last executing test programs: 7m22.434807878s ago: executing program 4 (id=3725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x38, 0x18, 0x67, 0x0, 0x2, 0x0, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xd}, {[@generic={0x44, 0x4, "97fd"}]}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) 7m22.116117136s ago: executing program 4 (id=3727): syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @empty}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044045}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000009000000080000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f164eb9300000000000000000000000000000000000000067054cd0761b7efc2dd3339217381e31fb70ef29d104b6775bf7925d33fb6f6491a72c7bf520e1485a6d6d8b76715b3f69a8e11bc9377b81befb222ebbfc2243d6504ca5fae29df576b9bcd4d253e4c2ef743843587379897f7f57f12da4c5a301fa25e722b31c33da10ec20f05613d951d5f13590eda17663d9e4873d32663c3b6fcf57f6576d5b95ab9c3bbde973d098e88f34fb56cc000000000"], 0x50) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) 7m21.64837509s ago: executing program 4 (id=3730): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) (async, rerun: 64) r2 = socket(0x2b, 0x80801, 0x1) (rerun: 64) bind$bt_hci(r2, 0x0, 0x0) (async) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)={0x6, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000940)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x5, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r1}}}, @hopopts={{0x18, 0x29, 0x36, {0x8}}}], 0x40}}], 0x1, 0x10) 7m21.466950523s ago: executing program 4 (id=3732): r0 = socket(0x25, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f000000a640)={0x0, 0x0, &(0x7f000000a600)={&(0x7f000000a580)=ANY=[@ANYBLOB="440000000406050000000000000000000000000a0900020073797a1700000000050001000700000005000100070000000900020073797a3000000000050001"], 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x8080) 7m21.346716385s ago: executing program 4 (id=3733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x3, 0x2, 0xf, 0x6, 0x7, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0x3, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000001ed24db7c33f5a0de3c002078704c9bba98232300"/42], 0x14}}, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x7, 0x3, 0x8, 0x6, 0x2, 0x2, 0x80, 0x8, 0x7, 0x15, 0x1d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 7m20.765338162s ago: executing program 4 (id=3736): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000005940)=[{{&(0x7f0000000200)=@caif=@util, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000300)=""/93}, {&(0x7f0000000380)=""/83}, {&(0x7f00000004c0)=""/219}, {&(0x7f0000002840)=""/4096}], 0x0, &(0x7f0000000640)=""/196}, 0x48e}, {{&(0x7f0000000740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x0, &(0x7f0000000180)=[{&(0x7f00000007c0)=""/146}]}, 0x2613}, {{&(0x7f0000000880)=@can, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)=""/28}, {&(0x7f0000000900)}], 0x0, &(0x7f0000000980)=""/99}, 0x7}, {{&(0x7f0000000a00)=@sco, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a80)=""/26}, {&(0x7f0000000ac0)=""/52}, {&(0x7f0000000b00)=""/9}, {&(0x7f0000000b40)=""/237}, {&(0x7f0000000c80)=""/98}, {&(0x7f0000000d00)=""/207}, {&(0x7f0000000e00)=""/182}], 0x0, &(0x7f0000000f40)=""/147}}, {{&(0x7f0000001000)=@l2tp, 0x0, &(0x7f0000001300)=[{&(0x7f0000003840)=""/4096}, {&(0x7f0000001080)=""/213}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/59}, {&(0x7f0000001200)=""/108}, {&(0x7f0000001280)=""/110}], 0x0, &(0x7f0000001380)=""/134}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001440)=""/40}, {&(0x7f0000001480)=""/42}, {&(0x7f00000014c0)=""/10}, {&(0x7f0000001500)=""/11}, {&(0x7f0000004840)=""/4096}, {&(0x7f0000001540)=""/252}], 0x0, &(0x7f00000016c0)=""/121}, 0x9}, {{&(0x7f0000001740)=@can, 0x0, &(0x7f0000005900)=[{&(0x7f00000017c0)=""/20}, {&(0x7f0000001800)=""/34}, {&(0x7f0000005840)=""/132}]}, 0x1}], 0x2, 0x10100, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 7m5.56669092s ago: executing program 32 (id=3736): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10, &(0x7f0000001380)}}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000005940)=[{{&(0x7f0000000200)=@caif=@util, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000300)=""/93}, {&(0x7f0000000380)=""/83}, {&(0x7f00000004c0)=""/219}, {&(0x7f0000002840)=""/4096}], 0x0, &(0x7f0000000640)=""/196}, 0x48e}, {{&(0x7f0000000740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x0, &(0x7f0000000180)=[{&(0x7f00000007c0)=""/146}]}, 0x2613}, {{&(0x7f0000000880)=@can, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)=""/28}, {&(0x7f0000000900)}], 0x0, &(0x7f0000000980)=""/99}, 0x7}, {{&(0x7f0000000a00)=@sco, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a80)=""/26}, {&(0x7f0000000ac0)=""/52}, {&(0x7f0000000b00)=""/9}, {&(0x7f0000000b40)=""/237}, {&(0x7f0000000c80)=""/98}, {&(0x7f0000000d00)=""/207}, {&(0x7f0000000e00)=""/182}], 0x0, &(0x7f0000000f40)=""/147}}, {{&(0x7f0000001000)=@l2tp, 0x0, &(0x7f0000001300)=[{&(0x7f0000003840)=""/4096}, {&(0x7f0000001080)=""/213}, {&(0x7f0000001180)}, {&(0x7f00000011c0)=""/59}, {&(0x7f0000001200)=""/108}, {&(0x7f0000001280)=""/110}], 0x0, &(0x7f0000001380)=""/134}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001440)=""/40}, {&(0x7f0000001480)=""/42}, {&(0x7f00000014c0)=""/10}, {&(0x7f0000001500)=""/11}, {&(0x7f0000004840)=""/4096}, {&(0x7f0000001540)=""/252}], 0x0, &(0x7f00000016c0)=""/121}, 0x9}, {{&(0x7f0000001740)=@can, 0x0, &(0x7f0000005900)=[{&(0x7f00000017c0)=""/20}, {&(0x7f0000001800)=""/34}, {&(0x7f0000005840)=""/132}]}, 0x1}], 0x2, 0x10100, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 8.801080597s ago: executing program 5 (id=6651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x54a201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000640)={0xb0000013}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001f0affffffff00000000000002000009080003401300000a0900010073797a30000000000c0006"], 0x70}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xa, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000900000000000000020000007ba130000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) close(r3) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000840)={0x1f, 0x7, @any, 0x8d, 0x2}, 0xe) shutdown(r2, 0x0) close(r1) splice(r4, &(0x7f00000006c0), r5, &(0x7f0000000700)=0x200, 0x180, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8937, &(0x7f00000002c0)={'bond0\x00', @random="d8b30100"}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000680)={r7}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000740)=""/169, &(0x7f0000000800)=0xa9) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c0, 0x2e0, 0x420, 0x2e0, 0x0, 0x2e0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x3, 0x1}, {0x1, 0x3, 0x7}}}}, {{@ipv6={@mcast1, @local, [0xffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [0xffffffff], [], 'veth0_to_team\x00', 'xfrm0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x88, 0x2, 0x1}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffff], 0x10}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYRES32=r8]) 8.510077648s ago: executing program 5 (id=6656): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000540)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000580)="703056f6cfeca86905c6ba93e9a3d5b240afc18215b507372678594a853fa28e4b0b8f9434f7e933cf7ced20e74700569f93eff92c96dbe0ffeddf939cd1672ae8904c3152d9c4a459ffab2657b6a91b753c1a6696bb21ed64246d380a266f87e31cd59f9024", 0x66}], 0x1}}], 0x2, 0x48010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0xffffffff}, [@exit]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000001300)=""/156, 0x0, 0xa}, 0x94) 8.305278344s ago: executing program 5 (id=6660): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x2, 0x401}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRESDEC, @ANYRES64], 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649acdb042d2643fcbb2c5a57df67d544af6e8dafe09dadfda9d1ad737"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0xffffffffffffff8a, 0x5, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x88}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) recvmmsg(r2, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001400)=""/226, 0xe2}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000640), &(0x7f0000000680)=0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780050015000a00000008001240"], 0x60}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/109, 0x6d}], 0x2}, 0x40000040) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r8, 0x800, 0x7ff, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffe9, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000041401002dbd7000ffdbdf25080001000100000008000100020000000800010000000000080001310100000008000100010000000800010000000000080001000200000008000100010000000800010000000000"], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 7.318084381s ago: executing program 0 (id=6671): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c00040600002c0000bf852c8986626691b01b2d44e4ce2d715f282829"], 0xe0}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7.311586206s ago: executing program 5 (id=6673): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.160325681s ago: executing program 5 (id=6675): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x3}, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x21, &(0x7f0000000240)=""/153}, 0x90) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a00010026bd70000000000002002000", @ANYRES32=0x0, @ANYBLOB="0000000008000200032d00903a0001bffc5d7500"/29], 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 7.097255521s ago: executing program 5 (id=6677): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x8044) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040fe2d959acbc0413a1f848110000005e140602000000000e000a6ad6561ec5ec7b67000f00000002800000121f", 0x36}], 0x1}, 0x8000) 7.032545816s ago: executing program 0 (id=6678): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x1b4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x31}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x52}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x49, 0x3, "12a9794b36b0afd0cd1df0effea195d5b62c33537bcd31fb7ea50f64da1a9410793857e7195f9ab5fb4df0321ae1a8c45e086fe88b64bdbe7276d46c3cf1b1536a294756d4"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff7}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "d6e03fd7987686490b61702dcbf6a0453a21f98d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x12, 0x3, "6116d3b2ad094a1f24d00f694c04"}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x83}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5d6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x73}]}]}, 0x1b4}}, 0x4008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@local}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket(0xa, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) listen(r3, 0x100) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18, 0x48d5}, 0x8050) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x800, @loopback={0xff000000}, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x70001}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x80) 6.98014886s ago: executing program 2 (id=6679): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x3c, &(0x7f0000000040)=[@in={0x2, 0x80, @remote}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x7}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)={r1, 0x0, 0xfd, "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"}, 0x105) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r2 = socket$netlink(0x10, 0x3, 0x12) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x281}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, 0x0, 0x300, 0x70bd3b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x804) r3 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001ffffeff4f520116fd886d99", @ANYRES32=0x0, @ANYBLOB="00000000003f00001c0012800b00010067726574617000000c00028008000700ac1414220800040000100000"], 0x44}}, 0x4000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x3c, &(0x7f0000000040)=[@in={0x2, 0x80, @remote}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x7}]}, &(0x7f00000002c0)=0x10) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)={r1, 0x0, 0xfd, "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"}, 0x105) (async) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x14}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000006c0)="9a", 0x1}], 0x1}}], 0x2, 0x4000840) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) unshare(0x6a040000) (async) socket$netlink(0x10, 0x3, 0x12) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x281}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, 0x0, 0x300, 0x70bd3b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x804) (async) socket$netlink(0x10, 0x3, 0xe) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010001ffffeff4f520116fd886d99", @ANYRES32=0x0, @ANYBLOB="00000000003f00001c0012800b00010067726574617000000c00028008000700ac1414220800040000100000"], 0x44}}, 0x4000) (async) 6.817502975s ago: executing program 0 (id=6682): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="15cdf0000085890000000000000003000000", 0x12) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) (async) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x1000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x50, &(0x7f0000000040), 0x4) (async) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x190, r1, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, '/.]-'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'nfc\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '!'}, @NFC_ATTR_FIRMWARE_NAME={0x129, 0x14, 'U\xb1\xed\xa0\xee\xad\xe3\x80OU\xc7\x88X1m\x19\xde|\xda\xc9\x04MW\xd2\x82\xb0\xe8\xda\xcf\x9b)\x89 \xf5\xc5\xec7\xdd\xf3\x90\x8c\xf2\xfeE\xb7L~!\xe1 z1f\x8c\xc3\xcb\xf2_q\xe5\xbd\x98\xb7\xe5\xaf\xa7\x1c\xeeT\x04\xcfM\xd3D\xae\xc2,~\x8f\x97F\xdd\xb4~ \x1d\xb2\xfb\xa7\r\x95\xf4h\xd1\bf\xecw\xb7}\x96X\x8f\a\xc8D\x1e\xc6#\xdc\x06V\xf2\x7f\xbb\\\xe8\xech\xbf:\xcf\xe6\xa2\x00\xfcWw\x8a\x99\x89+QK\x97\xd9=m(.\x97<\xdd\x02\x01\xc0Fb\x15\xa7G\xea3\x8c:9I\v\x92\a\xfc\xc8\x04\xfa\x94~\x88W\xb3PAM2\xccX\xcd\xc5\xfb\t\x00\x00\x00\x00\x00\x00\x00\x9aA\t\xa63q\xe2\x7f\x99uY\xc2\xf02\xb1\x95[\x01\xa08\xd5\xa5\xe7\xa0\xc0\x18,r\x98<\x036\x87\x12q7Z1Ao9*\xa7D\x80\x17\xa5C\x0ec4\x10\xd1\x11\x02\x85f\xd9\xb9\x9d\xb3\xac\xe9\r\xcbq\x8c\x12\xfe\xee>V&N\xfe\xbe\xdfN%tITJ\x15\'|\x93\x15,\xb4)\x19\xa9#<\xbc?\x82\x82\xd2\xe9XI\xfbb\xa2\x86'}, @NFC_ATTR_FIRMWARE_NAME={0x15, 0x14, '/dev/virtual_nci\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '*'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'nfc\x00'}]}, 0x190}, 0x1, 0x0, 0x0, 0xe1234f9ecd34dc68}, 0x14) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[], 0x1c}}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000340)='ns/pid_for_children\x00') (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x4, 0x0, &(0x7f0000000240)) (async) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000214000225bd7000fee96930f2004400", @ANYRES32=r7, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x24044851) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) (async) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000640)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "49b8adfc14d3b4"}) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f0000001640)={r9}) 6.092866124s ago: executing program 1 (id=6685): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d", @ANYRESOCT=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24040011}, 0xc000) 5.954819464s ago: executing program 1 (id=6687): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1000}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e000100000005"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 5.80623876s ago: executing program 1 (id=6689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x852a42100a5b064e, 0x0) (async) epoll_create(0x8) (async) r1 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001380)={&(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="306edb5fd94e179ab5130e6c0dff49028e3104059d9007675d18254c97a8e85a646ccded18cbbcc89453add1c59242f9ebd43609efd106f8b7967fd9db61da0bc7868ed2ea06b5401287b673927a7326a63650a47a0d9087780a3057db72a8ba76cd33854556bbc215033758e748f86eccd3b702dfe030742576a401bac6876af89ffdf705064d4fac0f4f3d5c01b36ba13690374ca4c60c82d1fa4e7c17b7136f0aaed42f2c9a5b3958604b19aa35fc2b285218be5ff976d1d7e2b89072", 0xbe}, {&(0x7f0000000300)="ef5a14351c6209f15af2f5ba8bdc8adcc5f23bea6814a44efdcfc5aec2e072134a2126fba79348faa3e88332722dd418cfeaeb2db9d1cd57bc2d60b03860990e3e6e94ae27b935cba8ee8121780c2ad7d7756bb61d5a07493394af076720f4a3dc7cd6ff403b596b979f413391ba7eb5fcae7c", 0x73}, {&(0x7f0000000380)="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", 0x1000}], 0x3}, 0x20000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x10000000}) (async) close(0x3) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) 5.62753384s ago: executing program 1 (id=6690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) getsockname$ax25(r2, &(0x7f0000000980)={{0x3, @null}, [@netrom, @remote, @default, @remote, @bcast, @netrom, @netrom, @null]}, &(0x7f0000000a00)=0x48) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000004c0)={0x0, 'veth1_virt_wifi\x00', 0x1}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000a40), 0x8) openat$cgroup_devices(r5, &(0x7f0000000a80)='devices.allow\x00', 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) r7 = socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r7, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000001a950000000bf62d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000854) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x28, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x2b8}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd9c}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_fd={0x18, 0xa}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000007c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000800)=[{0x2, 0x3, 0x8, 0x2}], 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000600)=r1, 0xc71cad8acf3fec42) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x138, 0xb, 0x148, 0x138, 0x148, 0x250, 0x230, 0x242, 0x250, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0xd8, 0x138, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xffffffffffffffff, {0xfffffffffffffff7}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x5, 0x5, 0x0, 0x1], 0x2, 0x6}, {0x1, [0x1, 0x2, 0x6, 0x6, 0x2, 0x4], 0x4, 0x1}}}}, {{@uncond, 0xec010000, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xfd7, 0x7, 0x1, 0x8000, 0x80000008, 0x2, 0x82}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x5, 0x2, 0x1, 0x2, 0xc], 0x1, 0x1}, {0x2, [0x0, 0x5, 0x1, 0x4, 0x2], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000706050000000000000000000300001b6532fc8adb4f809bb3650a0998680705000100070000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000014805fba00000000fdffffff000000b2a0ed90fd9687c2583b0aa7344770d445a28fd3027dc50c26d296ddfcefbf3fefccbeaefc21a75545567d219532119419f7ea972dab0ae18a", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000080029001ca20200"], 0x30}}, 0x800) socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x8, 0x70bd28, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0xff20, 0x1, {0x700, 0x2, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000000)=@can={0x1d, r11}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="6ec243dcd32f160bc5f764bf46d5cce5f2bd87a48a9bbffc4b9f99ecee05f1f1ac48d11333e6c2b7362c3fe05af1591401d976db91e35b5030c10d143de713febfc67f673a07873b9487c87682b7bc3fab5f6335c8bc92ea8a76614604a1f0cd04bab3dbc8c77f38dae27902b71ebfcfb87970ae991a7f5d6abfabec141c347b345f0bdb5f16d17a49c56ec69d8770ff4955828913e98ef85b05a9a12682ec1eec54d5c8469ec3f6040e668c24113fc5e5", 0xb1}, {&(0x7f0000000180)="1b22d527abb1fc5666fbe84a04add22762257c7228def9", 0x17}, {&(0x7f00000001c0)="94", 0x1}, {&(0x7f0000000280)="b31f", 0x2}], 0x4, &(0x7f0000000300)=[@timestamping={{0x14, 0x1, 0x25, 0xebc}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x48}, 0x4008000) 5.487018881s ago: executing program 1 (id=6691): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1f, 0x6, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x24008000}, 0x20040000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1fc, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x4f}}}}, [@NL80211_ATTR_VENDOR_DATA={0xc3, 