last executing test programs: 15.94905353s ago: executing program 0 (id=3603): r0 = socket$inet(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xb8}, 0x20) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}}, 0x8004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r12], 0x4) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x98, 0x8, 0xfa04, 0x1b0, 0x6c02, 0x1b0, 0x194, 0x194, 0x1b0, 0x194, 0x3, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x0, 'veth0_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'vlan0\x00', {}, {}, 0x0, 0x1, 0x44}, 0x0, 0xb0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x5, 0x3, 0x1, 0x2, 0x4], 0x4}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1b, 0x5, 0x1, 0x9, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 15.756428005s ago: executing program 0 (id=3607): r0 = socket$pptp(0x18, 0x1, 0x2) close(r0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000003c0)={0x0, 0x4}) 15.640788495s ago: executing program 0 (id=3608): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r1, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r2], 0x1c}}, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000001340)={0x2, 0x0, @local}, &(0x7f0000001380)=0x10) sendfile(r0, r0, 0x0, 0x8000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000001200)=ANY=[@ANYBLOB="18080000796412000000000024581cd060e77ca401657eae4604646c12000000851000000600000018000000", @ANYBLOB="9d7ef2cff594bc2d5704a9e1daf38162218cc2a7161ed1886ea9c126e0e7f1ebfaf0c8d5bb9c9310012e3ac886810c8c46af3adc5d59ef8903414da119", @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)={0x20, 0x0, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r5) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="e7b527ffedfa0000000000edffffff00000000000000041bdfad15d39952b9cbc30e3ecccc0ff281c39e4600330292"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000001300)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x98, r6, 0x700, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1261bb3f}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) 15.496906764s ago: executing program 0 (id=3612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523c7000000000000006422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 15.37895442s ago: executing program 0 (id=3613): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={r4, 0x6, 0x3, [0x80, 0xfffd, 0x7]}, 0xe) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25021856ff", @ANYRES32=r6, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) 14.992951372s ago: executing program 0 (id=3617): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000f80)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf2517000000480006804400040067636d28616573290000000000000000000000000000000000000000000000001c000000151e912751263d125862f16e3b9585fdc6347b3362700f6b4d17bf7b"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r3 = accept$alg(r0, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="6608040406080500fe880000000000000000000000000001fc010000000000000000000000000000ff010000000000204f9bb2cfed00000000000100"/72], 0x48) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) (async) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x1, 0x2, 0x2, 0x9}], 0x10, 0x1}, 0x94) (async) socket$kcm(0x29, 0x5, 0x0) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) (async) recvmmsg$unix(r8, 0x0, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r6, 0xb4ea}, 0x8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) getpeername$tipc(r5, &(0x7f0000000080), &(0x7f0000000280)=0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x8}, {}]}, [{}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0xfff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000000}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x8}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x80}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x9d13}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) sendmmsg$alg(r3, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) (async) recvmmsg(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) 14.659363564s ago: executing program 32 (id=3617): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000f80)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf2517000000480006804400040067636d28616573290000000000000000000000000000000000000000000000001c000000151e912751263d125862f16e3b9585fdc6347b3362700f6b4d17bf7b"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r3 = accept$alg(r0, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="6608040406080500fe880000000000000000000000000001fc010000000000000000000000000000ff010000000000204f9bb2cfed00000000000100"/72], 0x48) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) (async) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x1, 0x2, 0x2, 0x9}], 0x10, 0x1}, 0x94) (async) socket$kcm(0x29, 0x5, 0x0) (async) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) (async) recvmmsg$unix(r8, 0x0, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={r6, 0xb4ea}, 0x8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) getpeername$tipc(r5, &(0x7f0000000080), &(0x7f0000000280)=0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x0, 0x0, [{0x0, 0x0, 0x0, 0x8}, {}]}, [{}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0xfff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000000}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x8}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x80}, {0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x9d13}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) sendmmsg$alg(r3, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) (async) recvmmsg(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) 1.864558976s ago: executing program 2 (id=3746): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4000010) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x998, 0x2c, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2}, {0x0, 0xc}, {0x9, 0xc}}, [@filter_kind_options=@f_fw={{0x7}, {0x954, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x8, 0xfff3}}, @TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x3, 0xd5, 0xfff, 0x1d8, {0x5, 0x1, 0x401, 0x7, 0x5, 0x71}, {0x1, 0x0, 0x5, 0x3, 0x5, 0x2d}, 0x5, 0x7, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x1, 0xffff8001, 0x0, 0x6e42, 0x1, 0x0, 0xd3, 0xb, 0x6, 0x5, 0x0, 0x4, 0xd, 0x4, 0x1, 0x5, 0x4, 0x1, 0x0, 0xc42, 0x3, 0x8, 0x3, 0x1c, 0x0, 0x6, 0x8, 0x9, 0x20000000, 0x3a6a, 0xa62, 0x54868f9c, 0x5, 0xf, 0x5, 0x5, 0x4, 0x0, 0xffff, 0xfffffff9, 0xfffffffa, 0x5, 0xf, 0x2, 0x4, 0x7fff, 0x1000, 0x2, 0x6, 0x8000, 0x5a1, 0xb, 0x2, 0x3c, 0x80000001, 0x11, 0x5, 0x8, 0x0, 0xb, 0x6, 0x7, 0x8, 0xc8, 0x5, 0x21, 0x8, 0x9, 0x7, 0x483, 0x9, 0x3, 0x7fffffff, 0x7, 0x10, 0x3, 0x8, 0xff, 0x800, 0x6, 0x8, 0x83aa, 0x1, 0x7fff, 0xb3, 0xb1, 0x401, 0xfff, 0x9f0, 0xbf, 0x469f899c, 0x4, 0x4, 0x4, 0x8, 0x3, 0x9, 0x214d, 0x8, 0x1b, 0xfe9, 0x0, 0x0, 0x5, 0x5, 0x7fffffff, 0x9, 0x1d, 0x4, 0x8, 0x2, 0x6, 0x8, 0x200, 0x800, 0x0, 0x8, 0x9, 0x9, 0x86c, 0xffffffff, 0x401, 0x9, 0x5, 0x5, 0xffffff00, 0xffffffff, 0xfffffffa, 0x9, 0x6, 0x2, 0x5, 0x0, 0x7fffffff, 0xed, 0x40, 0xb, 0x2, 0x3, 0xfff, 0x4, 0x8d, 0x8, 0x9, 0x8, 0xf, 0x618, 0x5, 0x3fc, 0x3, 0x8, 0x2, 0x65, 0x6, 0xca7b, 0x3, 0x6, 0xfffffff7, 0x100, 0xffffffff, 0x9, 0x40, 0x7, 0x10, 0x1ff, 0x80, 0x9, 0x3, 0x0, 0xf98c, 0x73, 0x2, 0x8001, 0x6, 0x8, 0x2, 0x10, 0x7fff, 0x4, 0x5, 0x1, 0x23d, 0x7ff, 0x4b, 0x5, 0x7, 0x0, 0x8, 0xa00000, 0x0, 0xecbd, 0x8, 0x0, 0xd2, 0x6, 0x5d3, 0xfffffff8, 0x3, 0x2, 0x1, 0x7fffffff, 0x9, 0x6, 0x5, 0x101, 0x100, 0x495, 0x4, 0x4e, 0x8, 0x8, 0x8, 0x2, 0x5, 0xe85, 0x0, 0x3, 0x401, 0x10, 0x8, 0x6, 0x1, 0x2, 0x400, 0x3b0, 0x80000000, 0x3, 0x7f, 0x400, 0x5, 0xe, 0x8, 0xbfab, 0x8, 0x40, 0xffffffff, 0x3, 0x0, 0xfffffbff, 0x101, 0x5e1, 0x5, 0x3, 0xc00, 0xd, 0xfffffff7, 0x6, 0x81, 0x200, 0x7, 0x4, 0x7, 0x2, 0x3, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf86, 0x6, 0x0, 0xc6, 0x3, 0x7fff, 0x6, 0xf, 0xc, 0x3, 0x8, 0x5, 0x3, 0x3, 0x9, 0x1, 0x3, 0x0, 0x2, 0x3, 0x9, 0x2, 0xd, 0x0, 0x8, 0x3, 0x0, 0xffff, 0x0, 0x6e6d, 0x7e7, 0x0, 0x1000, 0x8, 0x78, 0x400, 0x9, 0x7, 0x42, 0x101, 0x7fff, 0x0, 0x7fff, 0xd70, 0x8, 0x5, 0xd19, 0x9, 0x0, 0x5, 0x81, 0x9, 0x0, 0x10000, 0x1, 0x99a, 0x9, 0x9, 0x16500000, 0x9, 0x8, 0x2cf1, 0x2, 0x1, 0xff, 0x7fff, 0x3, 0xd, 0x5, 0x7f, 0x6, 0x8, 0x0, 0x9, 0x5, 0x3, 0x8, 0x9, 0x4, 0xfffeffff, 0xb943, 0x6, 0xc, 0x8, 0xfffffff8, 0x2, 0xfffffffa, 0x8, 0x1, 0x1, 0x2, 0xac50, 0x4, 0x6, 0x4, 0x1, 0x80000001, 0x2f0fc175, 0x101, 0x3, 0x5, 0x83, 0x3, 0x0, 0x37a, 0x99d, 0x100, 0x0, 0x8, 0x7, 0x81, 0x7, 0x1, 0xc7, 0x9, 0x9, 0x33, 0x6, 0x1800000, 0x3, 0x7ff, 0x9, 0x80000000, 0x0, 0x8000, 0x737e, 0x7, 0x6, 0x7, 0x8, 0x4, 0x5, 0x8, 0x4, 0x10000, 0xfffffff7, 0x10000, 0xbd3, 0xd7, 0xffffffff, 0x26d8, 0x3, 0x6ff8, 0x8, 0x4, 0x2800000, 0x800, 0xffff0001, 0x8000, 0xffffffff, 0x0, 0x8, 0x1000, 0xc4a6, 0x8, 0x7934, 0x22, 0x4, 0x0, 0x4, 0x800, 0xfffffff9, 0x5, 0x9, 0x3, 0x2, 0x6, 0x14, 0xe2, 0x3, 0x4, 0xd570, 0x6, 0x7fffffff, 0x0, 0x3, 0x6, 0x5, 0xa, 0x8, 0x3, 0x400, 0x0, 0x2, 0x10000, 0xa50, 0x7f, 0x9, 0x9, 0xfffffff9, 0x2, 0x6, 0x4, 0x3a91, 0x4, 0x1000, 0x3, 0x10, 0x4, 0x9b, 0xd07, 0xd, 0x6, 0x7fffffff, 0x7, 0x8, 0xb66, 0x7fffffff, 0x4, 0x4, 0xffff, 0x4, 0x80, 0x4, 0x95d, 0x8000, 0x3, 0x80000000, 0xaeff, 0x2, 0x800, 0x1, 0x1, 0xd4, 0x7, 0x5, 0xfffffff3, 0xf, 0xd17, 0xe49, 0x1, 0x6, 0x4, 0x91, 0xff, 0x40, 0x0, 0x8, 0x9, 0x0, 0x4, 0x6, 0x3, 0x3, 0xfffffff9, 0xabf5, 0x401, 0x800, 0x9, 0x7, 0x0, 0xffffffff, 0x4, 0x3, 0xe, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff1, 0xe}}, @TCA_FW_INDEV={0x14, 0x3, 'dummy0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x8}, @TCA_FW_POLICE={0xb8, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x1, 0x8, 0x2, 0x3, {0x6, 0x0, 0x6, 0x0, 0x8, 0x81}, {0x8, 0x2, 0x8, 0x9, 0x5b2d, 0x10001}, 0x3, 0x8, 0x3}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x40, 0x8a6b, 0x3, {0x21, 0x1, 0x100, 0x8, 0x2, 0x80000001}, {0xc, 0x1, 0xd91, 0x101, 0x7, 0x2}, 0x7, 0xfffffff9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x5, 0x0, 0x1, {0xf, 0x2, 0x0, 0x6d, 0xa, 0x1}, {0xb, 0x1, 0x21f9, 0x3946, 0xd5e, 0x1}, 0x6, 0xfff, 0xffff7a34}}]}, @TCA_FW_MASK={0x8, 0x5, 0x7}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x998}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10040}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x4000) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000001400)=""/238, &(0x7f0000001500)=0xee) r4 = socket$inet6(0xa, 0x805, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @restrict]}}, 0x0, 0x32}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={r6, 0x0, 0x0}, 0x0) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010400000000000000000000000002668deb27b8dd2485eb84fda11cec3f7c5a02a0a3a3b57217eb7194ca1875a0c451382b604158c515d624d45053c547cc4e1de74672b94f5ce8d7466fd14e11071c6133c313b284e6ac8dc2409ad4ddaffc8232f7868d50c5ef5c9ff8f06f74a0bc518d9a54199332f97bafa8727169c5da9d8de46eb3ab0623dcbb9509131d7c47fa12137ddd9a19f9ad97b773d522e67e98a6106f2a5edf421c4070b597d859c8e98ffbe8e934d1ff6e98c0512c39d11518ac07445a51fe89f4f381f1f8a33cd67f402ed8bfbe", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080001000400000008000200020000000a000100aaaaaaaaaabb0000"], 0x50}}, 0x0) 1.669401798s ago: executing program 1 (id=3749): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000340)={'syztnl1\x00', r1, 0x20, 0x1, 0x8001, 0x401, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "84314e86f06d4be1", "0633bbb90c92f1dfcfca5e2f80a5812d", "a110db1f", "220e6af11b50ebf2"}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$unix(0x1, 0x4, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, 'P#\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r5 = socket(0x28, 0x5, 0x0) setsockopt$inet6_int(r5, 0x29, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 1.588839185s ago: executing program 2 (id=3750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a30000000007c000000060a010400000000000000000100000008000b400000000054000480400001800e000100696d6d6564696174650000002c0002800800014002000000040002801c0002801800028008000180fffffffc0900020073797a3000000000100001800a0001006c696d69740000000900010073797a30"], 0xf0}}, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x50, 0x0, 0x7, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5345}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd0}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x401}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x280c0}, 0x20000000) 1.509652004s ago: executing program 2 (id=3752): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="49851b2d37d0a2000072ef26ca515ab8e1881b4871970500", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00'}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000200)={{0x0, 0xfffffffffffffffb, 0x0, 0x7, 0x10000, 0xff80000000000000, 0x8, 0x6, 0x8, 0x1, 0x4, 0x79, 0xb, 0x4cd, 0x2}, 0x8, [0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000000280)={r3}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) 1.467512108s ago: executing program 5 (id=3754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}, 0x500}, {{0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x2, 0x40010101, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01f1ffffffff5d1affd5020000000900010073797a300000000008c1763b0af91a000240000000032c000000030a01909c3ede8914ea40140ced52303d030000673300000000020000000900010073797a30000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a01040000000000000000020000003c000480380001800b00010064796e73657400002800028008000940000000a7080004400000000008000340000000000900010073797a30000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendto(r5, 0x0, 0x0, 0x2, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000040), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000000020000000455a12a00090008000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r8, 0x89e1, &(0x7f00000000c0)={'bond_slave_1\x00', 0x7, 0xc}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) 1.375154096s ago: executing program 1 (id=3756): r0 = socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000010425bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000600140012800b00010065727c3391d10000040002800a0001000000000000000000981f2920aaddad15f0ad4dc2731c0b993ae83d14c24f7f7af553e7d6c17757bc4eca86d08cb16549fe87fa42174a3b2dc55d00089a97a5540c0ed5a995b7504b289e57afabd26b91cf01988f9474731a68c0845788012f869bfe52a3b45d49a8d9e69c1443690c94cddfffc6d31aa62f391006a04534a1fffa6b79ca694281971a5389cd36f2414020b7ddb76274d558d8704951dff18be61854d08bb3966b1a1bdcdc19597da20100348e513801ee70c7b9c95c89045f"], 0x40}}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) (async) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@broadcast, @broadcast, 0xffffffffffffffff, "b2bd11964ae5c2aa2c8902d2657b5ebbeed6c8f4eb9f338b2f3ef3b6ca15cfb2", 0x2, 0xfffffffa, 0x3, 0xfffffe00}, 0x3c) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) r8 = socket$inet6(0xa, 0x2, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x0) (async) close(r9) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (rerun: 32) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r8, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) (async, rerun: 32) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 1.279306797s ago: executing program 2 (id=3757): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000180140009"], 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000140)="18", 0x1, 0x0, &(0x7f0000000240)={0x11, 0x10, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000904) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x81, 0x7, 0x61, 0x9, 0x2, 0x6, 0x1, {0x0, @in6={{0xa, 0x4e20, 0x8001, @private0, 0x5}}, 0x4, 0x4736, 0xc, 0x83a8, 0x9}}, &(0x7f0000000480)=0xb0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8923, &(0x7f0000000000)={'hsr0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1.27724504s ago: executing program 3 (id=3758): close(0x4) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, 0x0, 0x810) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.050418876s ago: executing program 3 (id=3759): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$unix(r0, 0x0, 0x0, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x400, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x6c, 0x0, @private1, @private2}}}}}}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r4, 0x8b27, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a09040000000004000000020000031800048014000180090001006c61737400000000040002800900010073797a30000000000900020073797a32000000001400000011000100000000000000009f0000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x40014}, 0x40088d4) 1.046801757s ago: executing program 5 (id=3760): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) (fail_nth: 9) 956.890156ms ago: executing program 2 (id=3761): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) readv(r1, &(0x7f0000000580)=[{&(0x7f0000000080)=""/196, 0xc4}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000002440)={'nat\x00', 0x0, [0x632, 0x9, 0x7fff, 0x80008000, 0x4]}, &(0x7f00000003c0)=0x54) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800000}}, 0x0, 0x3}, 0x90) 917.6558ms ago: executing program 3 (id=3763): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xd4}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, &(0x7f0000001600), 0x0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x7}, 0x10) bind$netlink(r2, 0x0, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000040)={0x2c, @dev={0xac, 0x14, 0x14, 0x31}, 0x4e21, 0x0, 'ovf\x00', 0x10, 0x0, 0x6a}, 0x2c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x401}, 0x14}}, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xd}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000000004ade67ec46c94cc3a4b07728c3f82ce301bb", @ANYRES16=r10, @ANYBLOB="df4800000000000000000c000000040003800c00018008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r10, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0xa}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48004}, 0x4000) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="4400028000000000000000000000000000000000000000000000000005ded20005000000100006006c6f616462616c616e636500"/68], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 914.859368ms ago: executing program 5 (id=3764): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="b4050000200080066110480000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498909714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442e05d9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002add8b8ed61d995c1258ea2c22e218f2122a75d10d77aa735e3aa4988bc267d698cc01e56f8ed8b7877f8d217269ab71a634fed1261c399b31bc3f89f6d76816b9e08bed85b33c7cf8527b20ec14f462dad0e1cb64d49d4fa180e0cb32d9f84ffdb28286a810c1d10fdb67ee5148f8c21ddc16c9417570fb3b8c949a940967d71f6441c5f6dbd7fba76ec0bc54575ffea4ac586994450612a3b1080365753cd59300858929c24d40c4f5e6cde531a3be5fb86a50a77187aa095fdd8b3f959b4e47b2053cfafc22ca"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000001380)={0x1000, @broadcast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1b0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x168, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x150, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x11c, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x10000000, 0x633, 0xe2d}}]}, {0xd5, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2ae97714a5c600000ddb671382ebf29bf9b3697264083e1c85729597a3ff8fed60b904846"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 884.339578ms ago: executing program 1 (id=3765): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r1, &(0x7f0000000140)=0xffffffffffffffff, 0x12) write$cgroup_subtree(r1, 0x0, 0x12) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x3, 0x2f, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCSFLAGS(r6, 0x40047459, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r8 = socket(0x9, 0x3, 0x103a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r9}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x14, 