last executing test programs: 5.142485824s ago: executing program 2 (id=2030): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000140)=@ethtool_modinfo={0x42, 0x0, 0x10001}}) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="6800000000090504000000000000000002000000090001007379002c00000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c696379300008000200000000fe070003000000001e", 0x68}], 0x1}, 0x4800) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'bond_slave_0\x00', 0x0}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x7, 0x1000, 0x5}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0xc0385869, &(0x7f0000000cc0)={r3, &(0x7f0000000980)='-(\x00', 0x941340, &(0x7f00000009c0)={@_ha_fsid={[0x8, 0xbe87]}, {0x7, 0x5, 0x7d6, 0x7fffffff}}, 0x7, &(0x7f0000000c40)={@_ha_fsid}, &(0x7f0000000c80)=0x1}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20021010}, 0x4080) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x26, 0x0, 0x0) socket$inet6(0xa, 0x800, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000800)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000840)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000880)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x16, 0x65, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast}, "14f3"}}, 0x24) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="20000000030301000000000000000000020000000c0002000000020100000001"], 0x20}}, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000e00)=0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xd, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r8, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "6198"}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x4004) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x44, 0x2c, 0x20, 0x30bd28, 0x25ffdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xf}, {0x0, 0x8}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x81}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x8800) 4.147570093s ago: executing program 1 (id=2039): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000040), 0x318, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000b3b200000000000018000000852000001c50030095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3501c}, 0x94) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000040)=ANY=[], 0x20) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async, rerun: 32) write(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000500)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000040) syz_emit_ethernet(0xa2, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff8878708baa0286dd60000000006c3a00fe8000000000000000000000000000bbff0200000000000000000000000000018f009078f8ff000106080003ff01000000000000000000000000000100000000000000000000ffffac14140a200100"/111], 0x0) (async) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="cf9c2413d9f1", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000005000500010000000400040005000600000000000800030001000000"], 0x30}}, 0x0) 4.099271127s ago: executing program 2 (id=2040): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000280)=0xf) (async) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)='2', 0x1}], 0x1}], 0x1, 0x40048040) (async) accept4(r2, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x150, 0x6, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x3a, 0x7, 0x1, 0x0, "0399c96068d04c7ef048c8dbf9eac8b77070950d54d28260b1d3275bb58226cf7543566dd3af5f2ec14669c52419e0d885873cc796e9"}, @NFTA_RULE_USERDATA={0xcd, 0x7, 0x1, 0x0, "ecbb6189fcaa19bc6fa765336b0b62a1d8bd710c85faed49b57c8e1671d77102b564543d21d09e4cc7f8f2c499538f2fc683f0aa8eacaf361cc68abf35119807860b22d1556b17cf6a904fed05f19ea8fec92cdb9e2f43ef40235569a53f8d7fa9b51266f659f32a8bb56597c3a86c341e309e55993d2bcf42a611fe5576162440f84ba6512f18305a52a1fca25f2580340d1b7d0d7190405158c0ba6b843b5fb58942cefd9960b0111616beaec61b65cf09cfdea4da42c067c3ba021100eaedc3221d25f6d38df06e"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x320, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2dc, 0x3, 0x0, 0x1, [{0x2d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xec, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "e41508bb4b78943223d569da163214e269c54b1e2582b38c6d4afb323175a6af2155a7cc76f580939b5d2421a48be96e0e2b32c77899a7514bc5f9ccde0a3993f86ce155d541cfe77d1160ed480b2e6b3c43fe5d56ab134f2b6374287faad50bb5454e5b918c9d861a23b06ba913cce85a2ab788246db68010ca73e32c624874a568d097e86f398e6f9718b6e66f31f617073e21ea1b4757bea76b1ad94f557cb2869856d35ec423fe3464ed9c1c1c0c490c744cdd329ee729fa05e05b5db7ccd5479c4b1c8886b4e7e30817c40c681bee5ef7d213fda2a9ec0f9d6ef296ee5e9a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x3a}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x24}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8001}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x28}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "306b11c24f907db4d06a4c27dc4d250ed8596b1e667164751b130b4949fa1c27cec94538ea00faf4989f4e9fcf5e5c72a46640e93cc64e8f89c6e8bd643b843e254d55302bd322ca441734703c83ef4875f1b678b41cfc68bdbc34a93b43e03985b3604b2dffaacfb4a5292c2ba92376fd50fd842aca3ddb4bbfe5895468270634216b5cb6c13789e5d9b9576279f2abb263af1e1d11e31d7d7f03e83d2ad893ef29ec5728fd747234c9fc9e7ae64708aea63ed6315f1e8d1ee5b4e199073037b4840a94b00e8cf91453e4d90cb99bad46cae4b94d79ef4ecd412e54dcf57c098e5a011836342a86f6f1ba446a"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x108, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x200}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x68e948bf}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_USERDATA={0x94, 0xc, "8e90b965a07fb48637986d692e7c9e6f15ba1a9be1dc2f099550f5e9c01dfdd328c085cf4e58c4c4d6b3c4b191ab0b2c9ad5cd1b90c0455d93a5e4ca71a92bdb70a5d6e5957442b2bb016eafec68298303df93afabf6bd835b83c396ce73e0041939418a4371d007ff579040f853ea64f563ec1631bf3205cb9c2fbcd36cba4709dd02fe4b224d47239fb4373711103f"}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x1fc, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x60, 0x6, "a9d8b272b01971548dbfe0f0aeb55fd7c6d8737fb39e9e0f0f1e9c0d7e152284ba5ef87002b19a7fba63dc30e597e8f7731c5cb2a36e55e8cad716039e9963b3d194d52346d15e1e56bf309f03feeef0025de8288ffb09b0c49f0bf7"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x9d, 0x6, "4dfc0a1d7a605a9eccd8a221f176cc2875c16b99ae9c2abe9ccd5b4137b5fc783acda67a3ed749a7fa283a27c20ba450a5e7e665a35ff388f0c5dcbaeb8ef75f763221305850e57edcf5f8343982b07ca0a15d7c7b75bb480fb0ba78b1b8e604e8e79ae1ee3185ed8616e112ec128d4da6998828c6a6669c7f727600b767cba2913c12573700d067038430ad0c1298c3807b108bed9b5a23ab"}, @NFTA_TABLE_USERDATA={0xba, 0x6, "673de90c993ee974ce39323ffe5831b8a519d176c99cbe8e7421ea415859367a3979f36b1a9f5d0b84b6bc852cd34a18b234d04f93a764bf24c9274fdeebe57f59f9404a1c76254f62731d0452d546b03bf569080f6b2085b5ce61fe43945931a2d54d5b19eb6f15f55927f28c088d240184947787a8ddf90ee293bdbdd252fb320b1160826eb92792c58de111860ec03c11816b2bcf8254d394fd084352cce9ad388ccb2f15091f63616ab39f80033a12313390df45"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x79c}, 0x1, 0x0, 0x0, 0x2020}, 0x40010) 3.847262257s ago: executing program 2 (id=2043): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYRES16, @ANYRESDEC=r3, @ANYBLOB="8436b5100a0b6a76a5821fe398bd5dd08b8d26eb9e18c2107fb3e0caafeb8a45acde26d50b6a4a6411444dfe9bc32783f1734b452227de75bd65da86d309391a2c7528c2e41f6c6dec2ede4796af4fdff3e0a8ef4b09f8835e475fdca8e2851b82ea0f060993f3b433bfda8c760fbe60003121ef19d274a23da20c1d4e893cad603da7ce1cf235327eb33741f8c8faa70000"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8805) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCGNPMODE(r4, 0xc008744c, &(0x7f0000000240)={0x2b, 0x2}) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) 3.006787137s ago: executing program 1 (id=2050): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socketpair(0x11, 0xa, 0x5, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map, 0x33, 0x1, 0xfffffff8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r1, r0, 0x1a, 0x54, 0x0, @void, @value=r0, @void, @void, r2}, 0x20) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0xc, 0x8, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfc}, 0x10}}, 0x48010) 2.975907718s ago: executing program 0 (id=2051): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0xfff, 0x8, 0x1, 0x7ff}, &(0x7f00000000c0)=0x10) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000005c0)={0x3, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x40}, 0x1, 0x7}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27d3f) r3 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r3, 0x3a, 0x0, 0x0, 0x20000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40241, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc010000130001010000000000000000fc010000000000000000000000000000fe8000000000000000000000000000bb4e20000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000540)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x20, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x8}}}, 0x24}}, 0x50) 2.718153652s ago: executing program 2 (id=2055): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000b00)={'wg0\x00'}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0x4) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0x60, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003"], 0x44}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000003c0)=@req={0x6, 0x3, 0x8, 0x400}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) r5 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x6a, 0x1, 0x0, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c8c0}, 0xc000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f00000002c0)=0x6, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300), 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000c80)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000f80)={'ip_vti0\x00', &(0x7f0000000e80)={'syztnl0\x00', 0x0, 0x8, 0x40, 0x3, 0x7ff, {{0x5, 0x4, 0x3, 0x1d, 0x14, 0x64, 0x0, 0xfb, 0x4, 0x0, @remote, @remote}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='$', 0x1}], 0x1}, 0x4040001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000014400"/20, @ANYRES32=r7, @ANYBLOB="3f00000006020400300012800b0001006272696467650000200002800c002e000300000003000000050007000800000005002c0002"], 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) 2.707159028s ago: executing program 1 (id=2056): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipmr_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_DST={0x8, 0x1, @broadcast}]}, 0x2c}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x24, 0x0, 0xc, 0x0, 0x10003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x80000001, 0x200, 0x9, 0x4, 0x0, 0x1}, 0x0, 0x0) 2.57515466s ago: executing program 3 (id=2057): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) r1 = accept$inet6_tcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000007c0)={@rand_addr, @private, 0x0}, &(0x7f0000000800)=0xc) sendmsg$inet6(r1, &(0x7f0000000a80)={&(0x7f0000000100)={0xa, 0x4e23, 0x0, @private0, 0x6}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000140)="d32d397b69f6548a09f4185e3a6aba52beda755804bae60068b21fa32189fa577b4a88f731b53e0901d7087627698abc5526bc4795a97fb310b9562c55aea1479a9db85a62fef90ee86782e4a9c91712c91ea3a1828fe3519aa21a0e583d74fe0395e446a4c6cbd7497c94d044950121db817ecf8b6e2b677e733d9f53297a01cac80ad65401f2800027cfce3280da69a7bd1e67b76d041a5d13bc74c36db41a", 0xa0}, {&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000300)="f5bb3a4ec215a36ba57113ff39b38eaacfa06a1eca7245848deca39f8d2e0954770aca5f700644d2420f94c88dd340cd1ad208e6f0a0f4877e95dcc0ca4647b275f8379db633c74087ec735f2b6e0f068a057d3f03ea38fa0f3f48303685df43e2792a4a1c66a51cebfb62650b42538a7bc17c78afef2230c63230a16afb2827de96d44c56f097f1f1fd872a4632cb3777310eb86d8b5e9c525a88dbdbfae2a1c8dfd9596318a835f982f046ba40ea572fdd46b25851ea74d8217a563c2181592cdb3978ea5caecca8a928e3865b862f4744b167f953f5eff7359e6647058e6aaaab23d005", 0xe5}, {&(0x7f0000000400)="5fb89b4e92c435bc52530fb12448a3e511f3524a7ce6d7e1a879d9e5f40a76792beec42cf655f41075d80d", 0x2b}, {&(0x7f0000000440)="24fca91a7016951dfa32719b77b39a5e438a1a8e0e7e200bfd94c2a37248d2ada597fcbd115f9197a995ce0d52090ec06f260859fe847ee8adfe20791395b073a88aad3b07aa582a43cbc619b740c9e9d785ffc480e307c25a2fb7f9e10c196f13053df2b4e224b9fdd03a790a555130c3dbcc5a3fe20843a9ecbdbab947a4b734e444acf031a20082e79673f7f15d992d2559d0a14182f2bc3f124f0fbc498564acc93e248b22ea4dce5b65d5b86e9350b5e26cf5d6235b9329040a3d2b2c9d0e2aead205fcef64d4916010201e452da0681d8f382cb7113f9e359e4b", 0xdd}, {&(0x7f0000000540)="0b1c904e347dc21ecff7ea201287f8a9dc42bf94023a506c1c5e8f16701d358748654e509ba95921e252c174204026bf4b5f439416edaece12664d3fc936379e54716813fa166b48b4d1f0640e63bf6210f7a3ab9c3fdc1040295fcb9ada9add2246d86b31b0d80ccea2ba5ac8d5ab54df4dfcc03b405ee6d4136b303882b30f6e6471a3630d121016d23a815852125d425615d1bb41b6648718a2435ffbf645b84270a91b0a2950f51ee5f5586f7a6bf7bbd1b80c1c9fb1060cec14b2fbdb95933d65a201d8c762359eb83d9a2c23efa24fa72ca330ce7675c990d7de84a790c3", 0xe1}, {&(0x7f0000000640)="0d5fd24c8372bfd857941cc48e002872fc4c", 0x12}, {&(0x7f0000000680)="4bc36ec98ea9a4c9f2c2a66b14279ab2077e0ff8af353b17049e8094eebeac75ffd530d26bd9e31db46439eb3e5bd2c64939c88f5a7ae453f10e76342105e0502a9772dc1a941baf4295e2fa5df23d39bc117110cefd31cab42a04618ddaa0050625ff1633ac624821ebf5f61925b4f1e8a338b08ee511574d359c972705cd1c437bc730bab2d05089676cd7d15e581945aee3e4d2e0f79988f37f", 0x9b}], 0x8, &(0x7f0000000840)=[@hopopts_2292={{0x88, 0x29, 0x36, {0x11, 0xd, '\x00', [@generic={0x6, 0x30, "4cd860f95525f44c6dbb656cc09b6e2d9af2d74e1698f88a09e322f6a4f7d8636546e37ccd26a4557ce5b31b9201e585"}, @generic={0x91, 0x36, "f4df425b0fc7eacc46af429a2d2fb56b6c907227f516a27c39402d781ffc4b50a8d3ac18a39e4db0a232beba5f2727d7c923c364e8ee"}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x2b, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x83b}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x1d, 0x18, '\x00', [@generic={0x8, 0x54, "77f4bbf8890e3ec314722386da71b03bb79121473484cdd2cd0eb26f31dc6e5a5d8da2af084e5a025e8224abaa98ef2738860fdc88a507b5ed2f4785421381ff1356e6152e76a59ed046f148e81fdeb89b08577a"}, @calipso={0x7, 0x18, {0x2, 0x4, 0xd, 0x81, [0x80000000, 0x0]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0xfc, 0xc4, [0x0, 0xd, 0xa2, 0x2, 0x7]}}, @pad1, @ra={0x5, 0x2, 0xfff8}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x4}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7}}, @pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}}}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x220}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x2f0, 0x16000065, &(0x7f000005ffe4)={0xa, 0x4e23, 0x2, @loopback}, 0x1c) 2.573547356s ago: executing program 0 (id=2058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="1c0000001e00010302000000000000002d00"/28, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000003ec0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000003f80)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)}, 0x40000c1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000010004003885231445bfdee3f01000000", @ANYRES32=0x0, @ANYBLOB="a821000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040054}, 0x0) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffffffffcd2}, 0x10002) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="04", 0x1}], 0x1}, 0x1) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x1) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket(0x27, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write(r8, &(0x7f0000000740)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800828001000000", 0x24) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, 0x0, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="25000000140001000000000000000000280011000100a71e2a26c2d174b4380271c0190000000000"], 0x28}}, 0x0) sendmsg$nl_route(r7, 0x0, 0x20044840) sendmsg$nl_route(r6, &(0x7f0000003980)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000003f58323bc5c20010001fff000000007f27befba94487eb81ca5b2a0100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvmmsg(r6, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000480)}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000580)}, 0x101}], 0x6, 0x2, 0x0) 2.552280439s ago: executing program 3 (id=2059): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffe66, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x4008092) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.400598493s ago: executing program 3 (id=2061): socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x2, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000480], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x298) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r1, 0x215eb000) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x6c, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r2, 0x0, &(0x7f0000000640)=""/53}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd2a, 0xfffffffd, {0x1e}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x86dd, 0x12, 0x0, &(0x7f0000000800)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.274528343s ago: executing program 2 (id=2062): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000007c0)=ANY=[@ANYRES32], &(0x7f0000000680)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f00000005c0)={0x5}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0xd9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000002280)=ANY=[@ANYBLOB="9feb010018006ec5d242eea589cdb800dc75000004000000020000000000000f04000000000886bfa1c222b6f978e45b673bd0ae6fd967ca4142d97b6ea4caa51c1d4410008da7e999a878db8a245925cbeed37425d8b51c9ae05c04d01cc5e6794d1513baec58ebe65082392711ca0351dcc2f984e86362939551e9aa069e5bf6d683722147d7d4968a07cc3f4a7e7d36369a9fa08ef805d00ab1c20b2f5fa3e4fc85814872126b8d7cd15aced82424770832044fd50560461b01622dba30c5aac9c2b659069e3aa289b63f3f892863b2b94b5bd588ff582875920815fce5e82c87d683d919eef7c11a987afdabe55c"], 0x0, 0x28}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0xd, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000a40)='GPL\x00', 0x2, 0x100a, &(0x7f0000000a80)=""/4106, 0x0, 0x2b}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001ac0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5262, '\x00', 0x0, r0, 0x4, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x2, 0x11, &(0x7f0000002380)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x1a}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x0, 0x8, 0x1, 0x9, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x7, 0xa, 0x2, 0x9b727ff09bd8664a, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x103}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x9, 0xa, 0x6, 0x800, 0x8000}], &(0x7f0000002440)='GPL\x00', 0x5, 0x5e, &(0x7f0000002480)=""/94, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000002500)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000002540)={0x3, 0x10, 0x2, 0x7f}, 0x10, 0x0, r1, 0x0, &(0x7f00000028c0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x2}, 0x94) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) splice(r5, 0xfffffffffffffffc, r2, 0x0, 0x20, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='vegas', 0x5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000002140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010029bd7000fedbdf259500000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socketpair(0x6, 0xf385aaf1c087b9b, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000300)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r11, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r10}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001bc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4a8, 0x2c0, 0x0, 0x1c8, 0x2c0, 0x2c0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, &(0x7f0000001b40), {[{{@ip={@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x34}, 0xffffffff, 0xffffffff, 'ip_vti0\x00', 'pimreg0\x00', {}, {0xff}, 0x88, 0x3, 0x69}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x7, @empty, 0x4e21}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0xd5, 0x55a], 0x1}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x4, 0x2, 0x1, 0x6, 0x4], 0x2, 0x1}, {0x0, [0x4, 0x4, 0x6, 0x4, 0x3, 0x7], 0x2, 0x1}}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x2, 0x3, 0x5, 0x4, 0x2], 0x5}, {0xffffffffffffffff, [0x6, 0x2, 0x4, 0x2, 0x2, 0x4], 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x80, 0x3a, "aac387763c2ead09bc8d9ea1820d504b1e4b679d1da5d6376b05da7c6b36"}}}, {{@ip={@rand_addr=0x64010101, @local, 0x0, 0xff, 'veth1_macvtap\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x1, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8, 0xe, @multicast1, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x508) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000006c0)="51e452bbb83aa410b80b4e5c2b0efb318e1675d157f4dbb09cf578c5d695d4c19669d6f75f4dd7fae5ca772264762e2caa7397be8dae54494bcb85b118ce878d2945924a24a25cf9c6672e7904f0301ffa0f360f9526057e1225a4d032ad0cc690cd327c226b57d5a0243bda5f379f6054b1851c1fa2cbad88d3f0039dddd6b426560bc03965da43", 0x88) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r12, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r10}, 0x20) r14 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r14, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x6a76aa81888e3d54) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r13}, &(0x7f0000000540), &(0x7f0000000580)=r14}, 0x20) connect$inet(r6, &(0x7f00000001c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x2b, &(0x7f0000000200)=0x7fffffff, 0x4) 1.80997229s ago: executing program 4 (id=2064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x406}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.599318955s ago: executing program 3 (id=2065): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000840)='F', 