0xc5, "f74ce6be370b6b6bf8e5a13e080afe4bf7e2dc2fdd18be6d7e5e71aee7ab612883be6ad603309ba929f12f07092b92568134fa984fcbc90672881e8e9a6924f3dfad431c55c19b228e2ef0d82630620eedce99a291fc212c052439d32050ffc910b26c5d647f32d9f20f7d0153728b4a524c5d3d815dc42cab99cece8e4838294ea904128398f30aa2a80ae81cca89905724edc6d80eb3e2742bb3d0bad45cb5dec2da31c029adcf30c2f572035ef75bf866047c58d9ce8d0e301cb67c5ca1"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x49, 0xc5, "20da7f2d72c7811677117708a2d182ee9b53ead9922a0bdfbed88be0c56d7677590d2369edc9da89249bd1b41eca81325b929d6fff88a41d6b9a7532fd311266c0e6cd7e7e"}, @NL80211_ATTR_VENDOR_DATA={0x79, 0xc5, "0542ccaa1d07158536cff1582770257fbe0caaed790fcf5b0c53bdf3eaf245b9a949cfa51b3027931857fce85a9b0e12d7aef7c5435015d5c2b30067dfb8aed63648f5de81f18ceec162125580988724d4bb6dfa3361315eac2966f3e8647b1b3b2162a35945655df896da0f64ed889aa749ee30fe"}, @NL80211_ATTR_VENDOR_DATA={0x25, 0xc5, "a9c20f0d07f68512992ff78252b6d581c179652d8c5e40ffb5944cbaac68d9adbe"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x6}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8004}, 0x40010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x1ff) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000480)={{0x3, @rose}, [@default, @default, @netrom, @rose, @default, @remote, @default, @bcast]}, &(0x7f0000000500)=0x48, 0x800) sendto$ax25(r2, &(0x7f0000000540)="4aa97c757f26f87aaf3fdbecc6a8c432235f64eccd3a530fed59c12c724364bcdce7e2d31a4fa78d5f4e93fa64b23c79a195b664533b92ff103c9d2663a60c5dce90d3f42068d44340117215c6640ffeba0660b585222797ea53425c89c4197b55f06792832dfb641fb1858182cd9f0f1acfa6c0af07018087c5cae78b1deaa9951788d38f2f98056d905b7ce35f0cd006377ff69377b42ca8e4ffc3ccd8b9d7b08d5cf315a97fd813737c8ca0a31560b620663ed42bfe26228cf1dd4551f49eeeab8ecc2a9d8b8c0409a519feec27148d18b6edfb88dc8e7f36f3bf5b5109b2", 0xe0, 0x80, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000780)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x4, 0x2, 0x0, 0x0, 0x1d, r4, r5}, {0xe706, 0x5, 0x10, 0x10000, 0x1, 0x100, 0x10, 0xa1f}, {0x2, 0x8000000000000001, 0x7, 0x1}, 0x4, 0x0, 0x2, 0x0, 0x1}, {{@in6=@mcast1, 0x4d6, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x3500, 0x0, 0x0, 0x43, 0x4, 0x2, 0x1}}, 0xe8) r6 = socket(0x27, 0x2, 0x8d) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, 0x140d, 0x800, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000009c0)={0x0, 'vcan0\x00', {}, 0x4a}) r7 = socket(0x27, 0x808, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) connect(r6, &(0x7f0000000a00)=@sco={0x1f, @none}, 0x80) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), r0) getsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000b00)={@initdev, @remote, 0x0}, &(0x7f0000000b40)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000000c40)={&(0x7f0000000a80), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x7c, r10, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x811}, 0x1) socket$qrtr(0x2a, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000d80)={0x2, 0x0, 0xc3, &(0x7f0000000c80)=""/195}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000dc0)={'bridge_slave_0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@security={'security\x00', 0xe, 0x4, 0x4a8, 0xffffffff, 0x0, 0x0, 0x298, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, &(0x7f0000000e00), {[{{@uncond, 0x0, 0x138, 0x1a8, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4=@private=0xa010102, @ipv4=@local, @ipv6=@local, @ipv6=@mcast2, 0x2}}, @common=@icmp6={{0x28}, {0x3, "2591", 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x8, 0xc000, 0x7, 0x1, 0x0, "16a05d5d3bb8e5fca64f6ede1b040a99ce30e0375752b3150aefe6b61accea20ca3152dd858a58c101956b0e64ee4c0682e9c1af28e7e1081aea83d911af4ee7"}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff000000, 0xff], [0x0, 0xff, 0x0, 0xffffffff], 'ipvlan0\x00', 'syzkaller0\x00', {0xff}, {}, 0xa5, 0x88, 0x7, 0x4}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x7, {0x8}}}}, {{@uncond, 0x0, 0xd0, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xba}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x4, 0x1ff, 0x7f, 0x1, 0x0, "7caf049348affc3f1116b5139e382b2f9848178388332f978f21f8e5c467dca84a7880a63940ea03b3dbe081b147deba50b8adb1163bf4b898b2af213505497e"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) r12 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) ioctl$SIOCAX25GETINFO(r12, 0x89ed, &(0x7f0000001380)) getsockopt$inet6_buf(r7, 0x29, 0x0, &(0x7f0000001400)=""/80, &(0x7f0000001480)=0x50) 5.216047551s ago: executing program 1 (id=6693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYRES8=r0], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000100ef590000000000000000850000008700000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800002c1d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000e0000000850000008200000095"], &(0x7f0000001080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) (async) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r3 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x6a, 0x5, 0x20000000, 0x3) (async) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) unshare(0x10010800) (async) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x34, &(0x7f00000000c0)=r8, 0x4) unshare(0x200) (async) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008804}, 0x801) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r9 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r9, 0x84, 0x18, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) (async) shutdown(r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.548240044s ago: executing program 2 (id=6699): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430", 0xf) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5", 0xb4}, {&(0x7f0000000b00)="2112f3980a4c0902dcb1918da23fb18a9d89c4f0793b7c45b722417a6401d606e033776833d550074c2b667b4e127ea79880d00aeee8d16ca6f011603c22355681cd2e9d0d8a2fea2e9b525389d2e7b95aa129fef95245bffd1ccc58bb9ca56a50cd0b4da05e78cc4aef1e9157a66caefb0ba968710bfbc7baabaa3b06bf6e5fe4fe8ebcbc81a4dbda4b1b65ea2d852cda4881d7ceda7dcbef58471a951ca1851b50dd9276e0ab06fa0e23d023766294c911bff4e6d33acdd316322f4d5a1a4eb5ae51e511f2923f3318d83b9b438b20e0560a4834edb911911c7b557e37e94f6f0a2f1d291ae3049df23212a4b50eeb9c9a", 0xf2}], 0x2, 0x0, 0x0, 0x4004090}], 0x1, 0x4004000) (async) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad", 0xb}], 0x1}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB='\b\x00?'], 0x4c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) (async) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000006dc483fa08144bcdd5f20d3747faf511fdefcdc6b7787827851f4afde7221370ad826de6d8768edb7b1ed576a95723871417f6d0c2338bbd5f622014f0759f529284811dda01ee48538590942ab5acf9745c8306a9383ed575e60fc5fb9bc6e18e0ff7fb56204bd47d001cd5647bcd87ca814a", @ANYRES16=r8, @ANYBLOB="04002bbd7000fddbdf25090000000500350009000000080031000400000005002f0000000000080034000900000008003a00bc00000008003a00ff00000005002e0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20}, 0x40000c4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002100010000000000000000000000000008000d0008000000"], 0x24}}, 0x0) (async, rerun: 32) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) (async, rerun: 32) r10 = socket$netlink(0x10, 0x3, 0x0) splice(r9, 0x0, r10, 0x0, 0x10d00, 0xf) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r11, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) (async) r13 = socket$alg(0x26, 0x5, 0x0) ioctl$FICLONERANGE(r12, 0x4020940d, &(0x7f0000004080)={{r13}, 0x1, 0x928, 0x80}) ioctl$PPPIOCGDEBUG(r12, 0x80047441, &(0x7f00000000c0)) 2.369243147s ago: executing program 2 (id=6700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x18, &(0x7f0000000800)={r4, 0x1, 0x6}, 0x10) sendto$packet(r5, &(0x7f0000000040)="02030007ffff0000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4) setsockopt$rose(r6, 0x104, 0x4, &(0x7f0000000080)=0x1faa, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) pipe(&(0x7f0000000480)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r11, @ANYBLOB="f539983c", @ANYRES32=r11, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.279567508s ago: executing program 3 (id=6701): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.62818821s ago: executing program 3 (id=6702): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {0x6, 0xb}, {0xfff3, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x166, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x600) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x14, r2, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x400c040) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000a00)={0xb0, r5, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1801}, 0x20000000) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0xffff0000, 0xe, 0xffffffffffffff97, &(0x7f0000000040)="2b206d074843b397737ea49da2aa", 0x0, 0x40, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0x22, 0x0, &(0x7f0000000600)="c8bb4e7dbde79f730088650008007c11feebc9a80520cdd0258d0e758fa5267122cb", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20004010}, 0x1) 1.457898801s ago: executing program 2 (id=6703): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x168b}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r2, &(0x7f0000000280)="a1fb"}, 0x20) socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x9}, 0x28) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x4008) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x96) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socket$nl_xfrm(0x10, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000001080)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}], 0x1, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendto$inet6(r7, &(0x7f00000001c0)="f7", 0x1, 0x20004000, 0x0, 0x0) unshare(0x2040400) 1.382451518s ago: executing program 3 (id=6704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x0, 0x0, 0xfff}}, {@generic={0x8906}}}}, 0x16) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000040)={0x5, 0x2, 0xfffffffa}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) sendto$inet(r3, &(0x7f00000002c0)="abc7153306", 0xffffff59, 0x4000805, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001840)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480d0}, 0x90) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) 960.269257ms ago: executing program 3 (id=6705): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001500010000000000000000000a0000000400000014000280bf74a7dffdd8f83b1ba40dfabcc81c75b4b74e4f74d14257f2d93f36efa5d018f1f91a20c919ca3a29aa9b0cd4a8ecd9f79e317e4b6d60f3ae6bab27d924f53becd64fd8f4e9de708210650c7d9441280411298a708e6c060277025bde28154d4a1ddea03602e10719896966f37c894d9d7bd55ddce65663e22a2d7647088b28a88640a1f7"], 0x2c}}, 0x0) (async, rerun: 64) r2 = socket(0x2a, 0x2, 0x0) (async, rerun: 64) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) (async) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000), 0x8200, 0x0) (async) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="500238", @ANYRES64=r2], 0x3b) (async) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@empty, @multicast2, 0xffffffffffffffff, "78821c6526c2685b28fe6535058ef1df33ac67d862fcb30ca9eb6e6d0bb38b48", 0x6, 0x6, 0x4, 0xffffffff}, 0x3c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "e3bc6934e402f43c", "138d0b8e0a57239733f5cca74f3d0613", "c904a98f", "a2284129633acbd2"}, 0x28) (async) writev(r6, &(0x7f00000005c0)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e0", 0x84}, {&(0x7f0000002180)="d2", 0x1}], 0x2) (async) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000069006b882abd7000d2a07581c46de9"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4000854) (async, rerun: 32) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0) (async, rerun: 32) recvmmsg$unix(r4, 0x0, 0x0, 0x400123a0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) 894.478943ms ago: executing program 0 (id=6706): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="000000061400030005808b0000000000000000000214000100bc02"], 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) 701.338558ms ago: executing program 0 (id=6707): r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x30}}}, 0xe8) (async) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b"], 0x10}}, 0x4000000) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001d00e9"], 0xb8}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x108100, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x10}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r2) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000027c0d53504fadfa4a66b07a7b09c2dc2d1148cb7fe63ccd1e921af9c404e42c1e67164e22228c87970f7ccefcb3ad559ccb1b36702a076234992c831fd029f7bb3008157a1ddd970739a6c5899d3657aa6f06da1d62948c744df31dd5b1a4e44de951a6c956d74a36985f20a717b12a6afd52cfcb31b673341aaa25acb8405d30056fe340b52434ff194c79baff3ba63cebb60f97556ff39ef548a6e3905b67ea3dde0c55de46a93709420210e4e2ca6ac26cee3ebfab92aec773e3188d16dece4a654590e19b3dbcf61b3b38b090bfa25991dcb42a99773a557138c364bbb28abaf4c873beac1348b0f08377b06f942baa7ffc5", @ANYRES16=r11, @ANYBLOB="01002ebd7000fddbdf252000000008000300", @ANYRES32=r10, @ANYBLOB="04002d80"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x40000) 628.40604ms ago: executing program 3 (id=6708): socket$l2tp6(0xa, 0x2, 0x73) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f0000000380)=""/46, 0xfffffeb4) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x58, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000340)="18000000010005", 0x7) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0xb8, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x84, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xbb35, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x8}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_U32_INDEV={0x14, 0x8, 'veth0_to_hsr\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb8}}, 0x24040084) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) syz_emit_ethernet(0x4b8, &(0x7f0000000740)={@multicast, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x47e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0x2, 0xc18, 0xa000002, [{0x3, 0x14, "e71f377553ec8e70c28e2bc69e8ebe36aca03a343cbfbd82c7b4788d9f5e26ff1ff40a4572988b545c2c7f46e027f5f058d3a20bd75b518999f69f73fd43b26b59422724c3d26b021d0f215b77f276fd8c09b9a8f636fc53b62f654bd7ea12660d45d8af19e9cc6eb5a024f086e9c8dfef81a25cc6361c3f1ff0e6738d612ce2fcfc864eb187d7f93a550397138b8b35aa4ff465f56ff147340b0dc170df"}, {0x22, 0xd, "ad76198c18d1313cc877cfdffd832556357f0d4509e2a7b895c47fe891c2c7407af9c873a3595d3c015c06028675b479c67091ecb309bc3612cc4f731686381c2ab65ec1db6441cddf9cc3010837d0bc576b97ca438056094843b67304db01ef535eb34d1bd7"}, {0x19, 0x13, "c5af417b80835fbcc25455b7e13aad37405651c6bc79fd506803586fdfaa7747c039c5f8471e3deb6f39743e6b08724cad55b642e6024a4ed07ac03bcaba137d397beca669c6d7d4bfe5ed62c49c92d41259b28d0bef013c2fbf0c26bca3404ffdc21f8bfa5706dbaf65c0de91bddd85a60cc0bd9b7145c12eaae3e1731ec2994d77412405d8f8c6157663aa5b2e2d45f3e3561a70d1ee9a7080"}, {0x2, 0x59, "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"}]}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) 440.686229ms ago: executing program 2 (id=6709): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a200100000000000500000014000500200100000000000000000100000000001c000900"], 0x4c}}, 0x40000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$packet(0x11, 0x3, 0x300) write$tun(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0x7a) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 172.033957ms ago: executing program 3 (id=6710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x8810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8fa6e61c81b15835822f4a8fb305a2eb6a4c9a7ee4d5fc22071fb8bf20269a18"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dd48e9523c8ba45972c0cb5c7dfade95ef6c54ee0075051a4f64fdc28354ac71"}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x3c, r7, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb230}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) (async) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x40e, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4001000) 116.907626ms ago: executing program 0 (id=6711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59cf007d00"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000004c0)='wg1\x00') setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x140, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r8 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x8000) accept$inet6(r8, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r2, 0x111, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMRU1(r9, 0x40047452, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 0s ago: executing program 2 (id=6712): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x2000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f00000011c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @multicast1=0xe0000300}, @redirect={0x5, 0x0, 0x0, @loopback, {0x5, 0x4, 0x1, 0x0, 0x1, 0x66, 0x6, 0x3, 0x6c, 0x0, @broadcast, @local}}}}}}, 0x0) r2 = socket(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0xa0}], 0x1, &(0x7f0000000340)={0x0, 0x989680}, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="380000001200050100000000000000e627001a00"], 0x38}}, 0x20040810) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d80)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000001000017d5ff000000ffffffff00000000000000000000000002000000000000000300000000000000000000000000000000000400000000000200000085d90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000faffffff0000000000000000000000000a00000000d742b1a204aff9470000000000073500ffffffff00000000000000"], 0x104}}, 0x404c044) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="2f0000001000000004"], 0x20) r7 = socket(0x28, 0x5, 0x0) accept4$unix(r7, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x3, 0x27}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x14048884) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f0000000000)='GPL\x00', 0x8, 0xff4, &(0x7f0000003f80)=""/4084}, 0x94) kernel console output (not intermixed with test programs): xmit 48 [ 881.787180][T28291] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 881.939304][T28348] IPVS: length: 1701147238 != 24 [ 884.509322][T28378] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5678'. [ 884.715336][T28376] 8021q: adding VLAN 0 to HW filter on device bond7 [ 884.827416][T28386] pim6reg: entered allmulticast mode [ 884.860199][T28382] pim6reg: left allmulticast mode [ 885.051996][T13807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.059881][T13807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.297423][T28411] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 885.379708][T28411] netlink: 'syz.2.5686': attribute type 9 has an invalid length. [ 885.419628][T28413] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5687'. [ 885.734509][T28425] xt_ecn: cannot match TCP bits for non-tcp packets [ 885.761650][T28425] netlink: 393 bytes leftover after parsing attributes in process `syz.5.5690'. [ 886.250074][T28409] lo speed is unknown, defaulting to 1000 [ 886.298397][T28409] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 886.836881][T28454] tipc: Enabling of bearer rejected, already enabled [ 887.100034][T28428] lo speed is unknown, defaulting to 1000 [ 887.157058][T28428] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 887.206304][T28466] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5701'. [ 887.575753][T28459] lo speed is unknown, defaulting to 1000 [ 887.809687][T28478] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 887.817030][T28478] IPv6: NLM_F_CREATE should be set when creating new route [ 887.824358][T28478] IPv6: NLM_F_CREATE should be set when creating new route [ 887.895982][T28459] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 888.493488][T28498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5709'. [ 889.736590][T11628] lec:lec_start_xmit: lec0:No lecd attached [ 889.924318][T28511] sctp: [Deprecated]: syz.0.5712 (pid 28511) Use of int in maxseg socket option. [ 889.924318][T28511] Use struct sctp_assoc_value instead [ 890.095078][T28514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.104715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.488837][T28530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.501593][T28530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.510056][T28530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.617094][T28531] tipc: Enabled bearer , priority 0 [ 890.625042][T28530] syzkaller0: entered promiscuous mode [ 890.642456][T28530] syzkaller0: entered allmulticast mode [ 890.722815][T28530] tipc: Resetting bearer [ 890.738102][T28530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.756534][T28530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.768023][T28536] netlink: 'syz.1.5719': attribute type 1 has an invalid length. [ 890.872327][T28521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5714'. [ 890.908049][T28536] netlink: 'syz.1.5719': attribute type 1 has an invalid length. [ 890.928961][T28530] tipc: Resetting bearer [ 890.949091][T28530] tipc: Disabling bearer [ 890.961381][T28536] netlink: 'syz.1.5719': attribute type 1 has an invalid length. [ 890.970148][T28545] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5721'. [ 891.003003][T28530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 891.012780][T28536] netlink: 'syz.1.5719': attribute type 1 has an invalid length. [ 891.044295][T28536] netlink: 'syz.1.5719': attribute type 1 has an invalid length. [ 891.064306][T28536] netlink: 'syz.1.5719': attribute type 1 has an invalid length. [ 891.081067][T28536] netlink: 'syz.1.5719': attribute type 1 has an invalid length. [ 891.104082][T28536] netlink: 'syz.1.5719': attribute type 1 has an invalid length. [ 891.114430][T28536] netlink: 'syz.1.5719': attribute type 1 has an invalid length. [ 891.147675][T28536] netlink: 'syz.1.5719': attribute type 1 has an invalid length. [ 891.469449][T28578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5728'. [ 891.842323][T28569] lo speed is unknown, defaulting to 1000 [ 891.849397][T28569] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 892.395224][T28607] lo speed is unknown, defaulting to 1000 [ 892.403159][T28607] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 892.612492][T28609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5737'. [ 892.622630][T28609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5737'. [ 894.150088][T28616] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5739'. [ 894.170321][T28616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5739'. [ 894.320286][T28619] pim6reg: entered allmulticast mode [ 894.326766][T28619] pim6reg: left allmulticast mode [ 894.345556][T28574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 894.426270][T28581] kthread_run failed with err -4 [ 894.722682][T28636] FAULT_INJECTION: forcing a failure. [ 894.722682][T28636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 894.729635][T28634] IPVS: set_ctl: invalid protocol: 134 100.1.1.0:20002 [ 894.736061][T28636] CPU: 1 UID: 0 PID: 28636 Comm: syz.1.5745 Not tainted syzkaller #0 PREEMPT(full) [ 894.736087][T28636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 894.736099][T28636] Call Trace: [ 894.736108][T28636] [ 894.736116][T28636] dump_stack_lvl+0xe8/0x150 [ 894.736147][T28636] should_fail_ex+0x412/0x560 [ 894.736174][T28636] _copy_from_user+0x2d/0xb0 [ 894.736201][T28636] ___sys_sendmsg+0x1c6/0x360 [ 894.736231][T28636] ? __pfx____sys_sendmsg+0x10/0x10 [ 894.736252][T28636] ? __lock_acquire+0x6b5/0x2cf0 [ 894.736323][T28636] __sys_sendmmsg+0x27c/0x4e0 [ 894.736353][T28636] ? __pfx___sys_sendmmsg+0x10/0x10 [ 894.736374][T28636] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 894.736422][T28636] ? ksys_write+0x242/0x270 [ 894.736449][T28636] ? __pfx_ksys_write+0x10/0x10 [ 894.736480][T28636] __x64_sys_sendmmsg+0xa0/0xc0 [ 894.736506][T28636] do_syscall_64+0xe2/0xf80 [ 894.736530][T28636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.736546][T28636] ? trace_irq_disable+0x37/0x100 [ 894.736563][T28636] ? clear_bhb_loop+0x60/0xb0 [ 894.736584][T28636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.736600][T28636] RIP: 0033:0x7f171559aeb9 [ 894.736618][T28636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 894.736633][T28636] RSP: 002b:00007f171648e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 894.736653][T28636] RAX: ffffffffffffffda RBX: 00007f1715815fa0 RCX: 00007f171559aeb9 [ 894.736667][T28636] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 894.736679][T28636] RBP: 00007f171648e090 R08: 0000000000000000 R09: 0000000000000000 [ 894.736690][T28636] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 894.736702][T28636] R13: 00007f1715816038 R14: 00007f1715815fa0 R15: 00007ffe855dd658 [ 894.736732][T28636] [ 894.790532][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5050 ms [ 894.942190][ C1] lec:lec_tx_timeout: lec0 [ 895.108508][T28651] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5748'. [ 895.671996][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 896.464240][T28697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5758'. [ 896.549811][T28697] netlink: 7 bytes leftover after parsing attributes in process `syz.1.5758'. [ 896.598509][T28697] validate_nla: 56 callbacks suppressed [ 896.598533][T28697] netlink: 'syz.1.5758': attribute type 2 has an invalid length. [ 896.644598][T28697] netlink: 1696 bytes leftover after parsing attributes in process `syz.1.5758'. [ 896.678483][T28705] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.5758'. [ 896.897019][T28719] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5764'. [ 896.920875][T28719] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5764'. [ 896.966456][T28668] lo speed is unknown, defaulting to 1000 [ 896.966850][T28721] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 896.986627][T28668] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 897.728457][T28751] netlink: 'syz.1.5773': attribute type 1 has an invalid length. [ 897.825888][T28764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5778'. [ 897.849635][T28751] 8021q: adding VLAN 0 to HW filter on device bond6 [ 897.861814][T28764] syz_tun: entered promiscuous mode [ 897.867515][T28764] syz_tun: refused to change device tx_queue_len [ 898.132218][T28776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5782'. [ 898.172843][T28776] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5782'. [ 898.193718][T28776] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5782'. [ 898.880316][T28775] lo speed is unknown, defaulting to 1000 [ 898.888803][T28775] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 899.002178][T28791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 899.319112][T28807] tc_dump_action: action bad kind [ 899.905560][T28836] IPVS: set_ctl: invalid protocol: 136 172.20.20.50:20004 [ 900.669046][T28871] bridge_slave_1 (unregistering): left allmulticast mode [ 900.681322][T28871] bridge_slave_1 (unregistering): left promiscuous mode [ 900.710149][T28871] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.784766][T28875] netlink: 'syz.0.5811': attribute type 1 has an invalid length. [ 900.795870][T28875] netlink: 'syz.0.5811': attribute type 1 has an invalid length. [ 900.812838][T28875] netlink: 'syz.0.5811': attribute type 8 has an invalid length. [ 901.142255][T28899] netlink: 'syz.2.5818': attribute type 1 has an invalid length. [ 901.303606][T28900] geneve1: entered promiscuous mode [ 901.310748][T28900] geneve1: entered allmulticast mode [ 901.690089][T28923] __nla_validate_parse: 13 callbacks suppressed [ 901.690109][T28923] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5825'. [ 901.721672][T28904] lo speed is unknown, defaulting to 1000 [ 901.729640][T28904] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 901.776096][T28924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5825'. [ 902.107988][T28938] netlink: 'syz.2.5829': attribute type 1 has an invalid length. [ 902.241953][T28949] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5829'. [ 902.297156][T28943] bond8: entered promiscuous mode [ 902.307578][T28943] bond8: entered allmulticast mode [ 902.318269][T28943] 8021q: adding VLAN 0 to HW filter on device bond8 [ 902.409332][T28954] netlink: 'syz.0.5832': attribute type 1 has an invalid length. [ 902.912874][T28977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5838'. [ 903.229588][T28989] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 2, id = 0 [ 903.281207][T28991] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5843'. [ 903.318661][T28991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5843'. [ 903.361753][T28991] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5843'. [ 903.489413][T28998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5845'. [ 903.508820][T28998] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5845'. [ 903.579938][T29005] netlink: 'syz.3.5847': attribute type 10 has an invalid length. [ 903.658149][T29005] veth0_vlan: left promiscuous mode [ 903.700401][T29005] veth0_vlan: entered promiscuous mode [ 903.747180][T29005] team0: Device veth0_vlan failed to register rx_handler [ 904.434594][T29035] FAULT_INJECTION: forcing a failure. [ 904.434594][T29035] name failslab, interval 1, probability 0, space 0, times 0 [ 904.488205][T29035] CPU: 0 UID: 0 PID: 29035 Comm: syz.1.5852 Not tainted syzkaller #0 PREEMPT(full) [ 904.488237][T29035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 904.488250][T29035] Call Trace: [ 904.488259][T29035] [ 904.488269][T29035] dump_stack_lvl+0xe8/0x150 [ 904.488303][T29035] should_fail_ex+0x412/0x560 [ 904.488333][T29035] should_failslab+0xa8/0x100 [ 904.488359][T29035] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 904.488389][T29035] ? __alloc_skb+0x186/0x7d0 [ 904.488413][T29035] ? __alloc_skb+0x1d0/0x7d0 [ 904.488435][T29035] ? __local_bh_enable_ip+0xd0/0x130 [ 904.488459][T29035] __alloc_skb+0x1d0/0x7d0 [ 904.488489][T29035] alloc_skb_with_frags+0xca/0x890 [ 904.488516][T29035] ? __lock_acquire+0x6b5/0x2cf0 [ 904.488556][T29035] sock_alloc_send_pskb+0x878/0x990 [ 904.488606][T29035] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 904.488639][T29035] ? sock_def_readable+0xae/0x530 [ 904.488665][T29035] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 904.488690][T29035] unix_dgram_sendmsg+0x460/0x18e0 [ 904.488739][T29035] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 904.488760][T29035] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 904.488805][T29035] ? count_memcg_event_mm+0x21/0x260 [ 904.488834][T29035] ? unix_seqpacket_sendmsg+0x111/0x1e0 [ 904.488860][T29035] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 904.488883][T29035] ____sys_sendmsg+0xa68/0xad0 [ 904.488909][T29035] ? __might_fault+0xaf/0x130 [ 904.488943][T29035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 904.488980][T29035] ? import_iovec+0x73/0xa0 [ 904.489013][T29035] ___sys_sendmsg+0x2a5/0x360 [ 904.489045][T29035] ? __pfx____sys_sendmsg+0x10/0x10 [ 904.489068][T29035] ? __lock_acquire+0x6b5/0x2cf0 [ 904.489149][T29035] __sys_sendmmsg+0x27c/0x4e0 [ 904.489182][T29035] ? __pfx___sys_sendmmsg+0x10/0x10 [ 904.489206][T29035] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 904.489269][T29035] ? ksys_write+0x242/0x270 [ 904.489300][T29035] ? __pfx_ksys_write+0x10/0x10 [ 904.489336][T29035] __x64_sys_sendmmsg+0xa0/0xc0 [ 904.489366][T29035] do_syscall_64+0xe2/0xf80 [ 904.489393][T29035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.489412][T29035] ? trace_irq_disable+0x37/0x100 [ 904.489431][T29035] ? clear_bhb_loop+0x60/0xb0 [ 904.489456][T29035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.489475][T29035] RIP: 0033:0x7f171559aeb9 [ 904.489494][T29035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.489512][T29035] RSP: 002b:00007f171648e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 904.489536][T29035] RAX: ffffffffffffffda RBX: 00007f1715815fa0 RCX: 00007f171559aeb9 [ 904.489551][T29035] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 904.489564][T29035] RBP: 00007f171648e090 R08: 0000000000000000 R09: 0000000000000000 [ 904.489577][T29035] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002 [ 904.489589][T29035] R13: 00007f1715816038 R14: 00007f1715815fa0 R15: 00007ffe855dd658 [ 904.489623][T29035] [ 904.996395][T29050] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5859'. [ 905.269032][T29074] gretap3: entered promiscuous mode [ 905.761749][T29102] batman_adv: batadv0: Adding interface: ipvlan0 [ 905.769599][T29102] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.798314][T29102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.811820][T29102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.823478][T29102] batman_adv: batadv0: Not using interface ipvlan0 (retrying later): interface not active [ 906.242056][T29092] lo speed is unknown, defaulting to 1000 [ 906.268752][T29132] pim6reg1: entered promiscuous mode [ 906.275479][T29132] pim6reg1: entered allmulticast mode [ 906.286054][T29092] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 906.429960][T29130] syzkaller0: entered promiscuous mode [ 906.435610][T29130] syzkaller0: entered allmulticast mode [ 908.641192][T29091] lo speed is unknown, defaulting to 1000 [ 908.707147][T29091] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 908.834601][T29159] bond0: entered allmulticast mode [ 908.840643][T29159] bond_slave_0: entered allmulticast mode [ 908.847545][T29162] __nla_validate_parse: 3 callbacks suppressed [ 908.847562][T29162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5887'. [ 908.867082][T29159] bond_slave_1: entered allmulticast mode [ 908.879549][T29159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.888920][T29162] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 909.008830][T29166] bond_slave_0: mtu less than device minimum [ 909.056054][T29168] bond9: option arp_interval: invalid value (18446744073709551615) [ 909.070507][T29168] bond9: option arp_interval: allowed values 0 - 2147483647 [ 909.092914][T29168] bond9 (unregistering): Released all slaves [ 909.851126][T29191] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5899'. [ 910.270361][T28437] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 910.272375][T29211] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 910.296760][T28437] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 910.312583][T28437] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 910.371604][T28437] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 910.371984][T29211] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 910.388896][T28437] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 910.490706][T29211] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 910.491089][T29218] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5905'. [ 910.616677][T29230] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5909'. [ 911.444456][T29208] lo speed is unknown, defaulting to 1000 [ 911.491365][T13814] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.504647][T13814] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.543601][T29208] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 911.614203][T13814] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.637649][T13814] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.757008][T13814] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.779679][T13814] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.800292][T29271] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5921'. [ 911.813425][T29270] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5921'. [ 911.824068][T29274] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5921'. [ 911.836366][T29272] tipc: Enabling of bearer rejected, already enabled [ 911.883633][T29275] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5923'. [ 911.904422][T13814] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 911.930879][T13814] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.982350][T29272] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5920'. [ 911.993385][T29272] mac80211_hwsim hwsim41 syzkaller0: Caught tx_queue_len zero misconfig [ 912.202582][ T8113] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.221670][ T8113] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 912.229984][ T8113] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 912.262319][T29287] veth1_to_bond: Caught tx_queue_len zero misconfig [ 912.299769][T13807] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.321143][T13807] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 912.329454][T13807] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 912.398668][T29297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5930'. [ 912.423242][T13807] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.432362][T13807] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 912.441800][T29295] netlink: 'syz.5.5931': attribute type 21 has an invalid length. [ 912.453812][T13807] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 912.474519][ T52] Bluetooth: hci6: command tx timeout [ 912.536074][T29295] netlink: 'syz.5.5931': attribute type 1 has an invalid length. [ 912.544714][ T8113] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 912.562163][ T8113] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 20000 - 0 [ 912.593818][ T8113] netdevsim netdevsim3 eth4: set [1, 1] type 2 family 0 port 6081 - 0 [ 912.655158][T29310] netlink: 'syz.0.5935': attribute type 1 has an invalid length. [ 912.664791][T29310] netlink: 'syz.0.5935': attribute type 2 has an invalid length. [ 912.672744][T29310] netlink: 'syz.0.5935': attribute type 1 has an invalid length. [ 912.682640][T29310] netlink: 'syz.0.5935': attribute type 3 has an invalid length. [ 913.172701][T13814] dvmrp0 (unregistering): left allmulticast mode [ 913.209700][T13814] bond6 (unregistering): (slave geneve2): Releasing active interface [ 913.579723][T13814] bond0 (unregistering): left promiscuous mode [ 913.587391][T13814] bond_slave_0: left promiscuous mode [ 913.594451][T13814] bond_slave_1: left promiscuous mode [ 913.612253][T13814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.622469][T13814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.632160][T13814] bond0 (unregistering): Released all slaves [ 913.643155][T13814] bond1 (unregistering): Released all slaves [ 913.656497][T13814] bond2 (unregistering): Released all slaves [ 913.672466][T13814] bond3 (unregistering): (slave veth3): Releasing backup interface [ 913.680410][T13814] veth3: left promiscuous mode [ 913.687795][T13814] bond3 (unregistering): Released all slaves [ 913.704407][T13814] bond4 (unregistering): (slave wireguard0): Releasing backup interface [ 913.715202][T13814] wireguard0: left promiscuous mode [ 913.722365][T13814] bond4 (unregistering): Released all slaves [ 913.741459][T13814] bond5 (unregistering): Released all slaves [ 913.755625][T13814] bond6 (unregistering): Released all slaves [ 913.773294][T13814] bond7 (unregistering): Released all slaves [ 913.788276][T13814] bond8 (unregistering): Released all slaves [ 913.853144][T29320] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 914.024850][T13814] 9: left promiscuous mode [ 914.273179][T13814] tipc: Left network mode [ 914.523451][T29208] chnl_net:caif_netlink_parms(): no params data found [ 914.551734][ T52] Bluetooth: hci6: command tx timeout [ 915.330894][T29372] batadv0: left promiscuous mode [ 915.617351][T29372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 915.643762][T29372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.795817][T29372] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 915.809918][T29372] mac80211_hwsim hwsim41 syzkaller0: left allmulticast mode [ 915.824676][T29372] vlan2: left promiscuous mode [ 915.829501][T29372] bond0: left promiscuous mode [ 915.840740][T29372] bond_slave_0: left promiscuous mode [ 915.846299][T29372] bond_slave_1: left promiscuous mode [ 915.851955][T29372] dummy0: left promiscuous mode [ 915.857035][T29372] vlan2: left allmulticast mode [ 915.862559][T29372] bond0: left allmulticast mode [ 915.867445][T29372] bond_slave_0: left allmulticast mode [ 915.873135][T29372] bond_slave_1: left allmulticast mode [ 915.879461][T29372] bridge1: left allmulticast mode [ 915.894199][T29372] vlan0: left allmulticast mode [ 915.899074][T29372] dummy0: left allmulticast mode [ 915.909872][T29372] team1: left promiscuous mode [ 915.914732][T29372] team1: left allmulticast mode [ 915.927070][T29372] team2: left promiscuous mode [ 915.932392][T29372] team2: left allmulticast mode [ 915.944880][T29372] bond6: left promiscuous mode [ 915.959602][T29372] macvlan0: left allmulticast mode [ 