last executing test programs: 4.485765393s ago: executing program 0 (id=1887): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x79118b3ee5622451}, 0x28) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0xde6bcce13c096341}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfff, 0x79118b3ee5622451}, 0x28) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) (async) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r1, 0xde6bcce13c096341}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10}, 0x94) (async) 4.087931373s ago: executing program 0 (id=1891): socket$nl_crypto(0x10, 0x3, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009500000000000000f108b4f00b426e838026146cbaae46b68f7d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079101c0000000000610408000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb", 0x1}], 0x1, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x50, 0x5, 0x200, 0x7, 0x0, 0x7, 0x3, 0x7}}], 0x48, 0x40}, 0x4040040) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f0000000040)=0x7) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000001c001280090c000000000000000000000c000280050001000400000014d4eb7480436eec7fe395feccfc74cf2e1a29e481b8bb963b475c4804448fb789588611adb0"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r12) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r13, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) socket(0x1, 0x803, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000340)={"908363d22079de6abe8f859279687f02", 0x0, 0x0, {0x9, 0x5}, {0x0, 0x4}, 0x3, [0x8001, 0x7, 0x5, 0x9, 0x2, 0x5, 0x9, 0x100000001, 0x100, 0x616e, 0x7, 0xffffffffffffffff, 0x4000003, 0x3, 0x8d, 0x1]}) 3.617203762s ago: executing program 0 (id=1896): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x1410, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}]}, 0x28}}, 0x20000880) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x2c, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x98}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 3.429061541s ago: executing program 0 (id=1900): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) close(0x3) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="020400000400a7c725a0f1ff0000000080000000afe73d69207b3c3cf942f255fe96a8761725c5a78dcfeffae57bda1afe44776e75232e127d2be43e164c66517d5f7644362a846c232efe3e2fd7e2d049c584a22b4e4b300d9bce46d5518b02037a1a78a1f492331735529e491664942f7755e88577aaed17d37daf9a362084b8db516307df18a7614739116a17e1e730b529ba87577ec9f78c8d932e9af45c97bf1ea9420cbab6cc58bd0d830336ac5ff23491705adaef67e71cf616b7f0f118b9d3a35a442c05e0c50c5c30cc9bbb8d6ce093", @ANYRES32=0x1, @ANYBLOB="24d400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200"/28], 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x18, 0x9, 0x1, 0x2, 0x1, r2, 0x1, '\x00', 0x0, r3, 0x0, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000400)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x48}}, 0x2000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x40048c0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x1f, 0x6, 0x788, 0x148, 0x350, 0x440, 0x148, 0x350, 0x6b8, 0x6b8, 0x6b8, 0x6b8, 0x6b8, 0x6, &(0x7f0000000000), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @private2, [0xff000000, 0xff, 0xff, 0xff000000], [0xff000000, 0x0, 0xffffff00, 0xff000000], 'wlan1\x00', 'geneve1\x00', {}, {0xff}, 0x67, 0x0, 0x0, 0x20}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x80000000, 0x8], 0x5, 0x20, 0x2}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010102, @ipv6=@private1, 0x3c, 0x18, 0x8000}}}, {{@ipv6={@remote, @remote, [0x0, 0xff000000, 0xff000000, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xffffff00], 'batadv0\x00', 'veth1\x00', {0xff}, {0xff}, 0xff, 0x0, 0x5, 0x47}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x2a60000, [0x7f, 0x9], 0x99, 0x2, 0x1, [@local, @private0, @local, @empty, @empty, @empty, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @loopback, @loopback, @remote], 0x2}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x63}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x19, 0x1a, 0x6}}}, {{@ipv6={@remote, @remote, [0x0, 0x0, 0xff, 0xff], [0xff, 0x0, 0x0, 0xffffff00], 'xfrm0\x00', 'batadv_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x4, 0x0, 0x79}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x67, 0xe, 0x9, 0x7f, 0x778, @mcast1, @local, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xb416ba31917ecfe3, 0xff000000], [0xff, 0x0, 0xffffff00, 0xff000000], 0x4}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x9e}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"fde9"}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@broadcast, 0x37, 0x3a}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e8) 3.232359487s ago: executing program 0 (id=1903): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0xbc172000) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0xbc172000) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e) (async) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @loopback}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x14, r2, 0x800, 0x70bd2a, 0x0, {0x7}}, 0x14}}, 0x0) 3.051484809s ago: executing program 0 (id=1904): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x0, 0x10, 0xaf9}, &(0x7f00000010c0)=0x18) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4040080) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x700, 0x40, 0x1ff, 0xc, {{0x14, 0x4, 0x0, 0x21, 0x50, 0x68, 0x0, 0x0, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x3d}, {[@ssrr={0x89, 0x7, 0xba, [@multicast2]}, @timestamp={0x44, 0x20, 0xbd, 0x0, 0x4, [0x9, 0x7c0, 0xe4a, 0x1000, 0x10001, 0x400, 0xb65]}, @ssrr={0x89, 0xf, 0xcf, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x20, 0x1, 0x5f, @remote, @private1, 0x10, 0x0, 0x70, 0x5}}) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c) sendto$inet6(r3, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r6, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r6, &(0x7f0000000000)='\"', 0x1) recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r6) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_ACT={0x4}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 2.521706277s ago: executing program 1 (id=1908): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x3, 0x23, 0x1c, 0x65, 0x0, 0x5, 0x1d, 0x0, @private=0xa010101, @remote, {[@lsrr={0x83, 0x3, 0xed}, @lsrr={0x83, 0x3, 0x81}]}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="8520000002007a00180000007a00000088983d4a0500000018110000afa3ac4e37a54112cd9910d18df2ffffffffffffff240fc03debcd57826b37", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000185300000a000000000000000000000085100000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_skb=0xededc41c59290814, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x5, 0x4, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000480)=[0x1, r0, r0, r0], &(0x7f00000004c0)=[{0x2, 0x2, 0x1, 0x7}, {0x1, 0x1, 0x10, 0xb}, {0x1, 0x5, 0xc, 0x9}, {0x2, 0x1, 0x7, 0xc}, {0x4, 0x3, 0x8, 0x4}, {0x1, 0x2, 0xe, 0x5}, {0x2, 0x5, 0x1, 0x9}, {0x5, 0x5, 0x2}], 0x10, 0x3}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x45}}, 0x3f}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) close(0x3) (async) syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x3, 0x23, 0x1c, 0x65, 0x0, 0x5, 0x1d, 0x0, @private=0xa010101, @remote, {[@lsrr={0x83, 0x3, 0xed}, @lsrr={0x83, 0x3, 0x81}]}}}}}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) (async) socket$kcm(0x2c, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="8520000002007a00180000007a00000088983d4a0500000018110000afa3ac4e37a54112cd9910d18df2ffffffffffffff240fc03debcd57826b37", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000185300000a000000000000000000000085100000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sk_skb=0xededc41c59290814, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x5, 0x4, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000480)=[0x1, r0, r0, r0], &(0x7f00000004c0)=[{0x2, 0x2, 0x1, 0x7}, {0x1, 0x1, 0x10, 0xb}, {0x1, 0x5, 0xc, 0x9}, {0x2, 0x1, 0x7, 0xc}, {0x4, 0x3, 0x8, 0x4}, {0x1, 0x2, 0xe, 0x5}, {0x2, 0x5, 0x1, 0x9}, {0x5, 0x5, 0x2}], 0x10, 0x3}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x45}}, 0x3f}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 2.289613112s ago: executing program 1 (id=1912): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000c5000000ebffffff02"], 0x1c}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e00010000c5000000ebffffff02"], 0x1c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) (async) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000140)=0x3, 0x12) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1800000000000000df250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x8889c) (async) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="1800000000000000df250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x8889c) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090601020000000000000000030000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c00148008000140ac1414bbd3f9d3753d509e8f17195bbea9eb3de0ebbc2353d6eb260482f964fbfcf6fb96ea138bb4ab124616da36d523620bfe19f3876fd7ce7f8ebb0158f3519cc351bf8f7aaa6481834a2db86bcc7759e92e3b46ed5f77aed4d134accb19f3597816e2c039d84691079bc6ebf68eaa768c760489d2c655b4ed6c13b9bb1c3f85d51b87e5f1c8f791b841846621bb2defc89eabeda2da34cc81a6d012991ee68d3e8235"], 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621dc6}, 0x4) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 2.13856508s ago: executing program 3 (id=1913): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0xc, 0x4, 0x4) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000180)={0x5c, @multicast2, 0x4e20, 0x4, 'sh\x00', 0x1d, 0x41, 0x3d}, 0x2c) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r0, 0xa08, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x12, 0x6, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x17}, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f00000002c0)={0x1, 0x6}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x5, 0x26}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x40) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000480)=@req3={0x40, 0x1, 0x25, 0x5, 0x0, 0x4, 0xfff}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r7, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x4c851) socket$packet(0x11, 0x2, 0x300) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r7, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r5, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x4c}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1004}, 0x90) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000980)=0x14) r9 = socket(0x22, 0x1, 0x7) bind$xdp(r1, &(0x7f00000009c0)={0x2c, 0x8, r8, 0x40, r9}, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000a80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r10, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x800) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x57376ccf4f2c6862}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x44, r12, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) 2.137604103s ago: executing program 4 (id=1914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000000a200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002d86f12fa19f8bb5e2fd6c52b55280aedc76cf0e16313bc2f3b4f7ae21f4a03eeec2614223c9a2f27dcd4f2aa4d5f701519c2c6cbe1a9849355b32efd40ec5229969"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r8}, 0x8) socket$packet(0x11, 0x3, 0x300) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGARP(r11, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e20, @multicast2}, {0x1, @remote}, 0x2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 'bond0\x00'}) 1.938824689s ago: executing program 2 (id=1916): r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000080)={{r1}, "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"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000010c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x26, &(0x7f0000001180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x21, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f00000014c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x84, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x85}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000021}, 0xc800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x54, r5, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x54}}, 0x4004001) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000001680)={@remote, @multicast1, 0x1, 0x3, [@broadcast, @broadcast, @multicast1]}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001700), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x34, r8, 0x100, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x4, 0x7f, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001800)='syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000001840)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000001880)="752df89cc2fbec7ae838b0169b4cba9fe01ef7b40524e5ae2e0483c33d674b832a3a8c4babb6086ddb6e747b22b0bc0a91d23ea3d6384e931ace534b161bf9aa668a3914cf11fbf225bab0a923a3e51cde3028b8bd5d8a28ee232a39b0a649cac22a42fc39e5d30ba96a082a71b3a1232af8ad82dd13637a2258b3da966f8282d1bbc9fc8facc36385baa87a606b306399b3241573ad99f96711884e2b8f8ac7dd", 0xa1) syz_genetlink_get_family_id$mptcp(&(0x7f0000001940), r7) socket$inet(0x2, 0x5, 0xa9d) connect$phonet_pipe(r10, &(0x7f0000001980)={0x23, 0x3, 0xc0, 0x5}, 0x10) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r12, 0x0, 0x487, &(0x7f00000019c0), &(0x7f0000001a00)=0x30) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000001a40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000001c40)={{0x0, 0x900000000000000, 0x6f6b, 0x8e, 0x2, 0x5, 0x0, 0x8, 0x7fffffff, 0x0, 0x8, 0x3, 0x8, 0x7, 0x1c3b}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000002c40)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r7, 0xc0709411, &(0x7f0000002e40)={{0x0, 0x8001, 0x8, 0x9, 0x2, 0x3, 0x5, 0x8, 0x100, 0xeaa3, 0xffffffff, 0x61, 0x8, 0x3ff, 0xfffffffffffffffb}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000002ec0)={0x2, [{}, {}, {}, {0x0, 0x0}], 0x11, "961ad884dc742c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000003ec0)={0x0, 0x0, "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", "042c1125bd023e1e4cf0a9598dd4fe733172cb6f2dabdcd88a15cbd56597433126619466d9dae1b6d49cbe552496f99490e7e386b6b1f5af53db25c622eac4fde1786f540b8a8ae17d0f80140b2a471720fc7f2ef686211178b7ea5c00a724f3ca8aa94eb542ff14a47a5e6153fdc959d65b8ef4ee2400751d55ae58751b62e0cd153af66ef9ccbe1905de05f97c054124a9d99d280ceb1c06f44a63a692fe76cf0aed01a31867aaa6c620112be27a7dbcfb44335083bbf001703df3ea1e8b96fee3e88afd4b4b275886ddbd27f3494fc0d5d3e11ff1a270f17ba0818e7104f1d82548d9dd53582de824bd6422a9f56349aa5acc0b2ff464b8dde349c9040cd149bf24e05ea31f9ae38bfbd012cd9971c6e0a13d934512baa94afd6486986c41aac797079ba4d65cabea96a1ab9f2255b915c9cd5edd6212acd6c64a2ef890e7e2e6dbe4ff88fbca9508aa50ebf11a3434cceb2977f4b6fab71847c853601127d2112350085b8be813d184a855c41d04988f928a84a3e3c69a947507627651415301dea9274e51c9c921db9718706ac6fd07d6b013c92365ce6ecf2d1da573780772677fb5cd444e5f0fafdbce0a0b4fbe1bf2831fd0a44ec8fe108c84b3137d62b62880a9a8a91877531748210c25b9ebc1aaa5d9b2b902328cc420697a2a88b37b833df2a115e86ca5ee3fee87dc67282bae358986268aa0da15f21ddaca18398145dbe293792fa5ab48c051532e1580142270e81bf0b278fa08a8ba4727e7567e3e2f12d759095e4009e87589e47a36db80e71b3db65011e1b2ade15080665d1ed2ad7b1cb5135696a9613fd5b36ff231256e10cd04c8e7b093e1cf83331f6145f1a92bb61303eb6071d59c51d3429a9e8151fce53415fddfa6e93f99f644652df56c646659b86258ea9a9e5b0be1293788955b1cfda5a5efe8fe81dd6d4b3f6d5ce23b9daaa0744e83da5865bd947586a05d06d6dfbc064a6caf82f2fed6d9676aa8c51fe448c9266064894d0de9d8f0aa17a4aa1ec76d26ac8d6384edf3ce26b7189fa670d3081091be9d6fbc4e328c19ac4addbe1bdcb70894d2edfeab72162d524df131cd50c0eb40d5975787147db4965e9e837a9fe29f33dedcea2df8699e20bb3442483956b72f9c0396e8bc2a605e20b5474a84fec1975a797bbc9f7fb45e3a736b9f75ce46d457d6b3c911b8ebdddd70806ef139e073664ca6fd2f161283113067e854e281a5ae68f5faff028284ef3e70bc4de8c5f86d09937d0a32a61cf5d241e0ff9481528961efaf5a2efb5449c778058f29a318922e43eec8051b881e57e692ad4f3fd3ef9c11a1182a96d4d7f29761b9bc17d63b698c90a599d7a9b991bff38d8af2c274a0f696656cf2ee4ba9e67edd3e2dc3dada8f60ebb79ad165f673e8e948bdc4fdce4bebfba5d6cbe2c20c3f41d73eaf6411e8c3c1990cce7a8e2c1e2b8c93d79fde3cbcc6659a4d23f23ff9cc614c6ff4e915ba3d3cfd5e3f08b6fbceb72bc13f0495d6eea30e78d2743674d5fe7721aac68c49643f6752ff359db4ef733eb01e36e1a4e84eb43de461fe0b798bc164af21efec4a5693cd70569f26193afa31c7946126115187fb9f02e2e0e25c8b3bedd6504b793d31945c4847cffd56d03a825283c9598a1ac259ac2353c2b24163a209c84cce2cdc7670ffdacf9c388be3ed469e351fed732b55231fce4341310e5723bb72e609d4c28aeaf583c22b91b4280eac272e27ead38eeda7bcd23374315c6be45cc45bd95754a56249d7c7d9cb1ee6bcb898734cf5ee629c18d7d1463ea26a1a8a58578712698c63818dc5b1961421a55d4a61f712a5594b3268973c16c99eb51624300d606c083b08202cc5d6bd01d2edabe853a2085dcf23217b458f462df764fca5bcad1f43483e8567bd14906615bed67decb230be517a6cf807119d1de254ba15a0022e162f4fcb65cb97fb07a80369ffedf16bf4d13e08b86dd80eb1c25a90b071422fe14b1c369a8c273f83bf0c75d99c5149a493cccebeee2bb4fd0f22480ee95435c44c98220887983a55d2d904b90abae6f16dcc087dabf12f9343cd4c3171855bbc0b73b1c5e7e0774c1dbb74688ec300fba6426b8724ffbdbb8cb659d443e0a6d0cda7515486fd934b1b3e8bbfb0221ecdabf1727ae06cfa62d484beb3fc6a4cd5f54a6816a536dbb30c32b5ee2b5e0400ee1d3da59becffa1b14bf7210bb0a3644cd8bd5b59b1b6c0351b82161f5909538618474defa0b04c62bda445b9b8997c45b96cde40425e9118f309d3719e702b828a15c3162125782ad658e24c67405cdc7d0600cfa7f0dad9a9b95462c3f56e10fbb018d5c08010c1e640675d2df922efa0f63479addda487b0fd9e2944b76656201aadbb37eecbcc234cdd2c9b87e658823f0c6e0d6196a1f771fd4bcdb634d0c623e46c37ba29411c2f97877b118617870602af738691ba551fd42c10873e9deed03c01d4b7c79897f9a6fcea0b47caa4983cc2a6524185e64173979d8dca238f5993b728065b97e96a68362022f99c4729fd5ecdb39897f37131df518d6ba3398b9a25fc5a9626f23c89b0b648fa83b048cf59c4fbacc8e072e2f5999e4a211f0c318db51c9a1cf9765b6d74ff6b9c5ee021190e866d05fa31f03aa81b35951d8bb31de2ad781c704a90e5da2bd4ac104fc75a2b42cbd674384ff4f2c08b8e451542169945a5f0fed9c7b5cfcb3077302776ee92c253fe6cce9409668bc945101b3cc4c0dad4088456ba4c4887ffa4db88d7c24b9d0489a3a1398f5c5ad960c57b471e0c2a43ea5c0d11007ae4e5839b2bef7b683e632dab1c1d89f36fe2c5204074dbbd2448eb4a0591175bf1d35ad3885d64405776d30e7095f8458e9f149962876777a46164cdf42ac8cc62d9634598e12cf27dd9349ca375221d1190c5a5c5d5ef8d61f766e424e3b73a0e99df54fe727a9c4977529b5bca4db1b1ef3def386dcf177f876322b5b6c29c6a6cf27374922f210137d9a7b8277e8b41aa5d0fd9c08d13705bf1c3ae2d5b877d107ffd3330e9f896baabd15f76efeadb1af1eab5ebb359ccf417cd96430098560d644ba06ef3cc597ac07314f920be225249be7d17179fde2411a2b2884ca3e2d182b2ef5b7e2251f2c81157c759bd740a89ba9f9ef8e8c4c8dbe285eda0cfb8365767c54bef0ee603eca4b170d5f5e9f4e034b400b0fc7900496d13794b83155e83bb54b921b861acf8e8e92ed5cec148f375814394530b249a20ec9c31802ce72154a6d194c90d4659d5cb40f87e0132a087290418e61bbff664342af033a32917cba87448751e1c4c86b850f33f79ac87af91ff463263e20f4b4157b459f97c93d62bfb132159046ea4964c5350678dfc4b062cbb367c9920440fee47a184ddf2870d378e40ac084e63f58d7fe9f220490b97582d438fbdade85b0f2c38e55fcb3aba0fafae0695d489af8cdd9fe3782d707d2e240f67757437cf826d1f2abfb129e096269e0ce31f4293ec3068d977ee0d650d3e2c9b6d6313a23da18492211ad981f9ca3bb39a3c14317adf605b467c6ca9dbe435b4d702c66b6640a125602408aba2927250776d18011ce0d64c5b6f9ff7187afb8d69304ea336775dce66247c4d438f325895c73b597bf88b598dac9d9bc4debe0df8a266e7cbbadc6485cecb77a56d5649496b1282bd1d5f166849573f83316dbe0a675217d0ace512d37f100cf63f9ea837f17fe03a9d43f80d15f65d9372b783bdd262cf5e19b52acad3942c321e390fb135c4b9320b59314982b75dfcc5ef3712ed7346acc88e82d275487d12f577bbe15808b2a9c0de28224e03a78a272f3669b789407229470bd5eca203ad4f2647411d2c5e4e0eafca87cf8aea6daa96f9fea7cd70ee74ad785875213e4f05d4e7463fc28992277d9f840cd0c43553962fcb67d3583213366ebf921cdb9ca83daf744b17c08c2562f46f1fa220c2427197611a1fa14ec0c2a7cf0d5efa763bcbee557b8816fcf4ec675821c31b462b53fa33774d29f94bb1c1b0f472e88bd3c5c2fa9c54d7bdc1a3d144b982cc27a2e65793b77e8ccd4033be9a249e11613c9319b6f35081ec9e6e2d06490053a04a4bc24258dd1c11baca2a1a61bbc8f15c80fedc939da2c7dd1ae7ca51fc9944193af805166aeeaa66ae8348152a2ba572e40c8498a6c33aec413a0a810748c4445959ca2c9a606702b95abcf87affbbac8034a40d4ed593c390d50721f2cfbfe3ccbf68852d1aa6ef938cbc0fdcc278ae569f47619c5bf0d866cec2630d7a6b939591942e9bd2b6ca0cdc6abec6e073e4592c0455175f35d1f6af9c30104b00ac10b224ac1a992dac5022a598ff3846604f55b6a4ad0cd1b6993a95dd736b39a3d63952681ec5b881860d8231a3bce581dfed3648a9c8095aa7f83e1d9e4dccc0879cc4c008bb175fe704f54d65255e9af25ec4acb99b6ca38d8e2e391bb78b5dcafd4a059687f8496dd452829644e3d2a2e08a7eb159159d1457d7b7fd7fa6af6a79a1437b695da4419fb596c8a2069b6283641799270c0a7c16cc9f55ae5d1331ee73d6b076701ffe15ba1a8efd8762ed904b4a0dd4feaafac76fb2550e71732f3e0607ddadee48ee5aa89c4e25edf8f37ef52c3f5f260020dd0f736cd98768e6698cbaa849247e5a38440ae11f6fe24f77ea9ce1449394f32e2b6e665107a21bc2e48e9589887ddccc9b3e34bd9a26f351d0500a68a8dd76d8f130826de2dd594dfc84159c807f2ff2afb71cc3710d8a1d7915f2b0ed35200a1a52f5d8107cb1aa550aa0dbdb3fc8668a5af83bf60970fce7db8194e07a535623986d2767d0315378e44d075b2e4b5d9c8c3492f2564c1f78d31b927be4b1c6f5159ddd6f36cdd658d7a7aba4c65fc54c499f88536b716416f51a382a017586593762f044edf2f63ae2a3676840c8173b6bb0b6ebf02de7e1c4579c15de4d045ebb6d2f47d32430e928671f8fc8d514292a7a466bf2710cd2a4a9a48a0930b8aca535923e28f1f8945f1be9c5d48368f23a9f124c6c746a02327ee23565b964ba4b53a564c93c1aa484fc49464defaf27a66d21fd87d6bfd03263284d1852e4ed8e0ef3a067e55bd6fd6bb1573b6932e7cdf3fb1b397ca1af99e00574e74ef256bc328757079f1f4c14e8a97bf9118bc9e13269bc69a8b6ff6d69d6acd2ef65979ba6f8e706bc94a90275af40319cf9ee22d0b388b625e8f826f01fbef468e03b10f86d36c9909e889798d31301f233f798d2825f4e24041e019fb0054bbe9de2ea976b48db0736251eb0329711056bd4be5dc18a374bb7a2f47d100bf6cef65057233c13b5ed78ed774b50e682b39f87f5ff5102eab4aeae9b817cbca320adcb27aa20f6d56c124f4d0e0749cca8e54f75473b2ea1ac55102e86"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r10, 