last executing test programs: 8.954177541s ago: executing program 1 (id=2943): getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000180100010009000000018db677f2446cdfa22206000000000000005842d68a4e467a0700d897ed27f09a756bb9a97f7a41df710583330bbab1698f40e3382e309fa460d6903607fb9f70f498dfcd4d0b42bb08"], 0x50) close(r1) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1}, 0x0, &(0x7f00000007c0)=r2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="7a0a00ff00000000501079000000000095"], 0x0}, 0x94) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty, 0x5}, 0x1c) (async) r3 = socket$alg(0x26, 0x5, 0x0) getpeername(r0, &(0x7f0000000540)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f00000006c0)=0x80) (async) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c357825577583a5fde8a3427cc42f7d63c6cf", 0x40) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x2, 'macvlan1\x00', 0x3}, 0x18) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)=""/92, 0x5c}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYRES8, @ANYBLOB="010026bd7000fddbdf2506000000140002002001000000000000000000000000000114000300fe88000000000000000000000000010108000400ac1414bb2b00070073797374656d5f753a6f626a6563745f723a7373685f"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES64=r7], 0x18}}, 0x40000d4) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={'team0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x41}}}) 8.785008548s ago: executing program 1 (id=2946): syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001540)=@assoc_value={r2, 0x2}, 0x8) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000000)=0x5, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xffffffffffffff76, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000014400"/20, @ANYRES32=0x0, @ANYBLOB="2b0603000c9800001c0012800b00010067656e65766500000c0002800500090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="9a0ed80000ffff9b4fa004642f9f", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f00000002c0)={@default, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}) 8.681097236s ago: executing program 1 (id=2949): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 7.638463266s ago: executing program 1 (id=2964): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req={0x189, 0xb, 0x7, 0x40}, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 3.170435476s ago: executing program 3 (id=3022): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r1, 0x25, 0x19, @void}, 0x10) (async, rerun: 64) r2 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xe}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x800400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000001780)={'TPROXY\x00'}, &(0x7f00000017c0)=0x1e) r6 = socket(0x10, 0x803, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0xe, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff9}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r9) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x18, r10, 0x321, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4048010) (async) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async, rerun: 64) close(0x3) (rerun: 64) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x84, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x6, @empty}}, 0x0, 0x80}, &(0x7f0000000500)=0x90) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r14, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) (async) unshare(0x62040200) 3.02147271s ago: executing program 3 (id=3025): socket$kcm(0x10, 0x2, 0x10) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC, @ANYBLOB="210f5232e8e2"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x10001, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='signal_generate\x00', r4, 0x0, 0x3}, 0x18) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r7, 0x0, 0x0, 0x400d4) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000340)={r8, r8, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) 2.922843426s ago: executing program 0 (id=3027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c80)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0xb8, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x5, 0x0, {[{{@ip={@remote, @remote, 0xff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {0xff}, 0x11, 0x0, 0x10}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private=0xa010101, @broadcast, 0xffffffff, 0xffffff00, 'veth1_macvtap\x00', 'rose0\x00', {}, {}, 0xa, 0x1}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x34}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4050) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/23, 0x17}, 0x80009}], 0x16c, 0x10002, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffdd7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0xd, 0x3, 0x1, 0x10, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x9, 0xf9, &(0x7f0000000140)=""/249, 0x41000, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xe, 0x1, 0x8}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000480)=[{0x5, 0x4, 0xe, 0xc}, {0x5, 0x1, 0x9, 0x2}, {0x5, 0x4, 0x6, 0x7}, {0x1, 0x3, 0x6, 0xc}, {0x3, 0x4, 0xf, 0x4}, {0x5, 0x1, 0x10, 0xe}, {0x2, 0x2, 0x1, 0x8}, {0x5, 0x2, 0x0, 0x1}, {0x5, 0x3, 0xf, 0x8}, {0x3, 0x4, 0x10, 0xb}], 0x10, 0x9}, 0x94) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000140)="1a36c5", 0x3}], 0x2) r10 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r10, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x9, 0xa}, {0xfffa, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) connect$caif(r3, &(0x7f0000000800)=@dgm={0x25, 0x0, 0xe7}, 0x18) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x11c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x108, 0x11, 0x0, 0x1, [@nested={0x101, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e6c"]}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x84}, 0x300) 2.660721864s ago: executing program 3 (id=3029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008800) listen(r2, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000200)=ANY=[@ANYBLOB="80010000100001000000000000000000ac1e0101000000000000000000000000ac1414aa000000000000000000000000000000001fff0000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c00000000000014000000000000000000000000000000000000000000000000080000fffff7ffffff000000000000000000000000000000000600000000001e00000000000000000000000000000000000400000000000000001000000000000000000000000000000000000000000000000000000000f97f00000000020001062c00000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecffffff00000048000100736a613100000000000000000000000000000000000000000000000000000000000000000000000000000000004f8b1000"/312], 0x180}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendfile(r1, r3, 0x0, 0xffffffff7fffffff) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x6}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x60}}, 0x20000090) 2.474984001s ago: executing program 3 (id=3030): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f00)={&(0x7f0000001d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7e, 0x7e, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x1}, @const={0x6, 0x0, 0x0, 0xa, 0x1}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x2d, 0x2}, @datasec={0xb, 0x5, 0x0, 0xf, 0x2, [{0x3, 0x5, 0x1}, {0x5, 0x6f90cffb, 0x1}, {0x1, 0x3, 0x8}, {0x1, 0x800, 0x80}, {0x4, 0x5, 0x10000}], "ef56"}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0xc2]}}, &(0x7f0000001e00)=""/198, 0x9b, 0xc6, 0x1, 0x7fff, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000001d00)='smbus_result\x00', r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c00010029bd7099dbb0e390c919d600", @ANYRES32=r5, @ANYBLOB="80007f0a0a000200ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = accept4$alg(r3, 0x0, 0x0, 0x80000) sendmmsg$alg(r7, &(0x7f0000001c80)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="fda8e1ae1288d9", 0x7}, {&(0x7f00000002c0)="487b80fba68a50218103abb067d2bcf04796b4a92661384c44a318db8b79c09a114f77a9a8bd6a1a8344a4b9b17e1c6561ff5d8f7fada6fb2e7fdab21209215a37701d615ecdca0a3968d959cab71fca5e7d263f189eb64fc4941bc3fcc6e75b5eff55e4a1750526695771dc79356654abcb79a44f5a20910e2991966ff016e901bc245eb2c1b456ed4b4464d0c689ad35f4156fe4ae106b90e67b055992a83e031edfc4803c26618363972ad99b6c55ba968624d1bbddad66e0be985de65a51227ca28f5df9a08014d44a3277ac8086208bc9c7947a84611b0d9bb1880483214b83d6d8558a3491d1c2eb50b19b4d0c20ef", 0xf2}, {&(0x7f00000003c0)="7eed2ed96e68be79557621caf05e5039426eb7486d9c9bffb26746935ef14ad9cdc63f806a0bfe0b16ba72a82fd290d2a8d1a9d8d09b711e256cab7859e3d9e8960ce5b5b97be9489b05869cf33be0234334967839984d7a15d32806b20998e1dffad4c9a00fffbf34b192c785cbf3190fe68f4d622c6da6322d6d228f906edebad25ae27749d278fc540e7c733477a4b3e97d9c692a1f28d42814b3580828018c813d49addd3f87eeca6940ce1ff9b56d627604db445171", 0xb8}, {&(0x7f0000000480)="0d999c1568b08294049fa28ae3b5fe43a1d5526e69b2ee48ede1da3c0b4f478cfd00cf77a20fe0d16915d3a0854eb912eb58424a4456b841d4", 0x39}], 0x4, 0x0, 0x0, 0x841}, {0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000500)="0b1fdb36068eea6086a712398288da9d36b1ba1a3494b34978cd25d7dd8a88134199795382702fd2f3e5a80ba64eaf44eec6bf8fb30a69c07545431db6d5824f078c5f3740800c9618422371d536bfd3efd8b777ba22d5e53be721eb16458bc2724851071ca486aeb02331007bd7755077d17b25f8287c2ff255525b2b33653db8e767cd3fbc9939382c49d5559e8731fa519561b50dd902b4254aaf17fc771c3c294a2f6085d1b967f6cc96baa62207a8f7a6b928e7660d37986cbd270a1f9f411858a7a439627d3e8b6ed6eceb767c1bc04a0aa90e1a7aa2c88a43fc717f78492c22394949215f82", 0xe9}, {&(0x7f0000000600)="cd1cae7aa4660efbee0700c727f955c148274f049f1a97c3788c8ae26a2bb859a2cfb8d1c3a68b31f09d150e324184bfa0634673fa1d0b0b3db13643a7716ea5ebb1d5ba8aed1aff730e39f7676e6a0926b4e960ccf249e1db36e04215ff79d5ee79c1d200a2", 0x66}, {&(0x7f0000000680)="30c5c94f962f524b439e7e4d444fd842aa81261f7e55d83484e127c125af979a7a96d1877dea7081e6e2735b8d8ceecd28fb0c019a27fb33fbcfd65bde53124698a07221cf392e8b0f1a707996571bfea949ba25f75ae128", 0x58}, {&(0x7f0000000700)="9751fc7335128f699a47f0a1605ab621c7dda83880aeb35a27477efb0a89378c467446c5c934cad05cf95dc8b9643549f5181458861c43921f56b207e0669b9ea11e5537eda15249610eba94af7bfaed019230783bbd26fa7c955ccbc5246ba176eb60d1d11129a04b1bae4d5e427143b579a5cfd3c6f08477e42fccad823d837f4a6598083d81ade6b6513f0e0184753fd9a62deacb51833bbd26abde25f972505268b78cf920cfd40e1fe5f79662ccf1dcd9e0fa42904c7061d0b2da26e1d52f075f846d", 0xc5}, {&(0x7f00000008c0)="f444553363bc9722c13b783207ca4d8ab6308991be302bd1391b1d3ff837e8715145b8ded0b64bd663bb159393522fb9b545410e654ae20949300d113dd48e84a147e37026b313080de8581817bcc03f8dcc486c78d5ab2df34202a061fcdea5b079a3aa2f6fc6ef73ad418582636d02fda6ceb26640952f9a8a7aca66601ff7b86905ca045783d8c7eb4eb5bcbe5bba402da5753bd182a3e4a74c585fa2ca5e93e85283d6e5c3acbace93050b338f682bb9f19b39d5be8d03ff834edded41924c02282c3e2dfa87b0a183aee22a9d03e63d1c1e5cbc7b28dc4ed49534eb93787d917f6ed22d2a998ce816e04417dc8bfb8d68c1b4af682573", 0xf9}, {&(0x7f00000009c0)="7e1050c38df52170162199dbf23b129c35a3399b6b62e940e439762210db3aeb4040c1b4f8213ab045a891f7c382fdf876d979fe70cb1aa75791884b783e276dc3591b7e4fe5978c5204c82f4e99094fbcbefaad02f71f18f408dad52dbd7ff393ae8d48bd783cc9535b4807bb7f30cfc85d09df40d874d7a5fe4622cdc6c0871d23d68fd236d459c181b10fc5f1a57873af1a45ef124a2d1b9a1c1a29c45e83c84b28f60130ce05d0f1f349808de0cd0712fdf2a612e45d0c0d710a2000945c39d504ec618982abff6e", 0xca}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="baba2393331ac7178b2190e0df8d91a754841f1b6621d1606919dd710d68ab0ef497bbdabc75b23a713283ba2aee7a95d85ed7c8388b054e4a05ccb85ff9be3d6da7f23999ea808aa656d514f99fbbd020dafcb5bb77709de7e8cc82cb55ac3a91191517e29f941d1144ef6811e39388b07e9f617090b71064702c174d0ca0c34856ee7d0ccfb4a164afc90bea6438a48db0818f9029cdcee720361a17e0a46b304ea5f1becc56e0d05bfff016f53abe6014", 0xb2}, {&(0x7f0000000800)="57acdc5a93d0c9", 0x7}], 0x9, &(0x7f0000001c40)=[@op={0x18}, @op={0x18}], 0x30, 0x20000000}], 0x2, 0x4000080) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x1}, 0x1c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a090400000000000000e8020000000900020073797a32000000000900010073797a3000000000200004801c0001800b0001006e756d67656e00000c0002800800014000000000140000001101010000000000000000000000000a"], 0x74}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x3, 0x9}) 2.447815483s ago: executing program 0 (id=3032): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x21, @loopback, 0x4e23, 0x6, 'ovf\x00', 0x5, 0x8001, 0x57}, 0x2c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in=@private, @in=@loopback}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x11) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x82, &(0x7f0000000340), &(0x7f0000000480)=0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x5c}}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="caf5a1bc90fc8a00e47ed15f4e4b4fee6f052000000000201000000600155250c4e5298c93d98a21da05be01fecbc963d59e033c84c1fb21cee85b20ac17e25299a34475ea5b80b264bfaeb5344f84bc1931f58012291aa9564c214560c67e74abb768c47a86bbd736a764", @ANYRES32=r11, @ANYBLOB="08000500040000001c0017800400040004000500040002000400020004000200040001000a00e80008021100000000001c00e7001d5dcc716948a93c5b28095af28cac2d5df5d5d7a01031b5"], 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x40c4) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x4) write(r7, &(0x7f0000000240)="9097cc2e53a8a09b45f3f066082aca4b6f1c44f25184664014d6656b4b5421698b1713c9041f189101b45d17c7b0ce675fa342432f4272287b0dc6e8a6ccb3f474e48549459b9d010b0064a46e89275a86b250d507bae3573fd88cbade730b8fd6b71d95dbd1f866a6f79d45073c37a8be452361afbf1dc0950fc643823321c6541ff3b7d483c8603f68f625", 0x8c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'sit0\x00'}) 2.323280463s ago: executing program 4 (id=3033): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a408300efc4400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) close(r1) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x12) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000140)=0x4) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400}) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r6, &(0x7f0000000040)=@DATA={0x1, 0x0, 0x0, 0x0, 0x4, "95136e6e8597c4cf3f906ee321b020bc0b392f790fd0f4584cb97f6c169251dc453be264de1436794b663dd3ec5737c728522900cb4aaa44ef53a69316af47583d51df6a3672f15718c95f27a5235446126df1b232661eb3d9df93868c0f023c6b0a329643b1d97828e21f5e83fe3ced0abb960899fbba8dbd45a8787cfca1092355e881f913e32350a876b1f0bee2a88d2c4f89f8eec570c48929a1555a1f"}, 0xa2) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0) 2.034967587s ago: executing program 0 (id=3035): unshare(0x2c020400) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000380)={{0x3, @null, 0x1}, [@null={0x40, 0x40, 0x40, 0x40, 0x40, 0x40, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x3c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ff7f0000000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000017007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) r11 = socket$unix(0x1, 0x5, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r13, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a0001"], 0x48}}, 0x0) 1.954701446s ago: executing program 2 (id=3036): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000300)={{{@in=@local, @in6=@mcast2, 0x4e20, 0x0, 0x4e22, 0x0, 0xa, 0x30, 0x40, 0x5c}, {0x4, 0x2, 0x4, 0xe8c, 0x3, 0x8000000000000001, 0x0, 0x4}, {0x4, 0x6, 0x7, 0x4}, 0x7, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d5, 0x6c}, 0x2, @in6=@remote, 0x3504, 0x1, 0x3, 0x6, 0x7, 0x4, 0x280000}}, 0xe8) (async, rerun: 32) r1 = socket(0xa, 0x2400000001, 0x0) (async, rerun: 32) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x8, {{0xa, 0x0, 0x4, @mcast2, 0x2}}}, 0x88) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r5], 0x64}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x98, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x40014) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x5) (async, rerun: 32) getsockopt$inet6_buf(r1, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) (async) close(r0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x228, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x5, 0x3, 0x3ff, 0x9, 'netbios-ns\x00', 'syz1\x00', {0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, 0x0, 0x409, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40040000}, 0x40) 1.941648552s ago: executing program 4 (id=3037): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000140)) sendmsg$sock(r1, &(0x7f0000000680)={&(0x7f0000000280)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)="23d291a02aa6eeac3dfba3709740229350bcead3f6f45219c7abecb67d0d137b895506a849499a721ae9837e8f4ba3a64cf1b6d9a3710e399aebd8e8f71d8b6493260fbfe6ab88e593c7a533f24c46af912b13c367e6b2b8897f8cf5a9d2f16d64b5f3eb6b3dd6832bf6ce80b90d55e2c37c41642759a891b53100514996d5cb1688d8987e508abcd4d068f7791e6d43bfb481518a43c4f9df45e478a6e4f0bcbc353f2dfbf5991bde4bb0192708d19439a1592a5de0be9f37a8b0bbd256af941f947951153d257a7e130ea4e2173f2d8a242a2a05c84d1b3b57640524f61eba31ee2a90c69bdb34ec3b6d", 0xeb}, {&(0x7f0000000300)="5bf9719fb144d185a0dd6bbebaa15758f42c991b6f752dd5bf9ca747fcc941a62b7b2b07b54cc3122c459ca5aaa401e8782d79f7a92a1817ff7caa62029206f2a15026e58da03860d17fa72c6ef87e36166e4ba8196e5f0c429a", 0x5a}, {&(0x7f0000000200)="8f1c175c2d08", 0x6}, {&(0x7f00000004c0)="52664d9c0919e8759136acefe478e8e5ca593e10bb2d59acac04c721475695b1fed4d09ec120d6efa5daee8df80903241a03ac81e3893940b8bec4a65226f3ea8fa816d304c7570598d3c88499b08a95c1a1177b731780a9d47a381f984414419199e17b0b66928e96a22242eae35f2861856e48b381051165276f2b6fbf9acde57d7a0d197655c286cf8a07197adaece580ae9bd477e7572e4fb2971535cb07a44dce4fee3a2ad2cf1f636484a69252a5378a092c53d6e181b63f4e43f792442ea8c714269553d8a1280395c788c3a7435f4c0ac96e9ca54e7656caa59189dd", 0xe0}], 0x4, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0xa714}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x60}, 0x20000000) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000006c0)=0x4, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000006c0)=0x4, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x7}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x7}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) (async) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="cc0000002e00090027bd70000000000004000000d34fa73bf386b44857181d70394ede816dcee0f31349bc9bcb6430aa7a8ee1b8f08d3c1e0b6ecc5563c7fd3e68ac9a9e5352daa0b39c05ded1f03263d6c2b1dd0fa838304a5fe2bd48a88254234628343a36efe0568dbaf2b2c96f907a88622e74c09c6d3087b850214f790ac01a3ec15d997d98bff8c5b31f789caed6e4cc6695172ec9af5584be392f1edb9947fbab696114b2462e88b5e6dfb6b385af3043518b692fe143f455f964f5d9991d68be3ae9c904001e0000"], 0xcc}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1.653191185s ago: executing program 2 (id=3038): syz_extract_tcp_res(&(0x7f0000000000), 0x8, 0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={r1, 0x2d, "c2befe0e48ce6ff32934d2e2211fc13b2f1707267867d54911a5bcaa880368e0d948c32090f253d79656a77459"}, &(0x7f0000000140)=0x35) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)={0x29, 0x3, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x2}, @pad1]}, 0x20) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000200), 0x12) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x18) r6 = socket(0xb, 0xa, 0x9) ioctl$IMGETDEVINFO(r6, 0x80044944, &(0x7f0000000300)={0x3}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000340)={{r3}, "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"}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001340)={r4, 0x0, 0x7, 0xc}, &(0x7f0000001380)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000013c0)={0x5, 0x8200, 0x1, 0x30ba656, r5}, &(0x7f0000001400)=0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001440)='devices.list\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000014c0), r6) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x48, r9, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xa}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'virt_wifi0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x40040c0) bind$802154_raw(r6, &(0x7f0000001600)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r10, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x3c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004090}, 0x1) r12 = socket$rxrpc(0x21, 0x2, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r12, &(0x7f0000001780)={0x30000010}) setsockopt$sock_int(r7, 0x1, 0x1d, &(0x7f00000017c0)=0x6, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x8400120}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x18, 0x140b, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}}, 0x4000) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r6) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a00)={&(0x7f0000001980)={0x50, r13, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x35}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x800) 