last executing test programs: 2m31.631770515s ago: executing program 3 (id=5292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r0, &(0x7f0000000000)="e6", 0x0}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x7c, 0x30, 0xb, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MIN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000e50014000000000000800000"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4008801) 2m31.235986703s ago: executing program 3 (id=5296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000916010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 2m30.911992448s ago: executing program 3 (id=5301): socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc14000000478803", 0xd, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m30.592366081s ago: executing program 3 (id=5305): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r1, @ANYRES32=r0], 0x44}}, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8763d53aa4718861"], 0x0) 2m30.317203169s ago: executing program 3 (id=5309): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newqdisc={0xc4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x1, 0xfffd], [0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xf}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0xc4}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x0) 2m30.194303814s ago: executing program 3 (id=5312): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '\\$,W'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r2 = socket(0x1d, 0x2, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) (async) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x2c, 0x7fff, 0x3, 0x20, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x5}, 0x50) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xc}]}, 0x28}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) r14 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r14, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) (async) write$tun(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="12030800030016000c0045f50028006500000411"], 0x32) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r8, 0xee01}}]}, 0x28}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)=@newsa={0x3c8, 0x10, 0x10, 0x70bd2c, 0x25dfdbfe, {{@in=@remote, @in=@rand_addr=0x64010101, 0x4e23, 0x0, 0x4e24, 0x9, 0xa, 0xa0, 0x20, 0x3b, r3, r5}, {@in=@remote, 0x4d3, 0x3c}, @in6=@mcast1, {0x4, 0xaa, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x0, 0x9}, {0x7fffffff, 0xeba2, 0x0, 0x9}, {0x81, 0xfffffffe, 0x2}, 0x70bd25, 0x3504, 0xa, 0x309dd9e6181521d0, 0x5, 0xa0}, [@tfcpad={0x8}, @policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4e20, 0x7, 0x4e23, 0x9, 0xa, 0x80, 0xa0, 0x0, 0x0, r8}, {0x5, 0xfffffffffffffffa, 0x8, 0x5, 0x9, 0x7fff, 0x3, 0x8}, {0x9, 0xe8ad, 0x7, 0x7}, 0x4, 0x6e6bb2, 0x0, 0x1, 0xae499ac4505f31db}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xb602}, @replay_thresh={0x8, 0xb, 0x5}, @algo_aead={0xba, 0x12, {{'gcm-aes-ce\x00'}, 0x370, 0x60, "5cd741e98c246a0e89c872617f0f0e6bef0a7e966247a7d848673b5487febbba265f131adfe3ff60e0c839ed0b4b01cd70e36f9ec958bd857dd096fd2373b405f07b8b8db2834e34f356cbadd0dc3d1ea841ff318d6849da86273577fe13f51db41366a9b838d89cf5f13ecd1815"}}, @tmpl={0x144, 0x5, [{{@in6=@remote, 0x4d2, 0x3c}, 0x2, @in=@multicast1, 0x3504, 0x2, 0x3, 0x4, 0xc, 0x5, 0x3}, {{@in6=@mcast1, 0x4d6, 0x6c}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7f, 0x5, 0x10000, 0xb}, {{@in=@multicast2, 0x4d5, 0x32}, 0xa, @in6=@empty, 0x3502, 0x5, 0x0, 0x1, 0x8, 0x0, 0xdc}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in=@multicast2, 0x0, 0x5, 0x1, 0xff, 0x80000000, 0x6c98, 0x31ef61a0}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3502, 0x5, 0x2, 0x0, 0x2000000, 0x4, 0x400}]}, @srcaddr={0x14, 0xd, @in6=@loopback}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x80}, 0x4010854) 2m28.093954019s ago: executing program 0 (id=5336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000500)='vegas', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xd543fb158928835a, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x6101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2901, 0x0) close(r5) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local}) write$tun(r4, &(0x7f0000000600)=ANY=[], 0xc2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/4107, 0x100b}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f0000000280)=""/261, 0x105}, {&(0x7f0000002980)=""/4090, 0xffa}, {&(0x7f00000001c0)=""/149, 0x95}], 0x5}, 0x12021) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)=ANY=[@ANYBLOB="280000000b14010000e0ffffffffffff070001"], 0x28}}, 0x0) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x16) 2m27.608930014s ago: executing program 0 (id=5342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000920010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 2m27.352038661s ago: executing program 0 (id=5344): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30000001) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000fcffff203a4098b605be1800000400"/36, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$kcm(r0, 0x0, 0x40040) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x40, 0x1410, 0x300, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20044000) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc14000000478803", 0xd, 0x4, &(0x7f0000000140)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m27.343661437s ago: executing program 0 (id=5345): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2m27.278026189s ago: executing program 0 (id=5346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000a00)={0x14, 0x3c, 0x1, 0x40, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m27.216400779s ago: executing program 0 (id=5348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000005c0), 0x4) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x82, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8b, 0x101, 0x888}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000040)={0x7, 0x10}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d000000f7ffffff070000000500000060080000", @ANYRES32=0x1, @ANYBLOB="5dffff400000000000000000000000000000000025ba76cb9133cca2b86dda39f7350ceab73ff02f45b74ce0065b10107902b01ddf71e2045995d7690ccb7eb9c6edc688706cc039a4db86ed2e3931fa91dd102a77aca7ce41866c8cd244fa1b7af25edd24dd42c1a2fc2c80e53d85f6ab3efef02d6c1aad4c4a4f4f4beca7d8eef027f2443ebd9604d3f2acaeef9187aedcd06ce4dd9b69e9a21ef8eaf7f7dd175d69114a37db0d763958ef432ff9e5d345bd4a3e44fe651254c7963d76a260cdc288b42630111b3486bed2e670d66ceae734191e0ab36a26f114ab81266744ed23331a770cee26a021c7d61ee0e5b5c1a72238090abc9c6fefe05c2e226ea6ef160a1ddc60200c35d5cfeda8c03faa740c5810c33253700b6d2924b36f5b0bb316b9e16ff01d9f9b1258e567a5f3c3b3ee360e24fcc2819c3eff56e46e55ffb6546e0af15df6b045dccaa385efa0b20ef203", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000500"/28], 0x50) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101400, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000680)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000006c0)=0x1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=ANY=[@ANYBLOB="3c80000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9, @ANYBLOB], 0x3c}}, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x6020400) setsockopt(r5, 0x200000, 0xffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) unshare(0x8000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000580)={0x40003005}) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) sendmsg$nl_xfrm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@private2}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {0x0, 0x100000}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa, 0x0, 0x0, 0x0]}}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x164}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'dvmrp0\x00'}) 2m15.092379515s ago: executing program 32 (id=5312): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000700), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '\\$,W'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r2 = socket(0x1d, 0x2, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) (async) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r5}]}, 0x1c}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x2c, 0x7fff, 0x3, 0x20, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x5}, 0x50) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xc}]}, 0x28}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) r14 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r14, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) (async) write$tun(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="12030800030016000c0045f50028006500000411"], 0x32) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r8, 0xee01}}]}, 0x28}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)=@newsa={0x3c8, 0x10, 0x10, 0x70bd2c, 0x25dfdbfe, {{@in=@remote, @in=@rand_addr=0x64010101, 0x4e23, 0x0, 0x4e24, 0x9, 0xa, 0xa0, 0x20, 0x3b, r3, r5}, {@in=@remote, 0x4d3, 0x3c}, @in6=@mcast1, {0x4, 0xaa, 0xfffffffffffffff8, 0x7, 0x0, 0x5, 0x0, 0x9}, {0x7fffffff, 0xeba2, 0x0, 0x9}, {0x81, 0xfffffffe, 0x2}, 0x70bd25, 0x3504, 0xa, 0x309dd9e6181521d0, 0x5, 0xa0}, [@tfcpad={0x8}, @policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4e20, 0x7, 0x4e23, 0x9, 0xa, 0x80, 0xa0, 0x0, 0x0, r8}, {0x5, 0xfffffffffffffffa, 0x8, 0x5, 0x9, 0x7fff, 0x3, 0x8}, {0x9, 0xe8ad, 0x7, 0x7}, 0x4, 0x6e6bb2, 0x0, 0x1, 0xae499ac4505f31db}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xb602}, @replay_thresh={0x8, 0xb, 0x5}, @algo_aead={0xba, 0x12, {{'gcm-aes-ce\x00'}, 0x370, 0x60, "5cd741e98c246a0e89c872617f0f0e6bef0a7e966247a7d848673b5487febbba265f131adfe3ff60e0c839ed0b4b01cd70e36f9ec958bd857dd096fd2373b405f07b8b8db2834e34f356cbadd0dc3d1ea841ff318d6849da86273577fe13f51db41366a9b838d89cf5f13ecd1815"}}, @tmpl={0x144, 0x5, [{{@in6=@remote, 0x4d2, 0x3c}, 0x2, @in=@multicast1, 0x3504, 0x2, 0x3, 0x4, 0xc, 0x5, 0x3}, {{@in6=@mcast1, 0x4d6, 0x6c}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7f, 0x5, 0x10000, 0xb}, {{@in=@multicast2, 0x4d5, 0x32}, 0xa, @in6=@empty, 0x3502, 0x5, 0x0, 0x1, 0x8, 0x0, 0xdc}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in=@multicast2, 0x0, 0x5, 0x1, 0xff, 0x80000000, 0x6c98, 0x31ef61a0}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x3c}, 0x2, @in=@rand_addr=0x64010100, 0x3502, 0x5, 0x2, 0x0, 0x2000000, 0x4, 0x400}]}, @srcaddr={0x14, 0xd, @in6=@loopback}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x80}, 0x4010854) 2m12.150518687s ago: executing program 33 (id=5348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000005c0), 0x4) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x82, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8b, 0x101, 0x888}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f0000000040)={0x7, 0x10}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x334) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d000000f7ffffff070000000500000060080000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000500"/28], 0x50) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101400, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000680)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r4, 0x4004f506, &(0x7f00000006c0)=0x1) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=ANY=[@ANYBLOB="3c80000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9, @ANYBLOB], 0x3c}}, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x6020400) setsockopt(r5, 0x200000, 0xffffffff, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) unshare(0x8000000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000580)={0x40003005}) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) sendmsg$nl_xfrm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in6=@private2}, {@in=@remote, 0x0, 0x6c}, @in6=@mcast2, {}, {}, {0x0, 0x100000}, 0x0, 0x0, 0xa}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0xa, 0x0, 0x0, 0x0]}}, @algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x164}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'dvmrp0\x00'}) 11.985056765s ago: executing program 4 (id=6132): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x4b, 0x0, 0x1}, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x4000010, r1, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00'}, 0x18) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read(r3, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000980)=0xe8) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000ac0)=0x0) socket(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000008240)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100003b00015300000000fbdbdf2501"], 0x114}, {&(0x7f0000000780)={0x1c, 0x29, 0x800, 0x70bd2b, 0x25dfdbfe, "", [@typed={0xa, 0x9e, 0x0, 0x0, @str='\xd8[{*^\x00'}]}, 0x1c}, {&(0x7f00000082c0)={0x21a0, 0x21, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@nested={0x20, 0xdc, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @uid=r4}, @nested={0x4, 0x118}, @typed={0x8, 0xb9, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x41}, @nested={0x4, 0xdc}]}, @nested={0x1020, 0x46, 0x0, 0x1, [@typed={0x8, 0x142, 0x0, 0x0, @uid}, @generic="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", @nested={0x4, 0x149}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0xe7}, @nested={0x4, 0xd}]}, @typed={0x5d, 0x29, 0x0, 0x0, @binary="f7fb33f5e10613a7ef561dd31c85f38bdd9b4668d5f690228e6319e8cec9c0a9720c4b17b93b378131443c59769fd42324b1ad3bda78dac4b7c2e0c5c914df0dfacfc40ee19224ad8f98969aa4e3d6d049f954fbd7e700d07f"}, @generic="5430d0466f0cadbdabc3d31e7499b630a54737958446e2638fdeea7b1090fa725d6b9d4f775c659d48e0710b484c6ea5b4f57a0c0f0bdc038910e9ec79d3e5628ea255f03a264ac2c1a5a66f8c0454fb5cf0dfe3e1e7", @nested={0x1004, 0x37, 0x0, 0x1, [@generic="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"]}, @nested={0xc, 0x67, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @pid}]}, @generic="840a2ff67233ed828c7f33f0b0a43adbc736760ab2460e7f78b354aa7106003b0f5f75c595573de09556cc17fc9f86d6a07ebd782f122723f6b1181e7ace4a504eeecc7e7f2c3e07f1b73aa952f448bdc5dc09ee21945859f924dc7bde233f01fd1b57f3eb260c159e288d8cbbf486f8f419fd3c36dda0dbb7c3ad4182ef5aee537c19fb037661c9e254"]}, 0x21a0}, {&(0x7f0000007ec0)={0x1b8, 0x33, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x1a5, 0xe8, 0x0, 0x1, [@generic, @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@empty}, @generic="52fbf57c697561468ac03c786932d9a3111ecaf07cd23c7e90bf3efdc8c7b8cd8593fba9a2dadb838537cc0acbf6af400099b1251266087de17acb7536c1b8f2572574512c97e4197358c9b59dec17b2d566ea1531771bfbeeef75dc40511a0bd79b8a0066d0db278bd71fdf6956a377ecc42511a6acff4eef1ae25658606bf78884b0bfb3839bfab189278e0878f269ea8f688061", @nested={0x4, 0xae}, @generic="221f1f9837717a1d7502cfd8d68fa72c734a1a49ebf246f215c6e60aa6592b514ff8b060892aa95175ae359e7b12a8b572ffe5c99fd755855d12b597b8e641249132d338da81523f1bfdb88f53f8ba3087242f7400b0", @nested={0x4, 0x96}, @generic="06cddf687579c42f32f01b76647b80d938f879", @generic="315d9a31902372c62c5235679f4a32a364a4a347be17444ba3003c682f7fe872fa2570572b2353ce89f6f848f1c1cc613cd8376696e560027ffe449e6b694c972ee3c55fed59c6cfeab0b492700e28220e009cea7a56d5005244fd3787f3287ef99438696a319868f86ca4ec3bf35975056578a901e90f3e182c368eca99091afc9b4ffa479f77"]}]}, 0x1b8}, {&(0x7f00000080c0)={0x128, 0x10, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x18, 0xe, 0x0, 0x1, [@nested={0x4, 0x3d}, @nested={0x4, 0x6c}, @nested={0x4, 0xa}, @nested={0x4, 0x15e}, @nested={0x4, 0x93}]}, @typed={0x4, 0x11f}, @nested={0xfc, 0x157, 0x0, 0x1, [@nested={0x4, 0xbf}, @typed={0x4, 0x37}, @typed={0xbc, 0x10, 0x0, 0x0, @binary="95239cfe163801777f0ec4f43ec6cc67a0e75d5ab8cdb16643bfbe590a17e26f13991974f81eac6bf594bb1cce857cd1efd5af3e4129c35a5c3ec8d7bea698fe42ef491cc5009f627f3993f008c51308a0ace477cf99fc50765249c75e21ae1731264a62bff4addddcc9d16287b3d41eed9964fe5d125848f3f689cf54640899f520c9a98ea99fd38110fcf9f2301f4a3e82a6733019351576e252f7d16eec7d4c040ed1846c5e0ce00394bd623de2201e47b106e1a680b0"}, @typed={0x2b, 0x111, 0x0, 0x0, @binary="22fef7bc36f3e1cc804dd08fac77f8f4a90cc5175d6f3ea24212513668d400f78d8a7a59e13e77"}, @typed={0x8, 0xd5, 0x0, 0x0, @u32=0xb9}]}]}, 0x128}, {&(0x7f0000008200)={0x20, 0x32, 0xd01, 0x70bd2b, 0x25dfdbff, "", [@typed={0x8, 0x2e, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xcb, 0x0, 0x0, @fd=r1}]}, 0x20}], 0x6, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0xfffffe01, 0x10}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000100000000f00000001000100c0300700", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000010000000d00"/24, @ANYRES32=r1, @ANYBLOB="22cde2433967d81f6738c283"], 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x2, 0x18}, 0xc) r11 = socket$inet_udp(0x2, 0x2, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0xbe, &(0x7f0000000f80)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000b0fffd000000119078ac1e0001e0000001000017c1009c90780100000003000000fdca797c16a778cbd5c03a444dc319838d51c2af0e7bf8cd4540f41d4413b3fb9d523c694c7d69e3106d5c285fc4bf7a662d1634b60e9358bf291754a1f73514d857a0193b0011bee967aaa43d3a793c99dfc9549f5254dc03edd75fb6e5992c489f7bf51ed681bf8344b8c068dd284eb3bd747ec60f852bdbf775ec59036644ec92021d72dd3dc6cd230069"], 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r13, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r13, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000b000000000000000004000018110000", @ANYRES32=r1, @ANYRES32=r6], &(0x7f0000000840)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0xd, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[r2, 0xffffffffffffffff, r6, r7, r8, r9, r10, r14], &(0x7f0000000400)=[{0x1, 0x3, 0x6, 0x4}, {0x3, 0x5, 0x3, 0x9}, {0x0, 0x3, 0xa, 0x3}, {0x5, 0x2, 0x10, 0x9}, {0x0, 0x5, 0xf}, {0x3, 0x3, 0x1, 0x7}], 0x10, 0x10000}, 0x94) 10.710878481s ago: executing program 4 (id=6135): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="10", 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007008b617400140004800800014000000000080002"], 0xa4}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket(0x1a, 0x3, 0xffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x6, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x1, 0x3, 0x0, 0xffffffff}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x170}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000007c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000900)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xea, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_BUCKETS_LOG={0x0, 0x8, 0xf}]}}]}, 0x48}}, 0x20008000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e00)={r1, 0xe0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf, &(0x7f0000000c00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000c40), &(0x7f0000000c80), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000cc0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000ec0)={'erspan0\x00', &(0x7f0000000e40)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0x39, 0x3, {{0xa, 0x4, 0x1, 0x3, 0x28, 0x68, 0x0, 0x9, 0x2, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xef, 0x0, 0x1, [0x9, 0xb, 0x6]}]}}}}}) r17 = socket$inet_tcp(0x2, 0x1, 0x0) r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r18, r19, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x10000, 0x1}}, 0x20) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000015c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f0000000f00)={0x678, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x0, 0x4, 0x3, 0xc}, {0x9, 0x3, 0xff, 0x1}, {0x7, 0x2, 0x8, 0x3}, {0x4, 0x7, 0x4, 0x8}, {0x3, 0xbb, 0x8, 0xffff}, {0x8, 0x4, 0xa, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x3, 0x3, 0x9}, {0xa5, 0x7, 0x0, 0x8e5}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r9}, {0x1fc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1, 0x37, 0x97, 0x3}, {0x8, 0x3, 0x3}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xb25b}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r14}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xdbe}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r19}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x678}, 0x1, 0x0, 0x0, 0xc000}, 0x8000) 9.373237504s ago: executing program 4 (id=6140): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.883340305s ago: executing program 2 (id=6148): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000100)="520000002300010100020600"/41, 0x29) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80, &(0x7f0000003880)=[{&(0x7f00000002c0)="27031c00160016000000001106afacf706e1054000006558", 0x18}, {&(0x7f0000000640)="22ea7e2bb1b280b1718a70a8f814e3ba81f4d19edcce18b75bf5034bb80875257d68b199f247eac81ab52f03e698103d9d05000000000000007017285d0e1b1dabc9ec2d341f383840698a3fb95e9b1aaf2bb8cb0191e7e392db050fa06124f73d1c36daaca9921f207f88516871989276bad26884d4208acc499b17a4d62f2bbb14db3e0007478df45cff3aa28b8e92621be927ca29819dee3285effdab982e387002c3d38fb39d0c01de235b9f10e0ca40f84bf2d57e92fff34cc8c27d81acd4665c91d4d8cb8b843e996c598047b5c3e3572b3a3012ad63fd354f546f", 0xde}], 0x2}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000002540)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @loopback}, 