] ? trace_irq_disable+0x3b/0x140 [ 1060.085074][ T2062] ? clear_bhb_loop+0x40/0x90 [ 1060.085102][ T2062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.085124][ T2062] RIP: 0033:0x7fc84159cdd9 [ 1060.085146][ T2062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.085166][ T2062] RSP: 002b:00007fc84242f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1060.085191][ T2062] RAX: ffffffffffffffda RBX: 00007fc841815fa0 RCX: 00007fc84159cdd9 [ 1060.085208][ T2062] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1060.085222][ T2062] RBP: 00007fc84242f090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.085243][ T2062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.085257][ T2062] R13: 00007fc841816038 R14: 00007fc841815fa0 R15: 00007ffff6ef2638 [ 1060.085294][ T2062] [ 1060.572331][ T2089] sctp: [Deprecated]: syz.4.8799 (pid 2089) Use of int in maxseg socket option. [ 1060.572331][ T2089] Use struct sctp_assoc_value instead [ 1060.737971][ T2098] x_tables: duplicate underflow at hook 2 [ 1060.751544][ T2100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8800'. [ 1060.767992][ T2090] x_tables: duplicate underflow at hook 2 [ 1060.965891][ T2099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8801'. [ 1061.474201][ T2114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8804'. [ 1061.617789][ T2129] sock: sock_timestamping_bind_phc: sock not bind to device [ 1061.627430][ T2112] netlink: 216 bytes leftover after parsing attributes in process `syz.4.8804'. [ 1061.644375][ T2112] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8804'. [ 1061.661149][ T2112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8804'. [ 1061.692869][ T2130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8806'. [ 1061.710699][ T2130] netlink: 'syz.0.8806': attribute type 21 has an invalid length. [ 1061.722728][ T2130] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8806'. [ 1061.872031][ T2112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.898455][ T2112] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.926616][ T2112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.050406][ T2112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.084554][ T2112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.125535][ T2112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1062.144694][ T2112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1062.166951][ T2112] veth1_vlan: left promiscuous mode [ 1062.173493][ T2112] veth0_vlan: left promiscuous mode [ 1062.180353][ T2112] veth0_vlan: entered promiscuous mode [ 1062.189372][ T2112] veth1_vlan: entered promiscuous mode [ 1062.214200][ T2112] veth1_macvtap: left promiscuous mode [ 1062.227957][ T2112] veth0_macvtap: left promiscuous mode [ 1062.250342][ T2112] veth0_macvtap: entered promiscuous mode [ 1062.266440][ T2112] veth1_macvtap: entered promiscuous mode [ 1062.292312][ T2112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1062.417243][ T2112] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1062.592999][ T2112] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1062.610305][ T2112] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1062.635608][ T5630] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1062.636172][ T2112] net_ratelimit: 335 callbacks suppressed [ 1062.636218][ T2112] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1062.713979][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.721269][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.799439][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.806728][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.996351][T32097] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.017999][T32097] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.038218][ T2158] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8813'. [ 1063.071575][T32097] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1063.087571][T32097] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.130674][T32097] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.149983][T32097] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1063.262192][T32097] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.292996][T32097] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.306936][T32097] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1063.334545][T32097] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1063.361065][T32097] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.381675][T32097] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1063.472190][ T2167] xt_hashlimit: size too large, truncated to 1048576 [ 1064.160538][ T2192] syzkaller0: entered promiscuous mode [ 1064.181995][ T2192] syzkaller0: entered allmulticast mode [ 1064.540983][ T2206] FAULT_INJECTION: forcing a failure. [ 1064.540983][ T2206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.566918][ T2208] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8826'. [ 1064.580724][ T2206] CPU: 1 UID: 0 PID: 2206 Comm: syz.4.8828 Not tainted syzkaller #0 PREEMPT(full) [ 1064.580756][ T2206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1064.580770][ T2206] Call Trace: [ 1064.580780][ T2206] [ 1064.580789][ T2206] dump_stack_lvl+0xe8/0x150 [ 1064.580822][ T2206] should_fail_ex+0x412/0x560 [ 1064.580857][ T2206] _copy_to_user+0x31/0xb0 [ 1064.580894][ T2206] simple_read_from_buffer+0xe1/0x170 [ 1064.580927][ T2206] proc_fail_nth_read+0x1bb/0x230 [ 1064.580961][ T2206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1064.580995][ T2206] ? rw_verify_area+0x2a6/0x4d0 [ 1064.581025][ T2206] ? dev_ioctl+0x83c/0x1150 [ 1064.581052][ T2206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1064.581083][ T2206] vfs_read+0x20c/0xa70 [ 1064.581120][ T2206] ? __pfx___mutex_lock+0x10/0x10 [ 1064.581144][ T2206] ? __pfx_vfs_read+0x10/0x10 [ 1064.581177][ T2206] ? __fget_files+0x2a/0x420 [ 1064.581210][ T2206] ? __fget_files+0x3a0/0x420 [ 1064.581237][ T2206] ? __fget_files+0x2a/0x420 [ 1064.581275][ T2206] ksys_read+0x150/0x270 [ 1064.581309][ T2206] ? __pfx_ksys_read+0x10/0x10 [ 1064.581338][ T2206] ? __pfx_sock_ioctl+0x10/0x10 [ 1064.581370][ T2206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.581396][ T2206] do_syscall_64+0x15f/0xf80 [ 1064.581415][ T2206] ? trace_irq_disable+0x3b/0x140 [ 1064.581448][ T2206] ? clear_bhb_loop+0x40/0x90 [ 1064.581477][ T2206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.581500][ T2206] RIP: 0033:0x7fc84155d60e [ 1064.581521][ T2206] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1064.581539][ T2206] RSP: 002b:00007fc84242efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1064.581570][ T2206] RAX: ffffffffffffffda RBX: 00007fc84242f6c0 RCX: 00007fc84155d60e [ 1064.581587][ T2206] RDX: 000000000000000f RSI: 00007fc84242f0a0 RDI: 0000000000000004 [ 1064.581601][ T2206] RBP: 00007fc84242f090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.581615][ T2206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.581628][ T2206] R13: 00007fc841816038 R14: 00007fc841815fa0 R15: 00007ffff6ef2638 [ 1064.581664][ T2206] [ 1065.084718][ T2217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8829'. [ 1065.334360][ T2230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8834'. [ 1065.474708][ T2236] netlink: 272 bytes leftover after parsing attributes in process `syz.4.8837'. [ 1066.221633][ T2274] netlink: 'syz.3.8847': attribute type 1 has an invalid length. [ 1066.384127][ T2274] bond6: entered promiscuous mode [ 1066.391169][ T2274] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1066.432492][ T2282] bond6: entered allmulticast mode [ 1066.571302][ T2274] bond6: (slave bridge4): making interface the new active one [ 1066.607592][ T2274] bridge4: entered promiscuous mode [ 1066.613576][ T2274] bridge4: entered allmulticast mode [ 1066.622591][ T2274] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 1066.898705][ T2300] __nla_validate_parse: 4 callbacks suppressed [ 1066.898726][ T2300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8857'. [ 1067.490766][ T2333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8867'. [ 1067.667368][ T2341] hsr0 speed is unknown, defaulting to 1000 [ 1067.678646][ T2344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8872'. [ 1067.702836][ T2347] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8873'. [ 1068.491843][ T2382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8885'. [ 1068.554179][ T2387] syzkaller0: entered promiscuous mode [ 1068.621242][ T2387] syzkaller0: entered allmulticast mode [ 1069.463156][ T2427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8895'. [ 1069.520897][ T2435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8897'. [ 1069.919454][ T2454] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8902'. [ 1071.220893][ T2490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8911'. [ 1071.406929][ T2492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8912'. [ 1071.827104][ T2515] hsr0 speed is unknown, defaulting to 1000 [ 1072.500702][ T2541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8920'. [ 1072.702162][ T2550] netlink: 'syz.3.8923': attribute type 1 has an invalid length. [ 1073.266768][ T2558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8926'. [ 1073.298508][ T2558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8926'. [ 1073.318033][ T2558] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8926'. [ 1073.410524][ T2565] netlink: 272 bytes leftover after parsing attributes in process `syz.0.8927'. [ 1073.453995][ T2547] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1073.624543][ T2567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8928'. [ 1073.885155][ T2578] hsr0 speed is unknown, defaulting to 1000 [ 1073.900605][ T2583] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8930'. [ 1074.279443][ T2585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.463562][ T2585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.505799][ T2585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.916083][ T2590] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1074.978959][T16334] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.021838][T16334] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.151796][T16334] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.191907][T16334] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.227498][T16334] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.252005][T16334] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.374272][T16334] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1075.408175][T16334] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1075.743502][ T2642] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8941'. [ 1076.073371][ T2663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8946'. [ 1076.803856][ T2675] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8948'. [ 1077.919151][ T2710] __nla_validate_parse: 1 callbacks suppressed [ 1077.919173][ T2710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8959'. [ 1078.439252][ T2729] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8964'. [ 1078.726395][T32097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.750495][T32097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1079.099243][ T2754] tipc: Failed to remove unknown binding: 66,1,1/0:1056129642/1056129644 [ 1079.192277][ T2765] tipc: Failed to remove unknown binding: 66,1,1/0:1056129642/1056129644 [ 1079.301035][ T2765] hsr0 speed is unknown, defaulting to 1000 [ 1079.571747][ T2775] hsr0 speed is unknown, defaulting to 1000 [ 1079.661640][ T2780] hsr0 speed is unknown, defaulting to 1000 [ 1080.636832][ T2812] netlink: 'syz.3.8984': attribute type 6 has an invalid length. [ 1080.902967][ T2817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8985'. [ 1080.929070][ T2817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8985'. [ 1081.402640][ T2848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8992'. [ 1081.542856][ T2862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8995'. [ 1081.983139][ T2895] ip6t_REJECT: ECHOREPLY is not supported [ 1082.378990][ T2913] hsr0 speed is unknown, defaulting to 1000 [ 1082.452299][ T2923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9008'. [ 1082.620132][ T2937] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.9009'. [ 1082.678984][ T2935] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9007'. [ 1082.871791][ T2940] netlink: 27452 bytes leftover after parsing attributes in process `syz.4.9010'. [ 1085.223617][ T2914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1085.237189][ T2913] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.9007'. [ 1085.727788][ T2960] netlink: 272 bytes leftover after parsing attributes in process `syz.3.9017'. [ 1086.061022][ T2976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9020'. [ 1086.180059][ T2978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9022'. [ 1086.260622][ T2961] tipc: Started in network mode [ 1086.287940][ T2961] tipc: Node identity e2b4e5aff11b, cluster identity 4711 [ 1086.316618][ T2961] tipc: Enabled bearer , priority 0 [ 1086.326363][ T2966] syzkaller0: entered promiscuous mode [ 1086.343007][ T2966] syzkaller0: entered allmulticast mode [ 1086.369076][ T2954] tipc: Resetting bearer [ 1086.413697][ T2954] tipc: Disabling bearer [ 1086.443314][ T2982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9024'. [ 1087.473553][ T3012] bond10: option resend_igmp: invalid value (2878) [ 1087.481007][ T3012] bond10: option resend_igmp: allowed values 0 - 255 [ 1087.495779][ T3012] bond10 (unregistering): Released all slaves [ 1087.731735][ T3021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9036'. [ 