0x1}], 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$802154_dgram(r0, &(0x7f0000000080)={0x24, @short={0x2, 0x1}}, 0x14) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) 1.598573311s ago: executing program 1 (id=2066): r0 = epoll_create(0x3ff) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0xe373, &(0x7f0000000580)={[0x800]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f00000008c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000680)={r2, 0x2, 0x4, 0x4}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x5, &(0x7f0000000800)=ANY=[@ANYRES64=r0], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @value=r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x6, 0xc, &(0x7f0000000d40)=ANY=[], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000e40)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x18}}, 0x4895) recvmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/197, 0xc5}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000001140)=""/4088, 0xff8}], 0x3}, 0x2}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000021c0)=""/37, 0x25}, {&(0x7f0000002200)=""/190, 0xbe}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000004340)=""/4099, 0x1003}, {&(0x7f0000004300)=""/48, 0x30}, {&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f00000006c0)=""/160, 0xa0}], 0x7}, 0x101}], 0x7, 0x0, 0x0) 1.597853403s ago: executing program 4 (id=2067): r0 = socket$vsock_seqpacket(0x28, 0x5, 0x0) sendmsg$vsock_stream(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000000)="0efb0257e1a573c6d6d504ec5f2aa6da224459ea66313e4911bcb35681534b22248e", 0x22}, {&(0x7f0000000040)="c940703757c572c7271dca940d3fb9bf32c7", 0x12}, {&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="ee52162044c2a767b3cc65d22a2fb07cb27629a56779ff6302211a3da3446ff9987818266dbb341c8869f76c3c9ad3a8e3b45b0a86475632eb7ee06ef1a6ad3432fdf64c5974ed8575ff4242d9519b3578bd1bf363d9b1e1cc24cfb9c776a8538c4edc1f5adf9701e617d1603f16e8292c53857296c77dea8dbb10992f", 0x7d}, {&(0x7f0000001100)="618897de98d43fa14d32d1688c39479cd68c0587266cadbec0b4f89ac0eb30c5481a60be83bc18155e019068f90a727da1887edd02c53354e2ae5dbf20a335f93d875e588d5c7945aefba6eef885ae66e4138b139a77e6857b005c39f3e6924838105b1c7df49177adb33f12c1887c41a208d21bc1dd4c79829373e426ca91a0f88ead3b240ed8609051d660008366df418170e27d1d4bddc10718927dc49a27c564e5c8a3aa892491cf308f088154dcfc4126cbe791af4a9ee2d1955ca4321490a532e581dc2b9e5406f5228c20fce7bd1c619b12ece94edaf9b0f45b56d537d1d5827d081066e5c4540259f4e5f387dfd38f", 0xf3}, {&(0x7f0000001200)="63e032a15987d60ec8ad4ce1755406dbdf78a3c18982b761315c60643da90be47eae9d7ccae4eb8bbe27ae04b78eb164b930275f6bfd3450f8b3b69d0c0091a8a1bf75ff5c6271cd20df7b29c283caa7d23bf80a74d3d9aaad5e7308f37c795b01bcf84f1a4b4b58e26151370a5e79ed41f968bb37b9b86f0ff64feb0f16de05e1932ffd726a10f66c83b81a86c6488adcee3027d3dafdd3ed", 0x99}, {&(0x7f00000012c0)="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", 0x1000}], 0x7}, 0x4000040) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002380)={0xffffffffffffffff}) ioctl$XFS_IOC_SET_RESBLKS(r1, 0xc0105872, &(0x7f00000023c0)={0x71, 0x400}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000002400)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x4, {0x2, 0x4e22, @loopback}, 'veth1_to_bridge\x00'}) getpeername$l2tp6(r2, &(0x7f0000002480)={0xa, 0x0, 0x0, @dev}, &(0x7f00000024c0)=0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002500)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002580), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x38, r5, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@mon_options, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x24040011) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000002680)={0x0, 0xffffffffffffffff, 0x80000}, &(0x7f00000026c0)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000002700)=[@in6={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}, 0x4}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x6c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000002840)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x28, r5, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x16}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x235}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)={0x2c, r5, 0x2, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x55}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000041) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f0000002980)={0x0, 0xffffffffffffffff, 0xc00000}) syz_genetlink_get_family_id$tipc(&(0x7f00000029c0), r7) sendmsg$NL80211_CMD_GET_POWER_SAVE(r7, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x14, r5, 0x404, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x4011) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4000001) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000002c40)={r4, 0xff, 0xfff, 0xbf6}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r10, &(0x7f0000002d40)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x14, r5, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002dc0), r8) sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000002ec0)={&(0x7f0000002d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)={0x44, r12, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc4}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r10, &(0x7f0000003040)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003000)={&(0x7f0000002f80)={0x70, r13, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NL80211_CMD_SET_MAC_ACL(r7, &(0x7f0000003200)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000031c0)={&(0x7f00000030c0)={0xd4, r13, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1, 0x7e}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @broadcast}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) 1.538225732s ago: executing program 0 (id=2068): ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0xd) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x3, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000d40], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x9, 0x46, 0x88f7, 'macvtap0\x00', 'batadv_slave_1\x00', 'macvtap0\x00', 'nr0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, [0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0x1a0, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x6192, 'system_u:object_r:dhcpd_state_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x2a8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@setlink={0x28, 0x13, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0xa04, 0x409}, [@IFLA_CARRIER={0x5}]}, 0x28}}, 0x24008844) 1.433131291s ago: executing program 4 (id=2069): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000100)=0x0) bind$nfc_llcp(r1, &(0x7f0000000280)={0x27, r2, 0x1, 0x1, 0xe, 0x6, "7b4c322fc18009d6d3c2f7fe4ed8a599022619b81de3a0cda9dad04c08ea6c5092c920eaef73f9b811ffeb2afe7dbabf51ec2506085496acf0831fbec04275", 0x8}, 0x60) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) 1.267133134s ago: executing program 0 (id=2070): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000180)=0xccb, 0x4) bind$bt_hci(r0, &(0x7f00000005c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0xfffffffffffffffe, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB], 0x38}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000740)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0x7101}) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f00000007c0)={0x4, &(0x7f0000000800)=[{0x10, 0x23, &(0x7f0000000880)="4eca72716c8940ff82da56686be43096a67d3addf21bf1fbf284d0509a86f5c23410dc", 0x1}, {0x4, 0xe00, &(0x7f00000008c0)="d935245af080c929a71d288e0b8e9eb58b3d353a30c9bf0fb489e33d7951012841d9580d3fe2fd81ca38ddc6da57c502c43c4900b73d62d8ec8bf25c2d249c2f47768ec61b9400253b3c8f780035225fc565cf873d9032a75867ca9ab8ec3b5541aa84b70fee85b0ca4011744f9d392e02f3b48b796edc1aae37297e1fe7e31a01377955dd70652196f5672164386a9ae83624e8b8e08bf4396dcd63c47db6b48034527348cbcd9ce701b89f65f01535f933621e27d579db742bf1369ee327297de74a2e14914ac79032b1aed7d4e5904cc0ef2eadf6d47df0f2aee0223643a0d42a4b043c98e9486adb469fb14568e8614389b179503a1173ef8f01cc0072038eccc9dfce235a03375ad9a1e558487f06073ed782b89ea15dd641eb3b335cbffed6d22899ab660e71b6b249b5882edb2db1fd0f47af86dba9b9964c6e39d9b8da0e4182be96983b0fa5f54720ace09c6941aa59995d00d2a06414338d46d692d25fb3ba627cfd3f02f2fca9039a25c18081697ad3c445f99f5338a19495fd9473fe364dfd08da717e6b662b6481d6f08084fe50a1a42a74e85acf16cb067f635b41b509fdb42639d1915178718d4d9cc0891525f87ea874029c13e44d1e3db99efe85e836ad38b5e30a2f6da2f3e324e47226fc8090067ab0eabe90acfb0be542e195017d673cb98039c3b5897a064ccb23710c2bfdf1c2c6544259075e88fe3994860aef3694836d36a4645982a04904e0358da115f62a4de62162ec95a5c354f6ca1687440755be697ba10f89fece306b6013271c86bd77dc9be2df5c0569b920ccee0b3933562b44408b0ea24ab6d0a885391cbbab0752ac6cf1ec3359b9d18e9c9bda6387a7efc8f31fc12cfb61d0079ae484228bb1c9e62f76fa04c3679ad88fa95cd1450f317d1912f85998c1d0bcffee8b60e1c6fc70c8945000b01e660e4a19e4a2ca66b078d3d04cee6645c82bc8f399305c7ea09b2c0964ace28e46454025137e2e72b513116282874d40ad5389fe5612c8e7ec0c884e54860de55c5dc7036de6b29c6f170c23c91795f41c67c94ee1095b75264e9c8833402f87811d97b9d7f99ad8c37ff3a8491d9482319bb2ade0691109ae5f6d434780ac1e314f0f4a1febdc865dff94f837d125f1844425770d5bc2f7476c4a9ed8532ad2f97c6f9dac1165f099bd7b4c28484567ac42d1453f454aa746bb450c8b80a5d8839a87545d76bfe3622c4e524934b360c110651e537904e57e31b42e531eebfa38a330348feb31fd687b2fe5ff29e0f01897e8d659e2acefc8c7ca884cd21273d0123fbd84239cf06cf2b8e940309d19601168e477e4746acac4ab6016228139a47ce52b6f97705f719d442fa3896d620fb0bf14ea5877cec6edb4a5f87f1bc03fe3a08706318446535337edcf2b768d695aae68a8975a9af63f2ed829487af135d170c70207432c0777c60d1580dcf01097428f387f6e9d75d66341c687d63280b684e85b181ef513ddcc0f362ba59190584b8fda25658d711c8f40f443b768d21a45a2df491443310b22d419dea0f5f66a899b9a9dd32b44dc1683abb0467efb324dc17cd3c8b8deeb1f9e8f2ccaaab8b928286954a10cc9838e3ae7eef808568b26ec635bcec24ef9d2c3b851ed1c6598b6575015a8a8d9045d0f4104929911e486f3108c39d8340852d82b9689e21b554c5b78302bee9dd9e3a51d99ea6fa7fcad4347fe8c6333bee46d8d128351413f606a4dfb493945a0143e3467f1083b9f5a1be63068a84be000adff9141ec7d3ed12ce7e8f881b71ce788ed7f49dd9cb474920b73fe0b13c90f7ac6908d431cfec50af85f86e4c733812abaf70f233551bc560d66f223b18639e6c813c784850ab4dafb23000b019c2c2195441001ef575cb8758cc1d5a57e3f58578a37d4d09c6827ac3abf3b91cd935514486521138d246194357696aa388460a03f327719aee02d2b8edc77184b2e671f3b4afcf9c703471446dbff0b5d7cc60c0de07d4c7b0334482652162f9998aa16e224e799d5356268b606426655508557866b3edce32ac5385b3480937915de59d06f0d7da3a9a9d237138d1beb2b2ddad0f9ac7f0d1b01bc4be40b94e7ec378c780dbbf47173f0557ff8b1b5748613671557099f2375b3fe931f316f16684c80110411ffbcfb564f83d864736f0528b98a99a9ee0598eb777fddc8d0bf2a269c47ca32bf022934a168bef7810c6325b4285a1fd4f466a6af8535b910662c3266e4d407672691bb0c7f69535f3989fc4c0cd27a5c9dc00550d027b815d35669a1d27b6da641646a2eef67c6b358dba8d5f13976b8561c5ce103d3ec6d0e794ae87772b22d9d973b464983ef54e55a6592c5ccdb554457de6c7ad44c1c9b9e7109c375b397921ee27d5d698321516db188b6d81a512271d0003be24b1e7cd8fc369d05677129a4a6990113126cb318a40b247b28c7a5cc13fd7344dc10a925131cd3d95037a6fa7f5c8a0e330467aba5897a957354aac8c405fe27d2b61283c718faae69ed26168640386b533ac2ee93e30af41f674b1874867a72753e571522c1a3f941a69c48dfea04e31187b42cb83920980b71206c7730eaa10498964b978ca53095be2e104cd7172d809910132bc3a7d15145395279a30400216f46c1767c96e96f2ed02fcc784edb3b82254e1cfa2f15986b6b4b5dcab5d32ffa348296a0e4156ec774ac2ac3d3268472a7f4415eaffbf8bce278925f4655848b8106f0a9a3c6bb32b1fdcd6b2e507aca5bf4f6fb41984650ffb9ca1d3c98fb51b5a682faeed7eba77684060676d28d83a2dd783c68151e165156cf3575782c5d9a1a37e0552174efcaede05ad873503a8d703121fc5025cc3bda42a5aea03dcc9c11c187ad612e49890d317a0c408d270698db4e84388a4c18eb4fe174b8ffcd4fa14864521771c311f4eaac9a088d616984eff3bb4f794ec19d042bce0f78f873ecb93146db8d7ce410c1f6299c57781ea9b3ace4aed0b834e10fdff7489d96015d943cc7b9d00e4190a2fc7b697491756e7a01153fd874c6bca74b5617abfaac4bea64c461d49a959fecc588ad553b5d5937befa03e9632d1b5baff88d37ea9fd95a2632b7631e4e9d8412c99ab4be157d53fc7b1d2358f3b64d9d93e6654e21c595c877ae3e87b56ae8b985034b532c5d7c7433649042c4d36509d962409bfcedc5f0af1a43bcae8d9d19b865cd11b8ffadfcac3076b947a9595a2e258febd9fe79f596b0e7b7ea1d57a00e32c28f3a4e9a785fc8b351ba5a0d6d5c575e0a0003ce7853ecaab4f1bf8550f58725b2e5f3ac6ddf7ade178f24f25ef0761937867da1c3cc0c871f4940f98e390114dfa3187633c6ba303845a816bf1efc5269fce6c2ad5b4d9cf6ceba21474b4a825f8595409e31e7201b26b5161d6ff1a7cba698301efb56e574bca6a6ab2f679e602765850bfdcfd3f5060cd0d7678c46eb87f5e6dcef8fc2177479f273dd792647feca9c02f784fc9d71c7408812ea0afb7f8bf9e9e6eb4cf388bf2f9b79ce688a9c3ebfc4de0f1aa9d212349d8db4fe80d5c3fe618aa12c04efef96392f5dd5e8903e4b75eba7d7253441ece46e3df14e17a8a950c3686327b6141488aaa8f0ebdfcffaba8ddc01e670b53b943909837735bd4889504b7029d5c0618440e9da01e87940378d7202fc0bc1f4fac821e4bfcc1dd4018e546aa9046f7ecad141b1a6a7b89e9e13f1d8c2f98ce6a82f77cdb1f165a02394f503b945772322ffac235902d73546e5e699b5e21d9b96004a18d201cef992b6a2aa31101061b125fd521150968bec6e74a5a712c0d174bba75f124ce096cce68a4cb805c703fa74be0565953aa2ca8bc047f6f98359e9bc7a1028a5920764bbc8923d2d13c3bcf2877b7f6afa8d0f29be5f13af300b85b324c815d687a28426b3a9af49bfd7bc4be2f05cda0c82f865730559204a9f8fc6664874c1eb647d2c4fc625c2b953b67e23fc06cc6aa5256ee6c157de04b2a76e10f611b175987269cb64b650596fc098855db0d5b2317beee08d35fc3bc93ae68185d6eead69ef52d02eb089a8daad6095329dbf7a1a8132050eb1525ecaadf0612d8aa521ad354efaa9c3e0502cf4dbf10608ff8bde00ec4847bd1452e480795eb7245dd15088328f9a8a74676e901d25fcfec6ad3cd90d95ba3956036f52283e35d98ef25957f9f694efe80c4f0b76cf87032bc3145c8616c292611b8722f6c728014b58e7fe1828b616b01bcaa4343fda96bde531384cdce3b8f2443133ae995222189b1889660f331bb956dc3bec5185f07a5c92a053f9a8b0bc19973f4991ce7751c0e97188278b79d313be7c09edae463f5eed5c0128ec37ec034266a0881e7c92c6548b10bbda4a170da02b75d79b935070397681847536c884f6fc7496053273d313bb1d1ae57c249374f898bc6915143922549629f663f1768c49eb52e4494569cbdde9952cc5c666e67455e04c0c5a9fdc3b124fe11a781be565fe5e693cc547142e4b5c711d7d75d6256a535f9f9d9d08defb358ca54c696236b102e5c91b9aafcb2d773ebea9d4cd4093d9e5dc912d906d49d1b88d7bceb57f8344807869cbe6a9528ad00709843d87cf1a212bd9819ecce5b1dd99344cb1cbee4d11db65b778e8dbf60ef4c954f5563000aba3b9a38887fe0bb645dc8bca97e34c63d2d11028792aa0b1ad78c0130bfd4ef764b1f48b7531d01e85fd2dfc7af7191553d946c3a9249466194bb0bf34ed1c08887620d57d496fce897a229353503eec711af3f560292b34bef5a04142df65f2e03ff5cc792f237405c7c4233b5fe0312a0079b74fa45c4fb81c442d0a6de758b0b4eb8e39c4abec0bc9780e55854cf2fd82f311450776063173e7db7dea5b0f3eeff6c3020ed9916e5847b0bda6ef2a4d4d068d5baf29e5154e2716c2cce39fa543361be1d03c29911d7382bea1c0648afe3e62df67f39599dea8c390708a4c800347cbd2f19a48e55aee05b6e5863e7efc290ad15c7f3c5200a2dccff0eb4bd889a190857d953064f738a71d9565d9399512fb817d92fb", 0x1, 0x1}, {0x2, 0x0, &(0x7f00000016c0), 0x1}, {0x8, 0x4, &(0x7f0000001700)="80ca59b9", 0x1}]}) bind$inet(r6, &(0x7f0000001740)={0x2, 0x4e21, @multicast2}, 0x10) r7 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x10) bind$inet(r7, &(0x7f00000017c0)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001800)='veth1\x00', 0x10) bind$bt_hci(r1, &(0x7f0000001840)={0x1f, 0x0, 0x1}, 0x6) getpeername$netlink(r3, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000001880)=ANY=[], 0x6) socket$inet6_udp(0xa, 0x2, 0x0) 1.26659957s ago: executing program 2 (id=2071): r0 = socket(0xa, 0x5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000002c0)) (async) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000300)=0x8) (async) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000400)=0x2000004) (async) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000480)="00214717a70700000000430600000000000000000000721d5874f72c000000000000000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x8, 0x1, 0x85}]}, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1001}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r3, 0x8943, &(0x7f0000000240)={'syzkaller1\x00', @ifru_ivalue}) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) (async) read(r2, &(0x7f0000000280), 0x1000) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) (async) socket(0x1e, 0x1, 0x0) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)={0x2, 0xb, 0x39, "a9849b90e955aaf3365cb696147ee7417eb81cfff692d4e77aeb972c4e2c6a414153114841fd917ad05438dbd5a8ae4bb196cd76897c202298"}, 0x41) (async) sendmsg$nl_route_sched(r5, 0x0, 0x20008850) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendto$inet6(r0, &(0x7f0000000500)='\x00', 0x1, 0x44004, &(0x7f0000000540)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 1.266156371s ago: executing program 3 (id=2072): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x58, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xcd}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="12006bcf96", 0x5}], 0x1, 0x0, 0x0, 0x1f000000}, 0x2000000) 1.148013898s ago: executing program 4 (id=2073): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000032c0)={'vlan1\x00', 0x0}) r2 = gettid() pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000100)={0x0, 0xffffffffffffff03, &(0x7f0000000140)={&(0x7f0000000180)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffd2b}}]}, 0x3c}}, 0x800) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x40001) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000003380)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r1, @ANYBLOB="089805000750050008001300", @ANYRES32=r2, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 1.046720488s ago: executing program 3 (id=2074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xe, &(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000001f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001fc0)={r3, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000002040)="06ff03076844268cb89e14f0080060e0ffff00feb2bec41177fb86dd1402e000030c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r4 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') (async) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r7, 0x215eb000) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x8) (async) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x8) setsockopt$packet_rx_ring(r8, 0x107, 0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x86dd, 0x12, 0x0, &(0x7f0000000580)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r5) getsockopt$inet6_mptcp_MPTCP_INFO(r4, 0x11c, 0x1, &(0x7f00000000c0), &(0x7f0000000140)=0x60) (async) getsockopt$inet6_mptcp_MPTCP_INFO(r4, 0x11c, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x60) getsockopt$inet6_mptcp_MPTCP_FULL_INFO(r4, 0x11c, 0x4, &(0x7f0000001240)={0x0, 0x19b, 0x0, 0x108, 0x0, 0x1, &(0x7f0000000280)=[{0x0, {@in={{0x2, 0x0, @private}}, @in={{0x2, 0x0, @broadcast}}}}], &(0x7f0000000a40), {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001300)=0x88) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f00000013c0)={&(0x7f0000000040), 0xc, &(0x7f0000001380)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00002dbd7000fcdbdf250a000000080003de0300000008060f0000b652ad51bf8daeda7f744889b1d2982ba68123f4db6cc74b6930f8e9a5626498f37a88f8", @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x42850}, 0x4000804) 979.197072ms ago: executing program 0 (id=2075): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000045c0)=[{{&(0x7f0000000480)={0xa, 0x1, 0x0, @local, 0x7fffffff}, 0x1c, &(0x7f0000000b00)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44191) listen(r0, 0x100) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc}, {0x0, 0x1}, {0x1, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) accept4(r0, 0x0, 0x0, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) (async) sendmmsg$inet6(r0, &(0x7f00000045c0)=[{{&(0x7f0000000480)={0xa, 0x1, 0x0, @local, 0x7fffffff}, 0x1c, &(0x7f0000000b00)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x44191) (async) listen(r0, 0x100) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc}, {0x0, 0x1}, {0x1, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) accept4(r0, 0x0, 0x0, 0x800) (async) 935.82925ms ago: executing program 4 (id=2076): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x118, 0x32, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0xe9, 0x0, 0x0, @fd}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000440)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3, 0x0, 0x0, 0xfffffc00}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, r3}, 0xc) connect$can_bcm(r1, &(0x7f0000000100)={0x1d, r2}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f00000000c0)=""/48, &(0x7f00000002c0)=0x30) sendmmsg$sock(r1, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003000)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}, {{0x0, 0xfffffffffffffcde, &(0x7f0000002200)=[{&(0x7f0000003200)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}], 0x1}}], 0x2, 0x0) 612.708647ms ago: executing program 4 (id=2077): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x14, r1, 0x703, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x26040000}, 0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000680)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES8=r6], 0x1c}}, 0x840) write$nci(r3, &(0x7f0000000780)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @b={0xff, 0x1, 0x4, 0x1, 0xe1, 0x9, 0x9, {0x51, "2492e01923772112b8a59ee2ec5c0407f8bab1ff831e8a9cf14d95bef63fcdb343540d4fc7aa8ab18b676a2c1434185bfe9101e7121f4f2edd372422eb20861611c11bc32d808a469a73c37fadd83390ec"}, 0x10, 0x0, 0x7, 0xe, 0x10, "900861f8dd49a021e680065ea179bedf"}}, 0x71) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1002}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r11 = socket$inet(0x2, 0x2, 0x0) r12 = socket(0x2, 0x80805, 0x0) close(0x3) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r13, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="20001400058ea50a2bbd7000630000000800030000975200"], 0x20}, 0x1, 0x0, 0x0, 