0x1, 0x1, 0x0, 0x3}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="c1852f5f206b4dfaff0d0619a74586cade5c0fec42fe99c25ccfc66170dd7f4f124cf8ceae3c7bdf693a5dc576a90890f8b04adc29c4381dc4", 0x39}], 0x1, &(0x7f0000001180)=[{0x48, 0x101, 0x2, "9e6e49a41df433b217ac9094e48bebe0915d0a9a34b729eb657bb14ff133b16cb9855cdf408ee517849ba32aa5063411c0d4eef450"}, {0xc8, 0x107, 0x5, "a89da1a7fa259b2105e67289ff0163b6303b2d8665861ac531b761d5588f2e41105161e3209083e2ebb35bd4281b0e809af0be4fb0e4f9976b87d3b314fe0c0f5e1ee2f1820fb86fc4fbc36e61d28f93a37b40f44adb37d88a888dac30db992b46b18f0ca4edc6226a76e07db229057b63cbf9b15daed448a04e14b9cc3b5072cb683f1b9676dc6b793d14148b76689efc367f6486bab93fe9e1a8df473b4a78ec7e4de0ac01fe262282ed756ffe7db6a0"}, {0xf8, 0x113, 0x3, "0f4ed4f3ae9873bf5700c60775b12a70571dbb963d43cd7811b4a11f90d2813b076272c4c82c1e537479bce83d8ccfbe65c52e73034bfe467a359d4173a5c823a65cbc0e86fd308faed9b10f24edb4c40449631b72327fb5060112ca197892999e5503be28c58f827bed1cfc9f8e4d0a9312d1961322024bf87daad4e89cf9809b0d4c4396d64f471ad67cdfde66dd8d79f4b83e54f97becef58809a487aac00c83d94975a2d883f043d559748b94d469df9cbd700f37ed9c25b93027f9b9232ddfad78c453a5d7b4f059f630e719a1f6fc4fbccdcc9f2b3025199926ec62b1e47888a2f292045"}, {0x78, 0x112, 0xfe0e, "8de68ac91e3387442a2d24557b63cb0e5a9de2c65215c4ea08c1814005608127b34cd246597877685deaecf6867ddc028b3dcc8617cd4865169d5f97174eb4c361ee7b223ada2dc5bcdbe20a5d93dcaf7e2a6781d7fa13ea7c35c1d3f138e5d2bf1af5eb"}, {0x60, 0x118, 0x71, "11a0c85923f6457d3124222d83e0ee9fb9239a1cb0a446e8050afe5a85458303cca85e2b390c8fec6d389cab4113805557ab3d3c6b27257df72256fd689e6ae6f29b22e614f4a1a02eed35ffcaa14bc7"}, {0xb0, 0x114, 0x10, "2d270de7525561f953de75ed32f7675af808582736f9ac2b33ff37ce95454e336dd00a2bfaace435110a09576a89997f1a171dd3a460391d46a645a7d5d8830e53f2d69b151cf32eb6e555f1ba0aaad67f80de2fda544e4074265d64381c7a4e7c55d34c8ff36869bd36e3f1a671ff776cee1cd8380aa25240d10d3247bf7ca7d261c7a141aecf272439004f47aa515108da4a7c4fb8774456a800ea7364"}, {0x1010, 0x115, 0x2, "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"}], 0x13a0}, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b8000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$llc_int(r1, 0x10c, 0x6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r3, &(0x7f0000000100)="520000002300010100020600"/41, 0x29) (async) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80, &(0x7f0000003880)=[{&(0x7f00000002c0)="27031c00160016000000001106afacf706e1054000006558", 0x18}, {&(0x7f0000000640)="22ea7e2bb1b280b1718a70a8f814e3ba81f4d19edcce18b75bf5034bb80875257d68b199f247eac81ab52f03e698103d9d05000000000000007017285d0e1b1dabc9ec2d341f383840698a3fb95e9b1aaf2bb8cb0191e7e392db050fa06124f73d1c36daaca9921f207f88516871989276bad26884d4208acc499b17a4d62f2bbb14db3e0007478df45cff3aa28b8e92621be927ca29819dee3285effdab982e387002c3d38fb39d0c01de235b9f10e0ca40f84bf2d57e92fff34cc8c27d81acd4665c91d4d8cb8b843e996c598047b5c3e3572b3a3012ad63fd354f546f", 0xde}], 0x2}, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) sendmsg$kcm(r2, &(0x7f0000002540)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @loopback}, 0x1, 0x1, 0x0, 0x3}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="c1852f5f206b4dfaff0d0619a74586cade5c0fec42fe99c25ccfc66170dd7f4f124cf8ceae3c7bdf693a5dc576a90890f8b04adc29c4381dc4", 0x39}], 0x1, &(0x7f0000001180)=[{0x48, 0x101, 0x2, "9e6e49a41df433b217ac9094e48bebe0915d0a9a34b729eb657bb14ff133b16cb9855cdf408ee517849ba32aa5063411c0d4eef450"}, {0xc8, 0x107, 0x5, "a89da1a7fa259b2105e67289ff0163b6303b2d8665861ac531b761d5588f2e41105161e3209083e2ebb35bd4281b0e809af0be4fb0e4f9976b87d3b314fe0c0f5e1ee2f1820fb86fc4fbc36e61d28f93a37b40f44adb37d88a888dac30db992b46b18f0ca4edc6226a76e07db229057b63cbf9b15daed448a04e14b9cc3b5072cb683f1b9676dc6b793d14148b76689efc367f6486bab93fe9e1a8df473b4a78ec7e4de0ac01fe262282ed756ffe7db6a0"}, {0xf8, 0x113, 0x3, "0f4ed4f3ae9873bf5700c60775b12a70571dbb963d43cd7811b4a11f90d2813b076272c4c82c1e537479bce83d8ccfbe65c52e73034bfe467a359d4173a5c823a65cbc0e86fd308faed9b10f24edb4c40449631b72327fb5060112ca197892999e5503be28c58f827bed1cfc9f8e4d0a9312d1961322024bf87daad4e89cf9809b0d4c4396d64f471ad67cdfde66dd8d79f4b83e54f97becef58809a487aac00c83d94975a2d883f043d559748b94d469df9cbd700f37ed9c25b93027f9b9232ddfad78c453a5d7b4f059f630e719a1f6fc4fbccdcc9f2b3025199926ec62b1e47888a2f292045"}, {0x78, 0x112, 0xfe0e, "8de68ac91e3387442a2d24557b63cb0e5a9de2c65215c4ea08c1814005608127b34cd246597877685deaecf6867ddc028b3dcc8617cd4865169d5f97174eb4c361ee7b223ada2dc5bcdbe20a5d93dcaf7e2a6781d7fa13ea7c35c1d3f138e5d2bf1af5eb"}, {0x60, 0x118, 0x71, "11a0c85923f6457d3124222d83e0ee9fb9239a1cb0a446e8050afe5a85458303cca85e2b390c8fec6d389cab4113805557ab3d3c6b27257df72256fd689e6ae6f29b22e614f4a1a02eed35ffcaa14bc7"}, {0xb0, 0x114, 0x10, "2d270de7525561f953de75ed32f7675af808582736f9ac2b33ff37ce95454e336dd00a2bfaace435110a09576a89997f1a171dd3a460391d46a645a7d5d8830e53f2d69b151cf32eb6e555f1ba0aaad67f80de2fda544e4074265d64381c7a4e7c55d34c8ff36869bd36e3f1a671ff776cee1cd8380aa25240d10d3247bf7ca7d261c7a141aecf272439004f47aa515108da4a7c4fb8774456a800ea7364"}, {0x1010, 0x115, 0x2, "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"}], 0x13a0}, 0x1) (async) 6.707841202s ago: executing program 6 (id=6150): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000002300090025bd7000ffd3df2501000000080001007f00000108000b"], 0x24}, 0x1, 0x0, 0x0, 0x24000811}, 0x8410) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x6f, 0x30, 0x2e, 0x5f, 0x30, 0x2e]}}, 0x0, 0x20}, 0x28) 6.614191104s ago: executing program 1 (id=6151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x72}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (fail_nth: 11) 6.353702256s ago: executing program 5 (id=6152): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x20000000) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f00000005c0)={'nat\x00', 0x0, [0x6, 0x2, 0x5, 0x6, 0xdd5]}, &(0x7f00000004c0)=0x54) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="a2aaaaaaaaaaaaaaaaaaaaaa86dd60e0ffac0014202922319046372c00e4a5517f000000000000000000aace", @ANYRES8=r0, @ANYRES32=0x41424344, @ANYRES16=r0], 0x0) close(r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES32=r4, @ANYBLOB="010025bd7800fcdbfe254193e00008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001ac0)=ANY=[@ANYRES64=r6, @ANYRES8=r6, @ANYRESOCT=r6, @ANYRESHEX=r7, @ANYRES32=r4, @ANYRES16=r3], 0x88}}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r9, 0x8921, &(0x7f00000002c0)={'veth0_vlan\x00'}) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r9], 0xe8}}, 0x4010) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbc6bb00000000000086dd000000000000000000000000bbff020000000000000000000000000001860090788c00"/70], 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r12, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r12, &(0x7f0000000340)="0a000300010000", 0x7) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x25, &(0x7f0000000300)=0x10, 0x4) recvmmsg(r12, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x200005}], 0x400000000000082, 0x40010080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r9, @ANYRES32=r10, @ANYBLOB="eaa5000000008d9be5f922ad78a53c2bb400000000000000000000000000008a575eeb78ceddd71bbd889a5cd726d327dc49db6cc05414ea8baea9773ccc2412bf9603eccb90a203306e6718a5b36babae4f74b56888cd5d3f2795cb3f58091387ea85a0b9eb67c717feebf0324db2ebe9eca11fb5125d9ead28b76a3ff56ab5845358854f9fe90acc735fd5e429305d626a2b0bed498fc025e5023116c0205144abf57dfd60210ca130bfb46e0f6ee0457ee7eebd27ac0056f8bbf65bdeb7", @ANYRES32=r11, @ANYBLOB="7169aa9d93983f712cb4e4c897917dfb9836408ff580be6307fc46fb54cdeb1fb4a469755c68501f3f52c47183aff664ebdd89df966d2864fb12d3793eb29cbd61bed680440b9ce9a671ba3c92f0d1", @ANYRESHEX=r7], 0x50) 6.120781443s ago: executing program 6 (id=6153): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8937, &(0x7f00000000c0)={'dummy0\x00', 0x10001}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000000ca00000003"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000020018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000a702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x25}, 0x94) 5.731795969s ago: executing program 1 (id=6154): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, &(0x7f0000000100), {[{{@ip={@broadcast, @broadcast, 0x1ea6c06764fddde, 0xffffff00, 'wlan1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x73, 0x2, 0x20}, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x17}}, @common=@addrtype={{0x30}, {0xe10, 0x141, 0x1, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x7, 0x1, 0x4, 0x7, 0x2, 0x2], 0x4, 0x1}, {0x3, [0x2, 0x4, 0x4, 0x4, 0x1, 0x4], 0x4, 0x2}}}}, {{@ip={@multicast2, @remote, 0x0, 0xffffff00, 'veth1_to_batadv\x00', 'ip6gre0\x00', {0x1fe}, {}, 0x31, 0x3, 0x4}, 0x0, 0xd8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x1, 0x0, 0x1, 0x8], 0x4}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0x85a3, 0xb, [0x17, 0x9, 0xe, 0x2a, 0x26, 0x13, 0xa, 0x16, 0x15, 0x3e, 0x0, 0x33, 0x0, 0xb, 0x7, 0x28], 0x1, 0x1, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x1, 'netpci0\x00', {}, 0xe000}) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000005f0005"], 0x20}}, 0x0) 5.593468348s ago: executing program 5 (id=6155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000002800000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000001ffffffb702000008000000b7030000feffffff850000009b00000095", @ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000100)=0x10, 0x100000) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x4d, 0x3, 0x3, 0x7}, 0x8) 5.472997579s ago: executing program 2 (id=6156): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2716, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write(r2, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r2, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0xe88}, 0x8}], 0x1, 0x10122, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) epoll_create1(0x80000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 5.2868712s ago: executing program 6 (id=6157): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00a2"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4.946193497s ago: executing program 1 (id=6158): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000a0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYBLOB="51de228763b5f061e0d6d25e503c73ff8050c759cef6ce9b1b74ceb4", @ANYBLOB="00000000000000005c001a8006000000010000005000058024000180080001000100000008000200030000000800030000ffff0008000400", @ANYRES64=r0, @ANYRES16=r1], 0x7c}}, 0x60) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYBLOB="51de228763b5f061e0d6d25e503c73ff8050c759cef6ce9b1b74ceb4", @ANYBLOB="00000000000000005c001a8006000000010000005000058024000180080001000100000008000200030000000800030000ffff0008000400", @ANYRES64=r0, @ANYRES16=r1], 0x7c}}, 0x60) r3 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b100000200000000000000", @ANYRES32, @ANYBLOB="000000000000d1ffffffffffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b100000200000000000000", @ANYRES32, @ANYBLOB="000000000000d1ffffffffffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r5, 0x0, &(0x7f0000001780)=""/4096}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000000)=[0x8, 0x9]) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4e6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0xde, &(0x7f0000000440)=""/222, 0x41000, 0x7d, '\x00', r6, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r5, r4], 0x0, 0x10, 0x7ff}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@ipv6_newroute={0x6c, 0x18, 0x300, 0x70bd2a, 0x25dfdbfb, {0xa, 0x10, 0x14, 0x6, 0xfd, 0x1, 0x0, 0x5, 0x100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8, 0x1, r8}}}, @RTA_MARK={0x8, 0x10, 0xe0}, @RTA_IIF={0x8, 0x3, r6}, @RTA_PRIORITY={0x8, 0x6, 0xfffffffb}, @RTA_PREF={0x5, 0x14, 0x8}, @RTA_EXPIRES={0x8, 0x17, 0x90c}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_PREF={0x5, 0x14, 0xff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) 4.711305138s ago: executing program 4 (id=6159): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0xc3ff, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4.709527677s ago: executing program 5 (id=6160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x44) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x3a, &(0x7f0000000880)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "00001e", 0x4, 0x2b, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], "4ede8481"}}}}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x54040, &(0x7f00000001c0)={0x11, 0xf8, r5, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc1) sendto$packet(r7, &(0x7f0000000240)="2a3510be7a53230884a0cdc3ada5635aa4a34fef3b5b32bee5d798f3f307350526772b04bdaf649e8327c1dff09d87953aa96bc849c4c8988ec835e9ea00d55b993f7af1f37abd4cb26aeb5992225f2eae261dae4c0ba034120a50e7b1dc123572bafbcd50bb7573187218dd0b8320ca0f2a35d17a01cb5beab31f5d911d6b8e240ba679221f16a3", 0x88, 0x4000000, &(0x7f0000000300)={0x11, 0xc, r5, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) 3.469025883s ago: executing program 2 (id=6161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r2], 0x30}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000001c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x9d, 0x0, &(0x7f0000000300)=""/157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000ffe500020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 3.436462764s ago: executing program 1 (id=6162): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = accept4(r0, &(0x7f0000000080)=@sco={0x1f, @none}, &(0x7f0000000100)=0x80, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f1, &(0x7f00000017c0)={'tunl0\x00', &(0x7f0000001700)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xffff, 0x0, 0x0, 0x0, @rand_addr, @multicast1}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x100000000000030a, 0x0, 0x0, 0x80}, 0x24000000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0xf503, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@generic={0x1, 0x8ac7}) sendmsg$key(r5, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x12, {0xa}}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000240)={0x0, 0x2d, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_FLAGS={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe4}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r12 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r12, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000240)=0xc) bind$rxrpc(r1, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0xb85400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, 0x24) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x8}}) 3.259799067s ago: executing program 6 (id=6163): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xe99f, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x61) write(r1, &(0x7f0000000200)="89", 0xffe3) socket$netlink(0x10, 0x3, 0x8000000004) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x8b, &(0x7f0000000240)=""/139, 0x0, 0x1d}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x20000) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r3, 0x0) writev(r0, &(0x7f00000000c0), 0x0) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0xe99f, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x61) (async) write(r1, &(0x7f0000000200)="89", 0xffe3) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) unshare(0x22020600) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x8b, &(0x7f0000000240)=""/139, 0x0, 0x1d}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) unshare(0x20000) (async) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r3, 0x0) (async) writev(r0, &(0x7f00000000c0), 0x0) (async) 3.030240849s ago: executing program 4 (id=6164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x72}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (fail_nth: 12) 2.213949986s ago: executing program 5 (id=6165): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000001c0)="c2", 0x1, 0x4050, &(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000200), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c00010029bd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="8000ff0a0a000200aa"], 0x30}, 0x1, 0x0, 0x0, 0x40440c4}, 0x8000) 1.136545258s ago: executing program 6 (id=6166): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendto$packet(r0, &(0x7f0000000640)="01", 0x54, 0x4004855, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x8, 0x6, @random="842c4c45bc33"}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.067893611s ago: executing program 2 (id=6167): syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x6, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @empty=0xfff5, @multicast2}, "59a7b1b4c805d3f7"}}}}}, 0x0) 1.067235156s ago: executing program 5 (id=6168): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r7}, &(0x7f0000000380), &(0x7f0000000440)=r5}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1e, 0x41, 0x4, 0x3, 0x100, 0x1, 0x786d580, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0x5854, 0x2, 0x9, 0x20000, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x50) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r12}, &(0x7f00000004c0), &(0x7f0000000500)=r13}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r12}, &(0x7f0000000200), &(0x7f00000003c0)=r13}, 0x20) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00'}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x26, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0x7, 0x3, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x3, 0x0, 0x3, 0x5, 0x40, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x8000, 0x57, &(0x7f00000003c0)=""/87, 0x40f00, 0x2, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, 0x0, 0xa, &(0x7f0000000680)=[0xffffffffffffffff, 0x1, r10, r11, r12, r14], &(0x7f00000006c0)=[{0x3, 0x1, 0x1, 0x5}, {0x2, 0x3, 0xa, 0x3}, {0x0, 0x1, 0x5, 0x5}, {0x5, 0x5, 0x9, 0x3}, {0x0, 0x2, 0xd, 0x8}, {0x1, 0x5, 0x0, 0x3}, {0x1, 0x2, 0xa, 0x6}, {0x3, 0x5, 0x6, 0x8}, {0x1, 0x2, 0x7, 0x7}, {0x0, 0x3, 0x9, 0xb}], 0x10, 0x80}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x800c090}, 0x40000) 1.030797797s ago: executing program 1 (id=6169): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x5}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) 960.09831ms ago: executing program 4 (id=6170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 759.886753ms ago: executing program 2 (id=6171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x180}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x72}, @NFTA_HASH_MODULUS={0x8}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 663.724224ms ago: executing program 6 (id=6172): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x4c, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x364}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) socket$key(0xf, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0xe38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 249.103497ms ago: executing program 1 (id=6173): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000240012800b0001006272696467650000140002800500070006000000050029000100000008000a00a2"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 21.964989ms ago: executing program 2 (id=6174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0xfeff, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 0s ago: executing program 5 (id=6175): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) sendmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="f109", 0x2}], 0x1, 0x0, 0x0, 0x10}, 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) close(r2) r3 = socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pread64(r5, 0x0, 0x0, 0xcd32) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x4c}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/222, 0xde}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}, 0x40010042) kernel console output (not intermixed with test programs): 691390][T23812] __x64_sys_sendmsg+0x1b1/0x290 [ 878.691425][T23812] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 878.691481][T23812] do_syscall_64+0x166/0x520 [ 878.691509][T23812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.691533][T23812] ? clear_bhb_loop+0x70/0xc0 [ 878.691562][T23812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.691586][T23812] RIP: 0033:0x7f3ed1b9e159 [ 878.691607][T23812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.691627][T23812] RSP: 002b:00007f3ed2996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 878.691653][T23812] RAX: ffffffffffffffda RBX: 00007f3ed1e25fa0 RCX: 00007f3ed1b9e159 [ 878.691670][T23812] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 878.691686][T23812] RBP: 00007f3ed2996090 R08: 0000000000000000 R09: 0000000000000000 [ 878.691701][T23812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 878.691715][T23812] R13: 00007f3ed1e26038 R14: 00007f3ed1e25fa0 R15: 00007ffd2166e428 [ 878.691753][T23812] [ 879.238427][T23814] net_ratelimit: 23 callbacks suppressed [ 879.238480][T23814] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 879.505184][T23816] netlink: 'syz.0.4909': attribute type 21 has an invalid length. [ 879.505209][T23816] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4909'. [ 