last executing test programs: 1m14.945016207s ago: executing program 1 (id=6077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000611177000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x7c, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@CTA_TUPLE_REPLY={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0040000}]}, 0x7c}, 0x1, 0xfffff000, 0x0, 0x4040841}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_0\x00'}, 0x18) 1m14.764748821s ago: executing program 1 (id=6081): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000b00000008000300000000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="f37ffce8bf8ed4282cfa065c037a4cce40eca3deba8469d61508ccd66bd29c219958771bcf911773ad9d95b2441c4a67e3df13e567c0777592e08823ac7d845d888f591eb1961e726214b6d5807332979b2ba01353a9b0a4f6584a177048658c14857e8650bd2efa49573b29ac73076a1f966f51066382f6aa12e210cb01ceab7d870b0f4630e2f2c1fbe047f531d36e13c9bc82e4157b3648fe5b5a5f4d3af5a0e2"], 0x28}}, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1, 0x0, 0x0, 0x4081}, 0x0) (async) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) (async) shutdown(r2, 0x1) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ipvlan0\x00', 0x10}) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {}, {}, {0x6, 0x3}]}) 1m14.644466132s ago: executing program 1 (id=6083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000000700)={0x0, 0x0, "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", "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"}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x50, r5, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0x12, 0x14, '-^&.%\xebN^\\,(*[{'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24}, 0x94) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000003c0)={{r3, 0x8000, 0x7fffffff, 0x7fff, 0xaa60, 0x5, 0x8, 0x10001, 0x0, 0x29, 0x5, 0xfffffffffffffff8, 0xbb, 0x5, 0x1c2}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0x7}, 0x1) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x8014, &(0x7f0000000100)={0xa, 0x4e23, 0x77, @loopback, 0x10000}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003"], 0xa8}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c00400000000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 7.089982864s ago: executing program 1 (id=6102): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x6a, 0x3, 0x20000000, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0xcb, 0x4, 0x8}, 0x50) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000440)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x40) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0xb3, @mcast2, 0x2}, 0x1c) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, 0x0, &(0x7f0000000480)) sendmmsg$inet6(r0, 0x0, 0x0, 0x20001c00) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r6], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 7.088200323s ago: executing program 1 (id=6104): r0 = socket$pptp(0x18, 0x1, 0x2) accept4(r0, 0x0, 0x0, 0x800) syz_emit_ethernet(0x42, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010106, @local, {[@rr={0x7, 0x3, 0x2b}]}}, @redirect={0x8, 0x0, 0x0, @dev, {0x5, 0x4, 0x0, 0x0, 0x1, 0x64, 0xff, 0x0, 0x89, 0x0, @remote, @remote}}}}}}, 0x0) 7.086545164s ago: executing program 1 (id=6106): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, 0x0, 0x20040002) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x20000011) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0xfe}, 0x0) 6.12939842s ago: executing program 3 (id=6129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000680)={0x0, @in6={{0xa, 0x4e24, 0x3, @remote, 0x3}}, 0x4e, 0x6, 0x503, 0x3, 0x414d6714bf78e175, 0x80000001, 0x3}, 0x9c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x8c, &(0x7f0000000480)}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, &(0x7f0000000600)="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", &(0x7f0000000000)=""/25}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e61afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000100), 0x4) 5.977590012s ago: executing program 3 (id=6132): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r3, &(0x7f0000005580)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x10122, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x0, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x20) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=@base={0x10, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r9, 0x0, 0x1}, 0x48) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f0000000080)="4567cde5c604faed3f627c4ff74bc279053b36c578d8efe8251b9b0e517286a2978eb5895f3849a22428b6dbefe7107e149090bd526cca144c101d9925b76696e3104782c3a826c3e2549bbf7c714b1cb2c9dc33ce04b5efe09b0285359f13ee3b67894f1314a3e9bf391aa5bc7662142cdb7ac73b7701a8c02332e224798a6de5f3331a9a9325d19b6f243fb2665d992844d71e01be1ba7090405b4e4fd4488340c75c6bbd0e3d8d73a00000000", 0xae}, {&(0x7f0000000140)="a6f33c24520e3d54eb8deca99ee6a516bb31fad3258556aa9c72e78e4455327ba4e8bf42aad6b142489916ebbc042932bc6123b347ff0d69b04e70ac60e66497b7cdeb6e86c9d04918201e4f123371b959f81b98aff13fa116b2b6a532e69b", 0x5f}], 0x3}, 0x40005) 3.879192692s ago: executing program 3 (id=6144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x258}]}}}]}, 0x3c}}, 0x0) close(r1) r3 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7, 0xc, 0x0, 0xaf}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40400}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000900)="bada30fbc99b5400040000ea0756", 0xe, 0x8040, &(0x7f00000001c0)={0x11, 0x86dd, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)=@delchain={0x1798, 0x65, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xc}, {0xfff1, 0xc}, {0xfff1, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x1, 0x100}}]}}, @TCA_RATE={0x6, 0x5, {0xf, 0x2d}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff6}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_basic={{0xa}, {0x1718, 0x2, [@TCA_BASIC_POLICE={0x820, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x1, 0x10e54a43, 0x1, 0xb, 0xb2d, 0x1, 0x9, 0x7743, 0xbe, 0xe0000000, 0x241bd6f7, 0x80000000, 0x80000000, 0x98, 0xffffffff, 0x1, 0x3, 0x0, 0x7fffffff, 0x10000, 0x5, 0x20000000, 0x5, 0x6, 0x544, 0x7, 0x5, 0xb4, 0xe0000000, 0x8, 0xfffffe01, 0x80000000, 0x4, 0x6, 0xcc, 0xfff, 0x80000000, 0x1000, 0x8000, 0xa, 0x31f, 0x7, 0x6bc5, 0xfff, 0xfff, 0xff, 0x0, 0x1000, 0x3, 0x8, 0x3aa, 0x1, 0x4, 0x0, 0x4, 0x1000, 0x7fff, 0x3, 0x18ca, 0x10001, 0x1, 0x8, 0x2, 0x8, 0x3, 0xfff, 0x2, 0x80000000, 0x8cec, 0x7, 0xa, 0x4, 0xa, 0x200, 0x7, 0xf70, 0xffffffff, 0x5, 0x6, 0xffff7fff, 0x3, 0x695, 0x6, 0x8, 0x2, 0xfffffffd, 0x7fffffff, 0x7, 0x3, 0x8, 0xb3, 0x6, 0x7, 0xffffffe0, 0xf, 0x9, 0xc, 0x8, 0x3, 0x10, 0x5, 0x2, 0x401, 0xff, 0xa, 0x1, 0xb75, 0xbf73, 0x2, 0x96, 0x1, 0x7, 0x4, 0x401, 0x70, 0x40, 0x0, 0x978, 0x6f, 0x80, 0x9, 0x6, 0x2, 0x14000000, 0xfffffffb, 0x8, 0x7ff, 0x6566, 0x9, 0x6, 0xe, 0x9, 0x80000001, 0x4, 0x2, 0x10001, 0x7fff, 0x7, 0x400, 0x5, 0x1, 0x7bc, 0x7, 0x1551c250, 0xffffffff, 0xc, 0x2, 0x3, 0x7, 0x5, 0x800, 0x4, 0x4, 0x0, 0x4, 0x1ff, 0xf, 0x5, 0x7, 0x4, 0x1, 0x800, 0x8, 0x6, 0x8, 0x800, 0x3, 0x77, 0x5, 0x1, 0xffff, 0x4, 0x5, 0x3, 0xff, 0x5, 0x4, 0xb, 0x79, 0x2c00, 0x7, 0x101, 0x4, 0xaf8, 0x7, 0x2, 0x2ffd, 0x1ff, 0x3, 0xffffffff, 0x3, 0x8, 0x8, 0x7, 0x4, 0xf4, 0xe1de, 0x3, 0x5, 0xf, 0xd, 0x8547, 0x3ff, 0x2, 0x7, 0x3, 0x9, 0x839a, 0x10000, 0x709e, 0x1, 0x7, 0xfffffff8, 0x1ff, 0xdec, 0x400000, 0x3ff, 0x6, 0x1, 0x8, 0x800, 0x0, 0x10, 0x3, 0xc, 0x1, 0xffffffff, 0x7, 0x2, 0x30bc, 0x2abc4e85, 0x3, 0x1, 0x3, 0x10000, 0x3, 0x7, 0xff, 0x7, 0x2, 0x60, 0x6, 0x7, 0x2, 0x1, 0xa, 0x8, 0x10, 0x87c, 0xd3, 0x3, 0x9, 0x8, 0x40, 0xb]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0xffff, 0x5, 0xffffffff, 0x1, 0x1, 0x0, 0xfffffffd, 0x5, 0x2, 0xfffffff8, 0x6, 0x1ff, 0x44c1, 0x4, 0x7ffffffb, 0x6, 0xfffff001, 0xbb, 0x5, 0x6da, 0x8, 0x1000, 0x3, 0x4, 0xff, 0x0, 0x3, 0x5, 0x4, 0x6, 0x2, 0x5b58, 0x2, 0x124384b4, 0x7ff, 0xffffffff, 0x9, 0x9, 0x1, 0x2, 0x38000, 0x401, 0x632, 0x0, 0x0, 0x0, 0x12c, 0x9, 0x7ac, 0x2, 0x1, 0x4, 0x19, 0x2a9, 0x3ff, 0xfffffffa, 0x1, 0x5, 0x7, 0x80000001, 0x3, 0x7, 0x3, 0xfff, 0x81, 0x9, 0xffffffff, 0x2056, 0x1, 0x9, 0x1, 0x9, 0x34, 0xffffffff, 0x5, 0x6, 0xaf, 0x6, 0x1, 0x1, 0x8, 0x8, 0xf, 0x35, 0x7, 0x81, 0x8, 0x7, 0x5, 0x98f, 0x3, 0x7, 0x10000, 0x3ca, 0x7a7, 0x9, 0x6, 0x3, 0xf74, 0xfffffffe, 0x3, 0xe2f8, 0x9, 0x4, 0x1, 0x3, 0x626c5b29, 0x100, 0x1, 0x5, 0x6, 0x8001, 0x8, 0x4, 0x2, 0x1, 0x80000001, 0x101, 0x0, 0x0, 0x7, 0x10, 0x813, 0x8001, 0x101, 0x10, 0x2, 0xb, 0xdb1, 0x7a54, 0x4, 0xfc, 0xe4fe, 0x8, 0x4, 0x1, 0x800, 0x7, 0x8, 0x2, 0x5, 0x2, 0x3, 0x7fffffff, 0x400, 0x7, 0xfffffff9, 0xfffffffd, 0x3ff, 0x8, 0x43b, 0x401, 0x8, 0x8, 0x9, 0x2, 0x6, 0x1, 0x0, 0x3c5, 0x8, 0x7, 0xb, 0x3, 0x8, 0x4, 0x800, 0x2, 0x8, 0x4, 0x80000000, 0x8, 0x2, 0xb1ce, 0x3, 0x6, 0x2, 0xf4, 0x0, 0x89, 0x3, 0x1, 0x7f, 0x40, 0x9, 0x889b, 0x40, 0x0, 0xa89, 0x929, 0xffff, 0x7, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x7, 0x73, 0x9, 0xfa15, 0x200, 0x8, 0x401, 0x7, 0x1, 0x400, 0x4, 0x9, 0x0, 0x7, 0x7, 0xa, 0xfffffffe, 0x5, 0xbc, 0x80, 0x7, 0x6, 0x81, 0xfff, 0x5, 0x8, 0x8, 0x2, 0x30, 0x2, 0x9, 0xc3b3, 0x401, 0x1ff, 0x2, 0xfffff000, 0x3, 0x2, 0x5, 0x8, 0xa40, 0x8, 0x8, 0xd, 0x9, 0x4, 0xc, 0x1000, 0x1, 0xac, 0x101, 0x200, 0x9, 0x22111037, 0x100, 0x591]}, @TCA_POLICE_RATE64={0xc}]}, @TCA_BASIC_POLICE={0x468, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2ba}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x2, 0x4, 0x6, 0x6, {0x7, 0x2, 0x1, 0xfff2, 0xa6, 0x4}, {0xe2, 0x0, 0x6eba, 0x8, 0x1, 0x1}, 0x3, 0x80, 0x8000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x0, 0x0, 0x1, 0x9, 0x0, 0x652b5949, 0x5, 0x6a68, 0xfffffffa, 0x1000, 0x5, 0x9, 0x10001, 0x80000000, 0x4, 0x0, 0xffff0001, 0x37, 0x5, 0x8, 0x2, 0x313b0e92, 0x7, 0x6611e6aa, 0x397, 0x8, 0x2, 0x2, 0x2, 0x1, 0x4, 0x748d, 0x7, 0x6, 0x10001, 0x9, 0x8, 0xffffffff, 0x5, 0x9, 0x7fff, 0x1, 0xa, 0x3, 0x6, 0x2, 0x1, 0x1, 0x8, 0x8, 0x2, 0x8, 0x0, 0xff, 0x4, 0x4, 0x6, 0xfffffffe, 0x1, 0x316, 0x10, 0x7fff, 0x7, 0x1, 0x0, 0x9, 0x7, 0x8, 0x0, 0x5, 0xd00, 0xa1f, 0x5, 0xfff, 0x8, 0xee, 0xc0, 0x63, 0x1, 0x9, 0x1000, 0xfff, 0x1, 0x0, 0x3ff, 0x2, 0xa00000, 0xf, 0x1c, 0x1, 0x4, 0x5, 0x40, 0x6, 0xb3ec, 0x8, 0x7, 0xbd2d, 0xfffffff8, 0x10, 0x50f3, 0x1000, 0x2, 0x3, 0x0, 0xd, 0x3, 0x4, 0x971, 0x3, 0x9, 0x9, 0x2, 0x4, 0x9, 0x2, 0xa6, 0xb, 0x88, 0x800, 0x10001, 0x3, 0xb1d, 0x5, 0x8, 0x8, 0x8001, 0x1ff, 0xe, 0x4, 0x10, 0x1000, 0x6, 0x3, 0x8, 0x9, 0xffff, 0x0, 0x3, 0x1, 0x4, 0x6, 0x6, 0x9, 0x5, 0xcc9, 0x98a9, 0x4, 0x2, 0xea, 0x1, 0x7f, 0x81, 0x7, 0x5, 0x80, 0x200, 0x2, 0x4, 0xffff9e99, 0xfffff000, 0xd, 0x6, 0x7e9, 0x2, 0x1, 0x3, 0x8, 0x4, 0x10000, 0x81, 0x1, 0x5, 0xe6, 0x80000001, 0x91, 0x8a5ebf3, 0x1, 0x101, 0x8, 0x80, 0x6, 0x8001, 0x4, 0x780, 0x2, 0x5, 0x7b8b, 0x5000000, 0x2, 0x0, 0x7e9b, 0x9, 0x401, 0x5, 0x8, 0x4, 0xa, 0xbb, 0xe, 0x2, 0x7fff, 0x2, 0x2, 0x2, 0xfffffff9, 0x3ff, 0x31f, 0x3, 0x7, 0x2, 0x7, 0x2, 0x400, 0x1ff, 0xc, 0x0, 0xfffffff8, 0x7f, 0x8, 0x455bd702, 0x3, 0x0, 0x0, 0xea7, 0x4, 0x33800, 0x6, 0x9, 0x3df, 0xfffff001, 0x3, 0x42b6, 0xb2c3, 0x1, 0x2, 0x1, 0x6, 0xffffffff, 0x0, 0x4, 0x3, 0x401, 0x2, 0x8000, 0xfffffff7, 0x401, 0x7, 0x3, 0xd, 0x8, 0x1, 0x7fffffff, 0x6, 0x8]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff3, 0x3}}, @TCA_BASIC_ACT={0xa84, 0x3, [@m_vlan={0x14c, 0xe, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf81}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xca2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe7d}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc39}]}, {0xe6, 0x6, "1417e68231fbf41361fbb3fa83967cf89e07cad6b9e4963553158002bc789f191518aa2377bcdd01970b9a2b5b3a8cc5428d0c10a528de32887fa24995f19b9368e1c278860f20ba9f28d3b220335eb75debb8afb903dd968e1c00be75601968be979ccddb7e3a3f7f7f8de4bffe3a2d87b1f07a2696c4455e31464d1610db2967ae532b84d03cac485102e583d0bad42896cbf040c0477e17f10edc2b2865aaab735f41f4d275bbcef21011005637b0d92c672017dd74e0c48d59654a27b523f3fba0fd4c25e82f0dc7dd757fff93a9d91b08c2fd004fc399c79816ba56b2c281f1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0x128, 0x19, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0xfffffffe, 0x1, 0x3, 0xfffffff8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0xc8, 0x6, "52ff3ffe72d265f360a23e8049738f861d0068daf415482fcb8c9c2935f25d6e6d167551cbb50e97cfb897ee8fe3ee0859755fbdcddd947cf0f396ce018755575c5ff2b71a31ba684864b4462035acc7c1b5e8f13e36ae9529de52171f50ab71ade2ab518069a02873b1db63cfe613f7be57b58ce562aae1bc7bf1e11e44360b9e4f523d77cca5c59a40ec4308eb460d1c95fb5ce9f69a61b3eb54cc963d1dfd1852a550842dc592f13d492d5413254b92484402743443d18b0dee21662c31def6a10146"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0x200, 0x14, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x1, 0x7, 0x0, 0xfffff253}, 0x1, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xb, 0x0, 0xa, 0x5}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x2, 0x81, 0x81}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffff801, 0x5, 0x10000000, 0x4, 0x7}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xba, 0x6, 0x20000000, 0x7}, 0x2, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x6, 0x5, 0x1000, 0x401}, 0x5, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2c8a, 0x5, 0xffffffffffffffff, 0x1c, 0x8}, 0x2, r5}}]}, {0xf1, 0x6, "dc2f5c60fff4fb8d28c54460bb8e509650dae8dca29622ba1a71b7f9981951d2a8c5a73d5b2a7a8be61cf1fe7ca590e276644cfcc2d8460f040829df624077fa88f5112fafd6bd4c60845e3d44d564c70c49036795d63cdcba6c9293c402727dc0222c35134f935fef84a89ef09725569932a58c41748dd76eb437c4cb395c2466b82a921bc3d155cbc15e7812feadd7245bb880a46abf144b2986da968819ec56e01aad3b58cdb854e235d1be9bb11ca4b64121a24c533de3ab9c39fb36e74a81c4ddf3e9f4f2685ff7abcc05190f4ac427d3d63574bd053c0b25eb97b895c5ee90844a31756c4344c4646fa3"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_police={0x534, 0x1f, 0x0, 0x0, {{0xb}, {0x41c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x200, 0x2, 0x10001, 0x8, 0x0, 0xa568, 0x8001, 0x0, 0xb0f, 0x7, 0x0, 0x3, 0x1, 0x400, 0x0, 0x357, 0x0, 0x2, 0x51, 0x5911, 0x8, 0x60, 0xe1b0, 0x0, 0xf0, 0x19, 0x7f, 0xe, 0x0, 0xf6a2, 0x10000, 0x7, 0x4, 0xed7b, 0x400, 0x369dcce, 0x7, 0x80, 0x80000001, 0x6, 0x0, 0x6, 0xff, 0xffffffff, 0xd, 0x3a, 0x1ff, 0x4, 0xb84699e, 0x81, 0x9, 0x8, 0x2, 0x6, 0x100, 0x7, 0xf, 0x5, 0x0, 0xffffff04, 0x0, 0x3, 0x2, 0x2, 0x9, 0xfffffff8, 0x9, 0x101, 0x5, 0x2, 0x2, 0x1, 0x2, 0x7fff, 0x7, 0x3, 0x57cb, 0x80, 0x0, 0x0, 0x3, 0x3f9f6dc1, 0x10000, 0x4, 0x40, 0xffffffff, 0xfffffffb, 0x8, 0x8, 0x4, 0x40, 0x8, 0x5, 0x7, 0xe0, 0x5, 0x3, 0x10000000, 0xe, 0x7ff, 0x2, 0x3, 0x1c, 0x399b, 0x8001, 0x7, 0x400, 0x7, 0x7a30, 0x6, 0xdbf1, 0x5, 0x6, 0xe598, 0xffff5dfa, 0x2, 0xc0, 0x5, 0x200, 0x1ff, 0x401, 0x0, 0x7ff, 0xff, 0x6, 0x7fffdded, 0x3, 0x5b0, 0x4, 0x5, 0x8, 0x4, 0xfffffffc, 0x7, 0xfffff000, 0x4, 0x7, 0x0, 0xfffffff8, 0x1, 0xfffffffc, 0x7, 0x10000, 0xe6b5, 0x5, 0x10001, 0x4, 0x7, 0x3, 0x9, 0xce, 0x7, 0x80000000, 0x4, 0x6, 0x2, 0x6, 0xea3c, 0x3, 0x9737, 0x98, 0x0, 0x1, 0x0, 0x1b, 0x0, 0x7, 0xffffffff, 0x7, 0xe, 0x6, 0x7c, 0x40, 0x7fff, 0x3, 0x6, 0x9b, 0x9, 0xa, 0x80000001, 0x0, 0x1d, 0x981, 0xd, 0x3, 0x8, 0x9, 0x9, 0x7f5f, 0x10000, 0x8, 0xf, 0x7, 0x0, 0x7ff, 0xba000000, 0x0, 0x5, 0xd3, 0xfe, 0x101, 0x0, 0x10000, 0x1, 0x7, 0x6, 0x2, 0x8001, 0x459, 0xedf1, 0x7df, 0x5, 0x0, 0x0, 0x8000, 0x7, 0x4, 0x8, 0xc9e, 0x0, 0xd8c2, 0x4, 0x4, 0xfffffffb, 0xff, 0x500, 0x2, 0x9b6, 0x8, 0x3, 0xfffffff9, 0x6, 0x55, 0x4, 0x401, 0x8, 0x5a, 0x0, 0x8, 0x1, 0x4, 0x6, 0x7fffffff, 0x8, 0x401, 0x800, 0x0, 0x1, 0x3, 0xff, 0x7, 0x3, 0xac4b, 0x6, 0xb77]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]]}, {0xef, 0x6, "825d1f66dbb8538e56fd7fd4736db8befc3330d95044665e45398bf7c39112c91bff13b49b4ad167cd0bfb7293fc409ce269d28fd03f205e9984b5992a46d6f9fb63b0310091bfd3bf9d93603435328364ba4413a78ffc6b9960f09671bd46d004bd10a793b9bddd3507b3912c410931010f127cf6d1124b658aa19b047b6c0c92fcc3d05f6bbc9e35759a10465aa34809a33376811e0d61d7b83460e7c8c7e0311b987635e22b12be5b1d1fffbf0325abb525f730d3b3795d00328342d3ff6a0462b0a36741e3a6ed17971421852cb38eaee3f58ceb1d5eb77d54079200e74a07be5c2f43885e077e6896"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mirred={0xd8, 0x4, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x7, 0xfffffffffffffffc, 0x8, 0x61}, 0x0, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x3, 0x0, 0x6}, 0x2, r5}}]}, {0x6c, 0x6, "46793e1e064961c60402f7236145e306d6e6419c255fa5403a2e668e47a7c880c5174ed785947af86b266e4155a31799e2e2d4830dbaa3628ac33e5f113e756c5a8cb6ed317608279f54d3dd0f577c6c02b0606e1d57abaeb6e286ff7aed863cc5b7125277a40d83"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x1798}, 0x1, 0x0, 0x0, 0x800}, 0x28000880) socket$nl_generic(0x10, 0x3, 0x10) 3.374582779s ago: executing program 3 (id=6153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 32) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000640)=""/89, &(0x7f0000000280)=0x59) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0xf0, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@generic="9b479e8d3951ceaaa2b2393ae8352bfbdaa5bb3fb75486f0eb4e1f9b07acba34ef00bb48057d25b075f3eeb55f9541c033677afedee8b138c5f54544d2a8ae4b2380b1d0296c76ba4672f0df136fde417b02038e30c5ea431906f806b14fdfb556c0e5777ea67a64f175aba4b2ce9658ac7a1e6919c3a3b0e356d4159ecb2505d363982c308d1c0ffb9e30925522afca553955ecae0b0d1630d464fffb5ff813fdfdf6b49dbbfb1412c5d349f81577385458e2ebcaa9325f017ffe372421f77fa002005d259b7f2b9478d2776cc22bf5eb546670525a885cdd4c9c31"]}, 0xf0}}, 0x1) (async, rerun: 64) r3 = socket(0x1, 0x2, 0x0) (async, rerun: 64) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) (async, rerun: 64) bind$unix(r3, &(0x7f00000001c0)=@abs={0x1}, 0x6e) (rerun: 64) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000300)) (async, rerun: 64) r6 = socket(0x2a, 0x2, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x20, 0x7800, 0x3, 0x6b8, {{0x5, 0x4, 0x0, 0x37, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @private=0xa010102, @empty}}}}) setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, @vifc_lcl_ifindex=r7, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (rerun: 64) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCGETMIFCNT_IN6(r3, 0x89e0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x580}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) 3.049970809s ago: executing program 3 (id=6158): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={r4, 0xff}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r4, 0x3e}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0700020000000000000005000000180001801400020073797a5f74756e0000000000000000001c000380140003800c000180080001000200000004000188040001"], 0x48}}, 0x4814) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0xa}, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r7, 0x0, 0x22, &(0x7f0000000080)=0x7, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r0, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_audit(0x10, 0x3, 0x9) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3e9, 0x716, 0x70bd27, 0x25dfdbfc, {0x0, 0x8, 0x2, 0x0, 0x0, 0x7aa6, 0x4, 0x8, 0x0, 0x7, 0x9}}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 2.902689409s ago: executing program 3 (id=6161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x124, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0xf812d2fa2004c002}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x40}, 0x19, 0x3, 'lblcr\x00', 0x1, 0x6, 0x4d}, 0x2c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08"], 0x84}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r5, &(0x7f0000000380)=ANY=[@ANYBLOB='A\x000'], 0x5c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) 2.595371984s ago: executing program 4 (id=6165): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r6) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r5, 0x109, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x200000d4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xffff}}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x0) 2.346855471s ago: executing program 4 (id=6168): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x9}}], 0x1, 0x2080, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 2.288123473s ago: executing program 4 (id=6171): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r2, 0x201, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000010404e3ff0844000000e2ff0000", @ANYRES32=0x0, @ANYBLOB="03050000000000006800128009000100766c616e00000000580002804c0004800c00010002000000000400000c00010003000000000000000c000100f7ffffff040000000c00010000000100080000000c00010008000000000000000c0001000002000003000000060001000300000008000500", @ANYRES32=r3, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 2.194554908s ago: executing program 4 (id=6173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OKEY={0x8, 0x18, 0x28e}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r4}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', r4, 0x7b0, 0x20, 0x1, 0x3ff, {{0x9, 0x4, 0x2, 0x5, 0x24, 0x64, 0x0, 0x5, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2, {[@lsrr={0x83, 0xf, 0x95, [@dev={0xac, 0x14, 0x14, 0x18}, @multicast2, @empty]}]}}}}}) 1.914351066s ago: executing program 4 (id=6176): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x6, 0x0, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x23, 0x0, &(0x7f0000000400)) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockname$packet(r3, 