last executing test programs: 3.23993058s ago: executing program 1 (id=2898): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x3, 0x4) setsockopt$rose(0xffffffffffffffff, 0x104, 0x4, &(0x7f0000000040)=0x21, 0x4) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) r1 = socket(0x1f, 0x2, 0x7fff) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0xf, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041800}, 0x4004890) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x28000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000240)={'geneve0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000340)={'syztnl0\x00', r3, 0x80, 0x700, 0x7, 0x10c6, {{0x2e, 0x4, 0x1, 0x0, 0xb8, 0x67, 0x0, 0x84, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}, {[@noop, @lsrr={0x83, 0x13, 0x3c, [@loopback, @private=0xa010100, @private=0xa010102, @multicast1]}, @lsrr={0x83, 0x27, 0x3f, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @local, @rand_addr=0x64010101, @multicast1, @private=0xa010102]}, @rr={0x7, 0xf, 0x7c, [@empty, @multicast1, @remote]}, @ssrr={0x89, 0x13, 0x93, [@dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010102, @empty, @empty]}, @end, @timestamp_prespec={0x44, 0x44, 0xe7, 0x3, 0x6, [{@empty, 0x8}, {@multicast1, 0x3}, {@remote, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x6}, {@rand_addr=0x64010100, 0x8000}, {@local, 0x5}, {@broadcast, 0x5}]}]}}}}}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x138, r6, 0x202, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x70, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x200}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xcd}]}, @NL802154_ATTR_SEC_KEY={0x7c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "04667dd95cbd9429ea8f9de86e1360ec"}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x627}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e8dc23742d586c313fbbdcb63b7ea79a"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xbe63}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x24048081}, 0xc000) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xfff}, 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xed, 0xed, 0xa, [@union={0x2, 0x3, 0x0, 0x5, 0x1, 0x9000000, [{0x10, 0x0, 0x8}, {0x1, 0x3, 0x401}, {0xf, 0x0, 0x7}]}, @float={0x3, 0x0, 0x0, 0x10, 0x8}, @datasec={0x6, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x7f, 0x20000}, {0x3, 0x6f, 0xd}], "58a178"}, @datasec={0x9, 0x8, 0x0, 0xf, 0x2, [{0x2, 0x9, 0x3}, {0x2, 0x2, 0x8}, {0x5, 0x7703a597, 0x7}, {0x4, 0x8, 0xb3}, {0x5, 0x80, 0xa}, {0x1, 0x9, 0xcd}, {0x3, 0x3, 0x400}, {0x4, 0x80000000, 0x7fff}], '0?'}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x4, 0x2}, @const={0x5, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x5f, 0x61, 0x2e, 0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000001ac0)=""/79, 0x112, 0x4f, 0x0, 0x2}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001c00)={0x10000, 0x0}, 0x8) r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001c40)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x13, 0x21, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x6, 0x8, 0x10, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0xd, 0x9, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000940)='GPL\x00', 0xf335, 0x1000, &(0x7f0000000980)=""/4096, 0x40f00, 0x33, '\x00', r4, @fallback=0xe, r11, 0x8, &(0x7f0000001b80)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001bc0)={0x4, 0xc, 0x7}, 0x10, r12, r13, 0x6, 0x0, &(0x7f0000001c80)=[{0x0, 0x4, 0xf}, {0x3, 0x4, 0xd, 0x6}, {0x0, 0x3, 0xa, 0x6}, {0x2, 0x4, 0x10, 0xb}, {0x4, 0x4, 0x7, 0xc}, {0x2, 0x3, 0x9, 0x6}], 0x10, 0xdc94f7b1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000020c0)={r9, 0x0, 0x72, 0x65, &(0x7f0000001dc0)="5c89b487d2c0d4565007cd28d319b51bc1a483f437ecc7775629f7b6c992d73ed9752568a6e0d13127ef4962c92e0bef2376a5e292501f081ba8a1c79f299316752e01ec7ae28ab1ced170bcbda7a51664051c1ef4f0011e7a5a43f4a45d7f5947eaae8d7d83c0a2c652dff6a3ef17052b0d", &(0x7f0000001e40)=""/101, 0xbf6b, 0x0, 0xd6, 0xc3, &(0x7f0000001ec0)="d177eba9878bdaefe4c99df7de28e16f0d564a9cd19033030ab869ffe323a2aacd2ef316ef03e5e3c23699b4986cadf98770b7580cefff7067d53a6bbcad35e85aaa7777fb42a3b68c1b0e1f21cba69fe37d4047d18d10eada4a6bb2a8c296425ad6b56c2a654fce29687a5414973a6114d6c8f09d182410feb8e2831aac06b547fbcc07260f15e0c746ab3eef4716c291c12cbb63d06a454da2f1155b93ba4b45b9ba1ef0fed42a1a1b6e4720acad3b793a24618ec9465a8b6861b1a2850637f42025a6e3cddb7003d4b0f85f2c9c6fa04317e11977", &(0x7f0000001fc0)="903b853de1f66354675294a1816cc16b295b45ad8ec8fddda106bad1f7994188c6a15b9e9a5d79f3ae2ad6cfefba1efea5daccc03896bb1c22c752fbc2e8bbcd49724aaf65039b5fcd1411da0c76ace9b81483c7bedb143593d127be91c3f33864f5f2e5761a2953d6586bc28038806a2c0e13cb612eb274605c86475092027495bb6c9fab3d48a4a27000b5653b3bf99c0eaffd87bf664e0a846329ec50c968ea0c5426774961f462817064e435738cb216a119481adea68e9070ed57390997454e4a", 0x5, 0x0, 0xb}, 0x50) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002180), r5) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x34, r14, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000002300)={0x1, 0x1, 0x54, &(0x7f0000002280)=""/84}) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$MRT_DEL_VIF(r15, 0x0, 0xcb, &(0x7f0000002340)={0x0, 0x0, 0x9, 0x31a, @vifc_lcl_ifindex=r4, @broadcast}, 0x10) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000002380)={@local, @multicast2}) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000023c0), &(0x7f0000002400)=0x30) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000025c0)={'tunl0\x00', &(0x7f0000002540)={'erspan0\x00', 0x0, 0x10, 0x7, 0xa, 0x1, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x64, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_addr={0x44, 0xc, 0xa1, 0x1, 0xf, [{@broadcast, 0x1}]}, @rr={0x7, 0x7, 0x5a, [@private=0xa010101]}, @noop, @noop, @ra={0x94, 0x4}]}}}}}) 2.252347665s ago: executing program 1 (id=2921): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="a091d269", 0x4}], 0x1}, 0x1802}], 0x1, 0x2000c000) 1.739483122s ago: executing program 2 (id=2933): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000040)=0xc, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r2, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008800) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000200), 0x8) sendto$inet(r6, &(0x7f0000000700)="ab12bb69", 0x4, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}]}}]}, 0xa4}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0x3}}, 0x0, 0xfffe, 0xfffffff4, 0x5, 0x4, 0x4e46435b, 0x7}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={r10, 0x200}, 0x8) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) 1.575966305s ago: executing program 3 (id=2937): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000020c0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d566c5549dfde8c0703c0f633cd8c5f98fc10f484ec2ab2611e94e", 0x69}, {&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38d8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c774624d11a64a96733b2c18bf7adbe300e6a59119bbed4e0", 0xa6}, {&(0x7f0000000440)}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c", 0x10}], 0x4, 0x0, 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.173266135s ago: executing program 1 (id=2938): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="48000000100001140000000000000800000000008c8fc03ed1c0ef0a80cc1627cea459e162bd5e5fee0213d4ec868e3a56514715600000000000000000000000168c1a9751baa88a6e9df42a9f806d60c156943cd40dde1a9e8eca730799cf698edbfd32eab892f55c0000000000002712777ec2aac58b1f4487312ca17a64954578dfe3c3c310ea87672d463c4be7455cede8306b6cd21274b5677ec0940be5d97d7b97c968321bbfb7abc57e183cc5db651085d486efbb802373ed971499eb22bbec22e9a3b55ee4bfa94fd8c88f2a8f609a5c0461db8d94eb3f197524b17e04d7b8d26c0c891363bfa74668a1923e", @ANYBLOB="2825020000080000200012800c0001006d6163766c616e00100002800a000900000000000000000008000500", @ANYRES32=r1], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001a0069ae00000000000000001c000000fe000004000000005800"], 0x24}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="e420381fc693a1f0f399260eb26118af0bc0920d845d6847295e8d35f0454228e87316601325b2cfa74333bdb00000"], 0xcc}, 0x1, 0x0, 0x0, 0x24008000}, 0x200008c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38d8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c774624d11a64a96733b2c18bf7adbe300e6a59119bbed4e0", 0xa6}, {&(0x7f0000000440)}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c", 0x10}], 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000000000000290000004387f5bdca01005a3f25343f"], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.091918312s ago: executing program 3 (id=2941): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x48}}, 0x20040000) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000)=0x1000, 0x4) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0) 979.911252ms ago: executing program 1 (id=2942): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 955.951819ms ago: executing program 2 (id=2943): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x2, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x0, {[@exp_smc]}}}}}}}, 0x0) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @dev, @dev}}) connect$netlink(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', r1, 0x29, 0x0, 0x0, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0xfffffffd, 0x3}}) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd7000fddbdf2510000000480007800c00e6ff000000000000000008000200000000000c00040004000000000000000c00040001000100a80000000c0004004dec0000000000000c00030001000000000010000500"/102], 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x4008841) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c0001800600060086dd"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socketpair(0x33, 0x3, 0xb1, &(0x7f0000000200)) r7 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r7, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000002b40)="fe9fd45a2b6823f84da22a730024b8e27f8ce893bd2928a2144d058049166c14c6f260dfec154ec1721c7811d42bcf2bfa39f33eb8919b0f927872bbd3b988b1163de28fc89c6f8b168d0dfe69bd2cb706e9dc49dd0885205b7d76dbc3df1355520db98935e8704ab292ed5fc27ec94354af35390ca5ed319f03422ec11698163e92b97dcdbe088d125e6cb105e8349da0e67bf2d63b12714d6d753d9ab407114456d68fdcecd3351940288a2d5737f9048d81a04fc4c3429523cb856ea9b206f5c8b7ccf3d653bb99b4d262dd449aecbd127209ecbf552257bf3786752b9acdbbaad3a7ed1cb52b18f1515204a63ca6a846e07e21074e4b8ca16f4e0b9d7bc4") sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000002b00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002c40)=ANY=[@ANYBLOB="14270000", @ANYRES16=r4, @ANYBLOB="040025bd7000ffdbdf257a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x2714}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 908.219909ms ago: executing program 0 (id=2944): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001a0069ae00000000000000001c000000fe0000040000000058001a000900000013ee822a879e59299e1e38c4c51f26703f21c7fdd3603c9a"], 0x24}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="e420381fc693a1f0f399260eb26118af0bc0920d845d6847295e8d35f0454228e87316601325b2cfa74333bdb00000"], 0xcc}, 0x1, 0x0, 0x0, 0x24008000}, 0x200008c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000740)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRESOCT=r1, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 889.000819ms ago: executing program 3 (id=2945): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="48000000100001140000000000000800000000008c8fc03ed1c0ef0a80cc1627cea459e162bd5e5fee0213d4ec868e3a56514715600000000000000000000000168c1a9751baa88a6e9df42a9f806d60c156943cd40dde1a9e8eca730799cf698edbfd32eab892f55c0000000000002712777ec2aac58b1f4487312ca17a64954578dfe3c3c310ea87672d463c4be7455cede8306b6cd21274b5677ec0940be5d97d7b97c968321bbfb7abc57e183cc5db651085d486efbb802373ed971499eb22bbec22e9a3b55ee4bfa94fd8c88f2a8f609a5c0461db8d94eb3f197524b17e04d7b8d26c0c891363bfa74668a1923e", @ANYRES32=0x0, @ANYBLOB="2825020000080000200012800c0001006d6163766c616e00100002800a000900000000000000000008000500", @ANYRES32=r1], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001a0069ae00000000000000001c000000fe0000040000000058001a000900000013ee822a879e59299e1e38c4c51f26703f21c7fdd3603c9a"], 0x24}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="e420381fc693a1f0f399260eb26118af0bc0920d845d6847295e8d35f0454228e87316601325b2cfa74333bdb00000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24008000}, 0x200008c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d566c5549dfde8c0703c0f633cd8c5f98fc10f484ec2ab2611e94e", 0x69}, {&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38d8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c774624d11a64a96733b2c18bf7adbe300e6a59119bbed4e0", 0xa6}, {&(0x7f0000000440)}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c", 0x10}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000000000000290000004387f5bdca01005a3f25343f"], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB], 0x6f4}}, 0x0) 879.040903ms ago: executing program 0 (id=2946): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000004060000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 859.977685ms ago: executing program 4 (id=2947): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0xfffffffffffffeff, 0xd5cc, 0x1}) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180), 0x10) (async) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4c}}, 0x20004000) syz_emit_ethernet(0x82, &(0x7f0000000080)={@broadcast, @multicast, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @local, @local, [@hopopts={0x11}], "fafb17c133d11e59bb99c35bdfcf89f5"}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) sendto$inet6(r3, &(0x7f0000000380)="8e", 0x1, 0x20004003, &(0x7f0000b63fe4)={0xa, 0x2, 0xffff0000, @loopback}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000009505000000180000969e228ed81e0b96606e6660e7a0828496ebc1e0e5c755b876b6b48158e2bf71ff33e84b7f8913114c7c70a84fc5342cb7c0615fc1cc455f5d97a0a0da5c4522710be0d72f278691ab135d7a7e99fdd20c5656999ada05e1"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x90) 704.243006ms ago: executing program 4 (id=2948): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="a091d269", 0x4}], 0x1}, 0x2000}], 0x1, 0x2000c000) 703.581304ms ago: executing program 2 (id=2949): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 672.199418ms ago: executing program 4 (id=2950): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000), 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000680)=@ethtool_gstrings={0x1b, 0x4}}) 603.355275ms ago: executing program 4 (id=2951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000042c0000000b0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xb8}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000080000040000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff80}}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 527.759272ms ago: executing program 0 (id=2952): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="48000000100001140000000000000800000000008c8fc03ed1c0ef0a80cc1627cea459e162bd5e5fee0213d4ec868e3a56514715600000000000000000000000168c1a9751baa88a6e9df42a9f806d60c156943cd40dde1a9e8eca730799cf698edbfd32eab892f55c0000000000002712777ec2aac58b1f4487312ca17a64954578dfe3c3c310ea87672d463c4be7455cede8306b6cd21274b5677ec0940be5d97d7b97c968321bbfb7abc57e183cc5db651085d486efbb802373ed971499eb22bbec22e9a3b55ee4bfa94fd8c88f2a8f609a5c0461db8d94eb3f197524b17e04d7b8d26c0c891363bfa74668a1923e", @ANYBLOB="2825020000080000200012800c0001006d6163766c616e00100002800a000900000000000000000008000500", @ANYRES32=r1], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001a0069ae00000000000000001c000000fe000004000000005800"], 0x24}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="e420381fc693a1f0f399260eb26118af0bc0920d845d6847295e8d35f0454228e87316601325b2cfa74333bdb00000"], 0xcc}, 0x1, 0x0, 0x0, 0x24008000}, 0x200008c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38d8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c774624d11a64a96733b2c18bf7adbe300e6a59119bbed4e0", 0xa6}, {&(0x7f0000000440)}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c", 0x10}], 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000000000000290000004387f5bdca01005a3f25343f"], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 527.065991ms ago: executing program 3 (id=2953): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x148}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000001300)={0xbb8, 0x0, 0x5, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0x200}, 0x0, 0xc, 0x2, 0x4, 0xb, 'syz0\x00', "48afb5002b53e7f45ab6bd96365b62a798946bef52c5e334da4bc421af9e1cd9", "7136dec59f73e97695c1062a79671805702c3ccd16f3f63336dbe26a6a7ce1d2", [{0x9, 0x0, {0x0, 0x401}}, {0xff, 0xffff, {0x3, 0x2}}, {0x8000, 0x6, {0x1, 0x7fffffff}}, {0x6, 0xe0d, {0x2, 0x7}}, {0x9, 0x8, {0x0, 0x71}}, {0x4, 0x81, {0x5102a91f2721fcf, 0x7}}, {0x2, 0x6, {0x1, 0x5}}, {0xa2c, 0x1, {0x1, 0x9}}, {0x18, 0x7ff, {0x0, 0x80}}, {0x8, 0x0, {0x3, 0x4}}, {0xfffd, 0x400, {0x1, 0x9}}, {0x81, 0x6, {0x0, 0x7fffffff}}, {0x793, 0x2, {0x2, 0x5465}}, {0x3, 0x3, {0x0, 0x8}}, {0x9, 0x9, {0x1, 0x1ff}}, {0x3, 0x8, {0x2, 0x5}}, {0x8000, 0x8, {0x1}}, {0x6, 0x6, {0x3}}, {0x2, 0x7, {0x2, 0x3}}, {0x1, 0x6, {0x1, 0xb}}, {0x4, 0x2, {0x1}}, {0x6, 0x4, {0x1, 0x7ed2}}, {0x9, 0xfffe, {0x1, 0x7f}}, {0x8, 0x6, {0x0, 0xf}}, {0xb, 0x5, {0x2, 0x1}}, {0x9, 0x7ff, {0x3, 0x70000000}}, {0x55, 0xc, {0x0, 0x5}}, {0x8, 0x1163, {0x0, 0x8}}, {0x79d, 0x3, {0x0, 0x6}}, {0x3, 0xe453, {0x1}}, {0x8001, 0x7ffe, {0x3, 0xffff}}, {0x8001, 0x8, {0x2, 0x9}}, {0x1, 0x9, {0x3, 0x101}}, {0x40, 0xfffb, {0x0, 0x8}}, {0xc472, 0x3ff, {0x2, 0x3}}, {0xd4, 0xf, {0x0, 0x9c21}}, {0x0, 0x6, {0x0, 0x5}}, {0x6, 0x6, {0x2, 0x7}}, {0xe000, 0x8001, {0xc6e53a72ebe1bf51, 0x9}}, {0xffff, 0x3, {0x3}}]}}}, {{0x254, 0x1, {{0x2, 0xe}, 0x6, 0x7, 0x46, 0x6, 0x1f, 'syz1\x00', "05006b656b839ddc74e20e42d28392d6a3757a27c453f5546bec7e483168d8ea", "6b529e92349af4f73dcb4f6b30047b4026daa6add489ca3f1865085f9789aaee", [{0xd, 0x3, {0x2, 0x9}}, {0x7, 0xff, {0x3, 0x7}}, {0x3, 0x2, {0x1}}, {0x5, 0x817a, {0x1, 0x3}}, {0x9, 0x4, {0x3, 0x4}}, {0x2000, 0x1000, {0x1, 0x4b87}}, {0x8, 0x4, {0x1}}, {0x0, 0x5f3d, {0x0, 0xff80000}}, {0xae24, 0x2, {0x30f76d9f1b663b12, 0x7}}, {0x0, 0x40, {0x2, 0x9}}, {0x8, 0x1, {0x2, 0x6}}, {0x9, 0x5, {0x3, 0x2}}, {0x0, 0x6, {0x0, 0x5}}, {0x0, 0xcc, {0x2cb17a9ec232f0e3, 0x8}}, {0x7ff, 0x7, {0x3, 0xd2}}, {0x8, 0x5, {0x0, 0x2}}, {0x2, 0x6, {0x3, 0xf2f}}, {0x6, 0x1, {0x0, 0x7}}, {0x55c5, 0x7fff, {0xfd58da72c53f9bf6, 0x6}}, {0x2, 0x6, {0x3, 0x6}}, {0x7, 0x6, {0x1, 0x1}}, {0x1, 0xa, {0x1, 0x2}}, {0xfffd, 0xfff4, {0x1, 0x3}}, {0x1255, 0x9, {0x0, 0x4}}, {0x1, 0x8, {0x3, 0x74}}, {0xc, 0xfe7, {0x3, 0x6}}, {0x3, 0x81, {0x1, 0x3}}, {0x2, 0x1, {0x1, 0x80}}, {0x4, 0x2, {0x2, 0xe}}, {0x847, 0x3, {0x2, 0x81}}, {0x5, 