915.983905][T29372] vlan3: left allmulticast mode [ 915.988787][T29372] veth0_to_bond: left allmulticast mode [ 915.999169][T29372] ip6gre1: left promiscuous mode [ 916.004299][T29372] ip6gre1: left allmulticast mode [ 916.017711][T29372] gretap3: left promiscuous mode [ 916.105697][T13807] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.140737][T13807] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.149477][T13807] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.160960][T13807] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.273127][T13807] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.289663][T13807] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.464828][T13807] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.493533][T13807] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.530413][T29427] __nla_validate_parse: 5 callbacks suppressed [ 916.537464][T29427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5954'. [ 916.542348][T29422] sit0: Caught tx_queue_len zero misconfig [ 916.635737][ T52] Bluetooth: hci6: command tx timeout [ 916.649385][T29427] bridge0: port 1(batadv4) entered blocking state [ 916.676847][T29427] bridge0: port 1(batadv4) entered disabled state [ 916.699612][T29427] batadv4: entered allmulticast mode [ 916.736573][T29427] batadv4: entered promiscuous mode [ 916.884005][T29441] FAULT_INJECTION: forcing a failure. [ 916.884005][T29441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.898657][T29432] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5955'. [ 916.909978][T29441] CPU: 0 UID: 0 PID: 29441 Comm: syz.1.5957 Not tainted syzkaller #0 PREEMPT(full) [ 916.910009][T29441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 916.910022][T29441] Call Trace: [ 916.910031][T29441] [ 916.910041][T29441] dump_stack_lvl+0xe8/0x150 [ 916.910074][T29441] should_fail_ex+0x412/0x560 [ 916.910105][T29441] _copy_from_iter+0x1d3/0x1670 [ 916.910143][T29441] ? rcu_is_watching+0x15/0xb0 [ 916.910165][T29441] ? __pfx__copy_from_iter+0x10/0x10 [ 916.910190][T29441] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 916.910232][T29441] ? netlink_sendmsg+0x650/0xb40 [ 916.910253][T29441] ? skb_put+0x11b/0x210 [ 916.910284][T29441] netlink_sendmsg+0x6c0/0xb40 [ 916.910317][T29441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 916.910346][T29441] ? aa_sock_msg_perm+0xf1/0x1b0 [ 916.910372][T29441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 916.910397][T29441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 916.910419][T29441] ____sys_sendmsg+0xa68/0xad0 [ 916.910450][T29441] ? __might_fault+0xaf/0x130 [ 916.910483][T29441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 916.910519][T29441] ? import_iovec+0x73/0xa0 [ 916.910550][T29441] ___sys_sendmsg+0x2a5/0x360 [ 916.910575][T29441] ? __lock_acquire+0x6b5/0x2cf0 [ 916.910605][T29441] ? __pfx____sys_sendmsg+0x10/0x10 [ 916.910669][T29441] ? __fget_files+0x2a/0x420 [ 916.910691][T29441] ? __fget_files+0x3a0/0x420 [ 916.910724][T29441] __x64_sys_sendmsg+0x1bd/0x2a0 [ 916.910755][T29441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 916.910793][T29441] ? __pfx_ksys_write+0x10/0x10 [ 916.910834][T29441] do_syscall_64+0xe2/0xf80 [ 916.910860][T29441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.910888][T29441] ? trace_irq_disable+0x37/0x100 [ 916.910907][T29441] ? clear_bhb_loop+0x60/0xb0 [ 916.910931][T29441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.910950][T29441] RIP: 0033:0x7f171559aeb9 [ 916.910969][T29441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.910986][T29441] RSP: 002b:00007f171648e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 916.911009][T29441] RAX: ffffffffffffffda RBX: 00007f1715815fa0 RCX: 00007f171559aeb9 [ 916.911024][T29441] RDX: 0000000000004800 RSI: 0000200000000200 RDI: 0000000000000003 [ 916.911037][T29441] RBP: 00007f171648e090 R08: 0000000000000000 R09: 0000000000000000 [ 916.911048][T29441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.911060][T29441] R13: 00007f1715816038 R14: 00007f1715815fa0 R15: 00007ffe855dd658 [ 916.911092][T29441] [ 917.165784][T29208] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.173159][T29208] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.180523][T29208] bridge_slave_0: entered allmulticast mode [ 917.188611][T29208] bridge_slave_0: entered promiscuous mode [ 917.197710][T29208] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.204967][T29208] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.212341][T29208] bridge_slave_1: entered allmulticast mode [ 917.220593][T29208] bridge_slave_1: entered promiscuous mode [ 917.270147][T29208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.305833][ T8109] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 917.315651][ T8109] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 917.363726][T29208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.714132][T29208] team0: Port device team_slave_0 added [ 917.736307][T29208] team0: Port device team_slave_1 added [ 917.851296][T29208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.858392][T29208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.885323][T29465] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5964'. [ 917.960936][T29208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.014791][T29470] mac80211_hwsim hwsim44 syzkaller0: Caught tx_queue_len zero misconfig [ 918.051539][T29434] lo speed is unknown, defaulting to 1000 [ 918.085513][T29208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.101236][T29208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.186183][T29208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.209759][T29470] tipc: Enabling of bearer rejected, already enabled [ 918.228540][T29434] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 918.242768][T29473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 918.290864][T29481] netem: change failed [ 918.401586][T29208] hsr_slave_0: entered promiscuous mode [ 918.418746][T29208] hsr_slave_1: entered promiscuous mode [ 918.438862][T29208] debugfs: 'hsr0' already exists in 'hsr' [ 918.449327][T29208] Cannot create hsr debugfs directory [ 918.616548][T29493] netlink: 'syz.0.5968': attribute type 1 has an invalid length. [ 918.694047][T29496] bond9: entered promiscuous mode [ 918.699143][T29496] bond9: entered allmulticast mode [ 918.710586][ T52] Bluetooth: hci6: command tx timeout [ 918.743591][T29496] 8021q: adding VLAN 0 to HW filter on device bond9 [ 918.908805][T29493] bridge5: entered promiscuous mode [ 918.936767][ T8113] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 918.960249][T29493] bridge5: entered allmulticast mode [ 918.981269][T29493] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 919.043862][T29508] netlink: 'syz.2.5972': attribute type 142 has an invalid length. [ 919.084756][T13807] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 919.215647][T13814] batadv0: left promiscuous mode [ 919.236235][T13814] hsr_slave_0: left promiscuous mode [ 919.243310][T13814] hsr_slave_1: left promiscuous mode [ 919.251387][T13814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.284395][T29517] nbd: couldn't find device at index 536870912 [ 919.462963][T13814] team0 (unregistering): Port device team_slave_1 removed [ 919.489682][T13814] team0 (unregistering): Port device team_slave_0 removed [ 919.892474][T29522] tipc: Enabled bearer , priority 0 [ 919.920262][T29523] syzkaller0: entered promiscuous mode [ 919.926282][T29523] syzkaller0: entered allmulticast mode [ 920.072134][T29538] FAULT_INJECTION: forcing a failure. [ 920.072134][T29538] name failslab, interval 1, probability 0, space 0, times 0 [ 920.110554][T29538] CPU: 1 UID: 0 PID: 29538 Comm: syz.0.5977 Not tainted syzkaller #0 PREEMPT(full) [ 920.110585][T29538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 920.110598][T29538] Call Trace: [ 920.110606][T29538] [ 920.110616][T29538] dump_stack_lvl+0xe8/0x150 [ 920.110647][T29538] should_fail_ex+0x412/0x560 [ 920.110678][T29538] should_failslab+0xa8/0x100 [ 920.110703][T29538] __kmalloc_noprof+0xde/0x7e0 [ 920.110722][T29538] ? ethnl_default_doit+0x16d/0xf40 [ 920.110747][T29538] ? rcu_is_watching+0x15/0xb0 [ 920.110770][T29538] ethnl_default_doit+0x16d/0xf40 [ 920.110801][T29538] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 920.110837][T29538] genl_family_rcv_msg_doit+0x22a/0x330 [ 920.110865][T29538] ? __asan_memcpy+0x40/0x70 [ 920.110905][T29538] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 920.110945][T29538] ? __lock_acquire+0x6b5/0x2cf0 [ 920.110984][T29538] genl_rcv_msg+0x61c/0x7a0 [ 920.111016][T29538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.111039][T29538] ? __pfx_ethnl_default_doit+0x10/0x10 [ 920.111076][T29538] netlink_rcv_skb+0x232/0x4b0 [ 920.111099][T29538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 920.111128][T29538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 920.111146][T29538] ? genl_rcv+0x19/0x40 [ 920.111192][T29538] ? down_read+0x272/0x2e0 [ 920.111208][T29538] ? genl_rcv+0xd/0x40 [ 920.111237][T29538] genl_rcv+0x28/0x40 [ 920.111260][T29538] netlink_unicast+0x80f/0x9b0 [ 920.111292][T29538] ? __pfx_netlink_unicast+0x10/0x10 [ 920.111315][T29538] ? netlink_sendmsg+0x650/0xb40 [ 920.111335][T29538] ? skb_put+0x11b/0x210 [ 920.111363][T29538] netlink_sendmsg+0x813/0xb40 [ 920.111396][T29538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.111420][T29538] ? aa_sock_msg_perm+0xf1/0x1b0 [ 920.111445][T29538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 920.111467][T29538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 920.111487][T29538] ____sys_sendmsg+0xa68/0xad0 [ 920.111511][T29538] ? __might_fault+0xaf/0x130 [ 920.111538][T29538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 920.111566][T29538] ? import_iovec+0x73/0xa0 [ 920.111593][T29538] ___sys_sendmsg+0x2a5/0x360 [ 920.111620][T29538] ? __lock_acquire+0x6b5/0x2cf0 [ 920.111650][T29538] ? __pfx____sys_sendmsg+0x10/0x10 [ 920.111719][T29538] ? __fget_files+0x2a/0x420 [ 920.111741][T29538] ? __fget_files+0x3a0/0x420 [ 920.111773][T29538] __x64_sys_sendmsg+0x1bd/0x2a0 [ 920.111803][T29538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 920.111839][T29538] ? __pfx_ksys_write+0x10/0x10 [ 920.111888][T29538] do_syscall_64+0xe2/0xf80 [ 920.111914][T29538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.111928][T29538] ? trace_irq_disable+0x37/0x100 [ 920.111943][T29538] ? clear_bhb_loop+0x60/0xb0 [ 920.111967][T29538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.111986][T29538] RIP: 0033:0x7fd6ff39aeb9 [ 920.112005][T29538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.112022][T29538] RSP: 002b:00007fd700231028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.112046][T29538] RAX: ffffffffffffffda RBX: 00007fd6ff615fa0 RCX: 00007fd6ff39aeb9 [ 920.112061][T29538] RDX: 0000000000004800 RSI: 0000200000000200 RDI: 0000000000000003 [ 920.112074][T29538] RBP: 00007fd700231090 R08: 0000000000000000 R09: 0000000000000000 [ 920.112086][T29538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.112098][T29538] R13: 00007fd6ff616038 R14: 00007fd6ff615fa0 R15: 00007fffeb0e3a88 [ 920.112133][T29538] [ 920.544755][T29523] tipc: Resetting bearer [ 920.610799][T29545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5979'. [ 920.635205][T29523] tipc: Disabling bearer [ 920.713311][T29208] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 920.723473][T29208] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 920.733843][T29208] netdevsim netdevsim3 eth4 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 920.743008][T29551] netlink: 'syz.1.5980': attribute type 9 has an invalid length. [ 920.756668][T29545] vlan0: entered promiscuous mode [ 920.762500][T29551] netlink: 'syz.1.5980': attribute type 6 has an invalid length. [ 920.770798][T29551] netlink: 'syz.1.5980': attribute type 7 has an invalid length. [ 920.778679][T29551] netlink: 'syz.1.5980': attribute type 8 has an invalid length. [ 920.786922][T29545] dummy0: entered promiscuous mode [ 920.815743][T29545] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5979'. [ 920.906330][T29555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5981'. [ 921.135362][T29558] bridge4: entered allmulticast mode [ 921.160423][T29208] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.200679][T29208] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 921.225312][T29208] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 921.312265][T29555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5981'. [ 921.340678][T29555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5981'. [ 921.565298][T29208] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.588556][T29208] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 921.630547][T29208] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 921.723836][T29591] FAULT_INJECTION: forcing a failure. [ 921.723836][T29591] name failslab, interval 1, probability 0, space 0, times 0 [ 921.759081][T29591] CPU: 0 UID: 0 PID: 29591 Comm: syz.1.5988 Not tainted syzkaller #0 PREEMPT(full) [ 921.759112][T29591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 921.759125][T29591] Call Trace: [ 921.759134][T29591] [ 921.759143][T29591] dump_stack_lvl+0xe8/0x150 [ 921.759176][T29591] should_fail_ex+0x412/0x560 [ 921.759209][T29591] should_failslab+0xa8/0x100 [ 921.759234][T29591] __kmalloc_noprof+0xde/0x7e0 [ 921.759254][T29591] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 921.759291][T29591] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 921.759329][T29591] genl_family_rcv_msg_doit+0xd9/0x330 [ 921.759358][T29591] ? __asan_memcpy+0x40/0x70 [ 921.759390][T29591] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 921.759423][T29591] ? __pfx_genl_get_cmd+0x10/0x10 [ 921.759448][T29591] ? __pfx_ethnl_default_doit+0x10/0x10 [ 921.759471][T29591] ? __pfx_ethnl_default_start+0x10/0x10 [ 921.759494][T29591] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 921.759517][T29591] ? __pfx_ethnl_default_done+0x10/0x10 [ 921.759544][T29591] ? __dev_queue_xmit+0x274/0x3850 [ 921.759583][T29591] genl_rcv_msg+0x61c/0x7a0 [ 921.759619][T29591] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.759654][T29591] ? __pfx_ethnl_default_doit+0x10/0x10 [ 921.759684][T29591] ? __pfx_ref_tracker_free+0x10/0x10 [ 921.759719][T29591] netlink_rcv_skb+0x232/0x4b0 [ 921.759744][T29591] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.759774][T29591] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 921.759793][T29591] ? genl_rcv+0x19/0x40 [ 921.759840][T29591] ? down_read+0x272/0x2e0 [ 921.759856][T29591] ? genl_rcv+0xd/0x40 [ 921.759884][T29591] genl_rcv+0x28/0x40 [ 921.759909][T29591] netlink_unicast+0x80f/0x9b0 [ 921.759940][T29591] ? __pfx_netlink_unicast+0x10/0x10 [ 921.759963][T29591] ? netlink_sendmsg+0x650/0xb40 [ 921.759984][T29591] ? skb_put+0x11b/0x210 [ 921.760014][T29591] netlink_sendmsg+0x813/0xb40 [ 921.760048][T29591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.760076][T29591] ? aa_sock_msg_perm+0xf1/0x1b0 [ 921.760102][T29591] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 921.760127][T29591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.760148][T29591] ____sys_sendmsg+0xa68/0xad0 [ 921.760176][T29591] ? __might_fault+0xaf/0x130 [ 921.760213][T29591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 921.760252][T29591] ? import_iovec+0x73/0xa0 [ 921.760286][T29591] ___sys_sendmsg+0x2a5/0x360 [ 921.760312][T29591] ? __lock_acquire+0x6b5/0x2cf0 [ 921.760345][T29591] ? __pfx____sys_sendmsg+0x10/0x10 [ 921.760416][T29591] ? __fget_files+0x2a/0x420 [ 921.760442][T29591] ? __fget_files+0x3a0/0x420 [ 921.760474][T29591] __x64_sys_sendmsg+0x1bd/0x2a0 [ 921.760504][T29591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 921.760542][T29591] ? __pfx_ksys_write+0x10/0x10 [ 921.760607][T29591] do_syscall_64+0xe2/0xf80 [ 921.760641][T29591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.760660][T29591] ? trace_irq_disable+0x37/0x100 [ 921.760680][T29591] ? clear_bhb_loop+0x60/0xb0 [ 921.760703][T29591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.760722][T29591] RIP: 0033:0x7f171559aeb9 [ 921.760741][T29591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.760758][T29591] RSP: 002b:00007f171648e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.760782][T29591] RAX: ffffffffffffffda RBX: 00007f1715815fa0 RCX: 00007f171559aeb9 [ 921.760797][T29591] RDX: 0000000000004800 RSI: 0000200000000200 RDI: 0000000000000003 [ 921.760810][T29591] RBP: 00007f171648e090 R08: 0000000000000000 R09: 0000000000000000 [ 921.760822][T29591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.760835][T29591] R13: 00007f1715816038 R14: 00007f1715815fa0 R15: 00007ffe855dd658 [ 921.760870][T29591] [ 922.185432][T29208] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 922.195393][T29208] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 922.202156][T29596] x_tables: duplicate underflow at hook 1 [ 922.205843][T29208] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 922.318523][T29601] netlink: 'syz.0.5991': attribute type 1 has an invalid length. [ 922.425348][T29601] 8021q: adding VLAN 0 to HW filter on device bond10 [ 922.459824][T29611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5995'. [ 922.474311][T29600] lo: Caught tx_queue_len zero misconfig [ 922.818675][T29208] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 922.856877][T29208] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 922.879229][T29626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5998'. [ 922.889449][T29626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5998'. [ 922.910977][T29208] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 922.930578][T29626] netlink: 'syz.0.5998': attribute type 18 has an invalid length. [ 922.966420][T29208] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 923.030166][T13814] IPVS: stop unused estimator thread 0... [ 923.124873][T29644] FAULT_INJECTION: forcing a failure. [ 923.124873][T29644] name failslab, interval 1, probability 0, space 0, times 0 [ 923.192761][T29644] CPU: 1 UID: 0 PID: 29644 Comm: syz.1.6001 Not tainted syzkaller #0 PREEMPT(full) [ 923.192790][T29644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 923.192803][T29644] Call Trace: [ 923.192812][T29644] [ 923.192821][T29644] dump_stack_lvl+0xe8/0x150 [ 923.192852][T29644] should_fail_ex+0x412/0x560 [ 923.192883][T29644] should_failslab+0xa8/0x100 [ 923.192907][T29644] __kmalloc_noprof+0xde/0x7e0 [ 923.192928][T29644] ? ethnl_default_doit+0x16d/0xf40 [ 923.192952][T29644] ? rcu_is_watching+0x15/0xb0 [ 923.192975][T29644] ethnl_default_doit+0x16d/0xf40 [ 923.193005][T29644] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 923.193041][T29644] genl_family_rcv_msg_doit+0x22a/0x330 [ 923.193067][T29644] ? __asan_memcpy+0x40/0x70 [ 923.193097][T29644] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 923.193146][T29644] ? __dev_queue_xmit+0x274/0x3850 [ 923.193183][T29644] genl_rcv_msg+0x61c/0x7a0 [ 923.193217][T29644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 923.193243][T29644] ? __pfx_ethnl_default_doit+0x10/0x10 [ 923.193273][T29644] ? __pfx_ref_tracker_free+0x10/0x10 [ 923.193305][T29644] netlink_rcv_skb+0x232/0x4b0 [ 923.193327][T29644] ? __pfx_genl_rcv_msg+0x10/0x10 [ 923.193355][T29644] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 923.193373][T29644] ? genl_rcv+0x19/0x40 [ 923.193417][T29644] ? down_read+0x272/0x2e0 [ 923.193433][T29644] ? genl_rcv+0xd/0x40 [ 923.193461][T29644] genl_rcv+0x28/0x40 [ 923.193484][T29644] netlink_unicast+0x80f/0x9b0 [ 923.193514][T29644] ? __pfx_netlink_unicast+0x10/0x10 [ 923.193535][T29644] ? netlink_sendmsg+0x650/0xb40 [ 923.193555][T29644] ? skb_put+0x11b/0x210 [ 923.193595][T29644] netlink_sendmsg+0x813/0xb40 [ 923.193628][T29644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.193655][T29644] ? aa_sock_msg_perm+0xf1/0x1b0 [ 923.193682][T29644] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 923.193706][T29644] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.193727][T29644] ____sys_sendmsg+0xa68/0xad0 [ 923.193754][T29644] ? __might_fault+0xaf/0x130 [ 923.193790][T29644] ? __pfx_____sys_sendmsg+0x10/0x10 [ 923.193827][T29644] ? import_iovec+0x73/0xa0 [ 923.193861][T29644] ___sys_sendmsg+0x2a5/0x360 [ 923.193886][T29644] ? __lock_acquire+0x6b5/0x2cf0 [ 923.193919][T29644] ? __pfx____sys_sendmsg+0x10/0x10 [ 923.193989][T29644] ? __fget_files+0x2a/0x420 [ 923.194011][T29644] ? __fget_files+0x3a0/0x420 [ 923.194046][T29644] __x64_sys_sendmsg+0x1bd/0x2a0 [ 923.194076][T29644] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 923.194116][T29644] ? __pfx_ksys_write+0x10/0x10 [ 923.194159][T29644] do_syscall_64+0xe2/0xf80 [ 923.194186][T29644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.194204][T29644] ? trace_irq_disable+0x37/0x100 [ 923.194223][T29644] ? clear_bhb_loop+0x60/0xb0 [ 923.194247][T29644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.194267][T29644] RIP: 0033:0x7f171559aeb9 [ 923.194287][T29644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.194303][T29644] RSP: 002b:00007f171648e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.194326][T29644] RAX: ffffffffffffffda RBX: 00007f1715815fa0 RCX: 00007f171559aeb9 [ 923.194342][T29644] RDX: 0000000000004800 RSI: 0000200000000200 RDI: 0000000000000003 [ 923.194355][T29644] RBP: 00007f171648e090 R08: 0000000000000000 R09: 0000000000000000 [ 923.194368][T29644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.194379][T29644] R13: 00007f1715816038 R14: 00007f1715815fa0 R15: 00007ffe855dd658 [ 923.194415][T29644] [ 923.678146][T29659] tipc: Enabled bearer , priority 0 [ 923.758076][T29659] syzkaller0: entered promiscuous mode [ 923.785275][T29659] syzkaller0: entered allmulticast mode [ 923.949903][T29659] tipc: Resetting bearer [ 923.991466][T29658] tipc: Resetting bearer [ 924.073269][T29674] netlink: 'syz.1.6007': attribute type 21 has an invalid length. [ 924.089035][T29658] tipc: Disabling bearer [ 924.102578][T29674] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6007'. [ 924.163124][T29678] netlink: 'syz.1.6007': attribute type 11 has an invalid length. [ 924.206307][T29674] netlink: 'syz.1.6007': attribute type 4 has an invalid length. [ 924.257659][T29674] netlink: 'syz.1.6007': attribute type 5 has an invalid length. [ 924.268998][T29674] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6007'. [ 924.327592][T29208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.377190][T29685] lo: Caught tx_queue_len zero misconfig [ 924.460050][T29208] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.497766][ T8113] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.505082][ T8113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.555082][ T8113] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.562355][ T8113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 924.954580][T29707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6012'. [ 925.328430][T29714] openvswitch: netlink: Actions may not be safe on all matching packets [ 925.373428][T29208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.398436][T29716] FAULT_INJECTION: forcing a failure. [ 925.398436][T29716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.398913][T29714] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6015'. [ 925.490788][T29716] CPU: 0 UID: 0 PID: 29716 Comm: syz.5.6016 Not tainted syzkaller #0 PREEMPT(full) [ 925.490826][T29716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 925.490836][T29716] Call Trace: [ 925.490845][T29716] [ 925.490854][T29716] dump_stack_lvl+0xe8/0x150 [ 925.490884][T29716] should_fail_ex+0x412/0x560 [ 925.490914][T29716] _copy_to_user+0x31/0xb0 [ 925.490945][T29716] simple_read_from_buffer+0xe1/0x170 [ 925.490972][T29716] proc_fail_nth_read+0x1bb/0x230 [ 925.491002][T29716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 925.491032][T29716] ? rw_verify_area+0x2a6/0x4d0 [ 925.491057][T29716] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 925.491094][T29716] vfs_read+0x20c/0xa70 [ 925.491118][T29716] ? fdget_pos+0x246/0x320 [ 925.491146][T29716] ? __pfx___mutex_lock+0x10/0x10 [ 925.491173][T29716] ? __pfx_vfs_read+0x10/0x10 [ 925.491201][T29716] ? __fget_files+0x2a/0x420 [ 925.491228][T29716] ? __fget_files+0x3a0/0x420 [ 925.491246][T29716] ? __fget_files+0x2a/0x420 [ 925.491275][T29716] ksys_read+0x150/0x270 [ 925.491304][T29716] ? __pfx_ksys_read+0x10/0x10 [ 925.491339][T29716] do_syscall_64+0xe2/0xf80 [ 925.491363][T29716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.491382][T29716] ? trace_irq_disable+0x37/0x100 [ 925.491401][T29716] ? clear_bhb_loop+0x60/0xb0 [ 925.491425][T29716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.491444][T29716] RIP: 0033:0x7f6d9d75b78e [ 925.491464][T29716] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 925.491480][T29716] RSP: 002b:00007f6d9e6eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 925.491502][T29716] RAX: ffffffffffffffda RBX: 00007f6d9e6eb6c0 RCX: 00007f6d9d75b78e [ 925.491517][T29716] RDX: 000000000000000f RSI: 00007f6d9e6eb0a0 RDI: 0000000000000004 [ 925.491530][T29716] RBP: 00007f6d9e6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 925.491542][T29716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.491554][T29716] R13: 00007f6d9da16038 R14: 00007f6d9da15fa0 R15: 00007ffe67749dd8 [ 925.491588][T29716] [ 925.720275][T29208] veth0_vlan: entered promiscuous mode [ 925.734209][T29208] veth1_vlan: entered promiscuous mode [ 925.984383][T29208] veth0_macvtap: entered promiscuous mode [ 926.032861][T29208] veth1_macvtap: entered promiscuous mode [ 926.048654][T29725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6018'. [ 926.058083][T29725] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6018'. [ 926.081953][T29727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6018'. [ 926.136770][T29208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.229086][T29208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.331103][T26554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.339981][T26554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.366244][T26554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.452291][T26554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.542110][T29736] syzkaller1: entered promiscuous mode [ 926.558076][T29736] syzkaller1: entered allmulticast mode [ 926.587875][T29734] tipc: Enabling of bearer rejected, already enabled [ 926.599938][T29741] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 926.641648][T29741] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 926.841764][T26568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.849657][T26568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.001649][T29754] syz_tun: left allmulticast mode [ 927.018038][T13814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.050963][T13814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.113605][T29765] FAULT_INJECTION: forcing a failure. [ 927.113605][T29765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.158724][T29765] CPU: 1 UID: 0 PID: 29765 Comm: syz.2.6028 Not tainted syzkaller #0 PREEMPT(full) [ 927.158755][T29765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 927.158768][T29765] Call Trace: [ 927.158777][T29765] [ 927.158786][T29765] dump_stack_lvl+0xe8/0x150 [ 927.158827][T29765] should_fail_ex+0x412/0x560 [ 927.158857][T29765] _copy_from_user+0x2d/0xb0 [ 927.158887][T29765] __copy_msghdr+0x3c5/0x5b0 [ 927.158921][T29765] ___sys_sendmsg+0x213/0x360 [ 927.158947][T29765] ? __lock_acquire+0x6b5/0x2cf0 [ 927.158979][T29765] ? __pfx____sys_sendmsg+0x10/0x10 [ 927.159045][T29765] ? __fget_files+0x2a/0x420 [ 927.159066][T29765] ? __fget_files+0x3a0/0x420 [ 927.159099][T29765] __x64_sys_sendmsg+0x1bd/0x2a0 [ 927.159130][T29765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 927.159168][T29765] ? __pfx_ksys_write+0x10/0x10 [ 927.159210][T29765] do_syscall_64+0xe2/0xf80 [ 927.159237][T29765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.159254][T29765] ? trace_irq_disable+0x37/0x100 [ 927.159273][T29765] ? clear_bhb_loop+0x60/0xb0 [ 927.159297][T29765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.159316][T29765] RIP: 0033:0x7f4fb8d9aeb9 [ 927.159336][T29765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.159352][T29765] RSP: 002b:00007f4fb9c7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.159376][T29765] RAX: ffffffffffffffda RBX: 00007f4fb9015fa0 RCX: 00007f4fb8d9aeb9 [ 927.159389][T29765] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 927.159402][T29765] RBP: 00007f4fb9c7e090 R08: 0000000000000000 R09: 0000000000000000 [ 927.159414][T29765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.159427][T29765] R13: 00007f4fb9016038 R14: 00007f4fb9015fa0 R15: 00007ffc45c1b408 [ 927.159460][T29765] [ 927.455086][T29777] netlink: 'syz.5.6031': attribute type 15 has an invalid length. [ 927.468981][T29778] netlink: 'syz.5.6031': attribute type 15 has an invalid length. [ 927.478036][T29776] __nla_validate_parse: 5 callbacks suppressed [ 927.478055][T29776] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6031'. [ 927.517345][T29777] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6031'. [ 927.632937][T29761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6027'. [ 927.739985][T29761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6027'. [ 927.751413][T29791] bond0: Caught tx_queue_len zero misconfig [ 927.798782][T29781] GUP no longer grows the stack in syz.0.6027 (29781): 200000008000-200000800000 (200000007000) [ 927.869530][T29781] CPU: 0 UID: 0 PID: 29781 Comm: syz.0.6027 Not tainted syzkaller #0 PREEMPT(full) [ 927.869561][T29781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 927.869581][T29781] Call Trace: [ 927.869591][T29781] [ 927.869601][T29781] dump_stack_lvl+0xe8/0x150 [ 927.869635][T29781] __get_user_pages+0x2453/0x29d0 [ 927.869693][T29781] ? __gup_longterm_locked+0xc4e/0x1630 [ 927.869722][T29781] ? down_read_killable+0x1bb/0x340 [ 927.869751][T29781] __gup_longterm_locked+0xdcf/0x1630 [ 927.869796][T29781] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 927.869842][T29781] gup_fast_fallback+0x1d82/0x22e0 [ 927.869920][T29781] ? __pfx_gup_fast_fallback+0x10/0x10 [ 927.869965][T29781] ? pin_user_pages_fast+0x4d/0xb0 [ 927.869997][T29781] iov_iter_extract_pages+0x37b/0x5f0 [ 927.870041][T29781] extract_iter_to_sg+0xe62/0x2520 [ 927.870088][T29781] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 927.870135][T29781] ? __asan_memset+0x22/0x50 [ 927.870165][T29781] af_alg_get_rsgl+0x436/0x810 [ 927.870219][T29781] skcipher_recvmsg+0x3a3/0x1140 [ 927.870263][T29781] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 927.870281][T29781] ? __local_bh_enable_ip+0xd0/0x130 [ 927.870302][T29781] ? skcipher_check_key+0x173/0x1e0 [ 927.870322][T29781] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 927.870345][T29781] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 927.870367][T29781] sock_recvmsg+0x22c/0x270 [ 927.870396][T29781] __sys_recvfrom+0x240/0x3c0 [ 927.870429][T29781] ? __pfx___sys_recvfrom+0x10/0x10 [ 927.870451][T29781] ? do_futex+0x395/0x420 [ 927.870515][T29781] ? rcu_is_watching+0x15/0xb0 [ 927.870544][T29781] __x64_sys_recvfrom+0xde/0x100 [ 927.870575][T29781] do_syscall_64+0xe2/0xf80 [ 927.870603][T29781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.870621][T29781] ? trace_irq_disable+0x37/0x100 [ 927.870641][T29781] ? clear_bhb_loop+0x60/0xb0 [ 927.870667][T29781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.870687][T29781] RIP: 0033:0x7fd6ff39aeb9 [ 927.870707][T29781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.870725][T29781] RSP: 002b:00007fd700210028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 927.870749][T29781] RAX: ffffffffffffffda RBX: 00007fd6ff616090 RCX: 00007fd6ff39aeb9 [ 927.870764][T29781] RDX: ffffffffffffffbf RSI: 00002000000030c0 RDI: 0000000000000005 [ 927.870778][T29781] RBP: 00007fd6ff408c1f R08: 0000000000000000 R09: ffffffffffffffb5 [ 927.870792][T29781] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 927.870804][T29781] R13: 00007fd6ff616128 R14: 00007fd6ff616090 R15: 00007fffeb0e3a88 [ 927.870842][T29781] [ 928.576892][T29815] syzkaller0: entered promiscuous mode [ 928.594256][T29815] syzkaller0: entered allmulticast mode [ 928.641224][T29815] tipc: Started in network mode [ 928.654697][T29815] tipc: Node identity 7ab1a01fcaf, cluster identity 4711 [ 928.694396][T29815] tipc: Enabled bearer , priority 0 [ 928.703627][T29827] FAULT_INJECTION: forcing a failure. [ 928.703627][T29827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.764333][T29827] CPU: 1 UID: 0 PID: 29827 Comm: syz.5.6043 Not tainted syzkaller #0 PREEMPT(full) [ 928.764367][T29827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 928.764379][T29827] Call Trace: [ 928.764387][T29827] [ 928.764396][T29827] dump_stack_lvl+0xe8/0x150 [ 928.764427][T29827] should_fail_ex+0x412/0x560 [ 928.764455][T29827] _copy_to_user+0x31/0xb0 [ 928.764484][T29827] simple_read_from_buffer+0xe1/0x170 [ 928.764511][T29827] proc_fail_nth_read+0x1bb/0x230 [ 928.764541][T29827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.764571][T29827] ? rw_verify_area+0x2a6/0x4d0 [ 928.764594][T29827] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 928.764620][T29827] vfs_read+0x20c/0xa70 [ 928.764645][T29827] ? fdget_pos+0x246/0x320 [ 928.764673][T29827] ? __pfx___mutex_lock+0x10/0x10 [ 928.764701][T29827] ? __pfx_vfs_read+0x10/0x10 [ 928.764731][T29827] ? __fget_files+0x2a/0x420 [ 928.764756][T29827] ? __fget_files+0x3a0/0x420 [ 928.764777][T29827] ? __fget_files+0x2a/0x420 [ 928.764807][T29827] ksys_read+0x150/0x270 [ 928.764846][T29827] ? __pfx_ksys_read+0x10/0x10 [ 928.764886][T29827] do_syscall_64+0xe2/0xf80 [ 928.764913][T29827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.764932][T29827] ? trace_irq_disable+0x37/0x100 [ 928.764951][T29827] ? clear_bhb_loop+0x60/0xb0 [ 928.764974][T29827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.764992][T29827] RIP: 0033:0x7f6d9d75b78e [ 928.765011][T29827] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 928.765028][T29827] RSP: 002b:00007f6d9e6eafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 928.765050][T29827] RAX: ffffffffffffffda RBX: 00007f6d9e6eb6c0 RCX: 00007f6d9d75b78e [ 928.765064][T29827] RDX: 000000000000000f RSI: 00007f6d9e6eb0a0 RDI: 0000000000000004 [ 928.765076][T29827] RBP: 00007f6d9e6eb090 R08: 0000000000000000 R09: 0000000000000000 [ 928.765088][T29827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.765100][T29827] R13: 00007f6d9da16038 R14: 00007f6d9da15fa0 R15: 00007ffe67749dd8 [ 928.765134][T29827] [ 929.139847][T29813] tipc: Resetting bearer [ 929.215171][T29813] tipc: Disabling bearer [ 929.235624][T29834] ip6tnl0: Caught tx_queue_len zero misconfig [ 929.290820][T29840] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6045'. [ 929.327226][T29794] lo speed is unknown, defaulting to 1000 [ 929.335786][T29794] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 929.364288][T28437] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 929.382952][T28437] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 929.396517][T28437] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 929.407439][T28437] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 929.416395][T28437] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 929.515980][T29846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 929.587372][T29852] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6048'. [ 930.099136][T29860] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6049'. [ 930.112182][T29841] lo speed is unknown, defaulting to 1000 [ 930.153504][T29841] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 931.252539][T29904] syzkaller0: entered promiscuous mode [ 931.258073][T29904] syzkaller0: entered allmulticast mode [ 931.278823][T29905] bond0: (slave batadv0): Releasing backup interface [ 931.288947][T29905] bridge_slave_0: left promiscuous mode [ 931.314413][T29905] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.342506][T29905] bond0: (slave bond_slave_0): Releasing backup interface [ 931.363188][T29905] bond0: (slave bond_slave_1): Releasing backup interface [ 931.393126][T29905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.422070][T29905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.455100][T29905] bond1: (slave ip6gretap2): Releasing active interface [ 931.467333][T29905] bond4: (slave geneve2): Releasing active interface [ 931.511376][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 931.518433][ T52] Bluetooth: hci5: command tx timeout [ 931.524166][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 931.573918][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.589430][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.623657][T29880] lo speed is unknown, defaulting to 1000 [ 931.623657][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.623705][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.769660][T29916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6063'. [ 931.810541][T29916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6063'. [ 931.823770][T29880] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 931.839877][T29916] netlink: 'syz.3.6063': attribute type 14 has an invalid length. [ 931.883160][T29916] netlink: 'syz.3.6063': attribute type 11 has an invalid length. [ 931.895044][T29919] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6062'. [ 932.183826][T29928] Cannot find set identified by id 65470 to match [ 932.219602][T29841] chnl_net:caif_netlink_parms(): no params data found [ 932.599938][T29841] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.622255][T29841] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.639780][T29841] bridge_slave_0: entered allmulticast mode [ 932.671032][T29841] bridge_slave_0: entered promiscuous mode [ 932.682908][T29841] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.700810][T29841] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.711410][T29841] bridge_slave_1: entered allmulticast mode [ 932.720268][T29841] bridge_slave_1: entered promiscuous mode [ 932.739925][T29945] netlink: 'syz.3.6070': attribute type 1 has an invalid length. [ 932.793116][T29945] __nla_validate_parse: 6 callbacks suppressed [ 932.793132][T29945] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6070'. [ 932.858640][T29947] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 933.062196][T29841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.116578][T29841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.182125][T29841] team0: Port device team_slave_0 added [ 933.191959][T29841] team0: Port device team_slave_1 added [ 933.246603][T29841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.259751][T29841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.289631][T29841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 933.325875][T29841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 933.335780][T29841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 933.365124][T29841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.437901][T29950] lo speed is unknown, defaulting to 1000 [ 933.484355][T29950] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 933.511692][T29841] hsr_slave_0: entered promiscuous mode [ 933.519172][T29841] hsr_slave_1: entered promiscuous mode [ 933.574790][T29963] tc_dump_action: action bad kind [ 933.600907][ T52] Bluetooth: hci5: command tx timeout [ 933.944781][T29973] netlink: 25 bytes leftover after parsing attributes in process `syz.3.6077'. [ 934.312904][T29980] team_slave_0: entered promiscuous mode [ 934.318726][T29980] team_slave_1: entered promiscuous mode [ 934.327564][T29980] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 934.853252][T29841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 934.914379][T29841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 934.984547][T29841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 935.055349][T29841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 935.108432][T30006] batadv_slave_0: entered promiscuous mode [ 935.177317][T30012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6087'. [ 935.198226][T30006] pimreg: entered allmulticast mode [ 935.250306][T30002] batadv_slave_0: left promiscuous mode [ 935.403348][T29841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.428045][T30023] netlink: 'syz.1.6090': attribute type 3 has an invalid length. [ 935.457258][T30026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6091'. [ 935.459452][T29841] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.506454][T26572] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.513726][T26572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.539669][T13814] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.546908][T13814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.612388][T30029] netlink: 124 bytes