879.553351][T23806] netlink: 'syz.0.4909': attribute type 21 has an invalid length. [ 879.553374][T23806] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4909'. [ 879.643254][T23818] openvswitch: netlink: VLAN attribute unexpected. [ 880.451276][T23832] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 881.751820][T23849] netlink: 'syz.2.4922': attribute type 17 has an invalid length. [ 881.751849][T23849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4922'. [ 881.751879][T23849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4922'. [ 885.372552][T23816] netlink: 'syz.0.4909': attribute type 4 has an invalid length. [ 885.372581][T23816] netlink: 'syz.0.4909': attribute type 5 has an invalid length. [ 885.372597][T23816] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4909'. [ 885.403784][T23806] netlink: 'syz.0.4909': attribute type 4 has an invalid length. [ 885.403817][T23806] netlink: 'syz.0.4909': attribute type 5 has an invalid length. [ 885.403833][T23806] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4909'. [ 885.429620][T10274] bond12: (slave bridge0): failed to get link speed/duplex [ 885.813125][T23849] gretap0: entered promiscuous mode [ 885.916446][T23849] gretap0: left promiscuous mode [ 886.021151][T23852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4923'. [ 886.046356][ T37] bond12: (slave bridge0): failed to get link speed/duplex [ 886.173314][ T7306] bond12: (slave bridge0): failed to get link speed/duplex [ 886.245139][T23857] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 886.287912][ T7306] bond12: (slave bridge0): failed to get link speed/duplex [ 886.352737][T23853] netlink: 'syz.1.4924': attribute type 10 has an invalid length. [ 886.377333][T23854] netlink: 'syz.1.4924': attribute type 10 has an invalid length. [ 886.543281][T23853] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.631689][T23853] bond0: (slave team0): Enslaving as an active interface with an up link [ 886.667057][T23862] openvswitch: netlink: Duplicate or invalid key (type 0). [ 886.767519][ T50] bond12: (slave bridge0): failed to get link speed/duplex [ 886.878025][T10282] bond12: (slave bridge0): failed to get link speed/duplex [ 886.914793][T23867] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 886.916429][T23864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4928'. [ 886.916452][T23864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4928'. [ 887.223136][T23864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4928'. [ 887.223203][T23864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4928'. [ 887.705562][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.705620][ T50] bond12: (slave bridge0): failed to get link speed/duplex [ 887.705653][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.705688][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.705723][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.821278][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 888.165734][T23881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4934'. [ 888.233881][T23890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4934'. [ 888.363279][T23895] FAULT_INJECTION: forcing a failure. [ 888.363279][T23895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.363317][T23895] CPU: 0 UID: 0 PID: 23895 Comm: syz.4.4937 Not tainted syzkaller #0 PREEMPT(full) [ 888.363343][T23895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 888.363358][T23895] Call Trace: [ 888.363368][T23895] [ 888.363377][T23895] dump_stack_lvl+0xe8/0x150 [ 888.363417][T23895] should_fail_ex+0x410/0x560 [ 888.363454][T23895] _copy_from_user+0x2d/0xb0 [ 888.363485][T23895] ___sys_sendmsg+0x1c6/0x360 [ 888.363516][T23895] ? __lock_acquire+0x747/0x2de0 [ 888.363552][T23895] ? __pfx____sys_sendmsg+0x10/0x10 [ 888.363621][T23895] ? __fget_files+0x2a/0x420 [ 888.363653][T23895] ? __fget_files+0x3a2/0x420 [ 888.363694][T23895] __x64_sys_sendmsg+0x1b1/0x290 [ 888.363729][T23895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 888.363784][T23895] do_syscall_64+0x166/0x520 [ 888.363813][T23895] ? trace_irq_disable+0x3b/0x140 [ 888.363856][T23895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.363881][T23895] ? clear_bhb_loop+0x70/0xc0 [ 888.363911][T23895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.363935][T23895] RIP: 0033:0x7f3ed1b9e159 [ 888.363958][T23895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.363978][T23895] RSP: 002b:00007f3ed2996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.364003][T23895] RAX: ffffffffffffffda RBX: 00007f3ed1e25fa0 RCX: 00007f3ed1b9e159 [ 888.364021][T23895] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 888.364037][T23895] RBP: 00007f3ed2996090 R08: 0000000000000000 R09: 0000000000000000 [ 888.364053][T23895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.364067][T23895] R13: 00007f3ed1e26038 R14: 00007f3ed1e25fa0 R15: 00007ffd2166e428 [ 888.364105][T23895] [ 888.760929][T23881] 8021q: adding VLAN 0 to HW filter on device bond11 [ 889.118053][T23903] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 889.121153][T23891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4936'. [ 890.471401][T23909] tipc: Started in network mode [ 890.471422][T23909] tipc: Node identity , cluster identity 4711 [ 890.471439][T23909] tipc: Failed to obtain node identity [ 890.471466][T23909] tipc: Enabling of bearer rejected, failed to enable media [ 890.609727][T23931] __nla_validate_parse: 1 callbacks suppressed [ 890.609750][T23931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4947'. [ 891.153192][T23917] bridge0: entered promiscuous mode [ 891.169784][T10274] net_ratelimit: 6 callbacks suppressed [ 891.169841][T10274] bond12: (slave bridge0): failed to get link speed/duplex [ 891.279072][T23939] mac80211_hwsim hwsim33 syzkaller0: entered promiscuous mode [ 891.279345][T23939] mac80211_hwsim hwsim33 syzkaller0: entered allmulticast mode [ 891.289900][ T7302] bond12: (slave bridge0): failed to get link speed/duplex [ 891.412000][ T7302] bond12: (slave bridge0): failed to get link speed/duplex [ 891.516721][ T7302] bond12: (slave bridge0): failed to get link speed/duplex [ 891.624727][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 891.739487][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 891.845030][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 892.041755][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 892.147033][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 892.258183][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 892.375720][T23957] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 893.055934][T23964] pim6reg: entered allmulticast mode [ 893.192833][T23964] pim6reg: left allmulticast mode [ 893.567149][T23978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4959'. [ 894.605232][T23991] tipc: Failed to remove unknown binding: 66,1,1/0:1448150442/1448150444 [ 894.843103][T24000] FAULT_INJECTION: forcing a failure. [ 894.843103][T24000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.843138][T24000] CPU: 0 UID: 0 PID: 24000 Comm: syz.2.4965 Not tainted syzkaller #0 PREEMPT(full) [ 894.843161][T24000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 894.843173][T24000] Call Trace: [ 894.843180][T24000] [ 894.843201][T24000] dump_stack_lvl+0xe8/0x150 [ 894.843232][T24000] should_fail_ex+0x410/0x560 [ 894.843256][T24000] _copy_from_iter+0x1d3/0x1660 [ 894.843277][T24000] ? __alloc_skb+0x27a/0x7a0 [ 894.843311][T24000] ? __alloc_skb+0x27a/0x7a0 [ 894.843332][T24000] ? __alloc_skb+0x27a/0x7a0 [ 894.843352][T24000] ? __pfx__copy_from_iter+0x10/0x10 [ 894.843369][T24000] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 894.843396][T24000] ? __alloc_skb+0x27a/0x7a0 [ 894.843415][T24000] ? __alloc_skb+0x27a/0x7a0 [ 894.843440][T24000] ? netlink_sendmsg+0x650/0xb40 [ 894.843467][T24000] ? skb_put+0x112/0x210 [ 894.843498][T24000] netlink_sendmsg+0x6c0/0xb40 [ 894.843534][T24000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.843566][T24000] ? apparmor_socket_sendmsg+0x98/0x360 [ 894.843587][T24000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 894.843611][T24000] sock_sendmsg_nosec+0x13a/0x180 [ 894.843631][T24000] ____sys_sendmsg+0x54e/0x850 [ 894.843661][T24000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 894.843694][T24000] ? import_iovec+0x73/0xa0 [ 894.843724][T24000] ___sys_sendmsg+0x2a5/0x360 [ 894.843751][T24000] ? __lock_acquire+0x747/0x2de0 [ 894.843779][T24000] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.843840][T24000] ? __fget_files+0x2a/0x420 [ 894.843869][T24000] ? __fget_files+0x3a2/0x420 [ 894.843907][T24000] __x64_sys_sendmsg+0x1b1/0x290 [ 894.843939][T24000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 894.843988][T24000] do_syscall_64+0x166/0x520 [ 894.844015][T24000] ? trace_irq_disable+0x3b/0x140 [ 894.844037][T24000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.844059][T24000] ? clear_bhb_loop+0x70/0xc0 [ 894.844084][T24000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.844105][T24000] RIP: 0033:0x7f057599e159 [ 894.844126][T24000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.844145][T24000] RSP: 002b:00007f0576796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 894.844167][T24000] RAX: ffffffffffffffda RBX: 00007f0575c25fa0 RCX: 00007f057599e159 [ 894.844188][T24000] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 894.844203][T24000] RBP: 00007f0576796090 R08: 0000000000000000 R09: 0000000000000000 [ 894.844217][T24000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 894.844230][T24000] R13: 00007f0575c26038 R14: 00007f0575c25fa0 R15: 00007ffd6e69f0a8 [ 894.844263][T24000] [ 895.162919][T23994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4963'. [ 895.687832][T24011] netlink: 'syz.3.4966': attribute type 6 has an invalid length. [ 896.349665][ T50] net_ratelimit: 23 callbacks suppressed [ 896.349726][ T50] bond12: (slave bridge0): failed to get link speed/duplex [ 896.462001][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 896.564922][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 896.734381][ T7302] bond12: (slave bridge0): failed to get link speed/duplex [ 896.846601][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 896.955839][ T7306] bond12: (slave bridge0): failed to get link speed/duplex [ 897.067440][T10274] bond12: (slave bridge0): failed to get link speed/duplex [ 897.196803][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 897.261537][T24033] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 897.308073][ T7306] bond12: (slave bridge0): failed to get link speed/duplex [ 900.790318][T24113] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20002 [ 900.799743][T24112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4992'. [ 900.885766][T24112] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4992'. [ 901.528477][T24112] veth3: entered allmulticast mode [ 901.883243][ T7302] net_ratelimit: 21 callbacks suppressed [ 901.883305][ T7302] bond12: (slave bridge0): failed to get link speed/duplex [ 901.998079][ T7302] bond12: (slave bridge0): failed to get link speed/duplex [ 902.109938][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 902.216677][ T7306] bond12: (slave bridge0): failed to get link speed/duplex [ 902.334122][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 902.437653][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4998'. [ 903.216410][T24156] bond12: (slave bridge0): failed to get link speed/duplex [ 903.986149][T24160] bond12: (slave bridge0): failed to get link speed/duplex [ 904.013613][T24148] veth0: entered promiscuous mode [ 904.023158][T24152] veth0: left promiscuous mode [ 904.371941][T24160] bond12: (slave bridge0): failed to get link speed/duplex [ 904.475977][T24167] bond12: (slave bridge0): failed to get link speed/duplex [ 904.588247][T24164] bond12: (slave bridge0): failed to get link speed/duplex [ 905.108395][T24200] tipc: Started in network mode [ 905.108490][T24200] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 905.108885][T24200] tipc: Enabled bearer , priority 0 [ 906.096730][T24214] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5012'. [ 906.119014][T24217] FAULT_INJECTION: forcing a failure. [ 906.119014][T24217] name failslab, interval 1, probability 0, space 0, times 0 [ 906.119139][T24217] CPU: 0 UID: 0 PID: 24217 Comm: syz.4.5013 Not tainted syzkaller #0 PREEMPT(full) [ 906.119166][T24217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 906.119180][T24217] Call Trace: [ 906.119197][T24217] [ 906.119208][T24217] dump_stack_lvl+0xe8/0x150 [ 906.119246][T24217] should_fail_ex+0x410/0x560 [ 906.119278][T24217] should_failslab+0xa8/0x100 [ 906.119309][T24217] __kmalloc_cache_noprof+0xa3/0x600 [ 906.119333][T24217] ? __raw_spin_lock_init+0x45/0x100 [ 906.119362][T24217] ? ovs_flow_cmd_new+0x317/0xea0 [ 906.119387][T24217] ? ovs_flow_cmd_new+0x317/0xea0 [ 906.119420][T24217] ovs_flow_cmd_new+0x317/0xea0 [ 906.119450][T24217] ? __kasan_kmalloc+0x93/0xb0 [ 906.119480][T24217] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 906.119560][T24217] ? __kmalloc_noprof+0x38c/0x720 [ 906.119586][T24217] ? __nla_parse+0x40/0x60 [ 906.119617][T24217] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 906.119643][T24217] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 906.119677][T24217] genl_family_rcv_msg_doit+0x233/0x340 [ 906.119710][T24217] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 906.119747][T24217] ? bpf_lsm_capable+0x9/0x20 [ 906.119767][T24217] ? security_capable+0x7e/0x2c0 [ 906.119798][T24217] genl_rcv_msg+0x614/0x7a0 [ 906.119829][T24217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 906.119851][T24217] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 906.119893][T24217] netlink_rcv_skb+0x226/0x4a0 [ 906.119929][T24217] ? __pfx_genl_rcv_msg+0x10/0x10 [ 906.119957][T24217] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 906.120011][T24217] ? down_read+0x2be/0x330 [ 906.120046][T24217] genl_rcv+0x28/0x40 [ 906.120070][T24217] netlink_unicast+0x7bd/0x940 [ 906.120113][T24217] netlink_sendmsg+0x813/0xb40 [ 906.120159][T24217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.120212][T24217] ? apparmor_socket_sendmsg+0x98/0x360 [ 906.120241][T24217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.120275][T24217] sock_sendmsg_nosec+0x13a/0x180 [ 906.120303][T24217] ____sys_sendmsg+0x54e/0x850 [ 906.120340][T24217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.120381][T24217] ? import_iovec+0x73/0xa0 [ 906.120414][T24217] ___sys_sendmsg+0x2a5/0x360 [ 906.120443][T24217] ? __lock_acquire+0x747/0x2de0 [ 906.120469][T24217] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.120534][T24217] ? __fget_files+0x2a/0x420 [ 906.120564][T24217] ? __fget_files+0x3a2/0x420 [ 906.120606][T24217] __x64_sys_sendmsg+0x1b1/0x290 [ 906.120640][T24217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.120693][T24217] do_syscall_64+0x166/0x520 [ 906.120723][ T5736] tipc: Node number set to 11578026 [ 906.120720][T24217] ? trace_irq_disable+0x3b/0x140 [ 906.120746][T24217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.120770][T24217] ? clear_bhb_loop+0x70/0xc0 [ 906.120798][T24217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.120822][T24217] RIP: 0033:0x7f3ed1b9e159 [ 906.120843][T24217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.120863][T24217] RSP: 002b:00007f3ed2996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.120889][T24217] RAX: ffffffffffffffda RBX: 00007f3ed1e25fa0 RCX: 00007f3ed1b9e159 [ 906.120906][T24217] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 906.120921][T24217] RBP: 00007f3ed2996090 R08: 0000000000000000 R09: 0000000000000000 [ 906.120936][T24217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.120949][T24217] R13: 00007f3ed1e26038 R14: 00007f3ed1e25fa0 R15: 00007ffd2166e428 [ 906.120986][T24217] [ 906.397723][T24214] FAULT_INJECTION: forcing a failure. [ 906.397723][T24214] name failslab, interval 1, probability 0, space 0, times 0 [ 906.397757][T24214] CPU: 0 UID: 0 PID: 24214 Comm: syz.3.5012 Not tainted syzkaller #0 PREEMPT(full) [ 906.397784][T24214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 906.397799][T24214] Call Trace: [ 906.397808][T24214] [ 906.397818][T24214] dump_stack_lvl+0xe8/0x150 [ 906.397860][T24214] should_fail_ex+0x410/0x560 [ 906.397894][T24214] should_failslab+0xa8/0x100 [ 906.397927][T24214] __kmalloc_cache_noprof+0xa3/0x600 [ 906.397954][T24214] ? nf_tables_newchain+0x1e10/0x28b0 [ 906.397984][T24214] ? nf_tables_newchain+0x1e10/0x28b0 [ 906.398024][T24214] nf_tables_newchain+0x1e10/0x28b0 [ 906.398073][T24214] ? __pfx_nf_tables_newchain+0x10/0x10 [ 906.398270][T24214] ? nfnl_pernet+0x23/0x240 [ 906.398388][T24214] ? __nla_parse+0x40/0x60 [ 906.398473][T24214] nfnetlink_rcv+0x1288/0x28c0 [ 906.398644][T24214] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 906.398774][T24214] ? ref_tracker_free+0x689/0x830 [ 906.398907][T24214] ? skb_clone+0x246/0x3a0 [ 906.399004][T24214] ? __netlink_deliver_tap+0x811/0x860 [ 906.399118][T24214] ? netlink_deliver_tap+0x2e/0x1b0 [ 906.399209][T24214] ? netlink_deliver_tap+0x2e/0x1b0 [ 906.399307][T24214] netlink_unicast+0x7bd/0x940 [ 906.399412][T24214] netlink_sendmsg+0x813/0xb40 [ 906.399526][T24214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.399655][T24214] ? apparmor_socket_sendmsg+0x98/0x360 [ 906.399784][T24214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.399892][T24214] sock_sendmsg_nosec+0x13a/0x180 [ 906.399961][T24214] ____sys_sendmsg+0x54e/0x850 [ 906.400060][T24214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.400152][T24214] ? import_iovec+0x73/0xa0 [ 906.400256][T24214] ___sys_sendmsg+0x2a5/0x360 [ 906.400340][T24214] ? __lock_acquire+0x747/0x2de0 [ 906.400414][T24214] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.400607][T24214] ? __fget_files+0x2a/0x420 [ 906.400680][T24214] ? __fget_files+0x3a2/0x420 [ 906.400784][T24214] __x64_sys_sendmsg+0x1b1/0x290 [ 906.400869][T24214] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.401015][T24214] do_syscall_64+0x166/0x520 [ 906.401100][T24214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.401154][T24214] ? clear_bhb_loop+0x70/0xc0 [ 906.401235][T24214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.401289][T24214] RIP: 0033:0x7f64a8b9e159 [ 906.401349][T24214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.401393][T24214] RSP: 002b:00007f64a9b1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.401456][T24214] RAX: ffffffffffffffda RBX: 00007f64a8e25fa0 RCX: 00007f64a8b9e159 [ 906.401498][T24214] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 906.401530][T24214] RBP: 00007f64a9b1c090 R08: 0000000000000000 R09: 0000000000000000 [ 906.401570][T24214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 906.401609][T24214] R13: 00007f64a8e26038 R14: 00007f64a8e25fa0 R15: 00007ffd60b76a08 [ 906.401687][T24214] [ 906.944461][T24161] net_ratelimit: 19 callbacks suppressed [ 906.944513][T24161] bond12: (slave bridge0): failed to get link speed/duplex [ 907.060471][T24160] bond12: (slave bridge0): failed to get link speed/duplex [ 907.167465][T24161] bond12: (slave bridge0): failed to get link speed/duplex [ 907.288542][T24161] bond12: (slave bridge0): failed to get link speed/duplex [ 907.401986][T24161] bond12: (slave bridge0): failed to get link speed/duplex [ 907.508155][T24160] bond12: (slave bridge0): failed to get link speed/duplex [ 907.618129][T24167] bond12: (slave bridge0): failed to get link speed/duplex [ 907.733803][T24173] bond12: (slave bridge0): failed to get link speed/duplex [ 907.842751][T24173] bond12: (slave bridge0): failed to get link speed/duplex [ 907.945691][T24166] bond12: (slave bridge0): failed to get link speed/duplex [ 908.541074][T24237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5019'. [ 908.690525][T24239] batadv_slave_0: entered promiscuous mode [ 909.002877][T24243] netlink: 'syz.1.5021': attribute type 12 has an invalid length. [ 909.210211][T24254] netlink: 'syz.2.5023': attribute type 1 has an invalid length. [ 909.210252][T24254] netlink: 15970 bytes leftover after parsing attributes in process `syz.2.5023'. [ 909.289807][T24254] netlink: 'syz.2.5023': attribute type 1 has an invalid length. [ 909.289848][T24254] netlink: 15970 bytes leftover after parsing attributes in process `syz.2.5023'. [ 909.356170][T24238] batadv_slave_0: left promiscuous mode [ 910.306094][T24262] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5026'. [ 910.333404][T24262] FAULT_INJECTION: forcing a failure. [ 910.333404][T24262] name failslab, interval 1, probability 0, space 0, times 0 [ 910.333441][T24262] CPU: 0 UID: 0 PID: 24262 Comm: syz.2.5026 Not tainted syzkaller #0 PREEMPT(full) [ 910.333467][T24262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 910.333482][T24262] Call Trace: [ 910.333491][T24262] [ 910.333502][T24262] dump_stack_lvl+0xe8/0x150 [ 910.333540][T24262] should_fail_ex+0x410/0x560 [ 910.333572][T24262] should_failslab+0xa8/0x100 [ 910.333608][T24262] __kvmalloc_node_noprof+0x176/0x820 [ 910.333635][T24262] ? __nf_register_net_hook+0x232/0x930 [ 