0x2265, {0x2, 0xfc8}}, {0x5, 0x11, {0x2, 0x4}}, {0xff, 0x3, {0x1, 0x7}}, {0x2, 0x9, {0x1, 0x9}}, {0x0, 0x7, {0x3, 0x1db6}}, {0x74, 0x6, {0x1, 0x9}}, {0x52, 0x6, {0x2, 0x1ff}}, {0xf, 0x401, {0x2, 0x1}}, {0x418a, 0xffff, {0x1, 0x7}}, {0xf800, 0x2, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x7, 0x2, 0xfe00, 0xf, 0x3, 'syz1\x00', "81fb13aba973d5e53a9cb48f93a5e81f005ce38ce948136f97c0949ec0e5ad25", "a3a1ff09bfca6ede88774d643528ef0b1151364e05f9356795b39eb1a9e6cc0e", [{0x2, 0x4, {0x1}}, {0xff66, 0x7, {0x0, 0x81}}, {0x8000, 0x0, {0x1, 0x3}}, {0x8f, 0x2, {0x1, 0x400}}, {0x7fff, 0x100, {0x1}}, {0xbbda, 0x2, {0x1}}, {0x5, 0x4000, {0x1, 0x1}}, {0x3acc, 0xd, {0x3, 0x4}}, {0xfc01, 0x5, {0x1, 0xfffffffa}}, {0xfe25, 0x7, {0x3, 0x2}}, {0x3, 0x0, {0x0, 0x5}}, {0xf, 0x4, {0x0, 0xfff}}, {0x8, 0x5, {0x2, 0x9f1}}, {0xfff, 0x125, {0x1, 0x80000001}}, {0x200, 0x9, {0x2, 0x8}}, {0x7, 0x2, {0x0, 0x27b5}}, {0x1ff, 0x1, {0x0, 0xa487}}, {0x0, 0x8, {0x2, 0x5}}, {0xde, 0x5, {0x3, 0x1}}, {0x4, 0x0, {0x3, 0x401}}, {0x2, 0x7, {0x2, 0x4}}, {0x5, 0x9, {0x2, 0x499}}, {0x1, 0x5b2, {0x2, 0xffffff7f}}, {0x6, 0x7, {0x2, 0x80}}, {0xa8, 0x100, {0x3, 0x4}}, {0x0, 0x9, {0x0, 0x8}}, {0x9ed6, 0xb4, {0x7, 0x2}}, {0x2, 0x8, {0x0, 0xf}}, {0x5400, 0x0, {0x0, 0x9}}, {0x2, 0xf, {0x1, 0x2}}, {0xd23, 0x4, {0x0, 0x91}}, {0x5, 0x1061, {0x0, 0x1}}, {0x7, 0xd, {0x1, 0xfff}}, {0xddc5, 0x2, {0x0, 0x10}}, {0x9, 0xa1ee, {0x2, 0x1}}, {0xf8c, 0x7fff, {0x2, 0x75c}}, {0x3, 0x7ff, {0x3}}, {0x6e69, 0xffd2}, {0x1, 0x7fff, {0x1, 0x99}}, {0x0, 0x68, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x7fff}, 0x8, 0x80, 0x3, 0x1000, 0x1, 'syz1\x00', "b4abf630b43e9da01c937dc0ac4275e9bc924eedec960381c5d31f9ed3c968fa", "3421e2eec894d59c4911fba04ba7fc613a9efc03d41918f1e4a2394f5c7f9b97", [{0x7, 0x1, {0x3, 0x9}}, {0x6, 0x9, {0x1}}, {0x7ff, 0x9, {0x3, 0x6}}, {0x2, 0xffe0, {0x0, 0x4}}, {0x7, 0x9, {0x0, 0xe}}, {0x1e, 0xff01, {0x0, 0x800}}, {0x8, 0x7, {0x1, 0x7}}, {0x3ff, 0x2, {0x1, 0x4}}, {0x3, 0x7, {0x1, 0xa}}, {0x1, 0x10, {0x0, 0x8001}}, {0x401, 0x92e7, {0x2, 0x7}}, {0x1, 0x4, {0x2, 0x886}}, {0x5, 0x3}, {0x2c, 0xfff8, {0x2, 0xcf5}}, {0x68, 0x8, {0x0, 0x8001}}, {0x6, 0xff5a, {0x3, 0x8}}, {0xe, 0x80, {0x2, 0x80000000}}, {0xd9, 0x8001, {0x2, 0x4}}, {0x3, 0x7ff, {0x2, 0x40}}, {0x6, 0x5, {0x0, 0x3}}, {0x0, 0x6, {0x3, 0x4}}, {0x7, 0x7f, {0x1, 0x3}}, {0xf, 0x1, {0x3, 0xfd}}, {0x100, 0x7, {0x1, 0x3}}, {0xffc0, 0x4, {0x2, 0x5d8}}, {0x3486, 0x1, {0x2, 0x5}}, {0xff, 0x5, {0x1, 0x1}}, {0x3, 0x5, {0x2, 0x1}}, {0x40, 0x1ff, {0x0, 0x1ff}}, {0x9, 0xb, {0x3}}, {0xfff, 0x5, {0x0, 0x64d}}, {0x9, 0x1, {0x2, 0x800}}, {0x5, 0xfff9, {0x3, 0x80000001}}, {0x3, 0x0, {0x3, 0x43}}, {0x9, 0x5, {0x0, 0x9}}, {0x8, 0x3, {0x0, 0x8}}, {0x9, 0x4, {0x3, 0xe58}}, {0x91, 0x8, {0x0, 0x3}}, {0x6, 0x1, {0x3, 0x4}}, {0x9, 0x4, {0x0, 0xf}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0x9, 0x9, 0xbf, 0x5, 0x19, 'syz0\x00', "a2003c2d5fb63c54fbc1679c7bed98877ea5a3cd01e04e28a4d43f49dfc62c0a", "0336589abd8200c69813367e7277d92e0112dc5dbb55e68a3caedce96abf7ad7", [{0x0, 0x3, {0x1, 0x3a15a61a}}, {0xee7, 0x0, {0x3, 0xa}}, {0x1, 0x0, {0x2, 0x3}}, {0x8, 0x2, {0x0, 0x8}}, {0x2, 0x2969, {0x2, 0xf}}, {0xfffc, 0x1, {0x1, 0x290}}, {0x4, 0xe, {0x2, 0x5078}}, {0xffff, 0x8, {0x3, 0x8001}}, {0xfffc, 0x5, {0x3, 0x754b}}, {0x6, 0x5, {0x0, 0xab45}}, {0x9, 0xf9bc, {0x2, 0xffff2e5b}}, {0x200, 0xa3f, {0x3, 0x30c7}}, {0x2, 0x81, {0x2, 0xef8}}, {0x8c, 0xff, {0x2, 0x6}}, {0xaad3, 0x3, {0x3, 0xb85}}, {0x5, 0xdc, {0x1, 0x5}}, {0x7, 0x3, {0x1, 0x598bd361}}, {0x5ef, 0xb3, {0x0, 0x100}}, {0x1a, 0x5, {0x1, 0x2}}, {0xcb7, 0xf9, {0x2, 0x7fffffff}}, {0x5, 0x3, {0x3, 0x23cb}}, {0xf000, 0x5, {0x1, 0x86ba}}, {0x3, 0x800, {0x2, 0x9}}, {0x2, 0x0, {0x2}}, {0x7, 0x9, {0x1, 0xff}}, {0xa, 0x2, {0x0, 0x2fca}}, {0x7, 0x0, {0x0, 0x1}}, {0x47, 0x400, {0x1, 0x7}}, {0x5, 0x3, {0x2}}, {0x5, 0x101, {0x1, 0xffffffff}}, {0x4, 0x4, {0x2, 0xc9}}, {0xc, 0xc79, {0x1}}, {0x0, 0x52fa, {0x1, 0x8}}, {0x0, 0x5, {0x0, 0x5}}, {0x8, 0x6, {0x0, 0x6}}, {0xda, 0x0, {0x1, 0x2}}, {0x0, 0x100, {0x0, 0x7ff}}, {0x1, 0x3, {0x0, 0x200}}, {0x7, 0x8001, {0x0, 0x4}}, {0x80, 0x5, {0x3, 0xd}}]}}}]}, 0xbb8}}, 0x20004001) getsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000280)=""/131, &(0x7f00000001c0)=0x83) sendmsg$AUDIT_TTY_GET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x400, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r3, @ANYBLOB="00000000000000000c001a800800028004000180080004"], 0x34}}, 0x0) 510.94636ms ago: executing program 2 (id=2954): r0 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x1, 0x0, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x66, 0x0, 0xe, 0x4, 0x0, @multicast1, @local}}}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 456.281681ms ago: executing program 1 (id=2955): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x48}}, 0x20040000) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000000)=0x1000, 0x4) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0) 392.080083ms ago: executing program 4 (id=2956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="8000028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000600000008000600", @ANYRES32=r6, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="84000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=r6], 0x16c}, 0x1, 0x0, 0x0, 0x400}, 0x4040014) r7 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000090a010400000000000000000100000908000a40000000000900020073797a32000000000900010073797a3000000000080005400000001e240011800b2e36000100657874686472000014000280080006400000000008000140000000001400000010000100"/168], 0xa8}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r10, r9, 0x0, 0xfffbffff) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x30, 0x0, 0x7, 0x504, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c0}, 0x81) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x2, 0x0, 0xffffffc0, 0x8244, 0xffffffffffffffff, 0x0, '\x00', r6, r9, 0x1, 0x5, 0x4, 0xa, @value=r11}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r12, 0xffffffffffffffff}, 0x4) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r7, @ANYRES16=r13], 0x4c}}, 0x40000) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc08f5449019e7f65e4bd6873be4fc75d9c6997b21ffb54237a67194bdb9cb7ca5becb92688363485e59d0e8e99db37b81f0cdc2d47e2a862fc348a04ebcbf9129c0a9dd6fa0558f9043422b1b0c12afc857cb7a3ae64b5fea10c28209eb72bf5341f3914bc24dcd49525d9e4017b66b2bfa77d830080e8cf02474716924c5236406416fd641fbe6909e7a2b476473070f7fd2364c0b0d3fdfe83bd9595b0b11600b1423c56c82aa7206a50226d4671db3fe86d961a5419f85d9851eda600a37684f2ab0f173d62ce89d0a7f31a9ee468265d777086fb71982f2fd8260deeb", @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES8=0x0], 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) 347.663331ms ago: executing program 0 (id=2957): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x4}, @TCA_FLOWER_KEY_FLAGS={0x8}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x2}, @TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x71}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x40) 322.559596ms ago: executing program 1 (id=2958): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'dvmrp1\x00'}]}]}]}], {0x14}}, 0x94}}, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xb, 0x9}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r10}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5f}, 0x20) 276.222521ms ago: executing program 3 (id=2959): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000001000007000000890b040a0101027f00000100000000001c000000000000000000020008"], 0x40}, 0x20000000) 260.982676ms ago: executing program 2 (id=2960): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x80) 213.946003ms ago: executing program 0 (id=2961): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) close(r1) 164.271839ms ago: executing program 4 (id=2962): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000070000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 128.851918ms ago: executing program 2 (id=2963): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="48000000100001140000000000000800000000008c8fc03ed1c0ef0a80cc1627cea459e162bd5e5fee0213d4ec868e3a56514715600000000000000000000000168c1a9751baa88a6e9df42a9f806d60c156943cd40dde1a9e8eca730799cf698edbfd32eab892f55c0000000000002712777ec2aac58b1f4487312ca17a64954578dfe3c3c310ea87672d463c4be7455cede8306b6cd21274b5677ec0940be5d97d7b97c968321bbfb7abc57e183cc5db651085d486efbb802373ed971499eb22bbec22e9a3b55ee4bfa94fd8c88f2a8f609a5c0461db8d94eb3f197524b17e04d7b8d26c0c891363bfa74668a1923e", @ANYRES32=0x0, @ANYBLOB="2825020000080000200012800c0001006d6163766c616e00100002800a000900000000000000000008000500", @ANYRES32=r1], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x939e02dc105d5baa, 0x2}, {0xe}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001a0069ae00000000000000001c000000fe0000040000000058001a000900000013ee822a879e59299e1e38c4c51f26703f21c7fdd3603c9a"], 0x24}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB="e420381fc693a1f0f399260eb26118af0bc0920d845d6847295e8d35f0454228e87316601325b2cfa74333bdb00000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x24008000}, 0x200008c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)="957bc3871f54da01138019ebbb3587e39b0af28eea1dc1c5b6b0f27c1111d0f8b71e196a9bb19b466172df083b602f37901653c0b41e9ea3218f6680923cb44fcde97805fe3eaf057d955a0de7c0d566c5549dfde8c0703c0f633cd8c5f98fc10f484ec2ab2611e94e", 0x69}, {&(0x7f0000000380)="eed4fbdbc377aaa1f97890499828239f7ce11e4611999338e6da1d1d2deca77c81b916aaaa389580ca6ed38d8d0330bc2f0cce161f489d863da5d3adc46e5c8160ccc889403f20dae567d9969efc4355fd27ba3d6e13f78bf9e57c4e3b723dd7b8540917d4c38bd6d37c70c43032fb1cae37de9f57c3bf053fa22d788b5629b444cd80b5c5257223c6d71b597d9c774624d11a64a96733b2c18bf7adbe300e6a59119bbed4e0", 0xa6}, {&(0x7f0000000440)}, {&(0x7f0000000300)="d4eb0cb9b5afe8a92397fd6083599c6c", 0x10}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000000000000290000004387f5bdca01005a3f25343f"], 0x18}}], 0x1, 0x40004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000000000000000000048510000006", @ANYRES32, @ANYBLOB="0000000000000004180000000000001000000000000200009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100200000ffffb702000008000000b50a00000000000085"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffff"], 0x6f4}}, 0x0) 96.686543ms ago: executing program 3 (id=2964): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60000000009c1100fe8000000000000000000000000000bbff02000000000300000000000000000100000e22009c90"], 0x0) 0s ago: executing program 0 (id=2965): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="050000003800010324bd7002fadbdf2501000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) syz_emit_ethernet(0x46, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @udp={0xc, 0x6, "6565c4", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, {[], {0x4e24, 0x4e22, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x4b, 0x100}}}}}}}}, 0x0) unshare(0x20400) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r1, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r2, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x58, &(0x7f0000000a80)}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000001000)={'sit0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x29, 0x4, 0x6, 0x9, 0x42, @remote, @mcast1, 0x80, 0x10, 0x7, 0x7fffffff}}) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f0000000180)={0x1d, r7}, 0x10) sendmmsg$inet(r2, &(0x7f0000001440), 0x0, 0x23640e6f7fa8c3b0) sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000015000000140001800d000100756470ba73797a31da"], 0x28}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000001500)={0x450, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x312}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3d1969f7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x25fd}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xb5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x12c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @remote, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x73}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3, @private2, 0x3428d002}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7ab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff59}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1ff}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x64}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x3d6, @private1, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffe, @local, 0xc24f}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x73f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @mcast1, 0x3ff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @private2, 0x400}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3c0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc636}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x89}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}]}]}, 0x450}, 0x1, 0x0, 0x0, 0x41}, 0x800) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@map, 0xffffffffffffffff, 0x1d}, 0x20) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="140100000000000000000001"], 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ffc9000404f650 R08: ffff8880585c2e9b R09: 1ffff1100b0b85d3 [ 150.048840][ T8524] R10: dffffc0000000000 R11: ffffed100b0b85d4 R12: dffffc0000000000 [ 150.048853][ T8524] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e9c [ 150.048872][ T8524] ? _copy_to_iter+0x441/0x16f0 [ 150.048899][ T8524] _copy_to_iter+0x484/0x16f0 [ 150.048933][ T8524] ? __pfx__copy_to_iter+0x10/0x10 [ 150.048951][ T8524] ? __skb_try_recv_from_queue+0x58f/0x730 [ 150.048977][ T8524] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 150.049003][ T8524] __skb_datagram_iter+0xf8/0x990 [ 150.049023][ T8524] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 150.049059][ T8524] skb_copy_datagram_iter+0xc5/0x230 [ 150.049083][ T8524] netlink_recvmsg+0x2ab/0xa30 [ 150.049119][ T8524] ? __pfx_netlink_recvmsg+0x10/0x10 [ 150.049147][ T8524] ? __lock_acquire+0xab9/0xd20 [ 150.049166][ T8524] ? aa_sock_msg_perm+0x94/0x160 [ 150.049189][ T8524] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 150.049207][ T8524] ? security_socket_recvmsg+0x7e/0x2e0 [ 150.049224][ T8524] ? __pfx_netlink_recvmsg+0x10/0x10 [ 150.049248][ T8524] sock_recvmsg+0x22c/0x270 [ 150.049274][ T8524] ____sys_recvmsg+0x1c9/0x460 [ 150.049302][ T8524] ? __pfx_____sys_recvmsg+0x10/0x10 [ 150.049338][ T8524] ? import_iovec+0x74/0xa0 [ 150.049364][ T8524] ___sys_recvmsg+0x1b5/0x510 [ 150.049389][ T8524] ? __pfx____sys_recvmsg+0x10/0x10 [ 150.049436][ T8524] ? __fget_files+0x3a0/0x420 [ 150.049465][ T8524] do_recvmmsg+0x307/0x770 [ 150.049493][ T8524] ? __pfx_do_recvmmsg+0x10/0x10 [ 150.049526][ T8524] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 150.049567][ T8524] __x64_sys_recvmmsg+0x190/0x240 [ 150.049594][ T8524] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 150.049610][ T8524] ? rcu_is_watching+0x15/0xb0 [ 150.049640][ T8524] ? do_syscall_64+0xbe/0x3b0 [ 150.049667][ T8524] do_syscall_64+0xfa/0x3b0 [ 150.049688][ T8524] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.049710][ T8524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.049726][ T8524] ? clear_bhb_loop+0x60/0xb0 [ 150.049746][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.049761][ T8524] RIP: 0033:0x7f6b9598eb69 [ 150.049776][ T8524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.049789][ T8524] RSP: 002b:00007f6b96725038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 150.049806][ T8524] RAX: ffffffffffffffda RBX: 00007f6b95bb5fa0 RCX: 00007f6b9598eb69 [ 150.049818][ T8524] RDX: 0000000000000003 RSI: 0000200000000340 RDI: 0000000000000003 [ 150.049829][ T8524] RBP: 00007f6b96725090 R08: 0000000000000000 R09: 0000000000000000 [ 150.049839][ T8524] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 150.049848][ T8524] R13: 0000000000000000 R14: 00007f6b95bb5fa0 R15: 00007ffeb5849218 [ 150.049879][ T8524] [ 150.857264][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.919'. [ 151.316056][ T8567] netlink: 'syz.1.929': attribute type 1 has an invalid length. [ 151.468932][ T8571] gretap1: entered promiscuous mode [ 151.665653][ T8582] netlink: 10 bytes leftover after parsing attributes in process `syz.1.935'. [ 151.961372][ T8601] netlink: 300 bytes leftover after parsing attributes in process `syz.4.941'. [ 152.123293][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.944'. [ 152.186136][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 152.383941][ T8630] netlink: 'syz.4.952': attribute type 30 has an invalid length. [ 152.769571][ T8656] netlink: 104 bytes leftover after parsing attributes in process `syz.0.959'. [ 152.790623][ T8660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.960'. [ 152.825070][ T8660] netlink: 60 bytes leftover after parsing attributes in process `syz.3.960'. [ 153.383185][ T8700] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 153.801578][ T8732] tipc: Started in network mode [ 153.807261][ T8732] tipc: Node identity , cluster identity 4711 [ 153.813504][ T8732] tipc: Failed to obtain node identity [ 153.819655][ T8732] tipc: Enabling of bearer rejected, failed to enable media [ 154.380471][ T8756] netlink: 'syz.4.998': attribute type 15 has an invalid length. [ 154.551668][ T8766] tipc: Started in network mode [ 154.575466][ T8766] tipc: Node identity , cluster identity 4711 [ 154.581584][ T8766] tipc: Failed to obtain node identity [ 154.611388][ T8766] tipc: Enabling of bearer rejected, failed to enable media [ 154.680156][ T8780] netlink: 'syz.2.1006': attribute type 24 has an invalid length. [ 154.924569][ T8788] bond0: entered promiscuous mode [ 154.975117][ T8797] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 155.002423][ T8799] __nla_validate_parse: 14 callbacks suppressed [ 155.002440][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 155.229771][ T8813] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1020'. [ 155.265548][ T8810] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 155.291073][ T8815] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1021'. [ 155.450472][ T8821] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1025'. [ 155.648973][ T8829] tipc: Started in network mode [ 155.662384][ T8829] tipc: Node identity 16b9ee72f5b2, cluster identity 4711 [ 155.680544][ T8829] tipc: Enabled bearer , priority 0 [ 155.714585][ T8837] syzkaller0: entered promiscuous mode [ 155.720100][ T8837] syzkaller0: entered allmulticast mode [ 155.857936][ T8829] tipc: Resetting bearer [ 155.880652][ T8827] tipc: Resetting bearer [ 155.918142][ T8827] tipc: Disabling bearer [ 155.934599][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1037'. [ 155.973219][ T8848] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 156.043472][ T8856] veth0_to_bond: left allmulticast