last executing test programs: 9.555795348s ago: executing program 4 (id=4756): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c2", 0x23) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000000480)=[{&(0x7f0000000b00)=""/187, 0xbb}], 0x1, &(0x7f0000000700)=""/200, 0xc8}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$AUDIT_GET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8c5) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/183, 0xb7}], 0x1}, 0xfffffffa}], 0x1, 0x40012040, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x0, 0x0, 0x3ff, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8440) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000500)=@req={0x28, &(0x7f0000000440)={'veth1_to_bond\x00', @ifru_data=&(0x7f0000000400)="f6ee5abb7ad96aa52845765f0d83ceaf75e00c4699d7a24d33cddde2997d3820"}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x7aac970b56982f36, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000002f02000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) 8.620368687s ago: executing program 4 (id=4771): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x200, 0x200, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast1, @loopback, 0xffffff00, 0xff, 0xa, 0x9, {@empty, {[0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, {[0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x3, 0x401, 0x9f, 0x17, 0xfffc, 0x2, 'syz_tun\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x1cc}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x7, 0xea4, 0x1}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xff, 0xc, 0x10, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0xed, 0x5, 0x0, 0x35, 0x6, 0xfffb, 'macvlan0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x2f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x5, {0x5}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 8.410292267s ago: executing program 4 (id=4775): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab", 0x1}], 0x1, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x20040001) (async) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 8.256476887s ago: executing program 4 (id=4779): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24004041}, 0xd12a450662af1a08) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, 0x2, 0x2, 0x201, 0x0, 0x0, {0x9, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0xf, 0x6, 'sane-20000\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) pipe(&(0x7f0000002740)) socket$inet6(0xa, 0x0, 0xe256e000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r0, r8, 0x25, 0x4, @val=@iter={0x0}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r9, r0, 0x4}, 0x6) 8.089860385s ago: executing program 4 (id=4781): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c2", 0x23) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000000480)=[{&(0x7f0000000b00)=""/187, 0xbb}], 0x1, &(0x7f0000000700)=""/200, 0xc8}, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$AUDIT_GET(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8c5) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/183, 0xb7}], 0x1}, 0xfffffffa}], 0x1, 0x40012040, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1, 0x2, 0x6, 0x0, 0x0, 0x3ff, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8440) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000500)=@req={0x28, &(0x7f0000000440)={'veth1_to_bond\x00', @ifru_data=&(0x7f0000000400)="f6ee5abb7ad96aa52845765f0d83ceaf75e00c4699d7a24d33cddde2997d3820"}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x19, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x7aac970b56982f36, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000002f02000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) 7.120408173s ago: executing program 4 (id=4794): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x20000004}) epoll_pwait(r2, &(0x7f0000000000)=[{}], 0x1, 0xfffffff2, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 2.112982987s ago: executing program 2 (id=4835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, &(0x7f00000004c0)="978fbf54ae5da622d262620e11c44705d7f56cd40a2adc78d38edcbd65637671e1cc3028fa5196ced58e7e7c5031e03a502c626a2cc00e7eabb932ad36ba5bbc3925b316149c7b26bf00190487ef94b28f4421d5a09a50c534567cfa87bb713c63785c41c78949e5d85919891d607af372fd20d1534d26b29df2df3ab41a452c54d05e654cf9c3e365ba332bce94abfa03048376968e345621a6c5d6488880", &(0x7f0000000580)=""/198}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r4, 0xffffffffffffffff, 0x4, r3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4087, 0xfffffffffffffdb6, 0x0, 0x0}, &(0x7f00000003c0)=0x40) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r2}, 0x20) (async) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r2}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x41c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/1052]}, 0x494) recvmsg$can_bcm(r1, &(0x7f0000000240)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/44, 0x2c}], 0x2}, 0x40002041) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x19}, @NFTA_SET_DESC={0x4}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xaa56}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2470}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000811}, 0x80) 2.094903229s ago: executing program 0 (id=4836): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x48) pipe(&(0x7f0000000480)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r3, 0x89e3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x14, 0x0, @remote}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, &(0x7f0000000340)="351656b5c7027f807406bb0b", &(0x7f0000000400)}, 0x20) getpeername(r5, &(0x7f00000002c0)=@isdn, &(0x7f00000000c0)=0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000001000000080000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r10}, 0x38) 1.927381094s ago: executing program 2 (id=4837): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x70bd27, 0x25dfd3ff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'geneve0\x00', &(0x7f0000000000)=@ethtool_ts_info}) getpeername(r0, &(0x7f0000000080)=@in={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x80) 1.923763292s ago: executing program 0 (id=4838): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000f0fc13b7d4106ddb400000000000000000000000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc000000210029040000000000000000fc02000000000000000001a800000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac14140e000000000000000000000000fe8800000000000000000000000000010a010100000000000000000000000000fc0200000000000000000000000000003c0000000000000000000a002c0013"], 0xcc}}, 0x0) 1.814540919s ago: executing program 2 (id=4839): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x4, 0x2, 0x9, 0xefeb, 0x8, 0x6, 0x1, 0x9}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x60}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000280)={@local, @initdev, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x8001, 0x10, 0x449, 0xf384, {{0x25, 0x4, 0x1, 0x3, 0x94, 0x65, 0x0, 0xf8, 0x29, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x34, 0x8a, 0x1, 0x3, [{@rand_addr=0x64010101, 0xed}, {@multicast2, 0x8}, {@private=0xa010101, 0xc}, {@rand_addr=0x64010101, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@local, 0x1000}]}, @rr={0x7, 0xb, 0xca, [@multicast2, @broadcast]}, @ssrr={0x89, 0xb, 0xf7, [@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x37}]}, @timestamp_prespec={0x44, 0x1c, 0x1a, 0x3, 0xa, [{@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local, 0xd3}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x1e, [@empty, @dev={0xac, 0x14, 0x14, 0x2d}, @local, @loopback]}]}}}}}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r10, {0xfffc, 0xc}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x20000800) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r14, {0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=@newtfilter={0x468, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0xc}, {0xfff2}, {0xfff1, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x43c, 0x2, [@TCA_BPF_ACT={0x3f4, 0x1, [@m_csum={0x11c, 0xb, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x1, 0x7, 0xc8}, 0x65}}]}, {0xd4, 0x6, "afd19f7a2e7478833e0bf8c45a71047e0e3cb4bdc2c3886b3d2b1326e2dfbcab8ea8790669a42a95a89668763aa8355e7fd163fe3a2529f81fffd68fdf6de284099f131a81700a9107b1d0f65b839e85ae8bd5fc1b7219e25f50149340ca35ee9189be00eee927029cf96016298fbe46f61f942bd1cf497537dc30ac8a1c0fa84010738a78e8b43930e8e00682c71b47e5fadd28c5728d21bdaab1eb2c0bb3be00968d45f220ac4ea4c1ed45b428d240954aa34d922a0e2cb2cdac270c03ccc12ff1da50d27402553ae659b26ebc08ce"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_connmark={0x10c, 0x19, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x107, 0x10000000, 0x6, 0x4}, 0xba}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x32, 0x8, 0x2, 0xff, 0x8000}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x10, 0x7, 0x7, 0x5}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x81, 0xc, 0x4, 0x9}, 0x3}}]}, {0x6a, 0x6, "e85d56eafcb9a75641b4babafe0bbdace624ee80172a209309bb886ebd2a726624af7c73028cbf9e6e6c2c1a154c0436f84887d66e0f832c6d385d07a71562504fcb04cfddc6fc4a5a02e6caccd79122b3c7d35515d79a03f7c8401b099491758496e6876398"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x94, 0x14, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xa}]}, {0x55, 0x6, "e3f86b442fd28d0f83daab2ffb03b12e1009017e50a70a40b909d035dd615a004de2092a1e6d2d4daf35142d7363cd8e0744dbdeabfcb022e07c78b5290cdefaec69e69d0d9a1d2fa0cb6428b0a8c1c4e1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_skbedit={0x74, 0xf, 0x0, 0x0, {{0xc}, {0x4}, {0x48, 0x6, "11c6a7abf09541ebb01d8287ea900f2bb80a6121356f46f1e282c7a4462b04cc0ddc39866cc5570ae9dd9d7ee2c139a4da92e7ec3776ec1a49a0683fce65f7ee811a9e67"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbmod={0xc0, 0x21c, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1000}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}]}, {0x7e, 0x6, "e71166bdeb11e5bfd74ba34b37a68a77726470e36e874b735a991434eeb225a9505c36bc2036eb122533815fc3e9caa1050d039cde0087298a5c6aaaa77ba755ae3cbe0b5bafcc3533578c8cab6f9236a53acc0b5abc855aff3aa099861badf2ef4d9f12f4a4adaf7c087d44b61446806d15f02a59c0d641381f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x1c, 0x5, [{0x7, 0x0, 0x10, 0x5}, {0x0, 0x1, 0x81, 0xca}, {0x2, 0x75, 0x8, 0x3}, {0xe, 0x12, 0x0, 0x800}, {0x80, 0x4, 0x4c, 0x7ff}, {0x7, 0xc, 0x2}, {0x3, 0x8, 0x7, 0x8}]}}]}}]}, 0x468}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="04010000", @ANYRESDEC=r1, @ANYBLOB="040025bd7000fedbdf250400000014000180080003000200000008000300030000001c000180080003000000000008000100", @ANYRES32=r1, @ANYBLOB='\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="5c000102080003000200200008000300e0d7000008000100", @ANYRES32=r6, @ANYBLOB="1400020076657468305f746f5f626f6e640000001400020076657468315f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000300030000000800030000000000580001801400020076657468315f766972745f776966690008000100", @ANYRES32=r7, @ANYRESHEX=r6, @ANYRES32=r14, @ANYBLOB="0800030003000000"], 0x104}, 0x1, 0x0, 0x0, 0xc4}, 0x8004885) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRESOCT=r0, @ANYRES64=r0], &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x60}, 0x94) r15 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff250100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1.813798121s ago: executing program 1 (id=4840): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000d0000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000380)={0x0, 0x6}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={r1, 0xfff}, 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(0xffffffffffffffff, &(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0xfffffffffffffffa) getpeername$unix(r3, 0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000340)={0xfff8, 0xfffd, 0xa0, 0xffff}, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="000000001000010000000000fddbdf25ac1414aa0000000000000000000000000000000000000000002900000000000040000000000700030000000041000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000008002300190d00004c101400637263333200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000080000000ca8c413063fdfb070c4e3bb4dd9bc4e88e91db1c784f507d53e4aaaae9e658e223aca9a07c77071294a5ac6f4b0a359dbd13fbb80e0a93338df370ae7192fffe6c582c4b5506c0cb14f07f53877070f22ee2689ee9bb9473a41d7a6feed10d17af5d317e38bcf402459ccb7b596daa3c10ef54aea055c3f0125ba89b64df7be422b3753f78a2f73fc0009c1dcea164026d68a8d7e62fd35a2660cbc8243f62645279cae1e8339e88a44feb04c522ba754ad8e3b83e2fb77fe13e64c3aa8ae50bf4cffc32a8c40eb90cd915f1c02b3764cbd883f8cff5bc21e341dd1d5da5b0c10e757b5ca80f0bc1ddc898e747655b1c7443cbbda11327f738d2898c7559aea2289084021304a23f06f84e3af942169a633163b14041859845fa936b9a7e20132ee477757cc7c8019653deaa06b2202e79df412b7efb04b4782bd3443a9efcf6f6b86795d6a2fc7d0d27d6e4ab1e0775ec85cc4a92a4687f5d399fbadb2fc3dcd4eadc1a5e1a368e80e6be797b185fdf04212e4062ed4215511dde28e9acbc8a1dd21300f4730cbc705ac87590ac3101ee699acf9250bcb32bc70c1aa3e1b2267f1907410b45ca50fe8aa49632089b979e54d5e9b347512d76e7f6e01d32de9caf001ff4a2f84f9cc2770050e4ac8bf8cd21d31605810d684cabdf5eceda1137e0a2d4f06417c23b25f015398b21892a48e606e4d755956df77c55450019d7ea5d2db7e518733e2b28528dde682667095a6cfcc07e0517609f52ee9c7aa7031c83fe24deec3c013b69658eadc9b564d833871af0bfde2405684375046cb64de3c9cdf36d05e246954ca45a9bc623228ae15e040907223763136412f0fd39aad1022eb62f488eac74cd99ee7d56a018526eaf075469af9789722b91a75fd4fa828baec2abb869ffd7bbfe8d29331f49799e188a210a88a79ab0e1093a078fab9e591ab4efd5521cd1a3aa1a938a14d4e109e8b7f0fda0b96f6d78fa9267401f4af5cfd30ea6a74a97ca42634f4dc76fee8c03afbf4a65e961f86b1364306091adab42604bb8fdc1cd68e8c9adff32dc7fa0887aba1f3772e99bf1b93979ee85dca313c7ee1776dd3abde3801a68bb8f22c241e6f514cff21f698c1637684e315cd9579fa4848dbe2339b443aec7b20bcff407f6f3d3a85de57d4683ec537a76734dafe3c3ffcba001ce002abd6ac7d3c227948a95802dd97f68d531d0f575c64b1b6660170daa623d5c629f0b3214d40d0365e0f671cd26f16f600589fb77b34736e624841c32b12ddd51d5985a80027462cdda40a7bc1e77028e42c7c730153f3105ae60c30705b4c286c6b4580f059823266547943dd1790b4364f6c34ef0a9cce503160b332e39552bf176aac61f246b231036fbe9bd9cb4a86b4dfc09528dc09f04a43356225abcc1e0a41161617f164511f39c75b1ec9474026d8fb2595c98a7ca86ffea8770744087eb421486243179fd7b3669a45421b4c39e4d46583e23e23588ee646cb5976addfae4f347ff7dac6da52692f50bcf19121289d9e9ec71c8f75a0b96e483d593800f0ddda4bf595394ba189538977d23462bd742b230efde7aa209be5802d2f6b499f65d7e21b81727df1d250a018f4aff19b33530570b2744cd3273098f57fe0dcf3e604fe7ce51d6e463413719715355414ea763cc41563adf23ed526b1c5d2a09ebeabbf79d350fb683fb6b1819d576c3ee03e008c7d955add540b29f13fac1bb96dca05f58d33a6cc5a3bda164e7d3514ba549abd22ecfc8a0fbc1789a42d29e6c4582f0a64bc10f2cdbf1d23bc5fbe834bc00bb9acb35e746b8475596af078d81649462455098c726b859f4e96ed2ef2c615e7bf40587a32380006e9685041066bd35e442d2a280eed7c56521aace0d5a75a1f241def826a2e7605ef499c7124566588974ec8217927d7f7f758ecdf9fd92ba48d32142ab30f5cff67bfe3eaee666647572d6d38f72fbdec28ee82e1de828b9577857bcac6cdc4943b6d3f9c6ccbf04255e011b1876905886d6dbea6049b5d39c97b214d5b00342061a9b11bf09226a8b61ccebbb0cfc6cba414d2d207eb135d65dfe4d1d60e638c77bb8e0a9d7c210e36ea7d0c77bfb3221ff1883bd324a23d7457d57569e76d09af23a7f2dd14d1aab78ac6f7685be72c307dd099ace8185b4f654ac85163190b459017a54f7395523e10013ca2518325398fba5cbdb710d60474866a4fa54f2af20dbe47db54c85ca9e043b838de01cb51701d2001ab84af6844676d6d710318126014ee06fbcf4b83853d1959c54d3f4d2f70656c59ec3f1313f72820119edf3c0fd7a0f0e83b6ebc1d09c7814d449f1aa3e9d8cf53ea58757a75ec1f3deb1752c6ce312102f273704e6fce33e62e7185cc9e682a0b5ab76ed565c26af5a142d1a56eaf73eee752cf02b6c2c6ae99bc02960c6e802bb535969db6ff47a65fe3eb1f6e7247dfcd3edee84dd6a426ae8c8117ad294de081a1c0ab275023b858b8a1f0de7c11d8231f2281b62bb97d68f42ed477cced5351a5b01b38c9263d72a8f2131e6f584897923e9050a2f80824aa989d0c56857d7411cfd37aee80bd8b7464d5ab63ba77cd0663381b42b47b7f55696f42c3023fef758f86ecddb7e4e59b7f7e99f3e459da8f1414556a2b1c8e26d4722ea829c6f788f836e3b174ee3a969a4da8487ba59010841ca06983b5a0ed76292eca6706cfeaaf14974bff91543df76ae4f03492b23e85afa284c99b943d21ffb793d87b2226915fd0c9fca9ec1dcb123dc2ce9f93f2062706deea42eda8abbe750e789f836484d32d69d2239df16bf680fad4f6631c52f3c6ae1f058278d27df13cf4d37534c44ab304a468bad9e9b0a419e53e32d791e26cbeb93930c6166096e3177f01fc8a43df012bedadcaaddfe0785f03fc07b28ed6f998fd0926bdc4f5165a7b95fd62137226a16b849c5616a799d2a68bbb0c4cdff2ae43ef9b65ed117e986cb5415e38bd853a21852e7911521fd7e3da9700567e4529af112619500846ec0cb519f45edca6cd4417c3c6fc177e2bcf1935a8f9638602f8037426449a560f8c8b94950a86e01ec2d0a2fb24710a2f2f6379daf2ccd01a016ca5ae148ae6abc9421a72fd1d0ff5dca3a6ad46edbe9fa7c6a5abce792a9f39e9394d3b77aa1cbadea715fd4f26f0892229a8736f65e6b40e3f819e9abeb726c2a89555df405ebf4ee886d8efe5ec0a2ce54f90af123ff756e5832418e6fad2ea40a67828de153fe5a1bcf7b4d7a45a8c126b85001ac1fec1c0ff411695bfb5a9b060aa4e709414399295698e2e9fe8e0f4361c473cf617aa74e5bffa165d5fe805a3f33fe58a54585c56239d03aaf6fc819c44693346bb7bd7c314546702a325a3f2f0de4f7329899ab2492fa482ac48133937cf509f739ee3ba4501d4aef1eeb060c3429cfbafe0e90923d7f4338e6c7859c1b854dddc92eedca05d4b5b8e284a023de7733a0ea4f300b7c084c4ff9cdc1448187f407658563ed857482c84037818dbef17758730beec9f7ffe18c9c07376e583e35faccb52c3b656d2dca1669852d74dc67cb69ead5428da8a400b64ca138a5613e300edc498295db97170374ee4f734879d621de84553fe0590d6e0a552e44ae77da931ebd8b3d69f1a820327d0d08388aa456356942caaf8c95da705b6f1a5136707208c966c179d242261b36237494c107b5c6ebf98b49e8f0839c1c6480d1513bd3bea4eb2d2564cdbbd12f2332780a248a8062b92258054a07dc383e3792d536f313c198932b8918bc305e82e5e19cc357100f72c7bb330338e44c7086d2543875aed35e91676382329d2656b3040b1831df1179a35976cd0aca15b645dbf5714a5a5497efcfa23d625b62c2c9ef48bf5804cb51b7f248c3447ca74304a1ad69ebcd9b8501582e62c4de6c8014b937fdb41506d5aa66595ad4461bcc3d16cf5e02079a010f8f48baca102deae60f1dd352b60b1a53943862516d495c2a5c43f5407c9b6ce8e8d4f7a102de0da8e57924c5057e927dac7183cbbab9b30466a3cb884f4e52edb622f8c064c6b8641f3c2a5ffb7557651f3975107a154014989336750df92d88fbf716958e049ef262255096ee8d1f39a76a0c8fe2897f24df98f7419a7473237d535fe60ee6dc2541d418cf1d6a5a7a7c2a1727009122f6b443176aa66b0f142d9032849223806ede7799bd3b110c2ecb16d34a4c626de9e870c3d6ae1157c01383a8284af9229a3c0e8d0af57fe69237f967be95eedfb8d2e782ae93a91b6e02e166af4b88dc6cd35bac787c5fd80445911529497b87056296012ba1e00ca9601f3cde7469f94471b6b9ad3312160a5bdf42888c55ae71db168358b5a3918fd55c7899d3fa084ea2b5b6012f45936bc97570fed871364cdde045daf241e3ffab7688ec51e72e906b320db55d91dbfb92b6d844619c6b1aa2504b07a97e0b33fc363de9fec989888d6eb415fa63380de1086520ebbc494d693db96e5379cb882a508a3e0cef91b8af84ef2daadc3f23af132ed0417d012d5cb2472199832bd34dbf50335d2306b6b7bbf8dd569ff758fc1e13cfa1f7a451c01a4b5861273f319399d2a47a7095e5f40dfb43396833b0c55e8b85608931b4707202a1cc8e12121b50b6971d18d3c055953f92be0671d6a206194bfbbb0eaec10bd05a4bdaf14068c7c4b34fa02f8c117bc8e13d1a8365202e2a06f32bafd53ae2011402cb02e6ac99419deb4e1e9eba9b6f8824075b83d799a1f44117ffa9fb0ca1849cb446ec9a2b394f6b5986ef84db945be0c7eb4a59064acf071e25445fc93514505fa06b444d81e8714b837b3776a30113c4d19f6b5f88aa325bf4e6cb83af30b0664b21e1d8a968fff8652ec68e02beede5f777faad1c45f8c0f3f85b7a0d3e7bfdcaf545a7d39297fae1216a87124297f0e94b0dc2cfcb489e379f4aee3106d78327f25013b3a1d440ea077710b039e68060e79c9f28b42df994747eeb4e96b8ad8bb1032544996c3caf728988421f0b26088f3c3277b6283f0e87036cffe5fdcd1b9e66d48aac6e7b29ed265bc90c6c5809bc573b121015bc8917fdd45176f295da97e9c95675ff15c6ebe4c7edf793e95d39e01358d68bca07f1853c4903313f765d643e48ec7d1d84d204a8851de475b98c7db05483caf35fe8868506353bed714b6a95e4bf39016296fb197768266669fc4a87d50d3e20bd5e92bbcf59a5a453a6fbe4f95ca53aa9969b8285df7644d2149652d782da3545420e0c68f5ffd1e4a3ed839a6d2d26505f2a69306acf57f85cac1dec342f03148471b68fbbc1a223e6824aacce95d227c50eff032c690f9108fbb6349e5e1d8d5344307f03b3b1098a3827de35a4beb144f96d19f972f8d03bc432f586176d6a0b25d0aadba337fa564e8d65d5d92ff6c643fc4a5685f52618bc7aa32ba413cde90771b32b33ac899d5529df8c80aaa17d25f9188ade2545a0f5744eb6fe31ca365ee669ba85a6fb788a96aa75ef5f8b5c86c5ce0809a31619637d8943a78ccb45ded502d0f8d5b521544163a323f97f70634e674350bf529179949bd8eae8d79c79fc2d7933284d16958b24c05c5dbe77f90143f36000272a409dd83a73a4e4a5a33c062193bd306c40d0a242dc6025c91da26749bdea1b3ea93752a28c536aaf295f7d81ca70c23da92d065d80b27e4cfa14b8a27f92428f450bf5df2a89b8f349be30b493b53173e1a51e3397c34b53e147ee6ce9ab280438556dd6f598b70dbf06ab94f73ded15e398c58c81f98ed592371341cc8c"], 