0x8004090}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r12) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xfff1, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000040) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newtfilter={0x1ec4, 0x2c, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xf, 0x8}, {0xa, 0xe}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1e90, 0x2, [@TCA_MATCHALL_ACT={0x1e7c, 0x2, [@m_police={0x9cc, 0x5, 0x0, 0x0, {{0xb}, {0x960, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0xf}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x4, 0x800, 0x39, 0x8, {0x6, 0x1, 0x8001, 0xb6, 0x9214, 0xc000000}, {0x5, 0x0, 0x80, 0x7, 0x8, 0x8}, 0x9f, 0xfffff800, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xf5, 0x7ff, 0x1, 0x800, 0x1, 0xeb0, 0x6, 0x5, 0x7, 0xa, 0x2, 0x4, 0xfffffc00, 0xffff, 0x8, 0x8, 0x4, 0x67c, 0x1, 0x3, 0x7, 0x800, 0x4, 0x4b2e, 0x800, 0x1, 0x1, 0x1, 0x8000, 0x1, 0x5, 0x4, 0x9, 0x10001, 0x7, 0x3, 0x1, 0xd, 0xf5, 0xf06a, 0x2, 0x5, 0x0, 0x1, 0x4, 0xe, 0x1ff, 0xfffffc00, 0x5, 0xffffff81, 0x0, 0x1, 0x0, 0x5, 0x7, 0x1, 0x6, 0x7, 0xfff, 0x3, 0x5, 0xfff, 0x0, 0x3, 0x7, 0x7fff, 0x68b3, 0x603, 0x10000, 0x7f, 0x4, 0xad, 0x400, 0x0, 0x5, 0x0, 0x1, 0x0, 0x7f7, 0xfffffffc, 0x8, 0x1, 0xe, 0xd1, 0x7, 0xc9a, 0x17d, 0x9, 0x939c, 0xec0, 0x9, 0x879, 0x1a, 0x4, 0x4, 0x9, 0xffffffff, 0x7, 0xfffffffe, 0x1, 0x101, 0x1, 0x4, 0x5, 0x10000, 0x0, 0x3ff, 0x8, 0x7, 0x9, 0x9, 0x3ff, 0xb, 0x5, 0x1, 0x400, 0x4, 0x401, 0x8, 0xfffffffa, 0x2, 0x3, 0x5, 0x6, 0x8, 0xa1, 0x7, 0x7, 0x7, 0xffffffff, 0x0, 0xfffffc00, 0x5, 0xfa, 0xcc, 0xfa5e, 0x7, 0xffff0001, 0x400, 0x1, 0x3ff, 0x7, 0x8, 0x7ff, 0x1, 0x9, 0x130, 0x4a3, 0x9, 0x6, 0x4, 0x3, 0x4, 0x80000000, 0x2, 0x0, 0x5, 0x5, 0x5b, 0x100, 0x7, 0x6, 0x0, 0x5, 0x2, 0x5, 0x3f64, 0x0, 0x0, 0x0, 0x8, 0xfffffffc, 0x4, 0x3, 0x80, 0x5, 0x10000, 0x7, 0xa, 0x0, 0x80, 0x80000001, 0x40000000, 0x9, 0x200, 0x0, 0x4, 0x8, 0x1, 0xa, 0x8, 0x2, 0x0, 0xf, 0x8, 0x6, 0x2, 0x6, 0x1, 0x7f, 0x8, 0x401, 0xa65ff90, 0x2, 0x401, 0x7, 0x3, 0x4, 0x3, 0xbff, 0x7, 0x7fff, 0x1, 0x2, 0x4, 0x0, 0x2, 0x4, 0x3, 0x9, 0x6, 0x9, 0x674, 0x1, 0x6, 0x1, 0x7fffffff, 0xd0, 0x2f, 0x5, 0x9, 0x5, 0x4, 0x0, 0x8, 0x3, 0x9, 0x4, 0x5, 0x8000, 0x5, 0xeab3, 0x0, 0x9008, 0x207, 0xa9df, 0x8001, 0x7ff, 0x4, 0x6, 0x1, 0x7, 0x1, 0x3, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_RESULT={0x8, 0x5, 0x40}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x0, 0x30, 0x8000, 0x3ff, {0x5, 0x0, 0xb, 0x400, 0x9, 0x7fffffff}, {0x2, 0x4, 0xcd5f, 0xfffe, 0x10, 0x400}, 0x1, 0x1, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xff, 0x10000000, 0x6ea, 0x69, 0x4, {0x5, 0x2, 0x1, 0x6, 0x8, 0x5}, {0x3, 0x3, 0x7, 0x401, 0x800, 0x5}, 0x11, 0xce5, 0x6}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffff18}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000000}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x3, 0x35, 0x3, 0xe8ce, {0x7, 0x1, 0xffff, 0x1ff, 0x5, 0x5}, {0x2, 0x2, 0x8000, 0x6, 0xea8, 0xf}, 0x5, 0x4, 0xffffffff}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x1, 0x7, 0x80000000, 0x2, 0x3b2, 0xdb7f, 0xa81, 0x5, 0x800, 0x52, 0x10000, 0x6, 0x7, 0xf75, 0x2, 0x200, 0x17, 0x100, 0x1, 0x1, 0x4, 0x9, 0xf5b, 0x2, 0xf60, 0xd4, 0x8, 0x0, 0x8, 0x1, 0x8, 0x2, 0xb, 0x1ca9, 0xfffffffb, 0x1, 0x6, 0x6, 0x1, 0x3, 0xb045, 0x8, 0x6, 0x85ee, 0xfffffff8, 0x231a, 0x7, 0x4, 0x5, 0x7ff, 0x227f, 0x3, 0xffffffff, 0x47f67c16, 0x93, 0xb20, 0x7f, 0x5e9f468, 0x2, 0x1, 0xea1, 0x9, 0x8, 0xfffffffb, 0x3, 0xfffffffe, 0xe, 0x7fff, 0x6, 0x9, 0x686d, 0x5, 0x3, 0x6, 0x80, 0xb8ff, 0xffff, 0x7, 0x2, 0xf1d, 0x0, 0x10001, 0x9, 0x6, 0x9ec7, 0x7, 0x3, 0x6, 0xfff, 0xfffffff9, 0x8, 0x9, 0x800, 0x10001, 0xff, 0x38d6, 0x2, 0xfe000000, 0xa373, 0x3, 0xda69, 0x3505, 0x5, 0x4, 0x2, 0x7, 0x0, 0x3, 0x4, 0x3, 0x4, 0x3ff, 0x3, 0x2, 0x89b4, 0x4, 0x2, 0xf61a, 0x0, 0x401, 0x10000, 0x8, 0x4, 0x3, 0x6, 0x9, 0x3c, 0xe, 0xffff8000, 0x1, 0x3, 0xf, 0x6, 0x714, 0x2, 0xfffffff8, 0xff, 0x6, 0x5, 0xfff, 0x9, 0x5, 0x1, 0x8, 0x10000, 0x5, 0x4, 0xda69, 0x2, 0x8, 0x1c4, 0x8, 0x4, 0x6, 0xffffffff, 0x8, 0x0, 0xdd, 0x2, 0x7, 0x892, 0xf5df, 0xaad, 0xf490, 0x8001, 0x7, 0xdd, 0x7fff, 0x1, 0xffff, 0x4, 0x15, 0xd3, 0x7ff, 0x8a9a, 0x8001, 0x7, 0xf, 0x6, 0x3, 0x1, 0x6, 0x524, 0x4, 0x2, 0x4f, 0x1, 0x6, 0x6, 0x7, 0x6, 0x80, 0x101, 0x3, 0xa, 0x3, 0x3ff, 0x7, 0x9, 0x5, 0x1, 0x6, 0x8, 0x6da4, 0x0, 0xffff, 0x2, 0x3ff, 0x3, 0xb608, 0x3, 0xc, 0x3, 0x670536d3, 0x8, 0x6, 0x5, 0x10001, 0x6, 0x476, 0x7, 0x3, 0x0, 0xe99, 0x10, 0x9, 0x5, 0xfff, 0x1, 0x239f, 0x800, 0x1, 0x10001000, 0xfffffbff, 0x80000001, 0x7f, 0x5, 0xc403, 0x6, 0xffffffff, 0x3, 0x7, 0x4, 0x8, 0x3ff, 0x10001, 0x1, 0xe514, 0xe, 0x9, 0x10001, 0x4, 0x52675d67, 0x65c, 0x3842]}]]}, {0x44, 0x6, "41c2388e32a8e2ada6daf78bad1ae56b2fbf466a22780017d76907b5739899d46f719077bf73a2f777911f409619271c832edd0db0eafb7b93d982eff8ff4b15"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mpls={0xdc, 0xa, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x96995}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88b5}, @TCA_MPLS_TTL={0x5, 0x7, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x7d, 0x6, "18d90a89627ecf5a190b02abe2af9ffbc4cb711219160d6cf7c1655930ce4c0eac2dd044ecc5cf7d2b4bd813348d06c135b5c02445820d97a875fdd87f788f400c841b8754ef9e8bc6c6e6cce51ff57481959c4d968067e2f670c1be2e8e9e3a5d67f3515e9ba2368ecfa1f55f52ed70f98e3e1f5ce3c4e1a5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_tunnel_key={0x10c, 0x4, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x29}}]}, {0xb6, 0x6, "0624774a0527b8d84beff9f3bc67deb8c5fcdf2538b6ccc838ef169fb60b597e26c05b9dad986c6e35958e0e1b2c90d67a037e244c4fcfbeff52bc9271ee603c09d55cd14367d4fbdfabf44fe874ad618d54e68d537bf1b449636fa4faa34811370f505ba1ba3cfd0695ebf9b82ea12565b1f4ffdebb60e05ceabf2f7de0a430978d9f5a19e4956f62aa57b34b78efa39f9b1dbaefc207e32a722d67874727a42b4f2b22cd77752276c13c7f02271e7139d8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0x111c, 0x12, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x7ff, 0x20000000, 0xbb2, 0x9}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x377c, 0x0, 0x7, 0xa}, @multicast1, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x8e60, 0x0, 0xb24, 0xfffffffa}, @local, @multicast2, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0x4, 0x7, 0x8510000}, @dev={0xac, 0x14, 0x14, 0x1f}, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x101, 0x5, 0x3, 0x3}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x20000, 0xffffffffffffffff, 0xfff, 0xea8}, @dev={0xac, 0x14, 0x14, 0x14}, @local, 0xffffff00, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x1a8, 0x8, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4d, 0x200, 0x4, 0x6, 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x5, 0x6, 0xa, 0xdb}, @dev={0xac, 0x14, 0x14, 0x16}, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xda, 0x8, 0x7, 0xffff}, @local, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xb, 0x6, 0x2, 0x81, 0x3}, @multicast2, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x9, 0x20000000, 0x30, 0x9}, @dev={0xac, 0x14, 0x14, 0x10}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffff, 0xffffffffffffffff, 0x1, 0x9}, @local, @empty, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5c5, 0x1, 0x6, 0x1386, 0xfffffffe}, @broadcast, @loopback, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffffff01, 0x3, 0x0, 0x9, 0x7}, @loopback, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x0, 0x0, 0x9172, 0x3}, @loopback, @empty, 0xffffff00, 0x1}}]}, {0x18, 0x6, "2bf83fad271022a44eba8eda4bc735ba3b1c0924"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x1ec4}, 0x1, 0x0, 0x0, 0x10}, 0x4050) write$cgroup_pid(r8, &(0x7f0000000540), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') ioctl$XFS_IOC_INUMBERS(r7, 0x80405880, &(0x7f0000000580)={{0xb0, 0x1, 0x72, 0x4, 0x140}, [{0x7, 0x9, 0x1, 0xf}]}) 535.251911ms ago: executing program 1 (id=2078): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x2000, 0x25dfdbfc, {0xa, 0x80, 0x10, 0x0, 0x40, 0x0, 0x0, 0x3, 0x14}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e24}}, @FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x4}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x4c800) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000005c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000680)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000007c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000900)={0x0, 0x20, &(0x7f0000000940)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000980)=0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c003780"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000005c0), 0x4000000000001f2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) recvmsg$unix(r1, &(0x7f0000000180)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/48, 0x30}, {&(0x7f00000000c0)=""/69, 0x45}], 0x2}, 0x10140) 260.759016ms ago: executing program 1 (id=2079): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x40}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="dfff00005f0001"], 0x14}], 0x1}, 0x8c0) (async) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x101}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="18020000801000000000000004000000850000008800000095"], &(0x7f0000000980)='GPL\x00'}, 0x90) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001d00070c000000000000000007000000", @ANYRES64=r6, @ANYBLOB="0c000200"], 0x28}}, 0x48000) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000002400050600"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000c00010063616b655f6d71000c00020008000900e8"], 0x3c}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100033062abd700000000000fc020000000000000000000000000006ac1414bb00000000000000000000000000000000400000000200002004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000e3000000000000000000000000000000000032000000ac1414bb000000000000000000000000030000000000000000000000000400000000000000000000cc2d00000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000004000000000000002dbd7000000000000a000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}, 0x1, 0x0, 0x0, 0x24000884}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100009aaa08507076673cd2c974a5f674698b71d3ed80330ef29fd7de3243e41bc8617812605cd1075d1da2429639706c1b22a6208d3bb4edb513a62e1fb91e7c3876e7cbf912f9def52af3a9234bda945e1f70ab9331467a74c54d7454f0940e0a48fca09a8173413deca8a283fe52f3cf67fc7566cdd9ddabc29d4d4b837257ba6086e1cda11fe984c715152d152d57", @ANYRES32=r11, @ANYBLOB="080026001b17000008002700030000000800a00067090000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 0 (id=2080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x54}}, 0x0) (async) kernel console output (not intermixed with test programs): ][ T8388] tipc: Enabling of bearer rejected, failed to enable media [ 191.669559][ T8388] tipc: Invalid UDP bearer configuration [ 191.669594][ T8388] tipc: Enabling of bearer rejected, failed to enable media [ 191.673355][ T8388] tipc: Invalid UDP bearer configuration [ 191.675028][ T8388] tipc: Enabling of bearer rejected, failed to enable media [ 191.675303][ T8388] tipc: Invalid UDP bearer configuration [ 191.675338][ T8388] tipc: Enabling of bearer rejected, failed to enable media [ 191.675631][ T8388] tipc: Invalid UDP bearer configuration [ 191.675666][ T8388] tipc: Enabling of bearer rejected, failed to enable media [ 191.675878][ T8388] tipc: Invalid UDP bearer configuration [ 191.675912][ T8388] tipc: Enabling of bearer rejected, failed to enable media [ 191.676166][ T8388] tipc: Invalid UDP bearer configuration [ 191.676200][ T8388] tipc: Enabling of bearer rejected, failed to enable media [ 191.966191][ T8397] Cannot find del_set index 2 as target [ 192.488109][ T8418] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 192.488130][ T8418] netlink: 'syz.3.658': attribute type 4 has an invalid length. [ 192.539375][ T8416] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.941692][ T8438] __nla_validate_parse: 28 callbacks suppressed [ 192.941714][ T8438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.663'. [ 193.084166][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.663'. [ 193.084195][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.663'. [ 193.239523][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.664'. [ 193.527734][ T8458] netlink: 32 bytes leftover after parsing attributes in process `syz.1.667'. [ 193.997414][ T8452] tipc: Enabling of bearer rejected, already enabled [ 194.357332][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.423744][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 194.522885][ T8506] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 194.838271][ T8521] netlink: 'syz.4.682': attribute type 21 has an invalid length. [ 195.117490][ T8534] Bluetooth: hci0: unsupported parameter 5134 [ 195.117515][ T8534] Bluetooth: hci0: unsupported parameter 8192 [ 195.117526][ T8534] Bluetooth: hci0: unsupported parameter 5134 [ 195.117537][ T8534] Bluetooth: hci0: unsupported parameter 8192 [ 195.303354][ T8543] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 195.475168][ T8543] 8021q: adding VLAN 0 to HW filter on device bond3 [ 195.571823][ T8553] bond3: (slave geneve3): making interface the new active one [ 195.606639][ T8553] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 195.932822][ T8573] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 196.084836][ T8584] netlink: 'syz.4.693': attribute type 62 has an invalid length. [ 196.327479][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.695'. [ 196.495746][ T8558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.688'. [ 196.794439][ T8607] netlink: 60 bytes leftover after parsing attributes in process `syz.0.700'. [ 196.942828][ T8612] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 196.974842][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.701'. [ 197.022805][ T6857] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.022866][ T6857] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.022907][ T6857] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.022951][ T6857] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.064436][ T8665] netlink: 'syz.1.718': attribute type 11 has an invalid length. [ 198.367429][ T8676] netlink: 'syz.1.723': attribute type 2 has an invalid length. [ 198.368347][ T8674] syzkaller0: entered allmulticast mode [ 198.613370][ T8691] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 199.264709][ T8714] wg0 speed is unknown, defaulting to 1000 [ 199.367438][ T8714] wg0 speed is unknown, defaulting to 1000 [ 199.368293][ T8714] wg0 speed is unknown, defaulting to 1000 [ 199.580002][ T8736] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 200.026591][ T8736] 8021q: adding VLAN 0 to HW filter on device bond5 [ 200.047853][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.135573][ T8728] bond5: (slave veth0_to_bond): making interface the new active one [ 200.157330][ T8728] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 200.305319][ T8714] infiniband syz0: set active [ 200.305339][ T8714] infiniband syz0: added wg0 [ 200.328120][ T8714] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 200.358995][ T8714] infiniband syz0: Couldn't open port 1 [ 200.359248][ T8714] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 200.359275][ T8714] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 200.359308][ T8714] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 200.501821][ T5842] wg0 speed is unknown, defaulting to 1000 [ 200.595278][ T8714] RDS/IB: syz0: added [ 200.595333][ T8714] smc: adding ib device syz0 with port count 1 [ 200.595351][ T8714] smc: ib device syz0 port 1 has no pnetid [ 200.596420][ T8714] wg0 speed is unknown, defaulting to 1000 [ 200.596577][ T5842] wg0 speed is unknown, defaulting to 1000 [ 201.330746][ T8781] tunl0: entered promiscuous mode [ 201.338542][ T8781] netlink: 'syz.2.745': attribute type 4 has an invalid length. [ 201.338562][ T8781] __nla_validate_parse: 7 callbacks suppressed [ 201.338572][ T8781] netlink: 9 bytes leftover after parsing attributes in process `syz.2.745'. [ 201.339375][ T8783] netlink: 'syz.2.745': attribute type 4 has an invalid length. [ 201.339390][ T8783] netlink: 9 bytes leftover after parsing attributes in process `syz.2.745'. [ 201.389494][ T8714] wg0 speed is unknown, defaulting to 1000 [ 201.461606][ T8782] digital: digital_start_poll: Unknown protocol [ 201.825792][ T8803] ip_tables: iptables: counters copy to user failed while replacing table [ 201.902202][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.750'. [ 201.914876][ T8811] tipc: Trying to set illegal importance in message [ 201.914897][ T8811] tipc: Trying to set illegal importance in message [ 201.914909][ T8811] tipc: Trying to set illegal importance in message [ 201.914921][ T8811] tipc: Trying to set illegal importance in message [ 201.914933][ T8811] tipc: Trying to set illegal importance in message [ 201.914945][ T8811] tipc: Trying to set illegal importance in message [ 201.914958][ T8811] tipc: Trying to set illegal importance in message [ 201.914978][ T8811] tipc: Trying to set illegal importance in message [ 201.914991][ T8811] tipc: Trying to set illegal importance in message [ 201.915003][ T8811] tipc: Trying to set illegal importance in message [ 201.915015][ T8811] tipc: Trying to set illegal importance in message [ 201.915027][ T8811] tipc: Trying to set illegal importance in message [ 201.915040][ T8811] tipc: Trying to set illegal importance in message [ 201.915052][ T8811] tipc: Trying to set illegal importance in message [ 201.915064][ T8811] tipc: Trying to set illegal importance in message [ 201.915077][ T8811] tipc: Trying to set illegal importance in message [ 201.915089][ T8811] tipc: Trying to set illegal importance in message [ 201.915101][ T8811] tipc: Trying to set illegal importance in message [ 201.915113][ T8811] tipc: Trying to set illegal importance in message [ 201.915125][ T8811] tipc: Trying to set illegal importance in message [ 201.915137][ T8811] tipc: Trying to set illegal importance in message [ 201.915149][ T8811] tipc: Trying to set illegal importance in message [ 201.915161][ T8811] tipc: Trying to set illegal importance in message [ 201.915174][ T8811] tipc: Trying to set illegal importance in message [ 201.915186][ T8811] tipc: Trying to set illegal importance in message [ 201.915198][ T8811] tipc: Trying to set illegal importance in message [ 201.915210][ T8811] tipc: Trying to set illegal importance in message [ 201.915222][ T8811] tipc: Trying to set illegal importance in message [ 201.915234][ T8811] tipc: Trying to set illegal importance in message [ 201.915246][ T8811] tipc: Trying to set illegal importance in message [ 201.915259][ T8811] tipc: Trying to set illegal importance in message [ 201.915271][ T8811] tipc: Trying to set illegal importance in message [ 201.915283][ T8811] tipc: Trying to set illegal importance in message [ 201.915295][ T8811] tipc: Trying to set illegal importance in message [ 201.915307][ T8811] tipc: Trying to set illegal importance in message [ 201.915319][ T8811] tipc: Trying to set illegal importance in message [ 201.915331][ T8811] tipc: Trying to set illegal importance in message [ 201.915343][ T8811] tipc: Trying to set illegal importance in message [ 201.915355][ T8811] tipc: Trying to set illegal importance in message [ 201.915408][ T8811] tipc: Trying to set illegal importance in message [ 201.915421][ T8811] tipc: Trying to set illegal importance in message [ 201.915433][ T8811] tipc: Trying to set illegal importance in message [ 201.915445][ T8811] tipc: Trying to set illegal importance in message [ 201.915457][ T8811] tipc: Trying to set illegal importance in message [ 201.915469][ T8811] tipc: Trying to set illegal importance in message [ 201.915481][ T8811] tipc: Trying to set illegal importance in message [ 201.915493][ T8811] tipc: Trying to set illegal importance in message [ 201.915505][ T8811] tipc: Trying to set illegal importance in message [ 201.915517][ T8811] tipc: Trying to set illegal importance in message [ 201.915529][ T8811] tipc: Trying to set illegal importance in message [ 201.915541][ T8811] tipc: Trying to set illegal importance in message [ 201.915553][ T8811] tipc: Trying to set illegal importance in message [ 201.915565][ T8811] tipc: Trying to set illegal importance in message [ 201.915577][ T8811] tipc: Trying to set illegal importance in message [ 201.915589][ T8811] tipc: Trying to set illegal importance in message [ 201.915601][ T8811] tipc: Trying to set illegal importance in message [ 201.915613][ T8811] tipc: Trying to set illegal importance in message [ 201.915626][ T8811] tipc: Trying to set illegal importance in message [ 201.915637][ T8811] tipc: Trying to set illegal importance in message [ 201.915649][ T8811] tipc: Trying to set illegal importance in message [ 201.915662][ T8811] tipc: Trying to set illegal importance in message [ 201.915674][ T8811] tipc: Trying to set illegal importance in message [ 201.915686][ T8811] tipc: Trying to set illegal importance in message [ 201.915698][ T8811] tipc: Trying to set illegal importance in message [ 201.915710][ T8811] tipc: Trying to set illegal importance in message [ 202.722897][ T8819] tipc: Enabling of bearer rejected, failed to enable media [ 202.775789][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.751'. [ 202.775822][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.751'. [ 202.795424][ T8714] wg0 speed is unknown, defaulting to 1000 [ 203.228349][ T8830] syzkaller0: entered promiscuous mode [ 203.228377][ T8830] syzkaller0: entered allmulticast mode [ 203.447827][ T8840] FAULT_INJECTION: forcing a failure. [ 203.447827][ T8840] name failslab, interval 1, probability 0, space 0, times 0 [ 203.447855][ T8840] CPU: 1 UID: 0 PID: 8840 Comm: syz.2.757 Not tainted syzkaller #0 PREEMPT(full) [ 203.447874][ T8840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 