1.641655612s ago: executing program 4 (id=3039): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x9}]}, {0x0, [0x61, 0x61, 0x2e, 0x2e, 0x0, 0x2e, 0x5f, 0x61]}}, &(0x7f00000002c0)=""/4, 0x2e, 0x4, 0x1, 0xfffffff8}, 0x28) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000140)="fa", 0x1) setsockopt$inet6_int(r2, 0x29, 0x5, &(0x7f0000000d00)=0x5, 0x4) r3 = accept4(r0, 0x0, 0x0, 0x80800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000500)={'veth1_to_batadv\x00', @broadcast}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0xb2, 0x4) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be08"], 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/68, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x44}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ppoll(&(0x7f0000003840)=[{r6, 0x40}], 0x20000000000000fc, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x612200, 0x0) ioctl$TUNSETTXFILTER(r7, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e2e000c371303ed6a33fe86890df20e87"]) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000004c0)={0x1, 0x9}, 0x8) ppoll(&(0x7f0000000080), 0x0, &(0x7f0000000000)={0x0, 0x3938700}, &(0x7f0000000140)={[0x4]}, 0x8) r8 = accept$alg(r0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000300)={0x0, 'gre0\x00', {0x1}, 0x1}) 1.568830827s ago: executing program 2 (id=3040): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x20000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="96", 0x1}], 0x1, 0x1c000000, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069000c00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 1.5112782s ago: executing program 0 (id=3041): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x16}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5, 0x600}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x80, @remote, 0x6}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000140)="3fdcc11881d7cbb62ba0f6afb488a57c47cfc92c8a12f6c1f4d638ecf93a3ef8bb3806f5ecab0cbb6114e05f4ea9f7bafecd60e9afd8fb4d58f9a5eea42f25cc3fd1ef85f522d8b1bad37ff44a84e6a84798c41767d35672c7bb6083946a1ddd7ab1841e34f72aef6c754d4d45d7f39121d54bf00d0229ede7b10c82b1d3c24331680345fbbe226af2a56323fed08e52eba57028394bec6dbc96b4d570fca493", 0xa0}, {&(0x7f00000002c0)="2e5bea02244e88f4a8887f50c3e94c00351dbb90465f65cd3c3415aa7504b012f8e8d964402d5b6de0b8d8e09b69f05c9c46affcf9fbc8b65d0404cb2cf4d0f617413a43bd5faf6a4fba2c9c50c95f1e01191f27e2cc5900f4a14335a76250658b9a109828bae82d63ac4656cf6478ee7da34bcca2775149211b53aec1cfbb4ea83d824e61724ee208c9d7a51e74b3c00df3a3078e53e46be057e83d6080024c66cbb045", 0xa4}, {&(0x7f0000000200)="0e219d0eb18d52d056af3e01a54161a51f9a98d7795e919f32f4515e437e04d66453836d4b8db4dcde1366551cb615b0e74373b80518af137cd3e7f96fb4346d2c93ca24", 0x44}, {&(0x7f0000000380)="f28e8e54b67c9c9c663c83d9ae2e9c6846d8af899e4d1b0bddd95d7615a53fd959a7da1b05c8eb45bb63e39c8bfc37f0305a05bbfebbe8980077f3fab2af69602724913a7bd5c12b9d26a8425a8decb2bc92b0c7c412388bd4d241a9fdaebbb4c1e3ec648337173f63f2eb5d3f0a2d4e54b23a1c326ddc605144492cfa70ebea0bbc5b7810673104b39463e1dcd13f181a9bd9153083d9338ee08b45b1af0a66052de1e12f777bab10b8782689e8ef6bbe4546f615d794c586e694", 0xbb}, {&(0x7f0000000500)="314f38cb569c48cd3d30036e4afe18aff06a13e9d78709b7d1e15754d4223e53c02d5accbd07472037543dc25d8dc16607c6bad1cbbe72117ecaf50f35ec6a7203e610fd2cabe347c7add95bd1c3f0f15440ab7784b02c6736701c5a8607bf5675352d5e3f83e01114d66b606dc893f31ff15e77dbd145f535609308a9ba8f1d1d0d3c206708e5eba299a58329c6bdf6e0d2646d204f5ce6c7668fc12479d1ad799222e5cbfbb432cecf3fa9433e4e9095c159f03ed667a786a0330b", 0xbc}], 0x5}}], 0x1, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x80, 0x10, 0x5, 0xfd, 0x1, 0xff, 0x6, 0x1900}}, 0x1c}}, 0x0) 1.48875198s ago: executing program 3 (id=3042): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) (rerun: 64) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000200)=0x8) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) (async) r3 = socket(0x1d, 0x2, 0x6) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='GPL\x00'}, 0x94) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000000)={0x1d, r4, 0x3, {}, 0xfe}, 0x18) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0xfffffe2d, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd22, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0xb, 0x6}, {0x3, 0xe}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4040064) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000630050000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe}, 0x94) 1.351219486s ago: executing program 0 (id=3043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x34, r1, 0x1, 0xfffffd, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) close(r4) write(r2, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'batadv0\x00', &(0x7f0000000040)=@ethtool_cmd={0x17, 0x0, 0x3, 0x0, 0x0, 0xff, 0x3, 0x0, 0x80, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, [0x6]}}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000180)=0xb, 0x4) recvmmsg(r8, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1f, &(0x7f00000041c0)=""/4100, &(0x7f0000000100)=0x1004) 1.223684123s ago: executing program 2 (id=3044): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x13a4, r2, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_OURS={0x1268, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}\x85..-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '(,-#,@*'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '%^#:@!]}#!+\x05\\\'%\x15,(%$%,]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')\x97\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']$@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.s\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xff, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x89, 0x4, "199b1415fa9e2321aac8f25bd71da45ef6eb78a4c719a706a7ea57f12a7607b69b3a0fef1a1bd9b96ac0e939df2d2c24928a1d293c96f0f0baa8dc257c7bbdc9e7b8ae420e43554714a9ee694aec4f9cce744d916ad23389b6029c1407fa97e7d2cf7776c104efc47d9a1102a2a2f8f1a99b848c52e7c797f860c89761690a42c195041a94"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "3b343271c2687e037481f4dbce0730c9c995169e69a73a664edaa90778bd578f96f8fb489984470a12d1b3a1743d86664e11cdb05e38fc7b4caa659abd138cafbac0e4c973de1b66d5c9031861dc6f186735ad1273375e57975677f9b0e8aab809d4535fee5865739e9a8556242f3b6d24e2d70b111ba1acab5b9f7364b6628bf0d0b536d34849d70a1b9395125a7ed54021da9a538d830063b207f47aad38ca7b44b037451adfbe18a68ea6344fc830a0496b7a456bd79348c9fc53a204b2bba9fa01c7d6b73e89ece523d867c2d6a235c246493608dd39157cfaa273a9e9196fef4faf1f0bc448df820c0208dfec6e7884ed9abda6bc262c02a684060f4a5630491c2d79abbc567b429a740f1336cd0598fcc69d714053279541ff023dbafa7e3688442c8353f22cc825c01c6157fc908339fb5de8318dabf2726e950433b0ec1f1573de3ac6969a777618e0873cc1e613bf8078ad5248ea5a8e001e77e8c46f775c289b34c7fc78fdbb9878a53d5a1c829c81b863964605cada7a94e999f2ce2e3ba2973e6ab5d710429c898f5c200872a3d2295c2233d8274d2d5d35aad27b940e9c6a8371116bf02edc90b484b1a341fdb443fed1d2c85e7fd40fb03769f1c617c3c9682b86e39f951451e9369b26a9e787e072cb53838b0845822fb431795366a440218082002e23004a5d00db43e6f7054b591ab362fa5cc66dc8c9254da6b0112d48c3e663c3f2973faeeb6fd2ab07e514325afe64be97e288b802a018f2e8989412bfd1befac8cbb504dacf0278ce7016fbfbcab330b7ea3db672599f337b2aa4f96cbee092ba0966f5cdca12562a5735743ee12aac08e1075d5f77f6198581e9f7b1c7cadf365d084f41b15a8615c5cfd69a15d621043355d034d45317ca3606006da818b96c4eb81b50e7039cde99da93b9b6603caaffaf153e16e0ec3c16b145c2f8fcdc3fae09cd4d110728a682d4c9db0968e2eadec53a6d8e85f6a1ec0ca971706c4eb4a4044a1e5c4bc9d129df6a14d6e28213facbb375276bdcdfbad02a49d56f16211b9f0004f45354edba31c422e43508229dad83277c20f41d3d202b173359f0a1901535f9696fb821f67c04db0baf5f16959bf16a956ad472de9d53bc46e48896fea45f5a37625e3b1ea1724bd44eb89d3b749f1d4abf5127ed7bdb43da4cc033bfca2925ebdd8ccd38d0611f98c08617c119b04bfd132e83a403f2cab924c42017f43d2b6510f2e023f32a4bd85c0bde389ac249bfe7e2ca424823c8c7ddfce12095adcdc4578c12281e388d199b8a270153ebcb3d071810bdd4a129532ed6558a87ecd7252aa06db4c4048eac528add5d26f292bd89635042b69bc55306237b638302958a1022785a4fa3f0773b46c9498e9d3dec8b876b69674920ece6241e9d8a27d47d990faf0917f25d22fdbc447e5149d3808961f1573da2d58ed463e4b2523234cbbe1ea8613bf2fde091d9c5b1414c9fea2f867cea5fa88bbeab4574687fd28d913e515c535068a640d1edcd192e5890d38bc9027c4021f54b0271b9e899757a6130b7577346968ea6d5a986a088934f72928e9dfa809447825cb31e567005201ea81b1497d65df02e78bba7a9d0f6de4357f88b7535b2fc09d325d7943c75924b37b552e13e44ed7cf895e71fd708066cf7d2b7b7218af66dac56948df620b5de9331704531138354ff36b75ce8e664cd3faf2256ac75cb588c89e8e5ad67a3ec439f29201951b19c740a57d033b7d7e9a1db597e5abd4c0930a7958164de8541886a2146fc200080299124ceb3c93eb56ad526604ed9eb59ff3c6a4d4c9e5bdba930e3c52019ac3e70be42a9edc0c0bac2600ab50aad636a2f467dc9fc60a9eab301af5b55737e6d41be3f3f1bf4f9f96d1e0c2c7e993e1656f2096d1a324de4287883344062062a53250f676bc1f29b554df4779f5ec9e896763a9bd681fdbe2bb3851aff5b9ff7e27348ba48da9a8af31bf9b1eb93a4d4b60eba4b092a2e40a193172ce780864ac271604b335abf519d5ea3cebc821f3a3d2b55b248fcf4e4f8c40b88184123b6f4c417ae3e421ec90c16d57337fccda719204eac9a134b74c01fd31581f74e28636ac183a8f6268bce0ee17244e1198f98562aed7e007c2e76b30377b7e7d7e89458a9e86c301b8c5a9928f5e826742e577e1cabbb8aef6855d78aea64dc863ee4dc9a913fde5be43ffa739a61e56cb262ec22c5ac834ad0dd3aba5a59fb249fb0f88f0b67394d34721f6a17a575606592605cc966f07292081c27231fdbbc3bd29a715ab6edb3d74519cfc0d716f0db8e38d86299a08cb1b9feae2f6a9d3f5bc25b277ce8756c2d44a89ee4c28a1a4b3c56dbc78cd56cd8dc4f6f491991d376c28428e8a499feb909a40f574eddcb89bc7c59fac1aebcf008f4d2e9644b28f4e3c3ccde45976f867396bf8c1c60c3806a131a87b35f60c7e421aeacd1282a4563c0ca1fa37857a36d4b9408c87d01214d3bfffef83a425d4121ef20b6315e1125807502f5856c73012d6b2502ad55833e28e6a009220eaebecade59096b7a73650fda05921f582e18772e365f303412c7ccc247f9e3ca9f83681b8cec1381e1bdbabc557d836cebac36b91418a5045546467af3eaec7ad69e93656737a5f689f7b62e0f93a5a5dd682e7c76fd0b35bb773de8bdf812c85c0829def0da8354619ad0e1c6225a5a4e11c4b4b9dcce076ea13f2524dc925f202ef404f45841f85b0a7b96f7bc85ced9f7e97cede358a82969cbf1421bf27e26328dd84fb954081faecbe3c4bbb449123dfc6c72482d34bf6a1d5fa25f43559a3af8b1bfe8bc57a5f3b2cd62624de953e3ded2993f76fde1541e0bd349d2b8f83684777c884ec7c392ae863358b88be0bce4efaca3d56c9b3d7a32befee96965380db6846626644a4856d624e227eb1bc4933d1656d6139394b4bc7418dd94194deb8caf2eae59987d894f6a3e206f99ad65da5f6e06a21a37e8a73b56f9b2e29fafae70fcef8d98adf02ee6230579d46fc6894d8dacd44e071361ea9a820dfab5f219e15383491a9812ce279c54f708567bc440d54635b74dbc968e496d2b3889cc1e0db5016db867304b8d5d29c7d23f990ba96ab8a78abb6645fce72f18d7f51f0d9cc9a0937ac4db25a730cfc9c33f024eaf66aa2f9657862e7d6447650311ec2cd60f8789f61b92994717cc709a43d9dc7449030794fccf7a5938ce26c6a35227ec2b13ecbf657c07af6d488cc29d45dbc55a54d8843feca848e115a894d48fce53f7cbc94f5f095878566d6fddfbf79ad2e429a6ce5d62dd8a8443eed03c73400f3f801b77545ed35fed6f810164e2f3542d2fcfa6d37c8748a4817db0ba9d869190cc18c89badea9cc0c36db4100bd5b01e5273ccc19390380832b4379f4e2092b9081f395de218f309f3b02671e4297911889611e75a59c80b66f47b707107b1535728f3710a111311b659d76e42e136b3ba57b4fee124367ad8ff6666a500434e61419e40ea75d8a28d0c800572950aa7ff5b0bb7ad991ebaf82bd1ed1ef22832ba0cc967394c50d8bf9677c7c5a609a517f62a3540b675da77ec9e8f47cd35b6425e110f92c737df06a81daf20400b44d33c558b57bf23a1eb6ebe4f7595951a6274865023b063fd2b27e691400116812b8b346dbeacb8bbac08aad5adb7828f3ccf9a812ac540d86d97d1ae0e0c80853d6270955f311d32a668b785db5f7ca3f5f362555ab0e00130613a95a94a2966fd685542cd6ce8852a28a5c1c68f3bd6829cbb2298b8735ff44d79cbdc647669cd9cb4ed195731d19d0cfe12fe9357276a20139a37c498e87affa2e04bd175b7f57260db1845680dc499f9871cb3de26405204a42dc8483bf3ad6e2df0f28def23af49b2a2d4105ab087c1731f53e98ef11af41d86d53573b101824cb15ec86e68725985fdc796be03f71f44e5d35c0a12cf5d5b81ce149fa1492c389bf138ed5dcc1a78558faf66f8dd9d3cbcbc09abd74d0130b0feeff26baeaec09d25fb3f4af9cc0d7ea014ab632e38d2bd17109e0a22a6c70706c3852c474c83b221018596d0cc6afc84fd0efe343a24d6fa379371fcc8ed9d0f9e65be6805fd61a1b9d07b79324efea392f5a9c535ca63fd42f5304cc75f9b46c256f507249d5b9974657d51fa1eff223cb74ec489ec0beca4f78444f012c17944a1539f70e00653c186f711f49022806919662aba4067dc6142cfbe0d0dc5b5062b7a78a9045ccdd230990d14983566d17af02b4cbc4e83ac960f5c0c2bcb96de030bd6f9a59d9864712402014e774ee09c672c71f45462b220965ce3649711d94c17db6562251c861662c6ce3f7fb748ed9e07afd138df3f992ffb0d05ee2e313c7379e310d2c7640907e305aecacfb9e81e3d9ccdb3c658b64b1460055acf78d341dbf5fe79c6bc27943558e77d7ce03a71cbd69351e7d743e4a8e05e31336304b71ce35b64e23e0bd0c7881facc0b189d37db87b93f6bc1b4402c956ff62a0bd1d8f5676cb7a7f6e8064ba860b54026e5f9fdcd254de28b03518d225e440faaa4e207398f98c71e159f5da4f44deacea0a0a244c4082f7b67a59674f4002819a7ba0c0648a90435faa2500db79ae3a30531f3a709398a455cd542fac51a9c5c5c869f62921c5ec7932c44a2682fc687c1009e9f739f4c0cf92389d391310375a9c090dbcc5c91aa892f637fcaaff1e9ee5106282160442c668666bfc07c7f33c9a0d34a0c4c6cf634878aeb0dafe89e1c335ec0363bb555523fc008b83ff426ae9a0894d2c7b34c128a59a5dcdf08d7ccb611fdbd1d5d1cef7f290d9b5921c82849e03728489d43510ff2036eee09a5be25458a0176e8e1658d1f8381d9bb31c38823e56a08e360614100f48f6140d03ec5662148edc198a90262cc18ccfd92eb5ab238ef35563bf810182cea9e24ff9de89444a92311fe3de21e2775fe3436b53100886eef952722faca865f2d2f82a60b16a2461cc8573ab72849c213b05303778bd950a07fd21a6c8732fcf8e60148a51560215c5bc71bd22d70ba0c79ebb1b80eaef4bfa7bb7e086c8c0b97d299d8556497499270be9669f04fdb1b02a99178f14bf4fe834dbd47cffa062d942e467e7ca8223705cdfbf55a47946b80194b8bddb899bc82d7a58254a78da639ba9975b94ddb0de9bcb1d0c0a316fa73ca45731c345f857eb3395c6321091fe7fbb8a346f3b51c42204311e040f641f1d0dd5c5652b677b7796f95e80c208d784d159d54ff11cf845821b751669176fe84fdee254dcdb4a04adbfe80eaa3e6d094bf98c3f7476cb9948686260b4020de60615c2e4a92cd13cf0ab66408e38106d17e80b8b9b7dab159775f902a7c7939015bab627369fe13b06d866f890f124aa65d0144a117432b8333a79ed576fc939af34fee94f8f87a7166698721bea4cb1a8c640cd2a7142b1f51147d609c33b17a53e46bad305dc86b60e667b7eacece17eb951ffa857f33d02300329514a289e0a4d5e10eb470fe98fa30a7c2776af34129ea1b4147e5c97bfb2f65e5d8812be37b2a4185aa7ca862dc25408b4318d4522b4b9b3d9493a1e549a00c239d8853a19c8bed4340221276a7ddfcede0ded01e143c1c8c8e7bdd09b92faea04c24a416d71e3237b6c51b96e28b5d3e35aa4ecb3b0febe26b1ac19fba050c2c33c5af08eeafcfec4fd4b00a94789984e959c68c85b6e62fc17bae895c2a49f5e2aec2ca69a26622b2ab4b22aa88441f9bbd5977d6c1ccbb512b86bcb2d04278560cb526011f3a2"}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_OURS={0xe8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_VALUE={0xd2, 0x4, "c6bc24c4b4e1a2baacc8dcbb657756a86a1ca08b4f322893039cbab11c18f776e709af5515e3caa332f8dfab3c295ca46026b10480a7b27a161cee146b50928890000ffa1378467bb618dab2af448dfc19b181b2b4eccdc752ba655b275cb1c87803c17e16f2d19aa124131a69a1019241f7a45e00e7bf225815970f82ba9e1e4b6491143729c0dc73c5685df3d8c906c1d359071dd77a32e6428b974843e47343b67e9de0afc2d26054c1bb157ac259385089204f31c74c98fc6eb2aa3e8ec099ca778f50e1f34266a736afbd86"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x525a}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x13a4}, 0x1, 0x0, 0x0, 0x44001}, 0x4040840) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 1.223189196s ago: executing program 4 (id=3045): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x282}], 0x1}, 0x4001) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0xe7}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x200, 0x9, 0x8000, 0xffff58ca, 0x8, 0x9, 0x0, 0x1}, &(0x7f0000000080)=0x20) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket(0xa, 0x2, 0x0) getsockname$netrom(r4, 0x0, &(0x7f00000008c0)) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2b, &(0x7f0000001640)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e24, 0x4e20, 0x9, 0x0, @opaque="05"}}}}}, 0x0) recvmmsg(r5, &(0x7f0000000000), 0x4a, 0x3, 0x0) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00'}}, 0x0, 0x3}, 0x90) recvmmsg(r3, &(0x7f0000004840)=[{{&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000080)=""/241, 0xf1}, {&(0x7f00000005c0)=""/147, 0x93}, {&(0x7f0000000680)=""/181, 0xb5}, {&(0x7f0000000740)=""/80, 0x50}, {&(0x7f00000007c0)=""/81, 0x51}, {&(0x7f0000000840)=""/249, 0xf9}, {&(0x7f0000000940)=""/67, 0x43}], 0x7, &(0x7f0000000a40)=""/217, 0xd9}, 0x8}, {{&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f00000010c0)=[{&(0x7f00000002c0)=""/46, 0x2e}, {&(0x7f0000000bc0)=""/205, 0xcd}, {&(0x7f0000000cc0)=""/52, 0x34}, {&(0x7f0000000d00)=""/147, 0x93}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/153, 0x99}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)=""/43, 0x2b}, {&(0x7f0000000f00)=""/172, 0xac}, {&(0x7f0000000fc0)=""/240, 0xf0}], 0xa}, 0x4}, {{&(0x7f0000001180)=@phonet, 0x80, &(0x7f0000001340)=[{&(0x7f0000001200)=""/100, 0x64}, {&(0x7f0000001280)=""/167, 0xa7}], 0x2, &(0x7f0000001380)=""/21, 0x15}, 0xffffff81}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000001440)=""/208, 0xd0}, {&(0x7f00000025c0)=""/177, 0xb1}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/216, 0xd8}, {&(0x7f0000003780)=""/118, 0x76}, {&(0x7f00000013c0)=""/32, 0x20}, {&(0x7f0000003800)=""/102, 0x66}, {&(0x7f0000003880)=""/88, 0x58}], 0x8, &(0x7f0000001540)}, 0x3}, {{&(0x7f0000003980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003a00)=""/228, 0xe4}], 0x1}}, {{&(0x7f0000003b40)=@hci, 0x80, &(0x7f0000003f80)=[{&(0x7f0000003bc0)=""/131, 0x83}, {&(0x7f0000003c80)=""/67, 0x43}, {&(0x7f0000003d00)=""/7, 0x7}, {&(0x7f0000003d40)=""/146, 0x92}, {&(0x7f0000003e00)=""/5, 0x5}, {&(0x7f0000003e40)}, {&(0x7f0000003e80)=""/198, 0xc6}], 0x7}, 0x3}, {{&(0x7f0000004000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000004080)=""/224, 0xe0}, {&(0x7f0000004180)=""/219, 0xdb}], 0x2, &(0x7f00000042c0)=""/180, 0xb4}, 0x9}, {{&(0x7f0000004380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004400)=""/30, 0x1e}, {&(0x7f0000004440)=""/18, 0x12}, {&(0x7f0000004480)=""/39, 0x27}, {&(0x7f00000044c0)=""/10, 0xa}, {&(0x7f0000004500)=""/193, 0xc1}, {&(0x7f0000004600)=""/50, 0x32}, {&(0x7f0000004640)=""/84, 0x54}], 0x7, &(0x7f0000004740)=""/228, 0xe4}, 0x7}], 0x8, 0x100, &(0x7f0000004a40)) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000000800000000000000000000000000000c0015005a"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfe, {{@in=@multicast1=0xe0000002, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffff}, {0x3}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x4, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1.103794355s ago: executing program 3 (id=3046): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x88, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8440}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bond={{0x9}, {0x44, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r2}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0xb}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x5}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x5}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x5890}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xa5}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'xfrm0\x00'}]}, 0x88}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r7], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 1.023224378s ago: executing program 2 (id=3047): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'wlan1\x00', @ifru_flags=0x2000}}) (async) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'wlan1\x00', @ifru_flags=0x2000}}) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) read$alg(r1, &(0x7f00000009c0)=""/75, 0x4b) 870.898177ms ago: executing program 2 (id=3048): socket(0x840000000002, 0x3, 0xff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x34, r1, 0x607, 0x270bd07, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}}, 0x4008400) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) socket(0x1d, 0x2, 0x6) unshare(0x22020400) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0008b8da369643771ea0185c6d1ba6a61aab1ccb94dbb4afc8b25adc57beedf109145e79d91a306586d7282a87099166f166ddc96700e2dd29f1643126ca81e3e5c3ba730fe40c9dbfde5c51c6604b1639a312d267a23b57b3f5aea80bc29f041163ed6e0d407b40bb16899be34e12e49a00bb8b3d4843fc8fa6cab0fded7cd60eb217875ceb17204ce46c44f93aae3445d52bd3d885ead022bd93060e9882f47af93fc97138fed816c8cdbeef79f22bca712837ede875995590f6b95919d6577798ebb51e04d60047aaba6fcd1d2a630763aac8c468aeb5b2943ca5c7f875", @ANYRES16=r3, @ANYBLOB="000228bd7000fddbdf250600000008000c000300000008000700ffffffff08000c000000000008000700e0000001080002000300000008000c00020000000800020003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10, 0x5, 0x1, 0x400, 0x8, 0x9, 0xd, 0x8, 0x800}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 870.765911ms ago: executing program 1 (id=2966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c56100000000000000000000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 655.748044ms ago: executing program 1 (id=3050): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002400), 