last executing test programs: 12.607822261s ago: executing program 4 (id=6105): r0 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d80)={0xffffffffffffffff}) getsockopt$sock_timeval(r1, 0x1, 0x3c, 0x0, &(0x7f0000002e00)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000002000093010002000000000000000000ffffff7f06000000ffff000005000000006130612e5f5f5f00"], &(0x7f0000000f40)=""/4089, 0x45, 0xff9, 0x1}, 0x28) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052abd7000fddbdf25021f00fd", @ANYRES32=r3, @ANYBLOB="0800030000000000080002000a010100"], 0x48}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x1f}}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r7}, 0x20) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r9, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @dev}, &(0x7f0000000180)=0xc) socket$inet6(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d80)) (async) getsockopt$sock_timeval(r1, 0x1, 0x3c, 0x0, &(0x7f0000002e00)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_0\x00'}) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000400000002000093010002000000000000000000ffffff7f06000000ffff000005000000006130612e5f5f5f00"], &(0x7f0000000f40)=""/4089, 0x45, 0xff9, 0x1}, 0x28) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009052abd7000fddbdf25021f00fd", @ANYRES32=r3, @ANYBLOB="0800030000000000080002000a010100"], 0x48}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f0000000000)) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x1f}}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r7}, 0x20) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) (async) sendmsg$ETHTOOL_MSG_WOL_SET(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r9, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) (async) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @dev}, &(0x7f0000000180)=0xc) (async) 12.439246368s ago: executing program 4 (id=6108): r0 = socket(0xf, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r0, &(0x7f0000000780)={0x40000000, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) socket(0x2, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0xe8, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socket$key(0xf, 0x3, 0x2) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000280)=0x40000000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x5}, {0x0, 0xa5, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x32}, 0x0, @in=@local, 0x9, 0x0, 0x0, 0xb7, 0x2, 0xffffffff}}, 0xe8) r8 = socket(0x2a, 0x2, 0x0) r9 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0x1, 0x4) vmsplice(r12, &(0x7f00000003c0)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000001300)="da", 0x1}, {&(0x7f00000002c0)='@', 0x1}], 0x4, 0x0) ioctl$sock_inet_udp_SIOCINQ(r12, 0x541b, 0x0) write(r10, 0x0, 0x0) epoll_create1(0x80000) getpeername(r0, &(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x80) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000140)={0x8}) 11.323480552s ago: executing program 4 (id=6116): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0xfffe, @empty}}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) (async) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0xc5, 0x4, 0x9, 0x5, 0x7fffffffffffffff, 0x8f6, 0x4}, &(0x7f0000000040)={0xef, 0x9, 0x5, 0x3, 0xfff, 0x1241, 0x2, 0x10000}, &(0x7f0000000080)={0x5, 0x5, 0x0, 0x0, 0x3, 0x80000001, 0x5a, 0x8}, &(0x7f00000000c0)) 10.409370899s ago: executing program 4 (id=6120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5400000002060102000000000000000000006739760d93346c9808400000004010000300686173683a69702c6d616300050005000a00000005000400000000000900020073797a31000000000500010007000000"], 0x54}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000001800000006000000020000000000000001000084060000000000000002000000800000000000965e60588a9ed3ed6ec656c1762cff2b29155e89e20139be3a3dbba35a66ba3ec93db8c8b251a63e1d1f3212a283f1b6018dbfa77e64e17a1920b95ea52951f15997bac7b8585d3d464a3619edd9c67d7fea5a4f6a376edb47cc89ec48f6987b03c12768bb96a2d8fab71f29da5a2429e17abbadb1eecf864088096dd509d436963f5a0895bedfce738bbf31f7c9102572d22d234bdfcae3db66d9d2a3fb227ddc4a80c1a796e930ae6caddfb4dc01"], 0x0, 0x32}, 0x28) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24000000021401002cbd7000fddbdf2509000200736d7a3000000000080053"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet(0x2, 0xa, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r5 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000440)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x1407, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8880}, 0xc000) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000000000000000000000000000700020000002c0004802800018007000100637400001c0002800800014000000004080002400000000305000300010000000900010073797a30000000000900020073797a320000000014003200f5110001000000000000000000000000d400000000c4740000000000000000"], 0x80}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x3, r7, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010004b04fcffffff000000007a0000007a824b57a5f1221ec00a6d5028ab78b6dddb71d6cdf1f650dcaf00881bbbc4e8a8350d5712183270445e685f545d02a6006fa650ed77cd1c55435e78e24e2bcb376088784e9b56e0da41be98c558c3b19bc100a9fad9f8534273992ea5bb882b299779744924daefb2ba32a07b57", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500160002000000"], 0x3c}}, 0x4) 9.521348794s ago: executing program 4 (id=6127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="1400000010000400fffffff4000000000000000a20000000000a05000000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00098008000140ff"], 0x90}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000ac0)={0x0, 0x18, "727f0b1ef024dbc9607eef5897123c38c220256e18c81e01"}, &(0x7f0000000c00)=0x20) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000c40)={r5, 0xc8, "eafce1fa733d266fea1e327ae9796b39f31b3c35c696c65fbf52efdf558545378463ff0a20b7897c0b34ede4f234b5448d598dd090f059f7dc71e6df0d5ca1bff3c636cafaa17e54573d34ac5b1da3adf9caf8d85650fd968a7e9446442d979554ef2dd4e5fcfa0a2fc2a2b61a6a7dd8dcd5dd73e6ecc222d5fc7d5a0b5ca57268a4ceed2b59d1ef6616a3d238afc668c72676ddf36f6ff2c2bfde08576a475586f9770228747a1a79d6e63ffb583544ac81f3901af853f6c89090df9806cafdc8685fbce883f705"}, &(0x7f0000000d40)=0xd0) r6 = socket(0x840000000002, 0x3, 0xfa) getsockopt$inet_int(r6, 0x0, 0x14, 0x0, &(0x7f0000000040)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x8, 0x8000, 0x2c0, 0x5, {{0x9, 0x4, 0x2, 0x8, 0x24, 0x67, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, {[@generic={0x88, 0xd, "535a2e56a2e94116c1d22f"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x7, 0x87, 0x7f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, 0x8000, 0x20, 0x6, 0x6}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x104, r7, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20045010}, 0x8000050) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r13, 0x0, 0x7fffffffffffffff}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r13, 0x0, 0xf9, 0x2d, &(0x7f0000000800)="83ecf6c6dd8a59ad12b2c40e74877970c9a386e4ded1764cd79f5a98ba45ffc8cf2af68c5fefac30e4140c6078c5b14c575f45800ef0fe742f2081a5a8d94a45d29e7763a5191ad05a6b2c1ad6e060b0ffca9df0521bc7f4a27c542c6bd5a0f34ffe5fa9877c4cdea50e66da1e4b62663a03f0d76b9eb87bb7d5e60f645b78c36fd6a04387342f7a4e2303499eee5966c5b6f499d8a92f7a35c4a3a6f28e5ca964cbfee2e41d4ab115601a8cf36e5706442b64d6a539770e5f4f0b36571cd72b6f5fb9207b6c6ca5ea931fb3a72bee93dfb4988891fa2ab57b0c4f8f2e848c259f786d26aa181f287295e60e2db5cc04f24e1bef2e457f16e2", &(0x7f0000000900)=""/45, 0x0, 0x0, 0xb1, 0x1c, &(0x7f0000000940)="5d26dfb061299c3b45c287ca89caaf7b90e86b007f107c1003b8493e6ee996ca4a9927019acec1b828d2cf6648fc0e8833d7102552a212eea42e2a77eb1b53a1ee87638540819e24cbfe4b0a6d960ab2660049c9be21d199d4284f2a23afe61ccf08087f9ed914a0d7a3e52a9f014bf6605165a66a88e6cc67e549fc8fe753d60cfb95ffa22010729032930a37651041d3a7527a90513f347c44c169d931fdd83e0afac49a4fa5cdda2575772816346cf3", &(0x7f0000000a00)="b1772e381fe5ef4cf6872abcd5c29fc201ff3097fdbd803cab524c92", 0x4, 0x0, 0x5}, 0x50) 9.410564879s ago: executing program 4 (id=6130): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040), 0x26) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@updpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x0, 0x0, 0x6}, {0x0, 0x8}}}, 0xb8}}, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x58, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x0, @loopback, 0x9}, @in6={0xa, 0x4e23, 0x6, @private2, 0x7ff}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000680)=r7, 0x4) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x1}, 0x10) ppoll(&(0x7f0000000580)=[{r1, 0x1508}], 0x1, &(0x7f00000005c0), 0x0, 0x0) write(r0, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000800000ebff3a2d0000170023000000000000000082821425162f925500613efeaf9b96807c10f5c601b475"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r9, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r10, r11, 0x13, 0x0, @void}, 0x10) 5.09878203s ago: executing program 3 (id=6165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(r0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async) listen(r2, 0xffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$qrtr(0x2a, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x9e587894a0dc8080, &(0x7f0000000080)=0xff, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = accept(r2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r6) (async) connect$unix(r6, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 4.840642363s ago: executing program 3 (id=6169): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f0000002a40)=0x4, 0xfffffffffffffdaa) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002b40)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYRESOCT, @ANYRES32=r4, @ANYBLOB="140003007735c1a5ff100f68c475a73c2191a64318523f0393f1cd7e194917d3e6a25e"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0xc814) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x1504}, 0x1, 0x0, 0x0, 0x15}, 0x40) bind$inet(r0, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socketpair(0x1a, 0x1, 0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r9, &(0x7f00000015c0)={&(0x7f0000000200)=@generic={0xa, "587e507fa2b296d756dd4b481c5a767871cb6ccd0d8a9e95335b9e9e314193a24a6fa3229b142421c1dbc1c0d8a8835255166a850dbbf2eba88e7022572b20740085fb8efab0c38f3c5481defae0dd2a7e8a80beddabdf3ebc239805987e5c217d105726d84ed9118bdd5bc27d863d2faa251e99bd02371a109ad81c6ccc"}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000340)="bb9eaebc96b1f1673e97f64eae2c9c62ce0d6cb1eec3559c52949e555c78780463bbccfd03d9330a655383f236603f74c04c6e", 0x33}, {&(0x7f0000000380)="9e005867b238940d4611ec88e67ced04dd9221ff8c9de8047d3ae90920a3d844189faefcd2dd569a98be8aaf93b1e0a6e7eb52fb6bde5b5d7bcec853f096dfa06c7cd5a4e5ae9b1f2c455a601639dc5ec541efa5562c172d19d0d232795298b6b7d058502ff621ae3d7c2f377c48daa702984b7be77dd8f6079c8d4e771d1170e52fa37d92f9e6e1088cca38203a5d476dfcb267b050c9a3a36736b24ba95f4fda31d6f514545111e38529a2046a2e44b657e38ddd2508e5b53252", 0xbb}, {&(0x7f00000014c0)="3232dc6d2a8280985393479bb8dc8affdbd805964cc026de76be7a09575008d8bbae1471e859199d694ea50e863c5bd69ef3170b93cc4b71ff6c6f8d328ec582aef2190ebe12bdcb9fa37911d998d6a5a27870b1e602f4b6e477d91bcc99d20d67b04428a54740e57406ca044a95895a7ae75fff7950a6e4412269480167bea950069d08d9d304c06daadcab440b5dcff30add8ca3c617ec18a0d39fb7df44128621385f7bb87292", 0xa8}, {&(0x7f0000001680)="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", 0x1000}], 0x4, &(0x7f0000002680)=ANY=[@ANYBLOB="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"], 0x390}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r10, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002c00)=ANY=[@ANYRES32=r6, @ANYRESDEC=r8, @ANYBLOB="c8ff1476b024d42b8cf9c5e9bcb6dee5fdee704e0fdb8c7eebbdf0c74f74c3f589f6e04d66767b48aef9bcbb5b0ada9cbef33b343804df5b2dbf72972dfabfecde6faeda35b4979a1ffb011a9cfff5390f5ccd90194bd18287823e531f6f09e78749afb0829c90823d0dde3b1f9ed7f82c34fb3accc3e918569b318313590e9f3e1a3669f9cf9ccb24fce17af804d01091a59fd09afabe0a564385e4d809ace9090b87cdefba85747c8bbdb0af35a4e5f39e26a1fb75a8aa5ce2e64e9c09b8db91b6a5e167ff0d2e32a8306f0bbc51832c08b5"], 0x18}}, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @private2, 0x6}}}, 0x84) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0xe) 4.400347454s ago: executing program 1 (id=6174): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40008d0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/33, 0x21}], 0x1}}], 0x2, 0x41, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%-010d \x00'}, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000003440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92d3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000001480)="63bbbdc7760f7c8a7f33c95e1089", 0x0, 0xfae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000780)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f00000036c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x10) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/91, 0x5b}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[], 0x84}}, 0x20008040) 4.207715429s ago: executing program 1 (id=6177): epoll_create1(0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000580)={{0x5c, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x0, 'ovf\x00', 0x11, 0xa0, 0x19}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 0x81, 0x6, 0x8000}}, 0x44) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3d0, 0x110, 0x200, 0x200, 0x2e8, 0x110, 0x2e8, 0x4, 0x0, {[{{@arp={@loopback, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @local}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'none\x00', 0x30, 0x0, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0xc, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0xa}, {@loopback, 0x4e24, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x31}, 0x94) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) r5 = socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001600010000000000000000000a0000000000000014000100f90100000000000000000000d8000001170002"], 0x44}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) unshare(0x2c020400) unshare(0x1c000700) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYRES64=r5, @ANYBLOB='\b\x00'], 0x38}}, 0x0) 3.927742156s ago: executing program 1 (id=6179): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r2, 0xffffffffffffffff}, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.827668117s ago: executing program 3 (id=6180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x44b, 0x70bd25, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x25940, 0x42804}}, 0x20}, 0x1, 0x0, 0x0, 0x14004044}, 0x24) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x100, 0x16, 0x1, 0x70bd2d, 0x25dfdbff, {{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x8}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x88c}, {0x0, 0x0, 0x0, 0x1}, {0x2}}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x700, 0x1, 0x13c8, 0xa, {{0x41, 0x4, 0x0, 0x7, 0x104, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x24, 0x9b, 0x1, 0x1, [{@broadcast, 0x6}, {@multicast1, 0xbd7}, {@private=0xa010100, 0x8001}, {@local}]}, @timestamp_prespec={0x44, 0x4c, 0x32, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x4}, {@rand_addr=0x64010100, 0x8}, {@loopback, 0x3}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x8}, {@loopback, 0x912}]}, @generic={0x0, 0x9, "4ab8ab2b4d0368"}, @cipso={0x86, 0x6f, 0xcffc16c5bc79fee5, [{0x0, 0xd, "5807b2b6078b311788e553"}, {0x0, 0x12, "afcffb95a92a58013e4acecab7da4b4d"}, {0x2, 0x5, "1dfc3e"}, {0x5, 0xe, "82a3b506eb9266b4e6b03b7d"}, {0x1, 0x9, "d49898abe3aa89"}, {0x6, 0x10, "7724eb5f73101c11acfa481337c3"}, {0x2, 0xb, "442b2f066906d9a8e0"}, {0x0, 0x7, "1f3f656bd7"}, {0x1, 0xc, "12d5f1cdf596c2efbe9a"}]}, @generic={0x86, 0x4, "40d2"}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x44b, 0x70bd25, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x25940, 0x42804}}, 0x20}, 0x1, 0x0, 0x0, 0x14004044}, 0x24) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@allocspi={0x100, 0x16, 0x1, 0x70bd2d, 0x25dfdbff, {{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x8}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x88c}, {0x0, 0x0, 0x0, 0x1}, {0x2}}, 0x0, 0x7fff}, [@proto={0x5, 0x1b}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00068008"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x700, 0x1, 0x13c8, 0xa, {{0x41, 0x4, 0x0, 0x7, 0x104, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x24, 0x9b, 0x1, 0x1, [{@broadcast, 0x6}, {@multicast1, 0xbd7}, {@private=0xa010100, 0x8001}, {@local}]}, @timestamp_prespec={0x44, 0x4c, 0x32, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x34}, 0x4}, {@rand_addr=0x64010100, 0x8}, {@loopback, 0x3}, {@local, 0x81}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x5}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x8}, {@loopback, 0x912}]}, @generic={0x0, 0x9, "4ab8ab2b4d0368"}, @cipso={0x86, 0x6f, 0xcffc16c5bc79fee5, [{0x0, 0xd, "5807b2b6078b311788e553"}, {0x0, 0x12, "afcffb95a92a58013e4acecab7da4b4d"}, {0x2, 0x5, "1dfc3e"}, {0x5, 0xe, "82a3b506eb9266b4e6b03b7d"}, {0x1, 0x9, "d49898abe3aa89"}, {0x6, 0x10, "7724eb5f73101c11acfa481337c3"}, {0x2, 0xb, "442b2f066906d9a8e0"}, {0x0, 0x7, "1f3f656bd7"}, {0x1, 0xc, "12d5f1cdf596c2efbe9a"}]}, @generic={0x86, 0x4, "40d2"}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) 3.732578952s ago: executing program 1 (id=6182): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (fail_nth: 21) 3.603864835s ago: executing program 3 (id=6184): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000280)='host1x_cdma_push\x00', r1, 0x0, 0x19}, 0x18) r2 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r2, 0x61d0, 0x0) recvfrom$rxrpc(r2, 0x0, 0x0, 0x40010001, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x24) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0xc, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000030000000000002907800000000e400030004009078000000004542000400640002054b00a77f000001ac141c35197667601a7fe6f3e186afb724aa7e850d5277e3cbce1ea43bb5bc2736eb818d352d49026abc6f49293a27e38f5399c70439331433eb9ec0d44898481c7b7b5904932169b7ecb02c6b8ce4d9ef09e70431c71597203d8b36569ad7752aaee67ef9d254f721ec672da25e1d4326443ffb24d3cd33f3ab3eb4958491afa3104df6e5078454a00fec5df0a60ae562eacf98799b"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty=0x1f, @local, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0x0, 0x6, 0x6}, 0x3c) socket(0x1e, 0x4, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x3f, 0x0, &(0x7f0000000040)=0xffffffffffffff24) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)=@req3={0xe, 0x5a, 0x4, 0x80, 0x3, 0xd7b, 0x76c}, 0x1c) r7 = socket(0x26, 0x2, 0x8) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000300)=@req={0x3, 0x0, 0xe8c2, 0xffffffff}, 0x10) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000780)=""/199, 0xc7}, {&(0x7f0000000880)=""/142, 0x8e}], 0x3}, 0x20) close(0x4) 3.34651775s ago: executing program 1 (id=6186): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xa026248363983750}], 0x1, 0x20028844) 3.244650652s ago: executing program 1 (id=6187): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={0x138, r2, 0x100, 0x0, 0x0, {{0x2}, {@void, @val={0xc, 0x99, {0x80000000, 0x4d}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x108, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xe7, 