last executing test programs: 5.991789655s ago: executing program 2 (id=4963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, 0x0, &(0x7f0000001800)) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0xffffffffffffffff, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) (async) r4 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYRES16=r2, @ANYBLOB="bb424258c47073e8240515b3f02528dbd987df724ecbf8a88c68dc1588808187adbc8112d979479f500dbf95e219212e5ac5813871ea26f04bb8724efd5b2c3b8f219c380081d7239978f7e6e58f406d3b1c1a96524f86afed02a59d060aaba478a3cf501d4d5097821424552288ff819d049474d412bcb247c93bcf7f25098ae083dba976b75828de555006befcf61ada56b009019a2a566c98f63ca3ab83940ab3be436d5e447c710fc7d98e6d6564d2cf64cc0868ba6e4af3f1fd8cabf4046629b0a2c8366ae7de2f3843a231bf2aa14329bfe3ce371a3da797464c8d198b93312f9a0f9a9321652f8285ea7f355383db0754b24daa063295a5eb59387f2f811f8e3726af6b5f9fbbff41df7771e3f54dcfc66cc35290e9f4840d896410f89a4b141df967c471a1db478fb245bf2cf327d8bf4873b65da70c4ba44319130470280de9817b463dae19e60498508e94ce5ca7d4c9955dc0253d97da81446d3fff88b3c57622cb46c43d5de9bf37e28dae5adbc2f7e1965bf76d71b3cb249b4e5e2c175841df96680dc4e4e7494062d6204da3d2da5f2f9007e21933fec3e574e8d3d2538cee084e0b5a0e4f2b764d9772df6fce00e8f8dea205e9380cd62db5c71069dc51e4a84c3a58c5dbf24b767b5869ba7ef55ff305484a647e20a53c3165d2031c0bf810c4ffce8ede298cfccc13bb8c090341fd8c934d2db4be098e4a7c5dbe1f4cf515a6c4e04ae42692ea02837e02aae4aaa4c6137d19cb2e644a43bea4a3aae68398e10ac392605b60c251f923bb8d817c385357878706f5f0fe0cfa95231fd0fafc6d3ebccba000436d3158593bee73929713766971f2657b3f49d611b56c453c7d81c63bf088ffaa2046c6dffb02906eca57afa052e66a40be8f4a2f6cb53b3f80e668b60354cced52f614df64894368cfe2218013e142767bf1f8bd85a454b283c809fec9fec23f312190036925a3139ef551b1f71559d61ac53b42308d1c51807af3c65a0bc10b58cbb95c853dee0d96ef1576284500fbd557ff331230354e87d15b9851237b16bf178816db05b7354f7d5df60b3189ad200680d1fefa6848be6f9c5a27bc22246e611ae129c68707635f99b6ded78f1b97512c3321cbe04f9283f54cc0bbfded8fec87e76386781e9dd589a209deee75ec558228bdca28159e9d83da0c72862b4381e701ead66d7b012f02e4a825d97f72ee50e690629edff237ce75aa5169d75e3497a6d7212f97cd66764a487aec0fa2bb92dafcf46954e06b32f630052b2a6db2b622efb528f19c27f3b35b476de0f2c21e22c9e50489a57efb0785ab32d00a4a4ea0914e39b173a805a0d94a43307e31a944c9e0486e5a6233af9bb64c3c64c91f1704286eb3ac78e86579262f5d5ab6f7d0b4c61d8575a4b4fa5d728662d2f5a5a205ed9065de8fb474cc50e7608ba8ea5b6a68f3bf845bd76c4637a7d64493e5f0a0ffe3602660748693339250d9367283bd7aaa30539eb85f91d1220696efbae6b2162ad354dacd5acae060391ff4bf8b046f7f88e39da31780326aea42ff110f31c10b25a231ebb18eca7c1475c0dfa52136cb8221c6104dc8ceb8c482f66d5290750d43a505b4e841d8b6b41b1cd93a50bea5c779d72908aba4dbaf619bde4d687e71a1a838f2bafd25f529366747da42bfb0255fdbe4bf545b8adb114a1c5a113d789c9d1be86df9eb26721ae15c030cd68bb63339e3f628d9f464774410a546594e13c50903869506f70bcbaef98ccd4067ef9a152fecb9461382536e955b5af82eed679625c8dc9fe80254cab22b475aa0132de78d7d738f8f18811cab54810d7b92b4d50cce81a00dc29b80d5167dbc5064db1a26cf91543fea1c9292f7c1ac88411f6815e1a591ccf75d9523cd17e864b2a4af731e7d46f72050a70b9b90bba5ce054193ae4909df8bf0c2d00f0a9909c9953e8b126db1efeb7690a2086ba83d2fe2bb7cee2458e95015af2a8e1d70c49fc69b5174a33ec545a1a3043dc1c8dd429d037933e69919c704e4c39c1890930f3f2c12ff2d835039ab1e6931b0af3bb15461bf8ce52edafdc96130acbcb01c6bd36c9192bf63c285a7b18733253b6e591da9842c7015e9971f0a1f0d99afae2f7ff800338bc03164bd82d1e841f53104178ec88a332726054571905f415e81d46c639daa740e70f24da26a447a810b14bc338867c7b7c00d492b607434c97bd5f4e885a885cedc728bbb97da3eec70fcdcc47fa0f5c1b199a1146347bdde32fde5d46372532bf39eed033829bba84d43415824406f64a783c83b027503847a2929ddadd9e5f1e0241ed6b3710feefa302a09c41e460001c821e814608316d890ce9b1a0dbf465f8040d095dca54844187a94f51c550478e53a602e09ac4051c0df401afa6550835bc615f4f55e23b635402bdda1c9a998c6f98ac38a687c325c7764af885b9df25df437b4c021c9f3c2708854d36b7517dea280ecd7f2cb03e83147b12fd04cc44a33fe57888b0b51576771b3fd5980ea68cc055c13a8f21b90e0fb4d1de5be02374f61cba19cbafb1fef54d097969a818ad4a9a6761b06383f4da02ab140bc1b38525ad0a6ce83dc41dff86e1aae7dd9a8208547641aa6db0a110bb038e609440407366fbe3feccc9a940a9d3f123b2e4769a02e80835cbb7b2bcfd597d0fe7d289f749083837f162fff36ac2f7af3b37ca4f4ed312d5f52d54a51d9567385ea1d5bb4dfd50d0b57f8f9e37cbf9e8c3ebd16639eadc50afae8c8edb373624d24c88c45fbbec4520e570173ef640445dc741e9725ff8f67ed4c74cc3e4a52b8940f569c932f33a5ab1517f353d3e145ee080c1ec6d231e668ba5dc2fdf71131bbb881a7beada0cf0da0ebab7a98c9e913c92ff69b6f191f1a91837971e081aab9968635370dc3e3a370f2a088324bc0bccc99800d8851b825cf8b81e690fa5820283b5bddccb28a5f55e8d2cc9bc729533b4272686a567cb35b3adf2cf9dbdfe2972af26e895a4baaf298da96e3600c0e89769896b11dc1c038fd32b5114d822e7bead3e5a8018f7078afb3369d4e900cc75400e9c44dff550b1784de31fd56663f373bce2b1d9d5c2e99caf1ce18251f8b31bffb9cb43f093dcd5c56d0eb922a2cc04f8c5955134e3b41ec2e22d80ad1ed048fbbff423f7b3834af4dd555e469fa4bd10835ed8998175538eb844a5481b5f76afc17460c3679b03200131a41c62ed8a2fb6c1a75fee34f52df53fc8916f519afb06beef190ede106a5e0e94d45dadf23ecf993d0555bbc611b3a891a70b3214ac09f89f6401bd5a128e3d03e1db0034d402f52457b9657df5451051237c2a92833cf97b572909d9a029ce78b74873a9afbf375a8d41acdeddd867ac547ae9d8705167b75dc8beee5f87ba162435eea4239326b18e0b08ccec94baccf0d0224914a00ae39cebe18d96576596ac85e2124a7b74829403403869f8cafd7fe86c57ea0e8d2f8a86d3a4902d8d75c2a26c2a17d3b8981d99e486a9c680c19d993ccefcf0fb6118e790a1683fe215532706194133e7f586f7b6ee0dec7c809610dee380235943f5fe2682f8f5e0a3571dd6ad64009239e042f5d2df19f9f59fedd927650c076145dc7d003c642a12152a23a146d75bdfd499261d06ba925c5c1647105227b61801cc928faac6df31e29c74fb579f344350b570e28750a29bf472acfca1f7215bbffd85855d76682c1cbb86967d6d39fa5565e3b1732cb86fb55a37dd60a1413903957943ece5f30345bcee4d495c8fa1ee6cf2b7618443c5d2fdddef7cb8beb90e76c31725ec4a4ccf7495e015dfc8b0e8fb790e4742ca0ada50bd18a8ffe34fb857b1430807a6c916f29783308fa347ceb4048d02d63e4e6e5a0bf58539afd49b9d7d0fd7beaeb3a95c467b297d19e26893e2d41b4d28e2d1c87714a59603dd46387004c12dc1e2e499849bd6420d3f06ef8ac59fea78429c1a39c6573f5482ddbd28cb3fedc31ca85be2c1ed0a5d3c5509fb3ff259e4c720f5732f614afb539357d41aea5c08e8ec00c35793a1005f9987202137ff7c175d421314cccc0ff7bafbc890f3b904befee1fccca363ae7149e4f2b38a8d4f098b6e4671ad2c4c530933765e1f71b18ccd534c76acf9de468ebf5b8af795879a1e77c18a4731fbe3a39bb70545ae982590d332a1f271dd066263f4b86c464d7db8fa07191d1f5b2fd9f2c5192815cb81434e0a5cc7d04a608165369f1b6fa40b43f0cb17e4983701108da26404ccec52844cfe3f88bbfb3def945a59a4827b9f83db955b1b2460a6de4a21792b80d3c578c3eac1802a18a7e09660da0d9c1b31db50e17e9a536197b5ea842af32d603ae5084451aa1fc7622cb233c281c0af60a5e52aefc2e86b7623e5bb537fd46f47fe270eb4534930724b5a35e20756ec9ef9caf4538afce4f64dc00a19172892c33523ef77255f05e04ab0cea7baedae94acc80961c8bad4f45db6f52f17a49f5433bf1f9d58f8fc10ec2f407d08a1ce1da30463aeae6311e003213f0651d6d76a36837319297b854ca9248e3e65e83a9c984dcfd4a913dd8d03f7f9423ed4725a293f9084764719b085cda43845e08570db8b2b6afe09194df60ab923750e62e9b8223e0464743a256e033513f85882cf40523c7ae83774f9a4a2ab8045eedf4b0419bbbb2ae3d55992475868cbf58bbe2625dc83b16379d0ff91d968d1a455323462e411fe3d9b304bca779701216bce94f0fdc98b49f452ff99c20b81207448bcec50445cdcdac40a06c9c690a8b74110654bb44a572686bacb5f071fc939d1288e66ca95883bfbd5d885a9f39f6b3eed7eea46b679e1e39d637c0e858dfa56f08f99f67c25e729fe48f6e778fc6bb049a6de70e8444c9f68c04a2ad9118aba1e766bf74faeb2ab67234276f5cdee34ac59a83fe52973404861b571f76aa7297e951a734847951761f6ab73df7dddfdc87fb13db0b29a12e3fc2bb3ba077d42c427f1d854dc5f980d5195b0c90ca8716189ac75465057ddc115187ab2907e239283042efcb53dd76da96b17d6936c88351b22c8da8603bf4c6750808e9776df0c20729463fbc40b463630f4d885afa922ff8ad8aa354eabbdfe2e8c53ed83f01b832086858677d3f759f3769e0cbff81452477b78cd83a91e2b8fe557746e3004fb26cbee62ff071d1ba55c933b0b153209fcf11df72fe1d66a0388c753da403721c084568ddc1ea5c1360dcf24fea03c1b7f5cded79c1b1fb9ac76bbe84469e7586b31ca18c697e9aeb25181b5a0848502c9e6f43494f06b713c699f889123588bc0cd9efb09bdf10719706fa60f43f17806d32e1d4be2de5715b3286ec211bcd81d0a26bcd37642247924658815105737c6903b76bc52b94c57e787a066eef4e4a2c5f0dbad00f24f537e62fd2d16616257ad32ca3231cf66fb99ec48fd85c7c5afa90fe436998ce0afa6610408525a278b70ad7d49ca060f59b6033b7f67cb6103ef4ce45aacbee30226d4e6acd452480e08bdfa702c86a2da49656d47c411c01d725f5e1725e066945bdae3328455d18ed83f5843fea8f6847700f86d3f78162bfb3eb9277bbc5df104aa33226f3134fb5bde4ae0cbb867dcb73e336dab9c8c6fcc39b9aba611d9804d1f732954cf231ca588e0af715338a5c22acb86d902ebcd5f7f20207ac8f12b30090ac77e9242c2873780dea7217d059f0e69fcffd38b6e730915474a3bd53e9ebf942f1bb89b59055e734c3c368c4f4245f0423396b32f163eee1223860bb34da575d50338ad2497f", @ANYRES64=r3, @ANYRES16], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x7, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000ffff000085000000860000029500000000000000eb94d8282db3e729abc3cc8e6d62f6519e7b5bdf1cdfb951dacdec563bb8a54524d1faa20b54dadd1be821e45dd56d3a35549a0ecb2fd577363b0e1761aaaf4d43f14ed47d37b0278e291ac042db857baf0d027edfaa5f8acce0a2624dd879fa7ca26b1567bf70dc6bbd8508b9147fa200a7d00e182b0df124c9e81263420ddf78adf0725030d0d08bf6898447b64a448c4c735f55ddd716b9defdacb5910b2f69e7ab31c7"], &(0x7f0000000ac0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, 0x0, 0xffffffb6}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="1b", 0x1}, {&(0x7f00000003c0)="1cbe0f77e43518403162da74d96b843a1685a69ab257c464923baca22ae93d37e5878fcdb93f7eecc9639dd724d48558296914fa9726a9e3d6f11ec46c7e684b238f8bf9d7f762bfb94297ecf43249ef9765000000", 0x55}, {&(0x7f0000000240)="0606bb0d83071e053c4ab72e7a4f13c2b80e2fa33801bd3a734ced1a1968b586bef9cb8f6ac75f9d5b6a50f2a6687ba215d08dab76d14c71a83d715829d36a9b249ee5f64f867db15f136f1c81732c1bbe0a9e0968350ff84cc268e5ee0f39901d76b6af37084216fff642fb8678e0848a02f6c9231688bcf3", 0x79}, {&(0x7f0000000440)="dcf47ea56dbc7d6d41b92636e9494d81f4dd59340ba4cdd323af8faeab885bf8252bac155357a46a3aef35f33c95031b115bc7cb579f7f3f87e9ed2756c1093f414ba9a0113314bb5ff0ad030b6eca4d3bbc968e3b982e4a6de2609e73d1479bb2c15c467f1c55b25cc139a819f48b0d5db1e8cecb", 0x75}, {&(0x7f0000000ec0)="67d7fbed46773ce2df612728be3efe4bf710c76e10dac885ff3d31a34d3a8939dbbd8458060b292fabc23b8ffecf8cbd190931af2b1429d3bbdae306f8fd1b82e65829e23db6288e4b917d7f2041bb985dd8ce5e5600ea5631c9fdec27fcb8966bed5edfb2a0fc0d2334822bd27bef7acb0d021776521c236fa77122fc8bdfce999a89dbaf8b3e39e354481c130ed1428d7cfa884d25b72017d810a7c6c42d3c5f56d5d97730a186a0db06025faa858aab2c4877a4a95e2659e4c70c17d1e1afb379525407cbe089a53a204018e122ab4869529e4c9dd6ac03c380def0af90b0bcd1d690f27b603d931ce97bfec14817cc3addb431353a9b37d606386fc1ac3a14cb15fc88a5e6e8059121baee", 0x50}, {&(0x7f0000000540)="bcf8f5ab9e82325f95b474481300e7ac526be16fd74c37d397503148232e328da00bb78065cfdb5191783decdfcfbffa3e1b097faf93cbd58b9b2eaabc2d64b08c0e3667e9d8104a9082dd9b625b4aafac2b1b6e7f6188f4385dbe713b76a9a1bcac6a05d3b59dc1f46865f6eb0c6b9880c97046ce6c889466ebbd06670d990ad62995ef0828047c48037323fd129d1c4517710a78ad2ec44ed59621cd421245c1945aaef89e6ea1a50e07f101b09f78d9099d391f254b5ee3cda0e048b3750b556e6c83bfedb54858d67f8cac4f9c92d4a0e49bdf2470d7de4f29f36eb302793099c06292082483c89cd6", 0xeb}, {&(0x7f0000000640)="e87cf7799a257ab3fb79c1f45e9e3feedc23f1ab86809a0eeb37aa50457bb05096fdcd768a47085a2f", 0x29}], 0x7}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000700)="98a2f2cee788cd877123f6f8d4e9a41b89635f23d6dbf009e10089ab2676984bb38423fc06bdb0166c8aeac3c212e0220a72fa34aa26ccba02369838793c047fef397b480e5fef65737f37498e74918c5590cb555f75b6bb949af014750accfda7aaea0481e165b739d4068e64f2ff560663d0f2a269457dd2c0f149ef52d4234a84f5fdb2", 0x85}, {&(0x7f00000008c0)="e592b56e0db94b7aed16b5834cdf6831a09c611677acc40a97565a8beb3bec9dfda09d426b32d69cbaff13777e74615014a0ec01e05c1453656a02e4f1890b80639095ec05a7822c9bc945ac40ae0616eac96968e7685ffc3513f6e84e9173c118050da73e0f47468cd26723bdff0f0118265da0060c191f68779ac97435e4c729c15ddaeb989bf6699e9babea696e26b15461ac21623536980883a1de6e59f8f59df87e56c5f8cbab483898451abe97c3bff5cc32995f17f5a1c32c7dcd54fe48a24250b9df0cdfd080b2b835ee2eaf5fb29b40c83d085c62e12bfaff1ba31b6c20a8267b5ee2dc47382dc8a0e33cb0", 0xf0}, {&(0x7f0000001000)="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", 0xff}, {&(0x7f0000000340)="14aa95606b34338650faa93a51a9c234dd065efa44736ab53098e225b6c7e6995341f7aa6086fbba", 0x28}], 0x4, 0x0, 0x3c}}], 0x3, 0x24004026) (async) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="f8134b4006e5213b3f6ed2ddfb90e21a1633e719185247d99eea3a14c8d1314d73e0de56e04ee14a3075e2e55a70e6b71df17ac8e4ada6d616d3bc2d155c4570244e46714c89770b1c577f15a9740cdb149234ead86f49393465557e1bf9d7c8471d3dc58fd1a57e4e6ed5f386da456942c96de31d116079c2cd594902", 0x7d}], 0x1) (async) ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, &(0x7f00000004c0)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000088000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000040), 0x4) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000080)) (async) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$FS_IOC_GETFSLABEL(r11, 0x81009431, &(0x7f00000007c0)) (async) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="2c0000000800000227bd7000ffdbdf250a3803c8", @ANYRES32=0x0, @ANYBLOB="14000100ff010000000000000000000000000001"], 0x2c}}, 0x8004) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e000003000000000000005d28483bb4000100000000000831391f0f1528d9e217000200ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x4e, 0x8, 0x0, 0x7ff, 0x10000}, &(0x7f0000000e80)=0x14) 5.869915994s ago: executing program 2 (id=4966): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513f304aa20647413573091b4f17209e1aa", 0x12}, {&(0x7f00000003c0)="a3aadf27d4097562d3e93c7e20a8dd978df98287d4a172e11f49093373c5b28c6487649b74a293dbe4be1f54f28afdf351893ce556a63f078aaa9b3723fc14ff02fe4c6f8875b962e747d545b50d69d4d8382d38b7952c5d522d40de406130bfc632259fc97f4fb6d4c4533e6ffa23257c7fd920f1c168301058b10b356c6fe09ff602d0de9dcdff42a18cff07bd1094629f8cc65b8654d8bf93c8683f060aca5a6df65f7b19760b73d9b1adbd444034580ad7263189", 0xb6}, {&(0x7f0000000640)="7a7881cb86185f895aae7f897da575b56f6ad57d1ebcffe23733458643542a2492c68f38f8225af4a5c35d347740003b8d5bc373be902c510cd52a7aa9a0c585084618adaffc1b0e940221beb0ad9b8e0bfa56a2f842ebd150fee3d21779fa203e0349653db9244d8f465851a9742ecb6f4ab84f568ceae5c91b27c4ddbd03b9b8751e51486e05c1c8d5f6f16597f754e9006056140c23fe638b4aeb48929cede77304306b04e018595cdb54db7bf5d0a139bfba2d87219cec840d9da361da759ee8a5c1582f5b3008336076c6af68263810f92a4d6ab2", 0xd7}], 0x3}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x32a}], 0x1}}], 0x2, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r2, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.208265968s ago: executing program 0 (id=4969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), r0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options]}, 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x74, r1, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2d}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6bf7369a1676bb05202ee1482288062357d68c98f09353f1"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "18b0464961ce46249d8ef0f0649f00a85aa253e23bb4f9fe"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}]]}, 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0) 2.799723357s ago: executing program 4 (id=4977): r0 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x1, 0x1, 0x20, 0x67, 0x0, 0x4, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x4, 0xad, 0x0, 0xf}]}}, {0x1e, 0x7, 0x0, @multicast1}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) 2.691305175s ago: executing program 0 (id=4979): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}]}}]}, 0x48}}, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x6d, 