1088.124463][T29117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1088.140802][T29117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1088.151279][T29117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1088.170474][T29117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1088.180115][T29117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1088.265452][ T3037] bond10: option ad_select: invalid value (34) [ 1088.287622][ T3037] bond10 (unregistering): Released all slaves [ 1088.960666][ T3060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9048'. [ 1089.041875][ T3032] hsr0 speed is unknown, defaulting to 1000 [ 1089.381787][ T3074] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.9051'. [ 1089.619608][ T3079] hsr0 speed is unknown, defaulting to 1000 [ 1089.845347][ T3090] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1089.908091][ T3032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.931822][ T3032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.941605][ T3032] bridge_slave_0: entered allmulticast mode [ 1089.959696][ T3032] bridge_slave_0: entered promiscuous mode [ 1090.004404][ T3032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.019242][ T3032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.032106][ T3085] netlink: 'syz.3.9053': attribute type 3 has an invalid length. [ 1090.045020][ T3032] bridge_slave_1: entered allmulticast mode [ 1090.055105][ T3085] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9053'. [ 1090.067301][ T3032] bridge_slave_1: entered promiscuous mode [ 1090.112139][ T3032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.125885][ T3032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1090.177316][ T3032] team0: Port device team_slave_0 added [ 1090.187371][ T3032] team0: Port device team_slave_1 added [ 1090.234717][T29117] Bluetooth: hci3: command tx timeout [ 1090.404174][ T3032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.453227][ T3032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.525498][ T3032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.580135][ T3032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.614028][ T3032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.697933][ T3032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.891206][ T3032] hsr_slave_0: entered promiscuous mode [ 1090.917508][ T3032] hsr_slave_1: entered promiscuous mode [ 1090.924406][ T3032] debugfs: 'hsr0' already exists in 'hsr' [ 1090.964381][ T3032] Cannot create hsr debugfs directory [ 1091.829511][ T3141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9068'. [ 1092.315092][T29117] Bluetooth: hci3: command tx timeout [ 1092.411975][ T3151] syzkaller0: entered promiscuous mode [ 1092.419286][ T3151] syzkaller0: entered allmulticast mode [ 1093.415904][ T3210] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9086'. [ 1094.410474][T29117] Bluetooth: hci3: command tx timeout [ 1095.681937][ T3190] hsr0 speed is unknown, defaulting to 1000 [ 1096.004460][ T3238] netlink: 'syz.4.9091': attribute type 9 has an invalid length. [ 1096.196156][ T3032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1096.212672][ T3032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1096.221971][ T3032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1096.248827][ T3032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1096.262933][ T3032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1096.281046][ T3032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1096.296111][ T3032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1096.327687][ T3032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1096.476198][T29117] Bluetooth: hci3: command tx timeout [ 1096.528945][ T3032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.552875][ T3261] netlink: 'syz.0.9096': attribute type 10 has an invalid length. [ 1096.672950][ T3032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.692411][T19881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.699675][T19881] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.741132][T19881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.748402][T19881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.807353][ T3032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1097.927672][ T3032] veth0_vlan: entered promiscuous mode [ 1097.959927][ T3032] veth1_vlan: entered promiscuous mode [ 1098.025735][ T3329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9113'. [ 1098.054374][ T3329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9113'. [ 1098.089433][ T3032] veth0_macvtap: entered promiscuous mode [ 1098.108236][ T3032] veth1_macvtap: entered promiscuous mode [ 1098.142594][ T3032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.192820][ T3032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.230155][T19879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.267105][T19879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.291537][T19879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.333350][T19879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.499409][ T3345] netlink: 272 bytes leftover after parsing attributes in process `syz.3.9119'. [ 1098.590920][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.617989][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.735075][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.758940][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.580297][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1099.593264][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1099.607617][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1099.628651][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1099.636882][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1099.739398][ T3392] netlink: 'syz.3.9132': attribute type 21 has an invalid length. [ 1099.761126][ T3392] netlink: 'syz.3.9132': attribute type 6 has an invalid length. [ 1099.771114][ T3392] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9132'. [ 1100.666800][ T3389] hsr0 speed is unknown, defaulting to 1000 [ 1100.743563][ T3439] bond0: entered promiscuous mode [ 1100.757222][ T3439] batadv0: entered promiscuous mode [ 1100.763856][ T3439] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1100.784692][ T3439] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1100.813593][ T3439] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1100.849553][ T3447] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1100.870542][ T3447] netlink: 'syz.1.9144': attribute type 3 has an invalid length. [ 1100.888555][ T3447] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9144'. [ 1100.960815][ T3439] bond0: left promiscuous mode [ 1100.977845][ T3439] batadv0: left promiscuous mode [ 1101.053912][ T3450] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1101.073502][ T3439] bond0: entered promiscuous mode [ 1101.085363][ T3439] batadv0: entered promiscuous mode [ 1101.092295][ T3439] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1101.102474][ T3439] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1101.118431][ T3439] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1101.127540][ T3439] bond0: left promiscuous mode [ 1101.137010][ T3439] batadv0: left promiscuous mode [ 1101.220800][ T3439] bond0: entered promiscuous mode [ 1101.227400][ T3439] batadv0: entered promiscuous mode [ 1101.233879][ T3439] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1101.244176][ T3439] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1101.257523][ T3439] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1101.266738][ T3439] bond0: left promiscuous mode [ 1101.272646][ T3439] batadv0: left promiscuous mode [ 1101.289873][ T3448] hsr0 speed is unknown, defaulting to 1000 [ 1101.362074][ T3439] bond0: entered promiscuous mode [ 1101.375290][ T3439] batadv0: entered promiscuous mode [ 1101.381681][ T3439] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1101.408160][ T3439] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1101.428802][ T3439] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1101.445032][ T3439] bond0: left promiscuous mode [ 1101.454388][ T3439] batadv0: left promiscuous mode [ 1101.643866][ T3465] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1101.760056][T29117] Bluetooth: hci5: command tx timeout [ 1101.854092][ T3472] hsr0 speed is unknown, defaulting to 1000 [ 1102.100862][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9154'. [ 1102.107281][ T3389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.126808][ T3389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.141713][ T3389] bridge_slave_0: entered allmulticast mode [ 1102.149953][ T3389] bridge_slave_0: entered promiscuous mode [ 1102.161400][ T3485] sctp: [Deprecated]: syz.3.9154 (pid 3485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1102.161400][ T3485] Use struct sctp_sack_info instead [ 1102.196665][ T3485] netlink: 'syz.3.9154': attribute type 1 has an invalid length. [ 1102.211711][ T3485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9154'. [ 1102.264045][ T3389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.287428][ T3389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.322442][ T3389] bridge_slave_1: entered allmulticast mode [ 1102.358971][ T3389] bridge_slave_1: entered promiscuous mode [ 1102.521632][ T3389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.549570][ T3389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.720471][ T3389] team0: Port device team_slave_0 added [ 1102.759666][ T3389] team0: Port device team_slave_1 added [ 1102.809551][ T3509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1102.894411][ T3389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.911077][ T3389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.952769][ T3389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.001818][ T3389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.014979][ T3389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1103.043953][ T3516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9162'. [ 1103.071802][ T3389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.086341][ T3507] hsr0 speed is unknown, defaulting to 1000 [ 1103.101443][ T3518] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2306247061/2306247062 [ 1103.125806][ T3518] tipc: Failed to remove unknown binding: 66,0,0/2886997007:2306247061/2306247062 [ 1103.241864][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9167'. [ 1103.339038][ T3389] hsr_slave_0: entered promiscuous mode [ 1103.348301][ T3389] hsr_slave_1: entered promiscuous mode [ 1103.367868][ T3389] debugfs: 'hsr0' already exists in 'hsr' [ 1103.385060][ T3389] Cannot create hsr debugfs directory [ 1103.835243][T29117] Bluetooth: hci5: command tx timeout [ 1103.895202][ T3537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9171'. [ 1103.925729][ T3537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9171'. [ 1104.045555][ T3543] netlink: 'syz.1.9171': attribute type 1 has an invalid length. [ 1104.067011][ T3543] netlink: 260 bytes leftover after parsing attributes in process `syz.1.9171'. [ 1104.278355][ T3549] IPv6: sit3: Disabled Multicast RS [ 1104.389392][ T3389] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.438413][ T3389] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.470070][ T3389] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1104.611009][ T3555] vlan2: entered promiscuous mode [ 1104.621458][ T3555] bridge0: entered promiscuous mode [ 1104.742841][ T3389] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1104.753320][ T3389] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.773157][ T3389] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1104.891346][ T3574] xt_TCPMSS: Only works on TCP SYN packets [ 1104.987429][ T3576] netlink: 'syz.1.9183': attribute type 1 has an invalid length. [ 1105.054312][ T3576] bond10: entered promiscuous mode [ 1105.062615][ T3576] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1105.085745][ T3389] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.097299][ T3389] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.107751][ T3389] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1105.131888][ T3578] netlink: 'syz.2.9184': attribute type 4 has an invalid length. [ 1105.198278][ T3580] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1105.213860][ T3580] bond10: (slave bond11): making interface the new active one [ 1105.226082][ T3580] bond11: entered promiscuous mode [ 1105.234769][ T3580] bond10: (slave bond11): Enslaving as an active interface with an up link [ 1105.386754][ T3389] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1105.412526][ T3389] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.426622][ T3389] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1105.462435][ T3581] netlink: 'syz.2.9184': attribute type 4 has an invalid length. [ 1105.500737][ T3591] hsr0 speed is unknown, defaulting to 1000 [ 1105.924247][ T3604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9190'. [ 1105.926571][T29117] Bluetooth: hci5: command tx timeout [ 1105.940154][ T3604] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1106.138523][ T3606] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1106.160434][ T3606] bond10 (unregistering): Released all slaves [ 1106.219371][ T3609] netlink: 'syz.2.9191': attribute type 1 has an invalid length. [ 1106.258836][ T3389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1106.258850][ T3609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9191'. [ 1106.281684][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1106.384690][ T3389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1106.402576][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1106.415997][ T3389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1106.428141][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1106.459217][ T3389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1106.527821][ T3389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1106.657011][ T3619] syzkaller0: entered promiscuous mode [ 1106.662664][ T3619] syzkaller0: entered allmulticast mode [ 1106.704327][ T3620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9194'. [ 1107.009463][ T3637] hsr0 speed is unknown, defaulting to 1000 [ 1107.101111][ T3389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.237119][ T3389] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.254156][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.261373][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.280183][ T3641] syzkaller0: entered promiscuous mode [ 1107.286924][ T3641] syzkaller0: entered allmulticast mode [ 1107.300466][ T3641] syz_tun: entered allmulticast mode [ 1107.309270][T19881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.316511][T19881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.761552][ T3653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9205'. [ 1107.998663][T29117] Bluetooth: hci5: command tx timeout [ 1108.533719][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9215'. [ 1108.761340][ T3702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1109.128264][ T3389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.176395][ T3715] hsr0 speed is unknown, defaulting to 1000 [ 1109.191472][ T3722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9221'. [ 1109.258221][ T3726] netlink: 'syz.1.9221': attribute type 10 has an invalid length. [ 1109.351985][ T3731] netlink: 'syz.1.9221': attribute type 10 has an invalid length. [ 1109.793089][ T3747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9227'. [ 1110.218518][ T3389] veth0_vlan: entered promiscuous mode [ 1110.229659][ T3762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9231'. [ 1110.268874][ T3389] veth1_vlan: entered promiscuous mode [ 1110.369840][ T3389] veth0_macvtap: entered promiscuous mode [ 1110.427613][ T3389] veth1_macvtap: entered promiscuous mode [ 1110.502179][ T3389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.557240][ T3389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.599790][T32097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.634431][T32097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.641412][ T3772] netlink: 'syz.2.9235': attribute type 1 has an invalid length. [ 1110.661834][T32097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.688103][T32097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.856871][ T3772] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1110.910961][ T3782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9237'. [ 1111.373994][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.396517][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.461393][ T3792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9239'. [ 1111.623734][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.642545][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.844928][ T3802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9242'. [ 1112.142003][ T3811] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9245'. [ 1112.550803][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1112.575731][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1112.592376][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1112.601193][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1112.609305][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1112.883637][ T3834] hsr0 speed is unknown, defaulting to 1000 [ 1113.433523][ T3841] hsr0 speed is unknown, defaulting to 1000 [ 1113.479475][ T3856] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.9256'. [ 1113.519575][ T3856] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1113.714774][ T5757] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 0/1 [ 1113.734192][ T5757] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 1113.840228][ T3825] hsr0 speed is unknown, defaulting to 1000 [ 1113.848757][ T3862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9257'. [ 1113.911044][ T3862] hsr_slave_0: left promiscuous mode [ 1113.934391][ T3862] hsr_slave_1: left promiscuous mode [ 1114.398573][ T3880] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.9261'. [ 1114.443605][ T3874] syzkaller1: entered promiscuous mode [ 1114.450701][ T3874] syzkaller1: entered allmulticast mode [ 1114.647710][T29117] Bluetooth: hci0: command tx timeout [ 1114.883548][ T3825] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.891391][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.898803][ T3825] bridge_slave_0: entered allmulticast mode [ 1114.906960][ T3825] bridge_slave_0: entered promiscuous mode [ 1114.994820][ T3893] bond2: entered allmulticast mode [ 1115.011812][ T3825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.022814][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.030546][ T3825] bridge_slave_1: entered allmulticast mode [ 1115.037589][ T3898] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9266'. [ 1115.052231][ T3825] bridge_slave_1: entered promiscuous mode [ 1115.107498][ T3901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9267'. [ 1115.198017][ T3825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.235173][ T3825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.335999][ T3825] team0: Port device team_slave_0 added [ 1115.358173][ T3825] team0: Port device team_slave_1 added [ 1115.471963][ T3916] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9271'. [ 1115.515682][ T3825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.525435][ T3825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.558435][ T3825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.586878][ T3825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.609184][ T3825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1115.670539][ T3825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.813630][ T3825] hsr_slave_0: entered promiscuous mode [ 1115.837354][ T3825] hsr_slave_1: entered promiscuous mode [ 1115.844146][ T3825] debugfs: 'hsr0' already exists in 'hsr' [ 1115.850715][ T3825] Cannot create hsr debugfs directory [ 1116.179148][ T3943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9277'. [ 1116.230965][ T3939] xt_CT: No such helper "snmp" [ 1116.510159][ T3955] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9282'. [ 1116.550080][ T3957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9281'. [ 1116.725403][T29117] Bluetooth: hci0: command tx timeout [ 1117.057071][ T3980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9289'. [ 1117.176014][ T3968] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 1117.486021][ T3965] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 1118.170099][ T3825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1118.207864][ T3825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1118.231861][ T3825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1118.272544][ T3825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1118.309115][ T3825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1118.362866][ T3825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1118.393700][ T3825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1118.403014][ T4021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9295'. [ 1118.438117][ T4021] netlink: 'syz.2.9295': attribute type 8 has an invalid length. [ 1118.471338][ T3825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1118.520969][ T4021] geneve2: entered promiscuous mode [ 1118.533255][ T4021] geneve2: entered allmulticast mode [ 1118.757255][ T4040] tipc: Started in network mode [ 1118.774046][ T4040] tipc: Node identity 565dd8343228, cluster identity 4711 [ 1118.794124][ T4040] tipc: Enabled bearer , priority 0 [ 1118.804074][T29117] Bluetooth: hci0: command tx timeout [ 1118.832357][ T4042] syzkaller0: entered promiscuous mode [ 1118.862743][ T4042] syzkaller0: entered allmulticast mode [ 1118.940344][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9299'. [ 1119.004652][ T4042] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9298'. [ 1119.058327][ T4040] tipc: Resetting bearer [ 1119.087612][ T4039] tipc: Resetting bearer [ 1119.153705][ T4039] tipc: Disabling bearer [ 1119.178431][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9301'. [ 1119.283486][ T3825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1119.376098][ T3825] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.422622][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.430015][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.436243][ T4067] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1119.526967][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.534212][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.674130][T13330] IPVS: starting estimator thread 0... [ 1119.680404][ T4076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9308'. [ 1119.722196][ T4076] xt_TCPMSS: Only works on TCP SYN packets [ 1119.796371][ T4079] IPVS: using max 27 ests per chain, 64800 per kthread [ 1119.906901][ T4076] bridge_slave_1: left allmulticast mode [ 1119.926236][ T4076] bridge_slave_1: left promiscuous mode [ 1119.943366][ T4076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.957167][ T4093] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1119.964589][ T4093] IPv6: NLM_F_CREATE should be set when creating new route [ 1119.988350][ T4094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9312'. [ 1120.001227][ T4076] bridge_slave_0: left allmulticast mode [ 1120.014906][ T4096] openvswitch: netlink: Key type 228 is out of range max 32 [ 1120.029872][ T4076] bridge_slave_0: left promiscuous mode [ 1120.044038][ T4076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.594235][ T4115] ip6erspan0: entered promiscuous mode [ 1120.611627][ T4120] netlink: 'syz.0.9320': attribute type 13 has an invalid length. [ 1120.632031][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9320'. [ 1120.633713][ T4115] ip6erspan0: entered allmulticast mode [ 1120.679972][ T4120] bond0: option fail_over_mac: invalid value (191) [ 1120.694980][ T4124] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9320'. [ 1120.767880][ T4131] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 1120.875439][T29117] Bluetooth: hci0: command tx timeout [ 1121.006400][ T4158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9324'. [ 1121.223339][ T3825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1121.578722][ T3825] veth0_vlan: entered promiscuous mode [ 1121.643530][ T3825] veth1_vlan: entered promiscuous mode [ 1121.766276][ T3825] veth0_macvtap: entered promiscuous mode [ 1121.791278][ T3825] veth1_macvtap: entered promiscuous mode [ 1121.852316][ T3825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.892789][ T3825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1121.931116][ T138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.951272][ T138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1121.986736][ T138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.017883][ T138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.277732][ T4195] hsr0 speed is unknown, defaulting to 1000 [ 1122.301008][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9336'. [ 1122.333359][ T4201] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9335'. [ 1122.627903][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.647926][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.897591][ T4225] netlink: 'syz.2.9338': attribute type 32 has an invalid length. [ 1123.005843][ T4152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.018079][ T4152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.287158][ T4233] hsr0 speed is unknown, defaulting to 1000 [ 1123.552951][ T4240] sctp: [Deprecated]: syz.0.9344 (pid 4240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1123.552951][ T4240] Use struct sctp_sack_info instead [ 1123.593530][ T4245] netlink: 'syz.2.9346': attribute type 22 has an invalid length. [ 1123.816353][ T4245] netlink: 'syz.2.9346': attribute type 22 has an invalid length. [ 1124.073034][ T4259] __nla_validate_parse: 2 callbacks suppressed [ 1124.073054][ T4259] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9352'. [ 1124.128112][ T4260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9353'. [ 1124.160383][ T4259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9352'. [ 1124.231874][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1124.258812][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1124.262133][ T4267] netlink: 'syz.1.9354': attribute type 2 has an invalid length. [ 1124.276246][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1124.289258][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1124.302790][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1124.735457][ T4282] netlink: 'syz.1.9357': attribute type 2 has an invalid length. [ 1125.333372][ T4312] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1125.405180][ T4305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9363'. [ 1125.534021][T25651] syz_tun (unregistering): left allmulticast mode [ 1125.640006][ T4316] SET target dimension over the limit! [ 1125.700162][ T4311] hsr0 speed is unknown, defaulting to 1000 [ 1125.768086][ T4261] hsr0 speed is unknown, defaulting to 1000 [ 1126.228417][ T4328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9369'. [ 1126.242795][ T4335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9371'. [ 1126.272245][ T4338] Bluetooth: MGMT ver 1.23 [ 1126.300920][ T4333] bond3: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1126.349387][ T4339] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1126.360737][ T4333] bond3 (unregistering): Released