last executing test programs: 15.17381956s ago: executing program 3 (id=2953): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r1, 0x0, 0xd}, 0x18) r2 = accept$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, &(0x7f0000000580)=0x10) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000400)={0x8, {{0x2, 0x13, @multicast2}}}, 0x88) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC=r3], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010) (async) sendmsg$nl_generic(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d4e3a", @ANYRESDEC=r3], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0x402a010) r4 = socket$kcm(0x2d, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r6, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x400000004}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4804}, 0x20000010) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='mctp_key_acquire\x00', r7, 0x0, 0x9}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000240)={r4}) socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r8, 0x0, 0x0, 0x0) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$alg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) (async) sendmsg$alg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r9, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/119, 0x77}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r10 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) (async) r12 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000000c0), 0x40) pread64(r12, &(0x7f0000001840)=""/4096, 0x1003, 0x1) (async) pread64(r12, &(0x7f0000001840)=""/4096, 0x1003, 0x1) 15.006115082s ago: executing program 3 (id=2955): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}}, 0x0) 14.897207824s ago: executing program 3 (id=2957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x63c, 0x6, 0xb, 0x301, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x2}, [@nested={0x55, 0xea, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @u32=0x10}, @typed={0x14, 0x1c, 0x0, 0x0, @ipv6=@mcast1}, @generic="69ede33deb8ad52e2ea31e0a403a9c7a4248f0ea49d2339a3a24a8281fd068d43d1441fc1c", @typed={0xc, 0xa, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0xaa}]}, @nested={0x287, 0xd4, 0x0, 0x1, [@nested={0x4, 0x12c}, @generic="2112a6feb5f538db54af45c729180ba68d13d38f3b661267c2fb42d1fdb8090670c14a4d42aa71f3756d153e78b64b10d042cdfe2a590e5e09ea93b684e2be4086bafeb44f4524c838391a6deba9d9858eb9c95db6bcfa8a707d2b4e2060b17bb7135177ed7ce0f154a286fb6f609e2f61b4531d5e62d184db113f9968c147642d644f4f554ca27b945f6fdc74d988b70255b4d44509d973bec4d41e910722cae115971da9ae8a3b25eefb4130f3e550891a58bf07c51ce66d41fe9c59dc83fc06ce4fd96b7c4bbcbebd5530a4a66f26297a0d0a8087f52bc1859bfabe6e8d", @nested={0x4, 0x12d}, @nested={0x4, 0xa8}, @typed={0x4, 0x105}, @nested={0x4, 0x6c}, @generic="312f236755395fba1177bbf88a5552939bd2a19a2fcd2ed0cdb5bafb8ef3e8fbbb5c724b31a8f4e27a0b6896b3a83b931f09dd20e52bb34377c3f24d88775b5a4070b8468aef9c740e012f9eb9614c197a215b799982160207a8fce381b10bb07750679b03972e9c6b948d1dab8a61b9eb8684cbfb712a948041b4297c687e316b3ce85ef805083c27b2014022780520d3ace6c1782d54f8b46b1521fba23895145d307ae7ea48f6dc0cb9a2a35bc67ee2237a31158e184550f01ac5cc3437294271c350661cf97b9e1be248cbcee9c19ba1621a97036b890213b1cabc39", @generic="2384c32fbafc6ef2ffa87814b8a7b5c134f54f97446c659862c04103afea8154b67653e2165e524d53c995bbe42928ae9a04617b97367bf24c8408a7db2c0265850847a494315e44603415419901061a04d3e84a5fea9aeda1c9bbf2a725f8489703f62603c9c66994bc372caa8a0258f566f022de9fe23b37193a4446751fa8b5876de15c7d58d4046106e9f27355febafad88f780543dae34bd82d7bcd2fb715e09229045cbd4a0523736902237de5ba81"]}, @generic="125bdac5b131ce7e8969e14ce9aa7f47d4cbc69db2b68a0d01d9116c3c8ccef24c6d58d2050f199b40854bb5f0a057deb8b2612afa99877998bd66cbfa7c695713f56a00ce239e95e1aa3b8e55c740a8941ad3949d4ed15d5cd10eff54a8f8af22f38ec89ed3ff75c8fa113505866a01f13f443e0a7e395abf33c110a0d4b382f1fa38bce45e36322f22f98c3d1cd175b1bb112ad1e35c2825d32328cf50b4c2f7f42788fe0b1bd600", @nested={0x1c9, 0x142, 0x0, 0x1, [@generic="f35a31296a2f7deaf5c52af8373488bc317c5dbc2a8198b159f72fa39097da10f14950b63b102c4b0e8efff0f9d2ed2eb271062c81835a7f4e437afe80690f", @generic="36c5bddd47d3803c53aceac55d64ee9d010cfcc4a54d25d8b1143b12caacefd902026362ebb12843b84c77a9632dda749cdda89ad9f8637f6a18e234befaa01f0c81bddf84219892e22ecaa92b04c362f7b66cd436a31b595317e305eff64b7ca32368e24e7cacbdb51675cd33632e8dd6b9f9484b850468c597e98f1cb623eff90fa04e4ad65b1cb70c797634c0ab1e1099dd0a1c", @nested={0x4, 0x3d}, @nested={0x4, 0x70}, @generic="02de253d42b46a7008e02fb4cc50cc4f4479832b06daed42050a85b415f669ad143fc881cb3dbf5be5dc615d375635ddd95360fc8bfddeffd77fbd9a3f95fa91f44a6d6e71ac43a34089fad907328659518b6b1e482118ff6ca6a56157833c8b5cc987a4b1673d737f5675c7b65a548e23ea9ba6e1853f13f55bb13272617647e45ee1bbc0b58a49a23eeaff62e8d54d2c55aeddb4dcae579793af64761081b13585199dcf27bc054c31ed2611bf446e1fe8abf8e0b6763419c815d46d7fb45def0c13629551778453c82b574164089f42f586173ed271c0989cf9a8b8f7a93aae0041a6288f0e7de1"]}, @nested={0xcc, 0x25, 0x0, 0x1, [@generic="cf3b932a443bdb82d1d80ec4396fb3fffb101599356ff151bbe857861ded65a7f838a7b32f29954add8549ffee2df81932810f88bf0fd5292bbeb5137c03bd38f817c93a989066782e6a166f32723cb8ef29a9621ac264691db9c49b213069a06b2c3e9515b008e0bb7116f9e34b4922739ba067e555b1b565f68b477299769235abb4de32f932b711b9a4834c00d8b5e3a38d35c123bcb12d83f48b2dca4fb47b43752c19b1d3ee01ceb0b02d2cf856add800a39c9d0b46476f13cdec1d0c7a68f0118f", @nested={0x4, 0xf9}]}, @typed={0x4, 0xae}]}, 0x63c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 14.658583327s ago: executing program 3 (id=2961): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@empty, @multicast1, 0x0, "c6c0e6ec8755b5dc4e3058a5d95f086707764f8d0e5a1358ea1c274f844a69e9", 0x6, 0x200}, 0x3c) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000004) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x48090) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x810) getsockopt$bt_hci(r1, 0x84, 0x72, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1, "6bb27bd491134e83569900300ab209ccc602cb744164b5564d1f49a260d03a41", 0x9, 0x0, 0x800, 0x8001}, 0x3c) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0) sendto$inet(r4, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000000) socket$inet_udplite(0x2, 0x2, 0x88) getpeername$ax25(0xffffffffffffffff, 0x0, 0x0) 13.74685174s ago: executing program 3 (id=2971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async, rerun: 32) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (rerun: 32) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x3}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r8, r7, 0x2f}, 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="2f0000fe1300000085009c00", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r10 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r11, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) (async) r13 = socket(0x29, 0x80000, 0x80000001) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r14], 0x54}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xa) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r15], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r16], 0x3c}}, 0x0) 13.367410552s ago: executing program 3 (id=2976): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001140)={&(0x7f0000000080)={0x10c0, r0, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x41}}}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xa}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x3}}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x210}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1050, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x1004, 0x2, "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"}, @NL80211_BAND_6GHZ={0x46, 0x3, "765e6c6c51fc5cbc22f1efbe894a4e731072547fbac0c2f8b2dae97abcb286b07131771866d1f69f8d81a0712eb7fa6a59671a054ebb3525f58c97143e8d08f80581"}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3205}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0x3}}, @NL80211_ATTR_BSSID={0xa}]}, 0x10c0}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) r1 = socket(0xb, 0x6, 0x1) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000011c0)='tasks\x00', 0x2, 0x0) syz_80211_inject_frame(&(0x7f0000001200), &(0x7f0000001240)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x11}, @broadcast, @device_a, @initial, {0x4, 0x8}}, @a_msdu=[{@device_a, @broadcast, 0x95, "635d4be03017d77eef28702368f312363971ea0547d1ddb01644aef7ec290f34bd82520fd8dd95caaf51d5c08336b0f8426c05e6ae974c8b1f117b283c38ecdbde2242822e0ed1615533abffd50001bd439d72b62b9df097a7060dbfbf412e6d93cf712c659a117d54b7e1db49a3c142157df64796248888a219a483016279d36e816bdf260b9ed3eb1f9ed4649b694863c56f2ac0"}, {@device_a, @device_a, 0x13, "71449c0245e0f3289159762f0d05a66299db40"}, {@device_a, @device_a, 0x3a, "cf230434a6b1bcb6e2205ff4b96934d4c0281069f0902d1326669e85a7b0d02146d1355314c77054362b87c87d3094900c6059930556a516df2e"}, {@device_a, @device_a, 0x40, "3b0bbc250bb2b2b92d78b81257d013b4c90eccec29c37fa28dc74d6e78df423c8cfaa35b32cc449da9b03463d40c221563276141cea6ec5cfdea3cc336a12187"}, {@broadcast, @device_a, 0x1000, "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"}, {@device_a, @device_b, 0x5d, "bccad6ff3926813883e930ee4981b0b315879f62184d83e94cd0a9b847995c849e24c7df390e46842aa987a006d62cedbfe18389daaece1500c357c33eff773ec33be1a6f706ba074fa4bbe10654500e1bb125277367667803e981faa2"}]}, 0x11f4) syz_80211_inject_frame(&(0x7f0000002440)=@device_b, &(0x7f0000002480)=@data_frame={@msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @device_b, {0x1, 0x6}, @device_b, @void, @value=@ver_80211n={0x0, 0x9, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @random="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"}, 0x8bc) syz_80211_inject_frame(&(0x7f0000002d40), &(0x7f0000002d80)=@ctrl_frame=@ack={{}, {0x79bd}}, 0xa) syz_80211_inject_frame(&(0x7f0000002dc0)=@broadcast, &(0x7f0000002e00)=@data_frame={@a_msdu=@type00={{0x0, 0x2, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x83}, @device_a, @broadcast, @random="e03d4dce2878", {0x4, 0xf01}, "", @void, @value=@ver_80211n={0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_a, 0x86, "c83ab1e1034e41002c1bcdaea2352a2f33b53ac6edfa5ce4e957e6d008dd3e79db362a540abd1f9480ed85f0e95da3880be9f110d6effb32668d2dc54e097718c2b62d146a095b6d29bd679848c43ae28f1023a5083ebffb1f5515a35f12b9ceac237c88d62c7fe29372f0fc74e0b1d996bf0e30d55910d4a0dd56be8498c2aa7f11a79cc7eb"}]}, 0xb0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x44004000) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003340)={0xffffffffffffffff, 0xe0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000030c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003100)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000003140)=[{}], 0x8, 0x10, &(0x7f0000003180), &(0x7f00000031c0), 0x8, 0x47, 0x8, 0x8, &(0x7f0000003200)}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000003400)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000033c0)={&(0x7f0000003380)={0x40, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x81}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x48000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000003440)={0x0, 0x39, "cb456139975f6fbd555d7992b1ff4d89ec768e900d6aa33495c36117a622b15534702f02a5fc945c7aed3989a0c85cec0f8dae5fcd3defb084"}, &(0x7f00000034c0)=0x41) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000003500)={r5, 0x3}, &(0x7f0000003540)=0x8) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000003580), &(0x7f00000035c0)=0x8) syz_80211_inject_frame(&(0x7f0000003600), &(0x7f0000003640)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_a, @from_mac=@broadcast, @device_a, {0x1, 0x8}}, @a_msdu=[{@broadcast, @device_b, 0xe2, "fffa0aeed769d5ea8882843a2b57de583417814c26d3e775f01fede711f528f621ae325b7e927b50a92a484632725c4b6d334a7f670cdcb73b7c4a96aaa0fdf48abd172b790b27d46ae1c57ed73dcd24b089ea8a8db57dde4f3351907a47835ba218030d588839d7a0794dc7e27c10ced4bcc4ec2e00ffb1e09c60b042e889d823964cdde78de41533c573972f4b0e65eeb18beece6f4611e914ddbcae56a26f4916e2f090f583d9b5146634dc7002bb43c67c51598e2566676f71093567b6a42daf553c53b1f8cb958baf2fee35b779ddff0f51a3ad4962a82aa1c4a16b313f4b22"}, {@device_b, @device_b, 0x21, "47f40d4174d245bf6a609e25916a9e14dfbff316bf78a037053e2bc818f58a99cc"}, {@device_b, @device_a, 0xde, "8158017f7d941de300d3a11be7a82d1ef833324e9568612df17a1d10abdbde09289c3c5526d92091538b5b22b6e890e95a2d7830e242509f0e146c0bd918245f5054d76632127e389c170cadda50c7cea381f8488f9c3f8f29f11520ace2d9a1bdad887721b80e9a64231a049dd1de35a76277bc2faf49c8649f28d4e3b4b20c1f1e264fa1e710505ce666e2227ba0e3e3b7307f0f784cbf5ed83acd7dee99dd4aa84ae9899dfd5e96898a403fa2e43439c59a9d22b84597ceaea8806a35263ebd25d276ef6f73108ed4b320b621f30542e1ee834065548da05f0d507df7"}, {@device_a, @device_b, 0x6a, "c41c8673bc528fc4cdb5a36ffb7bfe730d1c56702bd3f137db038f4411878b204220a9a7bab530c3c69a568772d89e5a294964e9d87d280f3daf1c3dae19600c3f72ee77516e7faf763cc6271e307c9b28a64d1d483f5900ea2ea70f4c3f49f3ddf9a0493d814cd2d68d"}, {@device_b, @device_b, 0x42, "6c8646ba662c1d6d0f06edf7365dd401fafa5f517da71d8bb5fcd88b11ccd0c0b2b2d57e98d0ea6a18f79e6aadc81924671abec22a63fac830717be01060fe49b6c0"}]}, 0x2ec) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000003940)) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000039c0), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000003a80)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8000a20}, 0xc, &(0x7f0000003a40)={&(0x7f0000003a00)={0x2c, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004090}, 0xc000) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000003c00)={&(0x7f0000003ac0)=@phonet={0x23, 0x5, 0x9, 0x7}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003b40)="40b121d59f637bcc342c49f5b9ded40f05d30d8366efd5f85dee08fc58", 0x1d}, {&(0x7f0000003b80)="f6741954533eb17451e04ba0057a0208dd9c7c54f834c04f9e8d264e2c59989c53d615e88b15d2e4a0b36914f16f288cc8633402fbf652fdd7e0094d5e9a", 0x3e}], 0x2}, 0x4004000) syz_80211_inject_frame(&(0x7f0000003c40)=@broadcast, &(0x7f0000003c80)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @from_mac=@device_b, @device_a, @broadcast, {0x6, 0xa52}}, @a_msdu=[{@broadcast, @broadcast, 0xb4, "bb2cd4ffc777913d73408f68c555c2698acabc0271b323e77983b55752077bf199892e25d697c3d196dd7fe8c4f27a6293340d579ada45829a6483585cf97046a0e9ba706fed32455ae522a1a2c2df1e92f6d280f434adb302f8c3b76aad2701382c7e613d124e7ddbd9739e386c0a4d54bf7b10d4aa851f529485955619a0f9ba3ee1a2c164a07efb682fdaece942fc4edbb32954da13762dd5e4488c7b4ac7a7a340cd4b456016ccdf0004e6bb0efbde89a0ee"}, {@device_a, @device_a, 0xb7, "04b0ad5ea11d490554fecd3bd1284de355b1cd509d691284d7534ccfb4f20c5dc97512c2d1b092e5a07f44994cdf85131999c7bb3e972f96ff6270affad44dfec7b1fd2b8437736eb10bf8cfa54038fb02c5ca5b7d7700d67a8ada2e60ce0e68bf1aee3b024b111261a7848456ed48ad1d077409c943f7be4da92f4d60686ceb0ba5e9b34e62482745187cb4c252b074da08da4db77ae6ed731f46fcdc6fa34d024dbb08f0fabfd62774b164b0d66b507ad60966decda7"}, {@device_a, @device_a, 0x85, "1db984f1c039a717f25d49717b8df5b6e65adb4776958d990edac9c853d7271d8ac37e33655e7b624aff544b7508347a60642f3eb1119bdba796108b670759c5166cafc02c4bf928f5bec5901e00b197245434a4c414f3b9a9b75a7f88fbc918228f10dac23435fc6d55186b1b6174d0a1c7e9b35cfb579c61ef2a482f3977942c2562b16a"}, {@broadcast, @device_b, 0x1000, "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"}, {@broadcast, @device_a, 0x81, "617a45fb796d2e705b3d43078e1912a2eead9e03ce738c158d69f40a4ef4c877c1fd3b6418b05d55e8b739568acb4489e02d14272469bd329377af1f7c2a339f292aea4a5a479cb59967b14bb27cd678c0a86c6083387e016f69175a105e50d72b05d584fa3c3b7c4f6fd0b09d0e16b56e6feaa5d2437071c7245c400a9f60b06d"}, {@device_b, @device_b, 0xa8, "2f5db4ab0af4e553117f22f0adc1cc1c64ab15055f08d2d98cc56440cf49b490285cb9bd745faeb1a90f7700139878e58563d5ad4a2a80abf0d88adb755b4fafab7dd75406db380f03b50bd11b432e7306fd514b4caed93d6671c42296cc0505cd4bdd1b1e1fca332c8527b319f82e428494a87b60323404f590ca989ac215ff5be9c7c5990a280c6f77a318f828bffc41540a244f3266733e0191532c82cdf77d13134ede35c6aa"}, {@device_a, @device_a, 0x4f, "1c375fe41fc201c08018fca826c6c583a929fceaca21a26fbf0b3c2a9cc8f47ef21fff2eb6345a534000131653fc2ea2508798f40374c88820eb94960b5a83b22a64bcfc3e8faa3a1bc0dc2b230a1c"}]}, 0x13f0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r6, 0x4018f514, &(0x7f0000005080)={0x80000000, 0x4, 0x2}) syz_80211_inject_frame(&(0x7f00000050c0)=@device_b, &(0x7f0000005100)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6d4e}, @device_a, @broadcast, @from_mac=@device_b, {0x6, 0xbb}}, @a_msdu=[{@broadcast, @device_b, 0x63, "2283d2c09b668b6af967c8b985f205ba1ce700f38ce3760374e45a133ae19ad530f198380897fe411b3cd524558268a398176a3685debe636bd524a9fc8310a2102d9e5d7aea18f472aa08a62a7881e207602526231d82ad1628d4b2533f82df1da165"}]}, 0x8c) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005340)={&(0x7f00000051c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x7, [@ptr={0x10, 0x0, 0x0, 0x2, 0x2}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @float={0xb, 0x0, 0x0, 0x10, 0x10}, @restrict={0xb}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x71, 0x0, 0x3f}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}, @func={0xc, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x30, 0x2e, 0x61, 0x0]}}, &(0x7f0000005280)=""/158, 0x83, 0x9e, 0x0, 0x7f, 0x10000, @value=r8}, 0x28) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000005380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6a3, '\x00', r4, r9, 0x5, 0x3, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000005400)=@bloom_filter={0x1e, 0x4, 0xbadf, 0x3, 0x422, r10, 0x3, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x4}, 0x50) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f00000055c0)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005580)={&(0x7f0000005540)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffc, 0x6c}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24004000) 1.791525025s ago: executing program 2 (id=3078): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000000080)={@empty, @multicast1, @broadcast}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x25dfdbfd, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x62, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) (async) sendmmsg(r6, &(0x7f0000000180), 0x393, 0x0) 1.444050367s ago: executing program 1 (id=3082): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'net'}, {0x2b, 'io'}, {0x2b, 'devices'}, {0x2d, 'blkio'}, {0x2b, 'hugetlb'}, {0x2b, 'cpuset'}, {0x2d, 'blkio'}, {0x2b, 'blkio'}]}, 0x38) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x48}}, 0x0) 1.390541001s ago: executing program 1 (id=3083): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000140)={0x6, 'syzkaller0\x00', {}, 0x6}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000001c0)={0x0, 'veth0_to_bridge\x00', {0x2}, 0x8}) 1.23558549s ago: executing program 1 (id=3085): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1d, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0xf, 0x5, 0x0, 0xd}, @exit, @ldst={0x0, 0x2, 0x0, 0xa, 0x9, 0x10, 0x1}, @generic={0x10, 0xa, 0x9, 0x45e, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0xab, &(0x7f0000000140)=""/171, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x3, 0xb5ea, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000300)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_VERSION={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000051}, 0x800) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x50) write(r3, &(0x7f0000000540)="86a0cfdd9dd1a37e56e2d1f7e52a521483dcfa6e0e307c02a1c16b6430911393e68eb3f3c3a95b7e13ce1fcabc51ed39b1d1babc9e726f21b11bde3c4dbaa49fff3438fe1acc45e5e649522901dec400420d19d12ac1b7626719624c0371fed3d159d9eda334cd51cabf534a5de27b2a00d0a14d3eb006be30cd04b0569f65092bcf2788438f26b7c094c3a6463a60795f80c05fd8fb91ed06421c0a069bbc0a747ecb153c40dd028a3e8aa27eec01a7de22ab022c2751aa9e8f41d8e8a57a770306881629ccad9f4865b66bab675c4ac0e9c598e581", 0xd6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pS \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r5, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000008c0)={'veth1_vlan\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "5b1dcd50742849ebec2f7d736e2dbe0e0a57eb7af0166e83c5093690b0d3671a", "cdae90a9410ec3b6fc517c6c1f5dd85b7743b49ce80093d7b2795a0c2f805d5e", "4523b9c608e4b763fa15139a364ba87c4ae9c5cb67894aef3bc6936a225efaab", "2ffd468f075ccec6ae32d21e91677a54e64900595e5655c6fc638c099e05ad42", "38e5b466b1379e8951c59d6d6237209b1c848607895170b472e75eb181e0934f", "a9c3452cf1afee6f4c6c885f", 0x7, 0x100, 0x3, 0x2, 0x7}}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "b1e93a7ed1"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000080) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000b80)={'syztnl2\x00', &(0x7f0000000a80)={'gre0\x00', r6, 