mode [ 156.071242][ T8856] veth0_to_bond: left promiscuous mode [ 156.104284][ T8856] bridge1: port 1(veth0_to_bond) entered disabled state [ 156.117126][ T8856] bridge2: port 1(veth0_to_bond) entered blocking state [ 156.146478][ T8861] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1039'. [ 156.164323][ T8856] bridge2: port 1(veth0_to_bond) entered disabled state [ 156.182566][ T8856] veth0_to_bond: entered allmulticast mode [ 156.193664][ T8856] veth0_to_bond: entered promiscuous mode [ 156.228604][ T8863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1040'. [ 156.239364][ T8854] vlan3: entered allmulticast mode [ 156.485064][ T8871] tipc: Enabled bearer , priority 0 [ 156.535462][ T8870] tipc: Disabling bearer [ 156.584777][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 156.638791][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1047'. [ 156.843630][ T8886] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 157.033084][ T8906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1055'. [ 157.131398][ T8906] bridge1: port 1(veth0_to_bond) entered blocking state [ 157.144867][ T8906] bridge1: port 1(veth0_to_bond) entered disabled state [ 157.152345][ T8906] veth0_to_bond: entered allmulticast mode [ 157.171895][ T8906] veth0_to_bond: entered promiscuous mode [ 157.230278][ T8911] vlan3: entered allmulticast mode [ 157.374526][ T8918] tipc: Started in network mode [ 157.389688][ T8918] tipc: Node identity , cluster identity 4711 [ 157.423972][ T8918] tipc: Failed to obtain node identity [ 157.435408][ T8918] tipc: Enabling of bearer rejected, failed to enable media [ 157.793982][ T8938] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 158.309879][ T8975] netlink: 'syz.4.1077': attribute type 6 has an invalid length. [ 158.553640][ T8983] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 159.126946][ T9017] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 159.918115][ T9053] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 160.168562][ T9062] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.574709][ T9076] __nla_validate_parse: 5 callbacks suppressed [ 160.574728][ T9076] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1114'. [ 160.614703][ T9076] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 160.703160][ T9081] bond3 (unregistering): Released all slaves [ 160.927913][ T9089] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 160.980676][ T9097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1121'. [ 161.301881][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 161.319935][ T9114] bond1 (unregistering): Released all slaves [ 161.463238][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'. [ 161.951961][ T9158] bond3 (unregistering): Released all slaves [ 161.990635][ T9157] ip6gre1: entered allmulticast mode [ 162.146379][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1149'. [ 162.665238][ T9213] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 162.683251][ T9213] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1163'. [ 162.714117][ T9213] netlink: 'syz.2.1163': attribute type 1 has an invalid length. [ 162.729693][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 162.823583][ T9216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 163.116693][ T9241] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1174'. [ 163.133506][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'. [ 163.154160][ T9242] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 163.394304][ T9249] netlink: 'syz.2.1178': attribute type 10 has an invalid length. [ 163.417586][ T9249] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 163.438255][ T9249] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 163.485562][ T9254] bond2 (unregistering): Released all slaves [ 163.733160][ T9265] FAULT_INJECTION: forcing a failure. [ 163.733160][ T9265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.752730][ T9265] CPU: 1 UID: 0 PID: 9265 Comm: syz.1.1185 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 163.752757][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 163.752766][ T9265] Call Trace: [ 163.752774][ T9265] [ 163.752783][ T9265] dump_stack_lvl+0x189/0x250 [ 163.752806][ T9265] ? __pfx____ratelimit+0x10/0x10 [ 163.752831][ T9265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.752849][ T9265] ? __pfx__printk+0x10/0x10 [ 163.752870][ T9265] ? __might_fault+0xb0/0x130 [ 163.752906][ T9265] should_fail_ex+0x414/0x560 [ 163.752938][ T9265] _copy_from_user+0x2d/0xb0 [ 163.752962][ T9265] ___sys_recvmsg+0x12e/0x510 [ 163.752987][ T9265] ? __pfx____sys_recvmsg+0x10/0x10 [ 163.753038][ T9265] ? __might_fault+0xb0/0x130 [ 163.753064][ T9265] do_recvmmsg+0x307/0x770 [ 163.753092][ T9265] ? __pfx_do_recvmmsg+0x10/0x10 [ 163.753137][ T9265] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.753180][ T9265] __x64_sys_recvmmsg+0x190/0x240 [ 163.753203][ T9265] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 163.753220][ T9265] ? rcu_is_watching+0x15/0xb0 [ 163.753249][ T9265] ? do_syscall_64+0xbe/0x3b0 [ 163.753277][ T9265] do_syscall_64+0xfa/0x3b0 [ 163.753299][ T9265] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.753320][ T9265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.753337][ T9265] ? clear_bhb_loop+0x60/0xb0 [ 163.753359][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.753374][ T9265] RIP: 0033:0x7fbf3278eb69 [ 163.753391][ T9265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.753405][ T9265] RSP: 002b:00007fbf33645038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 163.753426][ T9265] RAX: ffffffffffffffda RBX: 00007fbf329b5fa0 RCX: 00007fbf3278eb69 [ 163.753439][ T9265] RDX: 0000000000000003 RSI: 0000200000000340 RDI: 0000000000000003 [ 163.753450][ T9265] RBP: 00007fbf33645090 R08: 0000000000000000 R09: 0000000000000000 [ 163.753461][ T9265] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 163.753471][ T9265] R13: 0000000000000000 R14: 00007fbf329b5fa0 R15: 00007fffe9c56478 [ 163.753501][ T9265] [ 164.306730][ T9282] tipc: Started in network mode [ 164.312146][ T9282] tipc: Node identity , cluster identity 4711 [ 164.331348][ T9282] tipc: Failed to obtain node identity [ 164.337026][ T9282] tipc: Enabling of bearer rejected, failed to enable media [ 165.076219][ T9305] FAULT_INJECTION: forcing a failure. [ 165.076219][ T9305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.121649][ T9305] CPU: 1 UID: 0 PID: 9305 Comm: syz.2.1200 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 165.121678][ T9305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.121688][ T9305] Call Trace: [ 165.121695][ T9305] [ 165.121703][ T9305] dump_stack_lvl+0x189/0x250 [ 165.121726][ T9305] ? __pfx____ratelimit+0x10/0x10 [ 165.121749][ T9305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.121768][ T9305] ? __pfx__printk+0x10/0x10 [ 165.121789][ T9305] ? __might_fault+0xb0/0x130 [ 165.121825][ T9305] should_fail_ex+0x414/0x560 [ 165.121857][ T9305] _copy_to_iter+0x575/0x16f0 [ 165.121891][ T9305] ? __pfx__copy_to_iter+0x10/0x10 [ 165.121910][ T9305] ? __skb_try_recv_from_queue+0x58f/0x730 [ 165.121937][ T9305] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 165.121964][ T9305] __skb_datagram_iter+0xf8/0x990 [ 165.121985][ T9305] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 165.122014][ T9305] skb_copy_datagram_iter+0xc5/0x230 [ 165.122045][ T9305] netlink_recvmsg+0x2ab/0xa30 [ 165.122078][ T9305] ? __pfx_netlink_recvmsg+0x10/0x10 [ 165.122106][ T9305] ? __lock_acquire+0xab9/0xd20 [ 165.122126][ T9305] ? aa_sock_msg_perm+0x94/0x160 [ 165.122150][ T9305] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 165.122170][ T9305] ? __pfx_netlink_recvmsg+0x10/0x10 [ 165.122194][ T9305] sock_recvmsg_nosec+0x183/0x1c0 [ 165.122220][ T9305] ____sys_recvmsg+0x3aa/0x460 [ 165.122249][ T9305] ? __pfx_____sys_recvmsg+0x10/0x10 [ 165.122283][ T9305] ? import_iovec+0x74/0xa0 [ 165.122309][ T9305] ___sys_recvmsg+0x1b5/0x510 [ 165.122334][ T9305] ? __pfx____sys_recvmsg+0x10/0x10 [ 165.122385][ T9305] ? __might_fault+0xb0/0x130 [ 165.122413][ T9305] do_recvmmsg+0x307/0x770 [ 165.122442][ T9305] ? __pfx_do_recvmmsg+0x10/0x10 [ 165.122475][ T9305] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.122519][ T9305] __x64_sys_recvmmsg+0x190/0x240 [ 165.122541][ T9305] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 165.122557][ T9305] ? rcu_is_watching+0x15/0xb0 [ 165.122588][ T9305] ? do_syscall_64+0xbe/0x3b0 [ 165.122617][ T9305] do_syscall_64+0xfa/0x3b0 [ 165.122638][ T9305] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.122660][ T9305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.122681][ T9305] ? clear_bhb_loop+0x60/0xb0 [ 165.122703][ T9305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.122719][ T9305] RIP: 0033:0x7fec2638eb69 [ 165.122736][ T9305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.122750][ T9305] RSP: 002b:00007fec271f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 165.122770][ T9305] RAX: ffffffffffffffda RBX: 00007fec265b5fa0 RCX: 00007fec2638eb69 [ 165.122783][ T9305] RDX: 0000000000000003 RSI: 0000200000000340 RDI: 0000000000000003 [ 165.122793][ T9305] RBP: 00007fec271f4090 R08: 0000000000000000 R09: 0000000000000000 [ 165.122803][ T9305] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 165.122813][ T9305] R13: 0000000000000000 R14: 00007fec265b5fa0 R15: 00007ffea901ba98 [ 165.122844][ T9305] [ 165.440633][ T9311] ieee802154 phy1 wpan1: encryption failed: -22 [ 166.324752][ T9331] netlink: 'syz.0.1214': attribute type 10 has an invalid length. [ 166.359846][ T9363] tipc: Enabled bearer , priority 0 [ 166.390271][ T9369] __nla_validate_parse: 4 callbacks suppressed [ 166.390289][ T9369] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1227'. [ 166.420136][ T9362] tipc: Disabling bearer [ 166.436737][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1228'. [ 166.452493][ T9367] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1226'. [ 166.718272][ T9384] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1233'. [ 166.729766][ T9379] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 166.794334][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 166.861937][ T9389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1238'. [ 167.054577][ T9396] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1239'. [ 167.685990][ T9420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1251'. [ 167.911391][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1255'. [ 168.177757][ T9449] FAULT_INJECTION: forcing a failure. [ 168.177757][ T9449] name failslab, interval 1, probability 0, space 0, times 0 [ 168.223250][ T9449] CPU: 1 UID: 0 PID: 9449 Comm: syz.1.1260 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 168.223277][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 168.223287][ T9449] Call Trace: [ 168.223294][ T9449] [ 168.223303][ T9449] dump_stack_lvl+0x189/0x250 [ 168.223326][ T9449] ? __pfx____ratelimit+0x10/0x10 [ 168.223349][ T9449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.223367][ T9449] ? __pfx__printk+0x10/0x10 [ 168.223384][ T9449] ? trace_contention_end+0x39/0x120 [ 168.223416][ T9449] should_fail_ex+0x414/0x560 [ 168.223445][ T9449] should_failslab+0xa8/0x100 [ 168.223462][ T9449] kmem_cache_alloc_noprof+0x73/0x3c0 [ 168.223483][ T9449] ? skb_clone+0x212/0x3a0 [ 168.223505][ T9449] skb_clone+0x212/0x3a0 [ 168.223526][ T9449] __netlink_deliver_tap+0x404/0x850 [ 168.223563][ T9449] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.223587][ T9449] netlink_deliver_tap+0x19c/0x1b0 [ 168.223611][ T9449] netlink_dump+0x92b/0xe90 [ 168.223646][ T9449] ? __pfx_netlink_dump+0x10/0x10 [ 168.223702][ T9449] netlink_recvmsg+0x676/0xa30 [ 168.223735][ T9449] ? __pfx_netlink_recvmsg+0x10/0x10 [ 168.223762][ T9449] ? __lock_acquire+0xab9/0xd20 [ 168.223781][ T9449] ? aa_sock_msg_perm+0x94/0x160 [ 168.223803][ T9449] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 168.223823][ T9449] ? __pfx_netlink_recvmsg+0x10/0x10 [ 168.223848][ T9449] sock_recvmsg_nosec+0x183/0x1c0 [ 168.223872][ T9449] ____sys_recvmsg+0x3aa/0x460 [ 168.223899][ T9449] ? __pfx_____sys_recvmsg+0x10/0x10 [ 168.223932][ T9449] ? import_iovec+0x74/0xa0 [ 168.223959][ T9449] ___sys_recvmsg+0x1b5/0x510 [ 168.223984][ T9449] ? __pfx____sys_recvmsg+0x10/0x10 [ 168.224040][ T9449] ? __might_fault+0xb0/0x130 [ 168.224067][ T9449] do_recvmmsg+0x307/0x770 [ 168.224096][ T9449] ? __pfx_do_recvmmsg+0x10/0x10 [ 168.224138][ T9449] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 168.224183][ T9449] __x64_sys_recvmmsg+0x190/0x240 [ 168.224205][ T9449] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 168.224222][ T9449] ? rcu_is_watching+0x15/0xb0 [ 168.224251][ T9449] ? do_syscall_64+0xbe/0x3b0 [ 168.224279][ T9449] do_syscall_64+0xfa/0x3b0 [ 168.224299][ T9449] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.224319][ T9449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.224336][ T9449] ? clear_bhb_loop+0x60/0xb0 [ 168.224358][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.224374][ T9449] RIP: 0033:0x7fbf3278eb69 [ 168.224391][ T9449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.224406][ T9449] RSP: 002b:00007fbf33645038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 168.224427][ T9449] RAX: ffffffffffffffda RBX: 00007fbf329b5fa0 RCX: 00007fbf3278eb69 [ 168.224439][ T9449] RDX: 0000000000000003 RSI: 0000200000000340 RDI: 0000000000000003 [ 168.224450][ T9449] RBP: 00007fbf33645090 R08: 0000000000000000 R09: 0000000000000000 [ 168.224461][ T9449] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 168.224471][ T9449] R13: 0000000000000000 R14: 00007fbf329b5fa0 R15: 00007fffe9c56478 [ 168.224503][ T9449] [ 168.575034][ T9459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.741005][ T9470] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1269'. [ 170.859274][ T9585] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.267192][ T9608] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 171.374214][ T9618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.382887][ T9618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.414963][ T9618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.433091][ T9618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.462780][ T9618] batman_adv: batadv0: Removing interface: wlan1 [ 171.517043][ T9627] __nla_validate_parse: 6 callbacks suppressed [ 171.517062][ T9627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1323'. [ 171.525940][ T9616] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 171.637956][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1323'. [ 171.732992][ T9636] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1332'. [ 171.779365][ T9636] netlink: 'syz.4.1332': attribute type 7 has an invalid length. [ 171.797148][ T9636] netlink: 'syz.4.1332': attribute type 8 has an invalid length. [ 171.807370][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1332'. [ 172.156357][ T5952] IPVS: starting estimator thread 0... [ 172.162006][ T9656] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 172.273930][ T9664] IPVS: using max 30 ests per chain, 72000 per kthread [ 172.285636][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1343'. [ 172.303893][ T9667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1343'. [ 172.339087][ T9672] tipc: Started in network mode [ 172.350441][ T9672] tipc: Node identity , cluster identity 4711 [ 172.356768][ T9672] tipc: Failed to obtain node identity [ 172.379052][ T9672] tipc: Enabling of bearer rejected, failed to enable media [ 172.442597][ T9680] pimreg1: entered allmulticast mode [ 172.451786][ T9683] Bluetooth: MGMT ver 1.23 [ 172.892263][ T9711] veth0: entered promiscuous mode [ 172.968551][ T9710] veth0: left promiscuous mode [ 172.981463][ T9716] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1363'. [ 173.119584][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1365'. [ 173.192027][ T9722] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.270909][ T9728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.291705][ T9728] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 173.314751][ T9728] bond1: (slave vxcan5): Error -95 calling set_mac_address [ 173.479640][ T9738] syzkaller0: entered promiscuous mode [ 173.486376][ T9738] syzkaller0: entered allmulticast mode [ 173.599351][ T9749] netlink: 'syz.2.1375': attribute type 21 has an invalid length. [ 173.621311][ T9749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1375'. [ 173.628282][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a49b800: rx timeout, send abort [ 173.643982][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805a49b800: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 173.723146][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1376'. [ 173.829028][ T9752] bridge4: port 1(veth0_to_bond) entered blocking state [ 173.841907][ T9752] bridge4: port 1(veth0_to_bond) entered disabled state [ 173.884671][ T9752] veth0_to_bond: entered allmulticast mode [ 173.902409][ T9752] veth0_to_bond: entered promiscuous mode [ 174.486277][ T5855] Bluetooth: hci2: command 0x0401 tx timeout [ 174.491088][ T5157] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 174.574293][ T56] block nbd0: Possible stuck request ffff88802531e000: control (read@0,4096B). Runtime 60 seconds [ 175.193500][ T9752] vlan4: entered allmulticast mode [ 175.368744][ T9780] lo speed is unknown, defaulting to 1000 [ 175.389612][ T9780] lo speed is unknown, defaulting to 1000 [ 175.585516][ T9780] lo speed is unknown, defaulting to 1000 [ 175.817265][ T9800] netlink: 'syz.4.1393': attribute type 4 has an invalid length. [ 175.902059][ T9808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.959019][ T9809] netlink: 'syz.2.1395': attribute type 1 has an invalid length. [ 176.102120][ T9818] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.202213][ T9780] infiniband syz0: set active [ 176.208829][ T5954] lo speed is unknown, defaulting to 1000 [ 176.229002][ T9780] infiniband syz0: added lo [ 176.251781][ T9780] syz0: rxe_create_cq: returned err = -12 [ 176.278627][ T9780] infiniband syz0: Couldn't create ib_mad CQ [ 176.289732][ T9780] infiniband syz0: Couldn't open port 1 [ 176.351273][ T9780] RDS/IB: syz0: added [ 176.359099][ T9780] smc: adding ib device syz0 with port count 1 [ 176.368357][ T9780] smc: ib device syz0 port 1 has pnetid [ 176.380300][ T5954] lo speed is unknown, defaulting to 1000 [ 176.397444][ T9780] lo speed is unknown, defaulting to 1000 [ 176.540292][ T9836] __nla_validate_parse: 8 callbacks suppressed [ 176.540311][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'. [ 176.752920][ T9844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.807169][ T9852] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 176.875780][ T9852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1412'. [ 