0xd000943d, &(0x7f000011e3c0)={0xa439, [{0x0, r13}, {r14, r15}, {r16, r17}, {r18}], 0x3b, "d4a143cdab1951"}) 1.835452177s ago: executing program 1 (id=1917): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011", 0x11) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000012c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r6], 0x20}}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb410}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) 1.830748454s ago: executing program 4 (id=1918): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x16) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000d62a2cd0bbc8088b0ec8c85ab7c059cc5be8676e3be4528ef2cf53d1271c1ca375beeae726fd315b3a441bc5449499e50b", @ANYRES16=r1, @ANYBLOB="050828bd7000fcdbdf254a00000008000300", @ANYRES32=r2, @ANYBLOB="0c009900b500000057000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x814) r8 = socket$alg(0x26, 0x5, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000004a00010001000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0500000014000100fec9"], 0x30}}, 0x0) bind$alg(r8, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r10 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="57cd4e", 0x3}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02f9dd6c745471c8d92cad4f85986908a8", 0x1e}], 0x2, &(0x7f0000000340)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}], 0x78, 0x2004a8c5}], 0x1, 0x40) recvmmsg(r10, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x2a, 0x2, 0x0) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004200010a00000000000000000a0020"], 0x14}}, 0x0) sendmsg$can_bcm(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="01000000080900000000000000effa453a1c31742bb0efc1cd6a5c0fa57c6b763363a4761d6d0000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="030000e001000000040000a007010000384e576e12816abc"], 0x48}, 0x1, 0x0, 0x0, 0x40448c5}, 0x4001) 1.752507908s ago: executing program 2 (id=1919): socket(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet(0x23, 0x2, 0x1) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000ffff001a11001200"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1fc0a0869fd0e76753a00000400", 0x0, 0x400006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) 1.746081475s ago: executing program 3 (id=1920): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa230000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) 1.598605089s ago: executing program 2 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010003000000000000001200000008000300", @ANYRES32=r3, @ANYBLOB="0a00060008021100000100001000118004"], 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r5, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 1.588670138s ago: executing program 4 (id=1922): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (async) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711}, 0x10, 0x80000) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008b00)=[{{0x0, 0x0, &(0x7f00000076c0)=[{0x0}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006140)=ANY=[@ANYBLOB="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"], 0x1e34}}, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)='v', 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES8=r4], 0x30}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x3, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24010800}, 0xc000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.565540625s ago: executing program 3 (id=1923): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r0, 0x29, 0x1, &(0x7f0000000000)=""/241, &(0x7f0000000100)=0xf1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'team_slave_0\x00', &(0x7f0000000140)=@ethtool_eeprom={0xb, 0x3ff, 0x1ff, 0xeb, "8df362161fc2c134f7949a812a6082a1a919653d5753a4027bd4eff9ac714c7fd66d3d9e45ca5fbd40563cdb3d3b8667560c7a9c73723bb8d76190412f7a1a2efbfa138e02ec71cb6832402fab78ed6f77f258f3c2c0ee07a7f16b22496adf318a57f26c8050b9d0a01efec574d949c597d820a68f3b23b5c5108964c310d3ee5afdb8302eb6b356505f943b34f9471a92754605f53f0228a968773e5103318e85f50c8e070fcd6c210a90b8f0bbd9fb71441988e531d347d23e6f659ffcc65747d86f4cb4c7dcae14011b11167457e9ab11136ba188e31780897188906f9787c253dda1ac103d3264945d"}}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote, 0x0}, &(0x7f00000002c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000000400)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in=@empty, @in6=@loopback, 0x4e22, 0x0, 0x4e21, 0x7, 0xa, 0x0, 0x20, 0x3a, r2, r4}, {0x3, 0x1, 0x80000000, 0x6, 0x8, 0x0, 0x100000000, 0x1}, {0xcc, 0x8000000000000001, 0x2, 0x4}, 0xfffffffd, 0x6e6bbc, 0x0, 0x0, 0x1, 0x1}, {{@in6=@mcast2, 0x4d4, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x3503, 0x2, 0x3, 0x7, 0x3, 0x7f, 0x6}}, 0xe8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000540)={0x7, 'vlan1\x00', {0x1}, 0x47}) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80080004}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x6c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000740)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0x2}, 0x18) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r8, &(0x7f0000000a00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x19c, r9, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa5ca3d2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27db4d57}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ad1bd00}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dddc33b}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb3a7dae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177d385f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x259c0448}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x111ed46e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ca02517}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65be506e}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3eec05ba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x621b6ab6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ac3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6269}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5479}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x122b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45b5a925}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76ccff62}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a0379ef}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x740b5fde}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x763fea67}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x5}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a40), r8) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) pipe(&(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={0xffffffffffffffff, 0xe0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001dc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0], 0x0, 0x66, &(0x7f0000001e80)=[{}], 0x8, 0x10, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8, 0x32, 0x8, 0x8, &(0x7f0000001f40)}}, 0x10) r16 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002180)={{0x1, 0xffffffffffffffff}, &(0x7f0000002100), &(0x7f0000002140)='%pi6 \x00'}, 0x20) r18 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=@bloom_filter={0x1e, 0x60000000, 0x80000001, 0x4, 0x2, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x10, 0x13, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0xd16}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0xfffffff9}, @map_val={0x18, 0xa, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0xc12, 0x1000, &(0x7f0000000d00)=""/4096, 0x41000, 0x44, '\x00', r3, @sk_msg, r14, 0x8, &(0x7f0000001d40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000001d80)={0x3, 0x6, 0x6}, 0x10, r15, r16, 0x1, &(0x7f0000002240)=[r17, r18], &(0x7f0000002280)=[{0x1, 0x1, 0x4, 0x2}], 0x10, 0x9}, 0x94) getsockopt$inet_sctp_SCTP_ASSOCINFO(r14, 0x84, 0x1, &(0x7f0000002380)={0x0, 0xb143, 0x5, 0x54, 0x4, 0x6}, &(0x7f00000023c0)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000002400)={r19, @in={{0x2, 0x4e20, @empty}}, 0x7ff, 0x3}, &(0x7f00000024c0)=0x90) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000002700)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x54, 0x0, 0x308, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0xc880}, 0x94) 1.383468606s ago: executing program 2 (id=1924): socket$nl_crypto(0x10, 0x3, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009500000000000000f108b4f00b426e838026146cbaae46b68f7d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079101c0000000000610408000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb", 0x1}], 0x1, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x50, 0x5, 0x200, 0x7, 0x0, 0x7, 0x3, 0x7}}], 0x48, 0x40}, 0x4040040) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f0000000040)=0x7) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000001c001280090c000000000000000000000c000280050001000400000014d4eb7480436eec7fe395feccfc74cf2e1a29e481b8bb963b475c4804448fb789588611adb0"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r12) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe8000000000000000000000000000bb060001000a0000000800060077"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) socket(0x1, 0x803, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000340)={"908363d22079de6abe8f859279687f02", 0x0, 0x0, {0x9, 0x5}, {0x0, 0x4}, 0x3, [0x8001, 0x7, 0x5, 0x9, 0x2, 0x5, 0x9, 0x100000001, 0x100, 0x616e, 0x7, 0xffffffffffffffff, 0x4000003, 0x3, 0x8d, 0x1]}) 1.38271494s ago: executing program 3 (id=1925): socket$nl_crypto(0x10, 0x3, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009500000000000000f108b4f00b426e838026146cbaae46b68f7d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079101c0000000000610408000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="cb", 0x1}], 0x1, &(0x7f0000000500)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x50, 0x5, 0x200, 0x7, 0x0, 0x7, 0x3, 0x7}}], 0x48, 0x40}, 0x4040040) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r10, 0x5452, &(0x7f0000000040)=0x7) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000001c001280090c000000000000000000000c000280050001000400000014d4eb7480436eec7fe395feccfc74cf2e1a29e481b8bb963b475c4804448fb789588611adb0"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r12) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r13, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) socket(0x1, 0x803, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000340)={"908363d22079de6abe8f859279687f02", 0x0, 0x0, {0x9, 0x5}, {0x0, 0x4}, 0x3, [0x8001, 0x7, 0x5, 0x9, 0x2, 0x5, 0x9, 0x100000001, 0x100, 0x616e, 0x7, 0xffffffffffffffff, 0x4000003, 0x3, 0x8d, 0x1]}) 1.376435483s ago: executing program 4 (id=1926): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000500000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="02"], 0x158}}, 0x0) 1.216328065s ago: executing program 4 (id=1927): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x1, 0xce}) unshare(0x36010080) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff800}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x728a}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xba6}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x77ff8}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x30, r2, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, r0, 0x3000) sendmmsg(r0, &(0x7f0000001b00)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000700)=[{&(0x7f0000000140)="1f18189d0040ab0405247fade719636e", 0x10}, {&(0x7f0000000180)="71aa22a4ffd285ad948af0ddd46ad3fd8d34", 0x12}, {&(0x7f00000001c0)="399ef99427982045f9cd8426f2d07ed22977d06f3912a89b4ab66019dc0580dfa9c8fe0fde04fcfbcdfebc06f84674822c00673416cb7bcaa9284afec5ea7edda0ecc025a024e6a10f5f9837d53db1b78d038738dae1d3af31c2194afc98949bd79838392d86c4b673a4fc4bbd18deb2747601db918a8268a9bbeecd", 0x7c}, {&(0x7f0000000240)="12bce291bb36adc5d57a3ac356cdf54b478a19167beae649af2309fee2f73fe65cc6d6900f882564bbda588b035e3673f13e18baef95cd7e1cf4f965e22c553b1178147e6bc14729e19acedd0f3ab7f2b7ab6f4ec82420ea42284c2a5d3199af8af5efe06df15432b5b1c9ab765055395f37ae", 0x73}, {&(0x7f00000002c0)="ad5cdfb23bf7e40487a8068d3b13c2f3326695580bdd3de3329895dc9262b575b049986a625581ea325b73d4699015f21ce90236a855adc6a7dad3db3c0454096fd3304b792d1543073dca6877193a43e9749b50c195bc902d108789bb1550b9c77cf84e238a8108aea7c563356c96b35691f09a4ccb523b2efee45b945483e242bdc3f507", 0x85}, {&(0x7f0000000380)="d9a048784c22397602f6f1a9a2d8db728d0b5b2119d126268e914c76e6bee2cdbe67032bb78a60a485c7092f5fe85b7c8da69822be483fb818fe8280f28eca98d49cd91725c95666df267a163dd7e7c26082a57465a8023adeef6330e6d83564b0a1385f30fd320d8ac11addd911329973faa37819c10300053ef57bbc63be81c01b367b46f51b04f74b9d42ecd089c4d2661728590acd90aff84d9b16c042e189938f2d6612d577b1e50951364d0e0359042d85e5415e7ce32d091a4f4555ed72abe0f85aeaec6d6cdde7925eebd837e706104f160ca42b20bddf6e4e4fc9", 0xdf}, {&(0x7f0000000480)="4925824f3de8da0c76c6d34a7d518781d13d33a4a6a85cf1dca6fa66a857bc0da7ad59a43387df3e8ac2b20d62e6535bcd48e0813805f2cda01af3a09dc5f06bac48e23f724b0d30a1ac0f1e931f7f75f406b2ef64417734f9cb48a9e5f410287e305af876c57dce72277c3e4be27787114f19005be0e847d036040bb73035733f870521dfaf00b36a9df43da62aaff82b5275ace8185639e524dbbb087180cfc07a0829492964c019", 0xa9}, {&(0x7f0000000540)="c2f4f4b25a4f35368be883134097a7cffcdeffe3df2ba6c4cb15ba91931c7925fafad4413eff7b2e37f662f40d557b947fa8b3e4fa1c665233b3ae98ded2c6c696ab26d2e38e96d5709aca4c90238942ef5fe0ee944b63d800d692b615ea4c8c32fc481a85dc8738c5ed327277d91b5434afadfa563bce4997c2915e2884fba72d4f3290e9e4b1adada25a0f8a03f0c7516a231dc345621ac422798e1e61afb031cad578f4675e32f939c8067ec436902642c645d82a7348a3bad367cf46979a", 0xc0}, {&(0x7f0000000600)="f5831384dedab88241c479911c1d2582c0ff5e7252775dd7daf0720fe07d453c919558592b486e414c2a505cd60a6591b323e2dcd6506de06068440d3737951818f17fc247e26127e7410cdcd0589691cdca7f188b9c6a0ffe2a7e6e8f915d60a45744d4a9ffaa041ec179f5ae8aab9b0ca16ffcae3bc1b87dd1e767ad2df2a3565c14de6a5338f1a4149b36844756c75c4d2983b1da67e6688e7cf31207c1c5f717ed563069afcfdf522bab8e6dbc90d847ebee5db077d33bc3ae262a578eb4db803b7c2dc57bef9a7977c95194a0fb128843ce9e1b1a7f42a1e9eec8ff3970336dd9510646e5e059fd6cb17860b7741f9d", 0xf2}], 0x9, &(0x7f00000007c0)=[{0xc0, 0x117, 0x3, "c398820bce19f1ffacb00ec9ad3ff2a1229aa2ddb7b766baf70d037687f30271804f08dfdfaa576a2a78f4e413aca56eb0e8d97798cb77559ee2f9396ef0f58ada85bad6d24118c7a2d92cb1eef22c48be97494c77380d6030990fbd4a28b3d01ea21de380746c85b1df352e8926c0c6d09f2c5d66b358ff5e6fbcb5b69bd93aa3c75f171be5c692fb9da1ada3701eaec163d1643e2793b8f90bf21a5bf8793c0921ab82600f9a5e7b26ff364b"}, {0x38, 0x954ccdf0b931a2c4, 0x8, "46234062fbcb51a68841feced7c31a2654126be1913e42a6d30a72aef7e78eb0e0"}, {0x30, 0x103, 0x257b, "3e38e6670f652a2cde28df27057fd0b251ddd89bf64449f8e4"}, {0x1010, 0x84, 0x3a, "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"}, {0x40, 0x29, 0x2, "8cfb3a0ef9384d305f18dd1f918a7ac043bf5da751fbe1383af2ca50fa223e96bac3c4e81c3ee765703154"}, {0xb8, 0x84, 0x1, "9820df35b977607bbb5c4eb10d7214e7f11dff122f14b83ec722e2b31f6fb8162a530d50929e735f777ca2247b19b498aab263670aa0e8834772301fefa59297cde20631aedf28e1dc6f7b4011f0b8cdee7e2f3439053b504361d2bdbb14f117d1d3339d612b4872454483f0430d98721fbec94c26da463fbd95fd79e88e4d8275bf8bbf7e8e84e01d7455ebffa9cabad504e385b5c04bd9ea2b21dca9922f68b7db83a0deeba7"}, {0x110, 0x110, 0xfffffff9, "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"}], 0x1340}}], 0x1, 0x2400c000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001b40)={r1, 0x2, 0x1, [0x85]}, 0xa) 1.131511809s ago: executing program 2 (id=1928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1a, 0x7, 0xbb0d, 0xffffff80, 0x4100c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000005000061114c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) recvmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000040)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000740)=""/146, 0x92}, 0x142) unshare(0x28000600) r2 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000580)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x24, r7, 0x1, 0x70fd2e, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x24}}, 0x20000010) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10}}, 0xf8}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000002280)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f118db0049d90491ceaebfd26ceeef23248000000f858dbb8a19052", 0x33}, {&(0x7f00000001c0)="080060820c3f1b048e5039a8d98f70", 0xf}], 0x2) 906.997407ms ago: executing program 3 (id=1929): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000500000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYBLOB="02"], 0x158}}, 0x0) 843.516887ms ago: executing program 1 (id=1930): r0 = epoll_create1(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000500)={0x14}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x11}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x99, &(0x7f0000001300)=""/153, 0x0, 0x44}, 0x94) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 666.642757ms ago: executing program 3 (id=1931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30e) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24040040}, 0x44040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009600000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000daf3715ede9ef24200007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012800b00010062726964676500000c000280040018"], 0x3c}, 0x1, 0x0, 0x0, 0x34001843}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 615.292232ms ago: executing program 2 (id=1932): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x11}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff9]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xac}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1b, 0x8550, @mcast2}, 0x1c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) 495.352937ms ago: executing program 1 (id=1933): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa23f000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r3, 0x0, 0x0}, 0x10) 353.974µs ago: executing program 4 (id=1934): socket$unix(0x1, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r12, &(0x7f00000001c0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) (async) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r14], 