last executing test programs: 7.000629246s ago: executing program 0 (id=6586): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) syz_emit_ethernet(0x5a, &(0x7f0000000400)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @timestamp={0x44, 0x14, 0x5, 0x3, 0x0, [0x0, 0x10000, 0x0, 0x0]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r2, 0x1, 0xfffffffd, 0x2, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000020c2af4f03b7f9730000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000020c2af4f03b7f9730000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0xffffffffffffff09) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0xffffffffffffff09) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x4, 0x6, 0xd0, 0x1de6, 0x51, @ipv4={'\x00', '\xff\xff', @private=0x7ff}, @empty, 0x10, 0x1, 0x4, 0x7}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'gre0\x00', r7, 0x80, 0x700, 0xfffffffa, 0x510f, {{0x6, 0x4, 0x0, 0x14, 0x18, 0x66, 0x0, 0x7, 0x29, 0x0, @loopback, @local, {[@noop]}}}}}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000fc0)=ANY=[], 0x27c}, 0x1, 0x0, 0x0, 0x40000}, 0x20044005) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_getnetconf={0x2c, 0x52, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}, @NETCONFA_FORWARDING={0x8, 0x2, 0x481f352e}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r13 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r13, 0x8922, &(0x7f0000000180)={'netdevsim0\x00', 0x7fff}) syz_init_net_socket$rose(0xb, 0x5, 0x0) (async) r14 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r14, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) 6.36014977s ago: executing program 2 (id=6592): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140), 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000001280), 0x2}, 0x38) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x844, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x2003, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xf0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.971932707s ago: executing program 0 (id=6597): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x1a, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @alu={0x7, 0x0, 0xb, 0x9, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x4a}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffff86, 0x0, 0x0, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x7ff, 0xe6, &(0x7f00000002c0)=""/230, 0x41100, 0x68, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x10000c, 0x400000, 0x1000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000080)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000180)=[{0x5, 0x2, 0xb, 0x3}, {0x2, 0x1, 0xffffffff, 0xb}, {0x4, 0x4, 0x3, 0x6}, {0x1, 0x4, 0xc, 0x3}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000140), 0x4) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="23004400f8000000000300", @ANYRES32=r7, @ANYBLOB="10005a800c000080060002000c510000"], 0x2c}}, 0x4000) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000280)={r3, 0x2, 0x6, @local}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.924536987s ago: executing program 2 (id=6598): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a00010028bd7000ff5bdf97366317bd6caa36ff070001"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x24000010) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x21, "497e72ecc599cb90661c12423cb9d91a3372a8d7ebcc127ac1da0df742002eefa4"}, &(0x7f00000001c0)=0x29) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r4, 0x77, 0xe70}, &(0x7f0000000440)=0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001200)={0x0, @in6={{0xa, 0x4e20, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}, &(0x7f0000000100)=0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x5f6}, 0x8) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0600"/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000100"/28], 0x50) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) 5.019512031s ago: executing program 2 (id=6600): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x8001000f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000004}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x28, 0x1, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e80)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x21000802}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa0, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x6132}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3}, @ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x88}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r9, 0x8b2a, &(0x7f0000000040)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r10, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x8081) 4.991643163s ago: executing program 3 (id=6601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073f87a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x31334bf54e3073a5}, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) (async) recvmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2100, 0x0) (async) recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="10030600e0fc0209040300000096a13b", 0x10, 0x20000010, &(0x7f0000000140)={0x11, 0x1a, r4, 0x1, 0x27, 0x6, @remote}, 0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) 4.943799642s ago: executing program 0 (id=6602): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x104, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xd4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x9c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfe}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.827825736s ago: executing program 3 (id=6603): socketpair(0x2b, 0x80000, 0x100, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x4, @none, 0x3, 0x2}, 0xe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000002c0), r4) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) r8 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000440)) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000480)=0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f00000006c0)={"000d925d0f3459a299d3945cbc4e6e61", r9, r10, {0x3d, 0x2}, {0xe83, 0x81}, 0xbc94, [0x4, 0x4, 0x3, 0x9, 0xffffffffffffffff, 0x600000000000, 0xffffffffffffffff, 0x1, 0xd, 0x3, 0xe, 0x8000000000000001, 0xfffffffffffffffa, 0x9f4, 0x7fffffff, 0x7]}) socket$kcm(0x29, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r8, 0x40049366, &(0x7f00000007c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, r7, 0x8, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000980), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r11, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xa}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8814}, 0x8004) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000a80)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b40)={'erspan0\x00', &(0x7f0000000ac0)={'gretap0\x00', r12, 0x8, 0x1, 0x5, 0x80, {{0x13, 0x4, 0x3, 0x1c, 0x4c, 0x64, 0x0, 0x9b, 0x29, 0x0, @remote, @local, {[@end, @generic={0x83, 0xe, "6989266588540974f627355e"}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0xad, [@dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @multicast2, @broadcast, @loopback]}, @ssrr={0x89, 0xb, 0x1e, [@empty, @loopback]}]}}}}}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1f, 0x10, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10}, [@alu={0x7, 0x0, 0x4, 0x0, 0x6, 0x20, 0x8}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf6a}, @generic={0xd, 0x2, 0x0, 0x1, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x7}, @exit]}, &(0x7f0000000c40)='syzkaller\x00', 0x55f5, 0x0, 0x0, 0x41000, 0x43, '\x00', r13, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x3, 0x6, 0x7fffffff, 0x3}, 0x10, 0x0, r8, 0x0, &(0x7f0000000d00)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xe}, 0x94) ioctl$TUNSETFILTEREBPF(r14, 0x800454e1, &(0x7f0000000e00)=r15) 4.822398126s ago: executing program 1 (id=6604): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000000000ae3ff62791c38e3d14ec66e16bf69f66"], 0x28}}, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000300)={0x2}, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'macvtap0\x00', 0x4000}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x20, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x2c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) (async, rerun: 64) ioctl(r0, 0x8b29, &(0x7f0000000040)) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500001c0000000004018f78ac1414bbac1414aa0000907800670018"], 0x0) 4.646488891s ago: executing program 4 (id=6605): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendto(r1, &(0x7f0000000140)="d6a768551f", 0x5, 0x40000, &(0x7f0000000c40)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x3, 0x4, {0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xfbfb}}}, 0x80) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000100)={0x28, 0x0, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x81}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40014) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00003183fe46c4ad095b68104c8b3700000089fd9c525b21711bb1fad6f1850000000000000000000097c0af7b826bd1b6eca027dbbf4220a8357f6e202c65c925006088ed5180ce810bfa1262ee49936af48324bae4b4c04db96d055876bda95ec670de65f397f4c01c3e723f7dd4863cb94b14caefcf9f28acac4a9cdc621761fb60edb8bd608d30f034aa05d3285805cfe6c74fdda73fe0012b4a59d86573fdb56bec2259d5e19db6b0f3fbe30374e29d325941d0f43781b2"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) 4.623281325s ago: executing program 1 (id=6606): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140), 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="680000000001010400000000000000000200"], 0x68}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000001280), 0x2}, 0x38) sendto$netrom(0xffffffffffffffff, &(0x7f00000011c0), 0x0, 0x844, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x2003, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0xf0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x6c}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 4.509473s ago: executing program 3 (id=6607): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x609, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xe000, {0x2, 0x8, 0x7, 0x7}}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0xc005) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe9d}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2400000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20004804}, 0x800) r3 = socket$alg(0x26, 0x5, 0x0) recvmsg(r3, &(0x7f0000000600)={&(0x7f0000000540)=@phonet, 0x80, &(0x7f00000005c0)}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, r4, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x805}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, r4, 0x10, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x805}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000008c0)=@buf={0xb3, &(0x7f0000000800)="54c2a05388c5480c330d23a95dd93fedf4a0ebf93370aa1337238f8c65baa45950e10b95a97e66a7146a7096e2d3eaa030f063c7bc5934b154d69321ebadce3bac023e681874d605626b22c66e8030dfce41c993ac8f39ab41935a8aa76d15a676c923ab1a1fc5c135b489018b545293ede1cfe0062f0ba4e67c11bac56ce73e88233e5dfbf55f34b0680573d49ee272e7c9cbdc211feee6bf54cec22731ab80c7c842e5fa20b8c4a0622161b3901b3942ec0e"}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xb8, 0x1, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) (async) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xb8, 0x1, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0xa4, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) pipe(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000b00)={@in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x12, 0x0, "1704d2387556613d3ee13cf77922fb0a4a0265ad36fda00373ef18578f3f923004cb5c266d7092f98148a3d8aa64d7646e74b4212dc3e85bfee3afc3b33dfc660083b3852b19c5f6c28a50c607b086b7"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000b00)={@in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0x12, 0x0, "1704d2387556613d3ee13cf77922fb0a4a0265ad36fda00373ef18578f3f923004cb5c266d7092f98148a3d8aa64d7646e74b4212dc3e85bfee3afc3b33dfc660083b3852b19c5f6c28a50c607b086b7"}, 0xd8) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000c00)={0x0, 0xf8, 0x36, 0x1, 0x3, 0x10, 0x8, 0x5, 0x2, 0x7e, 0x3, 0x55, 0xe1, 0x8}, 0xe) (async) setsockopt$inet_sctp_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000c00)={0x0, 0xf8, 0x36, 0x1, 0x3, 0x10, 0x8, 0x5, 0x2, 0x7e, 0x3, 0x55, 0xe1, 0x8}, 0xe) unshare(0x80) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000c40)={0x0, 0x31, "7a8598f83afe7ba878232675146c97ff46ccaf7f6210f954baa9df38e5b8c9480062a972ef84096bb47fd51670425ea35f"}, &(0x7f0000000c80)=0x39) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000c40)={0x0, 0x31, "7a8598f83afe7ba878232675146c97ff46ccaf7f6210f954baa9df38e5b8c9480062a972ef84096bb47fd51670425ea35f"}, &(0x7f0000000c80)=0x39) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000cc0)={r9, 0x3, 0x2, [0x22a3, 0x898]}, 0xc) getsockname(r5, &(0x7f0000000d00)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000d80)=0x80) (async) getsockname(r5, &(0x7f0000000d00)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000d80)=0x80) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r7) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e00), r7) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)={0x184, r10, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x72}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xabfe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1be00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xded1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7}}}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) (async) sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000001040)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)={0x184, r10, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x72}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xabfe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf7}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1be00000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xded1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, '\x00', 0x34}, 0x7}}}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000010c0)={0x0, @empty, @dev}, &(0x7f0000001100)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000011c0)={'syztnl2\x00', &(0x7f0000001140)={'ip6_vti0\x00', 0x0, 0x4, 0xfb, 0x4, 0x8000, 0x4c, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x10, 0x7, 0x8000, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000011c0)={'syztnl2\x00', &(0x7f0000001140)={'ip6_vti0\x00', 0x0, 0x4, 0xfb, 0x4, 0x8000, 0x4c, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x10, 0x7, 0x8000, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000001200)={'wg2\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000001700)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000016c0)={&(0x7f0000001580)=@RTM_NEWMDB={0x118, 0x54, 0x100, 0x70bd2c, 0x25dfdbfd, {0x7, r12}, [@MDBA_SET_ENTRY={0x20, 0x1, {r13, 0x1, 0x0, 0x4, {@ip4=@broadcast, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x1, 0x3, 0x1, {@ip4=@rand_addr=0x64010102, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x1, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xcdb3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x1, {@ip4=@broadcast, 0xddb3}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x1, {@in6_addr=@loopback}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@ip4=@multicast2, 0x10dba}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x4, {@in6_addr=@local, 0x800}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) 4.508495553s ago: executing program 0 (id=6608): socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140), 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000200)={'sit0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x7, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000001280), 0x2}, 0x38) sendto$netrom(0xffffffffffffffff, 0x0, 0x0, 0x844, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x2003, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xf0, &(0x7f00000001c0)="b9fe268cb89e14f088a847ef6e2e15", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.415364584s ago: executing program 4 (id=6609): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$packet(0x11, 0x2, 0x300) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r3) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf250f0000000e0001006e657464657673696d000000e5e6cfb8ab59faf2ce90a40f0002006e657464657673696d3000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa4ef1adb02bd286dd606403a60000320000007c94ab435dbffdcd000000000200ff020000000000000000000000000001"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb2a}}]}, &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) 4.414506437s ago: executing program 2 (id=6610): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) (async) getsockname$packet(r6, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x80) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x22020600) (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, 0x0) (async) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f00000000c0)={0x9, 0xff}, 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000100)) (async) socket$kcm(0x10, 0x400000002, 0x0) 4.411409986s ago: executing program 1 (id=6611): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f00000041c0)=""/4100, &(0x7f0000000100)=0x1004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0, @ANYBLOB="b415000000ecfd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000006c0)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r8, r5, 0x25, 0x2, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 4.284175567s ago: executing program 3 (id=6612): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1.265792428s ago: executing program 2 (id=6613): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000140)="1a36c5", 0x3}], 0x2) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x4008, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020605000000000000000000000000000900020073797a32000000000500040000000000050001"], 0x64}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000072009f1697556e97419585eeb329bd7f44bd2d14ca88744218", @ANYRES32=0x0, @ANYBLOB="08000100feffff7f"], 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x20041040) (async, rerun: 32) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000480)={"5797d2856e21858dfc3a40354044fc82", 0x0, 0x0, {0x0, 0x1}, {0x7, 0xffffffff}, 0x1e5, [0xb, 0x0, 0x0, 0x7ac4, 0x8000, 0x152, 0xfff, 0xfffffffffffffeff, 0x8, 0x1ff, 0x7, 0xc, 0xf, 0x3, 0x2, 0x9]}) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x5000943a, &(0x7f0000000b40)={{r1}, r6, 0x10, @unused=[0xfffffffffffffffd, 0x4, 0x100000000, 0x5], @name="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"}) (async, rerun: 64) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x56, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaa230180c2000000000d030000803803000064ccb4befe0da44747dc3d9ff616308a9613eb101d253f3ee53c577787be80afa714637345111346f68b1f8715861a160612a5e4ed57cee2adfd0c562730674952dc459ceb1f780bdf8e5ae7fbece5199fd1fcb7c50997cc70b8abf46a7be9b6c8c7dc46bdadc015606ff6200bd0aacf5033b075d12dced08d831d7ac4501ee5456ce43b9c26e8c062f954c5061aa12aac7535847b387a31da123bf31e26f5f249a47d68f7f0e9921da416e72d924a556e56b74a2ec2a78f58d77bf815e06c14ee9ca8d47a84a06b060f9364ac14e9806eec465a65a3a7e862d601cfd578549230c8486160875558e7998081f747c050894bbd260a90001ba851abeb6812282fe6721b190fe1fda6ad447417eccba3983caf36ea8c0892d41dee0f04f45700765d5726b296402fe21011"], 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x82, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) recvmmsg(r8, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0, 0x0, 0x0, 0x40000}, 0x5}], 0x1, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0xfffffffffffffd04) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffe7) ioctl$TUNSETTXFILTER(r7, 0x400454d1, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) (async) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) (async, rerun: 64) socket$alg(0x26, 0x5, 0x0) (rerun: 64) 1.264314505s ago: executing program 3 (id=6614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) unshare(0x20020600) write$cgroup_type(r4, &(0x7f0000000280), 0x9) 1.263201527s ago: executing program 0 (id=6615): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928afb7028000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r2], 0x74}}, 0x2044890) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', r2, 0x0, 0x20, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x68, 0x1, 0xfd, 0x29, 0x0, @empty, @private}}}}) 1.24271242s ago: executing program 1 (id=6616): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 64) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time\x00', 0x26e1, 0x0) (rerun: 64) close(r0) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x1}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.192225031s ago: executing program 4 (id=6617): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="0a649329b2a344470f9bc0faa8d0cf04aa19bcc4cb4b0f6cccc826140704427ced8e3a0b950b7fffb3a6d5", 0x2b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="bbaff6f79abc949198cd", 0xa}], 0x1}}], 0x3, 0x8008800) 1.115399881s ago: executing program 0 (id=6618): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x205) socket$inet_mptcp(0x2, 0x1, 0x106) accept(r1, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0xffffffffffffff13) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000300000000000004000000080002000500000006000b000a"], 0x24}}, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0xa, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 1.108350885s ago: executing program 4 (id=6619): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x104, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xd4, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x9c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfe}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x80}, 0x0) 927.060472ms ago: executing program 1 (id=6620): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2}, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4}}, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, &(0x7f0000000000)=""/4087, &(0x7f0000001000)=0xff7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f00000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b839994fb484510bef2e488fbac2fe6faaf75e5cc4815bd2051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dcab772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f015d885b4b8ffc0fa3f880287c862137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7fc6edc76600000000826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00d2bfea3bf97ff8836d000000000000000000000000000000000000000000250d623b48a29e330900b8c552202407804f1ba1817256caf1090b71f2928ed030f3c8194cc3cbf48e2f4c9248c4c00a32d4873da3b7d66b1ce6f72aab16c923b16c4bfdbb24fb17bd198139c21c46065c6922fd705e670d0b5d6d495a773b872e8f88"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@perf_event={0x7}}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r5, 0x4000, r6}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x88, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x92}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}]}, @CTA_TUPLE_ORIG={0x4}, @CTA_NAT_SRC={0x64, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x425c}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}]}, 0x88}}, 0x44012) 730.774042ms ago: executing program 4 (id=6621): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) unshare(0x600) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e9e30010001fff050200000000000048066ff195bb7c1641e64fff568000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000380012800b00010067656e65766500002800028005000c00000000000500090001000000140007000000000000000000000000000000000108000a00", @ANYRES32=r5, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r8, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) sendmmsg(r6, &(0x7f0000000740)=[{{&(0x7f0000000300)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0}}], 0x1, 0xd0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, 0x0, 0x4, 0x0, 0x7ff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 352.079116ms ago: executing program 1 (id=6622): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) (async) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x8, 0x0}, 0x60000121) recvfrom(r3, &(0x7f0000000780)=""/4096, 0x1000, 0x1040, 0x0, 0x0) unshare(0x24040400) (async) unshare(0x24040400) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/81, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/81, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32=r0, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007d40)=[{{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000004000)="0e55f4bf7a3747fe34b948b8bb33e1167e7780cd41285caedea6126a4566f866ab046ecbe7af91989592f9f54020ef7e2a7efa0d4397209524c975d445eb58d8061db4594c2cfe3d7f383e87f7f7adfce47473fe8e4c416edf37b08a496e49c07e5cc849c75f1548a4614ac98a4b82543ac8221992478eb175ffc2a4c542d02df4c2349121b9a02581f905f6e421c9901af18149a631084ea04b44682d4940bc3b3b58a9db2ae1068dbce36c0b2479dbd48918193763b4eac569cafa9ef973de05c29196e9375d32e0fb335df1e12acec3ef4bdd188e5e85ae34c6b585c263a1ba7ca13fe9afe2739beffa2b655c177f98d37f800033b464a8c40131e7643f515ef7f92f9dfd7f2245f25ce7c12128a0c25f1335e01ffc86e3c43f7c87c486db62e714304c64f4b86af1f4de88979fed5f7467f6654d4a40fc390719204d006e5018b13dd395d59872d88aa332ae917cfc45532b1a247f720c7a2ba51b708707c4bc6e44afd7dc2f22e06425d45c0ac95a536b989100a850b709bb638d26f81934b7f77712eab8d7ea27c53e69340f822f84899b202c83ed22c2a552f3af3cb59a2d8857a116c1f60b6a9765f359aa3b79b2926f5a9290caf6e9a4da79c5edae3cd2fd061b8d8bec3048574d7ca7fdc942b313a79c548d398b89cd71646722dd2346561054b99120b14e13f5eb78b588249ca6f651990062f2d3a2907e5bfa27b3bd1d0e1e29ff1fb0f43e45f7fbf8187ccac09b78f2ccde466b2d6f9000cc76e63fe4349257c2c508fff8ae3edcd392805811827b17c7c098642d160659d31200c92ad622c557937e555fb3eda2c0ff94f3158bfe29c44350cb6cebdb60659fd2f004ce636123b42b5533e7d9fd86067f458aaf6c0c86bbd6344ba98cccc2b6cec81e524722993ee3b0fffc847ca423972ec53b0f327fdca160fc0a2ac20c15a0e3ded5c81f6a032661499c49a1ac212a0e2b17a4e285a02ebbf4e0d43c1a289741fb5acf70db342b41b22f26fc1a27775eec904ea93f00ebf2ed1c8f4dd4f18b774535613d790e32907fb1932df73dcfa48ffd415d08316bf6b7403f2b35f0c37d458221339f8e1ed640aeb4f737ceb1ccd75572d313c4897beedd3e6adafdda0e60aad3d624add979c81f51bace8f66321dfcc2f1dc71f9ceb47d70a27d8e0f2297fa325e8a62af928f93721dd86be5804a2a09d72aff57808746182cf31ef78d22b3887e4c0935acb32d0d040027fee526e4ed60e806786bd2baab5fd8e9ed9376d61361c4f0acca12d3402bba222a36be83a092639577eac91f4984ebf53b486c98d1e4cbf2b52b032fb9bb3e085af30ff8fa4891777e5106640cd1a870de9852daef8012a78193e1c83dde06747c03d98d5b78c0923ee6a540551e154edf6fd5ff7a06812a28b13156509ed0037615136561e42a9cd0d8e27261cfe2926a58fc31140254139b025baa9aea67aea256eca015b1fd9677c3b1b973a2a673a1aed3f2e2fdbf440de0c96b843b341db1edb6fdfe610faf36a6eb2c867398f1d6bd4372b654118ec00cc4a0f5252aa22bb618e89432c07d3652230def6d448c29038f685408f7dbf496c57e42104470e9b7299ba6555c9274631c432dda7ae767e31ab83cb025f005711a10967ef25941fe16f1eeda225d55dae1182c143ebaec550de149f726e2ebd69db7c109847fe851d46bc295271cbe2117df8f1e5b10f95fc2735a1dfcbdccb138df6193d727b66847bfe6753ce9dbcc3c6d95ff94d53c9b5521b0f4b6a4423de229bcfa42ad7ca5aae432fae3228b25bc5c195db470e754ebdb85cbe850fd19742b140df10da09570a01399a382ce90e32fe7b513ffef9eb0bc10f0e628d82af2d7b68ec91ed28e3e219c22feab37fbfd58b8592cbf95f623173a78704240b5587e5a7db0689666ba84cfbe857c84774d04cc2a16ee1f7138391b33c1de537600d805263bf6580058013b68cd8056e27303e91d0e1f7e4a62fd71ca02350c3d826dfefc6ae11a84e0dcaa19211fbfbaee8ab3130d017bd8f8484f793dd1f0e46e54360580233b367f16b873f77e62731db6e3b5287b0d0b045de90e9f5dc9714f25e390465af61f43b0d4422475299e6ce33f397cc4bb2c3f5b21ab66e8b3ee9f7d994f22bf0cfb1ff6b4138a2e8e0c5d2caea7ef7df5e93d7cc9fdec984e8e54761757660e64f74de523174367a1037e81fdbd7ecfa5f2705f2126402415b059200eee299002c92b0b34d182250f7e6a47f6cbdca98ea88db8281d4c275c68524df7885da3d5a85b84fc6514401a2228b94e3d0f1bc09297ce8723d2217fdf21e8ef33d8b8440c114deb19ca38a20530747aac9adda42cf23bfffbacdb61204ef83f1d3abf0c3547615e817a38dcf76a08e096ed409e5df79631bba7e12c845be4b0ddb638b893c18c7b10f6742313f25dc17b92a927ca9ed41faf4feb1428f15fc72825113336a6aab246a014c1e5b47cff5e78ad3d10d88060f9332ae643af02623193bec2d11d2d354308bcc39507cc91d70a0e1419dc68eddaf575052cc31e353227d8ceca540011f11aabb9666ee49572685f6e266ba80320d40f18d9e3df15d4e53438ecb256d55d0f1cf1521def20a2c3662b58ebdb00eb75c563f2a727423878594e398cbfb20c40d74c19c56bababf945f8c083e050e5b5115a8f4e3cc73f4ab0b03032ab682aa6a0b2630f099d0333c857f5c8213dd241a36294dce60244ca6c6be34d8e5dfda6e3d75e7906516cddcfb52f4c82d9cfc3baee3575c48691fe84a659e2c755b6382b597a88270fc6cbd5a9f0cdddc03cef4aea24ebf884fd71eba97fccda3ced30a6ce882bdb7cd647a45c96", 0x7e2}], 0x1}}], 0x1, 0x2004c000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="44000280"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="44000280"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 202.108765ms ago: executing program 3 (id=6623): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4008001) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100)=0xe, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)={0x2, 'veth0_to_team\x00', {0x4}, 0x9}) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f00000001c0)=0x1c, 0x800) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x751251dc, @private2, 0x400}, 0x1c) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x0, r1}, 0x18) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x8, 0x9, 0xfffffff1, 0xfff, 0x2a0c8, r2, 0xc586, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x0, @value=r3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x4b, 0x160, 0x58, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x7800, 0x10, 0x5, 0x8}}) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@delqdisc={0xc8, 0x25, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0x10}, {0x4, 0xfff7}, {0xf, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0xccb4, 0x0, 0x1, 0xf06, 0x4, 0x4}}, {0xc, 0x2, [0x5, 0x4, 0xa, 0x0]}}, {{0x1c, 0x1, {0x88, 0x3, 0x8, 0x8121892, 0x1, 0x7, 0xf6, 0x2}}, {0x8, 0x2, [0x1, 0x5]}}, {{0x1c, 0x1, {0x6, 0x17, 0x6, 0x9, 0x0, 0xb, 0xe, 0x4}}, {0xc, 0x2, [0x80, 0xf, 0x60d, 0xecc9]}}]}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "9e57764433356c55cd914f73c2ab2a38"}}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4040080}, 0x4008000) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200c218}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000780)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'syztnl0\x00', &(0x7f00000007c0)={'syztnl2\x00', r5, 0x4, 0xe, 0x1, 0x240000, 0x24, @local, @local, 0x7, 0x8000, 0xd, 0xcca}}) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x6, 0x2, 0x9, 0xe, 0x40100, r4, 0x6, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000900)) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000041) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r8, 0x89e2) r9 = socket$caif_stream(0x25, 0x1, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r9, 0xe78db000) accept4$netrom(0xffffffffffffffff, &(0x7f0000000b00)={{0x3, @rose}, [@null, @null, @rose, @rose, @default, @remote, @netrom, @bcast]}, &(0x7f0000000b80)=0x48, 0x80800) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000bc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001bc0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000002bc0)={0xb, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0xf, "fa5d5281f92bf6"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000003bc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000124500)={0x8000000000000000, [{}, {r10, r11}, {r12, r13}], 0x81, "20e20be7c46978"}) 137.070493ms ago: executing program 2 (id=6624): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r0, @ANYBLOB="b415000000ecfd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 0s ago: executing program 4 (id=6625): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x6, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) ioctl$SIOCGETSGCNT(r4, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}) sendmsg$can_bcm(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x54}, 0x400c010) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) close(0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r9, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x34, r11, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x42}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) kernel console output (not intermixed with test programs): mily 0 port 6081 - 0 [ 714.313239][ T70] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.796745][T24607] FAULT_INJECTION: forcing a failure. [ 714.796745][T24607] name failslab, interval 1, probability 0, space 0, times 0 [ 714.819752][T24607] CPU: 0 UID: 0 PID: 24607 Comm: syz.0.5364 Not tainted syzkaller #0 PREEMPT(full) [ 714.819780][T24607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 714.819792][T24607] Call Trace: [ 714.819800][T24607] [ 714.819808][T24607] dump_stack_lvl+0x189/0x250 [ 714.819833][T24607] ? __pfx____ratelimit+0x10/0x10 [ 714.819856][T24607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 714.819875][T24607] ? __pfx__printk+0x10/0x10 [ 714.819900][T24607] ? xfrm_alloc_spi+0xa45/0xf40 [ 714.819932][T24607] should_fail_ex+0x414/0x560 [ 714.819952][T24607] should_failslab+0xa8/0x100 [ 714.819976][T24607] kmem_cache_alloc_node_noprof+0x77/0x710 [ 714.819994][T24607] ? __alloc_skb+0x112/0x2d0 [ 714.820011][T24607] ? __pfx_xfrm_alloc_spi+0x10/0x10 [ 714.820031][T24607] __alloc_skb+0x112/0x2d0 [ 714.820052][T24607] xfrm_alloc_userspi+0x81d/0xc90 [ 714.820087][T24607] ? apparmor_capable+0x137/0x1b0 [ 714.820109][T24607] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 714.820131][T24607] ? __nla_parse+0x40/0x60 [ 714.820155][T24607] xfrm_user_rcv_msg+0x7a3/0xab0 [ 714.820181][T24607] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 714.820242][T24607] ? __pfx___mutex_trylock_common+0x10/0x10 [ 714.820272][T24607] ? rcu_is_watching+0x15/0xb0 [ 714.820297][T24607] ? trace_contention_end+0x39/0x120 [ 714.820313][T24607] ? __mutex_lock+0x335/0x1350 [ 714.820342][T24607] netlink_rcv_skb+0x208/0x470 [ 714.820362][T24607] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 714.820385][T24607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 714.820417][T24607] ? netlink_deliver_tap+0x2e/0x1b0 [ 714.820434][T24607] ? netlink_deliver_tap+0x2e/0x1b0 [ 714.820455][T24607] xfrm_netlink_rcv+0x79/0x90 [ 714.820476][T24607] netlink_unicast+0x82f/0x9e0 [ 714.820508][T24607] ? __pfx_netlink_unicast+0x10/0x10 [ 714.820535][T24607] ? netlink_sendmsg+0x642/0xb30 [ 714.820551][T24607] ? skb_put+0x11b/0x210 [ 714.820571][T24607] netlink_sendmsg+0x805/0xb30 [ 714.820599][T24607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 714.820621][T24607] ? aa_sock_msg_perm+0xf1/0x1d0 [ 714.820645][T24607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 714.820665][T24607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 714.820682][T24607] __sock_sendmsg+0x21c/0x270 [ 714.820709][T24607] ____sys_sendmsg+0x505/0x830 [ 714.820736][T24607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 714.820766][T24607] ? import_iovec+0x74/0xa0 [ 714.820793][T24607] ___sys_sendmsg+0x21f/0x2a0 [ 714.820815][T24607] ? __pfx____sys_sendmsg+0x10/0x10 [ 714.820872][T24607] ? __fget_files+0x2a/0x420 [ 714.820893][T24607] ? __fget_files+0x3a0/0x420 [ 714.820924][T24607] __x64_sys_sendmsg+0x19b/0x260 [ 714.820948][T24607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 714.820975][T24607] ? __pfx_ksys_write+0x10/0x10 [ 714.820998][T24607] ? do_syscall_64+0xbe/0xfa0 [ 714.821025][T24607] do_syscall_64+0xfa/0xfa0 [ 714.821045][T24607] ? lockdep_hardirqs_on+0x9c/0x150 [ 714.821068][T24607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.821087][T24607] ? clear_bhb_loop+0x60/0xb0 [ 714.821107][T24607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.821124][T24607] RIP: 0033:0x7fd47a58efc9 [ 714.821141][T24607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.821155][T24607] RSP: 002b:00007fd47b372038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.821174][T24607] RAX: ffffffffffffffda RBX: 00007fd47a7e5fa0 RCX: 00007fd47a58efc9 [ 714.821188][T24607] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003 [ 714.821200][T24607] RBP: 00007fd47b372090 R08: 0000000000000000 R09: 0000000000000000 [ 714.821211][T24607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.821221][T24607] R13: 00007fd47a7e6038 R14: 00007fd47a7e5fa0 R15: 00007fffbb2d41f8 [ 714.821259][T24607] [ 715.236559][T24611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5366'. [ 715.311165][T24618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5367'. [ 715.945037][T24632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5373'. [ 715.994258][T24632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5373'. [ 716.132291][T24641] FAULT_INJECTION: forcing a failure. [ 716.132291][T24641] name failslab, interval 1, probability 0, space 0, times 0 [ 716.148117][T24641] CPU: 0 UID: 0 PID: 24641 Comm: syz.3.5378 Not tainted syzkaller #0 PREEMPT(full) [ 716.148143][T24641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 716.148154][T24641] Call Trace: [ 716.148161][T24641] [ 716.148167][T24641] dump_stack_lvl+0x189/0x250 [ 716.148190][T24641] ? __pfx____ratelimit+0x10/0x10 [ 716.148213][T24641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.148233][T24641] ? __pfx__printk+0x10/0x10 [ 716.148257][T24641] ? xfrm_alloc_spi+0xa45/0xf40 [ 716.148284][T24641] should_fail_ex+0x414/0x560 [ 716.148307][T24641] should_failslab+0xa8/0x100 [ 716.148332][T24641] kmem_cache_alloc_node_noprof+0x77/0x710 [ 716.148353][T24641] ? __alloc_skb+0x112/0x2d0 [ 716.148370][T24641] ? __pfx_xfrm_alloc_spi+0x10/0x10 [ 716.148394][T24641] __alloc_skb+0x112/0x2d0 [ 716.148416][T24641] xfrm_alloc_userspi+0x81d/0xc90 [ 716.148452][T24641] ? apparmor_capable+0x137/0x1b0 [ 