leftover after parsing attributes in process `syz.3.6093'. [ 935.662854][T30037] erspan0: entered promiscuous mode [ 935.670905][ T52] Bluetooth: hci5: command tx timeout [ 935.688246][T30037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6094'. [ 935.836596][T30046] IPVS: Unknown mcast interface: veth1_vlan [ 935.926586][T30049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6098'. [ 936.073916][T30057] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 936.177192][T30060] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6102'. [ 936.237657][T29841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.386766][T29841] veth0_vlan: entered promiscuous mode [ 936.441757][T29841] veth1_vlan: entered promiscuous mode [ 936.494773][T29841] veth0_macvtap: entered promiscuous mode [ 936.535739][T29841] veth1_macvtap: entered promiscuous mode [ 936.595669][T29841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.644095][T29841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.691196][T13807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.714714][T13807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.744965][T13807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.763424][T13807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.790525][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 936.798718][ C1] lec:lec_tx_timeout: lec0 [ 937.095697][T13814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.114125][T13814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.208189][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.258833][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.482986][T30106] ip6erspan0: entered promiscuous mode [ 937.761239][ T52] Bluetooth: hci5: command tx timeout [ 937.768051][T30121] netlink: 'syz.3.6113': attribute type 1 has an invalid length. [ 937.929819][T30121] bond1: entered promiscuous mode [ 937.981627][T30121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 938.015174][T30092] lo speed is unknown, defaulting to 1000 [ 938.040252][T30092] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 938.092488][T30137] bond1: (slave bridge1): making interface the new active one [ 938.150236][T30137] bridge1: entered promiscuous mode [ 938.166684][T30137] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 938.579635][T30157] bond9: option updelay: invalid value (18446744072924056005) [ 938.639917][T30157] bond9: option updelay: allowed values 0 - 2147483647 [ 938.649777][T30157] bond9 (unregistering): Released all slaves [ 938.849365][T30165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.898187][T30163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 938.948369][T30167] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6125'. [ 939.087666][T30181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6125'. [ 939.152167][T30182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6125'. [ 939.242277][T30182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6125'. [ 939.274330][T30182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6125'. [ 939.313421][T30182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6125'. [ 939.327047][T30182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6125'. [ 939.352273][T30182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6125'. [ 939.376864][T30182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6125'. [ 939.407889][T30182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6125'. [ 939.783975][T30193] žÿ: renamed from team_slave_1 (while UP) [ 940.866445][T30175] lo speed is unknown, defaulting to 1000 [ 940.906402][T30175] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 941.564687][T30230] lo speed is unknown, defaulting to 1000 [ 941.668766][T30256] 8021q: adding VLAN 0 to HW filter on device bond4 [ 941.680294][T30230] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 941.766427][T30256] bond4: (slave ip6gretap1): making interface the new active one [ 941.783801][T30256] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 942.394011][T30270] netlink: 'syz.5.6149': attribute type 10 has an invalid length. [ 942.443981][ T30] audit: type=1800 audit(1770605901.068:25): pid=30268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6150" name=CB dev="tmpfs" ino=2988 res=0 errno=0 [ 942.619506][T30273] tipc: Enabled bearer , priority 0 [ 942.628916][T30273] syzkaller0: entered promiscuous mode [ 942.635078][T30273] syzkaller0: entered allmulticast mode [ 942.783832][T30279] netlink: 'syz.5.6152': attribute type 6 has an invalid length. [ 942.909086][T30273] tipc: Resetting bearer [ 942.945971][T30272] tipc: Resetting bearer [ 943.013563][T30272] tipc: Disabling bearer [ 943.476266][T30319] netlink: 'syz.5.6161': attribute type 13 has an invalid length. [ 943.526589][T30319] netlink: 'syz.5.6161': attribute type 17 has an invalid length. [ 944.036893][T30333] __nla_validate_parse: 142 callbacks suppressed [ 944.036917][T30333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6168'. [ 946.292774][T30319] syz_tun: left promiscuous mode [ 946.316219][T30319] bond0: left allmulticast mode [ 946.321615][T30319] bond_slave_0: left allmulticast mode [ 946.327104][T30319] bond_slave_1: left allmulticast mode [ 946.345489][T30319] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.357649][T30319] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 946.714034][T30352] bond9: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 946.736898][T30352] bond9 (unregistering): Released all slaves [ 946.903820][T30370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6178'. [ 947.081553][T30384] netlink: 'syz.2.6180': attribute type 10 has an invalid length. [ 947.115501][T30384] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.135232][T30384] bond0: (slave team0): Enslaving as an active interface with an up link [ 947.217598][T30384] netlink: 'syz.2.6180': attribute type 1 has an invalid length. [ 947.455288][ T30] audit: type=1800 audit(1770605906.078:26): pid=30379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6176" name="memory.events" dev="tmpfs" ino=252 res=0 errno=0 [ 949.702489][T30357] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 949.934088][T30409] syzkaller0: entered promiscuous mode [ 949.939613][T30409] syzkaller0: entered allmulticast mode [ 950.003384][T30414] syzkaller1: entered promiscuous mode [ 950.024976][T30414] syzkaller1: entered allmulticast mode [ 950.481853][T30435] syz_tun: entered promiscuous mode [ 950.501802][T30435] syz_tun: refused to change device tx_queue_len [ 950.508642][T30435] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 950.638620][T30438] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6195'. [ 950.650876][T30439] siw: device registration error -23 [ 950.663646][T30438] team_slave_0: left allmulticast mode [ 950.677078][T30438] team0 (unregistering): Port device team_slave_0 removed [ 950.693533][T30438] team_slave_1: left allmulticast mode [ 950.710213][T30438] team0 (unregistering): Port device team_slave_1 removed [ 950.732604][T30438] team0 (unregistering): Port device bridge0 removed [ 950.839616][T30449] xt_TPROXY: Can be used only with -p tcp or -p udp [ 950.943671][T30451] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 950.978370][T30451] bond9 (unregistering): Released all slaves [ 951.359557][T30475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6205'. [ 951.406574][T30475] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6205'. [ 951.455134][T30464] lo speed is unknown, defaulting to 1000 [ 951.463733][T30464] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 951.485430][T30486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6205'. [ 951.496723][T30486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6205'. [ 951.582385][T30486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6205'. [ 951.718056][T30486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6205'. [ 952.078129][T30519] netlink: 576 bytes leftover after parsing attributes in process `syz.0.6215'. [ 952.115756][T30522] pim6reg: entered allmulticast mode [ 952.155044][T30522] pim6reg: left allmulticast mode [ 952.210144][T30528] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6218'. [ 952.240572][T30528] netlink: 196 bytes leftover after parsing attributes in process `syz.5.6218'. [ 953.075321][T11628] lec:lec_start_xmit: lec0:No lecd attached [ 953.413698][T28437] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 953.424245][T28437] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 953.440763][T28437] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 953.449202][T28437] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 953.457086][T28437] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 953.773392][T30577] netlink: 'syz.5.6231': attribute type 2 has an invalid length. [ 953.796370][T30559] tipc: Enabled bearer , priority 0 [ 953.892512][T30577] : entered promiscuous mode [ 953.921223][T30571] tipc: Resetting bearer [ 954.045162][T30582] nbd: couldn't find device at index 0 [ 954.192584][T30552] tipc: Disabling bearer [ 954.464649][T30588] dvmrp12: entered allmulticast mode [ 954.605298][T30558] lo speed is unknown, defaulting to 1000 [ 954.623584][T30558] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 954.732876][T30596] netlink: 'syz.5.6236': attribute type 21 has an invalid length. [ 954.926660][T30587] dvmrp12: left allmulticast mode [ 955.095082][T30580] lo speed is unknown, defaulting to 1000 [ 955.232949][T30580] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 955.423815][T30619] bridge_slave_1: left allmulticast mode [ 955.429511][T30619] bridge_slave_1: left promiscuous mode [ 955.447372][T30619] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.513231][ T52] Bluetooth: hci4: command tx timeout [ 955.658119][T30619] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 956.011698][T30633] tipc: Enabled bearer , priority 14 [ 956.414656][T30656] __nla_validate_parse: 8 callbacks suppressed [ 956.414679][T30656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6249'. [ 956.436783][T30647] netlink: 'syz.3.6247': attribute type 1 has an invalid length. [ 956.527949][T30558] chnl_net:caif_netlink_parms(): no params data found [ 956.677574][T30659] netlink: 'syz.5.6251': attribute type 3 has an invalid length. [ 956.700353][T30656] syzkaller1: entered promiscuous mode [ 956.706289][T30656] syzkaller1: entered allmulticast mode [ 956.901295][T30558] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.908470][T30558] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.917880][T30558] bridge_slave_0: entered allmulticast mode [ 956.934534][T30558] bridge_slave_0: entered promiscuous mode [ 956.957252][T30558] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.971768][T30558] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.981113][T30558] bridge_slave_1: entered allmulticast mode [ 956.989428][T30558] bridge_slave_1: entered promiscuous mode [ 957.096500][T30674] tipc: Enabled bearer , priority 0 [ 957.102817][T30681] netlink: 'syz.3.6255': attribute type 1 has an invalid length. [ 957.175277][T30674] syzkaller0: entered promiscuous mode [ 957.182368][T30674] syzkaller0: entered allmulticast mode [ 957.188607][T30674] tipc: Resetting bearer [ 957.208992][T30685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6255'. [ 957.213960][T30558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.268188][T30681] 8021q: adding VLAN 0 to HW filter on device bond2 [ 957.276933][ T798] tipc: Node number set to 2957090847 [ 957.301508][T30688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6256'. [ 957.311217][T30688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6256'. [ 957.337141][T30684] bond2: (slave syz_tun): making interface the new active one [ 957.347207][T30684] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 957.364257][T30558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.405619][T30672] tipc: Resetting bearer [ 957.412642][T30690] Cannot find set identified by id 0 to match [ 957.601436][ T52] Bluetooth: hci4: command tx timeout [ 958.790647][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5710 ms [ 958.798723][ C1] lec:lec_tx_timeout: lec0 [ 959.509849][T30672] tipc: Disabling bearer [ 959.615673][T30710] netlink: 84 bytes leftover after parsing attributes in process `syz.3.6261'. [ 959.656579][T30558] team0: Port device team_slave_0 added [ 959.671093][ T52] Bluetooth: hci4: command tx timeout [ 959.682571][T30558] team0: Port device team_slave_1 added [ 959.750090][T30558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.773384][T30714] netlink: 'syz.3.6263': attribute type 11 has an invalid length. [ 959.784285][T30714] netlink: 'syz.3.6263': attribute type 23 has an invalid length. [ 959.793069][T30714] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6263'. [ 959.812097][T30558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.846097][T30558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.888054][T30558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.907540][T30558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.995813][T30558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.112078][T30718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6265'. [ 960.122475][T30718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6265'. [ 960.240272][T30558] hsr_slave_0: entered promiscuous mode [ 960.247873][T30558] hsr_slave_1: entered promiscuous mode [ 960.279625][T30558] debugfs: 'hsr0' already exists in 'hsr' [ 960.286333][T30558] Cannot create hsr debugfs directory [ 960.527427][T30750] tunl0: Caught tx_queue_len zero misconfig [ 960.540763][T30750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6272'. [ 960.955303][T30773] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6277'. [ 961.175261][T30558] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 961.199689][T30558] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 961.212954][T30558] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 961.233533][T30558] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 961.242638][T30784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 961.263508][T30784] netlink: 'syz.5.6281': attribute type 4 has an invalid length. [ 961.346869][T30796] netlink: 'syz.5.6282': attribute type 1 has an invalid length. [ 961.391577][T30799] netlink: 'syz.3.6283': attribute type 1 has an invalid length. [ 961.417881][T30796] bond5: (slave bridge6): making interface the new active one [ 961.426637][T30796] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 961.450973][T30796] bond5: (slave bridge7): Enslaving as an active interface with a down link [ 961.478019][T30796] macvlan0: entered promiscuous mode [ 961.484006][T30796] macvlan0: entered allmulticast mode [ 961.493797][T30796] bond5: entered promiscuous mode [ 961.499908][T30796] bridge6: entered promiscuous mode [ 961.507239][T30796] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 961.516971][T30796] bond5: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 961.537888][T30796] bond5: left promiscuous mode [ 961.543891][T30796] bridge6: left promiscuous mode [ 961.634449][T30803] netlink: 'syz.5.6282': attribute type 49 has an invalid length. [ 961.721384][T30558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.751614][ T52] Bluetooth: hci4: command tx timeout [ 961.802632][T30558] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.817831][T30818] __nla_validate_parse: 4 callbacks suppressed [ 961.817846][T30818] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6287'. [ 961.857117][T26554] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.864438][T26554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.913388][T26554] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.920752][T26554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.045782][T30558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 962.356390][T30845] netlink: 'syz.2.6295': attribute type 2 has an invalid length. [ 962.418844][T30845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6295'. [ 962.799535][T30869] netlink: 1216 bytes leftover after parsing attributes in process `syz.0.6298'. [ 962.819903][T24400] IPVS: starting estimator thread 0... [ 962.837233][T30869] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.6298'. [ 962.855011][T30869] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6298'. [ 962.864653][T30870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6298'. [ 962.895424][T30558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.922381][T30871] IPVS: using max 25 ests per chain, 60000 per kthread [ 963.042799][T30558] veth0_vlan: entered promiscuous mode [ 963.072766][T30558] veth1_vlan: entered promiscuous mode [ 963.162179][T30558] veth0_macvtap: entered promiscuous mode [ 963.193666][T30558] veth1_macvtap: entered promiscuous mode [ 963.242722][T30890] netlink: 'syz.0.6302': attribute type 1 has an invalid length. [ 963.255092][T30558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.325156][T30890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 963.402213][T30892] bond1: (slave veth3): Enslaving as an active interface with a down link [ 963.563200][T30884] bond1: entered allmulticast mode [ 963.625498][T30558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.711991][ T8109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.798861][ T8109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.821209][T13809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.835830][T13809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.142714][ T8109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.164279][ T8109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.243336][T26554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.251496][T26554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.351181][T30923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6308'. [ 964.476143][T30926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6226'. [ 964.487891][T30926] batadv_slave_1: entered promiscuous mode [ 964.495342][T30926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6226'. [ 964.507848][T30930] lo: entered allmulticast mode [ 964.531657][T30930] block nbd5: not configured, cannot reconfigure [ 964.567529][T30930] nbd: must specify at least one socket [ 964.581883][T30930] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6310'. [ 964.596139][T30930] nbd: couldn't find a device at index 0 [ 964.668427][T30933] 8021q: adding VLAN 0 to HW filter on device bond2 [ 964.863740][T30939] syzkaller0: entered promiscuous mode [ 964.869334][T30939] syzkaller0: entered allmulticast mode [ 965.063785][T28437] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 965.076963][T28437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 965.086759][T28437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 965.096597][T28437] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 965.106511][T28437] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 967.206628][T28437] Bluetooth: hci0: command tx timeout [ 967.434542][T30952] tipc: Resetting bearer [ 967.631752][T30972] __nla_validate_parse: 2 callbacks suppressed [ 967.631775][T30972] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6322'. [ 967.686188][T30973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6321'. [ 967.862834][T30984] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6321'. [ 967.952443][T30975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6321'. [ 968.109042][T30989] bond3: invalid ARP target 0.0.0.0 specified for addition [ 968.116841][T30989] bond3: option arp_ip_target: invalid value (0) [ 968.125309][T30989] bond3 (unregistering): Released all slaves [ 968.151637][T30948] lo speed is unknown, defaulting to 1000 [ 968.159363][T30948] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 968.378501][T31002] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6329'. [ 968.393172][T31002] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.400756][T31002] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.416649][T31003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6328'. [ 968.419233][T31002] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6329'. [ 968.681635][T30949] lo speed is unknown, defaulting to 1000 [ 968.715576][T30949] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 968.811753][T31017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6333'. [ 968.844544][T31017] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6333'. [ 969.350204][T31035] mac80211_hwsim hwsim72 ªªªªª;: renamed from wlan0 [ 969.368970][T31039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6341'. [ 969.650748][T31050] netlink: 'syz.1.6344': attribute type 1 has an invalid length. [ 969.680074][T31041] pimreg: tun_chr_ioctl cmd 2147767520 [ 970.127123][T31067] mac80211_hwsim hwsim70 wlan0: entered promiscuous mode [ 970.168911][T30949] chnl_net:caif_netlink_parms(): no params data found [ 970.345317][T31084] netlink: 'syz.1.6354': attribute type 1 has an invalid length. [ 970.441659][T30949] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.448990][T30949] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.457307][T30949] bridge_slave_0: entered allmulticast mode [ 970.491236][T30949] bridge_slave_0: entered promiscuous mode [ 970.508475][T30949] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.516380][T30949] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.531881][T30949] bridge_slave_1: entered allmulticast mode [ 970.549715][T30949] bridge_slave_1: entered promiscuous mode [ 970.601222][T31100] xt_hashlimit: size too large, truncated to 1048576 [ 970.673719][T31103] xt_hashlimit: size too large, truncated to 1048576 [ 970.697628][T30949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.744405][T30949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.753525][T28437] block nbd5: Receive control failed (result -32) [ 970.797555][T31103] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 970.857531][T31108] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 970.997201][T30949] team0: Port device team_slave_0 added [ 971.043235][T30949] team0: Port device team_slave_1 added [ 971.078751][T31118] netdevsim netdevsim3: Direct firmware load for /.