0x1144}}, 0x20000000) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000d40)="b2", 0x1}], 0x1}}], 0x1, 0x4004844) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000001c0)=0x3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r6) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000000)={@mcast2}, 0x14) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84000000", @ANYRES16, @ANYBLOB="010026bd7000fedbdf253b00000008000300", @ANYRES32, @ANYBLOB="68003300802009000802110000000802110000005050505050505f00ffffffffffffff04d27964ffd5a45b32ff6400001001000602fc01050305974725030107fb2a01042d1a00041601000000000000007b004700110000000000000100000172060303030303037107690001ff010720"], 0x84}, 0x1, 0x0, 0x0, 0xe0}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fbdbdf251707000008000300abddb4129c763adef82b57b9abd4b5e77bf1177bba16fba8f4c01929ff900a0b3100f35b3de29497be97ca5aa48e3eca3f15bd6a1583a31e3303b6800ae5339205ad2351b4d27302840644271854e3e5024fefccff789a08a5efd34afb3b8ebe675073e045", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff00000a001a00ffffffffffff00000a000600ffffffffffff0000"], 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000580)={0x1, 0x168, 0x8008, 0x7, 0x94, 0x0, 0x9, 0x200, r1}, &(0x7f00000005c0)=0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0x103, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x50) 1.728485904s ago: executing program 0 (id=4841): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 1.615766359s ago: executing program 0 (id=4842): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = socket$inet6(0xa, 0x4, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x328, 0xffffffff, 0xffffffff, 0x328, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@ipv6header={{0x28}, {0x1a, 0x1, 0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xff], @ipv6=@remote, [0x0, 0xff000000, 0xff000000, 0xffffff00], 0x4d3, 0x34ff, 0x1, 0x1, 0x15, 0x13}, {@ipv4=@multicast1, [0x0, 0xffffffff, 0xffffffff, 0xff], @ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff], 0x4d6, 0x3503, 0x87, 0x0, 0x2, 0x10}, {@ipv4=@empty, [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x11}, [0xff000000, 0x0, 0xff, 0xff000000], 0x4d6, 0x3500, 0x3a, 0x0, 0x0, 0x4}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0xffffff00], @ipv6=@mcast1, [0xff000000, 0xffffffff, 0xff000000, 0xffffffff], 0x4d3, 0x0, 0x2f, 0x0, 0x4, 0x1a}], 0x1, 0x3}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, [], [], 'wg1\x00', 'caif0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x458) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/240, 0xf0}], 0x1, 0x2, 0x6) 1.328367384s ago: executing program 2 (id=4844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x24, 0x0, &(0x7f0000000180)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x80002, 0x88) r4 = epoll_create1(0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r5, &(0x7f0000000940), 0x10) close(0x3) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0xa0000004}) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f00000065c0)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x28}}], 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x401}, 0x14}}, 0x0) accept$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c) r8 = socket$inet(0x2, 0x2, 0x1) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000080), 0x4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) close(0x4) 1.267719182s ago: executing program 0 (id=4845): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$SMC_PNETID_ADD(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x4) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8801) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xa7}, {0x6, 0x11, 0x3}}]}, 0x70}, 0x1, 0x0, 0x0, 0x240408c0}, 0x20000800) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r0, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.216762129s ago: executing program 1 (id=4846): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003740)=@newtfilter={0x3c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xf2, 0x6d}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r6, &(0x7f0000002380), 0x12) r7 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xc, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfffa, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r9 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.052572508s ago: executing program 0 (id=4848): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') ioctl$NS_GET_PARENT(r1, 0x8004b709, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000080), 0x4) unshare(0x22020600) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r5, r4, 0x80000001, 0x0) r7 = openat$cgroup_ro(r3, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) preadv(r8, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000040)=0xffffff01, 0x4) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x1, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) 1.013699164s ago: executing program 2 (id=4849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d40000001b000301000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010008a"], 0xd4}}, 0x0) 926.937555ms ago: executing program 3 (id=4850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r7, r6, 0x0, 0xfffffe9e, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_type(r8, &(0x7f0000000280), 0x2, 0x0) read(r9, &(0x7f00000014c0)=""/4125, 0x1) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000001200)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r10}, 0x94) r11 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r11, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000213c0011800a0001006c696d69740000002c0002800c000240000000000000000008000540000040000c00014000000000000004000800044000000001"], 0xc0}}, 0x0) 844.473694ms ago: executing program 1 (id=4851): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100000000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x24040084) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 802.533201ms ago: executing program 3 (id=4852): r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x4d, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4e6ff000000000079100000060000006300f8ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00}, 0x94) 774.032022ms ago: executing program 2 (id=4853): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) epoll_create1(0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 560.204353ms ago: executing program 3 (id=4854): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x4) recvmmsg$unix(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1}}], 0x1, 0x10001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 437.184383ms ago: executing program 1 (id=4855): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x6, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x808000}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000000c0)={r4, 0x6, 0xd5, "63bb3bd0640d9bcaee187465fd22e1e136c963f6ab6a930650fdcc5631f0008b26c585c204285417aef5019d3e6543fc9e09efb7c766b0d103f3589c4b079c5204ab43fe9794917713af67caec842ee08e2e824e328f0659cf7ff03132f32d957c2b65b45d20da7cd4d414381aff6e08bc3893b57dea262ca2c874b8c534a849cd3fed2326fd0c045030fe6e01e18516e73d9c0c70aa8e291392c009d3e2c6da8c2223a6c52c3ed99fc8652d4b8f5f89b97f5b58ee7bc7602b025577ca3f69b5a5308cc9b36271ec9586c34af8cf32fb7261c56013"}, 0xdd) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="54000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d30000000000000200016801c00018018000c8014000100080088a8"], 0x54}}, 0x24040800) 397.081042ms ago: executing program 3 (id=4856): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x3dc, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x3c8, 0x1, [@m_xt={0x154, 0xa, 0x0, 0x0, {{0x7}, {0x74, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0xbb, 0x6, "8c3c93dcc535294d9b5b9d36771c1bffc8d943111f9699efba0420c6f61fd6b501d36e965d83a8f183b2c7397a7761518fa8548568129fa0338051b58cd21e8460a43dce6f37f55e3c42e0330801223f0400beb907f187a6bceb987e88d315e44b73f750afaf368e0b146a8195237b308892c6f17615a4c349abbaacaf3b05ed83380aa76d618116d7d7d33e93275de478aebb92e4e87519021955494bb7241535d97c58b6a42315524cb9bdcd4ba54641994a180865cc"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd4, 0xa, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x8d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x120, 0x7, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xdc}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8a5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x890}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2e}]}, {0xc9, 0x6, "b21c50e1030b17ea54544df58a6baf7d0fbaa5481080be097d6968ab0cc0abad396f30973b0c8d0220a2db4934eb13d938d3453bc9333bfccc6590bc80cafe60d79c2896ce44cd8c4ecea3d747551ffcc36e75a41326c600d43a95a1cd8f7b762206278b52b584264cc785c3e8193b1f2ca470535cee5bd85e199b2083f93488e8c1dfd1db047ec73dde6b9379257ab7d25463b7be990ca26ba6cb75d916a89859e1e0f63c3bbce20265410bd7e93af3cdbd8686a48951fa1c3fbcbd58bd1c0c8eeae99862"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_bpf={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x6, 0x4}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x15, 0x6, "12df59202984a7d58c1b88abb797475ada"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, 0x0, 0x0, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 260.06663ms ago: executing program 3 (id=4857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd000000ff"], 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x62}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c8030}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0xc0000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f00000004c0)}], 0x1, 0x4814) recvmmsg(r6, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f0000000340)=""/21, 0x15}, {&(0x7f0000000400)=""/151, 0x97}, {0x0}], 0x4}, 0x3}], 0x1, 0x2001, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r7, &(0x7f00000000c0)=ANY=[], 0xa) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)='j\x00', 0x2) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x890}, 0x20000850) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, 0x0, &(0x7f00000000c0)) 257.806973ms ago: executing program 1 (id=4858): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x5c, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x4, 0xd}}, 0x39, @val={0x8c, 0x18, {0x970, "ef4ee3adcba4", @long="ead7155c877646865f1b01cbeea063d0"}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710439000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 105.218302ms ago: executing program 1 (id=4859): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x48) pipe(&(0x7f0000000480)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r3, 0x89e3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x6, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000680)={0x1f, 0x20, @none}, 0xe) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x14, 0x0, @remote}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, &(0x7f0000000340)="351656b5c7027f807406bb0b", &(0x7f0000000400)}, 0x20) getpeername(r5, &(0x7f00000002c0)=@isdn, &(0x7f00000000c0)=0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0900000001000000080000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r10}, 0x38) 0s ago: executing program 3 (id=4860): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\tD\x00', 0x14, 0x6, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0x20}, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11, 0xfffe}}}}}}}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) (async) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) close(0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="12080000000007000000000000000640070001800000000000000800000000000000020000000000000004010d000100c110fe800000000000000000d49d5a04001e244d00000047"], 0x48) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f00000000c0)=ANY=[@ANYBLOB="12080000000007000000000000000640070001800000000000000800000000000000020000000000000004010d000100c110fe800000000000000000d49d5a04001e244d00000047"], 0x48) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x6}]}}, "e9"}}}}, 0x0) (async) syz_emit_ethernet(0x2b, &(0x7f0000000040)={@local, @local, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local, {[@cipso={0x86, 0x6}]}}, "e9"}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@deltaction={0x118, 0x31, 0xc2e, 0x70bd27, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0xa0, 0x1, [{0x14, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9b}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x118}}, 0x0) kernel console output (not intermixed with test programs): unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.345422][T17162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.433539][T17168] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 458.560912][T17162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.595330][T17162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.698939][T17171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.709217][T17171] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.723422][T17171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 458.774815][T17162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.785981][T17162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.063243][T17045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.086286][T17045] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.098646][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3362'. [ 459.153870][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.173040][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.303293][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.310527][ T5995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.328494][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.335699][ T5995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.358399][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.366753][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.424690][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.445595][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.469038][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.498338][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.911572][ T5147] Bluetooth: hci2: command tx timeout [ 460.084395][T17219] bond2 (unregistering): Released all slaves [ 460.133059][T17045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.196249][T17228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 460.231079][T17219] ip6tnl1: entered promiscuous mode [ 460.247361][T17219] ip6tnl1: entered allmulticast mode [ 460.285015][T17228] ip6gre1: entered allmulticast mode [ 460.350090][T17045] veth0_vlan: entered promiscuous mode [ 460.381258][T17045] veth1_vlan: entered promiscuous mode [ 460.471902][T17235] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3376'. [ 460.488464][T17237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3377'. [ 460.608051][T17240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3378'. [ 460.615401][T17238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3377'. [ 460.645847][T17045] veth0_macvtap: entered promiscuous mode [ 460.673799][T17045] veth1_macvtap: entered promiscuous mode [ 460.738958][T17045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.755757][T17045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.812431][ T5990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.822310][ T5990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.838694][ T5990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.873707][ T5990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.016259][T17249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3382'. [ 461.092494][ T5991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.109387][ T5991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.152287][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.162116][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.281311][T17258] Cannot find set identified by id 1 to match [ 461.481661][T17271] bridge_slave_0: left allmulticast mode [ 461.510947][T17271] bridge_slave_0: left promiscuous mode [ 461.521341][T17271] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.541828][T17271] bridge_slave_1: left allmulticast mode [ 461.548535][T17271] bridge_slave_1: left promiscuous mode [ 461.554432][T17271] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.570009][T17271] bond0: (slave bond_slave_0): Releasing backup interface [ 461.581493][T17271] bond0: (slave bond_slave_1): Releasing backup interface [ 461.599722][T17271] team0: Failed to send options change via netlink (err -105) [ 461.610449][T17271] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 461.621263][T17271] team0: Port device team_slave_0 removed [ 461.631908][T17271] team0: Failed to send options change via netlink (err -105) [ 461.648646][T17271] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 461.659530][T17271] team0: Port device team_slave_1 removed [ 461.666467][T17271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.675816][T17271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.687729][T17271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.695544][T17271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.710847][T17271] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 461.762443][T17276] 8021q: adding VLAN 0 to HW filter on device bond2 [ 461.991500][ T5147] Bluetooth: hci2: command tx timeout [ 462.045618][T17292] syzkaller0: entered promiscuous mode [ 462.071855][T17292] syzkaller0: entered allmulticast mode [ 462.115399][T17298] Cannot find add_set index 1 as target [ 462.180864][T17292] tipc: Started in network mode [ 462.185826][T17292] tipc: Node identity be93b75027f7, cluster identity 4711 [ 462.218226][T17292] tipc: Enabled bearer , priority 0 [ 462.231204][T17301] syzkaller1: entered promiscuous mode [ 462.243805][T17301] syzkaller1: entered allmulticast mode [ 462.259398][T17291] tipc: Resetting bearer [ 462.286630][T17291] tipc: Disabling bearer [ 462.543832][T17324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3404'. [ 462.561221][T17314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 462.613591][T17320] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 462.726075][T17328] dvmrp0: entered allmulticast mode [ 462.753436][T17325] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3406'. [ 462.825655][T17335] xt_policy: output policy not valid in PREROUTING and INPUT [ 462.846213][T17328] dvmrp0: left allmulticast mode [ 462.877006][T17333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3408'. [ 462.926599][T17338] openvswitch: netlink: Message has 592 unknown bytes. [ 462.934231][T17338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 462.957396][T17339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3408'. [ 463.027704][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3408'. [ 463.072248][T17343] Cannot find add_set index 1 as target [ 463.167202][T17346] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 463.326401][T17353] sctp: [Deprecated]: syz.3.3416 (pid 17353) Use of int in max_burst socket option. [ 463.326401][T17353] Use struct sctp_assoc_value instead [ 463.374402][T17356] Cannot find add_set index 0 as target [ 463.539318][T17356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3417'. [ 463.570954][T17356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3417'. [ 464.509069][T17401] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.652397][T17410] Cannot find add_set index 1 as target [ 464.864080][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3436'. [ 465.336848][T17443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3446'. [ 465.396008][T17446] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 465.435667][T17447] syzkaller0: entered promiscuous mode [ 465.441692][T17447] syzkaller0: entered allmulticast mode [ 465.648561][T17460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3453'. [ 465.706116][T17459] Bluetooth: MGMT ver 1.23 [ 465.770394][T17459] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 465.782126][T17459] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 465.790272][T17459] gretap1: entered promiscuous mode [ 465.795921][T17459] gretap1: entered allmulticast mode [ 465.871414][T17466] syzkaller0: entered promiscuous mode [ 465.880391][T17466] syzkaller0: entered allmulticast mode [ 465.909654][T17466] tipc: Started in network mode [ 465.914839][T17466] tipc: Node identity , cluster identity 4711 [ 465.921844][T17466] tipc: Failed to obtain node identity [ 465.932081][T17466] tipc: Enabling of bearer rejected, failed to enable media [ 465.957564][T17466] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 467.859072][T17481] syzkaller0: mtu greater than device maximum [ 467.893647][T17490] __nla_validate_parse: 7 callbacks suppressed [ 467.893669][T17490] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3461'. [ 468.062749][T17511] Cannot find set identified by id 1 to match [ 468.214767][T17520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3470'. [ 468.269422][T17523] x_tables: unsorted underflow at hook 3 [ 468.349044][T17527] validate_nla: 5 callbacks suppressed [ 468.349064][T17527] netlink: 'syz.1.3474': attribute type 10 has an invalid length. [ 468.440009][T17530] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3475'. [ 468.531728][T17534] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3476'. [ 468.733848][T17540] tipc: Enabling of bearer rejected, media not registered [ 468.761675][T17540] xt_TCPMSS: Only works on TCP SYN packets [ 469.070704][T17557] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3486'. [ 469.196766][T17557] team0: Mode "l" not found [ 469.207560][T17560] syzkaller1: entered promiscuous mode [ 469.231027][T17560] syzkaller1: entered allmulticast mode [ 469.265955][T17565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3489'. [ 469.317416][T17574] Cannot find set identified by id 1 to match [ 469.407331][T17565] netlink: 'syz.3.3489': attribute type 5 has an invalid length. [ 469.415134][T17565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3489'. [ 469.480175][T17579] netlink: 'syz.0.3493': attribute type 4 has an invalid length. [ 469.510049][T17582] netlink: 'syz.1.3495': attribute type 4 has an invalid length. [ 469.650555][T17590] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 469.670044][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3496'. [ 469.795289][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3502'. [ 469.825949][T17598] netlink: 'syz.2.3503': attribute type 12 has an invalid length. [ 469.834554][T17598] netlink: 'syz.2.3503': attribute type 29 has an invalid length. [ 469.861546][T17598] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3503'. [ 469.877887][T17598] netlink: 'syz.2.3503': attribute type 2 has an invalid length. [ 470.050383][T17609] netlink: 'syz.2.3507': attribute type 5 has an invalid length. [ 470.728845][T17643] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 470.788713][T17651] netlink: 'syz.3.3522': attribute type 4 has an invalid length. [ 471.073225][T17661] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 471.584960][T17689] bridge_slave_0: left allmulticast mode [ 471.592041][T17689] bridge_slave_0: left promiscuous mode [ 471.599472][T17689] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.612505][T17689] bridge_slave_1: left allmulticast mode [ 471.619074][T17689] bridge_slave_1: left promiscuous mode [ 471.626633][T17689] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.664554][T17689] bond0: (slave bond_slave_0): Releasing backup interface [ 471.676776][T17695] Cannot find set identified by id 1 to match [ 471.772069][T17689] bond0: (slave bond_slave_1): Releasing backup interface [ 471.863434][T17689] team0: Failed to send options change via netlink (err -105) [ 471.887347][T17689] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 471.898159][T17689] team0: Port device team_slave_0 removed [ 471.921909][T17689] team0: Failed to send options change via netlink (err -105) [ 471.938250][T17689] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 471.967963][T17689] team0: Port device team_slave_1 removed [ 471.980049][T17689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.990862][T17689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.019451][T17689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.034272][T17689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.078186][T17689] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.148346][T17714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.189274][T17696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.192983][T17716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.505727][T17728] sctp: [Deprecated]: syz.2.3549 (pid 17728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 472.505727][T17728] Use struct sctp_sack_info instead [ 472.947692][T17752] __nla_validate_parse: 12 callbacks suppressed [ 472.947710][T17752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3556'. [ 472.979805][T17748] sit1: entered promiscuous mode [ 472.984800][T17748] sit1: entered allmulticast mode [ 473.272781][T17759] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 473.716320][T17775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3566'. [ 473.896596][T17785] FAULT_INJECTION: forcing a failure. [ 473.896596][T17785] name failslab, interval 1, probability 0, space 0, times 0 [ 473.915493][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3571'. [ 473.926060][T17785] CPU: 1 UID: 0 PID: 17785 Comm: syz.3.3570 Not tainted syzkaller #0 PREEMPT(full) [ 473.926091][T17785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 473.926104][T17785] Call Trace: [ 473.926113][T17785] [ 473.926122][T17785] dump_stack_lvl+0x189/0x250 [ 473.926158][T17785] ? __pfx____ratelimit+0x10/0x10 [ 473.926185][T17785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.926215][T17785] ? __pfx__printk+0x10/0x10 [ 473.926243][T17785] ? __pfx___might_resched+0x10/0x10 [ 473.926266][T17785] ? fs_reclaim_acquire+0x7d/0x100 [ 473.926306][T17785] should_fail_ex+0x414/0x560 [ 473.926344][T17785] should_failslab+0xa8/0x100 [ 473.926368][T17785] __kmalloc_noprof+0xcb/0x7f0 [ 473.926398][T17785] ? iovec_from_user+0x87/0x250 [ 473.926432][T17785] iovec_from_user+0x87/0x250 [ 473.926463][T17785] __import_iovec+0x163/0x7f0 [ 473.926502][T17785] import_iovec+0x74/0xa0 [ 473.926534][T17785] ___sys_recvmsg+0x43a/0x510 [ 473.926565][T17785] ? __pfx____sys_recvmsg+0x10/0x10 [ 473.926615][T17785] ? __fget_files+0x3a0/0x420 [ 473.926649][T17785] do_recvmmsg+0x307/0x770 [ 473.926691][T17785] ? __pfx_do_recvmmsg+0x10/0x10 [ 473.926730][T17785] ? _copy_from_user+0x94/0xb0 [ 473.926776][T17785] __x64_sys_recvmmsg+0x1af/0x240 [ 473.926803][T17785] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 473.926832][T17785] ? do_syscall_64+0xbe/0xfa0 [ 473.926864][T17785] do_syscall_64+0xfa/0xfa0 [ 473.926890][T17785] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.926918][T17785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.926940][T17785] ? clear_bhb_loop+0x60/0xb0 [ 473.926966][T17785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.926987][T17785] RIP: 0033:0x7fc6d4b8efc9 [ 473.927006][T17785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.927025][T17785] RSP: 002b:00007fc6d59ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 473.927048][T17785] RAX: ffffffffffffffda RBX: 00007fc6d4de5fa0 RCX: 00007fc6d4b8efc9 [ 473.927064][T17785] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 473.927083][T17785] RBP: 00007fc6d59ba090 R08: 0000200000003700 R09: 0000000000000000 [ 473.927096][T17785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.927108][T17785] R13: 00007fc6d4de6038 R14: 00007fc6d4de5fa0 R15: 00007ffdfb603ff8 [ 473.927143][T17785] [ 474.204868][T17784] bond1: option xmit_hash_policy: invalid value (64) [ 474.333005][T17784] bond1 (unregistering): Released all slaves [ 474.512015][T17794] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 474.677489][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3579'. [ 474.762519][T17813] bridge_slave_0: left allmulticast mode [ 474.785392][T17813] bridge_slave_0: left promiscuous mode [ 474.804868][T17813] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.823493][T17813] bridge_slave_1: left allmulticast mode [ 474.833391][T17813] bridge_slave_1: left promiscuous mode [ 474.840667][T17813] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.878875][T17813] bond0: (slave bond_slave_0): Releasing backup interface [ 474.891563][T17813] bond0: (slave bond_slave_1): Releasing backup interface [ 474.928485][T17813] team0: Failed to send options change via netlink (err -105) [ 474.954284][T17813] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 474.973181][T17813] team0: Port device team_slave_0 removed [ 474.986124][T17813] team0: Failed to send options change via netlink (err -105) [ 475.008495][T17813] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 475.049500][T17813] team0: Port device team_slave_1 removed [ 475.072700][T17813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.100224][T17813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.124400][T17813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.132183][T17813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.149051][T17813] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 475.241360][T17815] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.365027][T17826] tipc: Started in network mode [ 475.399534][T17826] tipc: Node identity 7a6e0b0b81f2, cluster identity 4711 [ 475.406923][T17826] tipc: Enabled bearer , priority 0 [ 475.456012][T17834] syzkaller0: entered promiscuous mode [ 475.474782][T17845] ip6t_srh: unknown srh match flags 4000 [ 475.482286][T17845] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3590'. [ 475.491617][T17834] syzkaller0: entered allmulticast mode [ 475.533588][T17825] tipc: Resetting bearer [ 475.606621][T17825] tipc: Disabling bearer [ 475.729022][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3594'. [ 475.961612][T17867] netlink: 'syz.0.3598': attribute type 4 has an invalid length. [ 476.081322][T17873] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 476.185700][T17873] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.395953][T17886] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3604'. [ 476.608984][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3609'. [ 476.910753][T17909] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3613'. [ 476.927285][T17909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3613'. [ 476.936306][T17909] netlink: 'syz.3.3613': attribute type 3 has an invalid length. [ 476.967691][T17909] netlink: 'syz.3.3613': attribute type 2 has an invalid length. [ 476.992474][T17909] netlink: 'syz.3.3613': attribute type 25 has an invalid length. [ 477.163701][T17913] netlink: 'syz.3.3615': attribute type 22 has an invalid length. [ 477.779647][T17938] Cannot find set identified by id 1 to match [ 477.946961][T17945] Cannot find add_set index 1 as target [ 477.992629][T17954] syzkaller0: entered promiscuous mode [ 478.011690][T17954] syzkaller0: entered allmulticast mode [ 478.050876][T17955] netlink: 'syz.4.3629': attribute type 1 has an invalid length. [ 478.074389][T17955] netlink: 'syz.4.3629': attribute type 3 has an invalid length. [ 478.100354][T17955] __nla_validate_parse: 4 callbacks suppressed [ 478.100372][T17955] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3629'. [ 478.135850][T17954] tipc: Started in network mode [ 478.143128][T17954] tipc: Node identity ba38c34ce16b, cluster identity 4711 [ 478.167984][T17954] tipc: Enabled bearer , priority 0 [ 478.238026][T17948] tipc: Resetting bearer [ 478.289917][T17948] tipc: Disabling bearer [ 478.357411][T17975] Cannot find set identified by id 1 to match [ 478.584828][T17986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3640'. [ 478.697781][T17988] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3641'. [ 478.802176][T17988] team0: Mode "l" not found [ 478.813007][T17992] batman_adv: batadv0: Adding interface: dummy0 [ 478.820532][T17992] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.849242][T17992] batman_adv: batadv0: Interface activated: dummy0 [ 478.905108][T17992] veth0_to_bridge: mtu less than device minimum [ 479.018931][T18001] tipc: Enabled bearer , priority 0 [ 479.026785][T18001] syzkaller0: entered promiscuous mode [ 479.046134][T18001] syzkaller0: entered allmulticast mode [ 479.101980][T18001] tipc: Resetting bearer [ 479.175824][T18011] Cannot find set identified by id 1 to match [ 479.186965][T17999] tipc: Resetting bearer [ 479.245985][T17999] tipc: Disabling bearer [ 479.322616][T18014] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 479.636230][T18025] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3655'. [ 479.981358][T18041] syzkaller1: entered promiscuous mode [ 479.986900][T18041] syzkaller1: entered allmulticast mode [ 480.169569][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3663'. [ 480.413167][T18069] dvmrp1: entered allmulticast mode [ 480.466482][T18067] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 480.630708][T18083] FAULT_INJECTION: forcing a failure. [ 480.630708][T18083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.645284][T18083] CPU: 1 UID: 0 PID: 18083 Comm: syz.1.3672 Not tainted syzkaller #0 PREEMPT(full) [ 480.645318][T18083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 480.645332][T18083] Call Trace: [ 480.645340][T18083] [ 480.645349][T18083] dump_stack_lvl+0x189/0x250 [ 480.645383][T18083] ? __pfx____ratelimit+0x10/0x10 [ 480.645409][T18083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 480.645437][T18083] ? __pfx__printk+0x10/0x10 [ 480.645460][T18083] ? __might_fault+0xb0/0x130 [ 480.645502][T18083] should_fail_ex+0x414/0x560 [ 480.645540][T18083] _copy_to_iter+0x589/0x1790 [ 480.645578][T18083] ? __pfx__copy_to_iter+0x10/0x10 [ 480.645599][T18083] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 480.645629][T18083] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 480.645657][T18083] __skb_datagram_iter+0xf8/0x990 [ 480.645683][T18083] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 480.645718][T18083] skb_copy_datagram_iter+0xc5/0x230 [ 480.645748][T18083] netlink_recvmsg+0x2ab/0xa30 [ 480.645779][T18083] ? __pfx_netlink_recvmsg+0x10/0x10 [ 480.645804][T18083] ? aa_sock_msg_perm+0xf1/0x1d0 [ 480.645838][T18083] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 480.645857][T18083] ? security_socket_recvmsg+0x7e/0x2e0 [ 480.645880][T18083] ? __pfx_netlink_recvmsg+0x10/0x10 [ 480.645900][T18083] sock_recvmsg+0x22c/0x270 [ 480.645932][T18083] ____sys_recvmsg+0x1c9/0x460 [ 480.645964][T18083] ? __pfx_____sys_recvmsg+0x10/0x10 [ 480.646004][T18083] ? import_iovec+0x74/0xa0 [ 480.646034][T18083] ___sys_recvmsg+0x1b5/0x510 [ 480.646063][T18083] ? __pfx____sys_recvmsg+0x10/0x10 [ 480.646120][T18083] ? __fget_files+0x3a0/0x420 [ 480.646164][T18083] do_recvmmsg+0x307/0x770 [ 480.646196][T18083] ? __pfx_do_recvmmsg+0x10/0x10 [ 480.646231][T18083] ? _copy_from_user+0x94/0xb0 [ 480.646275][T18083] __x64_sys_recvmmsg+0x1af/0x240 [ 480.646301][T18083] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 480.646326][T18083] ? do_syscall_64+0xbe/0xfa0 [ 480.646357][T18083] do_syscall_64+0xfa/0xfa0 [ 480.646382][T18083] ? lockdep_hardirqs_on+0x9c/0x150 [ 480.646423][T18083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.646442][T18083] ? clear_bhb_loop+0x60/0xb0 [ 480.646464][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.646482][T18083] RIP: 0033:0x7f4de8f8efc9 [ 480.646500][T18083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.646518][T18083] RSP: 002b:00007f4de71ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 480.646540][T18083] RAX: ffffffffffffffda RBX: 00007f4de91e5fa0 RCX: 00007f4de8f8efc9 [ 480.646556][T18083] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 480.646576][T18083] RBP: 00007f4de71ee090 R08: 0000200000003700 R09: 0000000000000000 [ 480.646591][T18083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.646603][T18083] R13: 00007f4de91e6038 R14: 00007f4de91e5fa0 R15: 00007ffced1ab568 [ 480.646637][T18083] [ 480.962730][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 481.021719][T18085] bridge_slave_1: mtu less than device minimum [ 481.290516][T18097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3679'. [ 481.386386][T18106] sctp: [Deprecated]: syz.2.3677 (pid 18106) Use of int in max_burst socket option. [ 481.386386][T18106] Use struct sctp_assoc_value instead [ 481.583346][T18111] syzkaller0: entered promiscuous mode [ 481.599121][T18111] syzkaller0: entered allmulticast mode [ 481.622354][T18111] netlink: 'syz.0.3681': attribute type 3 has an invalid length. [ 481.742157][T18114] bond5: invalid ARP target 0.0.0.0 specified for addition [ 481.752973][T18114] bond5: option arp_ip_target: invalid value (0) [ 481.763497][T18114] bond5 (unregistering): Released all slaves [ 482.023591][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3687'. [ 482.049410][T18128] netlink: 'syz.4.3687': attribute type 13 has an invalid length. [ 482.076474][T18133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3689'. [ 482.087532][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3687'. [ 482.131363][T18132] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 482.156018][ T5995] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.196327][ T5995] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.234795][ T5995] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.277795][ T5995] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.491370][T18139] netlink: 'syz.2.3691': attribute type 39 has an invalid length. [ 482.533747][T18149] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3695'. [ 482.630648][T18146] 8021q: adding VLAN 0 to HW filter on device bond4 [ 482.764976][T18152] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 482.801032][T18158] nbd: must specify a size in bytes for the device [ 483.193295][T18174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3702'. [ 483.480063][T18184] netlink: zone id is out of range [ 483.614930][T18186] 8021q: adding VLAN 0 to HW filter on device bond5 [ 483.674906][T18193] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 484.291203][T18220] sctp: [Deprecated]: syz.4.3716 (pid 18220) Use of int in max_burst socket option. [ 484.291203][T18220] Use struct sctp_assoc_value instead [ 484.313716][T18221] Cannot find add_set index 1 as target [ 484.472220][T18233] FAULT_INJECTION: forcing a failure. [ 484.472220][T18233] name failslab, interval 1, probability 0, space 0, times 0 [ 484.495353][T18233] CPU: 0 UID: 0 PID: 18233 Comm: syz.3.3721 Not tainted syzkaller #0 PREEMPT(full) [ 484.495384][T18233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 484.495398][T18233] Call Trace: [ 484.495406][T18233] [ 484.495416][T18233] dump_stack_lvl+0x189/0x250 [ 484.495451][T18233] ? __pfx____ratelimit+0x10/0x10 [ 484.495476][T18233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.495507][T18233] ? __pfx__printk+0x10/0x10 [ 484.495536][T18233] ? __lock_acquire+0xab9/0xd20 [ 484.495566][T18233] should_fail_ex+0x414/0x560 [ 484.495605][T18233] should_failslab+0xa8/0x100 [ 484.495629][T18233] kmem_cache_alloc_noprof+0x74/0x6e0 [ 484.495669][T18233] ? skb_clone+0x212/0x3a0 [ 484.495699][T18233] skb_clone+0x212/0x3a0 [ 484.495727][T18233] __netlink_deliver_tap+0x404/0x850 [ 484.495786][T18233] ? netlink_deliver_tap+0x2e/0x1b0 [ 484.495822][T18233] netlink_deliver_tap+0x19c/0x1b0 [ 484.495857][T18233] netlink_dump+0x92b/0xe90 [ 484.495902][T18233] ? __pfx_netlink_dump+0x10/0x10 [ 484.495951][T18233] ? netlink_recvmsg+0x5b2/0xa30 [ 484.495970][T18233] ? kmem_cache_free+0x19b/0x690 [ 484.496008][T18233] netlink_recvmsg+0x676/0xa30 [ 484.496039][T18233] ? __pfx_netlink_recvmsg+0x10/0x10 [ 484.496066][T18233] ? aa_sock_msg_perm+0xf1/0x1d0 [ 484.496100][T18233] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 484.496120][T18233] ? security_socket_recvmsg+0x7e/0x2e0 [ 484.496143][T18233] ? __pfx_netlink_recvmsg+0x10/0x10 [ 484.496164][T18233] sock_recvmsg+0x22c/0x270 [ 484.496198][T18233] ____sys_recvmsg+0x1c9/0x460 [ 484.496231][T18233] ? __pfx_____sys_recvmsg+0x10/0x10 [ 484.496272][T18233] ? import_iovec+0x74/0xa0 [ 484.496302][T18233] ___sys_recvmsg+0x1b5/0x510 [ 484.496332][T18233] ? __pfx____sys_recvmsg+0x10/0x10 [ 484.496384][T18233] ? __fget_files+0x3a0/0x420 [ 484.496417][T18233] do_recvmmsg+0x307/0x770 [ 484.496450][T18233] ? __pfx_do_recvmmsg+0x10/0x10 [ 484.496488][T18233] ? _copy_from_user+0x94/0xb0 [ 484.496532][T18233] __x64_sys_recvmmsg+0x1af/0x240 [ 484.496560][T18233] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 484.496588][T18233] ? do_syscall_64+0xbe/0xfa0 [ 484.496621][T18233] do_syscall_64+0xfa/0xfa0 [ 484.496646][T18233] ? lockdep_hardirqs_on+0x9c/0x150 [ 484.496680][T18233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.496702][T18233] ? clear_bhb_loop+0x60/0xb0 [ 484.496728][T18233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.496749][T18233] RIP: 0033:0x7fc6d4b8efc9 [ 484.496768][T18233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.496788][T18233] RSP: 002b:00007fc6d59ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 484.496816][T18233] RAX: ffffffffffffffda RBX: 00007fc6d4de5fa0 RCX: 00007fc6d4b8efc9 [ 484.496832][T18233] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 484.496847][T18233] RBP: 00007fc6d59ba090 R08: 0000200000003700 R09: 0000000000000000 [ 484.496861][T18233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.496891][T18233] R13: 00007fc6d4de6038 R14: 00007fc6d4de5fa0 R15: 00007ffdfb603ff8 [ 484.496928][T18233] [ 484.838738][T18235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 485.163923][T18253] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3727'. [ 485.249754][T18255] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 485.443052][T18264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3730'. [ 485.676154][T18273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 485.739771][T18280] netlink: 'syz.1.3736': attribute type 10 has an invalid length. [ 485.755671][T18280] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 485.894722][T18287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3738'. [ 485.907010][T18287] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 486.245891][T18299] Cannot find set identified by id 1 to match [ 486.466545][T18301] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 486.542996][T18310] syzkaller0: entered promiscuous mode [ 486.557845][T18310] syzkaller0: entered allmulticast mode [ 486.756920][T18317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3752'. [ 486.853217][T18317] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 487.161536][T18334] tipc: Started in network mode [ 487.166563][T18334] tipc: Node identity 520b63c9246, cluster identity 4711 [ 487.199943][T18334] tipc: Enabled bearer , priority 0 [ 487.304605][T18340] syzkaller0: entered promiscuous mode [ 487.324258][T18340] syzkaller0: entered allmulticast mode [ 487.434597][T18337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.452867][T18353] FAULT_INJECTION: forcing a failure. [ 487.452867][T18353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.469451][T18353] CPU: 0 UID: 0 PID: 18353 Comm: syz.3.3763 Not tainted syzkaller #0 PREEMPT(full) [ 487.469481][T18353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 487.469494][T18353] Call Trace: [ 487.469503][T18353] [ 487.469513][T18353] dump_stack_lvl+0x189/0x250 [ 487.469547][T18353] ? __pfx____ratelimit+0x10/0x10 [ 487.469573][T18353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.469602][T18353] ? __pfx__printk+0x10/0x10 [ 487.469624][T18353] ? __might_fault+0xb0/0x130 [ 487.469666][T18353] should_fail_ex+0x414/0x560 [ 487.469703][T18353] _copy_from_user+0x2d/0xb0 [ 487.469731][T18353] ___sys_sendmsg+0x158/0x2a0 [ 487.469757][T18353] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.469817][T18353] ? __fget_files+0x2a/0x420 [ 487.469835][T18353] ? __fget_files+0x3a0/0x420 [ 487.469864][T18353] __x64_sys_sendmsg+0x19b/0x260 [ 487.469890][T18353] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.469923][T18353] ? __pfx_ksys_write+0x10/0x10 [ 487.469957][T18353] ? do_syscall_64+0xbe/0xfa0 [ 487.469989][T18353] do_syscall_64+0xfa/0xfa0 [ 487.470014][T18353] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.470041][T18353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.470063][T18353] ? clear_bhb_loop+0x60/0xb0 [ 487.470089][T18353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.470111][T18353] RIP: 0033:0x7fc6d4b8efc9 [ 487.470130][T18353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.470148][T18353] RSP: 002b:00007fc6d59ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.470171][T18353] RAX: ffffffffffffffda RBX: 00007fc6d4de5fa0 RCX: 00007fc6d4b8efc9 [ 487.470187][T18353] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 487.470201][T18353] RBP: 00007fc6d59ba090 R08: 0000000000000000 R09: 0000000000000000 [ 487.470214][T18353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.470227][T18353] R13: 00007fc6d4de6038 R14: 00007fc6d4de5fa0 R15: 00007ffdfb603ff8 [ 487.470262][T18353] [ 487.476866][T18348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.755924][T18334] tipc: Resetting bearer [ 487.842648][T18364] netlink: 'syz.3.3766': attribute type 1 has an invalid length. [ 487.851105][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3767'. [ 487.861012][T18333] tipc: Resetting bearer [ 487.901889][T18333] tipc: Disabling bearer [ 487.913876][T18365] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 488.043622][T18369] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3768'. [ 488.053500][T18369] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3768'. [ 488.087941][T18369] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3768'. [ 488.194844][T18380] x_tables: duplicate underflow at hook 2 [ 488.280138][T18387] netlink: 'syz.4.3775': attribute type 27 has an invalid length. [ 488.584136][T18404] FAULT_INJECTION: forcing a failure. [ 488.584136][T18404] name failslab, interval 1, probability 0, space 0, times 0 [ 488.598957][T18404] CPU: 1 UID: 0 PID: 18404 Comm: syz.1.3781 Not tainted syzkaller #0 PREEMPT(full) [ 488.598998][T18404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 488.599020][T18404] Call Trace: [ 488.599035][T18404] [ 488.599050][T18404] dump_stack_lvl+0x189/0x250 [ 488.599098][T18404] ? __pfx____ratelimit+0x10/0x10 [ 488.599125][T18404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.599156][T18404] ? __pfx__printk+0x10/0x10 [ 488.599185][T18404] ? __lock_acquire+0xab9/0xd20 [ 488.599216][T18404] should_fail_ex+0x414/0x560 [ 488.599255][T18404] should_failslab+0xa8/0x100 [ 488.599280][T18404] kmem_cache_alloc_noprof+0x74/0x6e0 [ 488.599311][T18404] ? skb_clone+0x212/0x3a0 [ 488.599343][T18404] skb_clone+0x212/0x3a0 [ 488.599371][T18404] __netlink_deliver_tap+0x404/0x850 [ 488.599419][T18404] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.599455][T18404] netlink_deliver_tap+0x19c/0x1b0 [ 488.599490][T18404] netlink_dump+0x92b/0xe90 [ 488.599536][T18404] ? __pfx_netlink_dump+0x10/0x10 [ 488.599587][T18404] ? netlink_recvmsg+0x5b2/0xa30 [ 488.599606][T18404] ? kmem_cache_free+0x19b/0x690 [ 488.599646][T18404] netlink_recvmsg+0x676/0xa30 [ 488.599677][T18404] ? __pfx_netlink_recvmsg+0x10/0x10 [ 488.599711][T18404] ? __pfx_netlink_recvmsg+0x10/0x10 [ 488.599734][T18404] sock_recvmsg_nosec+0x186/0x1c0 [ 488.599768][T18404] ____sys_recvmsg+0x3aa/0x460 [ 488.599803][T18404] ? __pfx_____sys_recvmsg+0x10/0x10 [ 488.599844][T18404] ? import_iovec+0x74/0xa0 [ 488.599877][T18404] ___sys_recvmsg+0x1b5/0x510 [ 488.599907][T18404] ? __pfx____sys_recvmsg+0x10/0x10 [ 488.599963][T18404] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 488.600012][T18404] do_recvmmsg+0x307/0x770 [ 488.600047][T18404] ? __pfx_do_recvmmsg+0x10/0x10 [ 488.600094][T18404] ? _copy_from_user+0x94/0xb0 [ 488.600140][T18404] __x64_sys_recvmmsg+0x1af/0x240 [ 488.600168][T18404] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 488.600197][T18404] ? do_syscall_64+0xbe/0xfa0 [ 488.600230][T18404] do_syscall_64+0xfa/0xfa0 [ 488.600258][T18404] ? lockdep_hardirqs_on+0x9c/0x150 [ 488.600285][T18404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.600307][T18404] ? clear_bhb_loop+0x60/0xb0 [ 488.600335][T18404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.600357][T18404] RIP: 0033:0x7f4de8f8efc9 [ 488.600378][T18404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.600398][T18404] RSP: 002b:00007f4de71ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 488.600421][T18404] RAX: ffffffffffffffda RBX: 00007f4de91e5fa0 RCX: 00007f4de8f8efc9 [ 488.600438][T18404] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 488.600453][T18404] RBP: 00007f4de71ee090 R08: 0000200000003700 R09: 0000000000000000 [ 488.600468][T18404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.600481][T18404] R13: 00007f4de91e6038 R14: 00007f4de91e5fa0 R15: 00007ffced1ab568 [ 488.600519][T18404] [ 488.970034][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3783'. [ 489.093515][T18408] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 489.181211][T18413] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 489.375322][T18415] siw: device registration error -23 [ 489.609222][T18432] FAULT_INJECTION: forcing a failure. [ 489.609222][T18432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.643142][T18432] CPU: 0 UID: 0 PID: 18432 Comm: syz.4.3792 Not tainted syzkaller #0 PREEMPT(full) [ 489.643181][T18432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 489.643196][T18432] Call Trace: [ 489.643205][T18432] [ 489.643215][T18432] dump_stack_lvl+0x189/0x250 [ 489.643252][T18432] ? __pfx____ratelimit+0x10/0x10 [ 489.643285][T18432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.643316][T18432] ? __pfx__printk+0x10/0x10 [ 489.643340][T18432] ? __might_fault+0xb0/0x130 [ 489.643384][T18432] should_fail_ex+0x414/0x560 [ 489.643424][T18432] _copy_from_user+0x2d/0xb0 [ 489.643454][T18432] ___sys_recvmsg+0x12e/0x510 [ 489.643486][T18432] ? __pfx____sys_recvmsg+0x10/0x10 [ 489.643537][T18432] ? __fget_files+0x3a0/0x420 [ 489.643571][T18432] do_recvmmsg+0x307/0x770 [ 489.643606][T18432] ? __pfx_do_recvmmsg+0x10/0x10 [ 489.643644][T18432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 489.643696][T18432] __x64_sys_recvmmsg+0x190/0x240 [ 489.643725][T18432] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 489.643755][T18432] ? do_syscall_64+0xbe/0xfa0 [ 489.643787][T18432] do_syscall_64+0xfa/0xfa0 [ 489.643814][T18432] ? lockdep_hardirqs_on+0x9c/0x150 [ 489.643841][T18432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.643863][T18432] ? clear_bhb_loop+0x60/0xb0 [ 489.643890][T18432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.643911][T18432] RIP: 0033:0x7f560278efc9 [ 489.643932][T18432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.643951][T18432] RSP: 002b:00007f5603669038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 489.643976][T18432] RAX: ffffffffffffffda RBX: 00007f56029e5fa0 RCX: 00007f560278efc9 [ 489.643992][T18432] RDX: 0000000000000001 RSI: 0000200000001e00 RDI: 0000000000000003 [ 489.644007][T18432] RBP: 00007f5603669090 R08: 0000000000000000 R09: 0000000000000000 [ 489.644028][T18432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.644042][T18432] R13: 00007f56029e6038 R14: 00007f56029e5fa0 R15: 00007ffd50bff4d8 [ 489.644079][T18432] [ 489.864909][T18435] Cannot find add_set index 1 as target [ 489.920793][T18437] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3795'. [ 490.112659][T18437] team0: Mode "l" not found [ 490.152326][T18443] FAULT_INJECTION: forcing a failure. [ 490.152326][T18443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.197527][T18443] CPU: 1 UID: 0 PID: 18443 Comm: syz.2.3796 Not tainted syzkaller #0 PREEMPT(full) [ 490.197562][T18443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.197577][T18443] Call Trace: [ 490.197587][T18443] [ 490.197597][T18443] dump_stack_lvl+0x189/0x250 [ 490.197633][T18443] ? __pfx____ratelimit+0x10/0x10 [ 490.197660][T18443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.197691][T18443] ? __pfx__printk+0x10/0x10 [ 490.197715][T18443] ? __might_fault+0xb0/0x130 [ 490.197759][T18443] should_fail_ex+0x414/0x560 [ 490.197797][T18443] _copy_from_user+0x2d/0xb0 [ 490.197826][T18443] ___sys_recvmsg+0x12e/0x510 [ 490.197857][T18443] ? __pfx____sys_recvmsg+0x10/0x10 [ 490.197916][T18443] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 490.197965][T18443] do_recvmmsg+0x307/0x770 [ 490.197999][T18443] ? __pfx_do_recvmmsg+0x10/0x10 [ 490.198038][T18443] ? _copy_from_user+0x94/0xb0 [ 490.198083][T18443] __x64_sys_recvmmsg+0x1af/0x240 [ 490.198110][T18443] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 490.198140][T18443] ? do_syscall_64+0xbe/0xfa0 [ 490.198172][T18443] do_syscall_64+0xfa/0xfa0 [ 490.198202][T18443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.198222][T18443] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 490.198245][T18443] ? clear_bhb_loop+0x60/0xb0 [ 490.198270][T18443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.198290][T18443] RIP: 0033:0x7f96bfd8efc9 [ 490.198310][T18443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.198329][T18443] RSP: 