last executing test programs: 4.549057581s ago: executing program 1 (id=7309): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='(-\x00', 0x2ac2, &(0x7f0000000040)={@_ha_fsid={[0x10, 0x9]}, {0x0, 0x7ff, 0x2f6a8, 0x8}}, 0x3, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xd75}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x16, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x658a}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x2, 0x9, 0x0, 0x70, 0x10}, @call={0x85, 0x0, 0x0, 0x85}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2c}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r1, 0x4) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x1404, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088d0}, 0x40000) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={0x1, &(0x7f0000000500)="69bee5cff8c21f32a0ed5e60d73517ec24ee308149db616645c05ae5acd06851620e7f35fda157080ff1f5c92a0f2361694d163ae7ec507fe9d8e8e3ff986424c30ece72d245c3087ffa38343d13e81a3bc887454a4e259edf514211c29de7cb9a153a11ebead2810d263bdd46fd9d25697f6685702f8236505015f2711217cdece07dd792c8509a50b7622385a5c84a1a3870200c8c952627ac7741434711e078dbb37bc7bcd61274ab97bd3cbbc944541e2b81d5bcf5f3af28c7409c", &(0x7f00000005c0)=""/213, 0x4}, 0x20) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@mcast1, @in=@private=0xa010102, 0x4e23, 0x7fff, 0x4e24, 0x400, 0x2, 0x0, 0xc0, 0x1d, 0x0, 0xee01}, {0x3ff, 0x9, 0x6e, 0x4, 0xab6b, 0x1, 0x3ff, 0x7}, {0x1000, 0x5, 0x5cdb, 0x10}, 0x7fff, 0x6e6bba, 0x1, 0x1, 0x1, 0x1}, {{@in=@private=0xa010100, 0x4d3}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x3507, 0x0, 0x1, 0xe, 0x9, 0xc98d, 0xc8}}, 0xe8) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000840)={{r3}, 0x6, &(0x7f0000000800)=[0x8000000000000001, 0x2, 0x8, 0xc, 0x80000001, 0x40], 0x2, 0xe, 0x1}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r0) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, r4, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4090) write$tun(r0, &(0x7f0000000a00)={@val={0x0, 0x18}, @void, @mpls={[{0x0, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x3ff}, {0x9904}, {0x7, 0x0, 0x1}], @generic="e47255c121b67f0bcc37fb5f0929d06c0716eba7539d71c7155361a5aeaceb85aa5aaaf0328e0cbe20033b2138f8933d9b8a073fb49fe9a92c6e833e2ce3afb6a8585d9acf9b74712cc0cb4892a870a05898e49f74bb0093927b022bf3e5017d122db15b221a1a216623258f740e216d8c29a9f2de53a4e3069d4151581b193682c481c6e638cc45ec456a61bbf06a8ab469e1a00b3856405cb2e57fe825f8cfa876cf847ddeff97081727e19b219955944e6f27cfdd4507b7cf62b9107481658492e8850ea81c4326173fdb7ce9cfdefd40983ae3851ab87b70fd4bfb07e6d3333665a641f544cfab22eec355f9ff02ec0bd6bdde206e79d24bf958db75fc"}}, 0x117) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000b40)={0x8057, 0x3}) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000b80), 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$INCFS_IOC_PERMIT_FILL(r5, 0x40046721, &(0x7f0000000bc0)={r2}) r6 = socket(0x2, 0x3, 0x1) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000c00)={0x3, 'pim6reg1\x00', {0xd}, 0xc}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000c40)) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000c80)={0x0, 0x3, 0x8, 0x1}) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001080)={0x6, {{0xa, 0x4e20, 0x28, @loopback, 0x3}}, 0x1, 0x5, [{{0xa, 0x4e22, 0x3, @local, 0x9}}, {{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0xdfa}}, {{0xa, 0x4e20, 0x10, @remote, 0xd}}, {{0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}, {{0xa, 0x4e21, 0x7fffffff, @local, 0x6}}]}, 0x310) bind$tipc(r0, &(0x7f00000013c0)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x2}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000001400)=[@in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e24, 0xfffffc00, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80}, @in6={0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}], 0x68) recvfrom$packet(r6, &(0x7f0000001480)=""/9, 0x9, 0x2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001640)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x4c, r8, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x32}, @device_a, @device_b, @from_mac=@broadcast, {0x2, 0x2}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @tdls_setup_req={0xc, 0x0, "", 0x5, @void, @void, @void, @void}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xf]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x4000) 3.695381811s ago: executing program 3 (id=7323): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000032, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01764d415600000000000c0000000c00000000020000000800000f0400000000005f00000000"], 0x0, 0x28}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r2}, 0x48) 3.625487451s ago: executing program 1 (id=7324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtclass={0x38, 0x28, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0xfff8, 0x16}, {0x8, 0xffff}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8}]}}]}, 0x38}}, 0x20040084) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054) 3.508551159s ago: executing program 1 (id=7326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000004b40), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r2 = socket(0x18, 0x6, 0x2) connect$pppoe(r2, &(0x7f0000000300)={0x18, 0x0, {0x4, @empty, 'erspan0\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000d0f5bda9b5d9522e2001ad464c18f1900"/33, @ANYRES32=r2, @ANYRES32, @ANYRESHEX=0x0], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x28, r4, 0x201, 0x0, 0x0, {0x4, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}]}, 0x28}, 0x8, 0x3000000000002}, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000080)=0xd78) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r4, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x4000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.495048456s ago: executing program 3 (id=7327): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6e}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xdc7b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x40) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007a10200060001c00364683b9dad7aa20b878a4089c3eaf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf0, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x6e}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xdc7b}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x40) (async) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007a10200060001c00364683b9dad7aa20b878a4089c3eaf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) 3.302162955s ago: executing program 3 (id=7328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) syz_emit_ethernet(0xf2, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0xbc, 0x2c, 0x0, @remote, @local, {[@srh={0x33, 0x2, 0x4, 0x1, 0x9, 0x50, 0x7, [@mcast2]}, @srh={0x3c, 0x8, 0x4, 0x4, 0x15, 0x70, 0x197, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}]}, @hopopts={0x1, 0x6, '\x00', [@pad1, @ra={0x5, 0x2, 0xd6}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @enc_lim, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x12}}]}], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) r1 = socket(0x2d, 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) (async) syz_emit_ethernet(0xf2, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0xbc, 0x2c, 0x0, @remote, @local, {[@srh={0x33, 0x2, 0x4, 0x1, 0x9, 0x50, 0x7, [@mcast2]}, @srh={0x3c, 0x8, 0x4, 0x4, 0x15, 0x70, 0x197, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @loopback}]}, @hopopts={0x1, 0x6, '\x00', [@pad1, @ra={0x5, 0x2, 0xd6}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @enc_lim, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x12}}]}], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"5e4cd36bb96bd2b9"}}}}}}}, 0x0) (async) socket(0x2d, 0x2, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) (async) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xa) (async) 3.266966025s ago: executing program 1 (id=7329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e20}}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e22}}]}, 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, 0x1c}}, 0x0) 3.250529163s ago: executing program 3 (id=7331): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x10000, 0x2, 0x5, 0x4, 0xfffffff9, 0x2}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffff7a, 0xffffffff, 0x1f0, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "007f0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x5, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xff000000, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x2}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r5, &(0x7f00000002c0)=ANY=[], 0xc2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r7) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x44, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc850}, 0x440c0) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[], 0xffdd) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00000000f107004b"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffe, 0x3}]}, @restrict={0x1}]}}, 0x0, 0x46, 0x0, 0xa}, 0x28) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000021c0)="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", 0x171}, {&(0x7f00000003c0)="bf06c9e7028a0f80ad61379f059360863a4a567cea849a05da71d8c66971c5a36591236100b88ea3c0c465", 0x2b}, {&(0x7f0000000400)="d9e7ebaadc2611", 0x7}], 0x5, 0x0, 0x0, 0x40014}], 0x1, 0x40840) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r10, @ANYRES8=r3, @ANYBLOB="1c005a8018001400030600bebe00"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.174750598s ago: executing program 1 (id=7333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3b}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000030500000000fcffff5d4c890200", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r3, @ANYBLOB="029000000080040008000a00", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(r0, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c40)=0x14) bind$can_raw(r6, &(0x7f0000000c80)={0x1d, r7}, 0x10) 2.717450519s ago: executing program 0 (id=7338): ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x1}, @nl=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, @tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x4}}}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0xb, 0x4, 0x3}) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x2d}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="ac080000", @ANYRES16=r2, @ANYBLOB="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"/2214], 0x8ac}, 0x1, 0x0, 0x0, 0x80c0}, 0x20040000) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025008d053af1e80032e19a51d6198200000000202020f8ff00000000bfaf00000000000007010000f8ffffffb702000000000000b7030000e8ff"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000580), &(0x7f00000005c0)=0x4) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000700)="0952d8821f3ec4a4859993718b9f28ee46838e15a57b96986315e63792f10cbda90a01b9b6722db292a844dbd678ffaa97fd850a549415bfd9318afce0223b6c6d7b63f8a7a536ec34a736c7a5c35b81f758e56ed09de54131f1c5f8102c96a339fcc5f919204b12da019c", 0xfffffffffffffedc) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a3200000000080041007369770014003300"], 0x38}, 0x1, 0x0, 0x0, 0x8040040}, 0x810) (async) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$ax25_int(r6, 0x101, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32=r3, @ANYBLOB, @ANYRES64=r7], 0x20) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback=r4, 0xffffffffffffffff, 0x37, 0x2000, 0x0, @value=r8, @void, @void, @void, r7}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e000000ffff0000040000000500000000100000", @ANYRES32=0x1, @ANYBLOB="792dffff0000000000000000859169e200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000024000000020000000300"/28], 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='$\x00\x00\x00\x00 \x00\x00', @ANYRES32=r3, @ANYRES32, @ANYBLOB="0aafcdc1b207df30d2b1abb01844197a511b6a99509e4b6b539cb80365e0a46ad7a84e2869e9b986feaed7320bba35", @ANYRES64=r7], 0x20) 2.597358331s ago: executing program 0 (id=7340): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r2, 0x0) listen(r3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f5"], 0xfd1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r5, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r5, @ANYBLOB="2f0000000800000004000000", @ANYRES32, @ANYBLOB="2ef49fc0f3d625f3a56368cac22555bb51d319630ee0e44f4be663cde3dcfb507fad69ae98c688e639f977c77d2d65364769933c6f45007ecc6c3cbf9c606751b61ad9464421b59f08e053af281df4e17fdab0d62b7d4708a503f223b071c239d286b9b9a5b76f944164d2513096c7713c374b3fb124384da993a1fbca1c6e25107daaaecdb238a4617e7d826b890cc3998067fedd6ea4d89625897857a47972d2000000000000000000000092fa9a22126ee4cc17b883c799d1d70bea17b001867283db84d537bda25fe3e18d99c57985", @ANYRES64=0x0], 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r6 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x2b}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61104e00000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) 2.530509848s ago: executing program 2 (id=7341): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1666}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81, 0x82c}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) (async, rerun: 64) bind$packet(r1, &(0x7f0000000740)={0x11, 0xf6, r4, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08e94e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="08000d000000000008000400080008"], 0x4c}}, 0x0) 2.513630448s ago: executing program 2 (id=7342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x12048081) write$cgroup_int(r4, &(0x7f0000000200)=0x2, 0x12) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x100010, r2, 0xe2120000) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000440)={@multicast1, @dev, 0x0}, &(0x7f0000000480)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48104}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf4}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r8}]}}}]}, 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) close(0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x12048081) (async) write$cgroup_int(r4, &(0x7f0000000200)=0x2, 0x12) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) (async) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x100010, r2, 0xe2120000) (async) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000440)={@multicast1, @dev}, &(0x7f0000000480)=0xc) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48104}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf4}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r8}]}}}]}, 0x4c}}, 0x0) (async) 950.330533ms ago: executing program 1 (id=7343): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f00000006c0)=[0x1], &(0x7f0000000700), 0x4, 0x100000}}, 0x40) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) 919.586784ms ago: executing program 3 (id=7344): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 913.68989ms ago: executing program 4 (id=7345): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) (async) unshare(0x20000400) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) (async) r4 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f4", 0x5}], 0x1}}], 0x1, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0xfff6}, {0x1, 0xe}}}, 0x24}}, 0x0) 766.602019ms ago: executing program 0 (id=7346): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'geneve1\x00', {0x1000000}, 0x14}) r1 = socket(0x10, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000dc0), 0x4) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001d00000000000000", 0x1c) socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'geneve1\x00', {0x1000000}, 0x14}) (async) socket(0x10, 0x2, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000dc0), 0x4) (async) write(r1, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000001d00000000000000", 0x1c) (async) 764.904352ms ago: executing program 3 (id=7347): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$kcm(0x2, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000001280)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000011c0)=[{&(0x7f00000012c0)='#', 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000180), 0x43) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c0099004100000060000000080026009a03000008002700020034"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000043000001fefffffffcdbdf25017c0000040045800800a600", @ANYRES32=r0, @ANYBLOB="4598dab9540893667a96a48053cb96b4997b32482aaf8a1a573503497608d15585"], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r7) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000580)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="44000280", @ANYRES32=r9], 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0) connect$pppoe(r0, &(0x7f0000000440)={0x18, 0x0, {0x1, @local, 'batadv0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000007640)=[{{0x0, 0x0, 0x0}}, {}], 0x400000000000332, 0x8800) 763.6581ms ago: executing program 2 (id=7348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="0000000030620000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="ddbe"], 0x54}}, 0x0) 762.456737ms ago: executing program 4 (id=7349): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)=0xffffffffffffff5f) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES16, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) (async) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r2, 0x11e, 0x17, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000000000000090000006a00000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000440)={r3, 0x0, &(0x7f0000000400)=""/55}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001080)='memory.events\x00', 0x275a, 0x0) 710.829147ms ago: executing program 0 (id=7350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}, 0x1, 0x11}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 653.640574ms ago: executing program 2 (id=7351): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r5, 0x7, 0x5, 0x1}, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r2, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r6, 0x0, 0xf, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0xf, 0xac4, 0x2, 0x37d7, 0x9, 0x3, 0x7d, 0x1, 0x10}}) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd28, 0x25dfdbfc, {0x7, 0x0, 0x0, r7, 0x2, 0x26, 0xb}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000010403000030140e0800044000000031"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x240088d1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 643.869639ms ago: executing program 4 (id=7352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000001000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c40000000000800084040"], 0x7c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 482.449422ms ago: executing program 4 (id=7353): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0xa, 0x2, 0x0, [{@loopback}]}]}}, {{0x4e23, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x34, 0x4}}], 0x18}}], 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x7, 