0x8000, 0x7, 0x9, 0xaf, {{0x38, 0x4, 0x1, 0x3b, 0xe0, 0x65, 0x0, 0x36, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@timestamp_prespec={0x44, 0xc, 0x5f, 0x3, 0xe, [{@rand_addr=0x64010100, 0xffff}]}, @rr={0x7, 0x1f, 0x2f, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, @empty, @multicast1, @empty, @multicast2]}, @cipso={0x86, 0x24, 0x3, [{0x0, 0xb, "9ec0b7f211c617480a"}, {0x5, 0xe, "cadaee615fee318ac0063511"}, {0x7, 0x5, '+8&'}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @end, @ssrr={0x89, 0x1f, 0xd1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @local, @empty, @remote, @broadcast, @private=0xa010100]}, @cipso={0x86, 0x50, 0x1, [{0x7, 0x4, '9C'}, {0x6, 0xf, "4d312b18b6646827c6ea57642b"}, {0x1, 0x7, "41f8e3e7e7"}, {0x7, 0x4, "effe"}, {0x2, 0xe, "b9837cded0985c390a6d331c"}, {0x0, 0x11, "1608015efdce61b133b8ea9a924803"}, {0x2, 0x3, "df"}, {0x6, 0xa, "1038d44a4ecb657d"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x29c, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}]}, @ETHTOOL_A_FEATURES_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x118, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1a, 0x5, "7da21d547097419e684f9658d04f7072ea332175c0ec"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf}, @ETHTOOL_A_BITSET_VALUE={0xef, 0x4, "9baf96b00036700bbe50f3f001dd86b2471a22a7e63e826b5f329e7e950994746a0f324c47353891e14bf283f34802f64577ba4fb3c6151a1c808f9e4732eefb953c053f6d474c89be2981ee07eb9da4345b7d43a2aa4f2dea4361f8de81c12ccf1910113fc0e79b3ff7ee0a233361dbf87fd6a92efcfc6313e3e79e934868406940003ff190cfac196c98a793f13291586ec0df05b2b46c12fcfba61edc8125b7ff7caf162e9f8ec766c404393193541976bd5e8a3627943b84424fdb00cf6c55ac72021b5e95388fce5b37b9ccd6f36276a9578211af8816714b5f2d4455f524b789fd72e9fce1ebb4fb"}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r1) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r10, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xfffffffb, '\x00', r9, r4, 0x3, 0x3, 0x1}, 0x50) getsockname$packet(r3, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001140)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000001180)={0x0, 0x7, 0x30}, &(0x7f00000011c0)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000001200)={0x101, 0x40, 0x8204, 0x5, 0x7, 0x3, 0x7, 0x8, r11}, &(0x7f0000001240)=0x20) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r3) sendmsg$NL80211_CMD_REGISTER_BEACONS(r12, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, r13, 0x4d46c253cbc0d5d8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001400), r12) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r14, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x2c, r15, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040020}, 0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000001500), &(0x7f0000001540)=0x4) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000001580)=0x8000, &(0x7f00000015c0)=0x2) 1.231718068s ago: executing program 0 (id=3086): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r3], 0x20}}, 0x0) write(r2, &(0x7f00000002c0)="aaa217c7057450b3eb4995758c8bc015e130621865fdbb7764ba8a4d2663fdbb25bf4d8094b4bce03605425e6680da1ace87d39a4a7b134d4d11ab684e3da38890ec871f0d2b5d1480d19174954f61345cda04fa9d98cfce26d6dd", 0x5b) 1.17442973s ago: executing program 1 (id=3087): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) 1.067780451s ago: executing program 0 (id=3088): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000480)) sendmsg$nl_route(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001300090700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080013"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00168008000f00884827"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000200)=@newqdisc={0x7c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x46, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0xb}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x7c}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003a40)=@newtaction={0x1008, 0x30, 0x0, 0x70bd29, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xadc0}, @TCA_IPT_HOOK={0x8}]}, {0x25, 0x6, "e0bc7743d52057483c234da7396aee1c1620232e9758fc402870746166594df527"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0xf90, 0x1, [@m_ipt={0xf8c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0xf61, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x1008}, 0x1, 0x0, 0x0, 0x4}, 0x24040001) recvmmsg$unix(r8, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'veth0_to_team\x00', 0x3}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff050000000000000000000000000001080001000100300200ea1c9903823b5a6137721b1af98edb7bc642b3d01ac923a4f58b94996c2c15533fdc30b767e6b5ddb95c212c119220523e6ebc1fa1ea7f26a67654e992fc"], 0x50}}, 0x44014) 967.604843ms ago: executing program 4 (id=3089): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x55d}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4048010) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x55d}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4048010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="8000b2000a000200"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 914.744302ms ago: executing program 2 (id=3090): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071104200000000009500000700000000cd1dea8f1da3b2092f99be78892cca045bfe0744ac93c06728556316"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_ADDRESS={0xa, 0x1, @random="0cc5035c44df"}]}, 0x48}}, 0x0) 783.595933ms ago: executing program 2 (id=3091): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r1, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10) close(r0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080)={0x2a, 0x4, 0x2}, 0xc) shutdown(r1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000000c0)=""/3, &(0x7f0000000100)=0x3) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000140)={{r1}, "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"}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000001140)={0x1, 0xffffffffffffffc0, 0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSET={0x94, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x74, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9254}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELTABLE={0x24, 0x2, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x10, 0x6, "6b24197f6e1c194deac8a403"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfc}, 0x1, 0x0, 0x0, 0xc041}, 0x4c810) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001380)='cpuset.effective_mems\x00', 0x0, 0x0) splice(r2, &(0x7f0000001340)=0x2, r3, &(0x7f00000013c0)=0x2, 0x7, 0xd) sendmsg$tipc(r3, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001400)="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", 0x1000}], 0x1, &(0x7f0000002440)="bd1eba02abffa0953a88cc37a660d3dbcf231fddaeb058836d64bafbeb5c78f608a755330911ad12ec66f8e6ae60d4a9dda9dd759a1ca83eb3ad971cf9d5cc859486c39ee8a816687c64c2ed979a431fe77a08ecabb581f9c3ee51e2e85d5573ad1f23ec38c44936b26eaaafa90c7354f1a8c6f5d12b77effc6789d7e5de3840a9f9db5a26113cc1525ee7457908a73262722cb97e30620401a96afc98e0e65c96d7222d2b2eb1458f3e011f49193e9c9c4b5b44e677463a8d1e", 0xba, 0x8000}, 0x40004) tee(r0, r2, 0x89, 0x1) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = accept4(0xffffffffffffffff, &(0x7f0000002540)=@ethernet={0x0, @dev}, &(0x7f00000025c0)=0x80, 0x800) syz_genetlink_get_family_id$tipc(&(0x7f0000002600), r5) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002680)=@raw={'raw\x00', 0x9, 0x3, 0x410, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, &(0x7f0000002640), {[{{@ipv6={@remote, @private0, [0xff000000, 0xff, 0x0, 0xffffff00], [0xff000000, 0xffffffff, 0xff000101, 0xff], 'wlan1\x00', 'dummy0\x00', {0xff}, {0xff}, 0x6c, 0x7, 0x1}, 0x0, 0x208, 0x250, 0x0, {}, [@common=@rt={{0x138}, {0xc5a4, [0x7, 0x2], 0x7, 0x4, 0x7, [@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @mcast1, @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @rand_addr=' \x01\x00'], 0x5}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x2719661b, 0x1, '\x00', {0x400000000}}}}, {{@ipv6={@remote, @local, [0xff, 0xffff00, 0xffffff00, 0xff], [0xffffff00, 0xffffff00, 0x80, 0xffffffff], 'netdevsim0\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x16, 0x0, 0x5, 0x8}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@local, 'ipvlan1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000002b80)={'syztnl2\x00', &(0x7f0000002b00)={'syztnl1\x00', 0x0, 0x4, 0xc, 0x7, 0x2, 0x24, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x80, 0x0, 0x7ff, 0x2}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002bc0)={r3, r6, 0x25, 0x1, @void}, 0x10) splice(r1, &(0x7f0000002c00)=0x8a2, r4, &(0x7f0000002c40)=0xe7, 0x3, 0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000002c80)={0x1, 0x4, 0x23, 0xf}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000002dc0)={r3}) clock_gettime(0x0, &(0x7f0000007f00)={0x0, 0x0}) recvmmsg(r8, &(0x7f0000007dc0)=[{{&(0x7f0000002e00)=@alg, 0x80, &(0x7f00000040c0)=[{&(0x7f0000002e80)=""/142, 0x8e}, {&(0x7f0000002f40)=""/220, 0xdc}, {&(0x7f0000003040)=""/76, 0x4c}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x4, &(0x7f0000004100)=""/95, 0x5f}, 0x1}, {{&(0x7f0000004180)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004200)=""/38, 0x26}, {&(0x7f0000004240)=""/46, 0x2e}, {&(0x7f0000004280)=""/50, 0x32}], 0x3, &(0x7f0000004300)=""/37, 0x25}, 0x100}, {{&(0x7f0000004340)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004480)=[{&(0x7f00000043c0)=""/72, 0x48}, {&(0x7f0000004440)=""/15, 0xf}], 0x2, &(0x7f00000044c0)=""/178, 0xb2}, 0x1}, {{&(0x7f0000004580)=@sco={0x1f, @none}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004600)=""/225, 0xe1}, {&(0x7f0000004700)=""/67, 0x43}, {&(0x7f0000004780)=""/14, 0xe}, {&(0x7f00000047c0)=""/155, 0x9b}, {&(0x7f0000004880)=""/70, 0x46}], 0x5, &(0x7f0000004980)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000005980)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000007d40)=[{&(0x7f0000005a00)=""/4096, 0x1000}, {&(0x7f0000006a00)=""/127, 0x7f}, {&(0x7f0000006a80)=""/177, 0xb1}, {&(0x7f0000006b40)=""/73, 0x49}, {&(0x7f0000006bc0)=""/99, 0x63}, {&(0x7f0000006c40)=""/24, 0x18}, {&(0x7f0000006c80)=""/4096, 0x1000}, {&(0x7f0000007c80)=""/137, 0x89}], 0x8}, 0x3}], 0x5, 0x40000022, &(0x7f0000007f40)={r9, r10+60000000}) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000007f80)=0x1000000, 0x4) socket$isdn(0x22, 0x3, 0x2) 783.056413ms ago: executing program 4 (id=3092): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) 739.521282ms ago: executing program 0 (id=3093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000007d2700000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1}}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 659.797165ms ago: executing program 4 (id=3094): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r2, 0x1, 0x470bd28, 0x4, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000094}, 0x80) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x12, r0, 0x1f4d2000) 575.569008ms ago: executing program 2 (id=3095): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010800000f0000000000010400", @ANYRES32=r4, @ANYBLOB="20005080090001002bfaa5ff3200000005000200020000000800030001ac0f00"], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @initdev}, &(0x7f0000000280)=0xc) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r7}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x700, 0x700, 0x7, 0x7ba3, {{0x24, 0x4, 0x1, 0x15, 0x90, 0x67, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @empty, {[@timestamp_prespec={0x44, 0x24, 0x8d, 0x3, 0x4, [{@remote, 0x3}, {@local, 0x2}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x14}, 0xf}]}, @generic={0x83, 0x6, "17b3af56"}, @ssrr={0x89, 0x1f, 0x5a, [@remote, @private=0xa010101, @broadcast, @multicast2, @broadcast, @loopback, @private=0xa010101]}, @timestamp={0x44, 0x10, 0xae, 0x0, 0x5, [0x3, 0x7, 0x8]}, @cipso={0x86, 0x1a, 0x1, [{0x1, 0xe, "923c592d2be8ae6336c1a7a5"}, {0x7, 0x6, '.Q!s'}]}, @lsrr={0x83, 0x7, 0xe7, [@private=0xa010100]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000400)={'erspan0\x00', 0x0, 0x8, 0x40, 0xff, 0x5, {{0x8, 0x4, 0x3, 0x4, 0x20, 0x64, 0x0, 0xb, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@generic={0x89, 0xc, "1088b582f0e859dcf72d"}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, 0x0, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x30, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x10, 0x3}, {0xf, 0xffff}, {0x4, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4c014}, 0x20044000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r15 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r17, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80, 0xb, 0x4}}}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf25070000001c00018008000100", @ANYRESDEC=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3364e31dfe64c03d7d2639b0561894a02e8a080e829934048a5f98b951d1e6ffb5058a84687584c0cd7ccd7cd6cdfdfe0da8a14afb93d5ca9b614d7c0208400e917dccd058f97d1b68fc5e39ceebef3d40e09c7664da584f21f08267673799a23e1abcbc2e0ca154eebc7a7d48c3e914d0ba995427815d3cab7a47f973e2119432b4f280d4943999a83b34ffbeddb58195d77f25c7798909914569d16fbd00a627fee7bbcab80d36bc1e565fb9634599b46d", @ANYRES32=0x0, @ANYBLOB="200001801400020069703665727370616e3000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r14, @ANYBLOB="640001801400020067656e657665310000000000000000000800030003000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="080003000200000008000300020000001400020067656e657665300000000000000000002000018014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=0x0, @ANYBLOB="7000018008000100", @ANYRES32=r10, @ANYBLOB="14000200776c616e300000000000000000000000080003000000000008000300020000001400020076657468305f746f5f6272696467650014000200726f736530000000000000000000000008000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r17, @ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) 503.343767ms ago: executing program 4 (id=3096): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x858, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x828, 0x2, [@TCA_CGROUP_POLICE={0x824, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x0, 0x6, 0x908, 0x80, 0x8, 0x6, 0x5, 0x7, 0x1, 0xfffffff8, 0x78, 0x8402, 0x3ff, 0x10001, 0xe, 0xff, 0xffff, 0x200, 0x2, 0x0, 0x1, 0x100, 0x8, 0x40, 0x1d0, 0x571680e3, 0x9, 0x2, 0x2, 0x5, 0x26c, 0x5, 0xf3, 0x2, 0x7, 0x0, 0xffff, 0x5, 0x0, 0xa2f, 0x5, 0x9, 0x4, 0x3, 0x1, 0x7fff, 0x3, 0x7fffffff, 0x6, 0x100, 0x5, 0x1000, 0x200, 0x7, 0x9bc6, 0xfffffffb, 0x1, 0x3, 0x9, 0xed, 0x5, 0x4, 0x7ff, 0x6, 0x3, 0x401, 0xf, 0x8, 0x4, 0x1, 0x10000, 0x2d7, 0x7, 0xfffffff9, 0x3, 0xacd, 0x7ff, 0x8, 0x1, 0x6, 0x1, 0x7, 0x8, 0x53, 0x7, 0xd, 0x9, 0x0, 0x7, 0x9, 0x7, 0x9, 0x3, 0x8, 0x1, 0x80000000, 0x4, 0xaf, 0x7, 0x3, 0x5, 0xff, 0x400, 0x0, 0x6, 0x10000, 0x8, 0x1, 0x3, 0x4, 0xbc, 0x20a, 0x9, 0x4, 0xd, 0xb, 0x6, 0x80, 0x2, 0x8000, 0x7, 0x7f7, 0x8, 0x7d0e, 0x2, 0x1, 0x8, 0x6, 0x7ff, 0x1, 0x1, 0x800, 0x1173, 0x100, 0xd, 0x7fff, 0x3, 0xffff, 0x3, 0x2a, 0x6, 0xfffffff2, 0x5, 0x4, 0x200, 0x7ff, 0x9, 0x0, 0x2, 0xac08, 0x3, 0x8, 0x0, 0x68a, 0x2, 0x7, 0x7, 0x0, 0x6, 0x5, 0x1, 0x7, 0x7, 0x6, 0x840, 0x3, 0xef5, 0xb, 0x8, 0xed, 0x0, 0x0, 0x6, 0xffff8001, 0x303f, 0x9, 0x6, 0x0, 0x7, 0x8, 0x815, 0x4, 0x6, 0x80000001, 0x7, 0x6, 0x7fff, 0x10001, 0x2a22, 0xd3f, 0x81, 0x2000004, 0x3, 0x4, 0x8, 0x5f1a, 0x3, 0x6, 0x5, 0x7ff, 0x6c, 0x800, 0x0, 0x1, 0x6, 0x7ff, 0x6, 0x8, 0x1, 0x1, 0x0, 0x1, 0xd, 0x81, 0xff, 0x3, 0x2bc, 0x7, 0xa, 0x40, 0x7, 0xe, 0x8, 0xffff7863, 0x6, 0x7, 0x5, 0x7, 0x6, 0x8000, 0x6, 0x0, 0x1, 0x8, 0x2, 0x9, 0x7, 0xe99, 0x1, 0x7c, 0x7fffffff, 0x5, 0x2, 0xfffffffb, 0x9, 0x4, 0x6, 0x8, 0x3, 0x29, 0x9, 0x7, 0x5, 0x2, 0x4396]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0x1, 0x80000000, 0x7a36, 0x5, 0xd8, 0x31, 0x9a, 0x99, 0x4, 0x0, 0x3, 0x5, 0xfffffffd, 0xf51, 0x6, 0x5, 0xfffffffd, 0x80000001, 0x7fff, 0x9, 0x3f0, 0x10, 0x3, 0x4, 0xfffffff8, 0x80000001, 0x10000, 0xf, 0x8000, 0x7, 0x9, 0x5, 0x9, 0x7, 0x6, 0xfffffffd, 0xfffffff9, 0x3, 0x1, 0x3416ca69, 0xffffff50, 0x5, 0x1, 0x2, 0x7, 0xfff, 0xfffffffe, 0xf36, 0x9, 0x80000001, 0x2, 0x5, 0x8, 0x4, 0x7, 0x1c000000, 0xfffffffa, 0x7fff, 0x2, 0xf8, 0x5, 0x0, 0xfffffffc, 0x4, 0x9, 0xf, 0x2000, 0x22d1, 0x84, 0x10001, 0x9, 0x3, 0x9, 0x10001, 0x10001, 0x7, 0x2, 0x9, 0x3, 0x1, 0x401, 0x2, 0x2, 0x4c1f, 0x7, 0x8, 0x22, 0xd2, 0xfffffffc, 0x3, 0x1ff, 0xa, 0x7f, 0x9, 0xfffffffa, 0x9, 0xad9, 0x4, 0x5, 0x7, 0xd, 0x6, 0x5, 0xffffffff, 0x40, 0x10, 0x65, 0x9, 0x8, 0xc, 0x7, 0x5, 0x5, 0x10001, 0x0, 0x3, 0x5c, 0x1, 0x2, 0x80, 0xffff2d9c, 0x9, 0x8, 0x1, 0x43b, 0x0, 0x3, 0x0, 0x1, 0x4, 0xffff, 0x6, 0x6, 0xd5, 0x3, 0x1, 0x8001, 0xfff, 0x1, 0x4, 0x7b97, 0x5, 0x4, 0x0, 0x80, 0x2, 0x1ff, 0x575, 0x7fffffff, 0x2, 0x96f5, 0x7, 0x400, 0x1ff, 0x242ef083, 0x1, 0x7, 0xffff, 0x7, 0x8001, 0xfe800000, 0x1, 0x9, 0x5, 0x200, 0x2000000, 0x40, 0x8f, 0x100, 0x800, 0x7, 0x3, 0x8, 0x200, 0x1, 0x2, 0x8, 0x101, 0x5, 0x7ff, 0x100, 0x6, 0x6, 0x40, 0x7, 0x7, 0x9, 0x3, 0x7f, 0x8, 0xffff, 0x7, 0x48d, 0x4, 0x6, 0x5, 0x6, 0x1d, 0x1, 0x7, 0x1, 0x81, 0x1000, 0xc, 0xfffffffb, 0x7, 0x4, 0x8, 0x6, 0x2, 0x6, 0x7, 0xe35, 0x6, 0x9, 0x1, 0x80000000, 0xfffffffb, 0xfff, 0x1, 0x2, 0x8, 0x7, 0x238, 0x1, 0xff, 0x3, 0x7, 0x1, 0x0, 0x7, 0x5e, 0x7, 0x5, 0x2, 0x9, 0xffffffff, 0x1, 0x80000000, 0x9, 0x80000000, 0xafa, 0x83c2, 0x400, 0x3, 0x6, 0x6, 0x4, 0x0, 0x500, 0x1ff, 0x2, 0x6, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}]}}]}, 0x858}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x858, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x828, 0x2, [@TCA_CGROUP_POLICE={0x824, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x0, 0x6, 0x908, 0x80, 0x8, 0x6, 0x5, 0x7, 0x1, 0xfffffff8, 0x78, 0x8402, 0x3ff, 0x10001, 0xe, 0xff, 0xffff, 0x200, 0x2, 0x0, 0x1, 0x100, 0x8, 0x40, 0x1d0, 0x571680e3, 0x9, 0x2, 0x2, 0x5, 0x26c, 0x5, 0xf3, 0x2, 0x7, 0x0, 0xffff, 0x5, 0x0, 0xa2f, 0x5, 0x9, 0x4, 0x3, 0x1, 0x7fff, 0x3, 0x7fffffff, 0x6, 0x100, 0x5, 0x1000, 0x200, 0x7, 0x9bc6, 0xfffffffb, 0x1, 0x3, 0x9, 0xed, 0x5, 0x4, 0x7ff, 0x6, 0x3, 0x401, 0xf, 0x8, 0x4, 0x1, 0x10000, 0x2d7, 0x7, 0xfffffff9, 0x3, 0xacd, 0x7ff, 0x8, 0x1, 0x6, 0x1, 0x7, 0x8, 0x53, 0x7, 0xd, 0x9, 0x0, 0x7, 0x9, 0x7, 0x9, 0x3, 0x8, 0x1, 0x80000000, 0x4, 0xaf, 0x7, 0x3, 0x5, 0xff, 0x400, 0x0, 0x6, 0x10000, 0x8, 0x1, 0x3, 0x4, 0xbc, 0x20a, 0x9, 0x4, 0xd, 0xb, 0x6, 0x80, 0x2, 0x8000, 0x7, 0x7f7, 0x8, 0x7d0e, 0x2, 0x1, 0x8, 0x6, 0x7ff, 0x1, 0x1, 0x800, 0x1173, 0x100, 0xd, 0x7fff, 0x3, 0xffff, 0x3, 0x2a, 0x6, 0xfffffff2, 0x5, 0x4, 0x200, 0x7ff, 0x9, 0x0, 0x2, 0xac08, 0x3, 0x8, 0x0, 0x68a, 0x2, 0x7, 0x7, 0x0, 0x6, 0x5, 0x1, 0x7, 0x7, 0x6, 0x840, 0x3, 0xef5, 0xb, 0x8, 0xed, 0x0, 0x0, 0x6, 0xffff8001, 0x303f, 0x9, 0x6, 0x0, 0x7, 0x8, 0x815, 0x4, 0x6, 0x80000001, 0x7, 0x6, 0x7fff, 0x10001, 0x2a22, 0xd3f, 0x81, 0x2000004, 0x3, 0x4, 0x8, 0x5f1a, 0x3, 0x6, 0x5, 0x7ff, 0x6c, 0x800, 0x0, 0x1, 0x6, 0x7ff, 0x6, 0x8, 0x1, 0x1, 0x0, 0x1, 0xd, 0x81, 0xff, 0x3, 0x2bc, 0x7, 0xa, 0x40, 0x7, 0xe, 0x8, 0xffff7863, 0x6, 0x7, 0x5, 0x7, 0x6, 0x8000, 0x6, 0x0, 0x1, 0x8, 0x2, 0x9, 0x7, 0xe99, 0x1, 0x7c, 0x7fffffff, 0x5, 0x2, 0xfffffffb, 0x9, 0x4, 0x6, 0x8, 0x3, 0x29, 0x9, 0x7, 0x5, 0x2, 0x4396]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x4, 0x1, 0x80000000, 0x7a36, 0x5, 0xd8, 0x31, 0x9a, 0x99, 0x4, 0x0, 0x3, 0x5, 0xfffffffd, 0xf51, 0x6, 0x5, 0xfffffffd, 0x80000001, 0x7fff, 0x9, 0x3f0, 0x10, 0x3, 0x4, 0xfffffff8, 0x80000001, 0x10000, 0xf, 0x8000, 0x7, 0x9, 0x5, 0x9, 0x7, 0x6, 0xfffffffd, 0xfffffff9, 0x3, 0x1, 0x3416ca69, 0xffffff50, 0x5, 0x1, 0x2, 0x7, 0xfff, 0xfffffffe, 0xf36, 0x9, 0x80000001, 0x2, 0x5, 0x8, 0x4, 0x7, 0x1c000000, 0xfffffffa, 0x7fff, 0x2, 0xf8, 0x5, 0x0, 0xfffffffc, 0x4, 0x9, 0xf, 0x2000, 0x22d1, 0x84, 0x10001, 0x9, 0x3, 0x9, 0x10001, 0x10001, 0x7, 0x2, 0x9, 0x3, 0x1, 0x401, 0x2, 0x2, 0x4c1f, 0x7, 0x8, 0x22, 0xd2, 0xfffffffc, 0x3, 0x1ff, 0xa, 0x7f, 0x9, 0xfffffffa, 0x9, 0xad9, 0x4, 0x5, 0x7, 0xd, 0x6, 0x5, 0xffffffff, 0x40, 0x10, 0x65, 0x9, 0x8, 0xc, 0x7, 0x5, 0x5, 0x10001, 0x0, 0x3, 0x5c, 0x1, 0x2, 0x80, 0xffff2d9c, 0x9, 0x8, 0x1, 0x43b, 0x0, 0x3, 0x0, 0x1, 0x4, 0xffff, 0x6, 0x6, 0xd5, 0x3, 0x1, 0x8001, 0xfff, 0x1, 0x4, 0x7b97, 0x5, 0x4, 0x0, 0x80, 0x2, 0x1ff, 0x575, 0x7fffffff, 0x2, 0x96f5, 0x7, 0x400, 0x1ff, 0x242ef083, 0x1, 0x7, 0xffff, 0x7, 0x8001, 0xfe800000, 0x1, 0x9, 0x5, 0x200, 0x2000000, 0x40, 0x8f, 0x100, 0x800, 0x7, 0x3, 0x8, 0x200, 0x1, 0x2, 0x8, 0x101, 0x5, 0x7ff, 0x100, 0x6, 0x6, 0x40, 0x7, 0x7, 0x9, 0x3, 0x7f, 0x8, 0xffff, 0x7, 0x48d, 0x4, 0x6, 0x5, 0x6, 0x1d, 0x1, 0x7, 0x1, 0x81, 0x1000, 0xc, 0xfffffffb, 0x7, 0x4, 0x8, 0x6, 0x2, 0x6, 0x7, 0xe35, 0x6, 0x9, 0x1, 0x80000000, 0xfffffffb, 0xfff, 0x1, 0x2, 0x8, 0x7, 0x238, 0x1, 0xff, 0x3, 0x7, 0x1, 0x0, 0x7, 0x5e, 0x7, 0x5, 0x2, 0x9, 0xffffffff, 0x1, 0x80000000, 