716.148476][T24641] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 716.148501][T24641] ? __nla_parse+0x40/0x60 [ 716.148527][T24641] xfrm_user_rcv_msg+0x7a3/0xab0 [ 716.148554][T24641] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 716.148612][T24641] ? __pfx___mutex_trylock_common+0x10/0x10 [ 716.148644][T24641] ? rcu_is_watching+0x15/0xb0 [ 716.148669][T24641] ? trace_contention_end+0x39/0x120 [ 716.148687][T24641] ? __mutex_lock+0x335/0x1350 [ 716.148718][T24641] netlink_rcv_skb+0x208/0x470 [ 716.148738][T24641] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 716.148758][T24641] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 716.148792][T24641] ? netlink_deliver_tap+0x2e/0x1b0 [ 716.148810][T24641] ? netlink_deliver_tap+0x2e/0x1b0 [ 716.148831][T24641] xfrm_netlink_rcv+0x79/0x90 [ 716.148852][T24641] netlink_unicast+0x82f/0x9e0 [ 716.148886][T24641] ? __pfx_netlink_unicast+0x10/0x10 [ 716.148919][T24641] ? netlink_sendmsg+0x642/0xb30 [ 716.148935][T24641] ? skb_put+0x11b/0x210 [ 716.148957][T24641] netlink_sendmsg+0x805/0xb30 [ 716.148986][T24641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.149009][T24641] ? aa_sock_msg_perm+0xf1/0x1d0 [ 716.149031][T24641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 716.149053][T24641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 716.149073][T24641] __sock_sendmsg+0x21c/0x270 [ 716.149100][T24641] ____sys_sendmsg+0x505/0x830 [ 716.149126][T24641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 716.149156][T24641] ? import_iovec+0x74/0xa0 [ 716.149183][T24641] ___sys_sendmsg+0x21f/0x2a0 [ 716.149206][T24641] ? __pfx____sys_sendmsg+0x10/0x10 [ 716.149265][T24641] ? __fget_files+0x2a/0x420 [ 716.149285][T24641] ? __fget_files+0x3a0/0x420 [ 716.149318][T24641] __x64_sys_sendmsg+0x19b/0x260 [ 716.149341][T24641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 716.149371][T24641] ? __pfx_ksys_write+0x10/0x10 [ 716.149394][T24641] ? do_syscall_64+0xbe/0xfa0 [ 716.149420][T24641] do_syscall_64+0xfa/0xfa0 [ 716.149441][T24641] ? lockdep_hardirqs_on+0x9c/0x150 [ 716.149464][T24641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.149482][T24641] ? clear_bhb_loop+0x60/0xb0 [ 716.149504][T24641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.149522][T24641] RIP: 0033:0x7f3903b8efc9 [ 716.149539][T24641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.149554][T24641] RSP: 002b:00007f3904a2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 716.149574][T24641] RAX: ffffffffffffffda RBX: 00007f3903de5fa0 RCX: 00007f3903b8efc9 [ 716.149588][T24641] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003 [ 716.149600][T24641] RBP: 00007f3904a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 716.149612][T24641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.149622][T24641] R13: 00007f3903de6038 R14: 00007f3903de5fa0 R15: 00007ffdef7f6338 [ 716.149655][T24641] [ 716.707668][T24650] netlink: 'syz.1.5379': attribute type 8 has an invalid length. [ 717.419653][T24671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5385'. [ 717.544795][T24683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5391'. [ 717.638710][T24689] FAULT_INJECTION: forcing a failure. [ 717.638710][T24689] name failslab, interval 1, probability 0, space 0, times 0 [ 717.647620][T24691] FAULT_INJECTION: forcing a failure. [ 717.647620][T24691] name failslab, interval 1, probability 0, space 0, times 0 [ 717.664074][T24691] CPU: 0 UID: 0 PID: 24691 Comm: syz.1.5393 Not tainted syzkaller #0 PREEMPT(full) [ 717.664101][T24691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 717.664112][T24691] Call Trace: [ 717.664121][T24691] [ 717.664130][T24691] dump_stack_lvl+0x189/0x250 [ 717.664155][T24691] ? __pfx____ratelimit+0x10/0x10 [ 717.664184][T24691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.664203][T24691] ? __pfx__printk+0x10/0x10 [ 717.664224][T24691] ? rcu_is_watching+0x15/0xb0 [ 717.664249][T24691] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 717.664266][T24691] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 717.664290][T24691] should_fail_ex+0x414/0x560 [ 717.664314][T24691] should_failslab+0xa8/0x100 [ 717.664339][T24691] kmem_cache_alloc_noprof+0x74/0x6e0 [ 717.664359][T24691] ? skb_clone+0x212/0x3a0 [ 717.664386][T24691] skb_clone+0x212/0x3a0 [ 717.664410][T24691] bpf_clone_redirect+0xad/0x3d0 [ 717.664438][T24691] ? bpf_test_timer_continue+0x130/0x350 [ 717.664458][T24691] ? bpf_test_run+0x197/0x7b0 [ 717.664476][T24691] bpf_prog_c23103f528d5a825+0x22/0x2a [ 717.664494][T24691] bpf_test_run+0x318/0x7b0 [ 717.664533][T24691] ? __pfx_bpf_test_run+0x10/0x10 [ 717.664567][T24691] ? convert___skb_to_skb+0x3d/0x590 [ 717.664584][T24691] bpf_prog_test_run_skb+0xb4e/0x1550 [ 717.664608][T24691] ? __fget_files+0x2a/0x420 [ 717.664631][T24691] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 717.664648][T24691] bpf_prog_test_run+0x2c7/0x340 [ 717.664673][T24691] __sys_bpf+0x562/0x860 [ 717.664762][T24691] ? __pfx___sys_bpf+0x10/0x10 [ 717.664816][T24691] ? ksys_write+0x22a/0x250 [ 717.664838][T24691] ? __pfx_ksys_write+0x10/0x10 [ 717.664860][T24691] __x64_sys_bpf+0x7c/0x90 [ 717.664879][T24691] do_syscall_64+0xfa/0xfa0 [ 717.664899][T24691] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.664920][T24691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.664940][T24691] ? clear_bhb_loop+0x60/0xb0 [ 717.664960][T24691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.664977][T24691] RIP: 0033:0x7f8eebf8efc9 [ 717.664995][T24691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.665017][T24691] RSP: 002b:00007f8eece06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 717.665037][T24691] RAX: ffffffffffffffda RBX: 00007f8eec1e5fa0 RCX: 00007f8eebf8efc9 [ 717.665050][T24691] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 717.665061][T24691] RBP: 00007f8eece06090 R08: 0000000000000000 R09: 0000000000000000 [ 717.665071][T24691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 717.665080][T24691] R13: 00007f8eec1e6038 R14: 00007f8eec1e5fa0 R15: 00007fffe98a7bd8 [ 717.665113][T24691] [ 717.670262][T24689] CPU: 1 UID: 0 PID: 24689 Comm: syz.0.5392 Not tainted syzkaller #0 PREEMPT(full) [ 717.670288][T24689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 717.670300][T24689] Call Trace: [ 717.670308][T24689] [ 717.670317][T24689] dump_stack_lvl+0x189/0x250 [ 717.670342][T24689] ? __pfx____ratelimit+0x10/0x10 [ 717.670366][T24689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.670385][T24689] ? __pfx__printk+0x10/0x10 [ 717.670418][T24689] should_fail_ex+0x414/0x560 [ 717.670442][T24689] should_failslab+0xa8/0x100 [ 717.670467][T24689] kmem_cache_alloc_node_noprof+0x77/0x710 [ 717.670487][T24689] ? __alloc_skb+0x112/0x2d0 [ 717.670511][T24689] __alloc_skb+0x112/0x2d0 [ 717.670533][T24689] xfrm_alloc_compat+0x1a6/0x16f0 [ 717.670562][T24689] ? xfrm_get_translator+0x1b/0x240 [ 717.670589][T24689] dump_one_state+0x2c8/0x440 [ 717.670616][T24689] xfrm_alloc_userspi+0x85e/0xc90 [ 717.670652][T24689] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 717.670676][T24689] ? __nla_parse+0x40/0x60 [ 717.670701][T24689] xfrm_user_rcv_msg+0x7a3/0xab0 [ 717.670727][T24689] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 717.670782][T24689] ? __pfx___mutex_trylock_common+0x10/0x10 [ 717.670813][T24689] ? rcu_is_watching+0x15/0xb0 [ 717.670839][T24689] ? trace_contention_end+0x39/0x120 [ 717.670855][T24689] ? __mutex_lock+0x335/0x1350 [ 717.670885][T24689] netlink_rcv_skb+0x208/0x470 [ 717.670905][T24689] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 717.670927][T24689] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 717.670959][T24689] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.670977][T24689] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.670998][T24689] xfrm_netlink_rcv+0x79/0x90 [ 717.671018][T24689] netlink_unicast+0x82f/0x9e0 [ 717.671059][T24689] ? __pfx_netlink_unicast+0x10/0x10 [ 717.671085][T24689] ? netlink_sendmsg+0x642/0xb30 [ 717.671102][T24689] ? skb_put+0x11b/0x210 [ 717.671124][T24689] netlink_sendmsg+0x805/0xb30 [ 717.671156][T24689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.671178][T24689] ? aa_sock_msg_perm+0xf1/0x1d0 [ 717.671201][T24689] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 717.671223][T24689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.671242][T24689] __sock_sendmsg+0x21c/0x270 [ 717.671270][T24689] ____sys_sendmsg+0x505/0x830 [ 717.671295][T24689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.671325][T24689] ? import_iovec+0x74/0xa0 [ 717.671353][T24689] ___sys_sendmsg+0x21f/0x2a0 [ 717.671375][T24689] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.671432][T24689] ? __fget_files+0x2a/0x420 [ 717.671452][T24689] ? __fget_files+0x3a0/0x420 [ 717.671484][T24689] __x64_sys_sendmsg+0x19b/0x260 [ 717.671507][T24689] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.671536][T24689] ? __pfx_ksys_write+0x10/0x10 [ 717.671560][T24689] ? do_syscall_64+0xbe/0xfa0 [ 717.671586][T24689] do_syscall_64+0xfa/0xfa0 [ 717.671607][T24689] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.671629][T24689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.671647][T24689] ? clear_bhb_loop+0x60/0xb0 [ 717.671669][T24689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.671685][T24689] RIP: 0033:0x7fd47a58efc9 [ 717.671703][T24689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.671718][T24689] RSP: 002b:00007fd47b372038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.671738][T24689] RAX: ffffffffffffffda RBX: 00007fd47a7e5fa0 RCX: 00007fd47a58efc9 [ 717.671751][T24689] RDX: 0000000024000014 RSI: 0000200000000200 RDI: 0000000000000003 [ 717.671764][T24689] RBP: 00007fd47b372090 R08: 0000000000000000 R09: 0000000000000000 [ 717.671774][T24689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.671785][T24689] R13: 00007fd47a7e6038 R14: 00007fd47a7e5fa0 R15: 00007fffbb2d41f8 [ 717.671817][T24689] [ 717.687527][T24694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5394'. [ 718.569137][T24719] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5398'. [ 718.603495][T24719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5398'. [ 718.902070][T24727] geneve2: left promiscuous mode [ 718.926731][T24743] netlink: 'syz.0.5405': attribute type 1 has an invalid length. [ 718.963319][ T6659] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.972125][ T6659] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.980271][T24747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5405'. [ 719.012004][T24736] "syz.2.5401" (24736) uses obsolete ecb(arc4) skcipher [ 719.020877][ T6659] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.029602][ T6659] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.092446][T24740] bond4: (slave veth3): Enslaving as an active interface with a down link [ 719.107394][T24747] bond4 (unregistering): (slave veth3): Releasing active interface [ 719.120378][T24747] bond4 (unregistering): Released all slaves [ 719.898429][T24800] mac80211_hwsim hwsim18 syzkaller0: entered promiscuous mode [ 719.911086][T24800] mac80211_hwsim hwsim18 syzkaller0: entered allmulticast mode [ 720.055541][T24808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.063012][T24808] IPv6: NLM_F_CREATE should be set when creating new route [ 720.070285][T24808] IPv6: NLM_F_CREATE should be set when creating new route [ 721.218383][T24848] FAULT_INJECTION: forcing a failure. [ 721.218383][T24848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.240503][T24848] CPU: 1 UID: 0 PID: 24848 Comm: syz.3.5439 Not tainted syzkaller #0 PREEMPT(full) [ 721.240529][T24848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 721.240540][T24848] Call Trace: [ 721.240548][T24848] [ 721.240557][T24848] dump_stack_lvl+0x189/0x250 [ 721.240582][T24848] ? __pfx____ratelimit+0x10/0x10 [ 721.240604][T24848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.240623][T24848] ? __pfx__printk+0x10/0x10 [ 721.240645][T24848] ? get_sigframe+0x596/0x7d0 [ 721.240673][T24848] should_fail_ex+0x414/0x560 [ 721.240692][T24848] _copy_to_user+0x31/0xb0 [ 721.240716][T24848] copy_siginfo_to_user+0x22/0xc0 [ 721.240739][T24848] x64_setup_rt_frame+0x776/0xd40 [ 721.240779][T24848] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 721.240804][T24848] ? arch_do_signal_or_restart+0x385/0x790 [ 721.240827][T24848] arch_do_signal_or_restart+0x3f1/0x790 [ 721.240850][T24848] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 721.240887][T24848] ? exit_to_user_mode_loop+0x40/0x130 [ 721.240912][T24848] exit_to_user_mode_loop+0x72/0x130 [ 721.240933][T24848] do_syscall_64+0x2bd/0xfa0 [ 721.240953][T24848] ? lockdep_hardirqs_on+0x9c/0x150 [ 721.240975][T24848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.240993][T24848] ? clear_bhb_loop+0x60/0xb0 [ 721.241015][T24848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.241032][T24848] RIP: 0033:0x7f3903b8efc9 [ 721.241046][T24848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.241061][T24848] RSP: 002b:00007f3904a2f038 EFLAGS: 00000246 [ 721.241077][T24848] RAX: fffffffffffffffc RBX: 00007f3903de5fa0 RCX: 00007f3903b8efc9 [ 721.241090][T24848] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 721.241100][T24848] RBP: 00007f3904a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 721.241111][T24848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 721.241122][T24848] R13: 00007f3903de6038 R14: 00007f3903de5fa0 R15: 00007ffdef7f6338 [ 721.241152][T24848] [ 721.845258][T24870] netlink: 'syz.3.5446': attribute type 4 has an invalid length. [ 721.894724][T24870] __nla_validate_parse: 52 callbacks suppressed [ 721.894746][T24870] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5446'. [ 721.937550][T24870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.109654][T24882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5451'. [ 722.142647][T24882] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 722.155990][T24882] bond8 (unregistering): Released all slaves [ 722.162940][T24879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5451'. [ 722.174538][T24879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5451'. [ 722.183819][T24879] netlink: 'syz.4.5451': attribute type 19 has an invalid length. [ 722.192596][T24879] netlink: 'syz.4.5451': attribute type 20 has an invalid length. [ 722.211794][T24881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5452'. [ 722.717547][T24912] syz_tun: entered allmulticast mode [ 722.792240][T24914] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5462'. [ 722.797946][T24912] pimreg: left allmulticast mode [ 722.917002][T24919] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 723.227235][T24912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.237202][T24912] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.285064][T24912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 723.457872][T24908] syz_tun: left allmulticast mode [ 724.369521][T24963] netlink: 67 bytes leftover after parsing attributes in process `syz.0.5477'. [ 724.616068][T24971] FAULT_INJECTION: forcing a failure. [ 724.616068][T24971] name failslab, interval 1, probability 0, space 0, times 0 [ 724.628853][T24971] CPU: 1 UID: 0 PID: 24971 Comm: syz.0.5481 Not tainted syzkaller #0 PREEMPT(full) [ 724.628879][T24971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 724.628890][T24971] Call Trace: [ 724.628898][T24971] [ 724.628912][T24971] dump_stack_lvl+0x189/0x250 [ 724.628937][T24971] ? __pfx____ratelimit+0x10/0x10 [ 724.628961][T24971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 724.628981][T24971] ? __pfx__printk+0x10/0x10 [ 724.629002][T24971] ? rcu_is_watching+0x15/0xb0 [ 724.629028][T24971] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 724.629045][T24971] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 724.629069][T24971] should_fail_ex+0x414/0x560 [ 724.629093][T24971] should_failslab+0xa8/0x100 [ 724.629117][T24971] kmem_cache_alloc_noprof+0x74/0x6e0 [ 724.629136][T24971] ? skb_clone+0x212/0x3a0 [ 724.629163][T24971] skb_clone+0x212/0x3a0 [ 724.629186][T24971] bpf_clone_redirect+0xad/0x3d0 [ 724.629213][T24971] ? bpf_test_timer_continue+0x130/0x350 [ 724.629233][T24971] ? bpf_test_run+0x197/0x7b0 [ 724.629251][T24971] bpf_prog_c23103f528d5a825+0x22/0x2a [ 724.629268][T24971] bpf_test_run+0x318/0x7b0 [ 724.629313][T24971] ? __pfx_bpf_test_run+0x10/0x10 [ 724.629357][T24971] ? convert___skb_to_skb+0x3d/0x590 [ 724.629377][T24971] bpf_prog_test_run_skb+0xb4e/0x1550 [ 724.629405][T24971] ? __fget_files+0x2a/0x420 [ 724.629432][T24971] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 724.629452][T24971] bpf_prog_test_run+0x2c7/0x340 [ 724.629479][T24971] __sys_bpf+0x562/0x860 [ 724.629508][T24971] ? __pfx___sys_bpf+0x10/0x10 [ 724.629546][T24971] ? ksys_write+0x22a/0x250 [ 724.629569][T24971] ? __pfx_ksys_write+0x10/0x10 [ 724.629595][T24971] __x64_sys_bpf+0x7c/0x90 [ 724.629616][T24971] do_syscall_64+0xfa/0xfa0 [ 724.629637][T24971] ? lockdep_hardirqs_on+0x9c/0x150 [ 724.629660][T24971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.629677][T24971] ? clear_bhb_loop+0x60/0xb0 [ 724.629699][T24971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.629717][T24971] RIP: 0033:0x7fd47a58efc9 [ 724.629734][T24971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.629748][T24971] RSP: 002b:00007fd47b372038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 724.629769][T24971] RAX: ffffffffffffffda RBX: 00007fd47a7e5fa0 RCX: 00007fd47a58efc9 [ 724.629782][T24971] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 724.629794][T24971] RBP: 00007fd47b372090 R08: 0000000000000000 R09: 0000000000000000 [ 724.629806][T24971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 724.629817][T24971] R13: 00007fd47a7e6038 R14: 00007fd47a7e5fa0 R15: 00007fffbb2d41f8 [ 724.629850][T24971] [ 725.342437][T24994] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 725.355719][T24995] FAULT_INJECTION: forcing a failure. [ 725.355719][T24995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.379561][T24995] CPU: 0 UID: 0 PID: 24995 Comm: syz.4.5490 Not tainted syzkaller #0 PREEMPT(full) [ 725.379589][T24995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 725.379600][T24995] Call Trace: [ 725.379608][T24995] [ 725.379618][T24995] dump_stack_lvl+0x189/0x250 [ 725.379644][T24995] ? __pfx____ratelimit+0x10/0x10 [ 725.379668][T24995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 725.379688][T24995] ? __pfx__printk+0x10/0x10 [ 725.379708][T24995] ? __might_fault+0xb0/0x130 [ 725.379740][T24995] should_fail_ex+0x414/0x560 [ 725.379763][T24995] _copy_from_user+0x2d/0xb0 [ 725.379788][T24995] kstrtouint_from_user+0xc4/0x170 [ 725.379816][T24995] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 725.379856][T24995] proc_fail_nth_write+0x88/0x200 [ 725.379875][T24995] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 725.379900][T24995] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 725.379921][T24995] vfs_write+0x27e/0xb30 [ 725.379947][T24995] ? __pfx_vfs_write+0x10/0x10 [ 725.379967][T24995] ? __fget_files+0x2a/0x420 [ 725.379992][T24995] ? __fget_files+0x3a0/0x420 [ 725.380011][T24995] ? __fget_files+0x2a/0x420 [ 725.380041][T24995] ksys_write+0x145/0x250 [ 725.380064][T24995] ? __pfx_ksys_write+0x10/0x10 [ 725.380085][T24995] ? do_syscall_64+0xbe/0xfa0 [ 725.380112][T24995] do_syscall_64+0xfa/0xfa0 [ 725.380132][T24995] ? lockdep_hardirqs_on+0x9c/0x150 [ 725.380154][T24995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.380172][T24995] ? clear_bhb_loop+0x60/0xb0 [ 725.380194][T24995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.380211][T24995] RIP: 0033:0x7f2ccb18da7f [ 725.380228][T24995] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 725.380242][T24995] RSP: 002b:00007f2ccc0a8030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 725.380262][T24995] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ccb18da7f [ 725.380282][T24995] RDX: 0000000000000001 RSI: 00007f2ccc0a80a0 RDI: 0000000000000004 [ 725.380294][T24995] RBP: 00007f2ccc0a8090 R08: 0000000000000000 R09: 0000000000000000 [ 725.380305][T24995] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 725.380316][T24995] R13: 00007f2ccb3e6038 R14: 00007f2ccb3e5fa0 R15: 00007ffffa06de98 [ 725.380348][T24995] [ 725.703372][T25000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5492'. [ 726.248660][T25034] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5502'. [ 726.324519][T25034] batadv2: entered promiscuous mode [ 726.330464][T25034] batadv2: entered allmulticast mode [ 726.735386][T25055] netlink: 'syz.2.5506': attribute type 1 has an invalid length. [ 726.892632][T25055] 8021q: adding VLAN 0 to HW filter on device bond10 [ 726.933846][T25058] 8021q: adding VLAN 0 to HW filter on device bond10 [ 726.942006][T25058] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 726.953823][T25058] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 727.248450][T25081] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5511'. [ 727.293572][T25077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5511'. [ 727.308675][T25083] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5512'. [ 727.405517][T25077] macvtap0: entered allmulticast mode [ 727.416912][T25077] veth0_macvtap: entered allmulticast mode [ 727.424775][T25086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5514'. [ 727.438437][T25086] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5514'. [ 727.471440][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5514'. [ 728.440310][T25120] netlink: 'syz.2.5521': attribute type 11 has an invalid length. [ 728.448357][T25120] netlink: 'syz.2.5521': attribute type 11 has an invalid length. [ 728.461044][T25120] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5521'. [ 728.669246][T25131] netlink: 'syz.3.5530': attribute type 12 has an invalid length. [ 728.826690][T25107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.248713][T25155] tipc: Enabled bearer , priority 0 [ 729.315184][T25155] syzkaller0: entered promiscuous mode [ 729.323976][T25155] syzkaller0: entered allmulticast mode [ 729.424867][T25155] tipc: Resetting bearer [ 729.442257][T25154] tipc: Resetting bearer [ 729.469721][T25154] tipc: Disabling bearer [ 730.013805][T25190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 730.025593][T25191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5550'. [ 730.148514][T25194] bridge0: port 1(veth11) entered blocking state [ 730.167675][T25194] bridge0: port 1(veth11) entered disabled state [ 730.188232][T25194] veth11: entered allmulticast mode [ 730.196375][T25194] veth11: entered promiscuous mode [ 730.205781][T25196] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 730.220659][T25196] bond0: (slave gre0): Error -95 calling set_mac_address [ 730.583801][T25209] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5554'. [ 730.634015][T25211] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5555'. [ 730.717000][T25211] dvmrp0: entered allmulticast mode [ 730.737357][T25211] rdma_rxe: rxe_newlink: failed to add lo [ 731.173841][T25231] netlink: 'syz.4.5562': attribute type 5 has an invalid length. [ 731.407469][T25246] bridge0: port 2(batadv1) entered blocking state [ 731.418063][T25246] bridge0: port 2(batadv1) entered disabled state [ 731.440321][T25246] batadv1: entered allmulticast mode [ 731.472182][T25246] batadv1: entered promiscuous mode [ 731.817335][T25276] tipc: Enabled bearer , priority 0 [ 731.829609][T25276] syzkaller0: entered promiscuous mode [ 731.835443][T25276] syzkaller0: entered allmulticast mode [ 731.900349][ T60] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 731.909672][ T60] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 731.929750][T25276] tipc: Resetting bearer [ 731.962612][T25275] tipc: Resetting bearer [ 732.001485][T25275] tipc: Disabling bearer [ 732.178426][T25291] xt_TCPMSS: Only works on TCP SYN packets [ 732.322336][T25303] sctp: [Deprecated]: syz.2.5588 (pid 25303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 732.322336][T25303] Use struct sctp_sack_info instead [ 732.360503][T25305] __nla_validate_parse: 4 callbacks suppressed [ 732.360524][T25305] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5590'. [ 732.376992][T25305] netlink: 'syz.4.5590': attribute type 9 has an invalid length. [ 732.387725][T25307] netlink: 'syz.1.5589': attribute type 29 has an invalid length. [ 732.397031][T25305] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5590'. [ 732.407880][T25305] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5590'. [ 732.417137][T25307] netlink: 'syz.1.5589': attribute type 29 has an invalid length. [ 732.433032][T25307] netlink: 'syz.1.5589': attribute type 29 has an invalid length. [ 732.450689][T25307] netlink: 'syz.1.5589': attribute type 29 has an invalid length. [ 732.471837][T25307] netlink: 'syz.1.5589': attribute type 29 has an invalid length. [ 732.624987][T25313] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5591'. [ 732.646043][T25314] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 732.660668][T25313] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 732.994919][T25334] bridge_slave_1: entered promiscuous mode [ 733.103680][T25307] netlink: 'syz.1.5589': attribute type 29 has an invalid length. [ 733.123275][T25307] netlink: 'syz.1.5589': attribute type 29 has an invalid length. [ 733.154784][T25343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5597'. [ 733.164545][T25343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5597'. [ 733.198348][T25343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5597'. [ 733.208125][T25343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5597'. [ 733.257453][T25348] FAULT_INJECTION: forcing a failure. [ 733.257453][T25348] name failslab, interval 1, probability 0, space 0, times 0 [ 733.303656][T25348] CPU: 1 UID: 0 PID: 25348 Comm: syz.4.5599 Not tainted syzkaller #0 PREEMPT(full) [ 733.303682][T25348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 733.303692][T25348] Call Trace: [ 733.303699][T25348] [ 733.303707][T25348] dump_stack_lvl+0x189/0x250 [ 733.303729][T25348] ? __pfx____ratelimit+0x10/0x10 [ 733.303750][T25348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.303767][T25348] ? __pfx__printk+0x10/0x10 [ 733.303790][T25348] ? __pfx___might_resched+0x10/0x10 [ 733.303810][T25348] ? fs_reclaim_acquire+0x7d/0x100 [ 733.303834][T25348] should_fail_ex+0x414/0x560 [ 733.303856][T25348] should_failslab+0xa8/0x100 [ 733.303879][T25348] __kmalloc_noprof+0xcb/0x7f0 [ 733.303897][T25348] ? sock_kmalloc+0xd6/0x160 [ 733.303922][T25348] sock_kmalloc+0xd6/0x160 [ 733.303940][T25348] ____sys_sendmsg+0x1b5/0x830 [ 733.303965][T25348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.303991][T25348] ? import_iovec+0x74/0xa0 [ 733.304016][T25348] ___sys_sendmsg+0x21f/0x2a0 [ 733.304036][T25348] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.304087][T25348] ? __fget_files+0x2a/0x420 [ 733.304106][T25348] ? __fget_files+0x3a0/0x420 [ 733.304134][T25348] __sys_sendmmsg+0x227/0x430 [ 733.304157][T25348] ? __pfx___sys_sendmmsg+0x10/0x10 [ 733.304182][T25348] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 733.304229][T25348] ? ksys_write+0x22a/0x250 [ 733.304250][T25348] ? __pfx_ksys_write+0x10/0x10 [ 733.304272][T25348] __x64_sys_sendmmsg+0xa0/0xc0 [ 733.304291][T25348] do_syscall_64+0xfa/0xfa0 [ 733.304312][T25348] ? lockdep_hardirqs_on+0x9c/0x150 [ 733.304333][T25348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.304348][T25348] ? clear_bhb_loop+0x60/0xb0 [ 733.304370][T25348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.304388][T25348] RIP: 0033:0x7f2ccb18efc9 [ 733.304404][T25348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.304419][T25348] RSP: 002b:00007f2ccc0a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 733.304439][T25348] RAX: ffffffffffffffda RBX: 00007f2ccb3e5fa0 RCX: 00007f2ccb18efc9 [ 733.304453][T25348] RDX: 0000000000000003 RSI: 0000200000000a40 RDI: 0000000000000003 [ 733.304465][T25348] RBP: 00007f2ccc0a8090 R08: 0000000000000000 R09: 0000000000000000 [ 733.304475][T25348] R10: 0000000008008800 R11: 0000000000000246 R12: 0000000000000001 [ 733.304486][T25348] R13: 00007f2ccb3e6038 R14: 00007f2ccb3e5fa0 R15: 00007ffffa06de98 [ 733.304515][T25348] [ 733.669356][T25351] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.5601'. [ 733.765062][T25363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5603'. [ 733.782851][T25365] 8021q: VLANs not supported on sit0 [ 733.827841][T25370] nbd: must specify at least one socket [ 734.181768][T25390] FAULT_INJECTION: forcing a failure. [ 734.181768][T25390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.196897][T25390] CPU: 0 UID: 0 PID: 25390 Comm: syz.3.5613 Not tainted syzkaller #0 PREEMPT(full) [ 734.196924][T25390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 734.196936][T25390] Call Trace: [ 734.196944][T25390] [ 734.196952][T25390] dump_stack_lvl+0x189/0x250 [ 734.196978][T25390] ? __pfx____ratelimit+0x10/0x10 [ 734.197001][T25390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.197019][T25390] ? __pfx__printk+0x10/0x10 [ 734.197039][T25390] ? __might_fault+0xb0/0x130 [ 734.197069][T25390] should_fail_ex+0x414/0x560 [ 734.197091][T25390] _copy_from_user+0x2d/0xb0 [ 734.197114][T25390] ____sys_sendmsg+0x2fe/0x830 [ 734.197141][T25390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.197165][T25390] ? import_iovec+0x74/0xa0 [ 734.197189][T25390] ___sys_sendmsg+0x21f/0x2a0 [ 734.197208][T25390] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.197262][T25390] ? __fget_files+0x2a/0x420 [ 734.197283][T25390] ? __fget_files+0x3a0/0x420 [ 734.197313][T25390] __sys_sendmmsg+0x227/0x430 [ 734.197339][T25390] ? __pfx___sys_sendmmsg+0x10/0x10 [ 734.197370][T25390] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 734.197413][T25390] ? ksys_write+0x22a/0x250 [ 734.197434][T25390] ? __pfx_ksys_write+0x10/0x10 [ 734.197467][T25390] __x64_sys_sendmmsg+0xa0/0xc0 [ 734.197489][T25390] do_syscall_64+0xfa/0xfa0 [ 734.197511][T25390] ? lockdep_hardirqs_on+0x9c/0x150 [ 734.197534][T25390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.197552][T25390] ? clear_bhb_loop+0x60/0xb0 [ 734.197577][T25390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.197594][T25390] RIP: 0033:0x7f3903b8efc9 [ 734.197613][T25390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.197627][T25390] RSP: 002b:00007f3904a2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 734.197647][T25390] RAX: ffffffffffffffda RBX: 00007f3903de5fa0 RCX: 00007f3903b8efc9 [ 734.197661][T25390] RDX: 0000000000000003 RSI: 0000200000000a40 RDI: 0000000000000003 [ 734.197672][T25390] RBP: 00007f3904a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 734.197684][T25390] R10: 0000000008008800 R11: 0000000000000246 R12: 0000000000000001 [ 734.197695][T25390] R13: 00007f3903de6038 R14: 00007f3903de5fa0 R15: 00007ffdef7f6338 [ 734.197727][T25390] [ 735.780825][T25435] ip6gre2: entered allmulticast mode [ 735.938651][T25437] tun0: tun_chr_ioctl cmd 1074025681 [ 736.006210][T25451] validate_nla: 2 callbacks suppressed [ 736.006230][T25451] netlink: 'syz.4.5632': attribute type 10 has an invalid length. [ 736.088137][T25459] syz_tun: entered allmulticast mode [ 736.135161][T25459] syz_tun: left allmulticast mode [ 736.148651][T25459] dvmrp1: entered allmulticast mode [ 736.712857][T25493] batadv0: entered promiscuous mode [ 736.719575][T25493] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 736.731615][T25493] batadv0: left promiscuous mode [ 737.158241][T25520] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 737.840961][T25536] tipc: Enabled bearer , priority 0 [ 737.897401][T25538] __nla_validate_parse: 8 callbacks suppressed [ 737.897419][T25538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5657'. [ 737.924523][T25538] batadv0: entered promiscuous mode [ 737.933181][T25538] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 737.943281][T25538] batadv0: left promiscuous mode [ 737.974056][T25541] tipc: Resetting bearer [ 738.060815][T25550] team0: Device ipip0 is up. Set it down before adding it as a team port [ 738.070820][T25551] netlink: 124 bytes leftover after parsing attributes in process `syz.1.5660'. [ 738.107538][T25554] tipc: Enabled bearer , priority 0 [ 738.115368][T25554] syzkaller0: entered promiscuous mode [ 738.121111][T25554] syzkaller0: entered allmulticast mode [ 738.150749][T25550] tipc: Resetting bearer [ 738.161945][T25549] tipc: Resetting bearer [ 738.180496][T25549] tipc: Disabling bearer [ 738.686173][T25569] netlink: 'syz.1.5667': attribute type 13 has an invalid length. [ 738.705425][T25569] netlink: 'syz.1.5667': attribute type 17 has an invalid length. [ 738.767591][T25569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 739.495610][T25587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5672'. [ 739.540939][T25587] batadv0: entered promiscuous mode [ 739.562985][T25587] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 739.584643][T25587] batadv0: left promiscuous mode [ 740.121594][T25589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5673'. [ 740.145060][T25589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5673'. [ 740.184301][T25589] syzkaller0: entered promiscuous mode [ 740.189911][T25589] syzkaller0: entered allmulticast mode [ 740.534681][T25604] bond8: option resend_igmp: invalid value (2878) [ 740.541882][T25604] bond8: option resend_igmp: allowed values 0 - 255 [ 740.594200][T25604] bond8 (unregistering): Released all slaves [ 741.010579][T25631] tipc: Enabled bearer , priority 0 [ 741.086769][T25635] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5688'. [ 741.120376][T25635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5688'. [ 741.123246][T25637] netlink: 'syz.0.5684': attribute type 4 has an invalid length. [ 741.786623][T25627] tipc: Disabling bearer [ 742.146139][T25689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 742.156481][T25693] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5703'. [ 742.205841][T25671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5694'. [ 742.282154][T25671] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5694'. [ 742.951349][T25725] __nla_validate_parse: 1 callbacks suppressed [ 742.951369][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 742.969534][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 742.981180][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 742.995561][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 743.009798][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 743.019769][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 743.032220][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 743.043163][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 743.064223][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 743.083365][T25725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5711'. [ 743.130489][ T5842] Bluetooth: hci1: command 0x0419 tx timeout [ 743.218311][T25725] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.465218][T25764] netlink: 'syz.3.5725': attribute type 61 has an invalid length. [ 743.757673][T25782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 743.975736][T25792] netlink: 'syz.0.5733': attribute type 12 has an invalid length. [ 743.985892][T25792] netlink: 'syz.0.5733': attribute type 4 has an invalid length. [ 744.304257][T25805] veth0: entered promiscuous mode [ 744.357909][T25805] netlink: 'syz.3.5737': attribute type 16 has an invalid length. [ 744.366144][T25805] netlink: 'syz.3.5737': attribute type 17 has an invalid length. [ 744.427826][T25805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 744.649374][T25805] veth0: left promiscuous mode [ 744.913682][T25844] netlink: 'syz.1.5747': attribute type 2 has an invalid length. [ 745.594992][T25872] bridge0: entered promiscuous mode [ 745.617633][T25872] macvtap2: entered allmulticast mode [ 745.634642][T25872] bridge0: entered allmulticast mode [ 745.654195][T25872] bridge0: port 3(macvtap2) entered blocking state [ 745.676377][T25872] bridge0: port 3(macvtap2) entered disabled state [ 745.743080][T25872] bridge0: left allmulticast mode [ 745.748438][T25872] bridge0: left promiscuous mode [ 745.813597][T25874] : renamed from bond_slave_0 [ 745.890994][T25880] batadv0: entered promiscuous mode [ 745.909590][T25880] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 745.931986][T25880] batadv0: left promiscuous mode [ 746.125005][T25893] netlink: ct family unspecified [ 746.159081][T25893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.231659][T25893] tipc: Enabled bearer , priority 0 [ 746.252086][T25893] syzkaller0: entered promiscuous mode [ 746.257607][T25893] syzkaller0: entered allmulticast mode [ 746.342793][T25893] tipc: Resetting bearer [ 746.965588][T25891] tipc: Resetting bearer [ 746.988582][T25891] tipc: Disabling bearer [ 747.052039][T25925] tipc: Enabled bearer , priority 0 [ 747.136274][T25925] syzkaller0: entered promiscuous mode [ 747.142850][T25925] syzkaller0: entered allmulticast mode [ 747.223212][T25925] tipc: Resetting bearer [ 747.238274][T25924] tipc: Resetting bearer [ 747.971579][T25968] __nla_validate_parse: 22 callbacks suppressed [ 747.971600][T25968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5781'. [ 749.501357][T25924] tipc: Disabling bearer [ 749.534115][T25965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5780'. [ 749.547310][T25968] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 749.574602][T25968] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 749.585200][T25968] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 749.625398][T25973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5782'. [ 749.809121][T25980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5785'. [ 749.854107][T25980] batadv0: entered promiscuous mode [ 749.869294][T25980] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 749.878784][T25980] batadv0: left promiscuous mode [ 749.942602][T25987] vlan0: entered promiscuous mode [ 749.947704][T25987] team0: entered promiscuous mode [ 750.011921][T25987] team_slave_0: entered promiscuous mode [ 750.152058][T25993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5788'. [ 