203.447884][ T8840] Call Trace: [ 203.447891][ T8840] [ 203.447898][ T8840] dump_stack_lvl+0xe8/0x150 [ 203.447933][ T8840] should_fail_ex+0x3eb/0x540 [ 203.447960][ T8840] should_failslab+0xa8/0x100 [ 203.447989][ T8840] __kmalloc_cache_noprof+0x9e/0x600 [ 203.448014][ T8840] ? __kmalloc_cache_noprof+0x148/0x600 [ 203.448035][ T8840] ? sctp_add_bind_addr+0x8c/0x370 [ 203.448059][ T8840] ? sctp_add_bind_addr+0x8c/0x370 [ 203.448090][ T8840] sctp_add_bind_addr+0x8c/0x370 [ 203.448119][ T8840] sctp_copy_local_addr_list+0x31a/0x4e0 [ 203.448150][ T8840] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 203.448176][ T8840] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 203.448206][ T8840] ? sctp_v4_is_any+0x35/0x60 [ 203.448231][ T8840] ? sctp_copy_one_addr+0x93/0x360 [ 203.448259][ T8840] sctp_bind_addr_copy+0xb3/0x3c0 [ 203.448285][ T8840] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 203.448311][ T8840] sctp_connect_new_asoc+0x2ff/0x6b0 [ 203.448351][ T8840] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 203.448372][ T8840] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 203.448395][ T8840] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 203.448421][ T8840] ? security_sctp_bind_connect+0x7e/0x2c0 [ 203.448450][ T8840] sctp_sendmsg+0x159b/0x2d00 [ 203.448490][ T8840] ? kstrtouint+0x6e/0xe0 [ 203.448519][ T8840] ? __pfx_sctp_sendmsg+0x10/0x10 [ 203.448546][ T8840] ? lock_acquire+0x115/0x350 [ 203.448591][ T8840] ? aa_sock_msg_perm+0xf5/0x210 [ 203.448617][ T8840] ? sock_rps_record_flow+0x19/0x350 [ 203.448642][ T8840] ? inet_sendmsg+0x298/0x320 [ 203.448661][ T8840] ? apparmor_socket_sendmsg+0x98/0x360 [ 203.448688][ T8840] ? __pfx_inet_sendmsg+0x10/0x10 [ 203.448708][ T8840] sock_sendmsg_nosec+0x10f/0x190 [ 203.448737][ T8840] __sys_sendto+0x408/0x5a0 [ 203.448756][ T8840] ? ksys_write+0x1e6/0x270 [ 203.448785][ T8840] ? __pfx___sys_sendto+0x10/0x10 [ 203.448801][ T8840] ? __mutex_unlock_slowpath+0x731/0x900 [ 203.448837][ T8840] ? fdget+0x1ac/0x250 [ 203.448868][ T8840] ? __pfx_ksys_write+0x10/0x10 [ 203.448899][ T8840] __x64_sys_sendto+0xde/0x100 [ 203.448922][ T8840] do_syscall_64+0x16a/0x530 [ 203.448947][ T8840] ? trace_irq_disable+0x3b/0x140 [ 203.448971][ T8840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.448989][ T8840] ? clear_bhb_loop+0x70/0xc0 [ 203.449008][ T8840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.449026][ T8840] RIP: 0033:0x7fee725a94d9 [ 203.449043][ T8840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.449057][ T8840] RSP: 002b:00007fee73428028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 203.449076][ T8840] RAX: ffffffffffffffda RBX: 00007fee72825fa0 RCX: 00007fee725a94d9 [ 203.449089][ T8840] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 203.449100][ T8840] RBP: 00007fee73428090 R08: 0000200000000300 R09: 000000000000001c [ 203.449111][ T8840] R10: 0000000000040811 R11: 0000000000000246 R12: 0000000000000002 [ 203.449122][ T8840] R13: 00007fee72826038 R14: 00007fee72825fa0 R15: 00007ffc7593c168 [ 203.449154][ T8840] [ 203.863663][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.2.758'. [ 204.086569][ T8852] netlink: 28 bytes leftover after parsing attributes in process `syz.2.759'. [ 204.379924][ T8855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 204.412198][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 204.412221][ T8855] netlink: 5740 bytes leftover after parsing attributes in process `syz.0.760'. [ 205.135680][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa80400: rx timeout, send abort [ 205.637224][ C0] vcan0: j1939_tp_rxtimer: 0xffff888037268400: rx timeout, send abort [ 205.637275][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa80400: abort rx timeout. Force session deactivation [ 205.933337][ T8714] wg0 speed is unknown, defaulting to 1000 [ 206.137274][ C0] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888037268400: abort rx timeout. Force session deactivation [ 206.423971][ T8880] __nla_validate_parse: 3 callbacks suppressed [ 206.423989][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.769'. [ 206.485956][ T8714] wg0 speed is unknown, defaulting to 1000 [ 206.637751][ T8886] netlink: 'syz.0.772': attribute type 10 has an invalid length. [ 207.113314][ T8907] netlink: 'syz.3.779': attribute type 5 has an invalid length. [ 207.163351][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 207.205918][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 207.464187][ T8923] rxe_eth0 speed is unknown, defaulting to 1000 [ 207.542640][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 207.542663][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.789'. [ 207.597090][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 207.597112][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.789'. [ 207.645134][ T8940] netlink: 'syz.0.790': attribute type 2 has an invalid length. [ 207.668290][ T8944] netlink: 'syz.0.790': attribute type 2 has an invalid length. [ 207.694327][ T8948] openvswitch: netlink: Actions may not be safe on all matching packets [ 207.831957][ T8923] wg0 speed is unknown, defaulting to 1000 [ 208.191515][ T8962] gre1: entered promiscuous mode [ 208.191538][ T8962] gre1: entered allmulticast mode [ 208.212610][ T8964] netlink: 'syz.4.796': attribute type 1 has an invalid length. [ 208.304614][ T8968] bond6: (slave bridge1): making interface the new active one [ 208.305290][ T8968] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 208.338075][ T8970] netlink: 16 bytes leftover after parsing attributes in process `syz.1.797'. [ 208.753705][ T8983] netlink: 6 bytes leftover after parsing attributes in process `syz.3.800'. [ 208.756063][ T8983] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.935514][ T8993] xt_cgroup: invalid path, errno=-2 [ 208.978633][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.062618][ T9002] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.062854][ T9002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.064477][ T9002] bridge0: entered promiscuous mode [ 209.064533][ T9002] bridge0: entered allmulticast mode [ 209.258617][ T8987] sctp: [Deprecated]: syz.1.803 (pid 8987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.258617][ T8987] Use struct sctp_sack_info instead [ 212.001414][ T9003] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 212.001571][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 212.001640][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.804'. [ 212.144827][ T9044] netlink: 56 bytes leftover after parsing attributes in process `syz.1.814'. [ 212.164004][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 212.189611][ T9046] netlink: 'syz.3.815': attribute type 15 has an invalid length. [ 212.216455][ T9044] team0: Port device team_slave_0 removed [ 212.221208][ T9051] netlink: 'syz.0.818': attribute type 6 has an invalid length. [ 212.221531][ T9051] netlink: 'syz.0.818': attribute type 6 has an invalid length. [ 212.221696][ T9051] netlink: 'syz.0.818': attribute type 6 has an invalid length. [ 212.221857][ T9051] netlink: 'syz.0.818': attribute type 6 has an invalid length. [ 212.223257][ T9051] netlink: 'syz.0.818': attribute type 6 has an invalid length. [ 212.223433][ T9051] netlink: 'syz.0.818': attribute type 6 has an invalid length. [ 212.223589][ T9051] netlink: 'syz.0.818': attribute type 6 has an invalid length. [ 212.223742][ T9051] netlink: 'syz.0.818': attribute type 6 has an invalid length. [ 212.223902][ T9051] netlink: 'syz.0.818': attribute type 6 has an invalid length. [ 212.442721][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 212.442757][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 212.444617][ T9065] netlink: 148 bytes leftover after parsing attributes in process `syz.4.820'. [ 212.444661][ T9065] netlink: 47 bytes leftover after parsing attributes in process `syz.4.820'. [ 212.658688][ T9075] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.702081][ T9082] bond4: (slave gretap2): making interface the new active one [ 212.704662][ T9082] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 212.727907][ T9085] rdma_rxe: rxe_newlink: failed to add wg0 [ 212.729031][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 212.796360][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 213.036258][ T9107] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.057949][ T9110] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 213.135497][ T9118] bond0: (slave dummy0): Releasing backup interface [ 213.178828][ T9123] syzkaller0: entered promiscuous mode [ 213.178850][ T9123] syzkaller0: entered allmulticast mode [ 213.218051][ T9123] xfrm1: entered promiscuous mode [ 213.218072][ T9123] xfrm1: entered allmulticast mode [ 213.398508][ T9144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.399037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.429697][ T9146] x_tables: duplicate underflow at hook 1 [ 213.437326][ T9146] bond0: entered allmulticast mode [ 213.437457][ T9146] bond_slave_0: entered allmulticast mode [ 213.437474][ T9146] bond_slave_1: entered allmulticast mode [ 213.491409][ T6862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.550319][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.747076][ T9167] xt_hashlimit: size too large, truncated to 1048576 [ 213.747097][ T9167] xt_hashlimit: max too large, truncated to 1048576 [ 213.747297][ T9167] xt_hashlimit: invalid rate [ 213.790008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.791799][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.858118][ T9173] openvswitch: netlink: Actions may not be safe on all matching packets [ 214.050346][ T9182] 8021q: VLANs not supported on ip6_vti0 [ 214.094304][ T9182] geneve3: entered promiscuous mode [ 214.297230][ T9199] openvswitch: netlink: Unknown key attributes 2 [ 214.397461][ T9206] xt_limit: Overflow, try lower: 536871034/127 [ 214.503235][ T9217] netlink: 'syz.1.864': attribute type 11 has an invalid length. [ 215.287637][ T9278] xt_policy: too many policy elements [ 215.525279][ T9295] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 215.708041][ T9306] !;: entered promiscuous mode [ 215.981569][ T9328] bond5: entered promiscuous mode [ 215.981644][ T9328] bond5: entered allmulticast mode [ 215.982102][ T9328] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.064288][ T9331] bond6: (slave bridge3): making interface the new active one [ 216.064650][ T9331] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 216.268350][ T9339] team0: Port device team_slave_0 removed [ 216.475925][ T9351] syzkaller1: entered promiscuous mode [ 216.475947][ T9351] syzkaller1: entered allmulticast mode [ 216.608937][ T9357] tc_dump_action: action bad kind [ 217.136318][ T9396] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 217.217141][ T9397] __nla_validate_parse: 42 callbacks suppressed [ 217.217161][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 217.413343][ T5842] wg0 speed is unknown, defaulting to 1000 [ 217.443533][ T9394] netlink: 76 bytes leftover after parsing attributes in process `syz.3.915'. [ 217.462729][ T9403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.917'. [ 217.463235][ T9403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.917'. [ 217.704022][ T9412] netlink: 36 bytes leftover after parsing attributes in process `syz.4.919'. [ 217.827072][ T9420] netlink: 60 bytes leftover after parsing attributes in process `syz.3.921'. [ 217.838420][ T9420] netlink: 60 bytes leftover after parsing attributes in process `syz.3.921'. [ 217.927514][ T9423] validate_nla: 68 callbacks suppressed [ 217.927535][ T9423] netlink: 'syz.1.923': attribute type 1 has an invalid length. [ 217.966769][ T9423] bond7: entered promiscuous mode [ 217.967235][ T9423] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.028230][ T9423] 8021q: adding VLAN 0 to HW filter on device bond7 [ 218.028654][ T9423] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 218.028672][ T9423] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 218.066269][ T9423] bond7: (slave xfrm1): making interface the new active one [ 218.066294][ T9423] xfrm1: entered promiscuous mode [ 218.085806][ T9423] xfrm1: left promiscuous mode [ 218.126740][ T9431] FAULT_INJECTION: forcing a failure. [ 218.126740][ T9431] name failslab, interval 1, probability 0, space 0, times 0 [ 218.126769][ T9431] CPU: 0 UID: 0 PID: 9431 Comm: syz.3.925 Not tainted syzkaller #0 PREEMPT(full) [ 218.126789][ T9431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 218.126800][ T9431] Call Trace: [ 218.126807][ T9431] [ 218.126815][ T9431] dump_stack_lvl+0xe8/0x150 [ 218.126849][ T9431] should_fail_ex+0x3eb/0x540 [ 218.126883][ T9431] should_failslab+0xa8/0x100 [ 218.126911][ T9431] __kmalloc_cache_noprof+0x9e/0x600 [ 218.126934][ T9431] ? __kmalloc_cache_noprof+0x148/0x600 [ 218.126955][ T9431] ? sctp_add_bind_addr+0x8c/0x370 [ 218.126979][ T9431] ? sctp_add_bind_addr+0x8c/0x370 [ 218.127010][ T9431] sctp_add_bind_addr+0x8c/0x370 [ 218.127040][ T9431] sctp_copy_local_addr_list+0x31a/0x4e0 [ 218.127065][ T9431] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 218.127090][ T9431] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 218.127119][ T9431] ? sctp_v4_is_any+0x35/0x60 [ 218.127144][ T9431] ? sctp_copy_one_addr+0x93/0x360 [ 218.127171][ T9431] sctp_bind_addr_copy+0xb3/0x3c0 [ 218.127196][ T9431] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 218.127221][ T9431] sctp_connect_new_asoc+0x2ff/0x6b0 [ 218.127244][ T9431] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 218.127262][ T9431] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 218.127285][ T9431] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 218.127311][ T9431] ? security_sctp_bind_connect+0x7e/0x2c0 [ 218.127338][ T9431] sctp_sendmsg+0x159b/0x2d00 [ 218.127378][ T9431] ? kstrtouint+0x6e/0xe0 [ 218.127407][ T9431] ? __pfx_sctp_sendmsg+0x10/0x10 [ 218.127433][ T9431] ? lock_acquire+0x115/0x350 [ 218.127477][ T9431] ? aa_sock_msg_perm+0xf5/0x210 [ 218.127504][ T9431] ? sock_rps_record_flow+0x19/0x350 [ 218.127530][ T9431] ? inet_sendmsg+0x298/0x320 [ 218.127548][ T9431] ? apparmor_socket_sendmsg+0x98/0x360 [ 218.127574][ T9431] ? __pfx_inet_sendmsg+0x10/0x10 [ 218.127593][ T9431] sock_sendmsg_nosec+0x10f/0x190 [ 218.127623][ T9431] __sys_sendto+0x408/0x5a0 [ 218.127640][ T9431] ? ksys_write+0x1e6/0x270 [ 218.127669][ T9431] ? __pfx___sys_sendto+0x10/0x10 [ 218.127685][ T9431] ? __mutex_unlock_slowpath+0x731/0x900 [ 218.127729][ T9431] ? fdget+0x1ac/0x250 [ 218.127769][ T9431] ? __pfx_ksys_write+0x10/0x10 [ 218.127799][ T9431] __x64_sys_sendto+0xde/0x100 [ 218.127819][ T9431] do_syscall_64+0x16a/0x530 [ 218.127843][ T9431] ? trace_irq_disable+0x3b/0x140 [ 218.127878][ T9431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.127896][ T9431] ? clear_bhb_loop+0x70/0xc0 [ 218.127919][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.127935][ T9431] RIP: 0033:0x7f4a7dda94d9 [ 218.127951][ T9431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.127966][ T9431] RSP: 002b:00007f4a7bff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 218.127984][ T9431] RAX: ffffffffffffffda RBX: 00007f4a7e025fa0 RCX: 00007f4a7dda94d9 [ 218.127996][ T9431] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 218.128007][ T9431] RBP: 00007f4a7bff6090 R08: 0000200000000300 R09: 000000000000001c [ 218.128019][ T9431] R10: 0000000000040811 R11: 0000000000000246 R12: 0000000000000002 [ 218.128030][ T9431] R13: 00007f4a7e026038 R14: 00007f4a7e025fa0 R15: 00007ffce0b9dd38 [ 218.128060][ T9431] [ 218.673978][ T9447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.929'. [ 218.752524][ T5842] net_ratelimit: 20 callbacks suppressed [ 218.752545][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.804018][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 218.806030][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.933'. [ 218.938859][ T9471] netlink: 'syz.1.934': attribute type 11 has an invalid length. [ 218.972312][ T9470] ip_tables: iptables: counters copy to user failed while replacing table [ 218.990716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.999641][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.052602][ T6857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.155836][ T9481] FAULT_INJECTION: forcing a failure. [ 219.155836][ T9481] name failslab, interval 1, probability 0, space 0, times 0 [ 219.155864][ T9481] CPU: 1 UID: 0 PID: 9481 Comm: syz.3.936 Not tainted syzkaller #0 PREEMPT(full) [ 219.155883][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 219.155893][ T9481] Call Trace: [ 219.155900][ T9481] [ 219.155908][ T9481] dump_stack_lvl+0xe8/0x150 [ 219.155944][ T9481] should_fail_ex+0x3eb/0x540 [ 219.155971][ T9481] should_failslab+0xa8/0x100 [ 219.156002][ T9481] __kmalloc_cache_noprof+0x9e/0x600 [ 219.156026][ T9481] ? __kmalloc_cache_noprof+0x148/0x600 [ 219.156047][ T9481] ? sctp_add_bind_addr+0x8c/0x370 [ 219.156070][ T9481] ? sctp_add_bind_addr+0x8c/0x370 [ 219.156099][ T9481] sctp_add_bind_addr+0x8c/0x370 [ 219.156131][ T9481] sctp_copy_local_addr_list+0x31a/0x4e0 [ 219.156158][ T9481] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 219.156183][ T9481] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 219.156211][ T9481] ? sctp_v4_is_any+0x35/0x60 [ 219.156235][ T9481] ? sctp_copy_one_addr+0x93/0x360 [ 219.156262][ T9481] sctp_bind_addr_copy+0xb3/0x3c0 [ 219.156291][ T9481] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 219.156312][ T9481] sctp_connect_new_asoc+0x2ff/0x6b0 [ 219.156334][ T9481] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 219.156354][ T9481] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 219.156375][ T9481] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 219.156400][ T9481] ? security_sctp_bind_connect+0x7e/0x2c0 [ 219.156426][ T9481] sctp_sendmsg+0x159b/0x2d00 [ 219.156466][ T9481] ? kstrtouint+0x6e/0xe0 [ 219.156493][ T9481] ? __pfx_sctp_sendmsg+0x10/0x10 [ 219.156519][ T9481] ? lock_acquire+0x115/0x350 [ 219.156564][ T9481] ? aa_sock_msg_perm+0xf5/0x210 [ 219.156591][ T9481] ? sock_rps_record_flow+0x19/0x350 [ 219.156615][ T9481] ? inet_sendmsg+0x298/0x320 [ 219.156634][ T9481] ? apparmor_socket_sendmsg+0x98/0x360 [ 219.156660][ T9481] ? __pfx_inet_sendmsg+0x10/0x10 [ 219.156680][ T9481] sock_sendmsg_nosec+0x10f/0x190 [ 219.156711][ T9481] __sys_sendto+0x408/0x5a0 [ 219.156729][ T9481] ? ksys_write+0x1e6/0x270 [ 219.156757][ T9481] ? __pfx___sys_sendto+0x10/0x10 [ 219.156774][ T9481] ? __mutex_unlock_slowpath+0x731/0x900 [ 219.156851][ T9481] ? fdget+0x1ac/0x250 [ 219.156888][ T9481] ? __pfx_ksys_write+0x10/0x10 [ 219.156919][ T9481] __x64_sys_sendto+0xde/0x100 [ 219.156943][ T9481] do_syscall_64+0x16a/0x530 [ 219.156967][ T9481] ? trace_irq_disable+0x3b/0x140 [ 219.156992][ T9481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.157011][ T9481] ? clear_bhb_loop+0x70/0xc0 [ 219.157033][ T9481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.157050][ T9481] RIP: 0033:0x7f4a7dda94d9 [ 219.157068][ T9481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.157081][ T9481] RSP: 002b:00007f4a7bff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 219.157102][ T9481] RAX: ffffffffffffffda RBX: 00007f4a7e025fa0 RCX: 00007f4a7dda94d9 [ 219.157114][ T9481] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 219.157126][ T9481] RBP: 00007f4a7bff6090 R08: 0000200000000300 R09: 000000000000001c [ 219.157138][ T9481] R10: 0000000000040811 R11: 0000000000000246 R12: 0000000000000002 [ 219.157149][ T9481] R13: 00007f4a7e026038 R14: 00007f4a7e025fa0 R15: 00007ffce0b9dd38 [ 219.157181][ T9481] [ 219.695395][ T9499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.695660][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.766745][ T9506] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.796053][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.845351][ T9511] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 220.380968][ T9551] x_tables: ip_tables: osf match: only valid for protocol 6 [ 220.462049][ T9555] netlink: 'syz.1.953': attribute type 142 has an invalid length. [ 221.021572][ T9591] netlink: 'syz.2.964': attribute type 8 has an invalid length. [ 221.268698][ T9607] FAULT_INJECTION: forcing a failure. [ 221.268698][ T9607] name failslab, interval 1, probability 0, space 0, times 0 [ 221.268727][ T9607] CPU: 1 UID: 0 PID: 9607 Comm: syz.1.969 Not tainted syzkaller #0 PREEMPT(full) [ 221.268747][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 221.268757][ T9607] Call Trace: [ 221.268764][ T9607] [ 221.268772][ T9607] dump_stack_lvl+0xe8/0x150 [ 221.268807][ T9607] should_fail_ex+0x3eb/0x540 [ 221.268836][ T9607] should_failslab+0xa8/0x100 [ 221.268866][ T9607] __kmalloc_cache_noprof+0x9e/0x600 [ 221.268901][ T9607] ? __kmalloc_cache_noprof+0x148/0x600 [ 221.268923][ T9607] ? sctp_add_bind_addr+0x8c/0x370 [ 221.268946][ T9607] ? sctp_add_bind_addr+0x8c/0x370 [ 221.268977][ T9607] sctp_add_bind_addr+0x8c/0x370 [ 221.269004][ T9607] sctp_copy_local_addr_list+0x31a/0x4e0 [ 221.269034][ T9607] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 221.269063][ T9607] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 221.269097][ T9607] ? sctp_v4_is_any+0x35/0x60 [ 221.269121][ T9607] ? sctp_copy_one_addr+0x93/0x360 [ 221.269147][ T9607] sctp_bind_addr_copy+0xb3/0x3c0 [ 221.269172][ T9607] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 221.269197][ T9607] sctp_connect_new_asoc+0x2ff/0x6b0 [ 221.269220][ T9607] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 221.269241][ T9607] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 221.269265][ T9607] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 221.269289][ T9607] ? security_sctp_bind_connect+0x7e/0x2c0 [ 221.269315][ T9607] sctp_sendmsg+0x159b/0x2d00 [ 221.269357][ T9607] ? kstrtouint+0x6e/0xe0 [ 221.269386][ T9607] ? __pfx_sctp_sendmsg+0x10/0x10 [ 221.269412][ T9607] ? lock_acquire+0x115/0x350 [ 221.269458][ T9607] ? aa_sock_msg_perm+0xf5/0x210 [ 221.269485][ T9607] ? sock_rps_record_flow+0x19/0x350 [ 221.269509][ T9607] ? inet_sendmsg+0x298/0x320 [ 221.269527][ T9607] ? apparmor_socket_sendmsg+0x98/0x360 [ 221.269554][ T9607] ? __pfx_inet_sendmsg+0x10/0x10 [ 221.269573][ T9607] sock_sendmsg_nosec+0x10f/0x190 [ 221.269602][ T9607] __sys_sendto+0x408/0x5a0 [ 221.269621][ T9607] ? ksys_write+0x1e6/0x270 [ 221.269658][ T9607] ? __pfx___sys_sendto+0x10/0x10 [ 221.269675][ T9607] ? __mutex_unlock_slowpath+0x731/0x900 [ 221.269716][ T9607] ? fdget+0x1ac/0x250 [ 221.269747][ T9607] ? __pfx_ksys_write+0x10/0x10 [ 221.269775][ T9607] __x64_sys_sendto+0xde/0x100 [ 221.269797][ T9607] do_syscall_64+0x16a/0x530 [ 221.269819][ T9607] ? trace_irq_disable+0x3b/0x140 [ 221.269842][ T9607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.269861][ T9607] ? clear_bhb_loop+0x70/0xc0 [ 221.269883][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.269900][ T9607] RIP: 0033:0x7f930f9a94d9 [ 221.269916][ T9607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.269930][ T9607] RSP: 002b:00007f931085d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 221.269949][ T9607] RAX: ffffffffffffffda RBX: 00007f930fc25fa0 RCX: 00007f930f9a94d9 [ 221.269962][ T9607] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 221.269973][ T9607] RBP: 00007f931085d090 R08: 0000200000000300 R09: 000000000000001c [ 221.269985][ T9607] R10: 0000000000040811 R11: 0000000000000246 R12: 0000000000000002 [ 221.269996][ T9607] R13: 00007f930fc26038 R14: 00007f930fc25fa0 R15: 00007ffd17649168 [ 221.270029][ T9607] [ 221.483521][ T9613] syzkaller1: entered promiscuous mode [ 221.483541][ T9613] syzkaller1: entered allmulticast mode [ 221.491758][ T9613] netlink: 'syz.2.973': attribute type 2 has an invalid length. [ 221.524716][ T9618] gretap0: entered promiscuous mode [ 221.967472][ T9636] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 222.138668][ T9660] netlink: 'syz.1.983': attribute type 12 has an invalid length. [ 222.240753][ T9664] __nla_validate_parse: 13 callbacks suppressed [ 222.240772][ T9664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.983'. [ 222.352616][ T9667] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 222.586294][ T9665] netlink: 'syz.1.983': attribute type 12 has an invalid length. [ 222.851935][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 223.157217][ T9707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.994'. [ 223.288054][ T9713] netlink: 36 bytes leftover after parsing attributes in process `syz.4.994'. [ 223.638357][ T9733] sctp: [Deprecated]: syz.3.1001 (pid 9733) Use of int in max_burst socket option. [ 223.638357][ T9733] Use struct sctp_assoc_value instead [ 223.795828][ T11] net_ratelimit: 23 callbacks suppressed [ 223.795847][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.911051][ T9751] netlink: 'syz.2.1004': attribute type 1 has an invalid length. [ 223.951304][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.105318][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1004'. [ 224.146839][ T9751] bond3: (slave bridge1): making interface the new active one [ 224.158797][ T9751] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 224.189926][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.190281][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.316083][ T9759] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1006'. [ 224.495145][ T9736] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1002'. [ 224.607910][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 224.682302][ T6857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.845088][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 224.933261][ T9794] tunl0: entered promiscuous mode [ 224.934581][ T9794] netlink: 'syz.1.1011': attribute type 4 has an invalid length. [ 224.934593][ T9794] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1011'. [ 224.992476][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.229891][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.230548][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.810269][ T6857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.030959][ T5842] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.142684][ T9772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.147022][ T9792] netlink: 'syz.1.1011': attribute type 9 has an invalid length. [ 227.173285][ T9761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.428373][ T9815] netlink: 'syz.0.1018': attribute type 1 has an invalid length. [ 227.536481][ T9823] FAULT_INJECTION: forcing a failure. [ 227.536481][ T9823] name failslab, interval 1, probability 0, space 0, times 0 [ 227.536512][ T9823] CPU: 1 UID: 0 PID: 9823 Comm: syz.2.1020 Not tainted syzkaller #0 PREEMPT(full) [ 227.536531][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 227.536542][ T9823] Call Trace: [ 227.536549][ T9823] [ 227.536557][ T9823] dump_stack_lvl+0xe8/0x150 [ 227.536591][ T9823] should_fail_ex+0x3eb/0x540 [ 227.536617][ T9823] should_failslab+0xa8/0x100 [ 227.536649][ T9823] __kmalloc_cache_noprof+0x9e/0x600 [ 227.536671][ T9823] ? __kmalloc_cache_noprof+0x148/0x600 [ 227.536690][ T9823] ? sctp_add_bind_addr+0x8c/0x370 [ 227.536713][ T9823] ? sctp_add_bind_addr+0x8c/0x370 [ 227.536739][ T9823] sctp_add_bind_addr+0x8c/0x370 [ 227.536775][ T9823] sctp_copy_local_addr_list+0x31a/0x4e0 [ 227.536803][ T9823] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 227.536827][ T9823] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 227.536855][ T9823] ? sctp_v4_is_any+0x35/0x60 [ 227.536877][ T9823] ? sctp_copy_one_addr+0x93/0x360 [ 227.536902][ T9823] sctp_bind_addr_copy+0xb3/0x3c0 [ 227.536927][ T9823] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 227.536962][ T9823] sctp_connect_new_asoc+0x2ff/0x6b0 [ 227.536992][ T9823] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 227.537012][ T9823] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 227.537035][ T9823] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 227.537061][ T9823] ? security_sctp_bind_connect+0x7e/0x2c0 [ 227.537087][ T9823] sctp_sendmsg+0x159b/0x2d00 [ 227.537125][ T9823] ? kstrtouint+0x6e/0xe0 [ 227.537156][ T9823] ? __pfx_sctp_sendmsg+0x10/0x10 [ 227.537183][ T9823] ? lock_acquire+0x115/0x350 [ 227.537226][ T9823] ? aa_sock_msg_perm+0xf5/0x210 [ 227.537260][ T9823] ? sock_rps_record_flow+0x19/0x350 [ 227.537285][ T9823] ? inet_sendmsg+0x298/0x320 [ 227.537304][ T9823] ? apparmor_socket_sendmsg+0x98/0x360 [ 227.537331][ T9823] ? __pfx_inet_sendmsg+0x10/0x10 [ 227.537355][ T9823] sock_sendmsg_nosec+0x10f/0x190 [ 227.537385][ T9823] __sys_sendto+0x408/0x5a0 [ 227.537403][ T9823] ? ksys_write+0x1e6/0x270 [ 227.537431][ T9823] ? __pfx___sys_sendto+0x10/0x10 [ 227.537448][ T9823] ? __mutex_unlock_slowpath+0x731/0x900 [ 227.537486][ T9823] ? fdget+0x1ac/0x250 [ 227.537522][ T9823] ? __pfx_ksys_write+0x10/0x10 [ 227.537553][ T9823] __x64_sys_sendto+0xde/0x100 [ 227.537576][ T9823] do_syscall_64+0x16a/0x530 [ 227.537601][ T9823] ? trace_irq_disable+0x3b/0x140 [ 227.537626][ T9823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.537645][ T9823] ? clear_bhb_loop+0x70/0xc0 [ 227.537668][ T9823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.537686][ T9823] RIP: 0033:0x7fee725a94d9 [ 227.537704][ T9823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.537720][ T9823] RSP: 002b:00007fee73428028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 227.537744][ T9823] RAX: ffffffffffffffda RBX: 00007fee72825fa0 RCX: 00007fee725a94d9 [ 227.537758][ T9823] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 227.537770][ T9823] RBP: 00007fee73428090 R08: 0000200000000300 R09: 000000000000001c [ 227.537788][ T9823] R10: 0000000000040811 R11: 0000000000000246 R12: 0000000000000002 [ 227.537799][ T9823] R13: 00007fee72826038 R14: 00007fee72825fa0 R15: 00007ffc7593c168 [ 227.537832][ T9823] [ 228.012745][ T9844] syzkaller0: entered promiscuous mode [ 228.012768][ T9844] syzkaller0: entered allmulticast mode [ 228.210328][ T9864] __nla_validate_parse: 1 callbacks suppressed [ 228.210349][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1029'. [ 228.603151][ T9886] FAULT_INJECTION: forcing a failure. [ 228.603151][ T9886] name failslab, interval 1, probability 0, space 0, times 0 [ 228.603172][ T9886] CPU: 1 UID: 0 PID: 9886 Comm: syz.2.1034 Not tainted syzkaller #0 PREEMPT(full) [ 228.603184][ T9886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 228.603191][ T9886] Call Trace: [ 228.603196][ T9886] [ 228.603200][ T9886] dump_stack_lvl+0xe8/0x150 [ 228.603224][ T9886] should_fail_ex+0x3eb/0x540 [ 228.603240][ T9886] should_failslab+0xa8/0x100 [ 228.603262][ T9886] __kmalloc_cache_noprof+0x9e/0x600 [ 228.603283][ T9886] ? __kmalloc_cache_noprof+0x148/0x600 [ 228.603303][ T9886] ? sctp_add_bind_addr+0x8c/0x370 [ 228.603326][ T9886] ? sctp_add_bind_addr+0x8c/0x370 [ 228.603354][ T9886] sctp_add_bind_addr+0x8c/0x370 [ 228.603382][ T9886] sctp_copy_local_addr_list+0x31a/0x4e0 [ 228.603403][ T9886] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 228.603418][ T9886] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 228.603435][ T9886] ? sctp_v4_is_any+0x35/0x60 [ 228.603449][ T9886] ? sctp_copy_one_addr+0x93/0x360 [ 228.603465][ T9886] sctp_bind_addr_copy+0xb3/0x3c0 [ 228.603480][ T9886] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 228.603495][ T9886] sctp_connect_new_asoc+0x2ff/0x6b0 [ 228.603508][ T9886] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 228.603524][ T9886] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 228.603542][ T9886] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 228.603558][ T9886] ? security_sctp_bind_connect+0x7e/0x2c0 [ 228.603574][ T9886] sctp_sendmsg+0x159b/0x2d00 [ 228.603597][ T9886] ? kstrtouint+0x6e/0xe0 [ 228.603615][ T9886] ? __pfx_sctp_sendmsg+0x10/0x10 [ 228.603631][ T9886] ? lock_acquire+0x115/0x350 [ 228.603655][ T9886] ? aa_sock_msg_perm+0xf5/0x210 [ 228.603671][ T9886] ? sock_rps_record_flow+0x19/0x350 [ 228.603686][ T9886] ? inet_sendmsg+0x298/0x320 [ 228.603696][ T9886] ? apparmor_socket_sendmsg+0x98/0x360 [ 228.603712][ T9886] ? __pfx_inet_sendmsg+0x10/0x10 [ 228.603726][ T9886] sock_sendmsg_nosec+0x10f/0x190 [ 228.603754][ T9886] __sys_sendto+0x408/0x5a0 [ 228.603772][ T9886] ? ksys_write+0x1e6/0x270 [ 228.603799][ T9886] ? __pfx___sys_sendto+0x10/0x10 [ 228.603813][ T9886] ? __mutex_unlock_slowpath+0x731/0x900 [ 228.603836][ T9886] ? fdget+0x1ac/0x250 [ 228.603857][ T9886] ? __pfx_ksys_write+0x10/0x10 [ 228.603875][ T9886] __x64_sys_sendto+0xde/0x100 [ 228.603887][ T9886] do_syscall_64+0x16a/0x530 [ 228.603902][ T9886] ? trace_irq_disable+0x3b/0x140 [ 228.603917][ T9886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.603928][ T9886] ? clear_bhb_loop+0x70/0xc0 [ 228.603941][ T9886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.603951][ T9886] RIP: 0033:0x7fee725a94d9 [ 228.603962][ T9886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.603971][ T9886] RSP: 002b:00007fee73428028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 228.603983][ T9886] RAX: ffffffffffffffda RBX: 00007fee72825fa0 RCX: 00007fee725a94d9 [ 228.603991][ T9886] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 228.603997][ T9886] RBP: 00007fee73428090 R08: 0000200000000300 R09: 000000000000001c [ 228.604004][ T9886] R10: 0000000000040811 R11: 0000000000000246 R12: 0000000000000002 [ 228.604011][ T9886] R13: 00007fee72826038 R14: 00007fee72825fa0 R15: 00007ffc7593c168 [ 228.604035][ T9886] [ 229.150687][ T5752] net_ratelimit: 13 callbacks suppressed [ 229.150707][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.166030][ T6854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.400113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.400741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.551526][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.870327][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.191623][ T5752] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.260511][ T6852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.430003][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.430327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.103944][ T9862] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.143852][ T9851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.218567][ T9895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1037'. [ 231.218593][ T9895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1037'. [ 231.246211][ T9895] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1037'. [ 231.303122][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 231.571322][ T9918] FAULT_INJECTION: forcing a failure. [ 231.571322][ T9918] name failslab, interval 1, probability 0, space 0, times 0 [ 231.571350][ T9918] CPU: 0 UID: 0 PID: 9918 Comm: syz.1.1045 Not tainted syzkaller #0 PREEMPT(full) [ 231.571374][ T9918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 231.571384][ T9918] Call Trace: [ 231.571391][ T9918] [ 231.571399][ T9918] dump_stack_lvl+0xe8/0x150 [ 231.571434][ T9918] should_fail_ex+0x3eb/0x540 [ 231.571462][ T9918] should_failslab+0xa8/0x100 [ 231.571493][ T9918] __kmalloc_cache_noprof+0x9e/0x600 [ 231.571517][ T9918] ? __kmalloc_cache_noprof+0x148/0x600 [ 231.571539][ T9918] ? sctp_add_bind_addr+0x8c/0x370 [ 231.571561][ T9918] ? sctp_add_bind_addr+0x8c/0x370 [ 231.571589][ T9918] sctp_add_bind_addr+0x8c/0x370 [ 231.571617][ T9918] sctp_copy_local_addr_list+0x31a/0x4e0 [ 231.571643][ T9918] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 231.571665][ T9918] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 231.571691][ T9918] ? sctp_v4_is_any+0x35/0x60 [ 231.571712][ T9918] ? sctp_copy_one_addr+0x93/0x360 [ 231.571739][ T9918] sctp_bind_addr_copy+0xb3/0x3c0 [ 231.571773][ T9918] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 231.571798][ T9918] sctp_connect_new_asoc+0x2ff/0x6b0 [ 231.571823][ T9918] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 231.571841][ T9918] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 231.571863][ T9918] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 231.571889][ T9918] ? security_sctp_bind_connect+0x7e/0x2c0 [ 231.571916][ T9918] sctp_sendmsg+0x159b/0x2d00 [ 231.571956][ T9918] ? kstrtouint+0x6e/0xe0 [ 231.571984][ T9918] ? __pfx_sctp_sendmsg+0x10/0x10 [ 231.572014][ T9918] ? lock_acquire+0x115/0x350 [ 231.572063][ T9918] ? aa_sock_msg_perm+0xf5/0x210 [ 231.572092][ T9918] ? sock_rps_record_flow+0x19/0x350 [ 231.572117][ T9918] ? inet_sendmsg+0x298/0x320 [ 231.572135][ T9918] ? apparmor_socket_sendmsg+0x98/0x360 [ 231.572162][ T9918] ? __pfx_inet_sendmsg+0x10/0x10 [ 231.572182][ T9918] sock_sendmsg_nosec+0x10f/0x190 [ 231.572211][ T9918] __sys_sendto+0x408/0x5a0 [ 231.572229][ T9918] ? ksys_write+0x1e6/0x270 [ 231.572257][ T9918] ? __pfx___sys_sendto+0x10/0x10 [ 231.572273][ T9918] ? __mutex_unlock_slowpath+0x731/0x900 [ 231.572313][ T9918] ? fdget+0x1ac/0x250 [ 231.572347][ T9918] ? __pfx_ksys_write+0x10/0x10 [ 231.572378][ T9918] __x64_sys_sendto+0xde/0x100 [ 231.572405][ T9918] do_syscall_64+0x16a/0x530 [ 231.572428][ T9918] ? trace_irq_disable+0x3b/0x140 [ 231.572452][ T9918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.572468][ T9918] ? clear_bhb_loop+0x70/0xc0 [ 231.572492][ T9918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.572511][ T9918] RIP: 0033:0x7f930f9a94d9 [ 231.572529][ T9918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.572545][ T9918] RSP: 002b:00007f931085d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 231.572566][ T9918] RAX: ffffffffffffffda RBX: 00007f930fc25fa0 RCX: 00007f930f9a94d9 [ 231.572580][ T9918] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 231.572591][ T9918] RBP: 00007f931085d090 R08: 0000200000000300 R09: 000000000000001c [ 231.572603][ T9918] R10: 0000000000040811 R11: 0000000000000246 R12: 0000000000000002 [ 231.572614][ T9918] R13: 00007f930fc26038 R14: 00007f930fc25fa0 R15: 00007ffd17649168 [ 231.572648][ T9918] [ 231.576004][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 231.684949][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 231.870417][ T9919] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1047'. [ 232.159579][ T9936] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.369066][ T9955] netlink: 'syz.2.1058': attribute type 1 has an invalid length. [ 232.431568][ T9955] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.455457][ T9955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 232.479122][ T9963] FAULT_INJECTION: forcing a failure. [ 232.479122][ T9963] name failslab, interval 1, probability 0, space 0, times 0 [ 232.479152][ T9963] CPU: 0 UID: 0 PID: 9963 Comm: syz.4.1060 Not tainted syzkaller #0 PREEMPT(full) [ 232.479173][ T9963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 232.479183][ T9963] Call Trace: [ 232.479190][ T9963] [ 232.479198][ T9963] dump_stack_lvl+0xe8/0x150 [ 232.479244][ T9963] should_fail_ex+0x3eb/0x540 [ 232.479272][ T9963] should_failslab+0xa8/0x100 [ 232.479303][ T9963] __kmalloc_cache_noprof+0x9e/0x600 [ 232.479328][ T9963] ? __kmalloc_cache_noprof+0x148/0x600 [ 232.479349][ T9963] ? sctp_add_bind_addr+0x8c/0x370 [ 232.479373][ T9963] ? sctp_add_bind_addr+0x8c/0x370 [ 232.479400][ T9963] sctp_add_bind_addr+0x8c/0x370 [ 232.479425][ T9963] sctp_copy_local_addr_list+0x31a/0x4e0 [ 232.479453][ T9963] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 232.479478][ T9963] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 232.479505][ T9963] ? sctp_v4_is_any+0x35/0x60 [ 232.479531][ T9963] ? sctp_copy_one_addr+0x93/0x360 [ 232.479557][ T9963] sctp_bind_addr_copy+0xb3/0x3c0 [ 232.479581][ T9963] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 232.479607][ T9963] sctp_connect_new_asoc+0x2ff/0x6b0 [ 232.479629][ T9963] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 232.479649][ T9963] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 232.479671][ T9963] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 232.479702][ T9963] ? security_sctp_bind_connect+0x7e/0x2c0 [ 232.479728][ T9963] sctp_sendmsg+0x159b/0x2d00 [ 232.479764][ T9963] ? kstrtouint+0x6e/0xe0 [ 232.479792][ T9963] ? __pfx_sctp_sendmsg+0x10/0x10 [ 232.479816][ T9963] ? lock_acquire+0x115/0x350 [ 232.479859][ T9963] ? aa_sock_msg_perm+0xf5/0x210 [ 232.479885][ T9963] ? sock_rps_record_flow+0x19/0x350 [ 232.479911][ T9963] ? inet_sendmsg+0x298/0x320 [ 232.479930][ T9963] ? apparmor_socket_sendmsg+0x98/0x360 [ 232.479956][ T9963] ? __pfx_inet_sendmsg+0x10/0x10 [ 232.479976][ T9963] sock_sendmsg_nosec+0x10f/0x190 [ 232.480005][ T9963] __sys_sendto+0x408/0x5a0 [ 232.480024][ T9963] ? ksys_write+0x1e6/0x270 [ 232.480054][ T9963] ? __pfx___sys_sendto+0x10/0x10 [ 232.480071][ T9963] ? __mutex_unlock_slowpath+0x731/0x900 [ 232.480107][ T9963] ? fdget+0x1ac/0x250 [ 232.480142][ T9963] ? __pfx_ksys_write+0x10/0x10 [ 232.480170][ T9963] __x64_sys_sendto+0xde/0x100 [ 232.480192][ T9963] do_syscall_64+0x16a/0x530 [ 232.480215][ T9963] ? trace_irq_disable+0x3b/0x140 [ 232.480246][ T9963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.480265][ T9963] ? clear_bhb_loop+0x70/0xc0 [ 232.480287][ T9963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.480305][ T9963] RIP: 0033:0x7f41165a94d9 [ 232.480323][ T9963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.480338][ T9963] RSP: 002b:00007f41174b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 232.480358][ T9963] RAX: ffffffffffffffda RBX: 00007f4116825fa0 RCX: 00007f41165a94d9 [ 232.480372][ T9963] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 232.480383][ T9963] RBP: 00007f41174b2090 R08: 0000200000000300 R09: 000000000000001c [ 232.480395][ T9963] R10: 0000000000040811 R11: 0000000000000246 R12: 0000000000000002 [ 232.480406][ T9963] R13: 00007f4116826038 R14: 00007f4116825fa0 R15: 00007fffe8973e48 [ 232.480439][ T9963] [ 232.587414][ T9955] bond4: (slave bridge2): Enslaving as an active interface with a down link [ 232.878729][ T9977] TCP: TCP_TX_DELAY enabled [ 232.965395][ T9979] pim6reg: entered allmulticast mode [ 233.013422][ T9985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1069'. [ 233.089078][ T9990] FAULT_INJECTION: forcing a failure. [ 233.089078][ T9990] name failslab, interval 1, probability 0, space 0, times 0 [ 233.089108][ T9990] CPU: 1 UID: 0 PID: 9990 Comm: syz.4.1073 Not tainted syzkaller #0 PREEMPT(full) [ 233.089128][ T9990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 233.089140][ T9990] Call Trace: [ 233.089147][ T9990] [ 233.089155][ T9990] dump_stack_lvl+0xe8/0x150 [ 233.089191][ T9990] should_fail_ex+0x3eb/0x540 [ 233.089227][ T9990] should_failslab+0xa8/0x100 [ 233.089258][ T9990] __kmalloc_cache_noprof+0x9e/0x600 [ 233.089282][ T9990] ? __kmalloc_cache_noprof+0x148/0x600 [ 233.089305][ T9990] ? sctp_add_bind_addr+0x8c/0x370 [ 233.089328][ T9990] ? sctp_add_bind_addr+0x8c/0x370 [ 233.089363][ T9990] sctp_add_bind_addr+0x8c/0x370 [ 233.089392][ T9990] sctp_copy_local_addr_list+0x31a/0x4e0 [ 233.089420][ T9990] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 233.089447][ T9990] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 233.089476][ T9990] ? sctp_v4_is_any+0x35/0x60 [ 233.089499][ T9990] ? sctp_copy_one_addr+0x93/0x360 [ 233.089527][ T9990] sctp_bind_addr_copy+0xb3/0x3c0 [ 233.089550][ T9990] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 233.089571][ T9990] sctp_connect_new_asoc+0x2ff/0x6b0 [ 233.089590][ T9990] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 233.089606][ T9990] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 233.089627][ T9990] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 233.089652][ T9990] ? security_sctp_bind_connect+0x7e/0x2c0 [ 233.089678][ T9990] sctp_sendmsg+0x159b/0x2d00 [ 233.089714][ T9990] ? kstrtouint+0x6e/0xe0 [ 233.089740][ T9990] ? __pfx_sctp_sendmsg+0x10/0x10 [ 233.089763][ T9990] ? lock_acquire+0x115/0x350 [ 233.089816][ T9990] ? aa_sock_msg_perm+0xf5/0x210 [ 233.089843][ T9990] ? sock_rps_record_flow+0x19/0x350 [ 233.089869][ T9990] ? inet_sendmsg+0x298/0x320 [ 233.089888][ T9990] ? apparmor_socket_sendmsg+0x98/0x360 [ 233.089916][ T9990] ? __pfx_inet_sendmsg+0x10/0x10 [ 233.089936][ T9990] sock_sendmsg_nosec+0x10f/0x190 [ 233.089971][ T9990] __sys_sendto+0x408/0x5a0 [ 233.089989][ T9990] ? ksys_write+0x1e6/0x270 [ 233.090019][ T9990] ? __pfx___sys_sendto+0x10/0x10 [ 233.090036][ T9990] ? __mutex_unlock_slowpath+0x731/0x900 [ 233.090073][ T9990] ? fdget+0x1ac/0x250 [ 233.090108][ T9990] ? __pfx_ksys_write+0x10/0x10 [ 233.090137][ T9990] __x64_sys_sendto+0xde/0x100 [ 233.090158][ T9990] do_syscall_64+0x16a/0x530 [ 233.090181][ T9990] ? trace_irq_disable+0x3b/0x140 [ 233.090205][ T9990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.090231][ T9990] ? clear_bhb_loop+0x70/0xc0 [ 233.090250][ T9990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.090266][ T9990] RIP: 0033:0x7f41165a94d9 [ 233.090282][ T9990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.090296][ T9990] RSP: 002b:00007f41174b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 233.090315][ T9990] RAX: ffffffffffffffda RBX: 00007f4116825fa0 RCX: 00007f41165a94d9 [ 233.090329][ T9990] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 233.090341][ T9990] RBP: 00007f41174b2090 R08: 0000200000000300 R09: 000000000000001c [ 233.090352][ T9990] R10: 0000000000040811 R11: 0000000000000246 R12: 0000000000000002 [ 233.090363][ T9990] R13: 00007f4116826038 R14: 00007f4116825fa0 R15: 00007fffe8973e48 [ 233.090397][ T9990] [ 233.374307][T10003] __nla_validate_parse: 3 callbacks suppressed [ 233.374328][T10003] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1068'. [ 233.465616][ T9995] batman_adv: batadv0: Adding interface: syzkaller0 [ 233.465631][ T9995] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.465656][ T9995] batman_adv: batadv0: Interface activated: syzkaller0 [ 233.569300][ T9992] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 233.622548][ T9992] batman_adv: batadv0: Removing interface: syzkaller0 [ 233.972312][T10028] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 234.135974][T10024] x_tables: duplicate underflow at hook 1 [ 234.164531][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1077'. [ 234.228395][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1077'. [ 234.263566][T10038] 8021q: adding VLAN 0 to HW filter on device bond8 [ 234.353734][ T25] net_ratelimit: 14 callbacks suppressed [ 234.353752][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.532319][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 234.555518][ T5761] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 234.558301][T10052] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 234.576433][T10052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.589932][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.591113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.626175][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1085'. [ 234.694130][ T6854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.804860][T10068] tipc: Enabled bearer , priority 0 [ 234.806021][T10068] syzkaller0: entered promiscuous mode [ 234.806041][T10068] syzkaller0: entered allmulticast mode [ 234.808557][T10068] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1087'. [ 234.820187][ T6860] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.821025][ T6860] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.821059][ T6860] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.821089][ T6860] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.990254][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1089'. [ 235.194042][T10072] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1089'. [ 235.207387][T10082] No such timeout policy "syz0" [ 235.314822][T10090] netlink: 'syz.0.1093': attribute type 10 has an invalid length. [ 235.315946][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1094'. [ 235.315975][T10089] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 235.315987][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1094'. [ 235.353098][T10089] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 235.353721][T10089] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 235.361190][T10089] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 235.361795][T10089] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 235.367348][T10089] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 235.368055][T10089] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 235.397495][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.512939][T10091] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 235.514756][T10091] bond9 (unregistering): Released all slaves [ 235.629914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.630935][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.704412][T10110] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 235.793285][ T6854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.837159][T10118] xfrm1: entered promiscuous mode [ 235.845710][T10118] xfrm1: entered allmulticast mode [ 235.931538][ T833] tipc: Node number set to 2029469162 [ 235.953121][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.431096][T10163] netlink: 'syz.2.1113': attribute type 11 has an invalid length. [ 236.710052][T10170] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 236.712366][T10170] team0: Device ipvlan2 is already an upper device of the team interface [ 238.447223][T10303] xt_hashlimit: size too large, truncated to 1048576 [ 238.503357][T10306] __nla_validate_parse: 139 callbacks suppressed [ 238.503371][T10306] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.1154'. [ 238.503471][T10306] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 238.667798][T10311] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1156'. [ 238.667906][T10311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1156'. [ 239.218693][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 239.218729][T10352] validate_nla: 58 callbacks suppressed [ 239.218741][T10352] netlink: 'syz.2.1168': attribute type 30 has an invalid length. [ 239.271997][T10357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 239.272033][T10357] netlink: 'syz.2.1168': attribute type 30 has an invalid length. [ 239.427607][T10366] tap0: tun_chr_ioctl cmd 1074025676 [ 239.427629][T10366] tap0: owner set to 0 [ 239.550233][ T5761] net_ratelimit: 16 callbacks suppressed [ 239.550252][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.607356][T10372] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1175'. [ 239.790008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.791515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.892988][T10373] syzkaller0: entered promiscuous mode [ 239.894192][T10373] syzkaller0: entered allmulticast mode [ 239.977644][T10401] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1178'. [ 240.135901][T10410] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 240.281601][ T6855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.503720][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 240.531374][T10429] netlink: 'syz.0.1187': attribute type 21 has an invalid length. [ 240.531471][T10429] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1187'. [ 240.603465][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.829996][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.831021][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.913624][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'. [ 241.114741][T10451] ip_tables: iptables: counters copy to user failed while replacing table [ 241.290293][T10459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.494008][T10465] bridge_slave_1: left allmulticast mode [ 241.494033][T10465] bridge_slave_1: left promiscuous mode [ 241.494265][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.525014][T10465] bridge_slave_0: left promiscuous mode [ 241.525265][T10465] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.740876][T10473] netlink: 'syz.4.1201': attribute type 142 has an invalid length. [ 241.958426][T10479] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 242.014475][T10478] pim6reg: entered allmulticast mode [ 242.100093][T10479] 8021q: adding VLAN 0 to HW filter on device bond8 [ 242.192045][T10483] pim6reg: left allmulticast mode [ 243.179566][T10554] team0: Port device dummy0 removed [ 243.267864][T10554] team0: Port device team_slave_0 removed [ 243.286977][T10554] team0: Port device team_slave_1 removed [ 243.300599][T10554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.300624][T10554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.317592][T10554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.317616][T10554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.354952][T10554] bond1: (slave geneve2): Releasing active interface [ 243.396178][T10554] team0: Port device bridge2 removed [ 243.418844][T10554] team0: Port device bridge3 removed [ 243.442823][T10554] bond4: (slave gretap2): Releasing active interface [ 243.516154][T10558] team0: Port device xfrm0 added [ 243.627722][T10430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.865430][T10590] netlink: 'syz.1.1219': attribute type 12 has an invalid length. [ 243.865451][T10590] netlink: 'syz.1.1219': attribute type 29 has an invalid length. [ 243.865463][T10590] __nla_validate_parse: 7 callbacks suppressed [ 243.865473][T10590] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1219'. [ 243.865490][T10590] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1219'. [ 243.865751][T10590] netlink: 'syz.1.1219': attribute type 12 has an invalid length. [ 243.865776][T10590] netlink: 'syz.1.1219': attribute type 29 has an invalid length. [ 243.865787][T10590] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1219'. [ 243.865801][T10590] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1219'. [ 243.866051][T10590] netlink: 'syz.1.1219': attribute type 12 has an invalid length. [ 243.866065][T10590] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1219'. [ 243.866077][T10590] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1219'. [ 243.866332][T10590] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1219'. [ 243.866346][T10590] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1219'. [ 243.866622][T10590] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1219'. [ 243.866637][T10590] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1219'. [ 244.469680][T10599] bridge3: entered promiscuous mode [ 244.500245][T10599] bond9: (slave bridge3): making interface the new active one [ 244.504599][T10599] bond9: (slave bridge3): Enslaving as an active interface with an up link [ 244.751020][ T833] net_ratelimit: 21 callbacks suppressed [ 244.751039][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.774936][ T6859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.990036][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.990669][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.072443][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.092009][ T5646] Bluetooth: hci4: link tx timeout [ 245.092028][ T5646] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 245.790165][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.881106][ T6859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.030012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.030459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.831340][ T833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.150727][ T5646] Bluetooth: hci4: command 0x0405 tx timeout [ 247.867516][T10631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.033597][T10745] tipc: Invalid UDP bearer configuration [ 248.033641][T10745] tipc: Enabling of bearer rejected, failed to enable media [ 248.033947][T10744] tipc: Invalid UDP bearer configuration [ 248.033982][T10744] tipc: Enabling of bearer rejected, failed to enable media [ 248.400712][T10772] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 248.423397][T10772] validate_nla: 126 callbacks suppressed [ 248.423420][T10772] netlink: 'syz.4.1246': attribute type 21 has an invalid length. [ 248.474904][T10772] netlink: 'syz.4.1246': attribute type 2 has an invalid length. [ 248.620727][T10781] netlink: 'syz.1.1252': attribute type 2 has an invalid length. [ 248.629651][T10779] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 248.955318][T10799] __nla_validate_parse: 130 callbacks suppressed [ 248.955341][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1254'. [ 249.179097][T10814] syzkaller0: entered promiscuous mode [ 249.179164][T10814] syzkaller0: entered allmulticast mode [ 249.422116][T10833] macvlan0: entered promiscuous mode [ 249.422142][T10833] veth1_vlan: entered promiscuous mode [ 249.489511][T10838] syzkaller0: entered promiscuous mode [ 249.489533][T10838] syzkaller0: entered allmulticast mode [ 249.497279][T10838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1262'. [ 249.762879][T10851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1265'. [ 250.086716][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 250.091908][T10873] xt_hashlimit: size too large, truncated to 1048576 [ 250.091924][T10873] xt_hashlimit: max too large, truncated to 1048576 [ 250.092155][T10873] xt_hashlimit: overflow, rate too high: 0 [ 250.286893][T10880] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1271'. [ 250.346985][T10885] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1272'. [ 250.452716][T10890] rxe_eth0 speed is unknown, defaulting to 1000 [ 250.520928][T10886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.539240][T10886] eql: remember to turn off Van-Jacobson compression on your slave devices [ 250.554739][T10886] net_ratelimit: 12 callbacks suppressed [ 250.554766][T10886] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 250.555056][T10896] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1275'. [ 250.555075][T10896] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1275'. [ 250.657785][T10897] netlink: 'syz.3.1276': attribute type 1 has an invalid length. [ 250.822652][T10911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1276'. [ 250.882040][T10906] 8021q: adding VLAN 0 to HW filter on device bond6 [ 250.886055][T10906] bond5: (slave bond6): making interface the new active one [ 250.887742][T10906] bond5: (slave bond6): Enslaving as an active interface with an up link [ 250.895273][T10916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1279'. [ 250.968657][T10897] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 251.104369][T10890] wg0 speed is unknown, defaulting to 1000 [ 251.222921][T10925] vlan3: entered allmulticast mode [ 251.222943][T10925] gretap0: entered allmulticast mode [ 251.255182][T10928] workqueue: name exceeds WQ_NAME_LEN. Truncating to: È(�Â’€;×gøa¶ÍñfµÉ@ñMÔ¬º!9#£P [ 251.319517][T10932] vlan3: entered allmulticast mode [ 252.217098][T10979] ip_tables: iptables: counters copy to user failed while replacing table [ 252.583655][T10973] syzkaller1: entered promiscuous mode [ 252.583680][T10973] syzkaller1: entered allmulticast mode [ 253.446366][T11023] netlink: 'syz.3.1297': attribute type 5 has an invalid length. [ 253.456603][T11022] netlink: 'syz.4.1296': attribute type 5 has an invalid length. [ 253.653623][T11032] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 254.183254][T11053] tap0: tun_chr_ioctl cmd 1074025672 [ 254.183277][T11053] tap0: ignored: set checksum disabled [ 254.424233][T11068] __nla_validate_parse: 14 callbacks suppressed [ 254.424254][T11068] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1308'. [ 254.424270][T11068] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1308'. [ 254.424285][T11068] netlink: 'syz.0.1308': attribute type 5 has an invalid length. [ 254.424296][T11068] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1308'. [ 255.036179][T11096] IPVS: twos: SCTP 127.0.0.1:20000 - no destination available [ 255.146826][T11103] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 255.792965][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.188034][T11146] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1320'. [ 256.233564][T11144] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1321'. [ 256.235485][T11144] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1321'. [ 256.237404][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1321'. [ 256.237425][T11144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1321'. [ 256.869437][T11174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1326'. [ 256.883022][T11175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1326'. [ 257.036767][T11179] 0: reclassify loop, rule prio 0, protocol 03 [ 257.152674][T11182] pimreg: entered allmulticast mode [ 257.658211][T11208] netlink: 'syz.4.1339': attribute type 6 has an invalid length. [ 259.055621][T11279] bond5: entered promiscuous mode [ 259.120649][T11279] macvlan2: entered promiscuous mode [ 259.120676][T11279] macvlan2: entered allmulticast mode [ 259.125585][T11279] bond5: (slave macvlan2): Opening slave failed [ 259.461983][T11302] netlink: 'syz.0.1362': attribute type 2 has an invalid length. [ 259.505312][T11302] netlink: 'syz.0.1362': attribute type 1 has an invalid length. [ 259.505333][T11302] __nla_validate_parse: 7 callbacks suppressed [ 259.505343][T11302] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1362'. [ 260.115921][T11326] sctp: [Deprecated]: syz.3.1367 (pid 11326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.115921][T11326] Use struct sctp_sack_info instead [ 260.127330][T11328] FAULT_INJECTION: forcing a failure. [ 260.127330][T11328] name failslab, interval 1, probability 0, space 0, times 0 [ 260.127375][T11328] CPU: 1 UID: 0 PID: 11328 Comm: syz.4.1368 Not tainted syzkaller #0 PREEMPT(full) [ 260.127407][T11328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 260.127423][T11328] Call Trace: [ 260.127430][T11328] [ 260.127438][T11328] dump_stack_lvl+0xe8/0x150 [ 260.127472][T11328] should_fail_ex+0x3eb/0x540 [ 260.127500][T11328] should_failslab+0xa8/0x100 [ 260.127530][T11328] __kmalloc_cache_noprof+0x9e/0x600 [ 260.127554][T11328] ? __kmalloc_cache_noprof+0x148/0x600 [ 260.127576][T11328] ? sctp_add_bind_addr+0x8c/0x370 [ 260.127603][T11328] ? sctp_add_bind_addr+0x8c/0x370 [ 260.127632][T11328] sctp_add_bind_addr+0x8c/0x370 [ 260.127659][T11328] sctp_copy_local_addr_list+0x31a/0x4e0 [ 260.127688][T11328] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 260.127713][T11328] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 260.127742][T11328] ? sctp_v4_is_any+0x35/0x60 [ 260.127765][T11328] ? sctp_copy_one_addr+0x93/0x360 [ 260.127792][T11328] sctp_bind_addr_copy+0xb3/0x3c0 [ 260.127818][T11328] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 260.127843][T11328] sctp_connect_new_asoc+0x2ff/0x6b0 [ 260.127864][T11328] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 260.127884][T11328] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 260.127907][T11328] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 260.127934][T11328] ? security_sctp_bind_connect+0x7e/0x2c0 [ 260.127961][T11328] sctp_sendmsg+0x159b/0x2d00 [ 260.128000][T11328] ? kstrtouint+0x6e/0xe0 [ 260.128030][T11328] ? __pfx_sctp_sendmsg+0x10/0x10 [ 260.128056][T11328] ? lock_acquire+0x115/0x350 [ 260.128098][T11328] ? aa_sock_msg_perm+0xf5/0x210 [ 260.128124][T11328] ? sock_rps_record_flow+0x19/0x350 [ 260.128154][T11328] ? inet_sendmsg+0x298/0x320 [ 260.128172][T11328] ? apparmor_socket_sendmsg+0x98/0x360 [ 260.128198][T11328] ? __pfx_inet_sendmsg+0x10/0x10 [ 260.128218][T11328] sock_sendmsg_nosec+0x10f/0x190 [ 260.128254][T11328] __sys_sendto+0x408/0x5a0 [ 260.128272][T11328] ? ksys_write+0x1e6/0x270 [ 260.128300][T11328] ? __pfx___sys_sendto+0x10/0x10 [ 260.128316][T11328] ? __mutex_unlock_slowpath+0x731/0x900 [ 260.128358][T11328] ? fdget+0x1ac/0x250 [ 260.128392][T11328] ? __pfx_ksys_write+0x10/0x10 [ 260.128423][T11328] __x64_sys_sendto+0xde/0x100 [ 260.128445][T11328] do_syscall_64+0x16a/0x530 [ 260.128469][T11328] ? trace_irq_disable+0x3b/0x140 [ 260.128493][T11328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.128512][T11328] ? clear_bhb_loop+0x70/0xc0 [ 260.128544][T11328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.128566][T11328] RIP: 0033:0x7f41165a94d9 [ 260.128589][T11328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.128604][T11328] RSP: 002b:00007f41174b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 260.128624][T11328] RAX: ffffffffffffffda RBX: 00007f4116825fa0 RCX: 00007f41165a94d9 [ 260.128638][T11328] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 260.128649][T11328] RBP: 00007f41174b2090 R08: 0000200000000300 R09: 000000000000001c [ 260.128664][T11328] R10: 0000000000040811 R11: 0000000000000246 R12: 0000000000000002 [ 260.128675][T11328] R13: 00007f4116826038 R14: 00007f4116825fa0 R15: 00007fffe8973e48 [ 260.128706][T11328] [ 260.136903][T11306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1363'. [ 260.486089][T11332] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 260.963614][T11341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.979981][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'. [ 260.980005][T11353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1376'. [ 260.987902][T11359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1378'. [ 261.695920][T11347] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.570437][T11390] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 263.570673][T11390] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 