0x0, &(0x7f0000001040)) socket(0x2a, 0x2, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdc00, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xffe0}, {0xe, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}]}}]}, 0x48}}, 0x4) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$bt_hci(r3, 0x84, 0x6d, 0x0, &(0x7f0000001040)) (async) 2.690868371s ago: executing program 1 (id=4980): r0 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0100001000130700f3fffffddbdf256401010100000000000000000000000020010000000000000000000000000001000000024e230002020000001d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141427000000000000000000000000000000fe3200000000000000000000000000000000000000000000000000000000000000000000000200000000000000080000000000000001000000000000000900000000000000ffffff7f000000004305000000000080daf20000000000000100000000000080000000000000000000000000000000000300000000000000000000002cbd7000043500000a00040000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}}, 0x48080) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0xd, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x41, &(0x7f0000000400)={0x11, 0x18, r7}, 0x14) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="80010000291004001c001a8018000580140005800800020000000000080001"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000011000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="80010000291004001c001a8018000580140005800800020000000000080001"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, 0x0, 0x20040080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="660a000000000011db040c0c50f6abd54650733adf64005f00000000000000950000000000000028cde4f60826f307d4e658ea3ce95166db879dd189694dd02ab7c0"], &(0x7f0000000000)='GPL\x00'}, 0x90) 2.677868593s ago: executing program 2 (id=4981): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async, rerun: 64) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) (async, rerun: 64) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) (async, rerun: 64) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff010000000000000000000000000001"], 0x90) (async) write(r0, &(0x7f0000000000)="b892d60d79265b0555f218d2", 0xc) (async) accept4$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e, 0x0) 2.244047247s ago: executing program 3 (id=4982): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000008000000000000e55d0000009112420000000002950000004000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000022001101ffffffff000000000a600000ff00ff0600000000"], 0x1c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=@framed={{}, [@exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x38}, @map_fd, @map_idx, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x2}, 0x90) sendmsg$inet(r1, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="2c000000000000000000000007000000861bffffff014a91edba9a504679cb77ff0204dadd0207000000000000005deb1100b4cd8cc30000000000"], 0x30}, 0x40) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0x2f}, {0xffffffffffffffc6, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x0, 0x3b, @broadcast}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x10}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x10, &(0x7f0000000040), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000400000005000500020000000500010006"], 0x6c}}, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000540)={@random="fb57e76be621", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x2, 0xf}}}}, 0x0) r4 = socket(0x3a, 0x6, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000ac0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x6, 0xac44, 0x100, 0x8, 0xa6, 0x7, 0xf0}, &(0x7f0000000b80)=0x9c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000c40)={r7, 0x9}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000102000000030000bd06c9f88080020057268becc3379c7c33b314b3", @ANYRES32=0x1, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000010000000c00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={&(0x7f00000000c0)='./file0\x00', r8, 0x4000, r5}, 0x18) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) setsockopt$inet_buf(r8, 0x0, 0x2f, &(0x7f0000000980)="30f07f09f7ab53ee190a3141287595ba11e701308b03a6b1be17ffa9a538fd1fe3e54e04ee833d2f2f20dd1a99db2cfdaf15ac063cc30e193d5b963793c7563b3387abcab6f3f2d5291097f5f18206921cdb68fedef150968267887963a50fe9e2b12d9667ba23f65e04b4868bfce7cb442cac1fc92fbd5ef6bf7627c39209e14805a65cd42e702e7bbcb9c155", 0x8d) writev(r10, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000005, 0x10012, r10, 0xffffd000) writev(r6, &(0x7f0000000900)=[{&(0x7f00000003c0)="f0c620e2ca59fc411e7b4145c7cf1527339ec59177ef74e6c01bb84b7b463420045e9f1a8f5c1f8ce0735156c38c56c8ff8861bf0245630e6cfa948fc775989b55", 0x41}, {&(0x7f0000000640)="df4f3a8996c94f1b185d1a1ee019467352d2ff92d6feb75d01", 0x19}, {&(0x7f0000000680)="5d067fd10d9824dd72620e2559d3e71c309c71a5c867a35374a97e24752e2f4abf46c8a5b300983a4906f2bffd16ae32a3b73f84b4187c0c851c3f7a0fe8b4529dd8e9061181b7b6e4b081e267396d5eabd94488e99717aa9c6583e3ad7e16c19c247ab64c900dc6b31b0f0b77e8c9976621e3be369154d0ea8d4bd64ff10e73a4202608b5a744a31daf9abfc80bafe1c4d954f61fc6bfc8f5364dfcc1f134ded97d38ff878b78c2fe2de0776477a5b2777d33f88f4e369a9beaee03", 0xbc}, {&(0x7f0000000740)="e4d5ac609985ac25e7e6aa2277a2838903c59c47e87300a081d583db9d146da36b70bd622770d8ec45301d26ed116de56a7600e8d540298b792244ce84a49909225b03230ecde1064caac70dc8ed0ac50d0dcd57f79db7f8a22ec035072676d923cf72fff971d95df4e0651f663f530729bd805dcf74c906f49e3300f3996243f0d6ed981f0d5287477e07b70bb7e42570d804d449f56e00fa27e9e7b98fb88eb91f20ca93440c1fee9b471802c0344ab1", 0xb1}, {&(0x7f0000000800)="1872f7f82282d6bdfb38cf8dd3c321fca69bf22388f88210fa31fb66159a361eae682635e85a499675a74e5b627e8630a643ec9a2e44728db470", 0x3a}, {&(0x7f0000000840)="783c889902d141d672fa1b3412d097bd0e9160f113b88ed65a399af1a2b9f246931b41b7bf1168dc612803387cca5bf0dbc73e30ffae328c450c1f57d0c78256f570a7f043f6c328434c5883bdd2aed63096e3b22e3c6aa9f5638a9654bac13dc020959afe41c8c7686212890e222ac96cace8e753bd44d8157f17f8937d3fd8ab3131013fd5e8c9ee75f4e7dbd8ee5c0c8d", 0x92}], 0x6) nanosleep(&(0x7f0000000200), 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500"], 0x7c}}, 0x0) 2.108065012s ago: executing program 3 (id=4983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}}}, 0x24}}, 0x0) recvmmsg(r2, &(0x7f000000ac80)=[{{&(0x7f0000000540)=@ax25={{0x3, @rose}, [@default, @rose, @rose, @rose, @default, @netrom, @rose, @rose]}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/65, 0x41}], 0x1, &(0x7f00000006c0)=""/252, 0xfc}, 0x800000}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/216, 0xd8}], 0x2, &(0x7f0000002540)=""/60, 0x3c}, 0x8}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000002580)=""/136, 0x88}, {&(0x7f0000002640)=""/67, 0x43}, {&(0x7f00000026c0)=""/107, 0x6b}, {&(0x7f0000002740)=""/4096, 0x1000}, {&(0x7f0000003740)=""/211, 0xd3}], 0x5, &(0x7f00000038c0)=""/217, 0xd9}, 0x8001}, {{&(0x7f00000039c0)=@caif=@dgm, 0x80, &(0x7f0000003a80)=[{&(0x7f0000003a40)=""/28, 0x1c}], 0x1, &(0x7f0000003ac0)=""/96, 0x60}, 0x1}, {{&(0x7f0000003b40)=@xdp, 0x80, &(0x7f00000052c0)=[{&(0x7f0000003bc0)=""/84, 0x54}, {&(0x7f0000003c40)=""/147, 0x93}, {&(0x7f0000003d00)=""/252, 0xfc}, {&(0x7f0000004000)=""/4096, 0x1000}, {&(0x7f0000005000)=""/122, 0x7a}, {&(0x7f0000005080)=""/236, 0xec}, {&(0x7f0000005180)=""/117, 0x75}, {&(0x7f0000005200)=""/124, 0x7c}, {&(0x7f0000005280)=""/5, 0x5}], 0x9, &(0x7f0000005380)=""/91, 0x5b}, 0x200}, {{0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000005400)=""/60, 0x3c}, {&(0x7f0000005440)=""/30, 0x1e}, {&(0x7f0000005480)=""/182, 0xb6}, {&(0x7f0000005540)=""/29, 0x1d}, {&(0x7f0000005580)=""/173, 0xad}, {&(0x7f0000005640)}, {&(0x7f0000005680)=""/4096, 0x1000}, {&(0x7f0000006680)=""/143, 0x8f}], 0x8, &(0x7f00000067c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000077c0)=@alg, 0x80, &(0x7f0000008c00)=[{&(0x7f0000007840)=""/223, 0xdf}, {&(0x7f0000007940)=""/203, 0xcb}, {&(0x7f0000007a40)=""/4096, 0x1000}, {&(0x7f0000008a40)=""/97, 0x61}, {&(0x7f0000008ac0)=""/193, 0xc1}, {&(0x7f0000008bc0)}], 0x6, &(0x7f0000009b80)=""/4096, 0x1000}, 0x3}, {{&(0x7f000000ab80)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f000000ac00), 0x0, &(0x7f000000ac40)=""/14, 0xe}, 0x5}], 0x8, 0x40010000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000400)={0x0, 0xe1, "ccde41f5ac013e8c149abe02024a63b55d4303641b8046c613757060cdaebabf9a1282415f16dbe2e6123fba9102119403a0c583a07e44097e9f5d38e50dc67cd70d60a3a1f8bbcb18e60379df3655bbed58124e1fa1201ea6ea9a405755610632085f74e06371cb037ae009e4e9a8a18c4e7ef45a1d9c5649ba3a699576b95029b808c71c9027c64b9938ed465ba1d4102109346d136b4fa3d17dd245d295aac1801e8ce459b0a0b4141bcaae77669519be8912cb87efda94339bb031a031f572d74d3a6e0bea69fe244fe7c66bbc5f7c624f1e347c8ac68dc40aba59110fe526"}, &(0x7f0000000500)=0xe9) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4288aa621446d823382818a05000000000000611034000000000072f6f33683b292ac6987aa63012c00"/54], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa823d7c6495df3fe4eb880fb78c7699c74e891a0c708000100544545000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x4) 2.106814479s ago: executing program 2 (id=4984): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r1, 0x18, 0x0, @void}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x1, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x3, 0x0}, 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000000a80)={{r1, &(0x7f0000000600)='\\\x00', 0x4001, &(0x7f0000000640)={@_ha_fsid={[0xfffffffe, 0x8]}, {0x9, 0x3, 0x9, 0x7}}, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x3c9d}, 0x4, &(0x7f0000000a00)=[{0x2, 0x7, &(0x7f0000000700)='./cgroup.cpu/syz0\x00', &(0x7f0000000740)="ac7ce7a7568ea5c39469d71a6c495b1b1508c58c280f279db856dd18bc2cac95b69a0aec3ede90cd6bcfdb2d75afeaa1bafaee45f8c652256e52582a0213d347b8b9579872866d0fec5126c5cd3dea42320c01825fe9feba19fa3d25530f7baf43b614007f1d2eb1b9b365c2b36f6fe03e46", 0x72, 0x2a}, {0x2, 0x6890, &(0x7f00000007c0)='/dev/virtual_nci\x00', &(0x7f0000000800)="6fed9135dc56c0f39f484c1a8994b5484ca976906c61f80751d13249e17b9198e0690f818335061c4e3a57bf92ad23adc9199ceab4a5fdc414ff9081fe1101f3b68aa97f73ba779c84a50c26590a48777cf67efd33da20c9588437d9ee4f075b2f7fee097bb65292181d45543bc23edd6ef0f774ac91b565bf61f59366d2b25fd29e09b49ff38116c656a7538c2004a919658d30624c156ca6cf491d687b8fcebaf389b2a2", 0xa5, 0x50}, {0x3, 0x27, &(0x7f00000008c0)='/dev/virtual_nci\x00', &(0x7f0000000900)="6e6c5264a0339fb47a35b273789e02e39f14007ecc86331e199235aae5c3f8bfeee898f42c0d56a8406660869e04e941ec703f0979ad56f469c144baae11a6d25946d7e0b9d421746ccf3fc359f1", 0x4e, 0x32}, {0x3, 0x6, &(0x7f0000000980)='/dev/virtual_nci\x00', &(0x7f00000009c0)="0e00a068ea4c4ba253cf16ae58c91860c276f96a96244ee26e4386640d38c31ea1fb69e4483d", 0x26}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x15, 0x1a, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x2, 0x0, 0x3, 0x4, 0x4, 0xffffffffffffffff, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x45}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x1, 0x5, 0xa, 0x4, 0x6, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x61880, 0x56c9b168655753ca, '\x00', r5, @fallback=0x26, r0, 0x8, &(0x7f0000000400)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, r0, 0x8, &(0x7f0000000480)=[r0, r0], &(0x7f00000004c0)=[{0x2, 0x4, 0x9, 0x1}, {0x5, 0x5, 0x2, 0x7}, {0x3, 0x5, 0x0, 0x1}, {0x1, 0x4, 0xb, 0x1}, {0x4, 0x1, 0x10, 0x9}, {0x5, 0x2, 0xc, 0xa}, {0x1, 0x2, 0xe, 0x1}, {0x1, 0x1, 0xd, 0x2}], 0x10, 0x7, @value=r7}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000b00)={0x0, @in6={{0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, [0x2, 0x8, 0x1, 0x1, 0xfffffffffffffffc, 0x6, 0xfffffffffffffff9, 0x81, 0xeba, 0x5, 0x9, 0x6, 0x10, 0x3, 0x5]}, &(0x7f0000000c00)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r7, 0x84, 0x19, &(0x7f0000000c40)={r9, 0x3000}, 0x8) sendmsg$nl_route(r7, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80040}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)=@mpls_newroute={0xc0, 0x18, 0x2, 0x70bd26, 0x25dfdbff, {0x1c, 0x14, 0x0, 0x9, 0x7e, 0x1, 0xc8, 0x7, 0x100}, [@RTA_MULTIPATH={0xc, 0x9, {0x4, 0x0, 0xe, r5}}, @RTA_NEWDST={0x84, 0x13, [{}, {0x80}, {0x9, 0x0, 0x1}, {0x1}, {0xffffb}, {0x6, 0x0, 0x1}, {0x7f}, {0x6, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0xc00a}, {0xf5e19, 0x0, 0x1}, {0x4000}, {0x3}, {0xfe000}, {0x1}, {0x8acc, 0x0, 0x1}, {0x9786}, {0xff84b, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x7f}, {0x3}, {0x9, 0x0, 0x1}, {0xb, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xd, 0x0, 0x1}, {0xfc05, 0x0, 0x1}, {0x80, 0x0, 0x1}, {0xd, 0x0, 0x1}, {0x5}, {0x10, 0x0, 0x1}]}, @RTA_VIA={0x14, 0x12, {0x15, "241c52120beb858b572074856736"}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4080040}, 0x400c000) bind$netlink(r0, &(0x7f0000000e00)={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ec0)={r3, 0x58, &(0x7f0000000e40)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r8, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000f40)=[0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0xda, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000001240)={'vlan0\x00', &(0x7f0000001200)=@ethtool_channels={0x3d, 0x7ff, 0x1, 0x3, 0x401, 0x6f, 0x8, 0x80, 0x8}}) r11 = accept$packet(r0, &(0x7f0000001280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000012c0)=0x14) ioctl$BTRFS_IOC_WAIT_SYNC(r11, 0x40089416, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r8, r7, 0x1c, 0x0, @void}, 0x10) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001340)={r9, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000001380)=0x1, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000013c0), &(0x7f0000001400)=0x4) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(0xffffffffffffffff, 0x40106e8c, &(0x7f0000001440)=[0x5, 0x1]) recvmsg$can_raw(r7, &(0x7f0000001700)={&(0x7f0000001480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)=""/88, 0x58}, {&(0x7f0000001580)=""/30, 0x1e}], 0x2, &(0x7f0000001600)=""/210, 0xd2}, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000001740), &(0x7f0000001780)=0x4) r12 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$SO_TIMESTAMP(r12, 0x1, 0x1d, &(0x7f00000017c0), &(0x7f0000001800)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0x6, 0x13, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x54}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001900)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001940)=""/4096, 0x40f00, 0x0, '\x00', 0x0, @xdp, r0, 0x8, &(0x7f00000029c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000002a00)={0x4, 0xb, 0x5, 0x6}, 0x10, r10, r7, 0x4, &(0x7f0000002a40)=[r4], &(0x7f0000002a80)=[{0x0, 0x5, 0xb, 0xc}, {0x3, 0x3, 0x5, 0x8}, {0x5, 0x5, 0x2, 0xa}, {0x3, 0x1, 0x1, 0x9}], 0x10, 0x16}, 0x94) 2.063861265s ago: executing program 0 (id=4985): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000000000000000083"], 0x0, 0x45, 0x0, 0x0, 0xa}, 0x20) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/1, 0x1}], 0x1) 2.044701047s ago: executing program 4 (id=4986): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000100)) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x2}}, 0xb8}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x0, 0xb55, 0x0, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40440c4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r8, 0x0, 0x0}, 0x10) 1.919178048s ago: executing program 1 (id=4987): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="440000001f0001"], 0x44}], 0x1}, 0x0) 1.867970403s ago: executing program 0 (id=4988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmmsg(r2, &(0x7f0000001780)=[{{&(0x7f0000000300)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)="e056b0ddfacd343abf31dd4076ef00da5d116ef7ad06341ac831dfeb2d502c8c2d00be226a6f1a1cd35af359f8c0", 0x2e}, {&(0x7f00000003c0)="6a293d3ad9593f1426eda2fc16cc99bef12b3db22cfab50d8d7fcaa8b515200b250ab30363055df8fe049a480ddaa46c60dd3c71413e55cb93744509dfc1fa485b1333857f32d7c24214246c2e0da91244ea9413a1e7a7f27a578deb949d141667b8e83f4ec0b3fb4d52d1bd11d4cea4955aa29707d6b000620b33b189e08e76e36ff637d3342340f16f7dc4510037574dbee3dd19526797ede55b4d", 0x9c}, {&(0x7f0000000500)="2415eb579c828de4b5b676faef9d08aefae873cb4f83b7af4e705b43f28d81fabddd4708fc7fa4296b8eb6fdb9a0dda40c1a402422610271543efad7b7167091188aaa3e91e5fd1f3df48f0db64317dd7731aa8dbb9ee84542cdf0b2a3ce1ccacbe4cc5e6e75a28b5a5a75c4754e408d2f85c8b0c6f3112ede0dc4e919b4028ae556e39754df4bb73955c943b90b", 0x8e}, {&(0x7f00000005c0)="a98aab73f6126db02401d920142e38fce52404061427e0aa45959bfde7b7a005dddb72d695b64764d07c4b5bb1b305b63f4e03dd75c9b4a429ce0a87e235abf1ed8e1858cf1f604ac3f59ff715759c06f20a987d0555d0cb13a11e6a7d136dca936f5a29787877a441b9ae25fb511576b0aeca593d8aa826b1458ac3c1a64901f2c2adae279237209991f53d8fc96d12299bd71eaa3d67334d06c194938aaaa3b478e721caa3b76e1fdcefa6a91972604e7a91053a670b3bf6f46ff94cb2d9d5cc17186018", 0xc5}, {&(0x7f00000006c0)="5bcdbfd739780c49e348eed2c82c0729fb1f628b05d5734b67d513a2ac3c9fa6f8e6924d19a188c856a61887e52f50b36d2f847bfde2e3e19534dd64881a0be917964032bae532fb33a137b1a810db9e8f0f2f2a4ca05c38bb088e732030fb3a9d9e8e5be969540b2e1b164c2fd4ca6e52737961284b71f7e27d002fd82bd64124f377bf9c0340d0fca1927c5e2d175f4f5e3eadd2b9e2fc", 0x98}], 0x5, &(0x7f00000009c0)=[{0x40, 0x112, 0x4, "775bc9ddc7f5d95b503abab86526dc32a5635a6044c16b40e57d227d3f301e60d5bdb1bada02fc6eda8e8472"}, {0x48, 0x111, 0x2, "def55b3dca3e80b74b7522018d13abafbb56eee3a9de9ca140a7e171bf1e3257aa58a1fff9205141039adad6eec023b49aee"}, {0x88, 0x110, 0x8, "f5bcaf977289777a77843f12f00c0093509270d29347d6a82e5cf5a0332bbeaea3087ac97a8957848fad45e69bec8ffb6d8bd4c5c362a757ff78244c8349975d64a6c05cd69aee53a88f41b3fe47176c40051a760415ab8a55b06213dc9c7798d9d3dee2095d5db2d8323b8d2d64b330c8db"}, {0xa8, 0x1, 0xe4, "86c9ea5aa714888ecbdd3c60297e52dc0ab6c720e73590019b0666f9db5692b5cd7c39a4509d8a90a2b40b3703c0d78f385ca3a964223735f58aa6f187c613540cc6aa3fd232d21bcf25527a1262647cae63600e05493834c527506b5ceb355ee2ec95fd6dd42833ce9224638dc29c91bd57216de88b953500c7b13eab1402aae3dcc8b16ed1db2d251dbb5403934c264dfb9b90"}, {0x90, 0x119, 0x7fffffff, "b7a348c97a919c36fe44c80a4c9c494c9d1efc1d9a8003e295937a831d3f334dc564c785a335de306e3fb3cc38fb86fc56e040ad94932402a2174fc8f2ccb9d4ba62d31618bc2340b551833b42af2d7e243fee80ec65c839ae102008b7b78a104894c6fdb8de59fa86797bc24b996769c781fd8b9259bd99696a"}, {0xe0, 0x1, 0x0, "af5b55c1fdd6a40487373ffb09d8ab55ba9ccc5e5a10067fb065e923012f3e20a994fa620c37ae9a6847631695dcc24bd24f90ff332e74b0b8c0341e5eab46908adf0494552967a9155a17acbaabca5cf2472f796e894a898969f442f517b8662f54cc7bb22244f06eca75d8679596a3b46a40b5bcaa9026a30aa6a995516867c372c29eedbae948359149c77c44b7f47835e88a1aa82364ab8c432abe5d3c2f7544d8a5e28eb4ccc521d90e24b325ea393e23db52314e088995da6e6f4c9def44071c9c7d199c8edae2d9b9670bf5"}, {0xf0, 0x107, 0x4, "75dbeb2cc848694966ef1fbd3dbe65ee53a31a0bb5209bc37c41015286f2a00ecee3ffc72c28bee869f4abec12faaeff8e9ae25f7a488c46b471014c5286061864d3b694e2ac8a37c4fa2a113343420cdeca9c54ca0ab7f18a108ac738421547ecdce9e07f376a605add5cdc708f9e2e0b9d3fd425cb2ec51ae1a09abb2342ffa80fe528f3501bf97cd8d22d7ac04e4a61f92c9e98c01d896689c2055913ccb7821e819e12d469d686860fdb0e24a3890787540df65f6eb1fba688c53e2545336af02bb4124225c9a169b61d3e0bb127481e0082dfca25bb0a79d8"}, {0x100, 0x3a, 0x8, "6593bc146b49f80d86529cd5bc286a0add31bd87b70d474497e262805d905db0d470d685e2023eb1eefa1525c2790a29e5e2e94d4984b338c1dba422a0687ed23ac4d0a2acaf4005522a9b94cb3adf07d9bc510c6c96c33cdbec7bb8625445339061496af52752cf8ec9b645e2f8f5836298effffda93b313bfbf997ee12311ac7c3964a84960343fa8dafaf55a46bdd0bcac41ef347c649bc1ff1f9fed68146f57b8a1bdcde773ebfab7a3ea319bdd4490bb8c6db32e334fa70b43384fa5bdcb96ab183c996f9b3f37c141a98b35e615da6b86785ba3e50bedd63be25e5ff5486e94db58ffcb22de83ba04b17"}, {0xd8, 0x10b, 0xffff, "951a1b8b13183b46fa7a87852cfab1833c2956a03352809019fdfcca27f38834295d427f5179d272a0a38025a4c8308ccd74ab48dad514a44ca5be10fcab62169a87595080d647585a27c1f22b13670487fc7d30c51ca4bd7402f47dfee18f0edbc076033a867df71ec36ea9e9b05fcbb5cf5572ca5f3a77780d4d63de0a01486a3f91310fc03decacffdf1fbbe7fa972a4e9cb1f9c851b68b3fd74bd61df5e3085c93ae1dd0939cf334b9c9e05ac0f8bbad8bdc5d50cad33c2ffb1c2831fd44d80f4df537fc695e"}], 0x5f0}}, {{&(0x7f0000000fc0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001040)="d0d8c56694aaf4c10e90ce3bc83b69f103793396ccbe0196c3622acdeeece801fdfa0bcb824b042f562ab7d570e7e4af31409e279a68b144cb4852ffb612f6144729acd958cf60044a8a850e7e3bbe48d83f4626ea679f830ba535182cbd31e4978c48d940239c4a09eae3ee76c03864d7fcec17396dee0f752d3bb7133de3", 0x7f}, {&(0x7f00000010c0)="60a16c1465a19a5ebfe0c6e54fc83a1ab2813779896e3d760c67e1abb17d9f6d4564aeb5a67a7bf02e48422e352ce5d07b33ab4efef050a28ff9fb5d8f010a3b38a520d6f94863d3f3a8d63b4cef0530cc0315862deb878cdc6f207f9d27cd8e24aa50ed00a0508d1d35ad747410e02191e12b1ca624226ff8bfc7fa1df145eabb5f024e80cc5c2d1ea122709e3d9101f38d2a2bf5795811d4c8c978ebbf956f573e6091dcf5de89abe6ecdfe6e7d87e4101470d67e10ecd687780ea2687c9ef14e732522f8c77ae7c4c706b467a0fa3066544", 0xd3}, {&(0x7f00000011c0)="9a433e788a935557fc37a1a4cda2ce243d49f5f3f58f7b56c996e1cec38ed92c47bb18cb2a160b4f0e", 0x29}, {&(0x7f0000001200)="4ca66608e7b495034c2e586eb9720ea69be79ceacd9410421cf03cf0fc8c9b439a3575549531ff40913fed31cf193fb7045235cb1f4420ba16b7da7e06bbe41f80510c0eedfb04a69482b6e081e08291004798eb74773af830d2b9", 0x5b}, {&(0x7f0000001280)}, {&(0x7f00000012c0)="187babea681beb4be1f6a061540b1cc9135ba98a01ede8ea7ccae7da3f5c095a38690a032d704029068b4f010628a80b012da0884327b5cb700d50375a52a918690241507507b8d1250b99dc6602f331944ba6d53849a4a29a6ac2452849143d7708830a3fcbac4f8f371bbfc559726702052179ded5f4", 0x77}, {&(0x7f0000001340)="1653d40a9b1039cb61ba697f06b4f48459d02fcd6e62cf3991866717e3e0de917851d562641ac8be2f56fe9088b30ec63c8fadd716c4feeb32503ab44c164342a098664c6675fbebe67553a28f7eda39153042b385aa39b981facb492bfec22384bd17f280dba19c3fb60332967a4e1bb27af2d31e8d6e60823b28b318e3772810b3e281efa565e9324a335701de809bf39867a20c020186b821f6d0fd96fd5e950da6b8b9d16f8ed799b8492f1620a8afb7557307575828b9ac93266c9db907968b39ac497e054a91737cecfdf0185f1281035d682f465589ce2ce527376e4cd927011152e131359b33", 0xea}, {&(0x7f0000001440)="1916aa4ae4d60a7430e49b2af202ff92a76d817d067a245bc1e8cf614e977ff764f2fd7c17466134c605b224738e32487f9fb31ac8276e2e003fc4171a324e03c3c6c669f792d6a97181a9ccfdbe761172d9968f2ca3940a68f38a63e1cd8725b75dbe51449ecb9070c9258529b3cb2d22d331354cd2e78128785ef7cbefbe3fbb7a19ed1b9fe6b60eb5cde3facece5cac869e2a61f74e1fc4f4774837d02cff463ce5e183c1881cd64150b6c75b7674f11a70988033ab3c4278551bea2037613c832e2eae4d5ebd0b073bae1bba7260e6f09eaf6b9b75f359646615b5b139baef549989760ecbac9017f0be08ae741cd0a995143456", 0xf6}, {&(0x7f0000001540)="abf140f2ea1731082d0ead2e331ddb663ddbbf9c20db5873e3fe858a41df64ac99ee9f586342299933bd82832f22305cee8857a5764c4b68724334d66aef7a9ec847029a7a46036d8a398f81ca1aa0c34be5994f64d7f09d2e890b9240a613207905b30bc86bc6a0aaf555548516fc0c6e150341b6c1dbe5a17411254e39dbc9", 0x80}, {&(0x7f00000015c0)="eea8ba8021a72d016519404950610ae45fe2d39f1e4cf36ac27d03007ecde523e28b56816b73c32dd7390d121db027c782ec1c434388dc7d47cf28fe18c227c6096aeaf44e2b2fa1db34b95575fcf94fe6344b35246008ec45a1cd395ea846f2b14e51edae02a219a23eba0362b9e6a13e68c91d3217654d6bf8fd70127a4a3bf160af529c6c9d2d7cd6638fd706631236c3e7ad2e67c31c54e7ecef4af4147577e650f1791c93b5dafd4936bcd5539b327fcfe0e2a0c948bc2f78a135a680fcd391733c63c785c43734d21fc0f452152f7fa27e72ba646190921cfcd2f8e6", 0xdf}], 0xa}}], 0x2, 0x4008848) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xfff3, 0xffff}, {0x7, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.813367977s ago: executing program 3 (id=4989): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r1, @ANYBLOB="089805000750050008001300", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x5c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000002c0)={0x772, {{0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}}}, 0x1, 0x7, [{{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e24, 0x8, @mcast2, 0x1}}, {{0xa, 0x4e21, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {{0xa, 0x4e24, 0x7, @mcast2, 0x1000}}, {{0xa, 0x4e24, 0x0, @mcast2, 0x7}}, {{0xa, 0x4e22, 0xe, @rand_addr=' \x01\x00', 0x10000}}, {{0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x3ff}}]}, 0x410) 1.691853451s ago: executing program 1 (id=4990): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000e00000000000000008500000053000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r1}, &(0x7f00000009c0), &(0x7f0000000a00)=r3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000000d090000004000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r7, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r8, r6, 0x4}, 0x5) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) 1.690317499s ago: executing program 2 (id=4991): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) write(r3, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e000000000000ea08000f0001000000", 0x24) 1.375874634s ago: executing program 3 (id=4992): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150127bd7000fddbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="38002d800a0000000101010101010000040000000a005930f02000020202020202e2ff0a00000002020202020200000a00000002020202"], 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (fail_nth: 7) 1.31141433s ago: executing program 3 (id=4993): r0 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x10}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newrule={0x38, 0x1e, 0x1, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x42812}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="44d700000010000d042dbd7000fcffff1f000000", @ANYRES32=r4, @ANYBLOB="46000600000000002400128009000100626f6e640000000014000280050001000200000005000e0005000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=r4, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) connect$llc(r6, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) setsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f00000000c0)=0x2, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000014001a80100005800c000780080001"], 0x34}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r10, &(0x7f00000001c0), &(0x7f0000000000)=""/7, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061107e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 863.94129ms ago: executing program 4 (id=4994): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x2) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4000000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6803e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0xf0, 0xf0, 0xffffffff, 0x310, 0xf0, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x33, @ipv4=@empty, @ipv4=@rand_addr=0x64010102}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @port=0x4e22}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private0, [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x33, 0x2, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x91) 806.562479ms ago: executing program 0 (id=4995): socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000002740)) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3b0, 0xffffffff, 0x1a0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'macvlan0\x00', {}, {}, 0x88, 0x40, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x2}, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0x0, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0xe7, 0x4, 0x44}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x80}}, @common=@unspec=@helper={{0x48}, {0x0, 'pptp\x00'}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'nr0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6e, 0x9, 0x7, 0xb2, 0x0, 0xffffffff, 0x0, 0x5}}, {0xe, 0x2, [0x6, 0x4, 0x0, 0x6, 0x3]}}, {{0x1c, 0x1, {0x3, 0x3, 0x4, 0x3, 0x0, 0x9, 0x10001, 0xa}}, {0x18, 0x2, [0x2, 0x5f, 0x3, 0x200, 0x2, 0x5ca0, 0x8, 0x20, 0x7ff, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x44, 0x81, 0x7, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0xfff1, 0xf90, 0xfff9, 0x4, 0x1, 0x7fff, 0x1929, 0x2, 0x93]}}, {{0x1c, 0x1, {0x7, 0x7, 0xfff7, 0x10001, 0x2, 0xa, 0x3, 0x8}}, {0x14, 0x2, [0xc000, 0x2, 0x0, 0x977, 0x5, 0x8000, 0x1, 0x7]}}, {{0x1c, 0x1, {0x1f, 0xa, 0x3, 0x0, 0x0, 0x9, 0x7e, 0x5}}, {0xe, 0x2, [0xfd, 0x6c0, 0x2, 0x8, 0x4]}}, {{0x1c, 0x1, {0x9, 0x2, 0x7, 0x0, 0x1, 0x6, 0x2, 0x3}}, {0xa, 0x2, [0x8, 0x0, 0x7]}}, {{0x1c, 0x1, {0x2, 0x1, 0x6, 0x4, 0x0, 0x5, 0x7b, 0x8}}, {0x14, 0x2, [0x8, 0x3, 0xc, 0x0, 0x4, 0x7, 0x948, 0x0]}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05032200d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="61106f000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) 801.043969ms ago: executing program 1 (id=4996): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) r0 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="87882b8ee4440cb40a78e669c44876a935fcc1eadb526f921fc0b1504bd64ba2386577ab6a2c5c84301dadd6b1077ee79593155f6907d6d6a37d792df86765a3403403348c59e6a9b631931eef2570b2bf851d5cb05c1acd62edde001518e27ef08612b9c149549effe67c", 0xffffffffffffff94, 0x0, 0x0, 0xffffffffffffffd8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='GPL\x00'}, 0x80) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='scalable', 0x8) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000010000000000000000000000071100a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 756.011875ms ago: executing program 4 (id=4997): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="00010000160001000000000000000000fe88"], 0x100}}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000001701000003"], 0x18, 0x40045}], 0x1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8000, 0x0) read$rfkill(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xc, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000000080)=0x8, 0x4) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000400000014000500fc010c0000000000000000000000000008000200050000001c0006"], 0x4c}}, 0x0) 496.827143ms ago: executing program 1 (id=4998): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="0203000210000000020000000000000005000600000000000a004e240000f59cff01000000000000000000000000000101000000000000000200010000000000000000000000000005000500000000000a004e2000000007fe80000000000000000000000000000bff7f0000000000000200080010"], 0x80}, 0x1, 0x7}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff070000140003002e000000000000d700000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x32}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 301.889409ms ago: executing program 4 (id=4999): r0 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000500)={0x0, 0x2b4, 0x7}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) accept4(r2, 0x0, 0x0, 0x0) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x11, &(0x7f0000000180)=0x400000001, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008045) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008045) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x41000) (async) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x41000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0x4, 0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000900)={r1, 0x5b, 0x1, [0x7, 0x8, 0x9, 0x3, 0x30f800000], [0x1af19586, 