0x4) 0s ago: executing program 1 (id=1935): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='io_uring_submit_sqe\x00', r0}, 0xffffffffffffffcd) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) pselect6(0x40, &(0x7f0000000480)={0x1, 0x5, 0xfffe, 0x9, 0x40000004, 0x10000006, 0x8000000000000000, 0x7d}, &(0x7f00000001c0)={0x6, 0x6, 0x7, 0xa241, 0xffffffffffffffff, 0xfffffffffffffffc, 0x7, 0xbb0}, 0x0, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000940)={&(0x7f0000000400)={[0x3ff]}, 0x8}) kernel console output (not intermixed with test programs): 156.396277][ T8336] do_syscall_64+0xec/0xf80 [ 156.396300][ T8336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.396320][ T8336] ? trace_irq_disable+0x37/0x100 [ 156.396347][ T8336] ? clear_bhb_loop+0x60/0xb0 [ 156.396372][ T8336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.396391][ T8336] RIP: 0033:0x7f53a138f749 [ 156.396410][ T8336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.396427][ T8336] RSP: 002b:00007f53a21f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 156.396449][ T8336] RAX: ffffffffffffffda RBX: 00007f53a15e5fa0 RCX: 00007f53a138f749 [ 156.396465][ T8336] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 156.396478][ T8336] RBP: 00007f53a21f4090 R08: 0000000000000000 R09: 0000000000000000 [ 156.396491][ T8336] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 156.396503][ T8336] R13: 00007f53a15e6038 R14: 00007f53a15e5fa0 R15: 00007fff26ebf2e8 [ 156.396535][ T8336] [ 156.631582][ T8347] netlink: 'syz.1.593': attribute type 10 has an invalid length. [ 156.661759][ T8347] batman_adv: batadv0: Adding interface: netdevsim0 [ 156.668632][ T8347] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 156.695988][ T8347] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 156.743823][ T8350] __nla_validate_parse: 2 callbacks suppressed [ 156.743843][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.594'. [ 156.759850][ T8350] openvswitch: netlink: Missing key (keys=40, expected=80) [ 156.841423][ T8353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.271168][ T8359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.482713][ T8373] netlink: 'syz.1.602': attribute type 13 has an invalid length. [ 157.549492][ T8386] netlink: 'syz.3.603': attribute type 13 has an invalid length. [ 157.689421][ T8380] veth4: entered promiscuous mode [ 157.701384][ T8380] veth4: entered allmulticast mode [ 157.721588][ T130] wg1 speed is unknown, defaulting to 1000 [ 157.728189][ T8388] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 157.740210][ T8388] syzkaller0: entered promiscuous mode [ 157.745876][ T8388] syzkaller0: entered allmulticast mode [ 157.767809][ T8375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.796465][ T8390] wg1 speed is unknown, defaulting to 1000 [ 157.815848][ T8373] tipc: Enabled bearer , priority 0 [ 157.830214][ T8375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.844726][ T8372] tipc: Resetting bearer [ 157.876015][ T8372] tipc: Disabling bearer [ 158.101681][ T8400] syzkaller0: entered promiscuous mode [ 158.107538][ T8400] syzkaller0: entered allmulticast mode [ 158.223686][ T8400] netlink: 28 bytes leftover after parsing attributes in process `syz.0.610'. [ 158.512983][ T8444] netlink: 'syz.4.607': attribute type 12 has an invalid length. [ 159.022106][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.612'. [ 160.163984][ T8451] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 160.206193][ T8451] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 160.242451][ T8451] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 160.354127][ T8456] bridge3: entered promiscuous mode [ 160.370996][ T8456] bridge3: entered allmulticast mode [ 160.386124][ T8460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 160.660837][ T8464] wg1 speed is unknown, defaulting to 1000 [ 161.077849][ T1090] wlan0: Trigger new scan to find an IBSS to join [ 161.420045][ T8509] wg1 speed is unknown, defaulting to 1000 [ 161.465161][ T7107] IPVS: starting estimator thread 0... [ 161.471663][ T8502] netlink: 24 bytes leftover after parsing attributes in process `syz.4.626'. [ 161.486493][ T8512] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 161.520075][ T8502] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 161.553767][ T8517] IPVS: using max 28 ests per chain, 67200 per kthread [ 161.874270][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 161.933695][ T8524] netlink: 'syz.0.632': attribute type 1 has an invalid length. [ 161.949199][ T8531] FAULT_INJECTION: forcing a failure. [ 161.949199][ T8531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.988955][ T8531] CPU: 0 UID: 0 PID: 8531 Comm: syz.2.635 Not tainted syzkaller #0 PREEMPT(full) [ 161.988983][ T8531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.988996][ T8531] Call Trace: [ 161.989004][ T8531] [ 161.989012][ T8531] dump_stack_lvl+0xe8/0x150 [ 161.989044][ T8531] should_fail_ex+0x414/0x560 [ 161.989083][ T8531] _copy_from_user+0x2d/0xb0 [ 161.989111][ T8531] ___sys_recvmsg+0x12e/0x510 [ 161.989144][ T8531] ? __pfx____sys_recvmsg+0x10/0x10 [ 161.989174][ T8531] ? __fget_files+0x2a/0x420 [ 161.989232][ T8531] do_recvmmsg+0x307/0x770 [ 161.989268][ T8531] ? __pfx_do_recvmmsg+0x10/0x10 [ 161.989307][ T8531] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 161.989347][ T8531] __x64_sys_recvmmsg+0x190/0x240 [ 161.989375][ T8531] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 161.989413][ T8531] do_syscall_64+0xec/0xf80 [ 161.989433][ T8531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.989453][ T8531] ? trace_irq_disable+0x37/0x100 [ 161.989495][ T8531] ? clear_bhb_loop+0x60/0xb0 [ 161.989518][ T8531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.989537][ T8531] RIP: 0033:0x7fbc84f8f749 [ 161.989555][ T8531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.989572][ T8531] RSP: 002b:00007fbc85dd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 161.989595][ T8531] RAX: ffffffffffffffda RBX: 00007fbc851e5fa0 RCX: 00007fbc84f8f749 [ 161.989611][ T8531] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 161.989625][ T8531] RBP: 00007fbc85dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 161.989638][ T8531] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 161.989650][ T8531] R13: 00007fbc851e6038 R14: 00007fbc851e5fa0 R15: 00007ffe37974558 [ 161.989685][ T8531] [ 162.230271][ T8537] delete_channel: no stack [ 162.238214][ T8537] netlink: 'syz.0.638': attribute type 11 has an invalid length. [ 162.316077][ T8540] netlink: 16 bytes leftover after parsing attributes in process `syz.3.636'. [ 162.351952][ T8539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.637'. [ 162.564228][ T30] audit: type=1800 audit(1767202060.990:2): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.640" name=6163655F7072696E746B23360A6D61726B5F707265636973653A206672616D65313A206C6173745F6964782031372066697273745F696478203137207375627365715F696478202D31200A6D61726B5F707265636973653A206672616D65313A20706172656E7420737461746520726567733D723220737461636B3D3A20206672616D65313A2052313D66702D382052323D5038205231303D6670302066702D383D3078323032303230303032353738323032300A6D61726B5F70726563697365 dev="tmpfs" ino=687 res=0 errno=0 [ 162.783829][ T8558] netlink: 'syz.4.644': attribute type 10 has an invalid length. [ 162.802188][ T8558] team0: Failed to send options change via netlink (err -105) [ 162.810263][ T8558] team0: Port device dummy0 added [ 162.827689][ T8558] netlink: 'syz.4.644': attribute type 10 has an invalid length. [ 162.875907][ T8558] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 162.913453][ T8558] team0: Failed to send options change via netlink (err -105) [ 162.975954][ T8558] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 163.024935][ T8558] team0: Port device dummy0 removed [ 163.050233][ T8558] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 163.149676][ T8572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.167933][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 163.300413][ T8580] FAULT_INJECTION: forcing a failure. [ 163.300413][ T8580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.313905][ T8580] CPU: 1 UID: 0 PID: 8580 Comm: syz.4.649 Not tainted syzkaller #0 PREEMPT(full) [ 163.313934][ T8580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.313947][ T8580] Call Trace: [ 163.313954][ T8580] [ 163.313962][ T8580] dump_stack_lvl+0xe8/0x150 [ 163.313995][ T8580] should_fail_ex+0x414/0x560 [ 163.314034][ T8580] _copy_from_user+0x2d/0xb0 [ 163.314066][ T8580] ___sys_recvmsg+0x12e/0x510 [ 163.314099][ T8580] ? __pfx____sys_recvmsg+0x10/0x10 [ 163.314131][ T8580] ? __fget_files+0x2a/0x420 [ 163.314191][ T8580] do_recvmmsg+0x307/0x770 [ 163.314226][ T8580] ? __pfx_do_recvmmsg+0x10/0x10 [ 163.314265][ T8580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.314306][ T8580] __x64_sys_recvmmsg+0x190/0x240 [ 163.314345][ T8580] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 163.314388][ T8580] do_syscall_64+0xec/0xf80 [ 163.314409][ T8580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.314428][ T8580] ? trace_irq_disable+0x37/0x100 [ 163.314455][ T8580] ? clear_bhb_loop+0x60/0xb0 [ 163.314482][ T8580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.314503][ T8580] RIP: 0033:0x7f53a138f749 [ 163.314521][ T8580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.314539][ T8580] RSP: 002b:00007f53a21f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 163.314561][ T8580] RAX: ffffffffffffffda RBX: 00007f53a15e5fa0 RCX: 00007f53a138f749 [ 163.314578][ T8580] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 163.314592][ T8580] RBP: 00007f53a21f4090 R08: 0000000000000000 R09: 0000000000000000 [ 163.314605][ T8580] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 163.314618][ T8580] R13: 00007f53a15e6038 R14: 00007f53a15e5fa0 R15: 00007fff26ebf2e8 [ 163.314653][ T8580] [ 163.373708][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'. [ 163.827753][ T8605] netlink: 'syz.3.655': attribute type 9 has an invalid length. [ 163.832909][ T8607] netlink: 64 bytes leftover after parsing attributes in process `syz.4.654'. [ 163.852856][ T8605] netlink: 'syz.3.655': attribute type 11 has an invalid length. [ 163.870927][ T8605] netlink: 'syz.3.655': attribute type 12 has an invalid length. [ 163.909256][ T8605] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.655'. [ 164.071177][ T8618] sctp: [Deprecated]: syz.3.659 (pid 8618) Use of int in max_burst socket option. [ 164.071177][ T8618] Use struct sctp_assoc_value instead [ 164.188796][ T8620] netlink: 'syz.1.658': attribute type 1 has an invalid length. [ 164.196803][ T8620] netlink: 'syz.1.658': attribute type 11 has an invalid length. [ 164.204712][ T8620] netlink: 224 bytes leftover after parsing attributes in process `syz.1.658'. [ 164.225733][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 164.433203][ T8634] wg1 speed is unknown, defaulting to 1000 [ 164.611164][ T8640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.618785][ T8640] IPv6: NLM_F_CREATE should be set when creating new route [ 164.669581][ T8643] FAULT_INJECTION: forcing a failure. [ 164.669581][ T8643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.709016][ T8643] CPU: 0 UID: 0 PID: 8643 Comm: syz.1.664 Not tainted syzkaller #0 PREEMPT(full) [ 164.709047][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.709061][ T8643] Call Trace: [ 164.709070][ T8643] [ 164.709079][ T8643] dump_stack_lvl+0xe8/0x150 [ 164.709112][ T8643] should_fail_ex+0x414/0x560 [ 164.709152][ T8643] _copy_from_user+0x2d/0xb0 [ 164.709180][ T8643] ___sys_recvmsg+0x12e/0x510 [ 164.709214][ T8643] ? __pfx____sys_recvmsg+0x10/0x10 [ 164.709291][ T8643] do_recvmmsg+0x307/0x770 [ 164.709328][ T8643] ? __pfx_do_recvmmsg+0x10/0x10 [ 164.709368][ T8643] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.709411][ T8643] __x64_sys_recvmmsg+0x190/0x240 [ 164.709442][ T8643] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 164.709483][ T8643] do_syscall_64+0xec/0xf80 [ 164.709505][ T8643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.709525][ T8643] ? trace_irq_disable+0x37/0x100 [ 164.709554][ T8643] ? clear_bhb_loop+0x60/0xb0 [ 164.709581][ T8643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.709601][ T8643] RIP: 0033:0x7f29f358f749 [ 164.709620][ T8643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.709638][ T8643] RSP: 002b:00007f29f43fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 164.709662][ T8643] RAX: ffffffffffffffda RBX: 00007f29f37e5fa0 RCX: 00007f29f358f749 [ 164.709678][ T8643] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 164.709692][ T8643] RBP: 00007f29f43fc090 R08: 0000000000000000 R09: 0000000000000000 [ 164.709705][ T8643] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 164.709718][ T8643] R13: 00007f29f37e6038 R14: 00007f29f37e5fa0 R15: 00007ffc55fab9a8 [ 164.709754][ T8643] [ 165.323792][ T8661] wg1 speed is unknown, defaulting to 1000 [ 166.113633][ T6125] wlan0: Trigger new scan to find an IBSS to join [ 166.236400][ T8702] netlink: 456 bytes leftover after parsing attributes in process `syz.2.678'. [ 166.910863][ T8720] 0: reclassify loop, rule prio 0, protocol 800 [ 167.003867][ T8738] __nla_validate_parse: 6 callbacks suppressed [ 167.003887][ T8738] netlink: 216 bytes leftover after parsing attributes in process `syz.3.692'. [ 167.032602][ T8738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.692'. [ 167.062427][ T8738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.692'. [ 167.075683][ T8436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.235771][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 167.348959][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.699'. [ 167.439889][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.700'. [ 167.472043][ T8761] hsr_slave_0: left promiscuous mode [ 167.489374][ T8761] hsr_slave_1: left promiscuous mode [ 167.528475][ T8767] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 167.542012][ T8767] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.605464][ T8772] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 167.620666][ T8772] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 167.843612][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.707'. [ 167.874866][ T8783] netlink: 16 bytes leftover after parsing attributes in process `syz.2.707'. [ 167.926074][ T8783] geneve2: entered promiscuous mode [ 167.931643][ T8783] geneve2: entered allmulticast mode [ 168.100658][ T8785] wg1 speed is unknown, defaulting to 1000 [ 168.114072][ T8788] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 168.227825][ T8792] netlink: 104 bytes leftover after parsing attributes in process `syz.1.710'. [ 168.360170][ T8797] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 168.378919][ T8797] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 168.391511][ T8800] FAULT_INJECTION: forcing a failure. [ 168.391511][ T8800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.405531][ T8800] CPU: 0 UID: 0 PID: 8800 Comm: syz.0.714 Not tainted syzkaller #0 PREEMPT(full) [ 168.405555][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 168.405567][ T8800] Call Trace: [ 168.405575][ T8800] [ 168.405582][ T8800] dump_stack_lvl+0xe8/0x150 [ 168.405611][ T8800] should_fail_ex+0x414/0x560 [ 168.405645][ T8800] _copy_from_user+0x2d/0xb0 [ 168.405669][ T8800] ___sys_recvmsg+0x12e/0x510 [ 168.405698][ T8800] ? __pfx____sys_recvmsg+0x10/0x10 [ 168.405723][ T8800] ? __fget_files+0x2a/0x420 [ 168.405769][ T8800] do_recvmmsg+0x307/0x770 [ 168.405797][ T8800] ? __pfx_do_recvmmsg+0x10/0x10 [ 168.405827][ T8800] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.405861][ T8800] __x64_sys_recvmmsg+0x190/0x240 [ 168.405885][ T8800] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 168.405925][ T8800] do_syscall_64+0xec/0xf80 [ 168.405943][ T8800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.405959][ T8800] ? clear_bhb_loop+0x60/0xb0 [ 168.405980][ T8800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.405996][ T8800] RIP: 0033:0x7f030cd8f749 [ 168.406012][ T8800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.406027][ T8800] RSP: 002b:00007f030aff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 168.406046][ T8800] RAX: ffffffffffffffda RBX: 00007f030cfe5fa0 RCX: 00007f030cd8f749 [ 168.406059][ T8800] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 168.406070][ T8800] RBP: 00007f030aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 168.406081][ T8800] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 168.406091][ T8800] R13: 00007f030cfe6038 R14: 00007f030cfe5fa0 R15: 00007ffd718f7858 [ 168.406118][ T8800] [ 168.599580][ T8797] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 168.662373][ T8810] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.715'. [ 169.021854][ T8824] netlink: 'syz.1.718': attribute type 30 has an invalid length. [ 169.264874][ T8826] wg1 speed is unknown, defaulting to 1000 [ 169.375096][ T8820] C: renamed from team_slave_0 [ 169.447096][ T8820] netlink: 'syz.0.719': attribute type 2 has an invalid length. [ 169.461592][ T8820] netlink: 116 bytes leftover after parsing attributes in process `syz.0.719'. [ 169.471310][ T8820] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 169.883966][ T8862] FAULT_INJECTION: forcing a failure. [ 169.883966][ T8862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.921256][ T8862] CPU: 0 UID: 0 PID: 8862 Comm: syz.3.729 Not tainted syzkaller #0 PREEMPT(full) [ 169.921286][ T8862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.921300][ T8862] Call Trace: [ 169.921309][ T8862] [ 169.921318][ T8862] dump_stack_lvl+0xe8/0x150 [ 169.921352][ T8862] should_fail_ex+0x414/0x560 [ 169.921391][ T8862] _copy_from_user+0x2d/0xb0 [ 169.921419][ T8862] ___sys_recvmsg+0x12e/0x510 [ 169.921453][ T8862] ? __pfx____sys_recvmsg+0x10/0x10 [ 169.921521][ T8862] do_recvmmsg+0x307/0x770 [ 169.921565][ T8862] ? __pfx_do_recvmmsg+0x10/0x10 [ 169.921605][ T8862] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 169.921648][ T8862] __x64_sys_recvmmsg+0x190/0x240 [ 169.921679][ T8862] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 169.921719][ T8862] do_syscall_64+0xec/0xf80 [ 169.921740][ T8862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.921761][ T8862] ? trace_irq_disable+0x37/0x100 [ 169.921789][ T8862] ? clear_bhb_loop+0x60/0xb0 [ 169.921816][ T8862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.921836][ T8862] RIP: 0033:0x7febd598f749 [ 169.921856][ T8862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.921874][ T8862] RSP: 002b:00007febd68a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 169.921897][ T8862] RAX: ffffffffffffffda RBX: 00007febd5be5fa0 RCX: 00007febd598f749 [ 169.921912][ T8862] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 169.921926][ T8862] RBP: 00007febd68a6090 R08: 0000000000000000 R09: 0000000000000000 [ 169.921940][ T8862] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 169.921952][ T8862] R13: 00007febd5be6038 R14: 00007febd5be5fa0 R15: 00007fff7bb37eb8 [ 169.921987][ T8862] [ 170.679598][ T8879] wg1 speed is unknown, defaulting to 1000 [ 170.712186][ T8884] sctp: [Deprecated]: syz.2.735 (pid 8884) Use of int in max_burst socket option deprecated. [ 170.712186][ T8884] Use struct sctp_assoc_value instead [ 170.938245][ T8896] netlink: 'syz.0.734': attribute type 12 has an invalid length. [ 170.947516][ T8900] netlink: 'syz.4.739': attribute type 1 has an invalid length. [ 170.955450][ T8900] netlink: 'syz.4.739': attribute type 11 has an invalid length. [ 171.093023][ T8909] FAULT_INJECTION: forcing a failure. [ 171.093023][ T8909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.122459][ T8909] CPU: 0 UID: 0 PID: 8909 Comm: syz.4.742 Not tainted syzkaller #0 PREEMPT(full) [ 171.122489][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.122503][ T8909] Call Trace: [ 171.122511][ T8909] [ 171.122520][ T8909] dump_stack_lvl+0xe8/0x150 [ 171.122553][ T8909] should_fail_ex+0x414/0x560 [ 171.122593][ T8909] _copy_from_user+0x2d/0xb0 [ 171.122621][ T8909] ___sys_recvmsg+0x12e/0x510 [ 171.122662][ T8909] ? __pfx____sys_recvmsg+0x10/0x10 [ 171.122695][ T8909] ? __fget_files+0x2a/0x420 [ 171.122756][ T8909] do_recvmmsg+0x307/0x770 [ 171.122793][ T8909] ? __pfx_do_recvmmsg+0x10/0x10 [ 171.122833][ T8909] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.122877][ T8909] __x64_sys_recvmmsg+0x190/0x240 [ 171.122908][ T8909] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 171.122949][ T8909] do_syscall_64+0xec/0xf80 [ 171.122971][ T8909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.122992][ T8909] ? trace_irq_disable+0x37/0x100 [ 171.123020][ T8909] ? clear_bhb_loop+0x60/0xb0 [ 171.123046][ T8909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.123067][ T8909] RIP: 0033:0x7f53a138f749 [ 171.123086][ T8909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.123104][ T8909] RSP: 002b:00007f53a21f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 171.123127][ T8909] RAX: ffffffffffffffda RBX: 00007f53a15e5fa0 RCX: 00007f53a138f749 [ 171.123142][ T8909] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 171.123156][ T8909] RBP: 00007f53a21f4090 R08: 0000000000000000 R09: 0000000000000000 [ 171.123168][ T8909] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 171.123181][ T8909] R13: 00007f53a15e6038 R14: 00007f53a15e5fa0 R15: 00007fff26ebf2e8 [ 171.123214][ T8909] [ 172.359388][ T8959] netem: change failed [ 172.394658][ T8963] FAULT_INJECTION: forcing a failure. [ 172.394658][ T8963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.446268][ T8957] bond3 (unregistering): Released all slaves [ 172.487817][ T8963] CPU: 0 UID: 0 PID: 8963 Comm: syz.1.755 Not tainted syzkaller #0 PREEMPT(full) [ 172.487847][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.487861][ T8963] Call Trace: [ 172.487870][ T8963] [ 172.487879][ T8963] dump_stack_lvl+0xe8/0x150 [ 172.487913][ T8963] should_fail_ex+0x414/0x560 [ 172.487954][ T8963] _copy_from_user+0x2d/0xb0 [ 172.487982][ T8963] ___sys_recvmsg+0x12e/0x510 [ 172.488017][ T8963] ? __pfx____sys_recvmsg+0x10/0x10 [ 172.488049][ T8963] ? __fget_files+0x2a/0x420 [ 172.488110][ T8963] do_recvmmsg+0x307/0x770 [ 172.488148][ T8963] ? __pfx_do_recvmmsg+0x10/0x10 [ 172.488188][ T8963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 172.488232][ T8963] __x64_sys_recvmmsg+0x190/0x240 [ 172.488262][ T8963] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 172.488303][ T8963] do_syscall_64+0xec/0xf80 [ 172.488332][ T8963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.488353][ T8963] ? trace_irq_disable+0x37/0x100 [ 172.488381][ T8963] ? clear_bhb_loop+0x60/0xb0 [ 172.488405][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.488425][ T8963] RIP: 0033:0x7f29f358f749 [ 172.488444][ T8963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.488462][ T8963] RSP: 002b:00007f29f43fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 172.488485][ T8963] RAX: ffffffffffffffda RBX: 00007f29f37e5fa0 RCX: 00007f29f358f749 [ 172.488501][ T8963] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 172.488514][ T8963] RBP: 00007f29f43fc090 R08: 0000000000000000 R09: 0000000000000000 [ 172.488527][ T8963] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 172.488540][ T8963] R13: 00007f29f37e6038 R14: 00007f29f37e5fa0 R15: 00007ffc55fab9a8 [ 172.488574][ T8963] [ 172.676406][ T8968] netlink: 'syz.4.754': attribute type 10 has an invalid length. [ 172.702623][ T8968] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.729031][ T8968] bond0: (slave team0): Enslaving as an active interface with an up link [ 172.810988][ T8971] __nla_validate_parse: 4 callbacks suppressed [ 172.811008][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.756'. [ 173.441061][ T9013] FAULT_INJECTION: forcing a failure. [ 173.441061][ T9013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.460928][ T9013] CPU: 1 UID: 0 PID: 9013 Comm: syz.2.767 Not tainted syzkaller #0 PREEMPT(full) [ 173.460956][ T9013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.460969][ T9013] Call Trace: [ 173.460978][ T9013] [ 173.460988][ T9013] dump_stack_lvl+0xe8/0x150 [ 173.461021][ T9013] should_fail_ex+0x414/0x560 [ 173.461060][ T9013] _copy_from_user+0x2d/0xb0 [ 173.461087][ T9013] ___sys_recvmsg+0x12e/0x510 [ 173.461122][ T9013] ? __pfx____sys_recvmsg+0x10/0x10 [ 173.461164][ T9013] ? __fget_files+0x2a/0x420 [ 173.461227][ T9013] do_recvmmsg+0x307/0x770 [ 173.461272][ T9013] ? __pfx_do_recvmmsg+0x10/0x10 [ 173.461311][ T9013] ? bpf_trace_run2+0x322/0x4c0 [ 173.461346][ T9013] ? __pfx_bpf_trace_run2+0x10/0x10 [ 173.461380][ T9013] __x64_sys_recvmmsg+0x190/0x240 [ 173.461410][ T9013] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 173.461438][ T9013] ? rcu_is_watching+0x15/0xb0 [ 173.461465][ T9013] ? trace_sys_enter+0x25/0xf0 [ 173.461494][ T9013] do_syscall_64+0xec/0xf80 [ 173.461517][ T9013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.461538][ T9013] ? clear_bhb_loop+0x60/0xb0 [ 173.461564][ T9013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.461584][ T9013] RIP: 0033:0x7fbc84f8f749 [ 173.461603][ T9013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.461621][ T9013] RSP: 002b:00007fbc85dd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 173.461643][ T9013] RAX: ffffffffffffffda RBX: 00007fbc851e5fa0 RCX: 00007fbc84f8f749 [ 173.461659][ T9013] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 173.461672][ T9013] RBP: 00007fbc85dd0090 R08: 0000000000000000 R09: 0000000000000000 [ 173.461685][ T9013] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 173.461698][ T9013] R13: 00007fbc851e6038 R14: 00007fbc851e5fa0 R15: 00007ffe37974558 [ 173.461731][ T9013] [ 173.886688][ T9023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.768'. [ 174.102609][ T9027] netlink: 220 bytes leftover after parsing attributes in process `syz.2.769'. [ 174.291622][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 174.342455][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 174.357015][ T9040] netlink: 'syz.4.773': attribute type 11 has an invalid length. [ 174.373736][ T9038] geneve2: entered promiscuous mode [ 174.380447][ T9038] geneve2: entered allmulticast mode [ 174.473065][ T9046] tipc: Enabled bearer , priority 0 [ 174.482265][ T9042] wg1 speed is unknown, defaulting to 1000 [ 174.489383][ T9046] syzkaller0: entered promiscuous mode [ 174.497762][ T9046] syzkaller0: entered allmulticast mode [ 174.531984][ T9050] netlink: 'syz.4.778': attribute type 6 has an invalid length. [ 174.540555][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.778'. [ 174.569697][ T9050] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.578284][ T9050] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.597655][ T9046] geneve0: mtu less than device minimum [ 174.614299][ T9046] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 174.664847][ T9044] tipc: Resetting bearer [ 174.727000][ T9044] tipc: Disabling bearer [ 174.740180][ T9055] FAULT_INJECTION: forcing a failure. [ 174.740180][ T9055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.823329][ T9055] CPU: 0 UID: 0 PID: 9055 Comm: syz.4.779 Not tainted syzkaller #0 PREEMPT(full) [ 174.823359][ T9055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.823373][ T9055] Call Trace: [ 174.823382][ T9055] [ 174.823391][ T9055] dump_stack_lvl+0xe8/0x150 [ 174.823425][ T9055] should_fail_ex+0x414/0x560 [ 174.823465][ T9055] _copy_from_user+0x2d/0xb0 [ 174.823493][ T9055] ___sys_recvmsg+0x12e/0x510 [ 174.823528][ T9055] ? __pfx____sys_recvmsg+0x10/0x10 [ 174.823560][ T9055] ? __fget_files+0x2a/0x420 [ 174.823620][ T9055] do_recvmmsg+0x307/0x770 [ 174.823657][ T9055] ? __pfx_do_recvmmsg+0x10/0x10 [ 174.823697][ T9055] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 174.823740][ T9055] __x64_sys_recvmmsg+0x190/0x240 [ 174.823770][ T9055] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 174.823811][ T9055] do_syscall_64+0xec/0xf80 [ 174.823833][ T9055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.823852][ T9055] ? trace_irq_disable+0x37/0x100 [ 174.823881][ T9055] ? clear_bhb_loop+0x60/0xb0 [ 174.823907][ T9055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.823928][ T9055] RIP: 0033:0x7f53a138f749 [ 174.823946][ T9055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.823964][ T9055] RSP: 002b:00007f53a21f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 174.823987][ T9055] RAX: ffffffffffffffda RBX: 00007f53a15e5fa0 RCX: 00007f53a138f749 [ 174.824003][ T9055] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 174.824017][ T9055] RBP: 00007f53a21f4090 R08: 0000000000000000 R09: 0000000000000000 [ 174.824031][ T9055] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 174.824043][ T9055] R13: 00007f53a15e6038 R14: 00007f53a15e5fa0 R15: 00007fff26ebf2e8 [ 174.824078][ T9055] [ 175.314450][ T9067] syzkaller0: entered promiscuous mode [ 175.321899][ T9067] syzkaller0: entered allmulticast mode [ 175.453901][ T9082] netlink: 24 bytes leftover after parsing attributes in process `syz.0.787'. [ 175.585702][ T9088] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 175.750447][ T9086] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 175.825607][ T9090] bond3: entered promiscuous mode [ 175.830717][ T9090] bond3: entered allmulticast mode [ 175.862872][ T9090] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.893330][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 176.308139][ T9107] Cannot find del_set index 2 as target [ 176.320036][ T9108] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode [ 176.333905][ T9110] tipc: Enabled bearer , priority 0 [ 176.342224][ T9109] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.793'. [ 176.352227][ T9111] tipc: Enabling of bearer rejected, already enabled [ 176.519476][ T9113] wg1 speed is unknown, defaulting to 1000 [ 176.560213][ T9118] wg1 speed is unknown, defaulting to 1000 [ 176.805270][ T9125] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode [ 176.951408][ T9128] syzkaller0: entered promiscuous mode [ 176.957700][ T9128] syzkaller0: entered allmulticast mode [ 176.970623][ T9128] tipc: Enabled bearer , priority 0 [ 176.982436][ T9127] tipc: Resetting bearer [ 177.045289][ T9127] tipc: Disabling bearer [ 177.137366][ T9137] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 177.184770][ T9148] x_tables: duplicate underflow at hook 1 [ 177.587548][ T9172] netlink: 172 bytes leftover after parsing attributes in process `syz.3.808'. [ 178.085889][ T9193] netlink: 'syz.0.813': attribute type 8 has an invalid length. [ 178.181009][ T9200] __nla_validate_parse: 2 callbacks suppressed [ 178.181030][ T9200] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.817'. [ 178.254415][ T9200] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 178.324660][ T9207] netlink: 'syz.3.819': attribute type 21 has an invalid length. [ 178.339112][ T9207] netlink: 36 bytes leftover after parsing attributes in process `syz.3.819'. [ 178.477993][ T9215] veth1_to_bond: entered allmulticast mode [ 178.485731][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.822'. [ 178.577811][ T9215] bond0: (slave bond_slave_1): Releasing backup interface [ 178.611974][ T9215] veth1_to_bond (unregistering): left allmulticast mode [ 178.869602][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 178.869608][ T9231] wg1 speed is unknown, defaulting to 1000 [ 178.933738][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.952469][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.297697][ T9256] syz.1.832 uses old SIOCAX25GETINFO [ 179.439244][ T9254] netlink: 'syz.1.832': attribute type 10 has an invalid length. [ 179.454792][ T9244] wg1 speed is unknown, defaulting to 1000 [ 179.514223][ T9254] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 179.669063][ T9260] wg1 speed is unknown, defaulting to 1000 [ 179.940339][ T9271] vlan0: entered allmulticast mode [ 180.048053][ T9276] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 180.130577][ T9277] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 180.194173][ T9280] wg1 speed is unknown, defaulting to 1000 [ 180.253648][ T9267] netlink: 13 bytes leftover after parsing attributes in process `syz.3.833'. [ 180.277719][ T9286] FAULT_INJECTION: forcing a failure. [ 180.277719][ T9286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.292828][ T9286] CPU: 0 UID: 0 PID: 9286 Comm: syz.1.839 Not tainted syzkaller #0 PREEMPT(full) [ 180.292855][ T9286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.292867][ T9286] Call Trace: [ 180.292875][ T9286] [ 180.292884][ T9286] dump_stack_lvl+0xe8/0x150 [ 180.292925][ T9286] should_fail_ex+0x414/0x560 [ 180.292965][ T9286] _copy_from_user+0x2d/0xb0 [ 180.292992][ T9286] ___sys_recvmsg+0x12e/0x510 [ 180.293026][ T9286] ? __pfx____sys_recvmsg+0x10/0x10 [ 180.293093][ T9286] do_recvmmsg+0x307/0x770 [ 180.293129][ T9286] ? __pfx_do_recvmmsg+0x10/0x10 [ 180.293169][ T9286] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 180.293212][ T9286] __x64_sys_recvmmsg+0x190/0x240 [ 180.293242][ T9286] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 180.293283][ T9286] do_syscall_64+0xec/0xf80 [ 180.293305][ T9286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.293325][ T9286] ? trace_irq_disable+0x37/0x100 [ 180.293354][ T9286] ? clear_bhb_loop+0x60/0xb0 [ 180.293381][ T9286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.293402][ T9286] RIP: 0033:0x7f29f358f749 [ 180.293420][ T9286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.293438][ T9286] RSP: 002b:00007f29f43fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 180.293461][ T9286] RAX: ffffffffffffffda RBX: 00007f29f37e5fa0 RCX: 00007f29f358f749 [ 180.293477][ T9286] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 180.293491][ T9286] RBP: 00007f29f43fc090 R08: 0000000000000000 R09: 0000000000000000 [ 180.293505][ T9286] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 180.293517][ T9286] R13: 00007f29f37e6038 R14: 00007f29f37e5fa0 R15: 00007ffc55fab9a8 [ 180.293552][ T9286] [ 180.860321][ T9304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.000074][ T9310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.845'. [ 181.079705][ T9315] netlink: 104 bytes leftover after parsing attributes in process `syz.4.847'. [ 181.136001][ T9310] nbd: socks must be embedded in a SOCK_ITEM attr [ 181.182990][ T9321] lo speed is unknown, defaulting to 1000 [ 181.214470][ T9321] lo speed is unknown, defaulting to 1000 [ 181.221155][ T9321] lo speed is unknown, defaulting to 1000 [ 181.239676][ T9317] vcan1: entered promiscuous mode [ 181.247425][ T9317] vcan1: entered allmulticast mode [ 181.364129][ T9321] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 181.490154][ T9321] lo speed is unknown, defaulting to 1000 [ 181.536937][ T9321] lo speed is unknown, defaulting to 1000 [ 181.544997][ T9321] lo speed is unknown, defaulting to 1000 [ 181.570274][ T9321] lo speed is unknown, defaulting to 1000 [ 181.592111][ T9321] lo speed is unknown, defaulting to 1000 [ 181.628154][ T9321] lo speed is unknown, defaulting to 1000 [ 181.751016][ T9340] netlink: 'syz.1.852': attribute type 12 has an invalid length. [ 181.791866][ T9340] netlink: 20 bytes leftover after parsing attributes in process `syz.1.852'. [ 181.872704][ T9341] netlink: 'syz.1.852': attribute type 4 has an invalid length. [ 182.091303][ T9344] tipc: Enabled bearer , priority 0 [ 182.102766][ T9344] syzkaller0: entered promiscuous mode [ 182.108314][ T9344] syzkaller0: entered allmulticast mode [ 182.216993][ T9344] tipc: Resetting bearer [ 182.228626][ T9343] tipc: Resetting bearer [ 182.283822][ T9343] tipc: Disabling bearer [ 182.311964][ T9357] netlink: 'syz.0.859': attribute type 1 has an invalid length. [ 182.349962][ T9357] bond4: entered promiscuous mode [ 182.355622][ T9357] bond4: entered allmulticast mode [ 182.361459][ T9357] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.546689][ T9366] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 182.629084][ T9371] xt_hashlimit: overflow, try lower: 3/0 [ 182.653615][ T9371] geneve3: entered promiscuous mode [ 182.660552][ T6125] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.688355][ T6125] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.707517][ T9374] netlink: 'syz.2.864': attribute type 3 has an invalid length. [ 182.710259][ T6125] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.740389][ T6125] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 182.761681][ T9374] netlink: 'syz.2.864': attribute type 3 has an invalid length. [ 182.886274][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 182.896376][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 183.113187][ T9391] macsec1: entered promiscuous mode [ 183.118675][ T9391] bridge0: entered promiscuous mode [ 183.140685][ T9391] tipc: Enabled bearer , priority 0 [ 183.158266][ T9391] syzkaller0: entered promiscuous mode [ 183.164512][ T9391] syzkaller0: entered allmulticast mode [ 183.465075][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 183.677258][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 183.816198][ T9421] SET target dimension over the limit! [ 183.971746][ T9427] wg1 speed is unknown, defaulting to 1000 [ 184.024831][ T9427] lo speed is unknown, defaulting to 1000 [ 184.113902][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 184.159093][ T9390] tipc: Resetting bearer [ 184.166417][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'. [ 184.196402][ T9390] tipc: Disabling bearer [ 184.224970][ T9433] lo: entered allmulticast mode [ 184.231077][ T9434] lo: left allmulticast mode [ 184.247787][ T9434] team_slave_0: tun_chr_ioctl cmd 1074025677 [ 184.254229][ T9434] team_slave_0: linktype set to 773 [ 184.466714][ T9453] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.886'. [ 184.492578][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 184.716543][ T5147] block nbd1: Receive control failed (result -32) [ 184.904110][ T8434] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 185.077223][ T9486] wg1 speed is unknown, defaulting to 1000 [ 185.145162][ T9480] bond3: option lacp_rate: invalid value (180) [ 185.155233][ T9480] bond3 (unregistering): Released all slaves [ 185.221645][ T9486] lo speed is unknown, defaulting to 1000 [ 185.249146][ T9500] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 185.396257][ T9504] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.545232][ T9510] wg1 speed is unknown, defaulting to 1000 [ 185.595356][ T9510] lo speed is unknown, defaulting to 1000 [ 185.870125][ T9514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.321545][ T9547] lo: Caught tx_queue_len zero misconfig [ 186.371532][ T9547] netem: change failed [ 186.477324][ T9543] wg1 speed is unknown, defaulting to 1000 [ 186.527723][ T9550] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 186.577898][ T9547] xt_CT: No such helper "netbios-ns" [ 186.618923][ T9543] lo speed is unknown, defaulting to 1000 [ 186.940542][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 186.987916][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 187.188198][ T9553] netlink: 'syz.4.907': attribute type 4 has an invalid length. [ 187.203746][ T9553] netlink: 'syz.4.907': attribute type 4 has an invalid length. [ 187.493487][ T9587] Bluetooth: MGMT ver 1.23 [ 187.548640][ T9553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.568905][ T9553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.595083][ T9601] netlink: 'syz.3.920': attribute type 10 has an invalid length. [ 187.713891][ T9553] bridge0: left promiscuous mode [ 187.724570][ T9580] veth0: entered promiscuous mode [ 187.771285][ T9601] team0: Port device dummy0 added [ 187.777438][ T6125] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.797348][ T6125] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.816699][ T6125] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.836456][ T9585] veth0: left promiscuous mode [ 187.881300][ T6125] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.915593][ T9592] wg1 speed is unknown, defaulting to 1000 [ 187.956456][ T9592] lo speed is unknown, defaulting to 1000 [ 188.598771][ T9612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.922'. [ 