last executing test programs: 45.139355255s ago: executing program 0 (id=6515): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="1e", 0xff80}], 0x1) (fail_nth: 3) 44.491871092s ago: executing program 0 (id=6518): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) unshare(0x6020400) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) 44.084529546s ago: executing program 0 (id=6522): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003100000002cbd7000ffdbdf2502000900080000001c0000000000000005000600000000000a004e2400000008ff010080ffffff00000000000000000100000000000000000200010000000000000006180100000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x48004) 43.824507766s ago: executing program 0 (id=6523): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="1e", 0xff80}], 0x1) 43.595504041s ago: executing program 0 (id=6524): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 43.267608754s ago: executing program 0 (id=6525): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000a0000000a70000000000140018000000000000000000000000000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x400, 0xffffffff, 0xffffffff, 0x400, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0xff], [0x0, 0x0, 0xff000000], 'veth0_macvtap\x00', 'team0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x4, 0x8, 0x12b, 0xfffe, 0x0, "1b69609f994383540d52dddcb0303a7b227e0abdd6a6f5ef5157ec6d6b165961fa45320a43ed9581436985025e36e0fd6ee056c394760f36616c22df87dd9dd2"}}}, {{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffff00, 0xff, 0xff000000, 0xff000000], [0x0, 0xff000000, 0x0, 0xff000000], 'veth0_macvtap\x00', 'syzkaller0\x00', {}, {0xff}, 0x32, 0xdf, 0x4, 0x24}, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@private=0xa010102, [0x0, 0x0, 0xffffff00, 0xffffffff], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, [0xff, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0x2, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x3f2, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'bridge_slave_0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x530) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000300000004"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000cc0)={r8}, 0xc) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r2, 0x2f, 0x0, 0x0, @void, @value=r3}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r3, r5, 0x2f, 0x202c, 0x4}, 0x20) close(0x3) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000009060102000000f8ffffff00000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe, 0x0, &(0x7f0000000880)=' \x00'/14, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.935832952s ago: executing program 4 (id=6620): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000096b006a00000000000000020000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a000100000000f3fadbdf250a1480000002ff000001000008001900000000ff06001c"], 0x2c}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x7, 0x8, 0xf, @dev={0xfe, 0x80, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x8, 0x5, 0x1}}) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd70b71a4b9087a14949062300df25030000000c00030004000000000000000c00030000000000", @ANYRES32, @ANYBLOB="060006000000000008000100", @ANYRES32=r2, @ANYBLOB="080004000a010100"], 0x4c}, 0x1, 0x0, 0x0, 0x20008090}, 0x24004000) syz_genetlink_get_family_id$team(&(0x7f00000002c0), r0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x202, 0x10000000, 0x1000, 0x8}, 0x1}}]}, {0x3c}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r10 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)="27872b7c0dd150466b17dc7829d3095dcaadb4c0", 0x14}], 0x1}, 0x4011) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030028590214600600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 7.871960178s ago: executing program 2 (id=6622): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 7.512632763s ago: executing program 2 (id=6624): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b) (fail_nth: 4) 7.117276898s ago: executing program 2 (id=6627): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x2, 0xb}, {0x1b, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x40000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000003f00220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, 0x0, 0x4810) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30006041) socket$inet6(0xa, 0x2, 0x0) 2.878777467s ago: executing program 4 (id=6637): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b) (fail_nth: 5) 2.487640088s ago: executing program 4 (id=6639): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000000097ff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.487119182s ago: executing program 2 (id=6640): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) 2.213544354s ago: executing program 4 (id=6642): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) ioctl$XFS_IOC_EXCHANGE_RANGE(r3, 0x40285881, &(0x7f0000000880)={r2, 0x0, 0x81, 0x6f, 0x200, 0x1}) sendto$inet6(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000c40)=@nat={'nat\x00', 0x19, 0x2, 0x20c, [0x2000000009c0, 0x0, 0x0, 0x2000000009f0, 0x200000000a20], 0x0, &(0x7f00000003c0), &(0x7f00000009c0)=[{0x0, '\x00', 0x0, 0x8000000000000000}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffd, 0x2, [{0x5, 0x23, 0x8808, 'geneve0\x00', 'bond0\x00', 'veth1_macvtap\x00', 'bond_slave_1\x00', @empty, [0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0x0, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xc}}}}, {0x11, 0x10, 0x927acf825bfd01d6, 'rose0\x00', 'ip6erspan0\x00', 'ipvlan0\x00', 'team_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, [0xff, 0x0, 0xff], @broadcast, [0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@multicast, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}]}]}, 0x284) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x400c8dc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000cc0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x1c8, 0x98, 0x0, 0x98, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x4, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r7 = socket$inet_smc(0x2b, 0x1, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x7001, 0x8, 0xfa04, 0x0, 0x6c02, 0x190, 0x194, 0x194, 0x190, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x42}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x3, 0x3, 0x2, 0x2], 0x0, 0x3}, {0x3, [0x1, 0x5, 0x4, 0x4, 0x3], 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003308230300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c213083f1ba2112ce68bf17a6e00000000000000000", 0xb8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x10, 0xffffffffffffffff, 0xe5a1e000) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r10, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0x20}, 0xc) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r11, &(0x7f0000000200)=[{&(0x7f0000000000)="1e", 0xff80}], 0x1) 2.076543748s ago: executing program 3 (id=6643): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808700000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9000000, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.076222879s ago: executing program 2 (id=6644): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000680)={{r1, 0x0, 0x4000, &(0x7f0000000340)={@_ha_fsid={[0x3ff, 0x1000]}, {0x8, 0x1, 0xfffffffe, 0x9}}, 0x3fe6e0a3, 0x0, &(0x7f0000000540)=0x1}, {[0x5, 0x1, 0x1]}, 0x18e, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.924366133s ago: executing program 3 (id=6646): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 1.851532165s ago: executing program 4 (id=6647): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vlan0\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(r4, &(0x7f0000000500)=""/4096, 0x1000) splice(r2, 0x0, r5, 0x0, 0x400000008000f28, 0x0) splice(r4, 0x0, r3, 0x0, 0x1, 0xc) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'pimreg\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000aaaaaaaaaaaaaaaaaaaaaa2d86dd6d0020088080000020010000000000000000000000000001ff6a000001d1a808125085d8e58750ae2f2425"], 0x46) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team_slave_1\x00', &(0x7f0000000280)=@ethtool_perm_addr={0x4b, 0x14, "5c76276f6c86622447099377e66e2ebe40decbab"}}) 1.850921364s ago: executing program 2 (id=6648): listen(0xffffffffffffffff, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x3f0, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x340, &(0x7f0000000900)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x30a, 0x3a, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, {[], @ndisc_ns={0x87, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [{0xe, 0x1, "74885232321a24d649460ec1"}, {0xe, 0xc, "e05e7d46bdbe884942850a4df47ff9f587c66619b923a37f868a06c672ecad6cdfcc619392db6a1ab866329c4fb48793e3ae795e54634d536d29b2da29bdb36aa95c2c758e2f75ed2e45c2d67c1eabfd3e638e9ca748d57547443a4b61a64b"}, {0x1e, 0x1e, "31fdd86a1592453e51df168acf0faa47fd4d8cf44b6b8b7ef79c802e907b7a095ad412fd0c1d5a1b878fccc427b19c8daa4bdda6181d97917e81232b779d0d4ddc3c51cbd29cb004bb4b9b7c8ae469edb0151fa923eae8263a590363e487f6a91589c01c887b34b924e2ef01689635349561eff05e96f9cd2fdfc994a799209e10dc7e82b67975f5f4276cd797b18f5913fb346f1ad5cfab9bb7b7e2c98cb2b49fbc6869c3e722bebe815d434fba6801b0aeadae41a20a43662ad18de84a04a6985662566af8bad98b199886380003e3fae00acc61b27214b08686768b51309da2efd4c48949f9f9c5a5e8fb588bf373b932b1"}, {0x1f, 0xd, "080429e78fdfd06a56607a7cb4763a7ae1c09793ce2262dc13771e548ee0bc978c0ceb02a192580c16e5adac896e63f0bbd4bc52ec516b12433e9ab4b27a1c1bc3d6ca7e83279c9c60dee88356d8ac8c78aa2593e356249c6ecf767b21107d9db8480d56b416db69f2b348"}, {0x1f, 0x2, "ac26f69f2b1713287287f475dd56905393"}, {0x4, 0x18, "a5a3b1486394a5643c22f7b1a1d3d08d2edd99239c56d81370ad6e95aec574ef0a9ac258661a742fe59a0079c2919eeb7925d2581dc757fe3225481c870d081f8a939e8257534ddfee5abf43c292cbeeb59e79c7e94f1fa06b05c6c279e571ef6e695cfe93cc97ebf9cc95378491ae47f64fb422068fb7b84eee2a8063d9e8f3b3283837b851b8270e888ab4ee5551bd18c23f46de480815e5fc79fec66b711763a75acccded351fe4df7915b47bbb15bf808f0ad8fffc9266a8030115c2ce8a"}, {0x22, 0xa, "2164f0391e0eb9cf8942e84172380f0072e3bb447894e8d6872274d8e508c160625cb442171c00fb1329f6e6ffb309344c53043f3ca271a886eb26257fa54e9165e55c18bbb47eb5fee89d4cbcce"}]}}}}}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000008c0)={r4, &(0x7f00000006c0)='^\x00', 0x280200, &(0x7f0000000700)={@_ha_fsid={[0x5, 0x4]}, {0x5, 0xf290, 0xfff, 0xa}}, 0x100, &(0x7f0000000840), &(0x7f0000000880)=0x10001}) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRESHEX=r3, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000001640)="e0857f9f582f0300000000000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r9 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r9, 0x6b, 0x1, &(0x7f0000000740)=[{0x1, 0x1, {0x0, 0xf0, 0xd}, {0x2, 0x1}, 0xfe, 0x1}], 0x20) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20048081) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50000000e000", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001, 0x200000}}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000440)=ANY=[], 0x14}}, 0x20000000) 1.199070539s ago: executing program 1 (id=6650): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.07521568s ago: executing program 1 (id=6651): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x884) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000140)=""/250, &(0x7f0000000240)=0xfa) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip_vti0\x00', 0x0, 0x7800, 0x8008, 0x9, 0xfff, {{0xc, 0x4, 0x1, 0x19, 0x30, 0x68, 0x0, 0x5, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2e}, {[@generic={0x44, 0xa, "f201a033598d1431"}, @generic={0x89, 0xf, "1d8b94e70e18cb23d0037a9d23"}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000ac0)={{r0, &(0x7f0000000500)='\x00', 0x30800, &(0x7f0000000540)={@align=0x10001, {0xffff, 0x5, 0xd08c, 0xcd7}}, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=0x4}, 0x5, &(0x7f0000000a00)=[{0x3, 0x1, &(0x7f0000000600)='l2tp\x00', &(0x7f0000000640)="88", 0x1, 0x10}, {0x3, 0x5, &(0x7f0000000680)='tunl0\x00', &(0x7f00000006c0)="f3e149450400b768b5112e3d60b7a2e6", 0x10, 0xa}, {0x3, 0x8001, &(0x7f0000000700)='%+{\x00', &(0x7f0000000740)="d53ca53f88e0557699959de75e0a7107abcc6aee9180e2161ee242590c544b111e49c45492df199d221548f503aedfcef44eed621170faf99df60d4b6b8bdcaaae27222c2017d80b0bb167b2413df72abc7add10f7bbc6fe7360475c2ace6ca3b4d0b56fdc3c7df2a5d62a2b9c626300a8ab9a65eccd31007cfa5c92dd4e843ca7237f3fd290b4924723074ec3bf79198bf084246985c0f601f1edc579b8d86843f2d183aafbfbeeb179d8f98bcee15ce450f9cc92425bfc4de6714f94a8bc65f46de9e1216f0e260869102e0c27ea13c88fbf3a3039", 0xd6, 0x12}, {0x1, 0x16e, &(0x7f0000000840)='bridge0\x00', &(0x7f0000000880)="05404109be459d4bdcd970f98d5dd0734e7c5cdea620e85ea315a4de4215839d3e1b31c61e8731b58fc9dcc05de8a517845ffee502bcf950c151ff81d544f93fadd92650b47b25824ed6a35632d389eabcf79a171ef1ddae946f4390166a1f49779e4772b59a1b106b2536ff9da1a3cf14cabb4139f477004176790ccd16c8df17659cbdc9367469283e222250af665bd05684c494", 0x95, 0xb}, {0x2, 0x3, &(0x7f0000000940)='\x00', &(0x7f0000000980)="2351975bf412c870b46d2be2bc8cdd881bfb3d92c5c091b3b45c7112a64d9d0edf4d93e7dd531801b253a9e13333e4c5e356a9ea5f4e86acbfc9cc2bfd1423eb48d8700124658a67808b22c05a9a5c4c393f71b4b31ae6d2f8144ffe235a351aa01d833d2e00c7fdbfa92828", 0x6c, 0x8}]}) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000b40)={{0x0, @remote, 0x4e20, 0x1, 'fo\x00', 0x26, 0x5, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x3, 0x101, 0x400, 0x8}}, 0x44) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xbc, r6, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xb95bed1474d565a3}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x11}, 0x810) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x60, r7, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x6, 0x72}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x9}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="80c7f97d89b5"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xffff}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x10}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xf, 0x8}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x440}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r7, 0x21a24d10e539eee, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x20000) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r5) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x80, r9, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd22a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44002}, 0x8000) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x200000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r10, 0xc0096616, &(0x7f0000001200)={0x2, [0x0, 0x0]}) syz_genetlink_get_family_id$smc(&(0x7f0000001240), r5) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x50, r7, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x7}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x40040000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f00000013c0)=""/201, &(0x7f00000014c0)=0xc9) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x401, 0xc, 0x10001, 0x5, 0x1, 0x6b}, {0x401, 0x4, 0xc23, 0x5, 0x400, 0x5}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000015c0)={'wg2\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), r0) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001640)={{0xa, 0x4e24, 0xfffffffb, @local, 0xa}, {0xa, 0x4e22, 0xf6, @private0, 0x3}, 0xffffffffffffffff, {[0x2, 0xfffffa33, 0x2, 0x8, 0x9, 0x80, 0x81]}}, 0x5c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x28, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfffffff4, 0x7}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000001800)={{0x2, 0x4e21, @local}, {0x1, @multicast}, 0x6, {0x2, 0x4e23, @rand_addr=0x64010101}, 'ip_vti0\x00'}) 953.29189ms ago: executing program 3 (id=6652): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x3, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x10000}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000080)=""/165, &(0x7f0000000140)=0xa5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ec33c9e9b986c0f4f24abba1a4", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x6f) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 855.841996ms ago: executing program 4 (id=6653): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x53}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44004}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xa}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004804}, 0x80) 825.60334ms ago: executing program 1 (id=6654): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000200000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 663.104689ms ago: executing program 1 (id=6655): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000100)=0x1100, 0x4) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="5f82f2b87e9cdb67204e595c269f150d05812bd7081611b3bddc5460e211ba96b2f7d50a2bcf2afc99557e1fe038fd46d740aff15be513e66612e6b6eb7e7141be44d04aa36b3d7d9d4184648ed896581ae8839626f65cb99318952f57d465add22181dcd247563f135981439fcf598663727d2737b300289d68e84702036e14301a70bb622d8b2e927c78a250df81605104414fb93ca8c4c3fe51abad77ec4c608622055c7e22116c6669875e9d2901ab93dc23f6e8f297eefcaa5592056d8bc017fffd1c10c95d226c3aefe2f0c26a81df8ef1cf441cb6b4b47e7ebafa421746788f", @ANYRES32=r4, @ANYBLOB="00000073006300fdc0c80169aaa53bf604dab1d5f233939ffbf251591b5ac097433ad68212eef4cbad28fdbf8ec64734804ad9e204f7946d6a1e182bcca19b6c0de450f40f1d6bf751cb856ed74482ffff1992e62141061df8da9f0ca88e16996c0d9ca9de34750a8cc55d08096307f3d509bd4ddca6005300bb804d8c52af5aa3543fd54b15a8dd0ce0a1a0ec60fd7a844c244a081f0225e16ea2040057804d1ae06d342d820bc4967748364ba4aa33fbe4f992372af7dd9c901d3206070400888008006900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="9bb77d08004500ffffffff0c0013008100"/28], 0x7bc}, 0x1, 0x0, 0x0, 0x880}, 0x804) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="5f82f2b87e9cdb67204e595c269f150d05812bd7081611b3bddc5460e211ba96b2f7d50a2bcf2afc99557e1fe038fd46d740aff15be513e66612e6b6eb7e7141be44d04aa36b3d7d9d4184648ed896581ae8839626f65cb99318952f57d465add22181dcd247563f135981439fcf59866372", @ANYRES32=r8, @ANYBLOB="00000073006300fdc0c80169aaa53bf604dab1d5f233939ffbf251591b5ac097433ad68212eef4cbad28fdbf8ec64734804ad9e204f7946d6a1e182bcca19b6c0de450f40f1d6bf751cb856ed74482ffff1992e62141061df8da9f0ca88e16996c0d9ca9de34750a8cc55d08096307f3d509bd4ddca6005300bb804d8c52af5aa3543fd54b15a8dd0ce0a1a0ec60fd7a844c244a081f0225e16ea2040057804d1ae06d342d820bc4967748364ba4aa33fbe4f992372af7dd9c901d3206070400888008006900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="9bb77d08004500ffffffff0c0013008100"/28], 0x7bc}, 0x1, 0x0, 0x0, 0x880}, 0x804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r9, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, r2]}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000040)="114a", 