910.333663][T24262] ? nf_hook_entries_grow+0x287/0x740 [ 910.333685][T24262] ? nf_hook_entries_grow+0x287/0x740 [ 910.333725][T24262] nf_hook_entries_grow+0x287/0x740 [ 910.333783][T24262] __nf_register_net_hook+0x2c9/0x930 [ 910.333808][T24262] ? nft_chain_add+0xe58/0x10b0 [ 910.333853][T24262] nf_register_net_hook+0xb2/0x190 [ 910.333882][T24262] nf_tables_newchain+0x2384/0x28b0 [ 910.333932][T24262] ? __pfx_nf_tables_newchain+0x10/0x10 [ 910.334010][T24262] ? nfnl_pernet+0x23/0x240 [ 910.334054][T24262] ? __nla_parse+0x40/0x60 [ 910.334091][T24262] nfnetlink_rcv+0x1288/0x28c0 [ 910.334164][T24262] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 910.334216][T24262] ? ref_tracker_free+0x689/0x830 [ 910.334272][T24262] ? skb_clone+0x246/0x3a0 [ 910.334311][T24262] ? __netlink_deliver_tap+0x811/0x860 [ 910.334355][T24262] ? netlink_deliver_tap+0x2e/0x1b0 [ 910.334390][T24262] ? netlink_deliver_tap+0x2e/0x1b0 [ 910.334432][T24262] netlink_unicast+0x7bd/0x940 [ 910.334478][T24262] netlink_sendmsg+0x813/0xb40 [ 910.334524][T24262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 910.334570][T24262] ? apparmor_socket_sendmsg+0x98/0x360 [ 910.334600][T24262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 910.334633][T24262] sock_sendmsg_nosec+0x13a/0x180 [ 910.334661][T24262] ____sys_sendmsg+0x54e/0x850 [ 910.334700][T24262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 910.334751][T24262] ? import_iovec+0x73/0xa0 [ 910.334787][T24262] ___sys_sendmsg+0x2a5/0x360 [ 910.334818][T24262] ? __lock_acquire+0x747/0x2de0 [ 910.334848][T24262] ? __pfx____sys_sendmsg+0x10/0x10 [ 910.334924][T24262] ? __fget_files+0x2a/0x420 [ 910.334966][T24262] ? __fget_files+0x3a2/0x420 [ 910.335031][T24262] __x64_sys_sendmsg+0x1b1/0x290 [ 910.335063][T24262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 910.335116][T24262] do_syscall_64+0x166/0x520 [ 910.335144][T24262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.335167][T24262] ? clear_bhb_loop+0x70/0xc0 [ 910.335194][T24262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.335216][T24262] RIP: 0033:0x7f057599e159 [ 910.335237][T24262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.335255][T24262] RSP: 002b:00007f0576796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 910.335278][T24262] RAX: ffffffffffffffda RBX: 00007f0575c25fa0 RCX: 00007f057599e159 [ 910.335295][T24262] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 910.335309][T24262] RBP: 00007f0576796090 R08: 0000000000000000 R09: 0000000000000000 [ 910.335323][T24262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 910.335336][T24262] R13: 00007f0575c26038 R14: 00007f0575c25fa0 R15: 00007ffd6e69f0a8 [ 910.335371][T24262] [ 911.602489][T24288] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 911.692624][T24266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 912.018156][T10278] net_ratelimit: 28 callbacks suppressed [ 912.018179][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 912.184417][T24298] block nbd0: NBD_DISCONNECT [ 912.184502][T24298] block nbd0: Send disconnect failed -32 [ 912.184524][T24298] block nbd0: shutting down sockets [ 912.245672][T10278] bond12: (slave bridge0): failed to get link speed/duplex [ 912.252341][T24299] ipvlan0: entered promiscuous mode [ 912.252557][T24299] ipvlan0: entered allmulticast mode [ 912.252575][T24299] veth0_vlan: entered allmulticast mode [ 912.483567][T24167] bond12: (slave bridge0): failed to get link speed/duplex [ 912.598761][T24160] bond12: (slave bridge0): failed to get link speed/duplex [ 912.726914][T24160] bond12: (slave bridge0): failed to get link speed/duplex [ 912.854775][T24175] bond12: (slave bridge0): failed to get link speed/duplex [ 912.890694][T24307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5035'. [ 913.172804][T10278] bridge_slave_1: left allmulticast mode [ 913.172873][T10278] bridge_slave_1: left promiscuous mode [ 913.196085][T10278] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.197292][T24310] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 913.198574][T24310] FAULT_INJECTION: forcing a failure. [ 913.198574][T24310] name failslab, interval 1, probability 0, space 0, times 0 [ 913.198605][T24310] CPU: 0 UID: 0 PID: 24310 Comm: syz.1.5036 Not tainted syzkaller #0 PREEMPT(full) [ 913.198631][T24310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 913.198645][T24310] Call Trace: [ 913.198654][T24310] [ 913.198674][T24310] dump_stack_lvl+0xe8/0x150 [ 913.198712][T24310] should_fail_ex+0x410/0x560 [ 913.198745][T24310] should_failslab+0xa8/0x100 [ 913.198773][T24310] ? skb_clone+0x212/0x3a0 [ 913.198805][T24310] kmem_cache_alloc_noprof+0xa1/0x600 [ 913.198843][T24310] ? skb_clone+0x212/0x3a0 [ 913.198881][T24310] skb_clone+0x212/0x3a0 [ 913.198916][T24310] __netlink_deliver_tap+0x413/0x860 [ 913.198964][T24310] ? netlink_deliver_tap+0x2e/0x1b0 [ 913.199001][T24310] netlink_deliver_tap+0x19c/0x1b0 [ 913.199036][T24310] netlink_sendskb+0x68/0x140 [ 913.199071][T24310] netlink_rcv_skb+0x2a4/0x4a0 [ 913.199106][T24310] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.199135][T24310] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 913.199186][T24310] ? down_read+0x2be/0x330 [ 913.199222][T24310] genl_rcv+0x28/0x40 [ 913.199246][T24310] netlink_unicast+0x7bd/0x940 [ 913.199289][T24310] netlink_sendmsg+0x813/0xb40 [ 913.199334][T24310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.199382][T24310] ? apparmor_socket_sendmsg+0x98/0x360 [ 913.199411][T24310] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.199444][T24310] sock_sendmsg_nosec+0x13a/0x180 [ 913.199478][T24310] ____sys_sendmsg+0x54e/0x850 [ 913.199533][T24310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.199575][T10278] bridge_slave_0: left allmulticast mode [ 913.199575][T24310] ? import_iovec+0x73/0xa0 [ 913.199598][T10278] bridge_slave_0: left promiscuous mode [ 913.199609][T24310] ___sys_sendmsg+0x2a5/0x360 [ 913.199639][T24310] ? __lock_acquire+0x747/0x2de0 [ 913.199675][T24310] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.199748][T24310] ? __fget_files+0x2a/0x420 [ 913.199774][T24310] ? __fget_files+0x3a2/0x420 [ 913.199815][T24310] __x64_sys_sendmsg+0x1b1/0x290 [ 913.199848][T10278] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.199850][T24310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 913.199908][T24310] do_syscall_64+0x166/0x520 [ 913.199936][T24310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.199960][T24310] ? clear_bhb_loop+0x70/0xc0 [ 913.199986][T24310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.200008][T24310] RIP: 0033:0x7f4ea0f9e159 [ 913.200025][T24310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.200042][T24310] RSP: 002b:00007f4ea1dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.200065][T24310] RAX: ffffffffffffffda RBX: 00007f4ea1225fa0 RCX: 00007f4ea0f9e159 [ 913.200079][T24310] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 913.200090][T24310] RBP: 00007f4ea1dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 913.200103][T24310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 913.200118][T24310] R13: 00007f4ea1226038 R14: 00007f4ea1225fa0 R15: 00007ffd4ed854f8 [ 913.200154][T24310] [ 913.778898][T10278] pim6reg527: left allmulticast mode [ 915.931588][T10278] bond11 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 915.932078][T10278] bond11 (unregistering): (slave ip6gretap0): Releasing backup interface [ 916.175156][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 916.220383][T10278] bond3 (unregistering): (slave ip6gre3): Releasing backup interface [ 916.220584][T10278] ip6gre3 (unregistering): left promiscuous mode [ 916.878716][T24347] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5044'. [ 916.878782][T24347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5044'. [ 917.116480][T10278] bond4 (unregistering): (slave erspan0): Removing an active aggregator [ 917.117506][T10278] bond4 (unregistering): (slave erspan0): Releasing backup interface [ 917.469755][T10278] bond10 (unregistering): (slave gretap2): Releasing active interface [ 917.813081][T10278] bond12 (unregistering): (slave bridge0): Releasing backup interface [ 918.117281][T10278] bond1 (unregistering): Released all slaves [ 918.240695][T10278] bond2 (unregistering): Released all slaves [ 918.413386][T10278] bond3 (unregistering): Released all slaves [ 918.470079][T10278] bond4 (unregistering): Released all slaves [ 918.626577][T10278] bond5 (unregistering): Released all slaves [ 918.677470][T10278] bond6 (unregistering): Released all slaves [ 918.904715][T10278] bond7 (unregistering): Released all slaves [ 919.004670][T10278] bond0 (unregistering): Released all slaves [ 919.087904][T10278] bond8 (unregistering): Released all slaves [ 919.273966][T10278] bond9 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 919.297985][T10278] bond9 (unregistering): Released all slaves [ 919.534148][T10278] bond10 (unregistering): Released all slaves [ 919.645005][T10278] bond11 (unregistering): Released all slaves [ 919.861224][T10278] bond12 (unregistering): Released all slaves [ 920.825345][T10282] IPVS: starting estimator thread 0... [ 920.922713][T24370] netlink: 'syz.1.5048': attribute type 1 has an invalid length. [ 920.922738][T24370] netlink: 'syz.1.5048': attribute type 2 has an invalid length. [ 920.946157][T24368] IPVS: using max 27 ests per chain, 64800 per kthread [ 921.037092][T10278] tipc: Disabling bearer [ 921.037832][T24365] IPVS: ip_vs_add_dest(): server weight less than zero [ 921.040818][T10278] tipc: Left network mode [ 922.247549][T24391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5054'. [ 922.780144][T24412] openvswitch: netlink: Duplicate key (type 0). [ 922.808262][T24412] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 922.868795][T24391] 8021q: adding VLAN 0 to HW filter on device bond12 [ 922.952426][T24394] FAULT_INJECTION: forcing a failure. [ 922.952426][T24394] name failslab, interval 1, probability 0, space 0, times 0 [ 922.952465][T24394] CPU: 0 UID: 0 PID: 24394 Comm: syz.1.5054 Not tainted syzkaller #0 PREEMPT(full) [ 922.952491][T24394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 922.952506][T24394] Call Trace: [ 922.952516][T24394] [ 922.952526][T24394] dump_stack_lvl+0xe8/0x150 [ 922.952566][T24394] should_fail_ex+0x410/0x560 [ 922.952598][T24394] ? __alloc_skb+0x1db/0x7a0 [ 922.952627][T24394] should_failslab+0xa8/0x100 [ 922.952658][T24394] ? __alloc_skb+0x1db/0x7a0 [ 922.952684][T24394] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 922.952722][T24394] ? __alloc_skb+0x18d/0x7a0 [ 922.952751][T24394] ? __alloc_skb+0x1db/0x7a0 [ 922.952787][T24394] __alloc_skb+0x1db/0x7a0 [ 922.952821][T24394] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 922.952855][T24394] rtnetlink_event+0x1b7/0x270 [ 922.952891][T24394] notifier_call_chain+0x1a5/0x3d0 [ 922.952943][T24394] call_netdevice_notifiers+0x90/0xd0 [ 922.952971][T24394] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 922.953002][T24394] ? dev_addr_mod+0x1ba/0x350 [ 922.953041][T24394] bond_set_dev_addr+0xd6/0x1b0 [ 922.953215][T24394] bond_enslave+0xac5/0x3b10 [ 922.953250][T24394] ? __lock_acquire+0x747/0x2de0 [ 922.953292][T24394] ? do_raw_spin_lock+0x12b/0x2f0 [ 922.953333][T24394] ? __pfx_bond_enslave+0x10/0x10 [ 922.953403][T24394] ? mutex_is_locked+0x17/0x50 [ 922.953437][T24394] do_set_master+0x563/0x720 [ 922.953478][T24394] do_setlink+0xe7b/0x4670 [ 922.953509][T24394] ? lockdep_hardirqs_on+0x7b/0x110 [ 922.953549][T24394] ? __lock_acquire+0x747/0x2de0 [ 922.953577][T24394] ? __pfx_do_setlink+0x10/0x10 [ 922.953632][T24394] ? do_raw_spin_lock+0x12b/0x2f0 [ 922.953686][T24394] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 922.953719][T24394] ? __mutex_lock+0x1096/0x1550 [ 922.953754][T24394] ? __mutex_lock+0x5d4/0x1550 [ 922.953787][T24394] ? rtnl_newlink+0xc10/0x1c30 [ 922.953817][T24394] ? __pfx___mutex_lock+0x10/0x10 [ 922.953857][T24394] ? ns_capable+0x89/0xe0 [ 922.953889][T24394] ? rtnl_nets_add+0x16c/0x300 [ 922.953918][T24394] ? refcount_inc+0x46/0x70 [ 922.953946][T24394] rtnl_newlink+0x15a3/0x1c30 [ 922.953989][T24394] ? __pfx_rtnl_newlink+0x10/0x10 [ 922.954016][T24394] ? do_syscall_64+0x166/0x520 [ 922.954042][T24394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.954112][T24394] ? kasan_quarantine_put+0xbb/0x1f0 [ 922.954137][T24394] ? lockdep_hardirqs_on+0x7b/0x110 [ 922.954170][T24394] ? nlmon_xmit+0xb0/0x100 [ 922.954194][T24394] ? kmem_cache_free+0x182/0x650 [ 922.954238][T24394] ? __lock_acquire+0x747/0x2de0 [ 922.954273][T24394] ? __local_bh_enable_ip+0xd6/0x140 [ 922.954304][T24394] ? lockdep_hardirqs_on+0x7b/0x110 [ 922.954331][T24394] ? __dev_queue_xmit+0x29b/0x3820 [ 922.954365][T24394] ? __local_bh_enable_ip+0xd6/0x140 [ 922.954394][T24394] ? __dev_queue_xmit+0x29b/0x3820 [ 922.954435][T24394] ? lock_acquire+0x115/0x350 [ 922.954460][T24394] ? __pfx_rtnl_newlink+0x10/0x10 [ 922.954504][T24394] ? __pfx_rtnl_newlink+0x10/0x10 [ 922.954530][T24394] rtnetlink_rcv_msg+0x802/0xc00 [ 922.954565][T24394] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 922.954594][T24394] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 922.954622][T24394] ? ref_tracker_free+0x689/0x830 [ 922.954654][T24394] ? __pfx_ref_tracker_free+0x10/0x10 [ 922.954696][T24394] netlink_rcv_skb+0x226/0x4a0 [ 922.954735][T24394] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 922.954767][T24394] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 922.954817][T24394] ? netlink_deliver_tap+0x2e/0x1b0 [ 922.954852][T24394] ? netlink_deliver_tap+0x2e/0x1b0 [ 922.954895][T24394] netlink_unicast+0x7bd/0x940 [ 922.954942][T24394] netlink_sendmsg+0x813/0xb40 [ 922.954989][T24394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 922.955035][T24394] ? apparmor_socket_sendmsg+0x98/0x360 [ 922.955072][T24394] ? __pfx_netlink_sendmsg+0x10/0x10 [ 922.955108][T24394] sock_sendmsg_nosec+0x13a/0x180 [ 922.955136][T24394] ____sys_sendmsg+0x54e/0x850 [ 922.955176][T24394] ? __pfx_____sys_sendmsg+0x10/0x10 [ 922.955219][T24394] ? import_iovec+0x73/0xa0 [ 922.955254][T24394] ___sys_sendmsg+0x2a5/0x360 [ 922.955286][T24394] ? __lock_acquire+0x747/0x2de0 [ 922.955315][T24394] ? __pfx____sys_sendmsg+0x10/0x10 [ 922.955388][T24394] ? __fget_files+0x2a/0x420 [ 922.955421][T24394] ? __fget_files+0x3a2/0x420 [ 922.955465][T24394] __x64_sys_sendmsg+0x1b1/0x290 [ 922.955501][T24394] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 922.955559][T24394] do_syscall_64+0x166/0x520 [ 922.955587][T24394] ? trace_irq_disable+0x3b/0x140 [ 922.955611][T24394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.955636][T24394] ? clear_bhb_loop+0x70/0xc0 [ 922.955666][T24394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.955690][T24394] RIP: 0033:0x7f4ea0f9e159 [ 922.955714][T24394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.955734][T24394] RSP: 002b:00007f4ea1db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.955760][T24394] RAX: ffffffffffffffda RBX: 00007f4ea1226090 RCX: 00007f4ea0f9e159 [ 922.955779][T24394] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 000000000000000e [ 922.955795][T24394] RBP: 00007f4ea1db4090 R08: 0000000000000000 R09: 0000000000000000 [ 922.955810][T24394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.955825][T24394] R13: 00007f4ea1226128 R14: 00007f4ea1226090 R15: 00007ffd4ed854f8 [ 922.955863][T24394] [ 923.711030][T24394] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.711162][T24394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.711497][T24394] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.711636][T24394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.852186][T24394] bond12: (slave bridge0): Enslaving as an active interface with an up link [ 924.040174][T24416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5059'. [ 925.530614][T10278] hsr_slave_0: left promiscuous mode [ 925.584346][T10278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.584377][T10278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 925.683970][T24428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5063'. [ 926.266403][T10278] veth1_macvtap: left promiscuous mode [ 926.291797][T10278] veth0_macvtap: left promiscuous mode [ 926.317905][T10278] veth1_vlan: left promiscuous mode [ 926.318600][T10278] veth0_vlan: left promiscuous mode [ 927.162342][T24451] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5070'. [ 927.221068][T24453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5071'. [ 928.405489][T10278] team0 (unregistering): Port device team_slave_1 removed [ 928.469405][T10278] team0 (unregistering): Port device team_slave_0 removed [ 928.913174][T24445] tunl0: entered promiscuous mode [ 928.938522][T24445] netlink: 'syz.2.5065': attribute type 3 has an invalid length. [ 928.938546][T24445] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5065'. [ 930.671600][T10278] IPVS: stop unused estimator thread 0... [ 930.770272][T24475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5074'. [ 930.834234][T24476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5078'. [ 930.838405][T24476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5078'. [ 930.839092][T24476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5078'. [ 931.104676][T24475] 8021q: adding VLAN 0 to HW filter on device bond9 [ 931.499745][T24504] netlink: 'syz.1.5082': attribute type 4 has an invalid length. [ 931.499807][T24504] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5082'. [ 931.723134][T24516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5086'. [ 932.076501][T24523] h: entered promiscuous mode [ 932.350557][T24537] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 932.959829][T24555] bridge0: left promiscuous mode [ 933.006784][T11734] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 933.099886][T24564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5103'. [ 933.175734][T24565] netlink: 'syz.0.5103': attribute type 1 has an invalid length. [ 933.176712][T24566] netlink: 'syz.0.5103': attribute type 1 has an invalid length. [ 933.208081][T24570] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5104'. [ 933.415640][T24555] bond1: left promiscuous mode [ 933.422839][T24582] ip_tables: iptables: counters copy to user failed while replacing table [ 933.501359][T24555] h: left promiscuous mode [ 933.560192][T24582] ip_tables: iptables: counters copy to user failed while replacing table [ 933.573881][T11735] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 934.099215][T24580] vlan2: entered promiscuous mode [ 934.099237][T24580] geneve1: entered promiscuous mode [ 934.099462][T24580] vlan2: entered allmulticast mode [ 934.099478][T24580] geneve1: entered allmulticast mode [ 934.102927][T24574] syzkaller1: entered promiscuous mode [ 934.102950][T24574] syzkaller1: entered allmulticast mode [ 934.147511][T24602] veth0: entered promiscuous mode [ 934.421003][T24615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5113'. [ 934.437633][T24615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5113'. [ 934.748139][T24623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5117'. [ 934.748165][T24623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5117'. [ 934.787934][T24623] netlink: 'syz.2.5117': attribute type 4 has an invalid length. [ 934.787958][T24623] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5117'. [ 934.888715][T24601] veth0: left promiscuous mode [ 934.960106][T24629] openvswitch: netlink: Tunnel attr 257 out of range max 16 [ 934.960160][T24629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 935.272725][T24642] ip_tables: iptables: counters copy to user failed while replacing table [ 935.287664][T24641] netlink: 'syz.3.5125': attribute type 9 has an invalid length. [ 936.076284][T24676] ip_tables: iptables: counters copy to user failed while replacing table [ 936.236764][T24669] erspan0: entered promiscuous mode [ 936.258794][T24669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5137'. [ 936.323697][T24678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5137'. [ 936.370807][T24695] ip_tables: iptables: counters copy to user failed while replacing table [ 936.500451][T24698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5144'. [ 936.652794][T24700] netlink: 'syz.1.5143': attribute type 4 has an invalid length. [ 936.652856][T24700] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5143'. [ 936.787874][T24709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5147'. [ 936.825385][T24709] 8021q: adding VLAN 0 to HW filter on device bond10 [ 936.849319][T24700] syz_tun: entered allmulticast mode [ 936.921302][T24699] syz_tun: left allmulticast mode [ 937.578590][T24750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 938.001931][T24773] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 938.077182][T24772] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 938.077433][T24772] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 938.114766][T24772] hsr_slave_0: left promiscuous mode [ 938.127695][T24772] hsr_slave_1: left promiscuous mode [ 938.493466][T24787] tipc: Enabling of bearer rejected, already enabled [ 939.438971][T24821] __nla_validate_parse: 