0x0, &(0x7f0000000640)) ioctl$sock_rose_SIOCDELRT(r3, 0x890c, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYRES8=r2, @ANYRES32=r9, @ANYBLOB="0a0006007525fa7916b3000004005f00"], 0x2c}}, 0x4004) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000100)=ANY=[@ANYRES32=r9, @ANYRES64=r6, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x40000a0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0xfffffffe, 0x2, 0x4, {0xa, 0x4e24, 0x9, @loopback, 0x5}}}, 0x3a) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r10, 0x8921, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$SIOCSIFMTU(r10, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYRES16=r6, @ANYRES64], 0x34}, 0x1, 0x0, 0x0, 0x4044}, 0x20000034) 1.798803076s ago: executing program 4 (id=6177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0x8000, 0x1, 0x1d, 0x8000, {{0xa, 0x4, 0x0, 0x2d, 0x28, 0x64, 0x0, 0x3, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x94, 0x5, "afad13"}, @generic={0x86, 0x3, '{'}, @generic={0x94, 0xc, "6e1d3232cdca407060ba"}]}}}}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe1, '\x00', 0x0, r4, 0x1, 0x5}, 0x48) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="120000005400012c000000000000000007"], 0x18}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x17, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x7, &(0x7f0000000340)=""/7, 0x41100, 0x18, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000440)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x0, 0x5, 0x1ff}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x2, 0x4, 0x6}, {0x3, 0x3, 0x3, 0x9}, {0x5, 0x4, 0x5}, {0x0, 0x1, 0x2, 0x4}], 0x10, 0x29a9}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r7, &(0x7f0000000040), r6, 0x0, 0x800000000ff, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r6, 0xf507, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) socket$inet6(0xa, 0x3, 0x800) 1.13512504s ago: executing program 2 (id=6182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket(0xa, 0x3, 0x3a) ioctl$SIOCPNADDRESOURCE(r3, 0x89e0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x4, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xffffffffffffffbd, &(0x7f0000000100)={&(0x7f00000001c0)={0x80, r4, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4c}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x8000) 903.889376ms ago: executing program 2 (id=6184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x1000d) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x2c}}, 0x0) 835.329447ms ago: executing program 0 (id=6185): syz_emit_ethernet(0x46, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xffffffff, 0x6}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1a}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) close(r0) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0xffffffff, 0x6}, 0x8) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1a}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) (async) close(r0) (async) 750.706032ms ago: executing program 2 (id=6186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2ef}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="00000400"], 0x28}}], 0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="90007f0a0a0002000180c2"], 0x30}, 0x1, 0x0, 0x0, 0x2bfdd7b83b402990}, 0x14) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x43e6, 0x4) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r3, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@remote, @empty, 0x0}, &(0x7f0000000380)=0xc) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0xb, r4, 0x6}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xb, 0xacf, 0x1000, 0x9, 0x5, 0xffff, 0x10001, 0xaf0}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_crypto(r11, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="100000001400900029bd7400fedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[], 0x3261e) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x7c}}, 0x8010) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r11, 0x0) getpeername$netrom(r11, &(0x7f0000000100)={{0x3, @null}, [@default, @default, @bcast, @rose, @bcast, @remote, @netrom, @bcast]}, &(0x7f0000000040)=0x48) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 706.604768ms ago: executing program 0 (id=6187): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "5c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0x8, 0x1, 'cpu\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x130, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x0, 0x59]}, @CTA_TUPLE_REPLY={0xa8, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0xfff, 0x9, 0x400, 0x42, 0x3, 0xffff3a1c, 0x3e, 0xeb1]}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x100}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x1c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x97a}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x40010}, 0x4004) syz_emit_ethernet(0x86, &(0x7f0000000980)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x31}, @local, {[@timestamp_addr={0x44, 0x1c, 0xfc, 0x1, 0x0, [{@rand_addr, 0x4e210000}, {@remote, 0x2}, {@local, 0x3ff}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08010000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB="cc001680c80001800c0005"], 0x108}}, 0x24040800) 471.026837ms ago: executing program 2 (id=6188): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f0000000000)={0x8001, 0x8, 0x3, 0xd7e1, 0x2, [0x800, 0x0, 0x80000001, 0x1]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xfb4, 0x0, 0x1, 0x121f600, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000010c0)={r1, &(0x7f00000000c0)="ae29ae57060650a8fbe1c444e389e9b642d4f2ad33a2464e04c190c2a409fe714b9900d10b318507916eec2f597623c6790400b52a580071c76a057d6cb40870c53b3532708d2342ef463592236b58e436e424a9a77dc49009c89182048ce2be4f5c19487e2e2d2414fc064ea330960775415592e439cadcd6cde06f4b7ce3de2aa68a91f321b1006a50f3b889da5c2686ba766089fb210f191f25a7b739b43f5b01007fdd8d8b29b86314dcc97b5e38e15aebc3a8ca81c45fc12494aefc818aadd82ac38dacaad9d3d26e011badc8b749b94f56efa57281544cfd8510f90d464323d36c016a50c350a58c60186a4063ece3ba4e9c3fc154eeea4a8474a67ff351bb9a00b353097f95e31822ff2d4c1a4a602f3c00f07b6bba809cff96b6ab45b6ceb6953e3ba48edb9a83215f484adc4322ff249173938001ca38d255bc9fa6a4c86120e838b1046a85415510805c937a6cade8edb455fba6ae1648df67a6afb1061883ef9dbb0dc27081b93cd700138b3f8cda60def98fb82052661d2fdbba1d032d97eb852fc19241218121b9392bd4757c6e568cc275320843320d8dde14020c31e25889e44a6d9e3207191fb72c9341960a2a19014af7fe856bc080f8f3a6813a36373014c4e6c8db153f5fbd55da1e30cfebfdb22ec2390fc38abbfdb5847d2aace2cfa8bd2de1b54729ad19e7ffc7698614243451779bccae29e4fc1f40349740f864f733d10943a11769a329049bbef1a215e655124a2944e36066c8d6317955d7a6a8743008bb39fae8d4ffafab9d8b446cf672e0ba1e3bc7ab70c33b233ef7a93abe5363edf53ee45747e89f521c1565282879531695129b1b6c0abd28c3b3ef3d5c51dd6af2f9d1c81de884a3b44c2536ebbfcf523226c33a494cac8b10980ce5e58afea550acdc41f655bf1db958efecf6f62b97bf8d352929ff6609a8edfc79ceb1bb679a679e667115f926b5d9601d1aed13ff213794fbdd0689ad891539573d1647fe4d299b56876e35fb131e6f020cea92c7382692233ee7fb65af24f09cfd1d7eb6f1989de7e1846ffbddb3a803dec1dc53886d81deed74e8004746139f4eecb48b789629881dde7a2bf83f0b7a2956f5f69df29e98f351012e5f4c9e4deeb927804c44f1ac18b081268868fb4a28fcc02d8dcc32072f172282179ff6943047176d1b36a6080e5ca7f571da366a8fad3eae716ae5644b98a43a53d0686fa8bd5d6c389440e736b66bec64c4a46aa816d17a6a89b07d0ed4b73a38f287cac4c65a5274916e0e168c6fabafa20ca066e7543777a5687be79a1e203ea190a0f1617b6deccf0e92bda46b13f295a152757560d1b07acf4415221c11aaa5761c2adc5d94b95d0e950e68461588eaf332e7f5369a646a587710a5716293ffa39fc39f2bb34859e0cc4e125c78d306b0b2122f25c2e8ff257cfce490a0de363d8c4e4c600f5aa28d380a81b67f0b716015ea46eb39f63816227bc35fb4612f6f1f3e101fd10bdd515beece6f32fd4b49517bb0f33744d600ef619d2dabd26a38a40755de7674b6794cef2fdf8c082bc42ae5a7e2e31b451ba2274f913e366a3f2e9e60b6814f88d3888d4f34622cf6e54fc4bb0886b01cf5a6af0de8e4423c6b4cded81e8db36472847cbd7f54c57d5e7e3ca581788e3c3cded252afaea259ddcaf3c9d449765cfdaf6487ed3a35a3c9b81a4477118088eb7a9c7acd2ec7e1d3fda453df52ca8243ed2d9ac6d05ed0db61dcf92f90bb7d9858e1bbf357ae94d0d9bce59a864640ab4fcccfc32bba82eb9a95ef37eb417e8309cbb51c0465d0807f64cd97c02a86659691f50b46793f53587a614c8147ee9d6a3f932e409544c99d2b32443863928f9e91b1bf73d3d1317c0ad1d758f79d009043e9331f56eee8476efa66e4cfe1bee273d1990b5e7a6e1665e4a866e4f69567c0d82f27d31ccb12179a325b7945cd3880a17a8a7e42e4698594565473ee21c7da8f7e94aeca43d308ec3b55cba2c90e563033704d3d8793499f06ab5ae66ca19c9f3f96f3bc118ec553139daf34444a3b79482189d9c46c77327745b35bc1484708c2410a9e13727677b1b0a6c0702230086632f36c4c7c1476ce4adc7bff51c1e4d5ffc2e69aa028364ca421298bafe45166a3f9ba3436c0101c122cafbc92e9eaf001cc4b23ddfb115c24ba4f1040ae36c90e9a0723f6f4c49e483af9cb7bb9ad07b5ebf05c7e34d8f505df5683acd386a9b62a8876b09262cda8a2bb099f43031452727770f51c368420b2d76a4fa39f62072507a0fa7694bd4fe4f55dbac6047277429c06bc63c6f30309712e9fe877583a993331b65902d42993906849fce056dcb9ee61237aa5656231c54a0f954ac17bdff81bbf84fb237f2bcc912bab84dc06db85e18fe927157b62d3325cd07b2c48c2b8e6f735a8372ee2cbd76b9accb87e8bc80762cd2eb4c7ce87e34f987c6aee37efedd72d7ffe61cd9b661f2f18eca86e5eb92b55330381af4eff7c0f41399b7c2164d646aaafdae05d085d01940009fcd78428ff955a926f2a5e201ad72526a596033e217323ddaca6c9adbb7b6591ef6d05c749d41769ca7de6f815807d6585c75138776468b18377ae6567c6dd574bfb6132952de913e94e0bd56f062eced55e1106e55321c59f36e13505bfa4c8d7a68605c70e54e8d6498cefafd14aecb796f4801eaf483af2a6db6e3316b7ed7e62d05de99d3b37bb222ef9fabb5429aeeb6b6bf451fd5d0032558df9c86a1869c73f8abaebe0f261eaae05fd44903b804a9c4773928ef971f73bf335ffa3ff648ecafe916803b173af03580d155636c170328df7238227b6f04ebedf161019b97bc3f6c469d4ca0497a9bd5063893ae5f6f202ca5bde5d671cef9b1b4fd72c578eb02a2a59475f0f24a844d649b589e2c043fc5b77db0eed3173a629dc182fc5b8087ab5d324c99d1cc8f9b521ad58fd3cea193d181ef4e4cacfa8ddeb80404b20677a6fc30889db0e2692b7ce6ad61180312143b24016c3a5e1f4c06008fa1af83b0d184277dc14af77906bcecd3fcffa9c7bca66568fe2a1c5459db78736dc1314295814b527917553aef4ddcde275f51263c0b646def3c4c271fc0e0dc6a01fe187a17872b0346a82f92d5ccf901f0ac1b61e773ac4e8bfa4750a6fbcd2d78707ff0d6795976aa097236a8d3a3c339645230165929741dbf8003963f110252293ac325c85b3ed0000e308a092ef12d53b47f2e7e9009696c355412c6965bfc785db29dfd741319978c01748989ae43e85e5d26187292ae79043118ec84152ea23102a0f3faa95d1800c2294cb501fb29035f9b435f264043cf812a2ca1cb6b6673f4c4199ce42e446dfe91686fc62b0f6ae241f9ee9e7e46b2826b7d766ae96a931b69e44b04021c6fbcce586ae911d375d813b1f2482de5c320cd05fbdadd5c2e650e1cf200dc89adac61b1c0dfd2d4c8c8ec1c5389f3fdbbb75d13418ddd627a891a9ca2f2cfe9a32782adde325b226c7dac33e11e7169f87b8d224a736a61088c47360100e74af5446545b7369cb0825af56a2873e460ecb3a227bb99e04f32ec13c9c4eba6fd5f3bb8d8ca0fc908e87fe30b986e6438efaab72b9fcb6515ff532d3da4aea449bc099d167eab05c0ef96eb8d949396d8dadc0bb47fc29af3d164ed613fbd92e3f9d5868c589b184771a34ac37f59ae48f5f2233ae84cce2a9549ecd7e398a0ec18c5b9cdcb012a8b8319b2b9f01ea3280622ec143dd8a12da21076c7ead0d90284271dc40ba27f19304a992ad32e1b4c8efd8e5154b669997ec31a604bd404bd81253b9285df997effffe6ed5b4eadd7177c6465b682d65a8bb50964aa047c6d1938adfa846980ff86b5ad1bf8dd50df35b928125f7dc61c03e09529f53c15ea70b568611f4a1d221daef1b0242b2d3b94c0bce8a37877df5613a647d33fd91f503a80705f0aeb167b3e4081a8f137de1d101c9542cbfde18300070e1eef0683cbc567b02d80778087d6d6d97c20a8fb9a62f55a43f71b75b1c61044f43e9d090f73bfaf77b926ed33e7be16e55d7d22e78004a79ebac4431aa77ba6024f69ac79700b522c059072a9b3c87ce14cf4d6302b9c5019c779884e211726dd19b62f297aac65c271c10f7ad838f96a8949dd339d13a1d92a54b02bd14e83c430362c0eb84a33634fef7cf91a0669869c17d43eab51ed6df1360d63c40973c189831bc5a8d4c42bd182413ccdbee7f3284b2eef84a624656dd4241af099f8100af9c08bf41192fb61513bf427a287622311e90b3dbb643bfc963b872bcbe3c100b4cae7f6728dc8765d30a8322ff9d1d73d94d6bd5dd1fe3c7d659f95dae38468daeaf5afcdeac79dfe5a5f2f33f82c8058ff0f48e7b22387e1701ccf0cd7da636b9e300fa8bc90d0b79dd0b72038c8e8af89cca1ab6b3957f869d957b182f28c5acc5e9058dea767c3bcb2fda304046688495730ab9b1d912b9fd5c6e16d2b8596b0dfcd321afb2f98691f29beabba63e2810b353f2c385d759264684968b6fd6d43a2ba296c4cf171d66376a4bddd62793c1e31e32280217a84c6e5f1f9f2377820a9e8791cee888cc927267df99274b1893eb1cd02acdcff2461a39599b8dc2adf560d58b1c6d487046ea41b7d263b4778ce1a556649650adfff0e87fe5b76d0a30e46c04143d56b963b6e0927227ed7cc474c6c3900aec0d8f5a1a6ca0e4e3456cd74a7d23b8f2c042b4ca1d3b0d54800941db21d688db9f24af4493924326ac9a477aa070c40aa0f2f0e8f30f3079f006efcf85c2508a00da1770f0378a207ffc44d11fa76247e73a819d95a843a5a67ec6b359baa954946bcca0bb1f30afa441ecef0d92b9511a376bc906d9dc4713113d527760206954a3f3f6ea2ea577ce204cad4a6d56f4aa97a227f2eb6341044c3b751b82701348c7ddf1ca70d371ef2bc29841f2820a414488f52d346f70db84c363892e46810cafa3e5d5b0348a3eb03eb278f846ddc7a0c9aacf01302a96e7c69af21dc2b84b2d5bd27dfad6c575631084db8b638d203ea05681e8a734b0f5e50242e4279e2df5a44e1daa0b58aad751c10881a82f00da6a489a9f2597d13db73991d401fa346f4c544c1deaaa5d404a5a0ad8eb9b9ae19ed8bbb5c461b65f76febe5f3a28c312aeaf24041a7c28706d17ab0d27249583fc160d0daa636dead121f1026f39a0e09730d5dc36f155007aa55fd3998ffa865f0b238324c0a098cf67114511d153e7283847ad10962a130cc81c856b9a476015f78379b89e13993a0361e0eddd914012bb571ab10f06ee52c85f91feacdf77a10e3111d9580662357c4a1a043b089db39fc8e58dda7ed758e5133b27cc12ff4a8da17bee5c9af1033076fdd09f040e245f353fd80465c1895c5ec135df1f8298a7b054216986588142addea20cd98e9dc0f6a460293e4f7c77d02b6cf4309f5d83e745f624ec95f322ebd6519b751a13c3e42761d28c32124256fe1d71411eb10326afd262363ee5a1bfa029989b8aca1ebe7223cf929acc7b12fbb5f38b79f340214bf297409d3631a7b5f935b4ef9d69b7f2f1f0d045354f45aaf52f7b55abb56be330b7fb97db9c7be8ae39b4a9cbf29e66a9d15be71370d7d550b2c343cf1b487727009c1ae3918b6d106c755ed0062e0d99389a576a59abc427d41712dda8639ac0578ecda2ac8209e69217ab185d2d62c17d9af351420e036c1f727367ba79a42ca0ecbc2ad04634a57c6f06f635bb46f2bd7de79e4d9eccf17b37a635164b9880dd51a137a5df"}, 0x20) getpeername$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x0, 0x0}, &(0x7f0000001140)=0x14) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001180)={r1, r2, 0x25, 0x12, @val=@netfilter={0x2, 0x1, 0x9766}}, 0x20) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001200)=@generic={&(0x7f00000011c0)='./file0\x00', 0x0, 0x10}, 0x18) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f0000001240)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2f180c8d, 0x8, 0x4, 0x8001, 0x3c1, "2d877fc62346a42a9fc7a9f7d2568d8ef746f2e6756783491a538186a863c85f30d1e5d1cf12fd14c572f2f32063f44f710a318f9eb291a5ef7275de13d97006236b795c5c1afdc8b4af42b385998c1658097301801b99e11977b73be052226116695a63881fd4bf069aacae67893b57b4f8854655b2ceecdc85fd79ae73e405"}) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000001300)=0x1ff, 0x4) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001340)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001380)={r6, r4, 0x4, r4}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000013c0)={'filter\x00', 0x9e, "fa219e1ab8b943af2bc795f9d6eb3743a1831f66fba04788709fcf2f07d875fbd6f0678ee52340ef6c3bcc2dca8245b3ae56e1518f3262b5491604eb5a1422e21d5f6aae16f540c9d6c540b8e64851cacfa6a5b9c3ccdde7b2869f001ed3e5713ff9cb325bfafc4df8cd8505898db8b2143f12fa35eca73cd84598e846948ddc2cd005c9414c59babe06524a781d5f64ae96b65087ad34a5eee92f544d8b"}, &(0x7f00000014c0)=0xc2) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = accept(r1, 0x0, &(0x7f0000001500)) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000001540)=0xc025, 0x4) r8 = accept4$alg(r7, 0x0, 0x0, 0x800) recvmmsg(r8, &(0x7f0000005d40)=[{{&(0x7f0000001580)=@un=@abs, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001600)=""/13, 0xd}, {&(0x7f0000001640)=""/74, 0x4a}, {&(0x7f00000016c0)=""/101, 0x65}, {&(0x7f0000001740)=""/123, 0x7b}, {&(0x7f00000017c0)=""/34, 0x22}, {&(0x7f0000001800)=""/61, 0x3d}, {&(0x7f0000001840)=""/250, 0xfa}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/35, 0x23}, {&(0x7f0000002980)=""/160, 0xa0}], 0xa, &(0x7f0000002b00)=""/196, 0xc4}, 0xb}, {{&(0x7f0000002c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003100)=[{&(0x7f0000002c80)=""/240, 0xf0}, {&(0x7f0000002d80)=""/251, 0xfb}, {&(0x7f0000002e80)=""/160, 0xa0}, {&(0x7f0000002f40)=""/154, 0x9a}, {&(0x7f0000003000)=""/73, 0x49}, {&(0x7f0000003080)=""/68, 0x44}], 0x6, &(0x7f0000003180)=""/160, 0xa0}, 0xfffffff9}, {{&(0x7f0000003240)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004580)=[{&(0x7f00000032c0)=""/149, 0x95}, {&(0x7f0000003380)=""/69, 0x45}, {&(0x7f0000003400)=""/7, 0x7}, {&(0x7f0000003440)=""/202, 0xca}, {&(0x7f0000003540)=""/38, 0x26}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x6, &(0x7f0000004600)=""/29, 0x1d}, 0x7fff}, {{&(0x7f0000004640)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004c80)=[{&(0x7f00000046c0)=""/169, 0xa9}, {&(0x7f0000004780)}, {&(0x7f00000047c0)=""/203, 0xcb}, {&(0x7f00000048c0)=""/127, 0x7f}, {&(0x7f0000004940)=""/159, 0x9f}, {&(0x7f0000004a00)=""/180, 0xb4}, {&(0x7f0000004ac0)=""/90, 0x5a}, {&(0x7f0000004b40)=""/120, 0x78}, {&(0x7f0000004bc0)=""/159, 0x9f}], 0x9, &(0x7f0000004d40)=""/4096, 0x1000}, 0x2}], 0x4, 0x20, &(0x7f0000005e40)={0x0, 0x989680}) setsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f0000005e80)=0x7f, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000006180)={r4, 0xe0, &(0x7f0000006080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000005ec0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000005f00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000005f40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000005f80)=[{}], 0x8, 0x10, &(0x7f0000005fc0), &(0x7f0000006000), 0x8, 0x50, 0x8, 0x8, &(0x7f0000006040)}}, 0x10) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x2, 0x80010, r9, 0xb38e6000) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f00000061c0)) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000006200)={{r10}, "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000007200)={{0x0, 0x3c, 0x2, 0x400, 0x5, 0x8, 0x2, 0x7f, 0x5d2, 0xfffffff9, 0x7f, 0x7, 0x7, 0x22e6, 0x7b5c}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000072c0)={{r11, 0x0, 0x80000001, 0x7, 0x5, 0x6, 0x2, 0x3, 0x1, 0x4, 0x353c, 0xffffffff, 0x9, 0xf, 0x101}}) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008300), r7) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000008400)={&(0x7f00000082c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000083c0)={&(0x7f0000008340)={0x44, r12, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x4}, @ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) splice(0xffffffffffffffff, &(0x7f0000008440)=0x423e, r9, &(0x7f0000008480)=0x3, 0x4, 0x4) 470.466767ms ago: executing program 0 (id=6189): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000840)="06ff03076844268cb89e14f008004ee0ffff007ebabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000840)="06ff03076844268cb89e14f008004ee0ffff007ebabec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)={0x34, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x33}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x1000}, 0x1c) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x1000}, 0x1c) 363.791272ms ago: executing program 2 (id=6190): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c445}, 0x4040140) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 313.00612ms ago: executing program 0 (id=6191): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r1, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) write(r1, &(0x7f00000000c0)="d397eb", 0x3) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1) 159.221325ms ago: executing program 0 (id=6192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000003000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000440), 0xd5, r0}, 0x38) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x10, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001200)={0x60000010}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000280)={0x1000}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) close(0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000)="bf1f8a4d85dd206d99243303cfecce747b8a879a629f54fa24513417ba0573574f86890e40f43aa055a801bd8a09758d12b27f18884b0853bcb33cfa3cc744e3437172d7b62ebd850fce4b9f32de9e89b907ec891985a09c0eea39421fbf9fe501a34ab0db70d2dca63966c5c8289721c68045dec97d4548e5ffedc48509bc15a9f84ad4", &(0x7f0000000140)=""/73}, 0x20) 113.885582ms ago: executing program 2 (id=6193): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "408b1465cc98145235faa3108e14d7b2fee081eb57514a4196af7d15b24d9eb526931a287b2e7c3c563ca407db93c418bddf98a2dbff0f1ac7fa6d079ef090fb51"}}]}, 0x17c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a8, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x210, 0x206, 0x240, 0x210, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xd8, 0x138, 0x0, {0x390, 0x8f00}, [@common=@set={{0x40}, {{0x0, [0x5, 0x2, 0x1, 0x4, 0x5], 0x3}}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7, 0x0, [0x2d, 0x12, 0x2e, 0x40, 0xd, 0x3a, 0x23, 0x2b, 0x103, 0x1c, 0x4037, 0x15, 0x31, 0x4, 0x31, 0x1d], 0x1, 0x8, 0x7}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x900, 0x10, 0x8, 'snmp\x00', 