0x2}, {&(0x7f0000002d00)="18e7a5dba482d8c73095cc1a4ad3ba8f3cb7d2b3b8a7e275fc7257c58ecb7aacdbc474455193cde389ff6ac309140345c0a568a7c4d6b2301adac82bf7a6c4f1d5600e97feb316e2561e71a3450920307db41c0a932852df5c5cb6277680d2f5c15aca5adcaf05873f5031e807e5250d1b0f663cd1ebc69e27d5f729f40db14573c3c59c7855bda3a26e125c", 0x8c}], 0x2, 0x0, 0x0, 0x400e815}}], 0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001700)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000001800)=0xe8) r12 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000300)="caee82b8e40e9e3548a8e56a4f1f7ff5d170e93c510b44f936fb4590af51927a4d1964b5237f0480d8aa682d249c055a4bda29f0767b0cf8c1aba360a423cf0dfe4d1c930dc2548ffd65b145aded92d6502f559071d6ab6b16c1e5fb317ae52e6c0ad9174676d38141be87c5d3a3b9af28e11f573a4604edd4c8cb207514d46de36773a2bf5d35f88702c84e0b5f57f856a2336d73d4a754ae253b381bd0345a64517d543d06e05a6fbccb3e2fca4e0fe2c49240eecbbe272bd0603353ba830b19e1481600fb48e453e316f9a64fd5ac0f629c0783753f32599e4ae822c1a0bd5e66329771e1db438933b2bc8ec462b4b6da15691fac3e3effcf5ec22aae51e22e2ebe29a9845a562ef3b122c20865bd95822b6415fbad8db8ec06176a5a95de760cc8022c475eb9a03a1ecd0800efc49224460bd68f6d7f65638fcfb586f6c1a8a6506fffa8723a0b18c86884e3a3a3ad9641542c3a3d64e976742a98226e6e42ca953a58a96e09e418d133485b9b3f1cffe8e1612b6056d08ab7d8db864e4022bf9d4313a91ba5367cccd4978b7a518897094e73822cf009ffd471439630895950102b853d56d4798d91e237485b863c7a86fffd391b2b37dc85a855693fe73d18782cb3de916e7306b5cf66b18125115a74503a67148203d7e444e758a6d00e9feb07db80c007e1523e2fcf51b23603d4e22898ee5312d6bd99672efa239b953d018f72eed936b8af0a6f50b71af6d35b83ab9c294fc83d415fe28ac72f337a97830aba9e877dd35046ade2f609e88ae0671e9efe5e31fe9a91456e47f62c86a5a3db7aa0876cb97848496e313c794751e50eaec18a7570e9cc05dd07b06d912f4f2562cb70860dcfe0c44917183fdf2c07e6459da3a40529a88184dbd5e95880b40b6165ac390138b7dc74e1e09a1a4baf14be20a2dd51d9dd71f86698789ea52b1611c8112956ba45825ed66d80b8afe0810231a96d965e88c35c1c77c8901592cd75d1bb5ceabfa1594b0f1868c95d70b373b8cb65363f272be43a1e658d84fc34ad6f5f9c84cb26efa43f51fd73420c5edc83d56e2c1c8b590004ac16878129202e7949c2cfa1fbc9327d0a055f277ef05b3115040619e35e29d3c234d81c7283a6e40da2ab533b05315f733e96179e0680f9d0e11b1d38696e82b4674ebd78d9007942e864b1571f09d1fcad079b0fc388b9de863b173b73f8c0136ba7057b8f920817b868220b8f0e42c546f0bc9465211058287213e64a1edff68e4ca82e332ea45644df23f7b181749f680d9f8c8b9acfe5119c90086d626ba288406bbbafbc315aadf6194161549b09450fdffa58514f2cfa9fcae5dda4cc44b04a4ee9392b713a8d856792d11ff75c94c879f7f4f8d6278ce7a1977ddf9a4f3a2767a0835d8e5e01e20313beb65e8ca7fc96d370b6da60699c583c6a85d4c9ab4d836e919b33574efbbeffc2a25b8ae9910e80275949a4819e554951327164481ed85431ceec9f890bbce9490fabf8d38e4d6daceabb67107a8f98225ed83082dd811e7a874100b2335a4d08bb20b9b73c31e510c8548c18a6fe19861a2d6d91ea092a82b161ef973646868b2a13b6e7c62ab117b8e1d055fac80495563e7640dd73c74e03a98d2c78b9c0c84127c7816fb4c7cd328dd555de716966f978a1250eb17a062b213b9e8ae4da769f9fe4eada2579697047a7cb96c21f1f6904089b755e055d23c1d539ca808f2ff5bd0c24dc52352ed7cf1640b72ee816acf5e1b5157c84585aa40f29c59e7e0c5ebf346a86d77b5fa3ff6bafdabf740c244ed72b4d28ade438c803b623e1db9b40f355825a2e0570c244a0edad84825bdf1a241afe24dbf5f815a68e4040ae95614bd92da58e8bc7ea9951d6c932e7ce842e1086588b811b1c4a58ebdca17f3c62afd5a4c4eadffafd5cb02dcfbeb44d0c673741386651148a11165cb9a2c74b032433cdb968fa86b3c766f5b01aa5b05fed478f0338ae57fcc5847ba835ce36f5c97c0d577c7a4847d48aa949b1222f4bf58f163ee78dc84774753a0636917238f525a8c11d7402c00aa877b6c558d236b20a8cef55b40c7288000feda2512d612f4bf95809c3276d7ce9484db0caae0eeb4b58cd0b8564d22d13f564afe0698a4b5def54a1081f283fb6abb9cd0ce077004874d542863890feac61c81c21c8a72e94e60a4780fe3465c3a38109bf7f6885a39fd0446831e1fdd226553f55a1533baeec93f618d3cb20a18e30d8bd8e2fb18601944612e855489b34d9ddf09d2c10d60d1c2bfc38f57db3f444190c05112c5a2227337b7b2d54abacecce8056a99751c84fb98eab5e2e92b5b103f4fabd686d51a50d9ac872535171b19963b55c58c0d6dc71e5981363d5ff0b40582c0e264c5a8e76f602894886be0397badd4f04adcc4724f7551cd38d1c3820bcaba0a5870fb2eca02663afa1debe3c5082e5ed9ad1b7a16c6dee43ddfad8f138a76cd86f286d1f58c7d0fba862010e790cd6d66cba0c94d9b8f1a882f166cd16d9e12b716ca1cfa8334163de40909343ab805bea229a4facf77f38c94323e73b8acdb0c90a4510a4a3bf099f8d231139b43c74a97ff206733f00f83e8a553d56019634f0c369184f7278db49662caee41b4e631b0dd810a5b6e8c1f775f34de915ec043c2335c9103501f834d7d51fb44cf866aeb5512da43ec0ce4259306e296071ceb250ec2aae87c005bdd3f660995546979612e030d48462c42a1aa39967e8e36cde19625e8c02e36b4fb1a18b7dbadce3ca11446e71f45f3a76557cb8e4c7458645e63398398167332f47be006cc0d0d3724078ac7253eec9a551f863edb0702c7d9e0965f8693273bf862fa6282d71e8e5c7a5e7689f9c5ba4f214243dc40266ecaba1995c202d67e28928f7404ecf07d4338a16d1683ee9db9405e8667a5e8ae7da774f5c1f7f7f47b7e575159db918a9211309371120a852ed3deebf489f88cc768b776a466d13eda23935a7e14df4244565713777b22f860334398f5c1c96d8f1505f4836b49523bf921416904481eb466bb6c7449ac49bb5e1949f1cd19b067ffaba5e863c92f4979986107c9b1fbb464605fe7aa76293eeabb4eec806cc992b58f3192acdfdf804f7943794f9ba7afb445e978180975f94caad908fe73706f244c0e99e480be66224fd0e8d5e964f959fc14397b0fae8e14ab2fa2a283d24174e1275e4a73f3b57eb5c1849083103590feffe0ccd0872cac787d23654bd43733d9beaf2e82319a889ce028dc9af3233d099ef78f4ba831baae4a3e0f35616871f2a3c3518e0c899d1566b4b68f85b9f7be4bc4a625d7920a91d1c8175294117416bd0080dc80b54fcb7fa951e0b43d90b65305ceef005536f4f0e890dbf60c5140da579da9070179678e50fb807b97340fc56c76e7ed847a7cd9fe4410d8b30570f5a874e3a51bfc61a48dc917b1bf8856df95e7e7a1c49d5ef87a7b18ce3245e95787755f1c8c09c90d03d2c21da713bfea901ecc473eb52e1aa249835ddb0c45593987ab46e35b47ffa88f595ec581fe8fea96d8b6417d14d5d7f5c10e73bbf4e49039c6ecedf41e30740c1be5005482397d7a8d15adef05245fcb6e64a65b89bf1e1771cba14564542af1a1fce87e2ae8f492c5f7996606e9648130f9565cb091b57ab2401421b16a473b365978e33927e2bfebe32c1fdbe06db78e5976504744defbe21e3a9c6d14b8e6a5bf0e6fea90b6c64b1ba1f78397cfdfb0ab6e57367855dc4d1792d4bb09edd90e1f2eadbe576e362b52476fffdf2439aa0e231c39d1cd647b636bebcbc6a58fceb2f9f398f217a30a1278fad8662e8645ef2a770f0b367726b1c567f7dd0d59bd5d14896960d2aa6dcf4fcf92cececd405132ad183355e960f8405ff6871eea5847c49668c9a2e5c166a50ca539ccb24fc14e7127e6e3a3c6223fd9de2caf99f17572d41bec9f1662f5c7a9330ac0e0d5ae9a9f8614e64d5a0d5517328e73eb630e18ec3501d7178d6b185c1e6d429e621111347cc4dd85413c29d936ffcf4df63a435270fa0cc5294054cf41540cdb1d87de5a1a976256a39161d1d15080e0c7c3fa75402801bf730ecab3099089f4badcf2d81e99bf48f7d5a44ee7bc745ac2e3e877e63e0791848ec2412ee909134a7691215181b8fc42b4ff6cc6b495a3cf63f5e1680e77e34c0d6dfdcd93de0823d02710b0a982e423bf52346a81c81f3a837fd0ca04ca25777bf8ca68e07dd95fc9be6563b0fe8ba16f38b74de3ca5f48d795427284ba3dd6f572cd39f4cb3fc31b4d358c014e969aed5306a13302d4740f499540cdcecb559abf8ec25897c85823bb5c3b9351ee22ef0f90a636dd92fe7cc25a7a1623a29498c27321d4c807494e1a6e457e99726e70c6504bb6fcabed37931fb4676ba64b92b93ebf1ef5805c69e648371133d3a20744630fb56028c01dec50838811ff7c41806706211bef556e1f84246e4f838b14542f0724823be1a35b1dc1133c8530813bbb284c3db5542940a909aba8c9d198a073ab76144f7cb369da49343194ef6ec4cb4d346c240d35b43d3646fa69f17699db02767a83c7223011a1777fce0fd5b6e5dc2a5178baa8dab6591fe1074d0a50a3c446c97bf87e777cccd1f729ddf8cf3886722d645d6be3df143ff925a132d13e83ef8499e2cd1ee637a3b448a903d82b7cdfb948b39e7658a08734f58d1af2b76bdfb255257cbd14cd0e3dbfbd72be925f75041df43129ea8dc00f94aae4e8c90a40cf204f0dd47337e8646ae9037d6b9a08794c6d3ba8caf6a81b21c87b6c876b5ea8f6f5cf3e0224c62796c969a0876dd09645d76aad626569c56c0cd168c2f57a1c8efd7e5a44860b85ccfe9370728c49c2f44d02d7c7d2aea87db15a6a72aae79a33efa77bc1930660d21a3667e1d7b84131d74b0d7461bb8ae5364130962bde1533e7f7aaf45537f67d68bc29a36b9c7b3550ba0a5eab60b077a3a4249ea24085146ca310c0e460b165860f5b7f8cdd6a03f289afc8fe75ce39dedd5595fd2c25ecd8435d4bdd9c1335331f209ed261e7a86a09ddcf8fba97d8080b4842ad34eef3dc337f306d6abcbc6175e56b97d9a9021ed3d210d5cb89ef2ef63a0c8629c45ce589739c6f480dd68a1da222bdd570823b9c436084768eff483c1a2e9e9ceced4bb6d0e998c57360cc880a3eeff327012ab12b799576b44a85c8fa56ce4b6394b299b52788991c69f4cf549a97bd7155cd07dcafc31f8de44db4f3bc2988e5b02be0129c3f3e54e4006a991981a077f69dd5efb2d2c6da02d96e9967a747d1014fb39b90fc73ab0726c6a836c747bd7aa1f77bdf62a4cb7191ccdb30d7fdc86ce8bbd7db71d7f5f108ef5f4ceadff5d94dad4c1a6c9d3a930e2682f6e5a12cd6b75c53f8fd301aad989398a2ca694023228c708382d7f614bbdcea33154cf5aedaaa1b8f36ff8897bdbef1246d0ebda99ca6e9c8504e61f9c6c219b9a25145a1808640aee2cce567e7fe3ec08ea39e21b8d95887cc586dbf096b5c3602326f634f5a727b1438bf28032067870e57e5a08bb20f7170ddbaf08bcf4f660ea2584c7dd7d5e877c33671cd446b49cbc25957c5dc7442f7883db74eed885edb56ddc053a18b1488278a66e7cb209dc4a2c542ebc4bb19444a602d6f7cf1f4783a976dc5dbd81488fa5da36c79e607484d8da86bfd1600fac1efb7d88f89adb0e3c6bae90c4bf1eae861ba05023f677a9ae2156fb083aa7a2a55a74b63620a347513e580b96edf20cd6f44c966186abf36d2f411c4c0b", 0x1000}, {&(0x7f0000001300)="540eec939b470ef9d282add80d5cb89556ec0e57055cf80824668d508c6fff7773c4bd24d9374f2131a5cbd67ce3911b3f8091231a6970c65382b304f4f14b0f6c4354d842becb490666516253613ef9d90ce29fa2ea7e9dad96d1d1a0235ac10b7334b6304bbfd4bb1d3faf26cdc3d8a2c76612ae73fb7a467205fe8abb3f1b25", 0x81}, {&(0x7f00000013c0)="0e173901f4ee13978e38b055eb7d4f10046345be9195ca7020f8b0716c292f1f9cf2ab1900109bcbe43deb7bb2ca569abe1f79f3bb22ee1456d9b4d34d37c56c0a442abe230422124aeaa172be4772d2a215b323993b2c5ac0f1168dcbf6f08ce68e0504b0df5825cb2e8cf1e6611e47ce3babc7ba", 0x75}, {&(0x7f0000001440)="c31a5fad038b36", 0x7}, {&(0x7f0000001480)="2804822b7bd55cd395f8f4c17970000fc3e5a4f1f96bce37a86fae72bac16484397ed6b0230a08aaee5e8701bab2f38737acb60c798d7d46b63a4b22e9c092747b3e31c948f294c7f2f5e9f67dde04e852cd7b2e2d5a9b80e09f4496da85d1f7b9d98a57388ac5101ce33ce76247fd01369a6e868cdc342bb4e2740ee902add48855934fd70fedb68a9699a4396b7df9501b1d82839c1454be8b458232127027893bf2863cf1216384a3f19f2fa78f81710521bc3093e3f1199b836ebf4cfaa844fdbb989f4d9bd30c1bf0227d7a09c76ac03a81cb6641c26d7ce7ac20f8c058828f29d353dda24369bcfb47a9f96930bb5a336d2b09b90fd58e", 0xfa}, {&(0x7f0000001580)="3d8e52e421a318d8384f53bf3ae4cb2996a15fd2038a41fddbe508f190757db9134c0e4c2e9434b5b9897dbec310ff95b0", 0x31}, {&(0x7f00000015c0)="5ad5d2b85db2aa4f49d33d37da563ad87504c1a2677f8a1cab86e2836f6c85e1ab7f4e15534ddc494704d68a192612e2244f", 0x32}], 0x7, &(0x7f0000001840)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, r7, r10}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r11, r12}}}], 0xf0, 0x4004}, 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001400)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000001500)=0xe8) r15 = getgid() r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r17 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000015c0)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)=[@cred={{0x1c}}], 0x20, 0x20000084}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="69ae783cb1d6cb06c33058e1b6634f6cc8f3aa9b69207fe46dd41066da6de0e4c492415fe2c44b52f5c21bf26c2dc2ffe686a107de77639527ee368c57189c21125436e51a96109595df461c196d49c5e61fc0449b8e2cb4e4d18845c5ce2cae9fe9a8e5e0f375118c3ccc2f0a264079c249f269b41d38ea7a01c55b6461abd1e68118b59bcf1512f2365e30454538f081735aafdda797a905632defd6b6111f6e672a786828077595b8b5ac55615543ccbee4759e89b5f0bf91e07070f03e3138fb2d35", 0xc4}], 0x1, &(0x7f0000000500)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r1, 0xffffffffffffffff, r0]}}], 0x28, 0x800}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000005c0)="c3e6b40e4c2e3ce7fc75e117a1ee15372651a838a49423e2793d2ef09f3fb249f615c1ecc6801855c8c877f93b6584e26d9a64a061b8eecd2d10833fcb1954e7", 0x40}, {&(0x7f0000000600)="a43f133ec5e66f841c50c663e66f07209f9af6d95fb928709b64920700006f9dab048d2c5d42837ca90074e99ae366b08da85ab49c317caca674570e1c6110070530c0f6a06c76870e875d510a2c", 0x4e}, {&(0x7f0000000680)="31225e797ea85a82dc74459ed0a2f591571c96d4df2a7b71b720c317194ccf6257bacc75ecf71abe765ec662ebcf241365ab311a7c8245a619e408cbea62276fac2ae896a96a981f2c7b971a48ed16c9c6329210051376455c738c21dfe0044ecf8d5c51a1ba29b9b3fae45ac78483fb2808d2214d5365aecbc6c42472baba533cce030ec800e00bd1d8500ee02f4c796d", 0x91}, {&(0x7f0000000740)="e889663ebdddea643707d5c416e5f3792cd757aa2dc954bdba069056ea0738f979889f380986a6", 0x27}, {&(0x7f0000000880)="7924f8664fbcdcf5391e08f1f09c546f67db717b82fc28fe182ef322d78a2d27d4ecc29c5ce1a5bf0eb9e03e7b6a33bffd15b8fea3023a2ebbc7996d1ea2aa812d55166b730d2fbc4fa5cfccde9202fa1781a2da0d3bbfa0a8e45fda60842b28d0dbe306f5e094050b5ac8bf2462094a27eed5e4fea3d0b531d2de172dce0d880556c738e660ca26cffd0e8b3440d29c87fb808d6a5a2849115b930df1d37354325f0d019a7f66a7515e342d4443db1954b6f823c2ff3edd669267604e8fadf8990fce3be5d19488a7df5073108b7a583be4f09f0ac379df8d039a6a99d85b7ffbc5ed1ac5c684972e7f915ed1ff9812b6f57a2f7035ca2c36", 0xf9}, {&(0x7f0000000980)="84275a9dfaedc01146015b817e0ee538c669773608c652344e4b31bd0cdb0d1d2817eefca80c6f945efb3a57efb86da66ccda0ee149a6ddbf125aa1db84a1f6520e804985f5ece", 0x47}, {&(0x7f0000000a00)="13bd6d87e1ed54c09ff8256d6955305a7db4d89f6b33b34d79219ab1787b39c763303c0ca5b1736cf4c9d4d5681064386311af0bceb15907c8bad7d0488a81301f7c5ba62a7f83a3561c0f63a8d1641ba61afb0c5fd752be89e12db91dde07e90283cbeed0d8acc17668e5897ba4d679a9e219097ff8455d90aa7cac71c499aef7589bddf02ec2395fd10bffba00566253d92fc0c3593efbeda1c8e70fd936b42d11ffba7f3285e2c57249c2f77f2bcbdafbdd8bf21e80b0e09d608683d68011f0f3e5ea19bca24cacde9823f5923393", 0xd0}], 0x7, 0x0, 0x0, 0x880}}, {{&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="a096ac95570aa3d575b32b7f60551dfc01c8e5147422dbee94ee4a6606a04559b2f6770d877ed6ba191d1ed3b8110d4fb6d3e1905ccf08bde0fc0b2dfa7862c57c5e302f7d3ca093c8b59671c5f10af872cb8f49491b8dc6c5cf8fceec8dbb5edb44f41349212e25847125ce1bdf94d7f5bfcbd83e6a54b8a063d0932b19c78aab672bc930", 0x85}, {&(0x7f0000000cc0)="4643c99071846b7fb53ce1c8a35a4fa7b898519070686963282b7af41dfdcfc16428d237a061218923d73d4cf8991198759c487579335efd3f6d92c87006f837f8d157c491ff91722c5911b836615cca355459a945d6bfee57854d4a684c4f4445ed675fdb63c81cfca080bde536d7925f177be49f19bcf6d81563494d36888842ff643039f741deb41f270b6657a3b58c6b2d5af0951f493321a02d999c7c78e982ae5bac08fbc6d7c1dbb0d4f1f60dc2df7053220343cb5c92e0ffb873bd0465ed6ca08bf6b2b9b534ccd69b4adc8fa863227262ea9c28b1bdeaf56a32202526249e369abda079cc62", 0xea}], 0x2, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x44000}}, {{&(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000ec0)="c06538fcd38bead39400547c482b8bfd2d5729fa24acb1bf25ca55b81b7aed20a5457621e9f5599682dc7fa508c4e43b8795c29a29bc1ed25e093ff22ace5d51941c69753639a52372deb88f72aa1e8bb96802233aed233c21633e21b78844556bac28d2d4f170261de20c38360de59050800459bf4a0fc376ab6f2337f4a67596424c5b1b6d8c969e2f09dab3146d0d9517d28e324c503db14c67a5ad2fbed053dbf357f001e84ef8505bf693c959e23c551c5f696f20ef87b5", 0xba}, {&(0x7f0000000f80)="8c5f356ab6ae01cfb892ce824e6d", 0xe}, {&(0x7f0000000fc0)="9b1a2fb172067c32b304da307f0a64c630c939f6063a0573f7b8b24bd22b41b8d05b53ddddc029daaec79a0fa553d391e841b6921b01b3aabac7e69cc06fee1c4a891d8eca1858060065c8472d5c04d57eb07b978399f34a83bef4c850484c12e6f0507b905288d9fccb1103d79e9cf3c3bdac14bb54a21fbd8fc8bf00f6d817c42cd9b169092a0de2c7fcc9705aff1e29c960e42415eb15f2ec3a8f01447e6275a28b07ee4283a59e712dac9f612615", 0xb0}, {&(0x7f0000001080)="4a58aeff17da8b6617ba9b6c6141c56d4c3cb8613e5f5d2c8db4f4ee05e372e923eb03849a157c88837599190aa3871e00a894ab84e40673aa0a1e55efc53637931a416f881ff6891732384bab6ee1adbb5a0b205ec7466a16e811ddaa1c4d005687c4ef2c5a4871f915d5aba4b464", 0x6f}], 0x4, &(0x7f0000001600)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r0, r2, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r11, r13}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0x0, r15}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, 0xee01}}}], 0xd0, 0x24040044}}, {{&(0x7f0000001700)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000001780)="f9f6c6c0725a313b1403aca1a882af802edf203d022ae1332b62baef82bf447b5263ed4adce1ddb703251e1a715d2037bfa64688fd9ad6cc65c27d218c73683a52f8af6eea6f2db89c7518a9121d833c92148739e4ccef", 0x57}, {&(0x7f0000001800)="fe8d365df47ba60bea0794e664db90944bcddb2294a243764bd608bb38bad7de02763637c7e8126fbe000bb1ad2154efc39eff6f66ef9eb44d80dc0249809b95121d9261cf99fdd631e243ebd0e21650849f9d90938095d9b7bb9c127465726afd4f098d9a44bed715c3ef4877cf6f2e526941a4835768e5e82868cd200e3bbc3ce7382a3d08ae2980c5c5a63db22b4a581be6e84bf23b9d", 0x98}, {&(0x7f00000018c0)="82b1abf248ac19835365209fa0802d91844e200899c1f4e99b832c7e427c01eb0698baec5a676f0a67445faf2b0500291c5e757132c643dbe877a48d135ac39b989c04450a942e89c623bf828f2015de710a088f223464c78a4819f4ff76d95f5d4c75e5ec2027a4c986ec3301515ece7f5d89e1e04693f264e4228f27985d26f433b6fa443be7e77ffe9fdccfdc570c9b25e0177fe961c3", 0x98}, {&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000002980)="05e7720a97565988c088ff018de6664849730475071a708d1804265263182babb4b011805e380c546a561bbfdb482501ecb774c1d32645de0d40f5e7f3af", 0x3e}, {&(0x7f00000029c0)="900dc6e6eb246bebf015", 0xa}], 0x6, &(0x7f0000000240)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r16]}}], 0x20, 0x408c1}}], 0x6, 0x4000000) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000007200000005000000bf09000000000000b609010000000000650007000000000018010000646c6c2500000000002020207b9af8ff000000004c9100000000000037010000f8ffffffb702000008000000b7030000ffffffff15000000060000005f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 452.38968ms ago: executing program 1 (id=6656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r5, 0x29, 0x1e, &(0x7f0000000040), 0x4) socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 393.941192ms ago: executing program 3 (id=6657): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x158}}, 0x844) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58010000100013040000000000000000000120010000000000000000000000000000fffd00004e24000002000020000000009c84d242f605711a5089b3a37f7c9c85a2e443010005e6a1c35b3dbc35405e555c40e8e34721eea7dfa50b8647b38631275adb6214c0e397c73b20c6d68eab0dcd14c5d4183d4af93c9301d150339a260b5f387d2eb56fb0bcdd58432e9cc7890376a8bdcfff2ed2c0602e482da71a3d0ff9617cb3b957a2346778e586fde5fadf0d202347d6fb566fa87f525e06dc5aafeeb7fd513f3baeab23aee9087c767d2762b0d47985d8b7a902a3a2966ada1d4160a672a376808f22ca5644cca08c13cddc639d9ff131b15d5e48f39b68a2b284e2fe74146ad0daad1b80492d0352be1b7bbe9b080d8c2e514ba488f6b4daa5078cb9d1ce3884469bd1e64e48f9d7f58a3131ef9199bc4c2296110eebd8f3a177c9d9ea754a0c6654694dd33c5060dc02632efe76d987229ae323cb82467c6bbb82bdd2fdb8226c3021f87a6576070000000000000000004ba1aa91ce9cdf5a4e1ac581d2c2fbb7b29295791a516d355609eef6303f61341c4ea7ad702030166fc989881cb36c907261cf0a9c5f8322e76a2b837fbb69cec9dfa92ed5763eae6f1e42d2f28c83d5424dc6bc91adb9fe6db4fdc7f781f0758955fc8e83cea6bd2b3cefecc7391bd4ffdc1e1d8cf0cfcdf92f8b6b44587386f1360a78d84e38f318ae75", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000002032000000fc0000000000000000000000000000010000000000000000070000000000000000000000000000000400000000000000000000000000002004000000000000000800000000020000000000000000000001000000010000000800000000000000cc000000000000000800000000000000f80000000000000000000000000000000400000002000001000000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000040000000b512b3880e60fe3f6b54c6b909007c9f70d0cfe93e43e9da39542d00"], 0x158}}, 0x844) (async) 176.474156ms ago: executing program 3 (id=6658): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket(0x1, 