0x20, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) setsockopt$inet_int(r3, 0x0, 0x22, &(0x7f0000000080)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 753.051606ms ago: executing program 4 (id=3766): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x0, 0x5, 0x3, 0xa437}, {0x8, 0x6, 0xb1, 0x3ff}, {0xfff6, 0x40, 0x4, 0x7d5c1fa4}, {0x7, 0x5, 0x5}, {0x0, 0xb, 0x7, 0xfe}, {0x7, 0xfa, 0x6, 0x9}]}, 0x10) 727.779963ms ago: executing program 4 (id=3767): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000100)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000080)=@rose={'rose', 0x0}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYRES8], 0x0) r10 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r10) socket$nl_route(0x10, 0x3, 0x0) 552.730997ms ago: executing program 5 (id=3768): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async, rerun: 32) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (rerun: 32) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) (async) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{@fixed}]}) (async, rerun: 32) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) (async) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec67bb53679f9616e19aec0dec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0ea0ce1f830c3279cffcfd00"}, 0xd8) (async) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f00000000c0)="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") sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 496.782199ms ago: executing program 3 (id=3769): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/18, @ANYRES32=r2, @ANYBLOB="00000400000000002400128009000100626f6e640000000014000280050001000600000008000200", @ANYRES16=r1], 0x44}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0xf, 0x1c, 0x66, 0x0, 0x80, 0x2, 0x0, @remote, @local}, "156b3485e766b1df"}}}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0], 0x0, 0x64, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=0x1, r7, 0x37}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3ff, '\x00', r2, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x1, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%+9llu \x00'}, 0x20) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r13}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r13}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0500000000000000000000b7080000000000007b8af8ff00000000b7080000ff0100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x0, 0x6, 0x1ff, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xc, 0x26, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x27}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x0, 0xc, 0xa, 0x2, 0x0, 0xffffffffffffffe3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000340)=""/186, 0x41100, 0x40, '\x00', r2, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x0, &(0x7f0000000a40)=[r8, r9, r10, r11, r12, r13, r14], &(0x7f0000000a80), 0x10, 0x5}, 0x94) 494.535785ms ago: executing program 1 (id=3770): socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x101}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [], [0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x2ca9570ab73812e0, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x24, @long={0x3, 0x3}}, 0x14, &(0x7f0000000300)={&(0x7f00000001c0)="a5000000000000541bab8afaa8075dc5837f9cded478000000000000000000", 0x1f}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x4000, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000780)) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x14) readv(0xffffffffffffffff, &(0x7f0000001740)=[{0x0}], 0x1) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x20000881) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000200", @ANYRES32=r6, @ANYBLOB], 0x1c}}, 0x0) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r7, r8, 0x2, 0x100000000000003) bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x2e, 0x0, 0x8000, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f00000004c0)}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x2e, 0x0, 0x8000, &(0x7f0000000240), 0x0, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f00000004c0)}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) (async) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) 474.026728ms ago: executing program 4 (id=3771): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0xb5, 0x5}) 443.42829ms ago: executing program 3 (id=3772): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x1, 0xffffffff, 0x2}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r8, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20000084) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 332.909112ms ago: executing program 1 (id=3773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000c80080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xffffffff}]}}}]}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x3, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @empty}}}}]}]}, 0x60}}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x11c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x11c}}, 0x4000490) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff}, 0x1c) 332.502748ms ago: executing program 4 (id=3774): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) (fail_nth: 10) 268.006146ms ago: executing program 4 (id=3775): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x49801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}]}}}]}, 0x38}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90) sendto$packet(r1, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="af56b6c50200000000000000bf975f95d510672eec14c2d7a45a8686a89b0478af458861774c1f48fb3b", 0x2a) r8 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r8) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x1}, 0x10) 248.300561ms ago: executing program 3 (id=3776): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ad0000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a00020000fe8000000000000000000000000000bb2400090000000000010000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff"], 0xfc}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000004c2c8900000002000000950000000085221078499700e6a0bd21128cb1dd5dffbd1c9e608da5133db79504131ab40c9e72d52c8ea730b8e6a4ff04acddf89ddd3026858f19e620354ee5419062a034eb76b586ba59912b7e131be78505da2fd7e930baa3c97ec9c796a309"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x50}}, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x800) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0xb400, 0x2, 0xfeffff7f00000000}, {0x3ff, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) 148.747053ms ago: executing program 5 (id=3777): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xad}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x74}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x100000000, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x10000000, 0xb400, 0x2, 0xfeffff7f00000000}, {0x100, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4cc00) 95.038173ms ago: executing program 1 (id=3778): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES8=0x0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x20, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}]}, 0x20}}, 0x44) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @private=0xa010101}, 0x82, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x35, 0x4980}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x800, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r0, r2, 0x25, 0x2, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x6}}, 0x30) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r6, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x74, r9, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "75644f39437e07706988147d4b56a990ce74332dec9087701da49cbb05a260d8"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x4114}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000500)=r7, 0x4) r10 = socket(0x1e, 0x1, 0x0) connect$tipc(r10, &(0x7f0000000040)=@id, 0x10) shutdown(r10, 0x2) 58.539892ms ago: executing program 2 (id=3779): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x140d, 0x2, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x3aeff2f9954ee282}, 0x10) socketpair(0x2b, 0x6, 0x2, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r3, 0x128, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x11) (async, rerun: 32) getpeername$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14) (rerun: 32) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340), 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x81, 0xe, {}, {0x0, 0x2710}, {0x4, 0x1, 0x1}, 0x1, @can={{0x3}, 0x0, 0x2, 0x0, 0x0, "eed4dd69f004fa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40000d0) (async) sendmsg$can_bcm(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x1d, r4}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x5, 0x216, 0x6a0000, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x3, 0x0, 0x1}, 0x3d, 0x2, 0x0, 0x0, "57c318689b44f125c561a53ccd6b07d08f3ab656a03a6d5a771a6208c09ecf0a8d75666f1a95dee031707b56df69f2f45b5cc103752c6a277ef630787459152f"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0xf278da9eb41abcd) (async) read(r1, &(0x7f00000005c0)=""/154, 0x9a) (async) r5 = socket(0x28, 0x1, 0x9) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000680)={r2}) ioctl$F2FS_IOC_DEFRAGMENT(r6, 0xc010f508, &(0x7f00000006c0)={0x8, 0x8000000000000000}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x2c27, 0x10, 0x9b5a, 0x0, 0x1, 0xdd, '\x00', r4, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0xfff, '\x00', r4, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) (async, rerun: 64) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b80), 0x4) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000cc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)='%+9llu \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@o_path={&(0x7f0000000e40)='./file0\x00', 0x0, 0x4010, r0}, 0x18) (async) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x9, '\x00', r4, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x15, 0x5, 0x5, 0x5c, 0x4, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) (async) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001000)=@o_path={&(0x7f0000000fc0)='./file0\x00', 0x0, 0x0, r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x17, &(0x7f0000000980)=@raw=[@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x2, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0xfae3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @jmp={0x5, 0x1, 0x1, 0x8, 0x7, 0x4, 0xffffffffffffffff}, @ldst={0x0, 0x3, 0x2, 0x7, 0x6, 0x100, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xfff}, @alu={0x7, 0x1, 0x9, 0x2, 0x1, 0x6, 0xfffffffffffffff0}], &(0x7f0000000a40)='GPL\x00', 0x8, 0xef, &(0x7f0000000a80)=""/239, 0x41000, 0x1, '\x00', r4, 0x0, r11, 0x8, &(0x7f0000000bc0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x2, 0x1, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001040)=[r12, r13, r14, r15, r16, r17, r18, r19], &(0x7f0000001080)=[{0x3, 0x5, 0x0, 0x4}], 0x10, 0x7}, 0x94) (async) r20 = accept4$tipc(r5, 0x0, &(0x7f0000001180), 0x80000) sendmmsg$inet(r20, &(0x7f0000002f80)=[{{&(0x7f00000011c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001200)="7596145e566b65d5e7171a521797ed9cb86cb67100cd61b53569f871bfae8cc41ce946f7dbdf932e85d8e815f39c0a666b70a12934e01afec43c546529394a4ae930b4075e6e118d22165f0a49769e2010111353571bee3bd8009d4769b029bde5467e77c0f9bc4db1f73e8842671e54ad827fe67c860c0711d0f17b6ede951f96ec12c08a446bd3fb572fe1e2245745c0a38721fb9eb93810b5f1dcc64348f4caa0f25a326fcf90f230bb0efcd5480d077f643f308e32fb2fb90206d6744d0804bc416842ad7aff", 0xc8}], 0x1, &(0x7f0000001340)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@end, @timestamp_prespec={0x44, 0x3c, 0xeb, 0x3, 0x2, [{@loopback, 0xade3}, {@broadcast, 0x7}, {@empty, 0x4675}, {@broadcast, 0x6}, {@multicast2, 0x7}, {@remote, 0x5}, {@loopback, 0x9}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xb, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x43, 0x2, [{0x2, 0x7, "16c8fe364c"}, {0x6, 0x3, ';'}, {0x9, 0xe, "10c884dbfdf2737d1bf259fd"}, {0x7, 0x10, "94836af1b01c375bca22502cb29e"}, {0x7, 0x11, "347e3dfd451aec5cc53ea7263af4ab"}, {0x0, 0x4, "2dc7"}]}]}}}], 0xa8}}, {{&(0x7f0000001400)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001440)="278d4e8a19411588fb5217ec88ab7fb0cf868c780aef0ac82f5bf166d140bb5708339d1ffedbbe5e8f5029d80af37404d5164da00c543ef3d85500d4eff0dd76db6020a30e918e5ccab0b44c939fa318a57260ac96a1b96ca45e53003fe32820b7b2f4148fdc5d88a8cca6bd946f10023ef983a620579e2492b46de8b2d3fc2c644a02092c30906827dd54a5d94e3a8df9d0a99965852b68e7430f408a8831d9cc06", 0xa2}, {&(0x7f0000001500)="2ef29114f6e0032ce9e318bb468ece80af0f859cf988b4c74514c2461e39c5feedd46fb1210adf0e4344470509237501717d985e8dbb83a3cc6b4c840ccd9cbec9548284d7877f686eb24c795b6d5361be85453d22218d86dc78877549b5d758e9ecad455169", 0x66}, {&(0x7f0000001580)="e59c6321499c3c117f9eca62716b9a0a2b662c56939389dae085370df110fcbd537be14c9e701a550ba040b3a76e98ad7b950073d085b1c1461ab91c9ef49f8fe338a84b2fb0963e4d9c59a0f9c1531204e24934a55bdc50a4bf4319ac5b04fc259063652df4ad33e336b92c66f138dd53e02679b7dbc6083017c3538565bf9375836f22b508e518d6a7687f676c364536db9eddadb92cbdc934db3335a5f56f9d563272e8be4bffc333df023c986d8b5133852c56a4f2359632b381c0a9d889768040ee12885e8589aeeae24f1507d610c57779483c9cc104e779c4dfe11db9956a82d1dbcae2d0ae9f29bf8e", 0xed}, {&(0x7f0000001680)="d38d7572f404489443e7e05530faebd823c960851239b356db602b6044c24e87170f", 0x22}, {&(0x7f00000016c0)="e230c07c714fe799cd36bd5a5719cb502192a7357ec26b8c2e0e42d840d7a78b45975549b623ae2972d3cdcba95c9df4b9d5179de65a4d6e445bc4320ac5f7d549f2abc748ef708c816dd3c3d469d5acaf4ae618d31b347f7e9cbf532ec300852bcf6b917386e20571e4ace228f77419c33004fc086cc32875569c0951e38fc5c3997375a0571ccbfa0cd95edc4efe8a435be6296d922f3375891e9055", 0x9d}], 0x5, &(0x7f0000001800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010101, @local}}}], 0x90}}, {{&(0x7f00000018c0)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000001a00)=[{&(0x7f0000001900)="71c2fd41f9d461c39509c2bbc4303a8fd3034174b45819dfe0690af73f009b69e89a4b112787c68d823640520592cf1d194f209f53ad59dafe0b6b3c99a209df64e7670eeae72ab9554aeaf49cc08e519b45fbed031c9a87d8443bb04f4b5440f2", 0x61}, {&(0x7f0000001980)="a3c1c4e237c39ea5324060962b0e93115a714a92ab60dc268b993af02afd68368a2a6b50e10d457c3bef3b357b6271a080da0cd2262e519e1f6042e39cc7facb85761fb6250bb8c7043ad5b29c", 0x4d}], 0x2, &(0x7f0000001a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000001a80)="a810f359669300a66d873f8a3872aeaef3bb361b34ab7dde41986677f7ae5b5eb408e4e498802ba81c7d6c862806f25825fd804add578e965730f3acbd6e991d02e743db406b8bfc051f602efad908a4c5d459804841bc0841c5d1a22f461564c0bb2aa833aa4a8acc60a112e381b580db58fa22a996b135b06fd24b472915584797628cbc605794d29fdeed88f62e0c8cb040b24adf99865378e4253817704d04c4904a438146047add093e27887215b4c6054b27a37f22f0427c86", 0xbc}, {&(0x7f0000001b40)="508c40c9f0c3d2d7e29979452d12e3e6f153bb7b1efbdebfa82dbb6e3b54be142f13dd06a708f5ca912f8050a1246bea099e809080cfe2225c7903934f138b37459aa9715c3207c92fff", 0x4a}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="bf4c2789ea45a4c98a4bf526f308a17d5a3813f9cb354123c1b4c1e0ffd7b9", 0x1f}, {&(0x7f0000002c00)="26ab36449678824a0e6792afc4b774c0a0c8773f60bdec8a5ecf6409dbbfb5ef9f7c5cdd5ddb01d6d9fae937ab4c802bc61520132302ac6fa84d515a561b95980a834b894f984d65ee1d9ca8d42f1cf1f000469a0cf85eac090cca9438c34401aa8948e6cea53251792644ae83bca6949c434ff4eca4b961062eb73ca2a0f993e291adbbcf22981926fc1107e2ff0ef4bf30d346648160e5915a47ca04ba4d722336f7bd99b13cbd1de1720dda8a135aa4c7942864a53f30baffb0721881e2e7f0284d8e45848a73f0960dcfe06f27eb15d268ea82906ee4461fc53311f20b69f886faff00a30b09118470243ba2d86935bea07f9593a9", 0xf7}], 0x5, &(0x7f0000002d80)=[@ip_retopts={{0x70, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x4, 0x10}, @timestamp_prespec={0x44, 0x2c, 0x51, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x7}, {@multicast2, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private=0xa010102, 0x98}, {@empty, 0x2}]}, @lsrr={0x83, 0x1b, 0x2e, [@loopback, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, @empty]}, @rr={0x7, 0xb, 0xc6, [@empty, @multicast2]}]}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x74, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x54, 0xea, 0x1, 0x1, [{@rand_addr=0x64010102, 0x90}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xef9}, {@empty, 0xa8e}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x200}, {@rand_addr=0x64010102, 0xfffffff8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@local, 0x3}, {@private=0xa010100, 0x5b543876}, {@broadcast, 0x6}]}, @timestamp={0x44, 0xc, 0xfd, 0x0, 0x2, [0xa, 0x6]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0xf2, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x80}, {@private=0xa010101, 0x3}, {@broadcast, 0xd1}, {@remote, 0x2}, {@rand_addr=0x64010101, 0x2}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@private=0xa010101, 0x2}]}, @lsrr={0x83, 0x7, 0xac, [@private=0xa010101]}, @timestamp_addr={0x44, 0x1c, 0x90, 0x1, 0x0, [{@rand_addr=0x64010102}, {@multicast2, 0x10000}, {@loopback, 0x6}]}, @lsrr={0x83, 0x7, 0xc9, [@private=0xa010101]}, @end, @generic={0x44, 0x7, "c4fc37b554"}, @ssrr={0x89, 0x13, 0xe, [@rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}], 0x1d0}}], 0x4, 0x24000844) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x4c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffff383}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x582}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40d0}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000032c0)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003280)={&(0x7f0000003240)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x10008080}, 0x10) 888.292µs ago: executing program 4 (id=3780): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000004280)={0x3c, r2, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x503, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x15a11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}]}}}]}, 0x40}}, 0x44) 0s ago: executing program 5 (id=3781): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r0, 0xb15, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r1) kernel console output (not intermixed with test programs): 8] __nla_validate_parse: 17 callbacks suppressed [ 323.180405][T14838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2632'. [ 324.795409][T14862] netlink: 'syz.4.2640': attribute type 1 has an invalid length. [ 324.803728][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2639'. [ 324.834959][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2638'. [ 324.856244][T14868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2637'. [ 325.030554][T14862] bond12: entered promiscuous mode [ 325.036191][T14862] 8021q: adding VLAN 0 to HW filter on device bond12 [ 325.100030][T14868] bond10 (unregistering): Released all slaves [ 325.367178][T14898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2647'. [ 325.461671][T14905] openvswitch: netlink: Actions may not be safe on all matching packets [ 325.539063][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2649'. [ 325.613768][T14912] netlink: 'syz.4.2649': attribute type 4 has an invalid length. [ 325.819066][T14933] netlink: 'syz.2.2656': attribute type 12 has an invalid length. [ 325.855852][T14933] netlink: 'syz.2.2656': attribute type 29 has an invalid length. [ 325.880209][T14933] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2656'. [ 325.886983][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2659'. [ 325.890647][T14933] netlink: 'syz.2.2656': attribute type 2 has an invalid length. [ 325.908380][T14933] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2656'. [ 326.100868][T14957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2662'. [ 326.361131][T14976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.841403][T15007] validate_nla: 1 callbacks suppressed [ 326.841420][T15007] netlink: 