176.898642][ T9855] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 176.918489][ T9852] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1412'. [ 176.928030][ T9852] netem: invalid attributes len -24 [ 176.933245][ T9852] netem: change failed [ 176.942897][ T9780] lo speed is unknown, defaulting to 1000 [ 177.082270][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1418'. [ 177.193411][ T9864] veth0_to_bond: left allmulticast mode [ 177.225923][ T9864] veth0_to_bond: left promiscuous mode [ 177.248291][ T9864] bridge4: port 1(veth0_to_bond) entered disabled state [ 177.272274][ T9864] bridge5: port 1(veth0_to_bond) entered blocking state [ 177.286231][ T9864] bridge5: port 1(veth0_to_bond) entered disabled state [ 177.293602][ T9864] veth0_to_bond: entered allmulticast mode [ 177.321331][ T9864] veth0_to_bond: entered promiscuous mode [ 177.347953][ T9863] vlan4: entered allmulticast mode [ 177.374540][ T9780] lo speed is unknown, defaulting to 1000 [ 177.516030][ T9875] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1424'. [ 177.881963][ T9780] lo speed is unknown, defaulting to 1000 [ 177.982972][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1433'. [ 178.215931][ T9905] tipc: Trying to set illegal importance in message [ 178.217394][ T9904] netlink: 'syz.4.1437': attribute type 8 has an invalid length. [ 178.262082][ T9904] tunl0: entered promiscuous mode [ 178.300296][ T9904] netlink: 'syz.4.1437': attribute type 3 has an invalid length. [ 178.331404][ T9904] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1437'. [ 178.466271][ T9780] lo speed is unknown, defaulting to 1000 [ 178.613581][ T9921] tipc: Started in network mode [ 178.618567][ T9921] tipc: Node identity , cluster identity 4711 [ 178.624732][ T9921] tipc: Failed to obtain node identity [ 178.630221][ T9921] tipc: Enabling of bearer rejected, failed to enable media [ 178.702142][ T9924] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 194.416170][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.674570][ T56] block nbd0: Possible stuck request ffff88802531e000: control (read@0,4096B). Runtime 90 seconds [ 206.729669][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 206.735801][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 206.735847][ T5852] Bluetooth: hci2: command 0x0401 tx timeout [ 206.737601][ T5157] Bluetooth: hci1: command 0x0406 tx timeout [ 234.726801][ T56] block nbd0: Possible stuck request ffff88802531e000: control (read@0,4096B). Runtime 120 seconds [ 236.705489][ T9973] tipc: Enabled bearer , priority 0 [ 236.733316][ T9978] netlink: 'syz.3.1465': attribute type 11 has an invalid length. [ 236.741414][ T9978] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1465'. [ 236.751148][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1467'. [ 236.816189][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1467'. [ 236.829865][ T9972] tipc: Disabling bearer [ 236.861869][ T9987] veth0_to_bond: left allmulticast mode [ 236.867757][ T9987] veth0_to_bond: left promiscuous mode [ 236.873652][ T9987] bridge1: port 1(veth0_to_bond) entered disabled state [ 236.969643][ T9995] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 236.983434][ T9991] batadv_slave_1: entered promiscuous mode [ 237.003387][ T9995] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1471'. [ 237.057791][ T9987] team0: Mode changed to "loadbalance" [ 237.074996][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1472'. [ 237.157254][ T9984] batadv_slave_1: left promiscuous mode [ 237.330291][T10017] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1479'. [ 237.344158][T10012] sctp: [Deprecated]: syz.3.1477 (pid 10012) Use of int in max_burst socket option deprecated. [ 237.344158][T10012] Use struct sctp_assoc_value instead [ 237.365918][T10017] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1479'. [ 237.378318][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'. [ 237.398659][T10017] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1479'. [ 237.422462][T10017] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1479'. [ 237.558679][T10022] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 237.680248][T10036] netlink: 'syz.4.1483': attribute type 33 has an invalid length. [ 237.841010][T10041] netlink: 'syz.2.1484': attribute type 29 has an invalid length. [ 237.850227][T10041] netlink: 'syz.2.1484': attribute type 29 has an invalid length. [ 237.888026][T10048] netlink: 'syz.0.1486': attribute type 18 has an invalid length. [ 238.244179][T10066] netlink: 'syz.4.1495': attribute type 39 has an invalid length. [ 238.256917][T10066] netlink: 'syz.4.1495': attribute type 39 has an invalid length. [ 238.307826][T10066] netlink: 'syz.4.1495': attribute type 39 has an invalid length. [ 238.321589][T10066] netlink: 'syz.4.1495': attribute type 39 has an invalid length. [ 238.332296][T10066] netlink: 'syz.4.1495': attribute type 39 has an invalid length. [ 238.373808][T10073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.714833][T10098] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.730331][T10096] Unknown status report in ack skb [ 239.099009][T10120] bond0: (slave bond_slave_1): Releasing backup interface [ 239.682630][T10159] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001 [ 239.692357][T10159] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001 [ 239.704612][T10159] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001 [ 239.751554][T10159] IPVS: set_ctl: invalid protocol: 136 172.20.20.170:20001 [ 239.898573][T10170] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 240.326729][T10199] sctp: [Deprecated]: syz.3.1538 (pid 10199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.326729][T10199] Use struct sctp_sack_info instead [ 240.552257][ T5952] lo speed is unknown, defaulting to 1000 [ 240.587105][T10219] Unknown status report in ack skb [ 240.700696][T10221] bond3 (unregistering): Released all slaves [ 240.746130][T10233] vxcan1: tx address claim with dlc 1 [ 240.865989][T10242] netlink: 'syz.0.1554': attribute type 11 has an invalid length. [ 240.881098][T10242] netlink: 'syz.0.1554': attribute type 11 has an invalid length. [ 242.002282][T10298] validate_nla: 34 callbacks suppressed [ 242.002299][T10298] netlink: 'syz.4.1570': attribute type 6 has an invalid length. [ 242.117111][T10308] __nla_validate_parse: 23 callbacks suppressed [ 242.117131][T10308] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1569'. [ 242.145497][T10307] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1571'. [ 242.447156][T10330] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1581'. [ 242.532236][T10327] bond2 (unregistering): Released all slaves [ 242.564955][T10338] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1582'. [ 242.721743][T10343] tipc: Enabling of bearer rejected, failed to enable media [ 242.782160][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 242.814003][T10353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1587'. [ 242.917165][T10362] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 242.923909][T10364] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1593'. [ 243.042477][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1595'. [ 243.080689][T10371] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 243.091163][T10371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.099099][T10375] netlink: 'syz.1.1598': attribute type 1 has an invalid length. [ 243.127652][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1598'. [ 243.237947][T10386] netlink: 'syz.2.1602': attribute type 10 has an invalid length. [ 243.259140][T10386] team0: Device ipvlan1 failed to register rx_handler [ 243.292000][T10386] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 243.333089][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 243.587297][T10415] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 243.779684][T10424] veth3: entered allmulticast mode [ 244.340259][T10458] netlink: 'syz.3.1625': attribute type 3 has an invalid length. [ 244.412212][T10470] tipc: Enabled bearer , priority 0 [ 244.419902][T10470] syzkaller0: entered promiscuous mode [ 244.425510][T10470] syzkaller0: entered allmulticast mode [ 244.434861][T10470] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 244.509491][T10470] tipc: Resetting bearer [ 244.556223][T10468] tipc: Resetting bearer [ 244.601601][T10468] tipc: Disabling bearer [ 245.478735][T10530] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 245.890766][T10556] netlink: 'syz.3.1654': attribute type 39 has an invalid length. [ 246.180979][T10568] netlink: 'syz.3.1660': attribute type 1 has an invalid length. [ 246.288930][T10579] veth0: entered promiscuous mode [ 246.443025][T10583] tipc: Started in network mode [ 246.450704][T10583] tipc: Node identity , cluster identity 4711 [ 246.456891][T10583] tipc: Failed to obtain node identity [ 246.462509][T10583] tipc: Enabling of bearer rejected, failed to enable media [ 246.514091][T10588] pim6reg527: entered allmulticast mode [ 247.030358][T10632] delete_channel: no stack [ 247.130136][T10638] Bluetooth: MGMT ver 1.23 [ 247.315877][T10649] __nla_validate_parse: 39 callbacks suppressed [ 247.315896][T10649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1687'. [ 247.606858][T10667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1695'. [ 247.850230][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1701'. [ 247.889445][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1701'. [ 248.200394][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1708'. [ 248.218827][T10717] syzkaller0: entered promiscuous mode [ 248.228506][T10717] syzkaller0: entered allmulticast mode [ 248.381475][T10713] bridge1: port 1(veth0_to_bond) entered blocking state [ 248.405805][T10713] bridge1: port 1(veth0_to_bond) entered disabled state [ 248.413193][T10713] veth0_to_bond: entered allmulticast mode [ 248.427505][T10713] veth0_to_bond: entered promiscuous mode [ 248.459074][T10722] vlan3: entered allmulticast mode [ 248.465633][T10722] veth1: entered allmulticast mode [ 248.484180][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1712'. [ 248.542559][T10732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1713'. [ 248.687449][ T43] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 248.701067][ T43] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 248.774536][T10748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1719'. [ 248.905820][T10754] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 248.914393][T10753] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1721'. [ 248.945575][T10761] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1724'. [ 248.975070][T10758] bond2 (unregistering): Released all slaves [ 249.200760][T10769] veth0_to_bond: left allmulticast mode [ 249.218435][T10775] Illegal XDP return value 4294967274 on prog (id 325) dev N/A, expect packet loss! [ 249.236953][T10769] veth0_to_bond: left promiscuous mode [ 249.245824][T10769] bridge2: port 1(veth0_to_bond) entered disabled state [ 249.265103][T10777] netlink: 'syz.3.1731': attribute type 1 has an invalid length. [ 249.285581][T10769] bridge4: port 1(veth0_to_bond) entered blocking state [ 249.332092][T10780] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.339400][T10769] bridge4: port 1(veth0_to_bond) entered disabled state [ 249.349617][T10769] veth0_to_bond: entered allmulticast mode [ 249.378841][T10769] veth0_to_bond: entered promiscuous mode [ 249.428351][T10781] vlan3: entered allmulticast mode [ 249.941789][T10815] netlink: 'syz.3.1743': attribute type 2 has an invalid length. [ 250.058828][T10823] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.268968][T10837] netlink: 'syz.3.1751': attribute type 10 has an invalid length. [ 250.351268][T10842] netlink: 'syz.3.1751': attribute type 10 has an invalid length. [ 250.362132][T10837] team0: Port device dummy0 added [ 250.482916][T10842] team0: Port device dummy0 removed [ 250.500149][T10847] netlink: 'syz.2.1754': attribute type 1 has an invalid length. [ 250.517715][T10842] dummy0: entered promiscuous mode [ 250.596624][T10847] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.692227][T10855] bond3: (slave veth5): Enslaving as an active interface with a down link [ 250.737581][T10847] vlan3: entered allmulticast mode [ 250.744057][T10847] veth1: entered promiscuous mode [ 250.751409][T10847] veth1: left promiscuous mode [ 250.759000][T10847] bond3: (slave vlan3): making interface the new active one [ 250.767689][T10847] veth1: entered promiscuous mode [ 250.773936][T10847] vlan3: entered promiscuous mode [ 250.779933][T10847] bond3: (slave vlan3): Enslaving as an active interface with an up link [ 250.813522][T10859] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 251.100848][T10879] openvswitch: netlink: Flow key attribute not present in set flow. [ 251.231701][T10887] netlink: 'syz.2.1769': attribute type 1 has an invalid length. [ 251.252149][T10887] netlink: 'syz.2.1769': attribute type 2 has an invalid length. [ 251.276908][T10887] netlink: 'syz.2.1769': attribute type 1 has an invalid length. [ 251.662271][T10913] syzkaller0: entered promiscuous mode [ 251.686782][T10913] syzkaller0: entered allmulticast mode [ 251.850817][T10923] gretap0: entered promiscuous mode [ 252.293515][T10945] tipc: Enabling of bearer rejected, failed to enable media [ 252.458000][T10950] __nla_validate_parse: 14 callbacks suppressed [ 252.458019][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'. [ 252.473583][T10950] netlink: 'syz.2.1788': attribute type 26 has an invalid length. [ 252.486843][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 252.520501][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'. [ 252.554134][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1788'. [ 252.616737][T10949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.803284][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 252.907270][T10969] bridge0: port 1(batadv0) entered blocking state [ 252.935635][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1795'. [ 252.957967][T10969] bridge0: port 1(batadv0) entered disabled state [ 252.980386][T10969] batadv0: entered allmulticast mode [ 252.992335][T10969] batadv0: entered promiscuous mode [ 253.318125][T10998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1803'. [ 253.355824][T10994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1803'. [ 253.371212][ T60] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 253.380902][ T60] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 253.588208][T11015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1808'. [ 253.675621][T11015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.712533][T11020] gretap1: entered promiscuous mode [ 253.722360][T11020] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 253.786867][T11015] macvlan0: entered promiscuous mode [ 253.821619][T11015] macvlan0: entered allmulticast mode [ 253.830144][T11015] bond2: (slave macvlan0): Error -98 calling set_mac_address [ 253.934685][ C1] Unknown status report in ack skb [ 253.974773][T11033] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1815'. [ 254.248923][T11048] IPVS: Error connecting to the multicast addr [ 254.286416][T11051] validate_nla: 1 callbacks suppressed [ 254.286434][T11051] netlink: 'syz.4.1824': attribute type 12 has an invalid length. [ 254.340692][T11051] netlink: 'syz.4.1824': attribute type 29 has an invalid length. [ 254.517273][T11066] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 254.525245][ T55] IPVS: starting estimator thread 0... [ 254.616543][T11070] IPVS: using max 29 ests per chain, 69600 per kthread [ 254.636903][T11076] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 255.337622][T11126] tipc: Cannot configure node identity twice [ 255.343646][T11126] tipc: Cannot configure node identity twice [ 255.371263][T11120] veth0_to_bond: left allmulticast mode [ 255.383023][T11120] veth0_to_bond: left promiscuous mode [ 255.397873][T11120] bridge4: port 1(veth0_to_bond) entered disabled state [ 255.431990][T11120] bridge5: port 1(veth0_to_bond) entered blocking state [ 255.462336][T11120] bridge5: port 1(veth0_to_bond) entered disabled state [ 255.480366][T11120] veth0_to_bond: entered allmulticast mode [ 255.490160][T11120] veth0_to_bond: entered promiscuous mode [ 255.520848][T11138] netlink: 'syz.1.1853': attribute type 1 has an invalid length. [ 255.547333][T11134] vlan3: entered allmulticast mode [ 255.549330][T11138] netlink: 'syz.1.1853': attribute type 1 has an invalid length. [ 255.850217][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.907082][T11163] netlink: 'syz.4.1858': attribute type 1 has an invalid length. [ 255.973168][T11148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.022859][T11160] gretap1: entered promiscuous mode [ 256.058037][T11160] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 256.183022][T11167] macvlan2: entered promiscuous mode [ 256.193903][T11167] macvlan2: entered allmulticast mode [ 256.212050][T11167] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 256.824563][T11204] batadv0: left allmulticast mode [ 256.829646][T11204] batadv0: left promiscuous mode [ 256.857672][T11204] bridge0: port 1(batadv0) entered disabled state [ 256.954548][T11213] netlink: 'syz.4.1870': attribute type 1 has an invalid length. [ 256.963265][T11209] veth0_to_bond: left allmulticast mode [ 256.977650][T11209] veth0_to_bond: left promiscuous mode [ 256.983389][T11209] bridge1: port 1(veth0_to_bond) entered disabled state [ 257.007959][T11209] bridge2: port 1(veth0_to_bond) entered blocking state [ 257.023661][T11209] bridge2: port 1(veth0_to_bond) entered disabled state [ 257.032496][T11209] veth0_to_bond: entered allmulticast mode [ 257.067082][T11209] veth0_to_bond: entered promiscuous mode [ 257.100298][T11212] vlan3: entered allmulticast mode [ 257.843328][T11258] __nla_validate_parse: 17 callbacks suppressed [ 257.843346][T11258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 257.862076][T11257] team0: Device ip6gre1 is of different type [ 257.991044][T11267] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1892'. [ 258.132036][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1896'. [ 258.391407][T11291] netlink: 'syz.1.1903': attribute type 1 has an invalid length. [ 258.425375][T11291] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1903'. [ 258.778280][T11308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1911'. [ 258.955664][T11329] netlink: 'syz.1.1917': attribute type 3 has an invalid length. [ 258.975712][T11329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.139819][T11340] netlink: 'syz.2.1921': attribute type 10 has an invalid length. [ 259.370937][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1925'. [ 