0x803, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6(0xa, 0x3, 0x87) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0}, 0x48) 48.392926ms ago: executing program 3 (id=6659): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x8000, &(0x7f0000000240)={[0x8]}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x44, 0x1a, 0x1, 0x70bd28, 0xfffffffd, {0xa, 0x0, 0x0, 0x0, 0x80}, [@NDA_CACHEINFO={0x14, 0x3, {0x2}}, @NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 0s ago: executing program 1 (id=6660): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) connect$rxrpc(r1, &(0x7f00000001c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000000)="1e", 0xff80}], 0x1) kernel console output (not intermixed with test programs): [ 1065.878327][T24306] bond6: (slave gretap1): making interface the new active one [ 1065.888678][T24306] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 1065.902484][T24306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5537'. [ 1066.335947][T24334] netlink: 'syz.1.5549': attribute type 8 has an invalid length. [ 1066.354808][T24334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5549'. [ 1066.357655][T24331] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.425149][T24334] veth1_to_team: entered promiscuous mode [ 1066.443334][T24334] gretap0: entered promiscuous mode [ 1066.460708][T24334] veth1_to_team: left promiscuous mode [ 1066.478683][T24334] gretap0: left promiscuous mode [ 1066.511800][T24343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5552'. [ 1066.550565][T24341] syzkaller0: entered promiscuous mode [ 1066.563298][T24341] syzkaller0: entered allmulticast mode [ 1066.586097][T24345] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5553'. [ 1066.658394][T24348] xt_hashlimit: size too large, truncated to 1048576 [ 1066.844163][T24349] syzkaller0: entered promiscuous mode [ 1066.865036][T24349] syzkaller0: entered allmulticast mode [ 1067.119601][T24371] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5563'. [ 1067.208589][T24371] ip6tnl2: entered allmulticast mode [ 1067.240795][T24373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5564'. [ 1067.274713][T24379] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5566'. [ 1067.307092][T24376] syzkaller0: entered promiscuous mode [ 1067.328943][T24376] syzkaller0: entered allmulticast mode [ 1067.632637][T24395] netlink: 'syz.3.5572': attribute type 10 has an invalid length. [ 1067.659056][T24395] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.5572'. [ 1067.864688][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5578'. [ 1068.074969][T24420] syzkaller0: entered promiscuous mode [ 1068.080870][T24420] syzkaller0: entered allmulticast mode [ 1068.261775][T24426] syzkaller0: entered promiscuous mode [ 1068.267964][T24426] syzkaller0: entered allmulticast mode [ 1068.280481][T24426] tipc: Enabled bearer , priority 0 [ 1068.288942][T24424] tipc: Resetting bearer [ 1068.349977][T24424] tipc: Disabling bearer [ 1068.514264][T24436] SET target dimension over the limit! [ 1068.533801][T24441] tipc: Enabled bearer , priority 10 [ 1068.544190][T24441] netlink: 'syz.4.5593': attribute type 1 has an invalid length. [ 1068.603995][T24441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1068.670349][T24441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1069.069251][T24468] syzkaller0: entered promiscuous mode [ 1069.081864][T24468] syzkaller0: entered allmulticast mode [ 1069.200377][T24472] tipc: Enabled bearer , priority 0 [ 1069.209932][T24472] syzkaller0: entered promiscuous mode [ 1069.215571][T24472] syzkaller0: entered allmulticast mode [ 1069.482024][T24494] netlink: 'syz.2.5609': attribute type 1 has an invalid length. [ 1069.562233][T24494] bond7: entered promiscuous mode [ 1069.570186][T24494] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1069.763545][T24511] FAULT_INJECTION: forcing a failure. [ 1069.763545][T24511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1069.800603][T24511] CPU: 0 UID: 0 PID: 24511 Comm: syz.2.5613 Not tainted syzkaller #0 PREEMPT(full) [ 1069.800634][T24511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1069.800647][T24511] Call Trace: [ 1069.800655][T24511] [ 1069.800664][T24511] dump_stack_lvl+0xe8/0x150 [ 1069.800696][T24511] should_fail_ex+0x412/0x560 [ 1069.800738][T24511] _copy_from_user+0x2d/0xb0 [ 1069.800770][T24511] ___sys_sendmsg+0x1c6/0x360 [ 1069.800800][T24511] ? __lock_acquire+0x6b5/0x2cf0 [ 1069.800829][T24511] ? __pfx____sys_sendmsg+0x10/0x10 [ 1069.800897][T24511] ? __fget_files+0x2a/0x420 [ 1069.800922][T24511] ? __fget_files+0x3a0/0x420 [ 1069.800957][T24511] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1069.800990][T24511] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1069.801031][T24511] ? __pfx_ksys_write+0x10/0x10 [ 1069.801071][T24511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.801093][T24511] do_syscall_64+0x15f/0xf80 [ 1069.801114][T24511] ? trace_irq_disable+0x3b/0x140 [ 1069.801143][T24511] ? clear_bhb_loop+0x40/0x90 [ 1069.801168][T24511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.801187][T24511] RIP: 0033:0x7f004759cdd9 [ 1069.801207][T24511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.801224][T24511] RSP: 002b:00007f00483e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1069.801247][T24511] RAX: ffffffffffffffda RBX: 00007f0047815fa0 RCX: 00007f004759cdd9 [ 1069.801262][T24511] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1069.801275][T24511] RBP: 00007f00483e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.801287][T24511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1069.801299][T24511] R13: 00007f0047816038 R14: 00007f0047815fa0 R15: 00007fff13343c28 [ 1069.801333][T24511] [ 1070.099478][T24471] tipc: Resetting bearer [ 1070.249116][T24471] tipc: Disabling bearer [ 1070.309050][ T7594] tipc: Node number set to 3292409202 [ 1086.926933][ T7594] page_pool_release_retry() stalled pool shutdown: id 131, 1 inflight 60 sec [ 1089.393081][T24569] __nla_validate_parse: 8 callbacks suppressed [ 1089.393103][T24569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5633'. [ 1089.411925][T24569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5633'. [ 1089.611158][T24583] Cannot find add_set index 0 as target [ 1089.659962][T24578] : option downdelay: invalid value (18446744073709547007) [ 1089.667964][T24578] : option downdelay: allowed values 0 - 2147483647 [ 1089.682563][T24578]  (unregistering): Released all slaves [ 1089.756724][T24589] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5642'. [ 1089.815813][T24589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5642'. [ 1089.921916][T24589] hsr_slave_1 (unregistering): left promiscuous mode [ 1089.994082][T24599] syzkaller0: entered promiscuous mode [ 1090.009961][T24599] syzkaller0: entered allmulticast mode [ 1090.062622][T24599] tipc: Enabled bearer , priority 0 [ 1090.074094][T24605] netlink: 'syz.3.5647': attribute type 1 has an invalid length. [ 1090.084656][T24596] tipc: Resetting bearer [ 1090.092028][T24605] netlink: 'syz.3.5647': attribute type 2 has an invalid length. [ 1090.101263][T24605] netlink: 'syz.3.5647': attribute type 2 has an invalid length. [ 1090.123052][T24605] netlink: 'syz.3.5647': attribute type 2 has an invalid length. [ 1090.156976][T24605] netlink: 'syz.3.5647': attribute type 1 has an invalid length. [ 1090.165864][T24605] netlink: 'syz.3.5647': attribute type 2 has an invalid length. [ 1090.178002][T24596] tipc: Disabling bearer [ 1090.301681][T24613] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5650'. [ 1090.569424][T24632] netem: change failed [ 1090.592292][T24634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5656'. [ 1090.596285][T24632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5655'. [ 1090.899920][T24638] ip6_vti0 speed is unknown, defaulting to 1000 [ 1091.347597][T24662] netlink: 'syz.3.5664': attribute type 1 has an invalid length. [ 1091.396216][T24662] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.5664'. [ 1091.495970][T24669] : option downdelay: invalid value (18446744073709547007) [ 1091.516661][T24669] : option downdelay: allowed values 0 - 2147483647 [ 1091.531152][T24669]  (unregistering): Released all slaves [ 1091.568430][T24638] lo speed is unknown, defaulting to 1000 [ 1091.811867][T24680] FAULT_INJECTION: forcing a failure. [ 1091.811867][T24680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.847418][T24680] CPU: 0 UID: 0 PID: 24680 Comm: syz.1.5670 Not tainted syzkaller #0 PREEMPT(full) [ 1091.847450][T24680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1091.847464][T24680] Call Trace: [ 1091.847473][T24680] [ 1091.847482][T24680] dump_stack_lvl+0xe8/0x150 [ 1091.847514][T24680] should_fail_ex+0x412/0x560 [ 1091.847550][T24680] _copy_to_user+0x31/0xb0 [ 1091.847585][T24680] simple_read_from_buffer+0xe1/0x170 [ 1091.847618][T24680] proc_fail_nth_read+0x1bb/0x230 [ 1091.847649][T24680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1091.847685][T24680] ? rw_verify_area+0x2a6/0x4d0 [ 1091.847714][T24680] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1091.847742][T24680] vfs_read+0x20c/0xa70 [ 1091.847777][T24680] ? __pfx___mutex_lock+0x10/0x10 [ 1091.847806][T24680] ? __pfx_vfs_read+0x10/0x10 [ 1091.847839][T24680] ? __fget_files+0x2a/0x420 [ 1091.847871][T24680] ? __fget_files+0x3a0/0x420 [ 1091.847898][T24680] ? __fget_files+0x2a/0x420 [ 1091.847935][T24680] ksys_read+0x150/0x270 [ 1091.847969][T24680] ? __pfx_ksys_read+0x10/0x10 [ 1091.848009][T24680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.848033][T24680] do_syscall_64+0x15f/0xf80 [ 1091.848053][T24680] ? trace_irq_disable+0x3b/0x140 [ 1091.848086][T24680] ? clear_bhb_loop+0x40/0x90 [ 1091.848112][T24680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.848135][T24680] RIP: 0033:0x7ff4db55d60e [ 1091.848158][T24680] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1091.848177][T24680] RSP: 002b:00007ff4dc3a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1091.848200][T24680] RAX: ffffffffffffffda RBX: 00007ff4dc3a36c0 RCX: 00007ff4db55d60e [ 1091.848216][T24680] RDX: 000000000000000f RSI: 00007ff4dc3a30a0 RDI: 0000000000000012 [ 1091.848230][T24680] RBP: 00007ff4dc3a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.848245][T24680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1091.848268][T24680] R13: 00007ff4db816038 R14: 00007ff4db815fa0 R15: 00007ffee0150fd8 [ 1091.848305][T24680] [ 1092.223539][T24638] lo speed is unknown, defaulting to 1000 [ 1092.358319][T24694] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5675'. [ 1092.644407][T24708] FAULT_INJECTION: forcing a failure. [ 1092.644407][T24708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.677437][T24708] CPU: 0 UID: 0 PID: 24708 Comm: syz.4.5680 Not tainted syzkaller #0 PREEMPT(full) [ 1092.677469][T24708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1092.677481][T24708] Call Trace: [ 1092.677488][T24708] [ 1092.677497][T24708] dump_stack_lvl+0xe8/0x150 [ 1092.677525][T24708] should_fail_ex+0x412/0x560 [ 1092.677562][T24708] _copy_from_user+0x2d/0xb0 [ 1092.677591][T24708] ___sys_recvmsg+0x175/0x590 [ 1092.677621][T24708] ? __pfx____sys_recvmsg+0x10/0x10 [ 1092.677647][T24708] ? __fget_files+0x2a/0x420 [ 1092.677705][T24708] do_recvmmsg+0x334/0x800 [ 1092.677735][T24708] ? __pfx_do_recvmmsg+0x10/0x10 [ 1092.677770][T24708] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1092.677811][T24708] __x64_sys_recvmmsg+0x198/0x250 [ 1092.677836][T24708] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1092.677867][T24708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.677890][T24708] do_syscall_64+0x15f/0xf80 [ 1092.677909][T24708] ? trace_irq_disable+0x3b/0x140 [ 1092.677939][T24708] ? clear_bhb_loop+0x40/0x90 [ 1092.677965][T24708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.677986][T24708] RIP: 0033:0x7ff34399cdd9 [ 1092.678007][T24708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.678025][T24708] RSP: 002b:00007ff34479a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1092.678049][T24708] RAX: ffffffffffffffda RBX: 00007ff343c15fa0 RCX: 00007ff34399cdd9 [ 1092.678064][T24708] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 1092.678078][T24708] RBP: 00007ff34479a090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.678092][T24708] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1092.678105][T24708] R13: 00007ff343c16038 R14: 00007ff343c15fa0 R15: 00007ffc16085bc8 [ 1092.678139][T24708] [ 1092.970314][T24720] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5683'. [ 1093.572407][T24740] Cannot find set identified by id 3 to match [ 1093.684014][T24737] ip6_vti0 speed is unknown, defaulting to 1000 [ 1093.807153][T24749] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1094.533473][ T5667] page_pool_release_retry() stalled pool shutdown: id 128, 1 inflight 121 sec [ 1094.898229][T24775] __nla_validate_parse: 4 callbacks suppressed [ 1094.898253][T24775] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5697'. [ 1095.038260][T24737] lo speed is unknown, defaulting to 1000 [ 1095.161723][T24783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5699'. [ 1095.458594][T24737] lo speed is unknown, defaulting to 1000 [ 1095.670460][T24795] Cannot find add_set index 0 as target [ 1095.881930][T24799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1096.178345][T24818] Cannot find add_set index 0 as target [ 1096.342701][T24822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5716'. [ 1096.528203][T24827] syzkaller0: entered promiscuous mode [ 1096.547163][T24827] syzkaller0: entered allmulticast mode [ 1096.704643][T24832] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5720'. [ 1097.195290][T24852] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1097.383711][T24857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5730'. [ 1097.441712][T24858] FAULT_INJECTION: forcing a failure. [ 1097.441712][T24858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.482332][T24858] CPU: 0 UID: 0 PID: 24858 Comm: syz.1.5731 Not tainted syzkaller #0 PREEMPT(full) [ 1097.482363][T24858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1097.482375][T24858] Call Trace: [ 1097.482383][T24858] [ 1097.482392][T24858] dump_stack_lvl+0xe8/0x150 [ 1097.482422][T24858] should_fail_ex+0x412/0x560 [ 1097.482457][T24858] _copy_from_user+0x2d/0xb0 [ 1097.482488][T24858] ___sys_recvmsg+0x175/0x590 [ 1097.482516][T24858] ? __pfx____sys_recvmsg+0x10/0x10 [ 1097.482543][T24858] ? __fget_files+0x2a/0x420 [ 1097.482606][T24858] do_recvmmsg+0x334/0x800 [ 1097.482636][T24858] ? __pfx_do_recvmmsg+0x10/0x10 [ 1097.482672][T24858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1097.482715][T24858] __x64_sys_recvmmsg+0x198/0x250 [ 1097.482740][T24858] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1097.482772][T24858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.482795][T24858] do_syscall_64+0x15f/0xf80 [ 1097.482812][T24858] ? trace_irq_disable+0x3b/0x140 [ 1097.482842][T24858] ? clear_bhb_loop+0x40/0x90 [ 1097.482868][T24858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.482888][T24858] RIP: 0033:0x7ff4db59cdd9 [ 1097.482908][T24858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.482925][T24858] RSP: 002b:00007ff4dc3a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1097.482947][T24858] RAX: ffffffffffffffda RBX: 00007ff4db815fa0 RCX: 00007ff4db59cdd9 [ 1097.482961][T24858] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 1097.482976][T24858] RBP: 00007ff4dc3a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.482988][T24858] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1097.483001][T24858] R13: 00007ff4db816038 R14: 00007ff4db815fa0 R15: 00007ffee0150fd8 [ 1097.483037][T24858] [ 1098.103820][T24883] syzkaller0: entered promiscuous mode [ 1098.111033][T24883] syzkaller0: entered allmulticast mode [ 1098.200454][ C0] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 72 [ 1098.259925][T24882] syzkaller0: entered promiscuous mode [ 1098.282425][T24882] syzkaller0: entered allmulticast mode [ 1101.697968][T24898] ip6_vti0 speed is unknown, defaulting to 1000 [ 1102.071559][T24898] lo speed is unknown, defaulting to 1000 [ 1102.423748][T24898] lo speed is unknown, defaulting to 1000 [ 1102.508714][T24976] bond0: option arp_validate: invalid value (55553) [ 1102.875658][T24983] netlink: 'syz.0.5775': attribute type 1 has an invalid length. [ 1103.089516][T24997] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5778'. [ 1103.405576][T25014] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5785'. [ 1103.666064][T25029] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5788'. [ 1103.878369][T25034] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.042673][T25034] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.131303][T25041] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5793'. [ 1104.171375][T25034] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.310601][T25043] Cannot find set identified by id 3 to match [ 1104.343023][T25034] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1104.624740][T25053] hmó3)óÿ: entered promiscuous mode [ 1104.713729][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.753008][T25059] Cannot find set identified by id 3 to match [ 1104.771112][ T148] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.793066][T25061] SET target dimension over the limit! [ 1104.827717][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.857902][T11683] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.978483][T25066] syzkaller0: entered promiscuous mode [ 1104.985407][T25066] syzkaller0: entered allmulticast mode [ 1105.044670][T25067] ip6_vti0 speed is unknown, defaulting to 1000 [ 1105.570417][T25092] xt_hashlimit: size too large, truncated to 1048576 [ 1105.593514][T25067] lo speed is unknown, defaulting to 1000 [ 1106.252006][T25067] lo speed is unknown, defaulting to 1000 [ 1106.491740][T25111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1106.502166][T25111] netlink: 21 bytes leftover after parsing attributes in process `syz.1.5819'. [ 1107.042854][T25125] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1107.049681][T25125] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1107.062953][T25105] Cannot find del_set index 1 as target [ 1107.096229][T25118] Cannot find add_set index 0 as target [ 1107.181730][T25125] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1107.193221][T25125] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1107.244488][T25125] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1107.263737][T25125] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1107.346935][T25125] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1107.354814][T25125] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1107.535264][T25140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5828'. [ 1107.556631][T25141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5828'. [ 