'syz.1.2676': attribute type 1 has an invalid length. [ 326.872619][T15007] netlink: 'syz.1.2676': attribute type 2 has an invalid length. [ 327.136748][T15026] netlink: 'syz.4.2681': attribute type 6 has an invalid length. [ 327.181026][T15030] netlink: 'syz.3.2683': attribute type 1 has an invalid length. [ 327.207818][T15026] netlink: 'syz.4.2681': attribute type 6 has an invalid length. [ 327.262628][T15030] bond5: (slave gretap0): making interface the new active one [ 327.292401][T15030] bond5: (slave gretap0): Enslaving as an active interface with an up link [ 327.301722][T15039] netlink: 'syz.1.2685': attribute type 11 has an invalid length. [ 327.536800][T15060] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 327.869343][T15081] tipc: Enabling of bearer rejected, failed to enable media [ 328.051922][T15095] x_tables: duplicate underflow at hook 1 [ 328.242932][T15106] veth1_vlan: Caught tx_queue_len zero misconfig [ 328.486665][T15121] __nla_validate_parse: 12 callbacks suppressed [ 328.486686][T15121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2708'. [ 328.544795][T15123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2709'. [ 328.672699][T15135] bond0: Caught tx_queue_len zero misconfig [ 328.681062][T15135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 328.730801][T15136] sctp: [Deprecated]: syz.3.2712 (pid 15136) Use of int in maxseg socket option. [ 328.730801][T15136] Use struct sctp_assoc_value instead [ 328.826218][T15145] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2715'. [ 328.980656][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2718'. [ 329.148851][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2721'. [ 329.186414][T15166] : entered promiscuous mode [ 329.648744][T15195] xt_bpf: check failed: parse error [ 329.740390][T15201] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 329.778831][T15204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2732'. [ 329.785816][T15205] C: renamed from team_slave_0 [ 329.795255][T15205] netlink: 'syz.2.2729': attribute type 1 has an invalid length. [ 329.836410][T15205] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 330.052821][T15228] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 330.144043][T15220] pimreg: entered allmulticast mode [ 330.230572][T15237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2738'. [ 330.449676][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2742'. [ 330.566728][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 330.578843][T15266] hsr_slave_0: left promiscuous mode [ 330.585217][T15266] hsr_slave_1: left promiscuous mode [ 330.801073][T15279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.678950][T15331] Cannot find add_set index 4 as target [ 332.872145][T15349] netlink: 'syz.2.2769': attribute type 5 has an invalid length. [ 332.900275][T15349] geneve3: entered promiscuous mode [ 332.941856][T15349] geneve3: entered allmulticast mode [ 332.964504][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 332.975138][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 333.014794][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 333.044369][T15352] Cannot find del_set index 3 as target [ 333.051712][T15352] Cannot find del_set index 3 as target [ 333.057423][T15352] Cannot find del_set index 3 as target [ 333.066854][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 333.083227][T15352] Cannot find del_set index 3 as target [ 333.451184][T15386] xfrm1: entered allmulticast mode [ 333.688158][T15398] __nla_validate_parse: 6 callbacks suppressed [ 333.688175][T15398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2787'. [ 333.742309][T15405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 333.748591][T15400] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2789'. [ 334.151914][T15436] pim6reg1: entered promiscuous mode [ 334.157290][T15436] pim6reg1: entered allmulticast mode [ 334.372195][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2802'. [ 334.728838][T15493] netlink: 'syz.3.2813': attribute type 21 has an invalid length. [ 334.736990][T15493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2813'. [ 334.758592][T15493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2813'. [ 334.761166][T15495] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2814'. [ 334.782735][T15493] netlink: 'syz.3.2813': attribute type 21 has an invalid length. [ 334.796521][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2813'. [ 334.799873][T15493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2813'. [ 334.902090][T15501] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2815'. [ 335.104549][T15516] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 335.235626][T15530] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2822'. [ 335.263757][T15530] netlink: 'syz.1.2822': attribute type 10 has an invalid length. [ 335.294469][T15530] dummy0: entered promiscuous mode [ 335.304409][T15530] bridge0: port 3(dummy0) entered blocking state [ 335.351710][T15530] bridge0: port 3(dummy0) entered disabled state [ 335.371249][T15530] dummy0: entered allmulticast mode [ 335.518152][T15547] netlink: 'syz.4.2828': attribute type 3 has an invalid length. [ 335.526130][T15547] netlink: 'syz.4.2828': attribute type 1 has an invalid length. [ 335.582739][T15547] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 335.716261][T15556] syzkaller1: entered promiscuous mode [ 335.722817][T15556] syzkaller1: entered allmulticast mode [ 336.136848][T15582] openvswitch: netlink: Flow key attr not present in new flow. [ 336.175578][T15587] openvswitch: netlink: Flow actions attr not present in new flow. [ 336.299354][T15597] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 336.313291][T15597] netlink: 'syz.0.2840': attribute type 10 has an invalid length. [ 336.432985][T15601] batadv0: entered allmulticast mode [ 336.940249][ T7504] hid-generic 0005:0B57:0002.0003: item fetching failed at offset 0/1 [ 336.949291][ T7504] hid-generic 0005:0B57:0002.0003: probe with driver hid-generic failed with error -22 [ 337.065006][T15654] pimreg3: entered allmulticast mode [ 337.249195][T15666] netlink: 'syz.4.2863': attribute type 2 has an invalid length. [ 337.869653][T15698] netlink: 'syz.2.2873': attribute type 1 has an invalid length. [ 337.877420][T15698] netlink: 'syz.2.2873': attribute type 2 has an invalid length. [ 338.498833][T15737] openvswitch: netlink: Key type 167 is out of range max 32 [ 338.515061][T15741] tipc: Can't bind to reserved service type 2 [ 338.566634][T15745] netlink: 'syz.0.2887': attribute type 16 has an invalid length. [ 338.648326][T15745] netlink: 'syz.0.2887': attribute type 17 has an invalid length. [ 338.697089][T15756] xt_l2tp: missing protocol rule (udp|l2tpip) [ 338.722257][T15745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.729737][T15757] xt_l2tp: missing protocol rule (udp|l2tpip) [ 338.746628][T15755] __nla_validate_parse: 18 callbacks suppressed [ 338.746645][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2889'. [ 338.748726][T15756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2890'. [ 338.754682][T15745] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.796169][T15745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.841006][T15760] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2892'. [ 338.934272][T15767] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 338.971434][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2895'. [ 338.975598][T15779] syzkaller1: entered promiscuous mode [ 338.996807][T15779] syzkaller1: entered allmulticast mode [ 339.451279][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2904'. [ 339.476278][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2907'. [ 339.490649][T15798] gtp0: left promiscuous mode [ 339.495828][T15798] geneve2: left promiscuous mode [ 339.503475][T15798] gretap1: left promiscuous mode [ 339.509310][T15798] geneve3: left promiscuous mode [ 339.514506][T15798] bond4: left promiscuous mode [ 339.539104][T15798] bond12: left promiscuous mode [ 339.687881][T15808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2907'. [ 339.691632][T15821] netlink: 'syz.3.2910': attribute type 1 has an invalid length. [ 339.710180][T15821] netlink: 16179 bytes leftover after parsing attributes in process `syz.3.2910'. [ 339.730950][T15815] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 339.754431][ T50] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.763585][ T50] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.781347][ T50] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.794691][ T50] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.804923][ T50] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.814407][ T50] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.824792][ T50] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.835114][ T50] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.159147][T15855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2918'. [ 340.265493][T15864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2922'. [ 340.439590][ T5933] IPVS: starting estimator thread 0... [ 340.527588][T15875] IPVS: using max 42 ests per chain, 100800 per kthread [ 340.551810][T15880] netlink: 'syz.0.2926': attribute type 1 has an invalid length. [ 340.560447][T15880] netlink: 'syz.0.2926': attribute type 3 has an invalid length. [ 340.705880][T15888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.718339][T15889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.330441][T15932] netlink: 'syz.2.2943': attribute type 42 has an invalid length. [ 341.435715][T15937] netlink: 'syz.3.2945': attribute type 3 has an invalid length. [ 341.706017][T15961] netlink: 'syz.1.2951': attribute type 12 has an invalid length. [ 341.828957][T15967] sctp: [Deprecated]: syz.3.2953 (pid 15967) Use of int in max_burst socket option. [ 341.828957][T15967] Use struct sctp_assoc_value instead [ 341.969982][T15977] syzkaller0: entered promiscuous mode [ 341.998550][T15977] syzkaller0: entered allmulticast mode [ 342.470656][T15982] syzkaller1: entered promiscuous mode [ 342.511868][T15982] syzkaller1: entered allmulticast mode [ 342.745296][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.768456][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.779333][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.789126][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.796850][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.538050][T16048] syz_tun (unregistering): left allmulticast mode [ 343.544813][T16048] syz_tun (unregistering): left promiscuous mode [ 343.545236][T16052] netlink: 'syz.4.2980': attribute type 10 has an invalid length. [ 343.551680][T16048] bridge0: port 3(syz_tun) entered disabled state [ 343.575960][T16052] dummy0: left allmulticast mode [ 343.581370][T16052] dummy0: left promiscuous mode [ 343.586400][T16052] bridge0: port 4(dummy0) entered disabled state [ 343.596820][T16052] dummy0: entered promiscuous mode [ 343.602643][T16052] dummy0: entered allmulticast mode [ 343.618415][T16052] team0: Port device dummy0 added [ 343.624607][T16050] tap0: tun_chr_ioctl cmd 1074025677 [ 343.630777][T16050] tap0: linktype set to 65534 [ 343.672498][T16052] netlink: 'syz.4.2980': attribute type 10 has an invalid length. [ 343.705997][T16052] dummy0: left promiscuous mode [ 343.715810][T16052] dummy0: left allmulticast mode [ 343.722618][T16052] team0: Failed to send options change via netlink (err -105) [ 343.732281][T16052] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 343.741873][T16052] team0: Port device dummy0 removed [ 343.753014][T16052] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 343.803324][T16059] __nla_validate_parse: 15 callbacks suppressed [ 343.803342][T16059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2982'. [ 343.933503][T16068] IPVS: set_ctl: invalid protocol: 33 10.1.1.1:20002 [ 344.373537][T16006] chnl_net:caif_netlink_parms(): no params data found [ 344.543834][T16103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2989'. [ 344.561539][T16088] tipc: Enabled bearer , priority 0 [ 344.584928][T16098] syzkaller0: entered promiscuous mode [ 344.606236][T16098] syzkaller0: entered allmulticast mode [ 344.655032][T16088] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 344.752967][T16088] tipc: Resetting bearer [ 344.786430][T16084] tipc: Resetting bearer [ 344.838607][T16084] tipc: Disabling bearer [ 344.898890][ T5838] Bluetooth: hci5: command tx timeout [ 344.908246][T16006] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.915527][T16006] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.923055][T16006] bridge_slave_0: entered allmulticast mode [ 344.939867][T16006] bridge_slave_0: entered promiscuous mode [ 344.959754][T16006] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.966904][T16006] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.977865][T16006] bridge_slave_1: entered allmulticast mode [ 344.991186][T16006] bridge_slave_1: entered promiscuous mode [ 345.104313][T16006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.132319][T16006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.204723][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3002'. [ 345.326305][T16148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3005'. [ 345.423947][T16137] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 345.464653][T16006] team0: Port device team_slave_0 added [ 345.531931][T16006] team0: Port device team_slave_1 added [ 345.599150][T16160] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3008'. [ 345.616727][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3008'. [ 345.634235][T16163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3009'. [ 345.663930][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'. [ 345.690360][T16160] 8021q: adding VLAN 0 to HW filter on device bond6 [ 345.700209][T16006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.716953][T16006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.744529][T16006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.758724][T16006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.771846][T16006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.799545][T16006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.813460][T16172] netlink: 'syz.0.3009': attribute type 9 has an invalid length. [ 345.829902][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 345.890350][T16181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.140744][T16193] netlink: 'syz.0.3016': attribute type 3 has an invalid length. [ 346.272555][T16006] hsr_slave_0: entered promiscuous mode [ 346.279820][T16006] hsr_slave_1: entered promiscuous mode [ 346.288223][T16006] debugfs: 'hsr0' already exists in 'hsr' [ 346.294223][T16006] Cannot create hsr debugfs directory [ 346.742934][T16219] x_tables: duplicate underflow at hook 1 [ 346.854740][T16226] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 346.871359][T16225] macsec1: entered promiscuous mode [ 346.924136][T16006] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.977656][ T5838] Bluetooth: hci5: command tx timeout [ 347.000838][T16006] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.020142][T16237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3023'. [ 347.080029][T16006] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.112705][T16241] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 347.127340][T16006] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.352596][T16251] nbd: nbd0 already in use [ 347.366749][T16249] gre1: entered promiscuous mode [ 347.370325][T16251] block nbd0: NBD_DISCONNECT [ 347.372700][T16249] gre1: entered allmulticast mode [ 347.376884][T16251] block nbd0: Send disconnect failed -32 [ 347.396680][T16251] block nbd0: shutting down sockets [ 347.438323][T16251] netlink: 'syz.0.3033': attribute type 5 has an invalid length. [ 347.439416][T16006] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 347.513337][T16251] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 347.525580][T16006] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 347.540393][T16006] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 347.553862][T16251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.592035][T16006] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.886190][T16006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.957070][T16006] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.970428][T16289] netlink: 'syz.0.3042': attribute type 12 has an invalid length. [ 347.978728][T16290] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 347.985003][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.995570][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.048489][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.055658][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.397207][T16309] bond11: entered allmulticast mode [ 348.406535][T16309] 8021q: adding VLAN 0 to HW filter on device bond11 [ 348.574151][T16309] bond11 (unregistering): Released all slaves [ 348.685976][T16006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.693117][T16327] Cannot find add_set index 0 as target [ 348.816739][T16006] veth0_vlan: entered promiscuous mode [ 348.833667][T16006] veth1_vlan: entered promiscuous mode [ 348.907986][T16333] bridge_slave_0: default FDB implementation only supports local addresses [ 348.953464][T16006] veth0_macvtap: entered promiscuous mode [ 348.986177][T16006] veth1_macvtap: entered promiscuous mode [ 349.025802][T16006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.063798][ T5838] Bluetooth: hci5: command tx timeout [ 349.103795][T16006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.120119][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.141746][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.179825][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.211136][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.349754][T16363] __nla_validate_parse: 9 callbacks suppressed [ 349.349770][T16363] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3065'. [ 349.365893][ T6029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.374648][ T6029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.410044][T16365] openvswitch: netlink: Flow key attr not present in new flow. [ 349.419811][T16363] ip6tnl0: Caught tx_queue_len zero misconfig [ 349.463394][T16371] netlink: 'syz.0.3068': attribute type 2 has an invalid length. [ 349.486374][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.506457][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.554697][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3068'. [ 349.966471][T16398] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 350.700931][T16434] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3087'. [ 350.722049][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.724733][T16434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3087'. [ 350.745015][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.755191][T16434] tipc: Invalid UDP bearer configuration [ 350.755232][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.755247][T16434] tipc: Enabling of bearer rejected, failed to enable media [ 350.787393][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.795337][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.893054][T16444] syzkaller0: entered promiscuous mode [ 350.907629][T16444] syzkaller0: entered allmulticast mode [ 351.138736][ T5838] Bluetooth: hci5: command tx timeout [ 351.144504][T16449] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.3090'. [ 351.182604][T16463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3094'. [ 351.497892][T16476] netlink: 91 bytes leftover after parsing attributes in process `syz.0.3098'. [ 351.510214][T16480] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3099'. [ 351.632099][T16435] chnl_net:caif_netlink_parms(): no params data found [ 