750.688104][T26001] nbd1: detected capacity change from 0 to 127 [ 750.953023][T17300] block nbd1: Receive control failed (result -32) [ 750.976694][T26012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5795'. [ 751.067322][T26017] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 751.088622][T26012] tun0: tun_chr_ioctl cmd 1074025675 [ 751.096171][T26012] tun0: persist disabled [ 751.127716][T26018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5794'. [ 751.413773][T26032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5802'. [ 751.426774][T26025] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5799'. [ 751.909514][T26055] ip6gre3: entered allmulticast mode [ 751.946152][T26060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5810'. [ 751.987293][T26060] 8021q: adding VLAN 0 to HW filter on device bond8 [ 752.108427][T26063] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 752.323585][T26073] syzkaller1: entered promiscuous mode [ 752.330619][T26073] syzkaller1: entered allmulticast mode [ 752.379082][T26075] syzkaller0: entered promiscuous mode [ 752.388061][T26075] syzkaller0: entered allmulticast mode [ 752.472000][T26083] netlink: 'syz.2.5818': attribute type 13 has an invalid length. [ 753.024406][T26106] __nla_validate_parse: 4 callbacks suppressed [ 753.024431][T26106] netlink: 33 bytes leftover after parsing attributes in process `syz.3.5820'. [ 754.606641][T26087] batadv0: entered promiscuous mode [ 754.614080][T26087] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 754.622901][T26087] batadv0: left promiscuous mode [ 754.799182][T26112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5823'. [ 755.016280][T26116] netlink: 'syz.2.5824': attribute type 142 has an invalid length. [ 755.117639][T26121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5827'. [ 755.236262][T26131] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5831'. [ 755.396910][T26139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5833'. [ 755.548474][T26139] batadv0: entered promiscuous mode [ 755.555291][T26139] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 755.604066][T26139] batadv0: left promiscuous mode [ 756.471339][T26166] syz_tun: entered allmulticast mode [ 756.586421][T26171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5840'. [ 757.040360][T26171] syz_tun (unregistering): left allmulticast mode [ 757.366196][T26190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5847'. [ 757.743532][T26202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5851'. [ 757.770916][T26202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5851'. [ 758.311241][T26195] IPVS: set_ctl: invalid protocol: 27746 111.46.98.102:28974 [ 759.063105][T26239] @0Ù: renamed from bond_slave_1 [ 759.652835][T26236] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 760.890194][T17300] Bluetooth: hci1: command 0x0419 tx timeout [ 761.405887][T17299] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 761.419275][T17299] CPU: 0 UID: 0 PID: 17299 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 761.419302][T17299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 761.419314][T17299] Call Trace: [ 761.419322][T17299] [ 761.419331][T17299] dump_stack_lvl+0x189/0x250 [ 761.419360][T17299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 761.419381][T17299] ? __pfx__printk+0x10/0x10 [ 761.419417][T17299] dump_header+0xd3/0x480 [ 761.419443][T17299] oom_kill_process+0x387/0x920 [ 761.419471][T17299] out_of_memory+0xf09/0x12a0 [ 761.419508][T17299] ? __pfx_out_of_memory+0x10/0x10 [ 761.419541][T17299] mem_cgroup_out_of_memory+0x145/0x240 [ 761.419567][T17299] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 761.419604][T17299] ? _raw_spin_unlock+0x28/0x50 [ 761.419625][T17299] ? memcg1_oom_prepare+0x37f/0x450 [ 761.419648][T17299] try_charge_memcg+0xdf0/0x1280 [ 761.419687][T17299] ? __pfx_try_charge_memcg+0x10/0x10 [ 761.419729][T17299] charge_memcg+0x9f/0x180 [ 761.419752][T17299] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 761.419773][T17299] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 761.419799][T17299] __read_swap_cache_async+0x212/0x480 [ 761.419843][T17299] swap_cluster_readahead+0x336/0x630 [ 761.419877][T17299] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 761.419928][T17299] ? get_vma_policy+0x27c/0x3c0 [ 761.419951][T17299] swapin_readahead+0x17d/0xb50 [ 761.419990][T17299] ? __pfx_swapin_readahead+0x10/0x10 [ 761.420018][T17299] ? swap_table_get+0x1e/0x260 [ 761.420040][T17299] ? swap_table_get+0x1e/0x260 [ 761.420063][T17299] ? swap_table_get+0x1e/0x260 [ 761.420086][T17299] ? swap_table_get+0x216/0x260 [ 761.420128][T17299] ? swap_cache_get_folio+0x51c/0x530 [ 761.420161][T17299] do_swap_page+0x43b/0x5b20 [ 761.420193][T17299] ? __lock_acquire+0xab9/0xd20 [ 761.420224][T17299] ? ___pte_offset_map+0x29/0x250 [ 761.420238][T17299] ? do_swap_page+0x184/0x5b20 [ 761.420258][T17299] ? __pfx_do_swap_page+0x10/0x10 [ 761.420281][T17299] ? __pfx_default_wake_function+0x10/0x10 [ 761.420301][T17299] ? ___pte_offset_map+0x1cf/0x250 [ 761.420319][T17299] ? pte_offset_map_rw_nolock+0xea/0x160 [ 761.420336][T17299] __handle_mm_fault+0xe55/0x5400 [ 761.420362][T17299] ? lock_vma_under_rcu+0x1a3/0x450 [ 761.420378][T17299] ? __pfx___handle_mm_fault+0x10/0x10 [ 761.420411][T17299] ? lock_vma_under_rcu+0x3d2/0x450 [ 761.420430][T17299] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 761.420451][T17299] handle_mm_fault+0x40a/0x8e0 [ 761.420485][T17299] do_user_addr_fault+0xa7c/0x1380 [ 761.420510][T17299] ? rcu_is_watching+0x15/0xb0 [ 761.420536][T17299] ? trace_page_fault_user+0x84/0x1e0 [ 761.420557][T17299] exc_page_fault+0x82/0x100 [ 761.420579][T17299] asm_exc_page_fault+0x26/0x30 [ 761.420593][T17299] RIP: 0033:0x7f2ccb065ed7 [ 761.420606][T17299] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f8 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f7 ea 00 48 01 d1 39 7c 24 [ 761.420619][T17299] RSP: 002b:00007ffffa06e220 EFLAGS: 00010202 [ 761.420633][T17299] RAX: 0000001b34724000 RBX: 0000000000000674 RCX: 00000000000b9ca8 [ 761.420643][T17299] RDX: 00000000050a68f9 RSI: 00007ffffa06e2b0 RDI: 000000000000001c [ 761.420653][T17299] RBP: 00007ffffa06e25c R08: 7fffffffffffffff R09: 3fffffffffffffff [ 761.420672][T17299] R10: 4000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 761.420682][T17299] R13: 00000000000927c0 R14: 00000000000b96d5 R15: 00007ffffa06e2b0 [ 761.420711][T17299] [ 761.915722][T17299] memory: usage 307200kB, limit 307200kB, failcnt 585 [ 761.931747][T17299] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 761.948897][T17299] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 761.964363][T17299] Memory cgroup stats for /syz4: [ 761.964673][T17299] cache 0 [ 761.981794][T17299] rss 0 [ 761.986934][T17299] rss_huge 0 [ 761.997668][T17299] shmem 0 [ 762.006384][T17299] mapped_file 0 [ 762.018019][T17299] dirty 0 [ 762.027892][T17299] writeback 0 [ 762.038017][T17299] workingset_refault_anon 11 [ 762.053873][T17299] workingset_refault_file 27 [ 762.069808][T17299] swap 196608 [ 762.090531][T17299] swapcached 32768 [ 762.094292][T17299] pgpgin 223107 [ 762.097753][T17299] pgpgout 223099 [ 762.120496][T17299] pgfault 392630 [ 762.124081][T17299] pgmajfault 7 [ 762.127455][T17299] inactive_anon 0 [ 762.160143][T17299] active_anon 32768 [ 762.163990][T17299] inactive_file 0 [ 762.167710][T17299] active_file 0 [ 762.190043][T17299] unevictable 0 [ 762.193558][T17299] hierarchical_memory_limit 314572800 [ 762.199016][T17299] hierarchical_memsw_limit 9223372036854771712 [ 762.218797][T17299] total_cache 0 [ 762.222374][T17299] total_rss 0 [ 762.225990][T17299] total_rss_huge 0 [ 762.230441][T17299] total_shmem 0 [ 762.234199][T17299] total_mapped_file 0 [ 762.238250][T17299] total_dirty 0 [ 762.242006][T17299] total_writeback 0 [ 762.245978][T17299] total_workingset_refault_anon 11 [ 762.252322][T17299] total_workingset_refault_file 27 [ 762.257619][T17299] total_swap 196608 [ 762.261549][T17299] total_swapcached 32768 [ 762.265944][T17299] total_pgpgin 223107 [ 762.270536][T17299] total_pgpgout 223099 [ 762.276501][T17299] total_pgfault 392630 [ 762.280723][T17299] total_pgmajfault 7 [ 762.284693][T17299] total_inactive_anon 0 [ 762.288926][T17299] total_active_anon 32768 [ 762.293688][T17299] total_inactive_file 0 [ 762.297914][T17299] total_active_file 0 [ 762.302017][T17299] total_unevictable 0 [ 762.306064][T17299] anon_cost 0 [ 762.309412][T17299] file_cost 0 [ 762.313188][T17299] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.5859,pid=26231,uid=0 [ 762.331481][T17299] Memory cgroup out of memory: Killed process 26231 (syz.4.5859) total-vm:106448kB, anon-rss:1140kB, file-rss:27432kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 763.257815][T26294] tipc: Enabled bearer , priority 0 [ 763.293621][T26295] syzkaller0: entered promiscuous mode [ 763.310182][T26295] syzkaller0: entered allmulticast mode [ 763.420186][T26295] tipc: Resetting bearer [ 763.538478][T26295] tipc: Disabling bearer [ 764.418303][ T32] oom_reaper: reaped process 26231 (syz.4.5859), now anon-rss:0kB, file-rss:26240kB, shmem-rss:0kB [ 764.475862][T26330] netlink: 'syz.2.5877': attribute type 2 has an invalid length. [ 764.496752][T26331] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5878'. [ 764.520707][T26331] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5878'. [ 764.614768][T26330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5877'. [ 764.906824][T26344] netlink: 'syz.1.5881': attribute type 10 has an invalid length. [ 764.938421][T26344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.001644][T26349] netlink: 'syz.1.5881': attribute type 10 has an invalid length. [ 765.009501][T26349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5881'. [ 765.010837][T26344] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 765.076264][T26349] batadv0: entered promiscuous mode [ 765.089607][T26349] batadv0: entered allmulticast mode [ 765.111866][T26349] bond0: (slave batadv0): Releasing backup interface [ 765.128830][T26349] bridge0: port 3(batadv0) entered blocking state [ 765.136034][T26349] bridge0: port 3(batadv0) entered disabled state [ 765.303167][T26360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5886'. [ 765.380737][T21408] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 765.390328][T21408] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 765.447616][T26372] IPVS: set_ctl: invalid protocol: 7 255.255.255.255:20002 [ 765.484999][T26376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5891'. [ 766.060489][T26401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5899'. [ 766.137457][T26407] x_tables: duplicate entry at hook 2 [ 766.609607][T26434] netlink: 'syz.0.5907': attribute type 1 has an invalid length. [ 766.684570][T26433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5908'. [ 766.893825][T26435] geneve2: entered promiscuous mode [ 766.929478][T26433] batadv0: entered promiscuous mode [ 766.949305][T26433] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 766.980322][T26433] batadv0: left promiscuous mode [ 767.247094][T26454] 8021q: VLANs not supported on caif0 [ 768.102788][T26493] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5922'. [ 768.131234][T26493] netlink: 388 bytes leftover after parsing attributes in process `syz.3.5922'. [ 768.287025][T26504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.261182][T26555] wg1: entered promiscuous mode [ 769.506572][T26559] __nla_validate_parse: 2 callbacks suppressed [ 769.506587][T26559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5941'. [ 769.534559][T26558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5941'. [ 769.577362][T26561] netlink: 'syz.2.5942': attribute type 1 has an invalid length. [ 769.768632][T26567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5943'. [ 769.820406][T26567] 8021q: adding VLAN 0 to HW filter on device bond11 [ 769.879786][T26575] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5946'. [ 769.891419][T26575] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5946'. [ 770.108393][T26588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5950'. [ 770.344409][T26594] netem: change failed [ 770.826974][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5959'. [ 770.836942][T26618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5959'. [ 770.892884][ T70] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.892959][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5959'. [ 770.904398][ T70] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.922727][T26618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5959'. [ 770.941263][ T70] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.962503][ T70] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.988808][T26627] geneve1: Caught tx_queue_len zero misconfig [ 771.200643][T26640] block nbd0: must specify backend [ 771.210714][ T5842] Bluetooth: hci2: command 0x041b tx timeout [ 771.216964][T17300] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 771.251995][T26635] netlink: 'syz.1.5963': attribute type 10 has an invalid length. [ 771.302972][T26635] bond0: (slave wlan1): Opening slave failed [ 771.353309][T26643] bridge0: port 1(batadv1) entered blocking state [ 771.370498][T26643] bridge0: port 1(batadv1) entered disabled state [ 771.377320][T26643] batadv1: entered allmulticast mode [ 771.413354][T26643] batadv1: entered promiscuous mode [ 771.687137][T26663] tipc: Enabling of bearer rejected, already enabled [ 771.854217][T21418] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 771.863526][T21418] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 771.924725][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 771.936080][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 771.945429][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 771.953466][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 771.962160][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 772.817537][T26675] chnl_net:caif_netlink_parms(): no params data found [ 773.219698][T26675] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.228692][T26675] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.236227][T26675] bridge_slave_0: entered allmulticast mode [ 773.248686][T26675] bridge_slave_0: entered promiscuous mode [ 773.259729][T26675] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.268779][T26675] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.276385][T26675] bridge_slave_1: entered allmulticast mode [ 773.331088][T26675] bridge_slave_1: entered promiscuous mode [ 773.532596][T26675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.583473][T26756] tipc: Enabled bearer , priority 0 [ 773.598808][T26675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.709820][T26675] team0: Port device team_slave_0 added [ 773.716645][T26756] syzkaller0: entered promiscuous mode [ 773.722574][T26756] syzkaller0: entered allmulticast mode [ 773.762184][T26675] team0: Port device team_slave_1 added [ 773.798708][T26675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.805738][T26675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.832044][T26675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.896519][T26769] vlan2: entered promiscuous mode [ 773.925044][T26675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.933065][T26675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.960628][T26675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.972836][T26759] tipc: Resetting bearer [ 773.993165][T26759] tipc: Disabling bearer [ 774.010415][ T5842] Bluetooth: hci3: command tx timeout [ 774.160599][T26675] hsr_slave_0: entered promiscuous mode [ 774.178035][T26675] hsr_slave_1: entered promiscuous mode [ 774.203771][T26675] debugfs: 'hsr0' already exists in 'hsr' [ 774.220665][T26675] Cannot create hsr debugfs directory [ 774.341986][T26788] netlink: 'syz.1.6002': attribute type 6 has an invalid length. [ 774.535459][T26789] tipc: Enabled bearer , priority 0 [ 774.590701][T26789] syzkaller0: entered promiscuous mode [ 774.596248][T26789] syzkaller0: entered allmulticast mode [ 774.840086][T26789] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 775.031930][T26812] tipc: Resetting bearer [ 775.093780][T26781] tipc: Resetting bearer [ 775.124170][T26822] xt_hashlimit: invalid rate [ 775.182820][T26781] tipc: Disabling bearer [ 775.237687][T26675] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.264055][T26675] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.464096][T26675] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.486765][T26675] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.561700][T26675] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.582509][T26675] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.672539][T26675] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.694556][T26675] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.104727][ T5842] Bluetooth: hci3: command tx timeout [ 776.457579][T26849] ip6tnl4: entered promiscuous mode [ 776.463223][T26849] ip6tnl4: entered allmulticast mode [ 776.471819][T26849] team0: Device ip6tnl4 is of different type [ 776.533467][T26675] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 776.573193][T26675] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 776.604494][T26675] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 776.638949][T26675] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 776.922366][T26675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.974459][T26675] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.011258][T21402] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.018517][T21402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.046930][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.054235][ T6667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.568059][T26675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.994254][T26932] netlink: 'syz.2.6035': attribute type 11 has an invalid length. [ 778.054998][T26935] __nla_validate_parse: 7 callbacks suppressed [ 778.055016][T26935] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6035'. [ 778.081416][T26938] netlink: 13 bytes leftover after parsing attributes in process `syz.1.6036'. [ 778.147952][T26938] netlink: 13 bytes leftover after parsing attributes in process `syz.1.6036'. [ 778.171661][T17300] Bluetooth: hci3: command tx timeout [ 778.232171][T26932] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6035'. [ 778.335936][T26675] veth0_vlan: entered promiscuous mode [ 778.356676][T26675] veth1_vlan: entered promiscuous mode [ 778.546952][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6038'. [ 778.657518][T26675] veth0_macvtap: entered promiscuous mode [ 778.715217][T26675] veth1_macvtap: entered promiscuous mode [ 778.855332][T26675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.923718][T26675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.941833][T21401] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.972529][T21401] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.087852][T21401] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.108021][T21401] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.261309][T26973] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6045'. [ 