0x84) shutdown(r2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000100)='wg2\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x200, @local}]}, &(0x7f0000000440)=0x10) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r4, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000002c0)={0xb0000000}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={r3, 0x7ff}, 0x8) sendmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000bd"], 0x10}}], 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000240)={@remote, @empty}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0xc, 0xa, 0x2, 0x0, [{@loopback}]}]}}, {{0x4e23, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_ttl={{0x14, 0x0, 0x34, 0x4}}], 0x18}}], 0x1, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) socket$inet6_sctp(0xa, 0x7, 0x84) (async) shutdown(r2, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000001c0)=@add_del={0x2, &(0x7f0000000100)='wg2\x00'}) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x200, @local}]}, &(0x7f0000000440)=0x10) (async) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) recvmmsg(r4, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) (async) epoll_create(0x8) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000002c0)={0xb0000000}) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={r3, 0x7ff}, 0x8) (async) sendmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000bd"], 0x10}}], 0x2, 0x0) (async) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000240)={@remote, @empty}, 0x8) (async) 481.812119ms ago: executing program 2 (id=7354): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x11}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) 476.487636ms ago: executing program 0 (id=7355): socket$vsock_stream(0x28, 0x1, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x8100, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, @remote, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x10, 0x0, 0x0, 0x1, {[@fastopen={0x22, 0x10, "e31812d422f917b9f74a2c0875c1"}]}}}}}}}}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaa8aa0eaa01f60500000000000000e4dace1cf6e400aaaa0c08060001080006040004aaaaaaaaaabb97cf3f6281fa831df6b90e6cc141"], 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0xe674c000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000340)=""/19, 0x200000, 0x1000, 0x0, 0x2}, 0x20) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x1000000}, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd6300000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4000502ffffff07000000000002d588380003c1000000"], 0xfd6c) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) 277.149295ms ago: executing program 4 (id=7356): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000100)="2f183b4351", 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340100001700010000000000000000007f0000010000000000000000000000000000000000000000ac14220000000000000000000000000000005d09000000000000000000000000ac1414bb000000000000000000000000000000104e2200000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b06b7e000000000300000000000000000000000000000000000000000c0008000800080000000000"], 0x134}}, 0x0) r2 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x7db7, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x3d, 0x301, 0x20000, 0x0, {0x1}}, 0x14}}, 0x4000) sendto$inet(r2, &(0x7f00000002c0)="b401fcc8cd1bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0xffff, @dev}, 0x10) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000cc0)={{r3, &(0x7f0000000000)='#\x00', 0xa0080, &(0x7f00000001c0)={@align=0x1, {0x9, 0x9, 0x3, 0x500000000}}, 0x3, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000300)=0x4}, 0x7, &(0x7f0000000bc0)=[{0x1, 0x7, &(0x7f0000000340)='\xfd\x00', &(0x7f0000000380)="8c82d5c93eea621df02f3a62404af7f585b26e4cf57a7d088b6a95a34a3fce99aa0eeecafa06fde2cbadd428c8abdeba93ca54e15076df514eba4ef862f34a9cad57dd4ed6edb2217c462251d5732aa6487e42f703ba0be6611386949dfcbb2801600203fc5033e38528b3b753a3f2b8e9fecffa99dea91844e17183533f92f3eb9f9e6cc69327f45bc507af5b0f36f20d8ee3b27a87162b5d2e1a260e", 0x9d, 0x2}, {0x2, 0xd0d3, &(0x7f0000000440)='syz1\x00', &(0x7f0000000600)="10c7d8b73674e2dd5d1ddab558134f1c71b4a66876a3708cd586233e00d60cd54b9d2d8e7b13d790d56cb79e55497e1492852fe6d06fc36ebf174dc6717d36cea6cb75cd98c73d5436b5384a91134426773ca4ed128da3119bf194378a057b96ea94832abcb0b10ef384bd60b04889b1a2d8ac0337299ec5455556acac2ecf5d913f1e9d75918ae995776f08242d28561b5804c1e65730c6ee02f3e16f3459", 0x9f, 0x10}, {0x3, 0xb, &(0x7f0000000480)='syz1\x00', &(0x7f0000000740)="e897a4c419d341c3af3d57baf2d77eb3a99b627f93a36b5b79e4996ff57057105261eb02166fd2224f435084088e041397a995aa0d815500501d7f8fd6f77bf462a818c23b1d827a1689b62b8c1e7be488d3c60d097437d8881947473f49cc2b7a69d5c2f3e6ca49", 0x68, 0x8}, {0x2, 0x91, &(0x7f00000007c0)='syz1\x00', &(0x7f0000000800)="5629b57bc54823be271f73befd9febe7a7a31ef161968b4c2731bc1b523e18291c904875e8377c2e62aa16f4b331bcc1b3588802a21cb1a9955d", 0x3a, 0x30}, {0x1, 0x9, &(0x7f0000000840)='\x00', &(0x7f0000000880)="cac2acc62b5c6e5008aff07607098d38cf43c4de559513e1e714ffd2a6b1b0fd1f5a4366dfd6866b292f4dead6f5e7c8966777f37dc16bdc891d22d66ae6f20a9eb0b866ca625299419beda26ad1220ed328f593fae91dce8c055fa51592f14c444744c274dd32256845454cf58bcfc6ff91be1e7e0ba831a11f51bb781fe092daf4cb28462d4176f271266ccf72b4fa86b7598da017a87e8cc8766a7b05e6e5ac0f5f526ec49acaa242da7f1a03b9557e0ac78ef60fc85bbf1d2133a39ed430d03512fd35e65df4bde88b25f0a51c1bb4daa41fcaeaef1a743250e5b057de29f1f4477ee9ca14da", 0xe8}, {0x3, 0x4, &(0x7f0000000980)='syz1\x00', &(0x7f00000009c0)="862fb89c695838cd379fa0a063daec2e844cc312526c2e583d6efaa97c35efca2e68557661f33ed7330444115ca693e94996205f90e6ebd72839c44755f482e7215cbd66d7f0518cd15c199134a32ed05f61477dd31ef49895e24bb3f08f682897ef97479ad03a2eb34ef2c66a2584d3b245fc0e83d33de90da548082a19a5a420285b27b5814ed541c47605f41fc5f17b15a9ef8e9f95f3964442dc63cd0a4615b8b62164c38965", 0xa8, 0x2}, {0x3, 0xffffffc0, &(0x7f0000000a80)='nr', &(0x7f0000000ac0)="3e70db0a9cc5911dd09f0b475991a27124a11d4ab1bf6e3fb33375cbacc597ba16f8227b7738fe14dc1b323a96986277e6d7f464524dba692cf89727f51c6eb154acbdfba59465569a79cede6eed247399e6acb761933923f46c722360551b65acfeaa55a4bf8210f2581500e08ceb0a13c03bf15f2571c9a00b68f4c44cb9f99322c14cf4ad1412c2a2ac8b80c2c6ea72a52b7c7fc54091cfdb53fee445e1a6d2520edcd35e6a2d17c9dc63578f11df4dfeb93047df0d4fa35e73fdf712d01bff", 0xc1, 0x3a}]}) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000080)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 230.393797ms ago: executing program 2 (id=7357): r0 = socket$inet(0x2, 0xa, 0x8) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x3e, &(0x7f00000003c0), &(0x7f0000000140)=0x32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4800) unshare(0x20000400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x20, 0x7800, 0x1, 0x8, {{0x29, 0x4, 0x3, 0x0, 0xa4, 0x68, 0x0, 0x14, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@lsrr={0x83, 0x13, 0x67, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xfe, 0x1, 0x9, [{@local, 0x9}, {@multicast1}, {@broadcast, 0x7f}]}, @cipso={0x86, 0x46, 0x0, [{0x7, 0x9, "817086acc43363"}, {0x6, 0x9, "560b1a6a9d0d45"}, {0x7, 0xf, "6e9e006111ed270e5719f1c48e"}, {0x6, 0xb, "b7b2a71f571e4e4db8"}, {0x0, 0x6, "12a79d5b"}, {0x5, 0xa, "7eb71afe06e08112"}, {0x2, 0x4, "fba3"}]}, @timestamp_prespec={0x44, 0x14, 0xd3, 0x3, 0x5, [{@private=0xa010102, 0x2}, {@empty, 0x99f2}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xea, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$inet(r6, &(0x7f0000000840)={&(0x7f0000000040)={0x2, 0xb, @broadcast}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)="b564cdc0677ac8a008a7347a093fd52edeb968aec08d8622ba7128e74efadc2fce0c4cfa91b36165c9e3f8d464bcb0266591c3268051becb7b2f8bd43d68d723f341e3bda1532a9f26cff39f11bb927439df45cdd8eab20d0c7df4beeb040fe10befa66610cd3704433fb1ad858151606a4752c2ae7dff6c23a34aac38eee1604522ad64eabfaee3fe8f7932557585792f4692c4648a37bb", 0x98}, {&(0x7f00000001c0)}, {&(0x7f0000000240)="305bdac9cc1e14e3e0b3b9af443c3425dc42cfa68369f7f7f526ce363763f40b275a07d2d13e6bc57e3737309cf83f6a3967728b549083150abff369df7d0f8c7c9e2249c4e593ffba4d68", 0x4b}], 0x3, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @dev={0xac, 0x14, 0x14, 0x36}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x36}}, @ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0x97, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@multicast1, 0x5}, {@remote, 0x3ff}, {@multicast2, 0x4}, {@broadcast, 0x2}, {@multicast2, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x56}]}, @timestamp_prespec={0x44, 0x24, 0x9, 0x3, 0xc, [{@broadcast}, {@broadcast, 0x4d58}, {@local, 0xe}, {@local, 0x8}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0xe0}, 0x20000095) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_INUMBERS(r9, 0x80405880, &(0x7f0000000d40)={{0xf, 0x1, 0x477, 0x6, 0x7}, [{0x6, 0x8, 0x1, 0x10}, {0x8000, 0x0, 0x95, 0x9}, {0x10001, 0x62f, 0x4, 0xeb}, {0x324d, 0x100000000, 0x2, 0x3}, {0x6, 0x3, 0x4}, {0x3, 0x20f51da1, 0x1, 0x5}, {0x2, 0x4, 0x7f, 0x8}]}) write$tun(r5, &(0x7f0000000880)=ANY=[@ANYBLOB="016f0800010027000000270000004500002c00000300008490783fffff20ac1414aa0000000014a5994f36a2f2c70e712bb26d748ba2dda4120dae5dd620c2c72f2cdbfc5fe28899a3cab909f1c9a15ebd63c1cc7e3abaaacf44ccc90678965ba1c02cfb45ac2e94d2096899f1bc08c787b625f67f274b9798be709677229a466dfae8058b73f44466304d6758c8755bbae92d6c547449371c090b04fd86ecdd45cd4e395c27d62b1f3f7a2bdfd590e0920287ba3c45df88d163d34e71bcb9738204ee242ceac9c64828370ee42224257f21cf", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6a0000009078001822020000"], 0xfdef) 106.934807ms ago: executing program 4 (id=7358): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xfff1}, {0xfff4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20001005}, 0x20040080) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x4], 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@RTM_DELMDB={0x38, 0x55, 0x2, 0x70bd27, 0x25dfdbfd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x3, {@ip4=@empty, 0x86dd}}}]}, 0x38}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x9}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xfff1}, {0xfff4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20001005}, 0x20040080) (async) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x4], 0x2) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@RTM_DELMDB={0x38, 0x55, 0x2, 0x70bd27, 0x25dfdbfd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x3, {@ip4=@empty, 0x86dd}}}]}, 0x38}}, 0x0) (async) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x9}}}}}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 0s ago: executing program 0 (id=7359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f0000000100), 0x4) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x2c, r6, 0x15, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008841}, 0x24000014) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x49, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x70, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:ssh_keygen_exec_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc8a0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x54, r9, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xff}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ][T28096] syzkaller1: entered promiscuous mode [ 596.968477][T28096] syzkaller1: entered allmulticast mode [ 597.030998][T28100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6113'. [ 597.048167][T28100] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6113'. [ 597.138356][T28100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.160187][T28100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.239866][T28117] net_ratelimit: 23 callbacks suppressed [ 597.239885][T28117] IPVS: lc: FWM 3 0x00000003 - no destination available [ 597.298467][T27555] veth0_vlan: entered promiscuous mode [ 597.351217][T27555] veth1_vlan: entered promiscuous mode [ 597.565435][T27555] veth0_macvtap: entered promiscuous mode [ 597.605701][T27555] veth1_macvtap: entered promiscuous mode [ 597.642995][T28115] wg1 speed is unknown, defaulting to 1000 [ 599.089404][T28137] tipc: Invalid UDP bearer configuration [ 599.089457][T28137] tipc: Enabling of bearer rejected, failed to enable media [ 599.206260][T28150] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6120'. [ 599.260279][T27555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.323787][T27555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.370184][ T9843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.393012][ T9843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.455714][T28156] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6121'. [ 599.465263][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.480773][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.525969][T28156] netlink: 'syz.4.6121': attribute type 1 has an invalid length. [ 599.532011][T28165] ipt_REJECT: TCP_RESET invalid for non-tcp [ 599.620403][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.640702][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.725662][T28169] syzkaller0: entered promiscuous mode [ 599.751856][T28169] syzkaller0: entered allmulticast mode [ 599.835768][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 599.858246][T28169] tipc: Started in network mode [ 599.876929][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.892993][T28169] tipc: Node identity 8242e5104fd, cluster identity 4711 [ 599.909910][T28169] tipc: Enabled bearer , priority 0 [ 599.934475][T28169] tipc: Resetting bearer [ 599.955193][T28169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.988799][T28180] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6127'. [ 600.094334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.102878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.187418][T28168] tipc: Resetting bearer [ 600.242087][T28168] tipc: Disabling bearer [ 600.431175][T28214] syzkaller1: entered promiscuous mode [ 600.451662][T28214] syzkaller1: entered allmulticast mode [ 600.483311][T28221] netlink: 112 bytes leftover after parsing attributes in process `syz.4.6138'. [ 600.581632][T26855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 600.592389][T26855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 600.606976][T26855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 600.619855][T26855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 600.628806][T26855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 600.835634][T28229] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6140'. [ 600.934623][T28225] wg1 speed is unknown, defaulting to 1000 [ 602.716761][ T5829] Bluetooth: hci5: command tx timeout [ 604.032105][T23704] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.052592][T23704] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.069539][T23704] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 604.084611][T28280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6147'. [ 604.099124][T23704] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 37555 - 0 [ 604.137977][T28278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6148'. [ 604.321033][T23704] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 604.339074][T28296] Unsupported ieee802154 address type: 0 [ 604.345500][T23704] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.366807][T23704] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 604.376500][T23704] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 37555 - 0 [ 604.605819][T28310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6154'. [ 604.771367][T28319] netlink: 'syz.0.6155': attribute type 1 has an invalid length. [ 604.797876][ T5829] Bluetooth: hci5: command tx timeout [ 605.076251][T28330] Bluetooth: MGMT ver 1.23 [ 605.517863][T28353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6158'. [ 606.533067][T28298] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6151'. [ 606.542147][T28298] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6151'. [ 606.554938][T23704] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.564834][T23704] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.578549][T23704] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 606.589133][T23704] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 37555 - 0 [ 606.613656][T28340] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6158'. [ 606.880917][ T5829] Bluetooth: hci5: command tx timeout [ 608.092849][T23704] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.102840][T23704] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.112661][T23704] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 608.122930][T23704] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 37555 - 0 [ 608.149877][T28363] veth5: entered promiscuous mode [ 608.154959][T28363] veth5: entered allmulticast mode [ 608.261569][T28377] team0: Device ip6gre1 is of different type [ 608.294696][T28381] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6163'. [ 608.312485][T28368] wg1 speed is unknown, defaulting to 1000 [ 608.371078][T28380] delete_channel: no stack [ 608.421575][T28225] chnl_net:caif_netlink_parms(): no params data found [ 608.628176][T28386] syzkaller0: entered promiscuous mode [ 608.647051][T28386] syzkaller0: entered allmulticast mode [ 608.664529][T23704] bridge_slave_0: left allmulticast mode [ 608.680522][T23704] bridge_slave_0: left promiscuous mode [ 608.697403][T23704] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.883225][T28414] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6169'. [ 608.958508][ T5829] Bluetooth: hci5: command tx timeout [ 609.298413][T23704] bond8 (unregistering): (slave gretap2): Releasing backup interface [ 609.325704][T23704] dvmrp0 (unregistering): left allmulticast mode [ 609.521419][T23704] bond1 (unregistering): Released all slaves [ 609.534255][T23704] bond2 (unregistering): Released all slaves [ 609.547285][T23704] bond3 (unregistering): Released all slaves [ 609.568365][T23704] bond4 (unregistering): (slave vcan1): Releasing backup interface [ 609.576279][T23704] vcan1: left promiscuous mode [ 609.582236][T23704] bond4 (unregistering): Released all slaves [ 609.594447][T23704] bond5 (unregistering): Released all slaves [ 609.618957][T23704] bond6 (unregistering): Released all slaves [ 609.631852][T23704] bond7 (unregistering): Released all slaves [ 609.645843][T23704] bond8 (unregistering): Released all slaves [ 609.661949][T23704] bond9 (unregistering): Released all slaves [ 609.674436][T23704] bond10 (unregistering): Released all slaves [ 609.687088][T23704] bond11 (unregistering): Released all slaves [ 609.700160][T23704] bond0 (unregistering): Released all slaves [ 609.716212][T23704] bond12 (unregistering): (slave lo): Releasing backup interface [ 609.724592][T23704] bond12 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 609.738843][T23704] bond12 (unregistering): Released all slaves [ 609.975566][T28225] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.987290][T28225] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.994666][T28225] bridge_slave_0: entered allmulticast mode [ 610.008861][T28225] bridge_slave_0: entered promiscuous mode [ 610.028311][T23704] : left promiscuous mode [ 610.028943][T28444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6173'. [ 610.042496][T28444] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 610.087304][T28225] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.113967][T28225] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.133311][T28225] bridge_slave_1: entered allmulticast mode [ 610.158937][T28225] bridge_slave_1: entered promiscuous mode [ 610.191510][T23704] tipc: Left network mode [ 610.356099][T28225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.412209][T28225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.482019][T28463] x9: renamed from bridge_slave_0 [ 610.650696][T28225] team0: Port device team_slave_0 added [ 610.709811][T28225] team0: Port device team_slave_1 added [ 610.882640][T28482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.924165][T28482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.012905][T28504] IPv6: addrconf: prefix option has invalid lifetime [ 611.058282][T28495] erspan0: entered promiscuous mode [ 611.072907][T28495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6186'. [ 611.085928][T28509] netlink: 'syz.4.6189': attribute type 1 has an invalid length. [ 611.098778][T28509] netlink: 476 bytes leftover after parsing attributes in process `syz.4.6189'. [ 611.141822][T28509] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.6189'. [ 611.184200][T28515] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6190'. [ 611.420257][T28522] netlink: 'syz.0.6191': attribute type 1 has an invalid length. [ 612.653617][T28225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.660941][T28225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.688357][T28225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.701235][T28225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.716744][T28225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.744282][T28225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.916463][T23704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.934225][T23704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.944767][T28535] netlink: 'syz.1.6195': attribute type 21 has an invalid length. [ 612.953589][T23704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.962291][T23704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.980221][T23704] veth1_macvtap: left promiscuous mode [ 612.985976][T23704] veth1_vlan: left promiscuous mode [ 612.992101][T23704] veth0_vlan: left promiscuous mode [ 613.024187][T28539] x_tables: duplicate underflow at hook 2 [ 613.083567][T23704] pim6reg (unregistering): left allmulticast mode [ 613.334093][T23704] smc: removing net device caif0 with user defined pnetid SYZ2 [ 613.404841][T28537] netlink: 'syz.0.6197': attribute type 29 has an invalid length. [ 613.539320][T28225] hsr_slave_0: entered promiscuous mode [ 613.568544][T28225] hsr_slave_1: entered promiscuous mode [ 613.574911][T28225] debugfs: 'hsr0' already exists in 'hsr' [ 613.600290][T28225] Cannot create hsr debugfs directory [ 613.612528][T28541] netlink: 'syz.0.6197': attribute type 29 has an invalid length. [ 613.621150][T28556] netlink: 'syz.2.6199': attribute type 27 has an invalid length. [ 613.820128][T28571] vlan2: entered promiscuous mode [ 613.825510][T28571] bridge0: entered promiscuous mode [ 613.988081][T23704] IPVS: stop unused estimator thread 0... [ 614.129946][T28589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6206'. [ 614.218630][T28596] x_tables: duplicate underflow at hook 4 [ 614.278281][T28592] openvswitch: netlink: Duplicate or invalid key (type 0). [ 614.285714][T28592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.524200][T28613] Cannot find set identified by id 3 to match [ 614.597322][T28613] netlink: 'syz.4.6208': attribute type 1 has an invalid length. [ 614.660584][T28624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6208'. [ 614.674273][T28613] bond4 (unregistering): Released all slaves [ 614.759885][T28630] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6208'. [ 614.800308][T28633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6214'. [ 614.809836][T28633] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6214'. [ 615.170205][T28663] __nla_validate_parse: 3 callbacks suppressed [ 615.170225][T28663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6219'. [ 615.807971][T28694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6226'. [ 615.818191][T28694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6226'. [ 616.966250][T28694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6226'. [ 616.984718][T28694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6226'. [ 617.085735][T28706] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6230'. [ 617.140003][T28708] bridge_slave_1: left allmulticast mode [ 617.156894][T28708] bridge_slave_1: left promiscuous mode [ 617.162745][T28708] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.192722][T28708] bond0: (slave bond_slave_0): Releasing backup interface [ 617.229144][T28708] bond0: (slave bond_slave_1): Releasing backup interface [ 617.270298][T28708] team0: Port device team_slave_0 removed [ 617.303809][T28708] team0: Port device team_slave_1 removed [ 617.314500][T28719] netlink: 'syz.0.6229': attribute type 1 has an invalid length. [ 617.326002][T28708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 617.337450][T28719] netlink: 476 bytes leftover after parsing attributes in process `syz.0.6229'. [ 617.348453][T28708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 617.358769][T28708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 617.366425][T28719] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.6229'. [ 617.376800][T28708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.385978][T28708] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 617.551250][T28225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 617.630910][T28740] netlink: 'syz.0.6235': attribute type 1 has an invalid length. [ 617.655342][T28225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 617.716467][T28225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 617.815178][T28746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6235'. [ 617.846684][T28225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 617.889867][T28755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6239'. [ 618.082076][T28768] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode [ 618.091437][T28768] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 618.179433][T28779] netlink: 'syz.2.6243': attribute type 1 has an invalid length. [ 618.235370][T28225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.282340][T28779] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 618.298595][T28225] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.305423][T28779] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 618.323673][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.330957][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.381926][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.389162][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.528436][T28795] mac80211_hwsim hwsim65 syzkaller0: left promiscuous mode [ 618.544203][T28795] mac80211_hwsim hwsim65 syzkaller0: left allmulticast mode [ 618.825701][T28816] xt_hashlimit: size too large, truncated to 1048576 [ 618.987954][T28778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.037772][T28225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.153162][T28225] veth0_vlan: entered promiscuous mode [ 619.180280][T28225] veth1_vlan: entered promiscuous mode [ 619.283063][T28225] veth0_macvtap: entered promiscuous mode [ 619.323504][T28225] veth1_macvtap: entered promiscuous mode [ 619.381682][T28225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.444204][T28225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.503758][T23704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.522177][T23704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.540940][T23704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.561374][T23704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.631057][T28851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.764124][T28851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 619.787231][T23704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.795085][T23704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.867492][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.875433][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.229897][T28885] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 620.259155][T28885] __nla_validate_parse: 1 callbacks suppressed [ 620.259180][T28885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6264'. [ 620.326836][T28885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6264'. [ 621.648757][T28888] gre1: entered promiscuous mode [ 621.653806][T28888] gre1: entered allmulticast mode [ 621.679544][T28892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.717943][T28897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.927112][T28910] netlink: 'syz.1.6271': attribute type 3 has an invalid length. [ 621.944468][T28912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6272'. [ 622.001763][T26855] Bluetooth: hci5: command 0x0405 tx timeout [ 622.077422][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 622.087769][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 622.095923][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 622.111299][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 622.119240][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 622.169188][T28929] SET target dimension over the limit! [ 622.235846][T28922] wg1 speed is unknown, defaulting to 1000 [ 622.502174][T28943] netlink: 294 bytes leftover after parsing attributes in process `syz.2.6278'. [ 622.560399][T28943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.600334][T28922] chnl_net:caif_netlink_parms(): no params data found [ 622.828406][T28922] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.837658][T28922] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.844995][T28922] bridge_slave_0: entered allmulticast mode [ 622.854166][T28922] bridge_slave_0: entered promiscuous mode [ 622.869937][T28958] ip6gre1: entered promiscuous mode [ 622.884167][T28922] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.901312][T28922] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.917926][T28922] bridge_slave_1: entered allmulticast mode [ 622.936258][T28922] bridge_slave_1: entered promiscuous mode [ 623.008340][T28922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.029697][T28922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.126478][T28922] team0: Port device team_slave_0 added [ 623.150025][T28922] team0: Port device team_slave_1 added [ 623.231230][T28922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.247141][T28922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.305448][T28922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.328225][T28922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.335188][T28922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.402617][T28922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.472307][T28922] hsr_slave_0: entered promiscuous mode [ 623.488801][T28922] hsr_slave_1: entered promiscuous mode [ 623.497928][T28922] debugfs: 'hsr0' already exists in 'hsr' [ 623.509270][T28922] Cannot create hsr debugfs directory [ 623.751816][T28922] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.869420][T28922] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.943153][T28922] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.003274][T28922] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.157674][T26855] Bluetooth: hci3: command tx timeout [ 624.321519][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.333066][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 624.611074][T29035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6289'. [ 624.929839][T28911] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 624.976021][T28922] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 625.068104][T28922] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 625.102248][T28922] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 625.143468][T28922] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 625.260717][T29078] netlink: 'syz.3.6295': attribute type 2 has an invalid length. [ 625.321207][T29084] netlink: 'syz.3.6295': attribute type 2 has an invalid length. [ 625.388928][T29087] netlink: zone id is out of range [ 625.394084][T29087] netlink: get zone limit has 4 unknown bytes [ 625.534630][T29093] delete_channel: no stack [ 625.562466][T28922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.610589][T28922] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.637219][T29105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6298'. [ 625.649595][T23704] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.656807][T23704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.714752][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.721942][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.849595][T29116] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.6304'. [ 626.238671][T26855] Bluetooth: hci3: command tx timeout [ 626.405436][T29149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6311'. [ 626.451278][T28922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.739374][T29165] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 626.890238][T29181] xt_hashlimit: invalid rate [ 627.040526][ T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6c [ 627.141396][T28922] veth0_vlan: entered promiscuous mode [ 627.183188][T28922] veth1_vlan: entered promiscuous mode [ 627.273730][T29194] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6320'. [ 627.315508][T28922] veth0_macvtap: entered promiscuous mode [ 627.350993][T28922] veth1_macvtap: entered promiscuous mode [ 627.411262][T28922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.431131][T28922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.449973][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.499607][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.530662][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.570637][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.748309][T29228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6328'. [ 627.805245][T29228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 627.812860][T29228] IPv6: NLM_F_CREATE should be set when creating new route [ 627.849390][T29230] syzkaller0: entered promiscuous mode [ 627.858890][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.867317][T29228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6328'. [ 627.877827][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.885670][T29230] syzkaller0: entered allmulticast mode [ 627.991185][T29230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6330'. [ 628.021884][T29230] block nbd0: Unsupported socket: should be TCP or UNIX. [ 628.079595][T29241] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6332'. [ 628.109903][T29237] veth1_macvtap: renamed from veth0_vlan [ 628.217451][ T9844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.224052][T29247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6333'. [ 628.225311][ T9844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.325518][T26855] Bluetooth: hci3: command tx timeout [ 628.335571][T29255] IPv6: NLM_F_CREATE should be specified when creating new route [ 628.352577][T29254] netlink: 'syz.3.6334': attribute type 1 has an invalid length. [ 628.466303][T29261] mac80211_hwsim hwsim70 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 628.583078][T29270] netlink: 'syz.3.6336': attribute type 3 has an invalid length. [ 628.758570][T29274] tipc: Started in network mode [ 628.778749][T29274] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 628.796565][T29274] tipc: Enabled bearer , priority 10 [ 629.036277][T29292] xt_l2tp: invalid flags combination: 0 [ 629.428795][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 629.442759][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 629.452605][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 629.464709][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 629.474656][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 629.537035][T29319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6350'. [ 629.609362][T29315] wg1 speed is unknown, defaulting to 1000 [ 629.806307][T23192] tipc: Node number set to 10136234 [ 629.836784][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms [ 629.844851][ C1] lec:lec_tx_timeout: lec0 [ 629.849544][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 630.187715][ T9844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.219452][ T9844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.303838][T29315] chnl_net:caif_netlink_parms(): no params data found [ 630.357889][T29368] sctp: [Deprecated]: syz.1.6359 (pid 29368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 630.357889][T29368] Use struct sctp_sack_info instead [ 630.403358][T26855] Bluetooth: hci3: command tx timeout [ 630.426348][ T9844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.438415][ T9844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.455537][T29360] netlink: 'syz.3.6355': attribute type 12 has an invalid length. [ 630.627407][ T9844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.665813][ T9844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.859180][T29394] nbd0: detected capacity change from 0 to 127 [ 630.880236][ T36] wlan1: Trigger new scan to find an IBSS to join [ 630.900508][T26855] block nbd0: Receive control failed (result -104) [ 630.918354][ T9844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 630.935124][ T9844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.955624][T29410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.980433][ T5484] veth1_macvtap: left promiscuous mode [ 630.996220][ T5484] veth1_macvtap: entered promiscuous mode [ 631.004525][T29400] __nla_validate_parse: 1 callbacks suppressed [ 631.004542][T29400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6365'. [ 631.062252][T29315] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.068593][T29415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6367'. [ 631.070082][T29315] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.085869][T29315] bridge_slave_0: entered allmulticast mode [ 631.093832][T29315] bridge_slave_0: entered promiscuous mode [ 631.133397][T29315] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.152378][T29315] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.169615][T29315] bridge_slave_1: entered allmulticast mode [ 631.181029][T29315] bridge_slave_1: entered promiscuous mode [ 631.305988][T29315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.394181][T29315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.493101][T29433] openvswitch: netlink: Key type 31 is not supported [ 631.498823][T29435] netlink: 'syz.1.6373': attribute type 10 has an invalid length. [ 631.518140][T26855] Bluetooth: hci4: command tx timeout [ 631.528496][T29315] team0: Port device team_slave_0 added [ 631.534201][T29435] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6373'. [ 631.604308][T29440] netlink: 'syz.3.6374': attribute type 10 has an invalid length. [ 631.606151][T29315] team0: Port device team_slave_1 added [ 631.650679][T29435] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 