351.659752][T16491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.954380][T16435] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.978254][T16435] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.993659][T16435] bridge_slave_0: entered allmulticast mode [ 352.012562][T16435] bridge_slave_0: entered promiscuous mode [ 352.053537][T16435] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.062421][T16435] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.070114][T16435] bridge_slave_1: entered allmulticast mode [ 352.080764][T16435] bridge_slave_1: entered promiscuous mode [ 352.142870][T16524] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3112'. [ 352.152866][T16524] unsupported nlmsg_type 40 [ 352.192460][T16435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.208013][T16435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.265173][T16529] netlink: 'syz.3.3114': attribute type 1 has an invalid length. [ 352.282731][T16531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.293121][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3113'. [ 352.308636][T16529] x_tables: duplicate underflow at hook 3 [ 352.359635][T16435] team0: Port device team_slave_0 added [ 352.412350][T16435] team0: Port device team_slave_1 added [ 352.426638][T16538] netlink: 'syz.3.3118': attribute type 29 has an invalid length. [ 352.531864][T16538] netlink: 'syz.3.3118': attribute type 29 has an invalid length. [ 352.549954][T16435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.556925][T16435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.595069][T16435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.608776][T16435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.615741][T16435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.643232][T16435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.740692][T16549] netlink: 'syz.0.3122': attribute type 5 has an invalid length. [ 352.819970][ T53] Bluetooth: hci2: command tx timeout [ 352.821369][T16435] hsr_slave_0: entered promiscuous mode [ 352.833311][T16435] hsr_slave_1: entered promiscuous mode [ 352.840515][T16435] debugfs: 'hsr0' already exists in 'hsr' [ 352.869427][T16435] Cannot create hsr debugfs directory [ 353.335337][T16577] netlink: 'syz.2.3131': attribute type 1 has an invalid length. [ 353.474092][T16579] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 353.487786][T16579] bond13 (unregistering): Released all slaves [ 353.520315][T16577] bond11: (slave geneve4): making interface the new active one [ 353.529530][T16577] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 353.547639][ T1338] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 353.567892][ T1338] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 353.681411][ T1338] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 353.868719][T16590] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 353.884728][T16590] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 353.896777][T16590] gretap3: entered promiscuous mode [ 353.904132][T16590] gretap3: entered allmulticast mode [ 353.912137][ T1338] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 354.078561][T16608] netlink: 'syz.1.3138': attribute type 29 has an invalid length. [ 354.101557][T16608] netlink: 'syz.1.3138': attribute type 29 has an invalid length. [ 354.151580][T16435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 354.172535][T16435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 354.206553][T16435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 354.223467][T16435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 354.304087][T16620] IPVS: Unknown mcast interface: vcan0 [ 354.387406][T16623] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 354.406819][T16435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.472680][T16435] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.489808][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.497012][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.531944][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.539257][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.739771][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 354.772079][T16637] __nla_validate_parse: 12 callbacks suppressed [ 354.772097][T16637] netlink: 81 bytes leftover after parsing attributes in process `syz.0.3148'. [ 354.876029][T16644] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3149'. [ 354.898784][ T5838] Bluetooth: hci2: command tx timeout [ 354.952005][T16644] geneve2: entered promiscuous mode [ 354.959193][T16644] geneve2: entered allmulticast mode [ 354.966863][ T6034] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 354.992095][ T6034] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 354.994687][T16647] sctp: [Deprecated]: syz.1.3146 (pid 16647) Use of int in maxseg socket option. [ 354.994687][T16647] Use struct sctp_assoc_value instead [ 355.031936][T16649] netem: change failed [ 355.059374][ T6034] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 355.068962][ T6034] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 355.132565][T16435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.188294][T16660] veth0: entered promiscuous mode [ 355.194710][T16660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'. [ 355.206395][T16655] veth0: left promiscuous mode [ 355.403223][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 355.421502][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 355.442604][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 355.473524][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 355.503295][T16680] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 355.538360][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 355.553889][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 355.570091][T16672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3157'. [ 355.572370][T16435] veth0_vlan: entered promiscuous mode [ 355.624489][T16435] veth1_vlan: entered promiscuous mode [ 355.644167][T16688] netlink: 'syz.1.3162': attribute type 1 has an invalid length. [ 355.731909][T16435] veth0_macvtap: entered promiscuous mode [ 355.753767][T16435] veth1_macvtap: entered promiscuous mode [ 355.819999][T16435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.859101][T16435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.904002][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.919936][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.939000][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.965165][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.063605][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.088008][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.202675][T16715] netlink: 'syz.2.3168': attribute type 8 has an invalid length. [ 356.212658][ T6034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.228629][ T6034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.300984][T16719] netlink: 'syz.0.3170': attribute type 1 has an invalid length. [ 356.749884][T16740] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 356.792738][T16743] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 356.977946][ T5838] Bluetooth: hci2: command tx timeout [ 357.137815][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 357.163172][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 357.171800][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 357.195522][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 357.204547][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 357.622757][T16786] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 357.750211][T16786] bond7: entered promiscuous mode [ 357.755706][T16786] macvlan0: entered promiscuous mode [ 357.762976][T16786] macvlan0: entered allmulticast mode [ 357.769491][T16786] bond7: entered allmulticast mode [ 357.775996][T16786] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 357.981836][T16786] bond7: left promiscuous mode [ 358.265215][T16811] syzkaller0: entered promiscuous mode [ 358.272168][T16811] syzkaller0: entered allmulticast mode [ 358.352809][T16756] chnl_net:caif_netlink_parms(): no params data found [ 358.505981][T16830] rdma_op ffff8880304d41f0 conn xmit_rdma 0000000000000000 [ 358.518638][T16756] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.526062][T16756] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.534031][T16756] bridge_slave_0: entered allmulticast mode [ 358.543479][T16756] bridge_slave_0: entered promiscuous mode [ 358.554095][T16756] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.587732][T16756] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.605244][T16756] bridge_slave_1: entered allmulticast mode [ 358.613933][T16756] bridge_slave_1: entered promiscuous mode [ 358.722783][T16756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.751822][T16756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.820057][T16756] team0: Port device team_slave_0 added [ 358.834621][T16756] team0: Port device team_slave_1 added [ 358.843592][T16848] netlink: 'syz.2.3204': attribute type 3 has an invalid length. [ 358.856554][T16848] netlink: 'syz.2.3204': attribute type 1 has an invalid length. [ 358.909843][T16756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.926971][T16756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.972540][T16756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.986888][T16756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.994032][T16756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.037571][T16756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.058465][ T53] Bluetooth: hci2: command tx timeout [ 359.161822][T16756] hsr_slave_0: entered promiscuous mode [ 359.174431][T16756] hsr_slave_1: entered promiscuous mode [ 359.181107][T16756] debugfs: 'hsr0' already exists in 'hsr' [ 359.187023][T16756] Cannot create hsr debugfs directory [ 359.193683][T16862] x_tables: duplicate underflow at hook 1 [ 359.297782][ T53] Bluetooth: hci1: command tx timeout [ 359.486306][T16756] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.514541][T16756] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.551908][T16881] lo: entered allmulticast mode [ 359.557116][T16881] lo: left allmulticast mode [ 359.609172][T16756] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.635354][T16756] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.651407][T16891] netlink: del zone limit has 4 unknown bytes [ 359.772201][T16756] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.793402][T16756] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.913996][T16756] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.929141][T16756] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.104422][T16914] netlink: 'syz.3.3225': attribute type 23 has an invalid length. [ 360.180836][T16918] ieee802154 phy0 wpan0: encryption failed: -22 [ 361.385423][ T5838] Bluetooth: hci1: command tx timeout [ 361.879644][T16940] geneve5: entered promiscuous mode [ 361.899253][T16942] __nla_validate_parse: 75 callbacks suppressed [ 361.899270][T16942] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3232'. [ 361.904232][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3233'. [ 361.925311][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3233'. [ 361.944850][T16946] netlink: 432 bytes leftover after parsing attributes in process `syz.3.3234'. [ 361.954308][T16756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 361.966701][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3233'. [ 361.992959][T16756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.071316][T16756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.104145][T16756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.162717][T16954] x_tables: duplicate entry at hook 1 [ 362.180635][T16954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3237'. [ 362.279553][T16968] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 362.301612][T16968] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3240'. [ 362.613330][T16756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.650659][T16980] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3245'. [ 362.684718][T16756] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.715952][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.723194][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.728809][T16996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'. [ 362.802470][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.809674][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.892004][T17002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3249'. [ 363.179182][T17017] veth11: entered allmulticast mode [ 363.203836][T17017] tipc: Enabling of bearer rejected, failed to enable media [ 363.457822][ T5838] Bluetooth: hci1: command 0x040f tx timeout [ 363.484617][T16756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.672178][T16756] veth0_vlan: entered promiscuous mode [ 363.688912][T16756] veth1_vlan: entered promiscuous mode [ 363.768116][T16756] veth0_macvtap: entered promiscuous mode [ 363.786326][T16756] veth1_macvtap: entered promiscuous mode [ 363.835391][T16756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.853845][T17062] macsec0: entered promiscuous mode [ 363.863753][T17062] macsec0: entered allmulticast mode [ 363.895719][T16756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.927137][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.943407][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.962847][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.998096][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.158907][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.181024][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.222374][T17076] netlink: 'syz.2.3273': attribute type 4 has an invalid length. [ 364.255272][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.275871][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.547790][ T53] Bluetooth: hci1: command 0x040f tx timeout [ 365.557011][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 365.583787][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 365.593670][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 365.602341][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 365.611580][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.778975][T17134] bond1: option lp_interval: invalid value (0) [ 365.798110][T17134] bond1: option lp_interval: allowed values 1 - 2147483647 [ 365.814506][T17134] bond1 (unregistering): Released all slaves [ 366.036169][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 366.087884][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 366.222475][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 366.246530][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 366.315586][T17165] netlink: 'syz.4.3297': attribute type 1 has an invalid length. [ 366.381643][T17165] 8021q: adding VLAN 0 to HW filter on device bond1 [ 366.410328][T17172] netlink: 'syz.1.3298': attribute type 2 has an invalid length. [ 366.427877][T17172] netlink: 'syz.1.3298': attribute type 1 has an invalid length. [ 366.465141][T17171] macvlan2: entered promiscuous mode [ 366.470723][T17171] macvlan2: entered allmulticast mode [ 366.476755][T17171] bond1: entered allmulticast mode [ 366.482199][T17171] bond1: entered promiscuous mode [ 366.488309][T17171] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 366.503096][T17171] team0: Port device macvlan2 added [ 366.517368][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 366.530096][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 366.584854][T17176] netlink: 'syz.0.3301': attribute type 1 has an invalid length. [ 366.776679][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 366.807574][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 367.456328][T17208] netlink: 'syz.0.3308': attribute type 63 has an invalid length. [ 367.485003][T17202] syzkaller0: entered promiscuous mode [ 367.499272][T17202] syzkaller0: entered allmulticast mode [ 367.603245][T17129] chnl_net:caif_netlink_parms(): no params data found [ 367.621614][ T5838] Bluetooth: hci1: command 0x040f tx timeout [ 367.709491][ T5838] Bluetooth: hci4: command tx timeout [ 367.728385][T17227] __nla_validate_parse: 13 callbacks suppressed [ 367.728403][T17227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3313'. [ 367.791163][T17225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3312'. [ 367.804902][ T12] bridge_slave_1: left allmulticast mode [ 367.823889][ T12] bridge_slave_1: left promiscuous mode [ 367.831287][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.883688][ T12] bridge_slave_0: left allmulticast mode [ 367.890065][T17233] netlink: 'syz.3.3314': attribute type 1 has an invalid length. [ 367.898063][ T12] bridge_slave_0: left promiscuous mode [ 367.909012][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.912094][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3312'. [ 368.166900][ T12] tipc: Disabling bearer [ 368.186912][ T12] bond9 (unregistering): (slave gretap1): Releasing active interface [ 368.196005][ T12] gretap1 (unregistering): left allmulticast mode [ 368.307220][ T12] bond11 (unregistering): (slave geneve4): Releasing active interface [ 368.852903][ T12] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 368.863029][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.872920][ T12] bond0 (unregistering): Released all slaves [ 368.887299][ T12] bond1 (unregistering): Released all slaves [ 368.994020][ T12] bond2 (unregistering): Released all slaves [ 369.109333][ T12] bond3 (unregistering): Released all slaves [ 369.123751][ T12] bond4 (unregistering): Released all slaves [ 369.232373][ T12] bond5 (unregistering): Released all slaves [ 369.245141][ T12] bond6 (unregistering): Released all slaves [ 369.350807][ T12] bond7 (unregistering): Released all slaves [ 369.454009][ T12] bond8 (unregistering): Released all slaves [ 369.467434][ T12] bond9 (unregistering): Released all slaves [ 369.480758][ T12] bond10 (unregistering): Released all slaves [ 369.493272][ T12] bond11 (unregistering): Released all slaves [ 369.797754][ T5838] Bluetooth: hci4: command tx timeout [ 369.901322][ T12] tipc: Left network mode [ 369.932583][T17129] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.953755][T17129] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.008279][T17129] bridge_slave_0: entered allmulticast mode [ 370.046799][T17129] bridge_slave_0: entered promiscuous mode [ 370.067242][T17129] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.075260][T17129] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.112099][T17129] bridge_slave_1: entered allmulticast mode [ 370.125185][T17129] bridge_slave_1: entered promiscuous mode [ 370.128399][T17283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3328'. [ 370.368232][T17129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.482275][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3333'. [ 370.491907][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3333'. [ 370.511968][T17129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.601315][T17312] netlink: 'syz.1.3337': attribute type 1 has an invalid length. [ 370.711479][T17312] 8021q: adding VLAN 0 to HW filter on device bond8 [ 370.736599][T17129] team0: Port device team_slave_0 added [ 370.756167][T17129] team0: Port device team_slave_1 added [ 370.786841][T17327] netlink: 'syz.0.3336': attribute type 83 has an invalid length. [ 370.788143][T17316] 8021q: adding VLAN 0 to HW filter on device bond8 [ 370.802210][T17316] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 370.813884][T17316] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 371.030999][T17320] lo: left allmulticast mode [ 371.041668][T17129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.067663][T17129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.157549][T17129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.248475][T17340] sctp: [Deprecated]: syz.1.3344 (pid 17340) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.248475][T17340] Use