259.514169][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1928'. [ 259.539534][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1928'. [ 259.688412][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1933'. [ 259.883599][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 259.938759][T11387] veth1_vlan (unregistering): left allmulticast mode [ 259.981911][T11387] macvlan0 (unregistering): left allmulticast mode [ 260.153903][T11389] macvtap1: entered promiscuous mode [ 260.159238][T11389] vlan0: entered promiscuous mode [ 260.171477][T11389] macvtap1: entered allmulticast mode [ 260.184003][T11389] vlan0: entered allmulticast mode [ 260.189309][T11389] veth0_vlan: entered allmulticast mode [ 260.412373][T11406] netlink: 'syz.1.1943': attribute type 29 has an invalid length. [ 260.421474][T11406] netlink: 'syz.1.1943': attribute type 29 has an invalid length. [ 260.433528][T11407] netlink: 'syz.1.1943': attribute type 29 has an invalid length. [ 260.657752][T11386] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.844682][T11431] netlink: 'syz.4.1951': attribute type 5 has an invalid length. [ 260.853284][ T10] IPVS: starting estimator thread 0... [ 260.964674][T11435] IPVS: using max 32 ests per chain, 76800 per kthread [ 261.837621][T11442] workqueue: Failed to create a rescuer kthread for wq "nfc36_nci_tx_wq": -EINTR [ 261.845731][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 262.238054][ T60] vlan3: left promiscuous mode [ 262.298644][T11596] netlink: 'syz.3.1977': attribute type 29 has an invalid length. [ 262.340377][T11596] netlink: 'syz.3.1977': attribute type 4 has an invalid length. [ 262.366136][T11596] netlink: 'syz.3.1977': attribute type 29 has an invalid length. [ 262.539563][T11604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 262.818985][T11621] sctp: [Deprecated]: syz.2.1990 (pid 11621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.818985][T11621] Use struct sctp_sack_info instead [ 263.375196][T11656] __nla_validate_parse: 9 callbacks suppressed [ 263.375213][T11656] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2000'. [ 263.424933][T11656] netlink: 'syz.1.2000': attribute type 9 has an invalid length. [ 263.673374][T11668] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 263.710587][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2005'. [ 263.728439][T11672] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 263.744435][T11672] tipc: Enabled bearer , priority 10 [ 264.344534][T11701] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 264.556391][T11721] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2023'. [ 264.605868][T11723] FAULT_INJECTION: forcing a failure. [ 264.605868][T11723] name failslab, interval 1, probability 0, space 0, times 0 [ 264.639706][T11723] CPU: 0 UID: 0 PID: 11723 Comm: syz.4.2025 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 264.639733][T11723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.639758][T11723] Call Trace: [ 264.639766][T11723] [ 264.639774][T11723] dump_stack_lvl+0x189/0x250 [ 264.639798][T11723] ? __pfx____ratelimit+0x10/0x10 [ 264.639823][T11723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.639841][T11723] ? __pfx__printk+0x10/0x10 [ 264.639859][T11723] ? kasan_save_track+0x4f/0x80 [ 264.639883][T11723] ? dst_alloc+0x105/0x170 [ 264.639902][T11723] ? ip6_pol_route+0xf5d/0x1180 [ 264.639920][T11723] ? fib6_rule_action+0x206/0x7d0 [ 264.639938][T11723] ? fib_rules_lookup+0x767/0xe90 [ 264.639954][T11723] ? ip6_route_output_flags+0x364/0x5d0 [ 264.639971][T11723] ? ip6_dst_lookup_tail+0x1ae/0x1510 [ 264.639991][T11723] ? ip6_dst_lookup_flow+0x47/0xe0 [ 264.640010][T11723] ? rawv6_sendmsg+0xdab/0x1820 [ 264.640032][T11723] ? __sock_sendmsg+0x19c/0x270 [ 264.640050][T11723] ? ____sys_sendmsg+0x505/0x830 [ 264.640072][T11723] should_fail_ex+0x414/0x560 [ 264.640104][T11723] should_failslab+0xa8/0x100 [ 264.640123][T11723] __kmalloc_node_noprof+0xd1/0x4e0 [ 264.640147][T11723] ? alloc_slab_obj_exts+0x39/0xa0 [ 264.640177][T11723] alloc_slab_obj_exts+0x39/0xa0 [ 264.640200][T11723] __memcg_slab_post_alloc_hook+0x31e/0x7f0 [ 264.640247][T11723] kmem_cache_alloc_noprof+0x2bf/0x3c0 [ 264.640270][T11723] ? dst_alloc+0x105/0x170 [ 264.640290][T11723] ? __pfx_ip6_dst_gc+0x10/0x10 [ 264.640309][T11723] dst_alloc+0x105/0x170 [ 264.640334][T11723] ip6_rt_cache_alloc+0x3ac/0xa40 [ 264.640372][T11723] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 264.640393][T11723] ? rt6_find_cached_rt+0x21c/0x270 [ 264.640416][T11723] ? ip6_pol_route+0x162/0x1180 [ 264.640433][T11723] ? ip6_pol_route+0x162/0x1180 [ 264.640451][T11723] ip6_pol_route+0xf5d/0x1180 [ 264.640467][T11723] ? is_bpf_text_address+0x26/0x2b0 [ 264.640499][T11723] ? __pfx_ip6_pol_route+0x10/0x10 [ 264.640531][T11723] ? fib_rules_lookup+0x96/0xe90 [ 264.640554][T11723] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 264.640572][T11723] fib6_rule_action+0x206/0x7d0 [ 264.640594][T11723] ? __pfx_fib6_rule_action+0x10/0x10 [ 264.640616][T11723] fib_rules_lookup+0x767/0xe90 [ 264.640642][T11723] ? fib_rules_lookup+0x96/0xe90 [ 264.640659][T11723] ? __pfx_fib_rules_lookup+0x10/0x10 [ 264.640674][T11723] ? l3mdev_update_flow+0x29/0x640 [ 264.640690][T11723] ? l3mdev_update_flow+0x4d1/0x640 [ 264.640705][T11723] ? l3mdev_update_flow+0x29/0x640 [ 264.640723][T11723] fib6_rule_lookup+0x18e/0x6f0 [ 264.640743][T11723] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 264.640762][T11723] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 264.640785][T11723] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 264.640809][T11723] ? dev_get_by_index_rcu+0xf4/0x110 [ 264.640845][T11723] ip6_route_output_flags+0x364/0x5d0 [ 264.640865][T11723] ? ip6_route_output_flags+0x2e/0x5d0 [ 264.640888][T11723] ip6_dst_lookup_tail+0x1ae/0x1510 [ 264.640916][T11723] ? txopt_get+0x7a/0x3f0 [ 264.640943][T11723] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 264.640964][T11723] ? txopt_get+0x7a/0x3f0 [ 264.640985][T11723] ? txopt_get+0x7a/0x3f0 [ 264.641003][T11723] ? txopt_get+0x7a/0x3f0 [ 264.641025][T11723] ? txopt_get+0x335/0x3f0 [ 264.641048][T11723] ? __pfx_txopt_get+0x10/0x10 [ 264.641067][T11723] ? aa_label_sk_perm+0x413/0x560 [ 264.641091][T11723] ip6_dst_lookup_flow+0x47/0xe0 [ 264.641115][T11723] rawv6_sendmsg+0xdab/0x1820 [ 264.641156][T11723] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 264.641207][T11723] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.641231][T11723] ? sock_rps_record_flow+0x19/0x410 [ 264.641254][T11723] ? inet_sendmsg+0x2f4/0x370 [ 264.641271][T11723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.641296][T11723] __sock_sendmsg+0x19c/0x270 [ 264.641319][T11723] ____sys_sendmsg+0x505/0x830 [ 264.641349][T11723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.641379][T11723] ? import_iovec+0x74/0xa0 [ 264.641407][T11723] ___sys_sendmsg+0x21f/0x2a0 [ 264.641428][T11723] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.641488][T11723] ? __fget_files+0x2a/0x420 [ 264.641504][T11723] ? __fget_files+0x3a0/0x420 [ 264.641533][T11723] __x64_sys_sendmsg+0x19b/0x260 [ 264.641553][T11723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 264.641581][T11723] ? __pfx_ksys_write+0x10/0x10 [ 264.641602][T11723] ? rcu_is_watching+0x15/0xb0 [ 264.641632][T11723] ? do_syscall_64+0xbe/0x3b0 [ 264.641658][T11723] do_syscall_64+0xfa/0x3b0 [ 264.641679][T11723] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.641701][T11723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.641717][T11723] ? clear_bhb_loop+0x60/0xb0 [ 264.641738][T11723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.641753][T11723] RIP: 0033:0x7fe6c3f8eb69 [ 264.641770][T11723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.641783][T11723] RSP: 002b:00007fe6c4dc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.641804][T11723] RAX: ffffffffffffffda RBX: 00007fe6c41b5fa0 RCX: 00007fe6c3f8eb69 [ 264.641816][T11723] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 264.641827][T11723] RBP: 00007fe6c4dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 264.641837][T11723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.641847][T11723] R13: 0000000000000000 R14: 00007fe6c41b5fa0 R15: 00007ffe5eea8f88 [ 264.641880][T11723] [ 265.178312][ T5954] tipc: Node number set to 3809209970 [ 265.186870][ T56] block nbd0: Possible stuck request ffff88802531e000: control (read@0,4096B). Runtime 150 seconds [ 265.264193][T11728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2029'. [ 265.282491][T11728] tc_dump_action: action bad kind [ 265.488171][T11745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2035'. [ 265.889185][T11741] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 266.248258][T11760] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2041'. [ 266.560000][T11771] syzkaller0: entered promiscuous mode [ 266.590093][T11771] syzkaller0: entered allmulticast mode [ 266.692078][T11783] netlink: 'syz.3.2050': attribute type 5 has an invalid length. [ 266.914982][T11796] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2055'. [ 267.070458][T11806] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.079244][T11807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2061'. [ 267.127165][T11805] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 267.206443][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 267.240571][T11807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2061'. [ 267.783521][T11853] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 267.856935][T11856] netlink: 'syz.4.2073': attribute type 29 has an invalid length. [ 267.884942][T11858] netlink: 'syz.4.2073': attribute type 29 has an invalid length. [ 267.991359][T11864] netlink: 'syz.2.2079': attribute type 21 has an invalid length. [ 268.009346][T11864] IPv6: NLM_F_CREATE should be specified when creating new route [ 268.370276][T11891] netlink: 'syz.0.2090': attribute type 21 has an invalid length. [ 268.478412][T11898] __nla_validate_parse: 4 callbacks suppressed [ 268.478433][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2093'. [ 268.481639][T11899] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 268.509009][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2093'. [ 268.709583][T11910] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2099'. [ 268.964676][T11926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2104'. [ 269.067600][T11929] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 269.268443][T11943] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2112'. [ 269.391337][T11953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2116'. [ 269.538059][T11963] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 269.699434][T11973] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 269.708865][T11974] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20002 [ 269.778311][T11978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2124'. [ 270.042313][T11996] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 270.968806][T12023] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 271.294127][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 271.301922][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 271.540978][T12060] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 271.560979][T12064] netlink: 'syz.3.2161': attribute type 11 has an invalid length. [ 271.711687][T12071] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 271.765498][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2165'. [ 271.884469][T12079] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2167'. [ 271.908114][T12081] FAULT_INJECTION: forcing a failure. [ 271.908114][T12081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.922118][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2167'. [ 271.935181][T12081] CPU: 1 UID: 0 PID: 12081 Comm: syz.2.2166 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 271.935210][T12081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.935220][T12081] Call Trace: [ 271.935227][T12081] [ 271.935235][T12081] dump_stack_lvl+0x189/0x250 [ 271.935259][T12081] ? __pfx____ratelimit+0x10/0x10 [ 271.935283][T12081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.935301][T12081] ? __pfx__printk+0x10/0x10 [ 271.935323][T12081] ? __might_fault+0xb0/0x130 [ 271.935357][T12081] should_fail_ex+0x414/0x560 [ 271.935389][T12081] _copy_from_user+0x2d/0xb0 [ 271.935414][T12081] ___sys_sendmsg+0x158/0x2a0 [ 271.935437][T12081] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.935495][T12081] ? __fget_files+0x2a/0x420 [ 271.935512][T12081] ? __fget_files+0x3a0/0x420 [ 271.935542][T12081] __x64_sys_sendmsg+0x19b/0x260 [ 271.935563][T12081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 271.935592][T12081] ? __pfx_ksys_write+0x10/0x10 [ 271.935613][T12081] ? rcu_is_watching+0x15/0xb0 [ 271.935653][T12081] ? do_syscall_64+0xbe/0x3b0 [ 271.935682][T12081] do_syscall_64+0xfa/0x3b0 [ 271.935704][T12081] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.935725][T12081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.935742][T12081] ? clear_bhb_loop+0x60/0xb0 [ 271.935763][T12081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.935780][T12081] RIP: 0033:0x7fec2638eb69 [ 271.935797][T12081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.935812][T12081] RSP: 002b:00007fec271f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.935833][T12081] RAX: ffffffffffffffda RBX: 00007fec265b5fa0 RCX: 00007fec2638eb69 [ 271.935846][T12081] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 271.935858][T12081] RBP: 00007fec271f4090 R08: 0000000000000000 R09: 0000000000000000 [ 271.935869][T12081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.935880][T12081] R13: 0000000000000000 R14: 00007fec265b5fa0 R15: 00007ffea901ba98 [ 271.935908][T12081] [ 272.404253][T12107] team0: Device gtp0 is of different type [ 272.842631][T12114] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 272.967725][T12121] netlink: 'syz.3.2178': attribute type 6 has an invalid length. [ 273.233421][T12136] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 273.518312][T12151] syzkaller0: entered promiscuous mode [ 273.535553][T12151] syzkaller0: entered allmulticast mode [ 273.585064][T12158] team0: Device gtp0 is up. Set it down before adding it as a team port [ 273.627664][T12159] __nla_validate_parse: 6 callbacks suppressed [ 273.627681][T12159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2190'. [ 273.656988][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2197'. [ 273.657802][T12163] tipc: Enabled bearer , priority 0 [ 273.751058][T12164] syzkaller0: entered promiscuous mode [ 273.759552][T12164] syzkaller0: entered allmulticast mode [ 273.773419][T12171] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2198'. [ 273.781537][T12177] FAULT_INJECTION: forcing a failure. [ 273.781537][T12177] name failslab, interval 1, probability 0, space 0, times 0 [ 273.797785][T12177] CPU: 1 UID: 0 PID: 12177 Comm: syz.4.2200 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 273.797813][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 273.797824][T12177] Call Trace: [ 273.797832][T12177] [ 273.797841][T12177] dump_stack_lvl+0x189/0x250 [ 273.797874][T12177] ? __pfx____ratelimit+0x10/0x10 [ 273.797900][T12177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.797919][T12177] ? __pfx__printk+0x10/0x10 [ 273.797948][T12177] ? __pfx___find_rr_leaf+0x10/0x10 [ 273.797980][T12177] should_fail_ex+0x414/0x560 [ 273.798012][T12177] should_failslab+0xa8/0x100 [ 273.798030][T12177] ? __pfx_ip6_dst_gc+0x10/0x10 [ 273.798047][T12177] kmem_cache_alloc_noprof+0x73/0x3c0 [ 273.798070][T12177] ? dst_alloc+0x105/0x170 [ 273.798090][T12177] ? __pfx_ip6_dst_gc+0x10/0x10 [ 273.798109][T12177] dst_alloc+0x105/0x170 [ 273.798134][T12177] ip6_rt_cache_alloc+0x3ac/0xa40 [ 273.798166][T12177] ? __pfx_ip6_rt_cache_alloc+0x10/0x10 [ 273.798187][T12177] ? rt6_find_cached_rt+0x21c/0x270 [ 273.798211][T12177] ? ip6_pol_route+0x162/0x1180 [ 273.798227][T12177] ? ip6_pol_route+0x162/0x1180 [ 273.798244][T12177] ip6_pol_route+0xf5d/0x1180 [ 273.798264][T12177] ? is_bpf_text_address+0x26/0x2b0 [ 273.798296][T12177] ? __pfx_ip6_pol_route+0x10/0x10 [ 273.798328][T12177] ? fib_rules_lookup+0x96/0xe90 [ 273.798351][T12177] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 273.798370][T12177] fib6_rule_action+0x206/0x7d0 [ 273.798392][T12177] ? __pfx_fib6_rule_action+0x10/0x10 [ 273.798414][T12177] fib_rules_lookup+0x767/0xe90 [ 273.798443][T12177] ? fib_rules_lookup+0x96/0xe90 [ 273.798461][T12177] ? __pfx_fib_rules_lookup+0x10/0x10 [ 273.798478][T12177] ? l3mdev_update_flow+0x29/0x640 [ 273.798497][T12177] ? l3mdev_update_flow+0x4d1/0x640 [ 273.798514][T12177] ? l3mdev_update_flow+0x29/0x640 [ 273.798535][T12177] fib6_rule_lookup+0x18e/0x6f0 [ 273.798556][T12177] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 273.798576][T12177] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 273.798602][T12177] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 273.798629][T12177] ? dev_get_by_index_rcu+0xf4/0x110 [ 273.798660][T12177] ip6_route_output_flags+0x364/0x5d0 [ 273.798679][T12177] ? ip6_route_output_flags+0x2e/0x5d0 [ 273.798703][T12177] ip6_dst_lookup_tail+0x1ae/0x1510 [ 273.798733][T12177] ? txopt_get+0x7a/0x3f0 [ 273.798762][T12177] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 273.798784][T12177] ? txopt_get+0x7a/0x3f0 [ 273.798806][T12177] ? txopt_get+0x7a/0x3f0 [ 273.798826][T12177] ? txopt_get+0x7a/0x3f0 [ 273.798856][T12177] ? txopt_get+0x335/0x3f0 [ 273.798882][T12177] ? __pfx_txopt_get+0x10/0x10 [ 273.798903][T12177] ? aa_label_sk_perm+0x413/0x560 [ 273.798928][T12177] ip6_dst_lookup_flow+0x47/0xe0 [ 273.798954][T12177] rawv6_sendmsg+0xdab/0x1820 [ 273.798998][T12177] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 273.799055][T12177] ? __pfx_aa_sk_perm+0x10/0x10 [ 273.799080][T12177] ? sock_rps_record_flow+0x19/0x410 [ 273.799106][T12177] ? inet_sendmsg+0x2f4/0x370 [ 273.799125][T12177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.799150][T12177] __sock_sendmsg+0x19c/0x270 [ 273.799177][T12177] ____sys_sendmsg+0x505/0x830 [ 273.799203][T12177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.799235][T12177] ? import_iovec+0x74/0xa0 [ 273.799263][T12177] ___sys_sendmsg+0x21f/0x2a0 [ 273.799285][T12177] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.799352][T12177] ? __fget_files+0x2a/0x420 [ 273.799368][T12177] ? __fget_files+0x3a0/0x420 [ 273.799399][T12177] __x64_sys_sendmsg+0x19b/0x260 [ 273.799422][T12177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.799454][T12177] ? __pfx_ksys_write+0x10/0x10 [ 273.799475][T12177] ? rcu_is_watching+0x15/0xb0 [ 273.799506][T12177] ? do_syscall_64+0xbe/0x3b0 [ 273.799535][T12177] do_syscall_64+0xfa/0x3b0 [ 