€ failed with error -2 [ 971.098173][T31118] netdevsim netdevsim3: Falling back to sysfs fallback for: /.€ [ 971.167744][T30949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.177646][T30949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.242594][T30949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.256165][T30949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.288327][T30949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.324345][T30949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.429454][T30949] hsr_slave_0: entered promiscuous mode [ 971.448544][T30949] hsr_slave_1: entered promiscuous mode [ 971.464501][T30949] debugfs: 'hsr0' already exists in 'hsr' [ 971.478205][T30949] Cannot create hsr debugfs directory [ 971.725018][T31137] netlink: 'syz.5.6370': attribute type 6 has an invalid length. [ 971.783360][T31137] netlink: 'syz.5.6370': attribute type 6 has an invalid length. [ 972.318577][T31157] syzkaller1: entered promiscuous mode [ 972.331140][T31157] syzkaller1: entered allmulticast mode [ 972.699532][T31177] __nla_validate_parse: 8 callbacks suppressed [ 972.699555][T31177] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6376'. [ 972.734140][T31178] netlink: 'syz.3.6375': attribute type 1 has an invalid length. [ 972.771340][T31178] netlink: 'syz.3.6375': attribute type 2 has an invalid length. [ 972.779146][T31178] netlink: 'syz.3.6375': attribute type 1 has an invalid length. [ 972.817610][T31178] netlink: 'syz.3.6375': attribute type 2 has an invalid length. [ 972.828303][T31149] lo speed is unknown, defaulting to 1000 [ 972.852842][T31178] netlink: 'syz.3.6375': attribute type 1 has an invalid length. [ 972.875768][T31149] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 972.923841][T30949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 972.975438][T30949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 973.031600][T30949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 973.074215][T30949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 973.291640][T31196] nbd6: detected capacity change from 0 to 127 [ 973.313558][T30949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.334640][T31203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6382'. [ 973.346699][T30949] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.374243][T26572] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.381475][T26572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.391984][T31203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6382'. [ 973.437640][T26572] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.444900][T26572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.762599][T31218] syzkaller0: entered promiscuous mode [ 973.768322][T31218] syzkaller0: entered allmulticast mode [ 973.815171][T28437] block nbd6: Receive control failed (result -104) [ 974.046260][T31230] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6388'. [ 974.218141][T30949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.374076][T30949] veth0_vlan: entered promiscuous mode [ 974.423655][T30949] veth1_vlan: entered promiscuous mode [ 974.531199][T30949] veth0_macvtap: entered promiscuous mode [ 974.544082][T30949] veth1_macvtap: entered promiscuous mode [ 974.595373][T30949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.633509][T30949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.671862][T26554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.688053][T31241] tipc: Enabled bearer , priority 0 [ 974.707214][T26554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.718272][T31241] syzkaller0: entered promiscuous mode [ 974.726680][T31241] syzkaller0: entered allmulticast mode [ 974.744482][T26554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.767437][T26554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.800284][T31221] lo speed is unknown, defaulting to 1000 [ 974.825544][T31241] tipc: Resetting bearer [ 974.851299][T31221] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 974.858390][T31240] tipc: Resetting bearer [ 974.878879][T31240] tipc: Disabling bearer [ 975.081306][T26554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.090652][T26554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.169938][T26554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.179170][T26554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.243031][T31252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6395'. [ 975.394128][T31257] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6397'. [ 975.891793][T31275] syzkaller0: entered promiscuous mode [ 975.897319][T31275] syzkaller0: entered allmulticast mode [ 975.976660][T31277] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6406'. [ 976.783433][T31318] siw: device registration error -23 [ 977.397598][T31344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6424'. [ 977.400662][T31347] netlink: 'syz.0.6425': attribute type 2 has an invalid length. [ 977.416776][T31342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6423'. [ 977.425989][T31342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6423'. [ 977.456868][T31347] : entered promiscuous mode [ 977.523081][T31342] .70·: renamed from hsr0 (while UP) [ 977.547915][T31342] .70·: entered allmulticast mode [ 977.554137][T31357] IPVS: stopping backup sync thread 22601 ... [ 977.571610][T31342] hsr_slave_0: entered allmulticast mode [ 977.596818][T31342] hsr_slave_1: entered allmulticast mode [ 977.615144][T31342] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 977.834037][T31373] __nla_validate_parse: 3 callbacks suppressed [ 977.834060][T31373] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6432'. [ 978.354905][T31391] xt_hashlimit: max too large, truncated to 1048576 [ 978.414783][T31395] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6436'. [ 978.553806][T31400] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6437'. [ 978.594995][T31397] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.612954][T31397] team_slave_0: left promiscuous mode [ 978.619850][T31397] team_slave_1: left promiscuous mode [ 978.714968][T31397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.730851][T31397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.864803][T31380] lo speed is unknown, defaulting to 1000 [ 978.870974][T31407] netlink: 'syz.5.6438': attribute type 15 has an invalid length. [ 978.899233][T13814] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.915080][T13814] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.926281][T31380] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 978.938866][T13814] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.952022][T13814] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.374260][T31399] lo speed is unknown, defaulting to 1000 [ 979.510082][T31429] m1Ie5èÿá: entered promiscuous mode [ 979.577601][T31399] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 980.031558][T31436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6450'. [ 980.044256][T31436] bridge_slave_0: left allmulticast mode [ 980.049948][T31436] bridge_slave_0: left promiscuous mode [ 980.067849][T31436] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.574956][T31442] IPv6: Can't replace route, no match found [ 980.661477][T31436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6450'. [ 980.697981][T31436] netlink: 336 bytes leftover after parsing attributes in process `syz.3.6450'. [ 980.750604][T31436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6450'. [ 980.761477][T31436] netlink: 336 bytes leftover after parsing attributes in process `syz.3.6450'. [ 981.252351][T31461] x_tables: unsorted entry at hook 3 [ 981.430909][T31466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6460'. [ 981.599265][T31469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6461'. [ 981.623735][T31474] netlink: 'syz.0.6462': attribute type 4 has an invalid length. [ 982.445025][T31502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 983.195375][T31489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.267779][T31489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.286075][T31489] batadv_slave_1: left promiscuous mode [ 983.393054][T31489] .70·: left allmulticast mode [ 983.397885][T31489] hsr_slave_0: left allmulticast mode [ 983.411157][T31489] hsr_slave_1: left allmulticast mode [ 983.809377][T31531] tipc: Enabling of bearer rejected, failed to enable media [ 983.830727][ T3488] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.852762][ T3488] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.880847][ T3488] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.920003][ T3488] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.048753][T31558] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 984.093076][T31563] netlink: 'syz.0.6483': attribute type 12 has an invalid length. [ 984.130624][T31563] netlink: 'syz.0.6483': attribute type 29 has an invalid length. [ 984.154321][T31563] __nla_validate_parse: 1 callbacks suppressed [ 984.154342][T31563] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6483'. [ 984.462009][T31576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6485'. [ 984.548474][T31550] netlink: 'syz.1.6481': attribute type 5 has an invalid length. [ 984.629159][T31583] netlink: 'syz.0.6489': attribute type 22 has an invalid length. [ 984.659387][T31583] netlink: 'syz.0.6489': attribute type 22 has an invalid length. [ 984.900230][T31597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6492'. [ 984.940158][T31603] netlink: 'syz.2.6495': attribute type 12 has an invalid length. [ 984.995837][T31603] netlink: 'syz.2.6495': attribute type 29 has an invalid length. [ 985.013053][T31603] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6495'. [ 985.123634][T31610] netlink: 'syz.1.6496': attribute type 1 has an invalid length. [ 985.288302][T31610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 985.468074][T31619] hsr0: entered promiscuous mode [ 985.485681][T31624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 985.502051][T31627] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6502'. [ 985.523252][T31625] »»»»»»: renamed from vlan1 [ 985.595615][T31634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6500'. [ 985.748592][T31634] hsr_slave_0: left promiscuous mode [ 985.771678][T31634] hsr_slave_1: left promiscuous mode [ 985.803167][T31634] hsr0 (unregistering): left promiscuous mode [ 985.932389][T24400] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 986.123672][T31652] netlink: 'syz.0.6507': attribute type 12 has an invalid length. [ 986.142312][T31652] netlink: 'syz.0.6507': attribute type 29 has an invalid length. [ 986.151704][T31652] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6507'. [ 986.199222][T31644] fido_id[31644]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 986.517313][T31663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6511'. [ 986.698738][T31670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6512'. [ 986.802048][T31679] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 986.879472][T31679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6512'. [ 986.942332][ T3488] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.961022][ T3488] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.011118][ T3488] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.059914][ T3488] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 987.142399][T31694] openvswitch: netlink: Actions may not be safe on all matching packets [ 987.181077][T31697] syzkaller1: entered promiscuous mode [ 987.186856][T31697] syzkaller1: entered allmulticast mode [ 987.199534][T31697] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 987.325432][T31704] .70·: renamed from hsr0 (while UP) [ 987.337620][T31704] .70·: entered allmulticast mode [ 987.343512][T31704] hsr_slave_0: entered allmulticast mode [ 987.349354][T31704] hsr_slave_1: entered allmulticast mode [ 987.377549][T31704] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 987.948530][T31741] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 988.228226][T31743] bond1: option tlb_dynamic_lb: invalid value (5) [ 988.253995][T31743] bond1 (unregistering): Released all slaves [ 988.278655][T31756] sctp: [Deprecated]: syz.1.6531 (pid 31756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 988.278655][T31756] Use struct sctp_sack_info instead [ 988.325275][T31759] rdma_rxe: rxe_newlink: failed to add lo [ 988.339084][T31752] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 988.353403][T31752] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 989.335069][T31816] validate_nla: 5 callbacks suppressed [ 989.335089][T31816] netlink: 'syz.3.6552': attribute type 1 has an invalid length. [ 989.374741][T31816] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 989.464308][T31787] lo speed is unknown, defaulting to 1000 [ 989.531518][T31787] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 989.791663][T31832] netlink: 'syz.2.6556': attribute type 5 has an invalid length. [ 989.900900][T31832] __nla_validate_parse: 9 callbacks suppressed [ 989.900923][T31832] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6556'. [ 989.964201][T31832] netlink: 'syz.2.6556': attribute type 5 has an invalid length. [ 989.996056][T31832] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6556'. [ 990.032503][T31832] netlink: 'syz.2.6556': attribute type 5 has an invalid length. [ 990.040295][T31832] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6556'. [ 990.085065][T31832] netlink: 'syz.2.6556': attribute type 5 has an invalid length. [ 990.111064][T31832] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6556'. [ 990.139750][T31832] netlink: 'syz.2.6556': attribute type 5 has an invalid length. [ 990.170797][T31832] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6556'. [ 990.184646][T31832] netlink: 'syz.2.6556': attribute type 5 has an invalid length. [ 990.193367][T31832] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6556'. [ 990.203279][T31832] netlink: 'syz.2.6556': attribute type 5 has an invalid length. [ 990.211375][T31832] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6556'. [ 990.223575][T31832] netlink: 'syz.2.6556': attribute type 5 has an invalid length. [ 990.231995][T31832] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6556'. [ 990.241898][T31832] netlink: 'syz.2.6556': attribute type 5 has an invalid length. [ 990.249713][T31832] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6556'. [ 990.259258][T31832] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6556'. [ 990.418087][T31791] lo speed is unknown, defaulting to 1000 [ 990.444622][T31791] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 990.754942][T31861] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20004 [ 991.780344][T31807] infiniband syz1: set active [ 991.822416][T31807] infiniband syz1: added bond0 [ 992.093357][T31807] RDS/IB: syz1: added [ 992.120257][T31807] smc: adding ib device syz1 with port count 1 [ 992.136629][T31807] smc: ib device syz1 port 1 has no pnetid [ 992.195856][T31891] ip6erspan1: entered allmulticast mode [ 992.600108][T31904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 992.955660][ T1301] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 992.971182][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 993.175169][T31933] sch_fq: defrate 4294967293 ignored. [ 994.032404][T31963] tipc: Started in network mode [ 994.037355][T31963] tipc: Node identity 4a94ed1c70c5, cluster identity 4711 [ 994.074152][T31963] tipc: Enabled bearer , priority 0 [ 994.152635][T31966] syzkaller0: entered promiscuous mode [ 994.189818][T31966] syzkaller0: entered allmulticast mode [ 994.614917][T31949] tipc: Resetting bearer [ 994.679628][T31949] tipc: Disabling bearer [ 994.977185][T31995] openvswitch: netlink: ufid size 5796 bytes exceeds the range (1, 16) [ 994.988271][T31990] __nla_validate_parse: 129 callbacks suppressed [ 994.988295][T31990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6600'. [ 995.000476][T31995] openvswitch: netlink: Message has 16 unknown bytes. [ 995.510224][T32014] validate_nla: 63 callbacks suppressed [ 995.510246][T32014] netlink: 'syz.1.6606': attribute type 4 has an invalid length. [ 995.656155][T32016] tipc: Enabled bearer , priority 0 [ 995.665148][T32017] syzkaller0: entered promiscuous mode [ 995.673612][T32017] syzkaller0: entered allmulticast mode [ 995.712232][T32016] tipc: Resetting bearer [ 995.740746][T32015] tipc: Resetting bearer [ 995.790386][T32015] tipc: Disabling bearer [ 995.956532][T32028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6611'. [ 995.971465][T32028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6611'. [ 995.978596][T32031] netlink: 'syz.3.6612': attribute type 10 has an invalid length. [ 995.988532][T12305] IPVS: starting estimator thread 0... [ 996.025779][T32031] team0: Failed to send options change via netlink (err -105) [ 996.051806][T32031] team0: Port device dummy0 added [ 996.053177][T32037] netlink: 'syz.3.6612': attribute type 10 has an invalid length. [ 996.093503][T32037] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 996.103146][T32034] IPVS: using max 26 ests per chain, 62400 per kthread [ 996.125354][T32037] team0: Failed to send options change via netlink (err -105) [ 996.133937][T32037] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 996.147468][T32037] team0: Port device dummy0 removed [ 996.169157][T32037] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 996.244589][T32042] netlink: 'syz.3.6614': attribute type 10 has an invalid length. [ 996.263467][T32044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.276271][T32042] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6614'. [ 996.287325][T32042] bond0: entered promiscuous mode [ 996.293120][T32042] bond_slave_0: entered promiscuous mode [ 996.300247][T32042] bond_slave_1: entered promiscuous mode [ 996.307791][T32042] dummy0: entered promiscuous mode [ 996.317530][T32042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.397043][T32047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6613'. [ 996.522098][T32050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6615'. [ 996.545900][T32050] team0: Device is already in use. [ 996.955693][T32062] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6619'. [ 997.111666][T32070] sctp: [Deprecated]: syz.2.6621 (pid 32070) Use of int in maxseg socket option. [ 997.111666][T32070] Use struct sctp_assoc_value instead [ 997.125987][T32072] netlink: 'syz.3.6623': attribute type 1 has an invalid length. [ 997.200244][T32072] 8021q: adding VLAN 0 to HW filter on device bond6 [ 997.223202][T32072] bond2: (slave syz_tun): Releasing active interface [ 