0xfffffffffffffff8, 0x4, 0x1, 0x2, 0xfffffffffffffbff, 0xf, 0x7ff, 0x483, 0x5, 0x6, 0x7, 0x1, 0x5, 0x5, 0xb5, 0x2, 0x8, 0x8, 0x7, 0xfe4, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0xfff, 0x6, 0xe, 0x3, 0x8, 0xffffffffffffffff, 0x7, 0x7, 0xffffffffffff952f, 0x7, 0x6824, 0x7ff, 0x49ed, 0x5, 0x382, 0x52ae84f5, 0x80000001, 0x40, 0x0, 0xf, 0x0, 0x3, 0xfcd8, 0x4ab2, 0x8, 0x7, 0xfff, 0x8, 0xffff, 0x1, 0x1, 0x6, 0xd9, 0x0, 0x4, 0xffffffff, 0x6, 0x8, 0x2, 0x1, 0x2, 0x0, 0x7, 0xb6, 0x4, 0xfffffffffffffffb, 0xe5, 0xc, 0x8, 0x0, 0x2c0f, 0x800, 0x6, 0x93f00, 0x9, 0x4, 0x7, 0x9, 0x199, 0xed3, 0x7, 0x0, 0x4, 0x1800, 0x5, 0x0, 0xfffffffffffff095, 0x3, 0xe, 0x8, 0x100, 0x5, 0x8, 0x7fffffff, 0x1, 0x9, 0x80, 0x3, 0x1, 0x3, 0x796b, 0x1ff, 0x8000, 0x6, 0x2, 0x8cb7, 0x36, 0x0, 0x7, 0x2, 0x4c2e, 0x3, 0xa8a, 0xfffffffffffffff7]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000900)={r1, 0x5b, 0x1, [0x7, 0x8, 0x9, 0x3, 0x30f800000], [0x1af19586, 0xfffffffffffffff8, 0x4, 0x1, 0x2, 0xfffffffffffffbff, 0xf, 0x7ff, 0x483, 0x5, 0x6, 0x7, 0x1, 0x5, 0x5, 0xb5, 0x2, 0x8, 0x8, 0x7, 0xfe4, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x80000001, 0x7, 0xfff, 0x6, 0xe, 0x3, 0x8, 0xffffffffffffffff, 0x7, 0x7, 0xffffffffffff952f, 0x7, 0x6824, 0x7ff, 0x49ed, 0x5, 0x382, 0x52ae84f5, 0x80000001, 0x40, 0x0, 0xf, 0x0, 0x3, 0xfcd8, 0x4ab2, 0x8, 0x7, 0xfff, 0x8, 0xffff, 0x1, 0x1, 0x6, 0xd9, 0x0, 0x4, 0xffffffff, 0x6, 0x8, 0x2, 0x1, 0x2, 0x0, 0x7, 0xb6, 0x4, 0xfffffffffffffffb, 0xe5, 0xc, 0x8, 0x0, 0x2c0f, 0x800, 0x6, 0x93f00, 0x9, 0x4, 0x7, 0x9, 0x199, 0xed3, 0x7, 0x0, 0x4, 0x1800, 0x5, 0x0, 0xfffffffffffff095, 0x3, 0xe, 0x8, 0x100, 0x5, 0x8, 0x7fffffff, 0x1, 0x9, 0x80, 0x3, 0x1, 0x3, 0x796b, 0x1ff, 0x8000, 0x6, 0x2, 0x8cb7, 0x36, 0x0, 0x7, 0x2, 0x4c2e, 0x3, 0xa8a, 0xfffffffffffffff7]}) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x5, 0x90, [0x200000004bc0, 0x0, 0x0, 0x200000004dbe, 0x200000005172], 0x0, 0x0, &(0x7f0000004bc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x108) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2b, 0x2d, 0x4, 0x4, 0x44, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, 0x1, 0x700, 0x7, 0xb6ad}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', r7, 0x80, 0x80, 0x1, 0x9, {{0x20, 0x4, 0x0, 0x7, 0x80, 0x68, 0x0, 0x5, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0x73, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @empty, @remote]}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x6, [0x3, 0x800, 0x800, 0x0, 0x7ff, 0x5, 0xfffffff9]}, @timestamp_prespec={0x44, 0x2c, 0xbb, 0x3, 0x4, [{@empty, 0x3}, {@local, 0x8}, {@broadcast, 0x7}, {@private=0xa010101, 0x401}, {@multicast1}]}, @generic={0x0, 0x9, "c6e25fc2526f5f"}]}}}}}) 215.23664ms ago: executing program 2 (id=5000): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000003c0)={0xb4, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8b0e}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3a2caf85}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xb4}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x0, 0xfffffff7, 0x4, 0x3, 0xffffffff]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x10000}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0xfffffff8, 0x8, 0x4, 0x70c1, 0x3, 0x9, 0x0, 0x3, 0x8001]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_ID={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x402}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4014}, 0x8010) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 115.789281ms ago: executing program 1 (id=5001): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async, rerun: 64) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, 0x0, 0x3a05f1ddf7519194, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000002}, 0x2000841) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async, rerun: 32) r6 = accept4(r5, 0x0, 0x0, 0x800) (rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r4}, &(0x7f0000000300)=0x10) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) 105.752087ms ago: executing program 3 (id=5002): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000600)={0xffffffffffffffff, &(0x7f0000000440)='\x00', 0x208000, &(0x7f0000000480)={@align=0x28, {0xfffa, 0x6, 0x10001, 0xfffffffffffff801}}, 0x10000, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0x6}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000003000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000002000b7080000040000003b8af89ad7fbef901fd728de3b5bff01000400bf0b00000000000007020000b34b22ea86d8bbf8ff1f442d889a3a0a85bb896931ffffb7030000d01fea711b8185e4fb377a036d43c7958d82073bcb6e1ff940ed62b1b5a0eeaf3b3b2b42a71878d4046a00000000000080000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f0000000240)={&(0x7f0000000140)={0xa, 0xa, 0x7, @empty, 0xfffffffd}, 0x1c, &(0x7f00000004c0)}, 0x20008b88) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030253fcfffffddbdf250100000200000000024100000018001369623a7665745540c16fda85237821fcb39014ef"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r8, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8884}, 0x800) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newlink={0x58, 0x10, 0x1, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x24}}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bind$x25(r6, &(0x7f0000000040), 0x12) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r10, &(0x7f0000000080), 0x12) close(r10) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) accept4(r4, &(0x7f0000000800)=@tipc=@id, &(0x7f0000000880)=0x80, 0x800) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 44.096469ms ago: executing program 0 (id=5003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="150127bd7000fddbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="38002d800a0000000101010101010000040000000a005930f02000020202020202e2ff0a00000002020202020200000a00000002020202"], 0x54}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (fail_nth: 8) 0s ago: executing program 4 (id=5004): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): es leftover after parsing attributes in process `syz.4.3396'. [ 431.726879][T18453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3395'. [ 431.792642][T18454] IPVS: using max 27 ests per chain, 64800 per kthread [ 432.055854][T18457] bond2: entered promiscuous mode [ 432.074957][T18457] bond2: entered allmulticast mode [ 432.110472][T18460] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 432.484474][T18472] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 433.683051][T17096] Bluetooth: hci0: command tx timeout [ 434.288865][T18525] netlink: 'syz.3.3413': attribute type 1 has an invalid length. [ 434.357764][T18525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.598909][T18343] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.622729][T18343] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.634501][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 434.655708][T18343] bridge_slave_0: entered allmulticast mode [ 434.667498][T18532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3416'. [ 434.694362][T18343] bridge_slave_0: entered promiscuous mode [ 434.746212][T18343] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.757881][T18343] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.768745][T18343] bridge_slave_1: entered allmulticast mode [ 434.799561][T18343] bridge_slave_1: entered promiscuous mode [ 435.123932][T18539] sch_fq: defrate 0 ignored. [ 435.153567][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3417'. [ 435.239642][T18343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.323432][T18343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.549590][T18343] team0: Port device team_slave_0 added [ 435.609655][T18343] team0: Port device team_slave_1 added [ 435.763237][T17096] Bluetooth: hci0: command tx timeout [ 436.042881][T18343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.057640][T18343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.087283][T18565] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3424'. [ 436.101516][T18343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.187523][T18343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.216622][T18343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.385783][T18343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.707641][T18560] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3422'. [ 436.739166][T18569] syzkaller0: entered promiscuous mode [ 436.746806][T18569] syzkaller0: entered allmulticast mode [ 436.762266][T18572] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3426'. [ 436.776029][T18572] veth0_to_bond: default FDB implementation only supports local addresses [ 437.042914][T18561] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 440.716383][T18586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3428'. [ 440.730375][T18597] netlink: 766 bytes leftover after parsing attributes in process `syz.4.3431'. [ 440.755427][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3431'. [ 440.827985][T18343] hsr_slave_0: entered promiscuous mode [ 440.856546][T18343] hsr_slave_1: entered promiscuous mode [ 440.907542][T18343] debugfs: 'hsr0' already exists in 'hsr' [ 440.923311][T18343] Cannot create hsr debugfs directory [ 440.952035][T18605] No such timeout policy "syz1" [ 441.002009][T18608] No such timeout policy "syz1" [ 442.072199][T18635] tipc: Enabled bearer , priority 0 [ 442.117847][T18624] syzkaller0: entered promiscuous mode [ 442.155956][T18624] syzkaller0: entered allmulticast mode [ 442.265774][T18625] tbf_change: 56 callbacks suppressed [ 442.265904][T18625] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 442.446094][T18628] syzkaller0: mtu less than device minimum [ 442.461201][T18642] netem: change failed [ 442.488153][T18623] tipc: Resetting bearer [ 442.645213][T18623] tipc: Disabling bearer [ 442.805198][T18651] netlink: 51 bytes leftover after parsing attributes in process `syz.4.3444'. [ 443.171232][T18343] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.186598][T18343] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.218508][T18343] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47467 - 0 [ 443.233441][T18343] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 443.469285][T18343] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.491860][T18343] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.504569][T18343] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47467 - 0 [ 443.517285][T18343] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 443.816890][T18343] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.896915][T18343] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.963077][T18343] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47467 - 0 [ 444.030652][T18669] netlink: 'syz.4.3449': attribute type 1 has an invalid length. [ 444.040506][T18669] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3449'. [ 444.049979][T18343] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 444.292038][T18343] netdevsim netdevsim2  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 444.330018][T18343] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.387538][T18343] netdevsim netdevsim2  (unregistering): unset [1, 1] type 2 family 0 port 47467 - 0 [ 444.442909][T18343] netdevsim netdevsim2  (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 445.428727][T18343] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 445.461560][T18343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.489163][T18343] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 445.547421][T18343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.578396][T18343] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 445.647756][T18343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.675223][T18343] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 445.745544][T18343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.764441][T18711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.805352][T18704] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3462'. [ 445.893804][T18711] netlink: 'syz.1.3463': attribute type 4 has an invalid length. [ 446.353884][T18728] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3466'. [ 446.711022][T18343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.915895][T18343] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.023278][T15034] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.031363][T15034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.147815][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.155776][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.665234][T18757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3476'. [ 447.736337][T18757] IPv6: NLM_F_CREATE should be specified when creating new route [ 447.928449][T18761] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3476'. [ 447.989174][T18761] netlink: 'syz.1.3476': attribute type 9 has an invalid length. [ 448.083381][T18761] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3476'. [ 448.181783][T18761] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3476'. [ 449.180618][T18792] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3481'. [ 449.343677][T18795] FAULT_INJECTION: forcing a failure. [ 449.343677][T18795] name failslab, interval 1, probability 0, space 0, times 0 [ 449.368616][T18792] siw: device registration error -23 [ 449.402603][T18795] CPU: 1 UID: 0 PID: 18795 Comm: syz.3.3482 Not tainted syzkaller #0 PREEMPT(full) [ 449.402630][T18795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.402641][T18795] Call Trace: [ 449.402649][T18795] [ 449.402657][T18795] dump_stack_lvl+0xe8/0x150 [ 449.402687][T18795] should_fail_ex+0x412/0x560 [ 449.402715][T18795] should_failslab+0xa8/0x100 [ 449.402736][T18795] ? skb_clone+0x212/0x3a0 [ 449.402850][T18795] kmem_cache_alloc_noprof+0x87/0x650 [ 449.402876][T18795] ? __netlink_lookup+0xc6/0x8b0 [ 449.402939][T18795] skb_clone+0x212/0x3a0 [ 449.402960][T18795] __netlink_deliver_tap+0x404/0x850 [ 449.403022][T18795] ? netlink_deliver_tap+0x2e/0x1b0 [ 449.403048][T18795] netlink_deliver_tap+0x19c/0x1b0 [ 449.403076][T18795] netlink_unicast+0x730/0x8e0 [ 449.403115][T18795] netlink_sendmsg+0x813/0xb40 [ 449.403150][T18795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.403178][T18795] ? aa_sock_msg_perm+0xf1/0x1b0 [ 449.403268][T18795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.403313][T18795] ____sys_sendmsg+0x972/0x9f0 [ 449.403357][T18795] ? __might_fault+0xaf/0x130 [ 449.403391][T18795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.403418][T18795] ? import_iovec+0x73/0xa0 [ 449.403475][T18795] ___sys_sendmsg+0x2a5/0x360 [ 449.403493][T18795] ? __lock_acquire+0x6b5/0x2cf0 [ 449.403518][T18795] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.403540][T18795] ? __lock_acquire+0x6b5/0x2cf0 [ 449.403588][T18795] ? __fget_files+0x2a/0x420 [ 449.403609][T18795] ? __fget_files+0x3a0/0x420 [ 449.403641][T18795] __x64_sys_sendmsg+0x1bd/0x2a0 [ 449.403662][T18795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.403691][T18795] ? handle_softirqs+0x715/0x840 [ 449.403734][T18795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.403755][T18795] do_syscall_64+0x174/0x580 [ 449.403778][T18795] ? clear_bhb_loop+0x40/0x90 [ 449.403801][T18795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.403819][T18795] RIP: 0033:0x7f34b8f9ce59 [ 449.403837][T18795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.403853][T18795] RSP: 002b:00007f34b71f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.403873][T18795] RAX: ffffffffffffffda RBX: 00007f34b9215fa0 RCX: 00007f34b8f9ce59 [ 449.403886][T18795] RDX: 0000000000000004 RSI: 0000200000002800 RDI: 0000000000000003 [ 449.403897][T18795] RBP: 00007f34b71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 449.403909][T18795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.403919][T18795] R13: 00007f34b9216038 R14: 00007f34b9215fa0 R15: 00007ffe4cdb7e58 [ 449.403950][T18795] [ 449.768352][T11500] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.850027][T18806] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 449.932082][ T1174] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.941185][ T1174] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.949895][ T1174] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.279965][T18343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.306674][T18826] SET target dimension over the limit! [ 450.334508][T18826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3490'. [ 450.343395][T18826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3490'. [ 450.436310][T18832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3491'. [ 450.585147][T18343] veth0_vlan: entered promiscuous mode [ 450.669512][T18343] veth1_vlan: entered promiscuous mode [ 450.898947][T18845] netlink: 'syz.0.3494': attribute type 9 has an invalid length. [ 450.923859][T18843] syzkaller1: entered promiscuous mode [ 450.930678][T18843] syzkaller1: entered allmulticast mode [ 450.938918][T18343] veth0_macvtap: entered promiscuous mode [ 450.968690][T18343] veth1_macvtap: entered promiscuous mode [ 451.079662][T18343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.171810][T18343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.343096][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.507662][T18863] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 451.522067][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.531633][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.562427][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.633194][T15034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.641035][T15034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.768093][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.775979][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.968379][T18879] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 452.347090][T18892] netlink: 'syz.1.3511': attribute type 1 has an invalid length. [ 452.448850][T18894] __nla_validate_parse: 1 callbacks suppressed [ 452.448869][T18894] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3512'. [ 452.487539][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3513'. [ 452.562194][T18899] veth1_macvtap: left promiscuous mode [ 452.647580][T18899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3514'. [ 453.124373][T18911] xt_CONNSECMARK: invalid mode: 0 [ 453.263549][T18922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3518'. [ 453.584656][T18942] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3525'. [ 453.633611][T18941] x_tables: duplicate underflow at hook 1 [ 453.748424][T18944] macvtap1: entered promiscuous mode [ 453.753820][T18944] vlan0: entered promiscuous mode [ 453.759316][T18944] macvtap1: entered allmulticast mode [ 453.764700][T18944] vlan0: entered allmulticast mode [ 453.769824][T18944] veth0_vlan: entered allmulticast mode [ 453.812432][T18947] tipc: Cannot configure node identity twice [ 453.959079][T18954] FAULT_INJECTION: forcing a failure. [ 453.959079][T18954] name failslab, interval 1, probability 0, space 0, times 0 [ 453.990916][T18954] CPU: 1 UID: 0 PID: 18954 Comm: syz.3.3531 Not tainted syzkaller #0 PREEMPT(full) [ 453.990940][T18954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.990951][T18954] Call Trace: [ 453.990960][T18954] [ 453.990969][T18954] dump_stack_lvl+0xe8/0x150 [ 453.990996][T18954] should_fail_ex+0x412/0x560 [ 453.991020][T18954] should_failslab+0xa8/0x100 [ 453.991041][T18954] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 453.991066][T18954] ? __alloc_skb+0x1d0/0x7d0 [ 453.991151][T18954] ? __local_bh_enable_ip+0xd0/0x130 [ 453.991173][T18954] __alloc_skb+0x1d0/0x7d0 [ 453.991195][T18954] ? netlink_ack_tlv_len+0x6c/0x210 [ 453.991223][T18954] netlink_ack+0x146/0xa50 [ 453.991244][T18954] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.991262][T18954] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 453.991372][T18954] ? __pfx_nl80211_post_doit+0x10/0x10 [ 453.991397][T18954] ? __pfx_ref_tracker_free+0x10/0x10 [ 453.991471][T18954] netlink_rcv_skb+0x2b6/0x4b0 [ 453.991497][T18954] ? __pfx_genl_rcv_msg+0x10/0x10 [ 453.991518][T18954] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 453.991559][T18954] ? down_read+0x270/0x2e0 [ 453.991577][T18954] ? genl_rcv+0xd/0x40 [ 453.991599][T18954] genl_rcv+0x28/0x40 [ 453.991617][T18954] netlink_unicast+0x75c/0x8e0 [ 453.991647][T18954] netlink_sendmsg+0x813/0xb40 [ 453.991679][T18954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.991708][T18954] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.991734][T18954] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.991760][T18954] ____sys_sendmsg+0x972/0x9f0 [ 453.991777][T18954] ? __might_fault+0xaf/0x130 [ 453.991805][T18954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.991831][T18954] ? import_iovec+0x73/0xa0 [ 453.991855][T18954] ___sys_sendmsg+0x2a5/0x360 [ 453.991870][T18954] ? __lock_acquire+0x6b5/0x2cf0 [ 453.991894][T18954] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.991945][T18954] ? __fget_files+0x2a/0x420 [ 453.991965][T18954] ? __fget_files+0x3a0/0x420 [ 453.991993][T18954] __x64_sys_sendmsg+0x1bd/0x2a0 [ 453.992012][T18954] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.992036][T18954] ? __pfx_ksys_write+0x10/0x10 [ 453.992069][T18954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.992088][T18954] do_syscall_64+0x174/0x580 [ 453.992106][T18954] ? trace_irq_disable+0x3b/0x140 [ 453.992131][T18954] ? clear_bhb_loop+0x40/0x90 [ 453.992152][T18954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.992168][T18954] RIP: 0033:0x7f34b8f9ce59 [ 453.992184][T18954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.992197][T18954] RSP: 002b:00007f34b71f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.992215][T18954] RAX: ffffffffffffffda RBX: 00007f34b9215fa0 RCX: 00007f34b8f9ce59 [ 453.992228][T18954] RDX: 0000000000000004 RSI: 0000200000002800 RDI: 0000000000000003 [ 453.992238][T18954] RBP: 00007f34b71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 453.992250][T18954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.992260][T18954] R13: 00007f34b9216038 R14: 00007f34b9215fa0 R15: 00007ffe4cdb7e58 [ 453.992290][T18954] [ 454.068420][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3533'. [ 454.360452][T18956] openvswitch: netlink: Missing key (keys=c0, expected=200000) [ 454.396973][T18963] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 454.404636][T18963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.851829][T18980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.148116][T18988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3543'. [ 456.009001][T19020] Bluetooth: MGMT ver 1.23 [ 456.034514][T19020] netlink: 'syz.2.3552': attribute type 2 has an invalid length. [ 456.058481][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3553'. [ 456.544036][T19033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3555'. [ 456.559530][T19048] FAULT_INJECTION: forcing a failure. [ 456.559530][T19048] name failslab, interval 1, probability 0, space 0, times 0 [ 456.572553][T19048] CPU: 1 UID: 0 PID: 19048 Comm: syz.4.3559 Not tainted syzkaller #0 PREEMPT(full) [ 456.572576][T19048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 456.572587][T19048] Call Trace: [ 456.572594][T19048] [ 456.572601][T19048] dump_stack_lvl+0xe8/0x150 [ 456.572628][T19048] should_fail_ex+0x412/0x560 [ 456.572654][T19048] should_failslab+0xa8/0x100 [ 456.572673][T19048] ? skb_clone+0x212/0x3a0 [ 456.572692][T19048] kmem_cache_alloc_noprof+0x87/0x650 [ 456.572724][T19048] skb_clone+0x212/0x3a0 [ 456.572745][T19048] __netlink_deliver_tap+0x404/0x850 [ 456.572782][T19048] ? netlink_deliver_tap+0x2e/0x1b0 [ 456.572805][T19048] netlink_deliver_tap+0x19c/0x1b0 [ 456.572831][T19048] netlink_sendskb+0x68/0x140 [ 456.572855][T19048] netlink_rcv_skb+0x2b6/0x4b0 [ 456.572880][T19048] ? __pfx_genl_rcv_msg+0x10/0x10 [ 456.572901][T19048] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 456.572941][T19048] ? down_read+0x270/0x2e0 [ 456.572961][T19048] ? genl_rcv+0xd/0x40 [ 456.572991][T19048] genl_rcv+0x28/0x40 [ 456.573009][T19048] netlink_unicast+0x75c/0x8e0 [ 456.573043][T19048] netlink_sendmsg+0x813/0xb40 [ 456.573078][T19048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.573107][T19048] ? aa_sock_msg_perm+0xf1/0x1b0 [ 456.573134][T19048] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.573161][T19048] ____sys_sendmsg+0x972/0x9f0 [ 456.573179][T19048] ? __might_fault+0xaf/0x130 [ 456.573207][T19048] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.573233][T19048] ? import_iovec+0x73/0xa0 [ 456.573259][T19048] ___sys_sendmsg+0x2a5/0x360 [ 456.573276][T19048] ? __lock_acquire+0x6b5/0x2cf0 [ 456.573298][T19048] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.573349][T19048] ? __fget_files+0x2a/0x420 [ 456.573370][T19048] ? __fget_files+0x3a0/0x420 [ 456.573399][T19048] __x64_sys_sendmsg+0x1bd/0x2a0 [ 456.573419][T19048] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.573446][T19048] ? __pfx_ksys_write+0x10/0x10 [ 456.573478][T19048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.573498][T19048] do_syscall_64+0x174/0x580 [ 456.573515][T19048] ? trace_irq_disable+0x3b/0x140 [ 456.573541][T19048] ? clear_bhb_loop+0x40/0x90 [ 456.573563][T19048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.573581][T19048] RIP: 0033:0x7fac5459ce59 [ 456.573599][T19048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.573614][T19048] RSP: 002b:00007fac5539f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.573634][T19048] RAX: ffffffffffffffda RBX: 00007fac54815fa0 RCX: 00007fac5459ce59 [ 456.573647][T19048] RDX: 0000000000000004 RSI: 0000200000002800 RDI: 0000000000000003 [ 456.573659][T19048] RBP: 00007fac5539f090 R08: 0000000000000000 R09: 0000000000000000 [ 456.573670][T19048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.573680][T19048] R13: 00007fac54816038 R14: 00007fac54815fa0 R15: 00007ffda9f91058 [ 456.573711][T19048] [ 457.291997][T19063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3561'. [ 457.440657][T19063] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 457.647824][ T5295] veth1_vlan: left promiscuous mode [ 457.671058][T19074] C: renamed from lo (while UP) [ 457.709916][T19074] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 457.808830][T19081] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3566'. [ 458.359198][T19098] x_tables: ip_tables: osf match: only valid for protocol 6 [ 458.588083][T19114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3572'. [ 459.508161][T19162] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3581'. [ 459.837153][T19169] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.3584'. [ 459.846576][T19169] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 459.883492][T19168] netlink: 'syz.1.3584': attribute type 1 has an invalid length. [ 459.891389][T19168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3584'. [ 460.904869][T19198] netlink: 'syz.0.3592': attribute type 1 has an invalid length. [ 460.916505][T19202] openvswitch: netlink: nsh attr 6 is out of range max 3 [ 460.923584][T19202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.138325][T19198] bond3: (slave veth5): Enslaving as an active interface with a down link [ 461.256955][T19206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 461.454547][T19216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3596'. [ 461.976288][T19243] netlink: 'syz.2.3604': attribute type 12 has an invalid length. [ 462.058478][T19243] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3604'. [ 462.407769][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3611'. [ 462.435906][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 462.449039][T19257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3611'. [ 462.509586][T19259] gre1: entered promiscuous mode [ 462.514566][T19259] gre1: entered allmulticast mode [ 462.575086][T19266] netlink: 'syz.0.3613': attribute type 1 has an invalid length. [ 462.615218][T19266] nbd: error processing sock list [ 462.755649][T19272] tipc: Started in network mode [ 462.796674][T19272] tipc: Node identity d22a91bf662f, cluster identity 4711 [ 462.843621][T19272] tipc: Enabled bearer , priority 0 [ 462.864109][T19275] syzkaller0: entered promiscuous mode [ 462.870849][T19275] syzkaller0: entered allmulticast mode [ 463.001616][T19262] syzkaller0: mtu greater than device maximum [ 463.020260][T19261] tipc: Resetting bearer [ 463.026350][T19280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3615'. [ 463.028040][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3616'. [ 463.085182][T19280] netlink: 'syz.0.3615': attribute type 1 has an invalid length. [ 463.103367][T19280] netlink: 'syz.0.3615': attribute type 1 has an invalid length. [ 463.114708][T19280] netlink: 'syz.0.3615': attribute type 2 has an invalid length. [ 463.122449][T19280] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3615'. [ 463.134982][T19261] tipc: Disabling bearer [ 463.383590][T19294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3618'. [ 463.439228][T19294] netlink: 'syz.4.3618': attribute type 16 has an invalid length. [ 463.469810][T19294] netlink: 'syz.4.3618': attribute type 17 has an invalid length. [ 463.557686][T19294] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 463.671989][T19308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3622'. [ 464.117695][T19325] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3627'. [ 464.329534][T19331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3630'. [ 464.782489][T19351] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3636'. [ 464.834830][T19354] netlink: 'syz.2.3634': attribute type 39 has an invalid length. [ 465.781606][T19389] netlink: 'syz.3.3646': attribute type 1 has an invalid length. [ 465.901146][T19389] 8021q: adding VLAN 0 to HW filter on device bond3 [ 466.570598][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3660'. [ 467.075354][T19450] xt_l2tp: v2 doesn't support IP mode [ 467.897209][T19487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.961009][T19487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.257511][T19492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3677'. [ 468.390951][T19500] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3681'. [ 468.551591][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3684'. [ 468.665108][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3684'. [ 468.956594][T19525] SET target dimension over the limit! [ 468.964665][T19523] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 469.082619][T19530] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.095111][T19530] bridge_slave_0 (unregistering): left allmulticast mode [ 469.102168][T19530] bridge_slave_0 (unregistering): left promiscuous mode [ 469.109174][T19530] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.210412][T19531] ip6erspan0: entered allmulticast mode [ 