'syz0\x00', {0x8000}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4c800) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r4, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r6) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x170, r7, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x700000}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x400}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xb}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000340)={0x1}) syz_emit_ethernet(0x0, 0x0, 0x0) 0s ago: executing program 0 (id=6194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x3, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x912b}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6f2}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELTABLE={0xd0, 0x2, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0x67, 0x6, "22331de586cc5f4f9920e5fbad6a3ea77889dadf3c20bdfde6c6b02eda64c84d152382467fada9d7b62d37f3bba2b66409e1a42185e1f4e82870813438f9bf1f0b7e41038a53b62635391cd595313c0df4c73386370fd2e1878d363a91f14b1b20f426"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc, 0x6, "645448b704812d43"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x3, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x912b}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6f2}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELTABLE={0xd0, 0x2, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0x67, 0x6, "22331de586cc5f4f9920e5fbad6a3ea77889dadf3c20bdfde6c6b02eda64c84d152382467fada9d7b62d37f3bba2b66409e1a42185e1f4e82870813438f9bf1f0b7e41038a53b62635391cd595313c0df4c73386370fd2e1878d363a91f14b1b20f426"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc, 0x6, "645448b704812d43"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) kernel console output (not intermixed with test programs): nd_connect+0x7e/0x2c0 [ 444.436917][T22952] sctp_sendmsg+0x1528/0x2c10 [ 444.436943][T22952] ? unwind_next_frame+0xa5/0x23c0 [ 444.436976][T22952] ? __pfx_sctp_sendmsg+0x10/0x10 [ 444.436994][T22952] ? aa_sk_perm+0x15a/0x960 [ 444.437016][T22952] ? aa_sk_perm+0x82d/0x960 [ 444.437044][T22952] ? __pfx_aa_sk_perm+0x10/0x10 [ 444.437067][T22952] ? sock_rps_record_flow+0x19/0x400 [ 444.437092][T22952] ? inet_sendmsg+0x2f4/0x370 [ 444.437111][T22952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 444.437132][T22952] ____sys_sendmsg+0x894/0xad0 [ 444.437162][T22952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.437193][T22952] ? import_iovec+0x73/0xa0 [ 444.437221][T22952] ___sys_sendmsg+0x2a5/0x360 [ 444.437242][T22952] ? __lock_acquire+0x6b5/0x2cf0 [ 444.437267][T22952] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.437317][T22952] ? __fget_files+0x2a/0x420 [ 444.437335][T22952] ? __fget_files+0x3a0/0x420 [ 444.437362][T22952] __x64_sys_sendmsg+0x1bd/0x2a0 [ 444.437386][T22952] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.437416][T22952] ? __pfx_ksys_write+0x10/0x10 [ 444.437456][T22952] do_syscall_64+0xe2/0xf80 [ 444.437475][T22952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.437493][T22952] ? trace_irq_disable+0x37/0x100 [ 444.437511][T22952] ? clear_bhb_loop+0x60/0xb0 [ 444.437533][T22952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.437551][T22952] RIP: 0033:0x7f06ef99aeb9 [ 444.437566][T22952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.437581][T22952] RSP: 002b:00007f06f0867028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.437601][T22952] RAX: ffffffffffffffda RBX: 00007f06efc15fa0 RCX: 00007f06ef99aeb9 [ 444.437615][T22952] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 444.437628][T22952] RBP: 00007f06f0867090 R08: 0000000000000000 R09: 0000000000000000 [ 444.437639][T22952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 444.437651][T22952] R13: 00007f06efc16038 R14: 00007f06efc15fa0 R15: 00007fff7464e578 [ 444.437680][T22952] [ 445.027059][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 445.133426][T22971] vxcan1 speed is unknown, defaulting to 1000 [ 445.170037][T22975] ipvlan2: entered promiscuous mode [ 445.188647][T22971] vxcan1 speed is unknown, defaulting to 1000 [ 445.211983][T22982] ipvlan3: entered promiscuous mode [ 445.219253][T22980] __nla_validate_parse: 11 callbacks suppressed [ 445.219270][T22980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4654'. [ 445.250481][T22971] vxcan1 speed is unknown, defaulting to 1000 [ 445.267904][T22986] FAULT_INJECTION: forcing a failure. [ 445.267904][T22986] name failslab, interval 1, probability 0, space 0, times 0 [ 445.282436][T22986] CPU: 0 UID: 0 PID: 22986 Comm: syz.0.4660 Not tainted syzkaller #0 PREEMPT(full) [ 445.282462][T22986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 445.282473][T22986] Call Trace: [ 445.282481][T22986] [ 445.282488][T22986] dump_stack_lvl+0xe8/0x150 [ 445.282516][T22986] should_fail_ex+0x412/0x560 [ 445.282544][T22986] should_failslab+0xa8/0x100 [ 445.282565][T22986] __kmalloc_cache_noprof+0x83/0x6e0 [ 445.282582][T22986] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 445.282601][T22986] ? sctp_add_bind_addr+0x8c/0x370 [ 445.282624][T22986] sctp_add_bind_addr+0x8c/0x370 [ 445.282646][T22986] sctp_copy_local_addr_list+0x314/0x4f0 [ 445.282668][T22986] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 445.282686][T22986] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 445.282707][T22986] ? sctp_v6_is_any+0x64/0x80 [ 445.282727][T22986] ? sctp_copy_one_addr+0x93/0x360 [ 445.282749][T22986] sctp_bind_addr_copy+0xb3/0x3c0 [ 445.282768][T22986] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 445.282796][T22986] sctp_connect_new_asoc+0x2ff/0x6b0 [ 445.282829][T22986] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 445.282851][T22986] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 445.282871][T22986] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 445.282890][T22986] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 445.282912][T22986] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 445.282931][T22986] ? security_sctp_bind_connect+0x7e/0x2c0 [ 445.282951][T22986] sctp_sendmsg+0x1528/0x2c10 [ 445.282971][T22986] ? unwind_next_frame+0xa5/0x23c0 [ 445.283007][T22986] ? __pfx_sctp_sendmsg+0x10/0x10 [ 445.283027][T22986] ? aa_sk_perm+0x15a/0x960 [ 445.283050][T22986] ? aa_sk_perm+0x82d/0x960 [ 445.283077][T22986] ? __pfx_aa_sk_perm+0x10/0x10 [ 445.283095][T22986] ? sock_rps_record_flow+0x19/0x400 [ 445.283120][T22986] ? inet_sendmsg+0x2f4/0x370 [ 445.283139][T22986] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 445.283160][T22986] ____sys_sendmsg+0x894/0xad0 [ 445.283192][T22986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.283223][T22986] ? import_iovec+0x73/0xa0 [ 445.283253][T22986] ___sys_sendmsg+0x2a5/0x360 [ 445.283275][T22986] ? __lock_acquire+0x6b5/0x2cf0 [ 445.283303][T22986] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.283361][T22986] ? __fget_files+0x2a/0x420 [ 445.283380][T22986] ? __fget_files+0x3a0/0x420 [ 445.283409][T22986] __x64_sys_sendmsg+0x1bd/0x2a0 [ 445.283435][T22986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.283468][T22986] ? __pfx_ksys_write+0x10/0x10 [ 445.283504][T22986] do_syscall_64+0xe2/0xf80 [ 445.283521][T22986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.283536][T22986] ? trace_irq_disable+0x37/0x100 [ 445.283552][T22986] ? clear_bhb_loop+0x60/0xb0 [ 445.283572][T22986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.283586][T22986] RIP: 0033:0x7f598879aeb9 [ 445.283602][T22986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.283617][T22986] RSP: 002b:00007f59895e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.283636][T22986] RAX: ffffffffffffffda RBX: 00007f5988a15fa0 RCX: 00007f598879aeb9 [ 445.283649][T22986] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 445.283662][T22986] RBP: 00007f59895e2090 R08: 0000000000000000 R09: 0000000000000000 [ 445.283673][T22986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.283684][T22986] R13: 00007f5988a16038 R14: 00007f5988a15fa0 R15: 00007ffc7b18ec38 [ 445.283715][T22986] [ 445.462514][T22971] infiniband syz2: set active [ 445.673030][T13332] vxcan1 speed is unknown, defaulting to 1000 [ 445.785085][T22971] infiniband syz2: added vxcan1 [ 445.886278][T23006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4665'. [ 445.900729][T23006] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4665'. [ 445.947533][T22971] RDS/IB: syz2: added [ 445.972634][T22971] smc: adding ib device syz2 with port count 1 [ 445.991673][T22971] smc: ib device syz2 port 1 has no pnetid [ 446.003758][T13329] vxcan1 speed is unknown, defaulting to 1000 [ 446.016723][T22971] vxcan1 speed is unknown, defaulting to 1000 [ 446.107886][T23013] syzkaller0: entered promiscuous mode [ 446.118226][T23017] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4668'. [ 446.138632][T23013] syzkaller0: entered allmulticast mode [ 446.173308][T23023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4668'. [ 446.227719][T23022] syzkaller0: entered promiscuous mode [ 446.233301][T23022] syzkaller0: entered allmulticast mode [ 446.319266][T23026] FAULT_INJECTION: forcing a failure. [ 446.319266][T23026] name failslab, interval 1, probability 0, space 0, times 0 [ 446.337775][T23026] CPU: 0 UID: 0 PID: 23026 Comm: syz.0.4672 Not tainted syzkaller #0 PREEMPT(full) [ 446.337800][T23026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 446.337811][T23026] Call Trace: [ 446.337818][T23026] [ 446.337826][T23026] dump_stack_lvl+0xe8/0x150 [ 446.337854][T23026] should_fail_ex+0x412/0x560 [ 446.337882][T23026] should_failslab+0xa8/0x100 [ 446.337908][T23026] __kmalloc_cache_noprof+0x83/0x6e0 [ 446.337925][T23026] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 446.337944][T23026] ? sctp_add_bind_addr+0x8c/0x370 [ 446.337965][T23026] sctp_add_bind_addr+0x8c/0x370 [ 446.337987][T23026] sctp_copy_local_addr_list+0x314/0x4f0 [ 446.338010][T23026] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 446.338028][T23026] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 446.338049][T23026] ? sctp_v6_is_any+0x64/0x80 [ 446.338069][T23026] ? sctp_copy_one_addr+0x93/0x360 [ 446.338090][T23026] sctp_bind_addr_copy+0xb3/0x3c0 [ 446.338109][T23026] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 446.338138][T23026] sctp_connect_new_asoc+0x2ff/0x6b0 [ 446.338164][T23026] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 446.338188][T23026] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 446.338210][T23026] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 446.338230][T23026] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 446.338252][T23026] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 446.338273][T23026] ? security_sctp_bind_connect+0x7e/0x2c0 [ 446.338294][T23026] sctp_sendmsg+0x1528/0x2c10 [ 446.338314][T23026] ? unwind_next_frame+0xa5/0x23c0 [ 446.338348][T23026] ? __pfx_sctp_sendmsg+0x10/0x10 [ 446.338368][T23026] ? aa_sk_perm+0x15a/0x960 [ 446.338391][T23026] ? aa_sk_perm+0x82d/0x960 [ 446.338419][T23026] ? __pfx_aa_sk_perm+0x10/0x10 [ 446.338443][T23026] ? sock_rps_record_flow+0x19/0x400 [ 446.338469][T23026] ? inet_sendmsg+0x2f4/0x370 [ 446.338490][T23026] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.338512][T23026] ____sys_sendmsg+0x894/0xad0 [ 446.338543][T23026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.338576][T23026] ? import_iovec+0x73/0xa0 [ 446.338606][T23026] ___sys_sendmsg+0x2a5/0x360 [ 446.338627][T23026] ? __lock_acquire+0x6b5/0x2cf0 [ 446.338656][T23026] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.338715][T23026] ? __fget_files+0x2a/0x420 [ 446.338740][T23026] ? __fget_files+0x3a0/0x420 [ 446.338770][T23026] __x64_sys_sendmsg+0x1bd/0x2a0 [ 446.338796][T23026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.338830][T23026] ? __pfx_ksys_write+0x10/0x10 [ 446.338866][T23026] do_syscall_64+0xe2/0xf80 [ 446.338884][T23026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.338902][T23026] ? trace_irq_disable+0x37/0x100 [ 446.338919][T23026] ? clear_bhb_loop+0x60/0xb0 [ 446.338941][T23026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.338959][T23026] RIP: 0033:0x7f598879aeb9 [ 446.338976][T23026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.338992][T23026] RSP: 002b:00007f59895e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.339012][T23026] RAX: ffffffffffffffda RBX: 00007f5988a15fa0 RCX: 00007f598879aeb9 [ 446.339025][T23026] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 446.339037][T23026] RBP: 00007f59895e2090 R08: 0000000000000000 R09: 0000000000000000 [ 446.339049][T23026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.339060][T23026] R13: 00007f5988a16038 R14: 00007f5988a15fa0 R15: 00007ffc7b18ec38 [ 446.339091][T23026] [ 446.685018][T23022] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4670'. [ 446.694549][T22971] vxcan1 speed is unknown, defaulting to 1000 [ 448.171997][T22971] vxcan1 speed is unknown, defaulting to 1000 [ 448.357209][T23041] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4676'. [ 448.613940][T23057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4678'. [ 448.651296][T22971] vxcan1 speed is unknown, defaulting to 1000 [ 448.751322][T23066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 448.770255][T23064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4682'. [ 448.811791][T23066] bond_slave_0: entered promiscuous mode [ 448.817807][T23066] bond_slave_1: entered promiscuous mode [ 448.838023][T23066] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 448.867334][T23066] bond1: (slave macvlan2): making interface the new active one [ 448.889915][T23066] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 448.919780][T23064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.986899][T22971] vxcan1 speed is unknown, defaulting to 1000 [ 449.224786][T23073] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4685'. [ 449.275886][T22971] vxcan1 speed is unknown, defaulting to 1000 [ 449.278962][T23075] netlink: 'syz.4.4686': attribute type 1 has an invalid length. [ 449.570837][T23084] bond6 (unregistering): Released all slaves [ 449.613281][T23067] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:085f:a4ff:feb8:4948 error=-28 [ 449.703042][T23084] bond6 (unregistering): Released all slaves [ 449.770985][T23101] openvswitch: netlink: Flow key attr not present in new flow. [ 449.867847][T23084] bond6 (unregistering): Released all slaves [ 450.004898][T23067] infiniband syz0: set active [ 450.018398][T23110] bond6: entered promiscuous mode [ 450.023746][T23067] infiniband syz0: added bond0 [ 450.040127][T23067] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 450.051334][T23067] infiniband syz0: Couldn't open port 1 [ 450.080670][T23084] bond6 (unregistering): Released all slaves [ 450.121445][T23067] RDS/IB: syz0: added [ 450.125604][T23067] smc: adding ib device syz0 with port count 1 [ 450.133355][T23112] macvlan2: entered promiscuous mode [ 450.143269][T23112] macvlan2: entered allmulticast mode [ 450.144016][T23067] smc: ib device syz0 port 1 has no pnetid [ 450.255381][T23084] bond6 (unregistering): Released all slaves [ 450.701437][T23150] __nla_validate_parse: 8 callbacks suppressed [ 450.701455][T23150] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4704'. [ 450.905333][T23163] bond12: entered promiscuous mode [ 450.920535][T23163] macvlan2: entered promiscuous mode [ 450.926153][T23163] macvlan2: entered allmulticast mode [ 450.934022][T23168] ip6tnl0: Caught tx_queue_len zero misconfig [ 451.068362][T23175] netlink: 'syz.4.4708': attribute type 12 has an invalid length. [ 451.069508][T23169] veth0: entered promiscuous mode [ 451.090993][T23175] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.4708'. [ 451.234307][T23180] sctp: [Deprecated]: syz.4.4709 (pid 23180) Use of int in max_burst socket option. [ 451.234307][T23180] Use struct sctp_assoc_value instead [ 451.242964][T23181] No such timeout policy "syz0" [ 451.254874][T23180] sctp: [Deprecated]: syz.4.4709 (pid 23180) Use of int in max_burst socket option. [ 451.254874][T23180] Use struct sctp_assoc_value instead [ 451.271887][T23180] sctp: [Deprecated]: syz.4.4709 (pid 23180) Use of int in max_burst socket option. [ 451.271887][T23180] Use struct sctp_assoc_value instead [ 451.293745][T23180] sctp: [Deprecated]: syz.4.4709 (pid 23180) Use of int in max_burst socket option. [ 451.293745][T23180] Use struct sctp_assoc_value instead [ 451.498956][T23154] veth0: left promiscuous mode [ 451.687766][T23196] FAULT_INJECTION: forcing a failure. [ 451.687766][T23196] name failslab, interval 1, probability 0, space 0, times 0 [ 451.692988][T23194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4713'. [ 451.701035][T23196] CPU: 0 UID: 0 PID: 23196 Comm: syz.3.4714 Not tainted syzkaller #0 PREEMPT(full) [ 451.701059][T23196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 451.701070][T23196] Call Trace: [ 451.701077][T23196] [ 451.701085][T23196] dump_stack_lvl+0xe8/0x150 [ 451.701113][T23196] should_fail_ex+0x412/0x560 [ 451.701139][T23196] should_failslab+0xa8/0x100 [ 451.701162][T23196] __kmalloc_cache_noprof+0x83/0x6e0 [ 451.701178][T23196] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 451.701198][T23196] ? sctp_add_bind_addr+0x8c/0x370 [ 451.701220][T23196] sctp_add_bind_addr+0x8c/0x370 [ 451.701240][T23196] sctp_copy_local_addr_list+0x314/0x4f0 [ 451.701261][T23196] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 451.701279][T23196] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 451.701298][T23196] ? sctp_v6_is_any+0x64/0x80 [ 451.701318][T23196] ? sctp_copy_one_addr+0x93/0x360 [ 451.701338][T23196] sctp_bind_addr_copy+0xb3/0x3c0 [ 451.701355][T23196] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 451.701383][T23196] sctp_connect_new_asoc+0x2ff/0x6b0 [ 451.701407][T23196] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 451.701430][T23196] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 451.701450][T23196] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 451.701470][T23196] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 451.701492][T23196] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 451.701512][T23196] ? security_sctp_bind_connect+0x7e/0x2c0 [ 451.701533][T23196] sctp_sendmsg+0x1528/0x2c10 [ 451.701551][T23196] ? unwind_next_frame+0xa5/0x23c0 [ 451.701584][T23196] ? __pfx_sctp_sendmsg+0x10/0x10 [ 451.701603][T23196] ? aa_sk_perm+0x15a/0x960 [ 451.701625][T23196] ? aa_sk_perm+0x82d/0x960 [ 451.701651][T23196] ? __pfx_aa_sk_perm+0x10/0x10 [ 451.701674][T23196] ? sock_rps_record_flow+0x19/0x400 [ 451.701700][T23196] ? inet_sendmsg+0x2f4/0x370 [ 451.701721][T23196] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.701742][T23196] ____sys_sendmsg+0x894/0xad0 [ 451.701773][T23196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.701803][T23196] ? import_iovec+0x73/0xa0 [ 451.701831][T23196] ___sys_sendmsg+0x2a5/0x360 [ 451.701851][T23196] ? __lock_acquire+0x6b5/0x2cf0 [ 451.701877][T23196] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.701933][T23196] ? __fget_files+0x2a/0x420 [ 451.701950][T23196] ? __fget_files+0x3a0/0x420 [ 451.701985][T23196] __x64_sys_sendmsg+0x1bd/0x2a0 [ 451.702011][T23196] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.702041][T23196] ? __pfx_ksys_write+0x10/0x10 [ 451.702077][T23196] do_syscall_64+0xe2/0xf80 [ 451.702095][T23196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.702112][T23196] ? trace_irq_disable+0x37/0x100 [ 451.702128][T23196] ? clear_bhb_loop+0x60/0xb0 [ 451.702148][T23196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.702166][T23196] RIP: 0033:0x7f28ff39aeb9 [ 451.702182][T23196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.702197][T23196] RSP: 002b:00007f29001ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.702216][T23196] RAX: ffffffffffffffda RBX: 00007f28ff615fa0 RCX: 00007f28ff39aeb9 [ 451.702229][T23196] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 451.702240][T23196] RBP: 00007f29001ee090 R08: 0000000000000000 R09: 0000000000000000 [ 451.702251][T23196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 451.702262][T23196] R13: 00007f28ff616038 R14: 00007f28ff615fa0 R15: 00007ffd4844f9b8 [ 451.702291][T23196] [ 452.066457][T23202] netlink: 'syz.3.4716': attribute type 4 has an invalid length. [ 452.310618][T23217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4717'. [ 452.349298][T23217] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4717'. [ 452.377057][T23220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4722'. [ 452.431221][T23225] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 452.439780][T23224] netlink: 'syz.4.4723': attribute type 5 has an invalid length. [ 452.454037][T23226] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4724'. [ 452.550514][T23220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4722'. [ 452.576332][T23231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4725'. [ 452.592546][T23234] FAULT_INJECTION: forcing a failure. [ 452.592546][T23234] name failslab, interval 1, probability 0, space 0, times 0 [ 452.606254][T23234] CPU: 0 UID: 0 PID: 23234 Comm: syz.3.4726 Not tainted syzkaller #0 PREEMPT(full) [ 452.606280][T23234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 452.606291][T23234] Call Trace: [ 452.606299][T23234] [ 452.606306][T23234] dump_stack_lvl+0xe8/0x150 [ 452.606333][T23234] should_fail_ex+0x412/0x560 [ 452.606360][T23234] should_failslab+0xa8/0x100 [ 452.606382][T23234] __kmalloc_cache_noprof+0x83/0x6e0 [ 452.606399][T23234] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 452.606418][T23234] ? sctp_add_bind_addr+0x8c/0x370 [ 452.606440][T23234] sctp_add_bind_addr+0x8c/0x370 [ 452.606463][T23234] sctp_copy_local_addr_list+0x314/0x4f0 [ 452.606485][T23234] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 452.606501][T23234] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 452.606520][T23234] ? sctp_v6_is_any+0x64/0x80 [ 452.606539][T23234] ? sctp_copy_one_addr+0x93/0x360 [ 452.606559][T23234] sctp_bind_addr_copy+0xb3/0x3c0 [ 452.606577][T23234] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 452.606606][T23234] sctp_connect_new_asoc+0x2ff/0x6b0 [ 452.606630][T23234] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 452.606653][T23234] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 452.606675][T23234] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 452.606695][T23234] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 452.606716][T23234] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 452.606735][T23234] ? security_sctp_bind_connect+0x7e/0x2c0 [ 452.606757][T23234] sctp_sendmsg+0x1528/0x2c10 [ 452.606776][T23234] ? unwind_next_frame+0xa5/0x23c0 [ 452.606810][T23234] ? __pfx_sctp_sendmsg+0x10/0x10 [ 452.606828][T23234] ? aa_sk_perm+0x15a/0x960 [ 452.606850][T23234] ? aa_sk_perm+0x82d/0x960 [ 452.606878][T23234] ? __pfx_aa_sk_perm+0x10/0x10 [ 452.606908][T23234] ? sock_rps_record_flow+0x19/0x400 [ 452.606934][T23234] ? inet_sendmsg+0x2f4/0x370 [ 452.606955][T23234] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.606977][T23234] ____sys_sendmsg+0x894/0xad0 [ 452.607009][T23234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.607040][T23234] ? import_iovec+0x73/0xa0 [ 452.607069][T23234] ___sys_sendmsg+0x2a5/0x360 [ 452.607088][T23234] ? __lock_acquire+0x6b5/0x2cf0 [ 452.607117][T23234] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.607179][T23234] ? __fget_files+0x2a/0x420 [ 452.607199][T23234] ? __fget_files+0x3a0/0x420 [ 452.607228][T23234] __x64_sys_sendmsg+0x1bd/0x2a0 [ 452.607250][T23234] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.607278][T23234] ? __pfx_ksys_write+0x10/0x10 [ 452.607309][T23234] do_syscall_64+0xe2/0xf80 [ 452.607326][T23234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.607341][T23234] ? trace_irq_disable+0x37/0x100 [ 452.607358][T23234] ? clear_bhb_loop+0x60/0xb0 [ 452.607375][T23234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.607392][T23234] RIP: 0033:0x7f28ff39aeb9 [ 452.607408][T23234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.607423][T23234] RSP: 002b:00007f29001ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.607441][T23234] RAX: ffffffffffffffda RBX: 00007f28ff615fa0 RCX: 00007f28ff39aeb9 [ 452.607453][T23234] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 452.607463][T23234] RBP: 00007f29001ee090 R08: 0000000000000000 R09: 0000000000000000 [ 452.607474][T23234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.607484][T23234] R13: 00007f28ff616038 R14: 00007f28ff615fa0 R15: 00007ffd4844f9b8 [ 452.607514][T23234] [ 453.115164][T23242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4727'. [ 453.294596][T23251] pim6reg: left allmulticast mode [ 453.576182][T23272] FAULT_INJECTION: forcing a failure. [ 453.576182][T23272] name failslab, interval 1, probability 0, space 0, times 0 [ 453.610155][T23272] CPU: 1 UID: 0 PID: 23272 Comm: syz.0.4738 Not tainted syzkaller #0 PREEMPT(full) [ 453.610179][T23272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 453.610188][T23272] Call Trace: [ 453.610194][T23272] [ 453.610201][T23272] dump_stack_lvl+0xe8/0x150 [ 453.610223][T23272] should_fail_ex+0x412/0x560 [ 453.610244][T23272] should_failslab+0xa8/0x100 [ 453.610265][T23272] __kmalloc_cache_noprof+0x83/0x6e0 [ 453.610282][T23272] ? __pfx___sanitizer_cov_trace_cmp2+0x10/0x10 [ 453.610301][T23272] ? sctp_add_bind_addr+0x8c/0x370 [ 453.610322][T23272] sctp_add_bind_addr+0x8c/0x370 [ 453.610344][T23272] sctp_copy_local_addr_list+0x314/0x4f0 [ 453.610366][T23272] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 453.610384][T23272] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 453.610401][T23272] ? sctp_v6_is_any+0x64/0x80 [ 453.610420][T23272] ? sctp_copy_one_addr+0x93/0x360 [ 453.610440][T23272] sctp_bind_addr_copy+0xb3/0x3c0 [ 453.610457][T23272] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 453.610484][T23272] sctp_connect_new_asoc+0x2ff/0x6b0 [ 453.610510][T23272] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 453.610530][T23272] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 453.610550][T23272] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 453.610570][T23272] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 453.610593][T23272] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 453.610612][T23272] ? security_sctp_bind_connect+0x7e/0x2c0 [ 453.610635][T23272] sctp_sendmsg+0x1528/0x2c10 [ 453.610654][T23272] ? unwind_next_frame+0xa5/0x23c0 [ 453.610688][T23272] ? __pfx_sctp_sendmsg+0x10/0x10 [ 453.610707][T23272] ? aa_sk_perm+0x15a/0x960 [ 453.610730][T23272] ? aa_sk_perm+0x82d/0x960 [ 453.610757][T23272] ? __pfx_aa_sk_perm+0x10/0x10 [ 453.610781][T23272] ? sock_rps_record_flow+0x19/0x400 [ 453.610807][T23272] ? inet_sendmsg+0x2f4/0x370 [ 453.610829][T23272] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.610852][T23272] ____sys_sendmsg+0x894/0xad0 [ 453.610885][T23272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.610918][T23272] ? import_iovec+0x73/0xa0 [ 453.610948][T23272] ___sys_sendmsg+0x2a5/0x360 [ 453.610970][T23272] ? __lock_acquire+0x6b5/0x2cf0 [ 453.610998][T23272] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.611075][T23272] ? __fget_files+0x2a/0x420 [ 453.611094][T23272] ? __fget_files+0x3a0/0x420 [ 453.611122][T23272] __x64_sys_sendmsg+0x1bd/0x2a0 [ 453.611148][T23272] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.611180][T23272] ? __pfx_ksys_write+0x10/0x10 [ 453.611218][T23272] do_syscall_64+0xe2/0xf80 [ 453.611237][T23272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.611255][T23272] ? trace_irq_disable+0x37/0x100 [ 453.611272][T23272] ? clear_bhb_loop+0x60/0xb0 [ 453.611294][T23272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.611313][T23272] RIP: 0033:0x7f598879aeb9 [ 453.611330][T23272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.611345][T23272] RSP: 002b:00007f59895e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.611365][T23272] RAX: ffffffffffffffda RBX: 00007f5988a15fa0 RCX: 00007f598879aeb9 [ 453.611379][T23272] RDX: 0000000000004000 RSI: 00002000000019c0 RDI: 0000000000000003 [ 453.611391][T23272] RBP: 00007f59895e2090 R08: 0000000000000000 R09: 0000000000000000 [ 453.611403][T23272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.611415][T23272] R13: 00007f5988a16038 R14: 00007f5988a15fa0 R15: 00007ffc7b18ec38 [ 453.611446][T23272] [ 453.613691][T23273] syzkaller1: entered promiscuous mode [ 453.975365][T23273] syzkaller1: entered allmulticast mode [ 454.432981][T23312] 8021q: adding VLAN 0 to HW filter on device bond6 [ 454.488139][T23265] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 454.498432][T23318] syzkaller1: entered promiscuous mode [ 454.546822][T23318] syzkaller1: entered allmulticast mode [ 455.319146][T23386] netlink: 'syz.4.4770': attribute type 29 has an invalid length. [ 455.334304][T23386] netlink: 'syz.4.4770': attribute type 29 has an invalid length. [ 455.369747][T23388] mac80211_hwsim hwsim32 : renamed from wlan1 (while UP) [ 455.583040][T23414] openvswitch: netlink: Missing key (keys=40, expected=100) [ 455.590789][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 455.719623][T23419] __nla_validate_parse: 11 callbacks suppressed [ 455.719641][T23419] netlink: 284 bytes leftover after parsing attributes in process `syz.1.4780'. [ 455.745453][T23423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4781'. [ 456.117357][T23453] syz_tun: entered allmulticast mode [ 456.156398][T23452] syz_tun: left allmulticast mode [ 456.492538][T23481] netlink: 'syz.3.4799': attribute type 1 has an invalid length. [ 456.503120][T23483] netlink: 'syz.4.4800': attribute type 1 has an invalid length. [ 456.548864][T23483] netlink: 'syz.4.4800': attribute type 1 has an invalid length. [ 456.574750][T23481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 456.621955][T23495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4802'. [ 456.745226][T23497] syzkaller0: entered promiscuous mode [ 456.751982][T23497] syzkaller0: entered allmulticast mode [ 456.861087][T23510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4808'. [ 458.679202][T23552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4815'. [ 458.850958][T23567] netlink: 'syz.1.4818': attribute type 10 has an invalid length. [ 458.950322][T23567] netlink: 'syz.1.4818': attribute type 10 has an invalid length. [ 459.002984][T23567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.048641][T23567] team0: Port device bond0 added [ 459.056205][T23577] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 459.156992][T23590] mac80211_hwsim hwsim30 wlan1: Caught tx_queue_len zero misconfig [ 459.306488][T23604] netlink: 'syz.4.4828': attribute type 11 has an invalid length. [ 459.333000][T23604] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4828'. [ 459.362119][T23604] netlink: 'syz.4.4828': attribute type 11 has an invalid length. [ 459.384513][T23604] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4828'. [ 459.550862][T23622] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4834'. [ 459.574867][T23624] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4832'. [ 459.616937][T23624] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 459.720139][T23630] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 459.769245][T23635] netem: change failed [ 459.865646][T23642] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4839'. [ 460.082635][T23654] bond13: entered promiscuous mode [ 460.104899][T23654] macvlan3: entered promiscuous mode [ 460.136054][T23654] macvlan3: entered allmulticast mode [ 460.142783][T23654] bond13: (slave macvlan3): Opening slave failed [ 460.282653][T23666] syzkaller0: entered promiscuous mode [ 460.295813][T23666] syzkaller0: entered allmulticast mode [ 460.361133][T23671] openvswitch: netlink: Flow key attr not present in new flow. [ 460.576691][T23686] syzkaller0: entered promiscuous mode [ 460.582235][T23686] syzkaller0: entered allmulticast mode [ 460.727263][T23703] __nla_validate_parse: 1 callbacks suppressed [ 460.727280][T23703] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.4859'. [ 460.918311][T23715] netlink: 'syz.4.4861': attribute type 24 has an invalid length. [ 460.926430][T23713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4862'. [ 460.931154][T23716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4863'. [ 460.955967][T23713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4862'. [ 461.059471][T23720] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4865'. [ 461.462441][T23738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4872'. [ 461.642486][T23750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4876'. [ 461.684285][T23750] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 461.704104][T23750] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 461.718586][T23750] team0: Failed to send options change via netlink (err -105) [ 461.767114][T23750] team0: Port device batadv1 added [ 461.912265][T23768] syzkaller0: entered promiscuous mode [ 461.940349][T23768] syzkaller0: entered allmulticast mode [ 462.270955][T23785] xt_hashlimit: size too large, truncated to 1048576 [ 462.582738][T23803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4891'. [ 464.170663][T23819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.307307][T23826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4897'. [ 464.325373][T23826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4897'. [ 464.334856][T23832] netlink: 'syz.2.4898': attribute type 2 has an invalid length. [ 464.361138][T23832] 9: entered promiscuous mode [ 465.247749][T23892] team0: Cannot enslave team device to itself [ 465.372014][T23898] netlink: 'syz.4.4918': attribute type 1 has an invalid length. [ 465.397013][T23898] 8021q: adding VLAN 0 to HW filter on device bond14 [ 465.400695][T23850] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 465.422858][T23898] bond14: (slave ip6gretap1): making interface the new active one [ 465.435626][T23898] bond14: (slave ip6gretap1): Enslaving as an active interface with an up link [ 465.474161][T23898] veth11: entered promiscuous mode [ 465.519538][T23905] xt_l2tp: v2 tid > 0xffff: 1114244 [ 465.573629][T23907] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 465.739511][T23917] 8021q: adding VLAN 0 to HW filter on device bond6 [ 465.841874][T23923] __nla_validate_parse: 3 callbacks suppressed [ 465.842619][T23921] netlink: 'syz.2.4928': attribute type 21 has an invalid length. [ 465.857424][T23923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4927'. [ 465.887555][T23921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4928'. [ 465.891851][T23927] netlink: 'syz.4.4929': attribute type 1 has an invalid length. [ 465.909816][T23921] ipvlan4: entered promiscuous mode [ 465.915236][T23921] bridge0: port 1(ipvlan4) entered blocking state [ 465.922236][T23921] bridge0: port 1(ipvlan4) entered disabled state [ 465.929575][T23921] ipvlan4: entered allmulticast mode [ 465.934874][T23921] bridge0: entered allmulticast mode [ 465.942016][T23921] ipvlan4: left allmulticast mode [ 465.948062][T23921] bridge0: left allmulticast mode [ 465.997911][T23927] 8021q: adding VLAN 0 to HW filter on device bond15 [ 466.021812][T23927] bond15: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 466.071491][T23927] netlink: 'syz.4.4929': attribute type 1 has an invalid length. [ 466.121680][T23927] netlink: 'syz.4.4929': attribute type 2 has an invalid length. [ 466.146081][T23930] bond15: (slave veth11): Enslaving as an active interface with a down link [ 466.158855][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4932'. [ 466.232466][T23942] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 466.377304][T23959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4940'. [ 466.383578][T23954] syzkaller0: mtu less than device minimum [ 466.414353][T23954] syzkaller0: entered allmulticast mode [ 466.454851][T23959] bridge3: port 1(veth13) entered blocking state [ 466.463091][T23959] bridge3: port 1(veth13) entered disabled state [ 466.483451][T23959] veth13: entered allmulticast mode [ 466.502591][T23959] veth13: entered promiscuous mode [ 466.556587][T23959] bridge3: port 2(veth0_to_bond) entered blocking state [ 466.563655][T23959] bridge3: port 2(veth0_to_bond) entered disabled state [ 466.572355][T23959] veth0_to_bond: entered allmulticast mode [ 466.584803][T23959] veth0_to_bond: entered promiscuous mode [ 466.626506][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 466.629620][T23972] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4944'. [ 466.732974][T23975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4945'. [ 466.861022][T23984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4947'. [ 466.879782][T23986] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4948'. [ 466.891421][T23986] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4948'. [ 466.894790][T23984] openvswitch: netlink: Flow actions attr not present in new flow. [ 467.078844][T24002] netlink: 'syz.0.4950': attribute type 1 has an invalid length. [ 467.095136][T24002] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4950'. [ 467.197938][T24005] bridge_slave_1: left allmulticast mode [ 467.203653][T24005] bridge_slave_1: left promiscuous mode [ 467.210300][T24005] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.226195][T24005] bridge_slave_0: left allmulticast mode [ 467.232505][T24005] bridge_slave_0: left promiscuous mode [ 467.238553][T24005] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.345469][T24016] batadv0: mtu less than device minimum [ 467.364048][T24016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.376149][T24016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.387766][T24016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.399426][T24016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.411181][T24016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.422847][T24016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.434515][T24016] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.464443][T24013] syzkaller0: entered promiscuous mode [ 467.471685][T24013] syzkaller0: entered allmulticast mode [ 467.550230][T24030] batadv_slave_0: entered promiscuous mode [ 467.577867][T24028] batadv_slave_0: left promiscuous mode [ 467.824509][T24047] bond8: entered promiscuous mode [ 467.844792][T24055] macvlan2: entered promiscuous mode [ 467.851624][T24055] macvlan2: entered allmulticast mode [ 467.869669][T24055] bond8: (slave macvlan2): Opening slave failed [ 467.934466][T24060] lo: Caught tx_queue_len zero misconfig [ 468.089723][T24071] netlink: 'syz.3.4973': attribute type 2 has an invalid length. [ 468.257229][T24083] netlink: 'syz.0.4976': attribute type 5 has an invalid length. [ 468.513294][T24105] bond7: entered promiscuous mode [ 468.527098][T24105] macvlan3: entered promiscuous mode [ 468.532511][T24105] macvlan3: entered allmulticast mode [ 468.785029][T24119] pim6reg: entered allmulticast mode [ 468.832892][T24122] pim6reg: left allmulticast mode [ 491.196295][ T1010] tipc: Resetting bearer [ 491.265160][ T1010] tipc: Disabling bearer [ 491.302034][ T1010] tipc: Disabling bearer [ 491.335081][ T1010] erspan0 (unregistering): left promiscuous mode [ 491.351909][ T1010] gretap0 (unregistering): left promiscuous mode [ 491.473300][ T1010] bond10 (unregistering): (slave geneve2): Releasing active interface [ 491.641779][ T1010] bond0 (unregistering): (slave 32): Releasing backup interface [ 491.651500][ T1010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.660964][ T1010] bond0 (unregistering): Released all slaves [ 491.672343][ T1010] bond1 (unregistering): Released all slaves [ 491.686657][ T1010] bond2 (unregistering): Released all slaves [ 491.699960][ T1010] bond3 (unregistering): Released all slaves [ 491.712443][ T1010] bond4 (unregistering): Released all slaves [ 491.732910][ T1010] bond5 (unregistering): Released all slaves [ 491.755110][ T1010] bond6 (unregistering): Released all slaves [ 491.771238][ T1010] bond7 (unregistering): Released all slaves [ 491.784379][ T1010] bond8 (unregistering): Released all slaves [ 491.798044][ T1010] bond9 (unregistering): Released all slaves [ 491.812782][ T1010] bond10 (unregistering): Released all slaves [ 491.829469][ T1010] bond11 (unregistering): Released all slaves [ 491.842375][ T1010] bond12 (unregistering): Released all slaves [ 491.941688][ T1010] bond13 (unregistering): Released all slaves [ 492.037535][ T1010] bond14 (unregistering): Released all slaves [ 492.183718][ T1010] : left promiscuous mode [ 492.259066][ T1010] tipc: Left network mode [ 492.648117][ T1010] hsr_slave_1: left promiscuous mode [ 492.674864][ T1010] pimreg (unregistering): left allmulticast mode [ 492.851242][ T1010] team0 (unregistering): Port device team_slave_1 removed [ 493.255746][ T1010] IPVS: stop unused estimator thread 0... [ 535.941739][T24154] vlan2: entered promiscuous mode [ 535.949868][T24154] bridge0: entered promiscuous mode [ 536.148091][T24166] net_ratelimit: 15 callbacks suppressed [ 536.148110][T24166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.256278][T24168] __nla_validate_parse: 12 callbacks suppressed [ 536.256298][T24168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4995'. [ 536.318710][T24169] bond8: entered promiscuous mode [ 536.334525][T24174] macvlan4: entered promiscuous mode [ 536.340061][T24174] macvlan4: entered allmulticast mode [ 536.347058][T24174] bond8: (slave macvlan4): Opening slave failed [ 536.354127][T24168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4995'. [ 536.422041][T24175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4999'. [ 536.590988][T24187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5002'. [ 536.640738][T24191] syzkaller0: entered promiscuous mode [ 536.646735][T24191] syzkaller0: entered allmulticast mode [ 536.748649][T24201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5004'. [ 536.820047][T24199] vxcan1 speed is unknown, defaulting to 1000 [ 536.837090][T24204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5007'. [ 536.847174][T24204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5007'. [ 537.007095][T24208] tipc: Enabling of bearer rejected, failed to enable media [ 537.273058][T24217] bond8: entered promiscuous mode [ 537.312673][T24221] macvlan3: entered promiscuous mode [ 537.318104][T24221] macvlan3: entered allmulticast mode [ 537.393073][T24230] bond16: option lp_interval: invalid value (0) [ 537.400525][T24230] bond16: option lp_interval: allowed values 1 - 2147483647 [ 537.409907][T24230] bond16 (unregistering): Released all slaves [ 537.468831][T24235] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5016'. [ 