all slaves [ 1126.394895][ T5630] Bluetooth: hci2: command tx timeout [ 1126.419075][ T4341] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9373'. [ 1126.832810][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.852842][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.865007][ T4261] bridge_slave_0: entered allmulticast mode [ 1126.873005][ T4261] bridge_slave_0: entered promiscuous mode [ 1126.894735][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.903425][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.911440][ T4261] bridge_slave_1: entered allmulticast mode [ 1126.926369][ T4261] bridge_slave_1: entered promiscuous mode [ 1126.935563][ T4359] hsr0 speed is unknown, defaulting to 1000 [ 1127.040404][ T4261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.087462][ T4261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.135595][ T4375] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1127.206336][ T4261] team0: Port device team_slave_0 added [ 1127.249213][ T4261] team0: Port device team_slave_1 added [ 1127.310433][ T4376] hsr0 speed is unknown, defaulting to 1000 [ 1127.487079][ T4382] FAULT_INJECTION: forcing a failure. [ 1127.487079][ T4382] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.500327][ T4382] CPU: 1 UID: 0 PID: 4382 Comm: syz.2.9383 Not tainted syzkaller #0 PREEMPT(full) [ 1127.500357][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1127.500372][ T4382] Call Trace: [ 1127.500382][ T4382] [ 1127.500391][ T4382] dump_stack_lvl+0xe8/0x150 [ 1127.500423][ T4382] should_fail_ex+0x412/0x560 [ 1127.500459][ T4382] should_failslab+0xa8/0x100 [ 1127.500496][ T4382] __kmalloc_noprof+0xe8/0x760 [ 1127.500528][ T4382] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1127.500564][ T4382] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1127.500600][ T4382] genl_family_rcv_msg_doit+0xd9/0x330 [ 1127.500635][ T4382] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1127.500666][ T4382] ? __pfx_genl_get_cmd+0x10/0x10 [ 1127.500688][ T4382] ? stack_trace_save+0xa9/0x100 [ 1127.500720][ T4382] ? __pfx_netlbl_calipso_list+0x10/0x10 [ 1127.500754][ T4382] ? __lock_acquire+0x6b5/0x2cf0 [ 1127.500790][ T4382] genl_rcv_msg+0x61c/0x7a0 [ 1127.500823][ T4382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1127.500848][ T4382] ? __pfx_netlbl_calipso_list+0x10/0x10 [ 1127.500895][ T4382] netlink_rcv_skb+0x232/0x4b0 [ 1127.500929][ T4382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1127.500957][ T4382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1127.501008][ T4382] ? down_read+0x270/0x2e0 [ 1127.501031][ T4382] ? genl_rcv+0xd/0x40 [ 1127.501057][ T4382] genl_rcv+0x28/0x40 [ 1127.501090][ T4382] netlink_unicast+0x75c/0x8e0 [ 1127.501131][ T4382] netlink_sendmsg+0x813/0xb40 [ 1127.501173][ T4382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1127.501221][ T4382] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1127.501253][ T4382] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1127.501287][ T4382] ____sys_sendmsg+0x972/0x9f0 [ 1127.501320][ T4382] ? __might_fault+0xaf/0x130 [ 1127.501355][ T4382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1127.501398][ T4382] ? import_iovec+0x73/0xa0 [ 1127.501434][ T4382] ___sys_sendmsg+0x2a5/0x360 [ 1127.501465][ T4382] ? __lock_acquire+0x6b5/0x2cf0 [ 1127.501493][ T4382] ? __pfx____sys_sendmsg+0x10/0x10 [ 1127.501567][ T4382] ? __fget_files+0x2a/0x420 [ 1127.501593][ T4382] ? __fget_files+0x3a0/0x420 [ 1127.501631][ T4382] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1127.501667][ T4382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1127.501711][ T4382] ? rcu_is_watching+0x15/0xb0 [ 1127.501747][ T4382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.501771][ T4382] do_syscall_64+0x15f/0xf80 [ 1127.501791][ T4382] ? trace_irq_disable+0x3b/0x140 [ 1127.501823][ T4382] ? clear_bhb_loop+0x40/0x90 [ 1127.501850][ T4382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.501871][ T4382] RIP: 0033:0x7efe39f9cdd9 [ 1127.501892][ T4382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.501911][ T4382] RSP: 002b:00007efe3af0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1127.501934][ T4382] RAX: ffffffffffffffda RBX: 00007efe3a215fa0 RCX: 00007efe39f9cdd9 [ 1127.501950][ T4382] RDX: 0000000000010000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 1127.501964][ T4382] RBP: 00007efe3af0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.501977][ T4382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.501990][ T4382] R13: 00007efe3a216038 R14: 00007efe3a215fa0 R15: 00007ffc654ce1b8 [ 1127.502027][ T4382] [ 1127.840583][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9382'. [ 1127.889995][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.904023][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.934520][ T4261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.960463][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.968468][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.995365][ T4261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.328820][ T4398] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1128.407006][ T4393] netlink: 120 bytes leftover after parsing attributes in process `syz.2.9386'. [ 1128.475085][ T5630] Bluetooth: hci2: command tx timeout [ 1128.516532][ T4261] hsr_slave_0: entered promiscuous mode [ 1128.529153][ T4261] hsr_slave_1: entered promiscuous mode [ 1128.536077][ T4261] debugfs: 'hsr0' already exists in 'hsr' [ 1128.541971][ T4261] Cannot create hsr debugfs directory [ 1128.972434][ T4412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1129.275853][ T4261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1129.290143][ T4261] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1129.306383][ T4261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1129.322448][ T4261] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1129.330705][ T4261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1129.341969][ T4261] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1129.350959][ T4261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1129.368123][ T4261] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1129.598325][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.653029][ T4261] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.684178][ T137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.691459][ T137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.764076][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.771344][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.038066][ T4461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9401'. [ 1130.555931][ T5630] Bluetooth: hci2: command tx timeout [ 1130.722096][T13330] IPVS: starting estimator thread 0... [ 1130.815446][ T4493] IPVS: using max 27 ests per chain, 64800 per kthread [ 1130.858013][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9411'. [ 1130.896568][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1131.011866][ T4261] veth0_vlan: entered promiscuous mode [ 1131.050156][ T4261] veth1_vlan: entered promiscuous mode [ 1131.112758][ T4261] veth0_macvtap: entered promiscuous mode [ 1131.137301][ T4261] veth1_macvtap: entered promiscuous mode [ 1131.145049][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9415'. [ 1131.173394][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.194248][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.224036][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.249126][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.290400][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.302716][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.453315][ T4518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9417'. [ 1131.655240][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.663064][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.921493][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9420'. [ 1131.928555][ T4518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.951610][ T4530] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9420'. [ 1131.974093][ T4518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1132.271459][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.300904][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.342113][ T58] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.377923][ T58] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.421294][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.455222][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.604946][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.636628][T29117] Bluetooth: hci2: command tx timeout [ 1132.647190][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.890971][ T4544] batadv0: entered promiscuous mode [ 1132.913625][ T4544] macsec1: entered promiscuous mode [ 1132.934014][ T4552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9347'. [ 1132.948035][ T4551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9425'. [ 1132.991592][ T4544] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1133.025490][ T4544] batadv0: left promiscuous mode [ 1133.355743][T29117] Bluetooth: hci4: command 0x0405 tx timeout [ 1133.532819][T29117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1133.548057][T29117] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1133.558370][T29117] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1133.571314][T29117] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1133.580898][T29117] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1133.931408][ T4580] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1133.997188][ T4580] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9434'. [ 1134.185940][ T4589] sctp: [Deprecated]: syz.4.9437 (pid 4589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1134.185940][ T4589] Use struct sctp_sack_info instead [ 1134.217698][ T4590] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1134.444856][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9439'. [ 1134.549414][ T4566] hsr0 speed is unknown, defaulting to 1000 [ 1134.962398][ T4631] syzkaller0: entered promiscuous mode [ 1134.968313][ T4631] syzkaller0: entered allmulticast mode [ 1134.985572][ T4631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.002913][ T4631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.257235][ T4640] netlink: 'syz.3.9449': attribute type 39 has an invalid length. [ 1135.315851][ T4643] syzkaller1: entered promiscuous mode [ 1135.321599][ T4643] syzkaller1: entered allmulticast mode [ 1135.351467][ T4566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.360074][ T4566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.367925][ T4566] bridge_slave_0: entered allmulticast mode [ 1135.376854][ T4566] bridge_slave_0: entered promiscuous mode [ 1135.416666][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.423923][ T4566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.447235][ T4566] bridge_slave_1: entered allmulticast mode [ 1135.458653][ T4566] bridge_slave_1: entered promiscuous mode [ 1135.611825][ T4566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.662288][ T4653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1135.676095][ T5630] Bluetooth: hci1: command tx timeout [ 1135.731259][ T4566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.774738][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1135.789487][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.818798][ T4655] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1135.832190][ T4655] bond1 (unregistering): Released all slaves [ 1135.833040][ T4663] __nla_validate_parse: 1 callbacks suppressed [ 1135.833085][ T4663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9451'. [ 1135.932910][ T4668] netlink: 484 bytes leftover after parsing attributes in process `syz.2.9453'. [ 1135.945631][ T4663] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1135.954051][ T4663] netlink: 'syz.3.9451': attribute type 30 has an invalid length. [ 1135.972729][ T4660] netlink: 'syz.2.9453': attribute type 29 has an invalid length. [ 1136.018635][ T4566] team0: Port device team_slave_0 added [ 1136.088979][ T4665] netlink: 'syz.2.9453': attribute type 29 has an invalid length. [ 1136.121625][ T4566] team0: Port device team_slave_1 added [ 1136.156768][ T5630] Bluetooth: hci0: command 0x0401 tx timeout [ 1136.175320][ T4566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.182580][ T4566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.236100][ T4566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.249347][ T4566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.259401][ T4566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.287019][ T4566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1136.404365][ T4566] hsr_slave_0: entered promiscuous mode [ 1136.423476][ T4566] hsr_slave_1: entered promiscuous mode [ 1136.435955][ T4566] debugfs: 'hsr0' already exists in 'hsr' [ 1136.457832][ T4566] Cannot create hsr debugfs directory [ 1136.597530][ T4694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9459'. [ 1136.968770][ T4673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1136.982051][ T4687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1137.322402][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9464'. [ 1137.339794][ T4721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9465'. [ 1137.350784][ T4717] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1137.365814][ T4717] bond2 (unregistering): Released all slaves [ 1137.393032][ T4722] netlink: 'syz.1.9462': attribute type 1 has an invalid length. [ 1137.393965][ T4719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.406782][ T4722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1137.428648][ T4723] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1137.483922][ T4717] netlink: 'syz.3.9465': attribute type 30 has an invalid length. [ 1137.547750][ T4726] netlink: 'syz.2.9466': attribute type 10 has an invalid length. [ 1137.587446][ T4726] team0: Port device dummy0 added [ 1137.594418][ T4726] netlink: 'syz.2.9466': attribute type 10 has an invalid length. [ 1137.626933][ T4726] team0: Port device dummy0 removed [ 1137.637666][ T4726] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1137.755613][ T5630] Bluetooth: hci1: command tx timeout [ 1139.835373][ T5630] Bluetooth: hci1: command tx timeout [ 1140.107752][ T4704] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1140.149393][ T4566] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1140.265519][ T4566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1140.300002][ T4566] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1140.351409][ T4566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1140.383641][ T4566] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1140.430798][ T4566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1140.459193][ T4566] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1140.477983][ T4742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9469'. [ 1140.533100][ T4566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1141.246257][ T4566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1141.335655][ T4566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1141.351441][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.358816][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1141.406820][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.414168][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.914655][ T5630] Bluetooth: hci1: command tx timeout [ 1142.066656][ T4791] hsr0 speed is unknown, defaulting to 1000 [ 1142.370980][T13330] bridge0: entered promiscuous mode [ 1142.502013][ T4812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9486'. [ 1142.520618][ T4809] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9485'. [ 1142.713420][ T4566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.969451][ T4828] netlink: 'syz.4.9489': attribute type 1 has an invalid length. [ 1143.093128][ T4836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9490'. [ 1143.097589][ T4835] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9491'. [ 1143.180583][ T4828] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1143.187095][ T4840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 1143.372683][ T4566] veth0_vlan: entered promiscuous mode [ 1143.416522][ T4566] veth1_vlan: entered promiscuous mode [ 1143.581649][ T4566] veth0_macvtap: entered promiscuous mode [ 1143.625984][ T4566] veth1_macvtap: entered promiscuous mode [ 1143.691364][ T4566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.743177][ T4566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1143.796503][T19877] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.816938][T19877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.850333][T19877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.875472][ T4854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9498'. [ 1143.932057][T19877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.292705][ T4872] netlink: 'syz.2.9503': attribute type 61 has an invalid length. [ 1144.321364][ T4152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.333273][ T4152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.463280][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1144.492991][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.662901][ T4879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9504'. [ 1145.690956][ T4928] netlink: 'syz.2.9517': attribute type 1 has an invalid length. [ 1145.831501][ T4928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1146.141803][ T4953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9525'. [ 1146.169539][ T4956] tipc: Started in network mode [ 1146.185419][ T4956] tipc: Node identity 52d3d917ad93, cluster identity 4711 [ 1146.210916][ T4956] tipc: Enabled bearer , priority 0 [ 1146.416763][ T4956] syzkaller0: entered promiscuous mode [ 1146.433939][ T4956] syzkaller0: entered allmulticast mode [ 1146.558547][ T4947] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9524'. [ 1146.620759][ T4956] tipc: Resetting bearer [ 1146.660933][ T4946] tipc: Resetting bearer [ 1146.742325][ T4946] tipc: Disabling bearer [ 1146.861048][ T4998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9532'. [ 1146.885498][ T4998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9532'. [ 1148.068945][ T5055] __nla_validate_parse: 64 callbacks suppressed [ 1148.068969][ T5055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9547'. [ 1149.257501][ T5111] netlink: 84 bytes leftover after parsing attributes in process `syz.0.9562'. [ 1149.462122][ T5117] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1149.949715][ T5149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9575'. [ 1151.058325][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9588'. [ 1151.211597][ T5630] block nbd5: Receive control failed (result -32) [ 1151.211669][T29117] block nbd5: Receive control failed (result -32) [ 1152.318105][ T5253] netlink: 'syz.1.9601': attribute type 5 has an invalid length. [ 1152.326525][ T5253] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.9601'. [ 1152.340110][ T5253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9601'. [ 1152.350405][ T5253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9601'. [ 1152.510426][ T5259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9602'. [ 1153.319822][ T5305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9613'. [ 1154.277143][ T5345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1154.388645][ T5348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9622'. [ 1154.537035][ T5353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9624'. [ 1155.162507][ T5389] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9634'. [ 1155.231243][ T5389] bond1: option mode: invalid value (231) [ 1155.261534][ T5389] bond1 (unregistering): Released all slaves [ 1155.886956][ T5420] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9640'. [ 1155.909864][ T5415] tun0: tun_chr_ioctl cmd 1074812118 [ 1156.058183][ T5420] bond3: entered allmulticast mode [ 1156.079125][ T5420] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1156.097512][ T5415] tun0: tun_chr_ioctl cmd 1074033169 [ 1156.332586][ T5438] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9642'. [ 1156.371238][ T5444] netlink: 292 bytes leftover after parsing attributes in process `syz.2.9645'. [ 1156.388731][ T5445] netlink: 'syz.4.9643': attribute type 1 has an invalid length. [ 1156.606519][ T5445] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1156.698499][ T5459] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 1156.728109][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9649'. [ 1156.753063][ T5459] bond1 (unregistering): Released all slaves [ 1156.831973][ T5468] netlink: 'syz.0.9649': attribute type 30 has an invalid length. [ 1156.841842][ T5455] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9646'. [ 1157.085631][ T5475] bridge2: entered allmulticast mode [ 1157.644203][ T5497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.657037][ T5497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.673396][ T5497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.737765][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9662'. [ 1157.770256][ T5497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1157.801770][ T5503] netlink: 'syz.1.9662': attribute type 13 has an invalid length. [ 1157.814350][ T5497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1157.826215][ T5503] netlink: 'syz.1.9662': attribute type 17 has an invalid length. [ 1157.834172][ T5497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1157.860919][ T5497] veth1_vlan: left promiscuous mode [ 1157.868377][ T5497] veth0_vlan: left promiscuous mode [ 1157.875785][ T5497] veth0_vlan: entered promiscuous mode [ 1157.890454][ T5497] veth1_vlan: entered promiscuous mode [ 1157.903425][ T5497] veth1_macvtap: left promiscuous mode [ 1157.921275][ T5497] veth0_macvtap: left promiscuous mode [ 1157.928587][ T5497] veth0_macvtap: entered promiscuous mode [ 1157.938853][ T5497] veth1_macvtap: entered promiscuous mode [ 1157.972022][ T5497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1157.986497][ T5497] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1158.037443][ T5497] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1158.067725][ T5497] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1158.102504][ T5497] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1158.113471][ T5497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1158.122159][ T5497] bond3: left allmulticast mode [ 1158.129899][ T5497] bridge2: left allmulticast mode [ 1158.170337][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.177601][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.193334][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.200599][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.559865][ T5520] __nla_validate_parse: 1 callbacks suppressed [ 1158.559889][ T5520] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9666'. [ 1158.817762][ T5503] mac80211_hwsim hwsim166 wlan0: entered promiscuous mode [ 1158.841670][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.858663][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.883352][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1158.950718][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.042936][ T5515] hsr0 speed is unknown, defaulting to 1000 [ 1159.704510][ T5565] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9682'. [ 1160.124374][ T5584] netlink: 'syz.3.9688': attribute type 1 has an invalid length. [ 1160.377598][ T5591] hsr0 speed is unknown, defaulting to 1000 [ 1160.408726][ T5600] nbd: nbd1 already in use [ 1160.414138][ T5600] block nbd1: NBD_DISCONNECT [ 1160.424923][ T5600] block nbd1: Send disconnect failed -32 [ 1160.433128][ T5600] block nbd1: shutting down sockets [ 1160.495895][ T5605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9694'. [ 1160.517205][ T5605] netlink: 'syz.2.9694': attribute type 5 has an invalid length. [ 1160.538835][ T5605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9694'. [ 1160.593520][ T5605] geneve3: entered promiscuous mode [ 1160.606352][ T5605] geneve3: entered allmulticast mode [ 1160.652745][ T58] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1160.690985][ T58] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1160.753208][ T5616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9697'. [ 1160.820069][ T58] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1160.849052][ T5607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9696'. [ 1160.862677][ T58] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1161.008972][ T5633] netlink: 'syz.0.9701': attribute type 1 has an invalid length. [ 1161.612401][ T5651] sctp: [Deprecated]: syz.1.9706 (pid 5651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1161.612401][ T5651] Use struct sctp_sack_info instead [ 1161.921234][ T5659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9708'. [ 1162.181617][ T5670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9714'. [ 1162.283409][ T5677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9717'. [ 1162.296123][ T5677] gretap0: entered promiscuous mode [ 1162.342286][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9717'. [ 1162.358967][ T5679] netlink: 'syz.2.9716': attribute type 11 has an invalid length. [ 1162.409127][ T5663] netlink: 'syz.4.9710': attribute type 10 has an invalid length. [ 1162.439286][ T5663] ipvlan0: entered allmulticast mode [ 1162.465178][ T5663] veth0_vlan: entered allmulticast mode [ 1162.514055][ T5663] team0: Device ipvlan0 failed to register rx_handler [ 1163.632868][ T5731] __nla_validate_parse: 2 callbacks suppressed [ 1163.632891][ T5731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9730'. [ 1164.168369][ T5785] netlink: 'syz.2.9740': attribute type 1 has an invalid length. [ 1164.337136][ T5785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1164.356909][ T5788] vlan2: entered allmulticast mode [ 1164.362301][ T5788] veth0_to_bond: entered allmulticast mode [ 1164.375621][ T5788] bond4: (slave vlan2): making interface the new active one [ 1164.390527][ T5788] bond4: (slave vlan2): Enslaving as an active interface with an up link [ 1164.517037][ T5794] netlink: 'syz.4.9741': attribute type 1 has an invalid length. [ 1164.542967][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9742'. [ 1165.044018][ T5821] xt_TCPMSS: Only works on TCP SYN packets [ 1165.194279][ T5831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9753'. [ 1165.224236][ T5834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9751'. [ 1165.374765][ T5842] netlink: 'syz.0.9755': attribute type 1 has an invalid length. [ 1165.583384][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9755'. [ 1165.593437][ T5843] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9755'. [ 1165.758370][ T5812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1165.773791][ T5844] netlink: 'syz.0.9755': attribute type 1 has an invalid length. [ 1166.212830][ T5859] netlink: 'syz.3.9760': attribute type 2 has an invalid length. [ 1166.421178][ T5870] netlink: 'syz.4.9764': attribute type 10 has an invalid length. [ 1166.432924][ T5870] team0: Device vxcan1 is of different type [ 1166.556629][ T5873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1166.620555][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9766'. [ 