0x2, "855a34f4ddf5223d5291103cb9b4f6fd8ba0fb423f44292a549c3baa1585f7f97de2e76b14a458134ac59bdf772db76fc33f4669d76274e9847fa21a2d9d781f241298bc53bee3d848322f5a5f0326aab3af5a113d0b87f968d2ac0e5ea80d8778f300fe8564490fb0efe31e4c2f0811d7a2cf911bdaa816fa33cac10496237a8b4ec5ae74c1f58bb28a0f12064b45e0074f868bf8667a52488a32ad848248abcf3fd7e66ff9d0240c7566dd8720e68ca5932c5cbf32651719a0314a7ebcfa2cf89d0ccf6619c30b81cc26b3eb7bfb8f7e7118ca3092d3075dc398017dadc0822236b1"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7fffffff}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0xf4, r4, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x80, r7, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xc5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0xc001) 2.821563041s ago: executing program 2 (id=6192): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x670, 0x5, 0x3c8, 0x0, 0x260, 0xfeffffff, 0x260, 0xa8, 0x330, 0x330, 0xffffffff, 0x330, 0x330, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x4, @multicast2, @multicast2, @port, @icmp_id=0xa5}}}}, {{@ip={@local, @private=0xa010102, 0xffffff00, 0xff, 'pimreg\x00', 'bond0\x00', {0xff}, {0xff}, 0x2e, 0x0, 0x10}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x260}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x3, 0x1}, {0x20, 0x5}, {0xc, 0x7fffffffffffffff}, 0x73}}, @common=@ttl={{0x28}, {0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, @port=0x4e22, @port=0x4e21}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x7, 0x1, 0x3, 0x1, 0x6, 0x7], 0x6, 0x1}, {0xffffffffffffffff, [0x2, 0x2, 0x1, 0x1, 0x0, 0x6], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback={0x0, 0xffff888101827518}, 0x1, 0x7, 0xffffffff}}) 2.483477168s ago: executing program 2 (id=6194): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="1000000000000000000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe6, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10000, 0x3, 0x200000, 0x5, 0x4, 0x1, 0xa, 0xa, 0x7ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000440)={'syztnl2\x00', r4, 0x20, 0x10, 0x9, 0x3, {{0x7, 0x4, 0x1, 0x1b, 0x1c, 0x68, 0x0, 0x7, 0x2f, 0x0, @loopback, @multicast1, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e0000007cff0000080000004c0702000200000000000000405ff6c19fa72d94156ca8fd52262dcea42e3b000412a14e4086d906ff030000af5e26bdee0200d4d71f1490d5aea1f02a7a1b58", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 2.338383733s ago: executing program 0 (id=6196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x400}) close(r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r10 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000000240)={r11, 0x10, "bb0cc2e66fbf06c61039b0aa1fa9b32d"}, &(0x7f0000000300)=0x18) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x2f, 0x4, 0x1, 0x39, 0xbc, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@empty, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x4c, 0x58, 0x1, 0x1, [{@rand_addr=0x64010100, 0xc}, {@loopback, 0x81}, {@rand_addr=0x64010100, 0x43}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x6}, {@loopback, 0x7}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1e}, 0x1cfd}, {@multicast1, 0x7}, {@broadcast, 0x9}]}, @timestamp_prespec={0x44, 0x24, 0x6b, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@multicast1, 0x1000}, {@broadcast, 0x5}, {@broadcast, 0xf}]}]}}}}}) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r13, &(0x7f00000000c0)=ANY=[@ANYRES16=r13, @ANYBLOB="41bf0359dedeb1c9a2af5381a5e01b0749a78b97f0047d6f64b166f1c4bdd43a558ca6ce35d71616429ddc0de0190ec6fa84fffe5aff637d197bfbc63394a4dc076cb4b826235b5953a530060efd532bd1f87fde32bd", @ANYRES8=r13, @ANYRESDEC=r13, @ANYRESDEC=r13], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r13, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r14, 0x952de000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x81, 0x1}, 0x50) 2.203919965s ago: executing program 2 (id=6197): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200400e00000000000081001900886411004937727e001b"], 0x0) (async) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) (async) sendfile(r0, r1, 0x0, 0xffffffff000) bind$llc(r0, &(0x7f0000000340)={0x1a, 0x18, 0x4, 0x5, 0x6, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x10) 2.118485054s ago: executing program 0 (id=6198): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f", 0x11}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0x987}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x840000000002, 0x3, 0xff) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r3) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x1e) connect$pptp(r5, &(0x7f00000001c0)={0x18, 0x2, {0x7, @multicast2}}, 0x1e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'ipvlan0\x00', 0x1000}) sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fa00ffff090000000800000008000300", @ANYRES32], 0x5c}}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x7c}}, 0x4000000) 1.347386625s ago: executing program 2 (id=6199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0420000000171000000000000000000040000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000180)=""/110, 0x6e, 0x0, &(0x7f0000000280)=""/146, 0x92}}, 0x10) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.124158816s ago: executing program 0 (id=6200): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x300, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xd14cf000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xa, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000070000008500000006000000154bfcffffffffff95"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff7, &(0x7f0000001e00)=""/4087, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000009c0)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000002c0)=0xe8) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x10, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='syzkaller\x00', 0x3, 0x10, &(0x7f0000000ac0)=""/16, 0x1e00, 0x40, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000cc0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[r3, 0x1, r3], 0x0, 0x10, 0x8}, 0x94) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001540)={0x4f0, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4dd, 0x0, 0x0, 0x1, [@typed={0x3f, 0x801, 0x0, 0x0, @binary="c8829d5ac427aa0a921247d100ae5d7270ab76cad67d71304ea2dd57fe56b852206edfcc16434be835200bb114a0bacbcf415457032d84595bd5ae"}, @nested={0x3b9, 0x76, 0x0, 0x1, [@nested={0xb9, 0x14b, 0x0, 0x1, [@nested={0x4, 0x80}, @generic="5457f68866", @typed={0x8, 0x62, 0x0, 0x0, @uid=r9}, @generic="b45c8156b741478350f3f25063f61e1f4360c861676267340ffbd82282d0ca4d774e2fc80e9cacca85243dfc9799e8f862eb5a8597ecfba043777967702cac1817a4296f2645563806c2854b43fb5b0bf9ab335a1fda0c65dfb404eba93bf4604f17379e70ca873e2ff52432c9e1d1f2cb9bf414fc969851e0ce66ba6df3aba45e767b812f8cc8ba1b8c13dd5c5666a3d3c3011b0be3fdd050392749", @typed={0x8, 0x78, 0x0, 0x0, @fd=r10}]}, @nested={0xec, 0xb4, 0x0, 0x1, [@generic="698db13d17f3f0c613ac46c2a87e7dc19b47ecdfeaa106afb5614e8bc8eae8cb580bcc3ca399fa7e28a10a975b5de82906392c8bd6549c5965a190b66e2fe80ab2771a5a81bdfe920ad45462d81e0528df63e42004e2a83ef9616e734e79ab400df83af3932b2da28d377ec51de355e345da076042f637f52de62849fbca3cec04322f68cc9fe53efe95e1bdedc629c91c923e8c005b081746222d4568dcbbe12365c3e8cd899f6de27d98b5e498092f0ce30f3252dbf59dda23d4a60e3e167924925b2335fb3171ef4b68e0dbb5b9427e50b1fa02d146fb69466fdee7140eec", @typed={0x8, 0x71, 0x0, 0x0, @ipv4=@local}]}, @generic="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", @generic="e1338321c0009c15d835b4c759d8e6ca8257361659414d40787445b647a634c07f0ff5890014069686af8dc6d01105a9165d5a14c87ba11d8a9856bb0e45b8d935040129becb839188fc2ec1e7c1aae824969113fa958fcd33fb6947122a0a91f7eb4a0c8273331f2fc463aba46e6723e92d2554368b8dd0697c1b8e", @typed={0x8, 0x34, 0x0, 0x0, @uid}, @typed={0x14, 0xcd, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @generic="4c9ce82f61818830cbd20fbb0f46eeb43559e7c15c38adff5f", @nested={0xc, 0xf1, 0x0, 0x1, [@nested={0x4, 0x92}, @nested={0x4, 0x4a}]}, @typed={0x4, 0x14e}, @generic="fa713ee4d43de7181d5d4cd4f07c15f34fb78bbfdad90158f67b4066784b7ce7723c68cf4520c3fface8a4557d0feb7f059fa743f2b2675d42f5b09d306aed63eb28a72d773db5a5241f7fc181332444904d"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x4f0}, {0x0}], 0x2}, 0x84) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r11, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38e4ffff040603000000000000000000030000076c00030073797a32000000000900032073797a30000000000900030073797a3200000000"], 0x38}, 0x1, 0x0, 0x0, 0x48015}, 0x40c4) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={0x0, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) 1.110446031s ago: executing program 2 (id=6201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000580)='contention_begin\x00', r0, 0x0, 0x9}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="4400a8eeea8b38554f90acfa03c2460c0000a000005d000000000070cc0091a88b857fff7e21dea64d7277988e7f96327ce9745c21cc45a19d5720f620d85f5401efe383fcf55cc107edd05e1a63d962368503dd189c0e2377be052a9f545ee10cb58bf8c3d3dfa49aedd8640245f35364f1265b560e870bfee8a3ba600362d928474f7f984fb3e7a26fcf28f8b5862a9202022b6ae7cb9f1f665544c0dcce915bdbe76f9d9f1d6a28aa6f1aac000021a521f1cb954c58e9fe6f970fed8740fd06", @ANYRES64=r2, @ANYRES64=0x0], 0x44}}, 0x4000000) 1.032150962s ago: executing program 2 (id=6202): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000000), 0x0) setsockopt$inet6_int(r2, 0x29, 0x4, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000500)={"71eaa9c3af7a29378ce241234a7133b5", 0x0, 0x0, {0x3ff, 0x5}, {0x5, 0x7ff}, 0x9, [0x3, 0xd74, 0x3, 0x1, 0x0, 0x7fffffff, 0x9, 0x7fffffffffffffff, 0x1df8, 0x8, 0x7, 0x1c000000, 0x1, 0x1, 0x8, 0x8000000000000000]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0x40, 0x4000, 0x8, 0x9, 0xdcd, 0xc3}, &(0x7f0000000100)=0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) unshare(0x62040200) 828.271527ms ago: executing program 3 (id=6203): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) (async) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000002ac0)="09adda0000006d", 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x378, 0x2d8, 0x0, 0x2d8, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x378, 0x2d8, 0x0, 0x2d8, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[], 0x20) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r9, @ANYBLOB="200001"], 0x38}}, 0x40840) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) r11 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@id, &(0x7f0000000140)=0x10, 0x0) setsockopt$TIPC_IMPORTANCE(r11, 0x10f, 0x7f, &(0x7f0000000200)=0x800000, 0x4) (async) setsockopt$TIPC_IMPORTANCE(r11, 0x10f, 0x7f, &(0x7f0000000200)=0x800000, 0x4) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="8662d4801081"}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008000911ff20010000000000000000000000000001000000000000000000000000000000004f194eff7f00007881080001"], 0x46) (async) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008000911ff20010000000000000000000000000001000000000000000000000000000000004f194eff7f00007881080001"], 0x46) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x37, 0x0, "b42354dbf4bbdb64bed43f8c43488ed4b1b0fd9090dcb3997d7ef72189cee0d16a63c0f3baf8f7914163b95ad0dbee0938db83459d2537eb792476cbf4cb2f52833526a979ee898ebf20b267e5f7c175"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x37, 0x0, "b42354dbf4bbdb64bed43f8c43488ed4b1b0fd9090dcb3997d7ef72189cee0d16a63c0f3baf8f7914163b95ad0dbee0938db83459d2537eb792476cbf4cb2f52833526a979ee898ebf20b267e5f7c175"}, 0xd8) 567.68718ms ago: executing program 0 (id=6204): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 335.887645ms ago: executing program 3 (id=6205): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (fail_nth: 23) 312.506435ms ago: executing program 0 (id=6206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x48c9}, 0x4000000) 0s ago: executing program 0 (id=6207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={&(0x7f0000000000)="332bb0b9818e73026a183123515653707100b6", &(0x7f0000000140)=""/217, &(0x7f0000000900)="e2742e31ec07818438573dfb67930a48f72798d2dd0667f2874f040dd383a1a88aa53c4e40a09e6745f65fee0905d3067305a733cda1d40d512366a85776d25967b761f1e4df84f34e05a14b6d8c779eda6e02188ba48ae1606fa1fd3de2c70bf13d63cbeb2b195de6adf10fe298982f0f7d4f699f6ae8277496b051e61d05ffae8c69a17e538ec7da537f925de5dbccddad80387e8cf7b8760d7384737b9148c145f2dc8dd236bbce88d1dd1089e5c3b8cb0f430fb4027d3354037a9fe33939cf15b4a2f6aa3b72e92c0ac14b99c1fe9400d18efb67e1f82e0cf66b196fd5ca5f80ca6b4a8a1491bf00c5ddf91a731d9b051d5461cc74a700ae24f27f0ae63b89ffa655b2adccec12bd8611d7a9f8b638f3bbc352fb1a1c7fcd6251290423105baf9b3c28fc23597a0b0220b6bf69e9bee5803bd43774d5023eaa614f00739c18e8082bd08bc941b157946a11b2650d448e7c3d8d600367482e2cd779d895d5e726ca3bd6524c6004d08d3ea61e47194fe9b7f4c82a18097aafff3283f31901a853d00568f582c030b8f3dd1fc79bd6fdce9b942f773ad5722e858d9debd877b76ac2ce80e43a5d18dda9faafc73b3997a1ebd4876389ab7e028ce4713272b5dae678aa42b775ee9a55728e23494fe62bf4ddb142ca8d298302cc88ec27cbe3e823a4d98b3938887c546613cc58f3a41ab461351b7c0231b43f9ee230585f599e5db6f22d723539ccf9da12741c2c2e0ed98430e985841973c40dc642b5ba07ed9117d301372830a5dcc3eec67f3bf5c8182ec3c8c070587f83d27186ea8344cec154c35de86aa085bcc038d5526b8bcd3c395f7e40fcc9f81f2f6d32d0f9478273bf68440ee53bbe8529936b83208cfc7ff9a8423e45d4af08dd60c148c6d1bf8c38f79466915effd99e093856fa8c074f879da73d02d4e496604a53f220028e5ebf7f74b46b89da1479f31a1489b3e5b9834d720bc59bccbadbe7dc77d32d77fb6dd7ffa1c0705870116e7c0a618233294f17142bdfea854aa758ab2948fe7394965b05d192687c0394296ec7f4a991685b226683f1af95f0d8da8e5da1b5ea0c90ef085237d0ba861caf6b151b1725ada0c5a630f0698dd07479f5ad56fb44c37b7bdb24f76e457e86586003b34e07be1f123ae230573c9c48dd5d9c4a9a759383794ddd522f584561cb8cfa071e49ec15b590d2906b4eaaae3f43bb8ef48a7491ec0d4b2d0f877e3107172a86323b3e3612645f2b640921d652988e947c3c98bb22a46597bfdfb12993202a3185b740c80c2f093b949caa3bee0aabf313750f7b5728707fb42b780172fcb90065900a9c4de0781bb4b706ecf2cbafe971daaff55aa0be6bc96b5af88205239123172ef0350118aa3a2058a39562950c0ad6032fb80d97ec0fa27828c61f47ff46cc0e29c5d33fa6059602913115463fab145337dc07a1e0098d3eea88a2ca973857d6e1185291feb6d3466a8ee1decbf6fe9d58e37d1c1e8bbfff5e98c3459381f02174bd46694d7b70120672802ce69c72ac98ab4b736badaba3af14365140644ed7c99ff54f0e066ff7279123eb53a57c00de4328c60b5c6428bc225c6fea9dcd0fa57a719164a1d4954573bcd13274c3521138498c8fd140cd109dd2d4835d956b5b83e315be1743b123b07ea46f00460b0425f59aa9c1505ce210407537c04fae6ffa98253a77d45ae63442f60082d85073e15cc5b3da39e19a5776ec3ce6f0d4583798e5921bd249bbb9caccf550af4f26849b9376aa13bf62dbec5c2213595da1d6f5106bd0a602c27cb9404a8da58b8e9d793fc981190ff6ab469ffa256497a1a9e8cc3cadc36926c6ff75f70f34c4ade1b912025627e5b4e7994360fe1f4eb56c0e5d06a4d666580ac10b430716867d7a8ed8d1ca7e043b743a75d57805cecffe2e3c23009d847d3e72d7062b71dfc7d1f22c20c88d8ba692a63f0378531cc68574182f992dd9a2b2d0b26b2e60498a809e69ffaa1f5aeda5776f203932e3644b1a7ae3cc6d89ab6d391c6ef9f018e4a8603545165ca47cafaa85c2b9ec5cc194f78505f76bfe9c26cccf6ac135e09a7c45c534c2f50561fd5fc9283cc00e62d7418729bdfc103433e50b69787eacf7fc9d2fa572cdfbdddce4fb51ad90775c568ed72713544fad6c87df6f9722d5b5ca4775c49649a775bf35b9a5db9741d96e1595f381880502c15a3010d5d55af142685496a808bceb2bea91990e3e24f9aff9644d22afca7a167da54d37024f07c204fb6ca81cfe2d7751c0520f153f4b51b935de68cc0f3650bb7920eacc3caad69f0f46b03f880c1f080a105d0152f81962f0e2f30ff81a887072360115abff43a292a3ee998c7165f764345b50d506d1e9ece470bc26cc6ed15e0b92e6ca8fb0bf85288e6f1d9de1be7a81bdd1b9b8daf86f3bb40e8336a09bfd2b3eb9cb9fe95b03e16a202821f895b66c38d1da5a0c0eaa6609573b791dcf913dec8ed246ac63d0596a8b0cae07076968fee4da30da125b47e924f0ab5b8053fc98b9949d51f13898776f3760eee1bea0be4692cf4def81ec98f02fdbb8b5363c7d2b0a233533c9702d62235d78ae961601a92d918a28fa6f68f1c376b5f7e0e1495e64a895426f0f61e111a66673a0b8a795a426fdd26fcc13abdf7ae6b89c4df79ba3ddc59183b6f777c3bb7cefb69e85816ee593a2dcbc0a1a654f0c9500194421af34b12c644709d8c4dfb3ccd1715550cb180ea0a8377955f19632713b6b4ae1ce4f95a9bab66274f89a06e3a7d61160b5c9bdece286c612ed5b10b8c4a5f29d988aaa071837c93fb516dde09e757f5b7f5114018b9d0e43c3daf1ab01e4cd815c5af9750d54866345e0f08defcb70d0f31d6127479dc6f33679e82376635917c982900f5772a38ea0a055e1420ce8f47a2995d7f63004760c5d2cbd4c80d59ee10e14132444e29e522d3a81dd72fd8c8de164bd5c876c3e96564284170f95ada0292ebace6d3c64cf9f5ab1498d72c1bbbb376c6a8363b08f7d2d46e237db7c4a6e6d72970515bb219eb0a05e77e5397412f35a85043efd7a8415ac008b73df73b04de73984c4c60591399d2f0e57681a5f2d167987f6d453da5c58190973a5578e1c0a0d5153788269e8f2c44a808a2d2009ca87238372ab4956800491a24d0b8b68cc3392c54e1f0c641ac821a74595b1ed9bea0c47c15a3d874f16a08b2a5bc3f3a7a579369bb429d255df5c35a2872d44e5597d11ac30b3b24f9982b13b5fa3dce74fd60ce491173862a5343412cfa37b004b0b8027c4413b530d81c6b494648599b961502d9805f3e22a8451aff9ed1cbf7a2d9b1d176ffcccbfca01cfd339453416c61279ed9d5dacec16f46fde7b3b8a01b7912d0f2b1faeade147075e0dac6f05e2f29b107d5fece6a07e6d4c985def5f2ff64596d954e6dddca2f05ca945bdcab266615af333acc30135a070fed84857a176883cba891a7f786dbc11b0a29d25da69087aba4dfd11c19e17cb54618bd620fd33f26922843fbbe62468f2b18d817f9a462d28390c1e891311329f2e45893dac2b9d2ca264340d43567947de51e2f3e40ba00d0958c06cf057426a639bde1fcf2831e69a0ec0293e03f21dd7ff9cbcf2094736965925aae266041c90be6e15e8f93fa1d0fd0897d1cc9d7aaa9438144b353da222d9c88cdc4505a8651036c8a4130889b0f4c7f706ad0af2632a140090e0fe08fdec972f9af4ed35618dd1dcba48f3d5c1d30f452dbdf26e8a92fca44532cd650d62bb96d6c131f4e4a29f0958fff83c3bab6cbb3f607c61ac823341ce4872d15b3258da6830d2c066a24437f1fdb79d774bbc58afd5ca9fb8a6b594054528976cd2a8f2392977481c0c20888bf886a8003034ec3ee88538c6f891ecdb1ed2a20a80fc25f45a365b4d3691c07d14cb43d43997926887c17f8667c94e03b2bcd7cad1738c755db6a75d58d9d9c838e6fd662362341147e55f7471ed319751921ad95f5841b46c23fce85f221f2f9d539db79aeac8f7eef16de9c35134640806a4bc991eafdd677e8a1694a07fd5a573c4f1397954b63709f84f0b8a6d63593ddadf8f51fc9a8eda4ed8bda825adc194b057966e486af998c91db063dec04b602b3767074458fd606d6fd59e7ccb0a7408b91ae4814a6b25b68d9e04f036f104eb1f6530bd6a384d982026afce5fe6b86f9d1afc59aa3c6a17f57d6956b0de9b154a6461b0c88d51062ab95e47c1157148451ab4effa983623b721ee13239b76e595e6d0b3598a81e3282528873272f72689e75c9e1551047c1818e9f822d807feef983bcc33d9859ac8dd083fd7406d46f24a4ae148860d5844833342e143f234fa77e5004cdd9b46ea4a91ea6489bab49f191a3f661c5fd48969debd665dc68caad624fed9298d20b27300fe5f0234a908f1a6610656ae5cdcf888858a76b37d1db2a56aabf9a26c942d2a59959440d8e8a0b990ff8cabb14d74799a2ff4f72b0a7d4051ae6f1628888bc64cd800ed312840fed910f5780b01a7e9e9b209ac96e281a7c0c750138bc6c366a8033e7ab4dfe65c366a752bb1c3342740af5deeb55b344a974e9771cba4c759239ea4b35de85aa98f6dbafcdb99265ea3798e7b7eaa00b08bb02b8c1bc6572b47121cd8b19101a21013d5eb2d665b67f6d0a5445259e2c2c5cfe7116b1f5d50daf6da767f49abf1eba2fd793d417e710e85ffd7d9189a3c830ac0cf2a64650cbe3a68ecf2642f6423e9d216623e7c376d08372cc5349b3e0f999d78ac0b1b295cd231a09ac642688d859ba914877bc104b11cdafe7b7b7d1cbfbcfd0cb4b5d250bd717319a17fe7b7b1905816de815fc1aa27af193741e26dfc228993107094a9388292afc5f545373fa0dcffecdabf2a54dfa4a9ca47f0db408e7f8e9fa226be8e26cd9ecf5cd65ef8d04863975031c90241195a4431e2f6c445c3046e6b5ad401430e454cc97db490e6618e7c08a51a6fffcfebc4ef9e028ccd276bb037a32aaded9734998e82fbf6d6e219b9ca4762381707f716c2bf0d48616e0c53162ac6dc8914e16d563b6d0139ff06e889b301b891efc0e3ab5bb978f304a3f79fc53323f7471df4cd89371b40e3864b52783059b04d81d935e3bdad6ab63e88670369e0005db5ac913a53619e1a91c5f4134b34d9308f33010f9c670a3672f28fbb98441e62cc49c55cc5a2cd14428fe7f7b494b0a56e91867f33954dd743616f6bc44b65dc4e325181488a5bf712fdef2dfa06fe0f3c85eaf31f61cdc08e72edd91f2d8988ad9a71a9f632efeb5c872827b13442a3eb5075c681579b3cdc91c1aac75e421902fafdc1e28370f61178e70689c9f96e19c38c1a2c23a60fea1a42547e1b5c30f82bc3c9aff805d929129a2156335a847ab6404f494c0a62a8dd1f734ba1b2cbe7de73f92a82741231407b56d924cb3e7016b7ed8a047305a4cd42ad52a56cefd71b8d3ac97375cf9dca55433fc19e75f21ea5593a62a85caade77998b4c3262df837c45f69399971c99f05ed40f2453b7976f56093b72093aee15ce0926ab597a3b24edb199e14777f0639e41981cf87b668549678572f779a79ba5321c80a3099ef5a96805abb016bf98dd74fb772b11e970611ae60208022e274bff2ca699d57eee7778bb0be2470a34f28a3c07870429178d69b32ffb9f115978e522a85c446a372d7812b0b11b5ef18255ef0d5b5044dd6bbd050c0407820d913e0c5ba9340e08c45acc00a6fcc4d96da85dc006fb3f1b9f093d789378cb3958b07c01f853d68c9e4819", &(0x7f0000000240)="f90ee9758cba0d1019c16abe6f4678809d9a4f581d33118a39946b7d70660281ac735d1c517557b3c7b98fc7979ae07fd46d80f12c59d20e80a0a04f1145c1157525d9d1a3542978a143898e5802a5eb32c3b63a5d2306c00dd3dc58433a79f1c3a116879b156b3c2597dd65a59d843e17b597c138df3aec49f0bd65a869f943cc20cbffe36a027c3f81b357d3bbe9397dc302bd74592dd7a223c4c2b80093cef7417380d95c36ccd78d8ade82f17dd4d7c6cd37a89fd4d0ca86dd3036c8718b87090e0d95c717edcbea6bc2c5e9f4128bc9b6cebacb5b8da1c525f619fc1f01f6af08973d1c982e1f012826288d8e18ea9ef99a31e66da06c", 