537.654639][T24243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5018'. [ 537.704613][T24246] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5020'. [ 537.736769][T24240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.743875][T24240] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 537.797502][T24240] bond0: (slave gre0): Error -95 calling set_mac_address [ 537.870331][T24240] bond0: (slave rose0): Enslaving as an active interface with an up link [ 538.023066][T24264] netlink: 'syz.2.5023': attribute type 10 has an invalid length. [ 538.080366][T24264] team0: Device veth1_macvtap failed to register rx_handler [ 538.280895][T24272] bond9: entered promiscuous mode [ 538.331341][T24274] macvlan4: entered promiscuous mode [ 538.347237][T24274] macvlan4: entered allmulticast mode [ 538.551845][T24285] netlink: 'syz.0.5028': attribute type 1 has an invalid length. [ 538.673011][T24290] bond10: entered promiscuous mode [ 538.702843][T24290] bond10: entered allmulticast mode [ 538.709876][T24295] openvswitch: netlink: IP tunnel dst address not specified [ 538.737393][T24297] syzkaller0: entered promiscuous mode [ 538.784686][T24297] syzkaller0: entered allmulticast mode [ 538.862011][T24297] IPVS: set_ctl: invalid protocol: 205 172.20.20.170:20002 [ 538.913740][T24306] netlink: 'syz.2.5033': attribute type 3 has an invalid length. [ 539.407990][T24334] netlink: 'syz.3.5038': attribute type 6 has an invalid length. [ 539.413930][T24330] bond16: entered promiscuous mode [ 539.469588][T24330] macvlan3: entered promiscuous mode [ 539.475019][T24330] macvlan3: entered allmulticast mode [ 539.706836][T24346] vxcan1 speed is unknown, defaulting to 1000 [ 539.751654][T24349] netlink: 'syz.3.5042': attribute type 12 has an invalid length. [ 539.766037][T24352] openvswitch: netlink: Flow key attr not present in new flow. [ 539.931789][T24349] bond9: option primary_reselect: invalid value (255) [ 539.957114][T24349] bond9 (unregistering): Released all slaves [ 540.104828][ T61] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.234214][T24361] syzkaller0: entered promiscuous mode [ 540.253220][T24361] syzkaller0: entered allmulticast mode [ 540.271837][ T61] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.324093][T24365] team0: Device ip6gre1 is of different type [ 540.418282][ T61] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.428136][ T61] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 540.450129][T24376] erspan0: entered promiscuous mode [ 540.455383][T24376] erspan0: entered allmulticast mode [ 542.098746][T24401] siw: device registration error -23 [ 542.128135][T24399] __nla_validate_parse: 12 callbacks suppressed [ 542.128154][T24399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5054'. [ 542.208569][T24399] bond8: entered promiscuous mode [ 542.213778][T24399] bond8: entered allmulticast mode [ 542.219424][T24399] 8021q: adding VLAN 0 to HW filter on device bond8 [ 542.237734][T24405] macvlan3: entered promiscuous mode [ 542.243074][T24405] macvlan3: entered allmulticast mode [ 542.269212][T24405] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 542.595390][T24430] tipc: Enabling of bearer rejected, failed to enable media [ 542.791596][T24427] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.818501][T24443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5064'. [ 542.899728][T24448] netlink: 'syz.2.5065': attribute type 21 has an invalid length. [ 542.916455][T24448] netlink: 'syz.2.5065': attribute type 22 has an invalid length. [ 542.940256][T24448] netlink: 'syz.2.5065': attribute type 23 has an invalid length. [ 542.962131][T24448] netlink: 'syz.2.5065': attribute type 25 has an invalid length. [ 543.006849][T24448] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5065'. [ 543.099608][T24457] syzkaller1: entered promiscuous mode [ 543.104852][T24460] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 543.118691][T24457] syzkaller1: entered allmulticast mode [ 543.623421][T24500] team0 (unregistering): Port device team_slave_0 removed [ 543.642853][T24500] team0 (unregistering): Port device team_slave_1 removed [ 543.668851][T24500] team0 (unregistering): Port device batadv1 removed [ 543.729236][T24498] bond9 (unregistering): Released all slaves [ 543.815634][T24518] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5085'. [ 543.944746][ T5878] vxcan1 speed is unknown, defaulting to 1000 [ 544.146971][T24541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5091'. [ 544.183236][T24548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5094'. [ 544.265590][T24555] netlink: 'syz.4.5096': attribute type 2 has an invalid length. [ 544.286747][T24555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5096'. [ 544.396762][T24561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5097'. [ 545.345867][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 609.065336][T24595] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 609.684822][T24630] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5116'. [ 609.709589][T24630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5116'. [ 609.841907][T24637] netlink: 'syz.2.5120': attribute type 2 has an invalid length. [ 610.038640][T24654] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5127'. [ 610.077526][T24654] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5127'. [ 610.103461][T24654] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5127'. [ 610.494008][T24682] netlink: 763 bytes leftover after parsing attributes in process `syz.3.5136'. [ 610.512444][T24685] netlink: 'syz.0.5137': attribute type 1 has an invalid length. [ 611.382375][T24739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5164'. [ 611.784688][T24768] netlink: 'syz.1.5179': attribute type 21 has an invalid length. [ 611.804845][T24768] IPv6: NLM_F_CREATE should be specified when creating new route [ 612.012919][T24791] netlink: 'syz.1.5185': attribute type 6 has an invalid length. [ 612.025362][T24791] netlink: 'syz.1.5185': attribute type 7 has an invalid length. [ 612.038119][T24791] netlink: 'syz.1.5185': attribute type 11 has an invalid length. [ 612.046951][T24791] netlink: 'syz.1.5185': attribute type 15 has an invalid length. [ 612.055190][T24791] netlink: 'syz.1.5185': attribute type 16 has an invalid length. [ 612.064410][T24791] netlink: 'syz.1.5185': attribute type 21 has an invalid length. [ 612.079396][T24791] netlink: 'syz.1.5185': attribute type 25 has an invalid length. [ 613.236120][T24844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5200'. [ 613.368318][T24854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5204'. [ 613.393264][T24854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5204'. [ 613.565237][T24865] bond9: entered promiscuous mode [ 613.590477][T24865] macvlan4: entered promiscuous mode [ 613.596247][T24865] macvlan4: entered allmulticast mode [ 613.602662][T24865] bond9: (slave macvlan4): Opening slave failed [ 613.827079][T24879] delete_channel: no stack [ 613.997710][T24895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.999971][T24896] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 614.472193][T24916] IPv6: NLM_F_CREATE should be specified when creating new route [ 614.494640][T24916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 614.501941][T24916] IPv6: NLM_F_CREATE should be set when creating new route [ 614.624065][T24924] FAULT_INJECTION: forcing a failure. [ 614.624065][T24924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.698513][T24924] CPU: 1 UID: 0 PID: 24924 Comm: syz.1.5226 Not tainted syzkaller #0 PREEMPT(full) [ 614.698538][T24924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 614.698550][T24924] Call Trace: [ 614.698557][T24924] [ 614.698565][T24924] dump_stack_lvl+0xe8/0x150 [ 614.698594][T24924] should_fail_ex+0x412/0x560 [ 614.698620][T24924] _copy_from_user+0x2d/0xb0 [ 614.698648][T24924] ___sys_sendmsg+0x1c6/0x360 [ 614.698670][T24924] ? __lock_acquire+0x6b5/0x2cf0 [ 614.698699][T24924] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.698761][T24924] ? __fget_files+0x2a/0x420 [ 614.698779][T24924] ? __fget_files+0x3a0/0x420 [ 614.698808][T24924] __x64_sys_sendmsg+0x1bd/0x2a0 [ 614.698831][T24924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.698861][T24924] ? __pfx_ksys_write+0x10/0x10 [ 614.698895][T24924] do_syscall_64+0xe2/0xf80 [ 614.698912][T24924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.698930][T24924] ? trace_irq_disable+0x37/0x100 [ 614.698946][T24924] ? clear_bhb_loop+0x60/0xb0 [ 614.698968][T24924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.698985][T24924] RIP: 0033:0x7f4b7959aeb9 [ 614.699002][T24924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.699016][T24924] RSP: 002b:00007f4b7a484028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.699036][T24924] RAX: ffffffffffffffda RBX: 00007f4b79815fa0 RCX: 00007f4b7959aeb9 [ 614.699049][T24924] RDX: 0000000000000000 RSI: 00002000000092c0 RDI: 0000000000000004 [ 614.699061][T24924] RBP: 00007f4b7a484090 R08: 0000000000000000 R09: 0000000000000000 [ 614.699072][T24924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.699082][T24924] R13: 00007f4b79816038 R14: 00007f4b79815fa0 R15: 00007ffd7a9176f8 [ 614.699110][T24924] [ 614.951221][T24934] validate_nla: 4 callbacks suppressed [ 614.951239][T24934] netlink: 'syz.2.5231': attribute type 1 has an invalid length. [ 615.202434][T24953] syzkaller0: entered promiscuous mode [ 615.208990][T24953] syzkaller0: entered allmulticast mode [ 615.254863][T24960] netlink: 'syz.0.5239': attribute type 1 has an invalid length. [ 615.378335][T24967] bond11: (slave geneve3): Opening slave failed [ 615.497142][T24978] __nla_validate_parse: 4 callbacks suppressed [ 615.497160][T24978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5243'. [ 615.547129][T24978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5243'. [ 615.626130][T24982] syzkaller1: entered promiscuous mode [ 615.636214][T24982] syzkaller1: entered allmulticast mode [ 615.857548][T24999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5253'. [ 615.883929][T25004] vcan1: entered promiscuous mode [ 615.890354][T25004] vcan1: entered allmulticast mode [ 615.900487][T25005] netlink: 'syz.0.5257': attribute type 21 has an invalid length. [ 615.909175][T25005] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5257'. [ 615.929949][T25005] netlink: 'syz.0.5257': attribute type 5 has an invalid length. [ 615.939445][T25005] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5257'. [ 615.974094][T24998] netlink: 'syz.3.5254': attribute type 1 has an invalid length. [ 616.002661][T24998] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5254'. [ 616.043573][T25010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5260'. [ 616.072240][ T61] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 616.083826][ T61] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 616.098728][ T61] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 616.120854][ T61] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 616.132568][T25016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5262'. [ 616.164045][T25016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5262'. [ 616.230193][T25023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5265'. [ 616.290591][T25027] openvswitch: netlink: Message has 93 unknown bytes. [ 616.322295][T25027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.581375][T25041] bond9: entered promiscuous mode [ 616.598538][T25040] Bluetooth: MGMT ver 1.23 [ 616.621461][T25041] macvlan2: entered promiscuous mode [ 616.645965][T25041] macvlan2: entered allmulticast mode [ 616.662998][T25041] bond9: (slave macvlan2): Opening slave failed [ 616.752132][T25046] : renamed from bond_slave_0 (while UP) [ 616.890939][T25058] tipc: Enabled bearer , priority 0 [ 617.032151][T25058] syzkaller0: entered promiscuous mode [ 617.048830][T25058] syzkaller0: entered allmulticast mode [ 617.057637][T25058] tipc: Resetting bearer [ 617.079673][T25056] tipc: Resetting bearer [ 617.836834][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 618.479011][T25056] tipc: Disabling bearer [ 618.700360][T25088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 618.905005][T25100] bond12: entered promiscuous mode [ 618.957494][T25100] macvlan5: entered promiscuous mode [ 618.962962][T25100] macvlan5: entered allmulticast mode [ 618.971159][T25100] bond12: (slave macvlan5): Opening slave failed [ 618.989454][T25105] tipc: Enabled bearer , priority 0 [ 619.084910][T25105] syzkaller0: entered promiscuous mode [ 619.116016][T25105] syzkaller0: entered allmulticast mode [ 619.132858][T25105] tipc: Resetting bearer [ 619.140250][T25115] netlink: 'syz.2.5293': attribute type 1 has an invalid length. [ 619.149870][T25115] netlink: 'syz.2.5293': attribute type 1 has an invalid length. [ 619.163812][T25104] tipc: Resetting bearer [ 619.172807][T25120] netlink: 'syz.0.5295': attribute type 1 has an invalid length. [ 619.589824][T25130] FAULT_INJECTION: forcing a failure. [ 619.589824][T25130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.603771][T25130] CPU: 0 UID: 0 PID: 25130 Comm: syz.4.5297 Not tainted syzkaller #0 PREEMPT(full) [ 619.603796][T25130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 619.603807][T25130] Call Trace: [ 619.603814][T25130] [ 619.603822][T25130] dump_stack_lvl+0xe8/0x150 [ 619.603850][T25130] should_fail_ex+0x412/0x560 [ 619.603875][T25130] _copy_from_iter+0x1d3/0x1670 [ 619.603904][T25130] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 619.603933][T25130] ? __pfx__copy_from_iter+0x10/0x10 [ 619.603956][T25130] ? __build_skb_around+0x22d/0x3c0 [ 619.603978][T25130] ? __alloc_skb+0x193/0x390 [ 619.603996][T25130] ? netlink_sendmsg+0x650/0xb40 [ 619.604013][T25130] ? skb_put+0x11b/0x210 [ 619.604034][T25130] netlink_sendmsg+0x6c0/0xb40 [ 619.604060][T25130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.604080][T25130] ? aa_sock_msg_perm+0xf1/0x1b0 [ 619.604103][T25130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 619.604123][T25130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.604139][T25130] ____sys_sendmsg+0xa68/0xad0 [ 619.604160][T25130] ? __might_fault+0xaf/0x130 [ 619.604197][T25130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.604224][T25130] ? import_iovec+0x73/0xa0 [ 619.604248][T25130] ___sys_sendmsg+0x2a5/0x360 [ 619.604266][T25130] ? __lock_acquire+0x6b5/0x2cf0 [ 619.604290][T25130] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.604339][T25130] ? __fget_files+0x2a/0x420 [ 619.604355][T25130] ? __fget_files+0x3a0/0x420 [ 619.604379][T25130] __x64_sys_sendmsg+0x1bd/0x2a0 [ 619.604401][T25130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.604428][T25130] ? __pfx_ksys_write+0x10/0x10 [ 619.604460][T25130] do_syscall_64+0xe2/0xf80 [ 619.604476][T25130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.604491][T25130] ? trace_irq_disable+0x37/0x100 [ 619.604506][T25130] ? clear_bhb_loop+0x60/0xb0 [ 619.604524][T25130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.604540][T25130] RIP: 0033:0x7f06ef99aeb9 [ 619.604555][T25130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.604569][T25130] RSP: 002b:00007f06f0846028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.604586][T25130] RAX: ffffffffffffffda RBX: 00007f06efc16090 RCX: 00007f06ef99aeb9 [ 619.604598][T25130] RDX: 0000000000000000 RSI: 00002000000092c0 RDI: 0000000000000004 [ 619.604608][T25130] RBP: 00007f06f0846090 R08: 0000000000000000 R09: 0000000000000000 [ 619.604618][T25130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.604627][T25130] R13: 00007f06efc16128 R14: 00007f06efc16090 R15: 00007fff7464e578 [ 619.604653][T25130] [ 620.970563][T25104] tipc: Disabling bearer [ 620.982180][T25120] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 620.989795][T25119] tipc: Enabling of bearer rejected, failed to enable media [ 621.011014][ T5878] tipc: Node number set to 725382000 [ 621.037281][T25123] vxcan1 speed is unknown, defaulting to 1000 [ 621.114985][T25136] __nla_validate_parse: 5 callbacks suppressed [ 621.115006][T25136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5298'. [ 621.222979][T25142] netlink: 'syz.0.5301': attribute type 1 has an invalid length. [ 621.251140][T25142] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5301'. [ 621.287653][T25142] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5301'. [ 621.297992][T25142] netlink: Unknown conntrack attr (0) [ 621.313508][T25145] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5302'. [ 621.970991][T25164] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5308'. [ 622.249239][T25173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5311'. [ 622.274612][T25173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5311'. [ 622.294677][T25173] netlink: 'syz.0.5311': attribute type 7 has an invalid length. [ 622.316571][T25173] netlink: 'syz.0.5311': attribute type 8 has an invalid length. [ 622.332222][T25175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5312'. [ 622.341703][T25173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5311'. [ 622.351075][T25175] openvswitch: netlink: Flow key attr not present in new flow. [ 622.504113][T25181] netlink: 'syz.0.5314': attribute type 24 has an invalid length. [ 622.550171][T25183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5315'. [ 622.946682][T25195] vxcan1 speed is unknown, defaulting to 1000 [ 623.161830][T25205] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 623.972898][T25245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.651856][T25276] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 624.964844][T25287] bond10: entered promiscuous mode [ 624.970483][T25287] bond10: entered allmulticast mode [ 624.976432][T25287] 8021q: adding VLAN 0 to HW filter on device bond10 [ 625.332531][T25312] tc_dump_action: action bad kind [ 625.432816][T25310] bond11: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 625.499890][T25310] bond11 (unregistering): Released all slaves [ 625.682949][T25329] netlink: 'syz.3.5359': attribute type 2 has an invalid length. [ 626.467311][T13431] IPVS: starting estimator thread 0... [ 626.473991][T25379] SET target dimension over the limit! [ 626.556313][T25381] IPVS: using max 34 ests per chain, 81600 per kthread [ 626.582172][T25387] __nla_validate_parse: 29 callbacks suppressed [ 626.582189][T25387] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5378'. [ 626.604624][T25387] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 626.625182][T25230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.973731][T25402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5383'. [ 626.996027][T25403] dvmrp0: entered allmulticast mode [ 627.036195][T25410] netlink: 'syz.4.5386': attribute type 18 has an invalid length. [ 627.081838][T25402] team0 (unregistering): Port device team_slave_0 removed [ 627.102517][T25402] team0 (unregistering): Port device team_slave_1 removed [ 627.119106][T25402] team0 (unregistering): Port device batadv1 removed [ 627.134511][T25402] team0 (unregistering): Port device bond0 removed [ 627.256169][T25419] syzkaller0: entered promiscuous mode [ 627.262138][T25419] syzkaller0: entered allmulticast mode [ 627.347713][T25419] tipc: Started in network mode [ 627.373359][T25419] tipc: Node identity ca66f2fb4152, cluster identity 4711 [ 627.385266][T25419] tipc: Enabled bearer , priority 0 [ 627.450814][T25419] tipc: Resetting bearer [ 627.527798][T25419] tipc: Disabling bearer [ 627.536214][T25436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5393'. [ 627.591131][T25444] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5396'. [ 627.614035][T25444] netlink: 208 bytes leftover after parsing attributes in process `syz.1.5396'. [ 627.981177][T25470] netlink: 'syz.3.5405': attribute type 21 has an invalid length. [ 628.025368][T25470] bond10: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 628.033049][T25475] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5405'. [ 628.048105][T25470] bond10 (unregistering): Released all slaves [ 628.073587][T25465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5404'. [ 628.325010][T25485] bond17: entered promiscuous mode [ 628.347781][T25485] macvlan4: entered promiscuous mode [ 628.353419][T25485] macvlan4: entered allmulticast mode [ 628.360345][T25485] bond17: (slave macvlan4): Opening slave failed [ 628.395579][T25492] syzkaller1: entered promiscuous mode [ 628.421744][T25492] syzkaller1: entered allmulticast mode [ 628.630851][T25507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5416'. [ 628.663905][T25498] syzkaller0: entered promiscuous mode [ 628.684428][T25498] syzkaller0: entered allmulticast mode [ 628.742124][T25514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5419'. [ 628.758331][T25514] openvswitch: netlink: nsh attr 12336 is out of range max 3 [ 628.809853][T25516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5420'. [ 630.356109][T25533] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 630.858088][T25578] bond11: entered promiscuous mode [ 630.883966][T25578] macvlan3: entered promiscuous mode [ 630.891587][T25578] macvlan3: entered allmulticast mode [ 630.898834][T25578] bond11: (slave macvlan3): Opening slave failed [ 