631.725868][T29440] team0: Port device dummy0 added [ 631.800309][T29315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.812167][T29437] netlink: 'syz.1.6373': attribute type 10 has an invalid length. [ 631.822355][T29315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.831396][T29437] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6373'. [ 631.911613][T29315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.950044][T29315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.968920][T29315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.004065][T29315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.069037][T29452] bridge0: port 3(ipvlan2) entered blocking state [ 632.076960][T29452] bridge0: port 3(ipvlan2) entered disabled state [ 632.083653][T29452] ipvlan2: entered allmulticast mode [ 632.092401][T29452] bridge0: entered allmulticast mode [ 632.100208][T29452] ipvlan2: left allmulticast mode [ 632.105739][T29452] bridge0: left allmulticast mode [ 632.154484][T29459] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.179457][T29468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6381'. [ 632.251980][T29459] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.379912][T29476] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6385'. [ 632.527570][T29485] netlink: 'syz.4.6386': attribute type 16 has an invalid length. [ 632.535572][T29485] netlink: 'syz.4.6386': attribute type 17 has an invalid length. [ 632.580695][ T9844] bond4 (unregistering): (slave geneve2): Releasing active interface [ 632.880920][ T9844] bond0 (unregistering): Released all slaves [ 632.891906][ T9844] bond1 (unregistering): Released all slaves [ 632.905543][ T9844] bond2 (unregistering): Released all slaves [ 632.919573][ T9844] bond3 (unregistering): Released all slaves [ 632.933664][ T9844] bond4 (unregistering): Released all slaves [ 632.964646][T29315] hsr_slave_0: entered promiscuous mode [ 632.991826][T29315] hsr_slave_1: entered promiscuous mode [ 632.999512][T29315] debugfs: 'hsr0' already exists in 'hsr' [ 633.005301][T29315] Cannot create hsr debugfs directory [ 633.062445][T29459] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.079497][T29478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6385'. [ 633.160344][T29485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.195550][ T9844] : left promiscuous mode [ 633.253108][T29494] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.264564][T29495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6388'. [ 633.312435][T29495] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6388'. [ 633.370233][T29459] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.391467][ T9844] : left promiscuous mode [ 633.581343][ T9844] tipc: Disabling bearer [ 633.596927][T26855] Bluetooth: hci4: command tx timeout [ 633.614234][ T9844] tipc: Left network mode [ 633.635651][T29504] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6391'. [ 633.697597][T29504] netlink: 'syz.4.6391': attribute type 5 has an invalid length. [ 633.708479][T29510] netlink: 'syz.3.6393': attribute type 4 has an invalid length. [ 633.901966][T23704] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.912096][T23704] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.975271][T29520] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 633.994403][T29515] wg1 speed is unknown, defaulting to 1000 [ 634.124501][ T6034] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.205303][ T6034] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.405251][T29541] netlink: 'syz.0.6399': attribute type 1 has an invalid length. [ 634.540388][T29544] mac80211_hwsim hwsim64 wlan0: entered promiscuous mode [ 634.724072][T29541] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 634.741336][T29549] sock: sock_set_timeout: `syz.0.6399' (pid 29549) tries to set negative timeout [ 634.743243][T29541] bond1: (slave lo): Enslaving as an active interface with an up link [ 634.764978][T29541] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 634.785188][T29315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 634.809005][T29315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 634.856723][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 634.861141][T29315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 634.864826][ C1] lec:lec_tx_timeout: lec0 [ 634.963200][T29564] netlink: 'syz.1.6405': attribute type 1 has an invalid length. [ 634.974325][T29315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 635.115913][ T9844] hsr_slave_0: left promiscuous mode [ 635.151383][ T9844] hsr_slave_1: left promiscuous mode [ 635.677057][T26855] Bluetooth: hci4: command tx timeout [ 635.837351][ T36] wlan1: Trigger new scan to find an IBSS to join [ 636.326108][T29315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.347959][T29315] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.361506][T23704] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.368982][T23704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.460419][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.467690][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.759819][T26855] Bluetooth: hci4: command tx timeout [ 638.149566][T23704] wlan1: Creating new IBSS network, BSSID 46:7c:31:b4:12:af [ 639.371952][T29662] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 639.383528][T29662] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 639.393661][T29662] gretap1: entered promiscuous mode [ 639.417390][T29662] gretap1: entered allmulticast mode [ 639.470614][T29671] syzkaller1: entered promiscuous mode [ 639.476164][T29671] syzkaller1: entered allmulticast mode [ 639.503687][T29671] netlink: 'syz.3.6425': attribute type 32 has an invalid length. [ 639.534698][T29673] mac80211_hwsim hwsim65 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 639.544134][T29671] __nla_validate_parse: 9 callbacks suppressed [ 639.544153][T29671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6425'. [ 639.566260][ T9844] IPVS: stop unused estimator thread 0... [ 639.585249][T29677] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6428'. [ 639.620279][T29671] bond1: option coupled_control: invalid value (52) [ 639.635136][T29671] bond1 (unregistering): Released all slaves [ 639.690271][T29681] xfrm1: entered allmulticast mode [ 639.726003][T29315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.907409][T29690] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.6432'. [ 639.924226][T29690] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.6432'. [ 639.959684][T29315] veth0_vlan: entered promiscuous mode [ 640.000665][T29315] veth1_vlan: entered promiscuous mode [ 640.134395][T29703] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6436'. [ 641.839868][ T12] wlan1: Trigger new scan to find an IBSS to join [ 642.087977][T29315] veth0_macvtap: entered promiscuous mode [ 642.100197][T29315] veth1_macvtap: entered promiscuous mode [ 642.176161][T29315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.185676][T29717] netlink: 'syz.1.6438': attribute type 83 has an invalid length. [ 642.203211][T29315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 642.280910][T29720] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode [ 642.295960][T29720] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 642.312343][ T9844] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.326104][ T9844] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.377502][T29729] netlink: 'syz.1.6441': attribute type 1 has an invalid length. [ 642.386441][ T9844] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.460564][ T9844] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.643946][T23705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.645963][T29732] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6443'. [ 642.668383][T23705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.705011][ T9844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.714738][ T9844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.761298][T29734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6444'. [ 642.879578][T29737] policy can only be matched on NF_INET_PRE_ROUTING [ 642.879605][T29737] unable to load match [ 642.918250][T29744] mac80211_hwsim hwsim65 syzkaller0: left promiscuous mode [ 642.925643][T29744] mac80211_hwsim hwsim65 syzkaller0: left allmulticast mode [ 643.049460][T29755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 643.056968][T29755] IPv6: NLM_F_CREATE should be set when creating new route [ 643.086457][T29755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6453'. [ 643.128477][T29763] mac80211_hwsim hwsim65 syzkaller0: entered promiscuous mode [ 643.136042][T29763] mac80211_hwsim hwsim65 syzkaller0: entered allmulticast mode [ 643.295633][T29772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6457'. [ 643.532291][T29788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6464'. [ 643.640418][T29794] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 643.726129][T29801] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 643.733087][T29801] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 643.756260][T29803] openvswitch: netlink: Flow key attr not present in new flow. [ 643.810885][T29808] ip6t_srh: unknown srh match flags 5F28 [ 643.819096][T29810] FAULT_INJECTION: forcing a failure. [ 643.819096][T29810] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 643.842980][T29808] netlink: 'syz.3.6469': attribute type 1 has an invalid length. [ 643.847969][T29810] CPU: 1 UID: 0 PID: 29810 Comm: syz.4.6470 Not tainted syzkaller #0 PREEMPT(full) [ 643.847998][T29810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.848010][T29810] Call Trace: [ 643.848017][T29810] [ 643.848025][T29810] dump_stack_lvl+0xe8/0x150 [ 643.848052][T29810] should_fail_ex+0x412/0x560 [ 643.848079][T29810] _copy_from_user+0x2d/0xb0 [ 643.848097][T29810] ___sys_sendmsg+0x1c6/0x360 [ 643.848117][T29810] ? __lock_acquire+0x6b5/0x2cf0 [ 643.848138][T29810] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.848162][T29810] ? kstrtouint+0x6e/0xe0 [ 643.848203][T29810] ? __fget_files+0x2a/0x420 [ 643.848220][T29810] ? __fget_files+0x3a0/0x420 [ 643.848244][T29810] __sys_sendmmsg+0x27c/0x4e0 [ 643.848274][T29810] ? __pfx___sys_sendmmsg+0x10/0x10 [ 643.848296][T29810] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 643.848340][T29810] ? ksys_write+0x242/0x270 [ 643.848361][T29810] ? __pfx_ksys_write+0x10/0x10 [ 643.848385][T29810] __x64_sys_sendmmsg+0xa0/0xc0 [ 643.848406][T29810] do_syscall_64+0x14d/0xf80 [ 643.848426][T29810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.848441][T29810] ? trace_irq_disable+0x37/0x100 [ 643.848458][T29810] ? clear_bhb_loop+0x40/0x90 [ 643.848478][T29810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.848493][T29810] RIP: 0033:0x7facccd9bf79 [ 643.848513][T29810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.848527][T29810] RSP: 002b:00007faccdc56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 643.848545][T29810] RAX: ffffffffffffffda RBX: 00007faccd015fa0 RCX: 00007facccd9bf79 [ 643.848557][T29810] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000003 [ 643.848567][T29810] RBP: 00007faccdc56090 R08: 0000000000000000 R09: 0000000000000000 [ 643.848577][T29810] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000001 [ 643.848587][T29810] R13: 00007faccd016038 R14: 00007faccd015fa0 R15: 00007ffe7d9a7488 [ 643.848615][T29810] [ 644.163088][T29832] netlink: 'syz.1.6475': attribute type 4 has an invalid length. [ 644.166159][T29808] bond1: entered promiscuous mode [ 644.181075][T29808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.193767][T29836] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 644.238658][T29836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.306081][T29820] bond1: (slave bridge2): making interface the new active one [ 644.347181][T29820] bridge2: entered promiscuous mode [ 644.365219][T29820] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 644.421542][T29808] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 644.447046][T29808] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 644.542900][T29854] xt_CT: No such helper "snmp_trap" [ 644.564629][T29856] __nla_validate_parse: 10 callbacks suppressed [ 644.564650][T29856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6477'. [ 644.586549][T29856] netlink: 'syz.0.6477': attribute type 25 has an invalid length. [ 644.596036][T29856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6477'. [ 644.624000][T23705] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.633398][T23705] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.644267][T29856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6477'. [ 644.675240][T23705] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.690376][T29864] netlink: 696 bytes leftover after parsing attributes in process `syz.4.6480'. [ 644.700041][T23705] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.700155][T29856] netlink: 'syz.0.6477': attribute type 25 has an invalid length. [ 644.700172][T29856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6477'. [ 644.826131][T29874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6480'. [ 644.869898][T29878] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 644.889250][T29878] bond2 (unregistering): Released all slaves [ 645.152193][T29900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6490'. [ 645.216031][T29903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.248340][T29903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.313460][T29912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 645.320776][T29912] IPv6: NLM_F_CREATE should be set when creating new route [ 645.329801][T29912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6494'. [ 645.368695][T29912] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.376121][T29912] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.428778][T29912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 645.445377][T29912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 645.471269][T29912] veth1_macvtap: left promiscuous mode [ 645.548781][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.558298][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.567754][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.578024][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.074269][T29948] netlink: 'syz.1.6502': attribute type 21 has an invalid length. [ 646.148603][T29948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6502'. [ 646.412003][T29967] tipc: Started in network mode [ 646.427569][T29967] tipc: Node identity da930ef58612, cluster identity 4711 [ 646.434878][T29967] tipc: Enabled bearer , priority 0 [ 646.458420][T29967] syzkaller0: entered promiscuous mode [ 646.463924][T29967] syzkaller0: entered allmulticast mode [ 646.501360][T29971] bridge3: entered promiscuous mode [ 646.511823][T29971] bridge3: entered allmulticast mode [ 646.560394][T29967] tipc: Resetting bearer [ 646.597300][T29964] tipc: Resetting bearer [ 646.639877][T29964] tipc: Disabling bearer [ 646.801793][ T12] wlan1: Trigger new scan to find an IBSS to join [ 646.911094][T30000] netlink: 154556 bytes leftover after parsing attributes in process `syz.4.6515'. [ 646.995047][T30008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 647.002379][T30008] IPv6: NLM_F_CREATE should be set when creating new route [ 647.117619][T30013] netlink: 'syz.3.6519': attribute type 13 has an invalid length. [ 647.131278][T30017] netlink: 'syz.4.6520': attribute type 1 has an invalid length. [ 647.142967][T30017] netlink: 'syz.4.6520': attribute type 1 has an invalid length. [ 647.164665][T30013] netlink: 'syz.3.6519': attribute type 13 has an invalid length. [ 647.172838][ T9843] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.183066][ T9843] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.183999][T30021] raw_sendmsg: syz.1.6521 forgot to set AF_INET. Fix it! [ 647.193631][ T9843] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.213584][ T9843] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.238205][T30024] SET target dimension over the limit! [ 647.474304][T30045] openvswitch: netlink: Message has 93 unknown bytes. [ 647.481803][T30045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.615796][T30051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 647.704805][T30054] syzkaller0: entered promiscuous mode [ 647.711422][T30054] syzkaller0: entered allmulticast mode [ 647.725065][T30059] syzkaller1: entered promiscuous mode [ 647.733293][T30059] syzkaller1: entered allmulticast mode [ 647.745134][T30059] netlink: 'syz.0.6534': attribute type 1 has an invalid length. [ 647.797785][T30059] bond2: (slave gretap2): making interface the new active one [ 647.806259][T30059] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 648.016187][T30078] netlink: 'syz.4.6537': attribute type 16 has an invalid length. [ 648.026825][T30078] netlink: 'syz.4.6537': attribute type 17 has an invalid length. [ 648.067829][T30078] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.075317][T30078] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.132233][T30078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.151506][T30078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.248165][T30073] ip6_vti0 speed is unknown, defaulting to 1000 [ 648.281811][T23704] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.297962][T23704] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.319055][T30073] ip6_vti0 speed is unknown, defaulting to 1000 [ 648.347546][T30073] ip6_vti0 speed is unknown, defaulting to 1000 [ 648.347613][T23704] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.399986][T30084] vcan0: tx address claim with different name [ 648.416937][T23704] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.588544][T30073] infiniband syz2: set down [ 648.593186][T23195] ip6_vti0 speed is unknown, defaulting to 1000 [ 648.599605][T30073] infiniband syz2: added ip6_vti0 [ 648.672662][T30095] : entered promiscuous mode [ 648.747502][T30073] RDS/IB: syz2: added [ 648.751581][T30073] smc: adding ib device syz2 with port count 1 [ 648.758457][T30073] smc: ib device syz2 port 1 has pnetid SYZ1 (user defined) [ 648.832258][T30095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.849799][T30095] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.866517][T30095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 648.894555][T23195] ip6_vti0 speed is unknown, defaulting to 1000 [ 648.940325][T30073] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.122368][ T9843] wlan1: Creating new IBSS network, BSSID 0e:75:97:90:32:01 [ 649.579140][T30073] ip6_vti0 speed is unknown, defaulting to 1000 [ 649.613235][T30146] FAULT_INJECTION: forcing a failure. [ 649.613235][T30146] name failslab, interval 1, probability 0, space 0, times 1 [ 649.646844][T30146] CPU: 1 UID: 0 PID: 30146 Comm: syz.3.6563 Not tainted syzkaller #0 PREEMPT(full) [ 649.646870][T30146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 649.646889][T30146] Call Trace: [ 649.646896][T30146] [ 649.646903][T30146] dump_stack_lvl+0xe8/0x150 [ 649.646931][T30146] should_fail_ex+0x412/0x560 [ 649.646958][T30146] should_failslab+0xa8/0x100 [ 649.646982][T30146] __kmalloc_cache_noprof+0x88/0x660 [ 