997.309255][T32072] bond6: (slave syz_tun): making interface the new active one [ 997.327839][T32072] bond6: (slave syz_tun): Enslaving as an active interface with an up link [ 997.413736][T32091] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6626'. [ 997.569656][T32098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6627'. [ 997.796668][T32102] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6628'. [ 997.980676][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 997.988794][ C1] lec:lec_tx_timeout: lec0 [ 998.145821][T32123] sctp: [Deprecated]: syz.2.6631 (pid 32123) Use of int in max_burst socket option. [ 998.145821][T32123] Use struct sctp_assoc_value instead [ 998.283610][T32091] lo speed is unknown, defaulting to 1000 [ 998.293373][T32091] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 998.551342][T32135] netlink: 'syz.3.6636': attribute type 15 has an invalid length. [ 998.571847][T13807] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 998.581376][T32135] netlink: 'syz.3.6636': attribute type 15 has an invalid length. [ 998.589802][T13807] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 998.611019][T13807] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 998.621126][T13807] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 999.033519][T32150] netlink: 'syz.0.6642': attribute type 5 has an invalid length. [ 999.083844][T32150] geneve2: entered promiscuous mode [ 999.099587][T32150] geneve2: entered allmulticast mode [ 999.142497][T13807] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 999.172781][T13807] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 999.227318][T13807] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 999.281682][T13807] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 999.538858][T32163] sctp: [Deprecated]: syz.5.6646 (pid 32163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 999.538858][T32163] Use struct sctp_sack_info instead [ 999.638560][T32171] Cannot find set identified by id 0 to match [ 999.689674][T32177] tipc: Enabling of bearer rejected, failed to enable media [ 1000.354085][T32187] Cannot find del_set index 1 as target [ 1000.481149][T32198] __nla_validate_parse: 6 callbacks suppressed [ 1000.481172][T32198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6654'. [ 1000.517377][T32198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6654'. [ 1000.604719][T32206] netlink: 'syz.2.6659': attribute type 9 has an invalid length. [ 1001.106616][T32231] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1001.160185][T32243] tipc: Started in network mode [ 1001.191582][T32243] tipc: Node identity 26f940b08509, cluster identity 4711 [ 1001.217458][T32243] tipc: Enabled bearer , priority 0 [ 1001.270225][T32246] syzkaller0: entered promiscuous mode [ 1001.276850][T32243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1001.282530][T32246] syzkaller0: entered allmulticast mode [ 1001.308609][T32250] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6667'. [ 1001.323693][T32250] netlink: 245 bytes leftover after parsing attributes in process `syz.1.6667'. [ 1001.335065][T32243] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1001.377574][T32243] tipc: Resetting bearer [ 1001.401823][T32251] vlan2: entered promiscuous mode [ 1001.410324][T32251] geneve1: entered promiscuous mode [ 1001.416009][T32251] vlan2: entered allmulticast mode [ 1001.422811][T32251] geneve1: entered allmulticast mode [ 1001.428785][T32242] tipc: Resetting bearer [ 1001.458758][T32242] tipc: Disabling bearer [ 1001.469138][T32256] openvswitch: netlink: Key type 195 is out of range max 32 [ 1001.630371][T32264] netlink: 288 bytes leftover after parsing attributes in process `syz.1.6672'. [ 1001.696464][T32272] netlink: 'syz.2.6674': attribute type 15 has an invalid length. [ 1001.704566][T32272] netlink: 666 bytes leftover after parsing attributes in process `syz.2.6674'. [ 1001.777010][T32276] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6675'. [ 1002.414648][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1002.424822][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1002.453473][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1002.476398][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1002.488426][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1002.676705][T32308] bond2: (slave bond_slave_1): Device is not our slave [ 1002.691457][T32308] bond2: option active_slave: invalid value (bond_slave_1) [ 1002.731935][T32308] bond2 (unregistering): Released all slaves [ 1002.957095][T32287] lo speed is unknown, defaulting to 1000 [ 1002.974105][T32287] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 1003.001827][T32320] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6687'. [ 1003.391663][T32332] xt_l2tp: wrong L2TP version: 0 [ 1003.397236][T32332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6690'. [ 1003.445607][T32305] lo speed is unknown, defaulting to 1000 [ 1003.499430][T32334] 8021q: VLANs not supported on vcan0 [ 1003.671761][T32305] ªªªªª98åFÿÿÿÿ speed is unknown, defaulting to 1000 [ 1003.850617][ T95] block nbd6: Possible stuck request ffff888025430000: control (read@0,1024B). Runtime 30 seconds [ 1003.865117][ T95] block nbd6: Possible stuck request ffff888025430200: control (read@1024,1024B). Runtime 30 seconds [ 1003.876528][ T95] block nbd6: Possible stuck request ffff888025430400: control (read@2048,1024B). Runtime 30 seconds [ 1003.888384][ T95] block nbd6: Possible stuck request ffff888025430600: control (read@3072,1024B). Runtime 30 seconds [ 1004.314607][T32347] netlink: 616 bytes leftover after parsing attributes in process `syz.3.6694'. [ 1004.401878][T32347] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1004.555211][ T52] Bluetooth: hci2: command tx timeout [ 1004.821810][T32355] tipc: Enabled bearer , priority 0 [ 1004.927835][T32355] syzkaller0: entered promiscuous mode [ 1004.950519][T32355] syzkaller0: entered allmulticast mode [ 1005.020232][T32355] tipc: Resetting bearer [ 1005.102540][T32355] tipc: Disabling bearer [ 1005.332242][T32359] vlan1: entered allmulticast mode [ 1005.337423][T32359] team0: entered allmulticast mode [ 1005.363080][T32359] team_slave_0: entered allmulticast mode [ 1005.380775][T32359] team_slave_1: entered allmulticast mode [ 1005.878037][T32305] chnl_net:caif_netlink_parms(): no params data found [ 1006.188180][T32305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.203964][T32305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.219290][T32305] bridge_slave_0: entered allmulticast mode [ 1006.253422][T32305] bridge_slave_0: entered promiscuous mode [ 1006.290987][T32305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.315892][T32305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.335458][T32305] bridge_slave_1: entered allmulticast mode [ 1006.352706][T32305] bridge_slave_1: entered promiscuous mode [ 1006.456741][T32305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.486260][T32305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.576241][T32305] team0: Port device team_slave_0 added [ 1006.614849][T32305] team0: Port device team_slave_1 added [ 1006.630933][ T52] Bluetooth: hci2: command tx timeout [ 1006.704184][T32376] syzkaller0: entered promiscuous mode [ 1006.726326][T32376] syzkaller0: entered allmulticast mode [ 1006.811741][T32305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.818738][T32305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1006.883495][T32380] __nla_validate_parse: 1 callbacks suppressed [ 1006.883518][T32380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6700'. [ 1006.922006][T32305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.943076][T32305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.950173][T32305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.031867][T32305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1007.108619][T32380] macsec1: entered promiscuous mode [ 1007.226892][T32305] hsr_slave_0: entered promiscuous mode [ 1007.252309][T32305] hsr_slave_1: entered promiscuous mode [ 1008.378345][T32410] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6707'. [ 1008.396582][T32305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1008.434512][T32410] netlink: 'syz.0.6707': attribute type 13 has an invalid length. [ 1008.454862][T32305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1008.455711][T32408] Bluetooth: MGMT ver 1.23 [ 1008.571130][T32305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1008.631037][T32305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1008.710693][ T52] Bluetooth: hci2: command tx timeout [ 1008.853412][T32421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6710'. [ 1008.909125][T32421] "mq-deadline" elevator initialization, failed -12, falling back to "none" [ 1008.921572][T32421] ------------[ cut here ]------------ [ 1008.927063][T32421] wbt_init(disk) [ 1008.927075][T32421] WARNING: block/blk-wbt.c:741 at wbt_init_enable_default+0x4e/0x60, CPU#1: syz.3.6710/32421 [ 1008.942332][T32421] Modules linked in: [ 1008.946639][T32421] CPU: 1 UID: 0 PID: 32421 Comm: syz.3.6710 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1008.957068][T32421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1008.967291][T32421] RIP: 0010:wbt_init_enable_default+0x4e/0x60 [ 1008.974995][T32421] Code: ff 89 c6 e8 a4 c6 31 fd 85 db 75 18 e8 5b c2 31 fd 5b c3 cc cc cc cc cc e8 4f c2 31 fd 5b e9 59 5e 08 07 cc e8 43 c2 31 fd 90 <0f> 0b 90 5b e9 49 5e 08 07 cc 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 1008.995494][T32421] RSP: 0018:ffffc900048aee78 EFLAGS: 00010293 [ 1009.002000][T32421] RAX: ffffffff8492950d RBX: 00000000fffffff4 RCX: ffff88802c341e80 [ 1009.010007][T32421] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 1009.018454][T32421] RBP: 1ffff11005dbee12 R08: ffffffff8fef4977 R09: 1ffffffff1fde92e [ 1009.027029][T32421] R10: dffffc0000000000 R11: fffffbfff1fde92f R12: 0000000000000000 [ 1009.035621][T32421] R13: 1ffff110050284c6 R14: ffff88802edf7000 R15: ffff888028142620 [ 1009.043709][T32421] FS: 00007fd90777b6c0(0000) GS:ffff8881257ea000(0000) knlGS:0000000000000000 [ 1009.053167][T32421] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1009.060066][T32421] CR2: 0000000000000000 CR3: 000000003f7cc000 CR4: 00000000003526f0 [ 1009.068247][T32421] Call Trace: [ 1009.072135][T32421] [ 1009.075107][T32421] blk_register_queue+0x36a/0x3f0 [ 1009.080186][T32421] __add_disk+0x677/0xd50 [ 1009.084859][T32421] ? down_read+0x272/0x2e0 [ 1009.089416][T32421] add_disk_fwnode+0xfb/0x480 [ 1009.094453][T32421] nbd_dev_add+0x72c/0xb50 [ 1009.099005][T32421] ? __pfx_nbd_dev_add+0x10/0x10 [ 1009.104209][T32421] ? bpf_lsm_capable+0x9/0x20 [ 1009.108930][T32421] ? security_capable+0x7e/0x2c0 [ 1009.114612][T32421] ? radix_tree_lookup+0x25c/0x290 [ 1009.119786][T32421] nbd_genl_connect+0x962/0x1cf0 [ 1009.125036][T32421] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1009.128102][T32432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6712'. [ 1009.130790][T32421] ? rcu_is_watching+0x15/0xb0 [ 1009.130855][T32421] ? __nla_parse+0x40/0x60 [ 1009.130891][T32421] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1009.130931][T32421] genl_family_rcv_msg_doit+0x22a/0x330 [ 1009.130979][T32421] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1009.131022][T32421] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.131064][T32421] genl_rcv_msg+0x61c/0x7a0 [ 1009.131100][T32421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1009.131128][T32421] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1009.131176][T32421] netlink_rcv_skb+0x232/0x4b0 [ 1009.131201][T32421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1009.131232][T32421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1009.131252][T32421] ? genl_rcv+0x19/0x40 [ 1009.131288][T32421] ? down_read+0x272/0x2e0 [ 1009.131302][T32421] ? genl_rcv+0xd/0x40 [ 1009.131329][T32421] genl_rcv+0x28/0x40 [ 1009.131355][T32421] netlink_unicast+0x80f/0x9b0 [ 1009.131389][T32421] ? __pfx_netlink_unicast+0x10/0x10 [ 1009.131407][T32421] ? netlink_sendmsg+0x650/0xb40 [ 1009.131427][T32421] ? skb_put+0x11b/0x210 [ 1009.131459][T32421] netlink_sendmsg+0x813/0xb40 [ 1009.131495][T32421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.131523][T32421] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1009.131550][T32421] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1009.131576][T32421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.147356][T32433] xt_addrtype: ipv6 does not support BROADCAST matching [ 1009.150052][T32421] ____sys_sendmsg+0xa68/0xad0 [ 1009.221237][T32305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.222034][T32421] ? __might_fault+0xaf/0x130 [ 1009.292765][T32421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1009.298124][T32421] ? import_iovec+0x73/0xa0 [ 1009.298863][T32305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.302752][T32421] ___sys_sendmsg+0x2a5/0x360 [ 1009.302787][T32421] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.302822][T32421] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.302861][T32421] ? futex_wait+0x29a/0x380 [ 1009.302916][T32421] ? __fget_files+0x2a/0x420 [ 1009.334290][T32421] ? __fget_files+0x3a0/0x420 [ 1009.339024][T32421] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1009.344063][T32421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1009.349572][T32421] ? rcu_is_watching+0x15/0xb0 [ 1009.355168][T32421] do_syscall_64+0xe2/0xf80 [ 1009.359825][T32421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.366021][T32421] ? trace_irq_disable+0x37/0x100 [ 1009.371428][T32421] ? clear_bhb_loop+0x60/0xb0 [ 1009.374650][T26554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.376137][T32421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.376166][T32421] RIP: 0033:0x7fd90699aeb9 [ 1009.376188][T32421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.383340][T26554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.421938][T32421] RSP: 002b:00007fd90777b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.430974][T32421] RAX: ffffffffffffffda RBX: 00007fd906c15fa0 RCX: 00007fd90699aeb9 [ 1009.439079][T32421] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 1009.440469][T26554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.447789][T32421] RBP: 00007fd906a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1009.454710][T26554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.470133][T32421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.478689][T32421] R13: 00007fd906c16038 R14: 00007fd906c15fa0 R15: 00007ffccd23f9f8 [ 1009.486887][T32421] [ 1009.489943][T32421] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1009.497252][T32421] CPU: 1 UID: 0 PID: 32421 Comm: syz.3.6710 Not tainted syzkaller #0 PREEMPT(full) [ 1009.506652][T32421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1009.516742][T32421] Call Trace: [ 1009.520053][T32421] [ 1009.523013][T32421] vpanic+0x1e0/0x670 [ 1009.527042][T32421] panic+0xc5/0xd0 [ 1009.530810][T32421] ? __pfx_panic+0x10/0x10 [ 1009.535288][T32421] __warn+0x315/0x4a0 [ 1009.539304][T32421] ? wbt_init_enable_default+0x4e/0x60 [ 1009.544804][T32421] ? wbt_init_enable_default+0x4e/0x60 [ 1009.550308][T32421] __report_bug+0x29a/0x540 [ 1009.554865][T32421] ? wbt_init_enable_default+0x4e/0x60 [ 1009.560370][T32421] ? __pfx___report_bug+0x10/0x10 [ 1009.565549][T32421] ? wbt_init_enable_default+0x4e/0x60 [ 1009.571097][T32421] report_bug+0x16a/0x220 [ 1009.575468][T32421] ? wbt_init_enable_default+0x4e/0x60 [ 1009.580981][T32421] ? wbt_init_enable_default+0x50/0x60 [ 1009.587087][T32421] handle_bug+0x98/0x200 [ 1009.591447][T32421] exc_invalid_op+0x1a/0x50 [ 1009.596231][T32421] asm_exc_invalid_op+0x1a/0x20 [ 1009.601089][T32421] RIP: 0010:wbt_init_enable_default+0x4e/0x60 [ 1009.607169][T32421] Code: ff 89 c6 e8 a4 c6 31 fd 85 db 75 18 e8 5b c2 31 fd 5b c3 cc cc cc cc cc e8 4f c2 31 fd 5b e9 59 5e 08 07 cc e8 43 c2 31 fd 90 <0f> 0b 90 5b e9 49 5e 08 07 cc 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 1009.626787][T32421] RSP: 0018:ffffc900048aee78 EFLAGS: 00010293 [ 1009.632865][T32421] RAX: ffffffff8492950d RBX: 00000000fffffff4 RCX: ffff88802c341e80 [ 1009.640862][T32421] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 1009.648840][T32421] RBP: 1ffff11005dbee12 R08: ffffffff8fef4977 R09: 1ffffffff1fde92e [ 1009.656833][T32421] R10: dffffc0000000000 R11: fffffbfff1fde92f R12: 0000000000000000 [ 1009.664813][T32421] R13: 1ffff110050284c6 R14: ffff88802edf7000 R15: ffff888028142620 [ 1009.672797][T32421] ? wbt_init_enable_default+0x4d/0x60 [ 1009.678370][T32421] ? wbt_init_enable_default+0x4d/0x60 [ 1009.683834][T32421] blk_register_queue+0x36a/0x3f0 [ 1009.688867][T32421] __add_disk+0x677/0xd50 [ 1009.693212][T32421] ? down_read+0x272/0x2e0 [ 1009.697647][T32421] add_disk_fwnode+0xfb/0x480 [ 1009.702340][T32421] nbd_dev_add+0x72c/0xb50 [ 1009.706864][T32421] ? __pfx_nbd_dev_add+0x10/0x10 [ 1009.711829][T32421] ? bpf_lsm_capable+0x9/0x20 [ 1009.716517][T32421] ? security_capable+0x7e/0x2c0 [ 1009.721475][T32421] ? radix_tree_lookup+0x25c/0x290 [ 1009.726632][T32421] nbd_genl_connect+0x962/0x1cf0 [ 1009.731615][T32421] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1009.737026][T32421] ? rcu_is_watching+0x15/0xb0 [ 1009.741810][T32421] ? __nla_parse+0x40/0x60 [ 1009.746255][T32421] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1009.752608][T32421] genl_family_rcv_msg_doit+0x22a/0x330 [ 1009.758174][T32421] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1009.764264][T32421] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.769254][T32421] genl_rcv_msg+0x61c/0x7a0 [ 1009.773777][T32421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1009.778810][T32421] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1009.784208][T32421] netlink_rcv_skb+0x232/0x4b0 [ 1009.789356][T32421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1009.794392][T32421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1009.799779][T32421] ? genl_rcv+0x19/0x40 [ 1009.803961][T32421] ? down_read+0x272/0x2e0 [ 1009.808377][T32421] ? genl_rcv+0xd/0x40 [ 1009.812453][T32421] genl_rcv+0x28/0x40 [ 1009.816620][T32421] netlink_unicast+0x80f/0x9b0 [ 1009.821394][T32421] ? __pfx_netlink_unicast+0x10/0x10 [ 1009.826679][T32421] ? netlink_sendmsg+0x650/0xb40 [ 1009.831627][T32421] ? skb_put+0x11b/0x210 [ 1009.835968][T32421] netlink_sendmsg+0x813/0xb40 [ 1009.840750][T32421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.846136][T32421] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1009.851257][T32421] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1009.856726][T32421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1009.862104][T32421] ____sys_sendmsg+0xa68/0xad0 [ 1009.866880][T32421] ? __might_fault+0xaf/0x130 [ 1009.871571][T32421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1009.876874][T32421] ? import_iovec+0x73/0xa0 [ 1009.881390][T32421] ___sys_sendmsg+0x2a5/0x360 [ 1009.886072][T32421] ? __lock_acquire+0x6b5/0x2cf0 [ 1009.891020][T32421] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.896238][T32421] ? futex_wait+0x29a/0x380 [ 1009.900769][T32421] ? __fget_files+0x2a/0x420 [ 1009.905368][T32421] ? __fget_files+0x3a0/0x420 [ 1009.910231][T32421] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1009.915187][T32421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1009.920764][T32421] ? rcu_is_watching+0x15/0xb0 [ 1009.925658][T32421] do_syscall_64+0xe2/0xf80 [ 1009.930184][T32421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.936263][T32421] ? trace_irq_disable+0x37/0x100 [ 1009.941384][T32421] ? clear_bhb_loop+0x60/0xb0 [ 1009.946074][T32421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.951970][T32421] RIP: 0033:0x7fd90699aeb9 [ 1009.956397][T32421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.976529][T32421] RSP: 002b:00007fd90777b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.984954][T32421] RAX: ffffffffffffffda RBX: 00007fd906c15fa0 RCX: 00007fd90699aeb9 [ 1009.992929][T32421] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 1010.000905][T32421] RBP: 00007fd906a08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1010.009140][T32421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.017202][T32421] R13: 00007fd906c16038 R14: 00007fd906c15fa0 R15: 00007ffccd23f9f8 [ 1010.025194][T32421] [ 1010.028362][T32421] Kernel Offset: disabled [ 1010.032678][T32421] Rebooting in 86400 seconds..