002b:00007f96c0cab038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 490.198354][T18443] RAX: ffffffffffffffda RBX: 00007f96bffe5fa0 RCX: 00007f96bfd8efc9 [ 490.198370][T18443] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 490.198386][T18443] RBP: 00007f96c0cab090 R08: 0000200000003700 R09: 0000000000000000 [ 490.198401][T18443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.198414][T18443] R13: 00007f96bffe6038 R14: 00007f96bffe5fa0 R15: 00007ffd48763d78 [ 490.198450][T18443] [ 490.666163][T18458] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3801'. [ 490.803758][T18463] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 490.946103][T18470] FAULT_INJECTION: forcing a failure. [ 490.946103][T18470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.980787][T18470] CPU: 0 UID: 0 PID: 18470 Comm: syz.1.3806 Not tainted syzkaller #0 PREEMPT(full) [ 490.980827][T18470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.980842][T18470] Call Trace: [ 490.980851][T18470] [ 490.980861][T18470] dump_stack_lvl+0x189/0x250 [ 490.980897][T18470] ? __pfx____ratelimit+0x10/0x10 [ 490.980926][T18470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.980956][T18470] ? __pfx__printk+0x10/0x10 [ 490.980980][T18470] ? __might_fault+0xb0/0x130 [ 490.981025][T18470] should_fail_ex+0x414/0x560 [ 490.981063][T18470] _copy_from_iter+0x1de/0x1790 [ 490.981096][T18470] ? rcu_is_watching+0x15/0xb0 [ 490.981126][T18470] ? kmalloc_reserve+0xbd/0x290 [ 490.981160][T18470] ? __pfx__copy_from_iter+0x10/0x10 [ 490.981187][T18470] ? __build_skb_around+0x262/0x3f0 [ 490.981224][T18470] ? netlink_sendmsg+0x642/0xb30 [ 490.981242][T18470] ? skb_put+0x11b/0x210 [ 490.981266][T18470] netlink_sendmsg+0x6b2/0xb30 [ 490.981297][T18470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.981335][T18470] ? aa_sock_msg_perm+0xf1/0x1d0 [ 490.981369][T18470] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 490.981391][T18470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.981426][T18470] __sock_sendmsg+0x21c/0x270 [ 490.981457][T18470] ____sys_sendmsg+0x505/0x830 [ 490.981487][T18470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.981520][T18470] ? import_iovec+0x74/0xa0 [ 490.981552][T18470] ___sys_sendmsg+0x21f/0x2a0 [ 490.981579][T18470] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.981642][T18470] ? __fget_files+0x2a/0x420 [ 490.981661][T18470] ? __fget_files+0x3a0/0x420 [ 490.981693][T18470] __x64_sys_sendmsg+0x19b/0x260 [ 490.981718][T18470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.981753][T18470] ? __pfx_ksys_write+0x10/0x10 [ 490.981793][T18470] ? do_syscall_64+0xbe/0xfa0 [ 490.981834][T18470] do_syscall_64+0xfa/0xfa0 [ 490.981860][T18470] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.981889][T18470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.981911][T18470] ? clear_bhb_loop+0x60/0xb0 [ 490.981938][T18470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.981960][T18470] RIP: 0033:0x7f4de8f8efc9 [ 490.981980][T18470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.981999][T18470] RSP: 002b:00007f4de71ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.982023][T18470] RAX: ffffffffffffffda RBX: 00007f4de91e5fa0 RCX: 00007f4de8f8efc9 [ 490.982040][T18470] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 490.982055][T18470] RBP: 00007f4de71ee090 R08: 0000000000000000 R09: 0000000000000000 [ 490.982069][T18470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.982083][T18470] R13: 00007f4de91e6038 R14: 00007f4de91e5fa0 R15: 00007ffced1ab568 [ 490.982120][T18470] [ 491.271232][ T5147] Bluetooth: hci2: command 0x0405 tx timeout [ 491.405893][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3808'. [ 491.415586][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3808'. [ 491.520367][T18480] FAULT_INJECTION: forcing a failure. [ 491.520367][T18480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.604001][T18480] CPU: 1 UID: 0 PID: 18480 Comm: syz.3.3811 Not tainted syzkaller #0 PREEMPT(full) [ 491.604041][T18480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 491.604055][T18480] Call Trace: [ 491.604065][T18480] [ 491.604075][T18480] dump_stack_lvl+0x189/0x250 [ 491.604111][T18480] ? __pfx____ratelimit+0x10/0x10 [ 491.604139][T18480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.604169][T18480] ? __pfx__printk+0x10/0x10 [ 491.604193][T18480] ? __might_fault+0xb0/0x130 [ 491.604237][T18480] should_fail_ex+0x414/0x560 [ 491.604276][T18480] _copy_from_user+0x2d/0xb0 [ 491.604304][T18480] ___sys_recvmsg+0x12e/0x510 [ 491.604334][T18480] ? __pfx____sys_recvmsg+0x10/0x10 [ 491.604384][T18480] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 491.604432][T18480] do_recvmmsg+0x307/0x770 [ 491.604472][T18480] ? __pfx_do_recvmmsg+0x10/0x10 [ 491.604510][T18480] ? _copy_from_user+0x94/0xb0 [ 491.604554][T18480] __x64_sys_recvmmsg+0x1af/0x240 [ 491.604582][T18480] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 491.604611][T18480] ? do_syscall_64+0xbe/0xfa0 [ 491.604643][T18480] do_syscall_64+0xfa/0xfa0 [ 491.604669][T18480] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.604696][T18480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.604719][T18480] ? clear_bhb_loop+0x60/0xb0 [ 491.604746][T18480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.604767][T18480] RIP: 0033:0x7fc6d4b8efc9 [ 491.604788][T18480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.604808][T18480] RSP: 002b:00007fc6d59ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 491.604844][T18480] RAX: ffffffffffffffda RBX: 00007fc6d4de5fa0 RCX: 00007fc6d4b8efc9 [ 491.604860][T18480] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 491.604875][T18480] RBP: 00007fc6d59ba090 R08: 0000200000003700 R09: 0000000000000000 [ 491.604889][T18480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.604903][T18480] R13: 00007fc6d4de6038 R14: 00007fc6d4de5fa0 R15: 00007ffdfb603ff8 [ 491.604938][T18480] [ 492.034469][T18496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3817'. [ 492.050796][T18499] delete_channel: no stack [ 492.406700][T18513] batman_adv: batadv0: Interface deactivated: dummy0 [ 492.434840][T18513] batman_adv: batadv0: Removing interface: dummy0 [ 492.472822][T18513] bond0: (slave bridge_slave_1): Releasing backup interface [ 492.493829][T18513] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 492.556807][T18517] 8021q: adding VLAN 0 to HW filter on device bond6 [ 492.713964][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3825'. [ 493.653718][T18549] netlink: 'syz.2.3834': attribute type 10 has an invalid length. [ 493.690396][T18549] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 493.779434][T18553] 8021q: adding VLAN 0 to HW filter on device bond7 [ 493.862085][T18564] syzkaller0: entered promiscuous mode [ 493.868156][T18564] syzkaller0: entered allmulticast mode [ 493.968462][T18566] netlink: 'syz.4.3842': attribute type 1 has an invalid length. [ 494.142354][T18576] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3847'. [ 494.172060][T18576] erspan0: entered promiscuous mode [ 494.305246][T18586] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3849'. [ 494.361929][T18586] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 494.425443][T18586] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.436944][T18586] bond0: (slave bond4): Enslaving as an active interface with an up link [ 494.523373][T18588] 8021q: adding VLAN 0 to HW filter on device bond8 [ 495.013251][T18620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3861'. [ 495.191432][T18631] Cannot find add_set index 1 as target [ 495.308220][T18636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 495.326884][T18633] tipc: Enabled bearer , priority 0 [ 495.338991][T18638] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3869'. [ 495.351044][T18635] syzkaller0: entered promiscuous mode [ 495.358623][T18635] syzkaller0: entered allmulticast mode [ 495.398420][T18636] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.408712][T18633] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 495.429314][T18643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3869'. [ 495.467942][T18638] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3869'. [ 495.490743][T18633] tipc: Resetting bearer [ 495.505550][T18632] tipc: Resetting bearer [ 495.533051][T18645] FAULT_INJECTION: forcing a failure. [ 495.533051][T18645] name failslab, interval 1, probability 0, space 0, times 0 [ 495.546319][T18645] CPU: 0 UID: 0 PID: 18645 Comm: syz.0.3871 Not tainted syzkaller #0 PREEMPT(full) [ 495.546353][T18645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 495.546366][T18645] Call Trace: [ 495.546376][T18645] [ 495.546385][T18645] dump_stack_lvl+0x189/0x250 [ 495.546433][T18645] ? __pfx____ratelimit+0x10/0x10 [ 495.546461][T18645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.546492][T18645] ? __pfx__printk+0x10/0x10 [ 495.546522][T18645] ? __pfx___might_resched+0x10/0x10 [ 495.546545][T18645] ? fs_reclaim_acquire+0x7d/0x100 [ 495.546585][T18645] should_fail_ex+0x414/0x560 [ 495.546624][T18645] should_failslab+0xa8/0x100 [ 495.546649][T18645] __kmalloc_noprof+0xcb/0x7f0 [ 495.546679][T18645] ? tomoyo_encode+0x28b/0x550 [ 495.546719][T18645] tomoyo_encode+0x28b/0x550 [ 495.546758][T18645] tomoyo_realpath_from_path+0x58d/0x5d0 [ 495.546794][T18645] ? tomoyo_domain+0xd9/0x130 [ 495.546833][T18645] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 495.546860][T18645] tomoyo_path_number_perm+0x1e8/0x5a0 [ 495.546891][T18645] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 495.546965][T18645] ? __fget_files+0x2a/0x420 [ 495.546991][T18645] ? __fget_files+0x3a0/0x420 [ 495.547011][T18645] ? __fget_files+0x2a/0x420 [ 495.547036][T18645] security_file_ioctl+0xcb/0x2d0 [ 495.547063][T18645] __se_sys_ioctl+0x47/0x170 [ 495.547097][T18645] do_syscall_64+0xfa/0xfa0 [ 495.547125][T18645] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.547152][T18645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.547173][T18645] ? clear_bhb_loop+0x60/0xb0 [ 495.547200][T18645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.547222][T18645] RIP: 0033:0x7f193a38efc9 [ 495.547242][T18645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.547261][T18645] RSP: 002b:00007f193b302038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.547285][T18645] RAX: ffffffffffffffda RBX: 00007f193a5e5fa0 RCX: 00007f193a38efc9 [ 495.547302][T18645] RDX: 0000200000000380 RSI: 000000000000890b RDI: 0000000000000004 [ 495.547317][T18645] RBP: 00007f193b302090 R08: 0000000000000000 R09: 0000000000000000 [ 495.547331][T18645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.547344][T18645] R13: 00007f193a5e6038 R14: 00007f193a5e5fa0 R15: 00007ffde332f188 [ 495.547382][T18645] [ 495.785531][T18645] ERROR: Out of memory at tomoyo_realpath_from_path. [ 495.893419][T18632] tipc: Disabling bearer [ 495.954380][T18654] set match dimension is over the limit! [ 496.090065][T18659] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3876'. [ 496.112259][T18659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3876'. [ 496.174288][T18659] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 496.188443][T18659] bond4 (unregistering): Released all slaves [ 496.370410][T18673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3883'. [ 496.381206][T18673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 496.478148][T18681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3885'. [ 496.487511][T18681] netlink: 'syz.0.3885': attribute type 7 has an invalid length. [ 496.495367][T18681] netlink: 'syz.0.3885': attribute type 8 has an invalid length. [ 497.085798][T18710] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 497.113907][T18708] syzkaller0: entered promiscuous mode [ 497.120793][T18708] syzkaller0: entered allmulticast mode [ 497.166408][T18710] 8021q: adding VLAN 0 to HW filter on device bond4 [ 497.310239][T18717] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 497.436756][T18721] siw: device registration error -23 [ 497.936880][T18744] Cannot find set identified by id 1 to match [ 498.076531][T18749] syzkaller0: entered promiscuous mode [ 498.083289][T18749] syzkaller0: entered allmulticast mode [ 498.085420][T18753] FAULT_INJECTION: forcing a failure. [ 498.085420][T18753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.105750][T18753] CPU: 0 UID: 0 PID: 18753 Comm: syz.2.3915 Not tainted syzkaller #0 PREEMPT(full) [ 498.105780][T18753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 498.105793][T18753] Call Trace: [ 498.105801][T18753] [ 498.105811][T18753] dump_stack_lvl+0x189/0x250 [ 498.105843][T18753] ? __pfx____ratelimit+0x10/0x10 [ 498.105867][T18753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.105894][T18753] ? __pfx__printk+0x10/0x10 [ 498.105927][T18753] should_fail_ex+0x414/0x560 [ 498.105963][T18753] _copy_to_user+0x31/0xb0 [ 498.105990][T18753] simple_read_from_buffer+0xe1/0x170 [ 498.106025][T18753] proc_fail_nth_read+0x1b3/0x220 [ 498.106054][T18753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.106082][T18753] ? rw_verify_area+0x2a6/0x4d0 [ 498.106109][T18753] ? __lock_acquire+0xab9/0xd20 [ 498.106126][T18753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 498.106152][T18753] vfs_read+0x200/0xa30 [ 498.106180][T18753] ? fdget_pos+0x247/0x320 [ 498.106204][T18753] ? __pfx___mutex_lock+0x10/0x10 [ 498.106231][T18753] ? __pfx_vfs_read+0x10/0x10 [ 498.106260][T18753] ? __fget_files+0x2a/0x420 [ 498.106282][T18753] ? __fget_files+0x3a0/0x420 [ 498.106300][T18753] ? __fget_files+0x2a/0x420 [ 498.106328][T18753] ksys_read+0x145/0x250 [ 498.106353][T18753] ? __fget_files+0x2a/0x420 [ 498.106373][T18753] ? __pfx_ksys_read+0x10/0x10 [ 498.106404][T18753] ? do_syscall_64+0xbe/0xfa0 [ 498.106445][T18753] do_syscall_64+0xfa/0xfa0 [ 498.106469][T18753] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.106494][T18753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.106514][T18753] ? clear_bhb_loop+0x60/0xb0 [ 498.106539][T18753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.106558][T18753] RIP: 0033:0x7f96bfd8d9dc [ 498.106577][T18753] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 498.106595][T18753] RSP: 002b:00007f96c0cab030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 498.106617][T18753] RAX: ffffffffffffffda RBX: 00007f96bffe5fa0 RCX: 00007f96bfd8d9dc [ 498.106632][T18753] RDX: 000000000000000f RSI: 00007f96c0cab0a0 RDI: 0000000000000003 [ 498.106645][T18753] RBP: 00007f96c0cab090 R08: 0000000000000000 R09: 0000000000000000 [ 498.106657][T18753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.106669][T18753] R13: 00007f96bffe6038 R14: 00007f96bffe5fa0 R15: 00007ffd48763d78 [ 498.106707][T18753] [ 498.485408][T18761] Cannot find add_set index 1 as target [ 498.504521][T18763] !: renamed from bond_slave_0 [ 498.926405][T18785] set match dimension is over the limit! [ 499.213656][T18801] syzkaller0: entered promiscuous mode [ 499.230743][T18801] syzkaller0: entered allmulticast mode [ 499.328960][T18810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.484931][T18817] xt_hashlimit: overflow, try lower: 3/0 [ 499.727474][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.741014][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.760781][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.797604][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.624994][T18870] __nla_validate_parse: 4 callbacks suppressed [ 500.625016][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3954'. [ 500.803142][T18878] syzkaller0: entered promiscuous mode [ 500.817752][T18880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3956'. [ 500.838988][T18878] syzkaller0: entered allmulticast mode [ 501.053565][T18880] hsr_slave_1 (unregistering): left promiscuous mode [ 501.659493][T18901] netlink: 'syz.1.3965': attribute type 83 has an invalid length. [ 501.866470][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3969'. [ 502.034910][T18923] syzkaller0: entered promiscuous mode [ 502.048975][T18923] syzkaller0: entered allmulticast mode [ 502.334982][T18943] 8021q: adding VLAN 0 to HW filter on device bond5 [ 502.865434][T18979] syzkaller0: entered promiscuous mode [ 502.912960][T18979] syzkaller0: entered allmulticast mode [ 503.062168][T18993] netlink: 'syz.4.3994': attribute type 1 has an invalid length. [ 503.103996][T18993] 8021q: adding VLAN 0 to HW filter on device bond5 [ 503.193133][T18993] bond5: (slave veth3): Enslaving as an active interface with a down link [ 503.518292][T19016] syzkaller0: entered promiscuous mode [ 503.532264][T19016] syzkaller0: entered allmulticast mode [ 503.575823][T19019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.617004][T19021] team0: Device ip6gre1 is of different type [ 503.891785][T19032] set match dimension is over the limit! [ 504.206305][T19055] syzkaller0: entered promiscuous mode [ 504.212030][T19055] syzkaller0: entered allmulticast mode [ 504.279511][T19057] netlink: 'syz.0.4018': attribute type 21 has an invalid length. [ 504.288228][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4018'. [ 504.559877][T19073] x_tables: duplicate underflow at hook 1 [ 504.701028][T19077] Cannot find set identified by id 1 to match [ 504.804655][T19081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4027'. [ 504.862245][T19081] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 504.978240][T19086] tipc: Enabled bearer , priority 0 [ 505.002926][T19086] syzkaller0: entered promiscuous mode [ 505.033350][T19086] syzkaller0: entered allmulticast mode [ 505.055165][T19092] netlink: 'syz.4.4032': attribute type 12 has an invalid length. [ 505.065151][T19093] Cannot find del_set index 49151 as target [ 505.097867][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4032'. [ 505.256367][T19102] netlink: 'syz.0.4034': attribute type 58 has an invalid length. [ 505.287266][T19102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4034'. [ 505.541449][T19085] tipc: Resetting bearer [ 505.602561][T19085] tipc: Disabling bearer [ 505.772111][T19129] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4042'. [ 505.886083][T19134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4044'. [ 505.926049][T19134] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 506.008615][T19141] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 506.015973][T19141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.091564][T19144] syzkaller0: entered promiscuous