1166.792962][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9767'. [ 1166.881020][ T5888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9771'. [ 1166.926146][ T5888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1166.936496][ T5888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1166.979028][ T5894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9771'. [ 1167.131359][ T4149] bridge_slave_1: left promiscuous mode [ 1167.141278][ T4149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.167542][ T4149] bridge_slave_0: left allmulticast mode [ 1167.177444][ T4149] bridge_slave_0: left promiscuous mode [ 1167.191460][ T4149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.160298][ T4149] bond5 (unregistering): (slave bridge2): Releasing backup interface [ 1168.173597][ T4149] bond5 (unregistering): (slave bridge2): the permanent HWaddr of slave - be:4f:c8:ce:0f:70 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1168.194919][ T4149] bond5 (unregistering): (slave bridge3): making interface the new active one [ 1168.262441][ T4149] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 1168.594031][ T4149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.605945][ T4149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.616316][ T4149] bond0 (unregistering): Released all slaves [ 1168.631185][ T4149] bond1 (unregistering): Released all slaves [ 1168.652408][ T4149] bond2 (unregistering): Released all slaves [ 1168.675744][ T4149] bond3 (unregistering): Released all slaves [ 1168.693142][ T4149] bond4 (unregistering): Released all slaves [ 1168.718748][ T4149] bond5 (unregistering): Released all slaves [ 1168.740879][ T4149] bond6 (unregistering): Released all slaves [ 1168.758607][ T4149] bond7 (unregistering): Released all slaves [ 1168.781746][ T4149] bond8 (unregistering): Released all slaves [ 1168.800257][ T4149] bond9 (unregistering): Released all slaves [ 1168.829793][ T4149] bond10 (unregistering): (slave bond11): Releasing backup interface [ 1168.838744][ T4149] bond11 (unregistering): left promiscuous mode [ 1168.847438][ T4149] bond10 (unregistering): Released all slaves [ 1168.868949][ T4149] bond11 (unregistering): Released all slaves [ 1168.996954][ T5948] __nla_validate_parse: 2 callbacks suppressed [ 1168.996974][ T5948] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9785'. [ 1169.022962][ T5935] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 1169.031440][ T5948] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9785'. [ 1169.047373][ T5948] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9785'. [ 1169.120723][ T5948] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9785'. [ 1169.198035][T29117] Bluetooth: hci1: command 0x0405 tx timeout [ 1169.356807][ T4149] tipc: Disabling bearer [ 1169.387997][ T4149] tipc: Left network mode [ 1169.504478][ T5963] syzkaller1: entered promiscuous mode [ 1169.548543][ T5963] syzkaller1: entered allmulticast mode [ 1169.893709][ T5980] netlink: 'syz.1.9792': attribute type 3 has an invalid length. [ 1170.680046][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9799'. [ 1170.913458][ T6010] bond3: Invalid ad_actor_system MAC address. [ 1170.920506][ T6010] bond3: option ad_actor_system: invalid value (7) [ 1170.963962][ T6010] bond3 (unregistering): Released all slaves [ 1171.671113][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9807'. [ 1171.838327][ T4149] hsr_slave_0: left promiscuous mode [ 1171.846192][ T4149] hsr_slave_1: left promiscuous mode [ 1171.852724][ T4149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.869889][ T4149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.381722][ T4149] team0 (unregistering): Port device team_slave_0 removed [ 1173.055704][ T4149] IPVS: stop unused estimator thread 0... [ 1173.697178][ T6013] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1174.166555][ T6078] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:10 to non-existent VLAN 512 [ 1174.394202][ T6089] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1174.712457][ T6093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.720278][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.018139][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.060314][ T6124] xt_hashlimit: size too large, truncated to 1048576 [ 1175.069073][ T6093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.167401][ T6129] netlink: 'syz.2.9829': attribute type 1 has an invalid length. [ 1175.224389][ T6129] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9829'. [ 1175.387456][ T6099] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1175.393901][ T6088] hsr0 speed is unknown, defaulting to 1000 [ 1175.455276][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.527901][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.569596][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.606785][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.650829][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9830'. [ 1177.581116][ T6214] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9847'. [ 1177.737288][ T6221] xt_hashlimit: max too large, truncated to 1048576 [ 1177.766818][ T6221] xt_bpf: check failed: parse error [ 1178.333638][ T6252] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9854'. [ 1178.465587][ T6257] hsr0 speed is unknown, defaulting to 1000 [ 1178.868858][ T6267] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9859'. [ 1179.021320][ T6274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9862'. [ 1179.173410][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9863'. [ 1179.826141][ T6315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9876'. [ 1179.949952][ T6317] hsr0 speed is unknown, defaulting to 1000 [ 1179.993441][ T6321] netlink: 'syz.2.9879': attribute type 1 has an invalid length. [ 1180.398987][ T6337] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1180.448007][ T6322] hsr0 speed is unknown, defaulting to 1000 [ 1180.835610][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9887'. [ 1180.887398][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9888'. [ 1181.101275][ T6363] netlink: 'syz.0.9890': attribute type 8 has an invalid length. [ 1181.158132][ T6362] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 1181.558641][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9899'. [ 1181.575239][ T6382] netlink: 'syz.1.9897': attribute type 4 has an invalid length. [ 1181.593394][ T6385] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9900'. [ 1181.629239][ T6382] netlink: 'syz.1.9897': attribute type 4 has an invalid length. [ 1181.638927][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9900'. [ 1181.649465][ T6381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 1181.736259][ T6381] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9899'. [ 1181.965434][ T6394] netlink: 'syz.4.9902': attribute type 21 has an invalid length. [ 1181.984903][ T6394] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9902'. [ 1181.997784][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9905'. [ 1182.006402][ T6394] netlink: 'syz.4.9902': attribute type 1 has an invalid length. [ 1182.367071][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9909'. [ 1182.401418][ T6413] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1182.427221][ T6413] netlink: 'syz.0.9909': attribute type 30 has an invalid length. [ 1182.586546][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9910'. [ 1183.023686][ T6442] netlink: 'syz.2.9922': attribute type 2 has an invalid length. [ 1183.048509][ T6442] netlink: 'syz.2.9922': attribute type 2 has an invalid length. [ 1183.247871][ T6452] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 1183.286357][ T6452] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1183.430399][ T6463] hsr0 speed is unknown, defaulting to 1000 [ 1183.719273][ T6471] FAULT_INJECTION: forcing a failure. [ 1183.719273][ T6471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.763193][ T6471] CPU: 1 UID: 0 PID: 6471 Comm: syz.3.9932 Not tainted syzkaller #0 PREEMPT(full) [ 1183.763223][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1183.763238][ T6471] Call Trace: [ 1183.763247][ T6471] [ 1183.763257][ T6471] dump_stack_lvl+0xe8/0x150 [ 1183.763290][ T6471] should_fail_ex+0x412/0x560 [ 1183.763325][ T6471] _copy_from_user+0x2d/0xb0 [ 1183.763356][ T6471] __sys_bpf+0x229/0x950 [ 1183.763392][ T6471] ? __pfx___sys_bpf+0x10/0x10 [ 1183.763440][ T6471] ? ksys_write+0x242/0x270 [ 1183.763475][ T6471] ? __pfx_ksys_write+0x10/0x10 [ 1183.763516][ T6471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.763538][ T6471] __x64_sys_bpf+0x7c/0x90 [ 1183.763568][ T6471] do_syscall_64+0x15f/0xf80 [ 1183.763588][ T6471] ? trace_irq_disable+0x3b/0x140 [ 1183.763618][ T6471] ? clear_bhb_loop+0x40/0x90 [ 1183.763642][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.763662][ T6471] RIP: 0033:0x7f64e8d9cdd9 [ 1183.763681][ T6471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1183.763699][ T6471] RSP: 002b:00007f64e9ba8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1183.763720][ T6471] RAX: ffffffffffffffda RBX: 00007f64e9015fa0 RCX: 00007f64e8d9cdd9 [ 1183.763735][ T6471] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1183.763748][ T6471] RBP: 00007f64e9ba8090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.763761][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.763773][ T6471] R13: 00007f64e9016038 R14: 00007f64e9015fa0 R15: 00007ffca3ac3258 [ 1183.763804][ T6471] [ 1184.539475][ T6498] hsr0 speed is unknown, defaulting to 1000 [ 1184.616106][ T6495] hsr0 speed is unknown, defaulting to 1000 [ 1184.622971][ T6502] netlink: 'syz.4.9944': attribute type 1 has an invalid length. [ 1184.658126][ T6502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1185.342842][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.350530][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.525138][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.742013][ T6520] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1185.757891][ T6520] bond6 (unregistering): Released all slaves [ 1185.791484][ T4147] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.819861][ T4147] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.862697][ T6533] hsr0 speed is unknown, defaulting to 1000 [ 1185.870935][ T4147] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.910286][ T4147] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.031380][ T6546] __nla_validate_parse: 4 callbacks suppressed [ 1186.031402][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9958'. [ 1186.089262][ T6551] xt_socket: unknown flags 0x4 [ 1186.170360][ T6549] tipc: Failed to remove unknown binding: 66,0,0/0:1462193390/1462193392 [ 1186.179494][ T6551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9960'. [ 1186.204415][ T6549] tipc: Failed to remove unknown binding: 66,0,0/0:1462193390/1462193391 [ 1186.994415][ T6567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9965'. [ 1187.185585][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9967'. [ 1187.511434][ T6582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9970'. [ 1187.629634][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9969'. [ 1188.231280][ T6616] netlink: 172 bytes leftover after parsing attributes in process `syz.0.9979'. [ 1188.598170][ T6633] FAULT_INJECTION: forcing a failure. [ 1188.598170][ T6633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1188.643940][ T6633] CPU: 0 UID: 0 PID: 6633 Comm: syz.2.9984 Not tainted syzkaller #0 PREEMPT(full) [ 1188.643972][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1188.643986][ T6633] Call Trace: [ 1188.643995][ T6633] [ 1188.644005][ T6633] dump_stack_lvl+0xe8/0x150 [ 1188.644038][ T6633] should_fail_ex+0x412/0x560 [ 1188.644073][ T6633] _copy_from_user+0x2d/0xb0 [ 1188.644108][ T6633] bpf_test_init+0xd8/0x150 [ 1188.644145][ T6633] bpf_prog_test_run_xdp+0x529/0x1160 [ 1188.644195][ T6633] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1188.644234][ T6633] ? __fget_files+0x2a/0x420 [ 1188.644274][ T6633] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1188.644309][ T6633] bpf_prog_test_run+0x2c7/0x340 [ 1188.644336][ T6633] __sys_bpf+0x643/0x950 [ 1188.644371][ T6633] ? __pfx___sys_bpf+0x10/0x10 [ 1188.644422][ T6633] ? ksys_write+0x242/0x270 [ 1188.644456][ T6633] ? __pfx_ksys_write+0x10/0x10 [ 1188.644493][ T6633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.644526][ T6633] __x64_sys_bpf+0x7c/0x90 [ 1188.644557][ T6633] do_syscall_64+0x15f/0xf80 [ 1188.644578][ T6633] ? trace_irq_disable+0x3b/0x140 [ 1188.644611][ T6633] ? clear_bhb_loop+0x40/0x90 [ 1188.644638][ T6633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.644660][ T6633] RIP: 0033:0x7efe39f9cdd9 [ 1188.644681][ T6633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1188.644701][ T6633] RSP: 002b:00007efe3af0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1188.644724][ T6633] RAX: ffffffffffffffda RBX: 00007efe3a215fa0 RCX: 00007efe39f9cdd9 [ 1188.644748][ T6633] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1188.644762][ T6633] RBP: 00007efe3af0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1188.644776][ T6633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1188.644789][ T6633] R13: 00007efe3a216038 R14: 00007efe3a215fa0 R15: 00007ffc654ce1b8 [ 1188.644825][ T6633] [ 1188.916717][ T6639] netlink: 'syz.3.9983': attribute type 3 has an invalid length. [ 1188.981377][ T6626] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1189.124142][ T6626] bond3 (unregistering): Released all slaves [ 1189.158885][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9986'. [ 1189.490249][ T6649] hsr0 speed is unknown, defaulting to 1000 [ 1189.738902][ T6669] hsr0 speed is unknown, defaulting to 1000 [ 