12 callbacks suppressed [ 939.438994][T24821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5179'. [ 939.618581][T24824] 0ªX¹¦Dö»: entered promiscuous mode [ 939.619117][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5180'. [ 939.619142][T24824] 0ªX¹¦Dö»: left promiscuous mode [ 939.694676][ T9] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 939.958342][ T9] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 940.081076][T24845] 8021q: adding VLAN 0 to HW filter on device bond8 [ 940.081897][T24846] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5184'. [ 940.191996][T24851] macvlan2: entered promiscuous mode [ 940.192020][T24851] macvlan2: entered allmulticast mode [ 940.272773][T24858] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5187'. [ 940.298423][T24858] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5187'. [ 940.475762][T24861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5189'. [ 940.817339][ T192] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 940.900898][T24885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5197'. [ 941.048914][T24891] tipc: Started in network mode [ 941.048936][T24891] tipc: Node identity , cluster identity 4711 [ 941.049067][T24891] tipc: Failed to obtain node identity [ 941.049098][T24891] tipc: Enabling of bearer rejected, failed to enable media [ 941.386614][T24899] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5202'. [ 941.409447][T24899] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5202'. [ 941.720202][T24911] netlink: 'syz.4.5208': attribute type 1 has an invalid length. [ 941.720227][T24911] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5208'. [ 941.747276][T24911] netlink: 'syz.4.5208': attribute type 1 has an invalid length. [ 942.191304][T24928] tipc: Started in network mode [ 942.191327][T24928] tipc: Node identity , cluster identity 4711 [ 942.191345][T24928] tipc: Failed to obtain node identity [ 942.191375][T24928] tipc: Enabling of bearer rejected, failed to enable media [ 942.437899][T24930] tipc: Started in network mode [ 942.437935][T24930] tipc: Node identity ac14140f, cluster identity 4711 [ 942.438266][T24930] tipc: New replicast peer: 255.255.255.255 [ 942.439098][T24930] tipc: Enabled bearer , priority 10 [ 943.549264][T24963] tipc: Enabled bearer , priority 9 [ 943.667067][T24962] 8021q: adding VLAN 0 to HW filter on device bond6 [ 943.672367][T24966] bridge0: left allmulticast mode [ 943.799884][T24966] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 943.871367][T24969] ip_tables: iptables: counters copy to user failed while replacing table [ 944.307631][T24971] netlink: 'syz.0.5226': attribute type 10 has an invalid length. [ 944.523340][T24994] tipc: Started in network mode [ 944.523359][T24994] tipc: Node identity , cluster identity 4711 [ 944.523374][T24994] tipc: Failed to obtain node identity [ 944.523399][T24994] tipc: Enabling of bearer rejected, failed to enable media [ 944.524818][T24993] __nla_validate_parse: 11 callbacks suppressed [ 944.524838][T24993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5236'. [ 944.524920][T24993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.524933][T24993] IPv6: NLM_F_CREATE should be set when creating new route [ 944.524961][T24993] IPv6: NLM_F_CREATE should be set when creating new route [ 944.680678][ T192] tipc: Node number set to 2886997007 [ 944.862001][T25004] ip_tables: iptables: counters copy to user failed while replacing table [ 944.933853][T25007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5241'. [ 945.328807][T25018] batadv_slave_0: entered promiscuous mode [ 945.417221][T25020] tipc: Started in network mode [ 945.417242][T25020] tipc: Node identity , cluster identity 4711 [ 945.417257][T25020] tipc: Failed to obtain node identity [ 945.417285][T25020] tipc: Enabling of bearer rejected, failed to enable media [ 945.479523][T25017] batadv_slave_0: left promiscuous mode [ 945.881588][T25034] ip_tables: iptables: counters copy to user failed while replacing table [ 945.919050][T25035] netlink: 'syz.1.5254': attribute type 1 has an invalid length. [ 945.960074][T25035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5254'. [ 945.988261][T25036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5254'. [ 946.120182][T25046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5257'. [ 946.802437][T25069] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5265'. [ 946.804168][T25063] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5262'. [ 946.804225][T25063] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5262'. [ 946.971515][T25075] ip_tables: iptables: counters copy to user failed while replacing table [ 947.187830][T25082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.333483][T25091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5271'. [ 947.482309][T25088] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5269'. [ 947.840816][ T30] audit: type=1804 audit(1790195500.880:8): pid=25097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5272" name="/newroot/328/cgroup.controllers" dev="tmpfs" ino=1681 res=1 errno=0 [ 947.864966][ T30] audit: type=1800 audit(1790195500.890:9): pid=25097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5272" name="cgroup.controllers" dev="tmpfs" ino=1681 res=0 errno=0 [ 948.418570][T25106] bridge0: port 2(vlan2) entered blocking state [ 948.418833][T25106] bridge0: port 2(vlan2) entered disabled state [ 948.419272][T25106] vlan2: entered allmulticast mode [ 948.419311][T25106] geneve0: entered allmulticast mode [ 948.479320][T25106] vlan2: entered promiscuous mode [ 948.479384][T25106] geneve0: entered promiscuous mode [ 948.488375][T25113] ip_tables: iptables: counters copy to user failed while replacing table [ 949.123985][T25126] sctp: [Deprecated]: syz.3.5284 (pid 25126) Use of int in max_burst socket option deprecated. [ 949.123985][T25126] Use struct sctp_assoc_value instead [ 949.630743][T25141] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 950.221625][T25154] __nla_validate_parse: 3 callbacks suppressed [ 950.221647][T25154] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5295'. [ 950.301574][T25156] ip_tables: iptables: counters copy to user failed while replacing table [ 950.362969][T25159] netlink: 'syz.1.5297': attribute type 1 has an invalid length. [ 950.390342][T25160] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5296'. [ 950.519658][T25159] bond13: entered promiscuous mode [ 950.521733][T25159] 8021q: adding VLAN 0 to HW filter on device bond13 [ 950.529263][T25166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5298'. [ 950.615863][T25159] bond13: (slave bridge6): making interface the new active one [ 950.615925][T25159] bridge6: entered promiscuous mode [ 950.621194][T25159] bond13: (slave bridge6): Enslaving as an active interface with an up link [ 950.665550][T25169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5300'. [ 950.670513][T25159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5297'. [ 950.907800][T25175] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 950.989582][T25180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5305'. [ 950.989620][T25180] netlink: 'syz.3.5305': attribute type 3 has an invalid length. [ 951.444063][T25204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5313'. [ 952.160460][T25222] netlink: Invalid conntrack timeout [ 952.160496][T25222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 952.185088][T25224] tipc: Enabled bearer , priority 9 [ 952.351079][T25231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5319'. [ 952.977359][T25255] ip_tables: iptables: counters copy to user failed while replacing table [ 953.052368][T25259] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5328'. [ 953.529846][T25274] mac80211_hwsim hwsim31 syzkaller0: left promiscuous mode [ 953.529910][T25274] mac80211_hwsim hwsim31 syzkaller0: left allmulticast mode [ 953.584964][T25279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5339'. [ 953.621748][T25273] netlink: 'syz.0.5336': attribute type 1 has an invalid length. [ 953.860266][T25285] 8021q: adding VLAN 0 to HW filter on device bond15 [ 953.902602][T25285] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.902913][T25285] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.925166][T25285] bond12: (slave bridge0): Releasing backup interface [ 953.932889][T25285] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.933034][T25285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.933365][T25285] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.933497][T25285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.986989][T25285] bond15: (slave bridge0): Enslaving as an active interface with an up link [ 955.231015][T25324] tipc: Enabling of bearer rejected, already enabled [ 955.407644][T25328] __nla_validate_parse: 4 callbacks suppressed [ 955.407667][T25328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5357'. [ 955.492336][T25328] 8021q: adding VLAN 0 to HW filter on device bond10 [ 955.566753][T25332] 8021q: adding VLAN 0 to HW filter on device .` [ 955.633867][T25332] bond10: (slave .`): Enslaving as an active interface with an up link [ 955.820786][T25340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5358'. [ 955.912013][T25340] 8021q: adding VLAN 0 to HW filter on device bond11 [ 956.521433][T25367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5370'. [ 957.434144][T25390] batadv_slave_0: entered promiscuous mode [ 957.523403][T25392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5378'. [ 957.523449][T25392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5378'. [ 957.548257][T25389] batadv_slave_0: left promiscuous mode [ 957.718273][T25396] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5378'. [ 958.371468][T25410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5385'. [ 958.447938][T25410] 8021q: adding VLAN 0 to HW filter on device bond12 [ 959.096453][T25429] syzkaller0: left promiscuous mode [ 959.096477][T25429] syzkaller0: left allmulticast mode [ 959.169597][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5391'. [ 959.184477][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5391'. [ 960.106454][T25472] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5406'. [ 961.357808][T25512] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5421'. [ 961.547794][T25517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5423'. [ 961.582678][T25517] 8021q: adding VLAN 0 to HW filter on device bond11 [ 961.622001][T25522] batadv_slave_0: entered promiscuous mode [ 961.691923][T25524] netlink: 'syz.1.5426': attribute type 2 has an invalid length. [ 961.742255][T25521] batadv_slave_0: left promiscuous mode [ 961.758424][T25526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5426'. [ 962.021903][T25538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5430'. [ 962.089997][T25538] 8021q: adding VLAN 0 to HW filter on device bond13 [ 962.101616][T25541] 8021q: adding VLAN 0 to HW filter on device .` [ 962.103581][T25541] bond13: (slave .`): Enslaving as an active interface with an up link [ 962.255925][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 962.301655][T25546] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 962.330726][T25550] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 962.331234][T25550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5434'. [ 962.331256][T25550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5434'. [ 963.197508][T25579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5440'. [ 963.197546][T25579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5440'. [ 963.197779][T25579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5440'. [ 963.197797][T25579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5440'. [ 964.139921][T25609] bridge2: entered allmulticast mode [ 964.187460][T25610] bridge3: entered allmulticast mode [ 964.527425][T25620] 8021q: adding VLAN 0 to HW filter on device bond12 [ 965.006331][T25641] Cannot find add_set index 0 as target [ 965.011704][T25641] Cannot find add_set index 0 as target [ 966.082925][T25689] bridge0: port 1(macvlan2) entered blocking state [ 966.083211][T25689] bridge0: port 1(macvlan2) entered disabled state [ 966.083376][T25689] macvlan2: entered allmulticast mode [ 966.083394][T25689] bridge0: entered allmulticast mode [ 966.119327][T25689] macvlan2: left allmulticast mode [ 966.119352][T25689] bridge0: left allmulticast mode [ 966.397792][T25696] batadv_slave_0: entered promiscuous mode [ 966.525586][T25694] batadv_slave_0: left promiscuous mode [ 966.791770][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 966.795977][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 966.807926][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 966.836760][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 966.837731][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 967.019746][T25716] FAULT_INJECTION: forcing a failure. [ 967.019746][T25716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.019784][T25716] CPU: 0 UID: 0 PID: 25716 Comm: syz.1.5491 Not tainted syzkaller #0 PREEMPT(full) [ 967.019810][T25716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 967.019833][T25716] Call Trace: [ 967.019843][T25716] [ 967.019854][T25716] dump_stack_lvl+0xe8/0x150 [ 967.019896][T25716] should_fail_ex+0x410/0x560 [ 967.019934][T25716] _copy_from_user+0x2d/0xb0 [ 967.019966][T25716] ___sys_sendmsg+0x1c6/0x360 [ 967.019999][T25716] ? __lock_acquire+0x747/0x2de0 [ 967.020030][T25716] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.020100][T25716] ? __fget_files+0x2a/0x420 [ 967.020133][T25716] ? __fget_files+0x3a2/0x420 [ 967.020175][T25716] __x64_sys_sendmsg+0x1b1/0x290 [ 967.020211][T25716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 967.020265][T25716] do_syscall_64+0x166/0x520 [ 967.020296][T25716] ? trace_irq_disable+0x3b/0x140 [ 967.020320][T25716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.020345][T25716] ? clear_bhb_loop+0x70/0xc0 [ 967.020374][T25716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.020396][T25716] RIP: 0033:0x7f4ea0f9e159 [ 967.020418][T25716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.020438][T25716] RSP: 002b:00007f4ea1dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.020463][T25716] RAX: ffffffffffffffda RBX: 00007f4ea1225fa0 RCX: 00007f4ea0f9e159 [ 967.020480][T25716] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 967.020495][T25716] RBP: 00007f4ea1dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 967.020510][T25716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.020524][T25716] R13: 00007f4ea1226038 R14: 00007f4ea1225fa0 R15: 00007ffd4ed854f8 [ 967.020561][T25716] [ 968.096616][T25708] wlan0 speed is unknown, defaulting to 1000 [ 968.103937][T25708] lo speed is unknown, defaulting to 1000 [ 968.198110][T25735] __nla_validate_parse: 5 callbacks suppressed [ 968.198131][T25735] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5496'. [ 968.216581][T25735] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5496'. [ 968.547233][T25743] FAULT_INJECTION: forcing a failure. [ 968.547233][T25743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 968.547273][T25743] CPU: 0 UID: 0 PID: 25743 Comm: syz.4.5498 Not tainted syzkaller #0 PREEMPT(full) [ 968.547300][T25743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 968.547315][T25743] Call Trace: [ 968.547325][T25743] [ 968.547336][T25743] dump_stack_lvl+0xe8/0x150 [ 968.547378][T25743] should_fail_ex+0x410/0x560 [ 968.547414][T25743] _copy_to_user+0x31/0xb0 [ 968.547449][T25743] simple_read_from_buffer+0xe1/0x170 [ 968.547490][T25743] proc_fail_nth_read+0x1bb/0x230 [ 968.547529][T25743] ? common_file_perm+0x20e/0x2b0 [ 968.547563][T25743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.547604][T25743] ? rw_verify_area+0x24a/0x4c0 [ 968.547653][T25743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 968.547691][T25743] vfs_read+0x213/0xa80 [ 968.547733][T25743] ? __pfx___mutex_lock+0x10/0x10 [ 968.547766][T25743] ? __pfx_vfs_read+0x10/0x10 [ 968.547803][T25743] ? __fget_files+0x2a/0x420 [ 968.547841][T25743] ? __fget_files+0x3a2/0x420 [ 968.547872][T25743] ? __fget_files+0x2a/0x420 [ 968.547914][T25743] ksys_read+0x150/0x270 [ 968.547952][T25743] ? __pfx_ksys_read+0x10/0x10 [ 968.548001][T25743] do_syscall_64+0x166/0x520 [ 968.548030][T25743] ? trace_irq_disable+0x3b/0x140 [ 968.548054][T25743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.548078][T25743] ? clear_bhb_loop+0x70/0xc0 [ 968.548108][T25743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.548132][T25743] RIP: 0033:0x7f3ed1b5e98e [ 968.548154][T25743] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 968.548175][T25743] RSP: 002b:00007f3ecfdf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 968.548212][T25743] RAX: ffffffffffffffda RBX: 00007f3ecfdf66c0 RCX: 00007f3ed1b5e98e [ 968.548230][T25743] RDX: 000000000000000f RSI: 00007f3ecfdf60a0 RDI: 0000000000000004 [ 968.548245][T25743] RBP: 00007f3ecfdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 968.548260][T25743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.548274][T25743] R13: 00007f3ed1e26128 R14: 00007f3ed1e26090 R15: 00007ffd2166e428 [ 968.548311][T25743] [ 968.896674][ T52] Bluetooth: hci1: command tx timeout [ 969.496473][T25708] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.497656][T25708] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.497810][T25708] bridge_slave_0: entered allmulticast mode [ 969.500269][T25708] bridge_slave_0: entered promiscuous mode [ 969.549199][T25763] tipc: Enabling of bearer rejected, already enabled [ 969.551502][T25708] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.551659][T25708] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.551817][T25708] bridge_slave_1: entered allmulticast mode [ 969.588323][T25708] bridge_slave_1: entered promiscuous mode [ 969.817529][T25708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.858783][T25708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.939612][ T5619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 969.951966][ T5619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 969.955043][ T5619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 969.977375][ T5619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 969.992571][ T5619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 970.107210][T25708] team0: Port device team_slave_0 added [ 970.113817][T25708] team0: Port device team_slave_1 added [ 970.193694][T25708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.193714][T25708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.193743][T25708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.243342][T25708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.243360][T25708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.243389][T25708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.657533][T25708] hsr_slave_0: entered promiscuous mode [ 970.672250][T25708] hsr_slave_1: entered promiscuous mode [ 970.686857][T25708] debugfs: 'hsr0' already exists in 'hsr' [ 970.686922][T25708] Cannot create hsr debugfs directory [ 970.974784][ T52] Bluetooth: hci1: command tx timeout [ 971.219904][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5511'. [ 971.219929][T25783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5511'. [ 971.222846][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5511'. [ 971.222870][T25783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5511'. [ 971.223119][T25783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5511'. [ 971.223137][T25783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5511'. [ 971.306064][T25781] geneve6: entered allmulticast mode [ 971.820679][T25797] netlink: 'syz.2.5515': attribute type 1 has an invalid length. [ 971.856017][T25797] 0: reclassify loop, rule prio 0, protocol 700 [ 971.945695][T25708] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 971.990673][T25708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.992469][T25708] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 972.021910][T25708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 972.022959][T25708] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 972.080380][T25708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 972.081751][T25708] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 972.096356][ T52] Bluetooth: hci6: command tx timeout [ 972.133382][T25708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 972.182648][T25805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5517'. [ 972.199246][T25810] tipc: Enabling of bearer rejected, already enabled [ 972.245679][T25769] wlan0 speed is unknown, defaulting to 1000 [ 972.252384][T25769] lo speed is unknown, defaulting to 1000 [ 972.618702][T25708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.801566][T25708] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.846598][T24168] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.846857][T24168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.943106][T24168] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.945636][T24168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.057024][ T52] Bluetooth: hci1: command tx timeout [ 973.792836][T25769] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.793589][T25769] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.793955][T25769] bridge_slave_0: entered allmulticast mode [ 973.820632][T25769] bridge_slave_0: entered promiscuous mode [ 973.853431][T25769] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.853603][T25769] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.853807][T25769] bridge_slave_1: entered allmulticast mode [ 973.880018][T25769] bridge_slave_1: entered promiscuous mode [ 974.038046][T25769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.092448][T25769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.174440][ T52] Bluetooth: hci6: command tx timeout [ 974.420887][T25855] tipc: Started in network mode [ 974.420954][T25855] tipc: Node identity e0000001, cluster identity 4711 [ 974.421082][T25855] tipc: Enabling of bearer rejected, failed to enable media [ 974.489302][T25769] team0: Port device team_slave_0 added [ 974.541451][T25769] team0: Port device team_slave_1 added [ 974.732851][T25769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.732873][T25769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.732901][T25769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.790764][T25769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.790782][T25769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.790810][T25769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.999754][T25873] netlink: 760 bytes leftover after parsing attributes in process `syz.1.5532'. [ 974.999782][T25873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5532'. [ 974.999798][T25873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5532'. [ 974.999814][T25873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5532'. [ 975.141253][ T52] Bluetooth: hci1: command tx timeout [ 975.273473][T25769] hsr_slave_0: entered promiscuous mode [ 975.284775][T25769] hsr_slave_1: entered promiscuous mode [ 975.285561][T25769] debugfs: 'hsr0' already exists in 'hsr' [ 975.285582][T25769] Cannot create hsr debugfs directory [ 975.338387][T25878] tipc: Enabling of bearer rejected, already enabled [ 975.595957][T25708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.167578][T25889] syzkaller0: entered promiscuous mode [ 976.167607][T25889] syzkaller0: entered allmulticast mode [ 976.257042][ T52] Bluetooth: hci6: command tx timeout [ 978.347098][ T52] Bluetooth: hci6: command tx timeout [ 979.642609][T25922] ip_tables: iptables: counters copy to user failed while replacing table [ 979.771127][T25769] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 979.804228][T25769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 979.823233][T25769] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 979.842828][T25769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 979.843740][T25769] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 979.868044][T25769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 979.885676][T25769] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 979.928957][T25769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 980.057840][T25708] veth0_vlan: entered promiscuous mode [ 980.140200][T25708] veth1_vlan: entered promiscuous mode [ 980.291823][T25708] veth0_macvtap: entered promiscuous mode [ 980.349735][T25940] tipc: Enabled bearer , priority 9 [ 980.392671][T25708] veth1_macvtap: entered promiscuous mode [ 980.624575][T25708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.737772][T25769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.781416][T25708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.836988][T25769] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.910659][T24168] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.910893][T24168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.943391][T25950] ip_tables: iptables: counters copy to user failed while replacing table [ 980.981995][T24168] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.982213][T24168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.061426][T10278] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.148524][T24168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.187490][T24168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.189649][T24168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.234145][T25956] FAULT_INJECTION: forcing a failure. [ 981.234145][T25956] name failslab, interval 1, probability 0, space 0, times 0 [ 981.234222][T25956] CPU: 1 UID: 0 PID: 25956 Comm: syz.2.5558 Not tainted syzkaller #0 PREEMPT(full) [ 981.234251][T25956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 981.234265][T25956] Call Trace: [ 981.234275][T25956] [ 981.234298][T25956] dump_stack_lvl+0xe8/0x150 [ 981.234336][T25956] should_fail_ex+0x410/0x560 [ 981.234368][T25956] should_failslab+0xa8/0x100 [ 981.234397][T25956] ? skb_clone+0x212/0x3a0 [ 981.234430][T25956] kmem_cache_alloc_noprof+0xa1/0x600 [ 981.234468][T25956] ? skb_clone+0x212/0x3a0 [ 981.234506][T25956] skb_clone+0x212/0x3a0 [ 981.234541][T25956] __netlink_deliver_tap+0x413/0x860 [ 981.234589][T25956] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.234625][T25956] netlink_deliver_tap+0x19c/0x1b0 [ 981.234660][T25956] netlink_sendskb+0x68/0x140 [ 981.234694][T25956] netlink_rcv_skb+0x2a4/0x4a0 [ 981.234729][T25956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 981.234760][T25956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 981.234817][T25956] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.234850][T25956] ? netlink_deliver_tap+0x2e/0x1b0 [ 981.234890][T25956] netlink_unicast+0x7bd/0x940 [ 981.234933][T25956] netlink_sendmsg+0x813/0xb40 [ 981.234977][T25956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.235018][T25956] ? apparmor_socket_sendmsg+0x98/0x360 [ 981.235047][T25956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.235079][T25956] sock_sendmsg_nosec+0x13a/0x180 [ 981.235105][T25956] ____sys_sendmsg+0x54e/0x850 [ 981.235141][T25956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 981.235182][T25956] ? import_iovec+0x73/0xa0 [ 981.235214][T25956] ___sys_sendmsg+0x2a5/0x360 [ 981.235243][T25956] ? __lock_acquire+0x747/0x2de0 [ 981.235272][T25956] ? __pfx____sys_sendmsg+0x10/0x10 [ 981.235339][T25956] ? __fget_files+0x2a/0x420 [ 981.235369][T25956] ? __fget_files+0x3a2/0x420 [ 981.235410][T25956] __x64_sys_sendmsg+0x1b1/0x290 [ 981.235445][T25956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 981.235499][T25956] do_syscall_64+0x166/0x520 [ 981.235527][T25956] ? trace_irq_disable+0x3b/0x140 [ 981.235549][T25956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.235573][T25956] ? clear_bhb_loop+0x70/0xc0 [ 981.235601][T25956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.235623][T25956] RIP: 0033:0x7f057599e159 [ 981.235644][T25956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.235663][T25956] RSP: 002b:00007f0576796028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.235687][T25956] RAX: ffffffffffffffda RBX: 00007f0575c25fa0 RCX: 00007f057599e159 [ 981.235704][T25956] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 981.235719][T25956] RBP: 00007f0576796090 R08: 0000000000000000 R09: 0000000000000000 [ 981.235733][T25956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.235747][T25956] R13: 00007f0575c26038 R14: 00007f0575c25fa0 R15: 00007ffd6e69f0a8 [ 981.235781][T25956] [ 981.595178][ T5815] tipc: Node number set to 3758096385 [ 981.890767][T24168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.890792][T24168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.021993][T24155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.022017][T24155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.184539][T25971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5561'. [ 983.606982][T25769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.863174][T26010] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5571'. [ 983.885482][T26009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5571'. [ 984.006868][T26013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5572'. [ 984.006921][T26013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5572'. [ 984.146706][T26013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5572'. [ 985.139824][T26039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5581'. [ 985.209956][T25769] veth0_vlan: entered promiscuous mode [ 985.299882][T25769] veth1_vlan: entered promiscuous mode [ 985.471026][T25769] veth0_macvtap: entered promiscuous mode [ 985.501630][T25769] veth1_macvtap: entered promiscuous mode [ 985.569910][T25769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.639565][T25769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.748269][T24155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.751514][T10278] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.751648][T10278] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.751745][T10278] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.965402][T26055] tipc: Enabling of bearer rejected, already enabled [ 986.200229][ T7303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.200288][ T7303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.468765][T18204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.468829][T18204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.572309][T26069] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5594'. [ 986.731868][T26069] netlink: 'syz.4.5594': attribute type 39 has an invalid length. [ 987.105152][T26077] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5595'. [ 987.123805][T26080] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5595'. [ 987.300926][T26085] ip_tables: iptables: counters copy to user failed while replacing table [ 987.324988][T26085] macvlan0: entered promiscuous mode [ 987.683448][T26097] 8021q: VLANs not supported on tunl0 [ 987.733468][T26100] batadv_slave_0: entered promiscuous mode [ 988.070638][T26099] batadv_slave_0: left promiscuous mode [ 988.178195][T26109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5611'. [ 988.369587][T26117] netlink: 'syz.1.5610': attribute type 1 has an invalid length. [ 988.369613][T26117] netlink: 'syz.1.5610': attribute type 4 has an invalid length. [ 988.369628][T26117] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5610'. [ 988.391225][T26109] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.391897][T26109] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.288988][ T52] Bluetooth: hci1: ACL packet for unknown connection handle 3484 [ 989.871254][T26153] batadv_slave_0: entered promiscuous mode [ 990.208167][T26152] batadv_slave_0: left promiscuous mode [ 990.455299][T26167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5626'. [ 990.618435][T26174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5629'. [ 990.808281][T26176] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5631'. [ 991.076229][T26184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5630'. [ 991.432641][T26195] ip_tables: iptables: counters copy to user failed while replacing table [ 991.680031][T26198] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5639'. [ 991.877199][T26206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5643'. [ 991.893785][T26206] veth0_to_bond: entered allmulticast mode [ 992.329332][T26220] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5651'. [ 992.653687][T26229] ip_tables: iptables: counters copy to user failed while replacing table [ 992.834147][T26236] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5654'. [ 993.328579][T26247] netlink: 'syz.4.5660': attribute type 10 has an invalid length. [ 993.393326][T26242] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5659'. [ 993.443193][T26242] syzkaller0: entered promiscuous mode [ 993.443252][T26242] syzkaller0: entered allmulticast mode [ 993.752038][T26253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5663'. [ 994.132241][T26272] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5670'. [ 994.146930][T26253] 8021q: adding VLAN 0 to HW filter on device bond14 [ 994.199562][T26272] netlink: 'syz.1.5670': attribute type 1 has an invalid length. [ 994.283855][T26279] netlink: 'syz.1.5670': attribute type 1 has an invalid length. [ 994.366834][T26284] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5673'. [ 994.385181][T26284] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5673'. [ 994.576982][T26289] ip_tables: iptables: counters copy to user failed while replacing table [ 994.637065][T26294] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 994.728936][T26298] netlink: 'syz.5.5679': attribute type 1 has an invalid length. [ 994.795013][T26298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 994.830446][T26299] bond1: (slave veth0_to_bond): making interface the new active one [ 994.846344][T26299] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 994.887778][T26302] bond1: entered promiscuous mode [ 994.887802][T26302] veth0_to_bond: entered promiscuous mode [ 994.888044][T26302] bond1: entered allmulticast mode [ 994.888061][T26302] veth0_to_bond: entered allmulticast mode [ 995.489518][T26315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5684'. [ 995.558781][T26315] 8021q: adding VLAN 0 to HW filter on device bond13 [ 995.582505][T26323] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5686'. [ 995.596268][T26323] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5686'. [ 996.027857][T26335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5690'. [ 996.310904][T26345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5693'. [ 997.971062][T26395] 8021q: adding VLAN 0 to HW filter on device bond16 [ 998.048112][T26401] vlan3: entered promiscuous mode [ 998.048144][T26401] bond16: entered promiscuous mode [ 998.050356][T26401] vlan3: entered allmulticast mode [ 998.050378][T26401] bond16: entered allmulticast mode [ 999.693160][T26451] __nla_validate_parse: 6 callbacks suppressed [ 999.693210][T26451] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5727'. [ 999.749653][T26451] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.940988][T26464] openvswitch: netlink: Flow actions attr not present in new flow. [ 1000.179689][T26476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5733'. [ 1000.209549][T26472] only policy match revision 0 supported [ 1000.209570][T26472] unable to load match [ 1000.531807][T26490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5738'. [ 1001.383904][T26519] netlink: 'syz.4.5746': attribute type 5 has an invalid length. [ 1001.550845][T26521] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5748'. [ 1001.808192][T26531] netlink: 'syz.1.5752': attribute type 97 has an invalid length. [ 1001.808251][T26531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5752'. [ 1001.808293][T26531] netlink: 'syz.1.5752': attribute type 97 has an invalid length. [ 1001.808326][T26531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5752'. [ 1001.924220][T26538] netlink: 'syz.5.5754': attribute type 1 has an invalid length. [ 1001.925541][T26538] netlink: 240 bytes leftover after parsing attributes in process `syz.5.5754'. [ 1001.925598][T26538] netlink: 'syz.5.5754': attribute type 1 has an invalid length. [ 1001.927438][T26538] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5754'. [ 1001.929672][T26538] bridge_slave_1: left allmulticast mode [ 1001.929735][T26538] bridge_slave_1: left promiscuous mode [ 1001.932058][T26538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.028994][T26538] bridge_slave_0: left allmulticast mode [ 1002.029055][T26538] bridge_slave_0: left promiscuous mode [ 1002.029485][T26538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.108913][T26541] netlink: 'syz.5.5754': attribute type 21 has an invalid length. [ 1002.991240][T26564] batadv_slave_0: entered promiscuous mode [ 1003.201877][T26568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5762'. [ 1003.233277][T26563] batadv_slave_0: left promiscuous mode [ 1003.327507][T26577] netlink: 'syz.2.5766': attribute type 1 has an invalid length. [ 1003.378905][T26576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5766'. [ 1003.406334][T26577] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1003.407468][T26577] netlink: 'syz.2.5766': attribute type 1 has an invalid length. [ 1003.663418][T26577] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1003.680253][T26577] netlink: 'syz.2.5766': attribute type 1 has an invalid length. [ 1003.797370][T26593] netlink: 'syz.4.5771': attribute type 1 has an invalid length. [ 1003.838175][T26577] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1003.986255][T26577] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1004.016663][T26600] ksmbd: Unknown IPC event: 1, ignore. [ 1004.060713][T26593] bond15: entered promiscuous mode [ 1004.061190][T26593] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1004.107936][T26577] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1004.210179][T26577] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1004.328508][T26604] bond1 (unregistering): Released all slaves [ 1004.407604][T26612] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1004.441871][T26601] tipc: Started in network mode [ 1004.441931][T26601] tipc: Node identity , cluster identity 4711 [ 1004.441966][T26601] tipc: Failed to obtain node identity [ 1004.442029][T26601] tipc: Enabling of bearer rejected, failed to enable media [ 1004.536592][T26606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1004.808620][T26617] tipc: Resetting bearer [ 1005.241532][T26634] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 1005.646654][T26646] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5785'. [ 1005.671625][T26648] tipc: Started in network mode [ 1005.671643][T26648] tipc: Node identity , cluster identity 4711 [ 1005.671658][T26648] tipc: Failed to obtain node identity [ 1005.671685][T26648] tipc: Enabling of bearer rejected, failed to enable media [ 1005.904856][T26661] ip_tables: iptables: counters copy to user failed while replacing table [ 1006.057751][T26668] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5791'. [ 1006.060174][T26669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5791'. [ 1006.333112][T26677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5795'. [ 1006.410864][T26680] validate_nla: 3 callbacks suppressed [ 1006.410923][T26680] netlink: 'syz.6.5792': attribute type 1 has an invalid length. [ 1006.577997][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5792'. [ 1006.609375][T26686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5796'. [ 1006.753590][T26683] bond2: (slave geneve2): making interface the new active one [ 1006.762221][T26683] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1006.927694][T26700] netlink: 'syz.4.5800': attribute type 1 has an invalid length. [ 1006.927719][T26700] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5800'. [ 1006.929969][T26702] ip_tables: iptables: counters copy to user failed while replacing table [ 1007.036325][T10278] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1007.038968][T24177] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1007.039068][T24177] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1007.039143][T24177] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1007.212660][T26708] netlink: 'syz.6.5806': attribute type 2 has an invalid length. [ 1007.677844][T26717] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5808'. [ 1007.938445][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.939397][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.939623][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.939823][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.940018][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.940217][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.940413][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.940606][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.941433][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.941954][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.942155][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.942349][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.942550][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.942767][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.942970][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.943171][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.943390][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.943590][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.943786][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.944078][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.977998][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.978203][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.978364][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.978498][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.978653][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.978793][T26731] 