mode [ 506.099250][T19144] syzkaller0: entered allmulticast mode [ 506.156230][T19148] netlink: 'syz.0.4050': attribute type 29 has an invalid length. [ 506.243278][T19151] netlink: 'syz.2.4051': attribute type 1 has an invalid length. [ 506.255615][T19151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4051'. [ 506.392552][T19160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4054'. [ 506.485079][T19160] syzkaller1: entered promiscuous mode [ 506.508602][T19160] syzkaller1: entered allmulticast mode [ 506.631932][T19171] tipc: Enabling of bearer rejected, failed to enable media [ 506.685829][T19176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4060'. [ 506.697800][T19176] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 506.828570][T19180] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4062'. [ 506.875973][T19180] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 507.003654][T19189] syzkaller0: entered promiscuous mode [ 507.028052][T19189] syzkaller0: entered allmulticast mode [ 507.073807][T19195] FAULT_INJECTION: forcing a failure. [ 507.073807][T19195] name failslab, interval 1, probability 0, space 0, times 0 [ 507.147364][T19195] CPU: 1 UID: 0 PID: 19195 Comm: syz.1.4065 Not tainted syzkaller #0 PREEMPT(full) [ 507.147398][T19195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.147412][T19195] Call Trace: [ 507.147422][T19195] [ 507.147432][T19195] dump_stack_lvl+0x189/0x250 [ 507.147468][T19195] ? __pfx____ratelimit+0x10/0x10 [ 507.147496][T19195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.147526][T19195] ? __pfx__printk+0x10/0x10 [ 507.147562][T19195] ? __pfx___might_resched+0x10/0x10 [ 507.147593][T19195] should_fail_ex+0x414/0x560 [ 507.147633][T19195] should_failslab+0xa8/0x100 [ 507.147658][T19195] __kmalloc_noprof+0xcb/0x7f0 [ 507.147687][T19195] ? rcu_is_watching+0x15/0xb0 [ 507.147711][T19195] ? copy_splice_read+0x143/0xa50 [ 507.147744][T19195] ? trace_contention_end+0x39/0x120 [ 507.147776][T19195] copy_splice_read+0x143/0xa50 [ 507.147809][T19195] ? __pfx_aa_file_perm+0x10/0x10 [ 507.147838][T19195] ? splice_file_to_pipe+0x2e/0x440 [ 507.147860][T19195] ? __pfx_copy_splice_read+0x10/0x10 [ 507.147893][T19195] ? __pfx___mutex_lock+0x10/0x10 [ 507.147932][T19195] ? wait_for_space+0x248/0x2d0 [ 507.147959][T19195] ? __pfx_sock_splice_read+0x10/0x10 [ 507.147988][T19195] splice_file_to_pipe+0x273/0x440 [ 507.148014][T19195] do_splice+0xdc0/0x1660 [ 507.148064][T19195] ? __pfx_do_splice+0x10/0x10 [ 507.148097][T19195] __se_sys_splice+0x2e1/0x460 [ 507.148126][T19195] ? __pfx___se_sys_splice+0x10/0x10 [ 507.148153][T19195] ? __x64_sys_splice+0x21/0xf0 [ 507.148179][T19195] do_syscall_64+0xfa/0xfa0 [ 507.148206][T19195] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.148234][T19195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.148257][T19195] ? clear_bhb_loop+0x60/0xb0 [ 507.148285][T19195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.148306][T19195] RIP: 0033:0x7f4de8f8efc9 [ 507.148328][T19195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.148348][T19195] RSP: 002b:00007f4de71cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 507.148372][T19195] RAX: ffffffffffffffda RBX: 00007f4de91e6090 RCX: 00007f4de8f8efc9 [ 507.148394][T19195] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 507.148408][T19195] RBP: 00007f4de71cd090 R08: 000000007ffff000 R09: 0000000000000006 [ 507.148423][T19195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.148437][T19195] R13: 00007f4de91e6128 R14: 00007f4de91e6090 R15: 00007ffced1ab568 [ 507.148475][T19195] [ 507.437020][T19203] netlink: 300 bytes leftover after parsing attributes in process `syz.4.4068'. [ 507.754365][T19214] syzkaller0: entered promiscuous mode [ 507.794138][T19214] syzkaller0: entered allmulticast mode [ 507.956738][T19222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4074'. [ 508.035812][T19226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4076'. [ 508.049005][T19226] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 508.139885][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4077'. [ 508.160640][T19228] openvswitch: netlink: Missing key (keys=40, expected=80) [ 508.493890][T19241] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 508.542193][T19246] syzkaller0: entered promiscuous mode [ 508.564051][T19246] syzkaller0: entered allmulticast mode [ 508.691501][T19241] 8021q: adding VLAN 0 to HW filter on device bond6 [ 508.796385][T19255] syzkaller0: entered promiscuous mode [ 508.803545][T19255] syzkaller0: entered allmulticast mode [ 508.903996][T19264] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 509.361606][T19285] netlink: 'syz.4.4098': attribute type 4 has an invalid length. [ 509.630096][T19296] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 509.654595][T19294] syzkaller0: entered promiscuous mode [ 509.673188][T19294] syzkaller0: entered allmulticast mode [ 510.059079][T19310] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 510.598974][T19327] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 510.610653][T19326] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 510.701099][T19329] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 510.767670][T19329] 8021q: adding VLAN 0 to HW filter on device bond9 [ 510.872936][T19335] syzkaller0: entered promiscuous mode [ 510.879012][T19335] syzkaller0: entered allmulticast mode [ 511.318270][T19353] __nla_validate_parse: 10 callbacks suppressed [ 511.318291][T19353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4128'. [ 511.355579][T19353] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 511.387988][T19352] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 511.662995][T19372] openvswitch: netlink: Message has 592 unknown bytes. [ 511.673722][T19372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.709187][T19375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.738381][T19375] gtp0: entered promiscuous mode [ 511.746765][T19375] gtp0: entered allmulticast mode [ 511.966678][T19390] FAULT_INJECTION: forcing a failure. [ 511.966678][T19390] name failslab, interval 1, probability 0, space 0, times 0 [ 511.991606][T19390] CPU: 0 UID: 0 PID: 19390 Comm: syz.2.4137 Not tainted syzkaller #0 PREEMPT(full) [ 511.991639][T19390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 511.991653][T19390] Call Trace: [ 511.991662][T19390] [ 511.991672][T19390] dump_stack_lvl+0x189/0x250 [ 511.991708][T19390] ? __pfx____ratelimit+0x10/0x10 [ 511.991734][T19390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.991763][T19390] ? __pfx__printk+0x10/0x10 [ 511.991791][T19390] ? __pfx___might_resched+0x10/0x10 [ 511.991814][T19390] ? fs_reclaim_acquire+0x7d/0x100 [ 511.991852][T19390] should_fail_ex+0x414/0x560 [ 511.991891][T19390] should_failslab+0xa8/0x100 [ 511.991914][T19390] __kmalloc_cache_noprof+0x6f/0x6f0 [ 511.991944][T19390] ? __genradix_ptr_alloc+0x463/0x4a0 [ 511.991972][T19390] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 511.992007][T19390] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 511.992046][T19390] sctp_association_new+0x15d3/0x25f0 [ 511.992104][T19390] sctp_connect_new_asoc+0x2c5/0x690 [ 511.992142][T19390] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 511.992177][T19390] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 511.992209][T19390] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 511.992241][T19390] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 511.992276][T19390] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 511.992313][T19390] __sctp_connect+0x5ba/0xd50 [ 511.992356][T19390] ? __pfx___sctp_connect+0x10/0x10 [ 511.992394][T19390] sctp_inet_connect+0x12e/0x1e0 [ 511.992421][T19390] __sys_connect+0x316/0x440 [ 511.992448][T19390] ? __fget_files+0x3a0/0x420 [ 511.992465][T19390] ? __pfx___sys_connect+0x10/0x10 [ 511.992501][T19390] ? __pfx_ksys_write+0x10/0x10 [ 511.992531][T19390] __x64_sys_connect+0x7a/0x90 [ 511.992557][T19390] do_syscall_64+0xfa/0xfa0 [ 511.992580][T19390] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.992602][T19390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.992619][T19390] ? clear_bhb_loop+0x60/0xb0 [ 511.992641][T19390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.992657][T19390] RIP: 0033:0x7f96bfd8efc9 [ 511.992673][T19390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.992688][T19390] RSP: 002b:00007f96c0c69038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 511.992708][T19390] RAX: ffffffffffffffda RBX: 00007f96bffe6180 RCX: 00007f96bfd8efc9 [ 511.992721][T19390] RDX: 000000000000001c RSI: 0000200000000300 RDI: 0000000000000009 [ 511.992733][T19390] RBP: 00007f96c0c69090 R08: 0000000000000000 R09: 0000000000000000 [ 511.992744][T19390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.992754][T19390] R13: 00007f96bffe6218 R14: 00007f96bffe6180 R15: 00007ffd48763d78 [ 511.992782][T19390] [ 512.369191][T19397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4142'. [ 512.383683][T19397] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 512.918953][T19425] netlink: 'syz.2.4150': attribute type 1 has an invalid length. [ 512.923709][T19427] netlink: 'syz.1.4153': attribute type 21 has an invalid length. [ 512.942207][T19427] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4153'. [ 512.960077][T19427] netlink: 'syz.1.4153': attribute type 4 has an invalid length. [ 512.969371][T19427] netlink: 'syz.1.4153': attribute type 5 has an invalid length. [ 512.975540][T19433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4154'. [ 512.977691][T19427] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4153'. [ 513.024443][T19424] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 513.036751][T19433] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 513.424187][T19443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.483288][T19449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4157'. [ 513.839771][T19466] sctp: [Deprecated]: syz.3.4163 (pid 19466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.839771][T19466] Use struct sctp_sack_info instead [ 513.864446][T19467] FAULT_INJECTION: forcing a failure. [ 513.864446][T19467] name failslab, interval 1, probability 0, space 0, times 0 [ 513.878402][T19467] CPU: 1 UID: 0 PID: 19467 Comm: syz.1.4160 Not tainted syzkaller #0 PREEMPT(full) [ 513.878432][T19467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 513.878445][T19467] Call Trace: [ 513.878454][T19467] [ 513.878464][T19467] dump_stack_lvl+0x189/0x250 [ 513.878500][T19467] ? __pfx____ratelimit+0x10/0x10 [ 513.878525][T19467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.878553][T19467] ? __pfx__printk+0x10/0x10 [ 513.878578][T19467] ? __pfx___might_resched+0x10/0x10 [ 513.878598][T19467] ? fs_reclaim_acquire+0x7d/0x100 [ 513.878636][T19467] should_fail_ex+0x414/0x560 [ 513.878679][T19467] should_failslab+0xa8/0x100 [ 513.878703][T19467] __kmalloc_cache_noprof+0x6f/0x6f0 [ 513.878733][T19467] ? sctp_add_bind_addr+0x8c/0x370 [ 513.878758][T19467] sctp_add_bind_addr+0x8c/0x370 [ 513.878781][T19467] sctp_bind_addr_copy+0x189/0x3c0 [ 513.878806][T19467] sctp_connect_new_asoc+0x2e0/0x690 [ 513.878832][T19467] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 513.878857][T19467] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 513.878881][T19467] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 513.878903][T19467] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 513.878927][T19467] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 513.878961][T19467] __sctp_connect+0x5ba/0xd50 [ 513.878995][T19467] ? __pfx___sctp_connect+0x10/0x10 [ 513.879027][T19467] sctp_inet_connect+0x12e/0x1e0 [ 513.879051][T19467] __sys_connect+0x316/0x440 [ 513.879075][T19467] ? __fget_files+0x3a0/0x420 [ 513.879090][T19467] ? __pfx___sys_connect+0x10/0x10 [ 513.879124][T19467] ? __pfx_ksys_write+0x10/0x10 [ 513.879151][T19467] __x64_sys_connect+0x7a/0x90 [ 513.879175][T19467] do_syscall_64+0xfa/0xfa0 [ 513.879194][T19467] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.879215][T19467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.879230][T19467] ? clear_bhb_loop+0x60/0xb0 [ 513.879249][T19467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.879264][T19467] RIP: 0033:0x7f4de8f8efc9 [ 513.879279][T19467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.879292][T19467] RSP: 002b:00007f4de71ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 513.879310][T19467] RAX: ffffffffffffffda RBX: 00007f4de91e6180 RCX: 00007f4de8f8efc9 [ 513.879322][T19467] RDX: 000000000000001c RSI: 0000200000000300 RDI: 0000000000000009 [ 513.879332][T19467] RBP: 00007f4de71ac090 R08: 0000000000000000 R09: 0000000000000000 [ 513.879341][T19467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.879351][T19467] R13: 00007f4de91e6218 R14: 00007f4de91e6180 R15: 00007ffced1ab568 [ 513.879376][T19467] [ 514.208412][T19472] netlink: 'syz.4.4165': attribute type 10 has an invalid length. [ 514.278220][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4164'. [ 514.302518][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4164'. [ 514.330908][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4164'. [ 514.341971][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4164'. [ 514.492151][T19480] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 514.506351][T19482] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 515.162886][T19513] Cannot find set identified by id 1 to match [ 515.566151][T19527] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 515.809810][T19537] 8021q: adding VLAN 0 to HW filter on device bond10 [ 515.942430][T19543] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 516.379747][T19560] tc_dump_action: action bad kind [ 516.545429][T19567] syzkaller0: entered promiscuous mode [ 516.551872][T19567] syzkaller0: entered allmulticast mode [ 516.557891][T19573] __nla_validate_parse: 33 callbacks suppressed [ 516.557911][T19573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4199'. [ 516.570922][T19574] netlink: 'syz.1.4201': attribute type 10 has an invalid length. [ 516.668437][T19574] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 516.714409][T19577] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 516.810741][T19585] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4204'. [ 516.851895][T19577] 8021q: adding VLAN 0 to HW filter on device bond5 [ 516.862530][T19589] netlink: zone id is out of range [ 516.914019][T19583] syzkaller0: entered promiscuous mode [ 516.930238][T19583] syzkaller0: entered allmulticast mode [ 516.931308][T19592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4207'. [ 516.981533][T19592] syzkaller0: entered promiscuous mode [ 517.007273][T19592] syzkaller0: entered allmulticast mode [ 517.050436][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4207'. [ 517.066600][T19592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4207'. [ 517.079403][T19583] tipc: Enabled bearer , priority 0 [ 517.168337][T19582] tipc: Resetting bearer [ 517.216225][T19582] tipc: Disabling bearer [ 517.240150][T19606] batadv_slave_1: entered promiscuous mode [ 517.800733][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4217'. [ 517.974795][T19626] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 518.075377][T19626] 8021q: adding VLAN 0 to HW filter on device bond6 [ 518.112115][T19605] batadv_slave_1: left promiscuous mode [ 518.493403][T19650] syzkaller0: entered promiscuous mode [ 518.500554][T19650] syzkaller0: entered allmulticast mode [ 518.516100][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4228'. [ 518.564854][T19654] xt_l2tp: v2 sid > 0xffff: 1114112 [ 518.573657][T19650] tipc: Enabled bearer , priority 0 [ 518.595464][T19656] xt_l2tp: v2 sid > 0xffff: 1114112 [ 518.652976][T19649] tipc: Resetting bearer [ 518.723302][T19649] tipc: Disabling bearer [ 518.833116][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4232'. [ 518.981848][T19680] sctp: [Deprecated]: syz.4.4232 (pid 19680) Use of int in max_burst socket option deprecated. [ 518.981848][T19680] Use struct sctp_assoc_value instead [ 519.000259][T19680] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4232'. [ 519.016613][T19680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4232'. [ 519.441240][T19704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.897749][T19716] netlink: 'syz.4.4249': attribute type 8 has an invalid length. [ 519.924655][T19716] nbd: couldn't find a device at index 0 [ 520.090242][T19729] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 520.208543][T19735] netlink: 'syz.0.4254': attribute type 3 has an invalid length. [ 520.476038][T19751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.720059][T19762] nbd: couldn't find a device at index 0 [ 520.839648][T19769] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 521.144652][T19771] Cannot find set identified by id 1 to match [ 521.482655][T19787] netlink: 'syz.1.4276': attribute type 10 has an invalid length. [ 521.491147][T19787] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 521.511267][T19787] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 521.529048][T19787] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 521.591074][T19791] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 521.657324][T19787] __nla_validate_parse: 12 callbacks suppressed [ 521.657346][T19787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4276'. [ 521.902689][T19811] Cannot find set identified by id 1 to match [ 522.014831][T19816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4285'. [ 522.169576][T19819] bond0: (slave bridge_slave_1): Releasing backup interface [ 522.203528][T19819] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 522.252471][T19829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4287'. [ 522.284722][T19821] bond11: option lp_interval: invalid value (0) [ 522.307027][T19821] bond11: option lp_interval: allowed values 1 - 2147483647 [ 522.326891][T19821] bond11 (unregistering): Released all slaves [ 522.462303][T19823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 522.615151][T19843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4293'. [ 522.646391][T19843] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 523.170646][T19866] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 523.265134][T19866] 8021q: adding VLAN 0 to HW filter on device bond6 [ 523.298761][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4306'. [ 523.443438][ T5886] IPVS: starting