1189.899962][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9993'. [ 1190.193832][ T6688] nbd: nbd0 already in use [ 1190.222827][ T6688] block nbd0: NBD_DISCONNECT [ 1190.255666][ T6688] block nbd0: Send disconnect failed -32 [ 1190.283147][ T6688] block nbd0: shutting down sockets [ 1190.594065][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9999'. [ 1190.613916][ T6702] netlink: 'syz.3.10000': attribute type 1 has an invalid length. [ 1190.688606][ T6702] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1190.766632][ T6705] netlink: 'syz.2.10001': attribute type 1 has an invalid length. [ 1190.800775][ T4147] bridge_slave_1: left promiscuous mode [ 1190.811706][ T6707] FAULT_INJECTION: forcing a failure. [ 1190.811706][ T6707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1190.834002][ T4147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.880974][ T6707] CPU: 1 UID: 0 PID: 6707 Comm: syz.1.10002 Not tainted syzkaller #0 PREEMPT(full) [ 1190.881006][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1190.881021][ T6707] Call Trace: [ 1190.881030][ T6707] [ 1190.881040][ T6707] dump_stack_lvl+0xe8/0x150 [ 1190.881074][ T6707] should_fail_ex+0x412/0x560 [ 1190.881109][ T6707] _copy_from_user+0x2d/0xb0 [ 1190.881144][ T6707] ___sys_sendmsg+0x1c6/0x360 [ 1190.881178][ T6707] ? __lock_acquire+0x6b5/0x2cf0 [ 1190.881208][ T6707] ? __pfx____sys_sendmsg+0x10/0x10 [ 1190.881282][ T6707] ? __fget_files+0x2a/0x420 [ 1190.881309][ T6707] ? __fget_files+0x3a0/0x420 [ 1190.881348][ T6707] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1190.881386][ T6707] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1190.881431][ T6707] ? __pfx_ksys_write+0x10/0x10 [ 1190.881474][ T6707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.881498][ T6707] do_syscall_64+0x15f/0xf80 [ 1190.881519][ T6707] ? trace_irq_disable+0x3b/0x140 [ 1190.881553][ T6707] ? clear_bhb_loop+0x40/0x90 [ 1190.881589][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.881612][ T6707] RIP: 0033:0x7f523e39cdd9 [ 1190.881633][ T6707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.881654][ T6707] RSP: 002b:00007f523c5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1190.881677][ T6707] RAX: ffffffffffffffda RBX: 00007f523e615fa0 RCX: 00007f523e39cdd9 [ 1190.881693][ T6707] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000006 [ 1190.881708][ T6707] RBP: 00007f523c5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.881722][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.881735][ T6707] R13: 00007f523e616038 R14: 00007f523e615fa0 R15: 00007ffd2289a068 [ 1190.881770][ T6707] [ 1191.081773][ T6714] __nla_validate_parse: 1 callbacks suppressed [ 1191.081796][ T6714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10004'. [ 1191.130724][ T6717] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1191.140383][ T6717] netlink: 'syz.3.10003': attribute type 30 has an invalid length. [ 1191.164041][ T4147] dvmrp0: left allmulticast mode [ 1191.172380][ T4147] dvmrp6: left allmulticast mode [ 1191.209597][ T6722] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10004'. [ 1191.341539][ T6727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10004'. [ 1191.703539][ T4147] bond7 (unregistering): (slave gretap1): Releasing active interface [ 1191.902921][ T4147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1191.914242][ T4147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1191.925945][ T4147] bond0 (unregistering): Released all slaves [ 1191.940812][ T4147] bond1 (unregistering): Released all slaves [ 1191.958604][ T4147] bond2 (unregistering): Released all slaves [ 1191.978105][ T4147] bond3 (unregistering): (slave veth5): Releasing backup interface [ 1191.987952][ T4147] bond3 (unregistering): Released all slaves [ 1192.013217][ T4147] bond4 (unregistering): Released all slaves [ 1192.030246][ T4147] bond5 (unregistering): Released all slaves [ 1192.047522][ T4147] bond6 (unregistering): Released all slaves [ 1192.065585][ T4147] bond7 (unregistering): Released all slaves [ 1192.102171][ T4147] bond8 (unregistering): Released all slaves [ 1192.121785][ T4147] bond9 (unregistering): Released all slaves [ 1192.138717][ T4147] bond10 (unregistering): Released all slaves [ 1192.156260][ T4147] bond11 (unregistering): Released all slaves [ 1192.179493][ T4147] bond12 (unregistering): Released all slaves [ 1192.206942][ T4147] bond13 (unregistering): Released all slaves [ 1192.232160][ T4147] bond14 (unregistering): Released all slaves [ 1192.251100][ T6705] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1192.255266][ T6712] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1192.283064][ T6717] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1192.635588][ T6742] syz_tun: entered allmulticast mode [ 1192.678102][ T4147] hmac(sh: left promiscuous mode [ 1192.683535][ T6742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10011'. [ 1192.758331][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10014'. [ 1192.792630][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10013'. [ 1193.106410][ T6742] syz_tun (unregistering): left allmulticast mode [ 1193.183416][ T4147] tipc: Left network mode [ 1193.215860][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10019'. [ 1193.328301][ T6766] nbd0: detected capacity change from 0 to 63 [ 1193.373260][ T6772] block nbd0: NBD_DISCONNECT [ 1193.399563][ T4147] IPVS: stopping backup sync thread 19653 ... [ 1193.489598][ T6772] block nbd0: Disconnected due to user request. [ 1193.509460][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10022'. [ 1193.533124][ T4314] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1193.551869][ T6772] block nbd0: shutting down sockets [ 1193.561332][ T6771] hsr0 speed is unknown, defaulting to 1000 [ 1193.569476][ T4314] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1193.589605][ T6777] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1193.600914][ T6777] netlink: 'syz.1.10022': attribute type 30 has an invalid length. [ 1193.624181][ T1752] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 1193.642112][ T1752] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1193.651400][ T1752] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1193.660054][ T1752] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1193.670603][ T4314] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1193.717759][ T4314] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1193.775773][ T4314] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1193.795593][ T4314] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1193.805912][ T4314] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1193.819310][ T4314] Buffer I/O error on dev nbd0, logical block 2, async page read [ 1193.827946][ T4314] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1193.837247][ T4314] Buffer I/O error on dev nbd0, logical block 3, async page read [ 1193.845456][ T4314] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1193.855305][ T4314] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1193.863377][ T4314] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1193.872638][ T4314] Buffer I/O error on dev nbd0, logical block 1, async page read [ 1193.881080][ T4314] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1193.896534][ T4314] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1193.948657][ T4314] ldm_validate_partition_table(): Disk read failed. [ 1193.990575][ T4314] Dev nbd0: unable to read RDB block 0 [ 1194.042595][ T4314] nbd0: unable to read partition table [ 1194.137039][ T4314] ldm_validate_partition_table(): Disk read failed. [ 1194.176743][ T4314] Dev nbd0: unable to read RDB block 0 [ 1194.230897][ T4314] nbd0: unable to read partition table [ 1194.301473][ T6792] nbd: nbd0 already in use [ 1194.328162][ T6792] block nbd0: NBD_DISCONNECT [ 1194.350823][ T6792] block nbd0: Send disconnect failed -32 [ 1194.573210][ T6795] bond2: option miimon: invalid value (18446744073709551607) [ 1194.616234][ T6795] bond2: option miimon: allowed values 0 - 2147483647 [ 1194.638802][ T6795] bond2 (unregistering): Released all slaves [ 1194.845597][ T6806] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 1194.920872][ T6806] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1194.984065][ T6812] FAULT_INJECTION: forcing a failure. [ 1194.984065][ T6812] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.047872][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.3.10032 Not tainted syzkaller #0 PREEMPT(full) [ 1195.047913][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1195.047928][ T6812] Call Trace: [ 1195.047937][ T6812] [ 1195.047948][ T6812] dump_stack_lvl+0xe8/0x150 [ 1195.047981][ T6812] should_fail_ex+0x412/0x560 [ 1195.048021][ T6812] should_failslab+0xa8/0x100 [ 1195.048058][ T6812] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1195.048089][ T6812] ? __alloc_skb+0x186/0x7d0 [ 1195.048118][ T6812] ? __alloc_skb+0x1d0/0x7d0 [ 1195.048145][ T6812] ? __local_bh_enable_ip+0xd0/0x130 [ 1195.048175][ T6812] __alloc_skb+0x1d0/0x7d0 [ 1195.048210][ T6812] netlink_sendmsg+0x5d4/0xb40 [ 1195.048255][ T6812] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.048292][ T6812] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1195.048324][ T6812] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1195.048358][ T6812] ____sys_sendmsg+0x972/0x9f0 [ 1195.048392][ T6812] ? __might_fault+0xaf/0x130 [ 1195.048427][ T6812] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1195.048471][ T6812] ? import_iovec+0x73/0xa0 [ 1195.048507][ T6812] ___sys_sendmsg+0x2a5/0x360 [ 1195.048540][ T6812] ? __lock_acquire+0x6b5/0x2cf0 [ 1195.048569][ T6812] ? __pfx____sys_sendmsg+0x10/0x10 [ 1195.048642][ T6812] ? __fget_files+0x2a/0x420 [ 1195.048668][ T6812] ? __fget_files+0x3a0/0x420 [ 1195.048707][ T6812] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1195.048744][ T6812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1195.048789][ T6812] ? __pfx_ksys_write+0x10/0x10 [ 1195.048831][ T6812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.048855][ T6812] do_syscall_64+0x15f/0xf80 [ 1195.048873][ T6812] ? trace_irq_disable+0x3b/0x140 [ 1195.048931][ T6812] ? clear_bhb_loop+0x40/0x90 [ 1195.048959][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.048981][ T6812] RIP: 0033:0x7f64e8d9cdd9 [ 1195.049002][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1195.049022][ T6812] RSP: 002b:00007f64e9ba8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1195.049046][ T6812] RAX: ffffffffffffffda RBX: 00007f64e9015fa0 RCX: 00007f64e8d9cdd9 [ 1195.049063][ T6812] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000006 [ 1195.049077][ T6812] RBP: 00007f64e9ba8090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.049092][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.049106][ T6812] R13: 00007f64e9016038 R14: 00007f64e9015fa0 R15: 00007ffca3ac3258 [ 1195.049141][ T6812] [ 1195.364006][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10033'. [ 1195.896480][ T4147] [ 1195.898902][ T4147] ====================================================== [ 1195.905947][ T4147] WARNING: possible circular locking dependency detected [ 1195.913018][ T4147] syzkaller #0 Not tainted [ 1195.917468][ T4147] ------------------------------------------------------ [ 1195.924518][ T4147] kworker/u8:7/4147 is trying to acquire lock: [ 1195.930700][ T4147] ffff88801be8d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 1195.941310][ T4147] [ 1195.941310][ T4147] but task is already holding lock: [ 1195.948710][ T4147] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 1195.958357][ T4147] [ 1195.958357][ T4147] which lock already depends on the new lock. [ 1195.958357][ T4147] [ 1195.968801][ T4147] [ 1195.968801][ T4147] the existing dependency chain (in reverse order) is: [ 1195.977848][ T4147] [ 1195.977848][ T4147] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 1195.986093][ T4147] down_write+0x96/0x200 [ 1195.990891][ T4147] kernfs_add_one+0x41/0x5c0 [ 1195.996029][ T4147] kernfs_create_dir_ns+0xde/0x130 [ 1196.001716][ T4147] internal_create_group+0x425/0x1180 [ 1196.007645][ T4147] cpuhp_invoke_callback+0x445/0x860 [ 1196.013474][ T4147] cpuhp_issue_call+0x430/0x7a0 [ 1196.018869][ T4147] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 1196.025480][ T4147] __cpuhp_setup_state+0x3f/0x60 [ 1196.030965][ T4147] do_one_initcall+0x250/0x870 [ 1196.036296][ T4147] do_initcall_level+0x104/0x190 [ 1196.041791][ T4147] do_initcalls+0x59/0xa0 [ 1196.046670][ T4147] kernel_init_freeable+0x2a6/0x3e0 [ 1196.052437][ T4147] kernel_init+0x1d/0x1d0 [ 1196.057320][ T4147] ret_from_fork+0x514/0xb70 [ 1196.062472][ T4147] ret_from_fork_asm+0x1a/0x30 [ 1196.067778][ T4147] [ 1196.067778][ T4147] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1196.075615][ T4147] [ 1196.075615][ T4147] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1196.083365][ T4147] cpus_read_lock+0x42/0x160 [ 1196.088499][ T4147] static_key_slow_inc+0x12/0x30 [ 1196.093983][ T4147] setup_udp_tunnel_sock+0x2df/0x4f0 [ 1196.099806][ T4147] l2tp_tunnel_register+0xe72/0x1570 [ 1196.105630][ T4147] pppol2tp_connect+0x8b7/0x17c0 [ 1196.111108][ T4147] __sys_connect+0x312/0x450 [ 1196.116263][ T4147] __x64_sys_connect+0x7a/0x90 [ 1196.121660][ T4147] do_syscall_64+0x15f/0xf80 [ 1196.126794][ T4147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.133235][ T4147] [ 1196.133235][ T4147] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1196.141000][ T4147] lock_sock_nested+0x41/0x100 [ 1196.146321][ T4147] inet_shutdown+0x6a/0x390 [ 1196.151370][ T4147] nbd_mark_nsock_dead+0x2e9/0x560 [ 1196.157042][ T4147] sock_shutdown+0x15e/0x260 [ 1196.162175][ T4147] nbd_clear_sock+0x24/0x170 [ 1196.167310][ T4147] nbd_config_put+0x2dd/0x580 [ 1196.172529][ T4147] nbd_genl_connect+0x19d5/0x1cf0 [ 1196.178092][ T4147] genl_family_rcv_msg_doit+0x22a/0x330 [ 1196.184179][ T4147] genl_rcv_msg+0x61c/0x7a0 [ 1196.189224][ T4147] netlink_rcv_skb+0x232/0x4b0 [ 1196.194532][ T4147] genl_rcv+0x28/0x40 [ 1196.199056][ T4147] netlink_unicast+0x75c/0x8e0 [ 1196.204364][ T4147] netlink_sendmsg+0x813/0xb40 [ 1196.209674][ T4147] ____sys_sendmsg+0x972/0x9f0 [ 1196.215074][ T4147] ___sys_sendmsg+0x2a5/0x360 [ 1196.220293][ T4147] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1196.225785][ T4147] do_syscall_64+0x15f/0xf80 [ 1196.230931][ T4147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.237367][ T4147] [ 1196.237367][ T4147] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1196.245047][ T4147] __mutex_lock+0x1a3/0x1550 [ 1196.250193][ T4147] nbd_queue_rq+0x37b/0x1100 [ 1196.255323][ T4147] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1196.261425][ T4147] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1196.268307][ T4147] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1196.274843][ T4147] blk_mq_run_hw_queue+0x348/0x4f0 [ 1196.280507][ T4147] blk_mq_dispatch_list+0xd16/0xe10 [ 1196.286268][ T4147] blk_mq_flush_plug_list+0x48d/0x570 [ 1196.292185][ T4147] __blk_flush_plug+0x3ed/0x4d0 [ 1196.297592][ T4147] __submit_bio+0x28d/0x580 [ 1196.302633][ T4147] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1196.308813][ T4147] block_read_full_folio+0x599/0x830 [ 1196.314648][ T4147] filemap_read_folio+0x137/0x3b0 [ 1196.320225][ T4147] do_read_cache_folio+0x358/0x590 [ 1196.325891][ T4147] read_part_sector+0xb6/0x2b0 [ 1196.331221][ T4147] adfspart_check_ICS+0xb1/0x960 [ 1196.336703][ T4147] bdev_disk_changed+0x817/0x1770 [ 1196.342275][ T4147] blkdev_get_whole+0x380/0x510 [ 1196.347671][ T4147] bdev_open+0x31e/0xd30 [ 1196.352464][ T4147] blkdev_open+0x470/0x610 [ 1196.357419][ T4147] do_dentry_open+0x785/0x14e0 [ 1196.362726][ T4147] vfs_open+0x3b/0x340 [ 1196.367341][ T4147] path_openat+0x2e08/0x3860 [ 1196.372481][ T4147] do_file_open+0x23e/0x4a0 [ 1196.377549][ T4147] do_sys_openat2+0x113/0x200 [ 1196.382766][ T4147] __x64_sys_openat+0x138/0x170 [ 1196.388171][ T4147] do_syscall_64+0x15f/0xf80 [ 1196.393306][ T4147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.399747][ T4147] [ 1196.399747][ T4147] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1196.406981][ T4147] __mutex_lock+0x1a3/0x1550 [ 1196.412109][ T4147] nbd_queue_rq+0xc6/0x1100 [ 1196.417157][ T4147] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1196.423346][ T4147] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1196.430225][ T4147] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1196.436756][ T4147] blk_mq_run_hw_queue+0x348/0x4f0 [ 1196.442413][ T4147] blk_mq_dispatch_list+0xd16/0xe10 [ 1196.448183][ T4147] blk_mq_flush_plug_list+0x48d/0x570 [ 1196.454110][ T4147] __blk_flush_plug+0x3ed/0x4d0 [ 1196.459513][ T4147] __submit_bio+0x28d/0x580 [ 1196.464559][ T4147] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1196.470754][ T4147] block_read_full_folio+0x599/0x830 [ 1196.476582][ T4147] filemap_read_folio+0x137/0x3b0 [ 1196.482158][ T4147] do_read_cache_folio+0x358/0x590 [ 1196.487815][ T4147] read_part_sector+0xb6/0x2b0 [ 1196.493149][ T4147] adfspart_check_ICS+0xb1/0x960 [ 1196.498639][ T4147] bdev_disk_changed+0x817/0x1770 [ 1196.504218][ T4147] blkdev_get_whole+0x380/0x510 [ 1196.509619][ T4147] bdev_open+0x31e/0xd30 [ 1196.514418][ T4147] blkdev_open+0x470/0x610 [ 1196.519377][ T4147] do_dentry_open+0x785/0x14e0 [ 1196.524690][ T4147] vfs_open+0x3b/0x340 [ 1196.529305][ T4147] path_openat+0x2e08/0x3860 [ 1196.534550][ T4147] do_file_open+0x23e/0x4a0 [ 1196.539606][ T4147] do_sys_openat2+0x113/0x200 [ 1196.544820][ T4147] __x64_sys_openat+0x138/0x170 [ 1196.550234][ T4147] do_syscall_64+0x15f/0xf80 [ 1196.555363][ T4147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.561814][ T4147] [ 1196.561814][ T4147] -> #4 (set->srcu){.+.+}-{0:0}: [ 1196.568971][ T4147] __synchronize_srcu+0xca/0x300 [ 1196.574457][ T4147] elevator_switch+0x1e8/0x7a0 [ 1196.579780][ T4147] elevator_change+0x2cc/0x450 [ 1196.585225][ T4147] elevator_set_default+0x36c/0x430 [ 1196.591022][ T4147] blk_register_queue+0x3e9/0x4e0 [ 1196.596608][ T4147] __add_disk+0x677/0xd50 [ 1196.601479][ T4147] add_disk_fwnode+0xfb/0x480 [ 1196.606692][ T4147] nbd_dev_add+0x72c/0xb50 [ 1196.611651][ T4147] nbd_init+0x168/0x1f0 [ 1196.616437][ T4147] do_one_initcall+0x250/0x870 [ 1196.621741][ T4147] do_initcall_level+0x104/0x190 [ 1196.627227][ T4147] do_initcalls+0x59/0xa0 [ 1196.632110][ T4147] kernel_init_freeable+0x2a6/0x3e0 [ 1196.637857][ T4147] kernel_init+0x1d/0x1d0 [ 1196.642739][ T4147] ret_from_fork+0x514/0xb70 [ 1196.647871][ T4147] ret_from_fork_asm+0x1a/0x30 [ 1196.653268][ T4147] [ 1196.653268][ T4147] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1196.661114][ T4147] __mutex_lock+0x1a3/0x1550 [ 1196.666247][ T4147] elevator_change+0x1b3/0x450 [ 1196.671562][ T4147] elevator_set_none+0xb5/0x140 [ 1196.676957][ T4147] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1196.683301][ T4147] nbd_start_device+0x17f/0xb10 [ 1196.688698][ T4147] nbd_genl_connect+0x165b/0x1cf0 [ 1196.694265][ T4147] genl_family_rcv_msg_doit+0x22a/0x330 [ 1196.700358][ T4147] genl_rcv_msg+0x61c/0x7a0 [ 1196.705404][ T4147] netlink_rcv_skb+0x232/0x4b0 [ 1196.710723][ T4147] genl_rcv+0x28/0x40 [ 1196.715252][ T4147] netlink_unicast+0x75c/0x8e0 [ 1196.720569][ T4147] netlink_sendmsg+0x813/0xb40 [ 1196.725878][ T4147] ____sys_sendmsg+0x972/0x9f0 [ 1196.731190][ T4147] ___sys_sendmsg+0x2a5/0x360 [ 1196.736412][ T4147] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1196.741894][ T4147] do_syscall_64+0x15f/0xf80 [ 1196.747031][ T4147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.753460][ T4147] [ 1196.753460][ T4147] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}: [ 1196.762099][ T4147] blk_alloc_queue+0x546/0x680 [ 1196.767413][ T4147] __blk_mq_alloc_disk+0x197/0x390 [ 1196.773062][ T4147] nbd_dev_add+0x499/0xb50 [ 1196.778015][ T4147] nbd_init+0x168/0x1f0 [ 1196.782712][ T4147] do_one_initcall+0x250/0x870 [ 1196.788031][ T4147] do_initcall_level+0x104/0x190 [ 1196.793522][ T4147] do_initcalls+0x59/0xa0 [ 1196.798414][ T4147] kernel_init_freeable+0x2a6/0x3e0 [ 1196.804162][ T4147] kernel_init+0x1d/0x1d0 [ 1196.809033][ T4147] ret_from_fork+0x514/0xb70 [ 1196.814173][ T4147] ret_from_fork_asm+0x1a/0x30 [ 1196.819476][ T4147] [ 1196.819476][ T4147] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1196.826706][ T4147] fs_reclaim_acquire+0x71/0x100 [ 1196.832194][ T4147] kmem_cache_alloc_noprof+0x40/0x650 [ 1196.838111][ T4147] __kernfs_iattrs+0xdf/0x320 [ 1196.843340][ T4147] kernfs_iop_setattr+0xea/0x3f0 [ 1196.848819][ T4147] notify_change+0xc1a/0xf40 [ 1196.853965][ T4147] do_truncate+0x1c2/0x250 [ 1196.858934][ T4147] path_openat+0x2f89/0x3860 [ 1196.864072][ T4147] do_file_open+0x23e/0x4a0 [ 1196.869133][ T4147] do_sys_openat2+0x113/0x200 [ 1196.874376][ T4147] __x64_sys_openat+0x138/0x170 [ 1196.879777][ T4147] do_syscall_64+0x15f/0xf80 [ 1196.884914][ T4147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.891342][ T4147] [ 1196.891342][ T4147] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1196.899889][ T4147] __lock_acquire+0x15a5/0x2cf0 [ 1196.905284][ T4147] lock_acquire+0x106/0x350 [ 1196.910334][ T4147] down_write+0x96/0x200 [ 1196.915120][ T4147] kernfs_unlink_sibling+0x71/0x180 [ 1196.920867][ T4147] kernfs_rename_ns+0x4a6/0x830 [ 1196.926260][ T4147] sysfs_rename_link_ns+0x16e/0x1b0 [ 1196.932014][ T4147] device_rename+0x110/0x210 [ 1196.937145][ T4147] __dev_change_net_namespace+0x15d3/0x20a0 [ 1196.943582][ T4147] cfg802154_switch_netns+0xbf/0x3d0 [ 1196.949416][ T4147] cfg802154_pernet_exit+0x75/0xe0 [ 1196.955071][ T4147] ops_undo_list+0x49f/0x940 [ 1196.960574][ T4147] cleanup_net+0x56b/0x800 [ 1196.965556][ T4147] process_scheduled_works+0xb5d/0x1860 [ 1196.971639][ T4147] worker_thread+0xa53/0xfc0 [ 1196.976766][ T4147] kthread+0x388/0x470 [ 1196.981378][ T4147] ret_from_fork+0x514/0xb70 [ 1196.986505][ T4147] ret_from_fork_asm+0x1a/0x30 [ 1196.991819][ T4147] [ 1196.991819][ T4147] other info that might help us debug this: [ 1196.991819][ T4147] [ 1197.002055][ T4147] Chain exists of: [ 1197.002055][ T4147] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1197.002055][ T4147] [ 1197.016504][ T4147] Possible unsafe locking scenario: [ 1197.016504][ T4147] [ 1197.023968][ T4147] CPU0 CPU1 [ 1197.029348][ T4147] ---- ---- [ 1197.034725][ T4147] lock(&root->kernfs_rwsem); [ 1197.039510][ T4147] lock(cpuhp_state_mutex); [ 1197.046676][ T4147] lock(&root->kernfs_rwsem); [ 1197.053982][ T4147] lock(&root->kernfs_iattr_rwsem); [ 1197.059295][ T4147] [ 1197.059295][ T4147] *** DEADLOCK *** [ 1197.059295][ T4147] [ 1197.067460][ T4147] 5 locks held by kworker/u8:7/4147: [ 1197.072778][ T4147] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1197.083683][ T4147] #1: ffffc9000201fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1197.094321][ T4147] #2: ffffffff8fdc15e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1197.103667][ T4147] #3: ffffffff8fdd02c0 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x19/0xe0 [ 1197.113275][ T4147] #4: ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0x76/0x830 [ 1197.123327][ T4147] [ 1197.123327][ T4147] stack backtrace: [ 1197.129238][ T4147] CPU: 1 UID: 0 PID: 4147 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1197.129260][ T4147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1197.129273][ T4147] Workqueue: netns cleanup_net [ 1197.129300][ T4147] Call Trace: [ 1197.129310][ T4147] [ 1197.129318][ T4147] dump_stack_lvl+0xe8/0x150 [ 1197.129338][ T4147] print_circular_bug+0x2e1/0x300 [ 1197.129364][ T4147] check_noncircular+0x12e/0x150 [ 1197.129391][ T4147] __lock_acquire+0x15a5/0x2cf0 [ 1197.129414][ T4147] ? __lock_acquire+0x6b5/0x2cf0 [ 1197.129434][ T4147] ? __lock_acquire+0x6b5/0x2cf0 [ 1197.129455][ T4147] ? kernfs_unlink_sibling+0x71/0x180 [ 1197.129482][ T4147] lock_acquire+0x106/0x350 [ 1197.129499][ T4147] ? kernfs_unlink_sibling+0x71/0x180 [ 1197.129533][ T4147] down_write+0x96/0x200 [ 1197.129552][ T4147] ? kernfs_unlink_sibling+0x71/0x180 [ 1197.129579][ T4147] ? __pfx_down_write+0x10/0x10 [ 1197.129597][ T4147] ? kernfs_root+0x1c/0x230 [ 1197.129618][ T4147] ? kernfs_root+0x1c/0x230 [ 1197.129639][ T4147] ? kernfs_root+0x1c/0x230 [ 1197.129661][ T4147] ? kernfs_root+0x1ea/0x230 [ 1197.129683][ T4147] kernfs_unlink_sibling+0x71/0x180 [ 1197.129713][ T4147] kernfs_rename_ns+0x4a6/0x830 [ 1197.129745][ T4147] sysfs_rename_link_ns+0x16e/0x1b0 [ 1197.129771][ T4147] device_rename+0x110/0x210 [ 1197.129795][ T4147] __dev_change_net_namespace+0x15d3/0x20a0 [ 1197.129825][ T4147] ? __pfx___dev_change_net_namespace+0x10/0x10 [ 1197.129851][ T4147] ? __lock_acquire+0x6b5/0x2cf0 [ 1197.129873][ T4147] ? __mutex_trylock_common+0x158/0x260 [ 1197.129899][ T4147] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1197.129924][ T4147] ? rcu_is_watching+0x15/0xb0 [ 1197.129945][ T4147] ? trace_contention_end+0x3d/0x140 [ 1197.129970][ T4147] ? __mutex_lock+0x319/0x1550 [ 1197.129994][ T4147] ? do_raw_spin_unlock+0xf5/0x210 [ 1197.130022][ T4147] ? _raw_spin_unlock+0x28/0x50 [ 1197.130047][ T4147] ? __pfx___mutex_lock+0x10/0x10 [ 1197.130066][ T4147] ? __pfx_netdev_run_todo+0x10/0x10 [ 1197.130085][ T4147] cfg802154_switch_netns+0xbf/0x3d0 [ 1197.130111][ T4147] cfg802154_pernet_exit+0x75/0xe0 [ 1197.130135][ T4147] ops_undo_list+0x49f/0x940 [ 1197.130161][ T4147] ? __pfx_ops_undo_list+0x10/0x10 [ 1197.130187][ T4147] ? idr_destroy+0x218/0x290 [ 1197.130210][ T4147] ? do_raw_spin_unlock+0xf5/0x210 [ 1197.130238][ T4147] cleanup_net+0x56b/0x800 [ 1197.130263][ T4147] ? __pfx_cleanup_net+0x10/0x10 [ 1197.130290][ T4147] ? process_scheduled_works+0xa70/0x1860 [ 1197.130308][ T4147] ? process_scheduled_works+0xa70/0x1860 [ 1197.130326][ T4147] process_scheduled_works+0xb5d/0x1860 [ 1197.130344][ T4147] ? trace_contention_end+0x3b/0x160 [ 1197.130381][ T4147] ? __pfx_process_scheduled_works+0x10/0x10 [ 1197.130402][ T4147] ? assign_work+0x3d5/0x5e0 [ 1197.130421][ T4147] worker_thread+0xa53/0xfc0 [ 1197.130451][ T4147] kthread+0x388/0x470 [ 1197.130474][ T4147] ? __pfx_worker_thread+0x10/0x10 [ 1197.130492][ T4147] ? __pfx_kthread+0x10/0x10 [ 1197.130515][ T4147] ret_from_fork+0x514/0xb70 [ 1197.130535][ T4147] ? __pfx_ret_from_fork+0x10/0x10 [ 1197.130553][ T4147] ? __switch_to+0xc79/0x1410 [ 1197.130580][ T4147] ? __pfx_kthread+0x10/0x10 [ 1197.130603][ T4147] ret_from_fork_asm+0x1a/0x30 [ 1197.130632][ T4147] [ 1197.550911][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10040'. [ 1197.585651][ T4147] hsr_slave_0: left promiscuous mode [ 1197.603344][ T4147] hsr_slave_1: left promiscuous mode [ 1197.631492][ T4147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1197.650757][ T4147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1197.665751][ T4147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1197.685899][ T4147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1197.704482][ T4147] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1197.711513][ T4147] batman_adv: batadv0: Removing interface: ipvlan2 [ 1197.723418][ T4147] veth0_to_team: left promiscuous mode [ 1197.729486][ T4147] veth1_macvtap: left promiscuous mode [ 1197.735322][ T4147] veth0_macvtap: left promiscuous mode [ 1197.741174][ T4147] veth1_vlan: left promiscuous mode [ 1197.748714][ T4147] veth0_vlan: left promiscuous mode [ 1198.014949][ T4147] ` (unregistering): Port device team_slave_1 removed [ 1198.030019][ T4147] ` (unregistering): Port device team_slave_0 removed [ 1198.123555][ T6822] hsr0 speed is unknown, defaulting to 1000 [ 1198.543162][ T4147] IPVS: stop unused estimator thread 0...