188.661237][ T9631] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 188.669072][ T9633] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 188.981910][ T9645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.931'. [ 189.068472][ T9645] batman_adv: batadv0: Adding interface: vlan0 [ 189.103342][ T9645] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.169061][ T9645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.196739][ T9645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.216817][ T9645] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 189.310203][ T9660] tipc: Enabling of bearer rejected, already enabled [ 189.322118][ T9657] netlink: 36 bytes leftover after parsing attributes in process `syz.3.933'. [ 189.523284][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.938'. [ 189.577510][ T9669] tipc: Resetting bearer [ 189.817465][ T9681] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 189.825763][ T9682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.940'. [ 189.915278][ T9692] wireguard0: entered promiscuous mode [ 189.920941][ T9692] wireguard0: entered allmulticast mode [ 189.929851][ T9692] team0: Device wireguard0 is of different type [ 190.046653][ T9700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.945'. [ 190.095990][ T9700] FAULT_INJECTION: forcing a failure. [ 190.095990][ T9700] name failslab, interval 1, probability 0, space 0, times 0 [ 190.129117][ T9700] CPU: 0 UID: 0 PID: 9700 Comm: syz.1.945 Not tainted syzkaller #0 PREEMPT(full) [ 190.129156][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.129173][ T9700] Call Trace: [ 190.129185][ T9700] [ 190.129200][ T9700] dump_stack_lvl+0xe8/0x150 [ 190.129238][ T9700] should_fail_ex+0x414/0x560 [ 190.129278][ T9700] should_failslab+0xa8/0x100 [ 190.129307][ T9700] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 190.129341][ T9700] ? __alloc_skb+0x198/0x3a0 [ 190.129361][ T9700] ? __alloc_skb+0x1dc/0x3a0 [ 190.129381][ T9700] ? __local_bh_enable_ip+0xd0/0x130 [ 190.129405][ T9700] ? __alloc_skb+0x198/0x3a0 [ 190.129427][ T9700] __alloc_skb+0x1dc/0x3a0 [ 190.129454][ T9700] netlink_ack+0x146/0xa50 [ 190.129499][ T9700] netlink_rcv_skb+0x28c/0x470 [ 190.129526][ T9700] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 190.129553][ T9700] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.129592][ T9700] ? bpf_lsm_capable+0x9/0x20 [ 190.129616][ T9700] ? security_capable+0x7e/0x2e0 [ 190.129648][ T9700] nfnetlink_rcv+0x282/0x2590 [ 190.129680][ T9700] ? lockdep_hardirqs_on+0x7b/0x110 [ 190.129710][ T9700] ? __dev_queue_xmit+0x289/0x31c0 [ 190.129736][ T9700] ? __local_bh_enable_ip+0xd0/0x130 [ 190.129754][ T9700] ? __dev_queue_xmit+0x289/0x31c0 [ 190.129780][ T9700] ? __dev_queue_xmit+0x19cb/0x31c0 [ 190.129805][ T9700] ? ___sys_sendmsg+0x21f/0x2a0 [ 190.129836][ T9700] ? __dev_queue_xmit+0x289/0x31c0 [ 190.129866][ T9700] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 190.129894][ T9700] ? __pfx___dev_queue_xmit+0x10/0x10 [ 190.129932][ T9700] ? ref_tracker_free+0x63a/0x7d0 [ 190.129954][ T9700] ? __asan_memcpy+0x40/0x70 [ 190.129973][ T9700] ? __pfx_ref_tracker_free+0x10/0x10 [ 190.129992][ T9700] ? __skb_clone+0x63/0x7a0 [ 190.130022][ T9700] ? __skb_clone+0x483/0x7a0 [ 190.130055][ T9700] ? skb_clone+0x246/0x3a0 [ 190.130086][ T9700] ? __netlink_deliver_tap+0x807/0x850 [ 190.130113][ T9700] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.130148][ T9700] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.130183][ T9700] netlink_unicast+0x82f/0x9e0 [ 190.130217][ T9700] ? __pfx_netlink_unicast+0x10/0x10 [ 190.130240][ T9700] ? __alloc_skb+0x198/0x3a0 [ 190.130262][ T9700] ? netlink_sendmsg+0x642/0xb30 [ 190.130287][ T9700] ? skb_put+0x11b/0x210 [ 190.130312][ T9700] netlink_sendmsg+0x805/0xb30 [ 190.130350][ T9700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.130383][ T9700] ? aa_sock_msg_perm+0xf1/0x1b0 [ 190.130412][ T9700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.130433][ T9700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.130468][ T9700] __sock_sendmsg+0x21c/0x270 [ 190.130503][ T9700] ____sys_sendmsg+0x505/0x820 [ 190.130536][ T9700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.130572][ T9700] ? import_iovec+0x74/0xa0 [ 190.130602][ T9700] ___sys_sendmsg+0x21f/0x2a0 [ 190.130631][ T9700] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.130701][ T9700] ? __fget_files+0x2a/0x420 [ 190.130729][ T9700] ? __fget_files+0x3a0/0x420 [ 190.130768][ T9700] __x64_sys_sendmsg+0x19b/0x260 [ 190.130798][ T9700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.130835][ T9700] ? __pfx_ksys_write+0x10/0x10 [ 190.130869][ T9700] do_syscall_64+0xec/0xf80 [ 190.130892][ T9700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.130913][ T9700] ? trace_irq_disable+0x37/0x100 [ 190.130942][ T9700] ? clear_bhb_loop+0x60/0xb0 [ 190.130968][ T9700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.130989][ T9700] RIP: 0033:0x7f29f358f749 [ 190.131010][ T9700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.131029][ T9700] RSP: 002b:00007f29f43fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.131053][ T9700] RAX: ffffffffffffffda RBX: 00007f29f37e5fa0 RCX: 00007f29f358f749 [ 190.131069][ T9700] RDX: 0000000020008040 RSI: 0000200000000240 RDI: 0000000000000003 [ 190.131084][ T9700] RBP: 00007f29f43fc090 R08: 0000000000000000 R09: 0000000000000000 [ 190.131097][ T9700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.131110][ T9700] R13: 00007f29f37e6038 R14: 00007f29f37e5fa0 R15: 00007ffc55fab9a8 [ 190.131145][ T9700] [ 190.971764][ T9726] tipc: Enabled bearer , priority 0 [ 190.981594][ T9726] syzkaller0: entered promiscuous mode [ 190.991635][ T9726] syzkaller0: entered allmulticast mode [ 191.044123][ T9726] tipc: Resetting bearer [ 191.076583][ T9724] tipc: Resetting bearer [ 191.092575][ T9724] tipc: Disabling bearer [ 191.118375][ T9734] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 191.166959][ T5958] IPVS: starting estimator thread 0... [ 191.302596][ T9740] IPVS: using max 25 ests per chain, 60000 per kthread [ 191.514656][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 191.524177][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 191.696072][ T9772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.824043][ T9791] netlink: 44 bytes leftover after parsing attributes in process `syz.4.976'. [ 191.860538][ T9793] sctp: [Deprecated]: syz.0.974 (pid 9793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.860538][ T9793] Use struct sctp_sack_info instead [ 192.317751][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 192.341472][ T9810] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 193.449360][ T9873] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 193.571322][ T9884] FAULT_INJECTION: forcing a failure. [ 193.571322][ T9884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.610752][ T9884] CPU: 1 UID: 0 PID: 9884 Comm: syz.0.1004 Not tainted syzkaller #0 PREEMPT(full) [ 193.610783][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.610798][ T9884] Call Trace: [ 193.610806][ T9884] [ 193.610816][ T9884] dump_stack_lvl+0xe8/0x150 [ 193.610849][ T9884] should_fail_ex+0x414/0x560 [ 193.610889][ T9884] _copy_from_user+0x2d/0xb0 [ 193.610917][ T9884] ___sys_recvmsg+0x12e/0x510 [ 193.610951][ T9884] ? __pfx____sys_recvmsg+0x10/0x10 [ 193.610984][ T9884] ? __fget_files+0x2a/0x420 [ 193.611045][ T9884] do_recvmmsg+0x307/0x770 [ 193.611081][ T9884] ? __pfx_do_recvmmsg+0x10/0x10 [ 193.611122][ T9884] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 193.611165][ T9884] __x64_sys_recvmmsg+0x190/0x240 [ 193.611196][ T9884] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 193.611237][ T9884] do_syscall_64+0xec/0xf80 [ 193.611259][ T9884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.611281][ T9884] ? clear_bhb_loop+0x60/0xb0 [ 193.611308][ T9884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.611330][ T9884] RIP: 0033:0x7f030cd8f749 [ 193.611349][ T9884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.611369][ T9884] RSP: 002b:00007f030aff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 193.611392][ T9884] RAX: ffffffffffffffda RBX: 00007f030cfe5fa0 RCX: 00007f030cd8f749 [ 193.611408][ T9884] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 193.611421][ T9884] RBP: 00007f030aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 193.611433][ T9884] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 193.611446][ T9884] R13: 00007f030cfe6038 R14: 00007f030cfe5fa0 R15: 00007ffd718f7858 [ 193.611489][ T9884] [ 194.289711][ T9902] wg1 speed is unknown, defaulting to 1000 [ 194.314166][ T9902] lo speed is unknown, defaulting to 1000 [ 194.443780][ T9923] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 194.511960][ T9921] syzkaller0: entered promiscuous mode [ 194.522632][ T9921] syzkaller0: entered allmulticast mode [ 194.538266][ T9929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1018'. [ 194.579184][ T9930] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 194.608387][ T9930] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 194.689860][ T9930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1017'. [ 194.827669][ T9933] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.858955][ T9930] 8021q: adding VLAN 0 to HW filter on device bond3 [ 194.889986][ T9935] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 194.914625][ T9939] macvlan2: entered promiscuous mode [ 194.920138][ T9939] macvlan2: entered allmulticast mode [ 194.929823][ T9939] bond3: entered promiscuous mode [ 194.936311][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1020'. [ 194.945911][ T9939] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 194.957161][ T9939] bond3: left promiscuous mode [ 195.130650][ T9949] netlink: 'syz.2.1023': attribute type 58 has an invalid length. [ 195.154013][ T9949] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1023'. [ 195.247180][ T9953] syzkaller0: entered promiscuous mode [ 195.252866][ T9953] syzkaller0: entered allmulticast mode [ 195.336422][ T9959] tipc: Enabled bearer , priority 0 [ 195.430254][ T9952] tipc: Resetting bearer [ 195.492067][ T9952] tipc: Disabling bearer [ 195.514696][ T9963] syzkaller0: entered promiscuous mode [ 195.536231][ T9963] syzkaller0: entered allmulticast mode [ 195.574663][ T9962] xt_bpf: check failed: parse error [ 195.636099][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1029'. [ 195.649833][ T9970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1029'. [ 195.896051][ T9986] FAULT_INJECTION: forcing a failure. [ 195.896051][ T9986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.925304][ T9986] CPU: 0 UID: 0 PID: 9986 Comm: syz.1.1034 Not tainted syzkaller #0 PREEMPT(full) [ 195.925335][ T9986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.925349][ T9986] Call Trace: [ 195.925357][ T9986] [ 195.925365][ T9986] dump_stack_lvl+0xe8/0x150 [ 195.925399][ T9986] should_fail_ex+0x414/0x560 [ 195.925435][ T9986] _copy_from_user+0x2d/0xb0 [ 195.925458][ T9986] ___sys_recvmsg+0x12e/0x510 [ 195.925490][ T9986] ? __pfx____sys_recvmsg+0x10/0x10 [ 195.925521][ T9986] ? __fget_files+0x2a/0x420 [ 195.925591][ T9986] do_recvmmsg+0x307/0x770 [ 195.925627][ T9986] ? __pfx_do_recvmmsg+0x10/0x10 [ 195.925665][ T9986] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.925707][ T9986] __x64_sys_recvmmsg+0x190/0x240 [ 195.925735][ T9986] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 195.925774][ T9986] do_syscall_64+0xec/0xf80 [ 195.925796][ T9986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.925814][ T9986] ? trace_irq_disable+0x37/0x100 [ 195.925839][ T9986] ? clear_bhb_loop+0x60/0xb0 [ 195.925859][ T9986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.925875][ T9986] RIP: 0033:0x7f29f358f749 [ 195.925891][ T9986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.925906][ T9986] RSP: 002b:00007f29f43fc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 195.925925][ T9986] RAX: ffffffffffffffda RBX: 00007f29f37e5fa0 RCX: 00007f29f358f749 [ 195.925938][ T9986] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000005 [ 195.925950][ T9986] RBP: 00007f29f43fc090 R08: 0000000000000000 R09: 0000000000000000 [ 195.925964][ T9986] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 195.925977][ T9986] R13: 00007f29f37e6038 R14: 00007f29f37e5fa0 R15: 00007ffc55fab9a8 [ 195.926006][ T9986] [ 196.189630][ T9980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.198831][ T9980] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 196.329098][ T9993] netlink: 'syz.2.1035': attribute type 7 has an invalid length. [ 196.415685][ T9993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1035'. [ 197.138519][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 197.143880][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 197.917274][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 197.940066][T10075] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 198.011507][T10075] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.095245][T10077] bond3: (slave veth3): Enslaving as an active interface with a down link [ 198.166229][T10075] team0: Port device dummy0 removed [ 198.181160][T10075] bond3: (slave dummy0): making interface the new active one [ 198.209829][T10075] dummy0: entered promiscuous mode [ 198.223209][T10075] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 198.319056][T10087] veth0: entered promiscuous mode [ 198.339457][T10082] wg1 speed is unknown, defaulting to 1000 [ 198.376078][T10082] lo speed is unknown, defaulting to 1000 [ 198.501609][T10099] netlink: 'syz.2.1059': attribute type 16 has an invalid length. [ 198.765200][T10094] team0 (unregistering): Port device team_slave_0 removed [ 198.788827][T10094] team0 (unregistering): Port device team_slave_1 removed [ 198.829850][T10118] 8021q: VLANs not supported on ip_vti0 [ 198.838616][T10119] tipc: Enabled bearer , priority 0 [ 198.867758][T10103] syzkaller0: entered promiscuous mode [ 198.881242][T10103] syzkaller0: entered allmulticast mode [ 198.903010][T10103] tipc: Resetting bearer [ 198.933862][T10101] tipc: Resetting bearer [ 198.965093][T10101] tipc: Disabling bearer [ 199.055154][T10087] veth0: left promiscuous mode [ 199.528656][T10144] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 199.636687][ T6010] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 199.777312][T10161] netlink: 'syz.2.1077': attribute type 11 has an invalid length. [ 199.795289][T10161] netlink: 'syz.2.1077': attribute type 11 has an invalid length. [ 199.817562][T10165] __nla_validate_parse: 3 callbacks suppressed [ 199.817584][T10165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 199.835579][T10161] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1077'. [ 199.983732][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1080'. [ 200.061317][T10182] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.1083'. [ 200.260849][T10189] wg1 speed is unknown, defaulting to 1000 [ 200.296564][T10193] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1085'. [ 200.331358][T10189] lo speed is unknown, defaulting to 1000 [ 200.399892][T10196] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 200.609263][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1090'. [ 200.638463][T10207] wg1 speed is unknown, defaulting to 1000 [ 200.646368][T10207] lo speed is unknown, defaulting to 1000 [ 200.702642][T10205] tipc: Enabled bearer , priority 0 [ 200.735258][T10205] syzkaller0: entered promiscuous mode [ 200.740811][T10205] syzkaller0: entered allmulticast mode [ 200.882252][T10217] bridge_slave_1: left allmulticast mode [ 200.898903][T10217] bridge_slave_1: left promiscuous mode [ 200.933549][T10217] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.013565][T10217] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 201.112022][T10204] tipc: Resetting bearer [ 201.196742][T10204] tipc: Disabling bearer [ 201.212669][T10233] IPVS: length: 153 != 24 [ 201.233931][T10234] sctp: [Deprecated]: syz.0.1097 (pid 10234) Use of int in max_burst socket option. [ 201.233931][T10234] Use struct sctp_assoc_value instead [ 201.266541][T10222] wg1 speed is unknown, defaulting to 1000 [ 201.275634][T10222] lo speed is unknown, defaulting to 1000 [ 201.297634][T10234] bond0: entered promiscuous mode [ 201.318046][T10234] bond_slave_0: entered promiscuous mode [ 201.339565][T10234] bond_slave_1: entered promiscuous mode [ 201.366536][T10234] bond0: left promiscuous mode [ 201.381306][T10234] bond_slave_0: left promiscuous mode [ 201.402233][T10234] bond_slave_1: left promiscuous mode [ 201.542843][T10239] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1098'. [ 201.833922][T10244] tipc: Enabled bearer , priority 0 [ 201.854632][T10244] syzkaller0: entered promiscuous mode [ 201.866120][T10244] syzkaller0: entered allmulticast mode [ 201.964354][T10248] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 202.045925][T10244] syzkaller0: mtu less than device minimum [ 202.053158][T10242] tipc: Resetting bearer [ 202.117562][T10242] tipc: Disabling bearer [ 202.138123][T10261] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 202.157648][T10261] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 202.166063][T10261] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 202.174198][T10261] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 202.182417][T10261] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 202.190505][T10261] netlink: 'syz.3.1104': attribute type 1 has an invalid length. [ 202.341695][T10273] netlink: 'syz.1.1105': attribute type 12 has an invalid length. [ 202.750329][T10287] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 202.805696][T10288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1112'. [ 203.331621][T10303] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 203.464376][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1119'. [ 203.581405][T10304] wg1 speed is unknown, defaulting to 1000 [ 203.621308][T10304] lo speed is unknown, defaulting to 1000 [ 203.631192][T10313] wg1 speed is unknown, defaulting to 1000 [ 203.681488][T10313] lo speed is unknown, defaulting to 1000 [ 204.046846][T10342] netlink: 'syz.1.1127': attribute type 1 has an invalid length. [ 204.057371][T10347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1125'. [ 204.156259][T10353] ip6tnl2: entered allmulticast mode [ 204.471696][T10356] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 204.583635][T10357] wg1 speed is unknown, defaulting to 1000 [ 204.603347][T10357] lo speed is unknown, defaulting to 1000 [ 205.090877][T10401] wg1 speed is unknown, defaulting to 1000 [ 205.118518][T10401] lo speed is unknown, defaulting to 1000 [ 205.195650][T10406] __nla_validate_parse: 2 callbacks suppressed [ 205.195673][T10406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'. [ 205.225603][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1144'. [ 205.501497][T10417] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 205.627304][T10425] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1148'. [ 205.695672][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 205.735071][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 205.752140][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.759970][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.773922][T10428] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1149'. [ 205.908963][T10413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.927999][T10413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.134010][ T130] wg1 speed is unknown, defaulting to 1000 [ 206.152468][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.160439][ T130] syz0: Port: 1 Link DOWN [ 206.175287][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.247157][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.273275][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.308841][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 206.334252][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.359522][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.388939][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 