0x1, r1, 0x4}, 0x38) close(0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f0000000900)}, 0x20) kernel console output (not intermixed with test programs): es in process `syz.3.5045'. [ 754.337024][T25384] pim6reg1: entered promiscuous mode [ 754.350276][T25384] pim6reg1: entered allmulticast mode [ 754.548437][T25367] lo speed is unknown, defaulting to 1000 [ 754.587201][T25367] lo speed is unknown, defaulting to 1000 [ 754.723353][T25395] gre0 speed is unknown, defaulting to 1000 [ 754.836182][T25404] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5053'. [ 754.861808][T25405] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5053'. [ 754.886668][T25404] netlink: 'syz.4.5053': attribute type 1 has an invalid length. [ 754.970490][T25404] 8021q: adding VLAN 0 to HW filter on device bond7 [ 754.978130][T25410] veth0: entered promiscuous mode [ 754.992629][T25411] lo: Caught tx_queue_len zero misconfig [ 755.147995][T25411] netlink: 'syz.4.5053': attribute type 3 has an invalid length. [ 755.327478][T25395] lo speed is unknown, defaulting to 1000 [ 755.340054][T25395] lo speed is unknown, defaulting to 1000 [ 755.433909][T25428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5057'. [ 755.511928][T25409] veth0: left promiscuous mode [ 755.945041][T25449] tipc: Enabled bearer , priority 0 [ 755.953778][T25449] syzkaller0: entered promiscuous mode [ 755.967423][T25449] syzkaller0: entered allmulticast mode [ 756.013449][T25454] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 756.024071][T25449] tipc: Resetting bearer [ 756.032763][T25448] tipc: Resetting bearer [ 756.070148][T25448] tipc: Disabling bearer [ 756.916802][T25490] gre0 speed is unknown, defaulting to 1000 [ 757.077505][T25504] __nla_validate_parse: 2 callbacks suppressed [ 757.077524][T25504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5079'. [ 757.181835][T25490] lo speed is unknown, defaulting to 1000 [ 757.196809][T25490] lo speed is unknown, defaulting to 1000 [ 757.329981][T25509] batadv2: entered promiscuous mode [ 757.387242][T25520] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5081'. [ 757.633022][T25524] gre0 speed is unknown, defaulting to 1000 [ 757.813292][T25538] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 757.843295][T25540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5091'. [ 758.333468][T25555] syzkaller1: entered promiscuous mode [ 758.352491][T25555] syzkaller1: entered allmulticast mode [ 758.385425][T25524] lo speed is unknown, defaulting to 1000 [ 758.416700][T25524] lo speed is unknown, defaulting to 1000 [ 758.447687][T25559] net_ratelimit: 2041 callbacks suppressed [ 758.447704][T25559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.463483][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.706726][T25574] IPVS: nq: SCTP 172.20.20.187:0 - no destination available [ 758.779343][T25570] gre0 speed is unknown, defaulting to 1000 [ 758.799575][T25579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.805718][T25563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5098'. [ 758.808833][T25580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5103'. [ 758.826703][T25579] sctp: [Deprecated]: syz.2.5101 (pid 25579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 758.826703][T25579] Use struct sctp_sack_info instead [ 758.854872][T25579] sctp: [Deprecated]: syz.2.5101 (pid 25579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 758.854872][T25579] Use struct sctp_sack_info instead [ 758.976484][T25582] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 758.985822][T25582] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 759.015632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.073523][T25587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5106'. [ 759.121197][T25570] lo speed is unknown, defaulting to 1000 [ 759.156088][T25570] lo speed is unknown, defaulting to 1000 [ 759.210239][T25591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.331138][T25597] gre0 speed is unknown, defaulting to 1000 [ 759.634317][T25597] lo speed is unknown, defaulting to 1000 [ 759.644399][T25609] gre0 speed is unknown, defaulting to 1000 [ 759.649265][T25597] lo speed is unknown, defaulting to 1000 [ 760.395837][T25609] lo speed is unknown, defaulting to 1000 [ 760.407116][T25609] lo speed is unknown, defaulting to 1000 [ 760.416883][T25634] tipc: Enabling of bearer rejected, failed to enable media [ 760.628621][T25639] netlink: 'syz.0.5118': attribute type 13 has an invalid length. [ 760.639405][T25639] netlink: 'syz.0.5118': attribute type 12 has an invalid length. [ 760.684216][T25646] netlink: 'syz.2.5120': attribute type 1 has an invalid length. [ 760.739218][T25652] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5120'. [ 760.832287][T25646] 8021q: adding VLAN 0 to HW filter on device bond6 [ 760.842721][T25657] tipc: Enabled bearer , priority 0 [ 761.047093][T25661] bond6: (slave ip6gretap2): making interface the new active one [ 761.059984][T25661] bond6: (slave ip6gretap2): Enslaving as an active interface with an up link [ 761.221641][T25668] tap0: tun_chr_ioctl cmd 1074025677 [ 761.229039][T25668] tap0: linktype set to 0 [ 761.395267][T25651] tipc: Disabling bearer [ 761.429741][T25682] netlink: 'syz.3.5126': attribute type 11 has an invalid length. [ 761.530878][T25687] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5129'. [ 761.598643][T25693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.607316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.617110][T25693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.625469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.999277][T25718] netlink: 'syz.4.5138': attribute type 8 has an invalid length. [ 762.089112][T25687] bond0 (unregistering): (slave 30): Releasing backup interface [ 762.100467][T25687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.113116][T25687] bond0 (unregistering): Released all slaves [ 762.227125][T25721] gre0 speed is unknown, defaulting to 1000 [ 762.281601][T25731] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5143'. [ 762.297352][T25730] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5142'. [ 762.484984][T25739] tipc: Enabling of bearer rejected, already enabled [ 762.508599][T25741] sctp: [Deprecated]: syz.3.5148 (pid 25741) Use of int in max_burst socket option. [ 762.508599][T25741] Use struct sctp_assoc_value instead [ 762.532224][T25745] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5149'. [ 762.550369][T25736] netlink: 'syz.0.5146': attribute type 13 has an invalid length. [ 762.616113][T25745] pim6reg: entered allmulticast mode [ 762.689458][T25750] netlink: 'syz.4.5149': attribute type 6 has an invalid length. [ 762.707960][T25750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5149'. [ 762.724718][T25741] netlink: 558 bytes leftover after parsing attributes in process `syz.3.5148'. [ 762.744058][T25751] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5149'. [ 762.766482][T25745] pim6reg: left allmulticast mode [ 762.803862][T25721] lo speed is unknown, defaulting to 1000 [ 762.879348][T25721] lo speed is unknown, defaulting to 1000 [ 763.080636][T25768] netlink: 'syz.3.5152': attribute type 1 has an invalid length. [ 763.138879][T25769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5152'. [ 763.287079][T25769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.364123][T25773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.393640][T25773] bond0: (slave geneve2): making interface the new active one [ 763.410817][T25773] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 763.434215][T25781] netlink: 'syz.0.5155': attribute type 1 has an invalid length. [ 763.480960][T18769] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 763.521755][T25778] netlink: 'syz.1.5156': attribute type 6 has an invalid length. [ 763.667984][T25781] bond7: entered promiscuous mode [ 763.676450][T25781] bond7: entered allmulticast mode [ 763.682033][T25781] 8021q: adding VLAN 0 to HW filter on device bond7 [ 763.712366][T25783] macvlan2: entered promiscuous mode [ 763.719782][T25783] macvlan2: entered allmulticast mode [ 763.728583][T25783] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 763.735582][ C0] net_ratelimit: 899 callbacks suppressed [ 763.735600][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.784054][T18769] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 763.851410][T25789] bridge5: entered allmulticast mode [ 763.898959][T18769] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 763.929903][T18769] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 763.965881][T25782] gre0 speed is unknown, defaulting to 1000 [ 763.985915][T25807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5162'. [ 764.263968][T25815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 764.293802][T25782] lo speed is unknown, defaulting to 1000 [ 764.388277][T25829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5168'. [ 764.410202][T25824] veth3: entered promiscuous mode [ 764.422902][T25824] bond5: (slave veth3): Enslaving as an active interface with a down link [ 764.432098][T25815] erspan0: entered allmulticast mode [ 764.438689][T25782] lo speed is unknown, defaulting to 1000 [ 764.452272][T25815] bond5: (slave erspan0): making interface the new active one [ 764.463618][T25815] erspan0: entered promiscuous mode [ 764.469556][T25815] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 764.579044][T25820] bond5: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 764.775404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.276492][T25857] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5174'. [ 765.438870][T25859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.447271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.538447][T25866] syzkaller0: entered promiscuous mode [ 765.544007][T25866] syzkaller0: entered allmulticast mode [ 765.565167][T25866] bond0: option resend_igmp: invalid value (4096) [ 765.572479][T25866] bond0: option resend_igmp: allowed values 0 - 255 [ 765.815840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.918721][T25885] tipc: Enabled bearer , priority 0 [ 766.010685][T25893] syzkaller0: entered promiscuous mode [ 766.019950][T25893] syzkaller0: entered allmulticast mode [ 766.066710][T25893] tipc: Resetting bearer [ 766.150962][T25884] tipc: Resetting bearer [ 766.228149][T25884] tipc: Disabling bearer [ 766.262938][T25903] validate_nla: 5 callbacks suppressed [ 766.262956][T25903] netlink: 'syz.2.5188': attribute type 4 has an invalid length. [ 766.332641][T25908] netlink: 'syz.3.5190': attribute type 4 has an invalid length. [ 766.338850][T25899] netlink: 'syz.2.5188': attribute type 4 has an invalid length. [ 766.425636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.587920][T25921] bond6: option lp_interval: invalid value (0) [ 766.606083][T25921] bond6: option lp_interval: allowed values 1 - 2147483647 [ 766.615631][T25921] bond6 (unregistering): Released all slaves [ 766.705655][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.855740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.886904][T25939] gre0 speed is unknown, defaulting to 1000 [ 767.333558][T25939] lo speed is unknown, defaulting to 1000 [ 767.349876][T25939] lo speed is unknown, defaulting to 1000 [ 767.432888][T25972] __nla_validate_parse: 3 callbacks suppressed [ 767.432908][T25972] netlink: 260 bytes leftover after parsing attributes in process `syz.2.5210'. [ 767.485095][T25972] gre0 speed is unknown, defaulting to 1000 [ 767.733954][T25972] lo speed is unknown, defaulting to 1000 [ 767.748703][T25972] lo speed is unknown, defaulting to 1000 [ 767.895419][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.206178][T25993] tipc: Enabling of bearer rejected, failed to enable media [ 768.282575][T25974] gre0 speed is unknown, defaulting to 1000 [ 768.414016][T26002] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5219'. [ 768.459828][T26005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5217'. [ 768.682499][T26005] bridge_slave_1: left allmulticast mode [ 768.713340][T26005] bridge_slave_1: left promiscuous mode [ 768.741559][T26005] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.752976][T26005] bridge_slave_0: left allmulticast mode [ 768.762161][T26005] bridge_slave_0: left promiscuous mode [ 768.768261][T26005] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.787035][T26022] netlink: 'syz.1.5223': attribute type 1 has an invalid length. [ 768.935473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.005978][T25974] lo speed is unknown, defaulting to 1000 [ 769.013489][T25974] lo speed is unknown, defaulting to 1000 [ 769.218510][T26045] netlink: 'syz.1.5227': attribute type 4 has an invalid length. [ 769.655269][T26061] netlink: 'syz.4.5232': attribute type 2 has an invalid length. [ 769.701429][T26061] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5232'. [ 769.731064][T26061] netlink: 'syz.4.5232': attribute type 9 has an invalid length. [ 769.768448][T26061] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5232'. [ 769.815155][T26061] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5232'. [ 769.975417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.051068][T26063] bond8: entered promiscuous mode [ 770.073536][T26063] bond8: entered allmulticast mode [ 770.096236][T26063] 8021q: adding VLAN 0 to HW filter on device bond8 [ 770.141632][T26070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5234'. [ 770.164693][T26060] gre0 speed is unknown, defaulting to 1000 [ 770.217258][T26074] sctp: [Deprecated]: syz.3.5235 (pid 26074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 770.217258][T26074] Use struct sctp_sack_info instead [ 770.450862][T26085] netlink: 192 bytes leftover after parsing attributes in process `syz.4.5240'. [ 770.624353][T26080] gre0 speed is unknown, defaulting to 1000 [ 770.649370][T26060] lo speed is unknown, defaulting to 1000 [ 770.688811][T26060] lo speed is unknown, defaulting to 1000 [ 770.696998][T26099] netlink: 'syz.2.5242': attribute type 11 has an invalid length. [ 770.743076][T26099] netlink: 'syz.2.5242': attribute type 11 has an invalid length. [ 770.771393][T26099] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5242'. [ 770.867751][T26094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 771.015392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.067422][T26103] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5244'. [ 771.090540][T26080] lo speed is unknown, defaulting to 1000 [ 771.114242][T26080] lo speed is unknown, defaulting to 1000 [ 771.505120][T26123] openvswitch: netlink: nsh attr 0 has unexpected len 16 expected 0 [ 771.513794][T26123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 772.137707][T26153] netlink: 'syz.4.5259': attribute type 1 has an invalid length. [ 772.244895][T26158] gre0 speed is unknown, defaulting to 1000 [ 772.576046][T26168] IPVS: Scheduler module ip_vs_ not found [ 772.640623][T26154] lo: Caught tx_queue_len zero misconfig [ 772.687150][T26177] netlink: 'syz.0.5266': attribute type 33 has an invalid length. [ 772.708987][T26158] lo speed is unknown, defaulting to 1000 [ 772.710434][T26177] __nla_validate_parse: 3 callbacks suppressed [ 772.710450][T26177] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5266'. [ 772.717590][T26158] lo speed is unknown, defaulting to 1000 [ 772.990142][T26190] netlink: 332 bytes leftover after parsing attributes in process `syz.4.5270'. [ 773.003159][T26190] netlink: 'syz.4.5270': attribute type 9 has an invalid length. [ 773.011199][T26190] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5270'. [ 773.022538][T26190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5270'. [ 773.173261][T26200] netlink: 'syz.2.5273': attribute type 1 has an invalid length. [ 773.205780][T26200] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5273'. [ 773.219285][T26205] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5274'. [ 773.258730][T26205] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5274'. [ 773.297361][T26205] block nbd0: reconnected socket [ 773.342499][ T52] block nbd0: Receive control failed (result -32) [ 773.531806][T26220] tipc: Enabled bearer , priority 0 [ 773.591567][T26231] syzkaller0: entered promiscuous mode [ 773.599475][T26231] syzkaller0: entered allmulticast mode [ 773.749061][T26220] tipc: Resetting bearer [ 773.760917][T26219] tipc: Resetting bearer [ 773.788115][T26219] tipc: Disabling bearer [ 773.832664][T26245] veth4: entered allmulticast mode [ 773.857064][T26247] netlink: 212232 bytes leftover after parsing attributes in process `syz.2.5288'. [ 773.967612][T26251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5290'. [ 774.095106][T26258] gre0 speed is unknown, defaulting to 1000 [ 774.812358][T26258] lo speed is unknown, defaulting to 1000 [ 774.820252][T26258] lo speed is unknown, defaulting to 1000 [ 774.841854][T26294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5302'. [ 775.453609][T26331] batadv_slave_0: entered promiscuous mode [ 775.706208][ T6418] erspan0: left promiscuous mode [ 775.813923][T26355] vlan2: entered allmulticast mode [ 775.831271][T26355] gretap0: entered allmulticast mode [ 776.299492][T26379] rdma_rxe: rxe_newlink: failed to add lo [ 776.976812][T26414] bond8: entered promiscuous mode [ 776.982749][T26422] netlink: 'syz.3.5334': attribute type 6 has an invalid length. [ 777.007961][T26414] bond8: entered allmulticast mode [ 777.013472][T26414] 8021q: adding VLAN 0 to HW filter on device bond8 [ 777.118191][T26417] gre0 speed is unknown, defaulting to 1000 [ 777.590549][T26430] gre0 speed is unknown, defaulting to 1000 [ 777.596317][T26417] lo speed is unknown, defaulting to 1000 [ 777.603807][T26417] lo speed is unknown, defaulting to 1000 [ 777.816605][T26440] netlink: 'syz.1.5344': attribute type 5 has an invalid length. [ 778.191794][T26430] lo speed is unknown, defaulting to 1000 [ 778.209448][T26430] lo speed is unknown, defaulting to 1000 [ 779.049243][T26465] __nla_validate_parse: 6 callbacks suppressed [ 779.049262][T26465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5348'. [ 779.295477][T26480] netlink: 'syz.0.5352': attribute type 15 has an invalid length. [ 779.490946][T26506] syz.1.5357 uses old SIOCAX25GETINFO [ 779.826848][T26534] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5360'. [ 779.868203][T26539] netlink: 312 bytes leftover after parsing attributes in process `syz.1.5365'. [ 779.934149][T26541] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5366'. [ 779.940810][T26543] netlink: 'syz.1.5367': attribute type 21 has an invalid length. [ 779.978453][T26543] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5367'. [ 780.218581][T26557] netlink: 'syz.2.5370': attribute type 4 has an invalid