649.647004][T30146] ? sctp_association_new+0x89/0x25e0 [ 649.647031][T30146] sctp_association_new+0x89/0x25e0 [ 649.647052][T30146] ? sctp_do_bind+0x661/0x9d0 [ 649.647084][T30146] sctp_connect_new_asoc+0x2e4/0x6b0 [ 649.647108][T30146] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 649.647132][T30146] ? __local_bh_enable_ip+0xd0/0x130 [ 649.647149][T30146] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 649.647171][T30146] ? security_sctp_bind_connect+0x7e/0x2c0 [ 649.647193][T30146] sctp_sendmsg+0x1528/0x2c10 [ 649.647226][T30146] ? __pfx_sctp_sendmsg+0x10/0x10 [ 649.647245][T30146] ? aa_sk_perm+0x15a/0x960 [ 649.647267][T30146] ? aa_sk_perm+0x82d/0x960 [ 649.647283][T30146] ? __might_fault+0xaf/0x130 [ 649.647306][T30146] ? __pfx_aa_sk_perm+0x10/0x10 [ 649.647328][T30146] ? sock_rps_record_flow+0x19/0x400 [ 649.647351][T30146] ? inet_sendmsg+0x2f4/0x370 [ 649.647373][T30146] ____sys_sendmsg+0x894/0xad0 [ 649.647400][T30146] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.647425][T30146] ? import_iovec+0x73/0xa0 [ 649.647448][T30146] ___sys_sendmsg+0x2a5/0x360 [ 649.647466][T30146] ? __lock_acquire+0x6b5/0x2cf0 [ 649.647487][T30146] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.647509][T30146] ? kstrtouint+0x6e/0xe0 [ 649.647551][T30146] ? __fget_files+0x2a/0x420 [ 649.647566][T30146] ? __fget_files+0x3a0/0x420 [ 649.647592][T30146] __sys_sendmmsg+0x27c/0x4e0 [ 649.647617][T30146] ? __pfx___sys_sendmmsg+0x10/0x10 [ 649.647633][T30146] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 649.647674][T30146] ? ksys_write+0x242/0x270 [ 649.647694][T30146] ? __pfx_ksys_write+0x10/0x10 [ 649.647716][T30146] __x64_sys_sendmmsg+0xa0/0xc0 [ 649.647737][T30146] do_syscall_64+0x14d/0xf80 [ 649.647755][T30146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.647771][T30146] ? trace_irq_disable+0x37/0x100 [ 649.647787][T30146] ? clear_bhb_loop+0x40/0x90 [ 649.647806][T30146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.647820][T30146] RIP: 0033:0x7f7f9219bf79 [ 649.647835][T30146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.647849][T30146] RSP: 002b:00007f7f93063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 649.647867][T30146] RAX: ffffffffffffffda RBX: 00007f7f92415fa0 RCX: 00007f7f9219bf79 [ 649.647886][T30146] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000003 [ 649.647896][T30146] RBP: 00007f7f93063090 R08: 0000000000000000 R09: 0000000000000000 [ 649.647906][T30146] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000001 [ 649.647915][T30146] R13: 00007f7f92416038 R14: 00007f7f92415fa0 R15: 00007ffdaec83958 [ 649.647944][T30146] [ 649.735925][T30153] __nla_validate_parse: 15 callbacks suppressed [ 649.735943][T30153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6565'. [ 649.769897][ T5829] Bluetooth: hci0: command 0x0405 tx timeout [ 649.805592][T30154] validate_nla: 3 callbacks suppressed [ 649.805609][T30154] netlink: 'syz.0.6565': attribute type 11 has an invalid length. [ 649.822060][T26855] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 649.845545][T30154] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6565'. [ 649.998553][T30073] ip6_vti0 speed is unknown, defaulting to 1000 [ 650.102599][T30161] tipc: Enabled bearer , priority 0 [ 650.135659][T30162] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6568'. [ 650.205560][T30161] syzkaller0: entered promiscuous mode [ 650.219424][T30161] syzkaller0: entered allmulticast mode [ 650.228969][T30166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6570'. [ 650.232539][T30161] tipc: Resetting bearer [ 650.262509][T30160] tipc: Resetting bearer [ 650.321558][T30168] xt_cgroup: xt_cgroup: no path or classid specified [ 650.340950][T30170] tipc: Failed to remove unknown binding: 66,0,0/10136234:1562186602/1562186603 [ 650.371641][T30170] tipc: Failed to remove unknown binding: 66,0,0/10136234:1562186602/1562186603 [ 650.548796][T30178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6574'. [ 650.603861][T30179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6574'. [ 650.659060][T30181] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6574'. [ 651.829553][T30160] tipc: Disabling bearer [ 651.839269][T30073] ip6_vti0 speed is unknown, defaulting to 1000 [ 651.888967][T23195] tipc: Node number set to 1551961845 [ 651.989018][T30187] Bluetooth: MGMT ver 1.23 [ 652.395770][T30073] ip6_vti0 speed is unknown, defaulting to 1000 [ 652.414009][T30213] syzkaller0: entered promiscuous mode [ 652.446764][T30213] syzkaller0: entered allmulticast mode [ 652.558319][T30228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6588'. [ 652.608178][T30228] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.6588'. [ 652.625588][T30228] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 652.741978][T30239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6590'. [ 652.820654][T30239] syzkaller1: entered promiscuous mode [ 652.826428][T30239] syzkaller1: entered allmulticast mode [ 653.010912][T30073] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.043587][T30249] syzkaller0: entered promiscuous mode [ 653.076878][T30249] syzkaller0: entered allmulticast mode [ 653.095347][T30249] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 653.104490][T30249] syzkaller1: Refused to change device type [ 653.468009][T30073] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.883330][T30298] netlink: 'syz.0.6609': attribute type 21 has an invalid length. [ 653.980106][T30296] vlan1: entered allmulticast mode [ 653.985277][T30296] hsr0: entered allmulticast mode [ 653.991040][T30296] hsr_slave_0: entered allmulticast mode [ 653.997182][T30296] hsr_slave_1: entered allmulticast mode [ 654.327385][T30330] netlink: 'syz.4.6622': attribute type 2 has an invalid length. [ 654.364905][T30334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.519173][T30335] hsr_slave_0: left promiscuous mode [ 654.531810][T30335] hsr_slave_1: left promiscuous mode [ 654.708293][T30356] bpq0: entered promiscuous mode [ 654.713798][T30357] netlink: 'syz.2.6626': attribute type 10 has an invalid length. [ 654.729924][T30357] team0: Device ipvlan1 failed to register rx_handler [ 654.895535][T30367] netlink: 'syz.1.6631': attribute type 1 has an invalid length. [ 654.951242][T30367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 655.018934][T30372] bond3: (slave veth7): Enslaving as an active interface with a down link [ 655.041368][T30375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 655.045064][T30367] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 655.112475][T30367] __nla_validate_parse: 10 callbacks suppressed [ 655.112493][T30367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6631'. [ 655.113147][T30372] bond3: (slave veth9): Enslaving as an active interface with a down link [ 655.129156][T30382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6635'. [ 655.221817][T30382] team0: Device gtp0 is up. Set it down before adding it as a team port [ 655.268765][T30390] netlink: 'syz.1.6639': attribute type 4 has an invalid length. [ 655.748749][T30415] macvtap1: entered allmulticast mode [ 655.754405][T30415] veth0_macvtap: entered allmulticast mode [ 655.784947][T30422] macvtap2: entered allmulticast mode [ 656.011178][T30439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6652'. [ 656.021242][T30441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6654'. [ 656.035092][T30439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.120946][T30439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.250048][T30455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6661'. [ 656.324695][T30459] netlink: 'syz.3.6662': attribute type 7 has an invalid length. [ 656.339585][T30461] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6664'. [ 656.423947][T30465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6666'. [ 656.463206][T30465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 656.480918][T30465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6666'. [ 656.498645][T30473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6668'. [ 656.508337][T30473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6668'. [ 656.521921][T30468] x_tables: duplicate underflow at hook 1 [ 656.547944][T30470] SET target dimension over the limit! [ 656.625961][T30479] tipc: New replicast peer: 255.255.255.255 [ 656.633319][T30479] tipc: Enabled bearer , priority 10 [ 656.730616][ T77] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.745617][ T77] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.798226][ T77] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.849207][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 657.059607][T30499] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 657.093988][T30499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 657.111852][T30499] netlink: 'syz.1.6678': attribute type 1 has an invalid length. [ 657.179981][T30501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.249021][T30512] vcan2: entered promiscuous mode [ 657.254343][T30512] vcan2: entered allmulticast mode [ 657.270167][T30514] netlink: 'syz.4.6685': attribute type 2 has an invalid length. [ 657.288740][T30514] netlink: 'syz.4.6685': attribute type 2 has an invalid length. [ 657.485958][T30531] tipc: Enabled bearer , priority 0 [ 657.601126][T30540] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.608539][T30540] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.757209][ T5894] tipc: Node number set to 3448956176 [ 657.836817][ T12] wlan1: Trigger new scan to find an IBSS to join [ 657.843046][T30557] 0: renamed from hsr_slave_1 (while UP) [ 657.864007][T30557] 0: entered allmulticast mode [ 657.870460][T30557] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 658.057085][ T77] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.066057][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.082195][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.188455][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 658.221780][T30585] mac80211_hwsim hwsim65 syzkaller0: Caught tx_queue_len zero misconfig [ 658.574974][T30616] bond1 (unregistering): Released all slaves [ 658.756386][T30630] vcan0: tx address claim with dlc 3 [ 658.807699][T30637] netlink: 'syz.1.6720': attribute type 2 has an invalid length. [ 658.941008][T30644] xt_TCPMSS: Only works on TCP SYN packets [ 659.140868][T30654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.232135][T30659] ip6t_srh: unknown srh match flags 5F28 [ 659.387790][T30670] netlink: 'syz.0.6734': attribute type 4 has an invalid length. [ 659.517344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.592566][T30693] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 659.718810][T30699] netlink: 'syz.2.6741': attribute type 1 has an invalid length. [ 659.735319][T30698] ip6gre1: entered allmulticast mode [ 659.750072][T30702] Cannot find set identified by id 3 to match [ 659.756470][T30703] Cannot find set identified by id 3 to match [ 659.790763][T30700] syzkaller0: entered promiscuous mode [ 659.796266][T30700] syzkaller0: entered allmulticast mode [ 659.988839][T30719] bond0: entered promiscuous mode [ 660.009528][T30719] bond_slave_0: entered promiscuous mode [ 660.015414][T30719] bond_slave_1: entered promiscuous mode [ 660.028623][T30719] bond0: left promiscuous mode [ 660.033546][T30719] bond_slave_0: left promiscuous mode [ 660.040604][T30719] bond_slave_1: left promiscuous mode [ 660.066282][T30732] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20004 [ 660.351268][T30749] __nla_validate_parse: 29 callbacks suppressed [ 660.351285][T30749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6754'. [ 660.473879][T30756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6757'. [ 660.807673][ T5829] Bluetooth: hci4: command tx timeout [ 660.882636][T30766] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.6761'. [ 660.919357][T30766] tipc: Resetting bearer [ 660.929504][T30766] tipc: Resetting bearer [ 660.942389][T30766] tipc: Resetting bearer [ 661.439561][ T2373] block nbd0: Possible stuck request ffff88802659d000: control (read@0,1024B). Runtime 30 seconds [ 661.451859][ T2373] block nbd0: Possible stuck request ffff88802659d200: control (read@1024,1024B). Runtime 30 seconds [ 661.462859][ T2373] block nbd0: Possible stuck request ffff88802659d400: control (read@2048,1024B). Runtime 30 seconds [ 661.474180][ T2373] block nbd0: Possible stuck request ffff88802659d600: control (read@3072,1024B). Runtime 30 seconds [ 662.796852][ T36] wlan1: Trigger new scan to find an IBSS to join [ 663.057385][T30732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.089826][T30774] netlink: 'syz.0.6764': attribute type 1 has an invalid length. [ 663.234561][T30788] FAULT_INJECTION: forcing a failure. [ 663.234561][T30788] name failslab, interval 1, probability 0, space 0, times 0 [ 663.266936][T30788] CPU: 1 UID: 0 PID: 30788 Comm: syz.3.6768 Not tainted syzkaller #0 PREEMPT(full) [ 663.266960][T30788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 663.266970][T30788] Call Trace: [ 663.266978][T30788] [ 663.266986][T30788] dump_stack_lvl+0xe8/0x150 [ 663.267013][T30788] should_fail_ex+0x412/0x560 [ 663.267041][T30788] should_failslab+0xa8/0x100 [ 663.267066][T30788] __kmalloc_cache_noprof+0x88/0x660 [ 663.267087][T30788] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 663.267104][T30788] ? sctp_add_bind_addr+0x8c/0x370 [ 663.267126][T30788] sctp_add_bind_addr+0x8c/0x370 [ 663.267147][T30788] sctp_copy_local_addr_list+0x314/0x4f0 [ 663.267166][T30788] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 663.267191][T30788] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 663.267213][T30788] ? sctp_v4_is_any+0x35/0x60 [ 663.267231][T30788] ? sctp_copy_one_addr+0x93/0x360 [ 663.267251][T30788] sctp_bind_addr_copy+0xb3/0x3c0 [ 663.267269][T30788] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 663.267295][T30788] sctp_connect_new_asoc+0x2ff/0x6b0 [ 663.267320][T30788] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 663.267346][T30788] ? __local_bh_enable_ip+0xd0/0x130 [ 663.267363][T30788] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 663.267384][T30788] ? security_sctp_bind_connect+0x7e/0x2c0 [ 663.267406][T30788] sctp_sendmsg+0x1528/0x2c10 [ 663.267439][T30788] ? __pfx_sctp_sendmsg+0x10/0x10 [ 663.267458][T30788] ? aa_sk_perm+0x15a/0x960 [ 663.267480][T30788] ? aa_sk_perm+0x82d/0x960 [ 663.267499][T30788] ? __might_fault+0xaf/0x130 [ 663.267524][T30788] ? __pfx_aa_sk_perm+0x10/0x10 [ 663.267548][T30788] ? sock_rps_record_flow+0x19/0x400 [ 663.267573][T30788] ? inet_sendmsg+0x2f4/0x370 [ 663.267598][T30788] ____sys_sendmsg+0x894/0xad0 [ 663.267628][T30788] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.267657][T30788] ? import_iovec+0x73/0xa0 [ 663.267679][T30788] ___sys_sendmsg+0x2a5/0x360 [ 663.267698][T30788] ? __lock_acquire+0x6b5/0x2cf0 [ 663.267721][T30788] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.267747][T30788] ? kstrtouint+0x6e/0xe0 [ 663.267794][T30788] ? __fget_files+0x2a/0x420 [ 663.267810][T30788] ? __fget_files+0x3a0/0x420 [ 663.267837][T30788] __sys_sendmmsg+0x27c/0x4e0 [ 663.267864][T30788] ? __pfx___sys_sendmmsg+0x10/0x10 [ 663.267883][T30788] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 663.267929][T30788] ? ksys_write+0x242/0x270 [ 663.267952][T30788] ? __pfx_ksys_write+0x10/0x10 [ 663.267979][T30788] __x64_sys_sendmmsg+0xa0/0xc0 [ 663.268002][T30788] do_syscall_64+0x14d/0xf80 [ 663.268023][T30788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.268040][T30788] ? clear_bhb_loop+0x40/0x90 [ 663.268061][T30788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.268078][T30788] RIP: 0033:0x7f7f9219bf79 [ 663.268094][T30788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.268109][T30788] RSP: 002b:00007f7f93063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 663.268129][T30788] RAX: ffffffffffffffda RBX: 00007f7f92415fa0 RCX: 00007f7f9219bf79 [ 663.268143][T30788] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000003 [ 663.268154][T30788] RBP: 00007f7f93063090 R08: 0000000000000000 R09: 0000000000000000 [ 663.268165][T30788] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000002 [ 663.268182][T30788] R13: 00007f7f92416038 R14: 00007f7f92415fa0 R15: 00007ffdaec83958 [ 663.268212][T30788] [ 663.343536][T30792] syzkaller0: entered promiscuous mode [ 663.375086][T30796] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6771'. [ 663.465447][T30792] syzkaller0: entered allmulticast mode [ 663.489716][T30799] netlink: 'syz.0.6771': attribute type 33 has an invalid length. [ 663.651812][T30782] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6767'. [ 663.658572][T30799] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6771'. [ 663.755923][T30811] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6776'. [ 663.989794][T30830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6783'. [ 664.000618][T30830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6783'. [ 664.080675][T30835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6784'. [ 664.114953][T30836] syz2: rxe_newlink: already configured on ip6_vti0 [ 664.501008][T30858] syzkaller0: entered promiscuous mode [ 664.525112][T30858] syzkaller0: entered allmulticast mode [ 664.581813][T30868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 664.699440][T30881] netlink: 'syz.1.6801': attribute type 20 has an invalid length. [ 664.749476][T30886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.919963][T30895] Cannot find add_set index 0 as target [ 664.940161][T30895] xt_TCPMSS: Only works on TCP SYN packets [ 664.946221][T30897] veth0: entered promiscuous mode [ 664.955343][T30896] veth0: left promiscuous mode [ 665.046855][T30904] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 665.060078][T30905] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 665.174614][T30913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 665.181947][T30913] IPv6: NLM_F_CREATE should be set when creating new route [ 665.347279][ T77] wlan1: Creating new IBSS network, BSSID 00:00:00:00:07:00 [ 665.420475][T30926] __nla_validate_parse: 5 callbacks suppressed [ 665.420488][T30926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6817'. [ 665.965092][T30963] netdevsim netdevsim2: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 666.171313][T30976] sctp: [Deprecated]: syz.1.6831 (pid 30976) Use of int in maxseg socket option. [ 666.171313][T30976] Use struct sctp_assoc_value instead [ 666.196406][T30977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6830'. [ 666.306358][T30984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6833'. [ 666.320822][T30984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6833'. [ 666.355764][T30987] "syz.3.6834" (30987) uses obsolete ecb(arc4) skcipher [ 666.397171][T30987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.450855][T30990] xt_hashlimit: size too large, truncated to 1048576 [ 666.505803][T31000] openvswitch: netlink: IP tunnel dst address not specified [ 666.531542][T31003] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6835'. [ 666.567961][T31003] netlink: 'syz.1.6835': attribute type 7 has an invalid length. [ 666.596212][T31003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6835'. [ 666.752304][T31017] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6844'. [ 