469.409420][T19538] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.348880][T19568] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3702'. [ 470.357973][T19568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3702'. [ 470.929734][T19580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3706'. [ 471.004231][T19579] syzkaller0: entered promiscuous mode [ 471.009733][T19579] syzkaller0: entered allmulticast mode [ 471.407940][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3710'. [ 471.838683][T19600] netlink: 'syz.1.3711': attribute type 75 has an invalid length. [ 472.936206][T19639] tipc: Enabled bearer , priority 0 [ 473.304704][T19649] netlink: 'syz.1.3718': attribute type 1 has an invalid length. [ 473.888803][T19668] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3723'. [ 475.014562][T19701] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3729'. [ 475.052788][T19697] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 475.388234][T19720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 475.487504][T19729] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3738'. [ 475.880752][T19703] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 475.935786][T19728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.123814][T19746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3742'. [ 476.135347][T19746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3742'. [ 476.150034][T19745] lo: entered allmulticast mode [ 476.155065][T19745] tunl0: entered allmulticast mode [ 476.160410][T19745] gre0: entered allmulticast mode [ 476.165567][T19745] gretap0: entered allmulticast mode [ 476.209846][T19745] erspan0: entered allmulticast mode [ 476.215349][T19745] ip_vti0: entered allmulticast mode [ 476.220800][T19745] ip6_vti0: entered allmulticast mode [ 476.226299][T19745] sit0: entered allmulticast mode [ 476.231446][T19745] ip6tnl0: entered allmulticast mode [ 476.247441][T19745] ip6gre0: entered allmulticast mode [ 476.252864][T19745] syz_tun: entered allmulticast mode [ 476.258294][T19745] ip6gretap0: entered allmulticast mode [ 476.263967][T19745] bridge0: entered allmulticast mode [ 476.278176][T19750] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3744'. [ 476.300697][T19747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3742'. [ 476.310504][T19747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3742'. [ 476.317877][T19753] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3745'. [ 476.326040][T19745] vcan0: entered allmulticast mode [ 476.337332][T19753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3745'. [ 476.346191][T19745] bond0: entered allmulticast mode [ 476.351599][T19745] bond_slave_0: entered allmulticast mode [ 476.357776][T19745] bond_slave_1: entered allmulticast mode [ 476.363698][T19745] team0: entered allmulticast mode [ 476.368817][T19745] team_slave_0: entered allmulticast mode [ 476.374538][T19745] team_slave_1: entered allmulticast mode [ 476.380419][T19745] nlmon0: entered allmulticast mode [ 476.385799][T19745] vxcan0: entered allmulticast mode [ 476.391579][T19745] vxcan1: entered allmulticast mode [ 476.397127][T19745] veth0: entered allmulticast mode [ 476.445986][T19745] veth1: entered allmulticast mode [ 476.451278][T19745] wg0: entered allmulticast mode [ 476.456364][T19745] wg1: entered allmulticast mode [ 476.461542][T19745] wg2: entered allmulticast mode [ 476.466721][T19745] veth1_to_bridge: entered allmulticast mode [ 476.472968][T19745] veth0_to_bond: entered allmulticast mode [ 476.479115][T19745] veth1_to_bond: entered allmulticast mode [ 476.485207][T19745] veth0_to_team: entered allmulticast mode [ 476.505907][T19745] veth1_to_team: entered allmulticast mode [ 476.512014][T19745] veth0_to_batadv: entered allmulticast mode [ 476.540607][T19745] batadv_slave_0: entered allmulticast mode [ 476.547318][T19745] veth1_to_batadv: entered allmulticast mode [ 476.553759][T19745] batadv_slave_1: entered allmulticast mode [ 476.559843][T19745] xfrm0: entered allmulticast mode [ 476.565116][T19745] veth0_to_hsr: entered allmulticast mode [ 476.570989][T19745] hsr_slave_0: entered allmulticast mode [ 476.576767][T19745] veth1_to_hsr: entered allmulticast mode [ 476.582640][T19745] hsr_slave_1: entered allmulticast mode [ 476.588449][T19745] hsr0: entered allmulticast mode [ 476.593628][T19745] veth1_virt_wifi: entered allmulticast mode [ 476.599750][T19745] veth0_virt_wifi: entered allmulticast mode [ 476.605876][T19745] virt_wifi0: entered allmulticast mode [ 476.611575][T19745] veth1_vlan: entered allmulticast mode [ 476.617255][T19745] veth0_vlan: entered allmulticast mode [ 476.622953][T19745] vlan0: entered allmulticast mode [ 476.628210][T19745] vlan1: entered allmulticast mode [ 476.660059][T19745] macvlan0: entered allmulticast mode [ 476.666257][T19745] macvlan1: entered allmulticast mode [ 476.671779][T19745] ipvlan0: entered allmulticast mode [ 476.677209][T19745] ipvlan1: entered allmulticast mode [ 476.682634][T19745] veth1_macvtap: entered allmulticast mode [ 476.688585][T19745] veth0_macvtap: entered allmulticast mode [ 476.694543][T19745] macvtap0: entered allmulticast mode [ 476.700069][T19745] macsec0: entered allmulticast mode [ 476.705592][T19745] geneve0: entered allmulticast mode [ 476.711018][T19745] geneve1: entered allmulticast mode [ 476.716458][T19745] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 476.723964][T19745] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 476.731457][T19745] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 476.738954][T19745] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 476.780759][T19745] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 476.788061][T19745] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 476.795315][T19745] veth2: entered allmulticast mode [ 476.800572][T19745] veth3: entered allmulticast mode [ 476.805836][T19745] vxlan0: entered allmulticast mode [ 476.811162][T19745] ip6tnl1: entered allmulticast mode [ 476.816564][T19745] erspan1: entered allmulticast mode [ 476.822176][T19745] mac80211_hwsim hwsim39 wlan2: entered allmulticast mode [ 476.829425][T19745] ipip0: entered allmulticast mode [ 476.834687][T19745] syztnl2: entered allmulticast mode [ 476.840085][T19745] ip6gretap1: entered allmulticast mode [ 476.845749][T19745] bond2: left promiscuous mode [ 476.852094][T19745] vxlan1: entered allmulticast mode [ 476.902601][T19745] macsec1: entered allmulticast mode [ 476.909264][T19745] bond3: entered allmulticast mode [ 476.915253][T19745] veth4: entered allmulticast mode [ 476.921122][T19745] veth5: entered allmulticast mode [ 476.929157][T19745] gre1: entered allmulticast mode [ 476.942161][T19745] ipip1: entered allmulticast mode [ 476.962993][T19745] ip6tnl2: entered allmulticast mode [ 477.017991][T19752] macvlan0: left allmulticast mode [ 477.023307][T19752] netlink: 'syz.0.3743': attribute type 2 has an invalid length. [ 477.031558][T11500] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.039501][T19760] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 477.060400][T11500] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.077893][T19760] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 477.140785][T11500] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.149722][T11500] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.173286][T19769] FAULT_INJECTION: forcing a failure. [ 477.173286][T19769] name failslab, interval 1, probability 0, space 0, times 0 [ 477.185903][T19769] CPU: 1 UID: 0 PID: 19769 Comm: syz.4.3749 Not tainted syzkaller #0 PREEMPT(full) [ 477.185925][T19769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 477.185936][T19769] Call Trace: [ 477.185944][T19769] [ 477.185951][T19769] dump_stack_lvl+0xe8/0x150 [ 477.185979][T19769] should_fail_ex+0x412/0x560 [ 477.186003][T19769] should_failslab+0xa8/0x100 [ 477.186021][T19769] ? skb_clone+0x212/0x3a0 [ 477.186039][T19769] kmem_cache_alloc_noprof+0x87/0x650 [ 477.186062][T19769] ? __netlink_lookup+0xc6/0x8b0 [ 477.186085][T19769] skb_clone+0x212/0x3a0 [ 477.186106][T19769] __netlink_deliver_tap+0x404/0x850 [ 477.186141][T19769] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.186167][T19769] netlink_deliver_tap+0x19c/0x1b0 [ 477.186191][T19769] netlink_unicast+0x730/0x8e0 [ 477.186224][T19769] netlink_sendmsg+0x813/0xb40 [ 477.186265][T19769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.186295][T19769] ? aa_sock_msg_perm+0xf1/0x1b0 [ 477.186321][T19769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.186347][T19769] ____sys_sendmsg+0x972/0x9f0 [ 477.186364][T19769] ? __might_fault+0xaf/0x130 [ 477.186390][T19769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.186416][T19769] ? import_iovec+0x73/0xa0 [ 477.186441][T19769] ___sys_sendmsg+0x2a5/0x360 [ 477.186457][T19769] ? __lock_acquire+0x6b5/0x2cf0 [ 477.186479][T19769] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.186528][T19769] ? __fget_files+0x2a/0x420 [ 477.186548][T19769] ? __fget_files+0x3a0/0x420 [ 477.186578][T19769] __x64_sys_sendmsg+0x1bd/0x2a0 [ 477.186598][T19769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.186625][T19769] ? __pfx_ksys_write+0x10/0x10 [ 477.186658][T19769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.186679][T19769] do_syscall_64+0x174/0x580 [ 477.186697][T19769] ? trace_irq_disable+0x3b/0x140 [ 477.186722][T19769] ? clear_bhb_loop+0x40/0x90 [ 477.186744][T19769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.186761][T19769] RIP: 0033:0x7fac5459ce59 [ 477.186779][T19769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.186795][T19769] RSP: 002b:00007fac5539f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.186813][T19769] RAX: ffffffffffffffda RBX: 00007fac54815fa0 RCX: 00007fac5459ce59 [ 477.186826][T19769] RDX: 0000000000008044 RSI: 0000200000000000 RDI: 0000000000000003 [ 477.186838][T19769] RBP: 00007fac5539f090 R08: 0000000000000000 R09: 0000000000000000 [ 477.186848][T19769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.186859][T19769] R13: 00007fac54816038 R14: 00007fac54815fa0 R15: 00007ffda9f91058 [ 477.186889][T19769] [ 478.195533][T19805] 8021q: VLANs not supported on ip_vti0 [ 478.286265][T19807] FAULT_INJECTION: forcing a failure. [ 478.286265][T19807] name failslab, interval 1, probability 0, space 0, times 0 [ 478.309944][T19807] CPU: 1 UID: 0 PID: 19807 Comm: syz.3.3763 Not tainted syzkaller #0 PREEMPT(full) [ 478.309969][T19807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 478.309980][T19807] Call Trace: [ 478.309987][T19807] [ 478.309995][T19807] dump_stack_lvl+0xe8/0x150 [ 478.310022][T19807] should_fail_ex+0x412/0x560 [ 478.310046][T19807] should_failslab+0xa8/0x100 [ 478.310064][T19807] ? skb_clone+0x212/0x3a0 [ 478.310083][T19807] kmem_cache_alloc_noprof+0x87/0x650 [ 478.310106][T19807] ? apparmor_capable+0x126/0x170 [ 478.310141][T19807] skb_clone+0x212/0x3a0 [ 478.310158][T19807] ? nfnetlink_rcv+0x4b0/0x27b0 [ 478.310267][T19807] nfnetlink_rcv+0x4de/0x27b0 [ 478.310300][T19807] ? lockdep_hardirqs_on+0x7a/0x110 [ 478.310354][T19807] ? __local_bh_enable_ip+0xd0/0x130 [ 478.310371][T19807] ? __dev_queue_xmit+0x2b6/0x3950 [ 478.310422][T19807] ? __dev_queue_xmit+0x1fe5/0x3950 [ 478.310439][T19807] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 478.310463][T19807] ? __dev_queue_xmit+0x2b6/0x3950 [ 478.310486][T19807] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 478.310524][T19807] ? ref_tracker_free+0x693/0x840 [ 478.310548][T19807] ? __pfx_ref_tracker_free+0x10/0x10 [ 478.310582][T19807] ? skb_clone+0x246/0x3a0 [ 478.310603][T19807] ? __netlink_deliver_tap+0x807/0x850 [ 478.310628][T19807] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.310659][T19807] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.310683][T19807] ? netlink_deliver_tap+0x2e/0x1b0 [ 478.310712][T19807] netlink_unicast+0x75c/0x8e0 [ 478.310745][T19807] netlink_sendmsg+0x813/0xb40 [ 478.310778][T19807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.310806][T19807] ? aa_sock_msg_perm+0xf1/0x1b0 [ 478.310832][T19807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 478.310858][T19807] ____sys_sendmsg+0x972/0x9f0 [ 478.310876][T19807] ? __might_fault+0xaf/0x130 [ 478.310904][T19807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.310929][T19807] ? import_iovec+0x73/0xa0 [ 478.310954][T19807] ___sys_sendmsg+0x2a5/0x360 [ 478.310971][T19807] ? __lock_acquire+0x6b5/0x2cf0 [ 478.310993][T19807] ? __pfx____sys_sendmsg+0x10/0x10 [ 478.311014][T19807] ? __lock_acquire+0x6b5/0x2cf0 [ 478.311056][T19807] ? __fget_files+0x2a/0x420 [ 478.311076][T19807] ? __fget_files+0x3a0/0x420 [ 478.311105][T19807] __x64_sys_sendmsg+0x1bd/0x2a0 [ 478.311125][T19807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 478.311159][T19807] ? handle_softirqs+0x715/0x840 [ 478.311183][T19807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.311204][T19807] do_syscall_64+0x174/0x580 [ 478.311223][T19807] ? clear_bhb_loop+0x40/0x90 [ 478.311244][T19807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.311262][T19807] RIP: 0033:0x7f34b8f9ce59 [ 478.311277][T19807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.311291][T19807] RSP: 002b:00007f34b71f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.311310][T19807] RAX: ffffffffffffffda RBX: 00007f34b9215fa0 RCX: 00007f34b8f9ce59 [ 478.311322][T19807] RDX: 0000000000008044 RSI: 0000200000000000 RDI: 0000000000000003 [ 478.311333][T19807] RBP: 00007f34b71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 478.311342][T19807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.311352][T19807] R13: 00007f34b9216038 R14: 00007f34b9215fa0 R15: 00007ffe4cdb7e58 [ 478.311381][T19807] [ 478.371081][T19814] syzkaller1: entered allmulticast mode [ 478.871189][T19815] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 478.900321][T19815] bond4 (unregistering): Released all slaves [ 478.961195][T19813] __nla_validate_parse: 8 callbacks suppressed [ 478.961210][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 478.977667][T19814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3764'. [ 479.021364][T19813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 479.106403][T19814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 479.225359][T19833] bond0: entered promiscuous mode [ 479.237549][T19833] bond_slave_0: entered promiscuous mode [ 479.299078][T19833] bond_slave_1: entered promiscuous mode [ 480.118577][T19866] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 480.146331][T19866] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 480.354542][T19883] sctp: [Deprecated]: syz.0.3786 (pid 19883) Use of int in maxseg socket option. [ 480.354542][T19883] Use struct sctp_assoc_value instead [ 480.436213][T19886] pimreg3: entered allmulticast mode [ 480.764975][T19903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3792'. [ 480.765620][T19905] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 480.774949][ T29] audit: type=1800 audit(1781109481.734:8): pid=19905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3793" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 480.783251][T19905] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 480.783276][T19905] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 481.127181][T19921] IPVS: length: 146 != 8 [ 481.200546][T19923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3797'. [ 481.276940][T19923] ip6tnl1: entered promiscuous mode [ 481.443468][T19931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3800'. [ 481.466569][T19931] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3800'. [ 481.568660][T19937] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3800'. [ 