263.570874][T11390] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 263.571067][T11390] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 263.571270][T11390] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 263.571472][T11390] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 263.571667][T11390] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 263.584984][T11390] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 264.166651][T11446] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1396'. [ 264.166678][T11446] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1396'. [ 264.203578][T11448] ip_tables: iptables: counters copy to user failed while replacing table [ 264.526201][T11466] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 264.565487][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1399'. [ 264.565525][T11468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1399'. [ 264.801952][T11476] syzkaller1: entered promiscuous mode [ 264.801977][T11476] syzkaller1: entered allmulticast mode [ 264.947800][T11487] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1406'. [ 264.969311][T11493] xt_socket: unknown flags 0xc [ 265.007152][T11495] validate_nla: 27 callbacks suppressed [ 265.007611][T11495] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 265.136432][T11495] bond11: entered promiscuous mode [ 265.136872][T11495] 8021q: adding VLAN 0 to HW filter on device bond11 [ 265.189071][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 265.189094][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 265.212329][T11502] bond11: (slave bridge4): making interface the new active one [ 265.212352][T11502] bridge4: entered promiscuous mode [ 265.213329][T11502] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 265.218819][T11504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.220429][T11503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.273835][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 265.273887][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 265.300284][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 265.300307][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 265.323081][ T6860] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.330052][ T253] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.330400][ T253] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.330435][ T253] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.661277][T11528] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1417'. [ 267.170940][T11627] netlink: 'syz.3.1439': attribute type 21 has an invalid length. [ 267.237487][T11632] netlink: 'syz.2.1440': attribute type 21 has an invalid length. [ 267.317844][T11626] sctp: [Deprecated]: syz.3.1439 (pid 11626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.317844][T11626] Use struct sctp_sack_info instead [ 267.317899][T11626] sctp: [Deprecated]: syz.3.1439 (pid 11626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.317899][T11626] Use struct sctp_sack_info instead [ 267.317939][T11626] sctp: [Deprecated]: syz.3.1439 (pid 11626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.317939][T11626] Use struct sctp_sack_info instead [ 267.317978][T11626] sctp: [Deprecated]: syz.3.1439 (pid 11626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.317978][T11626] Use struct sctp_sack_info instead [ 267.318014][T11626] sctp: [Deprecated]: syz.3.1439 (pid 11626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.318014][T11626] Use struct sctp_sack_info instead [ 267.318049][T11626] sctp: [Deprecated]: syz.3.1439 (pid 11626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.318049][T11626] Use struct sctp_sack_info instead [ 267.318084][T11626] sctp: [Deprecated]: syz.3.1439 (pid 11626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.318084][T11626] Use struct sctp_sack_info instead [ 267.318122][T11626] sctp: [Deprecated]: syz.3.1439 (pid 11626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.318122][T11626] Use struct sctp_sack_info instead [ 267.318159][T11626] sctp: [Deprecated]: syz.3.1439 (pid 11626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.318159][T11626] Use struct sctp_sack_info instead [ 267.318198][T11626] sctp: [Deprecated]: syz.3.1439 (pid 11626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.318198][T11626] Use struct sctp_sack_info instead [ 267.346844][T11638] xt_recent: Unsupported userspace flags (000000b1) [ 267.348750][T11638] netlink: 'syz.0.1442': attribute type 1 has an invalid length. [ 269.291709][T11737] netlink: 'syz.4.1465': attribute type 1 has an invalid length. [ 269.312531][T11737] bond12: entered promiscuous mode [ 269.312924][T11737] 8021q: adding VLAN 0 to HW filter on device bond12 [ 269.317568][T11738] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 269.317581][T11738] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 269.317589][T11738] bond12: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 271.267931][T11711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.274605][T11697] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.394802][T11749] __nla_validate_parse: 10 callbacks suppressed [ 271.394822][T11749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'. [ 271.531459][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 271.576182][T11765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1471'. [ 271.602777][T11760] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1470'. [ 271.683922][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1471'. [ 271.688493][T11772] netlink: 'syz.2.1472': attribute type 21 has an invalid length. [ 271.752569][T11772] netlink: 'syz.2.1472': attribute type 6 has an invalid length. [ 271.752590][T11772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1472'. [ 272.109499][T11797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1477'. [ 272.131031][T11797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1477'. [ 272.232475][T11800] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 272.345322][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1480'. [ 272.486389][T11817] udevd[11817]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 272.507068][T11819] udevd[11819]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 272.672712][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 273.043956][T11863] Bluetooth: hci0: unsupported parameter 5135 [ 273.043977][T11863] Bluetooth: hci0: unsupported parameter 8192 [ 273.043987][T11863] Bluetooth: hci0: unsupported parameter 5135 [ 273.043997][T11863] Bluetooth: hci0: unsupported parameter 8192 [ 274.051169][T11917] bond0: (slave bond_slave_0): Releasing backup interface [ 274.051876][T11917] bond_slave_0: left allmulticast mode [ 274.090403][T11917] bond_slave_0: entered promiscuous mode [ 274.090427][T11917] bond_slave_0: entered allmulticast mode [ 274.403709][T11941] netlink: 'syz.4.1518': attribute type 3 has an invalid length. [ 275.066549][T11948] syzkaller0: entered promiscuous mode [ 275.066564][T11948] syzkaller0: entered allmulticast mode [ 276.827445][T11908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.830704][T11936] netlink: 'syz.4.1518': attribute type 1 has an invalid length. [ 276.830723][T11936] __nla_validate_parse: 8 callbacks suppressed [ 276.830733][T11936] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1518'. [ 277.027237][T11980] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 277.117516][T11985] SET target dimension over the limit! [ 277.169683][T11990] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 277.275009][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 277.275132][T11985] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1531'. [ 277.342035][T11999] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 277.676148][T12018] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 278.056044][T12034] xt_cluster: node mask cannot exceed total number of nodes [ 278.138047][T12040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1544'. [ 278.138077][T12040] netlink: 'syz.1.1544': attribute type 3 has an invalid length. [ 278.138091][T12040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1544'. [ 278.138302][T12040] netlink: 'syz.1.1544': attribute type 3 has an invalid length. [ 278.154224][T12047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'. [ 278.313772][T12056] macvlan0: entered promiscuous mode [ 278.317219][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1548'. [ 278.319386][T12056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1548'. [ 278.346462][T12056] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.560716][T12064] syzkaller0: entered promiscuous mode [ 278.560742][T12064] syzkaller0: entered allmulticast mode [ 279.510162][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1555'. [ 279.510192][T12093] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1555'. [ 281.153198][T12101] netlink: 'syz.2.1557': attribute type 25 has an invalid length. [ 281.533720][T12129] netlink: 'syz.1.1564': attribute type 58 has an invalid length. [ 281.550049][T12131] Cannot find add_set index 4 as target [ 281.550181][T12131] Cannot find add_set index 4 as target [ 281.550295][T12131] Cannot find add_set index 4 as target [ 281.552078][T12131] Cannot find add_set index 4 as target [ 281.575674][T12131] Cannot find add_set index 4 as target [ 281.575816][T12131] Cannot find add_set index 4 as target [ 281.575940][T12131] Cannot find add_set index 4 as target [ 281.576043][T12131] Cannot find add_set index 4 as target [ 281.576146][T12131] Cannot find add_set index 4 as target [ 281.576244][T12131] Cannot find add_set index 4 as target [ 281.651684][T12120] 0·: renamed from hsr0 (while UP) [ 281.669367][T12120] 0·: entered allmulticast mode [ 281.669392][T12120] hsr_slave_0: entered allmulticast mode [ 281.669408][T12120] hsr_slave_1: entered allmulticast mode [ 281.674205][T12120] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 282.053326][T12157] __nla_validate_parse: 5 callbacks suppressed [ 282.053346][T12157] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1577'. [ 282.150189][T12168] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1581'. [ 282.330946][T12175] syzkaller0: entered promiscuous mode [ 282.330970][T12175] syzkaller0: entered allmulticast mode [ 282.625044][T12192] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 282.625063][T12192] sctp: [Deprecated]: syz.1.1587 (pid 12192) Use of struct sctp_assoc_value in delayed_ack socket option. [ 282.625063][T12192] Use struct sctp_sack_info instead [ 282.628375][T12192] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.1587'. [ 282.629166][T12192] sctp: [Deprecated]: syz.1.1587 (pid 12192) Use of int in max_burst socket option. [ 282.629166][T12192] Use struct sctp_assoc_value instead [ 282.738191][T12186] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.738229][T12186] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.791587][T12188] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.798242][T12188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.834348][T12188] bridge_slave_0: left allmulticast mode [ 282.856818][T12188] bond_slave_0: left promiscuous mode [ 282.860348][T12205] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1590'. [ 282.891626][T12188] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 282.991890][T12186] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 282.991926][T12186] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.076049][T12186] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.076095][T12186] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.165741][T12186] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.165779][T12186] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.322296][ T14] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.322329][ T14] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.322369][ T14] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.322392][ T14] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.411959][ T14] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.411994][ T14] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.412070][ T14] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.412093][ T14] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.544331][T12239] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.777581][T12254] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1600'. [ 285.896476][T12208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.187570][T12282] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1606'. [ 287.198263][T12339] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 287.228356][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'. [ 287.286448][T12339] bond6: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 287.288708][T12339] bond6 (unregistering): Released all slaves [ 287.518753][T12354] syzkaller0: left promiscuous mode [ 287.518775][T12354] syzkaller0: left allmulticast mode [ 287.739629][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1623'. [ 287.805198][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 288.017232][ T5648] Bluetooth: hci3: unexpected event for opcode 0x203d [ 288.035678][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1627'. [ 288.633687][T12414] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1634'. [ 288.659377][T12416] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1635'. [ 288.930429][T12429] tipc: Enabled bearer , priority 0 [ 289.109160][T12437] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1638'. [ 289.142153][T12437] netlink: 'syz.0.1638': attribute type 11 has an invalid length. [ 289.142178][T12437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1638'. [ 289.180873][T12448] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.181068][T12448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.181078][T12448] IPv6: NLM_F_CREATE should be set when creating new route [ 289.181103][T12448] IPv6: NLM_F_CREATE should be set when creating new route [ 289.184267][T12448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.277635][T12457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1644'. [ 289.317421][T12461] Bluetooth: MGMT ver 1.23 [ 289.375918][T12469] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1647'. [ 289.472774][T12473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.522203][T12473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.657208][T12481] gtp1: entered promiscuous mode [ 289.657230][T12481] gtp1: entered allmulticast mode [ 290.320584][ T82] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.320607][ T82] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.066696][T12492] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.219591][T12519] xt_socket: unknown flags 0x4 [ 293.295843][T12521] __nla_validate_parse: 2 callbacks suppressed [ 293.295864][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 293.300559][T12521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.306363][T12527] netlink: 'syz.3.1665': attribute type 5 has an invalid length. [ 293.306395][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 293.308688][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1663'. [ 293.378202][T12525] 8021q: adding VLAN 0 to HW filter on device bond13 [ 293.378703][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 293.431559][T12531] macvlan3: entered promiscuous mode [ 293.431582][T12531] macvlan3: entered allmulticast mode [ 293.513400][T12540] xt_hashlimit: size too large, truncated to 1048576 [ 293.513420][T12540] xt_hashlimit: max too large, truncated to 1048576 [ 293.513431][T12540] xt_hashlimit: invalid rate [ 293.536332][T12544] veth1_to_bond: entered allmulticast mode [ 294.121499][T12541] veth1_to_bond: left allmulticast mode [ 294.143268][T12576] netlink: 'syz.4.1673': attribute type 11 has an invalid length. [ 294.638238][T12591] netlink: 'syz.4.1676': attribute type 9 has an invalid length. [ 294.790867][T12597] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 294.799235][T12597] bond7 (unregistering): Released all slaves [ 295.296140][T12625] tipc: Failed to remove unknown binding: 66,1,1/0:2483853277/2483853279 [ 295.299198][T12625] netlink: 'syz.3.1682': attribute type 8 has an invalid length. [ 295.781391][T12647] netlink: 'syz.1.1688': attribute type 2 has an invalid length. [ 295.955380][T12660] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 296.173691][T12675] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1694'. [ 296.365767][T12687] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1698'. [ 296.513962][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1699'. [ 296.690134][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1704'. [ 296.690159][T12702] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1704'. [ 297.068763][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 297.811053][T12757] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 298.116262][T12780] netlink: 'syz.1.1726': attribute type 4 has an invalid length. [ 298.132230][T12781] netlink: 'syz.1.1726': attribute type 4 has an invalid length. [ 298.242107][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bf8d000: rx timeout, send abort [ 298.242410][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802bf8d000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 298.322047][T12786] bridge0: port 4(veth1_to_bridge) entered blocking state [ 298.322139][T12786] bridge0: port 4(veth1_to_bridge) entered disabled state [ 298.322298][T12786] veth1_to_bridge: entered allmulticast mode [ 298.327441][T12786] veth1_to_bridge: entered promiscuous mode [ 298.398420][T12793] __nla_validate_parse: 12 callbacks suppressed [ 298.398445][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1729'. [ 298.410663][T12793] ip_tables: iptables: counters copy to user failed while replacing table [ 298.618662][T12809] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1732'. [ 299.008027][T12827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1736'. [ 299.256565][T12851] ip6erspan0: entered allmulticast mode [ 299.550112][T12877] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 299.693873][T12887] can: request_module (can-proto-0) failed. [ 300.043155][T12910] bridge5: entered promiscuous mode [ 300.043177][T12910] bridge5: entered allmulticast mode [ 300.063219][T12910] team0: Port device bridge5 added [ 300.638629][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 300.808454][T12943] netlink: 23 bytes leftover after parsing attributes in process `syz.4.1757'. [ 301.143387][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1764'. [ 301.293360][T12969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1764'. [ 301.334881][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 301.459396][T12976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 301.657856][T12998] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1774'. [ 301.982523][T13010] trusted_key: syz.1.1777 sent an empty control message without MSG_MORE. [ 302.070393][T13015] netlink: 'syz.4.1778': attribute type 17 has an invalid length. [ 302.087858][T13015] 0ªX¹¦Dö»: entered promiscuous mode [ 302.094774][T13015] 0ªX¹¦Dö»: left promiscuous mode [ 302.221237][T13022] netlink: del zone limit has 8 unknown bytes [ 302.319160][T13029] netlink: 'syz.0.1780': attribute type 3 has an invalid length. [ 302.483439][T13036] ip_tables: iptables: counters copy to user failed while replacing table [ 302.779113][T13047] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.971699][T13059] netlink: 'syz.3.1788': attribute type 4 has an invalid length. [ 303.006729][T13064] netlink: 'syz.2.1792': attribute type 8 has an invalid length. [ 303.167963][T13076] FAULT_INJECTION: forcing a failure. [ 303.167963][T13076] name failslab, interval 1, probability 0, space 0, times 0 [ 303.167995][T13076] CPU: 0 UID: 0 PID: 13076 Comm: syz.3.1795 Not tainted syzkaller #0 PREEMPT(full) [ 303.168016][T13076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 303.168027][T13076] Call Trace: [ 303.168034][T13076] [ 303.168042][T13076] dump_stack_lvl+0xe8/0x150 [ 303.168078][T13076] should_fail_ex+0x3eb/0x540 [ 303.168107][T13076] should_failslab+0xa8/0x100 [ 303.168138][T13076] __kmalloc_cache_noprof+0x9e/0x600 [ 303.168163][T13076] ? __kmalloc_cache_noprof+0x148/0x600 [ 303.168186][T13076] ? sctp_add_bind_addr+0x8c/0x370 [ 303.168209][T13076] ? sctp_add_bind_addr+0x8c/0x370 [ 303.168240][T13076] sctp_add_bind_addr+0x8c/0x370 [ 303.168269][T13076] sctp_copy_local_addr_list+0x31a/0x4e0 [ 303.168298][T13076] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 303.168323][T13076] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 303.168352][T13076] ? sctp_v4_is_any+0x35/0x60 [ 303.168376][T13076] ? sctp_copy_one_addr+0x93/0x360 [ 303.168405][T13076] sctp_bind_addr_copy+0xb3/0x3c0 [ 303.168431][T13076] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 303.168458][T13076] sctp_connect_new_asoc+0x2ff/0x6b0 [ 303.168481][T13076] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 303.168502][T13076] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 303.168526][T13076] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 303.168551][T13076] ? security_sctp_bind_connect+0x7e/0x2c0 [ 303.168579][T13076] sctp_sendmsg+0x159b/0x2d00 [ 303.168622][T13076] ? kstrtouint+0x6e/0xe0 [ 303.168651][T13076] ? __pfx_sctp_sendmsg+0x10/0x10 [ 303.168683][T13076] ? lock_acquire+0x115/0x350 [ 303.168728][T13076] ? aa_sock_msg_perm+0xf5/0x210 [ 303.168754][T13076] ? sock_rps_record_flow+0x19/0x350 [ 303.168785][T13076] ? inet_sendmsg+0x298/0x320 [ 303.168805][T13076] ? apparmor_socket_sendmsg+0x98/0x360 [ 303.168832][T13076] ? __pfx_inet_sendmsg+0x10/0x10 [ 303.168853][T13076] sock_sendmsg_nosec+0x10f/0x190 [ 303.168882][T13076] __sys_sendto+0x408/0x5a0 [ 