273.799556][T12177] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.799579][T12177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.799596][T12177] ? clear_bhb_loop+0x60/0xb0 [ 273.799618][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.799635][T12177] RIP: 0033:0x7fe6c3f8eb69 [ 273.799651][T12177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.799666][T12177] RSP: 002b:00007fe6c4dc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.799686][T12177] RAX: ffffffffffffffda RBX: 00007fe6c41b5fa0 RCX: 00007fe6c3f8eb69 [ 273.799699][T12177] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 273.799711][T12177] RBP: 00007fe6c4dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 273.799722][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.799733][T12177] R13: 0000000000000000 R14: 00007fe6c41b5fa0 R15: 00007ffe5eea8f88 [ 273.799768][T12177] [ 274.279715][T12173] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 274.353653][T12168] tipc: Resetting bearer [ 274.402225][T12168] tipc: Disabling bearer [ 274.429807][T12180] veth0_to_bond: left allmulticast mode [ 274.437575][T12180] veth0_to_bond: left promiscuous mode [ 274.443379][T12180] bridge2: port 1(veth0_to_bond) entered disabled state [ 274.521596][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2203'. [ 274.575098][T12180] bond1: (slave gretap1): Releasing backup interface [ 274.613075][T12181] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2201'. [ 274.623133][T12183] netlink: 'syz.1.2203': attribute type 4 has an invalid length. [ 274.816273][T12196] team0: Mode changed to "activebackup" [ 274.914796][T12180] vlan0: entered promiscuous mode [ 274.953204][T12180] team0: Port device vlan0 added [ 274.990200][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2202'. [ 275.021008][T12213] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2209'. [ 275.058922][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2208'. [ 275.139252][T12218] IPv6: NLM_F_CREATE should be specified when creating new route [ 275.298201][T12225] netlink: 'syz.4.2214': attribute type 10 has an invalid length. [ 275.336940][T12225] team0: Port device dummy0 added [ 275.516677][T12240] nbd: nbd1 already in use [ 275.562659][T12240] block nbd1: NBD_DISCONNECT [ 275.577328][T12244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2222'. [ 275.594198][T12240] block nbd1: Send disconnect failed -32 [ 275.622494][T12242] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 275.793772][T12252] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2226'. [ 275.992695][T12265] netlink: 'syz.1.2231': attribute type 1 has an invalid length. [ 276.012422][T12265] netlink: 'syz.1.2231': attribute type 1 has an invalid length. [ 276.258416][T12276] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 276.290451][T12287] IPv6: NLM_F_CREATE should be specified when creating new route [ 276.648826][T12310] veth0_to_bond: left allmulticast mode [ 276.666095][T12310] veth0_to_bond: left promiscuous mode [ 276.682088][T12310] bridge5: port 1(veth0_to_bond) entered disabled state [ 276.723510][T12310] bridge6: port 1(veth0_to_bond) entered blocking state [ 276.768776][T12310] bridge6: port 1(veth0_to_bond) entered disabled state [ 276.787415][T12310] veth0_to_bond: entered allmulticast mode [ 276.810471][T12310] veth0_to_bond: entered promiscuous mode [ 276.826640][T12316] vlan3: entered allmulticast mode [ 277.237415][T12354] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 277.287846][T12361] netlink: 'syz.0.2269': attribute type 21 has an invalid length. [ 277.336460][T12362] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 277.386017][T12362] netlink: 'syz.2.2268': attribute type 10 has an invalid length. [ 277.400605][T12365] veth0_to_bond: left allmulticast mode [ 277.411870][T12365] veth0_to_bond: left promiscuous mode [ 277.438279][T12365] bridge5: port 1(veth0_to_bond) entered disabled state [ 277.461090][T12365] bridge6: port 1(veth0_to_bond) entered blocking state [ 277.482564][T12365] bridge6: port 1(veth0_to_bond) entered disabled state [ 277.508013][T12365] veth0_to_bond: entered allmulticast mode [ 277.516377][T12365] veth0_to_bond: entered promiscuous mode [ 277.526476][T12362] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 277.538670][T12362] bond0: (slave wlan1): refused to change device type [ 277.576021][T12368] bond3: (slave veth5): Releasing active interface [ 277.582815][T12368] bond3: (slave veth5): the permanent HWaddr of slave - ca:72:18:3e:ab:33 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 277.611287][T12368] vlan3: entered promiscuous mode [ 277.620660][T12368] bond3: (slave vlan3): Releasing active interface [ 277.628050][T12368] vlan3: left promiscuous mode [ 277.640523][T12368] veth1: left promiscuous mode [ 277.657448][T12373] vlan0: entered allmulticast mode [ 277.723568][T12375] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 278.101612][T12404] bridge0: port 1(batadv0) entered blocking state [ 278.126651][T12404] bridge0: port 1(batadv0) entered disabled state [ 278.136813][T12404] batadv0: entered allmulticast mode [ 278.169155][T12404] batadv0: entered promiscuous mode [ 278.390823][T12420] bridge5: port 1(veth0_to_bond) entered blocking state [ 278.399109][T12420] bridge5: port 1(veth0_to_bond) entered disabled state [ 278.407863][T12420] veth0_to_bond: entered allmulticast mode [ 278.415845][T12420] veth0_to_bond: entered promiscuous mode [ 278.455258][T12423] bond2 (unregistering): Released all slaves [ 278.585204][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 278.595427][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 279.002465][T12457] __nla_validate_parse: 13 callbacks suppressed [ 279.002482][T12457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2301'. [ 279.059471][T12459] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.154707][T12473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2304'. [ 279.477536][T12497] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2304'. [ 279.673282][T12483] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 279.753164][ T1334] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.803610][ T1334] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.836185][T12502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2314'. [ 279.844972][ T1334] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.864289][ T1334] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.911802][ T1334] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.920796][ T1334] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.930918][ T1334] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 279.942940][ T1334] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.056235][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2317'. [ 280.210353][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2323'. [ 280.313431][T12531] delete_channel: no stack [ 280.343598][T12531] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 280.479226][T12543] netlink: 'syz.3.2329': attribute type 6 has an invalid length. [ 280.498768][T12543] netlink: 'syz.3.2329': attribute type 6 has an invalid length. [ 280.545272][T12549] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2332'. [ 280.619365][T12559] tipc: Enabled bearer , priority 0 [ 280.652409][T12562] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2335'. [ 280.670027][T12559] tipc: Disabling bearer [ 281.062410][T12588] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2342'. [ 281.137976][T12592] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 281.220282][T12597] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.317723][T12601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2348'. [ 281.383042][T12601] veth0_to_bond: left allmulticast mode [ 281.399604][T12601] veth0_to_bond: left promiscuous mode [ 281.416760][T12601] bridge5: port 1(veth0_to_bond) entered disabled state [ 281.452046][T12601] bridge6: port 1(veth0_to_bond) entered blocking state [ 281.460947][T12601] bridge6: port 1(veth0_to_bond) entered disabled state [ 281.478431][T12601] veth0_to_bond: entered allmulticast mode [ 281.498687][T12601] veth0_to_bond: entered promiscuous mode [ 282.036186][T12648] veth0_to_bond: left allmulticast mode [ 282.041789][T12648] veth0_to_bond: left promiscuous mode [ 282.054291][T12648] bridge6: port 1(veth0_to_bond) entered disabled state [ 282.090673][T12648] bridge7: port 1(veth0_to_bond) entered blocking state [ 282.118382][T12648] bridge7: port 1(veth0_to_bond) entered disabled state [ 282.146803][T12648] veth0_to_bond: entered allmulticast mode [ 282.164224][T12648] veth0_to_bond: entered promiscuous mode [ 282.225940][T12655] vlan3: entered allmulticast mode [ 282.509508][T12677] syzkaller1: entered promiscuous mode [ 282.521177][T12677] syzkaller1: entered allmulticast mode [ 282.529997][T12677] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 282.640115][T12677] IPVS: persistence engine module ip_vs_pe_ not found [ 282.730463][T12691] tipc: Enabled bearer , priority 10 [ 282.914509][T12698] sctp: [Deprecated]: syz.4.2381 (pid 12698) Use of int in maxseg socket option. [ 282.914509][T12698] Use struct sctp_assoc_value instead [ 282.988323][T12700] netlink: 'syz.4.2382': attribute type 10 has an invalid length. [ 282.997263][T12700] dummy0: entered promiscuous mode [ 283.014136][T12700] team0: Port device dummy0 removed [ 283.022562][T12700] bridge0: port 6(dummy0) entered blocking state [ 283.033029][T12700] bridge0: port 6(dummy0) entered disabled state [ 283.042333][T12700] dummy0: entered allmulticast mode [ 283.066263][T12702] dvmrp1: entered allmulticast mode [ 283.222121][T12711] bridge0: port 1(veth0_to_bond) entered blocking state [ 283.230024][T12711] bridge0: port 1(veth0_to_bond) entered disabled state [ 283.248728][T12711] veth0_to_bond: entered allmulticast mode [ 283.261505][T12711] veth0_to_bond: entered promiscuous mode [ 283.322454][T12717] veth0_to_bond: left allmulticast mode [ 283.344017][T12717] veth0_to_bond: left promiscuous mode [ 283.364633][T12717] bridge6: port 1(veth0_to_bond) entered disabled state [ 283.404915][T12717] bridge8: port 1(veth0_to_bond) entered blocking state [ 283.413956][T12717] bridge8: port 1(veth0_to_bond) entered disabled state [ 283.421743][T12717] veth0_to_bond: entered allmulticast mode [ 283.432915][T12717] veth0_to_bond: entered promiscuous mode [ 283.442122][T12724] netlink: 'syz.4.2389': attribute type 1 has an invalid length. [ 283.479327][T12715] vlan0: entered allmulticast mode [ 283.487023][T12715] bridge8: port 2(vlan0) entered blocking state [ 283.510534][T12715] bridge8: port 2(vlan0) entered disabled state [ 283.524322][T12715] vlan0: entered promiscuous mode [ 283.529970][T12715] veth1: entered promiscuous mode [ 283.596964][T12724] bond2: entered promiscuous mode [ 283.602650][T12724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.645541][T12721] 8021q: adding VLAN 0 to HW filter on device bond3 [ 283.654987][T12721] bond2: (slave bond3): making interface the new active one [ 283.662398][T12721] bond3: entered promiscuous mode [ 283.668547][T12721] bond2: (slave bond3): Enslaving as an active interface with an up link [ 283.679131][T12728] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 283.801014][ T12] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 283.833291][T12732] tipc: Enabling of bearer rejected, already enabled [ 283.899427][ T12] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 283.911230][ T12] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 283.930308][ T60] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 284.278351][T12774] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 284.298749][T12771] __nla_validate_parse: 10 callbacks suppressed [ 284.298768][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2405'. [ 284.611726][T12794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2414'. [ 284.634441][T12795] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2415'. [ 284.782873][T12803] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 285.095080][T12819] vlan2: entered allmulticast mode [ 285.100385][T12819] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 285.102077][T12824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2427'. [ 285.640558][T12854] syzkaller1: entered promiscuous mode [ 285.659953][T12854] syzkaller1: entered allmulticast mode [ 286.070551][T12886] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2453'. [ 286.138780][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2454'. [ 286.559137][T12918] bridge1: entered promiscuous mode [ 286.577188][T12918] bridge1: entered allmulticast mode [ 286.731953][T12929] netlink: 'syz.0.2470': attribute type 1 has an invalid length. [ 286.813334][T12934] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 286.869527][T12935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'. [ 288.045287][ T1334] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 288.170608][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2474'. [ 288.679859][ T1103] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.712686][ T1103] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 288.737240][ T1103] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 288.757647][ T1103] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 288.782701][ T1103] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.802420][ T1103] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 288.818215][ T1103] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 288.828733][T12989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2484'. [ 288.840321][ T1103] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 288.849134][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2486'. [ 288.849427][ T1103] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.872227][ T1103] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 288.880792][ T1103] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 288.892392][ T1103] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 288.902519][T12989] batadv0: left allmulticast mode [ 288.908017][T12989] batadv0: left promiscuous mode [ 288.913268][T12989] bridge0: port 1(batadv0) entered disabled state [ 288.976983][ T1103] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.986266][ T1103] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 288.994949][ T1103] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 289.003587][ T1103] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 289.197705][T13000] veth1_to_bond: entered allmulticast mode [ 289.236449][T13005] pimreg: entered allmulticast mode [ 289.330162][T13000] veth1_to_bond (unregistering): left allmulticast mode [ 289.339288][T13013] __nla_validate_parse: 2 callbacks suppressed [ 289.339307][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2493'. [ 289.373395][T13010] pimreg: left allmulticast mode [ 289.462637][T13009] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2493'. [ 289.531646][T13009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2493'. [ 289.554077][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2499'. [ 289.571854][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'. [ 289.588724][T13024] netlink: 'syz.3.2498': attribute type 30 has an invalid length. [ 289.672604][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'. [ 289.690340][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.710137][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.721442][T13024] netlink: 'syz.3.2498': attribute type 30 has an invalid length. [ 289.732550][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.744603][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.955955][T13039] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 290.147985][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2505'. [ 290.671120][T13075] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2518'. [ 290.694716][T13075] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2518'. [ 290.778105][T13082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2521'. [ 290.827717][T13089] netlink: 'syz.0.2524': attribute type 1 has an invalid length. [ 290.848117][T13089] netlink: 'syz.0.2524': attribute type 1 has an invalid length. [ 290.860180][T13089] netlink: 'syz.0.2524': attribute type 1 has an invalid length. [ 290.871753][T13091] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 290.983618][T13095] bond2: entered allmulticast mode [ 290.999580][T13095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 291.007742][T13095] bridge0: port 1(bond2) entered blocking state [ 291.020666][T13095] bridge0: port 1(bond2) entered disabled state [ 291.031160][T13095] bond2: entered promiscuous mode [ 292.084131][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 292.718128][T13197] syz.3.2559: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 292.753350][T13197] CPU: 1 UID: 0 PID: 13197 Comm: syz.3.2559 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 292.753380][T13197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.753392][T13197] Call Trace: [ 292.753401][T13197] [ 292.753410][T13197] dump_stack_lvl+0x189/0x250 [ 292.753450][T13197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.753471][T13197] ? __pfx__printk+0x10/0x10 [ 292.753495][T13197] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 292.753517][T13197] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 292.753540][T13197] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 292.753565][T13197] warn_alloc+0x214/0x310 [ 292.753583][T13197] ? stack_depot_save_flags+0x40/0x900 [ 292.753607][T13197] ? __pfx_warn_alloc+0x10/0x10 [ 292.753628][T13197] ? kasan_save_track+0x4f/0x80 [ 292.753653][T13197] ? xskq_create+0x56/0x170 [ 292.753674][T13197] ? xsk_init_queue+0xb0/0x110 [ 292.753699][T13197] ? xsk_setsockopt+0x4dc/0x8d0 [ 292.753717][T13197] ? do_sock_setsockopt+0x179/0x1b0 [ 292.753733][T13197] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 292.753748][T13197] ? do_syscall_64+0xfa/0x3b0 [ 292.753771][T13197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.753798][T13197] __vmalloc_node_range_noprof+0x125/0x12f0 [ 292.753852][T13197] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 292.753870][T13197] ? xskq_create+0x56/0x170 [ 292.753894][T13197] ? __kasan_kmalloc+0x93/0xb0 [ 292.753920][T13197] vmalloc_user_noprof+0xad/0xf0 [ 292.753939][T13197] ? xskq_create+0xbf/0x170 [ 292.753962][T13197] xskq_create+0xbf/0x170 [ 292.753988][T13197] xsk_init_queue+0xb0/0x110 [ 292.754014][T13197] xsk_setsockopt+0x4dc/0x8d0 [ 292.754039][T13197] ? __pfx_xsk_setsockopt+0x10/0x10 [ 292.754061][T13197] ? __pfx_aa_sk_perm+0x10/0x10 [ 292.754089][T13197] ? aa_sock_opt_perm+0x74/0x110 [ 292.754114][T13197] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 292.754133][T13197] ? __pfx_xsk_setsockopt+0x10/0x10 [ 292.754157][T13197] do_sock_setsockopt+0x179/0x1b0 [ 292.754181][T13197] __x64_sys_setsockopt+0x13f/0x1b0 [ 292.754204][T13197] do_syscall_64+0xfa/0x3b0 [ 292.754226][T13197] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.754250][T13197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.754268][T13197] ? clear_bhb_loop+0x60/0xb0 [ 292.754291][T13197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.754308][T13197] RIP: 0033:0x7ff35818eb69 [ 292.754326][T13197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.754341][T13197] RSP: 002b:00007ff358f72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 292.754363][T13197] RAX: ffffffffffffffda RBX: 00007ff3583b6080 RCX: 00007ff35818eb69 [ 292.754377][T13197] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 292.754388][T13197] RBP: 00007ff358211df1 R08: 0000000000000004 R09: 0000000000000000 [ 292.754401][T13197] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.754412][T13197] R13: 0000000000000000 R14: 00007ff3583b6080 R15: 00007fff4c3cc678 [ 292.754453][T13197] [ 293.054181][T13197] Mem-Info: [ 293.057415][T13197] active_anon:7413 inactive_anon:0 isolated_anon:0 [ 293.057415][T13197] active_file:1579 inactive_file:39906 isolated_file:0 [ 293.057415][T13197] unevictable:768 dirty:172 writeback:0 [ 293.057415][T13197] slab_reclaimable:11447 slab_unreclaimable:102440 [ 293.057415][T13197] mapped:29309 shmem:1358 pagetables:978 [ 293.057415][T13197] sec_pagetables:0 bounce:0 [ 293.057415][T13197] kernel_misc_reclaimable:0 [ 293.057415][T13197] free:1322694 free_pcp:18017 free_cma:0 [ 293.112129][T13197] Node 0 active_anon:29752kB inactive_anon:0kB active_file:6316kB inactive_file:159416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117236kB dirty:688kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11688kB pagetables:3776kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 293.168986][T13197] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 293.200968][T13197] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.236508][T13197] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 293.242491][T13197] Node 0 DMA32 free:1378512kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29708kB inactive_anon:0kB active_file:6316kB inactive_file:157588kB unevictable:1536kB writepending:696kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:49824kB local_pcp:21216kB free_cma:0kB [ 293.277875][T13197] lowmem_reserve[]: 0 0 1 1 1 [ 293.282643][T13197] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 293.311795][T13197] lowmem_reserve[]: 0 0 0 0 0 [ 293.316624][T13197] Node 1 Normal free:3897444kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21112kB local_pcp:13424kB free_cma:0kB [ 293.348208][T13197] lowmem_reserve[]: 0 0 0 0 0 [ 293.353308][T13197] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 293.366929][T13197] Node 0 DMA32: 956*4kB (UM) 302*8kB (UME) 104*16kB (UM) 1297*32kB (UME) 700*64kB (UME) 158*128kB (UM) 40*256kB (UME) 13*512kB (UME) 8*1024kB (UME) 3*2048kB (UM) 301*4096kB (UM) = 1378560kB [ 293.385852][T13197] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 293.397900][T13197] Node 1 Normal: 179*4kB (UE) 51*8kB (UME) 34*16kB (UME) 75*32kB (UME) 18*64kB (UME) 8*128kB (UME) 6*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3897444kB [ 293.504323][T13197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.567591][T13197] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 293.582701][T13197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.599246][T13197] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 293.634326][T13197] 42841 total pagecache pages [ 293.671312][T13197] 0 pages in swap cache [ 293.698845][T13197] Free swap = 124996kB [ 293.753180][T13197] Total swap = 124996kB [ 293.758142][T13197] 2097051 pages RAM [ 293.762006][T13197] 0 pages HighMem/MovableOnly [ 293.775543][T13197] 424872 pages reserved [ 293.780073][T13197] 0 pages cma reserved [ 294.110978][T13254] tipc: Enabling of bearer rejected, failed to enable media [ 294.148777][T13258] batadv_slave_1: entered promiscuous mode [ 294.187368][T13258] batadv_slave_1: left promiscuous mode [ 294.265943][T13262] veth0_to_bond: left allmulticast mode [ 294.287377][T13262] veth0_to_bond: left promiscuous mode [ 294.309186][T13262] bridge7: port 1(veth0_to_bond) entered disabled state [ 294.361152][T13262] bridge8: port 1(veth0_to_bond) entered blocking state [ 294.369305][T13262] bridge8: port 1(veth0_to_bond) entered disabled state [ 294.381655][T13262] veth0_to_bond: entered allmulticast mode [ 294.412617][T13262] veth0_to_bond: entered promiscuous mode [ 294.432322][T13272] __nla_validate_parse: 16 callbacks suppressed [ 294.432343][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2588'. [ 294.453438][T13274] netlink: 'syz.2.2590': attribute type 2 has an invalid length. [ 294.456654][T13268] vlan3: entered allmulticast mode [ 294.463192][T13274] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2590'. [ 294.506232][T13272] bridge0: port 2(batadv0) entered blocking state [ 294.518805][T13276] netlink: 'syz.2.2590': attribute type 2 has an invalid length. [ 294.522399][T13272] bridge0: port 2(batadv0) entered disabled state [ 294.534129][T13272] batadv0: entered allmulticast mode [ 294.534904][T13276] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2590'. [ 294.541839][T13272] batadv0: entered promiscuous mode [ 294.629121][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2591'. [ 294.717612][T13285] sock: sock_set_timeout: `syz.1.2594' (pid 13285) tries to set negative timeout [ 294.729349][T13285] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2594'. [ 294.752459][T13287] netlink: 'syz.2.2595': attribute type 1 has an invalid length. [ 294.771639][T13287] netlink: 404 bytes leftover after parsing attributes in process `syz.2.2595'. [ 294.794886][T13291] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2597'. [ 294.799969][T13287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2595'. [ 294.829902][T13287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2595'. [ 294.868849][T13287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2595'. [ 295.005349][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 295.014788][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 295.157671][T13313] veth0_to_bond: left allmulticast mode [ 295.172843][T13313] veth0_to_bond: left promiscuous mode [ 295.180025][T13313] bridge8: port 1(veth0_to_bond) entered disabled state [ 295.215341][T13313] bridge9: port 1(veth0_to_bond) entered blocking state [ 295.241713][T13313] bridge9: port 1(veth0_to_bond) entered disabled state [ 295.250265][T13313] veth0_to_bond: entered allmulticast mode [ 295.263327][T13313] veth0_to_bond: entered promiscuous mode [ 295.282438][T13315] batadv0 (unregistering): left allmulticast mode [ 295.289147][T13315] batadv0 (unregistering): left promiscuous mode [ 295.295832][T13315] bridge0: port 2(batadv0) entered disabled state [ 295.318959][T13316] vlan3: entered allmulticast mode [ 295.382429][T13320] bridge0: port 2(batadv1) entered blocking state [ 295.390659][T13320] bridge0: port 2(batadv1) entered disabled state [ 295.402660][T13320] batadv1: entered allmulticast mode [ 295.411489][T13320] batadv1: entered promiscuous mode [ 295.537045][ T56] block nbd0: Possible stuck request ffff88802531e000: control (read@0,4096B). Runtime 180 seconds [ 295.659750][T13336] IPv6: sit1: Disabled Multicast RS [ 295.687793][T13336] sit1: entered allmulticast mode [ 295.854734][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 295.864536][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 296.299391][T13375] netlink: 'syz.1.2626': attribute type 25 has an invalid length. [ 296.637601][T13392] netlink: 'syz.4.2633': attribute type 4 has an invalid length. [ 296.736959][T13401] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 296.946579][T13411] netlink: 'syz.0.2639': attribute type 13 has an invalid length. [ 297.128420][T13423] netlink: 'syz.3.2643': attribute type 1 has an invalid length. [ 297.139489][T13424] netlink: 'syz.3.2643': attribute type 1 has an invalid length. [ 297.151605][T13425] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 297.167477][ T55] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1 [ 297.187489][T13415] netlink: 'syz.2.2640': attribute type 2 has an invalid length. [ 297.202112][ T55] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22 [ 297.496481][T13448] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 297.974349][T13466] tipc: Started in network mode [ 297.979323][T13466] tipc: Node identity , cluster identity 4711 [ 297.985818][T13466] tipc: Failed to obtain node identity [ 297.991754][T13466] tipc: Enabling of bearer rejected, failed to enable media [ 298.141141][T13470] dummy0: left allmulticast mode [ 298.160487][T13470] bridge0: port 6(dummy0) entered disabled state [ 298.193932][T13470] batadv3: left allmulticast mode [ 298.205577][T13470] batadv3: left promiscuous mode [ 298.223061][T13470] bridge0: port 5(batadv3) entered disabled state [ 298.256827][T13470] batadv2: left allmulticast mode [ 298.292873][T13470] batadv2: left promiscuous mode [ 298.323371][T13470] bridge0: port 4(batadv2) entered disabled state [ 298.353634][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.371309][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.379971][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.389708][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.398412][T13470] batadv1: left allmulticast mode [ 298.404001][T13470] batadv1: left promiscuous mode [ 298.409329][T13470] bridge0: port 3(batadv1) entered disabled state [ 298.417258][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.437918][T13470] bridge_slave_1: left allmulticast mode [ 298.443742][T13470] bridge_slave_1: left promiscuous mode [ 298.468275][T13470] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.505250][T13470] bridge_slave_0: left allmulticast mode [ 298.511189][T13470] bridge_slave_0: left promiscuous mode [ 298.519485][T13470] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.592423][T13472] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 298.753228][T13475] lo speed is unknown, defaulting to 1000 [ 299.187760][T13507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.208239][T13509] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 299.611203][T13533] veth0_to_bond: left allmulticast mode [ 299.624607][T13533] veth0_to_bond: left promiscuous mode [ 299.632410][T13533] bridge0: port 1(veth0_to_bond) entered disabled state [ 299.661440][T13539] netlink: 'syz.0.2682': attribute type 10 has an invalid length. [ 299.683378][T13533] bond0: (slave bond_slave_0): Releasing backup interface [ 299.732862][T13533] team0: Port device team_slave_0 removed [ 299.785625][T13533] team0: Port device team_slave_1 removed [ 299.794543][T13533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.801990][T13533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.811717][T13533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.820121][T13533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.839401][T13533] bond2: (slave gretap1): Releasing backup interface [ 299.861601][T13533] batadv1: left allmulticast mode [ 299.868223][T13533] batadv1: left promiscuous mode [ 299.873533][T13533] bridge0: port 2(batadv1) entered disabled state [ 299.907533][T13539] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 300.067119][T13552] __nla_validate_parse: 14 callbacks suppressed [ 300.067138][T13552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2688'. [ 300.089747][T13475] chnl_net:caif_netlink_parms(): no params data found [ 300.174887][T13560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2691'. [ 300.334595][T13563] bridge2: port 1(veth0_to_bond) entered blocking state [ 300.341730][T13563] bridge2: port 1(veth0_to_bond) entered disabled state [ 300.385514][T13563] veth0_to_bond: entered allmulticast mode [ 300.393233][T13563] veth0_to_bond: entered promiscuous mode [ 300.437803][T13475] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.454002][T13475] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.469443][T13475] bridge_slave_0: entered allmulticast mode [ 300.478199][T13475] bridge_slave_0: entered promiscuous mode [ 300.485094][ T5854] Bluetooth: hci5: command tx timeout [ 300.505403][T13475] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.520914][T13475] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.539886][T13475] bridge_slave_1: entered allmulticast mode [ 300.547617][T13579] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2695'. [ 300.557202][T13475] bridge_slave_1: entered promiscuous mode [ 300.589923][T13578] netlink: 'syz.3.2696': attribute type 11 has an invalid length. [ 300.602310][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2696'. [ 300.638971][T13475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.648279][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 300.704642][T13475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.745373][T13578] netlink: 'syz.3.2696': attribute type 11 has an invalid length. [ 300.753224][T13578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2696'. [ 300.820427][T13475] team0: Port device team_slave_0 added [ 300.838251][T13475] team0: Port device team_slave_1 added [ 300.850120][T13590] tipc: Started in network mode [ 300.855345][T13590] tipc: Node identity , cluster identity 4711 [ 300.861421][T13590] tipc: Failed to obtain node identity [ 300.868223][T13590] tipc: Enabling of bearer rejected, failed to enable media [ 300.943151][T13475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.983782][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.025033][T13475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.133615][T13600] team0: Port device vlan0 removed [ 301.163562][T13475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.170909][T13475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.197662][T13475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.310205][T13607] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 301.340093][T13475] hsr_slave_0: entered promiscuous mode [ 301.353313][T13475] hsr_slave_1: entered promiscuous mode [ 301.363269][T13475] debugfs: 'hsr0' already exists in 'hsr' [ 301.379564][T13475] Cannot create hsr debugfs directory [ 301.718941][T13625] tipc: Enabled bearer , priority 0 [ 301.900042][T13475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.928724][T13475] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.972147][T13630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2714'. [ 302.039802][T13475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.053022][T13475] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.092933][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2717'. [ 302.194249][T13475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.204755][T13475] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.320512][T13475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.333948][T13475] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.365343][T13655] tipc: Started in network mode [ 302.370328][T13655] tipc: Node identity 5af435023cbd, cluster identity 4711 [ 302.377800][T13655] tipc: Enabled bearer , priority 0 [ 302.392435][T13655] tipc: Disabling bearer [ 302.493368][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2719'. [ 302.572893][ T5854] Bluetooth: hci5: command tx timeout [ 302.835271][ T5891] tipc: Node number set to 1489683983 [ 303.098252][T13475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 303.157170][T13674] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2726'. [ 303.193550][T13475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 303.229296][T13475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 303.261424][T13680] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2728'. [ 303.276886][T13475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 303.678626][T13475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.690480][T13706] netlink: 'syz.0.2735': attribute type 1 has an invalid length. [ 303.788585][T13475] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.808450][T13710] bond3: (slave gretap3): making interface the new active one [ 303.817639][T13710] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 303.852137][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.859363][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.908282][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.915498][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.944991][T13710] syz.0.2735 (13710) used greatest stack depth: 19416 bytes left [ 304.149191][T13475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.583295][T13756] netlink: 'syz.0.2750': attribute type 21 has an invalid length. [ 304.646390][ T5854] Bluetooth: hci5: command tx timeout [ 304.931180][T13475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.085457][T13475] veth0_vlan: entered promiscuous mode [ 305.117193][T13475] veth1_vlan: entered promiscuous mode [ 305.207545][T13475] veth0_macvtap: entered promiscuous mode [ 305.226637][T13475] veth1_macvtap: entered promiscuous mode [ 305.267668][T13475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.288848][T13475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.411748][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.432192][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.457809][T13795] __nla_validate_parse: 8 callbacks suppressed [ 305.457828][T13795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2764'. [ 305.459454][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.527259][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.834194][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.847960][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.953812][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.964817][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.245721][T13834] wg1: entered promiscuous mode [ 306.503672][T13852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2784'. [ 306.724596][ T5854] Bluetooth: hci5: command tx timeout [ 306.822525][T13871] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20000 [ 306.982671][T13880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2797'. [ 307.036904][T13882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.105937][T13882] bond0: (slave rose0): Enslaving as an active interface with an up link [ 307.260411][T13897] pim6reg: entered allmulticast mode [ 307.283863][T13898] pim6reg: left allmulticast mode [ 307.359176][T13908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2806'. [ 307.583608][T13920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2808'. [ 307.596802][T13919] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2810'. [ 307.607261][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 