779.386824][T26973] 8021q: adding VLAN 0 to HW filter on device bond5 [ 779.461898][T14677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.485683][T14677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.859742][T21400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.868145][T21400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.253912][T17300] Bluetooth: hci3: command tx timeout [ 780.479813][T27003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6053'. [ 780.671131][T27009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6055'. [ 780.708015][T27009] batadv0: entered promiscuous mode [ 780.726855][T27009] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 780.753569][T27009] batadv0: left promiscuous mode [ 780.898791][T27012] 8021q: adding VLAN 0 to HW filter on device bond12 [ 780.946174][T27012] bridge0: port 3(bond12) entered blocking state [ 780.970510][T27012] bridge0: port 3(bond12) entered disabled state [ 780.986773][T27012] bond12: entered allmulticast mode [ 780.986773][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 780.994792][T27012] bond12: entered promiscuous mode [ 781.008161][T27012] bridge0: port 3(bond12) entered blocking state [ 781.015429][T27012] bridge0: port 3(bond12) entered forwarding state [ 781.025508][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 781.044881][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 781.055044][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 781.070863][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 781.125784][T21397] bridge0: port 3(bond12) entered disabled state [ 781.135356][T27020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6057'. [ 781.307125][T27024] netlink: 'syz.0.6059': attribute type 1 has an invalid length. [ 781.327710][T27025] pim6reg: entered allmulticast mode [ 781.381455][T27028] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 781.393169][T27028] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 781.414711][T27025] pim6reg: left allmulticast mode [ 781.442815][T27024] gretap2: entered promiscuous mode [ 781.451815][T27024] bond6: (slave gretap2): making interface the new active one [ 781.460374][T27024] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 781.763463][T27017] chnl_net:caif_netlink_parms(): no params data found [ 781.872331][T27056] netlink: 'syz.4.6066': attribute type 1 has an invalid length. [ 782.107044][T27017] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.122609][T27017] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.141559][T27017] bridge_slave_0: entered allmulticast mode [ 782.157288][T27017] bridge_slave_0: entered promiscuous mode [ 782.180341][T27017] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.197469][T27017] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.217213][T27017] bridge_slave_1: entered allmulticast mode [ 782.237841][T27017] bridge_slave_1: entered promiscuous mode [ 782.406699][T27017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.434000][T27017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.555452][T27017] team0: Port device team_slave_0 added [ 782.669146][T27017] team0: Port device team_slave_1 added [ 782.775620][T27017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.790378][T27017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.825568][T27017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.851546][T27093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6076'. [ 782.871294][T27017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.878870][T27017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.907444][T27017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.092206][T27017] hsr_slave_0: entered promiscuous mode [ 783.098752][T27017] hsr_slave_1: entered promiscuous mode [ 783.107186][T27017] debugfs: 'hsr0' already exists in 'hsr' [ 783.113909][T27017] Cannot create hsr debugfs directory [ 783.140428][T17300] Bluetooth: hci2: command tx timeout [ 783.317217][T27017] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 783.327416][T27017] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 783.337462][T27017] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 783.347135][T27017] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 783.418133][T27017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.438065][T27017] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.451050][T21401] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.458196][T21401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.474187][T21402] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.481398][T21402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.662293][T27017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 783.705294][T27017] veth0_vlan: entered promiscuous mode [ 783.716896][T27017] veth1_vlan: entered promiscuous mode [ 783.743819][T27017] veth0_macvtap: entered promiscuous mode [ 783.753373][T27017] veth1_macvtap: entered promiscuous mode [ 783.774624][T27017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.788985][T27017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.804841][T21402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.815921][T21402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.826232][T21402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.835961][T21401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.899764][T21401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.910699][T21401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.934830][T21400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.943235][T21400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.986962][T27125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6083'. [ 785.077981][T27116] tipc: Enabling of bearer rejected, failed to enable media [ 785.211556][T17300] Bluetooth: hci2: command tx timeout [ 785.298388][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 785.313404][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 785.327512][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 785.344757][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 785.353954][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 785.546116][T27145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6085'. [ 785.569735][T27145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6085'. [ 786.048620][T27133] chnl_net:caif_netlink_parms(): no params data found [ 786.238301][T27133] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.246455][T27165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6090'. [ 786.248865][T27133] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.267460][T27133] bridge_slave_0: entered allmulticast mode [ 786.275702][T27133] bridge_slave_0: entered promiscuous mode [ 786.285116][T27133] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.292640][T27133] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.299912][T27133] bridge_slave_1: entered allmulticast mode [ 786.308240][T27133] bridge_slave_1: entered promiscuous mode [ 786.374848][T27133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.404110][T27133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.467924][T27133] team0: Port device team_slave_0 added [ 786.478499][T27133] team0: Port device team_slave_1 added [ 786.485639][T27174] tipc: Enabling of bearer rejected, failed to enable media [ 786.536067][T27133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.543741][T27133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.558064][T27169] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6092'. [ 786.587376][T27133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.605926][T27133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.613561][T27133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.641467][T27133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.758321][T27133] hsr_slave_0: entered promiscuous mode [ 786.762678][T27180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6094'. [ 786.783998][T27133] hsr_slave_1: entered promiscuous mode [ 786.802972][T27133] debugfs: 'hsr0' already exists in 'hsr' [ 786.808735][T27133] Cannot create hsr debugfs directory [ 787.290693][ T5842] Bluetooth: hci2: command tx timeout [ 787.358182][T27207] netlink: 2848 bytes leftover after parsing attributes in process `syz.3.6102'. [ 787.450581][ T5842] Bluetooth: hci5: command tx timeout [ 787.469094][T27209] syzkaller0: entered promiscuous mode [ 787.475121][T27209] syzkaller0: entered allmulticast mode [ 787.889727][T27213] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6103'. [ 789.374231][ T5842] Bluetooth: hci2: command tx timeout [ 789.531358][ T5842] Bluetooth: hci5: command tx timeout [ 789.796688][T27211] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 789.973658][T27213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.993654][T27213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.004459][T27213] bond0 (unregistering): Released all slaves [ 790.024032][T27229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6108'. [ 790.194666][T27236] netlink: 'syz.4.6110': attribute type 4 has an invalid length. [ 790.238401][T27133] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 790.270035][T27133] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 790.314893][T27133] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 790.360623][T27133] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 790.864017][T27133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.899681][T27133] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.917973][T14677] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.925253][T14677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.004305][T14677] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.011516][T14677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.034856][T27236] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 791.070716][T27236] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 791.128191][T27236] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 791.131929][T27282] syzkaller0: entered promiscuous mode [ 791.140949][T27282] syzkaller0: entered allmulticast mode [ 791.160185][T27236] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 791.226405][T27284] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 791.248580][T27236] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 791.265271][T27236] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 791.399183][T27236] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 791.407924][T27236] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 791.485200][T27291] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6124'. [ 791.611923][ T5842] Bluetooth: hci5: command tx timeout [ 791.715507][T27236] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 791.727413][T27236] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 792.034287][T27133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.194510][T27133] veth0_vlan: entered promiscuous mode [ 792.242861][T27133] veth1_vlan: entered promiscuous mode [ 792.294174][T27133] veth0_macvtap: entered promiscuous mode [ 792.306921][T27133] veth1_macvtap: entered promiscuous mode [ 792.335552][T27319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6133'. [ 792.388899][T27297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6125'. [ 792.390913][T27133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.449816][T27324] netlink: 'syz.3.6132': attribute type 12 has an invalid length. [ 792.476273][T27133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.588160][T21401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.630126][T21401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.658905][T21401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.687759][T21401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.822645][T14689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.842948][T14689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.869875][T27338] netlink: 'syz.1.6138': attribute type 4 has an invalid length. [ 792.882796][T21400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.892875][T21400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.999407][T27343] netlink: 'syz.2.6081': attribute type 8 has an invalid length. [ 793.007614][T27343] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6081'. [ 793.042533][T27343] tipc: Started in network mode [ 793.047905][T27343] tipc: Node identity 5274f76d4a65, cluster identity 4711 [ 793.057920][T27343] tipc: Enabled bearer , priority 0 [ 793.067012][T27343] syzkaller0: entered promiscuous mode [ 793.075381][T27343] syzkaller0: entered allmulticast mode [ 793.105458][T27343] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 793.185067][T27343] tipc: Resetting bearer [ 793.198855][T27342] tipc: Resetting bearer [ 793.279572][T27342] tipc: Disabling bearer [ 793.544503][T27360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6143'. [ 793.922150][T27372] netlink: 'syz.1.6149': attribute type 4 has an invalid length. [ 794.263434][T27397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6159'. [ 794.279249][T27399] netlink: 'syz.2.6160': attribute type 1 has an invalid length. [ 794.318606][T27397] veth1_to_bridge: mtu less than device minimum [ 794.346073][T27397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6159'. [ 794.534739][T27420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6163'. [ 794.574748][T27419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 794.588892][T27420] bond0: (slave rose0): Error: Device can not be enslaved while up [ 794.720909][T27426] pim6reg: entered allmulticast mode [ 794.772431][T27429] netlink: 'syz.1.6167': attribute type 4 has an invalid length. [ 794.891737][T27439] FAULT_INJECTION: forcing a failure. [ 794.891737][T27439] name failslab, interval 1, probability 0, space 0, times 0 [ 794.912278][T27439] CPU: 0 UID: 0 PID: 27439 Comm: syz.0.6172 Not tainted syzkaller #0 PREEMPT(full) [ 794.912307][T27439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 794.912318][T27439] Call Trace: [ 794.912325][T27439] [ 794.912334][T27439] dump_stack_lvl+0x189/0x250 [ 794.912360][T27439] ? __pfx____ratelimit+0x10/0x10 [ 794.912383][T27439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.912403][T27439] ? __pfx__printk+0x10/0x10 [ 794.912427][T27439] ? __pfx___might_resched+0x10/0x10 [ 794.912452][T27439] ? fs_reclaim_acquire+0x7d/0x100 [ 794.912479][T27439] should_fail_ex+0x414/0x560 [ 794.912501][T27439] should_failslab+0xa8/0x100 [ 794.912529][T27439] kmem_cache_alloc_node_noprof+0x77/0x710 [ 794.912549][T27439] ? __alloc_skb+0x112/0x2d0 [ 794.912575][T27439] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 794.912597][T27439] __alloc_skb+0x112/0x2d0 [ 794.912619][T27439] pfkey_sendmsg+0x1dd/0x1090 [ 794.912641][T27439] ? __lock_acquire+0xab9/0xd20 [ 794.912667][T27439] ? __pfx___might_resched+0x10/0x10 [ 794.912698][T27439] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 794.912722][T27439] ? aa_sk_perm+0x81e/0x950 [ 794.912743][T27439] ? __pfx_aa_sk_perm+0x10/0x10 [ 794.912757][T27439] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 794.912781][T27439] ? aa_sock_msg_perm+0xf1/0x1d0 [ 794.912802][T27439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 794.912823][T27439] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 794.912844][T27439] __sock_sendmsg+0x21c/0x270 [ 794.912870][T27439] ____sys_sendmsg+0x505/0x830 [ 794.912895][T27439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.912923][T27439] ? import_iovec+0x74/0xa0 [ 794.912947][T27439] ___sys_sendmsg+0x21f/0x2a0 [ 794.912968][T27439] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.913021][T27439] ? __fget_files+0x2a/0x420 [ 794.913046][T27439] ? __fget_files+0x3a0/0x420 [ 794.913076][T27439] __x64_sys_sendmsg+0x19b/0x260 [ 794.913099][T27439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 794.913128][T27439] ? __pfx_ksys_write+0x10/0x10 [ 794.913155][T27439] ? do_syscall_64+0xbe/0xfa0 [ 794.913181][T27439] do_syscall_64+0xfa/0xfa0 [ 794.913202][T27439] ? lockdep_hardirqs_on+0x9c/0x150 [ 794.913227][T27439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.913244][T27439] ? clear_bhb_loop+0x60/0xb0 [ 794.913266][T27439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.913283][T27439] RIP: 0033:0x7fd47a58efc9 [ 794.913299][T27439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.913313][T27439] RSP: 002b:00007fd47b372038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.913335][T27439] RAX: ffffffffffffffda RBX: 00007fd47a7e5fa0 RCX: 00007fd47a58efc9 [ 794.913347][T27439] RDX: 0000000020058004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 794.913358][T27439] RBP: 00007fd47b372090 R08: 0000000000000000 R09: 0000000000000000 [ 794.913369][T27439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.913379][T27439] R13: 00007fd47a7e6038 R14: 00007fd47a7e5fa0 R15: 00007fffbb2d41f8 [ 794.913412][T27439] [ 795.243571][T27441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6173'. [ 795.252713][T27441] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6173'. [ 795.284206][T27441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6173'. [ 795.332435][T27447] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 795.369261][T27447] tipc: Enabled bearer , priority 10 [ 795.439866][T27447] bridge1: entered promiscuous mode [ 795.458797][T27447] bridge1: entered allmulticast mode [ 795.472287][T27447] team0: Port device bridge1 added [ 795.475750][T27456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6178'. [ 795.490880][T27458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6178'. [ 795.807919][T27479] siw: device registration error -23 [ 796.490144][ T5949] tipc: Node number set to 403830637 [ 797.029712][T27515] Bluetooth: MGMT ver 1.23 [ 797.033358][T27511] syzkaller1: entered promiscuous mode [ 797.040184][T27511] syzkaller1: entered allmulticast mode [ 797.085448][T27515] geneve2: entered promiscuous mode [ 797.122512][T27515] block nbd2: Unsupported socket: should be TCP or UNIX. [ 797.191598][T17300] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.214363][T17300] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.247476][T17300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.258139][T17300] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.271431][T17300] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 797.286769][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 797.310978][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 797.320402][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 797.330818][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 797.340386][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 797.416436][T27527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6202'. [ 797.427958][T27527] ip6t_srh: unknown srh match flags C404 [ 797.454640][T27529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6202'. [ 