303.168901][T13076] ? ksys_write+0x1e6/0x270 [ 303.168931][T13076] ? __pfx___sys_sendto+0x10/0x10 [ 303.168947][T13076] ? __mutex_unlock_slowpath+0x731/0x900 [ 303.168991][T13076] ? fdget+0x1ac/0x250 [ 303.169027][T13076] ? __pfx_ksys_write+0x10/0x10 [ 303.169059][T13076] __x64_sys_sendto+0xde/0x100 [ 303.169082][T13076] do_syscall_64+0x16a/0x530 [ 303.169107][T13076] ? trace_irq_disable+0x3b/0x140 [ 303.169136][T13076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.169156][T13076] ? clear_bhb_loop+0x70/0xc0 [ 303.169180][T13076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.169199][T13076] RIP: 0033:0x7f4a7dda94d9 [ 303.169217][T13076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.169231][T13076] RSP: 002b:00007f4a7bff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 303.169250][T13076] RAX: ffffffffffffffda RBX: 00007f4a7e025fa0 RCX: 00007f4a7dda94d9 [ 303.169263][T13076] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 303.169274][T13076] RBP: 00007f4a7bff6090 R08: 0000200000000300 R09: 000000000000001c [ 303.169285][T13076] R10: 0000000000040811 R11: 0000000000000246 R12: 0000000000000002 [ 303.169295][T13076] R13: 00007f4a7e026038 R14: 00007f4a7e025fa0 R15: 00007ffce0b9dd38 [ 303.169326][T13076] [ 303.829353][T13102] netlink: 'syz.3.1804': attribute type 2 has an invalid length. [ 304.177864][T13117] netlink: 'syz.1.1805': attribute type 3 has an invalid length. [ 304.425688][T13126] xt_CT: No such helper "snmp_trap" [ 304.453374][T13129] __nla_validate_parse: 8 callbacks suppressed [ 304.453395][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1809'. [ 304.624207][T13142] syz_tun: entered allmulticast mode [ 304.636808][T13142] syzkaller1: entered promiscuous mode [ 304.636827][T13142] syzkaller1: entered allmulticast mode [ 304.659250][T13141] syz_tun: left allmulticast mode [ 304.834688][T13150] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1816'. [ 304.874233][T13150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1816'. [ 304.968116][T13156] sit0: entered promiscuous mode [ 304.984294][T13156] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 304.984315][T13156] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1817'. [ 305.110196][T13164] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 305.293097][T13175] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1824'. [ 305.293465][T13175] gre0: Master is either lo or non-ether device [ 305.331883][T13176] vxlan0: entered promiscuous mode [ 305.331906][T13176] vxlan0: entered allmulticast mode [ 305.511865][T13188] netlink: 'syz.3.1828': attribute type 21 has an invalid length. [ 305.511893][T13188] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.526119][T13188] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1828'. [ 305.536747][T13188] netlink: 'syz.3.1828': attribute type 9 has an invalid length. [ 305.707547][T13200] tipc: Started in network mode [ 305.707578][T13200] tipc: Node identity 82364c7229d7, cluster identity 4711 [ 305.708205][T13200] tipc: Enabled bearer , priority 0 [ 305.708906][T13200] syzkaller0: entered promiscuous mode [ 305.708923][T13200] syzkaller0: entered allmulticast mode [ 305.868329][T13215] xt_hashlimit: size too large, truncated to 1048576 [ 305.940289][T13221] bond14: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 305.946554][T13221] bond14 (unregistering): Released all slaves [ 306.002554][T13226] netlink: 'syz.2.1837': attribute type 2 has an invalid length. [ 306.028888][T13236] xt_hashlimit: size too large, truncated to 1048576 [ 306.152920][T13224] bridge_slave_0 (unregistering): left allmulticast mode [ 306.152947][T13224] bridge_slave_0 (unregistering): left promiscuous mode [ 306.153041][T13224] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.204372][T13225] tipc: Enabled bearer , priority 10 [ 306.229599][T13221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1839'. [ 306.288499][T13248] bond14: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 306.303740][T13248] bond14 (unregistering): Released all slaves [ 306.335761][T13252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1839'. [ 306.337043][T13249] tipc: Enabling of bearer rejected, already enabled [ 306.520447][T13263] tc mirred: Loop (syzkaller1:ingress --> syzkaller1:ingress) [ 306.634374][T13270] veth0_to_bond: left allmulticast mode [ 306.715583][T13276] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1848'. [ 306.788225][T13153] NFSD: Failed to start, no listeners configured. [ 306.819918][ T25] tipc: Node number set to 2883669106 [ 306.927609][T13285] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1851'. [ 307.306205][T13303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.306229][T13303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.307754][T13303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.307773][T13303] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.365448][T13307] validate_nla: 1 callbacks suppressed [ 307.365469][T13307] netlink: 'syz.1.1855': attribute type 24 has an invalid length. [ 307.615718][T13319] netlink: 'syz.1.1860': attribute type 1 has an invalid length. [ 307.633501][T13319] netlink: 'syz.1.1860': attribute type 1 has an invalid length. [ 307.633539][T13319] openvswitch: netlink: Actions may not be safe on all matching packets [ 307.848036][T13334] pim6reg527: entered allmulticast mode [ 307.971693][T13337] bond9: option lp_interval: invalid value (0) [ 307.971719][T13337] bond9: option lp_interval: allowed values 1 - 2147483647 [ 307.976533][T13337] bond9 (unregistering): Released all slaves [ 308.418696][T13366] netlink: 'syz.0.1873': attribute type 1 has an invalid length. [ 308.851672][T13403] geneve2: entered promiscuous mode [ 309.393998][T13437] syzkaller0: entered promiscuous mode [ 309.394020][T13437] syzkaller0: entered allmulticast mode [ 310.214693][T13445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.660648][T13382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 311.806872][T13449] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 312.024587][T13471] syzkaller1: entered promiscuous mode [ 312.024610][T13471] syzkaller1: entered allmulticast mode [ 312.053335][T13472] veth0: entered promiscuous mode [ 312.054280][T13468] veth0: left promiscuous mode [ 312.942360][T13507] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 312.942958][T13507] team0: Device ipvlan3 is already an upper device of the team interface [ 313.118218][T13510] veth1_to_bond: entered allmulticast mode [ 313.885867][T13508] veth1_to_bond: left allmulticast mode [ 314.928605][T13463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.230321][T13527] __nla_validate_parse: 7 callbacks suppressed [ 315.230340][T13527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1913'. [ 315.357398][T13533] ip_tables: iptables: counters copy to user failed while replacing table [ 315.438227][T13533] syzkaller1: entered promiscuous mode [ 315.438250][T13533] syzkaller1: entered allmulticast mode [ 315.457595][T13533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'. [ 315.457624][T13533] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1915'. [ 315.555825][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 315.607893][T13555] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 315.817973][T13564] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 316.022403][ T5298] veth0_macvtap: left promiscuous mode [ 317.234661][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 344.555501][T13643] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1929'. [ 344.830656][T13627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.873852][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1931'. [ 344.966757][T13662] ip_tables: iptables: counters copy to user failed while replacing table [ 347.813533][T13691] xt_SECMARK: invalid mode: 9 [ 347.814709][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 347.928455][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'. [ 347.936105][T13696] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1941'. [ 347.974641][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1942'. [ 347.981193][ T14] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.016741][T13700] ip_tables: iptables: counters copy to user failed while replacing table [ 348.017563][T13700] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1944'. [ 348.100306][ T14] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.100391][ T14] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.100432][ T14] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.117050][T13698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1943'. [ 348.218374][T13710] netlink: 'syz.4.1945': attribute type 7 has an invalid length. [ 348.258345][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1947'. [ 348.343093][T13722] macvlan2: entered promiscuous mode [ 348.343118][T13722] macvlan2: entered allmulticast mode [ 348.359698][T13722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1949'. [ 348.500393][ T253] bond0: (slave bond_slave_0): interface is now down [ 348.500425][ T253] bond0: (slave bond_slave_1): interface is now down [ 348.914221][T13744] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 348.925333][T13747] vlan2: entered promiscuous mode [ 348.925355][T13747] bridge0: entered promiscuous mode [ 348.925544][T13747] vlan2: entered allmulticast mode [ 348.925557][T13747] bridge0: entered allmulticast mode [ 348.938450][T13748] netlink: 'syz.3.1960': attribute type 3 has an invalid length. [ 348.982689][T13747] bond14: option all_slaves_active: invalid value (179) [ 348.983729][T13747] bond14 (unregistering): Released all slaves [ 349.246809][T13758] syzkaller1: entered promiscuous mode [ 349.246830][T13758] syzkaller1: entered allmulticast mode [ 349.327841][T13763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.336966][T13759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.388550][T13759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.486776][T13772] x_tables: duplicate underflow at hook 1 [ 349.883433][T13793] 8021q: adding VLAN 0 to HW filter on device bond8 [ 349.886035][T13793] bond0: (slave bond8): Enslaving as an active interface with a down link [ 350.033342][ T5648] Bluetooth: hci4: Malformed Event: 0x13 [ 350.060295][T13811] __nla_validate_parse: 5 callbacks suppressed [ 350.060341][T13811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1979'. [ 350.078636][T13813] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 350.161567][T13815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1980'. [ 350.225363][T13815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1980'. [ 350.461889][T13830] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 350.462173][T13828] IPVS: stopping backup sync thread 13830 ... [ 350.584812][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 350.690433][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1984'. [ 351.052439][T13868] netlink: 'syz.2.1992': attribute type 12 has an invalid length. [ 351.071290][ T6860] bond0: (slave bond_slave_0): interface is now down [ 351.071314][ T6860] bond0: (slave bond_slave_1): interface is now down [ 351.097904][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1992'. [ 351.105628][ T6860] bond0: now running without any active interface! [ 351.322698][T13881] ip_tables: iptables: counters copy to user failed while replacing table [ 351.377876][T13887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.399957][T13887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1996'. [ 351.934396][T13910] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2002'. [ 352.017147][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2002'. [ 352.268583][T13920] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 352.415292][T13914] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 352.415320][T13914] bond7: option packets_per_slave: allowed values 0 - 65535 [ 352.424879][T13914] bond7 (unregistering): Released all slaves [ 352.653655][T13915] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 352.653679][T13915] bond7: option packets_per_slave: allowed values 0 - 65535 [ 352.673895][T13915] bond7 (unregistering): Released all slaves [ 352.736601][ T5648] Bluetooth: hci1: unexpected event for opcode 0x0c12 [ 353.161185][T13939] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2007'. [ 354.607596][T13983] sctp: [Deprecated]: syz.3.2018 (pid 13983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.607596][T13983] Use struct sctp_sack_info instead [ 354.808824][T13991] syzkaller0: left promiscuous mode [ 354.809030][T13991] syzkaller0: left allmulticast mode [ 355.015235][T14001] netlink: 'syz.4.2023': attribute type 4 has an invalid length. [ 355.304742][T14009] __nla_validate_parse: 2 callbacks suppressed [ 355.304764][T14009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2027'. [ 355.308491][T14009] netlink: 'syz.0.2027': attribute type 2 has an invalid length. [ 355.465039][T14018] netlink: 'syz.2.2030': attribute type 3 has an invalid length. [ 355.495729][T14018] ip_tables: iptables: counters copy to user failed while replacing table [ 355.589677][T14024] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2031'. [ 355.773492][T14033] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2031'. [ 355.819631][T14024] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 355.833497][T14024] bond9 (unregistering): Released all slaves [ 355.962665][T14025] syzkaller1: entered promiscuous mode [ 355.962694][T14025] syzkaller1: entered allmulticast mode [ 356.459411][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 356.459440][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 356.459514][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 356.575677][T14067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2041'. [ 356.932573][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2044'. [ 357.003720][T14087] batman_adv: batadv0: Adding interface: veth0 [ 357.003739][T14087] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.003767][T14087] batman_adv: batadv0: Interface activated: veth0 [ 357.179711][T14087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.180290][T14087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.211712][T14087] batman_adv: batadv0: Interface deactivated: veth0 [ 357.211735][T14087] batman_adv: batadv0: Removing interface: veth0 [ 357.306124][T14092] netlink: 'syz.0.2048': attribute type 1 has an invalid length. [ 357.352642][T14092] bond9: entered promiscuous mode [ 357.353175][T14092] 8021q: adding VLAN 0 to HW filter on device bond9 [ 357.391024][T14092] 8021q: adding VLAN 0 to HW filter on device bond9 [ 357.401044][T14092] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 357.401069][T14092] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 357.421259][T14092] bond9: (slave ip6gre1): making interface the new active one [ 357.421284][T14092] ip6gre1: entered promiscuous mode [ 357.455793][T14092] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 357.804150][T14104] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2054'. [ 357.953638][T14108] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2055'. [ 359.440829][T14158] v: renamed from vlan1 (while UP) [ 359.583932][T14165] netlink: 'syz.4.2076': attribute type 1 has an invalid length. [ 360.541816][T14198] netlink: 'syz.1.2079': attribute type 10 has an invalid length. [ 360.541840][T14198] __nla_validate_parse: 2 callbacks suppressed [ 360.541850][T14198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2079'. [ 361.152954][ C1] ------------[ cut here ]------------ [ 361.152971][ C1] !rcu_read_lock_held() [ 361.152985][ C1] WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x41d9/0x64e0, CPU#1: ksoftirqd/1/24 [ 361.173416][ C1] Modules linked in: [ 361.177380][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 361.186869][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 361.197046][ C1] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 361.203327][ C1] Code: be b5 01 00 00 48 c7 c2 a0 f7 53 8d e8 70 94 06 f7 e9 aa fc ff ff e8 f6 3f 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 e8 3f 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 07 cc 51 fa 84 c0 0f 84 e1 00 [ 361.223174][ C1] RSP: 0018:ffffc900001e7660 EFLAGS: 00010246 [ 361.229402][ C1] RAX: ffffffff8a9de0f8 RBX: 0000000000000000 RCX: ffff88801f6addc0 [ 361.237555][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 361.245681][ C1] RBP: ffffc900001e78f0 R08: 0000000000000100 R09: 1ffffffff237c017 [ 361.253756][ C1] R10: dffffc0000000000 R11: fffffbfff237c018 R12: dffffc0000000000 [ 361.261895][ C1] R13: ffff88802a787198 R14: ffff888054e94790 R15: ffff888029cd9200 [ 361.269976][ C1] FS: 0000000000000000(0000) GS:ffff888123508000(0000) knlGS:0000000000000000 [ 361.279016][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.285714][ C1] CR2: 00007f0bbf3f0ce0 CR3: 0000000080412000 CR4: 00000000003526f0 [ 361.293804][ C1] Call Trace: [ 361.297150][ C1] [ 361.300231][ C1] ? __pfx_xfrm_output_resume+0x10/0x10 [ 361.305970][ C1] ? iptfs_get_inner_mtu+0xa0/0x210 [ 361.311403][ C1] ? __asan_memset+0x22/0x50 [ 361.316103][ C1] ? xfrm_output+0xa03/0x1ca0 [ 361.320899][ C1] iptfs_delay_timer+0x3803/0x4310 [ 361.326113][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 361.331688][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 361.336825][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 361.342330][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 361.348342][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 361.353928][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 361.359255][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 361.364485][ C1] handle_softirqs+0x265/0x8d0 [ 361.369361][ C1] run_ksoftirqd+0x36/0x60 [ 361.373891][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 361.378883][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 361.384034][ C1] kthread+0x38b/0x480 [ 361.388172][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 361.393750][ C1] ? __pfx_kthread+0x10/0x10 [ 361.398416][ C1] ret_from_fork+0x514/0xb70 [ 361.403160][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 361.408340][ C1] ? __switch_to+0xc78/0x1410 [ 361.413238][ C1] ? __pfx_kthread+0x10/0x10 [ 361.417888][ C1] ret_from_fork_asm+0x1a/0x30 [ 361.422823][ C1] [ 361.425905][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 361.433225][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 361.442527][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 361.452605][ C1] Call Trace: [ 361.455895][ C1] [ 361.458837][ C1] vpanic+0x26f/0x710 [ 361.462879][ C1] panic+0xc5/0xd0 [ 361.466612][ C1] ? __pfx_panic+0x10/0x10 [ 361.471052][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 361.476023][ C1] __warn+0x315/0x4c0 [ 361.480022][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 361.485546][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 361.490938][ C1] __report_bug+0x276/0x570 [ 361.495653][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 361.501041][ C1] ? __pfx___report_bug+0x10/0x10 [ 361.506089][ C1] ? lock_acquire+0x115/0x350 [ 361.510994][ C1] ? netlink_has_listeners+0x77/0x3f0 [ 361.516514][ C1] ? xfrm_aevent_is_on+0x18/0x230 [ 361.521653][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 361.527055][ C1] report_bug+0x16b/0x220 [ 361.531410][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 361.536809][ C1] ? xfrm_output_resume+0x41db/0x64e0 [ 361.542195][ C1] handle_bug+0x9c/0x200 [ 361.546573][ C1] exc_invalid_op+0x1a/0x50 [ 361.551103][ C1] asm_exc_invalid_op+0x1a/0x20 [ 361.556026][ C1] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 361.562039][ C1] Code: be b5 01 00 00 48 c7 c2 a0 f7 53 8d e8 70 94 06 f7 e9 aa fc ff ff e8 f6 3f 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 e8 3f 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 07 cc 51 fa 84 c0 0f 84 e1 00 [ 361.582184][ C1] RSP: 0018:ffffc900001e7660 EFLAGS: 00010246 [ 361.588266][ C1] RAX: ffffffff8a9de0f8 RBX: 0000000000000000 RCX: ffff88801f6addc0 [ 361.596248][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 361.604234][ C1] RBP: ffffc900001e78f0 R08: 0000000000000100 R09: 1ffffffff237c017 [ 361.612222][ C1] R10: dffffc0000000000 R11: fffffbfff237c018 R12: dffffc0000000000 [ 361.620212][ C1] R13: ffff88802a787198 R14: ffff888054e94790 R15: ffff888029cd9200 [ 361.628208][ C1] ? xfrm_output_resume+0x41d8/0x64e0 [ 361.633656][ C1] ? __pfx_xfrm_output_resume+0x10/0x10 [ 361.639226][ C1] ? iptfs_get_inner_mtu+0xa0/0x210 [ 361.644472][ C1] ? __asan_memset+0x22/0x50 [ 361.649088][ C1] ? xfrm_output+0xa03/0x1ca0 [ 361.653796][ C1] iptfs_delay_timer+0x3803/0x4310 [ 361.658977][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 361.664467][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 361.669517][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 361.674958][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 361.680801][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 361.686292][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 361.691527][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 361.696665][ C1] handle_softirqs+0x265/0x8d0 [ 361.701468][ C1] run_ksoftirqd+0x36/0x60 [ 361.705993][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 361.710957][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 361.716179][ C1] kthread+0x38b/0x480 [ 361.720267][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 361.725780][ C1] ? __pfx_kthread+0x10/0x10 [ 361.730400][ C1] ret_from_fork+0x514/0xb70 [ 361.735015][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 361.740140][ C1] ? __switch_to+0xc78/0x1410 [ 361.744874][ C1] ? __pfx_kthread+0x10/0x10 [ 361.749479][ C1] ret_from_fork_asm+0x1a/0x30 [ 361.754273][ C1] [ 361.757467][ C1] Kernel Offset: disabled [ 361.761817][ C1] Rebooting in 86400 seconds..