307.624339][T13922] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2811'. [ 307.659268][T13924] 8021q: adding VLAN 0 to HW filter on device bond4 [ 307.742277][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2814'. [ 307.761198][T13929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2814'. [ 308.076204][T13948] FAULT_INJECTION: forcing a failure. [ 308.076204][T13948] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.102273][T13948] CPU: 1 UID: 0 PID: 13948 Comm: syz.4.2821 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 308.102302][T13948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.102313][T13948] Call Trace: [ 308.102320][T13948] [ 308.102328][T13948] dump_stack_lvl+0x189/0x250 [ 308.102351][T13948] ? __pfx____ratelimit+0x10/0x10 [ 308.102375][T13948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.102391][T13948] ? __pfx__printk+0x10/0x10 [ 308.102410][T13948] ? __might_fault+0xb0/0x130 [ 308.102446][T13948] should_fail_ex+0x414/0x560 [ 308.102486][T13948] _copy_from_iter+0x1db/0x16f0 [ 308.102521][T13948] ? __pfx__copy_from_iter+0x10/0x10 [ 308.102544][T13948] ? rcu_is_watching+0x15/0xb0 [ 308.102573][T13948] ? trace_kmalloc+0x1f/0xd0 [ 308.102596][T13948] ? kernfs_fop_write_iter+0x158/0x4f0 [ 308.102624][T13948] kernfs_fop_write_iter+0x19f/0x4f0 [ 308.102655][T13948] vfs_write+0x54b/0xa90 [ 308.102685][T13948] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 308.102710][T13948] ? __pfx_vfs_write+0x10/0x10 [ 308.102744][T13948] ? __fget_files+0x2a/0x420 [ 308.102771][T13948] ksys_write+0x145/0x250 [ 308.102797][T13948] ? __pfx_ksys_write+0x10/0x10 [ 308.102816][T13948] ? rcu_is_watching+0x15/0xb0 [ 308.102845][T13948] ? do_syscall_64+0xbe/0x3b0 [ 308.102874][T13948] do_syscall_64+0xfa/0x3b0 [ 308.102896][T13948] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.102918][T13948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.102936][T13948] ? clear_bhb_loop+0x60/0xb0 [ 308.102956][T13948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.102972][T13948] RIP: 0033:0x7fe6c3f8eb69 [ 308.102988][T13948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.103003][T13948] RSP: 002b:00007fe6c4dc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 308.103023][T13948] RAX: ffffffffffffffda RBX: 00007fe6c41b5fa0 RCX: 00007fe6c3f8eb69 [ 308.103035][T13948] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000005 [ 308.103046][T13948] RBP: 00007fe6c4dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 308.103056][T13948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.103066][T13948] R13: 0000000000000000 R14: 00007fe6c41b5fa0 R15: 00007ffe5eea8f88 [ 308.103097][T13948] [ 308.779184][T13981] netlink: 'syz.2.2833': attribute type 1 has an invalid length. [ 309.013018][T13990] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 309.078825][T13994] FAULT_INJECTION: forcing a failure. [ 309.078825][T13994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.111862][T13994] CPU: 0 UID: 0 PID: 13994 Comm: syz.4.2837 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 309.111890][T13994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.111900][T13994] Call Trace: [ 309.111907][T13994] [ 309.111915][T13994] dump_stack_lvl+0x189/0x250 [ 309.111938][T13994] ? __pfx____ratelimit+0x10/0x10 [ 309.111963][T13994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.111981][T13994] ? __pfx__printk+0x10/0x10 [ 309.112018][T13994] should_fail_ex+0x414/0x560 [ 309.112051][T13994] _copy_to_user+0x31/0xb0 [ 309.112077][T13994] simple_read_from_buffer+0xe1/0x170 [ 309.112109][T13994] proc_fail_nth_read+0x1b3/0x220 [ 309.112135][T13994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.112160][T13994] ? rw_verify_area+0x258/0x650 [ 309.112183][T13994] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 309.112205][T13994] vfs_read+0x1fd/0x980 [ 309.112227][T13994] ? fdget_pos+0x247/0x320 [ 309.112250][T13994] ? __pfx___mutex_lock+0x10/0x10 [ 309.112274][T13994] ? __pfx_vfs_read+0x10/0x10 [ 309.112300][T13994] ? __fget_files+0x2a/0x420 [ 309.112322][T13994] ? __fget_files+0x3a0/0x420 [ 309.112337][T13994] ? __fget_files+0x2a/0x420 [ 309.112366][T13994] ksys_read+0x145/0x250 [ 309.112392][T13994] ? __pfx_ksys_read+0x10/0x10 [ 309.112422][T13994] ? rcu_is_watching+0x15/0xb0 [ 309.112453][T13994] ? do_syscall_64+0xbe/0x3b0 [ 309.112482][T13994] do_syscall_64+0xfa/0x3b0 [ 309.112504][T13994] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.112527][T13994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.112545][T13994] ? clear_bhb_loop+0x60/0xb0 [ 309.112567][T13994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.112584][T13994] RIP: 0033:0x7fe6c3f8d57c [ 309.112601][T13994] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 309.112616][T13994] RSP: 002b:00007fe6c4dc2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.112637][T13994] RAX: ffffffffffffffda RBX: 00007fe6c41b5fa0 RCX: 00007fe6c3f8d57c [ 309.112651][T13994] RDX: 000000000000000f RSI: 00007fe6c4dc20a0 RDI: 0000000000000006 [ 309.112662][T13994] RBP: 00007fe6c4dc2090 R08: 0000000000000000 R09: 0000000000000000 [ 309.112670][T13994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.112679][T13994] R13: 0000000000000000 R14: 00007fe6c41b5fa0 R15: 00007ffe5eea8f88 [ 309.112712][T13994] [ 309.472855][T14009] bridge0: port 3(batadv1) entered blocking state [ 309.479970][T14009] bridge0: port 3(batadv1) entered disabled state [ 309.488157][T14009] batadv1: entered allmulticast mode [ 309.495722][T14009] batadv1: entered promiscuous mode [ 309.945627][T14037] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 309.995617][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 310.005607][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 310.450276][T14066] bond1 (unregistering): Released all slaves [ 310.580246][T14075] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 310.648134][T14077] __nla_validate_parse: 11 callbacks suppressed [ 310.648153][T14077] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2869'. [ 311.089539][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2880'. [ 311.126691][T14113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2880'. [ 311.191588][T14114] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2880'. [ 311.201367][T14123] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2880'. [ 311.214401][T14111] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2878'. [ 311.338532][T14131] netlink: 'syz.4.2886': attribute type 2 has an invalid length. [ 311.644437][T14147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2892'. [ 311.886613][T14165] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2901'. [ 312.128993][T14183] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2908'. [ 312.135952][T14180] tipc: Started in network mode [ 312.150853][T14180] tipc: Node identity , cluster identity 4711 [ 312.157172][T14180] tipc: Failed to obtain node identity [ 312.162774][T14180] tipc: Enabling of bearer rejected, failed to enable media [ 312.186918][T14181] lo: entered allmulticast mode [ 312.192368][T14181] lo: left allmulticast mode [ 312.330475][T14191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2911'. [ 312.395507][T14195] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 312.671699][ T30] audit: type=1107 audit(1754359879.737:2): pid=14203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='÷G\$_[tôŠ|' [ 312.693203][T14209] team0: Device xfrm1 is of different type [ 312.843327][T14225] tipc: Started in network mode [ 312.850940][T14225] tipc: Node identity , cluster identity 4711 [ 312.857211][T14225] tipc: Failed to obtain node identity [ 312.862845][T14225] tipc: Enabling of bearer rejected, failed to enable media [ 312.955976][T14228] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 313.398636][T14256] FAULT_INJECTION: forcing a failure. [ 313.398636][T14256] name failslab, interval 1, probability 0, space 0, times 0 [ 313.420126][T14256] CPU: 0 UID: 0 PID: 14256 Comm: syz.0.2935 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 313.420155][T14256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.420167][T14256] Call Trace: [ 313.420174][T14256] [ 313.420183][T14256] dump_stack_lvl+0x189/0x250 [ 313.420206][T14256] ? __pfx____ratelimit+0x10/0x10 [ 313.420231][T14256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.420250][T14256] ? __pfx__printk+0x10/0x10 [ 313.420287][T14256] should_fail_ex+0x414/0x560 [ 313.420318][T14256] should_failslab+0xa8/0x100 [ 313.420337][T14256] __kmalloc_cache_noprof+0x70/0x3d0 [ 313.420359][T14256] ? sctp_add_bind_addr+0x8c/0x370 [ 313.420387][T14256] sctp_add_bind_addr+0x8c/0x370 [ 313.420414][T14256] sctp_copy_local_addr_list+0x30b/0x4e0 [ 313.420441][T14256] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 313.420470][T14256] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 313.420495][T14256] ? sctp_v6_is_any+0x64/0x80 [ 313.420519][T14256] ? sctp_copy_one_addr+0x93/0x360 [ 313.420544][T14256] sctp_bind_addr_copy+0xb3/0x3c0 [ 313.420567][T14256] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 313.420590][T14256] sctp_connect_new_asoc+0x2e0/0x690 [ 313.420612][T14256] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 313.420626][T14256] ? __local_bh_enable_ip+0x12d/0x1c0 [ 313.420658][T14256] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 313.420679][T14256] ? security_sctp_bind_connect+0x7e/0x2e0 [ 313.420702][T14256] sctp_sendmsg+0x155c/0x2810 [ 313.420742][T14256] ? __pfx_sctp_sendmsg+0x10/0x10 [ 313.420772][T14256] ? aa_sk_perm+0x81e/0x950 [ 313.420800][T14256] ? __pfx_aa_sk_perm+0x10/0x10 [ 313.420825][T14256] ? sock_rps_record_flow+0x19/0x410 [ 313.420849][T14256] ? inet_sendmsg+0x2f4/0x370 [ 313.420874][T14256] __sock_sendmsg+0x19c/0x270 [ 313.420900][T14256] ____sys_sendmsg+0x52d/0x830 [ 313.420926][T14256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 313.420956][T14256] ? import_iovec+0x74/0xa0 [ 313.420984][T14256] ___sys_sendmsg+0x21f/0x2a0 [ 313.421006][T14256] ? __pfx____sys_sendmsg+0x10/0x10 [ 313.421069][T14256] ? __fget_files+0x2a/0x420 [ 313.421090][T14256] ? __fget_files+0x3a0/0x420 [ 313.421120][T14256] __sys_sendmmsg+0x227/0x430 [ 313.421147][T14256] ? __pfx___sys_sendmmsg+0x10/0x10 [ 313.421162][T14256] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 313.421215][T14256] ? ksys_write+0x22a/0x250 [ 313.421241][T14256] ? __pfx_ksys_write+0x10/0x10 [ 313.421261][T14256] ? rcu_is_watching+0x15/0xb0 [ 313.421294][T14256] __x64_sys_sendmmsg+0xa0/0xc0 [ 313.421314][T14256] do_syscall_64+0xfa/0x3b0 [ 313.421335][T14256] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.421355][T14256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.421372][T14256] ? clear_bhb_loop+0x60/0xb0 [ 313.421393][T14256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.421409][T14256] RIP: 0033:0x7f6b9598eb69 [ 313.421424][T14256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.421439][T14256] RSP: 002b:00007f6b96725038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 313.421466][T14256] RAX: ffffffffffffffda RBX: 00007f6b95bb5fa0 RCX: 00007f6b9598eb69 [ 313.421479][T14256] RDX: 0000000000000003 RSI: 0000200000004800 RDI: 0000000000000003 [ 313.421490][T14256] RBP: 00007f6b96725090 R08: 0000000000000000 R09: 0000000000000000 [ 313.421501][T14256] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000002 [ 313.421511][T14256] R13: 0000000000000000 R14: 00007f6b95bb5fa0 R15: 00007ffeb5849218 [ 313.421544][T14256] [ 313.848699][ T5840] Bluetooth: hci5: command 0x0405 tx timeout [ 314.107657][T14277] openvswitch: netlink: Missing key (keys=40, expected=100) [ 314.201175][T14279] bond4 (unregistering): Released all slaves [ 314.280767][T14275] veth0_to_bond: left allmulticast mode [ 314.295235][T14275] veth0_to_bond: left promiscuous mode [ 314.301043][T14275] bridge8: port 1(veth0_to_bond) entered disabled state [ 314.312327][T14275] bridge9: port 1(veth0_to_bond) entered blocking state [ 314.328221][T14275] bridge9: port 1(veth0_to_bond) entered disabled state [ 314.359598][T14275] veth0_to_bond: entered allmulticast mode [ 314.371501][T14275] veth0_to_bond: entered promiscuous mode [ 314.455055][ T78] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 314.538586][T14301] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 314.592912][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.613243][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.711918][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.731608][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.834883][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.863926][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.929043][ T12] ------------[ cut here ]------------ [ 314.935335][ T12] WARNING: CPU: 0 PID: 12 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440 [ 314.945137][ T12] Modules linked in: [ 314.949514][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 314.961216][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.972019][ T12] Workqueue: cfg80211 cfg80211_event_work [ 314.977853][ T12] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 314.984106][ T12] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 d6 f0 f6 90 0f 0b 90 eb bd e8 27 d6 f0 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 17 d6 f0 f6 90 0f 0b 90 e9 de fd [ 314.987611][T14319] bond5 (unregistering): Released all slaves [ 315.004165][ T12] RSP: 0018:ffffc900001178e0 EFLAGS: 00010293 [ 315.004224][ T12] RAX: ffffffff8aceda89 RBX: dffffc0000000000 RCX: ffff88801d28da00 [ 315.004241][ T12] RDX: 0000000000000000 RSI: ffffffff8d9792c8 RDI: ffffffff8be30a00 [ 315.004256][ T12] RBP: ffffc900001179b8 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e [ 315.004271][ T12] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: ffff888032fb4d90 [ 315.004284][ T12] R13: 1ffff92000022f24 R14: ffff888056e6b338 R15: 0000000000000006 [ 315.004298][ T12] FS: 0000000000000000(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 315.004323][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.004335][ T12] CR2: 00007fa7e01b7bac CR3: 000000007a832000 CR4: 00000000003526f0 [ 315.004351][ T12] Call Trace: [ 315.004358][ T12] [ 315.004368][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.004401][ T12] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 315.004427][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 315.104608][ T12] cfg80211_process_wdev_events+0x38a/0x4f0 [ 315.110541][ T12] cfg80211_process_rdev_events+0xa1/0x110 [ 315.116739][ T12] cfg80211_event_work+0x2c/0x60 [ 315.121799][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 315.128147][ T12] process_scheduled_works+0xae1/0x17b0 [ 315.134040][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 315.140102][ T12] worker_thread+0x8a0/0xda0 [ 315.145168][ T12] kthread+0x70e/0x8a0 [ 315.149268][ T12] ? __pfx_worker_thread+0x10/0x10 [ 315.154676][ T12] ? __pfx_kthread+0x10/0x10 [ 315.159294][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.165294][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.170525][ T12] ? __pfx_kthread+0x10/0x10 [ 315.175304][ T12] ret_from_fork+0x3fc/0x770 [ 315.179944][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 315.185184][ T12] ? __switch_to_asm+0x39/0x70 [ 315.190061][ T12] ? __switch_to_asm+0x33/0x70 [ 315.195174][ T12] ? __pfx_kthread+0x10/0x10 [ 315.199793][ T12] ret_from_fork_asm+0x1a/0x30 [ 315.204837][ T12] [ 315.207880][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 315.215171][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-06610-g4eabe4cc0958 #0 PREEMPT(full) [ 315.226820][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.236873][ T12] Workqueue: cfg80211 cfg80211_event_work [ 315.242595][ T12] Call Trace: [ 315.245862][ T12] [ 315.248781][ T12] dump_stack_lvl+0x99/0x250 [ 315.253363][ T12] ? __asan_memcpy+0x40/0x70 [ 315.257947][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.263136][ T12] ? __pfx__printk+0x10/0x10 [ 315.267756][ T12] panic+0x2db/0x790 [ 315.271663][ T12] ? __pfx_panic+0x10/0x10 [ 315.276099][ T12] ? show_trace_log_lvl+0x4fb/0x550 [ 315.281314][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 315.286259][ T12] __warn+0x31b/0x4b0 [ 315.290242][ T12] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 315.295803][ T12] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 315.301352][ T12] report_bug+0x2be/0x4f0 [ 315.305682][ T12] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 315.311223][ T12] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 315.316765][ T12] ? __cfg80211_ibss_joined+0x3cc/0x440 [ 315.322356][ T12] handle_bug+0x84/0x160 [ 315.326901][ T12] exc_invalid_op+0x1a/0x50 [ 315.331412][ T12] asm_exc_invalid_op+0x1a/0x20 [ 315.336268][ T12] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 315.342435][ T12] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 32 d6 f0 f6 90 0f 0b 90 eb bd e8 27 d6 f0 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 17 d6 f0 f6 90 0f 0b 90 e9 de fd [ 315.362049][ T12] RSP: 0018:ffffc900001178e0 EFLAGS: 00010293 [ 315.368132][ T12] RAX: ffffffff8aceda89 RBX: dffffc0000000000 RCX: ffff88801d28da00 [ 315.376101][ T12] RDX: 0000000000000000 RSI: ffffffff8d9792c8 RDI: ffffffff8be30a00 [ 315.384070][ T12] RBP: ffffc900001179b8 R08: ffffffff8fa07bf7 R09: 1ffffffff1f40f7e [ 315.392047][ T12] R10: dffffc0000000000 R11: fffffbfff1f40f7f R12: ffff888032fb4d90 [ 315.400015][ T12] R13: 1ffff92000022f24 R14: ffff888056e6b338 R15: 0000000000000006 [ 315.408005][ T12] ? __cfg80211_ibss_joined+0x3c9/0x440 [ 315.413574][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.418781][ T12] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 315.424684][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 315.429722][ T12] cfg80211_process_wdev_events+0x38a/0x4f0 [ 315.435641][ T12] cfg80211_process_rdev_events+0xa1/0x110 [ 315.441455][ T12] cfg80211_event_work+0x2c/0x60 [ 315.446394][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 315.452110][ T12] process_scheduled_works+0xae1/0x17b0 [ 315.457685][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 315.463674][ T12] worker_thread+0x8a0/0xda0 [ 315.468295][ T12] kthread+0x70e/0x8a0 [ 315.472361][ T12] ? __pfx_worker_thread+0x10/0x10 [ 315.477468][ T12] ? __pfx_kthread+0x10/0x10 [ 315.482052][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.487240][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.492426][ T12] ? __pfx_kthread+0x10/0x10 [ 315.497010][ T12] ret_from_fork+0x3fc/0x770 [ 315.501620][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 315.506759][ T12] ? __switch_to_asm+0x39/0x70 [ 315.511530][ T12] ? __switch_to_asm+0x33/0x70 [ 315.516289][ T12] ? __pfx_kthread+0x10/0x10 [ 315.520881][ T12] ret_from_fork_asm+0x1a/0x30 [ 315.525654][ T12] [ 315.528910][ T12] Kernel Offset: disabled [ 315.533250][ T12] Rebooting in 86400 seconds..