1108.122261][T25125] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1108.129440][T25125] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1111.351696][T18250] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1111.364048][T18250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1111.394737][T18250] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1111.411102][T18250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1111.421507][T18250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1111.542112][ T9255] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1111.551596][ T9255] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1111.559577][ T9255] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1111.569727][ T9255] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1111.583254][ T9255] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1111.810470][T25176] syzkaller0: entered promiscuous mode [ 1111.835759][T25176] syzkaller0: entered allmulticast mode [ 1111.872274][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5839'. [ 1111.893149][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5839'. [ 1112.045865][T25188] bond4: entered promiscuous mode [ 1112.051525][T25191] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5840'. [ 1112.176238][T25188] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5842'. [ 1112.245316][T25193] vcan1: entered promiscuous mode [ 1112.261267][T25193] vcan1: entered allmulticast mode [ 1112.291887][T16472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.301876][T16472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.310157][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.321845][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.332271][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.340542][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.350274][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.357108][T25193] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 1112.365508][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.379164][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.388295][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1112.402889][T25193] bond4: (slave vcan1): Error -95 calling set_mac_address [ 1112.458760][T25202] : option downdelay: invalid value (18446744073709547007) [ 1112.466665][T25202] : option downdelay: allowed values 0 - 2147483647 [ 1112.475386][T25202]  (unregistering): Released all slaves [ 1112.616857][T25152] ip6_vti0 speed is unknown, defaulting to 1000 [ 1112.853963][T25217] FAULT_INJECTION: forcing a failure. [ 1112.853963][T25217] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.869267][T25216] Cannot find map_set index 17 as target [ 1112.888284][T25217] CPU: 1 UID: 0 PID: 25217 Comm: syz.4.5848 Not tainted syzkaller #0 PREEMPT(full) [ 1112.888316][T25217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1112.888329][T25217] Call Trace: [ 1112.888338][T25217] [ 1112.888346][T25217] dump_stack_lvl+0xe8/0x150 [ 1112.888377][T25217] should_fail_ex+0x412/0x560 [ 1112.888412][T25217] should_failslab+0xa8/0x100 [ 1112.888445][T25217] __kmalloc_noprof+0xe8/0x760 [ 1112.888473][T25217] ? security_sk_alloc+0x52/0x360 [ 1112.888502][T25217] security_sk_alloc+0x52/0x360 [ 1112.888525][T25217] sk_prot_alloc+0x101/0x210 [ 1112.888560][T25217] sk_alloc+0x3a/0x390 [ 1112.888593][T25217] inet6_create+0x7f0/0x1260 [ 1112.888619][T25217] ? inet6_create+0x83/0x1260 [ 1112.888650][T25217] __sock_create+0x4b2/0x9d0 [ 1112.888686][T25217] mptcp_subflow_create_socket+0xfb/0x800 [ 1112.888717][T25217] ? __pfx_process_measurement+0x10/0x10 [ 1112.888739][T25217] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1112.888758][T25217] ? tomoyo_check_open_permission+0x38e/0x470 [ 1112.888789][T25217] ? aa_label_sk_perm+0x532/0x6e0 [ 1112.888819][T25217] __mptcp_nmpc_sk+0x155/0x790 [ 1112.888846][T25217] ? do_raw_spin_lock+0x12b/0x2f0 [ 1112.888877][T25217] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1112.888906][T25217] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1112.888944][T25217] mptcp_sendmsg_fastopen+0xd4/0x580 [ 1112.888967][T25217] ? __local_bh_enable_ip+0xd0/0x130 [ 1112.888996][T25217] mptcp_sendmsg+0x1b0c/0x1dc0 [ 1112.889043][T25217] ? aa_sk_perm+0x6d5/0x900 [ 1112.889076][T25217] ? __pfx_aa_sk_perm+0x10/0x10 [ 1112.889098][T25217] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1112.889146][T25217] ? inet6_sendmsg+0x101/0x120 [ 1112.889173][T25217] ____sys_sendmsg+0x5c7/0x9f0 [ 1112.889214][T25217] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1112.889255][T25217] ? import_iovec+0x73/0xa0 [ 1112.889289][T25217] ___sys_sendmsg+0x2a5/0x360 [ 1112.889318][T25217] ? __lock_acquire+0x6b5/0x2cf0 [ 1112.889343][T25217] ? __pfx____sys_sendmsg+0x10/0x10 [ 1112.889409][T25217] ? __fget_files+0x2a/0x420 [ 1112.889435][T25217] ? __fget_files+0x3a0/0x420 [ 1112.889472][T25217] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1112.889506][T25217] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1112.889545][T25217] ? __pfx_ksys_write+0x10/0x10 [ 1112.889583][T25217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.889605][T25217] do_syscall_64+0x15f/0xf80 [ 1112.889624][T25217] ? trace_irq_disable+0x3b/0x140 [ 1112.889654][T25217] ? clear_bhb_loop+0x40/0x90 [ 1112.889680][T25217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.889701][T25217] RIP: 0033:0x7ff34399cdd9 [ 1112.889721][T25217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1112.889739][T25217] RSP: 002b:00007ff34479a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1112.889761][T25217] RAX: ffffffffffffffda RBX: 00007ff343c15fa0 RCX: 00007ff34399cdd9 [ 1112.889777][T25217] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000004 [ 1112.889790][T25217] RBP: 00007ff34479a090 R08: 0000000000000000 R09: 0000000000000000 [ 1112.889803][T25217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1112.889816][T25217] R13: 00007ff343c16038 R14: 00007ff343c15fa0 R15: 00007ffc16085bc8 [ 1112.889851][T25217] [ 1113.355834][T25152] lo speed is unknown, defaulting to 1000 [ 1113.428684][T25223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5851'. [ 1113.646824][ T9255] Bluetooth: hci0: command tx timeout [ 1113.690713][T25152] lo speed is unknown, defaulting to 1000 [ 1113.867359][T25246] Cannot find set identified by id 3 to match [ 1114.179342][T25255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5860'. [ 1114.565071][T25263] SET target dimension over the limit! [ 1115.731412][ T9255] Bluetooth: hci0: command tx timeout [ 1116.137437][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.569775][ T5667] net_ratelimit: 9 callbacks suppressed [ 1117.569799][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.810985][ T9255] Bluetooth: hci0: command tx timeout [ 1117.862827][T25284] bond0: option arp_validate: invalid value (55553) [ 1118.048790][T16470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.057089][T16472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.065238][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.074838][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.085405][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.093918][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.176094][T25292] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5871'. [ 1118.187413][T25295] Cannot find map_set index 17 as target [ 1118.226944][T25292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5871'. [ 1118.470841][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.654572][T25322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1118.672077][T25314] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5879'. [ 1118.735992][T25323] tipc: Enabled bearer , priority 0 [ 1118.945697][T25327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.898083][ T9255] Bluetooth: hci0: command tx timeout [ 1121.591351][T25152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.599548][T25152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.607508][T25152] bridge_slave_0: entered allmulticast mode [ 1121.614891][T25152] bridge_slave_0: entered promiscuous mode [ 1121.651402][T25328] tipc: Resetting bearer [ 1121.664967][T25310] tipc: Disabling bearer [ 1121.679210][ T5806] tipc: Node number set to 2428691363 [ 1121.689216][T25152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.698436][T25152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.705748][T25152] bridge_slave_1: entered allmulticast mode [ 1121.732492][T25152] bridge_slave_1: entered promiscuous mode [ 1121.833723][T25152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.850928][T25152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.918798][T25339] Cannot find set identified by id 3 to match [ 1121.922292][T25152] team0: Port device team_slave_0 added [ 1121.949612][T25152] team0: Port device team_slave_1 added [ 1122.035845][T25152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.044007][T25152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.070378][T25152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.083710][T25152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.091235][T25152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.118045][T25152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.259863][T25152] hsr_slave_0: entered promiscuous mode [ 1122.277714][T25152] hsr_slave_1: entered promiscuous mode [ 1122.285782][T25347] ip6_vti0 speed is unknown, defaulting to 1000 [ 1122.752869][T25363] netlink: 'syz.0.5892': attribute type 1 has an invalid length. [ 1122.772616][T25363] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5892'. [ 1122.819548][T25365] Cannot find map_set index 17 as target [ 1122.972126][T25347] lo speed is unknown, defaulting to 1000 [ 1123.004715][T25152] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.029616][T25152] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.094533][T25348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5887'. [ 1123.197811][T25152] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.221876][T25152] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.353724][ T5806] net_ratelimit: 8 callbacks suppressed [ 1123.353747][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.412112][T25152] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.434785][T25152] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.637520][T25152] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1123.686577][T25152] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.721157][T25347] lo speed is unknown, defaulting to 1000 [ 1123.808495][T11683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.819575][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.830271][ T5806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.882649][T25397] netlink: 'syz.2.5905': attribute type 1 has an invalid length. [ 1124.061604][T25407] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5909'. [ 1124.107159][T25409] netlink: 165 bytes leftover after parsing attributes in process `syz.0.5908'. [ 1124.425616][T25152] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1124.438653][T25152] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1124.467447][T25152] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1124.478880][T25152] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1124.487284][T25152] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1124.497383][T25152] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1124.611226][T25152] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1124.634602][T25152] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1124.661055][T25418] ip6_vti0 speed is unknown, defaulting to 1000 [ 1124.668149][T25420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5912'. [ 1124.851049][T25152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.898070][T25152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.927471][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.978636][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.985917][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.022215][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.029553][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1125.403801][T25418] lo speed is unknown, defaulting to 1000 [ 1125.576767][ T7602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1125.786953][T25453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5919'. [ 1125.978086][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.010898][T25418] lo speed is unknown, defaulting to 1000 [ 1126.090589][T25461] Cannot find set identified by id 3 to match [ 1126.120509][T25458] bond1: (slave lo): Releasing backup interface [ 1126.148573][T25458] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1126.159644][T25458] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1126.178908][T25458] bond9: (slave lo): Enslaving as an active interface with an up link [ 1126.190646][T25458] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1126.228177][ T7594] lo speed is unknown, defaulting to 1000 [ 1126.268875][T25463] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.514675][T25463] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.545082][T25152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.600637][T25463] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.679688][T25463] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.721547][T25152] veth0_vlan: entered promiscuous mode [ 1126.914923][T25152] veth1_vlan: entered promiscuous mode [ 1127.021336][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.215173][ T5720] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.318717][T11683] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.511319][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.551236][T25152] veth0_macvtap: entered promiscuous mode [ 1127.650524][ T5698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1127.672035][ T5720] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.725464][T25152] veth1_macvtap: entered promiscuous mode [ 1127.782253][T25152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.828882][T25152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.866224][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.897315][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.950352][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.984186][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.607605][ T7602] net_ratelimit: 7 callbacks suppressed [ 1128.607625][ T7602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.644735][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.667870][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1128.762567][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.782797][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.088100][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.355012][T25525] xt_hashlimit: size too large, truncated to 1048576 [ 1129.424737][T18250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1129.437447][T18250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1129.449537][T18250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1129.469589][T18250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1129.478222][T18250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1129.572852][T16472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.582122][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.597985][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.611481][T25535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.670683][T25535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.720003][T25535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.798233][T25538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.836638][T25538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1130.189551][T25518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5831'. [ 1130.254739][ T7602] IPVS: starting estimator thread 0... [ 1130.368489][T25547] IPVS: using max 29 ests per chain, 69600 per kthread [ 1130.463195][T11683] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1130.666198][T25546] tipc: Enabled bearer , priority 10 [ 1130.675740][T25548] syzkaller0: entered promiscuous mode [ 1130.691357][T25548] syzkaller0: entered allmulticast mode [ 1130.733126][T25545] tipc: Resetting bearer [ 1130.812638][T25545] tipc: Disabling bearer [ 1130.841859][T11683] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1130.902252][T25529] ip6_vti0 speed is unknown, defaulting to 1000 [ 1130.955117][T11683] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.106126][T11683] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1131.222228][T25574] netlink: 364 bytes leftover after parsing attributes in process `syz.1.5948'. [ 1131.567032][ T9255] Bluetooth: hci2: command tx timeout [ 1131.614886][T25592] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5951'. [ 1131.696217][T25591] sctp: [Deprecated]: syz.1.5954 (pid 25591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1131.696217][T25591] Use struct sctp_sack_info instead [ 1131.840522][T25592] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1131.877888][T25592] bond3: (slave lo): Enslaving as an active interface with an up link [ 1131.922021][T11683] bridge_slave_1: left allmulticast mode [ 1131.936230][T11683] bridge_slave_1: left promiscuous mode [ 1131.959646][T11683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.010853][T11683] bridge_slave_0: left allmulticast mode [ 1132.026605][T11683] bridge_slave_0: left promiscuous mode [ 1132.032671][T11683] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.394226][T11683] bond4 (unregistering): (slave gretap0): Releasing active interface [ 1132.451187][T25619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5956'. [ 1132.585383][T11683] bond6 (unregistering): (slave gretap1): Releasing active interface [ 1132.784101][T11683] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1132.792649][T11683] bridge3 (unregistering): left promiscuous mode [ 1132.845437][T11683] bond5 (unregistering): (slave macvlan2): Releasing backup interface [ 1132.865143][T11683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.875608][T11683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.889167][T11683] bond0 (unregistering): Released all slaves [ 1132.900569][T11683] bond1 (unregistering): Released all slaves [ 1132.916133][T11683] bond2 (unregistering): Released all slaves [ 1132.932863][T11683] bond3 (unregistering): Released all slaves [ 1132.954905][T11683] bond4 (unregistering): Released all slaves [ 1132.970527][T11683] bond5 (unregistering): Released all slaves [ 1132.984972][T11683] bond6 (unregistering): Released all slaves [ 1133.018322][T11683] bond7 (unregistering): Released all slaves [ 1133.035511][T11683] bond8 (unregistering): Released all slaves [ 1133.059217][T11683] bond9 (unregistering): (slave lo): Releasing backup interface [ 1133.067621][T11683] bond9 