481.612749][T19937] 0·: renamed from hsr0 (while UP) [ 481.656553][T19937] 0·: entered allmulticast mode [ 481.667382][T19937] hsr_slave_0: entered allmulticast mode [ 481.673117][T19937] hsr_slave_1: entered allmulticast mode [ 481.687481][T19937] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 481.754542][T19950] netlink: 'syz.3.3805': attribute type 58 has an invalid length. [ 481.766644][T19950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3805'. [ 482.517759][T19969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3812'. [ 482.560528][T19974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3814'. [ 482.786068][T19988] FAULT_INJECTION: forcing a failure. [ 482.786068][T19988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.799357][T19988] CPU: 1 UID: 0 PID: 19988 Comm: syz.0.3818 Not tainted syzkaller #0 PREEMPT(full) [ 482.799382][T19988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 482.799393][T19988] Call Trace: [ 482.799401][T19988] [ 482.799408][T19988] dump_stack_lvl+0xe8/0x150 [ 482.799435][T19988] should_fail_ex+0x412/0x560 [ 482.799460][T19988] _copy_from_user+0x2d/0xb0 [ 482.799555][T19988] kstrtouint_from_user+0xd6/0x180 [ 482.799577][T19988] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 482.799612][T19988] proc_fail_nth_write+0x8e/0x210 [ 482.799660][T19988] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 482.799688][T19988] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 482.799712][T19988] vfs_write+0x29a/0xb90 [ 482.799746][T19988] ? __pfx_vfs_write+0x10/0x10 [ 482.799773][T19988] ? __fget_files+0x2a/0x420 [ 482.799799][T19988] ? __fget_files+0x3a0/0x420 [ 482.799826][T19988] ? __fget_files+0x2a/0x420 [ 482.799855][T19988] ksys_write+0x150/0x270 [ 482.799883][T19988] ? __pfx_ksys_write+0x10/0x10 [ 482.799914][T19988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.799935][T19988] do_syscall_64+0x174/0x580 [ 482.799954][T19988] ? trace_irq_disable+0x3b/0x140 [ 482.799979][T19988] ? clear_bhb_loop+0x40/0x90 [ 482.800001][T19988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.800019][T19988] RIP: 0033:0x7fe61395d68e [ 482.800038][T19988] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 482.800053][T19988] RSP: 002b:00007fe61492cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 482.800072][T19988] RAX: ffffffffffffffda RBX: 00007fe61492d6c0 RCX: 00007fe61395d68e [ 482.800085][T19988] RDX: 0000000000000001 RSI: 00007fe61492d0a0 RDI: 0000000000000004 [ 482.800096][T19988] RBP: 00007fe61492d090 R08: 0000000000000000 R09: 0000000000000000 [ 482.800106][T19988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 482.800116][T19988] R13: 00007fe613c16038 R14: 00007fe613c15fa0 R15: 00007fff3acb29d8 [ 482.800147][T19988] [ 482.918826][ T5637] Bluetooth: hci4: command 0x0406 tx timeout [ 483.668777][T20039] openvswitch: netlink: Unknown nsh attribute 0 [ 483.887706][T20044] netlink: 'syz.4.3836': attribute type 21 has an invalid length. [ 484.073178][T20054] __nla_validate_parse: 13 callbacks suppressed [ 484.073198][T20054] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3836'. [ 484.095300][T20054] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3836'. [ 484.312058][T20062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3842'. [ 484.537913][T20072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3846'. [ 484.562553][T20069] syzkaller1: entered promiscuous mode [ 484.568055][T20069] syzkaller1: entered allmulticast mode [ 484.616659][T20075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3846'. [ 484.675867][T20072] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.894433][T20072] 8021q: adding VLAN 0 to HW filter on device bond5 [ 484.904907][T20072] bond4: (slave bond5): Enslaving as an active interface with an up link [ 485.115488][T20096] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3854'. [ 485.289314][T20092] syzkaller1: entered promiscuous mode [ 485.294826][T20092] syzkaller1: entered allmulticast mode [ 485.311118][T20094] x_tables: unsorted underflow at hook 3 [ 485.337533][T20099] erspan0: entered promiscuous mode [ 485.344017][T20099] erspan0: entered allmulticast mode [ 485.527504][T20110] netlink: 'syz.4.3858': attribute type 4 has an invalid length. [ 485.821348][T20125] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3862'. [ 485.871527][T20127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3863'. [ 485.917058][T20121] netlink: 'syz.1.3860': attribute type 3 has an invalid length. [ 485.954833][T20125] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.982762][T20125] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.002930][T20125] bond0 (unregistering): Released all slaves [ 486.072902][T20123] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.3864'. [ 486.439815][T20151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3867'. [ 486.575445][T20159] sctp: [Deprecated]: syz.1.3872 (pid 20159) Use of int in max_burst socket option deprecated. [ 486.575445][T20159] Use struct sctp_assoc_value instead [ 487.195266][T20173] syzkaller0: entered promiscuous mode [ 487.201083][T20173] syzkaller0: entered allmulticast mode [ 487.571436][T20186] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 487.580099][T20186] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 487.891181][T20209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.904247][T20209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.916164][T20210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.007597][T20210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.022167][T20214] sit1: entered promiscuous mode [ 488.027219][T20214] sit1: entered allmulticast mode [ 488.033158][T20210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.593716][T20234] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 488.642817][T20234] tipc: Enabled bearer , priority 10 [ 489.175212][T17096] Bluetooth: hci0: command tx timeout [ 489.764575][T20275] mac80211_hwsim hwsim35 ÿ: renamed from wlan1 [ 489.811529][T20285] __nla_validate_parse: 7 callbacks suppressed [ 489.811575][T20285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3915'. [ 489.966489][T20292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3917'. [ 490.025574][T20299] netlink: 'syz.2.3919': attribute type 1 has an invalid length. [ 490.475285][T20315] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3922'. [ 490.640995][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3926'. [ 491.076881][T20343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3930'. [ 491.093660][T20343] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 491.135212][T20343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3930'. [ 491.188128][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3936'. [ 491.200436][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3936'. [ 491.209323][T20351] netlink: 'syz.4.3936': attribute type 29 has an invalid length. [ 491.218349][T20352] netlink: 'syz.4.3936': attribute type 29 has an invalid length. [ 491.226629][T20352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3936'. [ 491.235760][T20351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3936'. [ 491.248958][T20352] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 492.397930][T20390] nbd: nbd0 already in use [ 492.402981][T20391] nbd: nbd0 already in use [ 492.431412][T20390] block nbd0: NBD_DISCONNECT [ 492.447786][T20390] block nbd0: Send disconnect failed -32 [ 492.455183][T20390] block nbd0: shutting down sockets [ 492.579417][T20395] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 492.639655][ T1174] lo: left allmulticast mode [ 492.876946][ T1174] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 492.908915][ T1174] bond6 (unregistering): (slave ip6gre2): Releasing backup interface [ 492.962175][ T1174] ip6gre2 (unregistering): left promiscuous mode [ 493.092857][ T35] smc: removing ib device syz1 [ 493.122362][ T35] smbdirect: ib_dev[syz1] removed [ 493.444810][ T1174] bond3 (unregistering): (slave geneve2): Releasing active interface [ 493.553319][ T1174] team0: Port device geneve1 removed [ 494.658817][ T1174] bond0 (unregistering): Released all slaves [ 494.672821][ T1174] bond1 (unregistering): Released all slaves [ 494.740467][ T1174] bond2 (unregistering): Released all slaves [ 494.784155][ T1174] bond3 (unregistering): Released all slaves [ 494.841700][ T1174] bond4 (unregistering): Released all slaves [ 494.865132][ T1174] bond5 (unregistering): Released all slaves [ 494.897385][ T1174] bond6 (unregistering): Released all slaves [ 494.955238][ T1174] bond7 (unregistering): Released all slaves [ 494.989606][ T1174] bond8 (unregistering): Released all slaves [ 495.019690][ T1174] bond9 (unregistering): Released all slaves [ 495.086841][ T1174] bond10 (unregistering): Released all slaves [ 495.140051][T20424] IPVS: Unknown mcast interface: vcan0 [ 495.172650][T20428] netlink: 'syz.3.3960': attribute type 1 has an invalid length. [ 495.562898][T20463] netlink: 'syz.1.3970': attribute type 1 has an invalid length. [ 495.753222][T20473] __nla_validate_parse: 4 callbacks suppressed [ 495.753239][T20473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3973'. [ 495.788555][T20473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3973'. [ 495.797452][T20473] netlink: 'syz.2.3973': attribute type 12 has an invalid length. [ 495.805264][T20473] netlink: 'syz.2.3973': attribute type 11 has an invalid length. [ 496.575050][T20499] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.595687][T20499] bridge_slave_0 (unregistering): left allmulticast mode [ 496.673484][T20499] bridge_slave_0 (unregistering): left promiscuous mode [ 496.701338][T20499] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.426630][T20528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.747309][T20543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3989'. [ 497.761029][ T1174] tipc: Disabling bearer [ 497.795181][ T1174] tipc: Left network mode [ 497.964085][T20551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3994'. [ 498.405615][T20575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3999'. [ 498.621138][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4000'. [ 498.632032][T20583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4000'. [ 498.669040][T20575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.203974][T20609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4005'. [ 499.448372][T20624] bond0: (slave bond_slave_0): Releasing backup interface [ 499.456630][T20624] bond_slave_0 (unregistering): left promiscuous mode [ 499.510131][T20626] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4012'. [ 500.033276][ T1174] hsr_slave_0: left promiscuous mode [ 500.099816][ T1174] hsr_slave_1: left promiscuous mode [ 500.139717][ T1174] veth1_vlan: left promiscuous mode [ 500.387665][ T1174] team0 (unregistering): Port device vlan0 removed [ 500.670495][ T1174] team0 (unregistering): Port device dummy0 removed [ 500.865729][T20652] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.886646][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4026'. [ 501.755714][T20694] netlink: 'syz.0.4032': attribute type 7 has an invalid length. [ 501.809061][T20694] netlink: 'syz.0.4032': attribute type 8 has an invalid length. [ 501.863293][T20701] netlink: 'syz.0.4032': attribute type 7 has an invalid length. [ 501.898340][T20701] netlink: 'syz.0.4032': attribute type 8 has an invalid length. [ 502.164163][ T1174] IPVS: stop unused estimator thread 0... [ 502.316152][T20715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4037'. [ 502.325203][T20715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4037'. [ 502.388687][T20722] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 502.411071][T20719] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 502.418887][T20721] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 502.424102][T20725] x_tables: duplicate underflow at hook 3 [ 502.447858][T20721] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 502.480602][T20721] xt_TCPMSS: Only works on TCP SYN packets [ 502.664602][T20736] ip6gre1: entered allmulticast mode [ 502.681754][T20737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4044'. [ 502.719186][T20736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4042'. [ 502.748658][T20736] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 502.756013][T20737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4044'. [ 502.757970][T20736] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 502.774468][T20736] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 502.943037][T20750] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.4046'. [ 502.957152][T20751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4042'. [ 503.003230][T20744] bond2 (unregistering): Released all slaves [ 503.090920][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4049'. [ 503.104900][T20750] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 503.158682][T20750] 0ªX¹¦Dö»: entered allmulticast mode [ 503.205150][ T5295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 503.522439][T20773] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.4055'. [ 503.784404][T20786] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 503.811679][T20786] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.873046][T20786] netlink: 'syz.4.4057': attribute type 5 has an invalid length. [ 504.865682][T20833] openvswitch: netlink: Multiple metadata blocks provided [ 504.998774][T20838] block nbd0: Unsupported socket: should be TCP or UNIX. [ 505.769994][T20863] netlink: 'syz.2.4081': attribute type 9 has an invalid length. [ 506.150775][T20891] __nla_validate_parse: 14 callbacks suppressed [ 506.150792][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4085'. [ 506.384008][T20898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4090'. [ 506.814583][T20918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 507.134814][T20934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.295656][T20936] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 507.471813][T20954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4102'. [ 507.484932][T20954] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 507.497685][T20954] syzkaller1: entered promiscuous mode [ 507.502047][T20950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4104'. [ 507.503174][T20954] syzkaller1: entered allmulticast mode [ 507.574014][T20950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4104'. [ 507.661543][T20960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4103'. [ 507.722785][T20959] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 507.755128][T20963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4107'. [ 508.075769][T20977] netlink: 'syz.1.4111': attribute type 2 has an invalid length. [ 508.342048][T20986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.451159][T20945] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 508.457100][T20945] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 508.521531][T20994] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4118'. [ 508.523378][T20945] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 508.587328][T20945] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 508.730633][T20999] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4119'. [ 508.803911][T20945] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 508.809859][T20945] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 508.880774][T20945] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 