8021q: VLANs not supported on ipvlan0 [ 1007.978977][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.060319][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.060566][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.060772][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.061048][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.061273][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.061504][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.061722][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.061919][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.062117][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.062377][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.062596][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.062804][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.063015][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.063235][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.063455][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.063624][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.063708][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.117292][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.117505][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.117711][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.117928][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.118121][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.118310][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.118516][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.118723][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.118908][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.119084][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.119304][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.119519][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.119736][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.119958][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.120143][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.120322][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.120504][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.120689][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.120873][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.121090][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.320856][T26731] 8021q: VLANs not supported on ipvlan0 [ 1008.872013][T26747] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5817'. [ 1008.949200][T26749] ip_tables: iptables: counters copy to user failed while replacing table [ 1009.261920][T26755] netlink: 'syz.1.5821': attribute type 12 has an invalid length. [ 1009.374205][T26761] syzkaller0: entered promiscuous mode [ 1009.379873][T26761] syzkaller0: entered allmulticast mode [ 1009.417229][T26761] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5825'. [ 1009.460400][T26764] netlink: 'syz.4.5824': attribute type 1 has an invalid length. [ 1009.843794][T26764] bond16: entered promiscuous mode [ 1009.858340][T26764] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1010.006852][T26771] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1010.011089][T26771] bond16: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1010.011118][T26771] bond16: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1010.121471][T26771] bond16: (slave wireguard0): making interface the new active one [ 1010.121500][T26771] wireguard0: entered promiscuous mode [ 1010.139181][T26771] bond16: (slave wireguard0): Enslaving as an active interface with an up link [ 1010.188262][T26780] syzkaller1: entered promiscuous mode [ 1010.188288][T26780] syzkaller1: entered allmulticast mode [ 1010.460372][T26786] bond0: Error: Cannot enslave bond to itself. [ 1010.463110][T26786] netlink: 'syz.6.5828': attribute type 11 has an invalid length. [ 1010.878920][T26796] ip_tables: iptables: counters copy to user failed while replacing table [ 1010.905485][T26799] syzkaller0: entered promiscuous mode [ 1010.905510][T26799] syzkaller0: entered allmulticast mode [ 1011.119491][T26801] __nla_validate_parse: 1 callbacks suppressed [ 1011.119513][T26801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5835'. [ 1011.370681][T26808] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5837'. [ 1011.417791][T26801] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1011.851335][T26817] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5842'. [ 1011.991863][T26821] pim6reg527: entered allmulticast mode [ 1012.291045][T26834] syzkaller0: entered promiscuous mode [ 1012.291071][T26834] syzkaller0: entered allmulticast mode [ 1012.453353][T26840] ip_tables: iptables: counters copy to user failed while replacing table [ 1012.550247][T26844] netlink: 'syz.1.5852': attribute type 4 has an invalid length. [ 1012.711886][T26848] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1012.862749][T26850] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5858'. [ 1012.877813][T26850] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5858'. [ 1013.015251][T26854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5857'. [ 1013.302661][T26861] openvswitch: netlink: Port 856954028 exceeds max allowable 65535 [ 1013.466451][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5860'. [ 1013.632843][ T5619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1013.651749][ T5619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1013.665849][ T5619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1013.673319][ T5619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1013.700779][ T5619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1013.704847][T26867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5861'. [ 1014.190307][T26883] ip_tables: iptables: counters copy to user failed while replacing table [ 1014.218660][T26885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5867'. [ 1014.253920][T26888] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5869'. [ 1015.153132][T26923] xt_CONNSECMARK: invalid mode: 0 [ 1015.403807][T26866] wlan0 speed is unknown, defaulting to 1000 [ 1015.416249][T26866] lo speed is unknown, defaulting to 1000 [ 1015.539147][T26928] ip_tables: iptables: counters copy to user failed while replacing table [ 1015.776558][ T52] Bluetooth: hci7: command tx timeout [ 1016.143908][T26946] __nla_validate_parse: 9 callbacks suppressed [ 1016.143965][T26946] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5885'. [ 1016.183584][T26946] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5885'. [ 1016.767003][T26952] xt_bpf: check failed: parse error [ 1017.249825][T26952] bond3: option resend_igmp: invalid value (32767) [ 1017.249855][T26952] bond3: option resend_igmp: allowed values 0 - 255 [ 1017.380061][T26952] bond3 (unregistering): Released all slaves [ 1017.855754][ T52] Bluetooth: hci7: command tx timeout [ 1018.071535][T26966] tipc: Enabling of bearer rejected, already enabled [ 1018.579400][T26978] netlink: 'syz.5.5892': attribute type 1 has an invalid length. [ 1018.658774][T26981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5894'. [ 1019.247222][T26985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5895'. [ 1019.939080][ T52] Bluetooth: hci7: command tx timeout [ 1022.031566][ T52] Bluetooth: hci7: command tx timeout [ 1023.682833][T26974] batadv_slave_0: entered promiscuous mode [ 1023.683034][T26974] batadv_slave_0: left promiscuous mode [ 1023.891696][T26978] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1023.918251][T26866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.918756][T26866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.919128][T26866] bridge_slave_0: entered allmulticast mode [ 1023.925470][T26866] bridge_slave_0: entered promiscuous mode [ 1023.987732][T26866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.988217][T26866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.988574][T26866] bridge_slave_1: entered allmulticast mode [ 1024.041543][T26866] bridge_slave_1: entered promiscuous mode [ 1024.442913][T26866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.553970][T26866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.618522][T26997] ip6t_rt: too many addresses specified [ 1024.670977][T26997] netlink: 'syz.5.5900': attribute type 11 has an invalid length. [ 1024.882731][T27000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5898'. [ 1025.104387][T26866] team0: Port device team_slave_0 added [ 1025.121112][T26866] team0: Port device team_slave_1 added [ 1025.287536][T27008] netlink: ct_mark mask cannot be 0 [ 1025.287632][T27008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1025.324520][T26998] netlink: 'syz.5.5900': attribute type 11 has an invalid length. [ 1025.434449][T26866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.434469][T26866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.434498][T26866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.752189][T27016] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5904'. [ 1025.798660][T26866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.798679][T26866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.798710][T26866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.778590][T26866] hsr_slave_0: entered promiscuous mode [ 1026.793695][T26866] hsr_slave_1: entered promiscuous mode [ 1026.809187][T26866] debugfs: 'hsr0' already exists in 'hsr' [ 1026.809254][T26866] Cannot create hsr debugfs directory [ 1027.749484][T27030] netlink: 'syz.6.5909': attribute type 2 has an invalid length. [ 1027.902530][T27030] : entered promiscuous mode [ 1027.929848][T27031] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5910'. [ 1028.208651][T27038] xt_ecn: cannot match TCP bits for non-tcp packets [ 1028.226218][T27031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1028.438687][T27034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1029.037673][T27049] netlink: 'syz.5.5913': attribute type 21 has an invalid length. [ 1029.037778][T27049] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5913'. [ 1029.163568][T27052] netlink: 'syz.5.5913': attribute type 21 has an invalid length. [ 1029.163596][T27052] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5913'. [ 1029.235702][T26866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1029.235742][T26866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.571119][T27049] netlink: 'syz.5.5913': attribute type 4 has an invalid length. [ 1029.571186][T27049] netlink: 'syz.5.5913': attribute type 5 has an invalid length. [ 1029.571222][T27049] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5913'. [ 1029.687504][T27052] netlink: 'syz.5.5913': attribute type 4 has an invalid length. [ 1029.687530][T27052] netlink: 'syz.5.5913': attribute type 5 has an invalid length. [ 1029.687545][T27052] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5913'. [ 1030.165410][T26866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.165450][T26866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.487605][T27067] tipc: Enabling of bearer rejected, already enabled [ 1030.614689][T27075] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5920'. [ 1030.699110][T26866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.699150][T26866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.972865][T27083] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20002 [ 1031.258708][T27087] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5922'. [ 1031.327065][T26866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.327102][T26866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.362622][T27087] ip_tables: iptables: counters copy to user failed while replacing table [ 1032.571222][T27102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5926'. [ 1032.571282][T27102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5926'. [ 1033.201147][T27111] netlink: 'syz.6.5928': attribute type 21 has an invalid length. [ 1033.201206][T27111] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5928'. [ 1033.264186][T27111] netlink: 'syz.6.5928': attribute type 4 has an invalid length. [ 1033.264210][T27111] netlink: 'syz.6.5928': attribute type 5 has an invalid length. [ 1033.264481][T27111] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5928'. [ 1033.293925][T27113] netlink: 'syz.6.5928': attribute type 21 has an invalid length. [ 1033.293985][T27113] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5928'. [ 1033.294134][T27113] netlink: 'syz.6.5928': attribute type 4 has an invalid length. [ 1033.294168][T27113] netlink: 'syz.6.5928': attribute type 5 has an invalid length. [ 1033.294207][T27113] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5928'. [ 1033.420902][T26866] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1033.435119][T26866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1033.464111][T26866] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1033.529448][T26866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1033.569557][T26866] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1033.653030][T26866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1033.670292][T26866] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1033.682313][T26866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1033.858851][T27116] tipc: Enabling of bearer rejected, already enabled [ 1034.485768][T26866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.831755][T27129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5933'. [ 1034.931496][T26866] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.001276][ T7303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.001390][ T7303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.172690][T24170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.172946][T24170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.739314][T27133] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5935'. [ 1036.026844][T27142] sctp: [Deprecated]: syz.2.5937 (pid 27142) Use of int in max_burst socket option deprecated. [ 1036.026844][T27142] Use struct sctp_assoc_value instead [ 1036.401091][T27152] tipc: Enabling of bearer rejected, already enabled [ 1036.439403][T27151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5941'. [ 1036.507177][T27147] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5939'. [ 1036.507271][T27147] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5939'. [ 1040.854189][T26866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.497758][T27213] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1041.821122][T27219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5962'. [ 1042.226963][T27227] sctp: [Deprecated]: syz.2.5965 (pid 27227) Use of int in maxseg socket option. [ 1042.226963][T27227] Use struct sctp_assoc_value instead [ 1042.282740][T27232] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1042.283625][T27232] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1042.291782][T27232] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1042.299562][T27232] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1042.357416][T27232] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1042.357614][T27232] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1042.357796][T27232] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1042.357970][T27232] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1042.358152][T27232] netlink: 124 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1042.525618][T27234] netlink: 'syz.6.5967': attribute type 4 has an invalid length. [ 1043.743616][T26866] veth0_vlan: entered promiscuous mode [ 1043.958003][T26866] veth1_vlan: entered promiscuous mode [ 1044.540879][T27255] batadv_slave_0: entered promiscuous mode [ 1044.908448][T27254] batadv_slave_0: left promiscuous mode [ 1044.947215][T26866] veth0_macvtap: entered promiscuous mode [ 1044.980765][T26866] veth1_macvtap: entered promiscuous mode [ 1045.272443][T26866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.310818][T26866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.381980][ T141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.382034][ T141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.396386][ T7303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.402638][T24170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.286322][ T7306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.286384][ T7306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.857934][ T7306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.857959][ T7306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.771433][T27291] netlink: 'syz.6.5983': attribute type 9 has an invalid length. [ 1047.954126][T27293] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 1048.062609][T27297] __nla_validate_parse: 58 callbacks suppressed [ 1048.062630][T27297] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5986'. [ 1050.685868][T27319] openvswitch: netlink: IP tunnel TTL not specified. [ 1050.685916][T27319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1052.053668][T27331] ip_tables: iptables: counters copy to user failed while replacing table [ 1053.282732][T27339] netlink: 'syz.1.5997': attribute type 64 has an invalid length. [ 1053.282971][T27342] netlink: 'syz.5.5998': attribute type 23 has an invalid length. [ 1053.430822][T27349] netlink: 'syz.1.5997': attribute type 64 has an invalid length. [ 1053.493350][T27356] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5999'. [ 1053.640247][T27356] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5999'. [ 1056.168690][T27383] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 1056.360987][T27388] ip_tables: iptables: counters copy to user failed while replacing table [ 1063.729969][T27477] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6033'. [ 1064.129313][T27483] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6034'. [ 1064.190450][T27483] vlan3: entered allmulticast mode [ 1064.190509][T27483] gretap0: entered allmulticast mode [ 1064.554991][T27490] tipc: Resetting bearer [ 1065.133636][T27504] FAULT_INJECTION: forcing a failure. [ 1065.133636][T27504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1065.133701][T27504] CPU: 1 UID: 0 PID: 27504 Comm: syz.4.6038 Not tainted syzkaller #0 PREEMPT(full) [ 1065.133728][T27504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1065.133741][T27504] Call Trace: [ 1065.133751][T27504] [ 1065.133760][T27504] dump_stack_lvl+0xe8/0x150 [ 1065.133799][T27504] should_fail_ex+0x410/0x560 [ 1065.133830][T27504] _copy_from_user+0x2d/0xb0 [ 1065.133860][T27504] ___sys_sendmsg+0x1c6/0x360 [ 1065.133890][T27504] ? __lock_acquire+0x747/0x2de0 [ 1065.133918][T27504] ? __pfx____sys_sendmsg+0x10/0x10 [ 1065.133982][T27504] ? __fget_files+0x2a/0x420 [ 1065.134012][T27504] ? __fget_files+0x3a2/0x420 [ 1065.134052][T27504] __x64_sys_sendmsg+0x1b1/0x290 [ 1065.134084][T27504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1065.134134][T27504] do_syscall_64+0x166/0x520 [ 1065.134162][T27504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.134192][T27504] ? clear_bhb_loop+0x70/0xc0 [ 1065.134216][T27504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.134236][T27504] RIP: 0033:0x7f3e31b9e159 [ 1065.134256][T27504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.134273][T27504] RSP: 002b:00007f3e32985028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1065.134296][T27504] RAX: ffffffffffffffda RBX: 00007f3e31e25fa0 RCX: 00007f3e31b9e159 [ 1065.134311][T27504] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1065.134324][T27504] RBP: 00007f3e32985090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.134337][T27504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.134350][T27504] R13: 00007f3e31e26038 R14: 00007f3e31e25fa0 R15: 00007ffffc029368 [ 1065.134380][T27504] [ 1066.641840][T27523] ip_tables: iptables: counters copy to user failed while replacing table [ 1066.863870][ T7306] IPVS: starting estimator thread 0... [ 1066.988630][T27530] IPVS: using max 26 ests per chain, 62400 per kthread [ 1067.013692][T27528] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1067.667956][T27542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6046'. [ 1068.251375][T27542] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1068.806779][T27554] netlink: 165 bytes leftover after parsing attributes in process `syz.1.6049'. [ 1068.983448][T27557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6051'. [ 1069.575747][T27563] batadv_slave_0: entered promiscuous mode [ 1069.684105][T27569] netlink: 'syz.1.6053': attribute type 4 has an invalid length. [ 1069.684164][T27569] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6053'. [ 1069.931869][T27574] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 1070.064645][T27569] .