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1133.084370][T11683] bond9 (unregistering): Released all slaves [ 1133.101244][T25529] lo speed is unknown, defaulting to 1000 [ 1133.269435][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1133.284583][ T7594] lo speed is unknown, defaulting to 1000 [ 1133.298006][ T7594] syz0: Port: 1 Link DOWN [ 1133.333978][ T7594] lo speed is unknown, defaulting to 1000 [ 1133.646529][ T9255] Bluetooth: hci2: command tx timeout [ 1133.758408][T25529] lo speed is unknown, defaulting to 1000 [ 1133.808173][ T5826] net_ratelimit: 181 callbacks suppressed [ 1133.808205][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.493334][T25665] syzkaller0: entered promiscuous mode [ 1134.510764][T25665] syzkaller0: entered allmulticast mode [ 1134.695433][ T5720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.704314][T10555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.715101][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.728356][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1134.769362][T25681] €Â: renamed from wg2 (while UP) [ 1134.875682][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1134.914255][T25681] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1134.924650][T25681] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1135.002219][T25690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5977'. [ 1135.039250][T25681] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1135.050131][T25681] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1135.158367][T25681] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1135.172044][T25681] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1135.274671][T25681] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1135.285288][T25681] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1135.523586][T25529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.544139][T25529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.556002][T25529] bridge_slave_0: entered allmulticast mode [ 1135.564783][T25529] bridge_slave_0: entered promiscuous mode [ 1135.574461][T25529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.588807][T25529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.597373][T25529] bridge_slave_1: entered allmulticast mode [ 1135.608241][T25529] bridge_slave_1: entered promiscuous mode [ 1135.711988][T25529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.727618][ T9255] Bluetooth: hci2: command tx timeout [ 1135.777992][ T5720] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1135.788684][ T5720] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1135.803678][T25529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.813693][ T5667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1136.064695][T25720] syzkaller0: entered promiscuous mode [ 1136.071302][T25720] syzkaller0: entered allmulticast mode [ 1136.086075][T25529] team0: Port device team_slave_0 added [ 1136.101491][T16472] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1136.112751][T16472] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1136.137792][T25529] team0: Port device team_slave_1 added [ 1136.301478][T25730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5984'. [ 1136.749220][ T30] audit: type=1804 audit(1778560807.244:11): pid=25740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5986" name="/newroot/621/memory.events" dev="tmpfs" ino=3154 res=1 errno=0 [ 1136.771723][ T30] audit: type=1800 audit(1778560807.244:12): pid=25740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5986" name="memory.events" dev="tmpfs" ino=3154 res=0 errno=0 [ 1136.794222][ T30] audit: type=1800 audit(1778560807.264:13): pid=25741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5986" name="memory.events" dev="tmpfs" ino=3154 res=0 errno=0 [ 1136.863162][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.247373][T10555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.726779][T10555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.808266][ T9255] Bluetooth: hci2: command tx timeout [ 1137.895823][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.947139][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.580242][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1139.610651][ T148] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1139.619833][ T148] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1139.658115][ T148] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1139.677140][ T148] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1139.725744][T25529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1139.733272][T25529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.762537][T25529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1139.785148][T25529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1139.806025][T25529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1139.863566][T25529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1139.966813][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.001512][T25753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.044275][T25529] hsr_slave_0: entered promiscuous mode [ 1140.058086][T25529] hsr_slave_1: entered promiscuous mode [ 1140.074831][T25764] netlink: 'syz.3.5992': attribute type 13 has an invalid length. [ 1140.088236][T25529] debugfs: 'hsr0' already exists in 'hsr' [ 1140.095845][T25755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5990'. [ 1140.111484][T25529] Cannot create hsr debugfs directory [ 1140.140222][T25755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5990'. [ 1140.450826][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.474872][T25782] xt_hashlimit: size too large, truncated to 1048576 [ 1140.518606][T25755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5990'. [ 1140.530145][T25787] openvswitch: netlink: Key 6 has unexpected len 318 expected 2 [ 1140.544252][T25755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5990'. [ 1140.544499][T25774] syzkaller0: entered promiscuous mode [ 1140.568171][T25774] syzkaller0: entered allmulticast mode [ 1140.588943][ T5722] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.623683][T25787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.662826][T25791] netlink: 'syz.1.5997': attribute type 1 has an invalid length. [ 1140.684906][T25791] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5997'. [ 1140.746073][T25787] bridge_slave_0 (unregistering): left allmulticast mode [ 1140.766703][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1140.791944][T25787] bridge_slave_0 (unregistering): left promiscuous mode [ 1140.806728][T25787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.911361][ T5722] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.939773][T25792] syzkaller0: entered promiscuous mode [ 1140.951296][T25792] syzkaller0: entered allmulticast mode [ 1141.020411][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.166163][ T5722] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.329399][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.693615][ T5722] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1141.698976][T25833] SET target dimension over the limit! [ 1141.713567][ T5288] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1141.752522][T25830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6002'. [ 1141.765516][T25837] netlink: 'syz.3.6001': attribute type 4 has an invalid length. [ 1141.769500][T25830] tipc: Enabling of bearer rejected, failed to enable media [ 1141.781896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.859046][T25842] Cannot find set identified by id 3 to match [ 1141.881555][ T7594] lo speed is unknown, defaulting to 1000 [ 1141.904671][ T7594] sqz0: Port: 1 Link DOWN [ 1141.930287][T10555] lo speed is unknown, defaulting to 1000 [ 1142.249742][T25856] netlink: 676 bytes leftover after parsing attributes in process `syz.3.6007'. [ 1142.670366][T25866] : option downdelay: invalid value (18446744073709547007) [ 1142.705484][T25866] : option downdelay: allowed values 0 - 2147483647 [ 1142.793278][T25866]  (unregistering): Released all slaves [ 1143.283654][T25884] syzkaller0: entered promiscuous mode [ 1143.310136][T25884] syzkaller0: entered allmulticast mode [ 1143.445278][T25891] netlink: 'syz.1.6018': attribute type 2 has an invalid length. [ 1143.478579][T25884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6013'. [ 1143.513147][T25884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6013'. [ 1143.601807][T25896] bond3: (slave lo): Releasing backup interface [ 1143.618237][T25896] bond3: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1143.650965][T25896] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1143.669787][T25896] bond4: (slave lo): Enslaving as an active interface with an up link [ 1143.681812][T25896] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1143.921998][T25913] Cannot find add_set index 0 as target [ 1144.881201][T25957] xt_hashlimit: size too large, truncated to 1048576 [ 1145.048559][T25529] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1145.125145][T25529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1145.157935][T25529] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1145.189885][T25529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1145.212044][T25529] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1145.235179][T25529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1145.255973][T25529] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1145.294298][T25529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1145.587943][T25529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.660725][T25529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.704302][T16469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.711580][T16469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.798938][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.806201][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.850759][T26001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6045'. [ 1146.029500][T26011] Cannot find map_set index 17 as target [ 1146.101277][T26014] FAULT_INJECTION: forcing a failure. [ 1146.101277][T26014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.139899][T26014] CPU: 0 UID: 0 PID: 26014 Comm: syz.1.6049 Not tainted syzkaller #0 PREEMPT(full) [ 1146.139930][T26014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1146.139942][T26014] Call Trace: [ 1146.139952][T26014] [ 1146.139961][T26014] dump_stack_lvl+0xe8/0x150 [ 1146.139993][T26014] should_fail_ex+0x412/0x560 [ 1146.140027][T26014] _copy_from_user+0x2d/0xb0 [ 1146.140058][T26014] __sys_sendto+0x2b0/0x710 [ 1146.140091][T26014] ? __pfx___sys_sendto+0x10/0x10 [ 1146.140117][T26014] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1146.140152][T26014] ? __fget_files+0x3a0/0x420 [ 1146.140198][T26014] ? ksys_write+0x242/0x270 [ 1146.140229][T26014] ? __pfx_ksys_write+0x10/0x10 [ 1146.140264][T26014] __x64_sys_sendto+0xde/0x100 [ 1146.140292][T26014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.140314][T26014] do_syscall_64+0x15f/0xf80 [ 1146.140332][T26014] ? trace_irq_disable+0x3b/0x140 [ 1146.140361][T26014] ? clear_bhb_loop+0x40/0x90 [ 1146.140386][T26014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.140406][T26014] RIP: 0033:0x7f1ece39cdd9 [ 1146.140427][T26014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.140444][T26014] RSP: 002b:00007f1ecf2d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1146.140467][T26014] RAX: ffffffffffffffda RBX: 00007f1ece615fa0 RCX: 00007f1ece39cdd9 [ 1146.140482][T26014] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 1146.140495][T26014] RBP: 00007f1ecf2d1090 R08: 0000200000000040 R09: 0000000000000020 [ 1146.140516][T26014] R10: 000000000404c854 R11: 0000000000000246 R12: 0000000000000001 [ 1146.140528][T26014] R13: 00007f1ece616038 R14: 00007f1ece615fa0 R15: 00007ffff12ab618 [ 1146.140564][T26014] [ 1146.793446][T26039] bond0: option arp_validate: invalid value (55553) [ 1146.801067][T16469] bond0: (slave bond_slave_0): interface is now down [ 1146.835824][T16469] bond0: (slave bond_slave_1): interface is now down [ 1146.973891][T16469] bond0: now running without any active interface! [ 1147.081434][T26053] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1147.293379][T26061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6061'. [ 1147.370074][T26064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6062'. [ 1147.409997][T26064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6062'. [ 1147.631728][T25529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.765900][T25529] veth0_vlan: entered promiscuous mode [ 1147.794102][T25529] veth1_vlan: entered promiscuous mode [ 1147.913194][T25529] veth0_macvtap: entered promiscuous mode [ 1147.948376][T25529] veth1_macvtap: entered promiscuous mode [ 1148.040915][T25529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1148.088352][T25529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.149520][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.194528][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.225594][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.300793][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.342491][T26097] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6071'. [ 1148.474396][T26097] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1148.648666][ T5844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.681533][ T5844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.693340][T26113] Cannot find set identified by id 3 to match [ 1148.852349][T26112] netlink: 'syz.1.6073': attribute type 1 has an invalid length. [ 1148.890101][ T5722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.890430][T26112] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6073'. [ 1148.921287][T26112] netlink: 658 bytes leftover after parsing attributes in process `syz.1.6073'. [ 1148.921546][ T5722] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.082001][T26108] ip6_vti0 speed is unknown, defaulting to 1000 [ 1149.097333][T26122] syzkaller0: entered promiscuous mode [ 1149.106152][T26122] syzkaller0: entered allmulticast mode [ 1149.524287][T26142] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6080'. [ 1149.603528][T26148] syzkaller1: entered promiscuous mode [ 1149.625750][T26148] syzkaller1: entered allmulticast mode [ 1150.009576][T26162] netlink: 'syz.2.6085': attribute type 30 has an invalid length. [ 1150.068616][T26108] lo speed is unknown, defaulting to 1000 [ 1150.102794][T26166] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6086'. [ 1150.609267][T18250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1150.629462][T18250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1150.639204][T18250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1150.652185][T18250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1150.660517][T18250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1151.088824][T26108] lo speed is unknown, defaulting to 1000 [ 1151.627187][T26213] ip6_vti0 speed is unknown, defaulting to 1000 [ 1151.632679][T26215] syzkaller0: entered promiscuous mode [ 1151.656760][T26215] syzkaller0: entered allmulticast mode [ 1151.688799][T26215] tipc: Started in network mode [ 1151.715645][T26215] tipc: Node identity 2ec27052c8ca, cluster identity 4711 [ 1151.737744][T26215] tipc: Enabled bearer , priority 0 [ 1151.777578][T26222] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6097'. [ 1151.797903][T26214] tipc: Resetting bearer [ 1151.886280][T26214] tipc: Disabling bearer [ 1152.323131][T26237] syzkaller0: entered promiscuous mode [ 1152.333006][T26237] syzkaller0: entered allmulticast mode [ 1152.555476][T26185] ip6_vti0 speed is unknown, defaulting to 1000 [ 1152.766805][ T9255] Bluetooth: hci4: command tx timeout [ 1152.875201][T26213] lo speed is unknown, defaulting to 1000 [ 1153.672869][T26185] lo speed is unknown, defaulting to 1000 [ 1153.681965][T26213] lo speed is unknown, defaulting to 1000 [ 1153.692969][T26279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6110'. [ 1154.599708][T26185] lo speed is unknown, defaulting to 1000 [ 1154.829508][T26311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6113'. [ 1154.847371][ T9255] Bluetooth: hci4: command tx timeout [ 1154.927530][ T5806] page_pool_release_retry() stalled pool shutdown: id 128, 1 inflight 181 sec [ 1156.684223][T26366] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6127'. [ 1156.926908][ T9255] Bluetooth: hci4: command tx timeout [ 1156.953500][T26374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6129'. [ 1157.179831][T26185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.195820][T26185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.217724][T26185] bridge_slave_0: entered allmulticast mode [ 1157.236244][T26185] bridge_slave_0: entered promiscuous mode [ 1157.274597][T26185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.293387][T26185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.312200][T26185] bridge_slave_1: entered allmulticast mode [ 1157.340047][T26185] bridge_slave_1: entered promiscuous mode [ 1157.454443][T26386] syzkaller0: entered promiscuous mode [ 1157.460491][T26386] syzkaller0: entered allmulticast mode [ 1157.474907][T26185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.501526][T26185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.015964][ T9255] Bluetooth: hci4: command tx timeout [ 1160.764734][T26185] team0: Port device team_slave_0 added [ 1160.771084][T26408] netem: change failed [ 1160.785459][T26185] team0: Port device team_slave_1 added [ 1160.891530][T26185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.907129][T26185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.952693][T26185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.966551][T26185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.973566][T26185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.000958][T26185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.038476][T26432] macsec1: entered promiscuous mode [ 1161.045162][T26432] dummy0: entered promiscuous mode [ 1161.052686][T26432] macsec1: entered allmulticast mode [ 1161.061058][T26432] dummy0: entered allmulticast mode [ 1161.073677][T26432] dummy0: left allmulticast mode [ 1161.113369][T26421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1161.133764][T26430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6142'. [ 1161.215221][ T5826] dummy0: left promiscuous mode [ 1161.334071][T26185] hsr_slave_0: entered promiscuous mode [ 1161.351385][T26185] hsr_slave_1: entered promiscuous mode [ 1161.358392][T26185] debugfs: 'hsr0' already exists in 'hsr' [ 1161.364309][T26185] Cannot create hsr debugfs directory [ 1161.571686][T26448] syzkaller0: entered promiscuous mode [ 1161.590293][T26448] syzkaller0: entered allmulticast mode [ 1161.622504][T26442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1161.638046][T26442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6147'. [ 