631.689284][T25598] bond_slave_0: left promiscuous mode [ 631.708850][T25598] bond_slave_1: left promiscuous mode [ 631.731439][T25612] netlink: 'syz.2.5448': attribute type 1 has an invalid length. [ 631.739701][T25612] netlink: 'syz.2.5448': attribute type 2 has an invalid length. [ 631.763118][T25613] IPv6: NLM_F_REPLACE set, but no existing node found! [ 631.773388][T25613] "syz.4.5447" (25613) uses obsolete ecb(arc4) skcipher [ 631.791575][T25598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.898676][T25610] tc_dump_action: action bad kind [ 631.904454][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 631.925982][ T12] netdevsim netdevsim0 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 631.943587][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.954097][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 631.967620][ T12] netdevsim netdevsim0 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 631.977083][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.998865][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 632.014728][ T12] netdevsim netdevsim0 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 632.031347][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.082511][T25620] bond18: entered promiscuous mode [ 632.088274][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 632.100491][ T12] netdevsim netdevsim0 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 632.109714][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.126425][T25620] macvlan4: entered promiscuous mode [ 632.131884][T25620] macvlan4: entered allmulticast mode [ 632.138590][T25620] bond18: (slave macvlan4): Opening slave failed [ 632.264904][T25628] mac80211_hwsim hwsim30 wlan1: entered allmulticast mode [ 632.327969][T25597] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 632.460750][T25643] delete_channel: no stack [ 632.480308][T25643] netlink: 'syz.1.5457': attribute type 1 has an invalid length. [ 632.495215][T25643] __nla_validate_parse: 3 callbacks suppressed [ 632.495233][T25643] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5457'. [ 632.640959][T25659] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 632.701339][T25664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5463'. [ 632.702170][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'. [ 632.747735][T25668] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 632.764816][T25662] syzkaller0: entered promiscuous mode [ 632.774078][T25662] syzkaller0: entered allmulticast mode [ 632.786770][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'. [ 632.821067][T25670] netlink: 'syz.4.5468': attribute type 11 has an invalid length. [ 632.848918][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'. [ 632.940403][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'. [ 633.054315][T25679] vxcan1 speed is unknown, defaulting to 1000 [ 633.061747][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'. [ 633.139996][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'. [ 633.208858][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'. [ 633.278129][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5466'. [ 633.506914][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 633.914721][T25715] IPVS: set_ctl: invalid protocol: 47 172.20.20.40:20003 [ 634.203009][T25734] bond19: entered promiscuous mode [ 634.250106][T25739] macvlan4: entered promiscuous mode [ 634.297500][T25739] macvlan4: entered allmulticast mode [ 634.336936][T25739] bond19: (slave macvlan4): Opening slave failed [ 634.391453][T25694] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 634.421820][T25746] netlink: 'syz.1.5493': attribute type 1 has an invalid length. [ 634.680331][T25746] 8021q: adding VLAN 0 to HW filter on device bond10 [ 635.082290][T25747] 8021q: adding VLAN 0 to HW filter on device bond10 [ 635.096318][T25747] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 635.127016][T25747] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 635.163610][T25777] netlink: 'syz.3.5499': attribute type 8 has an invalid length. [ 635.588853][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 635.629312][T25811] netlink: 'syz.1.5508': attribute type 1 has an invalid length. [ 636.126728][T25851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.923398][T25901] syzkaller0: entered promiscuous mode [ 636.939435][T25901] syzkaller0: entered allmulticast mode [ 637.150883][T25924] IPv6: NLM_F_CREATE should be specified when creating new route [ 637.373723][T25947] openvswitch: netlink: Key type 31 is not supported [ 637.771556][T25966] __nla_validate_parse: 17 callbacks suppressed [ 637.771575][T25966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5553'. [ 637.979959][T25980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5555'. [ 638.352555][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5562'. [ 638.380937][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5562'. [ 638.390736][T25999] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5561'. [ 638.392119][T26000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5562'. [ 638.436666][T26002] netlink: 'syz.3.5563': attribute type 4 has an invalid length. [ 638.482186][T26007] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5564'. [ 638.518480][T26007] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 638.559061][T26007] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 638.587288][T26007] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 639.028165][T26005] lec:lec_atm_close: lec0: Shut down! [ 639.570366][T26064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5577'. [ 640.134181][T26085] netlink: 'syz.2.5585': attribute type 12 has an invalid length. [ 640.195945][T13426] lec:lec_start_xmit: lec0:No lecd attached [ 640.259794][T26085] bond12: option primary_reselect: invalid value (255) [ 640.277239][T26085] bond12 (unregistering): Released all slaves [ 640.348291][T26091] tc_dump_action: action bad kind [ 640.833423][T26126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5595'. [ 640.876607][T26126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5595'. [ 641.162953][T26143] syzkaller0: entered promiscuous mode [ 641.169837][T26143] syzkaller0: entered allmulticast mode [ 641.187829][T26148] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 641.235564][T26148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.264584][T26148] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 641.278819][T26148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 641.530498][T26166] bond0: entered promiscuous mode [ 641.535780][T26166] bond_slave_0: entered promiscuous mode [ 641.541624][T26166] bond_slave_1: entered promiscuous mode [ 641.577482][T26166] bond0: left promiscuous mode [ 641.584329][T26166] bond_slave_0: left promiscuous mode [ 641.606167][T26166] bond_slave_1: left promiscuous mode [ 641.631269][T26169] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 641.992867][T26183] delete_channel: no stack [ 642.143943][T26203] netlink: 'syz.4.5617': attribute type 1 has an invalid length. [ 642.153065][T26203] netlink: 'syz.4.5617': attribute type 2 has an invalid length. [ 642.156033][T26205] netlink: 'syz.3.5618': attribute type 75 has an invalid length. [ 642.162397][T26203] netlink: 'syz.4.5617': attribute type 1 has an invalid length. [ 642.177631][T26203] netlink: 'syz.4.5617': attribute type 3 has an invalid length. [ 642.312167][T26211] syzkaller0: entered promiscuous mode [ 642.317891][T26211] syzkaller0: entered allmulticast mode [ 642.592872][T26234] netlink: 'syz.2.5627': attribute type 7 has an invalid length. [ 642.625294][T26234] netlink: 'syz.2.5627': attribute type 7 has an invalid length. [ 643.567205][T26276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 643.591798][T26279] __nla_validate_parse: 13 callbacks suppressed [ 643.591816][T26279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5638'. [ 643.627349][T26279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5638'. [ 643.797967][T26301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5639'. [ 643.880286][T26306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5642'. [ 644.259591][T26324] : renamed from bond0 [ 644.289437][T26321] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5646'. [ 644.335133][T26321] bond0: (slave gretap0): Device is not bonding slave [ 644.342430][T26321] bond0: option active_slave: invalid value (gretap0) [ 644.353861][T26321] bond0 (unregistering): Released all slaves [ 644.506657][T26336] Cannot find del_set index 3 as target [ 644.515018][T26337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5652'. [ 644.530226][T26336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5652'. [ 644.542036][T26336] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 644.657206][T26342] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5655'. [ 644.693522][T26344] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5656'. [ 644.793649][T26352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5658'. [ 645.104940][T26376] syzkaller0: entered promiscuous mode [ 645.113531][T26380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 645.121743][T26376] syzkaller0: entered allmulticast mode [ 645.825706][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5630 ms [ 645.834160][ C0] lec:lec_tx_timeout: lec0 [ 645.839014][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 646.071319][T26434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.088065][T26432] netlink: 'syz.0.5681': attribute type 8 has an invalid length. [ 646.240843][T26447] ipt_REJECT: TCP_RESET invalid for non-tcp [ 646.760740][T26476] openvswitch: netlink: Key type 48 is out of range max 32 [ 647.041866][T26491] netlink: 'syz.1.5705': attribute type 3 has an invalid length. [ 647.094261][T26490] netlink: zone id is out of range [ 647.100088][T26490] netlink: zone id is out of range [ 647.105281][T26490] netlink: zone id is out of range [ 647.134217][T26490] netlink: zone id is out of range [ 647.145779][T26490] netlink: zone id is out of range [ 647.156600][T26490] netlink: zone id is out of range [ 647.174587][T26490] netlink: zone id is out of range [ 647.183820][T26490] netlink: set zone limit has 4 unknown bytes [ 647.250491][T26497] syzkaller1: entered promiscuous mode [ 647.257138][T26497] syzkaller1: entered allmulticast mode [ 647.264800][T26497] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647 [ 647.499535][T26507] tipc: Enabled bearer , priority 0 [ 647.538347][T26506] tipc: Resetting bearer [ 649.354001][T26506] tipc: Disabling bearer [ 649.363964][T26515] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 649.469149][ T5878] tipc: Node number set to 2335503099 [ 649.633796][T26554] __nla_validate_parse: 19 callbacks suppressed [ 649.633815][T26554] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5722'. [ 649.801652][T26568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.034542][T26579] netlink: 'syz.2.5731': attribute type 83 has an invalid length. [ 650.865757][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 650.873859][ C0] lec:lec_tx_timeout: lec0 [ 650.879127][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 651.989777][T26664] netlink: 'syz.0.5757': attribute type 29 has an invalid length. [ 652.020545][T26668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5759'. [ 652.306955][T26695] IPv6: sit2: Disabled Multicast RS [ 652.327174][T26695] sit2: entered allmulticast mode [ 652.443110][T26694] IPv6: sit2: Disabled Multicast RS [ 652.463276][T26694] sit2: entered allmulticast mode [ 652.541181][T26710] netem: change failed [ 652.573014][T26703] netlink: 'syz.3.5768': attribute type 1 has an invalid length. [ 653.082569][T26748] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5776'. [ 653.082628][T26747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5775'. [ 653.333559][T26757] bond11: entered promiscuous mode [ 653.347910][T26761] macvlan3: entered promiscuous mode [ 653.394464][T26761] macvlan3: entered allmulticast mode [ 653.412551][T26761] bond11: (slave macvlan3): Opening slave failed [ 653.474727][T26769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5782'. [ 653.688482][T26781] bridge_slave_0: entered promiscuous mode [ 653.779041][T26790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5787'. [ 653.849250][T26797] openvswitch: netlink: IP tunnel dst address not specified [ 653.894656][T26797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 653.942318][T26797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.007244][T26807] FAULT_INJECTION: forcing a failure. [ 654.007244][T26807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.021523][T26797] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.039751][T26815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5789'. [ 654.052761][T26807] CPU: 0 UID: 0 PID: 26807 Comm: syz.3.5792 Not tainted syzkaller #0 PREEMPT(full) [ 654.052785][T26807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 654.052797][T26807] Call Trace: [ 654.052804][T26807] [ 654.052811][T26807] dump_stack_lvl+0xe8/0x150 [ 654.052837][T26807] should_fail_ex+0x412/0x560 [ 654.052863][T26807] _copy_to_user+0x31/0xb0 [ 654.052890][T26807] simple_read_from_buffer+0xe1/0x170 [ 654.052912][T26807] proc_fail_nth_read+0x1bb/0x230 [ 654.052940][T26807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 654.052973][T26807] ? rw_verify_area+0x2a6/0x4d0 [ 654.053003][T26807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 654.053029][T26807] vfs_read+0x20c/0xa70 [ 654.053049][T26807] ? fdget_pos+0x246/0x320 [ 654.053072][T26807] ? __pfx___mutex_lock+0x10/0x10 [ 654.053093][T26807] ? __pfx_vfs_read+0x10/0x10 [ 654.053118][T26807] ? __fget_files+0x2a/0x420 [ 654.053139][T26807] ? __fget_files+0x3a0/0x420 [ 654.053156][T26807] ? __fget_files+0x2a/0x420 [ 654.053182][T26807] ksys_read+0x150/0x270 [ 654.053208][T26807] ? __pfx_ksys_read+0x10/0x10 [ 654.053240][T26807] do_syscall_64+0xe2/0xf80 [ 654.053257][T26807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.053274][T26807] ? trace_irq_disable+0x37/0x100 [ 654.053289][T26807] ? clear_bhb_loop+0x60/0xb0 [ 654.053309][T26807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.053326][T26807] RIP: 0033:0x7f28ff35b78e [ 654.053343][T26807] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 654.053357][T26807] RSP: 002b:00007f29001edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 654.053376][T26807] RAX: ffffffffffffffda RBX: 00007f29001ee6c0 RCX: 00007f28ff35b78e [ 654.053389][T26807] RDX: 000000000000000f RSI: 00007f29001ee0a0 RDI: 0000000000000005 [ 654.053401][T26807] RBP: 00007f29001ee090 R08: 0000000000000000 R09: 0000000000000000 [ 654.053412][T26807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.053422][T26807] R13: 00007f28ff616038 R14: 00007f28ff615fa0 R15: 00007ffd4844f9b8 [ 654.053453][T26807] [ 654.053679][T26797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.460583][T26824] x_tables: unsorted underflow at hook 3 [ 654.482672][T26824] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.5793'. [ 654.485543][T26810] syzkaller1: entered promiscuous mode [ 654.516056][T26810] syzkaller1: entered allmulticast mode [ 654.629783][T26839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5795'. [ 654.650314][T26843] netlink: 'syz.2.5796': attribute type 11 has an invalid length. [ 654.675945][T26843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5796'. [ 654.717146][T26843] netlink: 'syz.2.5796': attribute type 11 has an invalid length. [ 654.733550][T26847] vlan2: entered promiscuous mode [ 654.756352][T26843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5796'. [ 654.777495][T26847] vlan2: entered allmulticast mode [ 654.783786][T26847] hsr_slave_1: entered allmulticast mode [ 654.795435][T26851] netlink: 19 bytes leftover after parsing attributes in process `syz.3.5798'. [ 655.237916][T26892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5809'. [ 655.249749][T26892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5809'. [ 655.266630][T26892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5809'. [ 655.275642][T26892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5809'. [ 655.328133][T26897] netlink: 'syz.4.5813': attribute type 1 has an invalid length. [ 655.421156][T26902] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5814'. [ 655.433030][T26900] bond20: (slave xfrm2): The slave device specified does not support setting the MAC address [ 655.439238][T26897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5813'. [ 655.467244][T26900] bond20: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 655.489710][T26900] bond20: (slave xfrm2): making interface the new active one [ 655.523705][T26900] bond20: (slave xfrm2): Enslaving as an active interface with an up link [ 655.543222][T26914] netlink: 'syz.1.5816': attribute type 9 has an invalid length. [ 655.568934][T26897] bond20 (unregistering): (slave xfrm2): Releasing backup interface [ 655.579826][T26897] bond20 (unregistering): Released all slaves [ 655.693271][T26918] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.789560][T26921] 8021q: adding VLAN 0 to HW filter on device bond20 [ 655.796720][T26925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5818'. [ 655.824617][T26921] rdma_rxe: rxe_newlink: failed to add bond0 [ 655.834298][T26918] netlink: 'syz.2.5817': attribute type 1 has an invalid length. [ 655.885717][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 655.893744][ C0] lec:lec_tx_timeout: lec0 [ 655.899000][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 656.048564][T26932] netlink: 'syz.1.5822': attribute type 10 has an invalid length. [ 656.077060][T26932] veth0_macvtap: left promiscuous mode [ 656.116232][T26940] netlink: 'syz.1.5822': attribute type 9 has an invalid length. [ 656.404262][T24433] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 656.414387][T24433] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 656.422891][T24433] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 656.431781][T24433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 656.441930][T24433] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 656.478607][T26951] vxcan1 speed is unknown, defaulting to 1000 [ 656.698736][T26968] tipc: Enabling of bearer rejected, failed to enable media [ 656.921544][T26975] gretap1: entered promiscuous mode [ 656.934436][T26975] gretap1: entered allmulticast mode [ 657.313450][T26983] bond0 (unregistering): Released all slaves [ 657.518517][ T3571] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.565748][ T3571] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.715498][ T3571] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.755058][ T3571] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.877484][T27025] xt_hashlimit: size too large, truncated to 1048576 [ 657.910023][ T3571] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 657.938349][ T3571] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.124279][ T3571] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 658.165292][ T3571] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.466318][ T5831] Bluetooth: hci3: command tx timeout [ 658.728146][ T3571] bridge_slave_1: left allmulticast mode [ 658.736396][ T3571] bridge_slave_1: left promiscuous mode [ 658.754645][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.823086][ T3571] bridge_slave_0: left allmulticast mode [ 658.838047][ T3571] bridge_slave_0: left promiscuous mode [ 658.849435][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.083651][ T3571] bond14 (unregistering): (slave ip6gretap1): Releasing active interface [ 659.331807][ T3571] erspan0 (unregistering): left promiscuous mode [ 659.355383][ T3571] gretap0 (unregistering): left promiscuous mode [ 659.383085][ T3571] bond2 (unregistering): (slave gretap1): Releasing active interface [ 659.403098][ T3571] bond7 (unregistering): (slave gretap2): Releasing active interface [ 659.469293][ T3571] dvmrp0 (unregistering): left allmulticast mode [ 659.510333][ T3571] team0: Port device geneve0 removed [ 659.754910][ T3571] ` (unregistering): (slave bond_slave_0): Releasing backup interface [ 659.764582][ T3571] ` (unregistering): (slave bond_slave_1): Releasing backup interface [ 659.774109][ T3571] ` (unregistering): Released all slaves [ 659.783889][ T3571] bond1 (unregistering): Released all slaves [ 659.797856][ T3571] bond2 (unregistering): Released all slaves [ 659.814024][ T3571] bond0 (unregistering): Released all slaves [ 659.830904][ T3571] bond3 (unregistering): Released all slaves [ 659.846948][ T3571] bond4 (unregistering): Released all slaves [ 659.863627][ T3571] bond5 (unregistering): Released all slaves [ 659.875575][ T3571] bond6 (unregistering): Released all slaves [ 659.995193][ T3571] bond7 (unregistering): Released all slaves [ 660.098766][ T3571] bond8 (unregistering): Released all slaves [ 660.110694][ T3571] bond9 (unregistering): Released all slaves [ 660.214831][ T3571] bond10 (unregistering): Released all slaves [ 660.228368][ T3571] bond11 (unregistering): Released all slaves [ 660.243187][ T3571] bond12 (unregistering): Released all slaves [ 660.255138][ T3571] bond13 (unregistering): Released all slaves [ 660.360703][ T3571] bond14 (unregistering): Released