666.785523][T31017] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 666.844967][T31022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6846'. [ 667.101884][T31042] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 667.128596][T31046] netlink: 'syz.4.6853': attribute type 33 has an invalid length. [ 667.267241][T31055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.277921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.288602][T31055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.298292][ T9844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.306994][ T9844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.336749][T31058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 667.387102][T31060] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6860'. [ 667.400111][T31060] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6860'. [ 667.667791][T31081] xt_hashlimit: size too large, truncated to 1048576 [ 667.692772][T31085] netlink: 'syz.1.6868': attribute type 1 has an invalid length. [ 667.723871][T31085] 8021q: adding VLAN 0 to HW filter on device bond5 [ 667.761609][T31085] syzkaller0: entered promiscuous mode [ 667.767388][T31085] syzkaller0: entered allmulticast mode [ 667.860956][T31100] netlink: 'syz.0.6873': attribute type 1 has an invalid length. [ 667.870629][T31100] netlink: 'syz.0.6873': attribute type 1 has an invalid length. [ 667.880700][T31100] netlink: 'syz.0.6873': attribute type 21 has an invalid length. [ 668.038364][T31107] tipc: Enabling of bearer rejected, already enabled [ 668.049363][T31107] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 668.068919][T31107] tipc: Resetting bearer [ 668.213055][T31127] netlink: 'syz.4.6883': attribute type 10 has an invalid length. [ 668.222002][T31127] veth1_macvtap: left promiscuous mode [ 668.228751][T31127] team0: Device veth1_macvtap failed to register rx_handler [ 668.318231][T31085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.406278][T31136] netem: change failed [ 668.515719][T31142] netlink: 'syz.1.6890': attribute type 6 has an invalid length. [ 668.524344][T31142] netlink: 'syz.1.6890': attribute type 5 has an invalid length. [ 668.672095][T31151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.835979][T31165] netlink: 'syz.0.6899': attribute type 29 has an invalid length. [ 668.844338][T31166] netlink: 'syz.0.6899': attribute type 29 has an invalid length. [ 668.898162][T31168] netlink: 'syz.1.6900': attribute type 4 has an invalid length. [ 669.272993][T31206] netlink: 'syz.0.6913': attribute type 33 has an invalid length. [ 669.587215][T31229] veth7: entered promiscuous mode [ 669.592410][T31229] veth7: entered allmulticast mode [ 669.880011][T31250] ip6gre1: entered allmulticast mode [ 670.067718][T31260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.146845][T31259] net_ratelimit: 12 callbacks suppressed [ 670.146866][T31259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.161389][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.321561][T31264] xt_CT: No such helper "syz1" [ 670.350709][T31279] lo: entered promiscuous mode [ 670.361717][T31279] tunl0: entered promiscuous mode [ 670.369474][T31279] gre0: entered promiscuous mode [ 670.395934][T31279] gretap0: entered promiscuous mode [ 670.420787][T31279] erspan0: entered promiscuous mode [ 670.438726][T31279] ip_vti0: entered promiscuous mode [ 670.566534][T31291] __nla_validate_parse: 22 callbacks suppressed [ 670.566552][T31291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6938'. [ 670.757738][T31305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6945'. [ 670.794901][T31308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6944'. [ 670.801858][T31305] openvswitch: netlink: Flow actions attr not present in new flow. [ 670.874778][T31318] IPv6: NLM_F_CREATE should be specified when creating new route [ 670.895061][T31318] xt_cgroup: path and classid specified [ 671.016352][T31325] macvlan0: entered promiscuous mode [ 671.090941][T31330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.098224][T31330] IPv6: NLM_F_CREATE should be set when creating new route [ 671.131353][T31331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 671.160728][T31338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6956'. [ 671.218115][T31340] syzkaller0: entered promiscuous mode [ 671.224802][T31340] syzkaller0: entered allmulticast mode [ 671.235974][T31340] tipc: Started in network mode [ 671.241513][T31340] tipc: Node identity 2252657fc461, cluster identity 4711 [ 671.262771][T31340] tipc: Enabled bearer , priority 0 [ 671.308150][T31339] tipc: Resetting bearer [ 671.355439][T31339] tipc: Disabling bearer [ 671.403152][T31355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 671.439018][T31355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6963'. [ 671.530757][T31363] IPv6: sit1: Disabled Multicast RS [ 671.555184][T31363] sit1: entered allmulticast mode [ 671.679491][T26855] Bluetooth: hci4: command 0x0405 tx timeout [ 671.823430][T31384] netlink: 'syz.3.6971': attribute type 10 has an invalid length. [ 671.825403][T31386] veth1_macvtap: left promiscuous mode [ 671.843533][T31386] macsec0: entered promiscuous mode [ 671.849388][T31386] macsec0: entered allmulticast mode [ 671.887841][T31386] veth1_macvtap: entered promiscuous mode [ 671.894040][T31386] veth1_macvtap: entered allmulticast mode [ 671.901255][T31386] macsec0: left promiscuous mode [ 671.906467][T31386] macsec0: left allmulticast mode [ 671.913081][T31386] veth1_macvtap: left allmulticast mode [ 671.946431][T31392] veth1_macvtap: left promiscuous mode [ 671.971798][T31392] macsec0: entered promiscuous mode [ 671.980227][T31392] macsec0: entered allmulticast mode [ 672.119167][T31407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6978'. [ 672.172078][T31413] netlink: 'syz.0.6978': attribute type 3 has an invalid length. [ 672.180526][T31413] netlink: 'syz.0.6978': attribute type 3 has an invalid length. [ 672.212186][T31407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6978'. [ 672.400623][T31430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 672.466554][T31433] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6989'. [ 672.591078][T31446] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 672.700950][T31460] sctp: [Deprecated]: syz.4.6995 (pid 31460) Use of int in max_burst socket option. [ 672.700950][T31460] Use struct sctp_assoc_value instead [ 672.781424][T31464] syzkaller0: entered promiscuous mode [ 672.787528][T31464] syzkaller0: entered allmulticast mode [ 672.806818][T31466] netlink: zone id is out of range [ 672.812504][T31466] netlink: zone id is out of range [ 672.817805][T31466] netlink: zone id is out of range [ 672.823534][T31466] netlink: zone id is out of range [ 672.845800][T31466] netlink: zone id is out of range [ 672.855746][T31466] netlink: zone id is out of range [ 672.862039][T31472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.046015][T31483] sctp: [Deprecated]: syz.4.7003 (pid 31483) Use of int in maxseg socket option. [ 673.046015][T31483] Use struct sctp_assoc_value instead [ 673.106398][T31490] FAULT_INJECTION: forcing a failure. [ 673.106398][T31490] name failslab, interval 1, probability 0, space 0, times 0 [ 673.124183][T31490] CPU: 1 UID: 0 PID: 31490 Comm: syz.2.7005 Not tainted syzkaller #0 PREEMPT(full) [ 673.124208][T31490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 673.124219][T31490] Call Trace: [ 673.124226][T31490] [ 673.124235][T31490] dump_stack_lvl+0xe8/0x150 [ 673.124292][T31490] should_fail_ex+0x412/0x560 [ 673.124320][T31490] should_failslab+0xa8/0x100 [ 673.124346][T31490] __kmalloc_cache_noprof+0x88/0x660 [ 673.124367][T31490] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 673.124385][T31490] ? sctp_add_bind_addr+0x8c/0x370 [ 673.124408][T31490] sctp_add_bind_addr+0x8c/0x370 [ 673.124430][T31490] sctp_copy_local_addr_list+0x314/0x4f0 [ 673.124452][T31490] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 673.124471][T31490] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 673.124493][T31490] ? sctp_v4_is_any+0x35/0x60 [ 673.124511][T31490] ? sctp_copy_one_addr+0x93/0x360 [ 673.124533][T31490] sctp_bind_addr_copy+0xb3/0x3c0 [ 673.124552][T31490] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 673.124580][T31490] sctp_connect_new_asoc+0x2ff/0x6b0 [ 673.124607][T31490] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 673.124634][T31490] ? __local_bh_enable_ip+0xd0/0x130 [ 673.124652][T31490] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 673.124675][T31490] ? security_sctp_bind_connect+0x7e/0x2c0 [ 673.124698][T31490] sctp_sendmsg+0x1528/0x2c10 [ 673.124732][T31490] ? __pfx_sctp_sendmsg+0x10/0x10 [ 673.124748][T31490] ? aa_sk_perm+0x15a/0x960 [ 673.124766][T31490] ? aa_sk_perm+0x82d/0x960 [ 673.124781][T31490] ? __might_fault+0xaf/0x130 [ 673.124801][T31490] ? __pfx_aa_sk_perm+0x10/0x10 [ 673.124819][T31490] ? sock_rps_record_flow+0x19/0x400 [ 673.124838][T31490] ? inet_sendmsg+0x2f4/0x370 [ 673.124857][T31490] ____sys_sendmsg+0x894/0xad0 [ 673.124881][T31490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.124903][T31490] ? import_iovec+0x73/0xa0 [ 673.124919][T31490] ___sys_sendmsg+0x2a5/0x360 [ 673.124934][T31490] ? __lock_acquire+0x6b5/0x2cf0 [ 673.124952][T31490] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.124971][T31490] ? kstrtouint+0x6e/0xe0 [ 673.125006][T31490] ? __fget_files+0x2a/0x420 [ 673.125019][T31490] ? __fget_files+0x3a0/0x420 [ 673.125039][T31490] __sys_sendmmsg+0x27c/0x4e0 [ 673.125059][T31490] ? __pfx___sys_sendmmsg+0x10/0x10 [ 673.125073][T31490] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 673.125109][T31490] ? ksys_write+0x242/0x270 [ 673.125126][T31490] ? __pfx_ksys_write+0x10/0x10 [ 673.125146][T31490] __x64_sys_sendmmsg+0xa0/0xc0 [ 673.125163][T31490] do_syscall_64+0x14d/0xf80 [ 673.125180][T31490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.125192][T31490] ? trace_irq_disable+0x37/0x100 [ 673.125207][T31490] ? clear_bhb_loop+0x40/0x90 [ 673.125223][T31490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.125235][T31490] RIP: 0033:0x7f5d9299bf79 [ 673.125254][T31490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.125265][T31490] RSP: 002b:00007f5d9390b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 673.125280][T31490] RAX: ffffffffffffffda RBX: 00007f5d92c15fa0 RCX: 00007f5d9299bf79 [ 673.125290][T31490] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000003 [ 673.125299][T31490] RBP: 00007f5d9390b090 R08: 0000000000000000 R09: 0000000000000000 [ 673.125307][T31490] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000002 [ 673.125316][T31490] R13: 00007f5d92c16038 R14: 00007f5d92c15fa0 R15: 00007fffc6f7be88 [ 673.125338][T31490] [ 673.141933][T31492] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.7006'. [ 673.250278][T31496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7008'. [ 673.519722][T31505] validate_nla: 1 callbacks suppressed [ 673.519741][T31505] netlink: 'syz.1.7011': attribute type 12 has an invalid length. [ 673.542673][T31505] netlink: 'syz.1.7011': attribute type 12 has an invalid length. [ 673.609992][T31507] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 673.804709][T31528] FAULT_INJECTION: forcing a failure. [ 673.804709][T31528] name failslab, interval 1, probability 0, space 0, times 0 [ 673.835002][T31528] CPU: 0 UID: 0 PID: 31528 Comm: syz.3.7018 Not tainted syzkaller #0 PREEMPT(full) [ 673.835029][T31528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 673.835041][T31528] Call Trace: [ 673.835048][T31528] [ 673.835056][T31528] dump_stack_lvl+0xe8/0x150 [ 673.835088][T31528] should_fail_ex+0x412/0x560 [ 673.835116][T31528] should_failslab+0xa8/0x100 [ 673.835153][T31528] __kmalloc_cache_noprof+0x88/0x660 [ 673.835174][T31528] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 673.835193][T31528] ? sctp_add_bind_addr+0x8c/0x370 [ 673.835217][T31528] sctp_add_bind_addr+0x8c/0x370 [ 673.835246][T31528] sctp_copy_local_addr_list+0x314/0x4f0 [ 673.835268][T31528] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 673.835287][T31528] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 673.835310][T31528] ? sctp_v4_is_any+0x35/0x60 [ 673.835327][T31528] ? sctp_copy_one_addr+0x93/0x360 [ 673.835347][T31528] sctp_bind_addr_copy+0xb3/0x3c0 [ 673.835366][T31528] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 673.835393][T31528] sctp_connect_new_asoc+0x2ff/0x6b0 [ 673.835418][T31528] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 673.835445][T31528] ? __local_bh_enable_ip+0xd0/0x130 [ 673.835464][T31528] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 673.835486][T31528] ? security_sctp_bind_connect+0x7e/0x2c0 [ 673.835509][T31528] sctp_sendmsg+0x1528/0x2c10 [ 673.835546][T31528] ? __pfx_sctp_sendmsg+0x10/0x10 [ 673.835565][T31528] ? aa_sk_perm+0x15a/0x960 [ 673.835588][T31528] ? aa_sk_perm+0x82d/0x960 [ 673.835607][T31528] ? __might_fault+0xaf/0x130 [ 673.835633][T31528] ? __pfx_aa_sk_perm+0x10/0x10 [ 673.835658][T31528] ? sock_rps_record_flow+0x19/0x400 [ 673.835683][T31528] ? inet_sendmsg+0x2f4/0x370 [ 673.835708][T31528] ____sys_sendmsg+0x894/0xad0 [ 673.835740][T31528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 673.835770][T31528] ? import_iovec+0x73/0xa0 [ 673.835791][T31528] ___sys_sendmsg+0x2a5/0x360 [ 673.835811][T31528] ? __lock_acquire+0x6b5/0x2cf0 [ 673.835834][T31528] ? __pfx____sys_sendmsg+0x10/0x10 [ 673.835860][T31528] ? kstrtouint+0x6e/0xe0 [ 673.835908][T31528] ? __fget_files+0x2a/0x420 [ 673.835925][T31528] ? __fget_files+0x3a0/0x420 [ 673.835952][T31528] __sys_sendmmsg+0x27c/0x4e0 [ 673.835979][T31528] ? __pfx___sys_sendmmsg+0x10/0x10 [ 673.835998][T31528] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 673.836050][T31528] ? ksys_write+0x242/0x270 [ 673.836072][T31528] ? __pfx_ksys_write+0x10/0x10 [ 673.836099][T31528] __x64_sys_sendmmsg+0xa0/0xc0 [ 673.836121][T31528] do_syscall_64+0x14d/0xf80 [ 673.836149][T31528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.836165][T31528] ? trace_irq_disable+0x37/0x100 [ 673.836184][T31528] ? clear_bhb_loop+0x40/0x90 [ 673.836205][T31528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.836233][T31528] RIP: 0033:0x7f7f9219bf79 [ 673.836250][T31528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.836265][T31528] RSP: 002b:00007f7f93063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 673.836284][T31528] RAX: ffffffffffffffda RBX: 00007f7f92415fa0 RCX: 00007f7f9219bf79 [ 673.836297][T31528] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000003 [ 673.836309][T31528] RBP: 00007f7f93063090 R08: 0000000000000000 R09: 0000000000000000 [ 673.836320][T31528] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000002 [ 673.836332][T31528] R13: 00007f7f92416038 R14: 00007f7f92415fa0 R15: 00007ffdaec83958 [ 673.836362][T31528] [ 674.236557][T31535] netlink: 'syz.4.7022': attribute type 18 has an invalid length. [ 674.472370][T31559] netlink: 'syz.2.7027': attribute type 11 has an invalid length. [ 674.481832][T31559] netlink: 'syz.2.7027': attribute type 11 has an invalid length. [ 674.516564][T31559] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 674.548698][T31560] netlink: 'syz.2.7027': attribute type 11 has an invalid length. [ 674.583509][T31560] netlink: 'syz.2.7027': attribute type 11 has an invalid length. [ 674.802099][T31573] FAULT_INJECTION: forcing a failure. [ 674.802099][T31573] name failslab, interval 1, probability 0, space 0, times 0 [ 674.845481][T31573] CPU: 1 UID: 0 PID: 31573 Comm: syz.1.7032 Not tainted syzkaller #0 PREEMPT(full) [ 674.845507][T31573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 674.845518][T31573] Call Trace: [ 674.845526][T31573] [ 674.845534][T31573] dump_stack_lvl+0xe8/0x150 [ 674.845562][T31573] should_fail_ex+0x412/0x560 [ 674.845590][T31573] should_failslab+0xa8/0x100 [ 674.845615][T31573] __kmalloc_cache_noprof+0x88/0x660 [ 674.845637][T31573] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 674.845655][T31573] ? sctp_add_bind_addr+0x8c/0x370 [ 674.845678][T31573] sctp_add_bind_addr+0x8c/0x370 [ 674.845700][T31573] sctp_copy_local_addr_list+0x314/0x4f0 [ 674.845721][T31573] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 674.845740][T31573] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 674.845762][T31573] ? sctp_v4_is_any+0x35/0x60 [ 674.845779][T31573] ? sctp_copy_one_addr+0x93/0x360 [ 674.845799][T31573] sctp_bind_addr_copy+0xb3/0x3c0 [ 674.845819][T31573] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 674.845847][T31573] sctp_connect_new_asoc+0x2ff/0x6b0 [ 674.845871][T31573] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 674.845898][T31573] ? __local_bh_enable_ip+0xd0/0x130 [ 674.845917][T31573] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 674.845940][T31573] ? security_sctp_bind_connect+0x7e/0x2c0 [ 674.845962][T31573] sctp_sendmsg+0x1528/0x2c10 [ 674.845995][T31573] ? __pfx_sctp_sendmsg+0x10/0x10 [ 674.846013][T31573] ? aa_sk_perm+0x15a/0x960 [ 674.846034][T31573] ? aa_sk_perm+0x82d/0x960 [ 674.846052][T31573] ? __might_fault+0xaf/0x130 [ 674.846075][T31573] ? __pfx_aa_sk_perm+0x10/0x10 [ 674.846096][T31573] ? sock_rps_record_flow+0x19/0x400 [ 674.846117][T31573] ? inet_sendmsg+0x2f4/0x370 [ 674.846139][T31573] ____sys_sendmsg+0x894/0xad0 [ 674.846167][T31573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.846194][T31573] ? import_iovec+0x73/0xa0 [ 674.846215][T31573] ___sys_sendmsg+0x2a5/0x360 [ 674.846234][T31573] ? __lock_acquire+0x6b5/0x2cf0 [ 674.846256][T31573] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.846290][T31573] ? kstrtouint+0x6e/0xe0 [ 674.846334][T31573] ? __fget_files+0x2a/0x420 [ 674.846351][T31573] ? __fget_files+0x3a0/0x420 [ 674.846376][T31573] __sys_sendmmsg+0x27c/0x4e0 [ 674.846402][T31573] ? __pfx___sys_sendmmsg+0x10/0x10 [ 674.846420][T31573] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 674.846466][T31573] ? ksys_write+0x242/0x270 [ 674.846489][T31573] ? __pfx_ksys_write+0x10/0x10 [ 674.846513][T31573] __x64_sys_sendmmsg+0xa0/0xc0 [ 674.846536][T31573] do_syscall_64+0x14d/0xf80 [ 674.846557][T31573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.846573][T31573] ? trace_irq_disable+0x37/0x100 [ 674.846594][T31573] ? clear_bhb_loop+0x40/0x90 [ 674.846612][T31573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.846627][T31573] RIP: 0033:0x7f8b9179bf79 [ 674.846643][T31573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.846658][T31573] RSP: 002b:00007f8b92587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 674.846678][T31573] RAX: ffffffffffffffda RBX: 00007f8b91a15fa0 RCX: 00007f8b9179bf79 [ 674.846690][T31573] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000003 [ 674.846701][T31573] RBP: 00007f8b92587090 R08: 0000000000000000 R09: 0000000000000000 [ 674.846712][T31573] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000002 [ 674.846722][T31573] R13: 00007f8b91a16038 R14: 00007f8b91a15fa0 R15: 00007ffc8ff1f388 [ 674.846751][T31573] [ 675.558026][T31610] netlink: 'syz.2.7042': attribute type 9 has an invalid length. [ 675.863058][T31630] __nla_validate_parse: 13 callbacks suppressed [ 675.863079][T31630] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.7048'. [ 676.084921][ T9843] tipc: Subscription rejected, illegal request [ 