1161.780222][T26453] syzkaller0: entered promiscuous mode [ 1161.789435][T26453] syzkaller0: entered allmulticast mode [ 1161.810460][T26445] ip6_vti0 speed is unknown, defaulting to 1000 [ 1162.006090][T26460] netem: change failed [ 1162.120793][T26185] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.132043][T26185] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.253896][T26185] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.264578][T26185] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.364671][T26464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6152'. [ 1162.382706][T26445] lo speed is unknown, defaulting to 1000 [ 1162.435902][T26185] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.461490][T26185] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.607004][T26468] team0 (unregistering): Port device team_slave_0 removed [ 1162.632937][T26468] team0 (unregistering): Port device team_slave_1 removed [ 1162.693891][T26185] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.733895][T26185] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.905138][ T9255] block nbd0: Receive control failed (result -32) [ 1162.946228][T26445] lo speed is unknown, defaulting to 1000 [ 1163.116170][T26482] Bluetooth: MGMT ver 1.23 [ 1163.121650][T26483] Cannot find set identified by id 3 to match [ 1165.172997][T18250] Bluetooth: hci2: command 0x0401 tx timeout [ 1165.179186][ T9255] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1166.385379][T26487] netem: change failed [ 1166.647609][T26185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1166.677809][T26185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1166.689370][T26185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1166.705601][T26185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1166.715566][T26185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1166.732415][T26185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1166.743563][T26185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1166.765033][T26185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1166.973875][T26185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.020688][T26185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.035550][T16470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.042721][T16470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.082302][T16470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.089554][T16470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.103677][T26515] netlink: 'syz.2.6168': attribute type 2 has an invalid length. [ 1167.125356][T26515] netlink: 'syz.2.6168': attribute type 1 has an invalid length. [ 1167.134211][T26515] netlink: 'syz.2.6168': attribute type 2 has an invalid length. [ 1167.143826][T26515] netlink: 'syz.2.6168': attribute type 1 has an invalid length. [ 1167.749118][T26535] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6174'. [ 1168.204777][T26552] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.6180'. [ 1168.271485][T26554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6179'. [ 1168.284996][T26554] netlink: 94 bytes leftover after parsing attributes in process `syz.1.6179'. [ 1168.302428][T26554] netlink: 'syz.1.6179': attribute type 1 has an invalid length. [ 1168.327621][T26558] Bluetooth: MGMT ver 1.23 [ 1168.350792][T26554] netlink: 568 bytes leftover after parsing attributes in process `syz.1.6179'. [ 1168.695209][T26576] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6185'. [ 1168.734202][T26185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.750233][T26575] syzkaller0: entered promiscuous mode [ 1168.755922][T26575] syzkaller0: entered allmulticast mode [ 1168.769088][T26572] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6185'. [ 1168.796151][T26575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6186'. [ 1168.823054][T26575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6186'. [ 1169.216105][T26587] syzkaller1: tun_chr_ioctl cmd 35111 [ 1169.234498][T26587] tipc: Enabling of bearer rejected, failed to enable media [ 1169.565196][T26593] : option downdelay: invalid value (18446744073709547007) [ 1169.576057][T26593] : option downdelay: allowed values 0 - 2147483647 [ 1169.654460][T26593]  (unregistering): Released all slaves [ 1169.697155][T26185] veth0_vlan: entered promiscuous mode [ 1169.759875][T26185] veth1_vlan: entered promiscuous mode [ 1169.884083][T26185] veth0_macvtap: entered promiscuous mode [ 1169.931948][T26185] veth1_macvtap: entered promiscuous mode [ 1170.012809][T26185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.041923][T26185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.092062][T26612] syzkaller0: entered promiscuous mode [ 1170.102588][T26612] syzkaller0: entered allmulticast mode [ 1170.189085][ T5720] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.239206][T26612] tipc: Enabled bearer , priority 10 [ 1170.256660][ T5720] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.335110][T26611] tipc: Resetting bearer [ 1170.398498][T26611] tipc: Disabling bearer [ 1170.420295][ T5720] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.472733][ T5720] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.623970][ T5720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.634606][ T5720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.739246][T16470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.755756][T16470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1170.916890][T26617] Cannot find map_set index 17 as target [ 1171.148914][T26627] syzkaller0: entered promiscuous mode [ 1171.164883][T26627] syzkaller0: entered allmulticast mode [ 1172.796265][T26561] Set syz1 is full, maxelem 65536 reached [ 1172.815169][T26650] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.6211'. [ 1172.901433][T26648] bridge0: port 1(erspan0) entered blocking state [ 1172.919150][T26648] bridge0: port 1(erspan0) entered disabled state [ 1172.927902][T26648] erspan0: entered allmulticast mode [ 1172.944717][T26648] erspan0: entered promiscuous mode [ 1172.951716][T26648] bridge0: port 1(erspan0) entered blocking state [ 1172.960375][T26648] bridge0: port 1(erspan0) entered forwarding state [ 1172.977676][T26649] erspan0: left allmulticast mode [ 1172.989994][T26649] erspan0: left promiscuous mode [ 1172.998141][T26649] bridge0: port 1(erspan0) entered disabled state [ 1173.173563][T26642] ip6_vti0 speed is unknown, defaulting to 1000 [ 1173.482550][T26669] syzkaller0: entered promiscuous mode [ 1173.494200][T26669] syzkaller0: entered allmulticast mode [ 1173.543222][T26669] tipc: Started in network mode [ 1173.557449][T26669] tipc: Node identity 1a53de437112, cluster identity 4711 [ 1173.565585][T26669] tipc: Enabled bearer , priority 0 [ 1173.593700][T26668] tipc: Resetting bearer [ 1173.651028][T26673] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6221'. [ 1173.665306][T26668] tipc: Disabling bearer [ 1173.693596][T26642] lo speed is unknown, defaulting to 1000 [ 1174.073368][T26685] block nbd1: server does not support multiple connections per device. [ 1174.106221][T26685] block nbd1: shutting down sockets [ 1174.286127][T26642] lo speed is unknown, defaulting to 1000 [ 1174.328277][T26691] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1174.365344][T26691] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1174.425665][T26691] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1174.452461][T26696] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 1174.462268][T26697] netlink: 'syz.2.6228': attribute type 1 has an invalid length. [ 1174.694323][T26700] bond1: (slave geneve2): making interface the new active one [ 1174.704696][T26700] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1174.720195][T26692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6226'. [ 1174.824257][T16472] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1174.867176][T16472] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1174.906121][T26691] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1174.917656][T26691] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1174.928645][T26691] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1174.954035][T26709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6232'. [ 1174.973160][T26709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6232'. [ 1174.996266][ T5722] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1175.031927][ T5722] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1175.141163][T26691] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.161386][T26691] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1175.193101][T26691] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1175.445993][T26691] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1175.455916][T26691] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1175.477011][T26691] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1175.532766][T26721] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 1176.220381][ T5722] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.241091][ T5722] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1176.260928][ T5722] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1176.374468][ T5722] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.396879][ T5722] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1176.424678][ T5722] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1176.452763][ T5722] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.472778][ T5722] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1176.496938][ T5722] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1176.580931][ T5722] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1176.609688][ T5722] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1176.650653][ T5722] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1176.834545][T26739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6246'. [ 1177.064336][T26741] ip6_vti0 speed is unknown, defaulting to 1000 [ 1177.082813][T26747] syzkaller0: entered promiscuous mode [ 1177.089168][T26747] syzkaller0: entered allmulticast mode [ 1177.580438][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.935119][T26741] lo speed is unknown, defaulting to 1000 [ 1178.375454][T26759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6250'. [ 1178.660718][T26741] lo speed is unknown, defaulting to 1000 [ 1178.781239][T26766] ip6_vti0 speed is unknown, defaulting to 1000 [ 1179.524500][T26679] Set syz1 is full, maxelem 65536 reached [ 1179.572546][T26771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 1180.424044][T26778] netlink: set zone limit has 4 unknown bytes [ 1180.501824][T26766] lo speed is unknown, defaulting to 1000 [ 1180.646967][T26783] netlink: set zone limit has 4 unknown bytes [ 1180.873701][T26796] syzkaller0: entered promiscuous mode [ 1180.888801][T26796] syzkaller0: entered allmulticast mode [ 1181.025343][T26796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6265'. [ 1181.370311][T26766] lo speed is unknown, defaulting to 1000 [ 1181.764022][T26815] syzkaller0: entered promiscuous mode [ 1181.780036][T26815] syzkaller0: entered allmulticast mode [ 1181.822335][T26815] tipc: Enabled bearer , priority 0 [ 1181.825431][T26799] SET target dimension over the limit! [ 1181.872623][T26814] tipc: Resetting bearer [ 1181.963067][T26814] tipc: Disabling bearer [ 1182.159270][T26819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6273'. [ 1182.964458][T26832] xt_hashlimit: size too large, truncated to 1048576 [ 1184.273235][T26852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6284'. [ 1184.355305][T26850] Cannot find map_set index 17 as target [ 1185.175590][T26865] ip6_vti0 speed is unknown, defaulting to 1000 [ 1185.196191][T26868] syzkaller0: entered promiscuous mode [ 1185.219949][T26868] syzkaller0: entered allmulticast mode [ 1185.284870][T26868] tipc: Started in network mode [ 1185.306720][T26868] tipc: Node identity da2052075659, cluster identity 4711 [ 1185.333391][T26868] tipc: Enabled bearer , priority 0 [ 1185.378449][T26867] tipc: Resetting bearer [ 1185.459587][T26867] tipc: Disabling bearer [ 1185.517456][T26877] syzkaller0: entered promiscuous mode [ 1185.547966][T26877] syzkaller0: entered allmulticast mode [ 1185.912328][T26881] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6293'. [ 1186.761969][T26865] lo speed is unknown, defaulting to 1000 [ 1186.889024][T26897] netlink: 'syz.2.6299': attribute type 1 has an invalid length. [ 1186.908776][T26897] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6299'. [ 1186.945838][T26897] netlink: 'syz.2.6299': attribute type 1 has an invalid length. [ 1187.009458][T26897] netlink: 634 bytes leftover after parsing attributes in process `syz.2.6299'. [ 1187.079670][T26897] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1187.107110][T26897] CPU: 1 UID: 0 PID: 26897 Comm: syz.2.6299 Not tainted syzkaller #0 PREEMPT(full) [ 1187.107142][T26897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1187.107156][T26897] Call Trace: [ 1187.107167][T26897] [ 1187.107177][T26897] dump_stack_lvl+0xe8/0x150 [ 1187.107211][T26897] sysfs_warn_dup+0x8e/0xa0 [ 1187.107241][T26897] sysfs_do_create_link_sd+0xc0/0x110 [ 1187.107272][T26897] device_add_class_symlinks+0x1cf/0x240 [ 1187.107308][T26897] device_add+0x475/0xbb0 [ 1187.107340][T26897] wiphy_register+0x1fb1/0x2fe0 [ 1187.107386][T26897] ? __pfx_wiphy_register+0x10/0x10 [ 1187.107409][T26897] ? __pfx_netdev_run_todo+0x10/0x10 [ 1187.107435][T26897] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 1187.107476][T26897] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 1187.107526][T26897] ieee80211_register_hw+0x3c53/0x4910 [ 1187.107569][T26897] ? ieee80211_register_hw+0x18d1/0x4910 [ 1187.107637][T26897] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1187.107667][T26897] ? __asan_memset+0x22/0x50 [ 1187.107696][T26897] ? __hrtimer_setup+0x1b7/0x260 [ 1187.107723][T26897] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1187.107757][T26897] mac80211_hwsim_new_radio+0x3327/0x57e0 [ 1187.107825][T26897] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1187.107851][T26897] ? kstrndup+0xbf/0x160 [ 1187.107887][T26897] hwsim_new_radio_nl+0xe20/0x26e0 [ 1187.107913][T26897] ? unwind_next_frame+0xa6/0x2550 [ 1187.107962][T26897] ? is_bpf_text_address+0x26/0x2b0 [ 1187.108001][T26897] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1187.108029][T26897] ? __kernel_text_address+0xd/0x30 [ 1187.108060][T26897] ? unwind_get_return_address+0x4d/0x90 [ 1187.108086][T26897] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1187.108119][T26897] ? arch_stack_walk+0xfb/0x150 [ 1187.108163][T26897] ? stack_trace_save+0xa9/0x100 [ 1187.108196][T26897] ? __pfx_stack_trace_save+0x10/0x10 [ 1187.108232][T26897] ? stack_depot_save_flags+0x33/0x810 [ 1187.108280][T26897] ? __nla_validate_parse+0x2480/0x2dc0 [ 1187.108310][T26897] ? ____sys_sendmsg+0x972/0x9f0 [ 1187.108340][T26897] ? ___sys_sendmsg+0x2a5/0x360 [ 1187.108395][T26897] ? __pfx___nla_validate_parse+0x10/0x10 [ 1187.108453][T26897] ? rcu_is_watching+0x15/0xb0 [ 1187.108480][T26897] ? trace_kmalloc+0x2a/0xf0 [ 1187.108518][T26897] ? __nla_parse+0x40/0x60 [ 1187.108555][T26897] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1187.108582][T26897] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1187.108627][T26897] genl_family_rcv_msg_doit+0x22a/0x330 [ 1187.108663][T26897] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1187.108706][T26897] ? bpf_lsm_capable+0x9/0x20 [ 1187.108727][T26897] ? security_capable+0x7e/0x2c0 [ 1187.108763][T26897] genl_rcv_msg+0x61c/0x7a0 [ 1187.108798][T26897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1187.108823][T26897] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1187.108868][T26897] netlink_rcv_skb+0x232/0x4b0 [ 1187.108902][T26897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1187.108929][T26897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1187.108982][T26897] ? down_read+0x270/0x2e0 [ 1187.109004][T26897] ? genl_rcv+0xd/0x40 [ 1187.109030][T26897] genl_rcv+0x28/0x40 [ 1187.109053][T26897] netlink_unicast+0x75c/0x8e0 [ 1187.109097][T26897] netlink_sendmsg+0x813/0xb40 [ 1187.109142][T26897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1187.109179][T26897] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1187.109212][T26897] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1187.109245][T26897] ____sys_sendmsg+0x972/0x9f0 [ 1187.109276][T26897] ? __might_fault+0xaf/0x130 [ 1187.109310][T26897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1187.109353][T26897] ? import_iovec+0x73/0xa0 [ 1187.109389][T26897] ___sys_sendmsg+0x2a5/0x360 [ 1187.109420][T26897] ? __lock_acquire+0x6b5/0x2cf0 [ 1187.109450][T26897] ? __pfx____sys_sendmsg+0x10/0x10 [ 1187.109491][T26897] ? futex_wake+0x4ac/0x580 [ 1187.109554][T26897] ? __fget_files+0x2a/0x420 [ 1187.109579][T26897] ? __fget_files+0x3a0/0x420 [ 1187.109628][T26897] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1187.109664][T26897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1187.109708][T26897] ? rcu_is_watching+0x15/0xb0 [ 1187.109747][T26897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.109771][T26897] do_syscall_64+0x15f/0xf80 [ 1187.109792][T26897] ? trace_irq_disable+0x3b/0x140 [ 1187.109825][T26897] ? clear_bhb_loop+0x40/0x90 [ 1187.109852][T26897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.109873][T26897] RIP: 0033:0x7f46aed9cdd9 [ 1187.109895][T26897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.109925][T26897] RSP: 002b:00007f46acff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1187.109949][T26897] RAX: ffffffffffffffda RBX: 00007f46af015fa0 RCX: 00007f46aed9cdd9 [ 1187.109964][T26897] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000006 [ 1187.109978][T26897] RBP: 00007f46aee32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1187.109992][T26897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.110006][T26897] R13: 00007f46af016038 R14: 00007f46af015fa0 R15: 00007ffefc0cda68 [ 1187.110045][T26897] [ 1188.018793][T26797] Set syz1 is full, maxelem 65536 reached [ 1188.190520][T26904] syzkaller0: entered promiscuous mode [ 1188.196609][T26904] syzkaller0: entered allmulticast mode [ 1188.216527][T26904] tipc: Enabled bearer , priority 0 [ 1188.228639][T26911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1188.259662][T26903] tipc: Resetting bearer [ 1188.365309][T26903] tipc: Disabling bearer [ 1188.548301][T26917] syzkaller0: entered promiscuous mode [ 1188.581240][T26917] syzkaller0: entered allmulticast mode [ 1188.615080][T26865] lo speed is unknown, defaulting to 1000 [ 1188.679616][T26925] SET target dimension over the limit! [ 1188.883190][ T5844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.905213][ T5844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.150507][T26927] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1189.202934][T26939] Cannot