estimator thread 0... [ 523.538303][T19886] IPVS: using max 24 ests per chain, 57600 per kthread [ 523.619595][T19889] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4315'. [ 523.663347][T19895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4313'. [ 523.732493][T19895] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 523.783488][T19901] FAULT_INJECTION: forcing a failure. [ 523.783488][T19901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.798426][T19901] CPU: 1 UID: 0 PID: 19901 Comm: syz.4.4316 Not tainted syzkaller #0 PREEMPT(full) [ 523.798456][T19901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 523.798469][T19901] Call Trace: [ 523.798477][T19901] [ 523.798485][T19901] dump_stack_lvl+0x189/0x250 [ 523.798519][T19901] ? __pfx____ratelimit+0x10/0x10 [ 523.798546][T19901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.798576][T19901] ? __pfx__printk+0x10/0x10 [ 523.798599][T19901] ? __might_fault+0xb0/0x130 [ 523.798641][T19901] should_fail_ex+0x414/0x560 [ 523.798679][T19901] _copy_from_user+0x2d/0xb0 [ 523.798767][T19901] __sys_sendto+0x25c/0x520 [ 523.798803][T19901] ? __pfx___sys_sendto+0x10/0x10 [ 523.798833][T19901] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 523.798892][T19901] ? __fget_files+0x3a0/0x420 [ 523.798925][T19901] ? ksys_write+0x22a/0x250 [ 523.798964][T19901] ? __pfx_ksys_write+0x10/0x10 [ 523.798998][T19901] __x64_sys_sendto+0xde/0x100 [ 523.799035][T19901] do_syscall_64+0xfa/0xfa0 [ 523.799061][T19901] ? lockdep_hardirqs_on+0x9c/0x150 [ 523.799088][T19901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.799110][T19901] ? clear_bhb_loop+0x60/0xb0 [ 523.799137][T19901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.799158][T19901] RIP: 0033:0x7f560278efc9 [ 523.799186][T19901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.799205][T19901] RSP: 002b:00007f5603669038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 523.799228][T19901] RAX: ffffffffffffffda RBX: 00007f56029e5fa0 RCX: 00007f560278efc9 [ 523.799262][T19901] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000003 [ 523.799277][T19901] RBP: 00007f5603669090 R08: 0000200000000140 R09: 000000000000001c [ 523.799291][T19901] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 523.799305][T19901] R13: 00007f56029e6038 R14: 00007f56029e5fa0 R15: 00007ffd50bff4d8 [ 523.799341][T19901] [ 524.071510][T19903] netlink: 'syz.2.4317': attribute type 13 has an invalid length. [ 524.086711][T19907] sctp: [Deprecated]: syz.2.4317 (pid 19907) Use of int in maxseg socket option. [ 524.086711][T19907] Use struct sctp_assoc_value instead [ 524.254836][T19919] Cannot find set identified by id 1 to match [ 524.264323][T19922] netlink: 71 bytes leftover after parsing attributes in process `syz.2.4323'. [ 524.305385][T19911] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 524.394528][T19917] 8021q: adding VLAN 0 to HW filter on device bond7 [ 524.441594][T19921] syzkaller0: entered promiscuous mode [ 524.448090][T19921] syzkaller0: entered allmulticast mode [ 524.486262][T19931] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4324'. [ 524.526260][T19931] nbd: couldn't find a device at index 0 [ 524.660064][T19938] Cannot find add_set index 1 as target [ 524.694564][T19940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4328'. [ 526.471111][T19940] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 526.723440][T19973] netlink: 'syz.1.4340': attribute type 8 has an invalid length. [ 526.741933][T19973] __nla_validate_parse: 2 callbacks suppressed [ 526.741957][T19973] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4340'. [ 526.758726][T19975] Cannot find add_set index 1 as target [ 526.774648][T19973] nbd: couldn't find a device at index 0 [ 526.836932][T19978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4343'. [ 527.004466][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4346'. [ 527.042544][T19985] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 527.176924][T19995] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4351'. [ 527.231793][T19996] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 527.272288][T19995] tc_dump_action: action bad kind [ 527.342268][T19996] 8021q: adding VLAN 0 to HW filter on device bond4 [ 527.409639][T20006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4356'. [ 527.427970][T20006] delete_channel: no stack [ 527.701363][T20020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4357'. [ 527.750823][T20020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4357'. [ 527.914246][T20036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4363'. [ 527.926663][T20036] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 528.066096][T20039] netlink: 'syz.3.4365': attribute type 6 has an invalid length. [ 528.093594][T20039] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4365'. [ 528.118102][T20039] nbd: couldn't find a device at index 0 [ 528.152431][T20045] bond0: (slave bridge_slave_1): Releasing backup interface [ 528.173309][T20045] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 528.294633][T20051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4370'. [ 528.302224][T20045] 8021q: adding VLAN 0 to HW filter on device bond11 [ 528.730530][T20069] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 529.285205][T20094] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 529.358011][T20098] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 529.507406][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 529.590209][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 529.791641][T20122] syzkaller0: entered promiscuous mode [ 529.799295][T20122] syzkaller0: entered allmulticast mode [ 529.821060][T20122] tipc: Enabled bearer , priority 0 [ 529.829526][T20121] tipc: Resetting bearer [ 529.847947][T20121] tipc: Disabling bearer [ 530.073193][T20126] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 530.319793][T20138] Cannot find add_set index 1 as target [ 530.868013][T20150] syzkaller1: entered promiscuous mode [ 530.897230][T20150] syzkaller1: entered allmulticast mode [ 530.914169][T20150] nbd: couldn't find a device at index 0 [ 531.022545][T20160] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 531.910967][T20197] __nla_validate_parse: 6 callbacks suppressed [ 531.910989][T20197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4429'. [ 531.930687][T20197] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 532.179476][T20202] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 532.179539][ T5879] IPVS: starting estimator thread 0... [ 532.227744][T20202] pim6reg: entered allmulticast mode [ 532.251552][T20202] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4432'. [ 532.279210][T20202] nbd: couldn't find a device at index 0 [ 532.297300][T20209] IPVS: using max 25 ests per chain, 60000 per kthread [ 532.367940][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4435'. [ 532.483864][T20218] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 532.655149][T20218] 8021q: adding VLAN 0 to HW filter on device bond7 [ 532.737049][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4442'. [ 532.752288][T20232] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 533.049989][T20245] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4448'. [ 533.063450][T20244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4447'. [ 533.215839][T20254] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4449'. [ 533.231460][T20254] nbd: couldn't find a device at index 0 [ 533.400116][T20263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4455'. [ 533.415875][T20260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 533.435653][T20263] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 533.520419][T20264] 8021q: adding VLAN 0 to HW filter on device bond12 [ 533.660267][T20273] FAULT_INJECTION: forcing a failure. [ 533.660267][T20273] name failslab, interval 1, probability 0, space 0, times 0 [ 533.673988][T20273] CPU: 0 UID: 0 PID: 20273 Comm: syz.2.4459 Not tainted syzkaller #0 PREEMPT(full) [ 533.674018][T20273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 533.674032][T20273] Call Trace: [ 533.674051][T20273] [ 533.674061][T20273] dump_stack_lvl+0x189/0x250 [ 533.674098][T20273] ? __pfx____ratelimit+0x10/0x10 [ 533.674126][T20273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.674157][T20273] ? __pfx__printk+0x10/0x10 [ 533.674184][T20273] ? kmalloc_reserve+0xbd/0x290 [ 533.674221][T20273] ? rcu_is_watching+0x15/0xb0 [ 533.674252][T20273] should_fail_ex+0x414/0x560 [ 533.674292][T20273] should_failslab+0xa8/0x100 [ 533.674317][T20273] kmem_cache_alloc_noprof+0x74/0x6e0 [ 533.674349][T20273] ? _sctp_make_chunk+0x14e/0x430 [ 533.674378][T20273] ? skb_put+0x11b/0x210 [ 533.674402][T20273] _sctp_make_chunk+0x14e/0x430 [ 533.674438][T20273] sctp_make_init+0x58b/0xd30 [ 533.674464][T20273] ? is_bpf_text_address+0x292/0x2b0 [ 533.674503][T20273] ? __pfx_sctp_make_init+0x10/0x10 [ 533.674547][T20273] ? stack_trace_save+0x9c/0xe0 [ 533.674576][T20273] ? __pfx_stack_trace_save+0x10/0x10 [ 533.674610][T20273] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 533.674638][T20273] sctp_do_sm+0x1e7/0x5a20 [ 533.674662][T20273] ? __pfx_sctp_pname+0x10/0x10 [ 533.674684][T20273] ? kasan_save_track+0x4f/0x80 [ 533.674714][T20273] ? kasan_save_track+0x3e/0x80 [ 533.674744][T20273] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 533.674775][T20273] ? sctp_sendmsg_to_asoc+0x12f8/0x1810 [ 533.674808][T20273] ? __sys_sendto+0x3bd/0x520 [ 533.674839][T20273] ? __x64_sys_sendto+0xde/0x100 [ 533.674870][T20273] ? do_syscall_64+0xfa/0xfa0 [ 533.674896][T20273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.674926][T20273] ? __pfx_sctp_do_sm+0x10/0x10 [ 533.674996][T20273] ? __sk_mem_raise_allocated+0x7ef/0x11a0 [ 533.675041][T20273] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 533.675081][T20273] sctp_sendmsg_to_asoc+0x1028/0x1810 [ 533.675112][T20273] ? __asan_memcpy+0x40/0x70 [ 533.675150][T20273] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 533.675188][T20273] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 533.675223][T20273] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 533.675260][T20273] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 533.675295][T20273] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 533.675328][T20273] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 533.675363][T20273] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 533.675387][T20273] ? security_sctp_bind_connect+0x7e/0x2e0 [ 533.675417][T20273] sctp_sendmsg+0x1941/0x2810 [ 533.675465][T20273] ? __pfx_sctp_sendmsg+0x10/0x10 [ 533.675503][T20273] ? aa_sk_perm+0x81e/0x950 [ 533.675539][T20273] ? __pfx_aa_sk_perm+0x10/0x10 [ 533.675574][T20273] ? sock_rps_record_flow+0x19/0x410 [ 533.675608][T20273] ? inet_sendmsg+0x2f4/0x370 [ 533.675639][T20273] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.675664][T20273] __sock_sendmsg+0x19c/0x270 [ 533.675697][T20273] __sys_sendto+0x3bd/0x520 [ 533.675733][T20273] ? __pfx___sys_sendto+0x10/0x10 [ 533.675764][T20273] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 533.675810][T20273] ? __fget_files+0x3a0/0x420 [ 533.675843][T20273] ? ksys_write+0x22a/0x250 [ 533.675877][T20273] ? __pfx_ksys_write+0x10/0x10 [ 533.675913][T20273] __x64_sys_sendto+0xde/0x100 [ 533.675950][T20273] do_syscall_64+0xfa/0xfa0 [ 533.675978][T20273] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.676006][T20273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.676028][T20273] ? clear_bhb_loop+0x60/0xb0 [ 533.676063][T20273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.676085][T20273] RIP: 0033:0x7f96bfd8efc9 [ 533.676106][T20273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.676125][T20273] RSP: 002b:00007f96c0cab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 533.676150][T20273] RAX: ffffffffffffffda RBX: 00007f96bffe5fa0 RCX: 00007f96bfd8efc9 [ 533.676166][T20273] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000003 [ 533.676182][T20273] RBP: 00007f96c0cab090 R08: 0000200000000140 R09: 000000000000001c [ 533.676197][T20273] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 533.676211][T20273] R13: 00007f96bffe6038 R14: 00007f96bffe5fa0 R15: 00007ffd48763d78 [ 533.676250][T20273] [ 534.134504][T20276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4460'. [ 534.248103][T20276] bond13 (unregistering): Released all slaves [ 534.301303][T20284] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4461'. [ 534.368152][T20286] syzkaller0: entered promiscuous mode [ 534.379139][T20286] syzkaller0: entered allmulticast mode [ 534.560511][T20302] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 535.181821][T20329] Cannot find add_set index 1 as target [ 535.620431][T20344] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 535.797617][T20350] netlink: 'syz.2.4484': attribute type 1 has an invalid length. [ 535.832800][T20352] netlink: 'syz.3.4485': attribute type 1 has an invalid length. [ 535.843441][T20352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.863267][T20348] netdevsim netdevsim0: Direct firmware load for lookup_extent_enter failed with error -2 [ 535.875060][T20348] netdevsim netdevsim0: Falling back to sysfs fallback for: lookup_extent_enter [ 537.540433][T20379] netlink: 'syz.0.4494': attribute type 10 has an invalid length. [ 537.832894][T20379] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 538.659614][T20383] __nla_validate_parse: 6 callbacks suppressed [ 538.659635][T20383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4496'. [ 538.675593][T20382] veth1_vlan: mtu greater than device maximum [ 538.731349][T20390] FAULT_INJECTION: forcing a failure. [ 538.731349][T20390] name failslab, interval 1, probability 0, space 0, times 0 [ 538.744590][T20383] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 538.771593][T20390] CPU: 1 UID: 0 PID: 20390 Comm: syz.0.4499 Not tainted syzkaller #0 PREEMPT(full) [ 538.771626][T20390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 538.771641][T20390] Call Trace: [ 538.771650][T20390] [ 538.771660][T20390] dump_stack_lvl+0x189/0x250 [ 538.771697][T20390] ? __pfx____ratelimit+0x10/0x10 [ 538.771725][T20390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.771756][T20390] ? __pfx__printk+0x10/0x10 [ 538.771783][T20390] ? __pfx___might_resched+0x10/0x10 [ 538.771809][T20390] ? fs_reclaim_acquire+0x7d/0x100 [ 538.771853][T20390] should_fail_ex+0x414/0x560 [ 538.771893][T20390] should_failslab+0xa8/0x100 [ 538.771918][T20390] __kmalloc_cache_noprof+0x6f/0x6f0 [ 538.771951][T20390] ? sctp_datamsg_from_user+0x88/0xef0 [ 538.771987][T20390] sctp_datamsg_from_user+0x88/0xef0 [ 538.772016][T20390] ? __sk_mem_raise_allocated+0x7ef/0x11a0 [ 538.772056][T20390] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 538.772097][T20390] sctp_sendmsg_to_asoc+0xffe/0x1810 [ 538.772129][T20390] ? __asan_memcpy+0x40/0x70 [ 538.772167][T20390] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 538.772206][T20390] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 538.772240][T20390] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 538.772277][T20390] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 538.772313][T20390] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 538.772345][T20390] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 538.772381][T20390] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 538.772405][T20390] ? security_sctp_bind_connect+0x7e/0x2e0 [ 538.772436][T20390] sctp_sendmsg+0x1941/0x2810 [ 538.772484][T20390] ? __pfx_sctp_sendmsg+0x10/0x10 [ 538.772522][T20390] ? aa_sk_perm+0x81e/0x950 [ 538.772564][T20390] ? __pfx_aa_sk_perm+0x10/0x10 [ 538.772599][T20390] ? sock_rps_record_flow+0x19/0x410 [ 538.772635][T20390] ? inet_sendmsg+0x2f4/0x370 [ 538.772667][T20390] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 538.772695][T20390] __sock_sendmsg+0x19c/0x270 [ 538.772728][T20390] __sys_sendto+0x3bd/0x520 [ 538.772765][T20390] ? __pfx___sys_sendto+0x10/0x10 [ 538.772796][T20390] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 538.772843][T20390] ? __fget_files+0x3a0/0x420 [ 538.772878][T20390] ? ksys_write+0x22a/0x250 [ 538.772913][T20390] ? __pfx_ksys_write+0x10/0x10 [ 538.772949][T20390] __x64_sys_sendto+0xde/0x100 [ 538.772988][T20390] do_syscall_64+0xfa/0xfa0 [ 538.773015][T20390] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.773044][T20390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.773067][T20390] ? clear_bhb_loop+0x60/0xb0 [ 538.773095][T20390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.773117][T20390] RIP: 0033:0x7f193a38efc9 [ 538.773138][T20390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.773159][T20390] RSP: 002b:00007f193b302038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 538.773184][T20390] RAX: ffffffffffffffda RBX: 00007f193a5e5fa0 RCX: 00007f193a38efc9 [ 538.773200][T20390] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000003 [ 538.773214][T20390] RBP: 00007f193b302090 R08: 0000200000000140 R09: 000000000000001c [ 538.773229][T20390] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 538.773243][T20390] R13: 00007f193a5e6038 R14: 00007f193a5e5fa0 R15: 00007ffde332f188 [ 538.773281][T20390] [ 539.170805][T20394] netlink: 'syz.2.4500': attribute type 5 has an invalid length. [ 539.297477][T20400] netlink: 'syz.2.4502': attribute type 1 has an invalid length. [ 539.408713][T20408] FAULT_INJECTION: forcing a failure. [ 539.408713][T20408] name failslab, interval 1, probability 0, space 0, times 0 [ 539.442331][T20408] CPU: 1 UID: 0 PID: 20408 Comm: syz.3.4504 Not tainted syzkaller #0 PREEMPT(full) [ 539.442361][T20408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 539.442376][T20408] Call Trace: [ 539.442385][T20408] [ 539.442394][T20408] dump_stack_lvl+0x189/0x250 [ 539.442429][T20408] ? __pfx____ratelimit+0x10/0x10 [ 539.442456][T20408] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.442487][T20408] ? __pfx__printk+0x10/0x10 [ 539.442515][T20408] ? __pfx___might_resched+0x10/0x10 [ 539.442539][T20408] ? fs_reclaim_acquire+0x7d/0x100 [ 539.442577][T20408] should_fail_ex+0x414/0x560 [ 539.442615][T20408] should_failslab+0xa8/0x100 [ 539.442639][T20408] kmem_cache_alloc_node_noprof+0x77/0x710 [ 539.442669][T20408] ? __alloc_skb+0x112/0x2d0 [ 539.442702][T20408] ? netlink_autobind+0xdb/0x300 [ 539.442728][T20408] __alloc_skb+0x112/0x2d0 [ 539.442764][T20408] netlink_sendmsg+0x5c6/0xb30 [ 