206.423918][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.479302][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.492067][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 206.502832][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.511776][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.529114][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 206.591791][T10441] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1152'. [ 206.622079][T10447] netlink: 'syz.1.1150': attribute type 13 has an invalid length. [ 206.632766][T10445] tipc: Enabled bearer , priority 0 [ 206.665541][T10451] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 206.687071][T10454] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1154'. [ 206.766649][T10448] syzkaller0: entered promiscuous mode [ 206.781903][T10448] syzkaller0: entered allmulticast mode [ 207.055495][T10458] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 209.274119][T10442] tipc: Resetting bearer [ 209.294558][T10442] tipc: Disabling bearer [ 209.308046][ T5958] tipc: Node number set to 831556862 [ 209.413044][ T36] dummy0: left promiscuous mode [ 209.527912][T10497] syz_tun: entered allmulticast mode [ 209.598080][T10489] syz_tun: left allmulticast mode [ 209.623677][T10492] wg1 speed is unknown, defaulting to 1000 [ 209.631264][T10492] lo speed is unknown, defaulting to 1000 [ 209.645424][T10501] netlink: 'syz.4.1167': attribute type 3 has an invalid length. [ 209.890691][T10510] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 210.013354][T10510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1169'. [ 210.044871][T10519] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 210.063504][T10519] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 210.103504][T10510] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 210.113215][T10524] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 210.132527][T10510] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1169'. [ 210.160758][T10526] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 210.214163][T10515] wg1 speed is unknown, defaulting to 1000 [ 210.235469][T10515] lo speed is unknown, defaulting to 1000 [ 210.330177][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'. [ 210.339976][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 210.343152][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'. [ 210.377270][T10534] nbd: must specify at least one socket [ 210.396916][T10529] geneve3: entered promiscuous mode [ 210.413127][T10529] geneve3: entered allmulticast mode [ 210.497493][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.525585][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.558829][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.568860][T10541] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1179'. [ 210.580153][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.604229][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'. [ 210.739366][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1182'. [ 210.748664][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 210.760749][T10550] netlink: 'syz.4.1182': attribute type 18 has an invalid length. [ 211.052811][T10556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1183'. [ 211.102498][T10556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1183'. [ 211.212098][T10581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1187'. [ 211.755242][T10577] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 211.779243][T10577] CPU: 1 UID: 0 PID: 10577 Comm: syz.0.1187 Not tainted syzkaller #0 PREEMPT(full) [ 211.779277][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.779293][T10577] Call Trace: [ 211.779302][T10577] [ 211.779313][T10577] dump_stack_lvl+0xe8/0x150 [ 211.779349][T10577] sysfs_warn_dup+0x8e/0xa0 [ 211.779374][T10577] sysfs_do_create_link_sd+0xc0/0x110 [ 211.779402][T10577] device_add_class_symlinks+0x1cf/0x240 [ 211.779430][T10577] device_add+0x475/0xb80 [ 211.779458][T10577] wiphy_register+0x1d2e/0x2d20 [ 211.779509][T10577] ? __pfx_wiphy_register+0x10/0x10 [ 211.779542][T10577] ? __pfx_netdev_run_todo+0x10/0x10 [ 211.779573][T10577] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 211.779608][T10577] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 211.779638][T10577] ieee80211_register_hw+0x34a7/0x4110 [ 211.779686][T10577] ? __lock_acquire+0x6b6/0x2cf0 [ 211.779724][T10577] ? ieee80211_register_hw+0x1411/0x4110 [ 211.779762][T10577] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 211.779807][T10577] ? __hrtimer_setup+0x181/0x200 [ 211.779837][T10577] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 211.779868][T10577] mac80211_hwsim_new_radio+0x2f6d/0x52f0 [ 211.779925][T10577] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 211.779947][T10577] ? kstrndup+0xbf/0x160 [ 211.779983][T10577] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 211.780014][T10577] ? __pfx___nla_validate_parse+0x10/0x10 [ 211.780064][T10577] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.780096][T10577] ? rcu_is_watching+0x15/0xb0 [ 211.780129][T10577] ? __nla_parse+0x40/0x60 [ 211.780158][T10577] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 211.780191][T10577] genl_family_rcv_msg_doit+0x215/0x300 [ 211.780222][T10577] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 211.780263][T10577] ? bpf_lsm_capable+0x9/0x20 [ 211.780290][T10577] ? security_capable+0x7e/0x2e0 [ 211.780325][T10577] genl_rcv_msg+0x60e/0x790 [ 211.780353][T10577] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.780373][T10577] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.780414][T10577] netlink_rcv_skb+0x208/0x470 [ 211.780445][T10577] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.780468][T10577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.780494][T10577] ? genl_rcv+0x19/0x40 [ 211.780549][T10577] ? down_read+0x274/0x2e0 [ 211.780574][T10577] ? genl_rcv+0xd/0x40 [ 211.780610][T10577] genl_rcv+0x28/0x40 [ 211.780643][T10577] netlink_unicast+0x82f/0x9e0 [ 211.780679][T10577] ? __pfx_netlink_unicast+0x10/0x10 [ 211.780704][T10577] ? __alloc_skb+0x198/0x3a0 [ 211.780728][T10577] ? netlink_sendmsg+0x642/0xb30 [ 211.780755][T10577] ? skb_put+0x11b/0x210 [ 211.780783][T10577] netlink_sendmsg+0x805/0xb30 [ 211.780825][T10577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.780864][T10577] ? aa_sock_msg_perm+0xf1/0x1b0 [ 211.780896][T10577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.780918][T10577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.780950][T10577] __sock_sendmsg+0x21c/0x270 [ 211.780989][T10577] ____sys_sendmsg+0x505/0x820 [ 211.781028][T10577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.781073][T10577] ? import_iovec+0x74/0xa0 [ 211.781105][T10577] ___sys_sendmsg+0x21f/0x2a0 [ 211.781136][T10577] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.781172][T10577] ? futex_wait+0x285/0x360 [ 211.781233][T10577] ? __fget_files+0x2a/0x420 [ 211.781261][T10577] ? __fget_files+0x3a0/0x420 [ 211.781302][T10577] __x64_sys_sendmsg+0x19b/0x260 [ 211.781333][T10577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.781373][T10577] ? rcu_is_watching+0x15/0xb0 [ 211.781415][T10577] do_syscall_64+0xec/0xf80 [ 211.781439][T10577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.781460][T10577] ? trace_irq_disable+0x37/0x100 [ 211.781490][T10577] ? clear_bhb_loop+0x60/0xb0 [ 211.781518][T10577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.781540][T10577] RIP: 0033:0x7f030cd8f749 [ 211.781561][T10577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.781581][T10577] RSP: 002b:00007f030aff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.781606][T10577] RAX: ffffffffffffffda RBX: 00007f030cfe5fa0 RCX: 00007f030cd8f749 [ 211.781623][T10577] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 211.781638][T10577] RBP: 00007f030ce13f91 R08: 0000000000000000 R09: 0000000000000000 [ 211.781652][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.781665][T10577] R13: 00007f030cfe6038 R14: 00007f030cfe5fa0 R15: 00007ffd718f7858 [ 211.781703][T10577] [ 212.263014][ T5837] Bluetooth: hci0: command 0x0401 tx timeout [ 212.269245][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 212.275733][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 212.281883][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 212.449719][T10597] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 212.606010][T10598] bond4 (unregistering): Released all slaves [ 212.795059][T10608] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.888433][T10612] netlink: 'syz.2.1199': attribute type 3 has an invalid length. [ 212.920862][T10612] netlink: 'syz.2.1199': attribute type 3 has an invalid length. [ 212.995947][T10615] xt_TCPMSS: Only works on TCP SYN packets [ 213.361406][T10635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.454499][T10684] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.633552][T10692] batman_adv: batadv0: Removing interface: vlan0 [ 214.680027][T10697] netlink: 'syz.2.1218': attribute type 21 has an invalid length. [ 215.435798][T10730] syzkaller0: entered promiscuous mode [ 215.441357][T10730] syzkaller0: entered allmulticast mode [ 215.634106][T10734] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 215.648048][T10735] __nla_validate_parse: 10 callbacks suppressed [ 215.648073][T10735] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1230'. [ 215.804295][T10734] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 216.044111][T10752] nbd: socks must be embedded in a SOCK_ITEM attr [ 216.229928][T10760] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1238'. [ 216.247874][T10760] gtp0: entered promiscuous mode [ 216.253584][T10760] gtp0: entered allmulticast mode [ 216.300848][T10764] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1238'. [ 216.364339][T10765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1236'. [ 216.427666][T10768] wg1 speed is unknown, defaulting to 1000 [ 216.436052][T10768] lo speed is unknown, defaulting to 1000 [ 216.604435][T10777] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1239'. [ 216.988193][ T5831] Bluetooth: hci4: link tx timeout [ 216.995134][ T5831] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 217.044549][T10788] xt_nat: multiple ranges no longer supported [ 217.044722][ T5836] Bluetooth: hci4: link tx timeout [ 217.055963][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 217.079497][ T5836] Bluetooth: hci4: link tx timeout [ 217.084803][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 217.091307][T10787] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1243'. [ 217.460711][T10808] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1247'. [ 217.523611][T10804] syzkaller0: entered promiscuous mode [ 217.529231][T10804] syzkaller0: entered allmulticast mode [ 217.990768][T10821] netlink: 'syz.2.1254': attribute type 1 has an invalid length. [ 218.134517][ T5958] IPVS: starting estimator thread 0... [ 218.225533][T10823] IPVS: using max 31 ests per chain, 74400 per kthread [ 219.072791][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 219.418290][T10821] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 219.576619][T10844] geneve3: entered promiscuous mode [ 219.594986][ T1090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.612994][ T1090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.638742][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 219.658306][ T1090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.675879][ T1090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.688774][T10842] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1261'. [ 219.722698][T10842] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1261'. [ 220.065073][T10867] syzkaller1: entered promiscuous mode [ 220.070640][T10867] syzkaller1: entered allmulticast mode [ 220.111015][T10867] gretap1: entered promiscuous mode [ 220.725263][T10906] netlink: 'syz.4.1282': attribute type 1 has an invalid length. [ 220.786255][T10911] Cannot find del_set index 1 as target [ 220.924779][T10918] __nla_validate_parse: 3 callbacks suppressed [ 220.924806][T10918] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1285'. [ 220.964385][T10918] vlan2: entered promiscuous mode [ 220.969501][T10918] bond0: entered promiscuous mode [ 220.994828][T10918] bond_slave_0: entered promiscuous mode [ 221.047833][T10918] dummy0: entered promiscuous mode [ 221.078135][T10918] team0: entered promiscuous mode [ 221.105955][T10918] team_slave_0: entered promiscuous mode [ 221.154870][T10918] team_slave_1: entered promiscuous mode [ 221.639094][T10947] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1290'. [ 221.852557][T10950] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 222.173451][T10960] netlink: 'syz.4.1296': attribute type 89 has an invalid length. [ 222.621856][T10992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1304'. [ 222.688416][T10997] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1304'. [ 222.797896][T10996] pim6reg: entered allmulticast mode [ 222.829996][T10991] pim6reg: left allmulticast mode [ 223.048937][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'. [ 223.254482][T11019] tipc: Enabling of bearer rejected, failed to enable media [ 223.292248][T11022] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 223.301004][T11022] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 223.319568][T11027] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1312'. [ 223.440075][T11029] wg1 speed is unknown, defaulting to 1000 [ 223.454109][T11031] xt_l2tp: v2 doesn't support IP mode [ 223.476126][T11029] lo speed is unknown, defaulting to 1000 [ 223.914469][T11065] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1323'. [ 224.396884][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1331'. [ 224.675652][T11093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.689021][T11093] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 224.707234][T11111] 8021q: VLANs not supported on ip6_vti0 [ 225.086148][T11124] xt_TCPMSS: Only works on TCP SYN packets [ 225.599390][T11148] netlink: 'syz.1.1349': attribute type 2 has an invalid length. [ 225.614209][T11147] 8021q: VLANs not supported on sit0 [ 225.637700][T11150] netlink: 'syz.3.1351': attribute type 3 has an invalid length. [ 225.677380][T11145] wg1 speed is unknown, defaulting to 1000 [ 225.687173][T11150] dvmrp0: left allmulticast mode [ 225.733356][T11145] lo speed is unknown, defaulting to 1000 [ 225.753323][T11153] siw: device registration error -23 [ 225.782550][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'. [ 225.809729][T11155] x_tables: duplicate underflow at hook 1 [ 225.843291][T11160] syzkaller0: entered promiscuous mode [ 225.860453][T11160] syzkaller0: entered allmulticast mode [ 225.882057][T11159] tipc: Enabled bearer , priority 0 [ 225.915485][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1354'. [ 226.042178][T11167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.116709][T11159] tipc: Resetting bearer [ 226.192138][T11159] tipc: Disabling bearer [ 226.259412][T11167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.518133][T11167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.718802][T11167] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.761007][T11182] wg1 speed is unknown, defaulting to 1000 [ 226.774570][T11182] lo speed is unknown, defaulting to 1000 [ 227.008962][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.055523][ T6097] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.102980][ T8436] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.180268][ T8436] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.238180][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 227.274234][T11215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1366'. [ 227.565130][T11221] wg1 speed is unknown, defaulting to 1000 [ 227.592142][T11221] lo speed is unknown, defaulting to 1000 [ 227.628189][T11229] tipc: New replicast peer: 255.255.255.255 [ 227.636147][T11229] tipc: Enabled bearer , priority 10 [ 227.656642][T11226] netlink: 'syz.4.1371': attribute type 11 has an invalid length. [ 227.680087][T11230] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1372'. [ 227.709000][T11226] netlink: 'syz.4.1371': attribute type 11 has an invalid length. [ 227.722210][T11230] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1372'. [ 227.732850][T11226] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1371'. [ 228.093010][T11246] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 228.156646][T11249] x_tables: duplicate underflow at hook 3 [ 228.323773][T11257] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 228.379804][T11258] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 228.415442][T11263] xt_cgroup: invalid path, errno=-2 [ 228.498198][T11262] wg1 speed is unknown, defaulting to 1000 [ 228.525619][T11262] lo speed is unknown, defaulting to 1000 [ 228.682616][T11271] netlink: 'syz.0.1386': attribute type 3 has an invalid length. [ 228.715137][T11271] netlink: 'syz.0.1386': attribute type 1 has an invalid length. [ 228.752517][ T7100] tipc: Node number set to 1718567157 [ 228.756505][T11271] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1386'. [ 228.801780][T11271] NCSI netlink: No device for ifindex 23016 [ 228.884882][T11280] netlink: 'syz.3.1388': attribute type 21 has an invalid length. [ 228.897382][T11280] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1388'. [ 228.927280][T11280] netlink: 'syz.3.1388': attribute type 4 has an invalid length. [ 228.940448][T11280] netlink: 'syz.3.1388': attribute type 3 has an invalid length. [ 228.984162][T11280] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1388'. [ 229.013025][T11284] netlink: 'syz.3.1388': attribute type 1 has an invalid length. [ 229.050165][T11284] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1388'. [ 229.119246][T11293] xt_policy: too many policy elements [ 229.297481][T11297] Cannot find add_set index 1 as target [ 229.349716][T11300] wg1 speed is unknown, defaulting to 1000 [ 229.367863][T11300] lo speed is unknown, defaulting to 1000 [ 229.606529][T11322] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1399'. [ 229.957401][T11333] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 230.093316][T11342] bond0: (slave team0): Releasing backup interface [ 230.123086][T11342] team0: left promiscuous mode [ 230.127961][T11342] team_slave_0: left promiscuous mode [ 230.163872][T11342] team_slave_1: left promiscuous mode [ 230.194573][T11342] bridge_slave_0: left allmulticast mode [ 230.200311][T11342] bridge_slave_0: left promiscuous mode [ 230.245498][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.332473][T11359] netlink: 'syz.1.1410': attribute type 1 has an invalid length. [ 230.497027][T11342] bridge_slave_1: left allmulticast mode [ 230.529416][T11342] bridge_slave_1: left promiscuous mode [ 230.552824][T11342] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.577075][T11342] bond0: (slave bond_slave_0): Releasing backup interface [ 230.586804][T11342] bond_slave_0: left promiscuous mode [ 230.604941][T11342] team0: Port device team_slave_0 removed [ 230.614856][T11342] team0: Port device team_slave_1 removed [ 230.628856][T11342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.703997][T11342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.714787][T11342] bond1: (slave veth3): Releasing active interface [ 230.726130][T11342] bond3: (slave bridge4): Releasing active interface [ 230.739365][T11342] bond4: (slave bridge5): Releasing active interface [ 230.756966][T11342] bond4: (slave bridge6): Releasing active interface [ 230.940377][T11364] vlan0: entered allmulticast mode [ 230.954582][T11364] bond5: entered allmulticast mode [ 231.128738][T11310] wg1 speed is unknown, defaulting to 1000 [ 231.239726][T11310] lo speed is unknown, defaulting to 1000 [ 231.367306][ T30] audit: type=1107 audit(1767202129.790:3): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='>VA Zr.Sm `=_&6^&FC}B|'QB]ii73k'+#:' [ 231.404459][T11380] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 