find map_set index 17 as target [ 1189.249832][T26937] syzkaller1: entered promiscuous mode [ 1189.257911][T26927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1189.272559][T26937] syzkaller1: entered allmulticast mode [ 1189.336926][T26937] netlink: 'syz.4.6316': attribute type 298 has an invalid length. [ 1190.618512][T26969] Cannot find map_set index 17 as target [ 1190.703349][T26974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6333'. [ 1190.802362][T26974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.079514][T16470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.086779][T16470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.087746][ T5722] wlan1: Trigger new scan to find an IBSS to join [ 1191.519496][T26987] Cannot find set identified by id 3 to match [ 1191.602742][T26989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6339'. [ 1191.653537][T26989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6339'. [ 1192.038416][T26993] netlink: 120 bytes leftover after parsing attributes in process `syz.1.6340'. [ 1192.521210][T27001] syz_tun: entered allmulticast mode [ 1192.703935][T26999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6342'. [ 1192.729020][T27014] xt_hashlimit: size too large, truncated to 1048576 [ 1192.887685][T26999] syz_tun (unregistering): left allmulticast mode [ 1193.113799][T27022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6349'. [ 1193.228467][T27023] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6349'. [ 1193.776220][T27033] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6352'. [ 1193.813176][T27037] ip6_vti0 speed is unknown, defaulting to 1000 [ 1193.832059][T27042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6354'. [ 1193.847288][T27033] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6352'. [ 1193.855056][T27044] SET target dimension over the limit! [ 1194.128206][T16472] wlan1: Trigger new scan to find an IBSS to join [ 1194.795970][T27068] Cannot find set identified by id 3 to match [ 1194.991681][T27037] lo speed is unknown, defaulting to 1000 [ 1195.459549][T27087] bond0: option arp_validate: invalid value (55553) [ 1195.801556][T27095] netlink: 'syz.0.6371': attribute type 10 has an invalid length. [ 1195.891363][T27037] lo speed is unknown, defaulting to 1000 [ 1195.934675][T27095] veth0: entered promiscuous mode [ 1197.042367][T27094] veth0: left promiscuous mode [ 1197.049577][T27124] SET target dimension over the limit! [ 1197.167201][T16472] wlan1: Trigger new scan to find an IBSS to join [ 1197.392106][T27130] __nla_validate_parse: 3 callbacks suppressed [ 1197.392128][T27130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6383'. [ 1197.692619][T27137] netlink: 25 bytes leftover after parsing attributes in process `syz.1.6385'. [ 1197.869181][T27137] netlink: 'syz.1.6385': attribute type 13 has an invalid length. [ 1197.907294][T27137] netlink: 'syz.1.6385': attribute type 17 has an invalid length. [ 1198.033527][T27137] gretap0: refused to change device tx_queue_len [ 1198.089512][T27137] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1198.131495][T16472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1199.069973][T27159] ip6_vti0 speed is unknown, defaulting to 1000 [ 1199.529065][T27166] Bluetooth: MGMT ver 1.23 [ 1199.666093][T27172] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6394'. [ 1199.728910][T27172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1201.003621][T27159] lo speed is unknown, defaulting to 1000 [ 1201.620846][T27210] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6405'. [ 1201.721531][T27207] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1201.771766][T27207] bond1: (slave lo): Enslaving as an active interface with an up link [ 1201.834251][T27207] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1201.942974][T27217] tipc: Enabled bearer , priority 0 [ 1202.007678][T27223] netlink: 'syz.2.6409': attribute type 3 has an invalid length. [ 1202.252984][T27159] lo speed is unknown, defaulting to 1000 [ 1202.506925][T27218] syzkaller0: entered promiscuous mode [ 1202.545059][T27218] syzkaller0: entered allmulticast mode [ 1202.562389][T27218] tipc: Resetting bearer [ 1203.062203][T27245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6416'. [ 1203.404134][T27208] tipc: Resetting bearer [ 1208.773665][T27208] tipc: Disabling bearer [ 1208.792280][T10555] tipc: Node number set to 2356761095 [ 1209.199465][T27265] bond0: option arp_validate: invalid value (55553) [ 1209.209129][ T13] bond0: (slave bond_slave_0): interface is now down [ 1209.222137][T27268] syzkaller0: entered promiscuous mode [ 1209.234425][T27268] syzkaller0: entered allmulticast mode [ 1209.254846][ T13] bond0: (slave bond_slave_1): interface is now down [ 1209.266533][T27270] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6423'. [ 1209.301332][T27262] tipc: Enabled bearer , priority 0 [ 1209.328232][T16470] bond0: (slave bond_slave_0): interface is now down [ 1209.358191][T16470] bond0: (slave bond_slave_1): interface is now down [ 1209.389715][T27261] tipc: Resetting bearer [ 1209.397248][T16470] bond0: (slave bond_slave_0): interface is now down [ 1209.426518][T16470] bond0: (slave bond_slave_1): interface is now down [ 1209.466434][ T5720] bond0: (slave bond_slave_0): interface is now down [ 1209.495915][ T5720] bond0: (slave bond_slave_1): interface is now down [ 1209.538858][ T5720] bond0: (slave bond_slave_0): interface is now down [ 1209.579887][ T5720] bond0: (slave bond_slave_1): interface is now down [ 1209.675816][T27261] tipc: Disabling bearer [ 1209.697225][ T5733] bond0: (slave bond_slave_0): interface is now down [ 1209.726164][ T5733] bond0: (slave bond_slave_1): interface is now down [ 1209.781027][ T13] bond0: (slave bond_slave_0): interface is now down [ 1209.817906][ T13] bond0: (slave bond_slave_1): interface is now down [ 1209.856465][ T5720] bond0: (slave bond_slave_0): interface is now down [ 1209.869093][T27270] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.870726][ T5720] bond0: (slave bond_slave_1): interface is now down [ 1209.917927][T27270] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1209.943529][ T5720] bond0: (slave bond_slave_0): interface is now down [ 1209.962261][T27270] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1209.973622][ T5720] bond0: (slave bond_slave_1): interface is now down [ 1210.025370][ T13] bond0: (slave bond_slave_0): interface is now down [ 1210.041639][ T13] bond0: (slave bond_slave_1): interface is now down [ 1210.076945][ T13] bond0: (slave bond_slave_0): interface is now down [ 1210.097710][ T13] bond0: (slave bond_slave_1): interface is now down [ 1210.142211][ T13] bond0: (slave bond_slave_0): interface is now down [ 1210.170299][ T13] bond0: (slave bond_slave_1): interface is now down [ 1210.234789][ T13] bond0: now running without any active interface! [ 1210.313937][T27270] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1210.343239][T27290] SET target dimension over the limit! [ 1210.358978][T27270] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1210.413427][T27270] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1210.438097][T27292] xt_hashlimit: size too large, truncated to 1048576 [ 1210.621532][T27270] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1210.660548][T27270] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1210.703954][T27270] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1210.878663][T27270] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1210.923210][T27270] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1210.956007][T27270] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1211.365300][T27313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1211.472959][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.484343][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1211.501563][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1211.603796][T27319] Cannot find set identified by id 3 to match [ 1211.721141][T27321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6438'. [ 1211.887395][T27315] team0 (unregistering): Port device team_slave_0 removed [ 1211.909023][T27315] team0 (unregistering): Port device team_slave_1 removed [ 1211.918058][T27324] netlink: 'syz.4.6438': attribute type 1 has an invalid length. [ 1211.962518][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.971687][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1211.980921][ T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1212.165593][ T5720] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.175710][ T5720] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1212.187584][ T5720] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1212.313760][ T5733] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1212.335575][ T5733] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1212.356642][ T5733] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1212.424613][T27322] ip6_vti0 speed is unknown, defaulting to 1000 [ 1212.441280][T27331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6440'. [ 1213.193543][T27345] : option downdelay: invalid value (18446744073709547007) [ 1213.256033][T27345] : option downdelay: allowed values 0 - 2147483647 [ 1213.312340][T27345]  (unregistering): Released all slaves [ 1213.385036][T27322] lo speed is unknown, defaulting to 1000 [ 1213.978493][T27376] tipc: Enabling of bearer rejected, failed to enable media [ 1214.635364][T27393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6453'. [ 1214.673812][T27322] lo speed is unknown, defaulting to 1000 [ 1214.676715][T27394] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.6452'. [ 1215.629147][T27420] bond0: option arp_validate: invalid value (55553) [ 1215.664822][T27415] syzkaller0: entered promiscuous mode [ 1215.756973][T27415] syzkaller0: entered allmulticast mode [ 1215.894828][ T5667] page_pool_release_retry() stalled pool shutdown: id 128, 1 inflight 242 sec [ 1215.915183][T27425] SET target dimension over the limit! [ 1217.709097][T27458] Cannot find map_set index 17 as target [ 1218.363475][T27473] Cannot find set identified by id 3 to match [ 1218.788505][T27481] netlink: 'syz.2.6481': attribute type 8 has an invalid length. [ 1218.822325][T27481] netlink: 'syz.2.6481': attribute type 8 has an invalid length. [ 1218.871260][T27481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1225.918233][T27521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6495'. [ 1226.065515][T27524] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6496'. [ 1226.283414][T27534] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6496'. [ 1226.302124][T27526] : option downdelay: invalid value (18446744073709547007) [ 1226.330162][T27526] : option downdelay: allowed values 0 - 2147483647 [ 1226.392171][T27526]  (unregistering): Released all slaves [ 1226.425127][T27536] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 1226.842376][T27535] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1227.548188][T27562] Cannot find set identified by id 3 to match [ 1227.616807][T27560] team0 (unregistering): Port device team_slave_0 removed [ 1227.670951][T27560] team0 (unregistering): Port device team_slave_1 removed [ 1227.736103][T27570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6508'. [ 1227.849198][T27565] : option downdelay: invalid value (18446744073709547007) [ 1227.858988][T27565] : option downdelay: allowed values 0 - 2147483647 [ 1227.868816][T27565]  (unregistering): Released all slaves [ 1228.117887][T27581] SET target dimension over the limit! [ 1228.345490][T27586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6513'. [ 1228.412395][T27590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1228.431472][T27592] FAULT_INJECTION: forcing a failure. [ 1228.431472][T27592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.475268][T27592] CPU: 1 UID: 0 PID: 27592 Comm: syz.0.6515 Not tainted syzkaller #0 PREEMPT(full) [ 1228.475300][T27592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1228.475314][T27592] Call Trace: [ 1228.475322][T27592] [ 1228.475331][T27592] dump_stack_lvl+0xe8/0x150 [ 1228.475362][T27592] should_fail_ex+0x412/0x560 [ 1228.475408][T27592] _copy_from_iter+0x1d3/0x1670 [ 1228.475435][T27592] ? l2cap_sock_alloc_skb_cb+0x24c/0x490 [ 1228.475467][T27592] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1228.475497][T27592] ? __pfx__copy_from_iter+0x10/0x10 [ 1228.475529][T27592] ? __pfx_process_measurement+0x10/0x10 [ 1228.475558][T27592] ? skb_put+0x11b/0x210 [ 1228.475590][T27592] l2cap_skbuff_fromiovec+0x9f/0x520 [ 1228.475623][T27592] ? skb_put+0x11b/0x210 [ 1228.475654][T27592] l2cap_chan_send+0x40d/0x2580 [ 1228.475679][T27592] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1228.475714][T27592] ? lockdep_hardirqs_on+0x7a/0x110 [ 1228.475747][T27592] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1228.475779][T27592] ? l2cap_sock_sendmsg+0x327/0x4e0 [ 1228.475806][T27592] ? __pfx_l2cap_chan_send+0x10/0x10 [ 1228.475832][T27592] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 1228.475857][T27592] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 1228.475882][T27592] ? __local_bh_enable_ip+0xd0/0x130 [ 1228.475905][T27592] l2cap_sock_sendmsg+0x33d/0x4e0 [ 1228.475934][T27592] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 1228.475968][T27592] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1228.475993][T27592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1228.476019][T27592] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 1228.476043][T27592] sock_write_iter+0x49b/0x4f0 [ 1228.476065][T27592] ? __pfx_sock_write_iter+0x10/0x10 [ 1228.476106][T27592] do_iter_readv_writev+0x619/0x8c0 [ 1228.476137][T27592] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1228.476168][T27592] ? bpf_lsm_file_permission+0x9/0x20 [ 1228.476192][T27592] ? security_file_permission+0x75/0x260 [ 1228.476214][T27592] ? rw_verify_area+0x255/0x4d0 [ 1228.476242][T27592] vfs_writev+0x33c/0x990 [ 1228.476273][T27592] ? __pfx_vfs_writev+0x10/0x10 [ 1228.476314][T27592] ? __fget_files+0x2a/0x420 [ 1228.476346][T27592] ? __fget_files+0x3a0/0x420 [ 1228.476370][T27592] ? __fget_files+0x2a/0x420 [ 1228.476412][T27592] do_writev+0x154/0x2e0 [ 1228.476434][T27592] ? __pfx_do_writev+0x10/0x10 [ 1228.476463][T27592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.476482][T27592] do_syscall_64+0x15f/0xf80 [ 1228.476498][T27592] ? trace_irq_disable+0x3b/0x140 [ 1228.476525][T27592] ? clear_bhb_loop+0x40/0x90 [ 1228.476546][T27592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.476564][T27592] RIP: 0033:0x7f4ee5b9cdd9 [ 1228.476582][T27592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.476597][T27592] RSP: 002b:00007f4ee6a00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1228.476617][T27592] RAX: ffffffffffffffda RBX: 00007f4ee5e15fa0 RCX: 00007f4ee5b9cdd9 [ 1228.476630][T27592] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 1228.476641][T27592] RBP: 00007f4ee6a00090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.476653][T27592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.476664][T27592] R13: 00007f4ee5e16038 R14: 00007f4ee5e15fa0 R15: 00007fffbae715b8 [ 1228.476693][T27592] [ 1228.861980][T27582] syzkaller0: entered promiscuous mode [ 1228.868638][T27582] syzkaller0: entered allmulticast mode [ 1229.049172][T27601] xt_hashlimit: size too large, truncated to 1048576 [ 1229.528740][T27618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6521'. [ 1235.976699][T27665] Bluetooth: hci0: command 0x0406 tx timeout [ 1236.994129][T27611] netem: change failed [ 1236.999594][T27618] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6521'. [ 1237.068417][T27636] : option downdelay: invalid value (18446744073709547007) [ 1237.075866][T27636] : option downdelay: allowed values 0 - 2147483647 [ 1237.091985][T27636]  (unregistering): Released all slaves [ 1237.352594][T27669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6528'. [ 1237.358920][T27673] bond0: option arp_validate: invalid value (55553) [ 1237.363323][T27671] FAULT_INJECTION: forcing a failure. [ 1237.363323][T27671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.408617][T27671] CPU: 1 UID: 0 PID: 27671 Comm: syz.4.6529 Not tainted syzkaller #0 PREEMPT(full) [ 1237.408645][T27671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1237.408658][T27671] Call Trace: [ 1237.408666][T27671] [ 1237.408675][T27671] dump_stack_lvl+0xe8/0x150 [ 1237.408707][T27671] should_fail_ex+0x412/0x560 [ 1237.408742][T27671] _copy_from_iter+0x1d3/0x1670 [ 1237.408782][T27671] ? l2cap_sock_alloc_skb_cb+0x28e/0x490 [ 1237.408806][T27671] ? __pfx__copy_from_iter+0x10/0x10 [ 1237.408837][T27671] ? __pfx_l2cap_sock_alloc_skb_cb+0x10/0x10 [ 1237.408864][T27671] ? skb_put+0x11b/0x210 [ 1237.408898][T27671] l2cap_skbuff_fromiovec+0x296/0x520 [ 1237.408940][T27671] l2cap_chan_send+0x40d/0x2580 [ 1237.408967][T27671] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1237.408997][T27671] ? lockdep_hardirqs_on+0x7a/0x110 [ 1237.409028][T27671] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1237.409062][T27671] ? l2cap_sock_sendmsg+0x327/0x4e0 [ 1237.409094][T27671] ? __pfx_l2cap_chan_send+0x10/0x10 [ 1237.409125][T27671] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 1237.409155][T27671] ? l2cap_sock_sendmsg+0x2d1/0x4e0 [ 1237.409184][T27671] ? __local_bh_enable_ip+0xd0/0x130 [ 1237.409228][T27671] l2cap_sock_sendmsg+0x33d/0x4e0 [ 1237.409269][T27671] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 1237.409303][T27671] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1237.409342][T27671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1237.409373][T27671] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 1237.409401][T27671] sock_write_iter+0x49b/0x4f0 [ 1237.409428][T27671] ? __pfx_sock_write_iter+0x10/0x10 [ 1237.409479][T27671] do_iter_readv_writev+0x619/0x8c0 [ 1237.409516][T27671] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1237.409553][T27671] ? bpf_lsm_file_permission+0x9/0x20 [ 1237.409580][T27671] ? security_file_permission+0x75/0x260 [ 1237.409605][T27671] ? rw_verify_area+0x255/0x4d0 [ 1237.409639][T27671] vfs_writev+0x33c/0x990 [ 1237.409674][T27671] ? __pfx_vfs_writev+0x10/0x10 [ 1237.409713][T27671] ? __fget_files+0x2a/0x420 [ 1237.409743][T27671] ? __fget_files+0x3a0/0x420 [ 1237.409766][T27671] ? __fget_files+0x2a/0x420 [ 1237.409797][T27671] do_writev+0x154/0x2e0 [ 1237.409821][T27671] ? __pfx_do_writev+0x10/0x10 [ 1237.409854][T27671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.409875][T27671] do_syscall_64+0x15f/0xf80 [ 1237.409893][T27671] ? trace_irq_disable+0x3b/0x140 [ 1237.409922][T27671] ? clear_bhb_loop+0x40/0x90 [ 1237.409948][T27671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.409968][T27671] RIP: 0033:0x7f507e19cdd9 [ 1237.409987][T27671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.410005][T27671] RSP: 