0x1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x10}, 0x19}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x1, 0x20, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8) 291.064484ms ago: executing program 4 (id=3051): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000380)={{r1}, r3, 0x0, @inherit={0x58, &(0x7f0000000300)={0x1, 0x2, 0x3, 0xf, {0x20, 0x0, 0x5, 0xffffffffffffffff, 0x2}, [0x51, 0x5]}}, @subvolid=0x2}) (async, rerun: 32) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 32) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000001400)={{r5}, r2, 0x2, @inherit={0x80, &(0x7f0000001380)={0x0, 0x7, 0x6, 0xa, {0x21, 0x3, 0xec, 0x3ff, 0x7fffffffffffffff}, [0x2a3, 0x847, 0xa22, 0x2, 0x4, 0xd, 0x0]}}, @subvolid=0x472}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002400)={'rose0\x00', 0x4000}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002440), r6) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000024c0), r6) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002500)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f00000025c0)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x24, r7, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000002700)={0xfffffffffffffffc, 0x0, &(0x7f00000026c0)={&(0x7f0000002640)={0x48, r9, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfc}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xffff0980, 0x0]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4e}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0x9cd]}]}]}, 0x48}}, 0x40004) r10 = socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002740)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r10, 0x89f8, &(0x7f0000002800)={'tunl0\x00', &(0x7f0000002780)={'syztnl0\x00', r11, 0x8000, 0x20, 0x4, 0x9, {{0x12, 0x4, 0x3, 0x1, 0x48, 0x64, 0x0, 0xfb, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @dev={0xac, 0x14, 0x14, 0x38}, {[@timestamp_prespec={0x44, 0x34, 0x6e, 0x3, 0xb, [{@private=0xa010101, 0x4}, {@multicast2, 0x8}, {@broadcast, 0x6}, {@rand_addr=0x64010102, 0x80000001}, {@remote, 0xe1}, {@empty, 0x7}]}]}}}}}) (async, rerun: 64) r12 = socket$inet6(0xa, 0xa, 0x3) (rerun: 64) setsockopt$inet6_int(r12, 0x29, 0xd0, &(0x7f0000002840), 0x4) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000028c0)={0x1, &(0x7f0000002880)=[{0x9, 0x2, 0xd, 0x8}]}, 0x10) (async, rerun: 32) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002900), 0x400000, 0x0) ioctl$PPPIOCBRIDGECHAN(r13, 0x40047435, &(0x7f0000002940)=0x9) (async) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f0000002980)) (async) writev(r1, &(0x7f0000002bc0)=[{&(0x7f00000029c0)="3a2b9022f7d4995d66295628a9e0821d82a58617576a4d1979b8cb23082bb944943a5e75e5a70e", 0x27}, {&(0x7f0000002a00)="c88e2fc28282390bbef068e9524f4a62b6b9b920f7f4fad95ceb4f7d414f30d8b07d1a715e9e100d6e77af0047af1ee1eb3a502f956da36bde15e7710622b42ab2ed9df75b39c2944181e52969157fc0c11a02080bf41ea0aae66a996597727a01f83f9bd2cdca22ab0307ba8c4ee271d3e4a65cd84c25c8655d79869ff55723c1e184", 0x83}, {&(0x7f0000002ac0)="89cd89cdc71e8fbf5e717d68f83bd264752206290ed9a5acab0cb0ca9340702ae5e93dbfff6c7c18e77b9c7c10159cf2cd7bd12576fbda0d1bfa65a1eaa08de4fbab0687890eb16f188de98f09f61102b718f16da1ff8ac173bec71e11e527b90b7ee567360ab35d04f0ad71f98466a7fd28092a6212933d06", 0x79}, {&(0x7f0000002b40)}, {&(0x7f0000002b80)="81619bc134fc", 0x6}], 0x5) (async) socket$inet6(0xa, 0x4, 0x9) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000002c40)={'wpan3\x00'}) (async) r14 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r15 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r14, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x4c, 0x1407, 0x200, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r15}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x1) 158.099866ms ago: executing program 0 (id=3052): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa2c806554a5bb67b, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000008300), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000008440)={0x0, 0x0, &(0x7f0000008400)={&(0x7f0000008340)={0x38, r4, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:crack_db_t:s0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 4 (id=3053): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002400), 0x1, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x10}, 0x19}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x33) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x1, 0x20, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000100)={'a', ' *:* ', 'm\x00'}, 0x8) kernel console output (not intermixed with test programs): T11570] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1493'. [ 236.345336][T11570] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1493'. [ 236.392770][T11571] tipc: Enabled bearer , priority 0 [ 236.411633][T11571] syzkaller0: entered promiscuous mode [ 236.417312][T11571] syzkaller0: entered allmulticast mode [ 236.532586][T11571] tipc: Resetting bearer [ 236.588350][T11580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'. [ 236.610033][T11582] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1496'. [ 236.625798][T11582] netlink: 'syz.3.1496': attribute type 9 has an invalid length. [ 236.707518][T11578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.741609][T11567] tipc: Resetting bearer [ 236.808715][T11567] tipc: Disabling bearer [ 237.453037][T11612] netlink: 'syz.1.1502': attribute type 10 has an invalid length. [ 237.463754][T11612] veth0_macvtap: left promiscuous mode [ 237.482718][T11612] batman_adv: batadv0: Adding interface: macvtap0 [ 237.490501][T11612] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 237.674792][T11618] netlink: 'syz.3.1505': attribute type 12 has an invalid length. [ 237.732404][T11623] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 237.756535][T11623] bond2: entered promiscuous mode [ 237.762829][T11623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.783141][T11623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.790593][T11623] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 237.801287][T11623] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 237.815743][T11623] bond2: (slave wireguard0): making interface the new active one [ 237.823991][T11623] wireguard0: entered promiscuous mode [ 237.831206][T11623] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 237.926600][T11629] netlink: 'syz.3.1507': attribute type 101 has an invalid length. [ 237.932422][T11631] netlink: 'syz.0.1508': attribute type 32 has an invalid length. [ 238.047472][T11635] tipc: Enabled bearer , priority 0 [ 238.066848][T11635] syzkaller0: entered promiscuous mode [ 238.083323][T11635] syzkaller0: entered allmulticast mode [ 238.104719][T11634] tipc: Resetting bearer [ 238.139440][T11634] tipc: Disabling bearer [ 238.763874][T11670] only policy match revision 0 supported [ 238.763894][T11670] unable to load match [ 238.886044][T11683] lo speed is unknown, defaulting to 1000 [ 238.888356][T11670] __nla_validate_parse: 6 callbacks suppressed [ 238.888373][T11670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 238.896982][T11683] lo speed is unknown, defaulting to 1000 [ 238.901403][T11670] block nbd0: shutting down sockets [ 238.922800][T11688] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1524'. [ 238.951807][T11684] lo speed is unknown, defaulting to 1000 [ 238.992339][T11688] validate_nla: 4 callbacks suppressed [ 238.992357][T11688] netlink: 'syz.4.1524': attribute type 5 has an invalid length. [ 239.005942][T11688] netlink: 'syz.4.1524': attribute type 6 has an invalid length. [ 239.014484][T11688] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1524'. [ 239.023803][T11684] lo speed is unknown, defaulting to 1000 [ 239.231934][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 239.394893][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1528'. [ 239.624868][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1530'. [ 239.758965][T11719] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1533'. [ 239.779432][T11718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1532'. [ 239.908549][T11723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1534'. [ 239.997518][T11732] syzkaller0: entered promiscuous mode [ 240.004884][T11732] syzkaller0: entered allmulticast mode [ 240.055029][T11732] tipc: Enabled bearer , priority 0 [ 240.062357][T11734] netlink: 'syz.3.1537': attribute type 21 has an invalid length. [ 240.088370][T11734] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1537'. [ 240.100596][T11731] tipc: Resetting bearer [ 240.131531][T11737] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 240.140122][T11737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.141950][T11731] tipc: Disabling bearer [ 240.170063][T11734] netlink: 'syz.3.1537': attribute type 4 has an invalid length. [ 240.178728][T11734] netlink: 'syz.3.1537': attribute type 5 has an invalid length. [ 240.599300][T11761] netlink: 'syz.0.1543': attribute type 1 has an invalid length. [ 240.678745][T11761] bond5: (slave veth5): Enslaving as an active interface with a down link [ 240.832758][T11770] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 240.848895][T11768] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 240.958638][T11777] netlink: 'syz.4.1549': attribute type 3 has an invalid length. [ 240.978709][T11778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.989057][T11771] netlink: 'syz.1.1545': attribute type 10 has an invalid length. [ 241.002890][T11775] lo speed is unknown, defaulting to 1000 [ 241.010010][T11777] netlink: 'syz.4.1549': attribute type 1 has an invalid length. [ 241.037557][T11775] lo speed is unknown, defaulting to 1000 [ 241.079054][T11771] netlink: 'syz.1.1545': attribute type 3 has an invalid length. [ 241.875009][T11824] pim6reg: entered allmulticast mode [ 242.237459][T11821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.290011][T11821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.962298][T11850] tipc: Resetting bearer [ 242.983301][T11850] tipc: Resetting bearer [ 243.083991][ T60] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.105548][ T7450] tipc: Resetting bearer [ 243.119708][ T60] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.146025][ T60] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.183017][ T60] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.206102][T11870] lo speed is unknown, defaulting to 1000 [ 243.216480][T11870] lo speed is unknown, defaulting to 1000 [ 243.892429][T11905] tipc: Enabled bearer , priority 0 [ 243.929046][T11892] syzkaller0: entered promiscuous mode [ 243.963451][T11892] syzkaller0: entered allmulticast mode [ 244.054673][T11891] lo speed is unknown, defaulting to 1000 [ 244.065988][T11892] FAULT_INJECTION: forcing a failure. [ 244.065988][T11892] name failslab, interval 1, probability 0, space 0, times 1 [ 244.074537][T11891] lo speed is unknown, defaulting to 1000 [ 244.090619][T11892] CPU: 1 UID: 0 PID: 11892 Comm: syz.2.1575 Not tainted syzkaller #0 PREEMPT(full) [ 244.090645][T11892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.090658][T11892] Call Trace: [ 244.090666][T11892] [ 244.090674][T11892] dump_stack_lvl+0x189/0x250 [ 244.090716][T11892] ? __pfx____ratelimit+0x10/0x10 [ 244.090738][T11892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.090764][T11892] ? __pfx__printk+0x10/0x10 [ 244.090791][T11892] ? __pfx___might_resched+0x10/0x10 [ 244.090817][T11892] should_fail_ex+0x414/0x560 [ 244.090852][T11892] should_failslab+0xa8/0x100 [ 244.090875][T11892] __kmalloc_noprof+0xcb/0x7f0 [ 244.090901][T11892] ? kfree+0x4d/0x6d0 [ 244.090922][T11892] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 244.090959][T11892] tomoyo_realpath_from_path+0xe3/0x5d0 [ 244.090988][T11892] ? tomoyo_domain+0xd9/0x130 [ 244.091012][T11892] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 244.091044][T11892] tomoyo_path_number_perm+0x1e8/0x5a0 [ 244.091073][T11892] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 244.091139][T11892] ? __fget_files+0x2a/0x420 [ 244.091163][T11892] ? __fget_files+0x3a0/0x420 [ 244.091179][T11892] ? __fget_files+0x2a/0x420 [ 244.091202][T11892] security_file_ioctl+0xcb/0x2d0 [ 244.091227][T11892] __se_sys_ioctl+0x47/0x170 [ 244.091255][T11892] do_syscall_64+0xfa/0xfa0 [ 244.091276][T11892] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.091298][T11892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.091318][T11892] ? clear_bhb_loop+0x60/0xb0 [ 244.091341][T11892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.091359][T11892] RIP: 0033:0x7f9d0a58f749 [ 244.091384][T11892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.091401][T11892] RSP: 002b:00007f9d0b393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.091428][T11892] RAX: ffffffffffffffda RBX: 00007f9d0a7e5fa0 RCX: 00007f9d0a58f749 [ 244.091442][T11892] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 244.091455][T11892] RBP: 00007f9d0b393090 R08: 0000000000000000 R09: 0000000000000000 [ 244.091466][T11892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.091477][T11892] R13: 00007f9d0a7e6038 R14: 00007f9d0a7e5fa0 R15: 00007ffffb9f7548 [ 244.091510][T11892] [ 244.091518][T11892] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.206119][T11913] __nla_validate_parse: 16 callbacks suppressed [ 244.206138][T11913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1581'. [ 244.373937][T11892] tipc: Resetting bearer [ 244.488820][T11889] tipc: Resetting bearer [ 244.553397][T11889] tipc: Disabling bearer [ 244.620353][T11923] tipc: Enabled bearer , priority 0 [ 244.629555][T11923] syzkaller0: entered promiscuous mode [ 244.635144][T11923] syzkaller0: entered allmulticast mode [ 244.725516][T11923] tipc: Resetting bearer [ 244.738233][T11922] lo speed is unknown, defaulting to 1000 [ 244.748303][T11922] lo speed is unknown, defaulting to 1000 [ 244.764947][T11921] tipc: Resetting bearer [ 244.803339][T11929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1582'. [ 244.818916][T11921] tipc: Disabling bearer [ 244.819478][T11925] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 244.824867][T11929] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 244.850821][T11927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1584'. [ 244.966131][T11931] validate_nla: 2 callbacks suppressed [ 244.966149][T11931] netlink: 'syz.3.1585': attribute type 13 has an invalid length. [ 244.996719][T11931] netlink: 'syz.3.1585': attribute type 17 has an invalid length. [ 245.058485][T11931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.062479][T11935] xt_TCPMSS: Only works on TCP SYN packets [ 245.066716][T11931] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.084886][T11931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.105007][ T5911] lo speed is unknown, defaulting to 1000 [ 245.112741][ T5911] syz1: Port: 1 Link ACTIVE [ 245.214276][T11940] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.1587'. [ 245.228629][T11940] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.1587'. [ 245.394263][T11950] netlink: 'syz.0.1590': attribute type 13 has an invalid length. [ 245.609647][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1592'. [ 245.684102][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1591'. [ 245.722763][T11955] netlink: 'syz.1.1591': attribute type 46 has an invalid length. [ 245.742189][T11963] tipc: Enabled bearer , priority 0 [ 245.755090][T11963] syzkaller0: entered promiscuous mode [ 245.777901][T11963] syzkaller0: entered allmulticast mode [ 245.945888][T11965] tipc: Enabling of bearer rejected, failed to enable media [ 245.956067][T11963] FAULT_INJECTION: forcing a failure. [ 245.956067][T11963] name failslab, interval 1, probability 0, space 0, times 0 [ 245.992483][T11963] CPU: 0 UID: 0 PID: 11963 Comm: syz.3.1594 Not tainted syzkaller #0 PREEMPT(full) [ 245.992513][T11963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.992525][T11963] Call Trace: [ 245.992533][T11963] [ 245.992541][T11963] dump_stack_lvl+0x189/0x250 [ 245.992572][T11963] ? __pfx____ratelimit+0x10/0x10 [ 245.992595][T11963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.992621][T11963] ? __pfx__printk+0x10/0x10 [ 245.992648][T11963] ? __pfx___might_resched+0x10/0x10 [ 245.992668][T11963] ? fs_reclaim_acquire+0x7d/0x100 [ 245.992692][T11963] should_fail_ex+0x414/0x560 [ 245.992727][T11963] should_failslab+0xa8/0x100 [ 245.992749][T11963] __kmalloc_noprof+0xcb/0x7f0 [ 245.992776][T11963] ? tomoyo_encode+0x28b/0x550 [ 245.992812][T11963] tomoyo_encode+0x28b/0x550 [ 245.992848][T11963] tomoyo_realpath_from_path+0x58d/0x5d0 [ 245.992880][T11963] ? tomoyo_domain+0xd9/0x130 [ 245.992905][T11963] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 245.992938][T11963] tomoyo_path_number_perm+0x1e8/0x5a0 [ 245.992967][T11963] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.993035][T11963] ? __fget_files+0x2a/0x420 [ 245.993058][T11963] ? __fget_files+0x3a0/0x420 [ 245.993075][T11963] ? __fget_files+0x2a/0x420 [ 245.993099][T11963] security_file_ioctl+0xcb/0x2d0 [ 245.993125][T11963] __se_sys_ioctl+0x47/0x170 [ 245.993153][T11963] do_syscall_64+0xfa/0xfa0 [ 245.993174][T11963] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.993197][T11963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.993216][T11963] ? clear_bhb_loop+0x60/0xb0 [ 245.993241][T11963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.993259][T11963] RIP: 0033:0x7fba5298f749 [ 245.993277][T11963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.993294][T11963] RSP: 002b:00007fba537f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.993315][T11963] RAX: ffffffffffffffda RBX: 00007fba52be5fa0 RCX: 00007fba5298f749 [ 245.993330][T11963] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 245.993342][T11963] RBP: 00007fba537f4090 R08: 0000000000000000 R09: 0000000000000000 [ 245.993355][T11963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.993367][T11963] R13: 00007fba52be6038 R14: 00007fba52be5fa0 R15: 00007ffe38f0ca18 [ 245.993402][T11963] [ 245.993424][T11963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 246.302271][T11963] tipc: Resetting bearer [ 246.321310][T11979] netlink: 'syz.1.1595': attribute type 3 has an invalid length. [ 246.381318][T11962] tipc: Resetting bearer [ 246.410860][ T5831] Bluetooth: hci3: link tx timeout [ 246.416482][ T5831] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 246.437509][T11987] netlink: 'syz.2.1602': attribute type 2 has an invalid length. [ 246.446030][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1602'. [ 246.456325][T11962] tipc: Disabling bearer [ 246.459318][T11987] netlink: 'syz.2.1602': attribute type 1 has an invalid length. [ 246.486777][T11965] lo: left allmulticast mode [ 246.559893][T11995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1602'. [ 246.596651][T11987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.612514][T11995] bond3: entered promiscuous mode [ 246.639854][T11995] bond3: entered allmulticast mode [ 246.739679][T11987] bond3: (slave dummy0): making interface the new active one [ 246.792816][T11987] dummy0: entered promiscuous mode [ 246.813531][T11987] dummy0: entered allmulticast mode [ 246.844757][T11987] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 247.057021][T12020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1608'. [ 247.072569][T11995] bond3 (unregistering): (slave dummy0): Releasing active interface [ 247.082444][T11995] dummy0: left promiscuous mode [ 247.087712][T11995] dummy0: left allmulticast mode [ 247.096333][T11995] bond3 (unregistering): Released all slaves [ 247.657317][T12039] lo speed is unknown, defaulting to 1000 [ 247.698029][T12039] lo speed is unknown, defaulting to 1000 [ 247.706870][T12044] syzkaller0: entered promiscuous mode [ 247.729830][T12044] syzkaller0: entered allmulticast mode [ 247.834315][T12055] lo speed is unknown, defaulting to 1000 [ 247.934950][T12055] lo speed is unknown, defaulting to 1000 [ 248.494507][ T5831] Bluetooth: hci3: command 0x0405 tx timeout [ 249.385173][T12107] veth7: entered promiscuous mode [ 249.391776][T12110] __nla_validate_parse: 5 callbacks suppressed [ 249.391795][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 249.419556][T12107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1630'. [ 249.560153][T12114] lo speed is unknown, defaulting to 1000 [ 249.589170][T12114] lo speed is unknown, defaulting to 1000 [ 249.971176][T12129] netlink: 'syz.1.1637': attribute type 1 has an invalid length. [ 250.077052][T12129] dvmrp0: entered allmulticast mode [ 250.193283][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1640'. [ 250.613013][T12150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.726491][T12152] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1645'. [ 251.027440][T12166] bridge3: entered allmulticast mode [ 