0x9, 0x80000000, 0xafa, 0x83c2, 0x400, 0x3, 0x6, 0x6, 0x4, 0x0, 0x500, 0x1ff, 0x2, 0x6, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}]}}]}, 0x858}}, 0x24004000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 478.324223ms ago: executing program 0 (id=3097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="94000000", @ANYBLOB="000219bd7000fbdbdf256b00000008"], 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x40080) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1a64829bf8f72508a80cd8d857b57faf39ee3f9eea1eee8a57ed874438f5d4c1071331ca143e3e50586a06bc83689f2a60f917d4a74431cca878e35f69c9cc01bd35", 0x42}], 0x1, 0x0, 0x168}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad7fdb9356b6c5c7beef915d564c90c20000008100000000", 0x18) (async) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)}, {&(0x7f0000000700)=""/219, 0xdb}], 0x2}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="89bac968d84fe973211d50bf29efd7f11ea3bb2a84114b33d2e00e6cdc44def0517d42d7b44eea104c302a4948ebbb23c24b1b2762d8322c0277e67bb7162cee8437007af2daef3a26ca8afd1ebadd3665920c54396c7d00931e4306e9df7967203fe97f6f04951bd68819499808a0031d", 0x71) (async) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000100)={0x3, 0x7, "27b4280d4cbe93"}) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r6, 0x84, 0x7d, 0x0, &(0x7f0000000000)) (async) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 363.924378ms ago: executing program 2 (id=3098): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x5}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x8000}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_emit_ethernet(0xa6, &(0x7f0000000540)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @loopback, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x6, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x22, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc433137593009290"}]}]}}}}}}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) clock_gettime(0x0, &(0x7f0000003580)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000003480)=[{{&(0x7f0000000080), 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000340)=""/59, 0x3b}], 0x3}, 0xc}, {{&(0x7f00000003c0)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/48, 0x30}, {&(0x7f0000000780)=""/231, 0xe7}, {&(0x7f0000000880)=""/193, 0xc1}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x4, &(0x7f0000001980)=""/183, 0xb7}, 0x3}, {{&(0x7f0000001a40)=@caif=@dbg, 0x80, &(0x7f0000002000)=[{&(0x7f0000001ac0)=""/139, 0x8b}, {&(0x7f0000001b80)=""/103, 0x67}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)=""/189, 0xbd}, {&(0x7f0000001d00)=""/23, 0x17}, {&(0x7f0000001d40)=""/94, 0x5e}, {&(0x7f0000001dc0)=""/195, 0xc3}, {&(0x7f0000001ec0)=""/116, 0x74}, {&(0x7f0000001f40)=""/50, 0x32}, {&(0x7f0000001f80)=""/67, 0x43}], 0xa, &(0x7f00000020c0)=""/217, 0xd9}, 0x4}, {{&(0x7f0000003600)=@pppol2tpv3in6, 0x80, &(0x7f0000002440)=[{&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000002300)=""/136, 0x88}, {&(0x7f00000023c0)=""/105, 0x69}], 0x3, &(0x7f0000002480)=""/4096, 0x1000}, 0x8}], 0x4, 0x40, &(0x7f00000035c0)={r2, r3+10000000}) 362.418683ms ago: executing program 0 (id=3099): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x2, @remote}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xf8, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket$caif_stream(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmmsg$inet(r3, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000005980)='ip6gre0\x00', 0x10) connect$caif(r4, &(0x7f00000059c0)=@dgm={0x25, 0x5, 0x9d}, 0x18) 298.8814ms ago: executing program 4 (id=3100): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x2, 0x11, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0x4, 0x401, 0x3}, 0x10) 218.485652ms ago: executing program 1 (id=3101): r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000540)="0022040000ffffebfffffffeffffff0706000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01018842b5057c4d7200", 0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') 99.949693ms ago: executing program 4 (id=3102): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x16, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x36, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08f6e83e2aa00e133f88a8"}}}}, 0x44) r3 = accept4(r0, 0x0, 0x0, 0x800) write$bt_hci(r3, 0x0, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r4, 0x89e2) 55.78524ms ago: executing program 0 (id=3103): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_TOTAL={0x6}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 50.173315ms ago: executing program 2 (id=3104): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x9, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0xb0c0}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x9, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0xb0c0}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) 0s ago: executing program 1 (id=3105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000e36d0b3da4945d402b2951b64532e798d87744156d6375a703a842356e49ec9495998cc65dc158d579f90aeb66cabe0c3b2ce0221f2602d16b5754f2cbbd67923203af99aba2b8fc4f3317a48870ef493b82436cf4bb8c8f03cb87efd9ecf0def11e076b0e9aad3507e9c77affcf059ff6c4d5d1e6424eb2a8ad67f1db89ab1f10e751af2e0478ce1fcf67d3203db7d1d779ab790ac369f16948287c82433ad276ff1bee99ba9cd03cd6d44f420cfb00327f68399190662afc12d8ddad7b316e3eb4630a84622f8f4d379a6935da6eea9e8c711354430200f90023d2c4bf5207d6969ced2d9b8c56b0406a2a9e55b29eb61aa35beda6b0de5532dec13c1d98b79850978ac2eec1d0", @ANYRES16=r1, @ANYBLOB="020000200000020010000200000008000c018500000008003f000a000000"], 0x24}, 0x1, 0x0, 0x0, 0x20085}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) kernel console output (not intermixed with test programs): Flow actions may not be safe on all matching packets. [ 193.223392][T10345] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1300'. [ 193.610658][T10368] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 193.722601][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 193.937230][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1312'. [ 193.960098][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1312'. [ 193.984631][T10383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1312'. [ 194.098348][T10383] validate_nla: 1 callbacks suppressed [ 194.098368][T10383] netlink: 'syz.4.1312': attribute type 22 has an invalid length. [ 194.122156][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1312'. [ 194.145079][T10383] netlink: 'syz.4.1312': attribute type 22 has an invalid length. [ 194.153687][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1312'. [ 194.225742][T10397] !: renamed from dummy0 (while UP) [ 194.257691][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'. [ 194.459489][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 194.495632][T10417] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20004 [ 194.504474][T10419] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20004 [ 194.679432][T10431] netlink: 'syz.2.1325': attribute type 21 has an invalid length. [ 194.741411][T10434] netlink: 'syz.1.1324': attribute type 16 has an invalid length. [ 194.762610][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 194.770277][T10434] netlink: 'syz.1.1324': attribute type 3 has an invalid length. [ 194.784297][T10434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1324'. [ 194.937319][T10451] erspan0: entered allmulticast mode [ 194.958482][T10451] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.121088][T10458] netlink: 'syz.1.1333': attribute type 1 has an invalid length. [ 195.802749][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 196.091441][T10511] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 196.481492][T10542] vlan4: entered allmulticast mode [ 196.488037][T10542] bridge0: entered allmulticast mode [ 196.510192][T10545] pimreg: entered allmulticast mode [ 196.624854][ T5870] block nbd1: Receive control failed (result -32) [ 196.842818][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 197.417667][T10583] __nla_validate_parse: 14 callbacks suppressed [ 197.417688][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1374'. [ 197.580503][T10597] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1377'. [ 197.697126][T10602] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 197.848017][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1381'. [ 197.879346][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'. [ 197.888391][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 197.905615][T10602] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.033398][T10630] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 198.041753][T10630] netlink: 'syz.1.1385': attribute type 3 has an invalid length. [ 198.049937][T10630] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1385'. [ 198.059525][T10630] NCSI netlink: No device for ifindex 813332851 [ 198.224871][T10638] netlink: 'syz.2.1387': attribute type 1 has an invalid length. [ 198.280992][T10644] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1389'. [ 198.301194][T10643] bridge0: port 2(veth0_to_bridge) entered blocking state [ 198.309129][T10643] bridge0: port 2(veth0_to_bridge) entered disabled state [ 198.316751][T10643] veth0_to_bridge: entered allmulticast mode [ 198.325310][T10643] veth0_to_bridge: entered promiscuous mode [ 198.434545][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 198.922822][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 198.951766][T10678] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1401'. [ 198.995217][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 199.026219][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 199.109815][T10694] team0: Port device dummy0 added [ 199.160881][T10694] validate_nla: 1 callbacks suppressed [ 199.160901][T10694] netlink: 'syz.1.1405': attribute type 10 has an invalid length. [ 199.215451][T10694] team0: Port device dummy0 removed [ 199.237794][T10694] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 199.257567][T10702] netlink: 'syz.3.1407': attribute type 10 has an invalid length. [ 199.295183][T10702] team0: Device ipvlan1 failed to register rx_handler [ 199.444273][T10710] bond0: Error: Cannot enslave bond to itself. [ 199.491784][T10716] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 199.847590][T10741] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.877287][T10741] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.890059][T10741] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 199.923599][T10743] xt_socket: unknown flags 0xe4 [ 199.962583][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 199.967375][T10741] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 199.981219][T10741] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.992348][T10741] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 200.078967][T10741] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.089687][T10741] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.100351][T10741] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 200.215363][T10741] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.227702][T10741] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.238876][T10741] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 200.418626][ T58] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.447289][ T58] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 200.461703][ T58] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 200.510224][ T58] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.522975][ T58] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 200.531208][ T58] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 200.596638][ T58] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.608724][T10775] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 200.614427][ T58] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 200.626126][ T58] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 200.641431][ T58] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.651433][ T58] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 200.659836][ T58] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 201.002632][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 201.287361][T10806] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 201.380227][T10812] netlink: 'syz.0.1438': attribute type 4 has an invalid length. [ 201.407253][T10811] netlink: 'syz.0.1438': attribute type 4 has an invalid length. [ 201.589522][T10827] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 201.627526][T10832] netlink: 'syz.1.1444': attribute type 4 has an invalid length. [ 201.628101][T10829] tipc: Enabling of bearer rejected, already enabled [ 201.709432][T10832] `: renamed from bond0 (while UP) [ 201.840206][T10840] openvswitch: netlink: Unknown key attributes 2 [ 202.042598][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 202.129342][T10858] netlink: 'syz.4.1449': attribute type 1 has an invalid length. [ 202.371243][T10864] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.410684][T10864] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.425393][T10864] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.460808][T10864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.714435][T10868] syzkaller1: entered promiscuous mode [ 202.725068][T10868] syzkaller1: entered allmulticast mode [ 202.889751][T10883] tipc: Enabled bearer , priority 0 [ 202.911521][T10885] syzkaller0: entered promiscuous mode [ 202.936481][T10885] syzkaller0: entered allmulticast mode [ 203.021629][T10885] tipc: Resetting bearer [ 203.076509][T10885] tipc: Disabling bearer [ 203.082559][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 203.195568][T10901] __nla_validate_parse: 35 callbacks suppressed [ 203.195588][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1460'. [ 203.238224][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 203.270895][T10901] netlink: 'syz.3.1460': attribute type 14 has an invalid length. [ 203.296700][T10901] netlink: 'syz.3.1460': attribute type 13 has an invalid length. [ 203.547180][T10922] netlink: 'syz.2.1467': attribute type 2 has an invalid length. [ 204.122471][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 204.257838][T10947] netlink: 'syz.3.1475': attribute type 1 has an invalid length. [ 204.338204][T10950] FAULT_INJECTION: forcing a failure. [ 204.338204][T10950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.357022][T10950] CPU: 1 UID: 0 PID: 10950 Comm: syz.1.1477 Not tainted syzkaller #0 PREEMPT(full) [ 204.357052][T10950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.357064][T10950] Call Trace: [ 204.357072][T10950] [ 204.357081][T10950] dump_stack_lvl+0x189/0x250 [ 204.357112][T10950] ? __pfx____ratelimit+0x10/0x10 [ 204.357141][T10950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.357166][T10950] ? __pfx__printk+0x10/0x10 [ 204.357201][T10950] ? __might_fault+0xb0/0x130 [ 204.357249][T10950] should_fail_ex+0x414/0x560 [ 204.357281][T10950] _copy_from_user+0x2d/0xb0 [ 204.357325][T10950] ___sys_sendmsg+0x158/0x2a0 [ 204.357350][T10950] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.357412][T10950] ? __fget_files+0x2a/0x420 [ 204.357443][T10950] ? __fget_files+0x3a0/0x420 [ 204.357487][T10950] __x64_sys_sendmsg+0x19b/0x260 [ 204.357513][T10950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.357546][T10950] ? __pfx_ksys_write+0x10/0x10 [ 204.357573][T10950] ? rcu_is_watching+0x15/0xb0 [ 204.357599][T10950] ? do_syscall_64+0xbe/0x3b0 [ 204.357635][T10950] do_syscall_64+0xfa/0x3b0 [ 204.357666][T10950] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.357695][T10950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.357716][T10950] ? clear_bhb_loop+0x60/0xb0 [ 204.357742][T10950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.357762][T10950] RIP: 0033:0x7fa07d98ebe9 [ 204.357780][T10950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.357797][T10950] RSP: 002b:00007fa07e81c038 EFLAGS: 00000246 [ 204.357805][T10952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1478'. [ 204.357808][T10950] ORIG_RAX: 000000000000002e [ 204.357821][T10950] RAX: ffffffffffffffda RBX: 00007fa07dbb5fa0 RCX: 00007fa07d98ebe9 [ 204.357837][T10950] RDX: 0000000000008054 RSI: 0000200000000100 RDI: 0000000000000004 [ 204.357850][T10950] RBP: 00007fa07e81c090 R08: 0000000000000000 R09: 0000000000000000 [ 204.357860][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.357871][T10950] R13: 00007fa07dbb6038 R14: 00007fa07dbb5fa0 R15: 00007fff20c64d18 [ 204.357909][T10950] [ 204.650076][T10954] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1479'. [ 204.673500][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1478'. [ 204.738161][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 204.756002][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1481'. [ 204.784382][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'. [ 204.798471][T10954] netlink: 'syz.3.1479': attribute type 35 has an invalid length. [ 204.881096][T10967] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1482'. [ 204.891739][T10967] xt_policy: neither incoming nor outgoing policy selected [ 205.039507][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'. [ 205.162476][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 205.252269][T10994] FAULT_INJECTION: forcing a failure. [ 205.252269][T10994] name failslab, interval 1, probability 0, space 0, times 0 [ 205.309670][T10994] CPU: 0 UID: 0 PID: 10994 Comm: syz.3.1490 Not tainted syzkaller #0 PREEMPT(full) [ 205.309702][T10994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.309716][T10994] Call Trace: [ 205.309725][T10994] [ 205.309734][T10994] dump_stack_lvl+0x189/0x250 [ 205.309765][T10994] ? __pfx____ratelimit+0x10/0x10 [ 205.309795][T10994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.309822][T10994] ? __pfx__printk+0x10/0x10 [ 205.309859][T10994] ? __pfx___might_resched+0x10/0x10 [ 205.309894][T10994] should_fail_ex+0x414/0x560 [ 205.309928][T10994] should_failslab+0xa8/0x100 [ 205.309962][T10994] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 205.309993][T10994] ? __alloc_skb+0x112/0x2d0 [ 205.310031][T10994] __alloc_skb+0x112/0x2d0 [ 205.310067][T10994] netlink_sendmsg+0x5c6/0xb30 [ 205.310110][T10994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.310146][T10994] ? aa_sock_msg_perm+0xf1/0x1d0 [ 205.310194][T10994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 205.310216][T10994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.310247][T10994] __sock_sendmsg+0x21c/0x270 [ 205.310276][T10994] ____sys_sendmsg+0x505/0x830 [ 205.310304][T10994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.310355][T10994] ? import_iovec+0x74/0xa0 [ 205.310385][T10994] ___sys_sendmsg+0x21f/0x2a0 [ 205.310409][T10994] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.310471][T10994] ? __fget_files+0x2a/0x420 [ 205.310503][T10994] ? __fget_files+0x3a0/0x420 [ 205.310547][T10994] __x64_sys_sendmsg+0x19b/0x260 [ 205.310572][T10994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.310617][T10994] ? __pfx_ksys_write+0x10/0x10 [ 205.310643][T10994] ? rcu_is_watching+0x15/0xb0 [ 205.310670][T10994] ? do_syscall_64+0xbe/0x3b0 [ 205.310705][T10994] do_syscall_64+0xfa/0x3b0 [ 205.310737][T10994] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.310765][T10994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.310786][T10994] ? clear_bhb_loop+0x60/0xb0 [ 205.310812][T10994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.310832][T10994] RIP: 0033:0x7f4e2678ebe9 [ 205.310851][T10994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.310869][T10994] RSP: 002b:00007f4e275ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.310903][T10994] RAX: ffffffffffffffda RBX: 00007f4e269b5fa0 RCX: 00007f4e2678ebe9 [ 205.310918][T10994] RDX: 0000000000008054 RSI: 0000200000000100 RDI: 0000000000000004 [ 205.310932][T10994] RBP: 00007f4e275ae090 R08: 0000000000000000 R09: 0000000000000000 [ 205.310945][T10994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.310956][T10994] R13: 00007f4e269b6038 R14: 00007f4e269b5fa0 R15: 00007ffcd30ef758 [ 205.310989][T10994] [ 205.329519][T10977] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 205.338542][T10995] openvswitch: netlink: Actions may not be safe on all matching packets [ 205.558995][T11001] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 205.623525][T11001] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 205.784079][T11012] netlink: 'syz.4.1495': attribute type 1 has an invalid length. [ 205.785748][T11008] netlink: 'syz.1.1493': attribute type 30 has an invalid length. [ 205.792138][T11012] netlink: 'syz.4.1495': attribute type 4 has an invalid length. [ 