002b:00007f507f124028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1237.410027][T27671] RAX: ffffffffffffffda RBX: 00007f507e415fa0 RCX: 00007f507e19cdd9 [ 1237.410042][T27671] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 1237.410055][T27671] RBP: 00007f507f124090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.410067][T27671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.410079][T27671] R13: 00007f507e416038 R14: 00007f507e415fa0 R15: 00007ffcc1f92668 [ 1237.410114][T27671] [ 1238.444989][T27665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1238.481653][T27665] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1238.486074][T27692] netem: change failed [ 1238.494699][T27665] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1238.506544][T27665] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1238.517433][T27665] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1238.966901][T27697] syzkaller0: entered promiscuous mode [ 1238.988863][T27697] syzkaller0: entered allmulticast mode [ 1239.009663][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.641294][T27665] Bluetooth: hci5: command tx timeout [ 1240.751834][T27726] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6546'. [ 1240.781307][T27726] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.6546'. [ 1242.692102][T27665] Bluetooth: hci5: command tx timeout [ 1244.252717][T27723] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1244.578664][T27736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6549'. [ 1244.768065][T27665] Bluetooth: hci5: command tx timeout [ 1244.924483][T27749] syzkaller0: entered promiscuous mode [ 1244.939828][T27749] syzkaller0: entered allmulticast mode [ 1244.986000][T27749] tipc: Enabled bearer , priority 0 [ 1245.013480][T27747] tipc: Resetting bearer [ 1245.105310][T27747] tipc: Disabling bearer [ 1245.136136][T27756] netem: change failed [ 1245.229797][T27690] ip6_vti0 speed is unknown, defaulting to 1000 [ 1245.361616][T27761] tipc: Enabled bearer , priority 0 [ 1245.404962][T27761] syzkaller0: entered promiscuous mode [ 1245.427824][T27761] syzkaller0: entered allmulticast mode [ 1245.654336][T27763] syzkaller0: entered promiscuous mode [ 1245.669820][T27763] syzkaller0: entered allmulticast mode [ 1245.699603][T27761] tipc: Resetting bearer [ 1245.743153][T27760] tipc: Resetting bearer [ 1245.861942][T27760] tipc: Disabling bearer [ 1246.853033][T27665] Bluetooth: hci5: command tx timeout [ 1250.431294][T27690] lo speed is unknown, defaulting to 1000 [ 1250.445488][T27789] lo: Caught tx_queue_len zero misconfig [ 1250.454836][T27789] netem: change failed [ 1250.522153][T27797] tipc: Enabling of bearer rejected, failed to enable media [ 1250.732858][T27801] gretap0: entered promiscuous mode [ 1250.739018][T27801] macsec1: entered promiscuous mode [ 1250.749031][T27801] macsec1: entered allmulticast mode [ 1250.775611][T27801] gretap0: entered allmulticast mode [ 1250.811405][T27801] gretap0: left allmulticast mode [ 1250.822908][T27801] gretap0: left promiscuous mode [ 1251.273760][T27690] lo speed is unknown, defaulting to 1000 [ 1251.580027][T27837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6582'. [ 1251.606191][T27825] syzkaller0: entered promiscuous mode [ 1251.630142][T27825] syzkaller0: entered allmulticast mode [ 1251.713314][T27833] syzkaller1: entered promiscuous mode [ 1251.734349][T27833] syzkaller1: entered allmulticast mode [ 1251.832156][T27846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1251.861515][T27846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1251.890423][T27846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6586'. [ 1251.943710][T27846] netlink: 'syz.3.6586': attribute type 13 has an invalid length. [ 1255.804513][T27843] netlink: 'syz.3.6586': attribute type 13 has an invalid length. [ 1255.893007][T27846] gretap0: refused to change device tx_queue_len [ 1255.913227][T27846] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1255.956226][T27843] gretap0: refused to change device tx_queue_len [ 1255.964793][T27843] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1256.006376][T27855] netlink: 'syz.4.6589': attribute type 1 has an invalid length. [ 1256.070734][T27857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6589'. [ 1256.082143][T27857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6589'. [ 1256.191708][T27855] bond1: entered promiscuous mode [ 1256.205686][T27855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1256.360934][T27859] bond1: (slave bridge1): making interface the new active one [ 1256.388688][T27859] bridge1: entered promiscuous mode [ 1256.410473][T27859] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1256.673175][T27872] xt_hashlimit: size too large, truncated to 1048576 [ 1256.700961][T27873] netlink: 277 bytes leftover after parsing attributes in process `syz.1.6593'. [ 1257.617790][T27690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.635467][T27690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.656886][T27690] bridge_slave_0: entered allmulticast mode [ 1257.672713][T27690] bridge_slave_0: entered promiscuous mode [ 1257.692728][T27690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.705331][T27690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.723313][T27690] bridge_slave_1: entered allmulticast mode [ 1257.743004][T27690] bridge_slave_1: entered promiscuous mode [ 1257.846935][T27690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.895075][T27690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.089036][T27690] team0: Port device team_slave_0 added [ 1258.120187][T27690] team0: Port device team_slave_1 added [ 1258.151128][T27892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6596'. [ 1258.239827][T27899] netlink: 'syz.1.6599': attribute type 21 has an invalid length. [ 1258.249614][T27899] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6599'. [ 1258.252774][T27690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.285640][T27690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.292466][T27901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6599'. [ 1258.321081][T27690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.377893][T27899] netlink: 'syz.1.6599': attribute type 4 has an invalid length. [ 1258.398593][T27899] netlink: 'syz.1.6599': attribute type 5 has an invalid length. [ 1258.419810][T27899] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6599'. [ 1258.468898][T27690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.482617][T27690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.515925][T27690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.968306][T27905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.452081][T27905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1259.523635][T27905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.325802][T27900] syzkaller0: entered promiscuous mode [ 1260.332134][T27900] syzkaller0: entered allmulticast mode [ 1260.376659][T18250] Bluetooth: hci5: command 0x0405 tx timeout [ 1261.305390][T27949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6610'. [ 1261.320644][T27949] openvswitch: netlink: Key type 244 is out of range max 32 [ 1264.539688][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.551586][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.590031][T27924] tipc: Enabling of bearer rejected, failed to enable media [ 1264.705178][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.737270][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.909612][ T5667] lo speed is unknown, defaulting to 1000 [ 1264.923729][T27957] netlink: 277 bytes leftover after parsing attributes in process `syz.2.6613'. [ 1264.926372][ T5667] sqz0: Port: 1 Link ACTIVE [ 1264.945886][T27690] hsr_slave_0: entered promiscuous mode [ 1264.958675][T27690] hsr_slave_1: entered promiscuous mode [ 1264.981477][T27690] debugfs: 'hsr0' already exists in 'hsr' [ 1265.001923][T27690] Cannot create hsr debugfs directory [ 1265.037842][ T810] lo speed is unknown, defaulting to 1000 [ 1265.352830][T27969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6618'. [ 1265.598797][T27974] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6618'. [ 1265.643100][T27690] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1265.678304][T27690] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1265.695114][T27690] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1265.835636][T27690] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1265.856157][T27690] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1265.866660][T27690] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1266.032667][T27986] FAULT_INJECTION: forcing a failure. [ 1266.032667][T27986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1266.058310][T27986] CPU: 0 UID: 0 PID: 27986 Comm: syz.2.6624 Not tainted syzkaller #0 PREEMPT(full) [ 1266.058342][T27986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1266.058355][T27986] Call Trace: [ 1266.058363][T27986] [ 1266.058373][T27986] dump_stack_lvl+0xe8/0x150 [ 1266.058405][T27986] should_fail_ex+0x412/0x560 [ 1266.058439][T27986] _copy_to_user+0x31/0xb0 [ 1266.058472][T27986] bpf_test_finish+0x1db/0x6b0 [ 1266.058513][T27986] ? __pfx_bpf_test_finish+0x10/0x10 [ 1266.058546][T27986] ? _copy_from_user+0x94/0xb0 [ 1266.058576][T27986] ? bpf_test_init+0x113/0x150 [ 1266.058607][T27986] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1266.058655][T27986] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1266.058691][T27986] ? __fget_files+0x2a/0x420 [ 1266.058723][T27986] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1266.058754][T27986] bpf_prog_test_run+0x2c7/0x340 [ 1266.058781][T27986] __sys_bpf+0x643/0x950 [ 1266.058812][T27986] ? __pfx___sys_bpf+0x10/0x10 [ 1266.058856][T27986] ? ksys_write+0x242/0x270 [ 1266.058888][T27986] ? __pfx_ksys_write+0x10/0x10 [ 1266.058922][T27986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.058946][T27986] __x64_sys_bpf+0x7c/0x90 [ 1266.058975][T27986] do_syscall_64+0x15f/0xf80 [ 1266.058994][T27986] ? trace_irq_disable+0x3b/0x140 [ 1266.059023][T27986] ? clear_bhb_loop+0x40/0x90 [ 1266.059049][T27986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.059070][T27986] RIP: 0033:0x7f46aed9cdd9 [ 1266.059090][T27986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.059108][T27986] RSP: 002b:00007f46acff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1266.059132][T27986] RAX: ffffffffffffffda RBX: 00007f46af015fa0 RCX: 00007f46aed9cdd9 [ 1266.059156][T27986] RDX: 000000000000001b RSI: 0000200000000240 RDI: 000000000000000a [ 1266.059170][T27986] RBP: 00007f46acff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.059182][T27986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.059194][T27986] R13: 00007f46af016038 R14: 00007f46af015fa0 R15: 00007ffefc0cda68 [ 1266.059228][T27986] [ 1266.093684][T27976] syzkaller0: entered promiscuous mode [ 1266.290227][T27976] syzkaller0: entered allmulticast mode [ 1266.331838][T27690] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1266.365940][T27690] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1266.383499][T27990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6627'. [ 1266.393820][T27690] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1266.698267][T28003] netlink: 'syz.3.6629': attribute type 21 has an invalid length. [ 1266.712545][T28003] netlink: 'syz.3.6629': attribute type 20 has an invalid length. [ 1267.795833][T28014] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6635'. [ 1270.557306][T27690] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1270.578665][T27690] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1270.592482][T27690] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1270.633574][T28025] FAULT_INJECTION: forcing a failure. [ 1270.633574][T28025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1270.648113][T28025] CPU: 0 UID: 0 PID: 28025 Comm: syz.4.6637 Not tainted syzkaller #0 PREEMPT(full) [ 1270.648141][T28025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1270.648154][T28025] Call Trace: [ 1270.648163][T28025] [ 1270.648172][T28025] dump_stack_lvl+0xe8/0x150 [ 1270.648203][T28025] should_fail_ex+0x412/0x560 [ 1270.648238][T28025] _copy_to_user+0x31/0xb0 [ 1270.648273][T28025] bpf_test_finish+0x22c/0x6b0 [ 1270.648314][T28025] ? __pfx_bpf_test_finish+0x10/0x10 [ 1270.648357][T28025] ? _copy_from_user+0x94/0xb0 [ 1270.648396][T28025] ? bpf_test_init+0x113/0x150 [ 1270.648428][T28025] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1270.648477][T28025] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1270.648513][T28025] ? __fget_files+0x2a/0x420 [ 1270.648546][T28025] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1270.648577][T28025] bpf_prog_test_run+0x2c7/0x340 [ 1270.648604][T28025] __sys_bpf+0x643/0x950 [ 1270.648637][T28025] ? __pfx___sys_bpf+0x10/0x10 [ 1270.648686][T28025] ? ksys_write+0x242/0x270 [ 1270.648718][T28025] ? __pfx_ksys_write+0x10/0x10 [ 1270.648754][T28025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.648777][T28025] __x64_sys_bpf+0x7c/0x90 [ 1270.648808][T28025] do_syscall_64+0x15f/0xf80 [ 1270.648828][T28025] ? trace_irq_disable+0x3b/0x140 [ 1270.648859][T28025] ? clear_bhb_loop+0x40/0x90 [ 1270.648885][T28025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.648906][T28025] RIP: 0033:0x7f507e19cdd9 [ 1270.648927][T28025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1270.648945][T28025] RSP: 002b:00007f507f124028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1270.648968][T28025] RAX: ffffffffffffffda RBX: 00007f507e415fa0 RCX: 00007f507e19cdd9 [ 1270.648983][T28025] RDX: 000000000000001b RSI: 0000200000000240 RDI: 000000000000000a [ 1270.648997][T28025] RBP: 00007f507f124090 R08: 0000000000000000 R09: 0000000000000000 [ 1270.649009][T28025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1270.649020][T28025] R13: 00007f507e416038 R14: 00007f507e415fa0 R15: 00007ffcc1f92668 [ 1270.649054][T28025] [ 1271.060726][T27690] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1271.111072][T27690] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1271.121145][T27690] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1271.171643][T27690] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1271.229012][T28041] netlink: 'syz.1.6641': attribute type 1 has an invalid length. [ 1271.262858][T27690] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1271.289954][T28044] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6641'. [ 1271.301717][T27690] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1271.312710][T27690] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1271.329864][T27690] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1271.338912][T28041] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1271.364986][T28045] xt_ecn: cannot match TCP bits for non-tcp packets [ 1271.565245][T28059] netlink: 'syz.1.6645': attribute type 1 has an invalid length. [ 1271.658231][T28059] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1271.670132][T28059] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1271.702306][T27690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.750547][T28065] ip6_vti0 speed is unknown, defaulting to 1000 [ 1271.753058][T27690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.773510][T16470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.780823][T16470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.814281][T18250] Bluetooth: hci2: command 0x0401 tx timeout [ 1271.815431][T28075] netlink: 240 bytes leftover after parsing attributes in process `syz.4.6647'. [ 1271.860954][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.868304][ T5844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.933196][T28078] FAULT_INJECTION: forcing a failure. [ 1271.933196][T28078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1271.990632][T28078] CPU: 0 UID: 0 PID: 28078 Comm: syz.1.6649 Not tainted syzkaller #0 PREEMPT(full) [ 1271.990659][T28078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1271.990669][T28078] Call Trace: [ 1271.990677][T28078] [ 1271.990685][T28078] dump_stack_lvl+0xe8/0x150 [ 1271.990713][T28078] should_fail_ex+0x412/0x560 [ 1271.990748][T28078] _copy_to_user+0x31/0xb0 [ 1271.990776][T28078] bpf_test_finish+0x53c/0x6b0 [ 1271.990812][T28078] ? __pfx_bpf_test_finish+0x10/0x10 [ 1271.990843][T28078] ? _copy_from_user+0x94/0xb0 [ 1271.990869][T28078] ? bpf_test_init+0x113/0x150 [ 1271.990896][T28078] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 1271.990938][T28078] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1271.990968][T28078] ? __fget_files+0x2a/0x420 [ 1271.990995][T28078] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1271.991022][T28078] bpf_prog_test_run+0x2c7/0x340 [ 1271.991045][T28078] __sys_bpf+0x643/0x950 [ 1271.991073][T28078] ? __pfx___sys_bpf+0x10/0x10 [ 1271.991126][T28078] ? ksys_write+0x242/0x270 [ 1271.991155][T28078] ? __pfx_ksys_write+0x10/0x10 [ 1271.991185][T28078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.991204][T28078] __x64_sys_bpf+0x7c/0x90 [ 1271.991230][T28078] do_syscall_64+0x15f/0xf80 [ 1271.991248][T28078] ? trace_irq_disable+0x3b/0x140 [ 1271.991274][T28078] ? clear_bhb_loop+0x40/0x90 [ 1271.991296][T28078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.991313][T28078] RIP: 0033:0x7f1ece39cdd9 [ 1271.991332][T28078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.991347][T28078] RSP: 002b:00007f1ecf2d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1271.991368][T28078] RAX: ffffffffffffffda RBX: 00007f1ece615fa0 RCX: 00007f1ece39cdd9 [ 1271.991383][T28078] RDX: 000000000000001b RSI: 0000200000000240 RDI: 000000000000000a [ 1271.991397][T28078] RBP: 00007f1ecf2d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.991411][T28078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.991422][T28078] R13: 00007f1ece616038 R14: 00007f1ece615fa0 R15: 00007ffff12ab618 [ 1271.991455][T28078] [ 1273.012061][T28065] lo speed is unknown, defaulting to 1000 [ 1273.118619][T28104] tipc: Enabled bearer , priority 0 [ 1273.131226][T28107] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6657'. [ 1273.135522][T28104] syzkaller0: entered promiscuous mode [ 1273.154894][T28107] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6657'. [ 1273.160730][T28104] syzkaller0: entered allmulticast mode [ 1273.210603][T28104] tipc: Resetting bearer [ 1273.259163][T28103] tipc: Resetting bearer [ 1273.315049][T28103] tipc: Disabling bearer [ 1273.370288][T27690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.426802][T11683] unregister_netdevice: waiting for bond1 to become free. Usage count = 2 [ 1273.587671][T27690] veth0_vlan: entered promiscuous mode [ 1273.670403][T28065] lo speed is unknown, defaulting to 1000 [ 1273.707018][T27690] veth1_vlan: entered promiscuous mode SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1276.767175][ T5667] page_pool_release_retry() stalled pool shutdown: id 128, 1 inflight 303 sec