251.091023][T12168] tipc: Enabled bearer , priority 0 [ 251.099970][T12168] syzkaller0: entered promiscuous mode [ 251.118181][T12168] syzkaller0: entered allmulticast mode [ 251.201927][T12168] tipc: Resetting bearer [ 251.222173][T12163] tipc: Resetting bearer [ 251.244203][T12163] tipc: Disabling bearer [ 251.267591][T12179] netlink: 'syz.3.1655': attribute type 13 has an invalid length. [ 251.448713][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'. [ 251.545717][ T7003] lo speed is unknown, defaulting to 1000 [ 251.551851][ T7003] syz1: Port: 1 Link DOWN [ 251.593436][T12185] netlink: 'syz.0.1656': attribute type 3 has an invalid length. [ 252.149576][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 252.203721][T12216] netlink: 'syz.4.1663': attribute type 63 has an invalid length. [ 252.228560][T12216] netlink: 'syz.4.1663': attribute type 63 has an invalid length. [ 252.254762][T12220] syzkaller1: entered allmulticast mode [ 252.386501][T12224] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1666'. [ 252.420786][T12222] netlink: 'syz.4.1665': attribute type 2 has an invalid length. [ 252.499912][T12227] netlink: 'syz.3.1667': attribute type 32 has an invalid length. [ 252.538242][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1667'. [ 252.789684][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 252.836726][T12248] No such timeout policy "syz0" [ 253.285960][T12273] netlink: 'syz.0.1685': attribute type 32 has an invalid length. [ 253.374482][T12284] netlink: 'syz.4.1686': attribute type 1 has an invalid length. [ 253.492593][T12288] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.583154][T12276] veth9: entered promiscuous mode [ 253.601469][T12276] bond6: (slave veth9): Enslaving as a backup interface with a down link [ 253.611747][T12289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 254.689816][T12346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1704'. [ 254.703639][T12346] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1704'. [ 255.001811][T12366] lo speed is unknown, defaulting to 1000 [ 255.011113][T12366] lo speed is unknown, defaulting to 1000 [ 255.259266][T12379] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1715'. [ 255.511607][T12392] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1718'. [ 255.737680][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'. [ 255.760608][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.958924][T12411] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1725'. [ 256.017726][T12411] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1725'. [ 256.074169][T12418] lo speed is unknown, defaulting to 1000 [ 256.093333][T12418] lo speed is unknown, defaulting to 1000 [ 256.119328][T12421] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1726'. [ 256.159112][T12421] netlink: 'syz.4.1726': attribute type 1 has an invalid length. [ 256.197126][T12423] tipc: Enabled bearer , priority 0 [ 256.205568][T12423] syzkaller0: entered promiscuous mode [ 256.211797][T12423] syzkaller0: entered allmulticast mode [ 256.227855][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1728'. [ 256.294144][T12422] tipc: Resetting bearer [ 256.432619][T12431] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 256.447212][T12422] tipc: Disabling bearer [ 259.285606][T12443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1734'. [ 259.456769][T12454] bond5: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 260.133884][T12499] netlink: 'syz.1.1742': attribute type 1 has an invalid length. [ 260.192096][T12504] __nla_validate_parse: 1 callbacks suppressed [ 260.192116][T12504] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1748'. [ 260.560249][T12516] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1752'. [ 260.795112][T12524] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1756'. [ 260.874386][T12525] lo speed is unknown, defaulting to 1000 [ 260.896384][T12525] lo speed is unknown, defaulting to 1000 [ 260.993166][T12532] syzkaller0: entered promiscuous mode [ 261.000054][T12532] syzkaller0: entered allmulticast mode [ 261.225622][T12539] tipc: Enabled bearer , priority 0 [ 261.242484][T12539] syzkaller0: entered promiscuous mode [ 261.249157][T12539] syzkaller0: entered allmulticast mode [ 261.320519][T12539] tipc: Resetting bearer [ 261.472841][T12538] tipc: Resetting bearer [ 261.619793][T12538] tipc: Disabling bearer [ 261.724887][T12568] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 261.746238][T12558] netlink: 336 bytes leftover after parsing attributes in process `syz.4.1766'. [ 262.022093][T12587] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.058389][T12584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1773'. [ 262.191191][T12592] netlink: 'syz.3.1775': attribute type 29 has an invalid length. [ 262.217340][T12595] netlink: 'syz.3.1775': attribute type 29 has an invalid length. [ 262.451570][T12598] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1777'. [ 262.488086][T12598] block nbd0: not configured, cannot reconfigure [ 262.774021][T12626] netlink: 'syz.3.1783': attribute type 29 has an invalid length. [ 262.839171][T12626] netlink: 'syz.3.1783': attribute type 29 has an invalid length. [ 262.845032][T12628] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1784'. [ 263.028279][T12635] lo speed is unknown, defaulting to 1000 [ 263.068186][T12643] netlink: 308 bytes leftover after parsing attributes in process `syz.2.1790'. [ 263.105165][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1790'. [ 263.123614][T12642] syzkaller1: entered promiscuous mode [ 263.135850][T12642] syzkaller1: entered allmulticast mode [ 263.213300][T12642] netlink: 'syz.3.1788': attribute type 10 has an invalid length. [ 263.232073][T12642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1788'. [ 263.257340][T12642] batadv0: entered promiscuous mode [ 263.263857][T12642] batadv0: entered allmulticast mode [ 263.270122][T12642] bridge0: port 1(batadv0) entered blocking state [ 263.299136][T12642] bridge0: port 1(batadv0) entered disabled state [ 263.397685][T12666] netlink: 'syz.4.1795': attribute type 2 has an invalid length. [ 263.688416][ T60] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 263.698082][ T60] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 263.716810][T12683] syzkaller0: entered promiscuous mode [ 263.724522][T12683] syzkaller0: entered allmulticast mode [ 263.920485][T12699] cgroup: fork rejected by pids controller in /syz2 [ 264.259014][T12814] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.391017][ T7450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 264.410268][ T7450] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.460600][T12820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.519269][ T7450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 264.533710][ T7450] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.550300][T12822] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 264.579357][T12822] 8021q: adding VLAN 0 to HW filter on device bond7 [ 264.603634][T12822] bond7: (slave lo): Enslaving as an active interface with an up link [ 264.943772][T12820] bond7 (unregistering): (slave lo): Releasing backup interface [ 264.956608][T12820] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 264.997207][T12820] bond7 (unregistering): Released all slaves [ 265.093691][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 265.100339][T12828] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 265.133040][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 265.142954][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 265.160634][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 265.171216][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.253982][ T7450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 265.269409][ T7450] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.379572][T12847] netlink: 'syz.0.1818': attribute type 31 has an invalid length. [ 265.511017][ T7450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 265.558465][ T7450] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.626749][T12836] lo speed is unknown, defaulting to 1000 [ 265.635647][T12861] netlink: 'syz.3.1821': attribute type 11 has an invalid length. [ 265.730713][T12865] __nla_validate_parse: 9 callbacks suppressed [ 265.730733][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1821'. [ 265.910929][T12865] bond3: entered promiscuous mode [ 265.916793][T12865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 265.995847][T12861] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.006085][T12861] bond4: entered promiscuous mode [ 266.014019][T12861] bond3: (slave bond4): Enslaving as an active interface with an up link [ 266.787403][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 266.831372][T12886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 266.890470][T12836] chnl_net:caif_netlink_parms(): no params data found [ 267.282171][ T5833] Bluetooth: hci2: command tx timeout [ 267.708663][ T7450] bond1 (unregistering): (slave geneve2): Releasing active interface [ 267.997461][ T7450] bond0 (unregistering): left promiscuous mode [ 268.003907][ T7450] bridge_slave_1: left promiscuous mode [ 268.023384][ T7450] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 268.035021][ T7450] bond0 (unregistering): Released all slaves [ 268.135072][ T7450] bond1 (unregistering): Released all slaves [ 268.253550][ T7450] bond2 (unregistering): Released all slaves [ 268.282670][T12905] tipc: Enabling of bearer rejected, failed to enable media [ 268.434264][T12933] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 268.453705][ T7450] tipc: Left network mode [ 268.501129][T12941] netlink: 'syz.1.1837': attribute type 12 has an invalid length. [ 268.521069][T12941] netlink: 'syz.1.1837': attribute type 29 has an invalid length. [ 268.546098][T12941] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1837'. [ 268.555908][T12941] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1837'. [ 268.650840][ T7450] IPVS: stopping backup sync thread 6261 ... [ 268.662938][T12944] netlink: 'syz.0.1838': attribute type 3 has an invalid length. [ 268.681281][T12944] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1838'. [ 268.692005][T12944] unsupported nlmsg_type 40 [ 268.710470][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 268.738305][T12836] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.745478][T12836] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.768025][T12946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1839'. [ 268.777270][T12836] bridge_slave_0: entered allmulticast mode [ 268.790785][T12836] bridge_slave_0: entered promiscuous mode [ 268.827369][T12953] netlink: 'syz.1.1840': attribute type 83 has an invalid length. [ 268.902130][T12836] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.917709][T12957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1841'. [ 268.927343][T12836] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.961855][T12836] bridge_slave_1: entered allmulticast mode [ 268.981455][T12836] bridge_slave_1: entered promiscuous mode [ 269.074877][T12964] tipc: Enabled bearer , priority 0 [ 269.159718][T12956] syzkaller0: entered promiscuous mode [ 269.165373][T12956] syzkaller0: entered allmulticast mode [ 269.220575][T12964] tipc: Disabling bearer [ 269.243446][T12836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.281807][T12836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.310855][T12972] bond0: (slave dummy0): Releasing backup interface [ 269.322306][T12972] bridge0: port 1(batadv0) entered disabled state [ 269.332644][T12972] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 269.334826][T12982] netlink: 'syz.1.1846': attribute type 7 has an invalid length. [ 269.356940][T12982] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1846'. [ 269.366850][ T5833] Bluetooth: hci2: command tx timeout [ 269.381045][T12982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1846'. [ 269.390160][ T7450] hsr_slave_0: left promiscuous mode [ 269.396761][ T7450] hsr_slave_1: left promiscuous mode [ 269.396826][T12982] netlink: 'syz.1.1846': attribute type 1 has an invalid length. [ 269.419517][ T7450] veth1_to_hsr: left allmulticast mode [ 269.425275][ T7450] veth1_to_hsr: left promiscuous mode [ 269.431534][ T7450] veth1_vlan: left promiscuous mode [ 269.436981][ T7450] veth0_vlan: left promiscuous mode [ 270.293151][ T877] lo speed is unknown, defaulting to 1000 [ 270.300971][ T877] infiniband syz0: ib_query_port failed (-19) [ 270.310652][T12836] team0: Port device team_slave_0 added [ 270.321585][T12836] team0: Port device team_slave_1 added [ 270.453055][T12836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.485024][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.512560][T12836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.570959][T12836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.593132][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.672290][T12836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.809228][T13007] __nla_validate_parse: 3 callbacks suppressed [ 270.809247][T13007] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1851'. [ 270.939723][T13007] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1851'. [ 270.942772][T12836] hsr_slave_0: entered promiscuous mode [ 270.958284][T12836] hsr_slave_1: entered promiscuous mode [ 270.966366][T12836] debugfs: 'hsr0' already exists in 'hsr' [ 270.974826][T12836] Cannot create hsr debugfs directory [ 271.069751][ T7450] IPVS: stop unused estimator thread 0... [ 271.438896][ T5833] Bluetooth: hci2: command tx timeout [ 271.881229][T13031] x_tables: duplicate underflow at hook 3 [ 272.389345][T13053] netlink: 'syz.1.1863': attribute type 3 has an invalid length. [ 272.400006][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1863'. [ 272.525404][T12836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 272.545239][T12836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 272.560087][T12836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 272.588745][T12836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 272.623035][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1865'. [ 272.649610][T13060] tipc: Enabled bearer , priority 0 [ 272.683106][T13059] tipc: Disabling bearer [ 272.926717][T12836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.980600][T13075] tipc: Enabled bearer , priority 0 [ 272.999325][T12836] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.011780][T13074] tipc: Disabling bearer [ 273.040931][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.048138][ T7460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.109059][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.116248][ T7460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.331942][T13102] sctp: [Deprecated]: syz.1.1875 (pid 13102) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.331942][T13102] Use struct sctp_sack_info instead [ 273.381623][T13101] macvtap1: entered promiscuous mode [ 273.389019][T13101] macvtap1: entered allmulticast mode [ 273.455289][T13108] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1877'. [ 273.477264][T13108] Cannot find del_set index 0 as target [ 273.488712][T13110] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1878'. [ 273.518032][ T5833] Bluetooth: hci2: command tx timeout [ 273.624966][T12836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.686800][T13116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1880'. [ 273.701455][T12836] veth0_vlan: entered promiscuous mode [ 273.739187][T12836] veth1_vlan: entered promiscuous mode [ 273.784422][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'. [ 273.820378][T12836] veth0_macvtap: entered promiscuous mode [ 273.835093][T12836] veth1_macvtap: entered promiscuous mode [ 273.843210][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 273.857325][T12836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.871613][T12836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.029307][ T3466] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.049768][ T3466] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.083573][ T7460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.101756][ T7460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.136739][ T3466] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.175132][ T3466] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.186257][T13129] x_tables: duplicate underflow at hook 3 [ 274.197450][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.213642][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.485957][T13151] netlink: 'syz.3.1890': attribute type 1 has an invalid length. [ 274.567333][T13155] batman_adv: batadv0: Adding interface: vlan2 [ 274.576119][T13155] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.608652][T13155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.619814][T13155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.634101][T13155] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 274.648889][T13157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 275.083403][T13170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.289070][T13178] bond6: entered promiscuous mode [ 275.294341][T13178] bond6: entered allmulticast mode [ 275.300972][T13178] 8021q: adding VLAN 0 to HW filter on device bond6 [ 275.318836][T13178] x_tables: duplicate underflow at hook 3 [ 275.631654][T13195] Cannot find add_set index 0 as target [ 275.936479][T13204] __nla_validate_parse: 5 callbacks suppressed [ 275.936500][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1907'. [ 276.125776][T13210] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1909'. [ 276.137481][T13210] syz_tun: entered allmulticast mode [ 276.155019][T13210] dvmrp8: entered allmulticast mode [ 276.164854][T13208] syz_tun: left allmulticast mode [ 276.426061][T13223] netlink: 'syz.4.1913': attribute type 1 has an invalid length. [ 276.464806][T13221] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 276.492910][T13224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1913'. [ 276.540819][T13223] 8021q: adding VLAN 0 to HW filter on device bond7 [ 276.552716][T13224] bond7: entered promiscuous mode [ 276.560826][T13223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1913'. [ 276.614458][T13223] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1913'. [ 276.634961][T13221] bridge_slave_0: left allmulticast mode [ 276.660776][T13221] bridge_slave_0: left promiscuous mode [ 276.666666][T13221] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.702969][T13236] x_tables: duplicate underflow at hook 1 [ 276.713793][T13221] bridge_slave_1: left allmulticast mode [ 276.719896][T13221] bridge_slave_1: left promiscuous mode [ 276.726227][T13221] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.742215][T13221] bond0: (slave bond_slave_0): Releasing backup interface [ 276.784138][T13221] bond0: (slave bond_slave_1): Releasing backup interface [ 276.805585][T13221] team0: Port device team_slave_0 removed [ 276.819788][T13221] team0: Port device team_slave_1 removed [ 276.823640][T13243] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 276.826722][T13221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.846850][T13221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.856847][T13221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.868185][T13221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.886841][T13221] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 276.924057][T13223] tipc: Resetting bearer [ 276.991597][T13248] tipc: Enabled bearer , priority 0 [ 277.026250][T13248] syzkaller0: entered promiscuous mode [ 277.053348][T13248] syzkaller0: entered allmulticast mode [ 277.081680][T13248] tipc: Enabled bearer , priority 10 [ 277.094482][T13248] netlink: 'syz.1.1918': attribute type 1 has an invalid length. [ 277.125034][T13248] tipc: Resetting bearer [ 277.178405][T13247] tipc: Resetting bearer [ 277.288593][T13247] tipc: Disabling bearer [ 277.701787][T13282] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1927'. [ 278.432536][T13307] bond0: (slave team0): Releasing backup interface [ 278.472928][T13300] netlink: 'syz.0.1932': attribute type 10 has an invalid length. [ 278.493169][T13307] batman_adv: batadv0: Removing interface: dummy0 [ 278.513917][T13307] bond0: (slave bond_slave_0): Releasing backup interface [ 278.552039][T13307] bond0: (slave bond_slave_1): Releasing backup interface [ 278.583054][T13307] team0: Port device team_slave_0 removed [ 278.605397][T13307] team0: Port device team_slave_1 removed [ 278.617375][T13307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.630640][T13307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.662220][T13307] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 