206.202619][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 206.361868][T11018] syzkaller1: entered promiscuous mode [ 206.396401][T11018] syzkaller1: entered allmulticast mode [ 206.620617][T11051] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 206.792716][T11060] netlink: 'syz.3.1506': attribute type 14 has an invalid length. [ 207.130321][T11080] FAULT_INJECTION: forcing a failure. [ 207.130321][T11080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.184156][T11080] CPU: 1 UID: 0 PID: 11080 Comm: syz.3.1513 Not tainted syzkaller #0 PREEMPT(full) [ 207.184186][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.184199][T11080] Call Trace: [ 207.184207][T11080] [ 207.184217][T11080] dump_stack_lvl+0x189/0x250 [ 207.184266][T11080] ? __pfx____ratelimit+0x10/0x10 [ 207.184297][T11080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.184324][T11080] ? __pfx__printk+0x10/0x10 [ 207.184355][T11080] ? __might_fault+0xb0/0x130 [ 207.184398][T11080] should_fail_ex+0x414/0x560 [ 207.184432][T11080] _copy_from_iter+0x1db/0x16f0 [ 207.184458][T11080] ? rcu_is_watching+0x15/0xb0 [ 207.184482][T11080] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 207.184516][T11080] ? __pfx__copy_from_iter+0x10/0x10 [ 207.184540][T11080] ? __build_skb_around+0x257/0x3e0 [ 207.184576][T11080] ? netlink_sendmsg+0x642/0xb30 [ 207.184606][T11080] ? skb_put+0x11b/0x210 [ 207.184643][T11080] netlink_sendmsg+0x6b2/0xb30 [ 207.184686][T11080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.184721][T11080] ? aa_sock_msg_perm+0xf1/0x1d0 [ 207.184757][T11080] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.184789][T11080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.184822][T11080] __sock_sendmsg+0x21c/0x270 [ 207.184853][T11080] ____sys_sendmsg+0x505/0x830 [ 207.184882][T11080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.184915][T11080] ? import_iovec+0x74/0xa0 [ 207.184944][T11080] ___sys_sendmsg+0x21f/0x2a0 [ 207.184969][T11080] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.185033][T11080] ? __fget_files+0x2a/0x420 [ 207.185065][T11080] ? __fget_files+0x3a0/0x420 [ 207.185110][T11080] __x64_sys_sendmsg+0x19b/0x260 [ 207.185134][T11080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.185167][T11080] ? __pfx_ksys_write+0x10/0x10 [ 207.185203][T11080] ? do_syscall_64+0xbe/0x3b0 [ 207.185240][T11080] do_syscall_64+0xfa/0x3b0 [ 207.185269][T11080] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.185298][T11080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.185320][T11080] ? clear_bhb_loop+0x60/0xb0 [ 207.185347][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.185367][T11080] RIP: 0033:0x7f4e2678ebe9 [ 207.185387][T11080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.185406][T11080] RSP: 002b:00007f4e275ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.185429][T11080] RAX: ffffffffffffffda RBX: 00007f4e269b5fa0 RCX: 00007f4e2678ebe9 [ 207.185445][T11080] RDX: 0000000000008054 RSI: 0000200000000100 RDI: 0000000000000004 [ 207.185459][T11080] RBP: 00007f4e275ae090 R08: 0000000000000000 R09: 0000000000000000 [ 207.185473][T11080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.185486][T11080] R13: 00007f4e269b6038 R14: 00007f4e269b5fa0 R15: 00007ffcd30ef758 [ 207.185520][T11080] [ 207.331424][T11085] netlink: 'syz.2.1514': attribute type 13 has an invalid length. [ 207.336321][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 207.543131][T11085] veth0_macvtap: left promiscuous mode [ 207.589319][T11085] macvtap0: entered allmulticast mode [ 207.629504][T11085] macvtap0: refused to change device tx_queue_len [ 208.098416][T11117] vlan4: entered allmulticast mode [ 208.104115][T11117] bridge2: port 1(vlan4) entered blocking state [ 208.110651][T11117] bridge2: port 1(vlan4) entered disabled state [ 208.144301][T11117] vlan4: entered promiscuous mode [ 208.189195][T11118] bond0: entered promiscuous mode [ 208.194978][T11118] bond_slave_0: entered promiscuous mode [ 208.201256][T11118] bond_slave_1: entered promiscuous mode [ 208.215988][T11118] bond0: left promiscuous mode [ 208.228217][T11118] bond_slave_0: left promiscuous mode [ 208.261755][T11118] bond_slave_1: left promiscuous mode [ 208.362585][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 208.439969][T11136] netlink: 'syz.0.1527': attribute type 2 has an invalid length. [ 208.464407][T11137] sit2: entered promiscuous mode [ 208.485878][T11137] sit2: entered allmulticast mode [ 208.546422][T11136] __nla_validate_parse: 11 callbacks suppressed [ 208.546444][T11136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 208.867151][T11167] netlink: 'syz.3.1537': attribute type 2 has an invalid length. [ 208.911654][T11165] netlink: 'syz.2.1536': attribute type 10 has an invalid length. [ 209.190240][T11195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1547'. [ 209.402621][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 209.431242][T11206] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR [ 209.779854][T11245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1555'. [ 209.825126][T11245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1555'. [ 209.952035][T11251] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1557'. [ 210.000539][T11252] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 210.051672][T11252] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 210.266815][T11252] bond6 (unregistering): Released all slaves [ 210.341679][T11268] netlink: 'syz.0.1561': attribute type 6 has an invalid length. [ 210.361922][T11268] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1561'. [ 210.368900][T11266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1557'. [ 210.411729][ T12] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 210.433307][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.443276][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 210.470359][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.519854][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.687545][T11278] netlink: 'syz.1.1565': attribute type 1 has an invalid length. [ 210.782570][T11278] netlink: 'syz.1.1565': attribute type 4 has an invalid length. [ 210.790381][T11278] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1565'. [ 211.205946][T11303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.227146][T11303] netlink: 'syz.1.1572': attribute type 4 has an invalid length. [ 211.260830][T11303] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1572'. [ 211.409285][T11320] delete_channel: no stack [ 211.482622][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 211.658955][T11315] delete_channel: no stack [ 211.931380][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1586'. [ 212.169711][T11358] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 212.182340][T11358] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 212.522691][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.698894][T11383] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 212.942371][T11394] netlink: 'syz.1.1599': attribute type 6 has an invalid length. [ 213.217121][T11411] netlink: zone id is out of range [ 213.222928][T11411] netlink: zone id is out of range [ 213.228211][T11411] netlink: zone id is out of range [ 213.233554][T11411] netlink: zone id is out of range [ 213.266788][T11411] netlink: zone id is out of range [ 213.562480][ C1] net_ratelimit: 230 callbacks suppressed [ 213.562499][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 213.620454][T11428] netlink: 'syz.1.1612': attribute type 5 has an invalid length. [ 213.826306][T11443] team0 (unregistering): Port device team_slave_0 removed [ 213.874492][T11443] team0 (unregistering): Port device team_slave_1 removed [ 214.063257][T11455] __nla_validate_parse: 7 callbacks suppressed [ 214.063279][T11455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1618'. [ 214.108995][T11455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1618'. [ 214.186731][T11472] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1624'. [ 214.228420][T11472] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 214.418168][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1627'. [ 214.534267][T11488] IPVS: sync thread started: state = BACKUP, mcast_ifn = erspan0, syncid = 2, id = 0 [ 214.602582][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 214.751348][T11502] sctp: [Deprecated]: syz.0.1635 (pid 11502) Use of int in maxseg socket option. [ 214.751348][T11502] Use struct sctp_assoc_value instead [ 214.760497][T11504] tunl0: entered promiscuous mode [ 214.772441][ T5870] Bluetooth: hci0: command tx timeout [ 214.778633][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'. [ 214.781094][T11504] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1637'. [ 214.831863][T11504] : renamed from hsr0 [ 214.991696][T11513] can: request_module (can-proto-0) failed. [ 215.088643][T11526] openvswitch: netlink: Message has 8 unknown bytes. [ 215.240350][T11533] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 215.298636][T11533] tipc: Resetting bearer [ 215.306071][T11535] syzkaller1: entered promiscuous mode [ 215.311616][T11535] syzkaller1: entered allmulticast mode [ 215.642621][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 215.648930][T11556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1654'. [ 215.783508][T11568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1657'. [ 216.202672][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 216.215924][T11597] validate_nla: 2 callbacks suppressed [ 216.215943][T11597] netlink: 'syz.2.1663': attribute type 23 has an invalid length. [ 216.358412][T11605] netlink: 'syz.4.1668': attribute type 1 has an invalid length. [ 216.415921][T11605] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1668'. [ 216.437274][T11605] netlink: 'syz.4.1668': attribute type 1 has an invalid length. [ 216.452986][T11610] netlink: 'syz.0.1669': attribute type 23 has an invalid length. [ 216.567215][T11620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1672'. [ 216.682609][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 216.794878][T11632] gretap0: entered promiscuous mode [ 216.828702][T11632] 0{X: renamed from gretap0 [ 216.851686][T11632] 0{X: left promiscuous mode [ 216.871151][T11632] 0{X: entered allmulticast mode [ 216.880384][T11632] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 216.951065][T11642] netlink: 'syz.4.1680': attribute type 10 has an invalid length. [ 217.006560][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 217.013076][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 217.013091][ T5880] Bluetooth: hci3: command 0x0406 tx timeout [ 217.548256][T11679] sctp: [Deprecated]: syz.3.1692 (pid 11679) Use of int in max_burst socket option. [ 217.548256][T11679] Use struct sctp_assoc_value instead [ 217.722594][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 217.775679][T11687] geneve3: entered promiscuous mode [ 217.857210][T11693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.931602][T11692] tipc: Invalid UDP bearer configuration [ 217.931661][T11692] tipc: Enabling of bearer rejected, failed to enable media [ 217.986356][T11702] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 218.016402][T11701] syzkaller1: entered promiscuous mode [ 218.022044][T11701] syzkaller1: entered allmulticast mode [ 218.762520][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 218.832301][T11751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.016843][T11761] netlink: 'syz.2.1717': attribute type 29 has an invalid length. [ 219.037491][T11765] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 219.042433][T11761] netlink: 'syz.2.1717': attribute type 29 has an invalid length. [ 219.081563][T11761] __nla_validate_parse: 16 callbacks suppressed [ 219.081584][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 219.095204][T11765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.229559][ T30] audit: type=1107 audit(1755698720.361:4): pid=11767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 219.324379][T11781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 219.449323][T11784] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1723'. [ 219.613115][T11789] sctp: [Deprecated]: syz.4.1725 (pid 11789) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.613115][T11789] Use struct sctp_sack_info instead [ 219.731326][T11804] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1727'. [ 219.802484][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.093943][T11826] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1736'. [ 220.568294][T11859] netlink: 'syz.0.1747': attribute type 12 has an invalid length. [ 220.798397][T11876] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1749'. [ 220.842501][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 220.875158][T11881] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1752'. [ 220.897935][T11881] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1752'. [ 221.040441][T11891] netlink: 'syz.3.1755': attribute type 12 has an invalid length. [ 221.061429][T11884] IPVS: persistence engine module ip_vs_pe_ not found [ 221.246567][T11904] Bluetooth: MGMT ver 1.23 [ 221.307952][T11906] tipc: Enabled bearer , priority 0 [ 221.318648][T11906] syzkaller0: entered promiscuous mode [ 221.326119][T11906] syzkaller0: entered allmulticast mode [ 221.489696][T11911] tipc: Resetting bearer [ 221.530110][T11905] tipc: Resetting bearer [ 221.567772][T11905] tipc: Disabling bearer [ 221.657141][T11926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1764'. [ 221.882583][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 221.919232][T11942] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 221.930856][T11942] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.938773][T11942] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.159745][T11961] tls_set_device_offload: netdev not found [ 222.238923][T11965] veth0_to_team: entered promiscuous mode [ 222.244855][T11965] veth0_to_team: entered allmulticast mode [ 222.305794][T11968] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1773'. [ 222.483224][T11963] netlink: 'syz.4.1771': attribute type 10 has an invalid length. [ 222.505922][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.513215][T11963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.520799][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.528069][T11963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.592268][T11963] bridge0: entered allmulticast mode [ 222.644461][T11963] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 222.782080][T11980] netlink: 'syz.2.1775': attribute type 1 has an invalid length. [ 222.831448][T11987] nbd2: detected capacity change from 0 to 127 [ 222.922484][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 222.944283][T11980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 223.002152][ T5877] block nbd2: Receive control failed (result -32) [ 223.212817][T11999] bond5: (slave veth0_to_bond): making interface the new active one [ 223.224520][T11999] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 223.962526][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 224.442228][T12088] xt_limit: Overflow, try lower: 604147548/4200216962 [ 224.535962][T12094] __nla_validate_parse: 5 callbacks suppressed [ 224.535984][T12094] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1803'. [ 224.768869][T12104] tipc: Enabling of bearer rejected, already enabled [ 224.790017][T12104] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 224.830594][T12111] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1808'. [ 225.002492][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 225.187903][T12130] tipc: New replicast peer: 255.255.255.255 [ 225.198031][T12130] tipc: Enabled bearer , priority 10 [ 225.237872][T12133] batadv_slave_0: entered promiscuous mode [ 225.277716][T12136] tipc: Enabling not permitted [ 225.301198][T12136] tipc: Enabling of bearer rejected, failed to enable media [ 225.312500][T12131] batadv_slave_0: left promiscuous mode [ 225.367498][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1816'. [ 225.375268][T12138] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.394946][T12138] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 225.487956][T12145] FAULT_INJECTION: forcing a failure. [ 225.487956][T12145] name failslab, interval 1, probability 0, space 0, times 0 [ 225.528817][T12145] CPU: 1 UID: 0 PID: 12145 Comm: syz.2.1817 Not tainted syzkaller #0 PREEMPT(full) [ 225.528849][T12145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.528863][T12145] Call Trace: [ 225.528871][T12145] [ 225.528881][T12145] dump_stack_lvl+0x189/0x250 [ 225.528915][T12145] ? __pfx____ratelimit+0x10/0x10 [ 225.528946][T12145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.528972][T12145] ? __pfx__printk+0x10/0x10 [ 225.529010][T12145] ? __pfx___might_resched+0x10/0x10 [ 225.529030][T12145] ? fs_reclaim_acquire+0x7d/0x100 [ 225.529070][T12145] should_fail_ex+0x414/0x560 [ 225.529105][T12145] should_failslab+0xa8/0x100 [ 225.529139][T12145] __kmalloc_cache_noprof+0x70/0x3d0 [ 225.529169][T12145] ? nft_flush_table+0xb0a/0xea0 [ 225.529202][T12145] nft_flush_table+0xb0a/0xea0 [ 225.529237][T12145] nf_tables_deltable+0x5cc/0xe10 [ 225.529267][T12145] ? __pfx_nf_tables_deltable+0x10/0x10 [ 225.529288][T12145] ? nfnl_pernet+0x23/0x240 [ 225.529327][T12145] ? __nla_parse+0x40/0x60 [ 225.529365][T12145] nfnetlink_rcv+0x1132/0x2520 [ 225.529432][T12145] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 225.529479][T12145] ? ref_tracker_free+0x63a/0x7d0 [ 225.529545][T12145] ? __netlink_deliver_tap+0x807/0x850 [ 225.529577][T12145] ? netlink_deliver_tap+0x2e/0x1b0 [ 225.529630][T12145] netlink_unicast+0x82c/0x9e0 [ 225.529670][T12145] ? __pfx_netlink_unicast+0x10/0x10 [ 225.529701][T12145] ? netlink_sendmsg+0x642/0xb30 [ 225.529730][T12145] ? skb_put+0x11b/0x210 [ 225.529775][T12145] netlink_sendmsg+0x805/0xb30 [ 225.529818][T12145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.529858][T12145] ? aa_sock_msg_perm+0xf1/0x1d0 [ 225.529895][T12145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.529918][T12145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.529951][T12145] __sock_sendmsg+0x21c/0x270 [ 225.529982][T12145] ____sys_sendmsg+0x505/0x830 [ 225.530012][T12145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.530045][T12145] ? import_iovec+0x74/0xa0 [ 225.530075][T12145] ___sys_sendmsg+0x21f/0x2a0 [ 225.530100][T12145] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.530167][T12145] ? __fget_files+0x2a/0x420 [ 225.530199][T12145] ? __fget_files+0x3a0/0x420 [ 225.530244][T12145] __x64_sys_sendmsg+0x19b/0x260 [ 225.530270][T12145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.530304][T12145] ? __pfx_ksys_write+0x10/0x10 [ 225.530330][T12145] ? rcu_is_watching+0x15/0xb0 [ 225.530358][T12145] ? do_syscall_64+0xbe/0x3b0 [ 225.530395][T12145] do_syscall_64+0xfa/0x3b0 [ 225.530424][T12145] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.530453][T12145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.530475][T12145] ? clear_bhb_loop+0x60/0xb0 [ 225.530502][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.530523][T12145] RIP: 0033:0x7fdbfb98ebe9 [ 225.530544][T12145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.530563][T12145] RSP: 002b:00007fdbfc7e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.530586][T12145] RAX: ffffffffffffffda RBX: 00007fdbfbbb5fa0 RCX: 00007fdbfb98ebe9 [ 225.530602][T12145] RDX: 0000000000008054 RSI: 0000200000000100 RDI: 0000000000000004 [ 225.530616][T12145] RBP: 00007fdbfc7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 225.530630][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 225.530643][T12145] R13: 00007fdbfbbb6038 R14: 00007fdbfbbb5fa0 R15: 00007ffc639dbdf8 [ 225.530680][T12145] [ 225.905918][T12151] delete_channel: no stack [ 226.042570][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 226.060110][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1824'. [ 226.554689][T12196] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1833'. [ 226.623238][T12196] vlan5: entered allmulticast mode [ 226.638448][T12196] gretap0: entered allmulticast mode [ 226.856536][T12207] FAULT_INJECTION: forcing a failure. [ 226.856536][T12207] name failslab, interval 1, probability 0, space 0, times 0 [ 226.918042][T12207] CPU: 1 UID: 0 PID: 12207 Comm: syz.3.1837 Not tainted syzkaller #0 PREEMPT(full) [ 226.918074][T12207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.918086][T12207] Call Trace: [ 226.918095][T12207] [ 226.918104][T12207] dump_stack_lvl+0x189/0x250 [ 226.918135][T12207] ? __pfx____ratelimit+0x10/0x10 [ 226.918165][T12207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.918191][T12207] ? __pfx__printk+0x10/0x10 [ 226.918229][T12207] ? __pfx___might_resched+0x10/0x10 [ 226.918249][T12207] ? fs_reclaim_acquire+0x7d/0x100 [ 226.918288][T12207] should_fail_ex+0x414/0x560 [ 226.918324][T12207] should_failslab+0xa8/0x100 [ 226.918357][T12207] __kmalloc_cache_noprof+0x70/0x3d0 [ 226.918386][T12207] ? nf_tables_commit+0x79d/0x8700 [ 226.918414][T12207] nf_tables_commit+0x79d/0x8700 [ 226.918440][T12207] ? __lock_acquire+0xab9/0xd20 [ 226.918493][T12207] ? __pfx_nf_tables_commit+0x10/0x10 [ 226.918512][T12207] ? nft_pernet+0x23/0x240 [ 226.918535][T12207] ? nft_pernet+0x23/0x240 [ 226.918556][T12207] ? nft_pernet+0x23/0x240 [ 226.918586][T12207] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 226.918617][T12207] ? nft_flush_table+0xd06/0xea0 [ 226.918672][T12207] ? nf_tables_deltable+0x674/0xe10 [ 226.918701][T12207] ? __pfx_nf_tables_deltable+0x10/0x10 [ 226.918750][T12207] nfnetlink_rcv+0x1a4b/0x2520 [ 226.918815][T12207] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 226.918858][T12207] ? ref_tracker_free+0x63a/0x7d0 [ 226.918920][T12207] ? __netlink_deliver_tap+0x807/0x850 [ 226.918952][T12207] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.919003][T12207] netlink_unicast+0x82c/0x9e0 [ 226.919040][T12207] ? __pfx_netlink_unicast+0x10/0x10 [ 226.919070][T12207] ? netlink_sendmsg+0x642/0xb30 [ 226.919097][T12207] ? skb_put+0x11b/0x210 [ 226.919134][T12207] netlink_sendmsg+0x805/0xb30 [ 226.919174][T12207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.919208][T12207] ? aa_sock_msg_perm+0xf1/0x1d0 [ 226.919241][T12207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.919264][T12207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.919295][T12207] __sock_sendmsg+0x21c/0x270 [ 226.919326][T12207] ____sys_sendmsg+0x505/0x830 [ 226.919353][T12207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.919386][T12207] ? import_iovec+0x74/0xa0 [ 226.919414][T12207] ___sys_sendmsg+0x21f/0x2a0 [ 226.919438][T12207] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.919502][T12207] ? __fget_files+0x2a/0x420 [ 226.919532][T12207] ? __fget_files+0x3a0/0x420 [ 226.919575][T12207] __x64_sys_sendmsg+0x19b/0x260 [ 226.919600][T12207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.919633][T12207] ? __pfx_ksys_write+0x10/0x10 [ 226.919664][T12207] ? rcu_is_watching+0x15/0xb0 [ 226.919691][T12207] ? do_syscall_64+0xbe/0x3b0 [ 226.919726][T12207] do_syscall_64+0xfa/0x3b0 [ 226.919753][T12207] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.919780][T12207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.919801][T12207] ? clear_bhb_loop+0x60/0xb0 [ 226.919827][T12207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.919847][T12207] RIP: 0033:0x7f4e2678ebe9 [ 226.919865][T12207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.919883][T12207] RSP: 002b:00007f4e275ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.919905][T12207] RAX: ffffffffffffffda RBX: 00007f4e269b5fa0 RCX: 00007f4e2678ebe9 [ 226.919921][T12207] RDX: 0000000000008054 RSI: 0000200000000100 RDI: 0000000000000004 [ 226.919934][T12207] RBP: 00007f4e275ae090 R08: 0000000000000000 R09: 0000000000000000 [ 226.919946][T12207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 226.919958][T12207] R13: 00007f4e269b6038 R14: 00007f4e269b5fa0 R15: 00007ffcd30ef758 [ 226.919993][T12207] [ 227.283920][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 227.315932][T12219] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1841'. [ 227.659205][T12234] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1847'. [ 227.792052][T12240] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 227.896436][T12244] netlink: 'syz.0.1850': attribute type 24 has an invalid length. [ 228.246102][T12272] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1860'. [ 228.362961][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.267615][T12327] netlink: 'syz.3.1875': attribute type 11 has an invalid length. [ 229.280411][T12327] netlink: 'syz.3.1875': attribute type 11 has an invalid length. [ 229.311744][T12327] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1875'. [ 229.403001][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.451843][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1879'. [ 229.502155][T12332] bond0: entered promiscuous mode [ 229.509425][T12332] bond_slave_0: entered promiscuous mode [ 229.531256][T12332] bond_slave_1: entered promiscuous mode [ 229.544635][T12332] bridge0: entered promiscuous mode [ 229.561283][T12332] bond0: left promiscuous mode [ 229.576560][T12332] bond_slave_0: left promiscuous mode [ 229.592914][T12332] bond_slave_1: left promiscuous mode [ 229.608999][T12332] bridge0: left promiscuous mode [ 229.639696][T12342] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1880'. [ 229.887563][T12348] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1882'. [ 229.991275][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1885'. [ 230.113517][T12363] C: renamed from team_slave_0 (while UP) [ 230.150945][T12363] netlink: 'syz.3.1887': attribute type 1 has an invalid length. [ 230.173251][T12367] netlink: 'syz.4.1888': attribute type 2 has an invalid length. [ 230.357419][T12377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1892'. [ 230.364689][T12363] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 230.392752][T12378] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 230.442656][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 230.461431][T12377] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1892'. [ 230.466273][T12379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1891'. [ 230.637874][T12387] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1893'. [ 230.911012][T12411] syzkaller1: entered promiscuous mode [ 230.922963][T12411] syzkaller1: entered allmulticast mode [ 231.138466][T12429] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1908'. [ 231.309867][T12442] tipc: Enabled bearer , priority 0 [ 231.428775][T12442] syzkaller0: entered promiscuous mode [ 231.436879][T12442] syzkaller0: entered allmulticast mode [ 231.462311][T12447] tipc: Resetting bearer [ 231.476064][T12450] netlink: 'syz.3.1915': attribute type 14 has an invalid length. [ 231.483091][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 231.525405][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1913'. [ 231.564660][T12452] sctp: [Deprecated]: syz.2.1916 (pid 12452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.564660][T12452] Use struct sctp_sack_info instead [ 231.951239][T12465] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 231.961751][T12465] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1920'. [ 232.522510][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 232.985920][T12440] tipc: Resetting bearer [ 233.036936][T12440] tipc: Disabling bearer [ 233.081241][T12480] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 233.469156][T12496] netlink: 'syz.0.1932': attribute type 1 has an invalid length. [ 233.563067][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.632207][T12506] netlink: 'syz.4.1933': attribute type 9 has an invalid length. [ 233.769617][T12512] netlink: 'syz.1.1935': attribute type 1 has an invalid length. [ 233.878915][T12481] lec:lec_atm_close: lec0: Shut down! [ 234.446675][T12543] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 234.602685][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 234.628801][T12563] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 234.670645][T12563] __nla_validate_parse: 6 callbacks suppressed [ 234.670666][T12563] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1953'. [ 234.873695][T12580] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1958'. [ 235.038581][T12593] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 235.070165][T12595] netlink: 'syz.2.1965': attribute type 1 has an invalid length. [ 235.079254][T12595] netlink: 'syz.2.1965': attribute type 3 has an invalid length. [ 235.101006][T12593] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 235.124070][T12595] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1965'. [ 235.161435][T12599] netlink: 'syz.1.1964': attribute type 2 has an invalid length. [ 235.190866][T12595] NCSI netlink: No device for ifindex 0 [ 235.206966][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'. [ 235.261129][T12604] pim6reg1: entered promiscuous mode [ 235.266610][T12604] pim6reg1: entered allmulticast mode [ 235.342317][T12610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1968'. [ 235.416571][T12613] FAULT_INJECTION: forcing a failure. [ 235.416571][T12613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.441701][T12613] CPU: 0 UID: 0 PID: 12613 Comm: syz.2.1969 Not tainted syzkaller #0 PREEMPT(full) [ 235.441736][T12613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.441750][T12613] Call Trace: [ 235.441760][T12613] [ 235.441770][T12613] dump_stack_lvl+0x189/0x250 [ 235.441802][T12613] ? __pfx____ratelimit+0x10/0x10 [ 235.441833][T12613] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.441859][T12613] ? __pfx__printk+0x10/0x10 [ 235.441890][T12613] ? __might_fault+0xb0/0x130 [ 235.441933][T12613] should_fail_ex+0x414/0x560 [ 235.441968][T12613] _copy_from_user+0x2d/0xb0 [ 235.441995][T12613] kstrtouint_from_user+0xc4/0x170 [ 235.442031][T12613] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 235.442084][T12613] proc_fail_nth_write+0x88/0x200 [ 235.442110][T12613] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 235.442142][T12613] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 235.442170][T12613] vfs_write+0x27b/0xb30 [ 235.442210][T12613] ? __pfx_vfs_write+0x10/0x10 [ 235.442241][T12613] ? __fget_files+0x2a/0x420 [ 235.442279][T12613] ? __fget_files+0x3a0/0x420 [ 235.442310][T12613] ? __fget_files+0x2a/0x420 [ 235.442353][T12613] ksys_write+0x145/0x250 [ 235.442397][T12613] ? __pfx_ksys_write+0x10/0x10 [ 235.442424][T12613] ? rcu_is_watching+0x15/0xb0 [ 235.442452][T12613] ? do_syscall_64+0xbe/0x3b0 [ 235.442499][T12613] do_syscall_64+0xfa/0x3b0 [ 235.442527][T12613] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.442555][T12613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.442576][T12613] ? clear_bhb_loop+0x60/0xb0 [ 235.442620][T12613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.442641][T12613] RIP: 0033:0x7fdbfb98d69f [ 235.442661][T12613] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 235.442681][T12613] RSP: 002b:00007fdbfc7e3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 235.442705][T12613] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdbfb98d69f [ 235.442721][T12613] RDX: 0000000000000001 RSI: 00007fdbfc7e30a0 RDI: 0000000000000004 [ 235.442735][T12613] RBP: 00007fdbfc7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 235.442750][T12613] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 235.442763][T12613] R13: 00007fdbfbbb6038 R14: 00007fdbfbbb5fa0 R15: 00007ffc639dbdf8 [ 235.442800][T12613] [ 235.643113][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 235.686737][T12617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1971'. [ 235.791622][T12624] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1972'. [ 235.809904][T12626] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1972'. [ 235.832223][T12625] tipc: Enabled bearer , priority 0 [ 235.849987][T12627] syzkaller0: entered promiscuous mode [ 235.855811][T12627] syzkaller0: entered allmulticast mode [ 235.866442][T12629] openvswitch: netlink: IPv6 tunnel dst address is zero [ 235.954745][T12632] tipc: Resetting bearer [ 235.995413][T12638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1976'. [ 236.009118][T12623] tipc: Resetting bearer [ 236.017264][T12638] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1976'. [ 236.097693][T12623] tipc: Disabling bearer [ 236.682569][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 236.757314][ T1324] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 236.801548][T12691] bridge0: port 3(vlan2) entered blocking state [ 236.826533][T12691] bridge0: port 3(vlan2) entered disabled state [ 236.869648][T12691] vlan2: entered allmulticast mode [ 236.884464][T12691] bridge0: entered allmulticast mode [ 236.906043][T12691] vlan2: left allmulticast mode [ 236.930416][T12691] bridge0: left allmulticast mode [ 237.210344][T12718] FAULT_INJECTION: forcing a failure. [ 237.210344][T12718] name failslab, interval 1, probability 0, space 0, times 0 [ 237.226783][T12718] CPU: 0 UID: 0 PID: 12718 Comm: syz.1.2000 Not tainted syzkaller #0 PREEMPT(full) [ 237.226813][T12718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.226827][T12718] Call Trace: [ 237.226835][T12718] [ 237.226844][T12718] dump_stack_lvl+0x189/0x250 [ 237.226875][T12718] ? __pfx____ratelimit+0x10/0x10 [ 237.226905][T12718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.226932][T12718] ? __pfx__printk+0x10/0x10 [ 237.226965][T12718] ? __pfx___might_resched+0x10/0x10 [ 237.226985][T12718] ? fs_reclaim_acquire+0x7d/0x100 [ 237.227024][T12718] should_fail_ex+0x414/0x560 [ 237.227059][T12718] should_failslab+0xa8/0x100 [ 237.227092][T12718] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 237.227122][T12718] ? __alloc_skb+0x112/0x2d0 [ 237.227159][T12718] __alloc_skb+0x112/0x2d0 [ 237.227195][T12718] nf_tables_table_notify+0xa1/0x470 [ 237.227239][T12718] nf_tables_commit+0x2167/0x8700 [ 237.227300][T12718] ? __pfx_nf_tables_commit+0x10/0x10 [ 237.227318][T12718] ? nft_pernet+0x23/0x240 [ 237.227340][T12718] ? nft_pernet+0x23/0x240 [ 237.227360][T12718] ? nft_pernet+0x23/0x240 [ 237.227409][T12718] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 237.227441][T12718] ? nft_flush_table+0xd06/0xea0 [ 237.227476][T12718] ? nf_tables_deltable+0x674/0xe10 [ 237.227506][T12718] ? __pfx_nf_tables_deltable+0x10/0x10 [ 237.227552][T12718] nfnetlink_rcv+0x1a4b/0x2520 [ 237.227620][T12718] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 237.227669][T12718] ? ref_tracker_free+0x63a/0x7d0 [ 237.227735][T12718] ? __netlink_deliver_tap+0x807/0x850 [ 237.227767][T12718] ? netlink_deliver_tap+0x2e/0x1b0 [ 237.227821][T12718] netlink_unicast+0x82c/0x9e0 [ 237.227861][T12718] ? __pfx_netlink_unicast+0x10/0x10 [ 237.227893][T12718] ? netlink_sendmsg+0x642/0xb30 [ 237.227923][T12718] ? skb_put+0x11b/0x210 [ 237.227960][T12718] netlink_sendmsg+0x805/0xb30 [ 237.228005][T12718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.228042][T12718] ? aa_sock_msg_perm+0xf1/0x1d0 [ 237.228078][T12718] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.228102][T12718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.228135][T12718] __sock_sendmsg+0x21c/0x270 [ 237.228167][T12718] ____sys_sendmsg+0x505/0x830 [ 237.228196][T12718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.228230][T12718] ? import_iovec+0x74/0xa0 [ 237.228267][T12718] ___sys_sendmsg+0x21f/0x2a0 [ 237.228292][T12718] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.228356][T12718] ? __fget_files+0x2a/0x420 [ 237.228386][T12718] ? __fget_files+0x3a0/0x420 [ 237.228434][T12718] __x64_sys_sendmsg+0x19b/0x260 [ 237.228460][T12718] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.228493][T12718] ? __pfx_ksys_write+0x10/0x10 [ 237.228529][T12718] ? do_syscall_64+0xbe/0x3b0 [ 237.228565][T12718] do_syscall_64+0xfa/0x3b0 [ 237.228593][T12718] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.228622][T12718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.228643][T12718] ? clear_bhb_loop+0x60/0xb0 [ 237.228671][T12718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.228692][T12718] RIP: 0033:0x7fa07d98ebe9 [ 237.228723][T12718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.228741][T12718] RSP: 002b:00007fa07e81c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.228763][T12718] RAX: ffffffffffffffda RBX: 00007fa07dbb5fa0 RCX: 00007fa07d98ebe9 [ 237.228796][T12718] RDX: 0000000000008054 RSI: 0000200000000100 RDI: 0000000000000004 [ 237.228808][T12718] RBP: 00007fa07e81c090 R08: 0000000000000000 R09: 0000000000000000 [ 237.228818][T12718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.228828][T12718] R13: 00007fa07dbb6038 R14: 00007fa07dbb5fa0 R15: 00007fff20c64d18 [ 237.228856][T12718] [ 237.727577][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 238.626208][ T3511] bond0: (slave bridge_slave_1): link status definitely down, disabling slave [ 238.763692][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 238.830180][T12784] netlink: 'syz.4.2023': attribute type 4 has an invalid length. [ 238.870608][T12798] netlink: 'syz.1.2029': attribute type 1 has an invalid length. [ 239.803598][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.096986][T12855] __nla_validate_parse: 15 callbacks suppressed [ 240.097010][T12855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2042'. [ 240.128376][T12861] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2046'. [ 240.160920][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2046'. [ 240.316569][T12870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2049'. [ 240.335725][T12870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2049'. [ 240.674437][T12894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2056'. [ 240.683616][T12895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2056'. [ 240.713554][T12897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2055'. [ 240.822960][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2056'. [ 240.842538][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.985496][T12905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2059'. [ 241.882845][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 242.148684][T12969] netlink: 'syz.4.2076': attribute type 1 has an invalid length. [ 242.232767][T12981] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 242.931593][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 243.279097][T13019] tipc: Enabled bearer , priority 24 [ 243.282675][T13022] delete_channel: no stack [ 243.726956][T13044] tipc: Enabling of bearer rejected, failed to enable media [ 243.962982][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 244.008820][T13048] nbd3: detected capacity change from 0 to 127 [ 244.044965][ T5877] block nbd3: Receive control failed (result -32) [ 244.171002][T13064] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 244.729653][T13107] netlink: 'syz.1.2114': attribute type 10 has an invalid length. [ 244.742834][T13107] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 244.969721][T13068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.002705][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 245.350570][T13132] __nla_validate_parse: 15 callbacks suppressed [ 245.350591][T13132] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2124'. [ 245.399708][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2125'. [ 245.436821][T13135] netlink: 'syz.2.2125': attribute type 1 has an invalid length. [ 245.445621][T13135] netlink: 'syz.2.2125': attribute type 1 has an invalid length. [ 245.747569][T13155] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2132'. [ 245.986898][T13172] team_slave_0: entered allmulticast mode [ 246.042918][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 246.244011][T13184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2142'. [ 246.267676][T13184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2142'. [ 246.316090][T13186] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2143'. [ 246.461277][T13190] netlink: 'syz.0.2145': attribute type 10 has an invalid length. [ 246.476467][T13193] netlink: 'syz.1.2146': attribute type 58 has an invalid length. [ 246.488789][T13193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2146'. [ 246.536989][T13195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2146'. [ 246.972356][T13209] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2151'. [ 247.048925][T13215] netlink: 'syz.4.2149': attribute type 21 has an invalid length. [ 247.082694][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 247.390643][T13233] netlink: 'syz.2.2158': attribute type 17 has an invalid length. [ 247.412686][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2158'. [ 247.452274][T13233] gretap0: entered promiscuous mode [ 247.510870][T13233] gretap0: left promiscuous mode [ 248.120823][T13278] tipc: Trying to set illegal importance in message [ 248.123195][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 248.510583][T13302] sctp: [Deprecated]: syz.1.2179 (pid 13302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.510583][T13302] Use struct sctp_sack_info instead [ 249.080526][T13332] netlink: 'syz.1.2190': attribute type 2 has an invalid length. [ 249.120018][T13332] nbd: must specify a device to reconfigure [ 249.162503][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 