`: renamed from bond0 (while UP) [ 1070.486871][T27562] batadv_slave_0: left promiscuous mode [ 1070.716315][T27580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.361933][T27587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6059'. [ 1072.084626][T27597] netlink: 'syz.5.6062': attribute type 1 has an invalid length. [ 1072.895971][T27587] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1073.788498][T27621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6068'. [ 1073.788525][T27621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6068'. [ 1073.788610][T27621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6068'. [ 1074.123842][T27627] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6069'. [ 1074.173367][T27613] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1074.204155][T27622] batman_adv: batadv0: Adding interface: syzkaller0 [ 1074.204177][T27622] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.204643][T27622] batman_adv: batadv0: Interface activated: syzkaller0 [ 1074.544654][T27619] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1074.775482][T27619] batman_adv: batadv0: Removing interface: syzkaller0 [ 1075.360944][T27646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6073'. [ 1076.776649][T27667] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6080'. [ 1077.721614][T27675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6083'. [ 1079.017181][T27691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6088'. [ 1079.017281][T27691] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1079.127003][T27694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6088'. [ 1079.316942][T27691] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6088'. [ 1080.597357][T27708] batadv_slave_0: entered promiscuous mode [ 1081.150954][T27707] batadv_slave_0: left promiscuous mode [ 1081.798428][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6099'. [ 1081.799094][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6099'. [ 1081.799644][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6099'. [ 1081.800133][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6099'. [ 1081.810534][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6099'. [ 1081.811313][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6099'. [ 1081.812007][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6099'. [ 1081.812659][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6099'. [ 1082.547355][T27747] syzkaller0: entered promiscuous mode [ 1082.547569][T27747] syzkaller0: entered allmulticast mode [ 1083.869504][T27756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1084.206662][T27778] __nla_validate_parse: 27 callbacks suppressed [ 1084.206724][T27778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6111'. [ 1084.827634][T27783] veth1_to_bond: entered allmulticast mode [ 1084.970042][T27781] netdevsim netdevsim5: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1085.133426][T27787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6115'. [ 1085.146191][T27780] veth1_to_bond: left allmulticast mode [ 1086.510551][T27809] nbd: must specify at least one socket [ 1086.639389][T27814] syzkaller0: entered promiscuous mode [ 1086.639609][T27814] syzkaller0: entered allmulticast mode [ 1087.399007][T27817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6123'. [ 1087.660674][T27823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6124'. [ 1087.836543][T27817] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1088.153065][T27825] bond5: entered promiscuous mode [ 1088.153281][T27825] bond5: entered allmulticast mode [ 1088.972154][T27836] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6127'. [ 1088.972245][T27836] netlink: 'syz.6.6127': attribute type 7 has an invalid length. [ 1088.972280][T27836] netlink: 'syz.6.6127': attribute type 8 has an invalid length. [ 1088.972313][T27836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6127'. [ 1089.314258][T27840] 8021q: VLANs not supported on xfrm0 [ 1089.678978][T27854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6131'. [ 1089.996294][T27858] pim6reg: entered allmulticast mode [ 1090.043774][T27858] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6132'. [ 1090.044075][T27858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6132'. [ 1090.092554][T27858] ip_tables: iptables: counters copy to user failed while replacing table [ 1090.180433][T27863] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1090.560962][T27862] netlink: 52 bytes leftover after parsing attributes in process `syz.6.6133'. [ 1090.567713][T27862] syzkaller0: entered promiscuous mode [ 1090.567773][T27862] syzkaller0: entered allmulticast mode [ 1090.663174][T27862] xt_CONNSECMARK: invalid mode: 0 [ 1091.918476][T27881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6138'. [ 1092.344052][T27864] Bluetooth: hci1: command 0x0406 tx timeout [ 1092.344144][T27864] Bluetooth: hci6: command 0x0406 tx timeout [ 1092.457851][T27881] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1093.723630][T27901] batadv_slave_0: entered promiscuous mode [ 1094.050725][T27900] batadv_slave_0: left promiscuous mode [ 1094.394095][T27906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6146'. [ 1094.795007][T27912] netlink: 256 bytes leftover after parsing attributes in process `syz.5.6149'. [ 1095.161071][T27911] bond22: option min_links: invalid value (18446744073709551614) [ 1095.161101][T27911] bond22: option min_links: allowed values 0 - 2147483647 [ 1095.267817][T27911] bond22 (unregistering): Released all slaves [ 1096.491363][T27938] batadv_slave_0: entered promiscuous mode [ 1097.875791][T27935] batadv_slave_0: left promiscuous mode [ 1098.168861][T27948] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1099.115592][T27967] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6162'. [ 1099.227046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.606917][T27981] sctp: [Deprecated]: syz.5.6165 (pid 27981) Use of int in maxseg socket option. [ 1099.606917][T27981] Use struct sctp_assoc_value instead [ 1099.611682][T27981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6165'. [ 1099.630000][ T9] dummy0: entered promiscuous mode [ 1099.762807][T27974] FAULT_INJECTION: forcing a failure. [ 1099.762807][T27974] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.762847][T27974] CPU: 0 UID: 0 PID: 27974 Comm: syz.4.6164 Not tainted syzkaller #0 PREEMPT(full) [ 1099.762874][T27974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1099.762889][T27974] Call Trace: [ 1099.762899][T27974] [ 1099.762910][T27974] dump_stack_lvl+0xe8/0x150 [ 1099.762952][T27974] should_fail_ex+0x410/0x560 [ 1099.762984][T27974] should_failslab+0xa8/0x100 [ 1099.763016][T27974] ? skb_clone+0x212/0x3a0 [ 1099.763050][T27974] kmem_cache_alloc_noprof+0xa1/0x600 [ 1099.763090][T27974] ? skb_clone+0x212/0x3a0 [ 1099.763130][T27974] skb_clone+0x212/0x3a0 [ 1099.763169][T27974] __netlink_deliver_tap+0x413/0x860 [ 1099.763220][T27974] ? netlink_deliver_tap+0x2e/0x1b0 [ 1099.763258][T27974] netlink_deliver_tap+0x19c/0x1b0 [ 1099.763295][T27974] netlink_sendskb+0x68/0x140 [ 1099.763330][T27974] nfnetlink_rcv+0x260c/0x28c0 [ 1099.763412][T27974] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1099.763463][T27974] ? ref_tracker_free+0x689/0x830 [ 1099.763518][T27974] ? skb_clone+0x246/0x3a0 [ 1099.763553][T27974] ? __netlink_deliver_tap+0x811/0x860 [ 1099.763605][T27974] ? netlink_deliver_tap+0x2e/0x1b0 [ 1099.763639][T27974] ? netlink_deliver_tap+0x2e/0x1b0 [ 1099.763680][T27974] netlink_unicast+0x7bd/0x940 [ 1099.763724][T27974] netlink_sendmsg+0x813/0xb40 [ 1099.763770][T27974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.763815][T27974] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1099.763846][T27974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1099.763880][T27974] sock_sendmsg_nosec+0x13a/0x180 [ 1099.763907][T27974] ____sys_sendmsg+0x54e/0x850 [ 1099.763945][T27974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1099.763988][T27974] ? import_iovec+0x73/0xa0 [ 1099.764021][T27974] ___sys_sendmsg+0x2a5/0x360 [ 1099.764051][T27974] ? __lock_acquire+0x747/0x2de0 [ 1099.764080][T27974] ? __pfx____sys_sendmsg+0x10/0x10 [ 1099.764150][T27974] ? __fget_files+0x2a/0x420 [ 1099.764181][T27974] ? __fget_files+0x3a2/0x420 [ 1099.764225][T27974] __x64_sys_sendmsg+0x1b1/0x290 [ 1099.764261][T27974] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1099.764316][T27974] do_syscall_64+0x166/0x520 [ 1099.764344][T27974] ? trace_irq_disable+0x3b/0x140 [ 1099.764369][T27974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.764393][T27974] ? clear_bhb_loop+0x70/0xc0 [ 1099.764420][T27974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1099.764443][T27974] RIP: 0033:0x7f3e31b9e159 [ 1099.764464][T27974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.764485][T27974] RSP: 002b:00007f3e32985028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.764510][T27974] RAX: ffffffffffffffda RBX: 00007f3e31e25fa0 RCX: 00007f3e31b9e159 [ 1099.764527][T27974] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1099.764543][T27974] RBP: 00007f3e32985090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.764564][T27974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1099.764579][T27974] R13: 00007f3e31e26038 R14: 00007f3e31e25fa0 R15: 00007ffffc029368 [ 1099.764615][T27974] [ 1101.294463][T28003] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6172'. [ 1101.367348][T28005] batadv_slave_0: entered promiscuous mode [ 1101.737542][T28004] batadv_slave_0: left promiscuous mode [ 1101.788212][ T31] INFO: task syz.0.5348:25298 blocked for more than 143 seconds. [ 1101.788263][ T31] Not tainted syzkaller #0 [ 1101.788297][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1101.788329][ T31] task:syz.0.5348 state:D stack:26896 pid:25298 tgid:25297 ppid:18185 task_flags:0x400140 flags:0x00080002 [ 1101.788557][ T31] Call Trace: [ 1101.788567][ T31] [ 1101.788625][ T31] __schedule+0x17db/0x58f0 [ 1101.788798][ T31] ? __pfx___schedule+0x10/0x10 [ 1101.788864][ T31] ? schedule+0x90/0x2b0 [ 1101.788926][ T31] schedule+0x164/0x2b0 [ 1101.788990][ T31] schedule_preempt_disabled+0x13/0x30 [ 1101.789050][ T31] __mutex_lock+0x7c1/0x1550 [ 1101.789126][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1101.789188][ T31] ? nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1101.789446][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1101.789511][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 1101.789588][ T31] ? __nla_validate_parse+0x2429/0x2d50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1101.789674][ T31] ? do_syscall_64+0x166/0x520 [ 1101.789737][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.789813][ T31] nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1101.789888][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 1101.789975][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1101.790036][ T31] ? trace_kmalloc+0x2a/0xf0 [ 1101.790099][ T31] ? __kmalloc_noprof+0x38c/0x720 [ 1101.790162][ T31] ? __nla_parse+0x40/0x60 [ 1101.790230][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1101.790293][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1101.790365][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 1101.807624][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1101.807676][ T31] ? bpf_lsm_capable+0x9/0x20 [ 1101.807697][ T31] ? security_capable+0x7e/0x2c0 [ 1101.807732][ T31] genl_rcv_msg+0x614/0x7a0 [ 1101.807765][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1101.807791][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1101.807828][ T31] netlink_rcv_skb+0x226/0x4a0 [ 1101.807860][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1101.807887][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1101.807935][ T31] ? down_read+0x2be/0x330 [ 1101.807970][ T31] genl_rcv+0x28/0x40 [ 1101.807993][ T31] netlink_unicast+0x7bd/0x940 [ 1101.808035][ T31] netlink_sendmsg+0x813/0xb40 [ 1101.808075][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1101.808118][ T31] ? apparmor_socket_sendmsg+0x98/0x360 [ 1101.808145][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1101.808178][ T31] sock_sendmsg_nosec+0x13a/0x180 [ 1101.808204][ T31] ____sys_sendmsg+0x54e/0x850 [ 1101.808241][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1101.808279][ T31] ? import_iovec+0x73/0xa0 [ 1101.808311][ T31] ___sys_sendmsg+0x2a5/0x360 [ 1101.808347][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1101.808381][ T31] ? futex_wait+0x2a2/0x390 [ 1101.808458][ T31] ? __pfx_do_futex+0x10/0x10 [ 1101.808495][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 1101.808528][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1101.808581][ T31] do_syscall_64+0x166/0x520 [ 1101.808607][ T31] ? trace_irq_disable+0x3b/0x140 [ 1101.808630][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.808653][ T31] ? clear_bhb_loop+0x70/0xc0 [ 1101.808680][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.808702][ T31] RIP: 0033 ** replaying previous printk message ** [ 1101.808702][ T31] RIP: 0033:0x7fab9b79e159 [ 1101.808723][ T31] RSP: 002b:00007fab9c729028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1101.808747][ T31] RAX: ffffffffffffffda RBX: 00007fab9ba25fa0 RCX: 00007fab9b79e159 [ 1101.808763][ T31] RDX: 000000000000c000 RSI: 0000200000000100 RDI: 0000000000000008 [ 1101.808778][ T31] RBP: 00007fab9b83506b R08: 0000000000000000 R09: 0000000000000000 [ 1101.808793][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.808806][ T31] R13: 00007fab9ba26038 R14: 00007fab9ba25fa0 R15: 00007ffc29438858 [ 1101.808841][ T31] [ 1101.808909][ T31] [ 1101.808909][ T31] Showing all locks held in the system: [ 1101.808922][ T31] locks held by pr/ttyS0/16: 1, last CPU#0: [ 1101.809069][ T31] #0: ffffffff8ec364f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1101.809229][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 1101.809246][ T31] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1101.809338][ T31] locks held by klogd/4973: 1, last CPU#0: [ 1101.809355][ T31] #0: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __hrtimer_rearm_deferred+0x99/0x4b0 [ 1101.809429][ T31] locks held by getty/5374: 2, on CPU#0: [ 1101.809471][ T31] #0: ffff88802912e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1101.890013][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1101.890209][ T31] locks held by kworker/1:12/11735: 2, last CPU#1: [ 1101.890247][ T31] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1101.890388][ T31] #1: ffffc90003a47c40 (cleanup_vm_area){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1101.890608][ T31] locks held by kworker/u8:18/24170: 5, last CPU#1: [ 1101.890655][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1101.890804][ T31] #1: ffffc90007a27c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1101.890938][ T31] #2: ffffffff8ebe9930 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0x12/0x20 [ 1101.891095][ T31] #3: ffffffff8ee38920 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1a0 [ 1101.891230][ T31] #4: ffffffff8ebff6e0 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 1101.891455][ T31] locks held by syz.3.5312/25199: 2, on CPU#1: [ 1101.891495][ T31] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1101.970956][ T31] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1101.971132][ T31] locks held by syz.0.5348/25298: 2, on CPU#0: [ 1101.971186][ T31] #0: ffffffff902c4448 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1101.971333][ T31] #1: ffffffff8f09f580 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 1101.971527][ T31] locks held by syz.6.6172/28000: 2, on CPU#1: [ 1101.971571][ T31] #0: ffff888056179380 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1101.971728][ T31] #1: ffffffff8ed62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1101.971802][ T31] locks held by syz.1.6173/28005: 2, last CPU#1: [ 1101.971852][ T31] #0: ffff88807d8bc378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1102.131290][ T31] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1102.131455][ T31] locks held by syz.5.6175/28008: 2, last CPU#1: [ 1102.131495][ T31] #0: ffffffff907bf768 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1102.131658][ T31] #1: ffffffff90253400 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 1102.131802][ T31] locks held by syz.2.6174/28009: 2, last CPU#1: [ 1102.131840][ T31] #0: ffff88807d8b9078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1102.131996][ T31] #1: ffffffff8ed5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1102.132263][ T31] [ 1102.132283][ T31] ============================================= [ 1102.132283][ T31] [ 1102.132343][ T31] NMI backtrace for cpu 1 [ 1102.132418][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1102.132490][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1102.132530][ T31] Call Trace: [ 1102.132555][ T31] [ 1102.132585][ T31] dump_stack_lvl+0xe8/0x150 [ 1102.132679][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1102.132841][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1102.132971][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1102.133035][ T31] sys_info+0x135/0x170 [ 1102.133142][ T31] watchdog+0xfd7/0x1030 [ 1102.133213][ T31] ? watchdog+0x1c7/0x1030 [ 1102.133290][ T31] kthread+0x38b/0x480 [ 1102.133354][ T31] ? __pfx_watchdog+0x10/0x10 [ 1102.133407][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.133522][ T31] ret_from_fork+0x514/0xb70 [ 1102.133587][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1102.133641][ T31] ? __switch_to+0xc89/0x1420 [ 1102.133735][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.133791][ T31] ret_from_fork_asm+0x1a/0x30 [ 1102.133928][ T31] [ 1102.133944][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1102.134018][ C0] NMI backtrace for cpu 0 [ 1102.134033][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1102.134056][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1102.134068][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1102.134143][ C0] Code: e8 2e de 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef e5 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 da e4 75 06 cc 44 89 f9 80 e1 07 [ 1102.134160][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 1102.134177][ C0] RAX: 1ffffffff35a7a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1102.134194][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1102.134206][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1102.134219][ C0] R10: dffffc0000000000 R11: ffffffff8572f400 R12: dffffc0000000000 [ 1102.134233][ C0] R13: 0000000000000000 R14: ffffffff9ad3d0c0 R15: 0000000000000000 [ 1102.134247][ C0] FS: 0000000000000000(0000) GS:ffff888124cce000(0000) knlGS:0000000000000000 [ 1102.134263][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1102.134276][ C0] CR2: 0000200000025000 CR3: 000000004bc1a000 CR4: 00000000003526f0 [ 1102.134295][ C0] Call Trace: [ 1102.134302][ C0] [ 1102.134311][ C0] wait_for_lsr+0x184/0x2f0 [ 1102.134335][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1102.134368][ C0] serial8250_console_write+0xaa1/0x1200 [ 1102.134407][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1102.134426][ C0] ? __schedule+0x17f1/0x58f0 [ 1102.134456][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 1102.134486][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1102.134510][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1102.134539][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1102.134562][ C0] nbcon_kthread_func+0x679/0x880 [ 1102.134586][ C0] ? nbcon_kthread_func+0x163/0x880 [ 1102.134605][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1102.134628][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1102.134656][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1102.134686][ C0] kthread+0x38b/0x480 [ 1102.134703][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1102.134722][ C0] ? __pfx_kthread+0x10/0x10 [ 1102.134740][ C0] ret_from_fork+0x514/0xb70 [ 1102.134759][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1102.134776][ C0] ? __switch_to+0xc89/0x1420 [ 1102.134803][ C0] ? __pfx_kthread+0x10/0x10 [ 1102.134821][ C0] ret_from_fork_asm+0x1a/0x30 [ 1102.134859][ C0] [ 1102.135034][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1102.884117][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1102.893259][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1102.903349][ T31] Call Trace: [ 1102.906657][ T31] [ 1102.909618][ T31] vpanic+0x56d/0xa60 [ 1102.913639][ T31] ? __pfx_vpanic+0x10/0x10 [ 1102.918184][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 1102.923773][ T31] panic+0xc5/0xd0 [ 1102.927534][ T31] ? __pfx_panic+0x10/0x10 [ 1102.932007][ T31] ? wq_watchdog_touch+0xf9/0x160 [ 1102.937066][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1102.943291][ T31] watchdog+0x1030/0x1030 [ 1102.947670][ T31] ? watchdog+0x1c7/0x1030 [ 1102.952116][ T31] kthread+0x38b/0x480 [ 1102.956232][ T31] ? __pfx_watchdog+0x10/0x10 [ 1102.960937][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.965558][ T31] ret_from_fork+0x514/0xb70 [ 1102.970175][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1102.975347][ T31] ? __switch_to+0xc89/0x1420 [ 1102.980064][ T31] ? __pfx_kthread+0x10/0x10 [ 1102.984687][ T31] ret_from_fork_asm+0x1a/0x30 [ 1102.989500][ T31] [ 1102.992706][ T31] Kernel Offset: disabled [ 1102.997145][ T31] Rebooting in 86400 seconds..