struct sctp_sack_info instead [ 371.306918][ T12] hsr_slave_0: left promiscuous mode [ 371.315998][ T12] hsr_slave_1: left promiscuous mode [ 371.327350][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.417403][ T12] pimreg3 (unregistering): left allmulticast mode [ 371.488968][ T12] pim6reg (unregistering): left allmulticast mode [ 371.521236][ T12] pimreg (unregistering): left allmulticast mode [ 371.860250][ T5838] Bluetooth: hci4: command tx timeout [ 372.233147][T17129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.241334][T17129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.272378][T17129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.453432][T17129] hsr_slave_0: entered promiscuous mode [ 372.481932][T17129] hsr_slave_1: entered promiscuous mode [ 372.509860][T17129] debugfs: 'hsr0' already exists in 'hsr' [ 372.515625][T17129] Cannot create hsr debugfs directory [ 372.615444][T17371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3353'. [ 372.625821][T17373] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.3354'. [ 373.057078][ T12] IPVS: stop unused estimator thread 0... [ 373.240058][T17424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3366'. [ 373.581060][T17129] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 373.593471][T17129] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 373.611506][T17451] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3372'. [ 373.623640][T17129] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 373.641731][T17129] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.663042][T17455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3376'. [ 373.673916][T17455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3376'. [ 373.783379][T17129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.865913][T17129] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.893764][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.900990][ T6029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.939020][ T5834] Bluetooth: hci4: command tx timeout [ 373.944541][T17471] netlink: 'syz.3.3379': attribute type 83 has an invalid length. [ 373.948776][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.959510][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.074505][T17474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3380'. [ 374.424209][T17129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.567068][T17505] netlink: 'syz.1.3387': attribute type 21 has an invalid length. [ 374.580185][T17129] veth0_vlan: entered promiscuous mode [ 374.590225][T17507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3386'. [ 374.598893][T17505] netlink: 'syz.1.3387': attribute type 22 has an invalid length. [ 374.612490][T17505] netlink: 'syz.1.3387': attribute type 23 has an invalid length. [ 374.624298][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3388'. [ 374.633759][T17501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3386'. [ 374.648677][T17505] netlink: 'syz.1.3387': attribute type 25 has an invalid length. [ 374.656599][T17505] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3387'. [ 374.666483][T17510] netlink: 'syz.0.3388': attribute type 5 has an invalid length. [ 374.674603][T17510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3388'. [ 374.732954][T17510] geneve2: entered promiscuous mode [ 374.763365][T17510] geneve2: entered allmulticast mode [ 374.784120][ T1338] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 374.796661][ T1338] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 374.833495][ T1338] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 374.843283][ T1338] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 374.852752][T17129] veth1_vlan: entered promiscuous mode [ 374.860966][T17518] tipc: Started in network mode [ 374.865945][T17518] tipc: Node identity 661bd2393534, cluster identity 4711 [ 374.874409][T17518] tipc: Enabled bearer , priority 0 [ 374.931794][T17518] syzkaller0: entered promiscuous mode [ 374.941373][T17518] syzkaller0: entered allmulticast mode [ 374.949772][T17518] tipc: Resetting bearer [ 374.956149][T17520] netlink: 'syz.0.3391': attribute type 5 has an invalid length. [ 374.976882][T17517] tipc: Resetting bearer [ 376.019862][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 376.590156][T17517] tipc: Disabling bearer [ 376.645145][T17544] 8021q: VLANs not supported on wg1 [ 376.660830][ T5957] tipc: Node number set to 1395642937 [ 376.705327][T17129] veth0_macvtap: entered promiscuous mode [ 376.756993][T17129] veth1_macvtap: entered promiscuous mode [ 376.843718][T17129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.899705][T17129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.920147][ T6027] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.940560][ T6027] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.963966][T17561] tls_set_device_offload: netdev not found [ 376.973035][ T6027] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.004570][ T6027] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.298076][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.305920][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.413405][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.434257][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.733030][T17603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.898853][T17613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.009744][T17621] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.357820][T17639] syzkaller1: entered promiscuous mode [ 378.394461][T17639] syzkaller1: entered allmulticast mode [ 378.537081][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.552936][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.563065][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.573607][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.590259][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.681045][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.691730][T17651] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.757112][T17660] x_tables: duplicate underflow at hook 4 [ 378.802539][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 378.820386][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.831769][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 378.833496][T17664] __nla_validate_parse: 10 callbacks suppressed [ 378.833513][T17664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3436'. [ 378.888679][T17662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.951742][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'. [ 378.999258][T17662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.013712][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.048433][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.068552][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 379.094208][T17662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.121510][T17670] netlink: 'syz.0.3440': attribute type 26 has an invalid length. [ 379.162854][ T5933] IPVS: starting estimator thread 0... [ 379.233711][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.257567][T17679] IPVS: using max 32 ests per chain, 76800 per kthread [ 379.268673][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.313784][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 379.467024][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 379.487304][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.502998][T17698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3446'. [ 379.503806][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 379.593890][T17696] tipc: Started in network mode [ 379.599055][T17696] tipc: Node identity fe50783b9606, cluster identity 4711 [ 379.606328][T17696] tipc: Enabled bearer , priority 0 [ 379.617328][T17696] syzkaller0: entered promiscuous mode [ 379.624156][T17696] syzkaller0: entered allmulticast mode [ 379.687425][T17696] tipc: Resetting bearer [ 379.750073][T17695] tipc: Resetting bearer [ 379.799657][T17695] tipc: Disabling bearer [ 379.835361][T17709] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 380.055238][T17718] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.3453'. [ 380.067863][T17720] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3452'. [ 380.079797][T17718] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 380.098146][T17718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3453'. [ 380.267439][ T50] dummy0: left allmulticast mode [ 380.286017][ T50] bridge0: port 3(dummy0) entered disabled state [ 380.319460][ T50] bridge_slave_1: left allmulticast mode [ 380.334213][ T50] bridge_slave_1: left promiscuous mode [ 380.340188][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.353148][ T50] bridge_slave_0: left allmulticast mode [ 380.359122][ T50] bridge_slave_0: left promiscuous mode [ 380.369936][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.387417][T17741] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3460'. [ 380.665056][ T5838] Bluetooth: hci0: command tx timeout [ 380.927269][ T50] bond5 (unregistering): (slave geneve4): Releasing backup interface [ 381.400309][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.412033][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.422398][ T50] bond0 (unregistering): Released all slaves [ 381.435324][ T50] bond1 (unregistering): Released all slaves [ 381.533849][ T50] bond2 (unregistering): Released all slaves [ 381.546470][ T50] bond3 (unregistering): Released all slaves [ 381.560702][ T50] bond4 (unregistering): Released all slaves [ 381.572973][ T50] bond5 (unregistering): Released all slaves [ 381.684882][ T50] bond6 (unregistering): Released all slaves [ 381.698480][ T50] bond7 (unregistering): Released all slaves [ 381.798410][ T50] bond8 (unregistering): Released all slaves [ 381.839764][ T7488] syû: Port: 1 Link DOWN [ 381.844882][T17754] syzkaller0: entered promiscuous mode [ 381.850908][T17754] syzkaller0: entered allmulticast mode [ 381.956171][T17647] chnl_net:caif_netlink_parms(): no params data found [ 382.015570][ T50] tipc: Disabling bearer [ 382.042941][ T50] tipc: Left network mode [ 382.185656][T17776] netlink: 'syz.3.3468': attribute type 33 has an invalid length. [ 382.194588][T17776] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3468'. [ 382.479668][T17784] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.487430][T17784] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.632579][T17784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.652661][T17784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.738772][ T5838] Bluetooth: hci0: command tx timeout [ 382.814654][T17784] bond1: left allmulticast mode [ 382.823423][T17784] bond1: left promiscuous mode [ 382.848613][T17811] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3476'. [ 382.859532][T17787] veth5: entered allmulticast mode [ 382.864962][T17788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3469'. [ 382.992650][ T60] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.004095][ T60] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.136894][ T60] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.179930][T17647] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.212185][T17647] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.229636][T17647] bridge_slave_0: entered allmulticast mode [ 383.241053][T17647] bridge_slave_0: entered promiscuous mode [ 383.265719][T17647] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.280622][T17647] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.288918][T17647] bridge_slave_1: entered allmulticast mode [ 383.301523][T17647] bridge_slave_1: entered promiscuous mode [ 383.313106][ T60] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.478939][T17647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.507705][T17647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.610056][T17855] netlink: 'syz.3.3491': attribute type 11 has an invalid length. [ 383.695036][T17647] team0: Port device team_slave_0 added [ 383.738567][T17647] team0: Port device team_slave_1 added [ 383.750900][T17859] netlink: 'syz.4.3494': attribute type 10 has an invalid length. [ 383.850810][T17869] __nla_validate_parse: 6 callbacks suppressed [ 383.851501][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3497'. [ 383.891428][ T5897] IPVS: starting estimator thread 0... [ 383.899385][T17872] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 383.945948][T17859] team0: Port device geneve0 added [ 383.973888][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.988212][T17873] IPVS: using max 26 ests per chain, 62400 per kthread [ 384.009606][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.160092][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'. [ 384.240443][T17647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.248606][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.278917][T17647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.296628][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.305509][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.322869][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.334928][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.359651][ T50] veth0_macvtap: left promiscuous mode [ 384.411278][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'. [ 384.456563][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3501'. [ 384.818617][ T5838] Bluetooth: hci0: command tx timeout [ 385.037995][ T6034] smc: removing ib device syû [ 385.240950][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.251009][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.267724][T17647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.280979][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.308290][T17647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.526447][T17647] hsr_slave_0: entered promiscuous mode [ 385.580976][T17647] hsr_slave_1: entered promiscuous mode [ 385.603230][T17647] debugfs: 'hsr0' already exists in 'hsr' [ 385.609320][T17647] Cannot create hsr debugfs directory [ 386.143375][T17935] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3514'. [ 386.590239][T17956] netlink: 15 bytes leftover after parsing attributes in process `syz.0.3520'. [ 386.893648][T17964] bridge2: entered promiscuous mode [ 386.900677][ T5838] Bluetooth: hci0: command tx timeout [ 386.917592][T17964] bridge2: entered allmulticast mode [ 386.946253][T17964] team0: Port device bridge2 added [ 386.964884][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3524'. [ 387.017977][T17972] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3525'. [ 387.027241][T17972] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3525'. [ 387.029787][T17969] bridge0: port 3(team0) entered blocking state [ 387.058377][T17969] bridge0: port 3(team0) entered disabled state [ 387.072269][T17969] team0: entered allmulticast mode [ 387.082247][T17969] team_slave_0: entered allmulticast mode [ 387.089041][T17972] netlink: 'syz.0.3525': attribute type 6 has an invalid length. [ 387.108074][T17969] team_slave_1: entered allmulticast mode [ 387.115102][T17972] netlink: 'syz.0.3525': attribute type 5 has an invalid length. [ 387.124790][T17969] geneve0: entered allmulticast mode [ 387.139585][T17972] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3525'. [ 387.195970][T17969] team0: entered promiscuous mode [ 387.204225][T17969] team_slave_0: entered promiscuous mode [ 387.206062][T17972] netlink: 'syz.0.3525': attribute type 6 has an invalid length. [ 387.211309][T17969] team_slave_1: entered promiscuous mode [ 387.237851][T17969] geneve0: entered promiscuous mode [ 387.494831][T17985] netlink: 'syz.4.3529': attribute type 11 has an invalid length. [ 387.684800][T17993] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 387.697072][T17992] netlink: 'syz.4.3533': attribute type 8 has an invalid length. [ 387.700341][T17994] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 387.843286][T17999] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 387.992193][T17647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 388.130914][T17647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 388.190406][T17647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 388.313699][T17647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 388.362127][ T50] IPVS: stop unused estimator thread 0... [ 388.610521][T17647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.658665][T17647] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.672015][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.679203][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.746209][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.753405][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.992596][T18061] __nla_validate_parse: 6 callbacks suppressed [ 388.992613][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'. [ 389.039558][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'. [ 389.060279][T18061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3551'. [ 389.101163][ T1338] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.101245][T18061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'. [ 389.113568][ T1338] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.163805][ T1338] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.172196][T18061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3551'. [ 389.198414][ T1338] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.223088][T18072] syzkaller0: entered promiscuous mode [ 389.235539][T18072] syzkaller0: entered allmulticast mode [ 389.401788][T18077] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3555'. [ 389.541444][T17647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.743324][T17647] veth0_vlan: entered promiscuous mode [ 389.769950][T17647] veth1_vlan: entered promiscuous mode [ 389.781600][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3559'. [ 389.971506][T17647] veth0_macvtap: entered promiscuous mode [ 390.014623][T17647] veth1_macvtap: entered promiscuous mode [ 390.159560][T17647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.212557][T17647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.241404][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.252998][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.293925][T18125] netlink: 'syz.4.3567': attribute type 12 has an invalid length. [ 390.303391][T18125] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3567'. [ 390.325842][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.335236][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.403996][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3567'. [ 390.629883][T18144] netlink: 'syz.3.3571': attribute type 9 has an invalid length. [ 390.772689][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.804424][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.999015][T18162] netlink: 'syz.4.3577': attribute type 6 has an invalid length. [ 391.019005][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.021042][T18165] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3579'. [ 391.026835][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.202457][T18173] FAULT_INJECTION: forcing a failure. [ 391.202457][T18173] name failslab, interval 1, probability 0, space 0, times 0 [ 391.232949][T18173] CPU: 0 UID: 0 PID: 18173 Comm: syz.2.3581 Not tainted syzkaller #0 PREEMPT(full) [ 391.232976][T18173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.232990][T18173] Call Trace: [ 391.232997][T18173] [ 391.233005][T18173] dump_stack_lvl+0x189/0x250 [ 391.233030][T18173] ? __pfx____ratelimit+0x10/0x10 [ 391.233052][T18173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.233072][T18173] ? __pfx__printk+0x10/0x10 [ 391.233092][T18173] ? __pfx___might_resched+0x10/0x10 [ 391.233110][T18173] ? fs_reclaim_acquire+0x7d/0x100 [ 391.233129][T18173] should_fail_ex+0x414/0x560 [ 391.233154][T18173] should_failslab+0xa8/0x100 [ 391.233172][T18173] __kmalloc_cache_noprof+0x6f/0x6f0 [ 