249.309436][T13331] delete_channel: no stack [ 249.994871][T13386] netlink: 'syz.2.2203': attribute type 15 has an invalid length. [ 250.188071][T13395] netlink: 'syz.3.2207': attribute type 39 has an invalid length. [ 250.203126][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 250.651076][T13423] netlink: 'syz.3.2215': attribute type 12 has an invalid length. [ 250.677003][T13423] __nla_validate_parse: 11 callbacks suppressed [ 250.677027][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 250.704060][T13426] tipc: Enabling of bearer rejected, already enabled [ 250.730303][T13423] netlink: 'syz.3.2215': attribute type 12 has an invalid length. [ 250.779399][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 250.860952][T13429] tls_set_device_offload: netdev not found [ 251.100186][ T3511] tipc: Resetting bearer [ 251.242581][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 251.367276][T13457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 251.597429][T13479] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2230'. [ 251.966870][T13513] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20002 [ 252.063221][T13517] netlink: 'syz.4.2236': attribute type 1 has an invalid length. [ 252.152531][T13521] netlink: 'syz.2.2237': attribute type 9 has an invalid length. [ 252.283245][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 252.585114][T13553] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 252.868380][T13572] netlink: 'syz.2.2254': attribute type 1 has an invalid length. [ 252.901057][T13572] netlink: 'syz.2.2254': attribute type 3 has an invalid length. [ 252.941441][T13572] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2254'. [ 252.954818][T13572] NCSI netlink: No device for ifindex 0 [ 253.144299][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2259'. [ 253.322737][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 253.595478][T13628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2268'. [ 253.647871][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2273'. [ 253.689738][T13635] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2271'. [ 253.945585][T13660] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2278'. [ 254.215884][T13676] netlink: 'syz.2.2283': attribute type 21 has an invalid length. [ 254.229705][T13676] netlink: 'syz.2.2283': attribute type 1 has an invalid length. [ 254.363009][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 254.396216][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2286'. [ 254.422348][T13686] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 254.431364][T13686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.486898][T13686] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 254.503809][T13686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.296767][T13753] tipc: Enabled bearer , priority 0 [ 255.305707][T13753] syzkaller0: entered promiscuous mode [ 255.311805][T13753] syzkaller0: entered allmulticast mode [ 255.402596][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 255.439726][T13763] tipc: Resetting bearer [ 255.530092][T13763] tipc: Disabling bearer [ 255.559079][T13767] sctp: [Deprecated]: syz.1.2310 (pid 13767) Use of int in max_burst socket option. [ 255.559079][T13767] Use struct sctp_assoc_value instead [ 255.947743][T13782] __nla_validate_parse: 9 callbacks suppressed [ 255.947766][T13782] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2314'. [ 255.977940][T13785] netlink: 'syz.2.2315': attribute type 1 has an invalid length. [ 256.329316][T13798] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.429850][T13804] netlink: 'syz.3.2322': attribute type 11 has an invalid length. [ 256.443163][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 256.461614][T13804] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2322'. [ 256.671213][T13821] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 26:8c:b8:9e:14:f0 [ 256.897025][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2330'. [ 257.038878][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2334'. [ 257.134101][T13851] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2336'. [ 257.302033][T13854] syzkaller1: entered promiscuous mode [ 257.308336][T13854] syzkaller1: entered allmulticast mode [ 257.321404][T13854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2338'. [ 257.389196][T13859] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 257.417540][T13859] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 257.482497][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 257.554266][T13873] tipc: Enabling of bearer rejected, already enabled [ 257.574310][T13873] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 257.584218][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2344'. [ 257.585939][T13873] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 257.595084][T13874] netlink: 'syz.3.2344': attribute type 1 has an invalid length. [ 257.628460][T13874] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2344'. [ 257.863105][T13893] netlink: 'syz.1.2350': attribute type 1 has an invalid length. [ 257.929842][T13896] netlink: 'syz.0.2353': attribute type 10 has an invalid length. [ 257.959275][T13893] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.014863][T13904] nbd: must specify a device to reconfigure [ 258.035066][T13907] netlink: 'syz.4.2356': attribute type 11 has an invalid length. [ 258.039250][T13889] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.050969][T13889] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 258.064409][T13889] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 258.088782][T13902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.523024][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 258.576923][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2363'. [ 258.599384][T13940] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 258.730210][T13944] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2366'. [ 258.994891][T13961] netlink: 'syz.1.2370': attribute type 1 has an invalid length. [ 259.011053][T13961] netlink: 'syz.1.2370': attribute type 1 has an invalid length. [ 259.031436][T13965] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 259.074558][T13961] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 259.178341][T13978] tipc: Enabling of bearer rejected, already enabled [ 259.562601][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 259.941769][T14019] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 260.602989][ C1] net_ratelimit: 1 callbacks suppressed [ 260.603011][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 261.103852][T14069] __nla_validate_parse: 6 callbacks suppressed [ 261.103874][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2401'. [ 261.133122][T14075] bond6: entered promiscuous mode [ 261.138219][T14075] bond6: entered allmulticast mode [ 261.143992][T14075] 8021q: adding VLAN 0 to HW filter on device bond6 [ 261.593074][T14096] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2411'. [ 261.642753][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.238861][T14145] netlink: 'syz.0.2422': attribute type 39 has an invalid length. [ 262.305321][T14149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2424'. [ 262.385074][T14152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2422'. [ 262.622156][T14165] bond0: (slave bridge_slave_1): Releasing backup interface [ 262.645646][T14170] syz.3.2432: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 262.683237][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 262.706127][T14170] CPU: 1 UID: 0 PID: 14170 Comm: syz.3.2432 Not tainted syzkaller #0 PREEMPT(full) [ 262.706159][T14170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.706185][T14170] Call Trace: [ 262.706194][T14170] [ 262.706204][T14170] dump_stack_lvl+0x189/0x250 [ 262.706240][T14170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.706267][T14170] ? __pfx__printk+0x10/0x10 [ 262.706298][T14170] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 262.706324][T14170] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 262.706354][T14170] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 262.706383][T14170] warn_alloc+0x214/0x310 [ 262.706425][T14170] ? __pfx_warn_alloc+0x10/0x10 [ 262.706469][T14170] ? __get_vm_area_node+0x28f/0x300 [ 262.706505][T14170] ? packet_set_ring+0x6f4/0x2350 [ 262.706535][T14170] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 262.706604][T14170] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 262.706638][T14170] ? alloc_pages_mpol+0x3cd/0x4a0 [ 262.706672][T14170] ? packet_set_ring+0x6f4/0x2350 [ 262.706697][T14170] vzalloc_noprof+0xb2/0xf0 [ 262.706728][T14170] ? packet_set_ring+0x6f4/0x2350 [ 262.706763][T14170] packet_set_ring+0x6f4/0x2350 [ 262.706824][T14170] ? __pfx_packet_set_ring+0x10/0x10 [ 262.706871][T14170] ? _copy_from_user+0x94/0xb0 [ 262.706903][T14170] packet_setsockopt+0xc5a/0x12c0 [ 262.706932][T14170] ? __pfx_packet_setsockopt+0x10/0x10 [ 262.706962][T14170] ? __lock_acquire+0xab9/0xd20 [ 262.707000][T14170] ? aa_sk_perm+0x81e/0x950 [ 262.707039][T14170] ? __pfx_aa_sk_perm+0x10/0x10 [ 262.707073][T14170] ? __fget_files+0x2a/0x420 [ 262.707102][T14170] ? aa_sock_opt_perm+0xff/0x1b0 [ 262.707124][T14170] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 262.707149][T14170] ? __pfx_packet_setsockopt+0x10/0x10 [ 262.707174][T14170] do_sock_setsockopt+0x17c/0x1b0 [ 262.707214][T14170] __x64_sys_setsockopt+0x13f/0x1b0 [ 262.707243][T14170] do_syscall_64+0xfa/0x3b0 [ 262.707272][T14170] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.707301][T14170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.707323][T14170] ? clear_bhb_loop+0x60/0xb0 [ 262.707350][T14170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.707370][T14170] RIP: 0033:0x7f4e2678ebe9 [ 262.707390][T14170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.707410][T14170] RSP: 002b:00007f4e275ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 262.707433][T14170] RAX: ffffffffffffffda RBX: 00007f4e269b5fa0 RCX: 00007f4e2678ebe9 [ 262.707449][T14170] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003 [ 262.707462][T14170] RBP: 00007f4e26811e19 R08: 000000000000001c R09: 0000000000000000 [ 262.707476][T14170] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 262.707489][T14170] R13: 00007f4e269b6038 R14: 00007f4e269b5fa0 R15: 00007ffcd30ef758 [ 262.707525][T14170] [ 262.709851][T14170] Mem-Info: [ 262.714522][T14165] bridge_slave_1: left allmulticast mode [ 262.737991][T14170] active_anon:4480 inactive_anon:0 isolated_anon:0 [ 262.737991][T14170] active_file:3149 inactive_file:39898 isolated_file:0 [ 262.737991][T14170] unevictable:1393 dirty:61 writeback:0 [ 262.737991][T14170] slab_reclaimable:11773 slab_unreclaimable:107059 [ 262.737991][T14170] mapped:29830 shmem:2002 pagetables:1080 [ 262.737991][T14170] sec_pagetables:0 bounce:0 [ 262.737991][T14170] kernel_misc_reclaimable:0 [ 262.737991][T14170] free:1319647 free_pcp:15070 free_cma:0 [ 262.939133][T14179] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2433'. [ 262.957154][T14170] Node 0 active_anon:17920kB inactive_anon:0kB active_file:12596kB inactive_file:159388kB unevictable:6536kB isolated(anon):0kB isolated(file):0kB mapped:121820kB dirty:244kB writeback:0kB shmem:8972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12700kB pagetables:4288kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 263.130949][T14170] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 263.163469][T14165] bond5: (slave veth0_to_bond): Releasing active interface [ 263.171124][T14170] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 263.202224][T14170] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 263.208254][T14170] Node 0 DMA32 free:1292776kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17936kB inactive_anon:0kB active_file:12596kB inactive_file:157824kB unevictable:8384kB writepending:340kB present:3129332kB managed:2557476kB mlocked:6972kB bounce:0kB free_pcp:39416kB local_pcp:22560kB free_cma:0kB [ 263.283396][T14165] bond0: (slave bond_slave_0): Releasing backup interface [ 263.304143][T14165] bond_slave_0: left allmulticast mode [ 263.312920][T14170] lowmem_reserve[]: 0 0 1 1 1 [ 263.317746][T14170] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 263.371301][T14170] lowmem_reserve[]: 0 0 0 0 0 [ 263.376460][T14165] team0: Port device team_slave_0 removed [ 263.380753][T14170] Node 1 Normal free:3896988kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17300kB local_pcp:10736kB free_cma:0kB [ 263.446698][T14165] team0: Port device team_slave_1 removed [ 263.455966][T14165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.475286][T14165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.489100][T14170] lowmem_reserve[]: 0 0 0 0 0 [ 263.510941][T14170] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 263.564876][T14170] Node 0 DMA32: 118*4kB (ME) 216*8kB (ME) 209*16kB (UME) 6*32kB (UME) 4*64kB (ME) 7*128kB (UME) 3*256kB (M) 4*512kB (UM) 3*1024kB (UM) 5*2048kB (UM) 310*4096kB (M) = 1292776kB [ 263.670698][T14170] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 263.712494][T14170] Node 1 Normal: 175*4kB (U) 54*8kB (UME) 49*16kB (UME) 81*32kB (UME) 26*64kB (UME) 9*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3896988kB [ 263.730845][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 263.789904][T14170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 263.813892][T14170] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 263.842704][T14170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 263.866173][T14170] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 263.883159][T14170] 44438 total pagecache pages [ 263.891655][T14170] 0 pages in swap cache [ 263.899095][T14170] Free swap = 124996kB [ 263.903492][T14170] Total swap = 124996kB [ 263.907677][T14170] 2097051 pages RAM [ 263.916022][T14170] 0 pages HighMem/MovableOnly [ 263.920744][T14170] 425656 pages reserved [ 263.926121][T14170] 0 pages cma reserved [ 264.102121][T14193] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2438'. [ 264.186761][T14193] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2438'. [ 264.199671][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2438'. [ 264.239374][T14193] veth9: entered allmulticast mode [ 264.252341][T14204] sctp: [Deprecated]: syz.3.2440 (pid 14204) Use of int in maxseg socket option. [ 264.252341][T14204] Use struct sctp_assoc_value instead [ 264.582145][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2445'. [ 264.610611][T14217] netlink: 340 bytes leftover after parsing attributes in process `syz.4.2444'. [ 264.649267][T14219] : entered promiscuous mode [ 264.681290][T14214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.703805][T14214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.738829][T14214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.763026][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.767011][T14214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.803686][T14225] netlink: 'syz.2.2449': attribute type 7 has an invalid length. [ 264.977451][T14232] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 264.996223][T14232] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 265.382302][T14259] netlink: 'syz.2.2457': attribute type 11 has an invalid length. [ 265.802510][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 265.994422][T14289] IPv6: sit1: Disabled Multicast RS [ 266.001035][T14289] sit1: entered allmulticast mode [ 266.120183][T14295] __nla_validate_parse: 4 callbacks suppressed [ 266.120204][T14295] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2468'. [ 266.312863][T14304] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2470'. [ 266.331369][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2471'. [ 266.354574][T14308] bridge7: entered promiscuous mode [ 266.360049][T14308] bridge7: entered allmulticast mode [ 266.387441][T14304] bridge8: entered promiscuous mode [ 266.394094][T14304] bridge8: entered allmulticast mode [ 266.405526][T14311] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2472'. [ 266.779741][T14327] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 266.814160][T14328] syzkaller0: entered promiscuous mode [ 266.838751][T14328] syzkaller0: entered allmulticast mode [ 266.844972][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 267.247256][T14358] ip6tnl0: mtu less than device minimum [ 267.329380][T14361] netlink: 5536 bytes leftover after parsing attributes in process `syz.3.2484'. [ 267.631504][T14381] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2492'. [ 267.654732][T14380] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2490'. [ 267.825746][T14381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.836012][T14381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.848051][T14397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2494'. [ 267.859885][T14381] bond0 (unregistering): Released all slaves [ 267.882645][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 268.118226][T14411] netlink: 'syz.1.2497': attribute type 4 has an invalid length. [ 268.257700][T14423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2502'. [ 268.518361][T14439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 268.646560][T14445] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2509'. [ 268.839588][T13579] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.866089][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.876603][T13579] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 268.923059][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 269.173349][ T5960] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.181701][T14465] hsr_slave_1 (unregistering): left promiscuous mode [ 269.385295][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.421321][T14485] syzkaller1: entered promiscuous mode [ 269.435169][T14485] syzkaller1: entered allmulticast mode [ 269.454349][T14488] netlink: 'syz.1.2524': attribute type 1 has an invalid length. [ 269.487985][T14488] bond7: entered promiscuous mode [ 269.493692][T14488] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.537415][T14491] 8021q: adding VLAN 0 to HW filter on device bond7 [ 269.545598][T14491] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 269.556449][T14491] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 269.572330][T14491] bond7: (slave wireguard0): making interface the new active one [ 269.590595][T14491] wireguard0: entered promiscuous mode [ 269.602710][T14491] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 269.797832][T14510] bond6: entered allmulticast mode [ 269.816578][T14510] 8021q: adding VLAN 0 to HW filter on device bond6 [ 269.825202][T14510] bridge0: port 3(bond6) entered blocking state [ 269.831644][T14510] bridge0: port 3(bond6) entered disabled state [ 269.843558][T14510] bond6: entered promiscuous mode [ 269.849199][T14510] bridge0: port 3(bond6) entered blocking state [ 269.855686][T14510] bridge0: port 3(bond6) entered forwarding state [ 269.947036][T13586] bridge0: port 3(bond6) entered disabled state [ 269.962618][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 270.449985][T14544] netlink: 'syz.4.2540': attribute type 11 has an invalid length. [ 271.003121][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 271.242645][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 271.468289][T14608] __nla_validate_parse: 14 callbacks suppressed [ 271.468310][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2557'. [ 271.484758][T14606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2560'. [ 271.535096][T14608] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2557'. [ 271.610382][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2562'. [ 272.042483][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 272.286836][T14648] vlan2: entered promiscuous mode [ 272.325836][T14648] bridge0: entered promiscuous mode [ 272.508163][T14657] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2577'. [ 272.511819][T14660] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2578'. [ 272.540026][T14663] tipc: Enabling of bearer rejected, failed to enable media [ 272.541933][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'. [ 272.561505][T14667] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 272.901670][T14690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.038027][T14695] netlink: 'syz.4.2589': attribute type 10 has an invalid length. [ 273.039655][T14697] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 273.066388][T14697] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.2590'. [ 273.082948][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 273.137649][T14701] netlink: 'syz.0.2592': attribute