length. [ 780.261312][T26557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5370'. [ 780.444107][T26565] veth5: entered promiscuous mode [ 780.450175][T26571] gre0 speed is unknown, defaulting to 1000 [ 780.851748][T26565] gre0 speed is unknown, defaulting to 1000 [ 780.851889][T26571] lo speed is unknown, defaulting to 1000 [ 780.867536][T26571] lo speed is unknown, defaulting to 1000 [ 781.262191][T26599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5382'. [ 781.409584][T26565] lo speed is unknown, defaulting to 1000 [ 781.428201][T26565] lo speed is unknown, defaulting to 1000 [ 781.792408][T26623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5389'. [ 781.894149][T26630] Cannot find del_set index 2 as target [ 782.572429][T26661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5400'. [ 782.633328][T26666] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5403'. [ 782.814350][T26666] bridge5: entered promiscuous mode [ 782.825444][T26666] bridge5: entered allmulticast mode [ 782.842308][T26666] bridge5: left promiscuous mode [ 782.847896][T26666] bridge5: left allmulticast mode [ 783.094990][T26701] netlink: 'syz.2.5411': attribute type 1 has an invalid length. [ 783.304269][T26720] geneve1: Caught tx_queue_len zero misconfig [ 783.344152][T26718] tipc: Enabled bearer , priority 0 [ 783.371939][T26718] syzkaller0: entered promiscuous mode [ 783.378236][T26718] syzkaller0: entered allmulticast mode [ 783.394324][T26716] tipc: Resetting bearer [ 783.411367][T26716] tipc: Disabling bearer [ 783.592492][T26728] gre0 speed is unknown, defaulting to 1000 [ 783.803580][T26728] lo speed is unknown, defaulting to 1000 [ 783.819114][T26728] lo speed is unknown, defaulting to 1000 [ 783.919606][T26740] gre0 speed is unknown, defaulting to 1000 [ 784.243458][T26756] __nla_validate_parse: 11 callbacks suppressed [ 784.243480][T26756] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5426'. [ 784.484450][T26756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.494734][T26756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.504131][T26756] bond0 (unregistering): Released all slaves [ 784.520785][T26740] lo speed is unknown, defaulting to 1000 [ 784.520809][T26762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5428'. [ 784.537196][T26762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5428'. [ 784.564154][T26740] lo speed is unknown, defaulting to 1000 [ 784.724477][T26773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5430'. [ 784.967092][T26785] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5432'. [ 785.122345][T26794] netlink: 43 bytes leftover after parsing attributes in process `syz.2.5434'. [ 785.149012][T26795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5433'. [ 785.178848][T26794] IPv6: sit3: Disabled Multicast RS [ 785.198085][T26794] sit3: entered allmulticast mode [ 785.218162][T26792] tipc: Enabled bearer , priority 0 [ 785.245106][T26792] syzkaller0: entered promiscuous mode [ 785.255559][T26792] syzkaller0: entered allmulticast mode [ 785.312644][T26805] bond0: option primary_reselect: invalid value (6) [ 785.320738][T26805] bond0 (unregistering): Released all slaves [ 785.343953][T26801] gre0 speed is unknown, defaulting to 1000 [ 785.634331][T26820] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5440'. [ 785.724869][T26801] lo speed is unknown, defaulting to 1000 [ 785.737207][T26801] lo speed is unknown, defaulting to 1000 [ 785.882154][T26837] gre0 speed is unknown, defaulting to 1000 [ 785.952841][T26842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5443'. [ 786.111262][T26842] 8021q: adding VLAN 0 to HW filter on device bond1 [ 786.127603][T26791] tipc: Resetting bearer [ 786.161612][T26791] tipc: Disabling bearer [ 786.294310][T26837] lo speed is unknown, defaulting to 1000 [ 786.310681][T26853] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 786.326234][T26837] lo speed is unknown, defaulting to 1000 [ 786.332851][T26853] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 786.402219][T26857] tipc: Enabling of bearer rejected, already enabled [ 786.787559][T26868] syzkaller1: entered promiscuous mode [ 786.793219][T26868] syzkaller1: entered allmulticast mode [ 786.801868][T26882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5455'. [ 787.121161][T26893] gre0 speed is unknown, defaulting to 1000 [ 787.456700][T26893] lo speed is unknown, defaulting to 1000 [ 787.464323][T26893] lo speed is unknown, defaulting to 1000 [ 787.467327][T26903] gre0 speed is unknown, defaulting to 1000 [ 788.013439][T26903] lo speed is unknown, defaulting to 1000 [ 788.015207][T26910] gre0 speed is unknown, defaulting to 1000 [ 788.075123][T26903] lo speed is unknown, defaulting to 1000 [ 788.597010][T26944] netlink: 'syz.4.5471': attribute type 4 has an invalid length. [ 788.818131][T26910] lo speed is unknown, defaulting to 1000 [ 788.905824][T26910] lo speed is unknown, defaulting to 1000 [ 789.182666][T26954] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 789.192145][T26958] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 789.347838][T26965] __nla_validate_parse: 4 callbacks suppressed [ 789.347856][T26965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5476'. [ 789.508644][T26969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5478'. [ 789.923928][T26991] tipc: Enabled bearer , priority 0 [ 789.932692][T26991] syzkaller0: entered promiscuous mode [ 789.938754][T26991] syzkaller0: entered allmulticast mode [ 790.026532][T26989] tipc: Resetting bearer [ 790.074574][T26989] tipc: Disabling bearer [ 790.094349][T27006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5488'. [ 790.209638][T27006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.236902][T27012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5491'. [ 790.276627][T27017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5493'. [ 790.296502][T27012] hsr_slave_0: left promiscuous mode [ 790.347354][T27022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5493'. [ 790.369352][T27022] --map-set only usable from mangle table [ 790.573235][T27036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5497'. [ 790.708556][T27043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5498'. [ 790.833438][T27045] netlink: 'syz.3.5501': attribute type 1 has an invalid length. [ 790.927501][T27045] bond6: entered promiscuous mode [ 790.932934][T27045] 8021q: adding VLAN 0 to HW filter on device bond6 [ 790.984319][T27049] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 791.000430][T27049] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 791.066868][T27049] bond6: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 791.315926][T27058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5502'. [ 791.343524][T27058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5502'. [ 791.504638][T27064] clip:clip_setentry: non-CLIP VCC [ 791.524493][T27066] gre0 speed is unknown, defaulting to 1000 [ 791.524500][T27073] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 791.828207][T27075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 792.182329][T27066] lo speed is unknown, defaulting to 1000 [ 792.182493][T27081] gre0 speed is unknown, defaulting to 1000 [ 792.202112][T27066] lo speed is unknown, defaulting to 1000 [ 792.370634][T27109] sctp: [Deprecated]: syz.1.5516 (pid 27109) Use of int in max_burst socket option. [ 792.370634][T27109] Use struct sctp_assoc_value instead [ 792.743054][T27132] IPVS: set_ctl: invalid protocol: 0 172.20.20.62:20000 [ 792.751841][T27131] netlink: 'syz.4.5523': attribute type 1 has an invalid length. [ 792.804893][T27126] syzkaller0: Caught tx_queue_len zero misconfig [ 792.853456][T27081] lo speed is unknown, defaulting to 1000 [ 792.879722][T27081] lo speed is unknown, defaulting to 1000 [ 792.961077][T27142] netlink: 'syz.1.5526': attribute type 2 has an invalid length. [ 792.963713][T27126] gre0 speed is unknown, defaulting to 1000 [ 793.258168][T27154] netlink: 'syz.3.5530': attribute type 1 has an invalid length. [ 793.339233][T27150] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 793.537306][T27164] bridge_slave_0: invalid flags given to default FDB implementation [ 793.908394][T27126] lo speed is unknown, defaulting to 1000 [ 793.915116][T27126] lo speed is unknown, defaulting to 1000 [ 793.992102][T27181] netlink: 'syz.3.5539': attribute type 1 has an invalid length. [ 794.377112][T27196] batman_adv: batadv0: Adding interface: vlan2 [ 794.411703][T27196] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 794.549448][T27175] __nla_validate_parse: 5 callbacks suppressed [ 794.549467][T27175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5537'. [ 795.247160][T27239] xt_hashlimit: invalid rate [ 795.398253][T27249] gre0 speed is unknown, defaulting to 1000 [ 795.559342][T27256] netlink: 'syz.1.5559': attribute type 2 has an invalid length. [ 795.600802][T27256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5559'. [ 795.700396][T27262] FAULT_INJECTION: forcing a failure. [ 795.700396][T27262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.733437][T27262] CPU: 1 UID: 0 PID: 27262 Comm: syz.2.5561 Not tainted syzkaller #0 PREEMPT(full) [ 795.733484][T27262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.733507][T27262] Call Trace: [ 795.733522][T27262] [ 795.733538][T27262] dump_stack_lvl+0x189/0x250 [ 795.733564][T27262] ? __pfx____ratelimit+0x10/0x10 [ 795.733585][T27262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.733604][T27262] ? __pfx__printk+0x10/0x10 [ 795.733626][T27262] ? __might_fault+0xb0/0x130 [ 795.733658][T27262] should_fail_ex+0x414/0x560 [ 795.733684][T27262] _copy_from_user+0x2d/0xb0 [ 795.733707][T27262] __sys_bpf+0x1e3/0x860 [ 795.733730][T27262] ? __pfx___sys_bpf+0x10/0x10 [ 795.733767][T27262] ? ksys_write+0x22a/0x250 [ 795.733790][T27262] ? __pfx_ksys_write+0x10/0x10 [ 795.733817][T27262] __x64_sys_bpf+0x7c/0x90 [ 795.733836][T27262] do_syscall_64+0xfa/0xf80 [ 795.733858][T27262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.733875][T27262] ? clear_bhb_loop+0x60/0xb0 [ 795.733906][T27262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.733922][T27262] RIP: 0033:0x7f2fd618f749 [ 795.733938][T27262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.733953][T27262] RSP: 002b:00007f2fd707a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 795.733976][T27262] RAX: ffffffffffffffda RBX: 00007f2fd63e5fa0 RCX: 00007f2fd618f749 [ 795.733989][T27262] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 795.734001][T27262] RBP: 00007f2fd707a090 R08: 0000000000000000 R09: 0000000000000000 [ 795.734011][T27262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.734022][T27262] R13: 00007f2fd63e6038 R14: 00007f2fd63e5fa0 R15: 00007fff47c4b328 [ 795.734053][T27262] [ 795.920791][T27265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5560'. [ 796.078088][T27260] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.085863][T27260] bridge0: port 1(1¾x9ÿ) entered disabled state [ 796.270484][T27260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.284472][T27260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.355050][T27260] vlan1: left promiscuous mode [ 796.397819][T27260] sit1: left promiscuous mode [ 796.406072][T27260] bond2: left promiscuous mode [ 796.412885][T27260] batadv1: left promiscuous mode [ 796.427858][T27260] bond4: left promiscuous mode [ 796.436699][T27260] bond6: left promiscuous mode [ 796.449098][T27260] bond8: left promiscuous mode [ 796.454104][T27260] bond8: left allmulticast mode [ 796.467557][T26495] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.476355][T27249] lo speed is unknown, defaulting to 1000 [ 796.492399][T26495] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.537047][T26495] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.555424][T26495] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.564470][T27249] lo speed is unknown, defaulting to 1000 [ 796.708479][T26495] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.726592][T26495] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.774407][T26495] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 796.794498][T26495] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.084388][T27300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5570'. [ 797.151163][T27301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5571'. [ 797.168826][T27300] 8021q: adding VLAN 0 to HW filter on device bond9 [ 797.223849][T27300] bond9: (slave vlan0): Opening slave failed [ 797.282417][T27310] FAULT_INJECTION: forcing a failure. [ 797.282417][T27310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.322830][T27310] CPU: 0 UID: 0 PID: 27310 Comm: syz.2.5574 Not tainted syzkaller #0 PREEMPT(full) [ 797.322856][T27310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 797.322866][T27310] Call Trace: [ 797.322871][T27310] [ 797.322877][T27310] dump_stack_lvl+0x189/0x250 [ 797.322893][T27310] ? __pfx____ratelimit+0x10/0x10 [ 797.322906][T27310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 797.322917][T27310] ? __pfx__printk+0x10/0x10 [ 797.322930][T27310] ? __might_fault+0xb0/0x130 [ 797.322948][T27310] should_fail_ex+0x414/0x560 [ 797.322962][T27310] _copy_from_user+0x2d/0xb0 [ 797.322977][T27310] ___sys_sendmsg+0x158/0x2a0 [ 797.322994][T27310] ? __pfx____sys_sendmsg+0x10/0x10 [ 797.323012][T27310] ? rcu_read_lock_any_held+0xb3/0x120 [ 797.323047][T27310] ? __fget_files+0x2a/0x420 [ 797.323062][T27310] ? __fget_files+0x3a0/0x420 [ 797.323094][T27310] __x64_sys_sendmsg+0x19b/0x260 [ 797.323118][T27310] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 797.323138][T27310] ? __pfx_ksys_write+0x10/0x10 [ 797.323152][T27310] ? do_syscall_64+0xbe/0xf80 [ 797.323167][T27310] do_syscall_64+0xfa/0xf80 [ 797.323180][T27310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.323189][T27310] ? clear_bhb_loop+0x60/0xb0 [ 797.323201][T27310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.323211][T27310] RIP: 0033:0x7f2fd618f749 [ 797.323221][T27310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.323229][T27310] RSP: 002b:00007f2fd707a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.323241][T27310] RAX: ffffffffffffffda RBX: 00007f2fd63e5fa0 RCX: 00007f2fd618f749 [ 797.323248][T27310] RDX: 0000000000000000 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 797.323254][T27310] RBP: 00007f2fd707a090 R08: 0000000000000000 R09: 0000000000000000 [ 797.323260][T27310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.323266][T27310] R13: 00007f2fd63e6038 R14: 00007f2fd63e5fa0 R15: 00007fff47c4b328 [ 797.323282][T27310] [ 797.578459][T27314] FAULT_INJECTION: forcing a failure. [ 797.578459][T27314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.592720][T27314] CPU: 1 UID: 0 PID: 27314 Comm: syz.2.5575 Not tainted syzkaller #0 PREEMPT(full) [ 797.592743][T27314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 797.592753][T27314] Call Trace: [ 797.592760][T27314] [ 797.592767][T27314] dump_stack_lvl+0x189/0x250 [ 797.592789][T27314] ? __pfx____ratelimit+0x10/0x10 [ 797.592808][T27314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 797.592833][T27314] ? __pfx__printk+0x10/0x10 [ 797.592864][T27314] should_fail_ex+0x414/0x560 [ 797.592886][T27314] _copy_to_user+0x31/0xb0 [ 797.592908][T27314] bpf_prog_test_run_syscall+0x331/0x4b0 [ 797.592928][T27314] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 797.592951][T27314] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 797.592968][T27314] bpf_prog_test_run+0x2c7/0x340 [ 797.592991][T27314] __sys_bpf+0x562/0x860 [ 797.593010][T27314] ? __pfx___sys_bpf+0x10/0x10 [ 797.593042][T27314] ? ksys_write+0x22a/0x250 [ 797.593063][T27314] ? __pfx_ksys_write+0x10/0x10 [ 797.593087][T27314] __x64_sys_bpf+0x7c/0x90 [ 797.593104][T27314] do_syscall_64+0xfa/0xf80 [ 797.593124][T27314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.593139][T27314] ? clear_bhb_loop+0x60/0xb0 [ 797.593158][T27314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.593173][T27314] RIP: 0033:0x7f2fd618f749 [ 797.593188][T27314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.593200][T27314] RSP: 002b:00007f2fd707a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.593217][T27314] RAX: ffffffffffffffda RBX: 00007f2fd63e5fa0 RCX: 00007f2fd618f749 [ 797.593229][T27314] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 000000000000000a [ 797.593238][T27314] RBP: 00007f2fd707a090 R08: 0000000000000000 R09: 0000000000000000 [ 797.593248][T27314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.593257][T27314] R13: 00007f2fd63e6038 R14: 00007f2fd63e5fa0 R15: 00007fff47c4b328 [ 797.593285][T27314] [ 797.878404][T27300] bond9 (unregistering): Released all slaves [ 797.955247][T27307] gre0 speed is unknown, defaulting to 1000 [ 798.236004][T27329] netlink: 'syz.2.5580': attribute type 1 has an invalid length. [ 798.412803][T27307] lo speed is unknown, defaulting to 1000 [ 798.448853][T27307] lo speed is unknown, defaulting to 1000 [ 798.458300][T27331] netlink: 'syz.2.5581': attribute type 13 has an invalid length. [ 798.467085][T27331] netlink: 'syz.2.5581': attribute type 17 has an invalid length. [ 798.517034][T27331] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 798.601097][T27333] gre0 speed is unknown, defaulting to 1000 [ 799.144697][T27348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5585'. [ 799.179713][T27333] lo speed is unknown, defaulting to 1000 [ 799.288856][T27333] lo speed is unknown, defaulting to 1000 [ 799.619344][T27367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5592'. [ 799.651441][T27365] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5591'. [ 799.681984][T27365] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5591'. [ 799.742930][T27376] netlink: 'syz.1.5594': attribute type 6 has an invalid length. [ 799.980560][T27390] FAULT_INJECTION: forcing a failure. [ 799.980560][T27390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.999420][T27390] CPU: 0 UID: 0 PID: 27390 Comm: syz.1.5599 Not tainted syzkaller #0 PREEMPT(full) [ 799.999446][T27390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 799.999457][T27390] Call Trace: [ 799.999465][T27390] [ 799.999473][T27390] dump_stack_lvl+0x189/0x250 [ 799.999496][T27390] ? __pfx____ratelimit+0x10/0x10 [ 799.999518][T27390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 799.999537][T27390] ? __pfx__printk+0x10/0x10 [ 799.999572][T27390] should_fail_ex+0x414/0x560 [ 799.999597][T27390] _copy_to_user+0x31/0xb0 [ 799.999622][T27390] simple_read_from_buffer+0xe1/0x170 [ 799.999651][T27390] proc_fail_nth_read+0x1b3/0x220 [ 799.999677][T27390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 799.999702][T27390] ? rw_verify_area+0x2a6/0x4d0 [ 799.999721][T27390] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 799.999744][T27390] vfs_read+0x200/0xa30 [ 799.999763][T27390] ? fdget_pos+0x247/0x320 [ 799.999783][T27390] ? __pfx___mutex_lock+0x10/0x10 [ 799.999811][T27390] ? __pfx_vfs_read+0x10/0x10 [ 799.999833][T27390] ? __fget_files+0x2a/0x420 [ 799.999854][T27390] ? __fget_files+0x3a0/0x420 [ 799.999868][T27390] ? __fget_files+0x2a/0x420 [ 799.999894][T27390] ksys_read+0x145/0x250 [ 799.999917][T27390] ? __pfx_ksys_read+0x10/0x10 [ 799.999941][T27390] ? do_syscall_64+0xbe/0xf80 [ 799.999967][T27390] do_syscall_64+0xfa/0xf80 [ 799.999989][T27390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.000006][T27390] ? clear_bhb_loop+0x60/0xb0 [ 800.000027][T27390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.000044][T27390] RIP: 0033:0x7feb94d8e15c [ 800.000060][T27390] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 800.000075][T27390] RSP: 