279.197116][T13323] tipc: Enabled bearer , priority 0 [ 279.273758][T13336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1939'. [ 279.564560][T13345] delete_channel: no stack [ 279.725757][T13355] netlink: 'syz.2.1942': attribute type 1 has an invalid length. [ 279.839575][T13344] tipc: Resetting bearer [ 279.881966][T13322] tipc: Disabling bearer [ 279.930925][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 280.210182][T13376] x_tables: duplicate underflow at hook 1 [ 280.701856][T13392] tunl0: left allmulticast mode [ 280.708359][T13392] gre0: left allmulticast mode [ 280.714768][T13392] gretap0: left allmulticast mode [ 280.749324][T13392] erspan0: left allmulticast mode [ 280.769682][T13392] ip_vti0: left promiscuous mode [ 280.776102][T13392] ip6_vti0: left allmulticast mode [ 280.807584][T13392] sit0: left allmulticast mode [ 280.841897][T13392] ip6tnl0: left allmulticast mode [ 280.849620][T13392] ip6gre0: left allmulticast mode [ 280.856178][T13392] syz_tun: left allmulticast mode [ 280.863366][T13392] ip6gretap0: left allmulticast mode [ 280.874394][T13392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.026521][T13406] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1957'. [ 281.099630][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'. [ 281.119777][T13409] netlink: 'syz.2.1958': attribute type 12 has an invalid length. [ 281.132078][T13410] ipvlan2: entered promiscuous mode [ 281.172430][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'. [ 281.187016][T13416] netlink: 'syz.2.1958': attribute type 12 has an invalid length. [ 281.230033][T13415] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 281.235852][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'. [ 281.248487][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.273714][T13409] netlink: 'syz.2.1958': attribute type 12 has an invalid length. [ 281.320023][T13416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1958'. [ 281.329857][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.335687][T13416] netlink: 'syz.2.1958': attribute type 12 has an invalid length. [ 281.436704][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.450222][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.496574][T13422] netlink: 'syz.4.1960': attribute type 1 has an invalid length. [ 281.528247][T13422] veth11: entered promiscuous mode [ 281.580281][T13432] netlink: 'syz.1.1963': attribute type 21 has an invalid length. [ 281.589918][T13432] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1963'. [ 281.602330][T13432] netlink: 'syz.1.1963': attribute type 4 has an invalid length. [ 281.612192][T13432] netlink: 'syz.1.1963': attribute type 5 has an invalid length. [ 281.621046][T13432] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1963'. [ 281.641029][T13436] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 281.648650][T13436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.672387][T13436] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1965'. [ 281.700002][T13436] xt_cgroup: path and classid specified [ 281.944961][T13457] sit0: entered promiscuous mode [ 281.951560][T13457] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1968'. [ 282.065377][T13465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1973'. [ 282.586571][T13492] syzkaller0: entered promiscuous mode [ 282.593552][T13492] syzkaller0: entered allmulticast mode [ 282.977747][T13514] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20001 [ 283.028918][T13514] xt_TCPMSS: Only works on TCP SYN packets [ 284.819485][T13537] mac80211_hwsim hwsim8 ªªªªª;: renamed from wlan0 [ 285.310950][T13563] netlink: 'syz.0.1997': attribute type 3 has an invalid length. [ 285.321491][T13563] netlink: 'syz.0.1997': attribute type 3 has an invalid length. [ 285.715610][T13590] IPVS: length: 132 != 8 [ 285.733778][T13590] pimreg: entered allmulticast mode [ 285.740838][T13590] pimreg: left allmulticast mode [ 285.955806][T13602] syz_tun: entered allmulticast mode [ 286.151665][T13602] syz_tun: left allmulticast mode [ 286.157164][T13618] __nla_validate_parse: 6 callbacks suppressed [ 286.157178][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2007'. [ 287.056987][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 288.257037][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2019'. [ 288.534370][T13691] tipc: Enabled bearer , priority 0 [ 288.543756][T13691] syzkaller0: entered promiscuous mode [ 288.549452][T13691] syzkaller0: entered allmulticast mode [ 288.583525][T13693] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2023'. [ 288.610111][T13691] tipc: Resetting bearer [ 288.780501][T13703] 8021q: adding VLAN 0 to HW filter on device bond5 [ 288.805014][T13703] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 288.912580][T13709] netlink: 'syz.4.2029': attribute type 1 has an invalid length. [ 288.922162][T13709] netlink: 'syz.4.2029': attribute type 2 has an invalid length. [ 288.935422][T13709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2029'. [ 288.975267][T13712] bond7: Removing last arp target with arp_interval on [ 288.990259][T13712] bond7: entered promiscuous mode [ 289.010069][T13712] bond7: entered allmulticast mode [ 289.015651][T13712] 8021q: adding VLAN 0 to HW filter on device bond7 [ 289.145968][T13723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.312519][T13728] sctp: [Deprecated]: syz.3.2035 (pid 13728) Use of int in max_burst socket option. [ 289.312519][T13728] Use struct sctp_assoc_value instead [ 289.331012][T13690] tipc: Resetting bearer [ 289.361294][T13690] tipc: Disabling bearer [ 289.385265][T13728] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 289.581757][T13724] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 289.690748][T13736] syzkaller0: entered promiscuous mode [ 289.705254][T13736] syzkaller0: entered allmulticast mode [ 290.012629][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 290.049981][T13753] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2044'. [ 290.108841][T13753] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2044'. [ 290.142586][T13755] tipc: Resetting bearer [ 290.149653][T13755] tipc: Resetting bearer [ 290.229986][T13769] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2048'. [ 290.370755][T13781] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2052'. [ 291.099754][T13787] nbd: couldn't find device at index 1 [ 291.440996][ T5833] Bluetooth: hci0: command tx timeout [ 291.443829][T13821] netlink: 157168 bytes leftover after parsing attributes in process `syz.3.2059'. [ 291.491348][T13812] sctp: [Deprecated]: syz.3.2059 (pid 13812) Use of int in max_burst socket option deprecated. [ 291.491348][T13812] Use struct sctp_assoc_value instead [ 291.776920][T13836] netlink: 'syz.1.2066': attribute type 7 has an invalid length. [ 291.921204][T13844] netlink: 'syz.1.2069': attribute type 1 has an invalid length. [ 291.949012][T13846] netlink: 'syz.0.2070': attribute type 1 has an invalid length. [ 292.083467][T13852] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 292.094752][T13852] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 292.139291][T13855] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2073'. [ 292.161156][T13863] netlink: 'syz.3.2075': attribute type 1 has an invalid length. [ 292.167865][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.185127][T13851] delete_channel: no stack [ 292.198513][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.215075][T13863] 8021q: adding VLAN 0 to HW filter on device bond6 [ 292.246630][T13865] bond6: (slave geneve2): making interface the new active one [ 292.255622][T13865] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 292.271149][T13863] xt_hashlimit: max too large, truncated to 1048576 [ 292.277713][ T60] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.296045][ T60] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.306097][T13863] geneve0: entered allmulticast mode [ 292.324683][ T60] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.329470][T13867] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 292.344720][ T60] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.356490][T13867] ip6t_rpfilter: unknown options [ 292.495865][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'. [ 292.509353][T13876] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2079'. [ 292.577058][T13872] bridge3: port 1(veth7) entered blocking state [ 292.584546][T13872] bridge3: port 1(veth7) entered disabled state [ 292.591984][T13872] veth7: entered allmulticast mode [ 292.601210][T13872] veth7: entered promiscuous mode [ 292.609335][T13884] bridge3: port 2(veth0_to_bond) entered blocking state [ 292.616495][T13884] bridge3: port 2(veth0_to_bond) entered disabled state [ 292.623898][T13884] veth0_to_bond: entered allmulticast mode [ 292.631448][T13884] veth0_to_bond: entered promiscuous mode [ 292.650514][T13877] vxcan3: entered allmulticast mode [ 292.688817][T13872] bridge3: port 3(veth9) entered blocking state [ 292.695474][T13872] bridge3: port 3(veth9) entered disabled state [ 292.699765][T13884] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2078'. [ 292.702214][T13872] veth9: entered allmulticast mode [ 292.717280][T13872] veth9: entered promiscuous mode [ 292.820812][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 293.217643][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2088'. [ 293.452545][T13929] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 293.463298][T13929] netlink: 'syz.0.2092': attribute type 1 has an invalid length. [ 293.543052][T13935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2093'. [ 293.591396][T13938] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2096'. [ 293.602651][T13938] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 293.761061][T13946] netlink: 'syz.3.2100': attribute type 1 has an invalid length. [ 293.845796][T13946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2100'. [ 294.248966][ T7442] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.267634][ T7442] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.351675][ T7442] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.363070][T13969] tipc: Enabled bearer , priority 0 [ 294.376344][T13966] netlink: 'syz.3.2106': attribute type 29 has an invalid length. [ 294.385283][T13965] netlink: 'syz.3.2106': attribute type 29 has an invalid length. [ 294.418620][T13972] syzkaller0: entered promiscuous mode [ 294.424501][T13972] syzkaller0: entered allmulticast mode [ 294.442176][ T7442] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.464352][T13969] tipc: Resetting bearer [ 294.482404][T13967] tipc: Resetting bearer [ 294.540884][T13967] tipc: Disabling bearer [ 295.924491][T14038] geneve2: entered promiscuous mode [ 295.949912][T14038] geneve2: entered allmulticast mode [ 295.956847][ T7442] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 50849 - 0 [ 295.998897][ T60] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 50849 - 0 [ 296.016169][ T60] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 50849 - 0 [ 296.055041][ T60] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 50849 - 0 [ 296.112799][T14046] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 296.696976][T14069] __nla_validate_parse: 70 callbacks suppressed [ 296.696997][T14069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2135'. [ 298.299885][T14105] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2145'. [ 299.104136][T14133] tipc: Started in network mode [ 299.109375][T14133] tipc: Node identity c6b7d702b303, cluster identity 4711 [ 299.116666][T14133] tipc: Enabled bearer , priority 0 [ 299.182514][T14133] syzkaller0: entered promiscuous mode [ 299.188602][T14133] syzkaller0: entered allmulticast mode [ 299.296015][T14133] tipc: Resetting bearer [ 299.347434][T14132] tipc: Resetting bearer [ 299.442926][T14132] tipc: Disabling bearer [ 299.491138][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2155'. [ 299.514446][T14148] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2155'. [ 299.723528][T14158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2158'. [ 299.741460][T14163] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2159'. [ 299.771910][T14161] pim6reg: entered allmulticast mode [ 299.870897][T14165] netlink: 732 bytes leftover after parsing attributes in process `syz.1.2162'. [ 299.882070][T14165] netlink: 732 bytes leftover after parsing attributes in process `syz.1.2162'. [ 299.952003][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2164'. [ 300.451550][T14196] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2171'. [ 300.601317][T14202] netlink: 'syz.4.2174': attribute type 30 has an invalid length. [ 301.762569][T14258] __nla_validate_parse: 9 callbacks suppressed [ 301.762589][T14258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2189'. [ 301.818742][T14256] tipc: Enabled bearer , priority 0 [ 301.847574][T14263] tipc: Enabling of bearer rejected, already enabled [ 301.864542][T14256] syzkaller0: entered promiscuous mode [ 301.871149][T14256] syzkaller0: entered allmulticast mode [ 301.878826][T14261] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2191'. [ 301.931368][T14263] tipc: Resetting bearer [ 301.989179][T14268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'. [ 302.021701][T14255] tipc: Resetting bearer [ 302.046551][T14273] netlink: 'syz.2.2195': attribute type 1 has an invalid length. [ 302.055696][T14255] tipc: Disabling bearer [ 302.104618][T14273] bond1: entered promiscuous mode [ 302.110394][T14273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.130434][T14276] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 302.179167][T14278] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 302.183733][T14276] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.327677][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2199'. [ 302.378546][T14292] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 302.411010][T14296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2200'. [ 302.457235][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2201'. [ 302.460572][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 302.505251][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2201'. [ 302.507438][T14296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2200'. [ 302.548105][T14296] netlink: 'syz.4.2200': attribute type 5 has an invalid length. [ 302.577319][T14302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 302.589281][T14309] netlink: 'syz.3.2204': attribute type 2 has an invalid length. [ 302.601231][T14296] netlink: 'syz.4.2200': attribute type 6 has an invalid length. [ 302.654051][T14314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.705702][T14317] netlink: 'syz.3.2206': attribute type 1 has an invalid length. [ 303.181966][T14301] xt_hashlimit: size too large, truncated to 1048576 [ 303.214718][T14349] netlink: 'syz.1.2215': attribute type 29 has an invalid length. [ 303.221309][T14301] xt_hashlimit: max too large, truncated to 1048576 [ 303.249000][T14349] netlink: 'syz.1.2215': attribute type 29 has an invalid length. [ 303.271395][T14353] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 303.293425][T14301] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 303.586077][T14365] bond8: option xmit_hash_policy: invalid value (10) [ 303.595428][T14365] bond8 (unregistering): Released all slaves [ 303.659067][T14371] sit0: left promiscuous mode [ 304.004410][T14371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.172248][T14371] veth1_virt_wifi: left allmulticast mode [ 304.274070][T14371] tipc: Resetting bearer [ 304.406390][T14371] team0: left promiscuous mode [ 304.411818][T14371] team0: left allmulticast mode [ 304.440137][T14371] macvtap1: left promiscuous mode [ 304.453991][T14371] xfrm1: left promiscuous mode [ 304.459695][T14371] xfrm1: left allmulticast mode [ 304.464890][T14371] vxcan2: left promiscuous mode [ 304.472219][T14371] hsr0: left promiscuous mode [ 304.510275][T14371] macvlan2: left promiscuous mode [ 304.515537][T14371] macvlan2: left allmulticast mode [ 304.522598][T14371] veth7: left promiscuous mode [ 304.530355][T14371] veth9: left promiscuous mode [ 304.537212][T14371] bond7: left promiscuous mode [ 304.569910][T14394] wg2: left promiscuous mode [ 304.574976][T14394] macvlan0: left promiscuous mode [ 304.581114][T14394] bond1: left promiscuous mode [ 304.586685][T14394] geneve2: left promiscuous mode [ 304.592343][T14394] bond6: left promiscuous mode [ 304.598717][T14394] bond7: left promiscuous mode [ 304.608935][ T60] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.618001][ T60] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.776581][ T60] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.785234][ T60] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.824343][ T60] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.844480][ T60] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.903632][T14405] SET target dimension over the limit! [ 304.961288][ T60] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.994662][ T60] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.374526][T14435] netlink: 'syz.2.2231': attribute type 13 has an invalid length. [ 306.249813][T14470] IPVS: fo: FWM 3 0x00000003 - no destination available [ 306.265752][T11856] IPVS: starting estimator thread 0... [ 306.378179][T14471] IPVS: using max 30 ests per chain, 72000 per kthread [ 306.942767][T14484] __nla_validate_parse: 9 callbacks suppressed [ 306.942786][T14484] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2244'. [ 307.049827][T14493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2247'. [ 307.354351][T14515] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2254'. [ 307.657426][T14531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2260'. [ 307.700622][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 307.713426][T14531] FAULT_INJECTION: forcing a failure. [ 307.713426][T14531] name failslab, interval 1, probability 0, space 0, times 0 [ 307.716365][T14539] Cannot find del_set index 2 as target [ 307.734650][T14531] CPU: 1 UID: 0 PID: 14531 Comm: syz.2.2260 Not tainted syzkaller #0 PREEMPT(full) [ 307.734676][T14531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.734701][T14531] Call Trace: [ 307.734708][T14531] [ 307.734718][T14531] dump_stack_lvl+0x189/0x250 [ 307.734750][T14531] ? __pfx____ratelimit+0x10/0x10 [ 307.734772][T14531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.734799][T14531] ? __pfx__printk+0x10/0x10 [ 307.734825][T14531] ? __pfx___might_resched+0x10/0x10 [ 307.734846][T14531] ? fs_reclaim_acquire+0x7d/0x100 [ 307.734869][T14531] should_fail_ex+0x414/0x560 [ 307.734905][T14531] should_failslab+0xa8/0x100 [ 307.734925][T14531] __kmalloc_noprof+0xcb/0x7f0 [ 307.734947][T14531] ? tomoyo_encode+0x28b/0x550 [ 307.734978][T14531] tomoyo_encode+0x28b/0x550 [ 307.735009][T14531] tomoyo_realpath_from_path+0x58d/0x5d0 [ 307.735038][T14531] ? tomoyo_domain+0xd9/0x130 [ 307.735060][T14531] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 307.735083][T14531] tomoyo_path_number_perm+0x1e8/0x5a0 [ 307.735110][T14531] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 307.735169][T14531] ? __fget_files+0x2a/0x420 [ 307.735191][T14531] ? __fget_files+0x3a0/0x420 [ 307.735207][T14531] ? __fget_files+0x2a/0x420 [ 307.735226][T14531] security_file_ioctl+0xcb/0x2d0 [ 307.735249][T14531] __se_sys_ioctl+0x47/0x170 [ 307.735274][T14531] do_syscall_64+0xfa/0xfa0 [ 307.735292][T14531] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.735312][T14531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.735338][T14531] ? clear_bhb_loop+0x60/0xb0 [ 307.735361][T14531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.735379][T14531] RIP: 0033:0x7f04e1d8f749 [ 307.735396][T14531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.735413][T14531] RSP: 002b:00007f04e2bcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.735432][T14531] RAX: ffffffffffffffda RBX: 00007f04e1fe5fa0 RCX: 00007f04e1d8f749 [ 307.735446][T14531] RDX: 0000200000000280 RSI: 000000000000890b RDI: 000000000000000b [ 307.735459][T14531] RBP: 00007f04e2bcb090 R08: 0000000000000000 R09: 0000000000000000 [ 307.735470][T14531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.735480][T14531] R13: 00007f04e1fe6038 R14: 00007f04e1fe5fa0 R15: 00007ffd9f016f98 [ 307.735512][T14531] [ 307.735533][T14531] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.279156][T14562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 308.472599][T14562] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.590047][T14555] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.646992][T14555] bond8: (slave sit1): The slave device specified does not support setting the MAC address [ 308.667374][T14555] bond8: (slave sit1): Error -95 calling set_mac_address [ 309.098372][T14602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2276'. [ 309.192438][T14606] FAULT_INJECTION: forcing a failure. [ 309.192438][T14606] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 309.206480][T14606] CPU: 0 UID: 0 PID: 14606 Comm: syz.4.2276 Not tainted syzkaller #0 PREEMPT(full) [ 309.206507][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.206520][T14606] Call Trace: [ 309.206528][T14606] [ 309.206538][T14606] dump_stack_lvl+0x189/0x250 [ 309.206569][T14606] ? __pfx____ratelimit+0x10/0x10 [ 309.206592][T14606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.206619][T14606] ? __pfx__printk+0x10/0x10 [ 309.206639][T14606] ? __might_fault+0xb0/0x130 [ 309.206679][T14606] should_fail_ex+0x414/0x560 [ 309.206713][T14606] _copy_from_user+0x2d/0xb0 [ 309.206739][T14606] nr_rt_ioctl+0x74f/0xd50 [ 309.206782][T14606] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 309.206808][T14606] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.206840][T14606] ? apparmor_capable+0x137/0x1b0 [ 309.206870][T14606] ? capable+0x89/0xe0 [ 309.206892][T14606] ? nr_ioctl+0x1b1/0x3b0 [ 309.206917][T14606] sock_do_ioctl+0xdc/0x300 [ 309.206949][T14606] ? __pfx_sock_do_ioctl+0x10/0x10 [ 309.206996][T14606] sock_ioctl+0x576/0x790 [ 309.207026][T14606] ? __pfx_sock_ioctl+0x10/0x10 [ 309.207057][T14606] ? __fget_files+0x3a0/0x420 [ 309.207075][T14606] ? __fget_files+0x2a/0x420 [ 309.207097][T14606] ? bpf_lsm_file_ioctl+0x9/0x20 [ 309.207120][T14606] ? __pfx_sock_ioctl+0x10/0x10 [ 309.207155][T14606] __se_sys_ioctl+0xfc/0x170 [ 309.207183][T14606] do_syscall_64+0xfa/0xfa0 [ 309.207205][T14606] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.207228][T14606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.207247][T14606] ? clear_bhb_loop+0x60/0xb0 [ 309.207271][T14606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.207290][T14606] RIP: 0033:0x7fc71058f749 [ 309.207309][T14606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.207326][T14606] RSP: 002b:00007fc7113ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.207347][T14606] RAX: ffffffffffffffda RBX: 00007fc7107e6090 RCX: 00007fc71058f749 [ 309.207362][T14606] RDX: 0000200000000280 RSI: 000000000000890b RDI: 000000000000000b [ 309.207375][T14606] RBP: 00007fc7113ad090 R08: 0000000000000000 R09: 0000000000000000 [ 309.207388][T14606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.207399][T14606] R13: 00007fc7107e6128 R14: 00007fc7107e6090 R15: 00007ffec163d698 [ 309.207433][T14606] [ 309.530689][T14612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'. [ 309.540273][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2279'. [ 309.550824][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2279'. [ 309.852144][T14627] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 310.003676][T14640] netlink: 'syz.1.2285': attribute type 1 has an invalid length. [ 310.040715][T14640] netlink: 'syz.1.2285': attribute type 3 has an invalid length. [ 310.359102][T14667] raw_sendmsg: syz.0.2294 forgot to set AF_INET. Fix it! [ 310.747504][T14696] sit0: entered promiscuous mode [ 310.754512][T14696] netlink: 'syz.4.2299': attribute type 1 has an invalid length. [ 311.102857][T14704] netlink: 'syz.4.2302': attribute type 11 has an invalid length. [ 311.114998][T14702] netlink: 'syz.2.2301': attribute type 11 has an invalid length. [ 311.127149][T14702] netlink: 'syz.2.2301': attribute type 11 has an invalid length. [ 311.221980][T14702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.308634][T14747] tunl0: Caught tx_queue_len zero misconfig [ 312.484329][T14750] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 312.914570][T14759] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.926373][T14759] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.926448][T14764] __nla_validate_parse: 18 callbacks suppressed [ 312.926462][T14764] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2321'. [ 313.087074][T14759] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.127077][T14759] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.396612][T14759] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.429399][T14759] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.535471][T14773] bond8: (slave tunl0): Device is not bonding slave [ 313.543783][T14773] bond8: option active_slave: invalid value (tunl0) [ 313.572839][T14773] bond8 (unregistering): Released all slaves [ 313.840198][T14759] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.871954][T14759] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.130180][T14815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2332'. [ 314.381332][T14821] xt_TCPMSS: Only works on TCP SYN packets [ 315.982323][ T42] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.994599][ T42] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.083634][ T42] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.092865][ T42] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.107572][T14845] netlink: 'syz.0.2337': attribute type 33 has an invalid length. [ 316.117379][T14845] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2337'. [ 316.148066][ T42] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.156349][ T42] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.167066][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2337'. [ 316.176754][ T42] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.176790][ T42] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.240668][T14845] sctp: [Deprecated]: syz.0.2337 (pid 14845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 316.240668][T14845] Use struct sctp_sack_info instead [ 316.292899][T14845] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2337'. [ 316.856960][T14884] tipc: Enabled bearer , priority 0 [ 316.876829][T14884] syzkaller0: entered promiscuous mode [ 316.887989][T14884] syzkaller0: entered allmulticast mode [ 316.957138][T14884] tipc: Resetting bearer [ 316.991922][T14889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 317.039147][T14889] x_tables: duplicate underflow at hook 2 [ 317.115405][T14892] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2351'. [ 317.135442][T14883] tipc: Resetting bearer [ 317.172846][T14883] tipc: Disabling bearer [ 317.188537][T14894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2352'. [ 317.198164][T14894] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2352'. [ 317.207623][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.215573][T14896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2353'. [ 317.217129][T14894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2352'. [ 317.790091][T14936] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 317.831940][T14936] bridge4: entered allmulticast mode [ 318.343005][T14962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.642182][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 430.460712][T14974] __nla_validate_parse: 1 callbacks suppressed [ 430.460732][T14974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2374'. [ 430.499369][T14974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2374'. [ 430.636357][T14981] syz.0.2371 (14981) used obsolete PPPIOCDETACH ioctl [ 430.716686][T14977] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2371'. [ 431.184839][T14997] bond3: option packets_per_slave: invalid value (1048582) [ 431.192406][T14997] bond3: option packets_per_slave: allowed values 0 - 65535 [ 431.203085][T14997] bond3 (unregistering): Released all slaves [ 431.584980][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2383'. [ 431.671230][T15006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2383'. [ 431.673810][T15008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 431.682069][T15010] x_tables: ip_tables: ah match: only valid for protocol 51 [ 431.744307][T15010] netlink: 'syz.2.2384': attribute type 13 has an invalid length. [ 431.986421][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2386'. [ 432.056241][T15017] netlink: 'syz.1.2387': attribute type 9 has an invalid length. [ 432.070912][T15017] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2387'. [ 432.086614][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2388'. [ 432.145030][T15022] sctp: [Deprecated]: syz.1.2387 (pid 15022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.145030][T15022] Use struct sctp_sack_info instead [ 432.286822][T15029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2391'. [ 432.345817][T15029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 432.545437][T15039] lo: Caught tx_queue_len zero misconfig [ 432.564644][T15041] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 433.359729][T15070] netlink: 'syz.3.2404': attribute type 21 has an invalid length. [ 433.445246][T15075] x_tables: duplicate underflow at hook 1 [ 434.570554][ T30] audit: type=1800 audit(1764293062.122:3): pid=15126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2416" name="memory.events" dev="tmpfs" ino=2574 res=0 errno=0 [ 434.598691][T15152] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 434.842285][T15162] netlink: 'syz.3.2425': attribute type 13 has an invalid length. [ 434.865067][T15162] netlink: 'syz.3.2425': attribute type 17 has an invalid length. [ 435.332403][T15185] tipc: Enabled bearer , priority 0 [ 435.347640][T15185] syzkaller0: entered promiscuous mode [ 435.356244][T15185] syzkaller0: entered allmulticast mode [ 435.547651][T15185] tipc: Resetting bearer [ 435.576341][T15184] tipc: Resetting bearer [ 435.651142][T15184] tipc: Disabling bearer [ 435.727846][T15203] __nla_validate_parse: 19 callbacks suppressed [ 435.727866][T15203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2436'. [ 435.838245][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2435'. [ 436.006070][T15220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2440'. [ 436.023614][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 436.046910][T15220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 436.199031][T15236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2445'. [ 436.237157][ T30] audit: type=1107 audit(1764293063.782:4): pid=15231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 436.373398][T15237] : entered promiscuous mode [ 436.410054][T15240] syzkaller1: entered promiscuous mode [ 436.415584][T15240] syzkaller1: entered allmulticast mode [ 436.429509][T15251] netlink: 'syz.0.2447': attribute type 29 has an invalid length. [ 436.615481][T15260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2449'. [ 436.638838][ T5833] Bluetooth: hci0: command tx timeout [ 436.674220][T15260] 8021q: adding VLAN 0 to HW filter on device bond4 [ 436.953430][T15268] xt_CT: No such helper "netbios-ns" [ 436.967031][T15278] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2454'. [ 437.033060][T15280] syzkaller0: entered promiscuous mode [ 437.041571][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 437.046115][T15280] syzkaller0: entered allmulticast mode [ 437.134199][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2457'. [ 437.143619][T15284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2457'. [ 437.212748][T15286] netlink: 'syz.4.2458': attribute type 1 has an invalid length. [ 437.788331][T15317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.342650][T15377] netlink: 'syz.2.2480': attribute type 10 has an invalid length. [ 439.362824][T15377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.380309][T15377] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 439.512489][T15394] syzkaller1: entered promiscuous mode [ 439.552277][T15394] syzkaller1: entered allmulticast mode [ 440.023600][T15422] netlink: 'syz.4.2492': attribute type 1 has an invalid length. [ 440.088130][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.183114][T15422] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 440.239584][T15422] bond11: (slave vxcan5): Error -95 calling set_mac_address [ 440.341222][T15441] macvlan3: entered promiscuous mode [ 440.352334][T15441] macvlan3: entered allmulticast mode [ 440.390974][T15441] bond11: entered promiscuous mode [ 440.422674][T15441] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 440.594991][T15441] bond11: left promiscuous mode [ 440.662860][T15436] bond11: (slave bridge4): Enslaving as an active interface with a down link [ 440.694755][T15437] bond11: (slave bridge5): Enslaving as an active interface with a down link [ 440.942246][T15459] netlink: 'syz.1.2498': attribute type 25 has an invalid length. [ 440.953922][T15459] netlink: 'syz.1.2498': attribute type 7 has an invalid length. [ 441.153649][T15465] syzkaller0: entered promiscuous mode [ 441.160973][T15465] syzkaller0: entered allmulticast mode [ 441.183939][T15473] netlink: 'syz.4.2501': attribute type 4 has an invalid length. [ 441.199247][T15465] __nla_validate_parse: 7 callbacks suppressed [ 441.199265][T15465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2500'. [ 441.369720][T15480] pim6reg1: entered promiscuous mode [ 441.379887][T15480] pim6reg1: entered allmulticast mode [ 441.650900][T15499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2509'. [ 441.707428][T15502] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 442.072043][T15522] ip6tnl2: entered promiscuous mode [ 442.081178][T15522] tipc: Enabled bearer , priority 10 [ 442.175335][T15525] bond5: entered promiscuous mode [ 442.180594][T15525] bond5: entered allmulticast mode [ 442.186963][T15525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 442.246349][T15529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2516'. [ 442.326366][T15525] bond5 (unregistering): Released all slaves [ 442.435917][T15533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2518'. [ 442.498603][T15535] xt_limit: Overflow, try lower: 271964/0 [ 442.505703][T15535] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2519'. [ 442.527492][T15537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2520'. [ 442.536752][T15537] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2520'. [ 442.549343][T15535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2519'. [ 442.659974][T15540] nbd: device at index 3 is going down [ 442.661296][T15542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2522'. [ 442.930674][T15558] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2527'. [ 443.230302][ T7004] tipc: Node number set to 1974785794 [ 443.535523][T15586] syzkaller0: entered promiscuous mode [ 443.547548][T15586] syzkaller0: entered allmulticast mode [ 443.577149][T15582] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 50849 - 0 [ 443.644741][T15582] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 50849 - 0 [ 443.704005][T15582] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 50849 - 0 [ 443.774948][T15582] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 50849 - 0 [ 443.923826][T15597] tipc: Enabling of bearer rejected, failed to enable media [ 443.971139][T15596] netlink: 'syz.3.2535': attribute type 39 has an invalid length. [ 444.077044][T15601] FAULT_INJECTION: forcing a failure. [ 444.077044][T15601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.091380][T15601] CPU: 0 UID: 0 PID: 15601 Comm: syz.0.2538 Not tainted syzkaller #0 PREEMPT(full) [ 444.091407][T15601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 444.091422][T15601] Call Trace: [ 444.091430][T15601] [ 444.091439][T15601] dump_stack_lvl+0x189/0x250 [ 444.091469][T15601] ? __pfx____ratelimit+0x10/0x10 [ 444.091492][T15601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.091518][T15601] ? __pfx__printk+0x10/0x10 [ 444.091537][T15601] ? __might_fault+0xb0/0x130 [ 444.091572][T15601] should_fail_ex+0x414/0x560 [ 444.091606][T15601] _copy_from_user+0x2d/0xb0 [ 444.091632][T15601] ___sys_sendmsg+0x158/0x2a0 [ 444.091660][T15601] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.091716][T15601] ? __fget_files+0x2a/0x420 [ 444.091734][T15601] ? __fget_files+0x3a0/0x420 [ 444.091761][T15601] __x64_sys_sendmsg+0x19b/0x260 [ 444.091787][T15601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 444.091818][T15601] ? __pfx_ksys_write+0x10/0x10 [ 444.091846][T15601] ? do_syscall_64+0xbe/0xfa0 [ 444.091868][T15601] do_syscall_64+0xfa/0xfa0 [ 444.091887][T15601] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.091909][T15601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.091929][T15601] ? clear_bhb_loop+0x60/0xb0 [ 444.091952][T15601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.091976][T15601] RIP: 0033:0x7f2d53b8f749 [ 444.091994][T15601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.092012][T15601] RSP: 002b:00007f2d549ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.092034][T15601] RAX: ffffffffffffffda RBX: 00007f2d53de5fa0 RCX: 00007f2d53b8f749 [ 444.092048][T15601] RDX: 0000000004000010 RSI: 0000200000004580 RDI: 0000000000000004 [ 444.092061][T15601] RBP: 00007f2d549ad090 R08: 0000000000000000 R09: 0000000000000000 [ 444.092103][T15601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.092115][T15601] R13: 00007f2d53de6038 R14: 00007f2d53de5fa0 R15: 00007ffd955c08c8 [ 444.092147][T15601] [ 444.092212][T15109] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 50849 - 0 [ 444.342834][T15108] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 50849 - 0 [ 444.396605][T15108] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 50849 - 0 [ 444.466831][T15108] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 50849 - 0 [ 445.149749][T15649] FAULT_INJECTION: forcing a failure. [ 445.149749][T15649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.163089][T15649] CPU: 0 UID: 0 PID: 15649 Comm: syz.4.2550 Not tainted syzkaller #0 PREEMPT(full) [ 445.163113][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 445.163124][T15649] Call Trace: [ 445.163131][T15649] [ 445.163139][T15649] dump_stack_lvl+0x189/0x250 [ 445.163171][T15649] ? __pfx____ratelimit+0x10/0x10 [ 445.163191][T15649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.163214][T15649] ? __pfx__printk+0x10/0x10 [ 445.163244][T15649] should_fail_ex+0x414/0x560 [ 445.163274][T15649] _copy_from_user+0x2d/0xb0 [ 445.163297][T15649] __copy_msghdr+0x3c5/0x5b0 [ 445.163323][T15649] ___sys_sendmsg+0x1a5/0x2a0 [ 445.163347][T15649] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.163407][T15649] ? __fget_files+0x2a/0x420 [ 445.163435][T15649] ? __fget_files+0x3a0/0x420 [ 445.163464][T15649] __x64_sys_sendmsg+0x19b/0x260 [ 445.163492][T15649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.163526][T15649] ? __pfx_ksys_write+0x10/0x10 [ 445.163558][T15649] ? do_syscall_64+0xbe/0xfa0 [ 445.163586][T15649] do_syscall_64+0xfa/0xfa0 [ 445.163607][T15649] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.163629][T15649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.163649][T15649] ? clear_bhb_loop+0x60/0xb0 [ 445.163673][T15649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.163692][T15649] RIP: 0033:0x7fc71058f749 [ 445.163711][T15649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.163728][T15649] RSP: 002b:00007fc7113ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.163750][T15649] RAX: ffffffffffffffda RBX: 00007fc7107e6090 RCX: 00007fc71058f749 [ 445.163765][T15649] RDX: 0000000004000010 RSI: 0000200000004580 RDI: 0000000000000004 [ 445.163777][T15649] RBP: 00007fc7113ad090 R08: 0000000000000000 R09: 0000000000000000 [ 445.163788][T15649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.163799][T15649] R13: 00007fc7107e6128 R14: 00007fc7107e6090 R15: 00007ffec163d698 [ 445.163827][T15649] [ 446.842795][T15655] Bluetooth: MGMT ver 1.23 [ 446.990003][T15679] __nla_validate_parse: 2 callbacks suppressed [ 446.990024][T15679] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2560'. [ 447.027837][T15679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2560'. [ 447.262000][T15694] FAULT_INJECTION: forcing a failure. [ 447.262000][T15694] name failslab, interval 1, probability 0, space 0, times 0 [ 447.300830][T15694] CPU: 1 UID: 0 PID: 15694 Comm: syz.1.2563 Not tainted syzkaller #0 PREEMPT(full) [ 447.300858][T15694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.300870][T15694] Call Trace: [ 447.300878][T15694] [ 447.300887][T15694] dump_stack_lvl+0x189/0x250 [ 447.300919][T15694] ? __pfx____ratelimit+0x10/0x10 [ 447.300942][T15694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.300968][T15694] ? __pfx__printk+0x10/0x10 [ 447.300991][T15694] ? __pfx___might_resched+0x10/0x10 [ 447.301013][T15694] ? fs_reclaim_acquire+0x7d/0x100 [ 447.301037][T15694] should_fail_ex+0x414/0x560 [ 447.301073][T15694] should_failslab+0xa8/0x100 [ 447.301095][T15694] kmem_cache_alloc_node_noprof+0x77/0x710 [ 447.301122][T15694] ? __alloc_skb+0x255/0x430 [ 447.301142][T15694] ? napi_skb_cache_get+0x4a5/0x790 [ 447.301161][T15694] ? napi_skb_cache_get+0x151/0x790 [ 447.301186][T15694] __alloc_skb+0x255/0x430 [ 447.301210][T15694] ? __pfx___alloc_skb+0x10/0x10 [ 447.301238][T15694] ? ns_capable+0x8a/0xf0 [ 447.301265][T15694] netlink_sendmsg+0x5c6/0xb30 [ 447.301301][T15694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.301328][T15694] ? __lock_acquire+0xab9/0xd20 [ 447.301346][T15694] ? aa_sock_msg_perm+0xf1/0x1d0 [ 447.301377][T15694] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.301397][T15694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.301424][T15694] __sock_sendmsg+0x21c/0x270 [ 447.301456][T15694] ____sys_sendmsg+0x505/0x830 [ 447.301486][T15694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.301519][T15694] ? import_iovec+0x74/0xa0 [ 447.301547][T15694] ___sys_sendmsg+0x21f/0x2a0 [ 447.301574][T15694] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.301637][T15694] ? __fget_files+0x2a/0x420 [ 447.301655][T15694] ? __fget_files+0x3a0/0x420 [ 447.301685][T15694] __x64_sys_sendmsg+0x19b/0x260 [ 447.301713][T15694] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.301748][T15694] ? __pfx_ksys_write+0x10/0x10 [ 447.301780][T15694] ? do_syscall_64+0xbe/0xfa0 [ 447.301808][T15694] do_syscall_64+0xfa/0xfa0 [ 447.301830][T15694] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.301853][T15694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.301872][T15694] ? clear_bhb_loop+0x60/0xb0 [ 447.301896][T15694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.301916][T15694] RIP: 0033:0x7fe889f8f749 [ 447.301934][T15694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.301951][T15694] RSP: 002b:00007fe88ae93038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.301971][T15694] RAX: ffffffffffffffda RBX: 00007fe88a1e5fa0 RCX: 00007fe889f8f749 [ 447.301986][T15694] RDX: 0000000004000010 RSI: 0000200000004580 RDI: 0000000000000004 [ 447.302000][T15694] RBP: 00007fe88ae93090 R08: 0000000000000000 R09: 0000000000000000 [ 447.302012][T15694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.302024][T15694] R13: 00007fe88a1e6038 R14: 00007fe88a1e5fa0 R15: 00007fff9190fe58 [ 447.302058][T15694] [ 447.822067][T15709] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 447.920496][T15715] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2567'. [ 447.962972][T15715] ip6erspan0: entered allmulticast mode [ 448.203421][T15727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2569'. [ 448.771021][T15741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.898392][ T5831] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 448.908505][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 448.990614][T15744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2574'. [ 449.111275][T15744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2574'. [ 449.570332][T15757] vxcan3: entered allmulticast mode [ 450.309470][T15779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2582'. [ 450.551781][T15790] netlink: 'syz.0.2581': attribute type 1 has an invalid length. [ 450.582762][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2584'. [ 451.358008][T15807] IPv6: addrconf: prefix option has invalid lifetime [ 451.358008][T15806] IPv6: addrconf: prefix option has invalid lifetime [ 452.182402][T15826] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 452.765280][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2600'. [ 453.649671][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2606'. [ 453.963640][T15899] netlink: 'syz.1.2613': attribute type 39 has an invalid length. [ 454.031132][T15903] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 454.044379][T15903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2614'. [ 454.061567][T15903] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 454.134930][T15899] hsr_slave_1 (unregistering): left promiscuous mode [ 454.452896][T15926] netlink: 'syz.4.2615': attribute type 1 has an invalid length. [ 454.566367][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2622'. [ 454.664260][T15930] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2621'. [ 454.890916][T15940] netlink: 'syz.0.2625': attribute type 1 has an invalid length. [ 454.949757][T15944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2627'. [ 454.992224][T15944] batman_adv: batadv0: Removing interface: wlan0 [ 455.307053][T15956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2632'. [ 455.347804][T15956] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2632'. [ 455.370978][T15962] bond0: Caught tx_queue_len zero misconfig [ 456.201948][T15972] mpoa:mpoad_close: () going down [ 457.045443][T16015] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 457.742443][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2651'. [ 457.766323][T16059] netlink: 'syz.2.2656': attribute type 9 has an invalid length. [ 457.945987][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2657'. [ 458.243345][T16079] Can't find ip_set type hash:ip$mec [ 458.264515][T16086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2663'. [ 458.304398][T16086] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2663'. [ 458.471927][T16092] netlink: 'syz.3.2665': attribute type 1 has an invalid length. [ 458.606892][T16092] 8021q: adding VLAN 0 to HW filter on device bond9 [ 458.640871][T16097] bond9: (slave geneve3): making interface the new active one [ 458.649933][T16097] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 458.717255][T16099] 8021q: adding VLAN 0 to HW filter on device bond5 [ 458.725099][T15107] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.820638][T15107] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.852803][T15107] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.931385][T15107] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.147516][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'. [ 459.335366][T16126] xfrm0: entered promiscuous mode [ 459.358468][T16126] xfrm0: entered allmulticast mode [ 459.586827][T16136] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2675'. [ 459.598713][T16136] unsupported nla_type 540 [ 460.672843][T16179] x_tables: duplicate underflow at hook 2 [ 460.693309][T16181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2688'. [ 460.775395][T16189] macsec2: entered promiscuous mode [ 460.788202][T16189] bridge0: entered promiscuous mode [ 460.872568][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2692'. [ 460.940854][T16204] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2692'. [ 461.043160][T16206] atomic_op ffff88805445d198 conn xmit_atomic 0000000000000000 [ 461.265901][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2697'. [ 461.292307][T16224] geneve0: entered allmulticast mode [ 461.373681][T16223] tipc: Disabling bearer [ 461.393998][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2698'. [ 461.415361][T16231] netlink: 'syz.2.2699': attribute type 5 has an invalid length. [ 461.424211][T16231] netlink: 'syz.2.2699': attribute type 21 has an invalid length. [ 461.556400][T16241] x_tables: duplicate underflow at hook 2 [ 461.997518][T16261] xt_CT: No such helper "netbios-ns" [ 462.053521][T16274] bond10: option arp_validate: invalid value (18446744073491447809) [ 462.064292][T16274] bond10 (unregistering): Released all slaves [ 462.093589][T16262] netlink: 'syz.3.2711': attribute type 13 has an invalid length. [ 462.181352][ T152] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.190765][ T152] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.208574][ T152] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.216984][ T152] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.456467][T16295] veth0_vlan: entered allmulticast mode [ 463.528981][T16358] __nla_validate_parse: 6 callbacks suppressed [ 463.529001][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2732'. [ 464.549700][T16409] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2746'. [ 464.571669][T16409] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2746'. [ 464.583187][T16409] netlink: 'syz.3.2746': attribute type 11 has an invalid length. [ 464.591874][T16409] netlink: 'syz.3.2746': attribute type 11 has an invalid length. [ 464.608860][T16409] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2746'. [ 464.798652][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 464.833721][T16428] ip6tnl0: Caught tx_queue_len zero misconfig [ 464.919713][T16435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2755'. [ 464.931568][T16435] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2755'. [ 464.939146][T16437] vlan0: entered allmulticast mode [ 464.942819][T16435] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2755'. [ 464.947872][T16437] bridge_slave_0: entered allmulticast mode [ 465.008899][T16442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2757'. [ 465.039905][T16445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2752'. [ 465.080196][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2758'. [ 465.108147][T16449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.397222][T16468] netlink: 'syz.0.2763': attribute type 29 has an invalid length. [ 465.498915][T16472] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 465.641431][T16479] netlink: 'syz.0.2768': attribute type 2 has an invalid length. [ 465.650618][T16479] netlink: 'syz.0.2768': attribute type 2 has an invalid length. [ 466.381423][T16515] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 466.645667][T16507] netlink: 'syz.0.2773': attribute type 1 has an invalid length. [ 467.013780][ T30] audit: type=1800 audit(1764293094.562:5): pid=16523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2777" name="memory.events" dev="tmpfs" ino=958 res=0 errno=0 [ 467.080606][T16546] x_tables: duplicate underflow at hook 2 [ 467.204430][T16561] netlink: 'syz.4.2788': attribute type 1 has an invalid length. [ 467.648344][T16584] netlink: 'syz.0.2794': attribute type 1 has an invalid length. [ 467.686002][T16584] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 467.830391][T16587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.873152][T16587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.194702][T16612] x_tables: duplicate underflow at hook 2 [ 468.754050][T16637] netlink: 'syz.0.2807': attribute type 1 has an invalid length. [ 468.790678][T16637] 8021q: adding VLAN 0 to HW filter on device bond8 [ 468.809699][T16637] __nla_validate_parse: 12 callbacks suppressed [ 468.809720][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2807'. [ 468.834684][T16637] bond8: (slave geneve0): making interface the new active one [ 468.843415][T16637] bond8: (slave geneve0): Enslaving as an active interface with an up link [ 468.873729][ T152] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.882366][ T152] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.907343][ T152] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.919825][ T152] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.569198][T16672] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2815'. [ 469.611414][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 469.641726][T16672] bond0: left promiscuous mode [ 469.661346][T16672] bond_slave_0: left promiscuous mode [ 469.666990][T16672] bond_slave_1: left promiscuous mode [ 469.695737][T16672] dummy0: left promiscuous mode [ 469.708788][T16672] geneve0: left promiscuous mode [ 469.743476][T16685] tipc: Enabled bearer , priority 0 [ 469.756140][T16685] syzkaller0: entered promiscuous mode [ 469.762286][T16685] syzkaller0: entered allmulticast mode [ 469.803264][T16681] geneve3: entered promiscuous mode [ 469.813044][T16685] tipc: Resetting bearer [ 469.830271][T15116] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.850707][T15116] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.862917][T16684] tipc: Resetting bearer [ 469.908942][T16684] tipc: Disabling bearer [ 469.922663][T15116] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 469.930130][T16694] sctp: [Deprecated]: syz.2.2821 (pid 16694) Use of int in maxseg socket option. [ 469.930130][T16694] Use struct sctp_assoc_value instead [ 469.945498][T15116] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 470.129588][T16703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2824'. [ 470.437988][T16722] netlink: 'syz.2.2830': attribute type 10 has an invalid length. [ 470.570211][T16722] team0: Device veth0_vlan failed to register rx_handler [ 470.822778][T16736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2834'. [ 471.203809][T16751] syzkaller1: entered promiscuous mode [ 471.217622][T16751] syzkaller1: entered allmulticast mode [ 471.289799][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2839'. [ 471.682745][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2845'. [ 471.880539][T16806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'. [ 471.892380][T16806] veth1_to_batadv: entered promiscuous mode [ 472.625518][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2852'. [ 472.672416][T16833] netlink: 'syz.4.2852': attribute type 1 has an invalid length. [ 472.827903][T16833] bond13: entered promiscuous mode [ 472.833571][T16833] 8021q: adding VLAN 0 to HW filter on device bond13 [ 472.873879][T16833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2852'. [ 472.937087][T16844] 8021q: adding VLAN 0 to HW filter on device bond13 [ 473.012045][T16844] bond13: (slave gre2): The slave device specified does not support setting the MAC address [ 473.036135][T16854] netlink: 'syz.1.2855': attribute type 1 has an invalid length. [ 473.052286][T16844] bond13: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 473.089962][T16844] bond13: (slave gre2): Opening slave failed [ 473.191694][T16854] 8021q: adding VLAN 0 to HW filter on device bond9 [ 473.242663][T16865] netlink: 'syz.2.2858': attribute type 1 has an invalid length. [ 473.442989][T16877] tipc: Enabled bearer , priority 0 [ 473.474247][T16877] syzkaller0: entered promiscuous mode [ 473.489979][T16877] syzkaller0: entered allmulticast mode [ 473.634290][T16877] tipc: Resetting bearer [ 473.748732][T16875] tipc: Resetting bearer [ 473.793996][T16875] tipc: Disabling bearer [ 473.857438][T16892] __nla_validate_parse: 1 callbacks suppressed [ 473.857456][T16892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2865'. [ 473.879241][T16893] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2865'. [ 474.056739][T16900] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2867'. [ 474.067429][T16900] netlink: 'syz.4.2867': attribute type 4 has an invalid length. [ 474.219818][T16903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'. [ 474.319165][T16910] nftables ruleset with unbound set [ 474.543342][T16921] batadv_slave_0: left promiscuous mode [ 474.594298][T16921] xfrm0: left promiscuous mode [ 474.601439][T16921] xfrm0: left allmulticast mode [ 474.607417][T16921] veth1_virt_wifi: left allmulticast mode [ 474.615940][T16921] veth0_vlan: left allmulticast mode [ 474.626178][T16921] geneve0: left allmulticast mode [ 474.633673][T16921] team1: left promiscuous mode [ 474.639639][T16921] team1: left allmulticast mode [ 474.645226][T16921] vlan2: left allmulticast mode [ 474.651422][T16921] dummy0: left allmulticast mode [ 474.657016][T16926] netlink: 'syz.3.2873': attribute type 15 has an invalid length. [ 474.666298][T16921] bond2: left promiscuous mode [ 474.672107][T16921] wireguard0: left promiscuous mode [ 474.681437][T16921] bond3: left promiscuous mode [ 474.686402][T16921] bond4: left promiscuous mode [ 474.702021][T16921] bridge4: left allmulticast mode [ 475.074596][T16940] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2877'. [ 475.217167][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2879'. [ 475.236674][T16948] macvlan0: entered promiscuous mode [ 475.324172][T16953] netlink: 'syz.2.2880': attribute type 1 has an invalid length. [ 475.351149][T16953] netlink: 'syz.2.2880': attribute type 2 has an invalid length. [ 475.468900][ T30] audit: type=1804 audit(1764293103.012:6): pid=16956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2881" name="/newroot/577/cgroup.controllers" dev="tmpfs" ino=2981 res=1 errno=0 [ 475.537436][ T30] audit: type=1800 audit(1764293103.012:7): pid=16956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2881" name="cgroup.controllers" dev="tmpfs" ino=2981 res=0 errno=0 [ 475.610333][ T30] audit: type=1800 audit(1764293103.012:8): pid=16956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2881" name="cgroup.controllers" dev="tmpfs" ino=2981 res=0 errno=0 [ 475.788401][T16980] netlink: zone id is out of range [ 475.793694][T16980] netlink: zone id is out of range [ 475.804598][T16980] netlink: zone id is out of range [ 475.819390][T16980] netlink: zone id is out of range [ 475.831017][T16980] netlink: zone id is out of range [ 475.836312][T16980] netlink: zone id is out of range [ 475.857540][T16980] netlink: zone id is out of range [ 475.867442][T16980] netlink: zone id is out of range [ 476.131191][T16998] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2893'. [ 476.164468][T16998] netlink: 'syz.0.2893': attribute type 1 has an invalid length. [ 476.218935][T16998] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 476.229773][T16998] bond9: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 476.246264][T16998] bond9: (slave vcan1): making interface the new active one [ 476.260939][T16998] bond9: (slave vcan1): Enslaving as an active interface with an up link [ 476.274694][T16998] netlink: 296 bytes leftover after parsing attributes in process `syz.0.2893'. [ 476.319458][T16998] bond9: (slave vcan2): The slave device specified does not support setting the MAC address [ 476.334167][T16998] bond9: (slave vcan2): Enslaving as a backup interface with an up link [ 476.354561][T17018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2899'. [ 476.366986][T16998] 8021q: adding VLAN 0 to HW filter on device bond9 [ 476.728140][ T30] audit: type=1800 audit(1764293104.272:9): pid=17036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2902" name="memory.events" dev="tmpfs" ino=2884 res=0 errno=0 [ 476.929793][T17051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2904'. [ 477.222666][T17056] tap0: tun_chr_ioctl cmd 2148553947 [ 477.237853][T17047] tap0: tun_chr_ioctl cmd 2147767521 [ 477.374383][T17060] veth0: entered promiscuous mode [ 477.433908][T17060] veth0 (unregistering): left promiscuous mode [ 477.543136][T17064] tipc: Enabled bearer , priority 0 [ 477.648359][T17064] syzkaller0: entered promiscuous mode [ 477.653874][T17064] syzkaller0: entered allmulticast mode [ 477.851205][T17080] bond6: entered promiscuous mode [ 477.877469][T17080] 8021q: adding VLAN 0 to HW filter on device bond6 [ 477.896316][T17064] tipc: Resetting bearer [ 477.928948][T17063] tipc: Resetting bearer [ 478.005640][T17063] tipc: Disabling bearer [ 478.029518][T17074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.208610][T17101] FAULT_INJECTION: forcing a failure. [ 478.208610][T17101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.278033][T17101] CPU: 1 UID: 0 PID: 17101 Comm: syz.2.2915 Not tainted syzkaller #0 PREEMPT(full) [ 478.278061][T17101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.278073][T17101] Call Trace: [ 478.278080][T17101] [ 478.278089][T17101] dump_stack_lvl+0x189/0x250 [ 478.278120][T17101] ? __pfx____ratelimit+0x10/0x10 [ 478.278139][T17101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.278166][T17101] ? __pfx__printk+0x10/0x10 [ 478.278186][T17101] ? __might_fault+0xb0/0x130 [ 478.278226][T17101] should_fail_ex+0x414/0x560 [ 478.278258][T17101] _copy_from_user+0x2d/0xb0 [ 478.278285][T17101] ___sys_sendmsg+0x158/0x2a0 [ 478.278309][T17101] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.278368][T17101] ? __fget_files+0x2a/0x420 [ 478.278387][T17101] ? __fget_files+0x3a0/0x420 [ 478.278414][T17101] __x64_sys_sendmsg+0x19b/0x260 [ 478.278439][T17101] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.278471][T17101] ? __pfx_ksys_write+0x10/0x10 [ 478.278503][T17101] ? do_syscall_64+0xbe/0xfa0 [ 478.278530][T17101] do_syscall_64+0xfa/0xfa0 [ 478.278550][T17101] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.278571][T17101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.278596][T17101] ? clear_bhb_loop+0x60/0xb0 [ 478.278617][T17101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.278635][T17101] RIP: 0033:0x7f04e1d8f749 [ 478.278653][T17101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.278671][T17101] RSP: 002b:00007f04e2baa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.278690][T17101] RAX: ffffffffffffffda RBX: 00007f04e1fe6090 RCX: 00007f04e1d8f749 [ 478.278702][T17101] RDX: 0000000000002000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 478.278714][T17101] RBP: 00007f04e2baa090 R08: 0000000000000000 R09: 0000000000000000 [ 478.278726][T17101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.278738][T17101] R13: 