type 1 has an invalid length. [ 273.242982][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 273.393665][T14715] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2598'. [ 273.428950][T14715] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2598'. [ 273.460029][T14715] veth0_to_team: entered promiscuous mode [ 273.466665][T14715] veth0_to_team: entered allmulticast mode [ 273.851454][T14747] veth0: entered promiscuous mode [ 273.932710][T14746] veth0: left promiscuous mode [ 274.122518][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 274.417840][T14784] openvswitch: netlink: Flow actions attr not present in new flow. [ 275.126040][T14803] vlan1 (unregistering): left allmulticast mode [ 275.134497][T14803] veth0_vlan (unregistering): left allmulticast mode [ 275.414338][T14820] syzkaller0: entered promiscuous mode [ 275.423146][T14820] syzkaller0: entered allmulticast mode [ 275.430456][T14826] sctp: [Deprecated]: syz.4.2628 (pid 14826) Use of int in maxseg socket option. [ 275.430456][T14826] Use struct sctp_assoc_value instead [ 275.505905][T14832] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 275.732252][T14846] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 277.007320][T14845] 0{X: renamed from gretap0 (while UP) [ 277.035750][T14845] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 277.083787][T14852] bond0: option ad_select: unable to set because the bond device is up [ 277.182314][T14860] __nla_validate_parse: 14 callbacks suppressed [ 277.182338][T14860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2637'. [ 277.260581][T14864] openvswitch: netlink: Actions may not be safe on all matching packets [ 277.290749][T14869] openvswitch: netlink: Actions may not be safe on all matching packets [ 277.349215][T14875] netlink: 'syz.3.2642': attribute type 1 has an invalid length. [ 277.388125][T14875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.434971][T14879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2645'. [ 277.761770][T14897] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2649'. [ 277.773745][T14897] openvswitch: netlink: Actions may not be safe on all matching packets [ 277.953601][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2650'. [ 278.239819][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2654'. [ 278.260442][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2654'. [ 278.272260][T14927] netlink: 'syz.4.2655': attribute type 18 has an invalid length. [ 278.289017][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2654'. [ 278.334989][T14928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'. [ 278.436085][T14933] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.505425][T14935] netlink: 'syz.0.2657': attribute type 1 has an invalid length. [ 278.524274][T14937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2657'. [ 278.612076][T14935] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.629642][T14941] netem: unknown loss type 0 [ 278.803272][T14955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2665'. [ 279.029215][T14974] syz.4.2669 uses old SIOCAX25GETINFO [ 279.109427][T14976] netlink: 'syz.2.2667': attribute type 21 has an invalid length. [ 279.216373][T14976] netlink: 'syz.2.2667': attribute type 5 has an invalid length. [ 279.429993][T15003] netlink: 'syz.3.2674': attribute type 21 has an invalid length. [ 279.485086][T15003] netlink: 'syz.3.2674': attribute type 21 has an invalid length. [ 280.140960][T15054] sctp: [Deprecated]: syz.3.2687 (pid 15054) Use of int in max_burst socket option. [ 280.140960][T15054] Use struct sctp_assoc_value instead [ 280.246507][T15052] tipc: Enabling of bearer rejected, already enabled [ 280.257276][T15052] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 280.287592][T15052] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 280.416480][T15066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.895601][T15086] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.527185][T15131] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 281.534771][T15131] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 282.122835][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 282.207047][T15146] netlink: 'syz.4.2721': attribute type 6 has an invalid length. [ 282.362137][T15156] __nla_validate_parse: 16 callbacks suppressed [ 282.362160][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2724'. [ 282.391489][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2724'. [ 282.446506][T15159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2725'. [ 282.598573][T15169] Unsupported ieee802154 address type: 0 [ 282.681153][T15171] netlink: 'syz.0.2729': attribute type 10 has an invalid length. [ 282.711631][T15171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2729'. [ 282.742008][T15171] dummy0: entered promiscuous mode [ 282.768464][T15171] bridge0: port 3(dummy0) entered blocking state [ 282.777633][T15171] bridge0: port 3(dummy0) entered disabled state [ 282.784678][T15171] dummy0: entered allmulticast mode [ 282.796392][T15171] bridge0: port 3(dummy0) entered blocking state [ 282.802938][T15171] bridge0: port 3(dummy0) entered forwarding state [ 282.968889][T15176] netlink: 'syz.3.2731': attribute type 2 has an invalid length. [ 283.005797][T15176] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2731'. [ 283.017593][T15190] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2734'. [ 283.042605][T15190] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.2734'. [ 283.054943][T15176] netlink: 'syz.3.2731': attribute type 4 has an invalid length. [ 283.070776][T15192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2736'. [ 283.585554][T15228] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2744'. [ 283.679928][T15229] veth0_to_team: left promiscuous mode [ 283.691994][T15229] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 283.707036][T15229] gretap1: left promiscuous mode [ 283.717645][T15229] veth3: left promiscuous mode [ 283.730324][T15229] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 283.740167][T15229] tipc: Resetting bearer [ 283.757542][T15229] bridge7: left promiscuous mode [ 283.785354][T15229] bridge8: left promiscuous mode [ 283.822678][ T5935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.142965][T15256] validate_nla: 1 callbacks suppressed [ 284.142987][T15256] netlink: 'syz.2.2754': attribute type 1 has an invalid length. [ 284.190236][T15256] netlink: 'syz.2.2754': attribute type 3 has an invalid length. [ 284.220388][ T5935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 284.221536][T15256] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2754'. [ 284.259132][ T30] audit: type=1107 audit(1755698785.391:5): pid=15257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='WDOr_I SeC֋DA'GUzAO4:ޫ5#$yW-W'&S]Y*|+s&DfP`U8s*`:a~$ Oω[KsH51CATPn [ 284.259132][ T30] $cgH)N6&`FU z}:RV#s|/.ZZ1z}qtrVc Jӆ,Wm_!Ċs$$jA1@5$_I\(9|?&Hvl.'a~RdO:Kc:o'' [ 284.477843][T15275] netlink: 'syz.0.2759': attribute type 8 has an invalid length. [ 284.510880][T15275] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 284.587129][T15279] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 284.938008][T15306] netlink: 'syz.4.2767': attribute type 4 has an invalid length. [ 284.975279][T15302] netlink: 'syz.4.2767': attribute type 4 has an invalid length. [ 285.131097][T15315] netlink: 'syz.0.2770': attribute type 10 has an invalid length. [ 285.186913][T15314] team0: No ports can be present during mode change [ 285.215179][T15302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.730257][T15352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.753908][T15351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.610569][T15389] tipc: Enabled bearer , priority 10 [ 286.908613][T15406] netlink: 'syz.4.2796': attribute type 29 has an invalid length. [ 287.013212][T15415] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 287.454277][T15430] netlink: 'syz.4.2804': attribute type 5 has an invalid length. [ 287.510501][T15437] __nla_validate_parse: 10 callbacks suppressed [ 287.510523][T15437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2805'. [ 287.747267][ T24] tipc: Node number set to 4140365790 [ 287.811917][T15451] tipc: Enabling of bearer rejected, failed to enable media [ 287.835020][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 287.857099][T15453] xfrm1: entered promiscuous mode [ 287.862302][T15453] xfrm1: entered allmulticast mode [ 287.871186][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2812'. [ 287.922037][T15451] tipc: Enabling of bearer rejected, failed to enable media [ 288.065476][T15462] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2815'. [ 288.109016][T15462] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2815'. [ 288.174298][T15468] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2817'. [ 288.279277][T15475] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2820'. [ 288.309015][T15475] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2820'. [ 288.320806][T15475] netlink: 'syz.0.2820': attribute type 5 has an invalid length. [ 288.330115][T15475] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2820'. [ 288.372751][T15475] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2820'. [ 288.692293][T15495] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 288.880095][T15508] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 289.057803][T15519] openvswitch: netlink: Message has 4 unknown bytes. [ 289.088402][T15519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.186509][T15523] sctp: [Deprecated]: syz.1.2839 (pid 15523) Use of int in max_burst socket option deprecated. [ 289.186509][T15523] Use struct sctp_assoc_value instead [ 289.596131][T15548] netlink: 'syz.1.2849': attribute type 12 has an invalid length. [ 289.614729][T15548] netlink: 'syz.1.2849': attribute type 29 has an invalid length. [ 289.625067][T15548] netlink: 'syz.1.2849': attribute type 2 has an invalid length. [ 290.068055][T15551] syzkaller1: entered promiscuous mode [ 290.087898][T15551] syzkaller1: entered allmulticast mode [ 290.551807][T15598] tipc: Bearer : already 2 bearers with priority 10 [ 290.565046][T15602] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 290.568233][T15598] tipc: Bearer : trying with adjusted priority [ 290.583209][T15602] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 290.583252][T15602] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 290.601818][T15598] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 290.996203][T15626] veth0: entered promiscuous mode [ 291.050422][T15634] sctp: [Deprecated]: syz.3.2872 (pid 15634) Use of struct sctp_assoc_value in delayed_ack socket option. [ 291.050422][T15634] Use struct sctp_sack_info instead [ 291.280007][T15645] nbd: nbd0 already in use [ 291.295519][T15625] veth0: left promiscuous mode [ 291.304664][T15645] netlink: 'syz.4.2876': attribute type 33 has an invalid length. [ 291.478744][ T30] audit: type=1107 audit(1755698792.611:6): pid=15651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=';V:mjIl$;]r#{㋯' [ 291.605957][T15659] netlink: 'syz.1.2882': attribute type 3 has an invalid length. [ 291.940896][T15681] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 292.105026][T15694] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 292.122327][T15695] netlink: 'syz.3.2891': attribute type 12 has an invalid length. [ 292.199511][T15698] tipc: Enabling of bearer rejected, already enabled [ 292.216256][T15699] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 292.852174][T15734] nbd: nbd0 already in use [ 292.858688][T15734] block nbd0: NBD_DISCONNECT [ 292.861755][T15735] netlink: zone id is out of range [ 292.868441][T15734] block nbd0: Send disconnect failed -32 [ 292.869874][T15735] netlink: zone id is out of range [ 292.877565][T15734] block nbd0: shutting down sockets [ 292.881235][T15735] netlink: zone id is out of range [ 292.902572][T15735] netlink: zone id is out of range [ 292.907860][T15735] netlink: zone id is out of range [ 292.914384][T15735] netlink: zone id is out of range [ 292.921103][T15735] netlink: zone id is out of range [ 292.929498][T15735] netlink: zone id is out of range [ 292.934962][T15735] netlink: zone id is out of range [ 292.940309][T15735] netlink: zone id is out of range [ 293.503908][T15761] FAULT_INJECTION: forcing a failure. [ 293.503908][T15761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.535161][T15761] CPU: 1 UID: 0 PID: 15761 Comm: syz.2.2909 Not tainted syzkaller #0 PREEMPT(full) [ 293.535192][T15761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.535206][T15761] Call Trace: [ 293.535215][T15761] [ 293.535225][T15761] dump_stack_lvl+0x189/0x250 [ 293.535257][T15761] ? __pfx____ratelimit+0x10/0x10 [ 293.535287][T15761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.535314][T15761] ? __pfx__printk+0x10/0x10 [ 293.535346][T15761] ? __might_fault+0xb0/0x130 [ 293.535390][T15761] should_fail_ex+0x414/0x560 [ 293.535425][T15761] _copy_from_iter+0x1db/0x16f0 [ 293.535467][T15761] ? txopt_get+0x7a/0x3f0 [ 293.535494][T15761] ? txopt_get+0x7a/0x3f0 [ 293.535522][T15761] ? __pfx__copy_from_iter+0x10/0x10 [ 293.535538][T15761] ? txopt_get+0x335/0x3f0 [ 293.535565][T15761] ? txopt_get+0x7a/0x3f0 [ 293.535592][T15761] ? __pfx_txopt_get+0x10/0x10 [ 293.535649][T15761] rawv6_sendmsg+0xb4b/0x1820 [ 293.535709][T15761] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 293.535765][T15761] ? __pfx_aa_sk_perm+0x10/0x10 [ 293.535798][T15761] ? sock_rps_record_flow+0x19/0x410 [ 293.535825][T15761] ? inet_sendmsg+0x2f4/0x370 [ 293.535847][T15761] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 293.535873][T15761] __sock_sendmsg+0x19c/0x270 [ 293.535902][T15761] __sys_sendto+0x3bd/0x520 [ 293.535941][T15761] ? __pfx___sys_sendto+0x10/0x10 [ 293.535968][T15761] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 293.536010][T15761] ? __fget_files+0x3a0/0x420 [ 293.536068][T15761] ? ksys_write+0x22a/0x250 [ 293.536119][T15761] ? __pfx_ksys_write+0x10/0x10 [ 293.536146][T15761] ? rcu_is_watching+0x15/0xb0 [ 293.536174][T15761] __x64_sys_sendto+0xde/0x100 [ 293.536211][T15761] do_syscall_64+0xfa/0x3b0 [ 293.536240][T15761] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.536268][T15761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.536289][T15761] ? clear_bhb_loop+0x60/0xb0 [ 293.536315][T15761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.536336][T15761] RIP: 0033:0x7fdbfb98ebe9 [ 293.536356][T15761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.536376][T15761] RSP: 002b:00007fdbfc7e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 293.536398][T15761] RAX: ffffffffffffffda RBX: 00007fdbfbbb5fa0 RCX: 00007fdbfb98ebe9 [ 293.536413][T15761] RDX: 000000000000004f RSI: 0000200000000140 RDI: 0000000000000003 [ 293.536426][T15761] RBP: 00007fdbfc7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 293.536439][T15761] R10: 0000000000004800 R11: 0000000000000246 R12: 0000000000000001 [ 293.536452][T15761] R13: 00007fdbfbbb6038 R14: 00007fdbfbbb5fa0 R15: 00007ffc639dbdf8 [ 293.536487][T15761] [ 293.911068][ T5872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.950144][ T5872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.959106][ T5872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.968063][ T5872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.977439][ T5872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.175147][T15774] __nla_validate_parse: 27 callbacks suppressed [ 294.175167][T15774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2911'. [ 294.327934][T15783] net veth1_virt_wifi .: renamed from virt_wifi0 [ 294.512047][T15762] chnl_net:caif_netlink_parms(): no params data found [ 294.744423][T15762] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.757113][T15762] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.774369][T15762] bridge_slave_0: entered allmulticast mode [ 294.785472][T15762] bridge_slave_0: entered promiscuous mode [ 294.796311][T15805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2923'. [ 294.797882][T15762] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.814307][T15805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2923'. [ 294.816315][T15762] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.834516][T15762] bridge_slave_1: entered allmulticast mode [ 294.842673][T15762] bridge_slave_1: entered promiscuous mode [ 294.889606][T15811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2924'. [ 294.893637][T15762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.914422][T15762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.923553][T15817] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2925'. [ 294.952669][T13579] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 295.039285][T15821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2925'. [ 295.141328][T15762] team0: Port device team_slave_0 added [ 295.172003][T15762] team0: Port device team_slave_1 added [ 295.270711][T15762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.277952][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.313080][T15762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.328542][T15762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.339148][T15762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.369367][T15762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.449441][T15762] hsr_slave_0: entered promiscuous mode [ 295.456432][T15762] hsr_slave_1: entered promiscuous mode [ 295.466796][T15762] debugfs: 'hsr0' already exists in 'hsr' [ 295.474540][T15762] Cannot create hsr debugfs directory [ 296.054358][ T5872] Bluetooth: hci5: command tx timeout [ 296.081837][T15762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.093956][T15762] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.127110][T15867] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:20000 [ 296.301725][T15762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.319545][T15875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2944'. [ 296.332551][T15762] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.464290][T15762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.495184][T15762] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.607598][T15762] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.633010][T15762] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.951016][T15762] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 296.978755][T15762] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 296.999532][T15762] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 297.046019][T15762] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 297.254990][T15925] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2957'. [ 297.301855][T15762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.337205][T15931] dvmrp0: left allmulticast mode [ 297.410486][T15762] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.432401][T13581] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.439646][T13581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.463694][T15935] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2961'. [ 297.500548][T13581] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.503134][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 297.507893][T13581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.945496][T15762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.036315][T15963] netlink: 'syz.2.2968': attribute type 30 has an invalid length. [ 298.123030][ T5872] Bluetooth: hci5: command tx timeout [ 298.127961][T15762] veth0_vlan: entered promiscuous mode [ 298.168903][T15762] veth1_vlan: entered promiscuous mode [ 298.239770][T15762] veth0_macvtap: entered promiscuous mode [ 298.264283][T15762] veth1_macvtap: entered promiscuous mode [ 298.324650][T15762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.380706][T15762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.405783][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.430064][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.485401][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.525112][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.694717][T13581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.717113][T13581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.784640][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.803919][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.963871][T16006] veth0: entered promiscuous mode [ 299.244566][T16021] __nla_validate_parse: 7 callbacks suppressed [ 299.244584][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2981'. [ 299.898604][T16048] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2990'. [ 299.988769][T16053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2992'. [ 