231.491432][T11384] syzkaller1: entered promiscuous mode [ 231.497989][T11384] syzkaller1: entered allmulticast mode [ 231.506271][T11384] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 232.626134][T11441] netlink: 'syz.0.1430': attribute type 4 has an invalid length. [ 232.963717][T11447] raw_sendmsg: syz.4.1433 forgot to set AF_INET. Fix it! [ 233.006069][T11459] wg1 speed is unknown, defaulting to 1000 [ 233.025094][T11459] lo speed is unknown, defaulting to 1000 [ 233.057257][T11462] __nla_validate_parse: 5 callbacks suppressed [ 233.057276][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1437'. [ 233.312685][T11473] sch_fq: defrate 0 ignored. [ 233.357316][T11473] netlink: 'syz.3.1441': attribute type 3 has an invalid length. [ 233.615183][T11491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1447'. [ 233.693644][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1447'. [ 233.913668][T11494] bridge0: port 4(batadv0) entered disabled state [ 233.930514][T11494] bond1: left allmulticast mode [ 233.936463][T11494] bond1: left promiscuous mode [ 233.942203][T11494] bridge0: port 3(bond1) entered disabled state [ 233.984077][T11494] bridge_slave_0: left allmulticast mode [ 233.990537][T11494] bridge_slave_0: left promiscuous mode [ 233.998477][T11494] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.441451][T11511] bond5: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 234.459796][T11511] bond5: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 234.511087][T11518] bond6: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 234.552371][T11518] bond6: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 234.660023][T11517] wg1 speed is unknown, defaulting to 1000 [ 234.686038][T11517] lo speed is unknown, defaulting to 1000 [ 234.727080][T11530] netlink: 'syz.0.1454': attribute type 10 has an invalid length. [ 234.758665][T11530] hsr0: entered promiscuous mode [ 234.764719][T11525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1452'. [ 234.774102][T11525] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1452'. [ 234.792608][T11530] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 234.813713][T11530] hsr0: mtu greater than device maximum [ 234.819359][T11530] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 234.911603][T11528] wg1 speed is unknown, defaulting to 1000 [ 234.923126][T11528] lo speed is unknown, defaulting to 1000 [ 235.024627][T11537] vti0: entered promiscuous mode [ 236.006861][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1466'. [ 236.073455][T11584] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 236.091412][T11584] bond4 (unregistering): Released all slaves [ 236.284243][T11590] syzkaller0: entered promiscuous mode [ 236.289765][T11590] syzkaller0: entered allmulticast mode [ 236.511483][T11608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1474'. [ 238.152734][T11630] netlink: 'syz.0.1478': attribute type 1 has an invalid length. [ 238.223321][T11637] netlink: 1084 bytes leftover after parsing attributes in process `syz.2.1480'. [ 238.251378][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1481'. [ 238.465476][T11651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1485'. [ 238.510672][T11650] bond5: entered promiscuous mode [ 238.526249][T11650] bond5: entered allmulticast mode [ 238.533794][T11650] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.824574][T11676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1492'. [ 238.915127][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1491'. [ 239.069345][T11692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1494'. [ 239.094259][T11692] : renamed from team_slave_1 [ 239.398073][T11698] wg1 speed is unknown, defaulting to 1000 [ 239.406291][T11698] lo speed is unknown, defaulting to 1000 [ 239.554304][T11700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1496'. [ 239.890707][T11718] tipc: Invalid UDP bearer configuration [ 239.890763][T11718] tipc: Enabling of bearer rejected, failed to enable media [ 240.336057][T11737] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 240.486670][T11741] netlink: 'syz.0.1507': attribute type 1 has an invalid length. [ 240.513524][T11737] bond5: Removing last ns target with arp_interval on [ 240.564407][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 240.638701][T11741] 8021q: adding VLAN 0 to HW filter on device bond7 [ 241.101535][T11743] bond7 (unregistering): Released all slaves [ 241.174685][T11766] dvmrp1: entered allmulticast mode [ 241.200546][T11769] dvmrp1: left allmulticast mode [ 241.259528][T11770] geneve4: entered promiscuous mode [ 241.374271][T11777] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1515'. [ 241.399065][T11773] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.426972][T11779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'. [ 241.430237][T11777] openvswitch: netlink: Flow key attr not present in new flow. [ 241.613107][T11773] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.720168][T11773] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.824915][T11773] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.005071][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.069637][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.116245][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.171008][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.935593][T11823] : entered promiscuous mode [ 243.121760][T11827] netlink: 'syz.3.1528': attribute type 10 has an invalid length. [ 243.145734][T11827] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 243.316553][T11833] wg1 speed is unknown, defaulting to 1000 [ 243.335669][T11833] lo speed is unknown, defaulting to 1000 [ 243.359608][T11836] netlink: 'syz.0.1531': attribute type 1 has an invalid length. [ 243.419083][T11835] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.500344][T11836] __nla_validate_parse: 4 callbacks suppressed [ 243.500367][T11836] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1531'. [ 243.547113][T11837] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 243.570191][T11837] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 243.710817][T11843] bond7: (slave bridge0): Enslaving as an active interface with a down link [ 243.745659][T11836] bond7: (slave bridge4): Enslaving as an active interface with a down link [ 243.797608][T11837] macvlan2: entered promiscuous mode [ 243.822914][T11837] macvlan2: entered allmulticast mode [ 243.829869][T11837] bond7: entered promiscuous mode [ 243.836113][T11837] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 243.846386][T11837] bond7: left promiscuous mode [ 244.132677][T11855] netlink: 'syz.2.1536': attribute type 1 has an invalid length. [ 244.142147][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1537'. [ 244.168204][T11858] x_tables: unsorted underflow at hook 3 [ 244.228098][T11861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1536'. [ 244.775293][T11887] netlink: 212324 bytes leftover after parsing attributes in process `syz.3.1540'. [ 244.874744][T11882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1541'. [ 245.418608][T11911] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1546'. [ 245.522654][T11911] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1546'. [ 245.541287][T11919] netlink: 'syz.4.1545': attribute type 4 has an invalid length. [ 245.625124][T11913] wg1 speed is unknown, defaulting to 1000 [ 245.644226][T11913] lo speed is unknown, defaulting to 1000 [ 245.866218][T11923] team_slave_1: entered promiscuous mode [ 245.872158][T11923] team_slave_1: entered allmulticast mode [ 246.329174][T11937] vlan3: entered allmulticast mode [ 246.348613][T11937] dummy0: entered allmulticast mode [ 246.466559][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 246.498684][T11950] netlink: 'syz.0.1552': attribute type 2 has an invalid length. [ 246.518751][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 246.533768][T11950] : entered promiscuous mode [ 246.625791][T11950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1552'. [ 246.657242][T11948] team0: entered promiscuous mode [ 246.687502][T11948] team0: entered allmulticast mode [ 246.723349][T11948] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.895178][T11952] team1: entered promiscuous mode [ 246.906125][T11952] team1: entered allmulticast mode [ 246.911975][T11952] 8021q: adding VLAN 0 to HW filter on device team1 [ 246.990365][T11939] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.012233][T11939] batman_adv: batadv0: Interface activated: dummy0 [ 247.028647][T11939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.227323][T11996] wg1 speed is unknown, defaulting to 1000 [ 247.244559][T11996] lo speed is unknown, defaulting to 1000 [ 247.254992][T12001] veth1_to_bond: entered allmulticast mode [ 247.274571][T12002] openvswitch: netlink: Missing valid actions attribute. [ 247.302467][T12002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.313800][T12001] veth1_to_bond: entered promiscuous mode [ 247.395141][T12001] bond0: (slave bond_slave_1): Releasing backup interface [ 247.437701][T12001] veth1_to_bond (unregistering): left allmulticast mode [ 247.448003][T12001] veth1_to_bond (unregistering): left promiscuous mode [ 247.575506][T12014] x_tables: duplicate underflow at hook 3 [ 247.675770][T12017] netlink: 'syz.3.1574': attribute type 9 has an invalid length. [ 247.705557][T12017] netlink: 'syz.3.1574': attribute type 7 has an invalid length. [ 247.746266][T12017] netlink: 'syz.3.1574': attribute type 8 has an invalid length. [ 247.908300][T12027] nbd: must specify at least one socket [ 247.964354][T12024] bond6: entered promiscuous mode [ 247.970043][T12024] 8021q: adding VLAN 0 to HW filter on device bond6 [ 248.025983][T12031] 8021q: adding VLAN 0 to HW filter on device bond6 [ 248.039025][T12031] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 248.083672][T12031] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 248.160771][T12024] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 248.761514][T12078] wg1 speed is unknown, defaulting to 1000 [ 248.829559][T12078] lo speed is unknown, defaulting to 1000 [ 248.838603][T12091] __nla_validate_parse: 16 callbacks suppressed [ 248.838626][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 248.915775][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 249.025347][T12101] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1597'. [ 249.106270][T12107] netlink: 'syz.2.1596': attribute type 12 has an invalid length. [ 249.207323][T12109] macsec1: entered promiscuous mode [ 249.238863][T12107] netlink: 'syz.2.1596': attribute type 4 has an invalid length. [ 249.249103][T12109] bridge0: entered promiscuous mode [ 249.255971][T12109] bridge0: port 3(macsec1) entered blocking state [ 249.274683][T12109] bridge0: port 3(macsec1) entered disabled state [ 249.302740][T12109] macsec1: entered allmulticast mode [ 249.308377][T12109] bridge0: entered allmulticast mode [ 249.326897][T12109] macsec1: left allmulticast mode [ 249.333177][T12109] bridge0: left allmulticast mode [ 249.351586][T12109] bridge0: left promiscuous mode [ 249.547153][T12119] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 249.602979][ T5958] lo speed is unknown, defaulting to 1000 [ 249.610277][ T5958] syz2: Port: 1 Link DOWN [ 250.011922][T12131] netlink: 'syz.2.1604': attribute type 17 has an invalid length. [ 250.048830][T12131] lo: entered promiscuous mode [ 250.101662][T12131] tunl0: entered promiscuous mode [ 250.118273][T12131] gre0: entered promiscuous mode [ 250.133494][T12131] gretap0: entered promiscuous mode [ 250.148938][T12131] erspan0: entered promiscuous mode [ 250.165487][T12131] ip_vti0: entered promiscuous mode [ 250.180613][T12131] ip6_vti0: entered promiscuous mode [ 250.209397][T12131] sit0: entered promiscuous mode [ 250.333759][T12131] ip6tnl0: entered promiscuous mode [ 250.350419][T12131] ip6gre0: entered promiscuous mode [ 250.372165][T12131] syz_tun: entered promiscuous mode [ 250.392131][T12131] ip6gretap0: entered promiscuous mode [ 250.413782][T12131] bridge0: entered promiscuous mode [ 250.420275][T12131] vcan0: entered promiscuous mode [ 250.444046][T12131] bond0: entered promiscuous mode [ 250.449406][T12131] bond_slave_0: entered promiscuous mode [ 250.455783][T12131] bond_slave_1: entered promiscuous mode [ 250.464933][T12131] team0: entered promiscuous mode [ 250.470466][T12131] team_slave_0: entered promiscuous mode [ 250.478271][T12131] team_slave_1: entered promiscuous mode [ 250.487503][T12131] dummy0: entered promiscuous mode [ 250.499915][T12131] nlmon0: entered promiscuous mode [ 250.509615][T12131] caif0: entered promiscuous mode [ 250.520495][T12131] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.549438][ T5958] lo speed is unknown, defaulting to 1000 [ 250.562862][ T5958] syz2: Port: 1 Link ACTIVE [ 250.600256][T12144] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1607'. [ 250.611425][T12144] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1607'. [ 250.726176][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 250.753752][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1609'. [ 251.077297][T12174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1615'. [ 251.139470][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1614'. [ 251.190345][T12181] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1615'. [ 251.200042][T12177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.216588][T12177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.230376][T12177] batman_adv: batadv0: Interface deactivated: dummy0 [ 251.238332][T12177] batman_adv: batadv0: Removing interface: dummy0 [ 251.281789][T12184] pim6reg1: entered promiscuous mode [ 251.287606][T12184] pim6reg1: entered allmulticast mode [ 251.413146][T12182] delete_channel: no stack [ 251.717824][T12204] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 251.729003][T12204] bridge7: entered allmulticast mode [ 252.121937][T12221] netdevsim netdevsim1: Direct firmware load for /. failed with error -2 [ 252.155300][T12221] netdevsim netdevsim1: Falling back to sysfs fallback for: /. [ 252.267462][T12222] netlink: 'syz.1.1630': attribute type 13 has an invalid length. [ 252.283309][T12222] netlink: 'syz.1.1630': attribute type 17 has an invalid length. [ 252.527306][T12222] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.573355][T12222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.734852][T12242] vcan0: tx drop: invalid sa for name 0x0000000000200000 [ 253.417134][T12269] sctp: [Deprecated]: syz.2.1644 (pid 12269) Use of int in max_burst socket option. [ 253.417134][T12269] Use struct sctp_assoc_value instead [ 253.649710][T12275] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 253.701718][T12279] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 253.763980][T12262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.806748][T12281] bridge5: entered allmulticast mode [ 253.835565][T12281] netlink: 'syz.3.1648': attribute type 4 has an invalid length. [ 254.004664][T12290] __nla_validate_parse: 5 callbacks suppressed [ 254.004686][T12290] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1652'. [ 254.125769][T12290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.170039][T12294] sit0: entered promiscuous mode [ 254.195799][T12294] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1651'. [ 254.227581][T12300] netlink: 'syz.4.1655': attribute type 6 has an invalid length. [ 254.272409][T12300] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1655'. [ 254.282969][T12300] block nbd0: must specify backend [ 254.327755][T12300] netpci0: tun_chr_ioctl cmd 1074025677 [ 254.345830][T12300] netpci0: linktype set to 773 [ 254.433878][T12308] 8021q: VLANs not supported on ip6gre0 [ 254.623344][T12314] tipc: Cannot configure node identity twice [ 254.668124][T12322] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1659'. [ 254.860662][T12330] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 254.978569][T12338] openvswitch: netlink: Message has 4 unknown bytes. [ 255.024797][T12340] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.129755][T12340] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.144048][T12351] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1669'. [ 255.197054][T12349] wg1 speed is unknown, defaulting to 1000 [ 255.336446][T12340] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.358960][T12349] lo speed is unknown, defaulting to 1000 [ 255.428995][T12340] batman_adv: batadv0: Removing interface: netdevsim0 [ 255.440953][T12340] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.682198][ T6125] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.715548][ T6125] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.767493][ T6125] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.876919][ T6125] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.928449][T12375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1675'. [ 256.046563][T12377] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 256.088061][T12377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.909049][T12428] IPv6: sit1: Disabled Multicast RS [ 256.920018][T12428] sit1: entered promiscuous mode [ 256.940190][T12428] sit1: entered allmulticast mode [ 256.976440][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'. [ 257.009902][T12435] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1689'. [ 257.293653][T12446] netlink: 'syz.2.1693': attribute type 2 has an invalid length. [ 257.404334][T12446] netlink: 'syz.2.1693': attribute type 8 has an invalid length. [ 257.416102][T12446] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1693'. [ 257.443285][T12456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1696'. [ 257.823237][T12473] tipc: Enabled bearer , priority 10 [ 257.866515][T12473] tipc: Enabled bearer , priority 0 [ 257.958578][T12477] ip6erspan0: entered allmulticast mode [ 258.379594][T12504] netlink: 'syz.0.1709': attribute type 7 has an invalid length. [ 258.432120][T12500] wg1 speed is unknown, defaulting to 1000 [ 258.446358][T12507] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 258.458569][T12500] lo speed is unknown, defaulting to 1000 [ 258.465821][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.479283][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.493811][T12509] pim6reg99999999: entered allmulticast mode [ 258.502215][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.526737][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.556197][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.584843][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.614473][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.631530][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.650890][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.659051][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.668222][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.690494][T12514] tipc: Enabled bearer , priority 0 [ 258.694848][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.710206][T12514] syzkaller0: entered promiscuous mode [ 258.716639][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.718601][T12514] syzkaller0: entered allmulticast mode [ 258.729744][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.737790][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.745711][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.756111][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.769576][T12517] tipc: Resetting bearer [ 258.776903][T12517] syzkaller0: tun_net_xmit 90 [ 258.812901][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.819715][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.830193][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.837104][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.844421][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.851334][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.851400][T12514] tipc: Resetting bearer [ 