391.233194][T18173] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 391.233222][T18173] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 391.233251][T18173] tcp_sendmsg_locked+0x4cc9/0x5540 [ 391.233276][T18173] ? tcp_sendmsg_locked+0x331/0x5540 [ 391.233327][T18173] ? __lock_acquire+0xab9/0xd20 [ 391.233357][T18173] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 391.233377][T18173] ? __local_bh_enable_ip+0x12d/0x1c0 [ 391.233400][T18173] ? __local_bh_enable_ip+0x12d/0x1c0 [ 391.233431][T18173] tcp_sendmsg+0x2f/0x50 [ 391.233454][T18173] __sock_sendmsg+0x19c/0x270 [ 391.233479][T18173] __sys_sendto+0x3bd/0x520 [ 391.233498][T18173] ? __pfx___sys_sendto+0x10/0x10 [ 391.233512][T18173] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 391.233557][T18173] ? __fget_files+0x3a0/0x420 [ 391.233585][T18173] ? ksys_write+0x22a/0x250 [ 391.233609][T18173] ? __pfx_ksys_write+0x10/0x10 [ 391.233636][T18173] __x64_sys_sendto+0xde/0x100 [ 391.233656][T18173] do_syscall_64+0xfa/0xfa0 [ 391.233677][T18173] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.233699][T18173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.233716][T18173] ? clear_bhb_loop+0x60/0xb0 [ 391.233737][T18173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.233759][T18173] RIP: 0033:0x7f083838f6c9 [ 391.233774][T18173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.233789][T18173] RSP: 002b:00007f08391f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 391.233808][T18173] RAX: ffffffffffffffda RBX: 00007f08385e5fa0 RCX: 00007f083838f6c9 [ 391.233821][T18173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 391.233831][T18173] RBP: 00007f08391f9090 R08: 0000200000e68000 R09: 0000000000000010 [ 391.233843][T18173] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 391.233853][T18173] R13: 00007f08385e6038 R14: 00007f08385e5fa0 R15: 00007ffdd170f248 [ 391.233884][T18173] [ 391.248529][T18175] syzkaller0: entered promiscuous mode [ 391.501357][T18181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.504316][T18175] syzkaller0: entered allmulticast mode [ 391.572390][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.580686][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.675076][T18182] tipc: Enabling of bearer rejected, failed to enable media [ 392.062084][T18210] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 392.376079][T18229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.396534][T18229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.425909][T18229] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 392.617188][T18238] tipc: Enabling of bearer rejected, failed to enable media [ 392.793544][T18256] netlink: 'syz.2.3604': attribute type 10 has an invalid length. [ 392.830353][T18256] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.838122][T18256] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.894770][T18256] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.902005][T18256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.909592][T18256] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.916701][T18256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.953224][T18256] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 393.184346][T18284] xt_HMARK: spi-set and port-set can't be combined [ 393.184857][T18285] netlink: 'syz.3.3611': attribute type 13 has an invalid length. [ 393.441080][T18285] geneve2: left promiscuous mode [ 393.446105][T18285] geneve2: left allmulticast mode [ 393.706653][T18302] netlink: 'syz.1.3616': attribute type 7 has an invalid length. [ 393.731956][T18302] netlink: 'syz.1.3616': attribute type 8 has an invalid length. [ 393.802167][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.815618][ T1107] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 393.837195][T18304] veth1_macvtap: left promiscuous mode [ 393.913316][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.924457][ T1107] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 393.995427][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.023512][ T1107] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 394.170367][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.209555][ T1107] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 394.263785][T18321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.508808][ T1107] bridge_slave_1: left allmulticast mode [ 394.514506][ T1107] bridge_slave_1: left promiscuous mode [ 394.539524][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.564990][ T1107] bridge_slave_0: left allmulticast mode [ 394.576043][ T1107] bridge_slave_0: left promiscuous mode [ 394.588902][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.602126][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 394.613370][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 394.622487][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 394.652059][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 394.663391][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.232761][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.244322][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.254824][ T1107] bond0 (unregistering): Released all slaves [ 395.362870][ T1107] tipc: Left network mode [ 395.798785][T18376] Bluetooth: MGMT ver 1.23 [ 395.860087][T18380] __nla_validate_parse: 16 callbacks suppressed [ 395.860105][T18380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 395.935209][T18380] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 395.964611][T18380] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3642'. [ 396.022864][T18389] FAULT_INJECTION: forcing a failure. [ 396.022864][T18389] name failslab, interval 1, probability 0, space 0, times 0 [ 396.035967][T18389] CPU: 0 UID: 0 PID: 18389 Comm: syz.1.3643 Not tainted syzkaller #0 PREEMPT(full) [ 396.035991][T18389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.036002][T18389] Call Trace: [ 396.036008][T18389] [ 396.036016][T18389] dump_stack_lvl+0x189/0x250 [ 396.036042][T18389] ? __pfx____ratelimit+0x10/0x10 [ 396.036063][T18389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.036091][T18389] ? __pfx__printk+0x10/0x10 [ 396.036111][T18389] ? __lock_acquire+0xab9/0xd20 [ 396.036135][T18389] should_fail_ex+0x414/0x560 [ 396.036163][T18389] should_failslab+0xa8/0x100 [ 396.036181][T18389] kmem_cache_alloc_noprof+0x74/0x6e0 [ 396.036204][T18389] ? __inet_hash_connect+0xd1d/0x2400 [ 396.036233][T18389] __inet_hash_connect+0xd1d/0x2400 [ 396.036255][T18389] ? __pfx___inet_check_established+0x10/0x10 [ 396.036282][T18389] ? __inet_hash_connect+0x4a4/0x2400 [ 396.036308][T18389] ? __pfx___inet_hash_connect+0x10/0x10 [ 396.036333][T18389] ? inet_hash_connect+0x12f/0x240 [ 396.036355][T18389] tcp_v4_connect+0xd6d/0x1a90 [ 396.036370][T18389] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 396.036409][T18389] ? __pfx_tcp_v4_connect+0x10/0x10 [ 396.036435][T18389] __inet_stream_connect+0x2ae/0xe70 [ 396.036471][T18389] ? __pfx___inet_stream_connect+0x10/0x10 [ 396.036498][T18389] ? __kasan_kmalloc+0x93/0xb0 [ 396.036522][T18389] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 396.036553][T18389] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 396.036584][T18389] tcp_sendmsg_locked+0x4cc9/0x5540 [ 396.036610][T18389] ? tcp_sendmsg_locked+0x331/0x5540 [ 396.036663][T18389] ? __lock_acquire+0xab9/0xd20 [ 396.036692][T18389] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 396.036713][T18389] ? __local_bh_enable_ip+0x12d/0x1c0 [ 396.036736][T18389] ? __local_bh_enable_ip+0x12d/0x1c0 [ 396.036766][T18389] tcp_sendmsg+0x2f/0x50 [ 396.036790][T18389] __sock_sendmsg+0x19c/0x270 [ 396.036815][T18389] __sys_sendto+0x3bd/0x520 [ 396.036833][T18389] ? __pfx___sys_sendto+0x10/0x10 [ 396.036846][T18389] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 396.036883][T18389] ? __fget_files+0x3a0/0x420 [ 396.036910][T18389] ? ksys_write+0x22a/0x250 [ 396.036935][T18389] ? __pfx_ksys_write+0x10/0x10 [ 396.036960][T18389] __x64_sys_sendto+0xde/0x100 [ 396.036981][T18389] do_syscall_64+0xfa/0xfa0 [ 396.037002][T18389] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.037023][T18389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.037039][T18389] ? clear_bhb_loop+0x60/0xb0 [ 396.037061][T18389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.037077][T18389] RIP: 0033:0x7f6c76d8f6c9 [ 396.037099][T18389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.037114][T18389] RSP: 002b:00007f6c74ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 396.037133][T18389] RAX: ffffffffffffffda RBX: 00007f6c76fe6090 RCX: 00007f6c76d8f6c9 [ 396.037145][T18389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 396.037155][T18389] RBP: 00007f6c74ff6090 R08: 0000200000e68000 R09: 0000000000000010 [ 396.037167][T18389] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 396.037178][T18389] R13: 00007f6c76fe6128 R14: 00007f6c76fe6090 R15: 00007ffd64ea79c8 [ 396.037208][T18389] [ 396.390476][T18394] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3647'. [ 396.427321][ T1107] hsr_slave_0: left promiscuous mode [ 396.436197][ T1107] hsr_slave_1: left promiscuous mode [ 396.443250][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.451531][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.460380][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.471037][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.503034][ T1107] veth1_macvtap: left promiscuous mode [ 396.509619][ T1107] veth0_macvtap: left promiscuous mode [ 396.515272][ T1107] veth1_vlan: left promiscuous mode [ 396.520995][ T1107] veth0_vlan: left promiscuous mode [ 396.745080][ T5838] Bluetooth: hci1: command tx timeout [ 396.791781][T18409] netlink: 'syz.1.3649': attribute type 9 has an invalid length. [ 396.994244][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 397.033354][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 397.655746][T18339] chnl_net:caif_netlink_parms(): no params data found [ 397.733995][T18421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3654'. [ 397.907400][T18434] FAULT_INJECTION: forcing a failure. [ 397.907400][T18434] name failslab, interval 1, probability 0, space 0, times 0 [ 397.917114][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3658'. [ 397.920448][T18434] CPU: 1 UID: 0 PID: 18434 Comm: syz.4.3657 Not tainted syzkaller #0 PREEMPT(full) [ 397.920472][T18434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 397.920482][T18434] Call Trace: [ 397.920490][T18434] [ 397.920498][T18434] dump_stack_lvl+0x189/0x250 [ 397.920524][T18434] ? __pfx____ratelimit+0x10/0x10 [ 397.920547][T18434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.920580][T18434] ? __pfx__printk+0x10/0x10 [ 397.920601][T18434] ? __lock_acquire+0xab9/0xd20 [ 397.920626][T18434] should_fail_ex+0x414/0x560 [ 397.920656][T18434] should_failslab+0xa8/0x100 [ 397.920676][T18434] kmem_cache_alloc_noprof+0x74/0x6e0 [ 397.920699][T18434] ? __inet_hash_connect+0x146c/0x2400 [ 397.920725][T18434] __inet_hash_connect+0x146c/0x2400 [ 397.920761][T18434] ? __inet_hash_connect+0x4a4/0x2400 [ 397.920788][T18434] ? __pfx___inet_hash_connect+0x10/0x10 [ 397.920814][T18434] ? inet_hash_connect+0x12f/0x240 [ 397.920836][T18434] tcp_v4_connect+0xd6d/0x1a90 [ 397.920851][T18434] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 397.920893][T18434] ? __pfx_tcp_v4_connect+0x10/0x10 [ 397.920921][T18434] __inet_stream_connect+0x2ae/0xe70 [ 397.920955][T18434] ? __pfx___inet_stream_connect+0x10/0x10 [ 397.920978][T18434] ? __kasan_kmalloc+0x93/0xb0 [ 397.921000][T18434] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 397.921029][T18434] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 397.921060][T18434] tcp_sendmsg_locked+0x4cc9/0x5540 [ 397.921088][T18434] ? tcp_sendmsg_locked+0x331/0x5540 [ 397.921138][T18434] ? __lock_acquire+0xab9/0xd20 [ 397.921165][T18434] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 397.921186][T18434] ? __local_bh_enable_ip+0x12d/0x1c0 [ 397.921207][T18434] ? __local_bh_enable_ip+0x12d/0x1c0 [ 397.921237][T18434] tcp_sendmsg+0x2f/0x50 [ 397.921260][T18434] __sock_sendmsg+0x19c/0x270 [ 397.921284][T18434] __sys_sendto+0x3bd/0x520 [ 397.921303][T18434] ? __pfx___sys_sendto+0x10/0x10 [ 397.921316][T18434] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 397.921352][T18434] ? __fget_files+0x3a0/0x420 [ 397.921378][T18434] ? ksys_write+0x22a/0x250 [ 397.921402][T18434] ? __pfx_ksys_write+0x10/0x10 [ 397.921426][T18434] __x64_sys_sendto+0xde/0x100 [ 397.921446][T18434] do_syscall_64+0xfa/0xfa0 [ 397.921466][T18434] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.921487][T18434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.921503][T18434] ? clear_bhb_loop+0x60/0xb0 [ 397.921523][T18434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.921538][T18434] RIP: 0033:0x7f979bb8f6c9 [ 397.921561][T18434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.921574][T18434] RSP: 002b:00007f979ca3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 397.921592][T18434] RAX: ffffffffffffffda RBX: 00007f979bde6090 RCX: 00007f979bb8f6c9 [ 397.921604][T18434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 397.921614][T18434] RBP: 00007f979ca3e090 R08: 0000200000e68000 R09: 0000000000000010 [ 397.921625][T18434] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 397.921635][T18434] R13: 00007f979bde6128 R14: 00007f979bde6090 R15: 00007ffe3323e308 [ 397.921664][T18434] [ 398.300794][T18436] bridge_slave_1: left allmulticast mode [ 398.307223][T18436] bridge_slave_1: left promiscuous mode [ 398.315225][T18436] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.341065][T18436] bridge_slave_0: left allmulticast mode [ 398.352282][T18436] bridge_slave_0: left promiscuous mode [ 398.358960][T18436] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.364497][T18440] netlink: 'syz.4.3659': attribute type 1 has an invalid length. [ 398.401755][T18436] bond0: (slave bridge0): Releasing backup interface [ 398.626817][T18452] netlink: 'syz.2.3662': attribute type 1 has an invalid length. [ 398.635147][T18452] netlink: 15799 bytes leftover after parsing attributes in process `syz.2.3662'. [ 398.820407][ T5838] Bluetooth: hci1: command tx timeout [ 399.925771][T18440] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 399.935777][T18443] gretap2: entered promiscuous mode [ 399.956397][T18339] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.965476][T18339] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.975704][T18339] bridge_slave_0: entered allmulticast mode [ 399.999329][T18339] bridge_slave_0: entered promiscuous mode [ 400.045933][T18339] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.051581][T18455] FAULT_INJECTION: forcing a failure. [ 400.051581][T18455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.072350][T18339] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.078172][T18455] CPU: 0 UID: 0 PID: 18455 Comm: syz.2.3663 Not tainted syzkaller #0 PREEMPT(full) [ 400.078198][T18455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.078208][T18455] Call Trace: [ 400.078215][T18455] [ 400.078222][T18455] dump_stack_lvl+0x189/0x250 [ 400.078249][T18455] ? __pfx____ratelimit+0x10/0x10 [ 400.078270][T18455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.078292][T18455] ? __pfx__printk+0x10/0x10 [ 400.078309][T18455] ? __might_fault+0xb0/0x130 [ 400.078341][T18455] should_fail_ex+0x414/0x560 [ 400.078376][T18455] _copy_from_user+0x2d/0xb0 [ 400.078398][T18455] ___sys_sendmsg+0x158/0x2a0 [ 400.078419][T18455] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.078470][T18455] ? __fget_files+0x2a/0x420 [ 400.078486][T18455] ? __fget_files+0x3a0/0x420 [ 400.078517][T18455] __x64_sys_sendmsg+0x19b/0x260 [ 400.078536][T18455] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.078563][T18455] ? __pfx_ksys_write+0x10/0x10 [ 400.078589][T18455] ? do_syscall_64+0xbe/0xfa0 [ 400.078619][T18455] do_syscall_64+0xfa/0xfa0 [ 400.078638][T18455] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.078660][T18455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.078677][T18455] ? clear_bhb_loop+0x60/0xb0 [ 400.078696][T18455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.078711][T18455] RIP: 0033:0x7f083838f6c9 [ 400.078727][T18455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.078741][T18455] RSP: 002b:00007f08391f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.078759][T18455] RAX: ffffffffffffffda RBX: 00007f08385e5fa0 RCX: 00007f083838f6c9 [ 400.078771][T18455] RDX: 000000000004cc00 RSI: 00002000000003c0 RDI: 0000000000000004 [ 400.078782][T18455] RBP: 00007f08391f9090 R08: 0000000000000000 R09: 0000000000000000 [ 400.078792][T18455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.078802][T18455] R13: 00007f08385e6038 R14: 00007f08385e5fa0 R15: 00007ffdd170f248 [ 400.078830][T18455] [ 400.215217][T18466] netlink: 'syz.3.3664': attribute type 3 has an invalid length. [ 400.215915][T18339] bridge_slave_1: entered allmulticast mode [ 400.246077][T18460] netlink: 'syz.3.3664': attribute type 3 has an invalid length. [ 400.252923][T18466] netlink: 'syz.3.3664': attribute type 1 has an invalid length. [ 400.256555][T18339] bridge_slave_1: entered promiscuous mode [ 400.265572][T18460] netlink: 'syz.3.3664': attribute type 1 has an invalid length. [ 400.345809][T18465] tipc: Started in network mode [ 400.351125][T18465] tipc: Node identity eab82e4d58b1, cluster identity 4711 [ 400.359298][T18465] tipc: Enabled bearer , priority 0 [ 400.378514][ T1107] IPVS: stop unused estimator thread 0... [ 400.454767][T18465] tipc: Disabling bearer [ 400.489116][T18474] FAULT_INJECTION: forcing a failure. [ 400.489116][T18474] name failslab, interval 1, probability 0, space 0, times 0 [ 400.497421][T18339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.532107][T18339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.537531][T18474] CPU: 1 UID: 0 PID: 18474 Comm: syz.1.3669 Not tainted syzkaller #0 PREEMPT(full) [ 400.537553][T18474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.537563][T18474] Call Trace: [ 400.537570][T18474] [ 400.537578][T18474] dump_stack_lvl+0x189/0x250 [ 400.537605][T18474] ? __pfx____ratelimit+0x10/0x10 [ 400.537627][T18474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.537648][T18474] ? __pfx__printk+0x10/0x10 [ 400.537665][T18474] ? rcu_is_watching+0x15/0xb0 [ 400.537684][T18474] ? trace_fib_table_lookup+0x85/0x200 [ 400.537711][T18474] should_fail_ex+0x414/0x560 [ 400.537741][T18474] should_failslab+0xa8/0x100 [ 400.537760][T18474] kmem_cache_alloc_noprof+0x74/0x6e0 [ 400.537780][T18474] ? __pfx_find_exception+0x10/0x10 [ 400.537800][T18474] ? dst_alloc+0x105/0x170 [ 400.537818][T18474] ? fib_lookup+0x76/0x440 [ 400.537840][T18474] dst_alloc+0x105/0x170 [ 400.537862][T18474] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 400.537893][T18474] ? ip_route_output_key_hash+0xc1/0x280 [ 400.537916][T18474] ip_route_output_key_hash+0x174/0x280 [ 400.537940][T18474] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 400.537971][T18474] ? dst_release+0x126/0x1b0 [ 400.537992][T18474] ip_route_output_flow+0x2a/0x150 [ 400.538016][T18474] tcp_v4_connect+0xe18/0x1a90 [ 400.538031][T18474] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 400.538071][T18474] ? __pfx_tcp_v4_connect+0x10/0x10 [ 400.538097][T18474] __inet_stream_connect+0x2ae/0xe70 [ 400.538133][T18474] ? __pfx___inet_stream_connect+0x10/0x10 [ 400.538158][T18474] ? __kasan_kmalloc+0x93/0xb0 [ 400.538183][T18474] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 400.538212][T18474] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 400.538242][T18474] tcp_sendmsg_locked+0x4cc9/0x5540 [ 400.538269][T18474] ? tcp_sendmsg_locked+0x331/0x5540 [ 400.538325][T18474] ? __lock_acquire+0xab9/0xd20 [ 400.538354][T18474] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 400.538378][T18474] ? __local_bh_enable_ip+0x12d/0x1c0 [ 400.538400][T18474] ? __local_bh_enable_ip+0x12d/0x1c0 [ 400.538430][T18474] tcp_sendmsg+0x2f/0x50 [ 400.538452][T18474] __sock_sendmsg+0x19c/0x270 [ 400.538477][T18474] __sys_sendto+0x3bd/0x520 [ 400.538495][T18474] ? __pfx___sys_sendto+0x10/0x10 [ 400.538509][T18474] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 400.538544][T18474] ? __fget_files+0x3a0/0x420 [ 400.538567][T18474] ? ksys_write+0x22a/0x250 [ 400.538590][T18474] ? __pfx_ksys_write+0x10/0x10 [ 400.538615][T18474] __x64_sys_sendto+0xde/0x100 [ 400.538635][T18474] do_syscall_64+0xfa/0xfa0 [ 400.538656][T18474] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.538676][T18474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.538693][T18474] ? clear_bhb_loop+0x60/0xb0 [ 400.538713][T18474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.538729][T18474] RIP: 0033:0x7f6c76d8f6c9 [ 400.538744][T18474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.538758][T18474] RSP: 002b:00007f6c77b53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 400.538776][T18474] RAX: ffffffffffffffda RBX: 00007f6c76fe5fa0 RCX: 00007f6c76d8f6c9 [ 400.538788][T18474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 400.538798][T18474] RBP: 00007f6c77b53090 R08: 0000200000e68000 R09: 0000000000000010 [ 400.538809][T18474] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 400.538819][T18474] R13: 00007f6c76fe6038 R14: 00007f6c76fe5fa0 R15: 00007ffd64ea79c8 [ 400.538849][T18474] [ 400.558709][T18478] ipt_ECN: cannot use operation on non-tcp rule [ 400.661851][T18481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3672'. [ 400.910168][ T5838] Bluetooth: hci1: command tx timeout [ 400.935338][T18478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3670'. [ 401.048691][T18501] FAULT_INJECTION: forcing a failure. [ 401.048691][T18501] name failslab, interval 1, probability 0, space 0, times 0 [ 401.065850][T18339] team0: Port device team_slave_0 added [ 401.075791][T18339] team0: Port device team_slave_1 added [ 401.089615][T18501] CPU: 1 UID: 0 PID: 18501 Comm: syz.2.3675 Not tainted syzkaller #0 PREEMPT(full) [ 401.089639][T18501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 401.089649][T18501] Call Trace: [ 401.089657][T18501] [ 401.089665][T18501] dump_stack_lvl+0x189/0x250 [ 401.089691][T18501] ? __pfx____ratelimit+0x10/0x10 [ 401.089714][T18501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.089736][T18501] ? __pfx__printk+0x10/0x10 [ 401.089758][T18501] ? __pfx___might_resched+0x10/0x10 [ 401.089776][T18501] ? fs_reclaim_acquire+0x7d/0x100 [ 401.089797][T18501] should_fail_ex+0x414/0x560 [ 401.089827][T18501] should_failslab+0xa8/0x100 [ 401.089846][T18501] kmem_cache_alloc_node_noprof+0x77/0x710 [ 401.089869][T18501] ? __alloc_skb+0x112/0x2d0 [ 401.089884][T18501] ? netlink_autobind+0xdb/0x300 [ 401.089907][T18501] __alloc_skb+0x112/0x2d0 [ 401.089926][T18501] netlink_sendmsg+0x5c6/0xb30 [ 401.089953][T18501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.089973][T18501] ? aa_sock_msg_perm+0xf1/0x1d0 [ 401.089997][T18501] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.090011][T18501] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.090027][T18501] __sock_sendmsg+0x21c/0x270 [ 401.090050][T18501] ____sys_sendmsg+0x505/0x830 [ 401.090072][T18501] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.090097][T18501] ? import_iovec+0x74/0xa0 [ 401.090120][T18501] ___sys_sendmsg+0x21f/0x2a0 [ 401.090138][T18501] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.090188][T18501] ? __fget_files+0x2a/0x420 [ 401.090202][T18501] ? __fget_files+0x3a0/0x420 [ 401.090227][T18501] __x64_sys_sendmsg+0x19b/0x260 [ 401.090247][T18501] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.090272][T18501] ? __pfx_ksys_write+0x10/0x10 [ 401.090295][T18501] ? do_syscall_64+0xbe/0xfa0 [ 401.090319][T18501] do_syscall_64+0xfa/0xfa0 [ 401.090339][T18501] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.090361][T18501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.090378][T18501] ? clear_bhb_loop+0x60/0xb0 [ 401.090397][T18501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.090413][T18501] RIP: 0033:0x7f083838f6c9 [ 401.090437][T18501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.090451][T18501] RSP: 002b:00007f08391f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.090469][T18501] RAX: ffffffffffffffda RBX: 00007f08385e5fa0 RCX: 00007f083838f6c9 [ 401.090478][T18501] RDX: 000000000004cc00 RSI: 00002000000003c0 RDI: 0000000000000004 [ 401.090487][T18501] RBP: 00007f08391f9090 R08: 0000000000000000 R09: 0000000000000000 [ 401.090495][T18501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.090504][T18501] R13: 00007f08385e6038 R14: 00007f08385e5fa0 R15: 00007ffdd170f248 [ 401.090532][T18501] [ 401.091230][T18502] netlink: 'syz.3.3676': attribute type 1 has an invalid length. [ 401.654299][T18339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.680347][T18339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.741512][T18537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3683'. [ 401.751396][T18339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.767061][T18537] netlink: 'syz.1.3683': attribute type 7 has an invalid length. [ 401.775414][T18537] netlink: 'syz.1.3683': attribute type 8 has an invalid length. [ 401.798108][T18537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3683'. [ 401.803423][T18339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.828229][T18339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.858893][T18339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.991661][T18339] hsr_slave_0: entered promiscuous mode [ 401.998974][T18339] hsr_slave_1: entered promiscuous mode [ 402.005612][T18339] debugfs: 'hsr0' already exists in 'hsr' [ 402.014371][T18339] Cannot create hsr debugfs directory [ 402.106406][T18557] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3690'. [ 402.385385][T18572] FAULT_INJECTION: forcing a failure. [ 402.385385][T18572] name failslab, interval 1, probability 0, space 0, times 0 [ 402.407051][T18572] CPU: 1 UID: 0 PID: 18572 Comm: syz.2.3694 Not tainted syzkaller #0 PREEMPT(full) [ 402.407077][T18572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.407086][T18572] Call Trace: [ 402.407093][T18572] [ 402.407100][T18572] dump_stack_lvl+0x189/0x250 [ 402.407126][T18572] ? __pfx____ratelimit+0x10/0x10 [ 402.407148][T18572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.407168][T18572] ? __pfx__printk+0x10/0x10 [ 402.407191][T18572] ? __pfx___might_resched+0x10/0x10 [ 402.407209][T18572] ? fs_reclaim_acquire+0x7d/0x100 [ 402.407229][T18572] should_fail_ex+0x414/0x560 [ 402.407257][T18572] should_failslab+0xa8/0x100 [ 402.407276][T18572] kmem_cache_alloc_node_noprof+0x77/0x710 [ 402.407306][T18572] ? __alloc_skb+0x112/0x2d0 [ 402.407320][T18572] ? ipv4_default_advmss+0x1e/0x1d0 [ 402.407346][T18572] __alloc_skb+0x112/0x2d0 [ 402.407364][T18572] tcp_stream_alloc_skb+0x3d/0x340 [ 402.407390][T18572] tcp_connect+0x14ce/0x4f10 [ 402.407443][T18572] ? __pfx_tcp_connect+0x10/0x10 [ 402.407467][T18572] ? get_random_u16+0x48e/0x940 [ 402.407481][T18572] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.407502][T18572] ? get_random_u16+0x154/0x940 [ 402.407515][T18572] ? get_random_u16+0x4df/0x940 [ 402.407536][T18572] ? __asan_memset+0x22/0x50 [ 402.407564][T18572] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 402.407591][T18572] ? sk_setup_caps+0x9ef/0xc40 [ 402.407611][T18572] ? sk_setup_caps+0x29/0xc40 [ 402.407632][T18572] tcp_v4_connect+0x11de/0x1a90 [ 402.407648][T18572] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 402.407690][T18572] ? __pfx_tcp_v4_connect+0x10/0x10 [ 402.407717][T18572] __inet_stream_connect+0x2ae/0xe70 [ 402.407756][T18572] ? __pfx___inet_stream_connect+0x10/0x10 [ 402.407782][T18572] ? __kasan_kmalloc+0x93/0xb0 [ 402.407807][T18572] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 402.407839][T18572] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 402.407871][T18572] tcp_sendmsg_locked+0x4cc9/0x5540 [ 402.407899][T18572] ? tcp_sendmsg_locked+0x331/0x5540 [ 402.407950][T18572] ? __lock_acquire+0xab9/0xd20 [ 402.407981][T18572] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 402.408002][T18572] ? __local_bh_enable_ip+0x12d/0x1c0 [ 402.408025][T18572] ? __local_bh_enable_ip+0x12d/0x1c0 [ 402.408054][T18572] tcp_sendmsg+0x2f/0x50 [ 402.408076][T18572] __sock_sendmsg+0x19c/0x270 [ 402.408099][T18572] __sys_sendto+0x3bd/0x520 [ 402.408117][T18572] ? __pfx___sys_sendto+0x10/0x10 [ 402.408128][T18572] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 402.408164][T18572] ? __fget_files+0x3a0/0x420 [ 402.408190][T18572] ? ksys_write+0x22a/0x250 [ 402.408215][T18572] ? __pfx_ksys_write+0x10/0x10 [ 402.408241][T18572] __x64_sys_sendto+0xde/0x100 [ 402.408260][T18572] do_syscall_64+0xfa/0xfa0 [ 402.408280][T18572] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.408308][T18572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.408323][T18572] ? clear_bhb_loop+0x60/0xb0 [ 402.408341][T18572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.408357][T18572] RIP: 0033:0x7f083838f6c9 [ 402.408372][T18572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.408386][T18572] RSP: 002b:00007f08391f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 402.408403][T18572] RAX: ffffffffffffffda RBX: 00007f08385e5fa0 RCX: 00007f083838f6c9 [ 402.408414][T18572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 402.408423][T18572] RBP: 00007f08391f9090 R08: 0000200000e68000 R09: 0000000000000010 [ 402.408433][T18572] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000002 [ 402.408443][T18572] R13: 00007f08385e6038 R14: 00007f08385e5fa0 R15: 00007ffdd170f248 [ 402.408470][T18572] [ 402.510306][T18576] netlink: 'syz.1.3696': attribute type 12 has an invalid length. [ 402.906350][T18339] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 402.923451][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3699'. [ 402.936684][T18339] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.973208][T18591] FAULT_INJECTION: forcing a failure. [ 402.973208][T18591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.990110][ T5838] Bluetooth: hci1: command tx timeout [ 402.999878][T18339] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 403.021767][T18591] CPU: 1 UID: 0 PID: 18591 Comm: syz.4.3701 Not tainted syzkaller #0 PREEMPT(full) [ 403.021792][T18591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.021802][T18591] Call Trace: [ 403.021809][T18591] [ 403.021816][T18591] dump_stack_lvl+0x189/0x250 [ 403.021842][T18591] ? __pfx____ratelimit+0x10/0x10 [ 403.021886][T18591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.021907][T18591] ? __pfx__printk+0x10/0x10 [ 403.021926][T18591] ? __might_fault+0xb0/0x130 [ 403.021959][T18591] should_fail_ex+0x414/0x560 [ 403.021997][T18591] _copy_from_iter+0x1de/0x1790 [ 403.022022][T18591] ? rcu_is_watching+0x15/0xb0 [ 403.022044][T18591] ? kmalloc_reserve+0xbd/0x290 [ 403.022061][T18591] ? __pfx__copy_from_iter+0x10/0x10 [ 403.022081][T18591] ? __build_skb_around+0x262/0x3f0 [ 403.022108][T18591] ? netlink_sendmsg+0x642/0xb30 [ 403.022124][T18591] ? skb_put+0x11b/0x210 [ 403.022144][T18591] netlink_sendmsg+0x6b2/0xb30 [ 403.022169][T18591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.022189][T18591] ? aa_sock_msg_perm+0xf1/0x1d0 [ 403.022214][T18591] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 403.022230][T18591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.022248][T18591] __sock_sendmsg+0x21c/0x270 [ 403.022273][T18591] ____sys_sendmsg+0x505/0x830 [ 403.022297][T18591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.022329][T18591] ? import_iovec+0x74/0xa0 [ 403.022352][T18591] ___sys_sendmsg+0x21f/0x2a0 [ 403.022373][T18591] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.022425][T18591] ? __fget_files+0x2a/0x420 [ 403.022440][T18591] ? __fget_files+0x3a0/0x420 [ 403.022466][T18591] __x64_sys_sendmsg+0x19b/0x260 [ 403.022487][T18591] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.022514][T18591] ? __pfx_ksys_write+0x10/0x10 [ 403.022541][T18591] ? do_syscall_64+0xbe/0xfa0 [ 403.022566][T18591] do_syscall_64+0xfa/0xfa0 [ 403.022586][T18591] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.022609][T18591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.022625][T18591] ? clear_bhb_loop+0x60/0xb0 [ 403.022645][T18591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.022661][T18591] RIP: 0033:0x7f979bb8f6c9 [ 403.022676][T18591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.022688][T18591] RSP: 002b:00007f979ca5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.022707][T18591] RAX: ffffffffffffffda RBX: 00007f979bde5fa0 RCX: 00007f979bb8f6c9 [ 403.022719][T18591] RDX: 000000000004cc00 RSI: 00002000000003c0 RDI: 0000000000000004 [ 403.022730][T18591] RBP: 00007f979ca5f090 R08: 0000000000000000 R09: 0000000000000000 [ 403.022740][T18591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.022749][T18591] R13: 00007f979bde6038 R14: 00007f979bde5fa0 R15: 00007ffe3323e308 [ 403.022779][T18591] [ 403.305718][T18339] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 403.380061][T18599] netlink: 'syz.3.3702': attribute type 11 has an invalid length. [ 403.473043][T18339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.495401][T18339] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.510615][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.517860][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.554505][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.561740][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.645841][T18611] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3705'. [ 403.757392][T18616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3706'. [ 403.768348][T18617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3706'. [ 403.888649][T18339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.978795][T18624] tipc: Enabled bearer , priority 10 [ 403.987837][T18624] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3709'. [ 404.279648][T18646] gre0: entered promiscuous mode [ 404.284731][T18646] gre0: entered allmulticast mode [ 404.311328][T18644] syzkaller0: entered promiscuous mode [ 404.344557][T18644] syzkaller0: entered allmulticast mode [ 404.403799][T18652] FAULT_INJECTION: forcing a failure. [ 404.403799][T18652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.436212][T18652] CPU: 1 UID: 0 PID: 18652 Comm: syz.4.3718 Not tainted syzkaller #0 PREEMPT(full) [ 404.436237][T18652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.436246][T18652] Call Trace: [ 404.436254][T18652] [ 404.436260][T18652] dump_stack_lvl+0x189/0x250 [ 404.436286][T18652] ? __pfx____ratelimit+0x10/0x10 [ 404.436308][T18652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.436329][T18652] ? __pfx__printk+0x10/0x10 [ 404.436345][T18652] ? __might_fault+0xb0/0x130 [ 404.436378][T18652] should_fail_ex+0x414/0x560 [ 404.436406][T18652] _copy_from_user+0x2d/0xb0 [ 404.436429][T18652] kstrtouint_from_user+0xc4/0x170 [ 404.436448][T18652] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 404.436481][T18652] proc_fail_nth_write+0x88/0x200 [ 404.436501][T18652] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 404.436526][T18652] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 404.436544][T18652] vfs_write+0x27e/0xb30 [ 404.436570][T18652] ? __pfx_vfs_write+0x10/0x10 [ 404.436592][T18652] ? __fget_files+0x2a/0x420 [ 404.436609][T18652] ? __fget_files+0x3a0/0x420 [ 404.436620][T18652] ? __fget_files+0x2a/0x420 [ 404.436639][T18652] ksys_write+0x145/0x250 [ 404.436656][T18652] ? __pfx_ksys_write+0x10/0x10 [ 404.436675][T18652] ? do_syscall_64+0xbe/0xfa0 [ 404.436696][T18652] do_syscall_64+0xfa/0xfa0 [ 404.436715][T18652] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.436735][T18652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.436747][T18652] ? clear_bhb_loop+0x60/0xb0 [ 404.436765][T18652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.436780][T18652] RIP: 0033:0x7f979bb8e17f [ 404.436794][T18652] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 404.436807][T18652] RSP: 002b:00007f979ca5f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 404.436825][T18652] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f979bb8e17f [ 404.436836][T18652] RDX: 0000000000000001 RSI: 00007f979ca5f0a0 RDI: 0000000000000006 [ 404.436846][T18652] RBP: 00007f979ca5f090 R08: 0000000000000000 R09: 0000000000000010 [ 404.436856][T18652] R10: 00000000200007fd R11: 0000000000000293 R12: 0000000000000002 [ 404.436865][T18652] R13: 00007f979bde6038 R14: 00007f979bde5fa0 R15: 00007ffe3323e308 [ 404.436904][T18652] [ 404.460653][T18339] veth0_vlan: entered promiscuous mode [ 404.769063][T18339] veth1_vlan: entered promiscuous mode [ 404.809209][T18339] veth0_macvtap: entered promiscuous mode [ 404.832983][T18339] veth1_macvtap: entered promiscuous mode [ 404.891269][T18339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.905610][T18677] FAULT_INJECTION: forcing a failure. [ 404.905610][T18677] name failslab, interval 1, probability 0, space 0, times 0 [ 404.931406][T18339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.939607][T18677] CPU: 1 UID: 0 PID: 18677 Comm: syz.2.3724 Not tainted syzkaller #0 PREEMPT(full) [ 404.939631][T18677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.939641][T18677] Call Trace: [ 404.939648][T18677] [ 404.939655][T18677] dump_stack_lvl+0x189/0x250 [ 404.939682][T18677] ? __pfx____ratelimit+0x10/0x10 [ 404.939704][T18677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.939725][T18677] ? __pfx__printk+0x10/0x10 [ 404.939749][T18677] ? __nla_validate_parse+0x2400/0x2d40 [ 404.939773][T18677] should_fail_ex+0x414/0x560 [ 404.939809][T18677] should_failslab+0xa8/0x100 [ 404.939829][T18677] kmem_cache_alloc_noprof+0x74/0x6e0 [ 404.939852][T18677] ? xfrm_state_alloc+0x24/0x2f0 [ 404.939874][T18677] ? kasan_quarantine_put+0xdd/0x220 [ 404.939900][T18677] xfrm_state_alloc+0x24/0x2f0 [ 404.939925][T18677] xfrm_add_sa+0x17d1/0x41d0 [ 404.939955][T18677] ? __pfx_xfrm_add_sa+0x10/0x10 [ 404.939971][T18677] ? apparmor_capable+0x137/0x1b0 [ 404.939995][T18677] ? __nla_parse+0x40/0x60 [ 404.940017][T18677] xfrm_user_rcv_msg+0x7a3/0xab0 [ 404.940043][T18677] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 404.940099][T18677] ? __pfx___mutex_trylock_common+0x10/0x10 [ 404.940125][T18677] ? rcu_is_watching+0x15/0xb0 [ 404.940145][T18677] ? trace_contention_end+0x39/0x120 [ 404.940165][T18677] ? __mutex_lock+0x335/0x1350 [ 404.940195][T18677] netlink_rcv_skb+0x208/0x470 [ 404.940214][T18677] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 404.940235][T18677] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 404.940267][T18677] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.940284][T18677] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.940303][T18677] xfrm_netlink_rcv+0x79/0x90 [ 404.940322][T18677] netlink_unicast+0x82f/0x9e0 [ 404.940354][T18677] ? __pfx_netlink_unicast+0x10/0x10 [ 404.940378][T18677] ? netlink_sendmsg+0x642/0xb30 [ 404.940393][T18677] ? skb_put+0x11b/0x210 [ 404.940413][T18677] netlink_sendmsg+0x805/0xb30 [ 404.940440][T18677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.940460][T18677] ? aa_sock_msg_perm+0xf1/0x1d0 [ 404.940485][T18677] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 404.940502][T18677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 404.940520][T18677] __sock_sendmsg+0x21c/0x270 [ 404.940550][T18677] ____sys_sendmsg+0x505/0x830 [ 404.940575][T18677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 404.940603][T18677] ? import_iovec+0x74/0xa0 [ 404.940628][T18677] ___sys_sendmsg+0x21f/0x2a0 [ 404.940649][T18677] ? __pfx____sys_sendmsg+0x10/0x10 [ 404.940705][T18677] ? __fget_files+0x2a/0x420 [ 404.940720][T18677] ? __fget_files+0x3a0/0x420 [ 404.940747][T18677] __x64_sys_sendmsg+0x19b/0x260 [ 404.940767][T18677] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 404.940809][T18677] ? do_syscall_64+0xbe/0xfa0 [ 404.940835][T18677] do_syscall_64+0xfa/0xfa0 [ 404.940853][T18677] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.940873][T18677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.940889][T18677] ? clear_bhb_loop+0x60/0xb0 [ 404.940908][T18677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.940922][T18677] RIP: 0033:0x7f083838f6c9 [ 404.940937][T18677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.940950][T18677] RSP: 002b:00007f08391f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.940966][T18677] RAX: ffffffffffffffda RBX: 00007f08385e5fa0 RCX: 00007f083838f6c9 [ 404.940977][T18677] RDX: 000000000004cc00 RSI: 00002000000003c0 RDI: 0000000000000004 [ 404.940986][T18677] RBP: 00007f08391f9090 R08: 0000000000000000 R09: 0000000000000000 [ 404.940995][T18677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.941004][T18677] R13: 00007f08385e6038 R14: 00007f08385e5fa0 R15: 00007ffdd170f248 [ 404.941031][T18677] [ 405.021715][ T6027] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.309543][T18689] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3728'. [ 405.325447][ T6027] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.398080][ T6027] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.417044][ T6027] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.628418][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.646806][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.730511][T18708] tipc: Enabling of bearer rejected, failed to enable media [ 405.763505][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.772040][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.881060][T18724] FAULT_INJECTION: forcing a failure. [ 405.881060][T18724] name failslab, interval 1, probability 0, space 0, times 0 [ 405.938401][T18724] CPU: 1 UID: 0 PID: 18724 Comm: syz.4.3737 Not tainted syzkaller #0 PREEMPT(full) [ 405.938427][T18724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.938437][T18724] Call Trace: [ 405.938444][T18724] [ 405.938451][T18724] dump_stack_lvl+0x189/0x250 [ 405.938477][T18724] ? __pfx____ratelimit+0x10/0x10 [ 405.938499][T18724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.938520][T18724] ? __pfx__printk+0x10/0x10 [ 405.938541][T18724] ? __pfx___schedule+0x10/0x10 [ 405.938564][T18724] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 405.938588][T18724] should_fail_ex+0x414/0x560 [ 405.938616][T18724] should_failslab+0xa8/0x100 [ 405.938637][T18724] kmem_cache_alloc_node_noprof+0x77/0x710 [ 405.938657][T18724] ? __alloc_skb+0x112/0x2d0 [ 405.938672][T18724] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 405.938694][T18724] __alloc_skb+0x112/0x2d0 [ 405.938712][T18724] xfrm_send_state_notify+0x884/0x18b0 [ 405.938743][T18724] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 405.938756][T18724] ? km_state_notify+0x25/0x1f0 [ 405.938778][T18724] ? km_state_notify+0x25/0x1f0 [ 405.938795][T18724] ? km_state_notify+0x25/0x1f0 [ 405.938812][T18724] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 405.938828][T18724] km_state_notify+0x110/0x1f0 [ 405.938849][T18724] xfrm_add_sa+0x385d/0x41d0 [ 405.938878][T18724] ? __pfx_xfrm_add_sa+0x10/0x10 [ 405.938894][T18724] ? apparmor_capable+0x137/0x1b0 [ 405.938918][T18724] ? __nla_parse+0x40/0x60 [ 405.938941][T18724] xfrm_user_rcv_msg+0x7a3/0xab0 [ 405.938965][T18724] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 405.939018][T18724] ? __pfx___mutex_trylock_common+0x10/0x10 [ 405.939044][T18724] ? rcu_is_watching+0x15/0xb0 [ 405.939063][T18724] ? trace_contention_end+0x39/0x120 [ 405.939083][T18724] ? __mutex_lock+0x335/0x1350 [ 405.939111][T18724] netlink_rcv_skb+0x208/0x470 [ 405.939128][T18724] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 405.939148][T18724] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.939177][T18724] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.939192][T18724] ? netlink_deliver_tap+0x2e/0x1b0 [ 405.939210][T18724] xfrm_netlink_rcv+0x79/0x90 [ 405.939228][T18724] netlink_unicast+0x82f/0x9e0 [ 405.939259][T18724] ? __pfx_netlink_unicast+0x10/0x10 [ 405.939284][T18724] ? netlink_sendmsg+0x642/0xb30 [ 405.939298][T18724] ? skb_put+0x11b/0x210 [ 405.939317][T18724] netlink_sendmsg+0x805/0xb30 [ 405.939344][T18724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.939364][T18724] ? aa_sock_msg_perm+0xf1/0x1d0 [ 405.939388][T18724] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 405.939405][T18724] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.939426][T18724] __sock_sendmsg+0x21c/0x270 [ 405.939453][T18724] ____sys_sendmsg+0x505/0x830 [ 405.939476][T18724] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.939505][T18724] ? import_iovec+0x74/0xa0 [ 405.939530][T18724] ___sys_sendmsg+0x21f/0x2a0 [ 405.939551][T18724] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.939609][T18724] ? __fget_files+0x2a/0x420 [ 405.939625][T18724] ? __fget_files+0x3a0/0x420 [ 405.939653][T18724] __x64_sys_sendmsg+0x19b/0x260 [ 405.939674][T18724] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.939703][T18724] ? __pfx_ksys_write+0x10/0x10 [ 405.939737][T18724] ? do_syscall_64+0xbe/0xfa0 [ 405.939763][T18724] do_syscall_64+0xfa/0xfa0 [ 405.939784][T18724] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.939806][T18724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.939821][T18724] ? clear_bhb_loop+0x60/0xb0 [ 405.939840][T18724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.939856][T18724] RIP: 0033:0x7f979bb8f6c9 [ 405.939871][T18724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.939885][T18724] RSP: 002b:00007f979ca5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.939905][T18724] RAX: ffffffffffffffda RBX: 00007f979bde5fa0 RCX: 00007f979bb8f6c9 [ 405.939917][T18724] RDX: 000000000004cc00 RSI: 00002000000003c0 RDI: 0000000000000004 [ 405.939928][T18724] RBP: 00007f979ca5f090 R08: 0000000000000000 R09: 0000000000000000 [ 405.939938][T18724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.939946][T18724] R13: 00007f979bde6038 R14: 00007f979bde5fa0 R15: 00007ffe3323e308 [ 405.939973][T18724] [ 406.469521][T18733] netlink: 'syz.1.3739': attribute type 10 has an invalid length. [ 406.493639][T18739] netlink: 'syz.4.3742': attribute type 33 has an invalid length. [ 406.619474][T18734] netlink: 'syz.1.3739': attribute type 2 has an invalid length. [ 406.648870][T18748] __nla_validate_parse: 6 callbacks suppressed [ 406.648886][T18748] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3743'. [ 406.873582][T18751] tipc: Disabling bearer [ 406.901987][T18768] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3746'. [ 406.921666][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3747'. [ 406.961288][T18763] netlink: 'syz.5.3747': attribute type 3 has an invalid length. [ 407.009876][T18763] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3747'. [ 407.253753][T18782] netlink: 'syz.5.3754': attribute type 3 has an invalid length. [ 407.272769][T18782] netlink: 'syz.5.3754': attribute type 1 has an invalid length. [ 407.282054][T18782] netlink: 204 bytes leftover after parsing attributes in process `syz.5.3754'. [ 407.295545][T18782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3754'. [ 407.315352][T18784] tipc: Enabled bearer , priority 0 [ 407.328289][T18784] syzkaller0: entered promiscuous mode [ 407.333829][T18784] syzkaller0: entered allmulticast mode [ 407.350729][T18787] netlink: 'syz.1.3756': attribute type 21 has an invalid length. [ 407.386579][T18787] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3756'. [ 407.392152][T18782] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3754'. [ 407.417978][T18784] tipc: Resetting bearer [ 407.429431][T18790] netlink: 'syz.2.3757': attribute type 9 has an invalid length. [ 407.439665][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3757'. [ 407.479948][T18793] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3758'. [ 407.497349][T18790] : renamed from hsr0 (while UP) [ 407.545743][T18795] tipc: Resetting bearer [ 407.606226][T18795] tipc: Disabling bearer [ 407.636894][T18803] tipc: Started in network mode [ 407.643072][T18803] tipc: Node identity ac14140f, cluster identity 4711 [ 407.650977][T18803] tipc: Enabling of bearer rejected, failed to enable media [ 407.810401][T18810] bridge_slave_0: left allmulticast mode [ 407.816175][T18810] bridge_slave_0: left promiscuous mode [ 407.824907][T18810] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.853043][T18810] bridge_slave_1: left allmulticast mode [ 407.866814][T18810] bridge_slave_1: left promiscuous mode [ 407.879579][T18810] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.893881][T18810] bond0: (slave bond_slave_0): Releasing backup interface [ 407.915961][T18810] bond0: (slave bond_slave_1): Releasing backup interface [ 407.950526][T18810] team0: Port device team_slave_0 removed [ 407.966443][T18810] team0: Port device team_slave_1 removed [ 407.973582][T18810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.981676][T18810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.991659][T18810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.002308][T18810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.013824][T18810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.049005][T18817] netlink: 'syz.1.3765': attribute type 9 has an invalid length. [ 408.211102][T18836] xt_hashlimit: size too large, truncated to 1048576 [ 408.234622][T18832] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 408.360420][T18845] bond2: option packets_per_slave: invalid value (18446744073709551615) [ 408.372109][T18845] bond2: option packets_per_slave: allowed values 0 - 65535 [ 408.401801][T18845] bond2 (unregistering): Released all slaves [ 408.467285][T18851] tipc: Enabling of bearer rejected, failed to enable media [ 408.626565][T18862] ------------[ cut here ]------------ [ 408.632428][T18862] WARNING: CPU: 0 PID: 18862 at net/ipv4/route.c:1275 ip_rt_bug+0x2c/0x110 [ 408.641133][T18862] Modules linked in: [ 408.645304][T18862] CPU: 0 UID: 0 PID: 18862 Comm: syz.1.3778 Not tainted syzkaller #0 PREEMPT(full) [ 408.654730][T18862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 408.664854][T18862] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 408.669846][T18862] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 42 0f f8 66 90 e8 b4 42 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 408.689553][T18862] RSP: 0018:ffffc90003bbf180 EFLAGS: 00010286 [ 408.695636][T18862] RAX: 5543852c6e9c0c00 RBX: ffff8880594f08c0 RCX: 5543852c6e9c0c00 [ 408.703666][T18862] RDX: 0000000000000002 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 408.711677][T18862] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 408.719704][T18862] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 408.727733][T18862] R13: dffffc0000000000 R14: ffff8880594f08c0 R15: ffff888145289e00 [ 408.735722][T18862] FS: 00007f6c77b536c0(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 408.744702][T18862] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.751334][T18862] CR2: 00007f979c9156c0 CR3: 0000000046846000 CR4: 00000000003526f0 [ 408.759351][T18862] Call Trace: [ 408.762642][T18862] [ 408.765674][T18862] ip_push_pending_frames+0xbe/0x150 [ 408.771032][T18862] __icmp_send+0xfc3/0x1320 [ 408.775559][T18862] ? __icmp_send+0x1b9/0x1320 [ 408.780293][T18862] ? __pfx___icmp_send+0x10/0x10 [ 408.785356][T18862] ? ip_route_input_noref+0x98/0x250 [ 408.790720][T18862] ? __pfx_ip_route_input_noref+0x10/0x10 [ 408.796473][T18862] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 408.801732][T18862] ip_options_compile+0x80/0xb0 [ 408.806610][T18862] ip_rcv_finish_core+0xaa2/0x1c00 [ 408.811874][T18862] ip_rcv_finish+0x14c/0x2f0 [ 408.816482][T18862] NF_HOOK+0x30c/0x3a0 [ 408.821313][T18862] ? __pfx_ip_rcv_finish+0x10/0x10 [ 408.826453][T18862] ? NF_HOOK+0x9a/0x3a0 [ 408.830655][T18862] ? __pfx_NF_HOOK+0x10/0x10 [ 408.835256][T18862] ? ip_rcv_core+0x7f7/0xd00 [ 408.839900][T18862] ? __pfx_ip_rcv_finish+0x10/0x10 [ 408.845117][T18862] ? __pfx_ip_rcv+0x10/0x10 [ 408.849638][T18862] __netif_receive_skb+0x143/0x380 [ 408.854747][T18862] ? netif_receive_skb+0x115/0x790 [ 408.859896][T18862] netif_receive_skb+0x1cb/0x790 [ 408.864867][T18862] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 408.870710][T18862] ? __pfx_netif_receive_skb+0x10/0x10 [ 408.876185][T18862] ? tun_rx_batched+0x160/0x730 [ 408.881088][T18862] tun_rx_batched+0x1b9/0x730 [ 408.885772][T18862] ? __lock_acquire+0xab9/0xd20 [ 408.890658][T18862] ? __pfx_tun_rx_batched+0x10/0x10 [ 408.895871][T18862] ? tun_get_user+0x272f/0x3e90 [ 408.900780][T18862] tun_get_user+0x2b65/0x3e90 [ 408.905467][T18862] ? tun_get_user+0x6f6/0x3e90 [ 408.910279][T18862] ? tun_get_user+0x272f/0x3e90 [ 408.915142][T18862] ? aa_file_perm+0x44d/0x1550 [ 408.919943][T18862] ? __pfx_tun_get_user+0x10/0x10 [ 408.924968][T18862] ? __futex_wait+0x34a/0x3d0 [ 408.929692][T18862] ? __pfx___futex_wait+0x10/0x10 [ 408.934703][T18862] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 408.940625][T18862] ? ref_tracker_alloc+0x318/0x460 [ 408.945722][T18862] ? __lock_acquire+0xab9/0xd20 [ 408.950591][T18862] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 408.956038][T18862] ? tun_get+0x1c/0x2f0 [ 408.960243][T18862] ? tun_get+0x1c/0x2f0 [ 408.964389][T18862] ? tun_get+0x1c/0x2f0 [ 408.968586][T18862] tun_chr_write_iter+0x113/0x200 [ 408.973631][T18862] vfs_write+0x5c9/0xb30 [ 408.977901][T18862] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 408.983442][T18862] ? __pfx_vfs_write+0x10/0x10 [ 408.988236][T18862] ? __fget_files+0x2a/0x420 [ 408.992824][T18862] ksys_write+0x145/0x250 [ 408.997166][T18862] ? __pfx_ksys_write+0x10/0x10 [ 409.002076][T18862] ? do_syscall_64+0xbe/0xfa0 [ 409.006750][T18862] do_syscall_64+0xfa/0xfa0 [ 409.011297][T18862] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.016513][T18862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.022608][T18862] ? clear_bhb_loop+0x60/0xb0 [ 409.027281][T18862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.033215][T18862] RIP: 0033:0x7f6c76d8e17f [ 409.037659][T18862] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 409.057414][T18862] RSP: 002b:00007f6c77b53000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 409.065913][T18862] RAX: ffffffffffffffda RBX: 00007f6c76fe5fa0 RCX: 00007f6c76d8e17f [ 409.073912][T18862] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 409.081912][T18862] RBP: 00007f6c76e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 409.089903][T18862] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 409.097894][T18862] R13: 00007f6c76fe6038 R14: 00007f6c76fe5fa0 R15: 00007ffd64ea79c8 [ 409.105884][T18862] [ 409.108999][T18862] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 409.116271][T18862] CPU: 0 UID: 0 PID: 18862 Comm: syz.1.3778 Not tainted syzkaller #0 PREEMPT(full) [ 409.125639][T18862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.135698][T18862] Call Trace: [ 409.138968][T18862] [ 409.141892][T18862] dump_stack_lvl+0x99/0x250 [ 409.146480][T18862] ? __asan_memcpy+0x40/0x70 [ 409.151070][T18862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.156298][T18862] ? __pfx__printk+0x10/0x10 [ 409.160885][T18862] vpanic+0x237/0x6d0 [ 409.164866][T18862] ? __pfx_vpanic+0x10/0x10 [ 409.169467][T18862] panic+0xb9/0xc0 [ 409.173189][T18862] ? __pfx_panic+0x10/0x10 [ 409.177628][T18862] __warn+0x31b/0x4b0 [ 409.181710][T18862] ? ip_rt_bug+0x2c/0x110 [ 409.186047][T18862] ? ip_rt_bug+0x2c/0x110 [ 409.190388][T18862] report_bug+0x2be/0x4f0 [ 409.194715][T18862] ? ip_rt_bug+0x2c/0x110 [ 409.199038][T18862] ? ip_rt_bug+0x2c/0x110 [ 409.203414][T18862] ? ip_rt_bug+0x2e/0x110 [ 409.207731][T18862] handle_bug+0x84/0x160 [ 409.211959][T18862] exc_invalid_op+0x1a/0x50 [ 409.216451][T18862] asm_exc_invalid_op+0x1a/0x20 [ 409.221291][T18862] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 409.226229][T18862] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 bb 42 0f f8 66 90 e8 b4 42 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 35 02 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc cc f3 0f [ 409.245824][T18862] RSP: 0018:ffffc90003bbf180 EFLAGS: 00010286 [ 409.251892][T18862] RAX: 5543852c6e9c0c00 RBX: ffff8880594f08c0 RCX: 5543852c6e9c0c00 [ 409.259853][T18862] RDX: 0000000000000002 RSI: ffffffff8d70dfda RDI: ffffffff8bbf0760 [ 409.267895][T18862] RBP: 0000000000000001 R08: ffffffff8f7ce877 R09: 1ffffffff1ef9d0e [ 409.275854][T18862] R10: dffffc0000000000 R11: fffffbfff1ef9d0f R12: dffffc0000000000 [ 409.283810][T18862] R13: dffffc0000000000 R14: ffff8880594f08c0 R15: ffff888145289e00 [ 409.291786][T18862] ip_push_pending_frames+0xbe/0x150 [ 409.297133][T18862] __icmp_send+0xfc3/0x1320 [ 409.301640][T18862] ? __icmp_send+0x1b9/0x1320 [ 409.306309][T18862] ? __pfx___icmp_send+0x10/0x10 [ 409.311264][T18862] ? ip_route_input_noref+0x98/0x250 [ 409.316559][T18862] ? __pfx_ip_route_input_noref+0x10/0x10 [ 409.322282][T18862] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 409.327479][T18862] ip_options_compile+0x80/0xb0 [ 409.332329][T18862] ip_rcv_finish_core+0xaa2/0x1c00 [ 409.337535][T18862] ip_rcv_finish+0x14c/0x2f0 [ 409.342135][T18862] NF_HOOK+0x30c/0x3a0 [ 409.346197][T18862] ? __pfx_ip_rcv_finish+0x10/0x10 [ 409.351301][T18862] ? NF_HOOK+0x9a/0x3a0 [ 409.355450][T18862] ? __pfx_NF_HOOK+0x10/0x10 [ 409.360024][T18862] ? ip_rcv_core+0x7f7/0xd00 [ 409.364604][T18862] ? __pfx_ip_rcv_finish+0x10/0x10 [ 409.369710][T18862] ? __pfx_ip_rcv+0x10/0x10 [ 409.374200][T18862] __netif_receive_skb+0x143/0x380 [ 409.379370][T18862] ? netif_receive_skb+0x115/0x790 [ 409.384486][T18862] netif_receive_skb+0x1cb/0x790 [ 409.389415][T18862] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 409.395210][T18862] ? __pfx_netif_receive_skb+0x10/0x10 [ 409.400732][T18862] ? tun_rx_batched+0x160/0x730 [ 409.405660][T18862] tun_rx_batched+0x1b9/0x730 [ 409.410323][T18862] ? __lock_acquire+0xab9/0xd20 [ 409.415160][T18862] ? __pfx_tun_rx_batched+0x10/0x10 [ 409.420432][T18862] ? tun_get_user+0x272f/0x3e90 [ 409.425282][T18862] tun_get_user+0x2b65/0x3e90 [ 409.429971][T18862] ? tun_get_user+0x6f6/0x3e90 [ 409.434724][T18862] ? tun_get_user+0x272f/0x3e90 [ 409.439665][T18862] ? aa_file_perm+0x44d/0x1550 [ 409.444416][T18862] ? __pfx_tun_get_user+0x10/0x10 [ 409.449427][T18862] ? __futex_wait+0x34a/0x3d0 [ 409.454185][T18862] ? __pfx___futex_wait+0x10/0x10 [ 409.459202][T18862] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 409.465553][T18862] ? ref_tracker_alloc+0x318/0x460 [ 409.470660][T18862] ? __lock_acquire+0xab9/0xd20 [ 409.475507][T18862] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 409.480961][T18862] ? tun_get+0x1c/0x2f0 [ 409.485112][T18862] ? tun_get+0x1c/0x2f0 [ 409.489260][T18862] ? tun_get+0x1c/0x2f0 [ 409.493411][T18862] tun_chr_write_iter+0x113/0x200 [ 409.498426][T18862] vfs_write+0x5c9/0xb30 [ 409.502663][T18862] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 409.508193][T18862] ? __pfx_vfs_write+0x10/0x10 [ 409.512954][T18862] ? __fget_files+0x2a/0x420 [ 409.517537][T18862] ksys_write+0x145/0x250 [ 409.521868][T18862] ? __pfx_ksys_write+0x10/0x10 [ 409.526715][T18862] ? do_syscall_64+0xbe/0xfa0 [ 409.531386][T18862] do_syscall_64+0xfa/0xfa0 [ 409.535879][T18862] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.541166][T18862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.547234][T18862] ? clear_bhb_loop+0x60/0xb0 [ 409.551993][T18862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.557875][T18862] RIP: 0033:0x7f6c76d8e17f [ 409.562365][T18862] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 409.581960][T18862] RSP: 002b:00007f6c77b53000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 409.590374][T18862] RAX: ffffffffffffffda RBX: 00007f6c76fe5fa0 RCX: 00007f6c76d8e17f [ 409.598331][T18862] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 409.606286][T18862] RBP: 00007f6c76e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 409.614245][T18862] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 409.622208][T18862] R13: 00007f6c76fe6038 R14: 00007f6c76fe5fa0 R15: 00007ffd64ea79c8 [ 409.630183][T18862] [ 409.633481][T18862] Kernel Offset: disabled [ 409.637786][T18862] Rebooting in 86400 seconds..