300.052705][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.206762][ T5872] Bluetooth: hci5: command tx timeout [ 300.233897][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2993'. [ 300.354654][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 300.366968][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.375294][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.397129][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.417235][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.489847][T16069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2995'. [ 300.572267][T16069] vlan2: entered promiscuous mode [ 300.584040][T16069] bridge0: entered promiscuous mode [ 300.628649][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2997'. [ 300.707054][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2996'. [ 300.891776][T13586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.915792][T13586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.940010][T16095] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3003'. [ 301.367807][T16095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.395001][T16095] bond_slave_0: left allmulticast mode [ 301.466381][T16095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.517027][T16095] bond_slave_1: left allmulticast mode [ 301.577180][T16095] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 301.622012][T16095] bridge0: left allmulticast mode [ 301.645276][T16095] bond0 (unregistering): Released all slaves [ 301.819141][T16106] tipc: Enabled bearer , priority 0 [ 301.927357][T13586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.970693][T13586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.006663][T16106] tipc: Disabling bearer [ 302.021326][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3005'. [ 302.074011][T16121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.143745][T16127] Bluetooth: MGMT ver 1.23 [ 302.150217][T16121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.163949][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3008'. [ 302.283558][ T5872] Bluetooth: hci5: command tx timeout [ 302.297131][T13586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.336024][T13586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.443592][ T5872] Bluetooth: hci0: command tx timeout [ 302.519475][T13586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 302.537517][T13586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.858468][T13579] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 302.880982][T13579] bond2: now running without any active interface! [ 302.967176][T16174] tc_dump_action: action bad kind [ 303.008159][T16062] chnl_net:caif_netlink_parms(): no params data found [ 303.109495][T13586] bond2: left promiscuous mode [ 303.125872][T13586] bridge0: port 3(bond2) entered disabled state [ 303.147463][T13586] bridge_slave_1: left allmulticast mode [ 303.158531][T13586] bridge_slave_1: left promiscuous mode [ 303.164954][T13586] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.180566][T13586] bridge_slave_0: left allmulticast mode [ 303.187797][T13586] bridge_slave_0: left promiscuous mode [ 303.194981][T13586] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.226119][T13586] tipc: Resetting bearer [ 303.538357][T13586] tipc: Disabling bearer [ 303.648986][T13586] bond6 (unregistering): (slave gretap2): Releasing active interface [ 304.226399][T13586] bond1 (unregistering): Released all slaves [ 304.325232][T13586] bond2 (unregistering): Released all slaves [ 304.341030][T13586] bond3 (unregistering): Released all slaves [ 304.358617][T13586] bond4 (unregistering): (slave bond5): Releasing backup interface [ 304.368201][T13586] bond4 (unregistering): Released all slaves [ 304.467307][T13586] bond5 (unregistering): Released all slaves [ 304.525283][ T5872] Bluetooth: hci0: command tx timeout [ 304.567385][T13586] bond6 (unregistering): Released all slaves [ 304.582217][T13586] bond7 (unregistering): Released all slaves [ 304.629049][T16183] __nla_validate_parse: 1 callbacks suppressed [ 304.629068][T16183] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.3025'. [ 304.768432][T13586] tipc: Disabling bearer [ 304.795808][T13586] tipc: Left network mode [ 304.852157][ T5978] hid (null): unknown global tag 0xe [ 304.860139][ T5978] hid (null): nested delimiters [ 304.996509][T16213] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 305.032105][T16062] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.039615][T16062] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.050946][T16062] bridge_slave_0: entered allmulticast mode [ 305.062398][T16062] bridge_slave_0: entered promiscuous mode [ 305.082912][T16217] erspan0: entered promiscuous mode [ 305.108477][T16217] erspan0: entered allmulticast mode [ 305.162743][T16062] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.189058][T16062] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.215855][T16062] bridge_slave_1: entered allmulticast mode [ 305.226505][T16062] bridge_slave_1: entered promiscuous mode [ 305.344599][T16233] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3038'. [ 305.369136][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 305.494574][T16062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.556975][T16062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.919226][T16261] netlink: 'syz.1.3044': attribute type 1 has an invalid length. [ 305.939003][T16261] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3044'. [ 305.948549][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3044'. [ 306.316218][ T5978] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 306.324744][ T5978] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 306.334140][ T5978] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 306.612648][ T5872] Bluetooth: hci0: command tx timeout [ 307.267282][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3044'. [ 307.379327][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3046'. [ 307.391266][T16266] netlink: 'syz.2.3046': attribute type 30 has an invalid length. [ 307.401334][T16266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3046'. [ 307.403608][T13586] hsr_slave_0: left promiscuous mode [ 307.418887][T13586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.428102][T13586] net_ratelimit: 421 callbacks suppressed [ 307.428128][T13586] batadv0: mtu less than device minimum [ 307.448439][T13586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 307.460653][T13586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 307.472808][T13586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 307.484890][T13586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 307.497400][T13586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 307.509673][T13586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 307.521938][T13586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 307.533992][T13586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 307.546154][T13586] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 307.577114][T13586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.578171][T16269] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20004 [ 307.594857][T13586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.648458][T13586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.657252][T13586] batman_adv: batadv0: Interface deactivated: 0! [ 307.664659][T13586] batman_adv: batadv0: Removing interface: 0! [ 307.694603][T13586] veth1_macvtap: left promiscuous mode [ 307.700580][T13586] veth0_macvtap: left promiscuous mode [ 307.719694][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3050'. [ 307.774771][T16289] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3046'. [ 308.028669][T13586] team0 (unregistering): Port device team_slave_1 removed [ 308.066642][T13586] team0 (unregistering): Port device C removed [ 308.384271][T16062] team0: Port device team_slave_0 added [ 308.394441][T16062] team0: Port device team_slave_1 added [ 308.458117][T16278] tipc: Enabling of bearer rejected, already enabled [ 308.545611][T16062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.559874][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.588033][T16062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.608018][T16062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.636325][T16062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.695130][ T5872] Bluetooth: hci0: command tx timeout [ 308.702449][T16062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.720531][T16294] dummy0: left allmulticast mode [ 308.735443][T16294] bridge0: port 3(dummy0) entered disabled state [ 308.759609][T16294] bridge_slave_0: left allmulticast mode [ 308.778953][T16294] bridge_slave_0: left promiscuous mode [ 308.785013][T16294] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.798934][T16294] bridge_slave_1: left allmulticast mode [ 308.835528][T16294] bridge_slave_1: left promiscuous mode [ 308.861676][T16294] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.909457][T16294] team0: Port device team_slave_0 removed [ 308.925729][T16294] team0: Port device team_slave_1 removed [ 308.943081][T16294] bond1: (slave bridge3): Releasing active interface [ 309.151823][T16062] hsr_slave_0: entered promiscuous mode [ 309.159875][T16062] hsr_slave_1: entered promiscuous mode [ 309.173582][T16062] debugfs: 'hsr0' already exists in 'hsr' [ 309.189605][T16062] Cannot create hsr debugfs directory [ 309.405194][T16328] gretap0: entered promiscuous mode [ 309.488390][T16328] 0{X: renamed from gretap0 [ 309.511885][T16328] 0{X: left promiscuous mode [ 309.527326][T16328] 0{X: entered allmulticast mode [ 309.772788][T16352] __nla_validate_parse: 4 callbacks suppressed [ 309.772809][T16352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3068'. [ 310.031348][T16369] netlink: 'syz.2.3073': attribute type 21 has an invalid length. [ 310.042442][T16369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3073'. [ 310.067390][T16369] netlink: 'syz.2.3073': attribute type 21 has an invalid length. [ 310.093399][T16369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3073'. [ 310.457416][T16062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 310.480313][T16062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 310.505969][T16062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 310.527028][T16394] tipc: New replicast peer: 255.255.255.255 [ 310.533824][T16394] tipc: Enabled bearer , priority 10 [ 310.540355][T16062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 310.691999][T16062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.739756][T16062] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.765857][T13579] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.773120][T13579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.824442][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.831674][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.967364][T16062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.969534][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3088'. [ 311.027758][T16416] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 311.057946][T16416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3088'. [ 311.120430][T16420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3089'. [ 311.140089][T16416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3088'. [ 311.434124][T16436] tipc: Enabled bearer , priority 0 [ 311.449573][T16436] tipc: Resetting bearer [ 311.468577][T16434] tipc: Disabling bearer [ 311.497193][T16440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3095'. [ 311.591857][T16062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.718466][T16062] veth0_vlan: entered promiscuous mode [ 311.765321][T16062] veth1_vlan: entered promiscuous mode [ 311.899058][T16062] veth0_macvtap: entered promiscuous mode [ 311.931661][T16062] veth1_macvtap: entered promiscuous mode [ 312.034246][T16062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.056658][T16465] netlink: 'syz.0.3103': attribute type 30 has an invalid length. [ 312.059140][T16469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3104'. [ 312.074991][T16463] syzkaller1: entered promiscuous mode [ 312.080503][T16463] syzkaller1: entered allmulticast mode [ 312.082186][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3105'. [ 312.096644][T16463] [ 312.099015][T16463] ====================================================== [ 312.106052][T16463] WARNING: possible circular locking dependency detected [ 312.113096][T16463] syzkaller #0 Not tainted [ 312.117515][T16463] ------------------------------------------------------ [ 312.124537][T16463] syz.4.3102/16463 is trying to acquire lock: [ 312.130615][T16463] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 312.139780][T16463] [ 312.139780][T16463] but task is already holding lock: [ 312.147148][T16463] ffff888145b90f70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 312.156389][T16463] [ 312.156389][T16463] which lock already depends on the new lock. [ 312.156389][T16463] [ 312.166793][T16463] [ 312.166793][T16463] the existing dependency chain (in reverse order) is: [ 312.175807][T16463] [ 312.175807][T16463] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 312.183810][T16463] lock_acquire+0x120/0x360 [ 312.188855][T16463] _raw_spin_lock_bh+0x36/0x50 [ 312.194152][T16463] nr_rt_ioctl+0x193/0xd50 [ 312.199099][T16463] sock_do_ioctl+0xd9/0x300 [ 312.204139][T16463] sock_ioctl+0x576/0x790 [ 312.209002][T16463] __se_sys_ioctl+0xfc/0x170 [ 312.214122][T16463] do_syscall_64+0xfa/0x3b0 [ 312.219166][T16463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.225584][T16463] [ 312.225584][T16463] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 312.233427][T16463] lock_acquire+0x120/0x360 [ 312.238469][T16463] _raw_spin_lock_bh+0x36/0x50 [ 312.243767][T16463] nr_rt_device_down+0xa9/0x720 [ 312.249151][T16463] nr_device_event+0x137/0x150 [ 312.254446][T16463] notifier_call_chain+0x1b3/0x3e0 [ 312.260089][T16463] __dev_notify_flags+0x18d/0x2e0 [ 312.265650][T16463] netif_change_flags+0xe8/0x1a0 [ 312.271110][T16463] dev_change_flags+0x130/0x260 [ 312.276493][T16463] dev_ioctl+0x7b4/0x1150 [ 312.281358][T16463] sock_do_ioctl+0x22c/0x300 [ 312.286478][T16463] sock_ioctl+0x576/0x790 [ 312.291346][T16463] __se_sys_ioctl+0xfc/0x170 [ 312.296483][T16463] do_syscall_64+0xfa/0x3b0 [ 312.301532][T16463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.307967][T16463] [ 312.307967][T16463] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 312.315895][T16463] validate_chain+0xb9b/0x2140 [ 312.321196][T16463] __lock_acquire+0xab9/0xd20 [ 312.326414][T16463] lock_acquire+0x120/0x360 [ 312.331451][T16463] _raw_spin_lock_bh+0x36/0x50 [ 312.336765][T16463] nr_rt_ioctl+0x390/0xd50 [ 312.341720][T16463] sock_do_ioctl+0xd9/0x300 [ 312.346752][T16463] sock_ioctl+0x576/0x790 [ 312.351612][T16463] __se_sys_ioctl+0xfc/0x170 [ 312.356742][T16463] do_syscall_64+0xfa/0x3b0 [ 312.361799][T16463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.368233][T16463] [ 312.368233][T16463] other info that might help us debug this: [ 312.368233][T16463] [ 312.378472][T16463] Chain exists of: [ 312.378472][T16463] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 312.378472][T16463] [ 312.392306][T16463] Possible unsafe locking scenario: [ 312.392306][T16463] [ 312.399762][T16463] CPU0 CPU1 [ 312.405142][T16463] ---- ---- [ 312.410514][T16463] lock(&nr_node->node_lock); [ 312.415311][T16463] lock(nr_node_list_lock); [ 312.422448][T16463] lock(&nr_node->node_lock); [ 312.429731][T16463] lock(nr_neigh_list_lock); [ 312.434427][T16463] [ 312.434427][T16463] *** DEADLOCK *** [ 312.434427][T16463] [ 312.442602][T16463] 2 locks held by syz.4.3102/16463: [ 312.447797][T16463] #0: ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 312.457308][T16463] #1: ffff888145b90f70 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 312.466986][T16463] [ 312.466986][T16463] stack backtrace: [ 312.472883][T16463] CPU: 1 UID: 0 PID: 16463 Comm: syz.4.3102 Not tainted syzkaller #0 PREEMPT(full) [ 312.472907][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.472919][T16463] Call Trace: [ 312.472927][T16463] [ 312.472936][T16463] dump_stack_lvl+0x189/0x250 [ 312.472963][T16463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.472984][T16463] ? __pfx__printk+0x10/0x10 [ 312.473007][T16463] ? stack_trace_save+0x9c/0xe0 [ 312.473035][T16463] print_circular_bug+0x2ee/0x310 [ 312.473058][T16463] check_noncircular+0x134/0x160 [ 312.473079][T16463] validate_chain+0xb9b/0x2140 [ 312.473109][T16463] __lock_acquire+0xab9/0xd20 [ 312.473137][T16463] ? nr_rt_ioctl+0x390/0xd50 [ 312.473156][T16463] lock_acquire+0x120/0x360 [ 312.473181][T16463] ? nr_rt_ioctl+0x390/0xd50 [ 312.473202][T16463] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 312.473226][T16463] ? nr_rt_ioctl+0x390/0xd50 [ 312.473245][T16463] _raw_spin_lock_bh+0x36/0x50 [ 312.473267][T16463] ? nr_rt_ioctl+0x390/0xd50 [ 312.473286][T16463] nr_rt_ioctl+0x390/0xd50 [ 312.473312][T16463] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 312.473338][T16463] ? apparmor_capable+0x137/0x1b0 [ 312.473362][T16463] ? capable+0x89/0xe0 [ 312.473379][T16463] ? nr_ioctl+0x1b1/0x3b0 [ 312.473395][T16463] sock_do_ioctl+0xd9/0x300 [ 312.473418][T16463] ? __pfx_sock_do_ioctl+0x10/0x10 [ 312.473438][T16463] ? __lock_acquire+0xab9/0xd20 [ 312.473470][T16463] sock_ioctl+0x576/0x790 [ 312.473492][T16463] ? __pfx_sock_ioctl+0x10/0x10 [ 312.473511][T16463] ? __fget_files+0x2a/0x420 [ 312.473539][T16463] ? __fget_files+0x3a0/0x420 [ 312.473564][T16463] ? __fget_files+0x2a/0x420 [ 312.473593][T16463] ? bpf_lsm_file_ioctl+0x9/0x20 [ 312.473615][T16463] ? __pfx_sock_ioctl+0x10/0x10 [ 312.473635][T16463] __se_sys_ioctl+0xfc/0x170 [ 312.473657][T16463] do_syscall_64+0xfa/0x3b0 [ 312.473682][T16463] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.473705][T16463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.473722][T16463] ? clear_bhb_loop+0x60/0xb0 [ 312.473742][T16463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.473759][T16463] RIP: 0033:0x7f54f698ebe9 [ 312.473775][T16463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.473791][T16463] RSP: 002b:00007f54f7895038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.473810][T16463] RAX: ffffffffffffffda RBX: 00007f54f6bb5fa0 RCX: 00007f54f698ebe9 [ 312.473830][T16463] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000008 [ 312.473841][T16463] RBP: 00007f54f6a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 312.473852][T16463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 312.473862][T16463] R13: 00007f54f6bb6038 R14: 00007f54f6bb5fa0 R15: 00007ffc85b39d98 [ 312.473884][T16463] [ 312.759187][T16062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.936562][T13579] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.948122][T13579] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.024441][T13579] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.046299][T13579] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.478364][T13581] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.767849][T13581] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.837579][T13581] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.898491][T13581] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.980885][T13581] bridge_slave_1: left allmulticast mode [ 314.988038][T13581] bridge_slave_1: left promiscuous mode [ 314.994109][T13581] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.002631][T13581] bridge_slave_0: left allmulticast mode [ 315.008312][T13581] bridge_slave_0: left promiscuous mode [ 315.014270][T13581] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.117441][T13581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.128262][T13581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.138273][T13581] bond0 (unregistering): Released all slaves [ 315.226648][T13581] hsr_slave_0: left promiscuous mode [ 315.233076][T13581] hsr_slave_1: left promiscuous mode [ 315.238818][T13581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.246395][T13581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.254576][T13581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.261991][T13581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.274062][T13581] veth1_macvtap: left promiscuous mode [ 315.279573][T13581] veth0_macvtap: left promiscuous mode [ 315.285486][T13581] veth1_vlan: left promiscuous mode [ 315.290736][T13581] veth0_vlan: left promiscuous mode [ 315.436192][T13581] team0 (unregistering): Port device team_slave_1 removed [ 315.448474][T13581] team0 (unregistering): Port device team_slave_0 removed