002b:00007feb95b71030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 800.000094][T27390] RAX: ffffffffffffffda RBX: 00007feb94fe5fa0 RCX: 00007feb94d8e15c [ 800.000107][T27390] RDX: 000000000000000f RSI: 00007feb95b710a0 RDI: 0000000000000006 [ 800.000117][T27390] RBP: 00007feb95b71090 R08: 0000000000000000 R09: 0000000000000000 [ 800.000128][T27390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.000138][T27390] R13: 00007feb94fe6038 R14: 00007feb94fe5fa0 R15: 00007ffe79a73098 [ 800.000170][T27390] [ 800.020454][T27389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5598'. [ 800.239492][T27392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5600'. [ 800.249546][T27400] netlink: 'syz.3.5601': attribute type 1 has an invalid length. [ 800.355180][T27389] 8021q: adding VLAN 0 to HW filter on device bond9 [ 800.488037][T27402] bond9 (unregistering): Released all slaves [ 800.529832][T27404] bond7: (slave gretap2): making interface the new active one [ 800.542909][T27404] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 800.564292][T27414] tipc: Enabled bearer , priority 0 [ 800.635049][T27416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5605'. [ 800.644963][T27417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5605'. [ 800.717552][T27423] tipc: Enabling of bearer rejected, already enabled [ 800.743589][T27427] netlink: 'syz.3.5606': attribute type 2 has an invalid length. [ 800.749979][T27422] tipc: Enabled bearer , priority 0 [ 800.782161][T27427] : entered promiscuous mode [ 800.790625][T27422] syzkaller0: entered promiscuous mode [ 800.799736][T27422] syzkaller0: entered allmulticast mode [ 800.802520][T27427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5606'. [ 800.854230][T27422] tipc: Resetting bearer [ 800.863594][T27420] tipc: Resetting bearer [ 800.904020][T27420] tipc: Disabling bearer [ 801.046100][T27434] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5612'. [ 801.159501][T27405] tipc: Resetting bearer [ 801.198040][T27405] tipc: Disabling bearer [ 801.210715][T27442] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5614'. [ 801.868384][T27471] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 801.961316][T27471] bond0: Removing last arp target with arp_interval on [ 801.981340][T27481] sctp: [Deprecated]: syz.0.5624 (pid 27481) Use of struct sctp_assoc_value in delayed_ack socket option. [ 801.981340][T27481] Use struct sctp_sack_info instead [ 802.315113][T27502] netlink: 'syz.4.5630': attribute type 9 has an invalid length. [ 802.580302][T27516] erspan0: entered promiscuous mode [ 802.749128][T27516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.767105][T27516] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 802.801663][T27522] ip6tnl0: Caught tx_queue_len zero misconfig [ 803.070049][T27537] gre0 speed is unknown, defaulting to 1000 [ 803.164027][T27546] syzkaller1: entered promiscuous mode [ 803.171362][T27546] syzkaller1: entered allmulticast mode [ 803.315091][T27551] netlink: 'syz.3.5645': attribute type 5 has an invalid length. [ 803.633850][T27537] lo speed is unknown, defaulting to 1000 [ 803.659702][T27537] lo speed is unknown, defaulting to 1000 [ 804.079070][T27572] bond0: (slave wlan1): Releasing backup interface [ 804.100476][T27572] bond0: Destroying bond [ 804.313689][T27572] bond0 (unregistering): Released all slaves [ 804.901859][T27606] netlink: 'syz.1.5662': attribute type 1 has an invalid length. [ 805.019329][T27606] bond9: entered promiscuous mode [ 805.024785][T27606] 8021q: adding VLAN 0 to HW filter on device bond9 [ 805.055940][T27612] __nla_validate_parse: 2 callbacks suppressed [ 805.055959][T27612] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5663'. [ 805.255275][T27627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5666'. [ 805.278974][T27627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5666'. [ 805.421850][T27634] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 805.771096][T27653] xt_connbytes: Forcing CT accounting to be enabled [ 805.818679][T27660] batadv1: entered promiscuous mode [ 805.948647][T27664] netlink: 83 bytes leftover after parsing attributes in process `syz.0.5676'. [ 805.954568][T27653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5674'. [ 806.058331][T27653] gre0 speed is unknown, defaulting to 1000 [ 806.139292][T27678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5678'. [ 806.379470][T27623] gre0 speed is unknown, defaulting to 1000 [ 806.385752][T27653] lo speed is unknown, defaulting to 1000 [ 806.396054][T27653] lo speed is unknown, defaulting to 1000 [ 806.626392][T27623] lo speed is unknown, defaulting to 1000 [ 806.633701][T27623] lo speed is unknown, defaulting to 1000 [ 806.815690][T27689] syzkaller0: refused to change device tx_queue_len [ 806.969753][T27702] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5686'. [ 806.981083][T27702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5686'. [ 807.427560][T27710] syzkaller1: entered promiscuous mode [ 807.448444][T27710] syzkaller1: entered allmulticast mode [ 807.767639][T27725] netlink: 'syz.1.5693': attribute type 1 has an invalid length. [ 807.825709][T27731] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5693'. [ 807.865150][T27725] 8021q: adding VLAN 0 to HW filter on device bond10 [ 807.881209][T27735] xt_l2tp: unknown flags: 51 [ 807.889027][T27736] bond10: (slave ip6gretap1): making interface the new active one [ 807.899451][T27736] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 808.071548][T27743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 808.228541][T27758] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5703'. [ 808.667002][T27785] tipc: Enabled bearer , priority 0 [ 808.676303][T27787] tipc: Enabling of bearer rejected, already enabled [ 808.687095][T27785] syzkaller0: entered promiscuous mode [ 808.692699][T27785] syzkaller0: entered allmulticast mode [ 808.732098][T27787] tipc: Resetting bearer [ 808.786125][T27784] tipc: Resetting bearer [ 808.803750][T27784] tipc: Disabling bearer [ 810.106769][T27843] __nla_validate_parse: 8 callbacks suppressed [ 810.106789][T27843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5728'. [ 810.329298][T27850] geneve2: entered promiscuous mode [ 810.339470][T27850] geneve2: entered allmulticast mode [ 810.349388][T26498] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 810.359938][T26498] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 810.371193][T26498] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 810.380016][T26498] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 810.489542][T27868] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5735'. [ 810.500097][T27868] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 810.545209][T27871] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 810.581905][T27871] vlan3: entered promiscuous mode [ 810.591514][T27871] hsr_slave_1: entered promiscuous mode [ 810.603846][T27871] vlan3: entered allmulticast mode [ 810.623948][T27871] hsr_slave_1: entered allmulticast mode [ 810.640046][T27875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5736'. [ 810.654245][T27878] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 810.677179][T27877] gre0 speed is unknown, defaulting to 1000 [ 810.689421][T27871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5737'. [ 810.944259][T27886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5739'. [ 811.118659][T27891] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 811.124066][T27895] openvswitch: netlink: IPv4 tunnel dst address is zero [ 811.139854][T27891] bond8 (unregistering): Released all slaves [ 811.167642][T27877] lo speed is unknown, defaulting to 1000 [ 811.175928][T27877] lo speed is unknown, defaulting to 1000 [ 811.340076][T27901] netlink: 'syz.2.5746': attribute type 5 has an invalid length. [ 811.348212][T27901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5746'. [ 811.404845][T27907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5744'. [ 812.254042][T27953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5759'. [ 812.518683][T27979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5767'. [ 812.556276][T27982] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5766'. [ 812.732349][T27993] nbd: socks must be embedded in a SOCK_ITEM attr [ 812.835277][T27997] gre0 speed is unknown, defaulting to 1000 [ 812.887897][T28000] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 [ 813.192315][T27997] lo speed is unknown, defaulting to 1000 [ 813.220484][T27997] lo speed is unknown, defaulting to 1000 [ 813.395154][T28017] gre0 speed is unknown, defaulting to 1000 [ 814.036474][T28017] lo speed is unknown, defaulting to 1000 [ 814.054178][T28017] lo speed is unknown, defaulting to 1000 [ 814.670348][T28078] netlink: 'syz.0.5793': attribute type 1 has an invalid length. [ 814.691938][T28078] netlink: 'syz.0.5793': attribute type 1 has an invalid length. [ 814.850828][T28086] netlink: 'syz.3.5796': attribute type 1 has an invalid length. [ 814.917263][T28099] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 815.077357][T28109] gre0 speed is unknown, defaulting to 1000 [ 815.188890][T28116] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 815.254377][T28116] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 815.338969][T28116] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 815.386813][T28109] lo speed is unknown, defaulting to 1000 [ 815.394694][T28109] lo speed is unknown, defaulting to 1000 [ 815.427769][T28116] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 815.473598][T28125] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 815.533437][T26501] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 815.598248][T26503] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 815.609231][T28125] batadv_slave_0: entered promiscuous mode [ 815.617598][T28125] __nla_validate_parse: 11 callbacks suppressed [ 815.617616][T28125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5807'. [ 815.623627][T28129] geneve3: entered promiscuous mode [ 815.629338][T28125] netlink: 428 bytes leftover after parsing attributes in process `syz.2.5807'. [ 815.661617][T26501] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 815.676155][T26501] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 815.684650][T26501] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 815.719233][T26501] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 815.735533][T28125] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5807'. [ 815.770440][T26501] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 815.856823][T26501] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 815.880529][T28131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5809'. [ 816.087101][T28142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5811'. [ 816.411631][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5813'. [ 816.882750][T28193] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5823'. [ 817.330858][T28226] netlink: 'syz.1.5829': attribute type 29 has an invalid length. [ 817.353891][T28226] netlink: 'syz.1.5829': attribute type 29 has an invalid length. [ 817.466887][T28238] IPVS: set_ctl: invalid protocol: 41 255.255.255.255:20002 [ 817.519723][T28242] netlink: 'syz.1.5832': attribute type 7 has an invalid length. [ 817.546262][T28242] netlink: 'syz.1.5832': attribute type 8 has an invalid length. [ 817.644358][T28246] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5833'. [ 817.726557][T28255] tipc: New replicast peer: 255.255.255.255 [ 817.733713][T28255] tipc: Enabled bearer , priority 10 [ 818.045879][T28275] netlink: 'syz.2.5842': attribute type 2 has an invalid length. [ 818.059235][T28276] syzkaller1: entered promiscuous mode [ 818.064819][T28275] netlink: 'syz.2.5842': attribute type 1 has an invalid length. [ 818.073368][T28276] syzkaller1: entered allmulticast mode [ 818.126864][T28278] syzkaller1: entered promiscuous mode [ 818.132367][T28278] syzkaller1: entered allmulticast mode [ 818.143670][T28280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5843'. [ 818.154001][T28280] nbd: must specify a size in bytes for the device [ 818.165803][T28280] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5843'. [ 818.337397][T28285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.350103][T28285] 8021q: adding VLAN 0 to HW filter on device ` [ 818.376013][T28285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 818.540592][T28311] netlink: 'syz.0.5852': attribute type 10 has an invalid length. [ 818.540785][T28313] netlink: 'syz.0.5852': attribute type 10 has an invalid length. [ 818.568280][T28309] vlan4: entered promiscuous mode [ 818.582013][T28309] `: entered promiscuous mode [ 818.592635][T28309] team_slave_0: entered promiscuous mode [ 818.600037][T28309] team_slave_1: entered promiscuous mode [ 818.729310][ T9340] tipc: Node number set to 282213703 [ 818.876359][T28330] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 818.918966][T28333] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 818.926231][T19318] bridge_slave_1: left allmulticast mode [ 818.937724][T19318] bridge_slave_1: left promiscuous mode [ 818.958377][T19318] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.036248][T19318] bridge_slave_0: left allmulticast mode [ 819.081285][T19318] bridge_slave_0: left promiscuous mode [ 819.098571][T19318] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.964524][T19318] bond12 (unregistering): (slave gretap3): Releasing active interface [ 819.974410][T19318] gretap3 (unregistering): left promiscuous mode [ 819.980857][T19318] gretap3 (unregistering): left allmulticast mode [ 820.002877][T19318] tipc: Disabling bearer [ 820.072670][T19318] team0: Port device geneve0 removed [ 820.384394][T19318] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.394469][T19318] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.404365][T19318] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 820.426002][T19318] bond0 (unregistering): Released all slaves [ 820.444540][T19318] bond1 (unregistering): Released all slaves [ 820.567686][T19318] bond2 (unregistering): Released all slaves [ 820.580746][T19318] bond3 (unregistering): Released all slaves [ 820.691743][T19318] bond4 (unregistering): Released all slaves [ 820.795597][T19318] bond5 (unregistering): Released all slaves [ 820.903109][T19318] bond6 (unregistering): Released all slaves [ 820.915808][T19318] bond7 (unregistering): Released all slaves [ 820.928228][T19318] bond8 (unregistering): Released all slaves [ 820.942439][T19318] bond9 (unregistering): (slave veth7): Releasing backup interface [ 820.952121][T19318] bond9 (unregistering): Released all slaves [ 821.062038][T19318] bond10 (unregistering): Released all slaves [ 821.162621][T19318] bond11 (unregistering): Released all slaves [ 821.274599][T19318] bond12 (unregistering): Released all slaves [ 821.379308][T19318] bond13 (unregistering): Released all slaves [ 821.408038][T28358] IPv6: sit4: Disabled Multicast RS [ 821.559067][T28382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 821.762152][T28398] __nla_validate_parse: 6 callbacks suppressed [ 821.762171][T28398] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5874'. [ 821.777430][T28389] gre0 speed is unknown, defaulting to 1000 [ 822.155499][T28420] netlink: 'syz.1.5882': attribute type 2 has an invalid length. [ 822.228722][T28417] iwpm_parse_nlmsg: Invalid attribute (msg type Query Mapping response ret = -34) [ 822.281754][T28389] lo speed is unknown, defaulting to 1000 [ 822.285612][T28422] gre0 speed is unknown, defaulting to 1000 [ 822.301504][T28389] lo speed is unknown, defaulting to 1000 [ 822.332156][T28424] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 822.398829][T28426] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5884'. [ 822.599433][T28438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5886'. [ 822.694088][T28422] lo speed is unknown, defaulting to 1000 [ 822.728374][T28422] lo speed is unknown, defaulting to 1000 [ 823.047787][T19318] : left promiscuous mode [ 823.146048][T19318] tipc: Disabling bearer [ 823.164947][T19318] tipc: Disabling bearer [ 823.183869][T19318] tipc: Left network mode [ 823.262930][T17171] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 823.272821][T17171] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 823.282158][T17171] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 823.291618][T17171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 823.300430][T17171] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 823.343830][T28464] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.379711][T28464] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 823.406836][T28464] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 823.530963][T28480] sctp: [Deprecated]: syz.4.5896 (pid 28480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 823.530963][T28480] Use struct sctp_sack_info instead [ 823.548214][T28474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5895'. [ 823.663233][T28464] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.674049][T28464] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 823.680869][T28487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.693717][T28464] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 823.707542][T28487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.740193][T28462] gre0 speed is unknown, defaulting to 1000 [ 823.762980][T28464] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.803139][T28464] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 823.845449][T28464] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 823.964911][T28464] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.967957][T28491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5900'. [ 823.984036][T28491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5900'. [ 823.993124][T28491] netlink: 'syz.1.5900': attribute type 14 has an invalid length. [ 823.995635][T28464] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 824.011411][T28464] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 824.035096][T28491] netlink: 'syz.1.5900': attribute type 12 has an invalid length. [ 824.058580][T19318] hsr_slave_0: left promiscuous mode [ 824.064925][T19318] hsr_slave_1: left promiscuous mode [ 824.073579][T19318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.086812][T19318] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.106685][T19318] veth1_vlan: left allmulticast mode [ 824.344198][T28499] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5902'. [ 824.635459][T19318] team0 (unregistering): Port device team_slave_1 removed [ 824.678726][T19318] team0 (unregistering): Port device team_slave_0 removed [ 824.888179][T19318] batadv0 (unregistering): left allmulticast mode [ 825.024427][T28462] lo speed is unknown, defaulting to 1000 [ 825.032124][T28462] lo speed is unknown, defaulting to 1000 [ 825.162289][T26498] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.171337][T26498] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 825.181173][T26498] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 825.190687][T26498] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.202696][T26498] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 825.211534][T26498] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 825.271437][T17883] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.279902][T17883] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 825.288995][T17883] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 825.340315][T17171] Bluetooth: hci1: command tx