00007f04e1fe6128 R14: 00007f04e1fe6090 R15: 00007ffd9f016f98 [ 478.278770][T17101] [ 478.493328][T17106] netlink: 'syz.4.2919': attribute type 5 has an invalid length. [ 478.511414][ T30] audit: type=1800 audit(1764293106.062:10): pid=17107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2918" name="5" dev="tmpfs" ino=2906 res=0 errno=0 [ 478.609162][T17109] tipc: Enabled bearer , priority 0 [ 478.616493][T17110] syzkaller0: entered promiscuous mode [ 478.623585][T17110] syzkaller0: entered allmulticast mode [ 478.664147][T17110] tipc: Resetting bearer [ 478.673626][T17108] delete_channel: no stack [ 478.681256][T17108] tipc: Resetting bearer [ 478.699280][T17108] tipc: Disabling bearer [ 478.912246][T17126] __nla_validate_parse: 7 callbacks suppressed [ 478.912265][T17126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2925'. [ 478.929456][T17126] netlink: 'syz.0.2925': attribute type 58 has an invalid length. [ 478.937373][T17126] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2925'. [ 479.214383][T17141] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2930'. [ 479.455934][T17148] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2932'. [ 479.584668][T17161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2936'. [ 479.597238][T17161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2936'. [ 479.666733][T17163] FAULT_INJECTION: forcing a failure. [ 479.666733][T17163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.681359][T17163] CPU: 0 UID: 0 PID: 17163 Comm: syz.4.2937 Not tainted syzkaller #0 PREEMPT(full) [ 479.681386][T17163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.681399][T17163] Call Trace: [ 479.681407][T17163] [ 479.681416][T17163] dump_stack_lvl+0x189/0x250 [ 479.681447][T17163] ? __pfx____ratelimit+0x10/0x10 [ 479.681469][T17163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.681507][T17163] ? __pfx__printk+0x10/0x10 [ 479.681543][T17163] should_fail_ex+0x414/0x560 [ 479.681578][T17163] _copy_from_user+0x2d/0xb0 [ 479.681604][T17163] __copy_msghdr+0x3c5/0x5b0 [ 479.681633][T17163] ___sys_sendmsg+0x1a5/0x2a0 [ 479.681660][T17163] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.681719][T17163] ? __fget_files+0x2a/0x420 [ 479.681738][T17163] ? __fget_files+0x3a0/0x420 [ 479.681770][T17163] __x64_sys_sendmsg+0x19b/0x260 [ 479.681797][T17163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.681832][T17163] ? __pfx_ksys_write+0x10/0x10 [ 479.681863][T17163] ? do_syscall_64+0xbe/0xfa0 [ 479.681890][T17163] do_syscall_64+0xfa/0xfa0 [ 479.681911][T17163] ? lockdep_hardirqs_on+0x9c/0x150 [ 479.681932][T17163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.681950][T17163] ? clear_bhb_loop+0x60/0xb0 [ 479.681974][T17163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.681993][T17163] RIP: 0033:0x7fc71058f749 [ 479.682010][T17163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.682027][T17163] RSP: 002b:00007fc7113ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.682049][T17163] RAX: ffffffffffffffda RBX: 00007fc7107e5fa0 RCX: 00007fc71058f749 [ 479.682063][T17163] RDX: 0000000000002000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 479.682076][T17163] RBP: 00007fc7113ce090 R08: 0000000000000000 R09: 0000000000000000 [ 479.682088][T17163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.682100][T17163] R13: 00007fc7107e6038 R14: 00007fc7107e5fa0 R15: 00007ffec163d698 [ 479.682133][T17163] [ 479.916486][T17166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2938'. [ 480.244353][T17189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2945'. [ 480.309737][T17193] erspan0: entered allmulticast mode [ 480.872685][T17217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2955'. [ 480.952229][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2955'. [ 481.030936][T17226] netlink: 'syz.4.2955': attribute type 4 has an invalid length. [ 481.049467][T17226] netlink: 'syz.4.2955': attribute type 4 has an invalid length. [ 481.121019][T17234] netlink: 'syz.0.2960': attribute type 13 has an invalid length. [ 481.131436][T17234] netlink: 'syz.0.2960': attribute type 11 has an invalid length. [ 481.323722][T17245] syzkaller0: entered promiscuous mode [ 481.342102][T17245] syzkaller0: entered allmulticast mode [ 481.576100][T17262] macvtap1: entered promiscuous mode [ 481.587828][T17262] erspan0: entered promiscuous mode [ 481.601586][T17262] macvtap1: entered allmulticast mode [ 482.268565][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 482.279494][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 482.293642][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 482.304429][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 482.313100][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 482.613517][T17317] openvswitch: netlink: Flow actions attr not present in new flow. [ 482.732352][T17322] netlink: 'syz.4.2981': attribute type 1 has an invalid length. [ 482.740752][T17322] netlink: 'syz.4.2981': attribute type 6 has an invalid length. [ 482.748936][T17322] netlink: 'syz.4.2981': attribute type 3 has an invalid length. [ 482.921284][T17329] netlink: 'syz.0.2983': attribute type 6 has an invalid length. [ 482.988591][T17335] netlink: 'syz.0.2983': attribute type 6 has an invalid length. [ 483.023543][T17329] Couldn't find request waiting for DGID: 0000:0000:0000:0000:0000:0000:0000:0000 [ 483.170547][T17295] chnl_net:caif_netlink_parms(): no params data found [ 483.453076][T17365] ieee802154 phy1 wpan1: encryption failed: -22 [ 483.513548][T17295] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.521248][T17295] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.529577][T17295] bridge_slave_0: entered allmulticast mode [ 483.537390][T17295] bridge_slave_0: entered promiscuous mode [ 483.549071][T17295] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.556361][T17295] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.564536][T17295] bridge_slave_1: entered allmulticast mode [ 483.573962][T17295] bridge_slave_1: entered promiscuous mode [ 483.619806][T17295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.632602][T17295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.694546][T17295] team0: Port device team_slave_0 added [ 483.703368][T17295] team0: Port device team_slave_1 added [ 483.730146][T17295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.737124][T17295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.763735][T17295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.799458][T17295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.806434][T17295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.832526][T17295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.888705][T17295] hsr_slave_0: entered promiscuous mode [ 483.895483][T17295] hsr_slave_1: entered promiscuous mode [ 483.937644][T17379] __nla_validate_parse: 8 callbacks suppressed [ 483.958648][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2997'. [ 484.013941][T17379] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2997'. [ 484.032377][T17379] vlan2: entered promiscuous mode [ 484.038338][T17379] bond0: entered promiscuous mode [ 484.223955][T17295] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 50849 - 0 [ 484.247750][T17295] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 484.408358][ T5831] Bluetooth: hci4: command tx timeout [ 484.427194][T17405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3002'. [ 484.449503][T17406] netlink: 'syz.4.3005': attribute type 1 has an invalid length. [ 484.820494][T17295] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 50849 - 0 [ 484.832370][T17295] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 484.897809][T17418] veth0_to_team: entered promiscuous mode [ 485.045995][T17424] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.087136][T17295] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 50849 - 0 [ 485.092879][T17422] nbd: couldn't find device at index 2 [ 485.102982][T17295] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.247080][T17432] netlink: 'syz.2.3012': attribute type 6 has an invalid length. [ 485.268518][T17295] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 50849 - 0 [ 485.280666][T17295] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.626136][T17295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 485.643454][T17295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 485.663070][T17295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 485.690140][T17295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 485.749670][T17463] netlink: 'syz.2.3020': attribute type 1 has an invalid length. [ 485.783623][T17463] 8021q: adding VLAN 0 to HW filter on device bond7 [ 485.799219][T17465] netlink: 'syz.3.3021': attribute type 3 has an invalid length. [ 485.831732][T17463] bond7: (slave gretap1): making interface the new active one [ 485.853673][T17463] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 485.982900][T17295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.115036][T17485] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 486.163367][T17295] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.173761][T17492] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3026'. [ 486.201886][T15116] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.209134][T15116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.252160][T15109] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.259385][T15109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.401334][T17502] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3029'. [ 486.479282][ T5831] Bluetooth: hci4: command tx timeout [ 487.105589][T17295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.194219][T17538] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3037'. [ 487.256045][T17295] veth0_vlan: entered promiscuous mode [ 487.302432][T17295] veth1_vlan: entered promiscuous mode [ 487.414649][T17295] veth0_macvtap: entered promiscuous mode [ 487.437258][T17295] veth1_macvtap: entered promiscuous mode [ 487.496744][T17295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.523832][T17295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.588529][T15119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.624289][T15116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.654811][T15116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.691134][T17550] 8021q: VLANs not supported on gre0 [ 487.702580][T15116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.793798][T17558] gre0: MTU too low for tipc bearer [ 487.815053][T17558] tipc: Enabling of bearer rejected, failed to enable media [ 487.849039][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.856911][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.867221][T17560] netlink: 'syz.2.3044': attribute type 10 has an invalid length. [ 487.867221][T17569] netlink: 'syz.2.3044': attribute type 10 has an invalid length. [ 487.906099][T17560] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 488.022876][T17572] bond5: (slave ip6gretap2): making interface the new active one [ 488.041206][T17572] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 488.056304][T15116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.069498][T15116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.245546][T17582] tap0: tun_chr_ioctl cmd 1074025677 [ 488.258083][T17582] tap0: linktype set to 0 [ 488.559047][ T5831] Bluetooth: hci4: command tx timeout [ 488.895604][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 488.909318][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 488.918847][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 488.928988][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 488.937572][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 488.995124][ T5836] ------------[ cut here ]------------ [ 489.001044][ T5836] refcount_t: underflow; use-after-free. [ 489.007306][ T5836] WARNING: CPU: 1 PID: 5836 at lib/refcount.c:28 refcount_warn_saturate+0x11a/0x1d0 [ 489.017395][ T5836] Modules linked in: [ 489.024067][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 489.034017][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 489.044492][ T5836] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 489.051197][ T5836] Code: 00 5a be 8b e8 e7 96 f9 fc 90 0f 0b 90 90 eb d7 e8 eb 7a 36 fd c6 05 99 a2 dd 0a 01 90 48 c7 c7 60 5a be 8b e8 c7 96 f9 fc 90 <0f> 0b 90 90 eb b7 e8 cb 7a 36 fd c6 05 76 a2 dd 0a 01 90 48 c7 c7 [ 489.071322][ T5836] RSP: 0018:ffffc90003e4f578 EFLAGS: 00010246 [ 489.079244][ T5836] RAX: 0fec5c952cfd6f00 RBX: 0000000000000003 RCX: ffff888028bf9e40 [ 489.087245][ T5836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 489.095392][ T5836] RBP: 0000000000000000 R08: ffff8880b8924293 R09: 1ffff11017124852 [ 489.103714][ T5836] R10: dffffc0000000000 R11: ffffed1017124853 R12: ffff88805cfbb000 [ 489.111975][ T5836] R13: ffff888055df7060 R14: ffff888055df7078 R15: dffffc0000000000 [ 489.120477][ T5836] FS: 0000000000000000(0000) GS:ffff888126232000(0000) knlGS:0000000000000000 [ 489.129694][ T5836] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.136389][ T5836] CR2: 00007fd115115000 CR3: 0000000026faa000 CR4: 00000000003526f0 [ 489.144728][ T5836] Call Trace: [ 489.148161][ T5836] [ 489.151110][ T5836] klist_dec_and_del+0x3c7/0x3d0 [ 489.156079][ T5836] klist_remove+0x1bd/0x340 [ 489.161035][ T5836] ? __pfx_klist_children_put+0x10/0x10 [ 489.166857][ T5836] ? __pfx_klist_remove+0x10/0x10 [ 489.172023][ T5836] ? __pfx_kobject_move+0x10/0x10 [ 489.177074][ T5836] ? do_raw_spin_unlock+0x122/0x240 [ 489.182372][ T5836] ? get_device_parent+0x366/0x3a0 [ 489.187524][ T5836] device_move+0x193/0x700 [ 489.192061][ T5836] hci_conn_del_sysfs+0xb8/0x170 [ 489.197724][ T5836] hci_conn_del+0xc33/0x11b0 [ 489.202368][ T5836] hci_conn_hash_flush+0x191/0x230 [ 489.207518][ T5836] hci_dev_close_sync+0xaef/0x1330 [ 489.212929][ T5836] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 489.218678][ T5836] ? up_write+0x1c4/0x420 [ 489.223055][ T5836] hci_unregister_dev+0x21a/0x510 [ 489.228198][ T5836] vhci_release+0x152/0x1a0 [ 489.232720][ T5836] ? __pfx_vhci_release+0x10/0x10 [ 489.237815][ T5836] __fput+0x44c/0xa70 [ 489.241833][ T5836] task_work_run+0x1d4/0x260 [ 489.246448][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 489.251715][ T5836] ? do_exit+0x6b0/0x2300 [ 489.256075][ T5836] ? kmem_cache_free+0x19b/0x690 [ 489.261161][ T5836] do_exit+0x6b5/0x2300 [ 489.265612][ T5836] ? do_raw_spin_lock+0x121/0x290 [ 489.271021][ T5836] ? __pfx_do_exit+0x10/0x10 [ 489.275649][ T5836] ? cgroup_freezing+0x20/0x350 [ 489.280763][ T5836] do_group_exit+0x21c/0x2d0 [ 489.285386][ T5836] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.290703][ T5836] get_signal+0x1285/0x1340 [ 489.295246][ T5836] arch_do_signal_or_restart+0xa0/0x790 [ 489.300913][ T5836] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 489.307128][ T5836] ? exit_to_user_mode_loop+0x40/0x130 [ 489.312734][ T5836] exit_to_user_mode_loop+0x72/0x130 [ 489.318087][ T5836] do_syscall_64+0x2bd/0xfa0 [ 489.322700][ T5836] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.328010][ T5836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.334099][ T5836] ? clear_bhb_loop+0x60/0xb0 [ 489.338957][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.344886][ T5836] RIP: 0033:0x7fba5298e15c [ 489.349384][ T5836] Code: Unable to access opcode bytes at 0x7fba5298e132. [ 489.356409][ T5836] RSP: 002b:00007ffe38f0cd70 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.366289][ T5836] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fba5298e15c [ 489.374627][ T5836] RDX: 0000000000000030 RSI: 00007ffe38f0ce30 RDI: 00000000000000f9 [ 489.382725][ T5836] RBP: 00007ffe38f0cddc R08: 0000000000000000 R09: 0079746972756365 [ 489.390804][ T5836] R10: 00007ffe38f0c730 R11: 0000000000000246 R12: 0000000000000265 [ 489.398887][ T5836] R13: 00000000000927c0 R14: 000000000007727d R15: 00007ffe38f0ce30 [ 489.406912][ T5836] [ 489.410092][ T5836] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 489.417390][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 489.426870][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 489.437119][ T5836] Call Trace: [ 489.440420][ T5836] [ 489.443358][ T5836] dump_stack_lvl+0x99/0x250 [ 489.447983][ T5836] ? __asan_memcpy+0x40/0x70 [ 489.452602][ T5836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.457823][ T5836] ? __pfx__printk+0x10/0x10 [ 489.462449][ T5836] vpanic+0x237/0x6d0 [ 489.466462][ T5836] ? __pfx_vpanic+0x10/0x10 [ 489.470999][ T5836] panic+0xb9/0xc0 [ 489.474740][ T5836] ? __pfx_panic+0x10/0x10 [ 489.479174][ T5836] __warn+0x31b/0x4b0 [ 489.483159][ T5836] ? refcount_warn_saturate+0x11a/0x1d0 [ 489.488708][ T5836] ? refcount_warn_saturate+0x11a/0x1d0 [ 489.494255][ T5836] report_bug+0x2be/0x4f0 [ 489.498588][ T5836] ? refcount_warn_saturate+0x11a/0x1d0 [ 489.504133][ T5836] ? refcount_warn_saturate+0x11a/0x1d0 [ 489.509679][ T5836] ? refcount_warn_saturate+0x11c/0x1d0 [ 489.515234][ T5836] handle_bug+0x84/0x160 [ 489.519480][ T5836] exc_invalid_op+0x1a/0x50 [ 489.523988][ T5836] asm_exc_invalid_op+0x1a/0x20 [ 489.528832][ T5836] RIP: 0010:refcount_warn_saturate+0x11a/0x1d0 [ 489.535002][ T5836] Code: 00 5a be 8b e8 e7 96 f9 fc 90 0f 0b 90 90 eb d7 e8 eb 7a 36 fd c6 05 99 a2 dd 0a 01 90 48 c7 c7 60 5a be 8b e8 c7 96 f9 fc 90 <0f> 0b 90 90 eb b7 e8 cb 7a 36 fd c6 05 76 a2 dd 0a 01 90 48 c7 c7 [ 489.554606][ T5836] RSP: 0018:ffffc90003e4f578 EFLAGS: 00010246 [ 489.560678][ T5836] RAX: 0fec5c952cfd6f00 RBX: 0000000000000003 RCX: ffff888028bf9e40 [ 489.568645][ T5836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 489.576617][ T5836] RBP: 0000000000000000 R08: ffff8880b8924293 R09: 1ffff11017124852 [ 489.584587][ T5836] R10: dffffc0000000000 R11: ffffed1017124853 R12: ffff88805cfbb000 [ 489.592591][ T5836] R13: ffff888055df7060 R14: ffff888055df7078 R15: dffffc0000000000 [ 489.600580][ T5836] ? refcount_warn_saturate+0x119/0x1d0 [ 489.606133][ T5836] klist_dec_and_del+0x3c7/0x3d0 [ 489.611076][ T5836] klist_remove+0x1bd/0x340 [ 489.615579][ T5836] ? __pfx_klist_children_put+0x10/0x10 [ 489.621130][ T5836] ? __pfx_klist_remove+0x10/0x10 [ 489.626156][ T5836] ? __pfx_kobject_move+0x10/0x10 [ 489.631177][ T5836] ? do_raw_spin_unlock+0x122/0x240 [ 489.636470][ T5836] ? get_device_parent+0x366/0x3a0 [ 489.641586][ T5836] device_move+0x193/0x700 [ 489.646012][ T5836] hci_conn_del_sysfs+0xb8/0x170 [ 489.650957][ T5836] hci_conn_del+0xc33/0x11b0 [ 489.655551][ T5836] hci_conn_hash_flush+0x191/0x230 [ 489.660667][ T5836] hci_dev_close_sync+0xaef/0x1330 [ 489.665787][ T5836] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 489.671329][ T5836] ? up_write+0x1c4/0x420 [ 489.675670][ T5836] hci_unregister_dev+0x21a/0x510 [ 489.680701][ T5836] vhci_release+0x152/0x1a0 [ 489.685208][ T5836] ? __pfx_vhci_release+0x10/0x10 [ 489.690228][ T5836] __fput+0x44c/0xa70 [ 489.694219][ T5836] task_work_run+0x1d4/0x260 [ 489.698822][ T5836] ? __pfx_task_work_run+0x10/0x10 [ 489.703948][ T5836] ? do_exit+0x6b0/0x2300 [ 489.708276][ T5836] ? kmem_cache_free+0x19b/0x690 [ 489.713224][ T5836] do_exit+0x6b5/0x2300 [ 489.717398][ T5836] ? do_raw_spin_lock+0x121/0x290 [ 489.722432][ T5836] ? __pfx_do_exit+0x10/0x10 [ 489.727020][ T5836] ? cgroup_freezing+0x20/0x350 [ 489.731891][ T5836] do_group_exit+0x21c/0x2d0 [ 489.736573][ T5836] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.741774][ T5836] get_signal+0x1285/0x1340 [ 489.746293][ T5836] arch_do_signal_or_restart+0xa0/0x790 [ 489.751850][ T5836] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 489.758038][ T5836] ? exit_to_user_mode_loop+0x40/0x130 [ 489.763504][ T5836] exit_to_user_mode_loop+0x72/0x130 [ 489.768785][ T5836] do_syscall_64+0x2bd/0xfa0 [ 489.773375][ T5836] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.778578][ T5836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.784646][ T5836] ? clear_bhb_loop+0x60/0xb0 [ 489.789347][ T5836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.795235][ T5836] RIP: 0033:0x7fba5298e15c [ 489.799643][ T5836] Code: Unable to access opcode bytes at 0x7fba5298e132. [ 489.806657][ T5836] RSP: 002b:00007ffe38f0cd70 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.815069][ T5836] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007fba5298e15c [ 489.823035][ T5836] RDX: 0000000000000030 RSI: 00007ffe38f0ce30 RDI: 00000000000000f9 [ 489.831001][ T5836] RBP: 00007ffe38f0cddc R08: 0000000000000000 R09: 0079746972756365 [ 489.838971][ T5836] R10: 00007ffe38f0c730 R11: 0000000000000246 R12: 0000000000000265 [ 489.846942][ T5836] R13: 00000000000927c0 R14: 000000000007727d R15: 00007ffe38f0ce30 [ 489.854927][ T5836] [ 489.858305][ T5836] Kernel Offset: disabled [ 489.862632][ T5836] Rebooting in 86400 seconds..