539.442794][T20408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.442833][T20408] ? aa_sock_msg_perm+0xf1/0x1d0 [ 539.442867][T20408] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 539.442889][T20408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.442924][T20408] __sock_sendmsg+0x21c/0x270 [ 539.442956][T20408] ____sys_sendmsg+0x505/0x830 [ 539.442985][T20408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.443017][T20408] ? import_iovec+0x74/0xa0 [ 539.443049][T20408] ___sys_sendmsg+0x21f/0x2a0 [ 539.443075][T20408] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.443138][T20408] ? __fget_files+0x2a/0x420 [ 539.443158][T20408] ? __fget_files+0x3a0/0x420 [ 539.443191][T20408] __x64_sys_sendmsg+0x19b/0x260 [ 539.443227][T20408] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.443262][T20408] ? __pfx_ksys_write+0x10/0x10 [ 539.443298][T20408] ? do_syscall_64+0xbe/0xfa0 [ 539.443331][T20408] do_syscall_64+0xfa/0xfa0 [ 539.443358][T20408] ? lockdep_hardirqs_on+0x9c/0x150 [ 539.443386][T20408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.443408][T20408] ? clear_bhb_loop+0x60/0xb0 [ 539.443435][T20408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.443457][T20408] RIP: 0033:0x7fc6d4b8efc9 [ 539.443478][T20408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.443497][T20408] RSP: 002b:00007fc6d59ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.443521][T20408] RAX: ffffffffffffffda RBX: 00007fc6d4de5fa0 RCX: 00007fc6d4b8efc9 [ 539.443538][T20408] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 539.443553][T20408] RBP: 00007fc6d59ba090 R08: 0000000000000000 R09: 0000000000000000 [ 539.443567][T20408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.443581][T20408] R13: 00007fc6d4de6038 R14: 00007fc6d4de5fa0 R15: 00007ffdfb603ff8 [ 539.443619][T20408] [ 539.806740][T20415] syzkaller0: entered promiscuous mode [ 539.844355][T20415] syzkaller0: entered allmulticast mode [ 539.923370][T20420] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.4506'. [ 540.030458][T20427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4513'. [ 540.042614][T20427] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 540.174649][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4512'. [ 540.234828][T20434] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 540.265062][T20436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4514'. [ 540.274512][T20436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4514'. [ 540.409049][T20434] 8021q: adding VLAN 0 to HW filter on device bond5 [ 540.710826][T20456] syzkaller0: entered promiscuous mode [ 540.716387][T20456] syzkaller0: entered allmulticast mode [ 540.925661][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4528'. [ 541.046271][T20480] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4530'. [ 541.075015][T20484] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4531'. [ 541.105830][T20480] netlink: 'syz.4.4530': attribute type 11 has an invalid length. [ 541.128397][T20476] bond7 (unregistering): Released all slaves [ 541.548795][T20488] A link change request failed with some changes committed already. Interface bond4 may have been left with an inconsistent configuration, please check. [ 541.581186][T20490] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 541.644004][T20491] 8021q: adding VLAN 0 to HW filter on device bond13 [ 541.677190][ T5995] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.717882][ T5995] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.726511][ T5995] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.785114][ T5995] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.869944][ T60] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.901684][ T60] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.937565][ T60] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 541.949530][T20513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4540'. [ 541.959935][ T60] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.017781][T20517] netlink: 'syz.1.4540': attribute type 21 has an invalid length. [ 542.700171][T20554] x_tables: ip_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 542.890614][T20564] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 542.901062][ T30] audit: type=1107 audit(1761614547.850:3): pid=20561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 543.688464][T20604] __nla_validate_parse: 5 callbacks suppressed [ 543.688485][T20604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4575'. [ 543.713100][T20604] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 543.961788][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4580'. [ 543.965987][T20621] netlink: 'syz.2.4582': attribute type 4 has an invalid length. [ 543.974478][T20616] ip6gre1: entered allmulticast mode [ 544.001180][T20621] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4582'. [ 544.348572][T20645] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 544.355918][T20645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.469557][T20650] netlink: 'syz.0.4590': attribute type 23 has an invalid length. [ 544.523539][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4593'. [ 544.575778][T20652] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4593'. [ 544.649290][T20660] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 544.939994][T20673] netlink: 'syz.4.4601': attribute type 11 has an invalid length. [ 544.949001][T20673] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.4601'. [ 546.663013][T20689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4608'. [ 546.717706][T20690] syzkaller0: entered promiscuous mode [ 546.723395][T20690] syzkaller0: entered allmulticast mode [ 546.795483][T20694] IPVS: set_ctl: invalid protocol: 135 172.20.20.22:20001 [ 547.068431][T20708] netlink: 'syz.3.4617': attribute type 21 has an invalid length. [ 547.156692][T20708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4617'. [ 547.394272][T20722] syzkaller0: entered promiscuous mode [ 547.411274][T20722] syzkaller0: entered allmulticast mode [ 547.458977][T20726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4624'. [ 547.519503][T20722] tipc: Enabled bearer , priority 0 [ 547.530287][T20733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4622'. [ 547.545288][T20721] tipc: Resetting bearer [ 547.602457][T20737] Cannot find del_set index 108 as target [ 547.654986][T20721] tipc: Disabling bearer [ 548.136627][T20762] netlink: 'syz.0.4637': attribute type 27 has an invalid length. [ 548.146842][T20762] netlink: 'syz.0.4637': attribute type 4 has an invalid length. [ 548.572241][T20778] netlink: 'syz.3.4645': attribute type 1 has an invalid length. [ 548.732157][T20790] openvswitch: netlink: Message has 4 unknown bytes. [ 548.765948][T20792] __nla_validate_parse: 5 callbacks suppressed [ 548.765967][T20792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4645'. [ 548.786621][T20793] openvswitch: netlink: Message has 4 unknown bytes. [ 548.829845][T20792] macvlan0: entered promiscuous mode [ 548.846497][T20792] macvlan0: entered allmulticast mode [ 548.946074][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4651'. [ 549.310877][T20821] Cannot find set identified by id 1 to match [ 549.319312][T20820] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 549.408159][T20820] 8021q: adding VLAN 0 to HW filter on device bond6 [ 549.600139][T20836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4663'. [ 549.695372][T20837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4663'. [ 549.734817][T20840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4666'. [ 549.762618][T20840] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4666'. [ 550.241067][T20858] syzkaller0: entered promiscuous mode [ 550.252316][T20858] syzkaller0: entered allmulticast mode [ 550.671626][T20876] Cannot find add_set index 0 as target [ 552.844774][T20916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4685'. [ 553.246527][T20935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.431571][T20939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4701'. [ 553.445983][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4703'. [ 553.569727][T20948] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 553.620406][T20951] syzkaller0: entered promiscuous mode [ 553.626051][T20951] syzkaller0: entered allmulticast mode [ 553.688093][T20951] tipc: Enabled bearer , priority 0 [ 553.695203][T20953] syzkaller0: entered promiscuous mode [ 553.744521][T20953] syzkaller0: entered allmulticast mode [ 553.768690][T20950] tipc: Resetting bearer [ 553.790027][T20950] tipc: Disabling bearer [ 553.821289][T20961] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 554.563353][T21006] Cannot find set identified by id 1 to match [ 554.609391][T21005] syzkaller0: entered promiscuous mode [ 554.622635][T21005] syzkaller0: entered allmulticast mode [ 554.663871][T21008] bond0: (slave bridge_slave_1): Releasing backup interface [ 554.701766][T21008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 554.786306][T21009] 8021q: adding VLAN 0 to HW filter on device bond8 [ 554.817206][T21005] tipc: Enabled bearer , priority 0 [ 554.828903][T21003] tipc: Resetting bearer [ 554.976534][T21003] tipc: Disabling bearer [ 554.996589][T21025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4729'. [ 555.187523][ T5147] Bluetooth: hci3: command 0x041b tx timeout [ 555.192226][T21033] Cannot find del_set index 65280 as target [ 555.325215][T21035] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4735'. [ 556.841473][T21101] netlink: 'syz.2.4757': attribute type 27 has an invalid length. [ 556.904995][T21103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4759'. [ 557.050416][T21110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4761'. [ 557.691660][T21132] set match dimension is over the limit! [ 557.744362][T21134] netlink: 'syz.2.4770': attribute type 14 has an invalid length. [ 557.769342][T21134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4770'. [ 557.807403][T21138] Cannot find del_set index 49151 as target [ 557.810872][T21134] netlink: 'syz.2.4770': attribute type 14 has an invalid length. [ 557.838504][T21134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4770'. [ 557.972909][T21146] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4774'. [ 558.095778][T21155] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 558.509955][T21179] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4786'. [ 558.519774][T21179] IPVS: Unknown mcast interface: vcan0 [ 559.020774][T21198] x_tables: duplicate underflow at hook 1 [ 559.126069][T21203] erspan0: entered promiscuous mode [ 559.137650][T21203] erspan0: entered allmulticast mode [ 559.206013][T21206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4793'. [ 559.224728][T21206] netlink: 'syz.0.4793': attribute type 20 has an invalid length. [ 559.248846][T21207] Cannot find add_set index 0 as target [ 559.269028][ T60] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.269153][T21206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4793'. [ 559.286583][ T60] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.312094][ T60] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.322782][T21206] netlink: 'syz.0.4793': attribute type 20 has an invalid length. [ 559.559947][T21207] infiniband syz1: set down [ 559.564615][T21207] infiniband syz1: added syz_tun [ 559.575294][ T60] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 559.649420][T21207] RDS/IB: syz1: added [ 559.653615][T21207] smc: adding ib device syz1 with port count 1 [ 559.660357][T21207] smc: ib device syz1 port 1 has no pnetid [ 560.278528][T21229] __nla_validate_parse: 2 callbacks suppressed [ 560.278550][T21229] netlink: 18 bytes leftover after parsing attributes in process `syz.1.4801'. [ 560.349163][T21227] syzkaller0: entered promiscuous mode [ 560.379039][T21227] syzkaller0: entered allmulticast mode [ 560.612637][T21239] FAULT_INJECTION: forcing a failure. [ 560.612637][T21239] name failslab, interval 1, probability 0, space 0, times 0 [ 560.671070][T21239] CPU: 1 UID: 0 PID: 21239 Comm: syz.3.4803 Not tainted syzkaller #0 PREEMPT(full) [ 560.671101][T21239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 560.671115][T21239] Call Trace: [ 560.671125][T21239] [ 560.671134][T21239] dump_stack_lvl+0x189/0x250 [ 560.671170][T21239] ? __pfx____ratelimit+0x10/0x10 [ 560.671197][T21239] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.671235][T21239] ? __pfx__printk+0x10/0x10 [ 560.671265][T21239] ? __pfx___might_resched+0x10/0x10 [ 560.671290][T21239] ? fs_reclaim_acquire+0x7d/0x100 [ 560.671330][T21239] should_fail_ex+0x414/0x560 [ 560.671369][T21239] should_failslab+0xa8/0x100 [ 560.671394][T21239] kmem_cache_alloc_noprof+0x74/0x6e0 [ 560.671425][T21239] ? _sctp_make_chunk+0x14e/0x430 [ 560.671455][T21239] ? skb_put+0x11b/0x210 [ 560.671481][T21239] _sctp_make_chunk+0x14e/0x430 [ 560.671517][T21239] sctp_make_datafrag_empty+0x122/0x230 [ 560.671550][T21239] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 560.671583][T21239] ? sctp_user_addto_chunk+0xa8/0x240 [ 560.671619][T21239] sctp_datamsg_from_user+0x729/0xef0 [ 560.671670][T21239] sctp_sendmsg_to_asoc+0xffe/0x1810 [ 560.671703][T21239] ? __asan_memcpy+0x40/0x70 [ 560.671740][T21239] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 560.671778][T21239] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 560.671811][T21239] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 560.671847][T21239] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 560.671881][T21239] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 560.671912][T21239] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 560.671948][T21239] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 560.671971][T21239] ? security_sctp_bind_connect+0x7e/0x2e0 [ 560.672001][T21239] sctp_sendmsg+0x1941/0x2810 [ 560.672053][T21239] ? __pfx_sctp_sendmsg+0x10/0x10 [ 560.672094][T21239] ? aa_sk_perm+0x81e/0x950 [ 560.672130][T21239] ? __pfx_aa_sk_perm+0x10/0x10 [ 560.672163][T21239] ? sock_rps_record_flow+0x19/0x410 [ 560.672230][T21239] ? inet_sendmsg+0x2f4/0x370 [ 560.672260][T21239] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 560.672286][T21239] __sock_sendmsg+0x19c/0x270 [ 560.672318][T21239] __sys_sendto+0x3bd/0x520 [ 560.672355][T21239] ? __pfx___sys_sendto+0x10/0x10 [ 560.672386][T21239] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 560.672432][T21239] ? __fget_files+0x3a0/0x420 [ 560.672467][T21239] ? ksys_write+0x22a/0x250 [ 560.672502][T21239] ? __pfx_ksys_write+0x10/0x10 [ 560.672537][T21239] __x64_sys_sendto+0xde/0x100 [ 560.672576][T21239] do_syscall_64+0xfa/0xfa0 [ 560.672602][T21239] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.672630][T21239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.672652][T21239] ? clear_bhb_loop+0x60/0xb0 [ 560.672680][T21239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.672702][T21239] RIP: 0033:0x7fc6d4b8efc9 [ 560.672722][T21239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.672742][T21239] RSP: 002b:00007fc6d59ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 560.672766][T21239] RAX: ffffffffffffffda RBX: 00007fc6d4de5fa0 RCX: 00007fc6d4b8efc9 [ 560.672783][T21239] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000003 [ 560.672798][T21239] RBP: 00007fc6d59ba090 R08: 0000200000000140 R09: 000000000000001c [ 560.672813][T21239] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 560.672827][T21239] R13: 00007fc6d4de6038 R14: 00007fc6d4de5fa0 R15: 00007ffdfb603ff8 [ 560.672866][T21239] [ 561.623080][T21250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4806'. [ 561.649149][T21252] netlink: 'syz.2.4807': attribute type 1 has an invalid length. [ 561.660697][T21252] netlink: 'syz.2.4807': attribute type 1 has an invalid length. [ 561.767379][T21256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4809'. [ 561.796781][T21256] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4809'. [ 561.901699][T21258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4810'. [ 561.922224][T21258] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 562.143797][T21279] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 562.231690][T21279] 8021q: adding VLAN 0 to HW filter on device bond7 [ 563.013800][T21298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4817'. [ 563.052764][T21299] syzkaller0: entered promiscuous mode [ 563.064361][T21299] syzkaller0: entered allmulticast mode [ 563.360269][T21310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4823'. [ 563.379475][T21310] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 563.580110][T21320] Cannot find add_set index 1 as target [ 563.877634][T21329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4831'. [ 564.275260][T21345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4836'. [ 564.287930][T21345] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 564.580163][T21353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4839'. [ 565.387430][T21380] __nla_validate_parse: 3 callbacks suppressed [ 565.387452][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4849'. [ 565.439788][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 565.613892][T21385] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 565.778103][T21395] 8021q: adding VLAN 0 to HW filter on device bond14 [ 565.790400][T21400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4854'. [ 566.197719][T21413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 566.337262][ T50] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 566.347254][ T50] ref_tracker: netdev@ffff88807d940618 has 1/1 users at [ 566.347254][ T50] batadv_hard_if_event+0xf0f/0x1730 [ 566.347254][ T50] notifier_call_chain+0x1b6/0x3e0 [ 566.347254][ T50] register_netdevice+0x1608/0x1ae0 [ 566.347254][ T50] veth_newlink+0x5d4/0xa60 [ 566.347254][ T50] rtnl_newlink_create+0x310/0xb00 [ 566.347254][ T50] rtnl_newlink+0x16e4/0x1c80 [ 566.347254][ T50] rtnetlink_rcv_msg+0x7cf/0xb70 [ 566.347254][ T50] netlink_rcv_skb+0x208/0x470 [ 566.347254][ T50] netlink_unicast+0x82f/0x9e0 [ 566.347254][ T50] netlink_sendmsg+0x805/0xb30 [ 566.347254][ T50] __sock_sendmsg+0x21c/0x270 [ 566.347254][ T50] __sys_sendto+0x3bd/0x520 [ 566.347254][ T50] __x64_sys_sendto+0xde/0x100 [ 566.347254][ T50] do_syscall_64+0xfa/0xfa0 [ 566.347254][ T50] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.347254][ T50] [ 566.410057][T21416] bond0: (slave rose0): Error: Device is in use and cannot be enslaved