676.438339][T31679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7056'. [ 676.608460][T31688] tipc: Started in network mode [ 676.631974][T31688] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 676.665553][T31698] FAULT_INJECTION: forcing a failure. [ 676.665553][T31698] name failslab, interval 1, probability 0, space 0, times 0 [ 676.697828][T31688] tipc: Enabled bearer , priority 4 [ 676.724158][T31698] CPU: 0 UID: 0 PID: 31698 Comm: syz.1.7064 Not tainted syzkaller #0 PREEMPT(full) [ 676.724184][T31698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 676.724195][T31698] Call Trace: [ 676.724203][T31698] [ 676.724211][T31698] dump_stack_lvl+0xe8/0x150 [ 676.724248][T31698] should_fail_ex+0x412/0x560 [ 676.724275][T31698] should_failslab+0xa8/0x100 [ 676.724300][T31698] __kmalloc_cache_noprof+0x88/0x660 [ 676.724321][T31698] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 676.724340][T31698] ? sctp_add_bind_addr+0x8c/0x370 [ 676.724364][T31698] sctp_add_bind_addr+0x8c/0x370 [ 676.724387][T31698] sctp_copy_local_addr_list+0x314/0x4f0 [ 676.724407][T31698] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 676.724424][T31698] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 676.724446][T31698] ? sctp_v4_is_any+0x35/0x60 [ 676.724462][T31698] ? sctp_copy_one_addr+0x93/0x360 [ 676.724483][T31698] sctp_bind_addr_copy+0xb3/0x3c0 [ 676.724504][T31698] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 676.724530][T31698] sctp_connect_new_asoc+0x2ff/0x6b0 [ 676.724552][T31698] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 676.724578][T31698] ? __local_bh_enable_ip+0xd0/0x130 [ 676.724594][T31698] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 676.724617][T31698] ? security_sctp_bind_connect+0x7e/0x2c0 [ 676.724641][T31698] sctp_sendmsg+0x1528/0x2c10 [ 676.724676][T31698] ? __pfx_sctp_sendmsg+0x10/0x10 [ 676.724694][T31698] ? aa_sk_perm+0x15a/0x960 [ 676.724718][T31698] ? aa_sk_perm+0x82d/0x960 [ 676.724737][T31698] ? __might_fault+0xaf/0x130 [ 676.724761][T31698] ? __pfx_aa_sk_perm+0x10/0x10 [ 676.724784][T31698] ? sock_rps_record_flow+0x19/0x400 [ 676.724808][T31698] ? inet_sendmsg+0x2f4/0x370 [ 676.724833][T31698] ____sys_sendmsg+0x894/0xad0 [ 676.724864][T31698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.724895][T31698] ? import_iovec+0x73/0xa0 [ 676.724918][T31698] ___sys_sendmsg+0x2a5/0x360 [ 676.724936][T31698] ? __lock_acquire+0x6b5/0x2cf0 [ 676.724958][T31698] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.724983][T31698] ? kstrtouint+0x6e/0xe0 [ 676.725029][T31698] ? __fget_files+0x2a/0x420 [ 676.725046][T31698] ? __fget_files+0x3a0/0x420 [ 676.725074][T31698] __sys_sendmmsg+0x27c/0x4e0 [ 676.725099][T31698] ? __pfx___sys_sendmmsg+0x10/0x10 [ 676.725118][T31698] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 676.725167][T31698] ? ksys_write+0x242/0x270 [ 676.725190][T31698] ? __pfx_ksys_write+0x10/0x10 [ 676.725224][T31698] __x64_sys_sendmmsg+0xa0/0xc0 [ 676.725247][T31698] do_syscall_64+0x14d/0xf80 [ 676.725268][T31698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.725284][T31698] ? trace_irq_disable+0x37/0x100 [ 676.725303][T31698] ? clear_bhb_loop+0x40/0x90 [ 676.725325][T31698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.725342][T31698] RIP: 0033:0x7f8b9179bf79 [ 676.725358][T31698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.725372][T31698] RSP: 002b:00007f8b92587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 676.725392][T31698] RAX: ffffffffffffffda RBX: 00007f8b91a15fa0 RCX: 00007f8b9179bf79 [ 676.725405][T31698] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000003 [ 676.725417][T31698] RBP: 00007f8b92587090 R08: 0000000000000000 R09: 0000000000000000 [ 676.725428][T31698] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000002 [ 676.725439][T31698] R13: 00007f8b91a16038 R14: 00007f8b91a15fa0 R15: 00007ffc8ff1f388 [ 676.725468][T31698] [ 677.088029][T31704] netlink: 416 bytes leftover after parsing attributes in process `syz.2.7062'. [ 677.099610][T31703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7065'. [ 677.109365][T31703] netlink: 'syz.4.7065': attribute type 2 has an invalid length. [ 677.244664][T31710] IPv6: NLM_F_CREATE should be specified when creating new route [ 677.265966][T31711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7066'. [ 677.282129][T31714] netlink: 'syz.2.7068': attribute type 3 has an invalid length. [ 677.293500][T31714] netlink: 666 bytes leftover after parsing attributes in process `syz.2.7068'. [ 677.304817][T31708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7067'. [ 677.420493][T31730] netlink: 192 bytes leftover after parsing attributes in process `syz.0.7070'. [ 677.470739][T31726] netlink: 192 bytes leftover after parsing attributes in process `syz.0.7070'. [ 677.757248][T31753] netlink: 63 bytes leftover after parsing attributes in process `syz.4.7077'. [ 677.781554][T31756] netlink: 'syz.0.7079': attribute type 10 has an invalid length. [ 677.789930][ T5894] tipc: Node number set to 10463914 [ 678.075389][T31778] netlink: 'syz.2.7085': attribute type 12 has an invalid length. [ 678.088577][T31778] netlink: 'syz.2.7085': attribute type 29 has an invalid length. [ 678.389790][T31795] pim6reg: entered allmulticast mode [ 678.395654][T31796] pim6reg: left allmulticast mode [ 678.413128][T31801] SET target dimension over the limit! [ 678.473572][T31801] syzkaller1: entered promiscuous mode [ 678.487534][T31801] syzkaller1: entered allmulticast mode [ 678.522211][T31803] tipc: Failed to remove unknown binding: 66,0,0/0:1346853854/1346853855 [ 678.532090][T31803] tipc: Failed to remove unknown binding: 66,0,0/0:1346853854/1346853855 [ 678.660549][T31814] net_ratelimit: 137 callbacks suppressed [ 678.660570][T31814] openvswitch: netlink: Missing key (keys=40, expected=80) [ 678.673925][T31811] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 678.698903][T31817] SET target dimension over the limit! [ 678.995379][T31834] netlink: 'syz.2.7100': attribute type 1 has an invalid length. [ 679.068236][T31834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 679.157355][T31842] bond1: (slave veth0_to_bond): making interface the new active one [ 679.191330][T31842] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 679.226062][T31834] bridge_slave_0: left allmulticast mode [ 679.235507][T31834] bridge_slave_0: left promiscuous mode [ 679.244578][T31834] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.275785][T31834] bridge_slave_1: left allmulticast mode [ 679.319153][T31834] bridge_slave_1: left promiscuous mode [ 679.335674][T31834] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.360467][T31853] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 679.379016][T31834] bond1: (slave veth0_to_bond): Releasing active interface [ 679.394607][T31834] bond0: (slave bond_slave_0): Releasing backup interface [ 679.412423][T31834] bond0: (slave bond_slave_1): Releasing backup interface [ 679.430161][T31834] team0: Port device team_slave_0 removed [ 679.451168][T31834] team0: Port device team_slave_1 removed [ 679.459414][T31834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.468358][T31834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.478114][T31834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.485812][T31834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.506197][T31857] hsr_slave_0: left promiscuous mode [ 679.534017][T31857] 0: left promiscuous mode [ 679.702016][T31873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 679.724470][T31878] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 679.740369][T31875] netlink: 'syz.3.7110': attribute type 1 has an invalid length. [ 680.122827][T31911] netlink: 'syz.4.7122': attribute type 1 has an invalid length. [ 680.366037][T31935] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 680.469853][T31951] netlink: 'syz.3.7133': attribute type 2 has an invalid length. [ 680.646380][T31968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 680.748271][T31970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 680.896501][T31985] __nla_validate_parse: 25 callbacks suppressed [ 680.896520][T31985] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7141'. [ 681.037857][T31999] netlink: 'syz.2.7143': attribute type 10 has an invalid length. [ 681.062265][T31999] netlink: 'syz.2.7143': attribute type 13 has an invalid length. [ 681.083593][T31999] erspan0: refused to change device tx_queue_len [ 681.090757][T31999] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 681.154138][T32007] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 681.249636][T32012] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7149'. [ 681.259664][T32013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7149'. [ 681.322545][T32020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 681.330657][T32020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7151'. [ 681.383902][T32023] bond2: Unable to set down delay as MII monitoring is disabled [ 681.393625][T32023] bond2 (unregistering): Released all slaves [ 681.532066][T32030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7154'. [ 681.548487][T32030] bridge_slave_0 (unregistering): left allmulticast mode [ 681.555892][T32030] bridge_slave_0 (unregistering): left promiscuous mode [ 681.563605][T32030] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.679580][T32034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7155'. [ 681.689859][T32034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7155'. [ 681.737447][T32036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7157'. [ 681.772973][T32038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7158'. [ 681.958872][T32049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 681.967933][T32049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7162'. [ 682.244316][T32068] bond0: entered promiscuous mode [ 682.250508][T32068] bond_slave_0: entered promiscuous mode [ 682.256372][T32068] bond_slave_1: entered promiscuous mode [ 682.276031][T32068] batadv0: entered promiscuous mode [ 682.284282][T32068] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 682.294466][T32068] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 682.307579][T32073] xt_time: unknown flags 0xf4 [ 682.314458][T32068] hsr1: entered promiscuous mode [ 682.320255][T32068] hsr1: entered allmulticast mode [ 682.331897][T32074] netlink: 'syz.2.7169': attribute type 1 has an invalid length. [ 682.342803][T32068] bond0: entered allmulticast mode [ 682.348934][T32068] bond_slave_0: entered allmulticast mode [ 682.355384][T32068] bond_slave_1: entered allmulticast mode [ 682.361643][T32068] batadv0: entered allmulticast mode [ 682.368513][T32068] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 682.369476][T32076] openvswitch: netlink: IP tunnel dst address not specified [ 682.383873][T32068] bond0: left promiscuous mode [ 682.390016][T32068] bond_slave_0: left promiscuous mode [ 682.404506][T32068] bond_slave_1: left promiscuous mode [ 682.411666][T32068] batadv0: left promiscuous mode [ 682.441148][T32070] veth0_to_team: entered promiscuous mode [ 682.464959][T32070] veth0_to_team: left promiscuous mode [ 682.770411][T32099] netlink: 'syz.1.7177': attribute type 4 has an invalid length. [ 682.885032][T32104] FAULT_INJECTION: forcing a failure. [ 682.885032][T32104] name failslab, interval 1, probability 0, space 0, times 0 [ 682.970946][T32104] CPU: 1 UID: 0 PID: 32104 Comm: syz.1.7182 Not tainted syzkaller #0 PREEMPT(full) [ 682.970972][T32104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 682.970983][T32104] Call Trace: [ 682.970990][T32104] [ 682.970998][T32104] dump_stack_lvl+0xe8/0x150 [ 682.971024][T32104] should_fail_ex+0x412/0x560 [ 682.971049][T32104] should_failslab+0xa8/0x100 [ 682.971073][T32104] __kmalloc_cache_noprof+0x88/0x660 [ 682.971094][T32104] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 682.971112][T32104] ? sctp_add_bind_addr+0x8c/0x370 [ 682.971135][T32104] sctp_add_bind_addr+0x8c/0x370 [ 682.971158][T32104] sctp_copy_local_addr_list+0x314/0x4f0 [ 682.971178][T32104] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 682.971197][T32104] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 682.971219][T32104] ? sctp_v4_is_any+0x35/0x60 [ 682.971234][T32104] ? sctp_copy_one_addr+0x93/0x360 [ 682.971254][T32104] sctp_bind_addr_copy+0xb3/0x3c0 [ 682.971272][T32104] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 682.971297][T32104] sctp_connect_new_asoc+0x2ff/0x6b0 [ 682.971319][T32104] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 682.971343][T32104] ? __local_bh_enable_ip+0xd0/0x130 [ 682.971360][T32104] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 682.971382][T32104] ? security_sctp_bind_connect+0x7e/0x2c0 [ 682.971402][T32104] sctp_sendmsg+0x1528/0x2c10 [ 682.971434][T32104] ? __pfx_sctp_sendmsg+0x10/0x10 [ 682.971452][T32104] ? aa_sk_perm+0x15a/0x960 [ 682.971474][T32104] ? aa_sk_perm+0x82d/0x960 [ 682.971492][T32104] ? __might_fault+0xaf/0x130 [ 682.971529][T32104] ? __pfx_aa_sk_perm+0x10/0x10 [ 682.971551][T32104] ? sock_rps_record_flow+0x19/0x400 [ 682.971575][T32104] ? inet_sendmsg+0x2f4/0x370 [ 682.971597][T32104] ____sys_sendmsg+0x894/0xad0 [ 682.971625][T32104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.971654][T32104] ? import_iovec+0x73/0xa0 [ 682.971676][T32104] ___sys_sendmsg+0x2a5/0x360 [ 682.971695][T32104] ? __lock_acquire+0x6b5/0x2cf0 [ 682.971718][T32104] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.971743][T32104] ? kstrtouint+0x6e/0xe0 [ 682.971785][T32104] ? __fget_files+0x2a/0x420 [ 682.971802][T32104] ? __fget_files+0x3a0/0x420 [ 682.971830][T32104] __sys_sendmmsg+0x27c/0x4e0 [ 682.971854][T32104] ? __pfx___sys_sendmmsg+0x10/0x10 [ 682.971870][T32104] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 682.971915][T32104] ? ksys_write+0x242/0x270 [ 682.971937][T32104] ? __pfx_ksys_write+0x10/0x10 [ 682.971963][T32104] __x64_sys_sendmmsg+0xa0/0xc0 [ 682.971986][T32104] do_syscall_64+0x14d/0xf80 [ 682.972006][T32104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.972023][T32104] ? trace_irq_disable+0x37/0x100 [ 682.972042][T32104] ? clear_bhb_loop+0x40/0x90 [ 682.972063][T32104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.972079][T32104] RIP: 0033:0x7f8b9179bf79 [ 682.972096][T32104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.972111][T32104] RSP: 002b:00007f8b92587028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 682.972130][T32104] RAX: ffffffffffffffda RBX: 00007f8b91a15fa0 RCX: 00007f8b9179bf79 [ 682.972144][T32104] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000003 [ 682.972155][T32104] RBP: 00007f8b92587090 R08: 0000000000000000 R09: 0000000000000000 [ 682.972166][T32104] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000002 [ 682.972177][T32104] R13: 00007f8b91a16038 R14: 00007f8b91a15fa0 R15: 00007ffc8ff1f388 [ 682.972206][T32104] [ 683.004849][T32114] netlink: 'syz.3.7183': attribute type 1 has an invalid length. [ 683.168664][T32117] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 683.449606][T32127] netlink: 'syz.2.7189': attribute type 62 has an invalid length. [ 683.467542][T32124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 683.651871][T32143] FAULT_INJECTION: forcing a failure. [ 683.651871][T32143] name failslab, interval 1, probability 0, space 0, times 0 [ 683.666849][T32143] CPU: 1 UID: 0 PID: 32143 Comm: syz.4.7194 Not tainted syzkaller #0 PREEMPT(full) [ 683.666875][T32143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.666886][T32143] Call Trace: [ 683.666894][T32143] [ 683.666901][T32143] dump_stack_lvl+0xe8/0x150 [ 683.666929][T32143] should_fail_ex+0x412/0x560 [ 683.666957][T32143] should_failslab+0xa8/0x100 [ 683.666982][T32143] __kmalloc_cache_noprof+0x88/0x660 [ 683.667003][T32143] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 683.667022][T32143] ? sctp_add_bind_addr+0x8c/0x370 [ 683.667046][T32143] sctp_add_bind_addr+0x8c/0x370 [ 683.667069][T32143] sctp_copy_local_addr_list+0x314/0x4f0 [ 683.667091][T32143] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 683.667110][T32143] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 683.667134][T32143] ? sctp_v4_is_any+0x35/0x60 [ 683.667151][T32143] ? sctp_copy_one_addr+0x93/0x360 [ 683.667173][T32143] sctp_bind_addr_copy+0xb3/0x3c0 [ 683.667193][T32143] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 683.667220][T32143] sctp_connect_new_asoc+0x2ff/0x6b0 [ 683.667245][T32143] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 683.667273][T32143] ? __local_bh_enable_ip+0xd0/0x130 [ 683.667291][T32143] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 683.667313][T32143] ? security_sctp_bind_connect+0x7e/0x2c0 [ 683.667337][T32143] sctp_sendmsg+0x1528/0x2c10 [ 683.667372][T32143] ? __pfx_sctp_sendmsg+0x10/0x10 [ 683.667391][T32143] ? aa_sk_perm+0x15a/0x960 [ 683.667414][T32143] ? aa_sk_perm+0x82d/0x960 [ 683.667434][T32143] ? __might_fault+0xaf/0x130 [ 683.667459][T32143] ? __pfx_aa_sk_perm+0x10/0x10 [ 683.667483][T32143] ? sock_rps_record_flow+0x19/0x400 [ 683.667508][T32143] ? inet_sendmsg+0x2f4/0x370 [ 683.667532][T32143] ____sys_sendmsg+0x894/0xad0 [ 683.667563][T32143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.667592][T32143] ? import_iovec+0x73/0xa0 [ 683.667614][T32143] ___sys_sendmsg+0x2a5/0x360 [ 683.667633][T32143] ? __lock_acquire+0x6b5/0x2cf0 [ 683.667656][T32143] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.667683][T32143] ? kstrtouint+0x6e/0xe0 [ 683.667729][T32143] ? __fget_files+0x2a/0x420 [ 683.667746][T32143] ? __fget_files+0x3a0/0x420 [ 683.667780][T32143] __sys_sendmmsg+0x27c/0x4e0 [ 683.667807][T32143] ? __pfx___sys_sendmmsg+0x10/0x10 [ 683.667824][T32143] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 683.667871][T32143] ? ksys_write+0x242/0x270 [ 683.667894][T32143] ? __pfx_ksys_write+0x10/0x10 [ 683.667921][T32143] __x64_sys_sendmmsg+0xa0/0xc0 [ 683.667944][T32143] do_syscall_64+0x14d/0xf80 [ 683.667965][T32143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.667981][T32143] ? trace_irq_disable+0x37/0x100 [ 683.668000][T32143] ? clear_bhb_loop+0x40/0x90 [ 683.668021][T32143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.668038][T32143] RIP: 0033:0x7facccd9bf79 [ 683.668054][T32143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.668069][T32143] RSP: 002b:00007faccdc56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 683.668089][T32143] RAX: ffffffffffffffda RBX: 00007faccd015fa0 RCX: 00007facccd9bf79 [ 683.668102][T32143] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000003 [ 683.668114][T32143] RBP: 00007faccdc56090 R08: 0000000000000000 R09: 0000000000000000 [ 683.668125][T32143] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000002 [ 683.668136][T32143] R13: 00007faccd016038 R14: 00007faccd015fa0 R15: 00007ffe7d9a7488 [ 683.668166][T32143] [ 684.297930][ T30] audit: type=1107 audit(1771345700.019:11): pid=32169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 684.557466][T32183] netlink: 'syz.1.7204': attribute type 4 has an invalid length. [ 684.681723][T32192] sctp: [Deprecated]: syz.2.7206 (pid 32192) Use of int in maxseg socket option. [ 684.681723][T32192] Use struct sctp_assoc_value instead [ 684.719053][T32194] FAULT_INJECTION: forcing a failure. [ 684.719053][T32194] name failslab, interval 1, probability 0, space 0, times 