797.768998][T27543] syzkaller0: entered promiscuous mode [ 797.787617][T27543] syzkaller0: entered allmulticast mode [ 797.894401][T27549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6210'. [ 797.934981][T27549] lo: MTU too low for tipc bearer [ 797.940414][T27549] tipc: Enabling of bearer rejected, failed to enable media [ 798.049753][T27519] chnl_net:caif_netlink_parms(): no params data found [ 798.074716][T27554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6212'. [ 798.130499][T27552] netlink: 'syz.1.6211': attribute type 4 has an invalid length. [ 798.240719][T27560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6215'. [ 798.249640][T27560] netlink: 'syz.4.6215': attribute type 5 has an invalid length. [ 798.259547][T27560] netlink: 'syz.4.6215': attribute type 8 has an invalid length. [ 798.369120][T27560] geneve3: entered promiscuous mode [ 798.382743][T27560] geneve3: entered allmulticast mode [ 798.532386][T21401] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 798.542518][T21401] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 798.629512][T21401] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 798.749214][T27583] syzkaller0: entered promiscuous mode [ 798.754902][T27583] syzkaller0: entered allmulticast mode [ 798.762553][T21397] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 798.819378][T27519] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.837518][T27519] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.845470][T27519] bridge_slave_0: entered allmulticast mode [ 798.855371][T27519] bridge_slave_0: entered promiscuous mode [ 798.921404][T27600] netlink: 'syz.4.6226': attribute type 1 has an invalid length. [ 799.452711][T17300] Bluetooth: hci0: command tx timeout [ 800.867924][T27519] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.875325][T27519] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.882688][T27519] bridge_slave_1: entered allmulticast mode [ 800.889742][T27519] bridge_slave_1: entered promiscuous mode [ 800.901063][T27600] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 800.936840][T27608] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 801.086925][T27519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.156354][T27620] __nla_validate_parse: 2 callbacks suppressed [ 801.156373][T27620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6229'. [ 801.248563][T27519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.312197][T27630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6232'. [ 801.397991][T27519] team0: Port device team_slave_0 added [ 801.408458][T27519] team0: Port device team_slave_1 added [ 801.440742][T27635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6235'. [ 801.501457][T27639] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6236'. [ 801.511034][T27639] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6236'. [ 801.520272][T27639] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6236'. [ 801.530228][T17300] Bluetooth: hci0: command tx timeout [ 801.544720][T27519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.553072][T27519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.581192][T27519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.633605][T27519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.650026][T27519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.689104][T27519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.744717][T27637] netlink: 'syz.3.6237': attribute type 4 has an invalid length. [ 801.917155][T27519] hsr_slave_0: entered promiscuous mode [ 801.927392][T27519] hsr_slave_1: entered promiscuous mode [ 801.939721][T27519] debugfs: 'hsr0' already exists in 'hsr' [ 801.946325][T27519] Cannot create hsr debugfs directory [ 801.976182][T27645] bridge2: entered promiscuous mode [ 801.983849][T27645] bridge2: entered allmulticast mode [ 801.994222][T27647] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 802.001340][T27648] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 802.006116][T27645] team0: Port device bridge2 added [ 802.097474][T27652] bridge0: port 3(team0) entered blocking state [ 802.115231][T27652] bridge0: port 3(team0) entered disabled state [ 802.136732][T27652] team0: entered allmulticast mode [ 802.147971][T27656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6241'. [ 802.157903][T27652] team_slave_0: entered allmulticast mode [ 802.164148][T27652] team_slave_1: entered allmulticast mode [ 802.172388][T27652] team0: entered promiscuous mode [ 802.177540][T27652] team_slave_0: entered promiscuous mode [ 802.184333][T27652] team_slave_1: entered promiscuous mode [ 802.201790][T27652] bridge0: port 3(team0) entered blocking state [ 802.208288][T27652] bridge0: port 3(team0) entered forwarding state [ 802.224657][T27659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6241'. [ 802.286159][T27662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6241'. [ 802.335682][T27656] netlink: 'syz.3.6241': attribute type 10 has an invalid length. [ 802.356687][T27656] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 802.743626][T27685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6244'. [ 803.206361][T27674] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.214168][T27674] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.800463][T27674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.849395][T27674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.399622][T27685] hsr_slave_0: left promiscuous mode [ 804.413127][T27685] hsr_slave_1: left promiscuous mode [ 804.676251][T27710] netlink: 'syz.2.6254': attribute type 6 has an invalid length. [ 804.760454][T21401] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.779911][T21401] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.870246][T21401] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.944349][T21401] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.203929][T27727] netlink: 'syz.1.6260': attribute type 1 has an invalid length. [ 805.296722][T27727] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 805.309469][T27727] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 805.456961][T27747] bond0: (slave gretap1): making interface the new active one [ 805.466353][T27747] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 805.707147][T27755] can: request_module (can-proto-5) failed. [ 805.997159][T27762] ip6gre3: left allmulticast mode [ 806.029706][T27519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 806.055937][T27519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 806.092194][T27519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 806.104214][T27772] hsr_slave_0: left promiscuous mode [ 806.111210][T27772] hsr_slave_1: left promiscuous mode [ 806.133370][T27519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 806.254016][T27519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.292216][T27519] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.317524][T21397] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.325333][T21397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.343953][T14677] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.351236][T14677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.702776][T27519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.793418][T27519] veth0_vlan: entered promiscuous mode [ 806.831196][T27519] veth1_vlan: entered promiscuous mode [ 807.275820][T27519] veth0_macvtap: entered promiscuous mode [ 807.336636][T27519] veth1_macvtap: entered promiscuous mode [ 807.457803][T27519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.505171][T27519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.591924][ T6667] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.660649][ T6667] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.697170][ T6667] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.780177][ T6667] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.865246][T27808] __nla_validate_parse: 5 callbacks suppressed [ 807.865267][T27808] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6276'. [ 807.963665][ T6667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.000382][ T6667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.258025][T21401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.271053][T27821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6280'. [ 808.288301][T21401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.226760][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 810.238950][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 810.247772][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 810.256445][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 810.265038][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 811.321243][T27870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6293'. [ 811.615302][T27844] chnl_net:caif_netlink_parms(): no params data found [ 812.211582][T27844] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.219579][T27844] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.241085][T27844] bridge_slave_0: entered allmulticast mode [ 812.249094][T27844] bridge_slave_0: entered promiscuous mode [ 812.302374][T27887] bond1: option lp_interval: invalid value (0) [ 812.308674][T27887] bond1: option lp_interval: allowed values 1 - 2147483647 [ 812.318684][T27887] bond1 (unregistering): Released all slaves [ 812.334763][ T5842] Bluetooth: hci1: command tx timeout [ 812.397746][T27844] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.410989][T27844] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.440459][T27844] bridge_slave_1: entered allmulticast mode [ 812.462109][T27844] bridge_slave_1: entered promiscuous mode [ 812.537687][T14689] batadv1: left allmulticast mode [ 812.550421][T14689] batadv1: left promiscuous mode [ 812.557688][T14689] bridge0: port 1(batadv1) entered disabled state [ 812.669145][T27900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6301'. [ 812.703775][T27901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6301'. [ 813.284455][T14689] bond2 (unregistering): (slave gretap1): Releasing active interface [ 813.452660][T27915] FAULT_INJECTION: forcing a failure. [ 813.452660][T27915] name failslab, interval 1, probability 0, space 0, times 0 [ 813.465515][T27915] CPU: 0 UID: 0 PID: 27915 Comm: syz.4.6306 Not tainted syzkaller #0 PREEMPT(full) [ 813.465540][T27915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 813.465551][T27915] Call Trace: [ 813.465560][T27915] [ 813.465570][T27915] dump_stack_lvl+0x189/0x250 [ 813.465594][T27915] ? __pfx____ratelimit+0x10/0x10 [ 813.465615][T27915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.465632][T27915] ? __pfx__printk+0x10/0x10 [ 813.465662][T27915] should_fail_ex+0x414/0x560 [ 813.465683][T27915] should_failslab+0xa8/0x100 [ 813.465706][T27915] kmem_cache_alloc_noprof+0x74/0x6e0 [ 813.465724][T27915] ? skb_clone+0x212/0x3a0 [ 813.465756][T27915] skb_clone+0x212/0x3a0 [ 813.465777][T27915] bpf_clone_redirect+0xad/0x3d0 [ 813.465798][T27915] ? ktime_get+0x1d2/0x200 [ 813.465819][T27915] ? bpf_test_run+0x197/0x7b0 [ 813.465835][T27915] bpf_prog_c23103f528d5a825+0x22/0x2a [ 813.465852][T27915] bpf_test_run+0x318/0x7b0 [ 813.465888][T27915] ? __pfx_bpf_test_run+0x10/0x10 [ 813.465929][T27915] ? convert___skb_to_skb+0x3d/0x590 [ 813.465966][T27915] bpf_prog_test_run_skb+0xb4e/0x1550 [ 813.465991][T27915] ? __fget_files+0x2a/0x420 [ 813.466015][T27915] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 813.466033][T27915] bpf_prog_test_run+0x2c7/0x340 [ 813.466058][T27915] __sys_bpf+0x562/0x860 [ 813.466085][T27915] ? __pfx___sys_bpf+0x10/0x10 [ 813.466120][T27915] ? ksys_write+0x22a/0x250 [ 813.466141][T27915] ? __pfx_ksys_write+0x10/0x10 [ 813.466164][T27915] __x64_sys_bpf+0x7c/0x90 [ 813.466184][T27915] do_syscall_64+0xfa/0xfa0 [ 813.466205][T27915] ? lockdep_hardirqs_on+0x9c/0x150 [ 813.466225][T27915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.466241][T27915] ? clear_bhb_loop+0x60/0xb0 [ 813.466261][T27915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.466277][T27915] RIP: 0033:0x7fcb0e78efc9 [ 813.466293][T27915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.466307][T27915] RSP: 002b:00007fcb0f66b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 813.466327][T27915] RAX: ffffffffffffffda RBX: 00007fcb0e9e5fa0 RCX: 00007fcb0e78efc9 [ 813.466339][T27915] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 813.466350][T27915] RBP: 00007fcb0f66b090 R08: 0000000000000000 R09: 0000000000000000 [ 813.466360][T27915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.466370][T27915] R13: 00007fcb0e9e6038 R14: 00007fcb0e9e5fa0 R15: 00007ffc9e366d08 [ 813.466400][T27915] [ 813.753458][T14689] dvmrp1 (unregistering): left allmulticast mode [ 813.977045][T14689] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 813.988209][T14689] bond0 (unregistering): Released all slaves [ 814.176940][T14689] bond1 (unregistering): Released all slaves [ 814.199332][T14689] bond2 (unregistering): Released all slaves [ 814.328408][T14689] bond3 (unregistering): Released all slaves [ 814.362739][T27844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.394540][T27844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.411261][ T5842] Bluetooth: hci1: command tx timeout [ 814.566025][T14689] tipc: Disabling bearer [ 814.586972][T14689] tipc: Left network mode [ 814.604172][T27931] FAULT_INJECTION: forcing a failure. [ 814.604172][T27931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.644741][T27844] team0: Port device team_slave_0 added [ 814.653653][T27931] CPU: 1 UID: 0 PID: 27931 Comm: syz.1.6308 Not tainted syzkaller #0 PREEMPT(full) [ 814.653689][T27931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 814.653700][T27931] Call Trace: [ 814.653708][T27931] [ 814.653717][T27931] dump_stack_lvl+0x189/0x250 [ 814.653752][T27931] ? __pfx____ratelimit+0x10/0x10 [ 814.653774][T27931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 814.653793][T27931] ? __pfx__printk+0x10/0x10 [ 814.653824][T27931] should_fail_ex+0x414/0x560 [ 814.653846][T27931] _copy_to_user+0x31/0xb0 [ 814.653872][T27931] simple_read_from_buffer+0xe1/0x170 [ 814.653899][T27931] proc_fail_nth_read+0x1b3/0x220 [ 814.653920][T27931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.653942][T27931] ? rw_verify_area+0x2a6/0x4d0 [ 814.653959][T27931] ? __lock_acquire+0xab9/0xd20 [ 814.653979][T27931] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 814.653996][T27931] vfs_read+0x200/0xa30 [ 814.654015][T27931] ? fdget_pos+0x247/0x320 [ 814.654040][T27931] ? __pfx___mutex_lock+0x10/0x10 [ 814.654064][T27931] ? __pfx_vfs_read+0x10/0x10 [ 814.654084][T27931] ? __fget_files+0x2a/0x420 [ 814.654110][T27931] ? __fget_files+0x3a0/0x420 [ 814.654129][T27931] ? __fget_files+0x2a/0x420 [ 814.654159][T27931] ksys_read+0x145/0x250 [ 814.654181][T27931] ? __pfx_ksys_read+0x10/0x10 [ 814.654203][T27931] ? do_syscall_64+0xbe/0xfa0 [ 814.654231][T27931] do_syscall_64+0xfa/0xfa0 [ 814.654251][T27931] ? lockdep_hardirqs_on+0x9c/0x150 [ 814.654274][T27931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.654291][T27931] ? clear_bhb_loop+0x60/0xb0 [ 814.654313][T27931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.654330][T27931] RIP: 0033:0x7f9c9538d9dc [ 814.654347][T27931] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 814.654362][T27931] RSP: 002b:00007f9c96279030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 814.654381][T27931] RAX: ffffffffffffffda RBX: 00007f9c955e6090 RCX: 00007f9c9538d9dc [ 814.654394][T27931] RDX: 000000000000000f RSI: 00007f9c962790a0 RDI: 0000000000000004 [ 814.654405][T27931] RBP: 00007f9c96279090 R08: 0000000000000000 R09: 0000000000000000 [ 814.654417][T27931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 814.654428][T27931] R13: 00007f9c955e6128 R14: 00007f9c955e6090 R15: 00007ffe39f22318 [ 814.654459][T27931] [ 814.657607][T14689] IPVS: stopping backup sync thread 22169 ... [ 814.793393][T27844] team0: Port device team_slave_1 added [ 814.963680][T27844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.970997][T27844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 814.998198][T27844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.095651][T27844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.130785][T27844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.167762][T27844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 815.271331][T27943] netlink: 'syz.0.6314': attribute type 20 has an invalid length. [ 815.335472][T27844] hsr_slave_0: entered promiscuous mode [ 815.344189][T27844] hsr_slave_1: entered promiscuous mode [ 815.351953][T27844] debugfs: 'hsr0' already exists in 'hsr' [ 815.358152][T27844] Cannot create hsr debugfs directory [ 816.494746][ T5842] Bluetooth: hci1: command tx timeout [ 816.815840][T27953] syzkaller0: entered promiscuous mode [ 816.821576][T27953] syzkaller0: entered allmulticast mode [ 817.052974][T27969] netlink: 'syz.2.6322': attribute type 13 has an invalid length. [ 817.077548][T27969] netlink: 'syz.2.6322': attribute type 17 has an invalid length. [ 817.179813][T27977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6322'. [ 817.216172][T27969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 817.259467][T21400] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x6 [ 817.325189][T27988] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6326'. [ 817.458432][T27969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 817.607580][T14689] IPVS: stop unused estimator thread 0... [ 818.275059][T27844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 818.313480][T27844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 818.341464][T27844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 818.355489][T27844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 818.570295][ T5842] Bluetooth: hci1: command tx timeout [ 818.691078][T27844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.782843][T27844] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.822100][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.829306][ T6667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.891717][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.898888][ T6667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.996992][T28047] wg1: entered promiscuous mode [ 819.002022][T28047] wg1: entered allmulticast mode [ 819.524159][T28063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6349'. [ 819.593439][T27844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.640890][T28068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6349'. [ 819.722207][T27844] veth0_vlan: entered promiscuous mode [ 819.761570][T27844] veth1_vlan: entered promiscuous mode [ 819.842866][T27844] veth0_macvtap: entered promiscuous mode [ 820.133287][T27844] veth1_macvtap: entered promiscuous mode [ 