all slaves [ 660.464126][ T3571] bond15 (unregistering): (slave veth0_to_bond): Releasing active interface [ 660.475579][ T3571] bond15 (unregistering): (slave veth11): Releasing active interface [ 660.486691][ T3571] bond15 (unregistering): Released all slaves [ 660.501731][ T3571] bond16 (unregistering): Released all slaves [ 660.513732][ T3571] bond17 (unregistering): Released all slaves [ 660.528770][ T3571] bond18 (unregistering): Released all slaves [ 660.543155][ T3571] bond19 (unregistering): Released all slaves [ 660.556075][ T5831] Bluetooth: hci3: command tx timeout [ 660.652758][ T3571] bond20 (unregistering): Released all slaves [ 660.672488][T27109] __nla_validate_parse: 8 callbacks suppressed [ 660.672505][T27109] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5857'. [ 660.726856][T26951] chnl_net:caif_netlink_parms(): no params data found [ 660.906364][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 660.914401][ C0] lec:lec_tx_timeout: lec0 [ 660.915290][T27123] netlink: 'syz.0.5861': attribute type 5 has an invalid length. [ 660.919405][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 660.996619][T27123] netlink: 3681 bytes leftover after parsing attributes in process `syz.0.5861'. [ 661.216910][T26951] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.224150][T26951] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.235358][T26951] bridge_slave_0: entered allmulticast mode [ 661.263843][T26951] bridge_slave_0: entered promiscuous mode [ 661.465429][T27139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.481444][T27139] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 661.532597][T26951] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.555924][T26951] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.583542][T26951] bridge_slave_1: entered allmulticast mode [ 661.593565][T26951] bridge_slave_1: entered promiscuous mode [ 661.704263][T26951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.779730][T26951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.893560][T27165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5865'. [ 662.063142][T26951] team0: Port device team_slave_0 added [ 662.092228][T26951] team0: Port device team_slave_1 added [ 662.182405][T26951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.203897][T26951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.280677][T26951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.315420][T26951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.334041][T26951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.389765][T26951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.431275][T27190] netlink: 'syz.2.5873': attribute type 1 has an invalid length. [ 662.484385][T27197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5873'. [ 662.492280][T27190] bond12: entered promiscuous mode [ 662.499656][T27190] 8021q: adding VLAN 0 to HW filter on device bond12 [ 662.510804][T27197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5873'. [ 662.527964][T27194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5874'. [ 662.532127][T26951] hsr_slave_0: entered promiscuous mode [ 662.545610][T27190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5873'. [ 662.556737][T26951] hsr_slave_1: entered promiscuous mode [ 662.563253][T26951] debugfs: 'hsr0' already exists in 'hsr' [ 662.569659][T26951] Cannot create hsr debugfs directory [ 662.629400][ T5831] Bluetooth: hci3: command tx timeout [ 662.636947][ T3571] : left promiscuous mode [ 662.709861][T27203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5875'. [ 662.827944][ T3571] tipc: Left network mode [ 663.062108][T27225] netlink: 408 bytes leftover after parsing attributes in process `syz.1.5880'. [ 663.424312][T27236] netlink: 'syz.0.5882': attribute type 39 has an invalid length. [ 664.229374][T27266] sctp: [Deprecated]: syz.1.5889 (pid 27266) Use of int in maxseg socket option. [ 664.229374][T27266] Use struct sctp_assoc_value instead [ 664.432073][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5892'. [ 664.441662][ T3571] hsr_slave_0: left promiscuous mode [ 664.449938][ T3571] hsr_slave_1: left promiscuous mode [ 664.457156][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 664.466826][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.520405][T27286] netlink: 'syz.1.5893': attribute type 1 has an invalid length. [ 664.706164][ T5831] Bluetooth: hci3: command tx timeout [ 665.035851][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 665.076787][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 665.600689][T26951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 665.662814][T26951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 665.733493][T26951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 665.809250][T26951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 665.935761][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 665.943887][ C0] lec:lec_tx_timeout: lec0 [ 665.948929][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 666.021220][ T3571] IPVS: stop unused estimator thread 0... [ 666.193420][T27337] netlink: zone id is out of range [ 666.202965][T27337] netlink: get zone limit has 8 unknown bytes [ 666.230643][T26951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.311118][T26951] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.353052][T10987] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.360257][T10987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.403062][T10987] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.410254][T10987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.502082][T27355] bond10: option miimon: invalid value (18446744073709551585) [ 666.515904][T27355] bond10: option miimon: allowed values 0 - 2147483647 [ 666.533224][T27355] bond10 (unregistering): Released all slaves [ 666.989937][T27379] __nla_validate_parse: 2 callbacks suppressed [ 666.989954][T27379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5910'. [ 667.009289][T27379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5910'. [ 667.020091][T27379] netlink: 'syz.1.5910': attribute type 3 has an invalid length. [ 667.145540][T26951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.203114][T27391] vlan4: entered promiscuous mode [ 667.211169][T27391] bridge0: entered promiscuous mode [ 667.415035][T27410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5916'. [ 667.450548][T27410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5916'. [ 667.496639][T27411] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5916'. [ 667.522943][T27416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5917'. [ 667.540504][T27419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5919'. [ 667.943923][T26951] veth0_vlan: entered promiscuous mode [ 667.989785][T26951] veth1_vlan: entered promiscuous mode [ 668.097211][T27437] netlink: 'syz.3.5923': attribute type 1 has an invalid length. [ 668.102398][T26951] veth0_macvtap: entered promiscuous mode [ 668.124622][T27437] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5923'. [ 668.148168][T26951] veth1_macvtap: entered promiscuous mode [ 668.191246][T26951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.229027][T26951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.264779][ T3571] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.311684][ T3571] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.348943][ T3571] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.377857][ T3571] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.508674][T27460] : entered promiscuous mode [ 668.640105][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.678062][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.788357][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.835835][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.977533][T27482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5934'. [ 669.184062][T27498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5938'. [ 670.958120][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 670.966231][ C0] lec:lec_tx_timeout: lec0 [ 670.971729][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 671.744704][T27523] bond0: Caught tx_queue_len zero misconfig [ 672.089119][T27608] syzkaller1: entered promiscuous mode [ 672.107742][T27608] syzkaller1: entered allmulticast mode [ 672.121943][T27621] Cannot find del_set index 49151 as target [ 672.155052][T27623] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5958'. [ 672.190859][T27623] netlink: 288 bytes leftover after parsing attributes in process `syz.0.5958'. [ 672.320368][T27617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5956'. [ 672.392014][T27618] syzkaller0: entered promiscuous mode [ 672.398995][T27618] syzkaller0: entered allmulticast mode [ 672.413016][T27635] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5960'. [ 672.528986][T27642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5963'. [ 672.550300][T27644] netlink: 'syz.0.5964': attribute type 2 has an invalid length. [ 672.556225][ T30] audit: type=1107 audit(1769610178.497:5): pid=27640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='&Wt.EBAWa+\7B' [ 672.735234][T27652] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5965'. [ 672.746677][T27652] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5965'. [ 674.265296][T27644] 9: entered promiscuous mode [ 674.273580][T27665] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 674.404891][T27673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5968'. [ 674.425382][T27678] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5969'. [ 674.437801][T27675] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5970'. [ 674.450786][T27676] openvswitch: netlink: Duplicate key (type 32). [ 674.473376][T27678] erspan0: entered promiscuous mode [ 674.487368][T27678] gretap0: entered promiscuous mode [ 674.493668][T27678] debugfs: 'hsr1' already exists in 'hsr' [ 674.507608][T27678] Cannot create hsr debugfs directory [ 674.542114][T27682] syzkaller0: entered promiscuous mode [ 674.558479][T27682] syzkaller0: entered allmulticast mode [ 674.613633][T27682] erspan0: entered allmulticast mode [ 674.687762][T27685] bond0: entered promiscuous mode [ 674.715028][T27687] sit1: entered promiscuous mode [ 674.727280][T27687] sit1: entered allmulticast mode [ 675.278739][T27733] Cannot find set identified by id 1 to match [ 675.488730][T27751] netlink: 'syz.4.5992': attribute type 10 has an invalid length. [ 675.517608][T27751] dummy0: entered promiscuous mode [ 675.528080][T27751] bridge0: port 3(dummy0) entered blocking state [ 675.544283][T27751] bridge0: port 3(dummy0) entered disabled state [ 675.556819][T27751] dummy0: entered allmulticast mode [ 675.558830][T27757] netlink: 'syz.4.5992': attribute type 10 has an invalid length. [ 675.568692][T27751] bridge0: port 3(dummy0) entered blocking state [ 675.576407][T27751] bridge0: port 3(dummy0) entered forwarding state [ 675.939075][T27778] bond12: entered promiscuous mode [ 675.956897][T27778] macvlan3: entered promiscuous mode [ 675.964276][T27778] macvlan3: entered allmulticast mode [ 675.971491][T27778] bond12: (slave macvlan3): Opening slave failed [ 675.986003][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 675.994088][ C0] lec:lec_tx_timeout: lec0 [ 675.998949][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 676.769427][T27831] bond13: entered promiscuous mode [ 676.830143][T27831] macvlan3: entered promiscuous mode [ 676.835469][T27831] macvlan3: entered allmulticast mode [ 676.887208][T27831] bond13: (slave macvlan3): Opening slave failed [ 677.173159][T27857] __nla_validate_parse: 8 callbacks suppressed [ 677.173178][T27857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6025'. [ 677.198450][T27860] Bluetooth: MGMT ver 1.23 [ 677.203898][T27857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6025'. [ 677.251241][T27861] openvswitch: netlink: Message has 8 unknown bytes. [ 677.309916][T27868] FAULT_INJECTION: forcing a failure. [ 677.309916][T27868] name failslab, interval 1, probability 0, space 0, times 0 [ 677.329590][T27868] CPU: 0 UID: 0 PID: 27868 Comm: syz.3.6030 Not tainted syzkaller #0 PREEMPT(full) [ 677.329617][T27868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 677.329628][T27868] Call Trace: [ 677.329635][T27868] [ 677.329643][T27868] dump_stack_lvl+0xe8/0x150 [ 677.329680][T27868] should_fail_ex+0x412/0x560 [ 677.329706][T27868] should_failslab+0xa8/0x100 [ 677.329726][T27868] __kmalloc_noprof+0xde/0x7e0 [ 677.329743][T27868] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 677.329774][T27868] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 677.329805][T27868] genl_family_rcv_msg_doit+0xd9/0x330 [ 677.329833][T27868] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 677.329862][T27868] ? apparmor_capable+0x137/0x1a0 [ 677.329889][T27868] ? bpf_lsm_capable+0x9/0x20 [ 677.329910][T27868] ? security_capable+0x7e/0x2c0 [ 677.329936][T27868] genl_rcv_msg+0x61c/0x7a0 [ 677.329963][T27868] ? __pfx_genl_rcv_msg+0x10/0x10 [ 677.329984][T27868] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 677.330007][T27868] ? __pfx_nl80211_leave_ocb+0x10/0x10 [ 677.330025][T27868] ? __pfx_nl80211_post_doit+0x10/0x10 [ 677.330052][T27868] ? __pfx_ref_tracker_free+0x10/0x10 [ 677.330082][T27868] netlink_rcv_skb+0x232/0x4b0 [ 677.330100][T27868] ? __pfx_genl_rcv_msg+0x10/0x10 [ 677.330124][T27868] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 677.330139][T27868] ? genl_rcv+0x19/0x40 [ 677.330175][T27868] ? down_read+0x272/0x2e0 [ 677.330193][T27868] ? genl_rcv+0xd/0x40 [ 677.330216][T27868] genl_rcv+0x28/0x40 [ 677.330235][T27868] netlink_unicast+0x80f/0x9b0 [ 677.330269][T27868] ? __pfx_netlink_unicast+0x10/0x10 [ 677.330293][T27868] ? __alloc_skb+0x193/0x390 [ 677.330313][T27868] ? netlink_sendmsg+0x650/0xb40 [ 677.330329][T27868] ? skb_put+0x11b/0x210 [ 677.330352][T27868] netlink_sendmsg+0x813/0xb40 [ 677.330381][T27868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.330400][T27868] ? aa_sock_msg_perm+0xf1/0x1b0 [ 677.330419][T27868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 677.330439][T27868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 677.330457][T27868] ____sys_sendmsg+0xa68/0xad0 [ 677.330480][T27868] ? __might_fault+0xaf/0x130 [ 677.330512][T27868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 677.330543][T27868] ? import_iovec+0x73/0xa0 [ 677.330573][T27868] ___sys_sendmsg+0x2a5/0x360 [ 677.330595][T27868] ? __lock_acquire+0x6b5/0x2cf0 [ 677.330623][T27868] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.330686][T27868] ? __fget_files+0x2a/0x420 [ 677.330704][T27868] ? __fget_files+0x3a0/0x420 [ 677.330732][T27868] __x64_sys_sendmsg+0x1bd/0x2a0 [ 677.330756][T27868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 677.330789][T27868] ? __pfx_ksys_write+0x10/0x10 [ 677.330827][T27868] do_syscall_64+0xe2/0xf80 [ 677.330844][T27868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.330860][T27868] ? trace_irq_disable+0x37/0x100 [ 677.330876][T27868] ? clear_bhb_loop+0x60/0xb0 [ 677.330898][T27868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.330916][T27868] RIP: 0033:0x7f28ff39aeb9 [ 677.330933][T27868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.330948][T27868] RSP: 002b:00007f29001ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.330967][T27868] RAX: ffffffffffffffda RBX: 00007f28ff615fa0 RCX: 00007f28ff39aeb9 [ 677.330981][T27868] RDX: 0000000000028040 RSI: 0000200000000480 RDI: 0000000000000003 [ 677.330992][T27868] RBP: 00007f29001ee090 R08: 0000000000000000 R09: 0000000000000000 [ 677.331003][T27868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.331014][T27868] R13: 00007f28ff616038 R14: 00007f28ff615fa0 R15: 00007ffd4844f9b8 [ 677.331046][T27868] [ 677.877462][T27870] netlink: 'syz.4.6029': attribute type 10 has an invalid length. [ 677.886055][T27876] netlink: 'syz.1.6033': attribute type 1 has an invalid length. [ 677.893811][T27876] netlink: 'syz.1.6033': attribute type 7 has an invalid length. [ 677.909098][T27870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6029'. [ 677.914997][T27876] netlink: 'syz.1.6033': attribute type 8 has an invalid length. [ 677.934057][T27889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6029'. [ 677.950284][T27876] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6033'. [ 677.960335][T27885] bond14: entered promiscuous mode [ 677.991870][T27891] macvlan5: entered promiscuous mode [ 677.998135][T27891] macvlan5: entered allmulticast mode [ 678.005090][T27891] bond14: (slave macvlan5): Opening slave failed [ 678.028861][T27870] team0: Port device geneve0 added [ 678.163081][T27899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6038'. [ 678.173587][T27899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6038'. [ 678.219781][T27903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6039'. [ 678.229750][T27903] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6039'. [ 678.240174][T27903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6039'. [ 678.905191][T27948] bond1: Removing last arp target with arp_interval on [ 679.040242][T27955] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 679.194886][T27981] gretap2: entered promiscuous mode [ 679.228961][T27981] gretap2: entered allmulticast mode [ 679.918947][T28035] ipt_REJECT: TCP_RESET invalid for non-tcp [ 680.001180][T28045] netlink: 'syz.4.6082': attribute type 6 has an invalid length. [ 680.015763][T28045] netlink: 'syz.4.6082': attribute type 5 has an invalid length. [ 680.116984][T28053] netlink: 'syz.0.6084': attribute type 21 has an invalid length. [ 680.226309][T28058] netlink: 'syz.1.6083': attribute type 64 has an invalid length. [ 680.562945][T28083] netlink: 'syz.3.6093': attribute type 1 has an invalid length. [ 680.620606][T28083] bond10: entered promiscuous mode [ 680.629690][T28083] 8021q: adding VLAN 0 to HW filter on device bond10 [ 680.657126][T28087] bond10: (slave bridge5): making interface the new active one [ 680.664710][T28087] bridge5: entered promiscuous mode [ 680.687198][T28087] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 680.822382][T28092] syzkaller0: entered promiscuous mode [ 680.828074][T28092] syzkaller0: entered allmulticast mode [ 680.840314][T28092] "syz.2.6097" (28092) uses obsolete ecb(arc4) skcipher [ 680.897201][T28098] netlink: 'syz.4.6100': attribute type 2 has an invalid length. [ 681.005783][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 681.013887][ C0] lec:lec_tx_timeout: lec0 [ 681.019296][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 686.026225][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 686.034253][ C0] lec:lec_tx_timeout: lec0 [ 686.038951][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 691.825768][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 691.833794][ C0] lec:lec_tx_timeout: lec0 [ 691.838564][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 696.865876][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 696.873907][ C0] lec:lec_tx_timeout: lec0 [ 696.878799][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 701.885738][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 701.893775][ C0] lec:lec_tx_timeout: lec0 [ 701.898759][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 706.905970][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 706.913981][ C0] lec:lec_tx_timeout: lec0 [ 706.918897][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 711.925757][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 711.933801][ C0] lec:lec_tx_timeout: lec0 [ 711.938578][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 716.945946][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 716.953987][ C0] lec:lec_tx_timeout: lec0 [ 716.958856][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 721.966088][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 721.974121][ C0] lec:lec_tx_timeout: lec0 [ 721.978784][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 726.985897][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 726.993934][ C0] lec:lec_tx_timeout: lec0 [ 726.998649][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 732.005739][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 732.013756][ C0] lec:lec_tx_timeout: lec0 [ 732.018686][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 737.026164][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 737.034183][ C0] lec:lec_tx_timeout: lec0 [ 737.038858][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 742.865748][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 742.873789][ C0] lec:lec_tx_timeout: lec0 [ 742.879102][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 747.708006][T28142] __nla_validate_parse: 24 callbacks suppressed [ 747.708026][T28142] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6113'. [ 747.773145][T24433] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 747.787374][T24433] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 747.795197][T24433] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 747.804129][T24433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 747.812094][T24433] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 