0 [ 684.754363][T32194] CPU: 1 UID: 0 PID: 32194 Comm: syz.3.7207 Not tainted syzkaller #0 PREEMPT(full) [ 684.754390][T32194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 684.754401][T32194] Call Trace: [ 684.754408][T32194] [ 684.754417][T32194] dump_stack_lvl+0xe8/0x150 [ 684.754458][T32194] should_fail_ex+0x412/0x560 [ 684.754487][T32194] should_failslab+0xa8/0x100 [ 684.754512][T32194] __kmalloc_cache_noprof+0x88/0x660 [ 684.754533][T32194] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 684.754552][T32194] ? sctp_add_bind_addr+0x8c/0x370 [ 684.754576][T32194] sctp_add_bind_addr+0x8c/0x370 [ 684.754599][T32194] sctp_copy_local_addr_list+0x314/0x4f0 [ 684.754622][T32194] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 684.754641][T32194] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 684.754664][T32194] ? sctp_v4_is_any+0x35/0x60 [ 684.754682][T32194] ? sctp_copy_one_addr+0x93/0x360 [ 684.754703][T32194] sctp_bind_addr_copy+0xb3/0x3c0 [ 684.754721][T32194] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 684.754754][T32194] sctp_connect_new_asoc+0x2ff/0x6b0 [ 684.754776][T32194] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 684.754801][T32194] ? __local_bh_enable_ip+0xd0/0x130 [ 684.754819][T32194] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 684.754840][T32194] ? security_sctp_bind_connect+0x7e/0x2c0 [ 684.754863][T32194] sctp_sendmsg+0x1528/0x2c10 [ 684.754896][T32194] ? __pfx_sctp_sendmsg+0x10/0x10 [ 684.754914][T32194] ? aa_sk_perm+0x15a/0x960 [ 684.754935][T32194] ? aa_sk_perm+0x82d/0x960 [ 684.754954][T32194] ? __might_fault+0xaf/0x130 [ 684.754978][T32194] ? __pfx_aa_sk_perm+0x10/0x10 [ 684.755000][T32194] ? sock_rps_record_flow+0x19/0x400 [ 684.755024][T32194] ? inet_sendmsg+0x2f4/0x370 [ 684.755047][T32194] ____sys_sendmsg+0x894/0xad0 [ 684.755076][T32194] ? __pfx_____sys_sendmsg+0x10/0x10 [ 684.755102][T32194] ? import_iovec+0x73/0xa0 [ 684.755122][T32194] ___sys_sendmsg+0x2a5/0x360 [ 684.755140][T32194] ? __lock_acquire+0x6b5/0x2cf0 [ 684.755161][T32194] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.755186][T32194] ? kstrtouint+0x6e/0xe0 [ 684.755233][T32194] ? __fget_files+0x2a/0x420 [ 684.755249][T32194] ? __fget_files+0x3a0/0x420 [ 684.755276][T32194] __sys_sendmmsg+0x27c/0x4e0 [ 684.755302][T32194] ? __pfx___sys_sendmmsg+0x10/0x10 [ 684.755320][T32194] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 684.755368][T32194] ? ksys_write+0x242/0x270 [ 684.755390][T32194] ? __pfx_ksys_write+0x10/0x10 [ 684.755417][T32194] __x64_sys_sendmmsg+0xa0/0xc0 [ 684.755448][T32194] do_syscall_64+0x14d/0xf80 [ 684.755468][T32194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.755485][T32194] ? trace_irq_disable+0x37/0x100 [ 684.755502][T32194] ? clear_bhb_loop+0x40/0x90 [ 684.755523][T32194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.755539][T32194] RIP: 0033:0x7f7f9219bf79 [ 684.755556][T32194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.755570][T32194] RSP: 002b:00007f7f93063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 684.755590][T32194] RAX: ffffffffffffffda RBX: 00007f7f92415fa0 RCX: 00007f7f9219bf79 [ 684.755603][T32194] RDX: 0000000000000001 RSI: 0000200000004900 RDI: 0000000000000003 [ 684.755614][T32194] RBP: 00007f7f93063090 R08: 0000000000000000 R09: 0000000000000000 [ 684.755625][T32194] R10: 00000000000000c4 R11: 0000000000000246 R12: 0000000000000002 [ 684.755636][T32194] R13: 00007f7f92416038 R14: 00007f7f92415fa0 R15: 00007ffdaec83958 [ 684.755667][T32194] [ 685.100132][T32157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.504346][T32223] openvswitch: netlink: Flow key attr not present in new flow. [ 685.763305][ T1297] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.776983][ T1297] lec:lec_start_xmit: lec0:No lecd attached [ 685.884614][T32248] bond6: option all_slaves_active: invalid value (222) [ 685.919780][T32248] bond6 (unregistering): Released all slaves [ 686.082037][T32272] __nla_validate_parse: 19 callbacks suppressed [ 686.082052][T32272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7233'. [ 686.115217][T32275] atomic_op ffff88806e646198 conn xmit_atomic 0000000000000000 [ 686.141165][T32270] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 686.171485][T32278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7235'. [ 686.172543][T32270] bond2 (unregistering): Released all slaves [ 686.186022][T32278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 686.204418][T32278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7235'. [ 686.220214][T32281] netlink: 'syz.1.7236': attribute type 1 has an invalid length. [ 686.250213][T32281] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 686.367203][T32290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7238'. [ 686.407448][T32290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7238'. [ 686.433472][T32290] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7238'. [ 686.575340][T32306] netlink: 'syz.3.7243': attribute type 29 has an invalid length. [ 686.600876][T32308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7244'. [ 686.613955][T32312] netlink: 'syz.1.7246': attribute type 2 has an invalid length. [ 686.661780][T32312] 9: entered promiscuous mode [ 686.680175][T32308] netlink: 'syz.4.7244': attribute type 2 has an invalid length. [ 686.693547][T32319] netlink: 'syz.3.7247': attribute type 1 has an invalid length. [ 686.702111][T32308] netlink: 'syz.4.7244': attribute type 3 has an invalid length. [ 686.796898][T32319] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 686.837083][T32330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7250'. [ 686.930982][ T12] tipc: Subscription rejected, illegal request [ 687.001976][T32342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7255'. [ 687.144146][T32354] netlink: 'syz.4.7257': attribute type 1 has an invalid length. [ 687.155366][T32354] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7257'. [ 687.170427][T32354] netlink: 'syz.4.7257': attribute type 1 has an invalid length. [ 687.183325][T32355] tipc: Enabled bearer , priority 10 [ 687.204470][T32354] netlink: 'syz.4.7257': attribute type 1 has an invalid length. [ 687.999030][T32421] netlink: zone id is out of range [ 688.028481][T32421] netlink: zone id is out of range [ 688.040496][T32421] netlink: zone id is out of range [ 688.049593][T32421] netlink: zone id is out of range [ 688.056430][T32421] netlink: zone id is out of range [ 688.061862][T32421] netlink: zone id is out of range [ 688.067518][T32421] netlink: zone id is out of range [ 688.072801][T32421] netlink: zone id is out of range [ 688.701562][T32420] geneve3: entered promiscuous mode [ 688.709464][T32420] geneve3: entered allmulticast mode [ 688.732348][ T9843] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.786773][ T9843] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.811055][ T9843] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.824556][ T9843] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 688.883499][T32449] "syz.3.7289" (32449) uses obsolete ecb(arc4) skcipher [ 689.412928][T32491] bond1: option mode: unable to set because the bond device has slaves [ 689.479189][T32496] xt_hashlimit: size too large, truncated to 1048576 [ 689.562616][T32509] bridge_slave_1: left allmulticast mode [ 689.577100][T32500] xt_connbytes: Forcing CT accounting to be enabled [ 689.577204][T32509] bridge_slave_1: left promiscuous mode [ 689.601753][T32509] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.623506][T32509] bridge_slave_1: entered promiscuous mode [ 689.651607][T32509] bridge_slave_1: entered allmulticast mode [ 689.671103][T32509] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 690.084944][T32528] xt_hashlimit: invalid interval [ 690.195692][T32532] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 690.686686][T32555] validate_nla: 37 callbacks suppressed [ 690.686705][T32555] netlink: 'syz.4.7321': attribute type 2 has an invalid length. [ 690.773905][T32561] net_ratelimit: 138 callbacks suppressed [ 690.773923][T32561] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 690.877273][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms [ 690.885383][ C1] lec:lec_tx_timeout: lec0 [ 691.288880][T32599] netlink: 'syz.1.7333': attribute type 1 has an invalid length. [ 691.291825][T32600] netlink: 'syz.3.7331': attribute type 75 has an invalid length. [ 691.509180][T32612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.522339][ T2373] block nbd0: Possible stuck request ffff88802659d000: control (read@0,1024B). Runtime 60 seconds [ 691.534330][ T2373] block nbd0: Possible stuck request ffff88802659d200: control (read@1024,1024B). Runtime 60 seconds [ 691.545947][ T2373] block nbd0: Possible stuck request ffff88802659d400: control (read@2048,1024B). Runtime 60 seconds [ 691.559680][T32607] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 691.559692][ T2373] block nbd0: Possible stuck request ffff88802659d600: control (read@3072,1024B). Runtime 60 seconds [ 691.583456][T32607] bond7: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 691.596148][T32607] bond7: (slave vxcan5): making interface the new active one [ 691.606199][T32607] bond7: (slave vxcan5): Enslaving as an active interface with an up link [ 691.663286][T18112] lec:lec_start_xmit: lec0:No lecd attached [ 692.698337][ T5189] udevd[5189]: worker [28384] /devices/virtual/block/nbd0 is taking a long time [ 693.395382][T32642] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 693.408643][T32642] bond2 (unregistering): Released all slaves [ 693.747423][T32676] __nla_validate_parse: 49 callbacks suppressed [ 693.747451][T32676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7350'. [ 693.791898][T32682] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7347'. [ 694.476917][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN PTI [ 694.488876][ C1] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 694.497392][ C1] CPU: 1 UID: 0 PID: 32717 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 694.506592][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 694.517004][ C1] RIP: 0010:ip6_pol_route+0x2e7/0x13d0 [ 694.522475][ C1] Code: e8 ce 2c 7d f7 85 db 4d 0f 44 f7 48 8d 5c 24 38 4c 8b 64 24 70 49 83 c4 60 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 0b 4f e6 f7 4d 8b 3c 24 e8 82 45 57 [ 694.542179][ C1] RSP: 0018:ffffc90000a07c80 EFLAGS: 00010206 [ 694.548255][ C1] RAX: 000000000000000c RBX: ffffc90000a07cb8 RCX: dffffc0000000000 [ 694.556234][ C1] RDX: ffff888020321e40 RSI: 0000000000000000 RDI: 0000000000000000 [ 694.564215][ C1] RBP: ffffc90000a07d90 R08: ffff88802129ad33 R09: 1ffff110042535a6 [ 694.572623][ C1] R10: dffffc0000000000 R11: ffffed10042535a7 R12: 0000000000000060 [ 694.580590][ C1] R13: ffffc90000a08388 R14: 0000000000000000 R15: 0000000000000000 [ 694.588561][ C1] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 694.597492][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 694.604944][ C1] CR2: 00007facf3c0afe8 CR3: 0000000032b2a000 CR4: 00000000003526f0 [ 694.612928][ C1] Call Trace: [ 694.616212][ C1] [ 694.619048][ C1] ? ip6_pol_route+0x160/0x13d0 [ 694.623906][ C1] ? __pfx_ip6_pol_route+0x10/0x10 [ 694.629035][ C1] fib6_rule_action+0x265/0xc00 [ 694.633887][ C1] ? fib_rules_lookup+0x9b/0xea0 [ 694.638844][ C1] ? lock_acquire+0x106/0x330 [ 694.643531][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 694.648898][ C1] ? fib6_rule_match+0x79a/0xa80 [ 694.653862][ C1] ? __pfx_fib6_rule_action+0x10/0x10 [ 694.659685][ C1] fib_rules_lookup+0x768/0xea0 [ 694.664638][ C1] ? lock_acquire+0x106/0x330 [ 694.669411][ C1] ? fib_rules_lookup+0x9b/0xea0 [ 694.674430][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 694.679794][ C1] ? l3mdev_update_flow+0x29/0x640 [ 694.684899][ C1] ? l3mdev_update_flow+0x4d1/0x640 [ 694.690107][ C1] fib6_rule_lookup+0x1a0/0x730 [ 694.695143][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 694.700896][ C1] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 694.706392][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 694.711856][ C1] ? lock_acquire+0x106/0x330 [ 694.716540][ C1] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 694.722272][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 694.727205][ C1] ip6_route_output_flags+0x364/0x5d0 [ 694.732576][ C1] ? ip6_route_output_flags+0x2e/0x5d0 [ 694.738040][ C1] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 694.743256][ C1] ? lock_acquire+0x106/0x330 [ 694.747939][ C1] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 694.753572][ C1] ? dst_cache_get_ip6+0xf8/0x780 [ 694.761285][ C1] ? lock_acquire+0x106/0x330 [ 694.766236][ C1] ? dst_cache_get_ip6+0xf8/0x780 [ 694.772050][ C1] ip6_dst_lookup_flow+0x47/0xe0 [ 694.777091][ C1] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 694.782736][ C1] udp_tunnel6_dst_lookup+0x24d/0x470 [ 694.788124][ C1] ? __pfx_udp_tunnel6_dst_lookup+0x10/0x10 [ 694.794015][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 694.799211][ C1] geneve_xmit+0x13a6/0x3110 [ 694.805197][ C1] ? geneve_xmit+0x130/0x3110 [ 694.809871][ C1] ? __pfx_geneve_xmit+0x10/0x10 [ 694.814864][ C1] ? skb_network_protocol+0x23d/0x3f0 [ 694.820252][ C1] dev_hard_start_xmit+0x2cd/0x7f0 [ 694.825371][ C1] __dev_queue_xmit+0x168f/0x3850 [ 694.830396][ C1] ? __dev_queue_xmit+0x274/0x3850 [ 694.835502][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 694.840880][ C1] ? ip6_output+0x340/0x550 [ 694.845409][ C1] ? lock_acquire+0x106/0x330 [ 694.850105][ C1] ? ip6_output+0x340/0x550 [ 694.854623][ C1] ? ip6_finish_output2+0xb38/0x13e0 [ 694.860882][ C1] ? __asan_memcpy+0x40/0x70 [ 694.865574][ C1] ? ip6_finish_output2+0xd39/0x13e0 [ 694.871568][ C1] ? ip6_output+0x126/0x550 [ 694.876072][ C1] ip6_output+0x340/0x550 [ 694.880417][ C1] ndisc_send_skb+0xbaa/0x14e0 [ 694.885194][ C1] ? ndisc_send_skb+0x1fd/0x14e0 [ 694.890139][ C1] ? ndisc_alloc_skb+0x1a6/0x480 [ 694.895091][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 694.900294][ C1] ? __pfx_dst_output+0x10/0x10 [ 694.906204][ C1] addrconf_rs_timer+0x395/0x6d0 [ 694.911156][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 694.916618][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 694.921711][ C1] call_timer_fn+0x192/0x5a0 [ 694.926320][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 694.931800][ C1] ? call_timer_fn+0xd4/0x5a0 [ 694.936486][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 694.941599][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 694.946797][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 694.952248][ C1] __run_timer_base+0x652/0x8b0 [ 694.957606][ C1] ? ktime_get+0x45/0x200 [ 694.961952][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 694.967618][ C1] ? sched_clock_cpu+0x74/0x440 [ 694.972554][ C1] run_timer_softirq+0xb7/0x170 [ 694.977400][ C1] handle_softirqs+0x22a/0x7c0 [ 694.982153][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 694.986909][ C1] __irq_exit_rcu+0x5f/0x150 [ 694.991502][ C1] irq_exit_rcu+0x9/0x30 [ 694.995735][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 695.002402][ C1] [ 695.005319][ C1] [ 695.008247][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 695.014216][ C1] RIP: 0010:lock_is_held_type+0x106/0x150 [ 695.019928][ C1] Code: 18 00 00 b8 ff ff ff ff 65 0f c1 05 04 f0 78 07 83 f8 01 75 25 9c 58 a9 00 02 00 00 75 39 41 f7 c4 00 02 00 00 74 01 fb 89 d8 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 4b e1 02 00 cc 90 0f 0b 90 48 c7 [ 695.039522][ C1] RSP: 0018:ffffc9000b83f4b0 EFLAGS: 00000206 [ 695.045581][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046 [ 695.055027][ C1] RDX: 0000000000000000 RSI: ffffffff8e15187b RDI: ffffffff8c276500 [ 695.063962][ C1] RBP: 00000000ffffffff R08: ffff888020321e40 R09: 0000000000000004 [ 695.071923][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000246 [ 695.079880][ C1] R13: ffff888020321e40 R14: ffffffff8e75e100 R15: 0000000000000001 [ 695.087853][ C1] __might_resched+0x37/0x4d0 [ 695.092522][ C1] ? validate_mm+0x1b3/0x4c0 [ 695.097100][ C1] down_read+0x23/0x2e0 [ 695.101346][ C1] ? validate_mm+0x1b3/0x4c0 [ 695.106101][ C1] validate_mm+0x1e3/0x4c0 [ 695.110513][ C1] ? __pfx_validate_mm+0x10/0x10 [ 695.115443][ C1] ? vma_wants_writenotify+0xb3/0x2a0 [ 695.120808][ C1] ? vma_set_page_prot+0xc3/0x100 [ 695.125822][ C1] ? mmap_action_complete+0x209/0x250 [ 695.131179][ C1] mmap_region+0x1399/0x1f40 [ 695.135763][ C1] ? __pfx_mmap_region+0x10/0x10 [ 695.140723][ C1] ? bpf_lsm_mmap_addr+0x9/0x50 [ 695.145573][ C1] ? security_mmap_addr+0x71/0x240 [ 695.152248][ C1] ? shmem_mapping+0xd/0x50 [ 695.156831][ C1] ? memfd_check_seals_mmap+0xc5/0x200 [ 695.162624][ C1] do_mmap+0xc39/0x10c0 [ 695.166770][ C1] ? __pfx_do_mmap+0x10/0x10 [ 695.171344][ C1] ? down_write_killable+0x180/0x240 [ 695.176623][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 695.182245][ C1] ? apparmor_mmap_file+0x23e/0x2b0 [ 695.187535][ C1] vm_mmap_pgoff+0x2c9/0x4f0 [ 695.192144][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 695.197244][ C1] ? __fget_files+0x2a/0x420 [ 695.201834][ C1] ? __fget_files+0x3a0/0x420 [ 695.206496][ C1] ? __fget_files+0x2a/0x420 [ 695.211070][ C1] ksys_mmap_pgoff+0x51e/0x760 [ 695.215842][ C1] do_syscall_64+0x14d/0xf80 [ 695.220420][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.226472][ C1] ? trace_irq_disable+0x37/0x100 [ 695.231484][ C1] ? clear_bhb_loop+0x40/0x90 [ 695.236166][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.242953][ C1] RIP: 0033:0x7facf3edc242 [ 695.247530][ C1] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 695.267303][ C1] RSP: 002b:00007ffe05075118 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 695.276241][ C1] RAX: ffffffffffffffda RBX: 00007facf3bf8000 RCX: 00007facf3edc242 [ 695.284225][ C1] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 00007facf3bf8000 [ 695.292206][ C1] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000002000 [ 695.300172][ C1] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffe05075168 [ 695.308136][ C1] R13: 00007facf3eb1050 R14: 00007ffe05075550 R15: 00000fffc0a0ea26 [ 695.316103][ C1] [ 695.319117][ C1] Modules linked in: [ 695.323082][ C1] ---[ end trace 0000000000000000 ]--- [ 695.328580][ C1] RIP: 0010:ip6_pol_route+0x2e7/0x13d0 [ 695.334073][ C1] Code: e8 ce 2c 7d f7 85 db 4d 0f 44 f7 48 8d 5c 24 38 4c 8b 64 24 70 49 83 c4 60 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 0b 4f e6 f7 4d 8b 3c 24 e8 82 45 57 [ 695.355117][ C1] RSP: 0018:ffffc90000a07c80 EFLAGS: 00010206 [ 695.361222][ C1] RAX: 000000000000000c RBX: ffffc90000a07cb8 RCX: dffffc0000000000 [ 695.369944][ C1] RDX: ffff888020321e40 RSI: 0000000000000000 RDI: 0000000000000000 [ 695.377971][ C1] RBP: ffffc90000a07d90 R08: ffff88802129ad33 R09: 1ffff110042535a6 [ 695.385980][ C1] R10: dffffc0000000000 R11: ffffed10042535a7 R12: 0000000000000060 [ 695.394009][ C1] R13: ffffc90000a08388 R14: 0000000000000000 R15: 0000000000000000 [ 695.402037][ C1] FS: 0000000000000000(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 695.411023][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.417644][ C1] CR2: 00007facf3c0afe8 CR3: 0000000032b2a000 CR4: 00000000003526f0 [ 695.425680][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 695.433408][ C1] Kernel Offset: disabled [ 695.437736][ C1] Rebooting in 86400 seconds..