timeout [ 825.364720][T17883] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.376253][T17883] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 825.384926][T17883] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 825.669957][T28531] veth1_to_bridge: Caught tx_queue_len zero misconfig [ 825.738502][T28462] chnl_net:caif_netlink_parms(): no params data found [ 825.770820][T28541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5909'. [ 825.819429][T28539] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5912'. [ 825.923398][T28551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5914'. [ 825.932615][T28551] netlink: 'syz.4.5914': attribute type 14 has an invalid length. [ 825.940648][T28551] netlink: 'syz.4.5914': attribute type 12 has an invalid length. [ 826.019169][T28462] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.050695][T28462] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.068377][T28462] bridge_slave_0: entered allmulticast mode [ 826.102711][T28462] bridge_slave_0: entered promiscuous mode [ 826.112151][T28462] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.124068][T28462] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.131751][T28462] bridge_slave_1: entered allmulticast mode [ 826.142408][T28462] bridge_slave_1: entered promiscuous mode [ 826.167033][T28562] gre0 speed is unknown, defaulting to 1000 [ 826.319634][T28462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.359620][T28462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.369362][T28573] netlink: 'syz.4.5922': attribute type 1 has an invalid length. [ 826.416496][T28575] netlink: 'syz.0.5923': attribute type 1 has an invalid length. [ 826.440645][T28577] bond0 (unregistering): Released all slaves [ 826.478181][T28573] bond10: entered promiscuous mode [ 826.483596][T28573] 8021q: adding VLAN 0 to HW filter on device bond10 [ 826.491970][T28562] lo speed is unknown, defaulting to 1000 [ 826.569278][T28562] lo speed is unknown, defaulting to 1000 [ 826.577644][T28462] team0: Port device team_slave_0 added [ 826.608489][T28462] team0: Port device team_slave_1 added [ 826.820570][T28462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.827864][T28462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.831236][T28599] __nla_validate_parse: 6 callbacks suppressed [ 826.831252][T28599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5929'. [ 826.853986][T28462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.883735][T28599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5929'. [ 826.947347][T28462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.962737][T28462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.011755][T28462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.235047][T28616] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 827.282274][T19318] IPVS: stop unused estimator thread 0... [ 827.300124][T28462] hsr_slave_0: entered promiscuous mode [ 827.327689][T28462] hsr_slave_1: entered promiscuous mode [ 827.348785][T28462] debugfs: 'hsr0' already exists in 'hsr' [ 827.354546][T28462] Cannot create hsr debugfs directory [ 827.426786][T17171] Bluetooth: hci1: command 0x041b tx timeout [ 827.607632][T28625] netlink: 'syz.4.5937': attribute type 10 has an invalid length. [ 827.625505][T28625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5937'. [ 827.668907][T28625] `: Port device geneve0 added [ 827.719882][T28629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5938'. [ 827.831282][ T146] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 827.839672][ T146] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 827.885911][ T146] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 827.924811][ T146] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 827.991975][T28633] gre0 speed is unknown, defaulting to 1000 [ 828.344601][T28658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5946'. [ 828.387745][T28633] lo speed is unknown, defaulting to 1000 [ 828.404849][T28633] lo speed is unknown, defaulting to 1000 [ 828.460696][T28662] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5947'. [ 828.565737][T28670] IPVS: set_ctl: invalid protocol: 216 255.255.255.255:20003 [ 828.606495][T28670] x_tables: duplicate underflow at hook 1 [ 828.748450][T28668] bond10: up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 828.768510][T28668] bond10: down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 829.273877][T28686] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5955'. [ 829.303338][T28462] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 829.339690][T28462] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 829.344719][T28688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5956'. [ 829.362602][T28462] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 829.378344][T28462] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 829.387677][T28688] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5956'. [ 829.401482][T28688] netlink: 'syz.3.5956': attribute type 2 has an invalid length. [ 829.409520][T28688] netlink: 'syz.3.5956': attribute type 9 has an invalid length. [ 829.417424][T28688] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5956'. [ 829.495532][ T52] Bluetooth: hci1: command 0x041b tx timeout [ 829.528036][T28462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.551883][T28462] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.570865][T19318] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.578108][T19318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.611958][T17883] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.619229][T17883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.114609][T28462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.353602][T28744] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 830.365670][T28744] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 830.411783][T28462] veth0_vlan: entered promiscuous mode [ 830.424816][T28462] veth1_vlan: entered promiscuous mode [ 830.463683][T28744] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 830.476794][T28744] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 830.512053][T28462] veth0_macvtap: entered promiscuous mode [ 830.523057][T28462] veth1_macvtap: entered promiscuous mode [ 830.565037][T28744] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 830.577565][T28744] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 830.601777][T28462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.624116][T28462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.667654][T28744] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 830.678614][T28744] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 830.702528][T26504] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.711994][T26504] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.722564][T26504] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.731657][T26504] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.851851][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 830.863472][ T13] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 830.892231][T19318] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 830.901192][T19318] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 830.911446][T19318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.922619][T19318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.945097][T26497] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 830.957361][T26497] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 830.976807][T26497] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 830.985148][T26497] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 831.030703][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.039962][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.369566][T28782] netlink: 'syz.2.5978': attribute type 10 has an invalid length. [ 831.427329][T28782] team0: Failed to send options change via netlink (err -105) [ 831.442738][T28782] team0: Port device geneve0 added [ 831.576001][ T52] Bluetooth: hci1: command 0x041b tx timeout [ 832.009795][T28816] tipc: Started in network mode [ 832.031449][T28816] tipc: Node identity 6a25a3dbfcaf, cluster identity 4711 [ 832.046175][T28816] tipc: Enabled bearer , priority 0 [ 832.117026][T28816] tipc: Disabling bearer [ 832.420240][T17171] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 832.429467][T17171] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 832.443598][T17171] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 832.457006][T17171] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 832.467883][T17171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 832.499926][T28832] gre0 speed is unknown, defaulting to 1000 [ 832.600787][T28839] netlink: 'syz.4.5992': attribute type 4 has an invalid length. [ 832.643601][T28838] bridge7: entered promiscuous mode [ 832.648401][T28839] netlink: 'syz.4.5992': attribute type 1 has an invalid length. [ 832.656941][T28839] __nla_validate_parse: 4 callbacks suppressed [ 832.656956][T28839] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5992'. [ 832.692900][T28838] bridge7: entered allmulticast mode [ 832.820018][T28849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5994'. [ 832.851922][T28832] lo speed is unknown, defaulting to 1000 [ 832.859975][T28832] lo speed is unknown, defaulting to 1000 [ 832.917006][T28833] gre0 speed is unknown, defaulting to 1000 [ 832.943960][T28853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.176056][T28861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5997'. [ 833.193753][T28861] mac80211_hwsim hwsim62 wlan1: entered promiscuous mode [ 833.201484][T28861] macvtap1: entered promiscuous mode [ 833.317386][T28865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5997'. [ 833.411838][T28833] lo speed is unknown, defaulting to 1000 [ 833.430324][T28833] lo speed is unknown, defaulting to 1000 [ 833.643464][T28869] tipc: Enabled bearer , priority 0 [ 833.653742][T28869] tipc: Resetting bearer [ 833.661837][T17171] Bluetooth: hci1: command 0x041b tx timeout [ 833.783247][T28867] tipc: Disabling bearer [ 833.966515][T28896] netlink: 'syz.4.6005': attribute type 10 has an invalid length. [ 833.966915][T28898] netlink: 'syz.2.6006': attribute type 4 has an invalid length. [ 833.990045][T28896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6005'. [ 834.023107][T28898] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 834.094469][T28901] gre0 speed is unknown, defaulting to 1000 [ 834.289122][T28833] chnl_net:caif_netlink_parms(): no params data found [ 834.400754][T28901] lo speed is unknown, defaulting to 1000 [ 834.425404][T28901] lo speed is unknown, defaulting to 1000 [ 834.508837][T28833] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.518075][T28833] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.525494][T28833] bridge_slave_0: entered allmulticast mode [ 834.533367][T28833] bridge_slave_0: entered promiscuous mode [ 834.539544][T17171] Bluetooth: hci4: command tx timeout [ 834.581547][T28833] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.593943][T28833] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.611017][T28833] bridge_slave_1: entered allmulticast mode [ 834.619361][T28833] bridge_slave_1: entered promiscuous mode [ 834.747697][T28833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 834.816413][T28833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.974220][T28833] team0: Port device team_slave_0 added [ 835.002051][T28833] team0: Port device team_slave_1 added [ 835.003011][T28933] netlink: 'syz.2.6012': attribute type 1 has an invalid length. [ 835.030946][T28933] netlink: 'syz.2.6012': attribute type 2 has an invalid length. [ 835.047727][T28933] netlink: 'syz.2.6012': attribute type 2 has an invalid length. [ 835.069949][T28933] netlink: 'syz.2.6012': attribute type 1 has an invalid length. [ 835.095394][T28933] netlink: 'syz.2.6012': attribute type 1 has an invalid length. [ 835.095995][T28833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.115781][T28933] netlink: 'syz.2.6012': attribute type 1 has an invalid length. [ 835.125586][T28833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.159900][T28933] netlink: 'syz.2.6012': attribute type 1 has an invalid length. [ 835.168477][T28833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.182469][T28833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.219497][T28833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.253751][T28833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.301731][T28936] syzkaller0: entered promiscuous mode [ 835.307627][T28936] syzkaller0: entered allmulticast mode [ 835.404491][T28936] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6013'. [ 835.446211][T28833] hsr_slave_0: entered promiscuous mode [ 835.455803][T28833] hsr_slave_1: entered promiscuous mode [ 835.466152][T28833] debugfs: 'hsr0' already exists in 'hsr' [ 835.471898][T28833] Cannot create hsr debugfs directory [ 835.488184][T28949] sit0: entered promiscuous mode [ 835.505110][T28949] sit0: entered allmulticast mode [ 835.750622][T28967] netlink: 'syz.4.6022': attribute type 29 has an invalid length. [ 835.783353][T28967] netlink: 'syz.4.6022': attribute type 29 has an invalid length. [ 835.848207][T28967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6022'. [ 835.902778][T28971] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6022'. [ 836.292744][T28982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6026'. [ 836.302651][T28984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6026'. [ 836.379981][T28833] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 836.475476][ T43] IPVS: starting estimator thread 0... [ 836.550452][T28980] gre0 speed is unknown, defaulting to 1000 [ 836.565772][T28989] IPVS: using max 35 ests per chain, 84000 per kthread [ 836.617825][T17171] Bluetooth: hci4: command tx timeout [ 836.899053][T28833] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 836.924044][T28980] lo speed is unknown, defaulting to 1000 [ 836.929190][T29002] bond0: Error: Cannot enslave bond to itself. [ 836.951469][T28980] lo speed is unknown, defaulting to 1000 [ 837.019051][T28833] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 837.246925][T28833] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 837.488926][T29030] gre0 speed is unknown, defaulting to 1000 [ 837.593476][T28833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 837.613682][T28833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 837.679213][T28833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 837.703346][T28833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 837.804914][T29030] lo speed is unknown, defaulting to 1000 [ 837.828462][T29030] lo speed is unknown, defaulting to 1000 [ 837.885871][T29048] __nla_validate_parse: 2 callbacks suppressed [ 837.885889][T29048] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6039'. [ 837.915773][T29048] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6039'. [ 838.103453][T28833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.158967][T28833] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.189187][T29059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6043'. [ 838.214514][T26497] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.221729][T26497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.278332][T29065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6044'. [ 838.288220][T26497] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.295412][T26497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.424859][T29059] netlink: set zone limit has 4 unknown bytes [ 838.621950][T29078] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6047'. [ 838.631250][T28833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 838.655838][T29078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6047'. [ 838.667158][T29078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6047'. [ 838.696303][T17171] Bluetooth: hci4: command tx timeout [ 838.716964][T29080] tipc: Enabled bearer , priority 0 [ 838.768251][T29080] syzkaller0: entered promiscuous mode [ 838.773757][T29080] syzkaller0: entered allmulticast mode [ 838.783003][T29080] tipc: Resetting bearer [ 838.798564][T29088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6050'. [ 838.823879][T29079] tipc: Resetting bearer [ 840.392878][T29079] tipc: Disabling bearer [ 840.404061][T29097] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 840.406741][T29098] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 840.421111][ T9339] tipc: Node number set to 3877869401 [ 840.550537][T29114] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6055'. [ 840.618832][T28833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 840.693246][T29123] netlink: 'syz.2.6057': attribute type 3 has an invalid length. [ 840.741282][T29126] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 840.768996][T29123] netlink: 'syz.2.6057': attribute type 3 has an invalid length. [ 840.778668][T17171] Bluetooth: hci4: command tx timeout [ 840.785736][T29128] tipc: Enabled bearer , priority 0 [ 840.796146][T29128] syzkaller0: entered promiscuous mode [ 840.801643][T29128] syzkaller0: entered allmulticast mode [ 840.811417][T28833] veth0_vlan: entered promiscuous mode [ 840.824759][T29123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6057'. [ 840.837706][T28833] veth1_vlan: entered promiscuous mode [ 840.897033][T29128] tipc: Resetting bearer [ 840.922252][T29125] tipc: Resetting bearer [ 840.954511][T29125] tipc: Disabling bearer [ 840.974203][T29135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 841.061450][T28833] veth0_macvtap: entered promiscuous mode [ 841.104101][T28833] veth1_macvtap: entered promiscuous mode [ 841.149581][T28833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.164984][T28833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.184263][T29147] netlink: 'syz.2.6066': attribute type 33 has an invalid length. [ 841.221550][ T6415] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.251869][ T6415] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.285614][T26495] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.431090][T29147] `: renamed from team0 (while UP) [ 841.528312][T29161] FAULT_INJECTION: forcing a failure. [ 841.528312][T29161] name failslab, interval 1, probability 0, space 0, times 0 [ 841.558099][T29161] CPU: 1 UID: 0 PID: 29161 Comm: syz.3.6069 Not tainted syzkaller #0 PREEMPT(full) [ 841.558126][T29161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 841.558137][T29161] Call Trace: [ 841.558145][T29161] [ 841.558153][T29161] dump_stack_lvl+0x189/0x250 [ 841.558179][T29161] ? __pfx____ratelimit+0x10/0x10 [ 841.558200][T29161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 841.558220][T29161] ? __pfx__printk+0x10/0x10 [ 841.558245][T29161] ? __pfx___might_resched+0x10/0x10 [ 841.558263][T29161] ? fs_reclaim_acquire+0x7d/0x100 [ 841.558290][T29161] should_fail_ex+0x414/0x560 [ 841.558315][T29161] should_failslab+0xa8/0x100 [ 841.558340][T29161] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 841.558362][T29161] ? alloc_inode+0xb8/0x1b0 [ 841.558391][T29161] alloc_inode+0xb8/0x1b0 [ 841.558415][T29161] path_from_stashed+0x200/0x5c0 [ 841.558434][T29161] ? _raw_spin_unlock+0x28/0x50 [ 841.558452][T29161] ? netns_get+0x8b/0xb0 [ 841.558478][T29161] proc_ns_get_link+0xec/0x210 [ 841.558501][T29161] ? __pfx_proc_ns_get_link+0x10/0x10 [ 841.558527][T29161] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 841.558550][T29161] ? __pfx_proc_ns_get_link+0x10/0x10 [ 841.558571][T29161] pick_link+0x732/0xfa0 [ 841.558599][T29161] step_into_slowpath+0x53b/0x7d0 [ 841.558624][T29161] ? __pfx_step_into_slowpath+0x10/0x10 [ 841.558652][T29161] path_openat+0x27a4/0x3dd0 [ 841.558708][T29161] ? __pfx_path_openat+0x10/0x10 [ 841.558753][T29161] do_filp_open+0x1fa/0x410 [ 841.558783][T29161] ? __pfx_do_filp_open+0x10/0x10 [ 841.558826][T29161] ? _raw_spin_unlock+0x28/0x50 [ 841.558844][T29161] ? alloc_fd+0x64c/0x6c0 [ 841.558879][T29161] do_sys_openat2+0x121/0x200 [ 841.558900][T29161] ? __pfx_do_sys_openat2+0x10/0x10 [ 841.558922][T29161] ? ksys_write+0x22a/0x250 [ 841.558945][T29161] ? __pfx_ksys_write+0x10/0x10 [ 841.558968][T29161] __x64_sys_openat+0x138/0x170 [ 841.558991][T29161] do_syscall_64+0xfa/0xf80 [ 841.559011][T29161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.559027][T29161] ? clear_bhb_loop+0x60/0xb0 [ 841.559046][T29161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.559061][T29161] RIP: 0033:0x7f9cd3f8df90 [ 841.559077][T29161] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 841.559093][T29161] RSP: 002b:00007f9cd4e78f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 841.559113][T29161] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9cd3f8df90 [ 841.559125][T29161] RDX: 0000000000000000 RSI: 00007f9cd401407e RDI: 00000000ffffff9c [ 841.559137][T29161] RBP: 00007f9cd401407e R08: 0000000000000000 R09: 0000000000000000 [ 841.559148][T29161] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 841.559159][T29161] R13: 00007f9cd41e6128 R14: 00007f9cd41e6090 R15: 00007ffd14a1ea98 [ 841.559195][T29161] [ 841.991580][T26495] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.130607][T26501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.166322][T26501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.251281][T26495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.259920][T26495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.438437][T29181] x_tables: duplicate underflow at hook 3 [ 842.705652][T29191] bridge_slave_1: left allmulticast mode [ 842.725471][T29191] bridge_slave_1: left promiscuous mode [ 842.731283][T29191] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.783111][T29191] ¾x9ÿ: left allmulticast mode [ 842.798217][T29191] ¾x9ÿ: left promiscuous mode [ 842.813184][T29191] bridge0: port 1(1¾x9ÿ) entered disabled state [ 843.044142][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 843.056968][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 843.069897][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 843.078813][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 843.093261][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 843.147171][ T146] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 843.159906][ T146] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 843.218822][T29205] gre0 speed is unknown, defaulting to 1000 [ 843.260047][T29214] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 843.309649][ T146] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 843.328886][ T146] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 843.362521][T29214] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 843.372724][T29214] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 843.381441][T29214] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 843.390372][T29214] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 843.407860][ T146] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 843.425647][ T146] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 843.456874][T29205] lo speed is unknown, defaulting to 1000 [ 843.475132][T29205] lo speed is unknown, defaulting to 1000 [ 843.543174][ T146] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 843.556551][ T146] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 843.922288][T29233] SET target dimension over the limit! [ 843.979542][T29232] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 844.213579][T29222] netlink: 'syz.4.6085': attribute type 16 has an invalid length. [ 844.238234][T29222] netlink: 'syz.4.6085': attribute type 3 has an invalid length. [ 844.268078][T29222] __nla_validate_parse: 5 callbacks suppressed [ 844.268102][T29222] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.6085'. [ 844.289083][ T146] bond10 (unregistering): (slave ip6gretap1): Releasing active interface [ 844.601151][ T146] bond1 (unregistering): (slave gretap1): Releasing active interface [ 844.719833][ T146] bond5 (unregistering): (slave geneve4): Releasing active interface [ 845.177630][ T52] Bluetooth: hci2: command tx timeout [ 845.268688][ T146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.278340][ T146] bond0 (unregistering): Released all slaves [ 845.389652][ T146] bond1 (unregistering): Released all slaves [ 845.402457][ T146] bond2 (unregistering): Released all slaves [ 845.513283][ T146] bond3 (unregistering): Released all slaves [ 845.626490][ T146] bond4 (unregistering): Released all slaves [ 845.734348][ T146] bond5 (unregistering): Released all slaves [ 845.747850][ T146] bond6 (unregistering): Released all slaves [ 845.860316][ T146] bond7 (unregistering): Released all slaves [ 845.872699][ T146] bond8 (unregistering): Released all slaves [ 845.986994][ T146] bond9 (unregistering): Released all slaves [ 846.101027][ T146] bond10 (unregistering): Released all slaves [ 846.231700][ T146] : left promiscuous mode [ 846.282104][T29205] chnl_net:caif_netlink_parms(): no params data found [ 846.323157][ T146] tipc: Left network mode [ 846.397625][T29251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6092'. [ 846.408221][T29250] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6093'. [ 846.420477][T29250] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6093'. [ 846.485164][T29250] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6093'. [ 846.620703][T29257] netlink: 'syz.3.6095': attribute type 1 has an invalid length. [ 846.642049][T29205] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.662187][T29205] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.669724][T29205] bridge_slave_0: entered allmulticast mode [ 846.678720][T29205] bridge_slave_0: entered promiscuous mode [ 846.735501][T29257] bond8: entered promiscuous mode [ 846.740928][T29257] 8021q: adding VLAN 0 to HW filter on device bond8 [ 846.777043][T29205] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.816209][T29205] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.823512][T29205] bridge_slave_1: entered allmulticast mode [ 846.867736][T29205] bridge_slave_1: entered promiscuous mode [ 846.901671][T29262] bond8: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 846.917742][T29262] bond8: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 846.928809][T29262] bond8: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 847.153817][T29286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6100'. [ 847.223239][T29205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.258626][ T52] Bluetooth: hci2: command tx timeout [ 847.316603][T29205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.338188][T29299] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6105'. [ 847.467717][T29306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6106'. [ 847.486091][T29306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6106'. [ 847.489066][T29205] team0: Port device team_slave_0 added [ 847.598717][T29205] team0: Port device team_slave_1 added [ 847.813409][T29338] netlink: 19 bytes leftover after parsing attributes in process `syz.0.6109'. [ 847.891561][T29205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.920279][T29205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.980260][T29205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.023168][T29205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.048224][T29205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.098795][T29205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.162591][ T146] hsr_slave_0: left promiscuous mode [ 848.183467][ T146] hsr_slave_1: left promiscuous mode [ 848.201088][ T146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.210249][T29356] FAULT_INJECTION: forcing a failure. [ 848.210249][T29356] name failslab, interval 1, probability 0, space 0, times 0 [ 848.250947][T29356] CPU: 0 UID: 0 PID: 29356 Comm: syz.0.6114 Not tainted syzkaller #0 PREEMPT(full) [ 848.250972][T29356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 848.250983][T29356] Call Trace: [ 848.250990][T29356] [ 848.250998][T29356] dump_stack_lvl+0x189/0x250 [ 848.251022][T29356] ? __pfx____ratelimit+0x10/0x10 [ 848.251044][T29356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 848.251062][T29356] ? __pfx__printk+0x10/0x10 [ 848.251089][T29356] ? __pfx___might_resched+0x10/0x10 [ 848.251120][T29356] should_fail_ex+0x414/0x560 [ 848.251144][T29356] should_failslab+0xa8/0x100 [ 848.251169][T29356] __kmalloc_noprof+0xcb/0x800 [ 848.251189][T29356] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 848.251214][T29356] tomoyo_realpath_from_path+0xe3/0x5d0 [ 848.251246][T29356] tomoyo_check_open_permission+0x1c1/0x3b0 [ 848.251271][T29356] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 848.251293][T29356] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 848.251363][T29356] security_file_open+0xb1/0x270 [ 848.251385][T29356] do_dentry_open+0x34e/0x1420 [ 848.251416][T29356] vfs_open+0x3b/0x340 [ 848.251430][T29356] ? path_openat+0x33f3/0x3dd0 [ 848.251451][T29356] path_openat+0x340e/0x3dd0 [ 848.251507][T29356] ? __pfx_path_openat+0x10/0x10 [ 848.251546][T29356] do_filp_open+0x1fa/0x410 [ 848.251568][T29356] ? __pfx_do_filp_open+0x10/0x10 [ 848.251608][T29356] ? _raw_spin_unlock+0x28/0x50 [ 848.251626][T29356] ? alloc_fd+0x64c/0x6c0 [ 848.251661][T29356] do_sys_openat2+0x121/0x200 [ 848.251681][T29356] ? __pfx_do_sys_openat2+0x10/0x10 [ 848.251703][T29356] ? ksys_write+0x22a/0x250 [ 848.251726][T29356] ? __pfx_ksys_write+0x10/0x10 [ 848.251749][T29356] __x64_sys_openat+0x138/0x170 [ 848.251770][T29356] do_syscall_64+0xfa/0xf80 [ 848.251793][T29356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.251810][T29356] ? clear_bhb_loop+0x60/0xb0 [ 848.251829][T29356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.251844][T29356] RIP: 0033:0x7f8def38df90 [ 848.251861][T29356] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 848.251875][T29356] RSP: 002b:00007f8ded5f5f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 848.251892][T29356] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8def38df90 [ 848.251904][T29356] RDX: 0000000000000000 RSI: 00007f8def41407e RDI: 00000000ffffff9c [ 848.251914][T29356] RBP: 00007f8def41407e R08: 0000000000000000 R09: 0000000000000000 [ 848.251925][T29356] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 848.251934][T29356] R13: 00007f8def5e6038 R14: 00007f8def5e5fa0 R15: 00007ffd099b9a68 [ 848.251964][T29356] [ 848.295866][T29356] ERROR: Out of memory at tomoyo_realpath_from_path. [ 848.595053][ T146] pimreg3 (unregistering): left allmulticast mode [ 848.933329][ T146] team0 (unregistering): Port device team_slave_1 removed [ 848.974592][ T146] team0 (unregistering): Port device team_slave_0 removed [ 849.335395][ T52] Bluetooth: hci2: command tx timeout [ 849.410112][T29205] hsr_slave_0: entered promiscuous mode [ 849.434304][T29205] hsr_slave_1: entered promiscuous mode [ 849.452110][T29205] debugfs: 'hsr0' already exists in 'hsr' [ 849.470551][T29205] Cannot create hsr debugfs directory [ 849.471957][T29381] __nla_validate_parse: 1 callbacks suppressed [ 849.471972][T29381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6117'. [ 849.599555][T29391] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6120'. [ 849.632279][T29388] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6119'. [ 849.649368][T29391] netlink: 'syz.4.6120': attribute type 83 has an invalid length. [ 849.687014][T29395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6118'. [ 849.715579][T29391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6120'. [ 849.780022][T29400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6120'. [ 849.882281][T29391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6120'. [ 849.893973][T29410] FAULT_INJECTION: forcing a failure. [ 849.893973][T29410] name failslab, interval 1, probability 0, space 0, times 0 [ 849.905470][T29400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6120'. [ 849.934001][T29400] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6120'. [ 849.981199][T29410] CPU: 1 UID: 0 PID: 29410 Comm: syz.0.6124 Not tainted syzkaller #0 PREEMPT(full) [ 849.981215][T29410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 849.981222][T29410] Call Trace: [ 849.981226][T29410] [ 849.981231][T29410] dump_stack_lvl+0x189/0x250 [ 849.981247][T29410] ? __pfx____ratelimit+0x10/0x10 [ 849.981260][T29410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 849.981271][T29410] ? __pfx__printk+0x10/0x10 [ 849.981288][T29410] ? __pfx___might_resched+0x10/0x10 [ 849.981298][T29410] ? fs_reclaim_acquire+0x7d/0x100 [ 849.981315][T29410] should_fail_ex+0x414/0x560 [ 849.981328][T29410] should_failslab+0xa8/0x100 [ 849.981344][T29410] __kmalloc_noprof+0xcb/0x800 [ 849.981356][T29410] ? tomoyo_encode+0x28b/0x550 [ 849.981370][T29410] tomoyo_encode+0x28b/0x550 [ 849.981383][T29410] tomoyo_realpath_from_path+0x58d/0x5d0 [ 849.981401][T29410] tomoyo_check_open_permission+0x1c1/0x3b0 [ 849.981416][T29410] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 849.981429][T29410] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 849.981468][T29410] security_file_open+0xb1/0x270 [ 849.981481][T29410] do_dentry_open+0x34e/0x1420 [ 849.981498][T29410] vfs_open+0x3b/0x340 [ 849.981505][T29410] ? path_openat+0x33f3/0x3dd0 [ 849.981520][T29410] path_openat+0x340e/0x3dd0 [ 849.981550][T29410] ? __pfx_path_openat+0x10/0x10 [ 849.981573][T29410] do_filp_open+0x1fa/0x410 [ 849.981586][T29410] ? __pfx_do_filp_open+0x10/0x10 [ 849.981609][T29410] ? _raw_spin_unlock+0x28/0x50 [ 849.981620][T29410] ? alloc_fd+0x64c/0x6c0 [ 849.981640][T29410] do_sys_openat2+0x121/0x200 [ 849.981651][T29410] ? __pfx_do_sys_openat2+0x10/0x10 [ 849.981663][T29410] ? ksys_write+0x22a/0x250 [ 849.981676][T29410] ? __pfx_ksys_write+0x10/0x10 [ 849.981689][T29410] __x64_sys_openat+0x138/0x170 [ 849.981702][T29410] do_syscall_64+0xfa/0xf80 [ 849.981715][T29410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.981725][T29410] ? clear_bhb_loop+0x60/0xb0 [ 849.981737][T29410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.981746][T29410] RIP: 0033:0x7f8def38df90 [ 849.981756][T29410] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 849.981764][T29410] RSP: 002b:00007f8ded5f5f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 849.981775][T29410] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8def38df90 [ 849.981782][T29410] RDX: 0000000000000000 RSI: 00007f8def41407e RDI: 00000000ffffff9c [ 849.981788][T29410] RBP: 00007f8def41407e R08: 0000000000000000 R09: 0000000000000000 [ 849.981794][T29410] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 849.981802][T29410] R13: 00007f8def5e6038 R14: 00007f8def5e5fa0 R15: 00007ffd099b9a68 [ 849.981831][T29410] [ 849.981853][T29410] ERROR: Out of memory at tomoyo_realpath_from_path. [ 850.005774][T29400] bond13: option ad_select: invalid value (16) [ 850.282382][T29400] bond13 (unregistering): Released all slaves [ 850.504235][T29424] netlink: 'syz.2.6126': attribute type 10 has an invalid length. [ 850.578461][T29424] `: Port device syz_tun added [ 850.915184][T29205] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 850.949552][T29205] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 850.969679][T29205] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 850.975732][T29449] FAULT_INJECTION: forcing a failure. [ 850.975732][T29449] name failslab, interval 1, probability 0, space 0, times 0 [ 850.993245][T29205] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 850.995974][T29449] CPU: 0 UID: 0 PID: 29449 Comm: syz.3.6134 Not tainted syzkaller #0 PREEMPT(full) [ 850.995997][T29449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 850.996007][T29449] Call Trace: [ 850.996015][T29449] [ 850.996023][T29449] dump_stack_lvl+0x189/0x250 [ 850.996046][T29449] ? __pfx____ratelimit+0x10/0x10 [ 850.996067][T29449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 850.996085][T29449] ? __pfx__printk+0x10/0x10 [ 850.996119][T29449] ? __pfx___might_resched+0x10/0x10 [ 850.996140][T29449] ? fs_reclaim_acquire+0x7d/0x100 [ 850.996166][T29449] should_fail_ex+0x414/0x560 [ 850.996190][T29449] should_failslab+0xa8/0x100 [ 850.996214][T29449] kmem_cache_alloc_noprof+0x74/0x6f0 [ 850.996234][T29449] ? create_new_namespaces+0x33/0x6a0 [ 850.996263][T29449] create_new_namespaces+0x33/0x6a0 [ 850.996286][T29449] ? __fget_files+0x3a0/0x420 [ 850.996301][T29449] ? __fget_files+0x2a/0x420 [ 850.996342][T29449] __se_sys_setns+0x29d/0x1bf0 [ 850.996367][T29449] ? __pfx___se_sys_setns+0x10/0x10 [ 850.996389][T29449] ? do_syscall_64+0xbe/0xf80 [ 850.996413][T29449] do_syscall_64+0xfa/0xf80 [ 850.996434][T29449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.996450][T29449] ? clear_bhb_loop+0x60/0xb0 [ 850.996470][T29449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.996486][T29449] RIP: 0033:0x7f9cd3f90f77 [ 850.996501][T29449] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 34 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.996520][T29449] RSP: 002b:00007f9cd4e99fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 850.996538][T29449] RAX: ffffffffffffffda RBX: 0000000000000042 RCX: 00007f9cd3f90f77 [ 850.996550][T29449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 850.996560][T29449] RBP: 00007f9cd4e9a090 R08: 0000000000000000 R09: 0000000000000000 [ 850.996571][T29449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 850.996580][T29449] R13: 00007f9cd41e6038 R14: 00007f9cd41e5fa0 R15: 00007ffd14a1ea98 [ 850.996609][T29449] [ 851.415708][ T52] Bluetooth: hci2: command tx timeout [ 851.477453][T29205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.533976][T29205] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.571113][ T6415] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.578323][ T6415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.612003][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.619211][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.884068][T29477] gre0 speed is unknown, defaulting to 1000 [ 851.914207][T29488] netlink: 277 bytes leftover after parsing attributes in process `syz.2.6143'. [ 852.224013][T29205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.234471][T29495] netlink: 'syz.0.6145': attribute type 3 has an invalid length. [ 852.354470][T29477] lo speed is unknown, defaulting to 1000 [ 852.362849][T29493] gre0 speed is unknown, defaulting to 1000 [ 852.369794][T29205] veth0_vlan: entered promiscuous mode [ 852.385874][T29477] lo speed is unknown, defaulting to 1000 [ 852.406745][T29499] FAULT_INJECTION: forcing a failure. [ 852.406745][T29499] name failslab, interval 1, probability 0, space 0, times 0 [ 852.414945][T29205] veth1_vlan: entered promiscuous mode [ 852.445671][T29499] CPU: 0 UID: 0 PID: 29499 Comm: syz.0.6146 Not tainted syzkaller #0 PREEMPT(full) [ 852.445696][T29499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.445707][T29499] Call Trace: [ 852.445715][T29499] [ 852.445723][T29499] dump_stack_lvl+0x189/0x250 [ 852.445748][T29499] ? __pfx____ratelimit+0x10/0x10 [ 852.445770][T29499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 852.445789][T29499] ? __pfx__printk+0x10/0x10 [ 852.445816][T29499] ? __pfx___might_resched+0x10/0x10 [ 852.445832][T29499] ? fs_reclaim_acquire+0x7d/0x100 [ 852.445858][T29499] should_fail_ex+0x414/0x560 [ 852.445881][T29499] ? __pfx_sock_alloc_inode+0x10/0x10 [ 852.445900][T29499] should_failslab+0xa8/0x100 [ 852.445924][T29499] ? __pfx_sock_alloc_inode+0x10/0x10 [ 852.445941][T29499] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 852.445963][T29499] ? sock_alloc_inode+0x28/0xc0 [ 852.445993][T29499] ? __pfx_sock_alloc_inode+0x10/0x10 [ 852.446010][T29499] sock_alloc_inode+0x28/0xc0 [ 852.446027][T29499] alloc_inode+0x6a/0x1b0 [ 852.446049][T29499] __sock_create+0x12d/0x9d0 [ 852.446076][T29499] __sys_socket+0xd7/0x320 [ 852.446099][T29499] __x64_sys_socket+0x7a/0x90 [ 852.446119][T29499] do_syscall_64+0xfa/0xf80 [ 852.446140][T29499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.446155][T29499] ? clear_bhb_loop+0x60/0xb0 [ 852.446174][T29499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.446190][T29499] RIP: 0033:0x7f8def38f749 [ 852.446205][T29499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.446218][T29499] RSP: 002b:00007f8ded5f5fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 852.446237][T29499] RAX: ffffffffffffffda RBX: 0000000000000042 RCX: 00007f8def38f749 [ 852.446249][T29499] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 852.446259][T29499] RBP: 00007f8ded5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 852.446269][T29499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 852.446278][T29499] R13: 00007f8def5e6038 R14: 00007f8def5e5fa0 R15: 00007ffd099b9a68 [ 852.446308][T29499] [ 852.446317][T29499] socket: no more sockets [ 852.649310][T29205] veth0_macvtap: entered promiscuous mode [ 852.803606][T29205] veth1_macvtap: entered promiscuous mode [ 852.858303][T29493] lo speed is unknown, defaulting to 1000 [ 852.864719][T29205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.891111][T29493] lo speed is unknown, defaulting to 1000 [ 852.900100][T29205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.969359][T19318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.007465][T19318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.060679][T19318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.087096][T19318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.360144][T26497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.387055][T26497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.696004][T26495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.703916][T26495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.885723][T29525] netlink: 'syz.1.6077': attribute type 29 has an invalid length. [ 853.949808][T29525] macvlan2: entered promiscuous mode [ 853.967701][T29525] batman_adv: batadv0: Adding interface: macvlan2 [ 853.986506][T29525] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.075413][T29525] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 854.081941][T29535] FAULT_INJECTION: forcing a failure. [ 854.081941][T29535] name failslab, interval 1, probability 0, space 0, times 0 [ 854.100638][T29535] CPU: 1 UID: 0 PID: 29535 Comm: syz.2.6156 Not tainted syzkaller #0 PREEMPT(full) [ 854.100663][T29535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 854.100675][T29535] Call Trace: [ 854.100683][T29535] [ 854.100691][T29535] dump_stack_lvl+0x189/0x250 [ 854.100722][T29535] ? __pfx____ratelimit+0x10/0x10 [ 854.100743][T29535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 854.100762][T29535] ? __pfx__printk+0x10/0x10 [ 854.100790][T29535] ? __pfx___might_resched+0x10/0x10 [ 854.100813][T29535] should_fail_ex+0x414/0x560 [ 854.100838][T29535] should_failslab+0xa8/0x100 [ 854.100868][T29535] kmem_cache_alloc_noprof+0x74/0x6f0 [ 854.100890][T29535] ? security_inode_alloc+0x39/0x330 [ 854.100914][T29535] security_inode_alloc+0x39/0x330 [ 854.100933][T29535] inode_init_always_gfp+0x9ed/0xdc0 [ 854.100963][T29535] ? __pfx_sock_alloc_inode+0x10/0x10 [ 854.100983][T29535] alloc_inode+0x82/0x1b0 [ 854.101006][T29535] __sock_create+0x12d/0x9d0 [ 854.101037][T29535] __sys_socket+0xd7/0x320 [ 854.101061][T29535] __x64_sys_socket+0x7a/0x90 [ 854.101083][T29535] do_syscall_64+0xfa/0xf80 [ 854.101105][T29535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.101122][T29535] ? clear_bhb_loop+0x60/0xb0 [ 854.101143][T29535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.101158][T29535] RIP: 0033:0x7fdd1fd8f749 [ 854.101174][T29535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.101189][T29535] RSP: 002b:00007fdd20b9cfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 854.101208][T29535] RAX: ffffffffffffffda RBX: 0000000000000042 RCX: 00007fdd1fd8f749 [ 854.101220][T29535] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 854.101239][T29535] RBP: 00007fdd20b9d090 R08: 0000000000000000 R09: 0000000000000000 [ 854.101250][T29535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 854.101261][T29535] R13: 00007fdd1ffe6038 R14: 00007fdd1ffe5fa0 R15: 00007ffde4189f18 [ 854.101294][T29535] [ 854.101400][T29535] socket: no more sockets [ 854.506349][T29536] __nla_validate_parse: 2 callbacks suppressed [ 854.506366][T29536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6154'. [ 854.513323][T29543] siw: device registration error -23 [ 854.542704][T29536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6154'. [ 854.677120][T29556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 854.718716][T29558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 854.768655][T29556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6162'. [ 854.799842][T29556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6162'. [ 854.819853][T29556] netlink: 13 bytes leftover after parsing attributes in process `syz.2.6162'. [ 855.203129][T29581] FAULT_INJECTION: forcing a failure. [ 855.203129][T29581] name failslab, interval 1, probability 0, space 0, times 0 [ 855.227993][T29579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6169'. [ 855.235561][T29581] CPU: 1 UID: 0 PID: 29581 Comm: syz.0.6168 Not tainted syzkaller #0 PREEMPT(full) [ 855.235585][T29581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 855.235596][T29581] Call Trace: [ 855.235604][T29581] [ 855.235612][T29581] dump_stack_lvl+0x189/0x250 [ 855.235636][T29581] ? __pfx____ratelimit+0x10/0x10 [ 855.235656][T29581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 855.235674][T29581] ? __pfx__printk+0x10/0x10 [ 855.235701][T29581] ? __pfx___might_resched+0x10/0x10 [ 855.235723][T29581] should_fail_ex+0x414/0x560 [ 855.235747][T29581] should_failslab+0xa8/0x100 [ 855.235771][T29581] kmem_cache_alloc_noprof+0x74/0x6f0 [ 855.235792][T29581] ? security_inode_alloc+0x39/0x330 [ 855.235814][T29581] security_inode_alloc+0x39/0x330 [ 855.235833][T29581] inode_init_always_gfp+0x9ed/0xdc0 [ 855.235862][T29581] ? __pfx_sock_alloc_inode+0x10/0x10 [ 855.235880][T29581] alloc_inode+0x82/0x1b0 [ 855.235903][T29581] __sock_create+0x12d/0x9d0 [ 855.235932][T29581] __sys_socket+0xd7/0x320 [ 855.235956][T29581] __x64_sys_socket+0x7a/0x90 [ 855.235976][T29581] do_syscall_64+0xfa/0xf80 [ 855.235997][T29581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.236014][T29581] ? clear_bhb_loop+0x60/0xb0 [ 855.236035][T29581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.236051][T29581] RIP: 0033:0x7f8def38f749 [ 855.236066][T29581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.236081][T29581] RSP: 002b:00007f8ded5f5fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 855.236099][T29581] RAX: ffffffffffffffda RBX: 0000000000000042 RCX: 00007f8def38f749 [ 855.236111][T29581] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 855.236121][T29581] RBP: 00007f8ded5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 855.236131][T29581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 855.236141][T29581] R13: 00007f8def5e6038 R14: 00007f8def5e5fa0 R15: 00007ffd099b9a68 [ 855.236170][T29581] [ 855.236199][T29581] socket: no more sockets [ 855.267261][T29579] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6169'. [ 855.829748][T29601] 8021q: adding VLAN 0 to HW filter on device bond1 [ 855.838517][T29604] IPVS: set_ctl: invalid protocol: 92 172.20.20.58:20001 [ 855.856146][T29604] IPVS: set_ctl: invalid protocol: 12 255.255.255.255:20001 [ 855.863998][ T9333] IPVS: starting estimator thread 0... [ 855.905220][T29604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6177'. [ 855.995648][T29605] IPVS: using max 37 ests per chain, 88800 per kthread [ 856.050902][T29607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6178'. [ 856.133562][T29613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 856.161043][T29599] vlan2: entered promiscuous mode [ 856.185700][T29599] geneve1: entered promiscuous mode [ 856.191134][T29599] vlan2: entered allmulticast mode [ 856.229622][T29599] geneve1: entered allmulticast mode [ 856.307054][T29623] FAULT_INJECTION: forcing a failure. [ 856.307054][T29623] name failslab, interval 1, probability 0, space 0, times 0 [ 856.345639][T29623] CPU: 1 UID: 0 PID: 29623 Comm: syz.1.6182 Not tainted syzkaller #0 PREEMPT(full) [ 856.345665][T29623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 856.345675][T29623] Call Trace: [ 856.345682][T29623] [ 856.345691][T29623] dump_stack_lvl+0x189/0x250 [ 856.345714][T29623] ? __pfx____ratelimit+0x10/0x10 [ 856.345733][T29623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 856.345752][T29623] ? __pfx__printk+0x10/0x10 [ 856.345785][T29623] should_fail_ex+0x414/0x560 [ 856.345808][T29623] should_failslab+0xa8/0x100 [ 856.345832][T29623] __kmalloc_noprof+0xcb/0x800 [ 856.345852][T29623] ? security_sk_alloc+0x52/0x390 [ 856.345877][T29623] security_sk_alloc+0x52/0x390 [ 856.345898][T29623] sk_prot_alloc+0x101/0x220 [ 856.345918][T29623] ? sk_alloc+0x27/0x390 [ 856.345941][T29623] sk_alloc+0x3a/0x390 [ 856.345965][T29623] nr_create+0x9c/0x510 [ 856.345985][T29623] __sock_create+0x4b3/0x9d0 [ 856.346010][T29623] __sys_socket+0xd7/0x320 [ 856.346031][T29623] __x64_sys_socket+0x7a/0x90 [ 856.346051][T29623] do_syscall_64+0xfa/0xf80 [ 856.346074][T29623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.346091][T29623] ? clear_bhb_loop+0x60/0xb0 [ 856.346110][T29623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.346126][T29623] RIP: 0033:0x7fec01b8f749 [ 856.346142][T29623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.346156][T29623] RSP: 002b:00007fec0295bfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 856.346174][T29623] RAX: ffffffffffffffda RBX: 0000000000000042 RCX: 00007fec01b8f749 [ 856.346187][T29623] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 856.346197][T29623] RBP: 00007fec0295c090 R08: 0000000000000000 R09: 0000000000000000 [ 856.346208][T29623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 856.346218][T29623] R13: 00007fec01de6038 R14: 00007fec01de5fa0 R15: 00007ffe76beddc8 [ 856.346247][T29623] [ 856.754274][T29626] gre0 speed is unknown, defaulting to 1000 [ 856.922863][T29637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6187'. [ 856.955985][T29640] xt_TPROXY: Can be used only with -p tcp or -p udp [ 857.237228][T29654] bond0: (slave erspan0): Error: Device type is different from other slaves [ 857.248597][T17171] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 857.264045][T17171] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 857.272441][T17171] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 857.281503][T17171] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 857.289350][T17171] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 857.327057][T29626] lo speed is unknown, defaulting to 1000 [ 857.332304][T29634] gre0 speed is unknown, defaulting to 1000 [ 857.334492][T29626] lo speed is unknown, defaulting to 1000 [ 857.671089][T29674] nbd: nbd0 already in use [ 857.677081][T29674] block nbd0: NBD_DISCONNECT [ 857.681798][T29674] block nbd0: Send disconnect failed -32 [ 857.687889][T29674] block nbd0: shutting down sockets [ 857.753407][ T6415] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 857.774295][ T6415] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 857.800366][ T30] audit: type=1800 audit(1764874078.378:12): pid=29674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6196" name="2" dev="tmpfs" ino=195 res=0 errno=0 [ 857.828453][T29655] gre0 speed is unknown, defaulting to 1000 [ 857.899749][ T6415] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 857.927005][ T6415] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 858.358213][T29634] lo speed is unknown, defaulting to 1000 [ 858.479446][T29634] lo speed is unknown, defaulting to 1000 [ 858.625484][T29655] lo speed is unknown, defaulting to 1000 [ 858.643493][ T6415] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 858.679774][ T6415] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 858.728982][T29655] lo speed is unknown, defaulting to 1000 [ 858.823700][ T6415] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 858.838478][ T6415] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 859.254325][T29690] netlink: 'syz.0.6200': attribute type 1 has an invalid length. [ 859.335981][ T52] Bluetooth: hci5: command tx timeout [ 859.438654][T29697] gre0 speed is unknown, defaulting to 1000 [ 859.731558][T29712] FAULT_INJECTION: forcing a failure. [ 859.731558][T29712] name failslab, interval 1, probability 0, space 0, times 0 [ 859.747404][T29712] CPU: 1 UID: 0 PID: 29712 Comm: syz.3.6205 Not tainted syzkaller #0 PREEMPT(full) [ 859.747429][T29712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 859.747441][T29712] Call Trace: [ 859.747448][T29712] [ 859.747457][T29712] dump_stack_lvl+0x189/0x250 [ 859.747480][T29712] ? __pfx____ratelimit+0x10/0x10 [ 859.747500][T29712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 859.747519][T29712] ? __pfx__printk+0x10/0x10 [ 859.747554][T29712] ? __pfx___might_resched+0x10/0x10 [ 859.747572][T29712] ? fs_reclaim_acquire+0x7d/0x100 [ 859.747599][T29712] should_fail_ex+0x414/0x560 [ 859.747623][T29712] should_failslab+0xa8/0x100 [ 859.747648][T29712] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 859.747669][T29712] ? __d_alloc+0x37/0x6f0 [ 859.747693][T29712] __d_alloc+0x37/0x6f0 [ 859.747708][T29712] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 859.747735][T29712] d_alloc_pseudo+0x21/0xc0 [ 859.747754][T29712] alloc_file_pseudo+0xcc/0x210 [ 859.747774][T29712] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 859.747798][T29712] ? alloc_fd+0x64c/0x6c0 [ 859.747826][T29712] sock_alloc_file+0xb8/0x2e0 [ 859.747843][T29712] ? __sys_socket+0x12e/0x320 [ 859.747865][T29712] __sys_socket+0x13e/0x320 [ 859.747890][T29712] __x64_sys_socket+0x7a/0x90 [ 859.747911][T29712] do_syscall_64+0xfa/0xf80 [ 859.747932][T29712] ? rcu_is_watching+0x15/0xb0 [ 859.747951][T29712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.747967][T29712] ? clear_bhb_loop+0x60/0xb0 [ 859.747992][T29712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.748009][T29712] RIP: 0033:0x7f9cd3f8f749 [ 859.748025][T29712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.748040][T29712] RSP: 002b:00007f9cd4e99fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 859.748058][T29712] RAX: ffffffffffffffda RBX: 0000000000000042 RCX: 00007f9cd3f8f749 [ 859.748071][T29712] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 859.748081][T29712] RBP: 00007f9cd4e9a090 R08: 0000000000000000 R09: 0000000000000000 [ 859.748092][T29712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 859.748103][T29712] R13: 00007f9cd41e6038 R14: 00007f9cd41e5fa0 R15: 00007ffd14a1ea98 [ 859.748134][T29712] [ 859.748311][T29712] VFS_BUG_ON_INODE(inode_state_read_once(inode) & I_CLEAR) encountered for inode ffff888034d473c0 [ 859.748311][T29712] fs sockfs mode 140777 opflags 0x8 flags 0x0 state 0x300 count 0 [ 860.009275][T29712] ------------[ cut here ]------------ [ 860.014780][T29712] kernel BUG at fs/inode.c:1971! [ 860.022050][T29712] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 860.028312][T29712] CPU: 0 UID: 0 PID: 29712 Comm: syz.3.6205 Not tainted syzkaller #0 PREEMPT(full) [ 860.037674][T29712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 860.047711][T29712] RIP: 0010:iput+0xfc9/0x1030 [ 860.052367][T29712] Code: 8b 7c 24 18 48 c7 c6 a0 df 79 8b e8 e1 58 e8 fe 90 0f 0b e8 e9 6b 81 ff 48 8b 7c 24 18 48 c7 c6 40 df 79 8b e8 c8 58 e8 fe 90 <0f> 0b 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fb ff ff 4c 89 ef [ 860.071953][T29712] RSP: 0018:ffffc9000c61fde8 EFLAGS: 00010282 [ 860.078001][T29712] RAX: 000000000000009f RBX: dffffc0000000000 RCX: 6652634a42aee000 [ 860.085955][T29712] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 860.094338][T29712] RBP: 1ffffffff1ed61d6 R08: 0000000000000003 R09: 0000000000000004 [ 860.102291][T29712] R10: dffffc0000000000 R11: fffffbfff1bbadfc R12: 1ffff110069a8eb8 [ 860.110243][T29712] R13: ffff888034d475c0 R14: 0000000000000200 R15: 1ffffffff1f01152 [ 860.118195][T29712] FS: 00007f9cd4e9a6c0(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 860.127104][T29712] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.133664][T29712] CR2: 0000001b2db23ffc CR3: 0000000049634000 CR4: 00000000003526f0 [ 860.141617][T29712] Call Trace: [ 860.144882][T29712] [ 860.147794][T29712] ? do_raw_spin_unlock+0x122/0x240 [ 860.152975][T29712] __sys_socket+0x2bf/0x320 [ 860.157459][T29712] __x64_sys_socket+0x7a/0x90 [ 860.162118][T29712] do_syscall_64+0xfa/0xf80 [ 860.166605][T29712] ? rcu_is_watching+0x15/0xb0 [ 860.171350][T29712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.177392][T29712] ? clear_bhb_loop+0x60/0xb0 [ 860.182052][T29712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.187920][T29712] RIP: 0033:0x7f9cd3f8f749 [ 860.192325][T29712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.211920][T29712] RSP: 002b:00007f9cd4e99fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 860.220329][T29712] RAX: ffffffffffffffda RBX: 0000000000000042 RCX: 00007f9cd3f8f749 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 860.228293][T29712] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006 [ 860.236252][T29712] RBP: 00007f9cd4e9a090 R08: 0000000000000000 R09: 0000000000000000 [ 860.244206][T29712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 860.252159][T29712] R13: 00007f9cd41e6038 R14: 00007f9cd41e5fa0 R15: 00007ffd14a1ea98 [ 860.260128][T29712] [ 860.263142][T29712] Modules linked in: [ 860.268406][T29712] ---[ end trace 0000000000000000 ]--- [ 860.295994][T29712] RIP: 0010:iput+0xfc9/0x1030 [ 860.315464][T29712] Code: 8b 7c 24 18 48 c7 c6 a0 df 79 8b e8 e1 58 e8 fe 90 0f 0b e8 e9 6b 81 ff 48 8b 7c 24 18 48 c7 c6 40 df 79 8b e8 c8 58 e8 fe 90 <0f> 0b 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fb ff ff 4c 89 ef [ 860.342371][T29712] RSP: 0018:ffffc9000c61fde8 EFLAGS: 00010282 [ 860.348590][T29712] RAX: 000000000000009f RBX: dffffc0000000000 RCX: 6652634a42aee000 [ 860.356787][T29712] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 860.364833][T29712] RBP: 1ffffffff1ed61d6 R08: 0000000000000003 R09: 0000000000000004 [ 860.374376][T29712] R10: dffffc0000000000 R11: fffffbfff1bbadfc R12: 1ffff110069a8eb8 [ 860.383826][T29712] R13: ffff888034d475c0 R14: 0000000000000200 R15: 1ffffffff1f01152 [ 860.448607][T29712] FS: 00007f9cd4e9a6c0(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 860.495404][T29712] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 860.505384][T29712] CR2: 000055ad196f8000 CR3: 0000000049634000 CR4: 00000000003526f0 [ 860.510302][ T6415] bond3 (unregistering): (slave xfrm1): Releasing backup interface [ 860.513391][T29712] Kernel panic - not syncing: Fatal exception [ 860.521593][T29712] Kernel Offset: disabled