747.885779][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 747.893806][ C0] lec:lec_tx_timeout: lec0 [ 747.903999][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 747.943281][T28156] x_tables: unsorted entry at hook 3 [ 748.037332][T28150] vxcan1 speed is unknown, defaulting to 1000 [ 748.373750][T28181] bond11: entered promiscuous mode [ 748.389781][T28190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6124'. [ 748.444743][T28197] netlink: 'syz.4.6125': attribute type 10 has an invalid length. [ 748.455308][T28197] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6125'. [ 748.708445][T28206] FAULT_INJECTION: forcing a failure. [ 748.708445][T28206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.748615][T28210] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6133'. [ 748.751699][T28206] CPU: 0 UID: 0 PID: 28206 Comm: syz.0.6131 Not tainted syzkaller #0 PREEMPT(full) [ 748.751723][T28206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 748.751734][T28206] Call Trace: [ 748.751742][T28206] [ 748.751749][T28206] dump_stack_lvl+0xe8/0x150 [ 748.751777][T28206] should_fail_ex+0x412/0x560 [ 748.751803][T28206] _copy_from_user+0x2d/0xb0 [ 748.751830][T28206] ___sys_sendmsg+0x1c6/0x360 [ 748.751852][T28206] ? __lock_acquire+0x6b5/0x2cf0 [ 748.751880][T28206] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.751907][T28206] ? kstrtouint+0x6e/0xe0 [ 748.751950][T28206] ? __fget_files+0x2a/0x420 [ 748.751968][T28206] ? __fget_files+0x3a0/0x420 [ 748.751996][T28206] __sys_sendmmsg+0x27c/0x4e0 [ 748.752024][T28206] ? __pfx___sys_sendmmsg+0x10/0x10 [ 748.752044][T28206] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 748.752087][T28206] ? ksys_write+0x242/0x270 [ 748.752113][T28206] ? __pfx_ksys_write+0x10/0x10 [ 748.752143][T28206] __x64_sys_sendmmsg+0xa0/0xc0 [ 748.752168][T28206] do_syscall_64+0xe2/0xf80 [ 748.752186][T28206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.752202][T28206] ? trace_irq_disable+0x37/0x100 [ 748.752219][T28206] ? clear_bhb_loop+0x60/0xb0 [ 748.752239][T28206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.752256][T28206] RIP: 0033:0x7f598879aeb9 [ 748.752272][T28206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.752287][T28206] RSP: 002b:00007f59895e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 748.752306][T28206] RAX: ffffffffffffffda RBX: 00007f5988a15fa0 RCX: 00007f598879aeb9 [ 748.752326][T28206] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 748.752338][T28206] RBP: 00007f59895e2090 R08: 0000000000000000 R09: 0000000000000000 [ 748.752349][T28206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.752360][T28206] R13: 00007f5988a16038 R14: 00007f5988a15fa0 R15: 00007ffc7b18ec38 [ 748.752389][T28206] [ 749.916173][ T5831] Bluetooth: hci5: command tx timeout [ 750.677003][T28232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6138'. [ 750.686227][T28232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6138'. [ 750.906836][T28266] syzkaller0: entered promiscuous mode [ 750.936110][T28266] syzkaller0: entered allmulticast mode [ 751.059909][T28150] chnl_net:caif_netlink_parms(): no params data found [ 751.324735][T28286] batadv_slave_0: entered allmulticast mode [ 751.391146][T28150] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.405738][T28150] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.413012][T28150] bridge_slave_0: entered allmulticast mode [ 751.426270][T28150] bridge_slave_0: entered promiscuous mode [ 751.434803][T28150] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.438421][T28310] netlink: 'syz.2.6155': attribute type 1 has an invalid length. [ 751.443470][T28150] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.458256][T28150] bridge_slave_1: entered allmulticast mode [ 751.464359][T28310] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6155'. [ 751.466111][T28150] bridge_slave_1: entered promiscuous mode [ 751.522550][T28150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.539065][T28150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.654385][T28150] team0: Port device team_slave_0 added [ 751.670163][T28150] team0: Port device team_slave_1 added [ 751.780854][T28150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.808108][T28150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.866132][T28150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.868377][T28331] netlink: 'syz.0.6162': attribute type 1 has an invalid length. [ 751.909997][T28150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.927233][T28150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.969140][T28150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.986276][ T5831] Bluetooth: hci5: command tx timeout [ 752.011311][T28344] veth0_to_bond: entered allmulticast mode [ 752.039375][T28347] netlink: 'syz.4.6165': attribute type 33 has an invalid length. [ 752.047724][T28347] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6165'. [ 752.087236][T28347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6165'. [ 752.127994][T28347] bridge0: port 3(dummy0) entered disabled state [ 752.158524][T28347] dummy0 (unregistering): left allmulticast mode [ 752.165067][T28347] bridge0: port 3(dummy0) entered disabled state [ 752.181059][T28150] hsr_slave_0: entered promiscuous mode [ 752.188101][T28150] hsr_slave_1: entered promiscuous mode [ 752.194902][T28351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6167'. [ 752.205880][T28351] netlink: 'syz.0.6167': attribute type 3 has an invalid length. [ 752.219195][ T3429] bond4: (slave veth0_to_bond): link status definitely down, disabling slave [ 752.254975][ T3429] bond4: now running without any active interface! [ 752.400170][T28363] vlan2: entered promiscuous mode [ 752.405221][T28363] bridge0: entered promiscuous mode [ 752.526968][T28366] netlink: 'syz.4.6173': attribute type 24 has an invalid length. [ 752.613541][T28150] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.670196][T28370] syzkaller0: entered promiscuous mode [ 752.676232][T28370] syzkaller0: entered allmulticast mode [ 752.739817][T28150] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.764386][T28378] FAULT_INJECTION: forcing a failure. [ 752.764386][T28378] name failslab, interval 1, probability 0, space 0, times 0 [ 752.786513][T28378] CPU: 1 UID: 0 PID: 28378 Comm: syz.0.6175 Not tainted syzkaller #0 PREEMPT(full) [ 752.786539][T28378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 752.786551][T28378] Call Trace: [ 752.786559][T28378] [ 752.786567][T28378] dump_stack_lvl+0xe8/0x150 [ 752.786595][T28378] should_fail_ex+0x412/0x560 [ 752.786622][T28378] should_failslab+0xa8/0x100 [ 752.786645][T28378] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 752.786672][T28378] ? __alloc_skb+0x193/0x390 [ 752.786692][T28378] ? __alloc_skb+0x1d7/0x390 [ 752.786710][T28378] ? __local_bh_enable_ip+0xd0/0x130 [ 752.786728][T28378] ? __alloc_skb+0x193/0x390 [ 752.786749][T28378] __alloc_skb+0x1d7/0x390 [ 752.786773][T28378] netlink_ack+0x146/0xa50 [ 752.786790][T28378] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 752.786826][T28378] netlink_rcv_skb+0x2b6/0x4b0 [ 752.786845][T28378] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 752.786867][T28378] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 752.786895][T28378] ? netlink_deliver_tap+0x2e/0x1b0 [ 752.786922][T28378] netlink_unicast+0x80f/0x9b0 [ 752.786956][T28378] ? __pfx_netlink_unicast+0x10/0x10 [ 752.786980][T28378] ? __alloc_skb+0x193/0x390 [ 752.787001][T28378] ? netlink_sendmsg+0x650/0xb40 [ 752.787018][T28378] ? skb_put+0x11b/0x210 [ 752.787043][T28378] netlink_sendmsg+0x813/0xb40 [ 752.787068][T28378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.787089][T28378] ? aa_sock_msg_perm+0xf1/0x1b0 [ 752.787112][T28378] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 752.787139][T28378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.787157][T28378] ____sys_sendmsg+0xa68/0xad0 [ 752.787179][T28378] ? __might_fault+0xaf/0x130 [ 752.787209][T28378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.787240][T28378] ? import_iovec+0x73/0xa0 [ 752.787269][T28378] ___sys_sendmsg+0x2a5/0x360 [ 752.787292][T28378] ? __lock_acquire+0x6b5/0x2cf0 [ 752.787320][T28378] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.787349][T28378] ? kstrtouint+0x6e/0xe0 [ 752.787392][T28378] ? __fget_files+0x2a/0x420 [ 752.787409][T28378] ? __fget_files+0x3a0/0x420 [ 752.787434][T28378] __sys_sendmmsg+0x27c/0x4e0 [ 752.787462][T28378] ? __pfx___sys_sendmmsg+0x10/0x10 [ 752.787482][T28378] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 752.787529][T28378] ? ksys_write+0x242/0x270 [ 752.787557][T28378] ? __pfx_ksys_write+0x10/0x10 [ 752.787589][T28378] __x64_sys_sendmmsg+0xa0/0xc0 [ 752.787614][T28378] do_syscall_64+0xe2/0xf80 [ 752.787631][T28378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.787649][T28378] ? trace_irq_disable+0x37/0x100 [ 752.787665][T28378] ? clear_bhb_loop+0x60/0xb0 [ 752.787687][T28378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.787705][T28378] RIP: 0033:0x7f598879aeb9 [ 752.787722][T28378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.787739][T28378] RSP: 002b:00007f59895e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 752.787759][T28378] RAX: ffffffffffffffda RBX: 00007f5988a15fa0 RCX: 00007f598879aeb9 [ 752.787773][T28378] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 752.787786][T28378] RBP: 00007f59895e2090 R08: 0000000000000000 R09: 0000000000000000 [ 752.787797][T28378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.787809][T28378] R13: 00007f5988a16038 R14: 00007f5988a15fa0 R15: 00007ffc7b18ec38 [ 752.787839][T28378] [ 752.955697][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5050 ms [ 753.050532][T28382] __nla_validate_parse: 2 callbacks suppressed [ 753.050549][T28382] netlink: 27 bytes leftover after parsing attributes in process `syz.0.6178'. [ 753.051611][ C0] lec:lec_tx_timeout: lec0 [ 753.151917][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 753.191549][T28150] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.302291][T28150] bond0: (slave netdevsim0): Releasing backup interface [ 753.333483][T28150] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.686994][T28409] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6183'. [ 753.782645][T28150] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 753.817004][T28150] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 753.831538][T28416] netlink: 'syz.0.6185': attribute type 1 has an invalid length. [ 753.844123][T28416] netlink: 280 bytes leftover after parsing attributes in process `syz.0.6185'. [ 753.844912][T28150] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 753.870605][T28419] netlink: 'syz.0.6185': attribute type 1 has an invalid length. [ 753.878861][T28419] netlink: 280 bytes leftover after parsing attributes in process `syz.0.6185'. [ 753.889981][T28150] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 753.948195][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6186'. [ 753.997192][T28385] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 754.015047][T28385] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 754.018268][T28430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6187'. [ 754.046348][T28385] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 754.046914][T28430] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 754.052283][T28385] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 754.067953][ T5831] Bluetooth: hci5: command tx timeout [ 754.076638][T28430] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6187'. [ 754.187816][T28385] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 754.193759][T28385] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 754.368798][T28385] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 754.384955][T28385] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 754.521349][T28150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 754.555899][T28385] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 754.583126][T28385] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 754.605131][T28150] 8021q: adding VLAN 0 to HW filter on device team0 [ 754.632076][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.639277][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.672062][T28385] ------------[ cut here ]------------ [ 754.677567][T28385] DEBUG_LOCKS_WARN_ON(1) [ 754.677595][T28385] WARNING: kernel/locking/lockdep.c:238 at __lock_acquire+0x39d/0x2cf0, CPU#1: syz.4.6177/28385 [ 754.692275][T28385] Modules linked in: [ 754.696180][T28385] CPU: 1 UID: 0 PID: 28385 Comm: syz.4.6177 Not tainted syzkaller #0 PREEMPT(full) [ 754.705553][T28385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 754.715616][T28385] RIP: 0010:__lock_acquire+0x3a4/0x2cf0 [ 754.721178][T28385] Code: 18 00 4c 8b 74 24 08 75 27 90 e8 17 f2 fc 02 85 c0 74 1c 83 3d 50 e0 4e 0e 00 75 13 48 8d 3d 43 f7 51 0e 48 c7 c6 14 3b de 8d <67> 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f [ 754.740779][T28385] RSP: 0018:ffffc90003f3f680 EFLAGS: 00010046 [ 754.746837][T28385] RAX: 0000000000000001 RBX: 0000000000040000 RCX: 0000000000080000 [ 754.754796][T28385] RDX: ffffc90011ed3000 RSI: ffffffff8dde3b14 RDI: ffffffff8ff24ca0 [ 754.762754][T28385] RBP: 0000000000000003 R08: ffffffff8fef35a3 R09: 1ffffffff1fde6b4 [ 754.770718][T28385] R10: dffffc0000000000 R11: fffffbfff1fde6b5 R12: 000000000000103b [ 754.778681][T28385] R13: ffff88802c6748a8 R14: ffff88802c673d00 R15: ffff88802c674830 [ 754.786637][T28385] FS: 00007fc5ae7fb6c0(0000) GS:ffff8881257f8000(0000) knlGS:0000000000000000 [ 754.795554][T28385] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 754.802123][T28385] CR2: 0000200000000100 CR3: 00000000a2482000 CR4: 00000000003526f0 [ 754.810099][T28385] Call Trace: [ 754.813365][T28385] [ 754.816289][T28385] ? touch_wq_lockdep_map+0xb5/0x180 [ 754.821564][T28385] lock_acquire+0x106/0x330 [ 754.826056][T28385] ? touch_wq_lockdep_map+0xb5/0x180 [ 754.831332][T28385] ? touch_wq_lockdep_map+0xb5/0x180 [ 754.836602][T28385] touch_wq_lockdep_map+0xcb/0x180 [ 754.841702][T28385] ? touch_wq_lockdep_map+0xb5/0x180 [ 754.846975][T28385] __flush_workqueue+0x14b/0x14f0 [ 754.851989][T28385] ? __mutex_lock+0x5ac/0x1300 [ 754.856744][T28385] ? nci_close_device+0x10a/0x630 [ 754.861758][T28385] ? __pfx___flush_workqueue+0x10/0x10 [ 754.867207][T28385] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 754.873007][T28385] nci_close_device+0x302/0x630 [ 754.877852][T28385] ? __pfx_nci_close_device+0x10/0x10 [ 754.883212][T28385] ? do_raw_spin_lock+0x12b/0x2f0 [ 754.888224][T28385] ? __pfx_nci_dev_down+0x10/0x10 [ 754.893239][T28385] nci_dev_down+0x3b/0x50 [ 754.897554][T28385] nfc_dev_down+0x152/0x290 [ 754.902052][T28385] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 754.907758][T28385] nfc_rfkill_set_block+0x2d/0x100 [ 754.912865][T28385] rfkill_set_block+0x1d2/0x440 [ 754.917703][T28385] rfkill_fop_write+0x461/0x5a0 [ 754.922564][T28385] ? apparmor_file_permission+0x17f/0x1f0 [ 754.928270][T28385] ? __pfx_rfkill_fop_write+0x10/0x10 [ 754.933687][T28385] ? security_kernfs_init_security+0x220/0x270 [ 754.939857][T28385] ? rw_verify_area+0x255/0x4d0 [ 754.944717][T28385] ? __pfx_rfkill_fop_write+0x10/0x10 [ 754.950086][T28385] vfs_write+0x29a/0xb90 [ 754.954334][T28385] ? __pfx_vfs_write+0x10/0x10 [ 754.959103][T28385] ? __fget_files+0x2a/0x420 [ 754.963695][T28385] ? __fget_files+0x2a/0x420 [ 754.968278][T28385] ? __fget_files+0x3a0/0x420 [ 754.972952][T28385] ? __fget_files+0x2a/0x420 [ 754.977539][T28385] ksys_write+0x150/0x270 [ 754.981869][T28385] ? __pfx_ksys_write+0x10/0x10 [ 754.986722][T28385] do_syscall_64+0xe2/0xf80 [ 754.991220][T28385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.997275][T28385] ? trace_irq_disable+0x37/0x100 [ 755.002286][T28385] ? clear_bhb_loop+0x60/0xb0 [ 755.006950][T28385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.012827][T28385] RIP: 0033:0x7fc5ad99aeb9 [ 755.017228][T28385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.036833][T28385] RSP: 002b:00007fc5ae7fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 755.045326][T28385] RAX: ffffffffffffffda RBX: 00007fc5adc15fa0 RCX: 00007fc5ad99aeb9 [ 755.053311][T28385] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a [ 755.061268][T28385] RBP: 00007fc5ada08c1f R08: 0000000000000000 R09: 0000000000000000 [ 755.069225][T28385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.077180][T28385] R13: 00007fc5adc16038 R14: 00007fc5adc15fa0 R15: 00007ffd69059138 [ 755.085162][T28385] [ 755.088176][T28385] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 755.095445][T28385] CPU: 1 UID: 0 PID: 28385 Comm: syz.4.6177 Not tainted syzkaller #0 PREEMPT(full) [ 755.104804][T28385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 755.114900][T28385] Call Trace: [ 755.118179][T28385] [ 755.121119][T28385] vpanic+0x1e0/0x670 [ 755.125104][T28385] panic+0xc5/0xd0 [ 755.128819][T28385] ? __pfx_panic+0x10/0x10 [ 755.133234][T28385] __warn+0x315/0x4a0 [ 755.137209][T28385] ? __lock_acquire+0x39d/0x2cf0 [ 755.142142][T28385] ? __lock_acquire+0x39d/0x2cf0 [ 755.147069][T28385] __report_bug+0x29a/0x540 [ 755.151563][T28385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.157621][T28385] ? __lock_acquire+0x39d/0x2cf0 [ 755.162565][T28385] ? __pfx___report_bug+0x10/0x10 [ 755.167582][T28385] report_bug_entry+0x19a/0x290 [ 755.172427][T28385] ? __lock_acquire+0x3a4/0x2cf0 [ 755.177352][T28385] ? __lock_acquire+0x3a9/0x2cf0 [ 755.182282][T28385] handle_bug+0xca/0x200 [ 755.186515][T28385] exc_invalid_op+0x1a/0x50 [ 755.191011][T28385] asm_exc_invalid_op+0x1a/0x20 [ 755.195862][T28385] RIP: 0010:__lock_acquire+0x3a4/0x2cf0 [ 755.201413][T28385] Code: 18 00 4c 8b 74 24 08 75 27 90 e8 17 f2 fc 02 85 c0 74 1c 83 3d 50 e0 4e 0e 00 75 13 48 8d 3d 43 f7 51 0e 48 c7 c6 14 3b de 8d <67> 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f [ 755.221007][T28385] RSP: 0018:ffffc90003f3f680 EFLAGS: 00010046 [ 755.227064][T28385] RAX: 0000000000000001 RBX: 0000000000040000 RCX: 0000000000080000 [ 755.235022][T28385] RDX: ffffc90011ed3000 RSI: ffffffff8dde3b14 RDI: ffffffff8ff24ca0 [ 755.242982][T28385] RBP: 0000000000000003 R08: ffffffff8fef35a3 R09: 1ffffffff1fde6b4 [ 755.250947][T28385] R10: dffffc0000000000 R11: fffffbfff1fde6b5 R12: 000000000000103b [ 755.258905][T28385] R13: ffff88802c6748a8 R14: ffff88802c673d00 R15: ffff88802c674830 [ 755.266887][T28385] ? touch_wq_lockdep_map+0xb5/0x180 [ 755.272164][T28385] lock_acquire+0x106/0x330 [ 755.276659][T28385] ? touch_wq_lockdep_map+0xb5/0x180 [ 755.281936][T28385] ? touch_wq_lockdep_map+0xb5/0x180 [ 755.287205][T28385] touch_wq_lockdep_map+0xcb/0x180 [ 755.292300][T28385] ? touch_wq_lockdep_map+0xb5/0x180 [ 755.297571][T28385] __flush_workqueue+0x14b/0x14f0 [ 755.302580][T28385] ? __mutex_lock+0x5ac/0x1300 [ 755.307332][T28385] ? nci_close_device+0x10a/0x630 [ 755.312349][T28385] ? __pfx___flush_workqueue+0x10/0x10 [ 755.317813][T28385] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 755.323615][T28385] nci_close_device+0x302/0x630 [ 755.328493][T28385] ? __pfx_nci_close_device+0x10/0x10 [ 755.333856][T28385] ? do_raw_spin_lock+0x12b/0x2f0 [ 755.338879][T28385] ? __pfx_nci_dev_down+0x10/0x10 [ 755.343895][T28385] nci_dev_down+0x3b/0x50 [ 755.348214][T28385] nfc_dev_down+0x152/0x290 [ 755.352715][T28385] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 755.358438][T28385] nfc_rfkill_set_block+0x2d/0x100 [ 755.363551][T28385] rfkill_set_block+0x1d2/0x440 [ 755.368403][T28385] rfkill_fop_write+0x461/0x5a0 [ 755.373257][T28385] ? apparmor_file_permission+0x17f/0x1f0 [ 755.379002][T28385] ? __pfx_rfkill_fop_write+0x10/0x10 [ 755.384455][T28385] ? security_kernfs_init_security+0x220/0x270 [ 755.390690][T28385] ? rw_verify_area+0x255/0x4d0 [ 755.395543][T28385] ? __pfx_rfkill_fop_write+0x10/0x10 [ 755.400908][T28385] vfs_write+0x29a/0xb90 [ 755.405141][T28385] ? __pfx_vfs_write+0x10/0x10 [ 755.409892][T28385] ? __fget_files+0x2a/0x420 [ 755.414469][T28385] ? __fget_files+0x2a/0x420 [ 755.419044][T28385] ? __fget_files+0x3a0/0x420 [ 755.423706][T28385] ? __fget_files+0x2a/0x420 [ 755.428291][T28385] ksys_write+0x150/0x270 [ 755.432617][T28385] ? __pfx_ksys_write+0x10/0x10 [ 755.437469][T28385] do_syscall_64+0xe2/0xf80 [ 755.441961][T28385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.448010][T28385] ? trace_irq_disable+0x37/0x100 [ 755.453019][T28385] ? clear_bhb_loop+0x60/0xb0 [ 755.457680][T28385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.463560][T28385] RIP: 0033:0x7fc5ad99aeb9 [ 755.467965][T28385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.487555][T28385] RSP: 002b:00007fc5ae7fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 755.495997][T28385] RAX: ffffffffffffffda RBX: 00007fc5adc15fa0 RCX: 00007fc5ad99aeb9 [ 755.503955][T28385] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000a [ 755.511918][T28385] RBP: 00007fc5ada08c1f R08: 0000000000000000 R09: 0000000000000000 [ 755.519871][T28385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.527827][T28385] R13: 00007fc5adc16038 R14: 00007fc5adc15fa0 R15: 00007ffd69059138 [ 755.535790][T28385] [ 755.539139][T28385] Kernel Offset: disabled [ 755.543445][T28385] Rebooting in 86400 seconds..