820.195419][T27844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.225277][T27844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.272020][T14677] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.282944][T14677] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.345163][T14677] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.364214][T14677] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.920749][T21400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.928725][T21400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.036136][T14677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.051713][T14677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.265807][T28083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6355'. [ 821.345879][T28110] bond1: option arp_all_targets: invalid value (3) [ 821.364621][T28110] bond1 (unregistering): Released all slaves [ 821.683616][T28122] netlink: 'syz.2.6364': attribute type 1 has an invalid length. [ 822.028506][T28140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6369'. [ 822.486756][T28146] tipc: MTU too low for tipc bearer [ 822.713873][T28149] netlink: 'syz.1.6370': attribute type 10 has an invalid length. [ 822.822778][T28149] netlink: 'syz.1.6370': attribute type 10 has an invalid length. [ 822.850415][T28149] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6370'. [ 822.910301][T28149] batadv0: entered promiscuous mode [ 822.922346][T28149] batadv0: entered allmulticast mode [ 822.941386][T28149] bridge0: port 3(batadv0) entered blocking state [ 822.958269][T28149] bridge0: port 3(batadv0) entered disabled state [ 823.087490][T28159] batadv_slave_1: entered promiscuous mode [ 823.109130][T28160] wg1: entered promiscuous mode [ 823.116547][T28160] wg1: entered allmulticast mode [ 823.132171][T28159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6373'. [ 823.158855][T28159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.249795][T28159] batadv_slave_1 (unregistering): left promiscuous mode [ 823.262868][T28159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.472196][T14677] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 823.481583][T14677] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 824.169073][T28189] xt_CT: No such helper "syz0" [ 824.233204][T28194] Unsupported ieee802154 address type: 0 [ 826.172024][T28266] netlink: 'syz.0.6408': attribute type 21 has an invalid length. [ 826.199011][T28266] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6408'. [ 826.232364][T28266] netlink: 'syz.0.6408': attribute type 4 has an invalid length. [ 826.296233][T28266] netlink: 'syz.0.6408': attribute type 5 has an invalid length. [ 826.315847][T28266] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6408'. [ 827.045176][T28285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6412'. [ 827.146577][T28288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6414'. [ 827.594957][T28303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6419'. [ 828.089134][T28321] Cannot find del_set index 2 as target [ 828.452017][T28331] syzkaller0: entered promiscuous mode [ 828.457531][T28331] syzkaller0: entered allmulticast mode [ 831.121021][T28368] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6440'. [ 831.162345][T28370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6439'. [ 831.171498][T28370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6439'. [ 831.209807][T28373] syzkaller0: entered promiscuous mode [ 831.218153][T28373] syzkaller0: entered allmulticast mode [ 831.314635][T28378] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 831.466820][T28386] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 831.467172][ T9185] IPVS: starting estimator thread 0... [ 831.515877][T28386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6443'. [ 831.581773][T28391] IPVS: using max 30 ests per chain, 72000 per kthread [ 833.320425][T28405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6446'. [ 833.340304][T28405] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6446'. [ 834.162787][T28439] netlink: 'syz.3.6457': attribute type 21 has an invalid length. [ 834.249601][T28439] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6457'. [ 834.533586][T28454] netlink: 'syz.3.6459': attribute type 13 has an invalid length. [ 834.672317][T28454] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.680086][T28454] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.836742][T28454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.856963][T28454] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.114006][T21402] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.115076][T28478] tipc: Failed to remove unknown binding: 66,1,1/0:121702710/121702712 [ 835.133929][T21402] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.151289][T28478] tipc: Failed to remove unknown binding: 66,1,1/0:121702710/121702712 [ 835.166490][T28478] tipc: Failed to remove unknown binding: 66,1,1/0:121702710/121702712 [ 835.231441][T21402] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.262674][T21402] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.517859][T28494] netlink: 'syz.1.6470': attribute type 25 has an invalid length. [ 835.550616][T28494] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6470'. [ 835.764363][T28488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6470'. [ 836.633150][T28523] vlan0: entered allmulticast mode [ 836.638410][T28523] veth0_vlan: entered allmulticast mode [ 836.792835][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6482'. [ 836.874457][T28532] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6481'. [ 837.055227][T28522] netlink: 1372 bytes leftover after parsing attributes in process `syz.1.6480'. [ 837.231564][T28543] Bluetooth: MGMT ver 1.23 [ 837.364192][T28551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6486'. [ 837.913169][T28572] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6488'. [ 837.949921][T28572] netlink: 35 bytes leftover after parsing attributes in process `syz.2.6488'. [ 838.006703][T28572] netlink: 'syz.2.6488': attribute type 6 has an invalid length. [ 838.064923][T28572] netlink: 35 bytes leftover after parsing attributes in process `syz.2.6488'. [ 838.284764][T28587] netlink: 'syz.0.6494': attribute type 6 has an invalid length. [ 838.336559][T28588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6494'. [ 838.351713][T28588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6494'. [ 838.370883][T28588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6494'. [ 838.610808][T28599] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 839.056263][T28614] openvswitch: netlink: Key type 31 is not supported [ 839.088238][T28613] pim6reg: entered allmulticast mode [ 839.337298][T28625] netlink: 'syz.1.6505': attribute type 13 has an invalid length. [ 839.355775][T28625] netlink: 'syz.1.6505': attribute type 17 has an invalid length. [ 839.626933][T28636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.678807][T28625] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.756808][T28625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 839.778185][T28611] pim6reg: left allmulticast mode [ 840.493551][T28663] netlink: 'syz.3.6517': attribute type 11 has an invalid length. [ 842.303583][T28736] netlink: 'syz.2.6537': attribute type 9 has an invalid length. [ 842.486795][T21402] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.511870][T21402] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.549894][T21402] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 842.581586][T28732] can: request_module (can-proto-0) failed. [ 842.605446][T21402] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 843.166744][T28771] netlink: 'syz.4.6548': attribute type 1 has an invalid length. [ 843.176518][T28773] __nla_validate_parse: 19 callbacks suppressed [ 843.176535][T28773] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6549'. [ 843.532219][T28780] veth1_to_bond: entered promiscuous mode [ 843.546859][T28793] netlink: 'syz.4.6552': attribute type 1 has an invalid length. [ 843.619062][T28766] netlink: 'syz.0.6545': attribute type 12 has an invalid length. [ 843.627624][T28766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6545'. [ 845.069328][T28838] netlink: 'syz.1.6566': attribute type 9 has an invalid length. [ 845.250683][T28839] tipc: Enabling of bearer rejected, already enabled [ 845.417832][T28854] netlink: 'syz.2.6572': attribute type 6 has an invalid length. [ 845.476308][T28858] netlink: 'syz.1.6573': attribute type 39 has an invalid length. [ 845.735495][T28867] tipc: Failed to remove unknown binding: 66,1,1/403830637:4205230958/4205230960 [ 845.763132][T28869] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 845.776708][T28867] tipc: Failed to remove unknown binding: 66,1,1/403830637:4205230958/4205230960 [ 845.794618][T28867] tipc: Failed to remove unknown binding: 66,1,1/403830637:4205230958/4205230960 [ 846.947295][T28904] bridge_slave_0: left allmulticast mode [ 846.993689][T28904] bridge_slave_0: left promiscuous mode [ 847.024057][T28904] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.074472][T28904] bridge_slave_1: left allmulticast mode [ 847.120696][T28904] bridge_slave_1: left promiscuous mode [ 847.126532][T28904] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.211088][T28904] bond0: (slave bond_slave_0): Releasing backup interface [ 847.239274][T28904] bond0: (slave bond_slave_1): Releasing backup interface [ 847.339844][T28904] team0: Port device team_slave_0 removed [ 847.386655][T28904] team0: Port device team_slave_1 removed [ 847.421872][T28904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.449639][T28904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.484177][T28929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6584'. [ 847.549096][T28933] netlink: 'syz.3.6594': attribute type 3 has an invalid length. [ 847.552134][T28904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.598395][T28904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.627262][T28904] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 847.678249][T28905] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 847.727469][T28938] Unsupported ieee802154 address type: 0 [ 847.863046][T28945] netlink: 'syz.2.6598': attribute type 16 has an invalid length. [ 847.878158][T28947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 847.878794][T28945] netlink: 'syz.2.6598': attribute type 17 has an invalid length. [ 847.940918][T28942] veth1_to_bond: entered allmulticast mode [ 847.968924][T28942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6597'. [ 848.099637][T28945] bridge0: port 3(team0) entered disabled state [ 848.106444][T28945] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.115609][T28945] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.272937][T28945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.644882][T28942] veth1_to_bond (unregistering): left allmulticast mode [ 848.664131][T21400] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.673807][T21400] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.687255][T21400] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.737075][T21400] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.809200][T28958] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6600'. [ 848.868361][T28964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6600'. [ 849.382345][T28994] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6609'. [ 852.501773][T29008] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6613'. [ 852.594126][T29017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6616'. [ 852.682252][T29017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6616'. [ 852.773000][T14677] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.786885][T14677] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.816701][T14677] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 852.849722][T29038] sctp: [Deprecated]: syz.1.6620 (pid 29038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 852.849722][T29038] Use struct sctp_sack_info instead [ 852.927242][T14677] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 853.072900][T29042] netlink: 'syz.4.6621': attribute type 1 has an invalid length. [ 853.436232][T29047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 853.475137][T29047] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6622'. [ 853.644402][T29042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 853.691138][T29056] [ 853.693503][T29056] ====================================================== [ 853.700520][T29056] WARNING: possible circular locking dependency detected [ 853.707543][T29056] syzkaller #0 Not tainted [ 853.711946][T29056] ------------------------------------------------------ [ 853.718942][T29056] syz.3.6623/29056 is trying to acquire lock: [ 853.724986][T29056] ffffffff8f63ac58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 853.734121][T29056] [ 853.734121][T29056] but task is already holding lock: [ 853.741472][T29056] ffff8880568f6370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 853.750709][T29056] [ 853.750709][T29056] which lock already depends on the new lock. [ 853.750709][T29056] [ 853.761097][T29056] [ 853.761097][T29056] the existing dependency chain (in reverse order) is: [ 853.770098][T29056] [ 853.770098][T29056] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 853.778258][T29056] lock_acquire+0x120/0x360 [ 853.783271][T29056] _raw_spin_lock_bh+0x36/0x50 [ 853.788543][T29056] nr_rt_device_down+0x12a/0x720 [ 853.793986][T29056] nr_device_event+0x137/0x150 [ 853.799257][T29056] notifier_call_chain+0x1b6/0x3e0 [ 853.804882][T29056] __dev_notify_flags+0x18d/0x2e0 [ 853.810416][T29056] netif_change_flags+0xe8/0x1a0 [ 853.815862][T29056] dev_change_flags+0x130/0x260 [ 853.821216][T29056] dev_ioctl+0x7b4/0x1150 [ 853.826049][T29056] sock_do_ioctl+0x22c/0x300 [ 853.831148][T29056] sock_ioctl+0x576/0x790 [ 853.835989][T29056] __se_sys_ioctl+0xfc/0x170 [ 853.841098][T29056] do_syscall_64+0xfa/0xfa0 [ 853.846114][T29056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.852520][T29056] [ 853.852520][T29056] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 853.860329][T29056] lock_acquire+0x120/0x360 [ 853.865349][T29056] _raw_spin_lock_bh+0x36/0x50 [ 853.870622][T29056] nr_rt_device_down+0xa9/0x720 [ 853.875987][T29056] nr_device_event+0x137/0x150 [ 853.881258][T29056] notifier_call_chain+0x1b6/0x3e0 [ 853.886881][T29056] __dev_notify_flags+0x18d/0x2e0 [ 853.892414][T29056] netif_change_flags+0xe8/0x1a0 [ 853.897862][T29056] dev_change_flags+0x130/0x260 [ 853.903218][T29056] dev_ioctl+0x7b4/0x1150 [ 853.908057][T29056] sock_do_ioctl+0x22c/0x300 [ 853.913158][T29056] sock_ioctl+0x576/0x790 [ 853.917996][T29056] __se_sys_ioctl+0xfc/0x170 [ 853.923094][T29056] do_syscall_64+0xfa/0xfa0 [ 853.928543][T29056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.935029][T29056] [ 853.935029][T29056] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 853.942926][T29056] validate_chain+0xb9b/0x2140 [ 853.948239][T29056] __lock_acquire+0xab9/0xd20 [ 853.953427][T29056] lock_acquire+0x120/0x360 [ 853.958454][T29056] _raw_spin_lock_bh+0x36/0x50 [ 853.963724][T29056] nr_rt_ioctl+0x390/0xd50 [ 853.968653][T29056] sock_do_ioctl+0xdc/0x300 [ 853.974099][T29056] sock_ioctl+0x576/0x790 [ 853.978938][T29056] __se_sys_ioctl+0xfc/0x170 [ 853.984033][T29056] do_syscall_64+0xfa/0xfa0 [ 853.989074][T29056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.995472][T29056] [ 853.995472][T29056] other info that might help us debug this: [ 853.995472][T29056] [ 854.005711][T29056] Chain exists of: [ 854.005711][T29056] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 854.005711][T29056] [ 854.019520][T29056] Possible unsafe locking scenario: [ 854.019520][T29056] [ 854.027063][T29056] CPU0 CPU1 [ 854.032449][T29056] ---- ---- [ 854.037795][T29056] lock(&nr_node->node_lock); [ 854.042559][T29056] lock(nr_node_list_lock); [ 854.049664][T29056] lock(&nr_node->node_lock); [ 854.056949][T29056] lock(nr_neigh_list_lock); [ 854.061635][T29056] [ 854.061635][T29056] *** DEADLOCK *** [ 854.061635][T29056] [ 854.069774][T29056] 2 locks held by syz.3.6623/29056: [ 854.074956][T29056] #0: ffffffff8f63acb8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 854.084611][T29056] #1: ffff8880568f6370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 854.094265][T29056] [ 854.094265][T29056] stack backtrace: [ 854.100176][T29056] CPU: 0 UID: 0 PID: 29056 Comm: syz.3.6623 Not tainted syzkaller #0 PREEMPT(full) [ 854.100195][T29056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 854.100205][T29056] Call Trace: [ 854.100212][T29056] [ 854.100218][T29056] dump_stack_lvl+0x189/0x250 [ 854.100238][T29056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 854.100253][T29056] ? __pfx__printk+0x10/0x10 [ 854.100267][T29056] ? stack_trace_save+0x9c/0xe0 [ 854.100286][T29056] print_circular_bug+0x2ee/0x310 [ 854.100302][T29056] check_noncircular+0x134/0x160 [ 854.100325][T29056] validate_chain+0xb9b/0x2140 [ 854.100354][T29056] __lock_acquire+0xab9/0xd20 [ 854.100374][T29056] ? nr_rt_ioctl+0x390/0xd50 [ 854.100390][T29056] lock_acquire+0x120/0x360 [ 854.100408][T29056] ? nr_rt_ioctl+0x390/0xd50 [ 854.100426][T29056] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 854.100442][T29056] ? nr_rt_ioctl+0x390/0xd50 [ 854.100458][T29056] _raw_spin_lock_bh+0x36/0x50 [ 854.100475][T29056] ? nr_rt_ioctl+0x390/0xd50 [ 854.100491][T29056] nr_rt_ioctl+0x390/0xd50 [ 854.100512][T29056] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 854.100526][T29056] ? lockdep_hardirqs_on+0x9c/0x150 [ 854.100548][T29056] ? apparmor_capable+0x137/0x1b0 [ 854.100571][T29056] ? capable+0x89/0xe0 [ 854.100590][T29056] ? nr_ioctl+0x1b1/0x3b0 [ 854.100604][T29056] sock_do_ioctl+0xdc/0x300 [ 854.100630][T29056] ? __pfx_sock_do_ioctl+0x10/0x10 [ 854.100654][T29056] sock_ioctl+0x576/0x790 [ 854.100672][T29056] ? __pfx_sock_ioctl+0x10/0x10 [ 854.100691][T29056] ? __fget_files+0x3a0/0x420 [ 854.100708][T29056] ? __fget_files+0x2a/0x420 [ 854.100726][T29056] ? bpf_lsm_file_ioctl+0x9/0x20 [ 854.100746][T29056] ? __pfx_sock_ioctl+0x10/0x10 [ 854.100763][T29056] __se_sys_ioctl+0xfc/0x170 [ 854.100777][T29056] do_syscall_64+0xfa/0xfa0 [ 854.100795][T29056] ? lockdep_hardirqs_on+0x9c/0x150 [ 854.100813][T29056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.100827][T29056] ? clear_bhb_loop+0x60/0xb0 [ 854.100843][T29056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.100857][T29056] RIP: 0033:0x7f86e358efc9 [ 854.100870][T29056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.100885][T29056] RSP: 002b:00007f86e449a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 854.100900][T29056] RAX: ffffffffffffffda RBX: 00007f86e37e6180 RCX: 00007f86e358efc9 [ 854.100912][T29056] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000006 [ 854.100921][T29056] RBP: 00007f86e3611f91 R08: 0000000000000000 R09: 0000000000000000 [ 854.100931][T29056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.100940][T29056] R13: 00007f86e37e6218 R14: 00007f86e37e6180 R15: 00007ffe003b0a28 [ 854.100957][T29056] [ 854.377777][T29059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6625'. [ 854.428450][T29050] caif:caif_disconnect_client(): nothing to disconnect