258.858046][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858081][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858109][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858136][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858162][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858190][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858216][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858243][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858269][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858296][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858323][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858349][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858376][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858402][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858429][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858455][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858481][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858508][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858532][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858557][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858582][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858609][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858636][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858662][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858689][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 258.858716][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.036791][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.043506][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.051085][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.066117][T12514] tipc: Disabling bearer [ 259.072098][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.078804][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.086066][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.092624][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.102343][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.108876][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.117294][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.117303][ T7085] tipc: Node number set to 2664351496 [ 259.117334][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.136544][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.144076][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.150681][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.170730][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.178111][T12508] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 259.272127][T12523] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.360878][T12530] netlink: 'syz.4.1716': attribute type 13 has an invalid length. [ 259.370107][T12530] netlink: 'syz.4.1716': attribute type 17 has an invalid length. [ 259.547087][T12530] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.585138][T12530] 0X: left allmulticast mode [ 259.595597][T12530] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 259.797919][T12559] __nla_validate_parse: 10 callbacks suppressed [ 259.797940][T12559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1723'. [ 259.934056][T12564] wg1 speed is unknown, defaulting to 1000 [ 259.947759][T12564] lo speed is unknown, defaulting to 1000 [ 260.212604][T12578] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 260.294161][T12582] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 260.575900][T12593] wg1 speed is unknown, defaulting to 1000 [ 260.618093][T12601] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1736'. [ 260.624566][T12593] lo speed is unknown, defaulting to 1000 [ 260.640122][T12601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 260.724066][T12607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1737'. [ 260.885452][T12614] xt_HMARK: spi-set and port-set can't be combined [ 261.168772][T12630] wg1 speed is unknown, defaulting to 1000 [ 261.178333][T12630] lo speed is unknown, defaulting to 1000 [ 261.247604][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1744'. [ 261.796057][T12670] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1755'. [ 261.825191][T12658] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1750'. [ 261.970585][T12675] wg1 speed is unknown, defaulting to 1000 [ 261.997460][T12675] lo speed is unknown, defaulting to 1000 [ 262.034156][T12679] xt_limit: Overflow, try lower: 268435456/134217728 [ 262.187149][T12681] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1758'. [ 262.786599][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1769'. [ 262.805207][T12719] veth0_to_bridge: entered promiscuous mode [ 262.983984][T12727] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1770'. [ 263.235367][T12731] netlink: 'syz.0.1772': attribute type 4 has an invalid length. [ 263.279937][T12704] wg1 speed is unknown, defaulting to 1000 [ 263.320283][T12704] lo speed is unknown, defaulting to 1000 [ 263.401015][T12730] netlink: 'syz.0.1772': attribute type 4 has an invalid length. [ 263.607361][T12718] veth0_to_bridge: left promiscuous mode [ 264.071776][T12761] vlan3: entered promiscuous mode [ 264.258271][T12777] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 264.442887][T12788] openvswitch: netlink: IPv4 tunnel dst address is zero [ 264.462090][T12788] netlink: 'syz.1.1789': attribute type 14 has an invalid length. [ 264.493379][T12788] netlink: 'syz.1.1789': attribute type 11 has an invalid length. [ 264.557668][T12784] netlink: 'syz.2.1787': attribute type 13 has an invalid length. [ 264.568910][T12783] bond4: option arp_validate: invalid value (18446744073491447809) [ 264.598271][T12783] bond4 (unregistering): Released all slaves [ 264.889981][T12814] netlink: 'syz.1.1796': attribute type 1 has an invalid length. [ 264.899099][T12814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.254857][T12784] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.262762][T12784] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.765985][T12784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.824255][T12784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.478833][ T5958] lo speed is unknown, defaulting to 1000 [ 266.487361][T12804] __nla_validate_parse: 7 callbacks suppressed [ 266.487387][T12804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1792'. [ 266.503265][ T5958] syz2: Port: 1 Link DOWN [ 266.538332][ T8436] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.557673][ T8436] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.604840][ T8436] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.643476][ T8436] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.797303][T12831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1799'. [ 267.060346][T12843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1804'. [ 267.182225][T12850] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 267.357462][T12863] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1812'. [ 267.403620][T12864] syzkaller1: entered promiscuous mode [ 267.414889][T12864] syzkaller1: entered allmulticast mode [ 267.768068][T12879] netlink: 'syz.0.1817': attribute type 39 has an invalid length. [ 267.930119][T12886] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1819'. [ 268.005843][T12888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 268.016198][T12888] openvswitch: netlink: Flow key attr not present in new flow. [ 268.079770][T12890] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1821'. [ 268.092428][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 268.101417][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 268.110952][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 268.158712][T12890] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 268.173046][T12890] syzkaller1: linktype set to 825 [ 268.216949][T12894] bond8: option ad_actor_sys_prio: invalid value (0) [ 268.224566][T12894] bond8: option ad_actor_sys_prio: allowed values 1 - 65535 [ 268.234331][T12894] bond8 (unregistering): Released all slaves [ 268.298161][T12900] netlink: 'syz.2.1824': attribute type 4 has an invalid length. [ 268.334603][T12900] netlink: 'syz.2.1824': attribute type 4 has an invalid length. [ 268.346328][ T5958] lo speed is unknown, defaulting to 1000 [ 268.352128][ T5958] syz2: Port: 1 Link ACTIVE [ 268.565486][T12912] wg1 speed is unknown, defaulting to 1000 [ 268.585885][T12912] lo speed is unknown, defaulting to 1000 [ 268.676002][T12919] netlink: 'syz.3.1830': attribute type 29 has an invalid length. [ 269.443246][T12962] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 269.833010][T12984] netlink: 'syz.3.1848': attribute type 2 has an invalid length. [ 269.900809][T12988] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.975054][T12984] : entered promiscuous mode [ 270.020057][T13001] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 270.334158][T13021] netlink: 'syz.4.1859': attribute type 6 has an invalid length. [ 270.625107][T13032] netlink: 'syz.3.1863': attribute type 5 has an invalid length. [ 270.720373][T13032] geneve2: entered promiscuous mode [ 270.752905][T13032] geneve2: entered allmulticast mode [ 271.357162][T13068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.606220][T13075] __nla_validate_parse: 14 callbacks suppressed [ 271.606242][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 271.636411][T13076] tipc: Enabled bearer , priority 0 [ 271.651403][T13076] syzkaller0: entered promiscuous mode [ 271.660628][T13076] syzkaller0: entered allmulticast mode [ 271.689397][T13076] tipc: Resetting bearer [ 271.748478][T13072] tipc: Resetting bearer [ 271.797425][T13072] tipc: Disabling bearer [ 271.830498][T13080] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1875'. [ 271.848911][T13060] mpoa:mpoad_close: () going down [ 271.883438][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1876'. [ 272.032749][T13085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'. [ 272.044108][T13085] netlink: 261 bytes leftover after parsing attributes in process `syz.1.1877'. [ 272.207742][T13091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1878'. [ 272.340963][T13093] netlink: 'syz.0.1879': attribute type 1 has an invalid length. [ 272.365141][T13093] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1879'. [ 272.384784][T13093] netlink: 'syz.0.1879': attribute type 1 has an invalid length. [ 272.472793][T13098] gretap2: entered promiscuous mode [ 272.935448][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1886'. [ 272.948015][T13125] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1888'. [ 273.077556][T13118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.138014][T13135] tipc: Enabled bearer , priority 0 [ 273.163329][T13135] syzkaller0: entered promiscuous mode [ 273.177962][T13135] syzkaller0: entered allmulticast mode [ 273.295603][T13139] tipc: Resetting bearer [ 273.342983][T13134] tipc: Resetting bearer [ 273.387572][T13142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1891'. [ 273.446005][T13134] tipc: Disabling bearer [ 273.724023][T13152] netlink: 'syz.4.1893': attribute type 13 has an invalid length. [ 273.746752][T13152] netlink: 'syz.4.1893': attribute type 17 has an invalid length. [ 273.772912][T13154] netlink: 'syz.0.1896': attribute type 1 has an invalid length. [ 274.045872][T13170] x_tables: duplicate underflow at hook 1 [ 274.086996][T13173] tipc: Enabling of bearer rejected, failed to enable media [ 274.353212][T13185] hsr_slave_0: left promiscuous mode [ 274.377391][T13191] netlink: 'syz.0.1904': attribute type 10 has an invalid length. [ 274.384397][T13185] hsr_slave_1: left promiscuous mode [ 274.468162][T13191] veth0_macvtap: left promiscuous mode [ 274.491434][T13191] team0: Device veth0_macvtap failed to register rx_handler [ 274.629698][T13197] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.862141][T13209] bond4: option arp_validate: invalid value (18446744073491447809) [ 274.885794][T13215] netlink: 'syz.2.1909': attribute type 13 has an invalid length. [ 274.904378][T13209] bond4 (unregistering): Released all slaves [ 275.039601][ T7100] lo speed is unknown, defaulting to 1000 [ 275.066093][ T7100] syz2: Port: 1 Link DOWN [ 275.216936][T13227] blkio.reset_stats is deprecated [ 275.331291][T13231] netlink: 'syz.1.1912': attribute type 83 has an invalid length. [ 276.916350][T13294] __nla_validate_parse: 19 callbacks suppressed [ 276.916372][T13294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1932'. [ 277.294802][T13300] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 277.604373][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1936'. [ 277.835035][T13320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1938'. [ 277.914017][T13321] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1938'. [ 381.842267][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 381.848943][ C1] rcu: 1-....: (10500 ticks this GP) idle=8e9c/1/0x4000000000000000 softirq=48895/48895 fqs=5246 [ 381.860617][ C1] rcu: hardirqs softirqs csw/system [ 381.867060][ C1] rcu: number: 7345 0 0 [ 381.873494][ C1] rcu: cputime: 250 52238 33 ==> 52510(ms) [ 381.881419][ C1] rcu: (t=10503 jiffies g=46489 q=1881 ncpus=2) [ 381.887795][ C1] CPU: 1 UID: 0 PID: 13291 Comm: syz.2.1932 Not tainted syzkaller #0 PREEMPT(full) [ 381.887818][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.887834][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x2f/0x90 [ 381.887865][ C1] Code: 8b 04 24 65 48 8b 14 25 08 10 80 92 65 8b 0d 98 16 bf 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 6c 16 00 00 00 <74> 52 8b 8a 48 16 00 00 83 f9 03 75 47 48 8b 8a 50 16 00 00 44 8b [ 381.887879][ C1] RSP: 0018:ffffc90000a08cd0 EFLAGS: 00000246 [ 381.887894][ C1] RAX: ffffffff89704d7c RBX: 000000000000000c RCX: 0000000000000100 [ 381.887904][ C1] RDX: ffff888026b73d00 RSI: 000000000000000c RDI: 000000000000000a [ 381.887914][ C1] RBP: 1ffff1100498206a R08: ffffffff896fa756 R09: ffffffff8df41aa0 [ 381.887926][ C1] R10: 0000000000000001 R11: ffffffff8962eaf0 R12: dffffc0000000000 [ 381.887936][ C1] R13: ffff888024c10354 R14: 000000000000000a R15: 0000000000000008 [ 381.887947][ C1] FS: 00007fbc85dd06c0(0000) GS:ffff888125f1f000(0000) knlGS:0000000000000000 [ 381.887962][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.887972][ C1] CR2: 0000555563920588 CR3: 00000000498f4000 CR4: 00000000003526f0 [ 381.887986][ C1] Call Trace: [ 381.887992][ C1] [ 381.887997][ C1] taprio_dequeue_tc_priority+0x20c/0x750 [ 381.888033][ C1] ? taprio_dequeue+0x26/0x550 [ 381.888054][ C1] taprio_dequeue+0x186/0x550 [ 381.888077][ C1] __qdisc_run+0x23f/0x1510 [ 381.888108][ C1] qdisc_run+0xc7/0x300 [ 381.888133][ C1] ? net_tx_action+0x58c/0x900 [ 381.888148][ C1] net_tx_action+0x717/0x900 [ 381.888167][ C1] handle_softirqs+0x22b/0x7c0 [ 381.888186][ C1] ? __irq_exit_rcu+0x60/0x150 [ 381.888208][ C1] __irq_exit_rcu+0x60/0x150 [ 381.888224][ C1] irq_exit_rcu+0x9/0x30 [ 381.888238][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 381.888254][ C1] [ 381.888258][ C1] [ 381.888264][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 381.888281][ C1] RIP: 0010:arch_stack_walk+0x101/0x150 [ 381.888299][ C1] Code: ff ff 4c 89 e6 4c 89 fa e8 6c 87 09 00 83 bd 78 ff ff ff 00 74 38 4c 8d bd 78 ff ff ff 4c 89 ff e8 74 5d 09 00 48 85 c0 74 24 <48> 89 df 48 89 c6 4d 89 f3 2e e8 28 98 95 1e 84 c0 74 11 4c 89 ff [ 381.888311][ C1] RSP: 0018:ffffc900042fec88 EFLAGS: 00000286 [ 381.888324][ C1] RAX: ffffffff893f0afc RBX: ffffc900042fed40 RCX: 0000000000000000 [ 381.888335][ C1] RDX: 0000000000000001 RSI: ffffffff8d975f6e RDI: ffffffff893f0afc [ 381.888346][ C1] RBP: ffffc900042fed10 R08: ffffc900042ff530 R09: 0000000000000000 [ 381.888356][ C1] R10: ffffc900042fecd8 R11: fffff5200085fd9d R12: ffff888026b73d00 [ 381.888367][ C1] R13: ffff88802f268d00 R14: ffffffff81acf3d0 R15: ffffc900042fec88 [ 381.888379][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 381.888413][ C1] ? rtnetlink_rcv_msg+0x77c/0xb70 [ 381.888429][ C1] ? rtnetlink_rcv_msg+0x77c/0xb70 [ 381.888449][ C1] ? arch_stack_walk+0xfc/0x150 [ 381.888470][ C1] ? rtnetlink_rcv_msg+0x77c/0xb70 [ 381.888489][ C1] stack_trace_save+0x9c/0xe0 [ 381.888512][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 381.888538][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 381.888562][ C1] kasan_save_stack+0x3e/0x60 [ 381.888577][ C1] ? kasan_save_stack+0x3e/0x60 [ 381.888591][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 381.888612][ C1] ? call_rcu+0xee/0x890 [ 381.888630][ C1] ? taprio_destroy+0x263/0x550 [ 381.888648][ C1] ? __qdisc_destroy+0x153/0x400 [ 381.888664][ C1] ? taprio_attach+0x25a/0x380 [ 381.888681][ C1] ? qdisc_graft+0x1175/0x1590 [ 381.888694][ C1] ? tc_modify_qdisc+0x16d3/0x2020 [ 381.888753][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 381.888774][ C1] ? __pfx_qdisc_free_cb+0x10/0x10 [ 381.888792][ C1] call_rcu+0xee/0x890 [ 381.888814][ C1] ? rcu_is_watching+0x15/0xb0 [ 381.888833][ C1] ? __qdisc_destroy+0x281/0x400 [ 381.888858][ C1] taprio_destroy+0x263/0x550 [ 381.888880][ C1] ? __pfx_taprio_destroy+0x10/0x10 [ 381.888899][ C1] __qdisc_destroy+0x153/0x400 [ 381.888919][ C1] taprio_attach+0x25a/0x380 [ 381.888944][ C1] ? __pfx_taprio_attach+0x10/0x10 [ 381.888964][ C1] qdisc_graft+0x1175/0x1590 [ 381.888990][ C1] ? __pfx_qdisc_graft+0x10/0x10 [ 381.889007][ C1] ? qdisc_create+0xa52/0xea0 [ 381.889027][ C1] tc_modify_qdisc+0x16d3/0x2020 [ 381.889061][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 381.889107][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 381.889131][ C1] rtnetlink_rcv_msg+0x77c/0xb70 [ 381.889150][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 381.889166][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.889181][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 381.889208][ C1] netlink_rcv_skb+0x208/0x470 [ 381.889228][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 381.889246][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 381.889273][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.889299][ C1] netlink_unicast+0x82f/0x9e0 [ 381.889322][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 381.889338][ C1] ? __alloc_skb+0x198/0x3a0 [ 381.889354][ C1] ? netlink_sendmsg+0x642/0xb30 [ 381.889373][ C1] ? skb_put+0x11b/0x210 [ 381.889392][ C1] netlink_sendmsg+0x805/0xb30 [ 381.889418][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.889441][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 381.889463][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.889477][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.889498][ C1] __sock_sendmsg+0x21c/0x270 [ 381.889523][ C1] ____sys_sendmsg+0x505/0x820 [ 381.889546][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.889571][ C1] ? import_iovec+0x74/0xa0 [ 381.889593][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 381.889613][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.889637][ C1] ? futex_wait+0x285/0x360 [ 381.889677][ C1] ? __fget_files+0x2a/0x420 [ 381.889695][ C1] ? __fget_files+0x3a0/0x420 [ 381.889723][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 381.889744][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.889770][ C1] ? rcu_is_watching+0x15/0xb0 [ 381.889797][ C1] do_syscall_64+0xec/0xf80 [ 381.889813][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.889827][ C1] ? trace_irq_disable+0x37/0x100 [ 381.889857][ C1] ? clear_bhb_loop+0x60/0xb0 [ 381.889875][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.889890][ C1] RIP: 0033:0x7fbc84f8f749 [ 381.889905][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.889917][ C1] RSP: 002b:00007fbc85dd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.889932][ C1] RAX: ffffffffffffffda RBX: 00007fbc851e5fa0 RCX: 00007fbc84f8f749 [ 381.889944][ C1] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 381.889953][ C1] RBP: 00007fbc85013f91 R08: 0000000000000000 R09: 0000000000000000 [ 381.889962][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.889971][ C1] R13: 00007fbc851e6038 R14: 00007fbc851e5fa0 R15: 00007ffe37974558 [ 381.889995][ C1] [ 383.567253][ C1] sched: DL replenish lagged too much