508.895677][T21004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4120'. [ 508.912368][T20945] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 509.023445][T21008] syzkaller0: entered promiscuous mode [ 509.033253][T21008] syzkaller0: entered allmulticast mode [ 509.145675][T21014] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 510.109161][T21052] netlink: 'syz.2.4133': attribute type 11 has an invalid length. [ 510.130540][T21052] netlink: 'syz.2.4133': attribute type 4 has an invalid length. [ 510.139719][T21052] netlink: 'syz.2.4133': attribute type 6 has an invalid length. [ 510.320936][T21066] nbd: must specify an index to disconnect [ 510.326933][T21065] nbd: must specify an index to disconnect [ 510.547078][T21069] netlink: 'syz.1.4139': attribute type 6 has an invalid length. [ 512.651956][T21065] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 512.670440][T21066] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 513.289670][T21105] __nla_validate_parse: 5 callbacks suppressed [ 513.289688][T21105] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4152'. [ 513.611437][T21121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4156'. [ 513.784008][T21130] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4159'. [ 513.814487][T21130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4159'. [ 514.511330][T21157] gretap0: entered promiscuous mode [ 514.517100][T21157] vlan2: entered promiscuous mode [ 514.941985][T21172] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4173'. [ 515.010899][T21176] netlink: 1204 bytes leftover after parsing attributes in process `syz.0.4174'. [ 515.064614][T21179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4175'. [ 515.159914][T21187] netlink: 'syz.4.4177': attribute type 4 has an invalid length. [ 515.203750][T21189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4173'. [ 515.352908][T21192] ip6tnl3: entered allmulticast mode [ 515.496962][T21197] netlink: 'syz.0.4180': attribute type 2 has an invalid length. [ 516.243184][T21218] veth1_macvtap: entered promiscuous mode [ 516.263036][T21218] macsec1: entered promiscuous mode [ 516.275996][T21218] veth1_macvtap: left promiscuous mode [ 516.598741][T21225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.605989][T21225] IPv6: NLM_F_CREATE should be set when creating new route [ 516.613225][T21225] IPv6: NLM_F_CREATE should be set when creating new route [ 516.630815][T21225] IPv6: NLM_F_CREATE should be set when creating new route [ 516.714959][T21225] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.724825][T21225] vcan0: tx address claim with different name [ 517.160134][T21248] SET target dimension over the limit! [ 517.362927][T21254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4200'. [ 517.382471][T21254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4200'. [ 517.901505][T21279] macvlan0: entered promiscuous mode [ 517.906898][T21279] veth1_vlan: entered promiscuous mode [ 518.446537][T21296] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 518.736838][T21317] __nla_validate_parse: 2 callbacks suppressed [ 518.736870][T21317] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4217'. [ 518.789357][T21322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4216'. [ 518.818965][T21324] netlink: 'syz.3.4217': attribute type 1 has an invalid length. [ 518.865946][T21313] syzkaller0: entered promiscuous mode [ 518.871448][T21313] syzkaller0: entered allmulticast mode [ 518.988246][T21317] ip_vti0: entered promiscuous mode [ 519.214640][T21341] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4222'. [ 519.225027][T21341] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4222'. [ 519.236734][T21341] netlink: 'syz.3.4222': attribute type 6 has an invalid length. [ 519.249114][T21341] netlink: 'syz.3.4222': attribute type 5 has an invalid length. [ 519.257928][T21341] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4222'. [ 519.313958][T21344] tipc: Enabling of bearer rejected, failed to enable media [ 519.675844][T21359] netlink: 'syz.2.4229': attribute type 11 has an invalid length. [ 519.685067][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4229'. [ 519.693933][T21359] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4229'. [ 519.702953][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4229'. [ 519.816619][T21361] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4230'. [ 519.850435][T21361] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.857755][T21361] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.900819][T21363] netlink: 'syz.2.4231': attribute type 9 has an invalid length. [ 520.065411][T21369] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4232'. [ 520.376433][T21388] netlink: 'syz.3.4239': attribute type 10 has an invalid length. [ 520.435406][T21390] netlink: 'syz.3.4239': attribute type 9 has an invalid length. [ 520.757849][T21388] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 521.301448][T21406] netlink: 'syz.0.4244': attribute type 1 has an invalid length. [ 521.519610][T21404] tipc: Started in network mode [ 521.524512][T21404] tipc: Node identity fada0bb6c40e, cluster identity 4711 [ 521.531758][T21404] tipc: Enabled bearer , priority 0 [ 521.572089][T21406] 8021q: adding VLAN 0 to HW filter on device bond6 [ 521.587342][T21404] tipc: Disabling bearer [ 521.782117][T21419] netlink: 'syz.2.4248': attribute type 26 has an invalid length. [ 522.003107][T21432] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20003 [ 522.011495][T21432] x_tables: duplicate underflow at hook 1 [ 522.438625][T21452] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 522.450687][T21452] bond0: (slave lo): Error: Device can not be enslaved while up [ 522.544516][T21456] sit0: entered promiscuous mode [ 522.554784][T21456] netlink: 'syz.2.4260': attribute type 1 has an invalid length. [ 523.615456][T21506] netlink: 'syz.2.4272': attribute type 11 has an invalid length. [ 523.623315][T21506] netlink: 'syz.2.4272': attribute type 11 has an invalid length. [ 524.019847][T21527] netlink: 'syz.1.4276': attribute type 5 has an invalid length. [ 524.056157][T21524] __nla_validate_parse: 5 callbacks suppressed [ 524.056177][T21524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4278'. [ 524.313926][T21536] netlink: 'syz.0.4281': attribute type 11 has an invalid length. [ 524.385876][T21538] veth0: entered promiscuous mode [ 524.507380][T21538] tipc: Enabled bearer , priority 28 [ 524.598415][T21550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4284'. [ 524.611130][T21552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4282'. [ 524.620094][T21552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4282'. [ 524.661331][T21550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4284'. [ 524.701160][T21535] veth0: left promiscuous mode [ 525.068479][T21568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4290'. [ 525.101590][T21568] netlink: 'syz.1.4290': attribute type 1 has an invalid length. [ 525.278200][T21577] netlink: 'syz.4.4292': attribute type 1 has an invalid length. [ 525.326186][T21577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4292'. [ 525.634930][ T5761] tipc: Node number set to 1054084022 [ 525.733561][T21592] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 525.745533][T21592] bond7 (unregistering): Released all slaves [ 525.807948][T21604] netlink: 'syz.3.4299': attribute type 1 has an invalid length. [ 525.907574][T21597] netlink: 'syz.2.4297': attribute type 2 has an invalid length. [ 525.948263][T21597] netlink: 'syz.2.4297': attribute type 2 has an invalid length. [ 525.979700][T21597] netlink: 67 bytes leftover after parsing attributes in process `syz.2.4297'. [ 526.182603][T21618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4301'. [ 526.461724][T21629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4305'. [ 526.521237][T21631] ip6gre2: entered allmulticast mode [ 526.978564][T21650] netlink: 'syz.0.4313': attribute type 1 has an invalid length. [ 527.027310][T21655] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 527.136969][T21648] netlink: 'syz.3.4312': attribute type 3 has an invalid length. [ 527.157769][T21648] netlink: 'syz.3.4312': attribute type 1 has an invalid length. [ 527.205432][T21648] veth0_macvtap: left promiscuous mode [ 527.609200][T21672] bond3 (unregistering): Released all slaves [ 527.902506][T21693] syzkaller0: entered promiscuous mode [ 527.908020][T21693] syzkaller0: entered allmulticast mode [ 530.624713][T21712] __nla_validate_parse: 5 callbacks suppressed [ 530.624731][T21712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4330'. [ 531.085009][T21729] netlink: 'syz.1.4334': attribute type 21 has an invalid length. [ 531.099316][T21729] IPv6: NLM_F_CREATE should be specified when creating new route [ 531.301226][T21737] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4337'. [ 531.429628][T21759] vlan2: entered allmulticast mode [ 531.434797][T21759] bond0: entered allmulticast mode [ 531.439915][T21759] bond_slave_1: entered allmulticast mode [ 531.776962][T21780] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4347'. [ 531.787302][T21782] netlink: 'syz.3.4349': attribute type 3 has an invalid length. [ 531.844228][T21780] netlink: 'syz.1.4347': attribute type 1 has an invalid length. [ 531.953228][T21780] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 532.992483][T21839] x_tables: unsorted underflow at hook 2 [ 533.045282][T21832] 8021q: VLANs not supported on ip_vti0 [ 533.065754][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4367'. [ 533.085973][T21837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4367'. [ 533.088431][T21832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4365'. [ 533.155505][T21845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.162326][T21847] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4369'. [ 533.174721][T21847] netlink: Conntrack attr has 4 unknown bytes [ 533.182930][T21847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4369'. [ 533.553177][T21866] netlink: 'syz.0.4375': attribute type 1 has an invalid length. [ 533.559053][T21862] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 533.687671][T21861] nbd1: detected capacity change from 0 to 63 [ 533.712730][T21870] block nbd1: NBD_DISCONNECT [ 533.729151][T21870] block nbd1: Disconnected due to user request. [ 533.736628][T21870] block nbd1: shutting down sockets [ 533.775101][T21872] lo: entered allmulticast mode [ 533.780605][T21872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.808978][ C1] blk_print_req_error: 138 callbacks suppressed [ 533.808997][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.824277][ C1] buffer_io_error: 138 callbacks suppressed [ 533.824354][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 533.838014][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.847046][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 533.854813][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.863850][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 533.871621][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.880746][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 533.882460][T21874] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 533.904134][T18607] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.939136][T18607] Buffer I/O error on dev nbd1, logical block 0, async page read [ 533.947033][T18607] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.972758][T18607] Buffer I/O error on dev nbd1, logical block 1, async page read [ 533.980665][T18607] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 533.989706][T18607] Buffer I/O error on dev nbd1, logical block 2, async page read [ 533.997574][T18607] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.006614][T18607] Buffer I/O error on dev nbd1, logical block 3, async page read [ 534.014505][T18607] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.023542][T18607] Buffer I/O error on dev nbd1, logical block 0, async page read [ 534.170318][T18607] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 534.179394][T18607] Buffer I/O error on dev nbd1, logical block 1, async page read [ 534.191894][T18607] ldm_validate_partition_table(): Disk read failed. [ 534.200569][T18607] Dev nbd1: unable to read RDB block 0 [ 534.208039][T18607] nbd1: unable to read partition table [ 534.278473][T21891] vlan2: entered promiscuous mode [ 534.283537][T21891] bridge0: entered promiscuous mode [ 534.360033][T18607] ldm_validate_partition_table(): Disk read failed. [ 534.402469][T18607] Dev nbd1: unable to read RDB block 0 [ 534.436326][T18607] nbd1: unable to read partition table [ 534.458760][T21899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.675205][T21909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4389'. [ 534.684198][T21909] netlink: 'syz.1.4389': attribute type 7 has an invalid length. [ 534.692233][T21909] netlink: 'syz.1.4389': attribute type 8 has an invalid length. [ 534.731295][T21909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4389'. [ 534.966066][T21924] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 535.265245][T21933] team0: Device gtp0 is up. Set it down before adding it as a team port [ 535.315486][T21937] team0: Device gtp0 is up. Set it down before adding it as a team port [ 535.403604][T21942] netlink: 'syz.4.4399': attribute type 16 has an invalid length. [ 535.411459][T21942] netlink: 'syz.4.4399': attribute type 17 has an invalid length. [ 535.414148][T21934] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 535.429187][T21934] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 535.491444][T21942] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.498615][T21942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.506107][T21942] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.513241][T21942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.655978][T21942] 0·: left allmulticast mode [ 535.676624][T21942] hsr_slave_0: left allmulticast mode [ 535.682756][T21942] hsr_slave_1: left allmulticast mode [ 535.697659][T21942] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 535.934354][T21967] netlink: 'syz.1.4405': attribute type 1 has an invalid length. [ 536.001459][T21967] bond5: entered promiscuous mode [ 536.006970][T21967] 8021q: adding VLAN 0 to HW filter on device bond5 [ 536.037232][T21967] __nla_validate_parse: 2 callbacks suppressed [ 536.037250][T21967] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4405'. [ 536.195912][T21979] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4409'. [ 536.339241][T21981] ip6tnl1: entered promiscuous mode [ 536.347342][T21981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4411'. [ 536.826189][T22000] openvswitch: netlink: IPv4 tun info is not correct [ 536.953628][T22006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4422'. [ 537.082302][T22011] tipc: Enabled bearer , priority 0 [ 537.197476][T22011] syzkaller0: entered promiscuous mode [ 537.255051][T22030] netlink: 'syz.3.4425': attribute type 1 has an invalid length. [ 537.257303][T22011] syzkaller0: entered allmulticast mode [ 537.262805][T22030] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4425'. [ 537.325846][T22017] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 537.553666][T22029] netlink: 'syz.3.4425': attribute type 1 has an invalid length. [ 537.602325][T22029] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4425'. [ 537.611700][T22029] workqueue: Failed to create a rescuer kthread for wq "phy5": -EINTR [ 537.642100][T22011] tipc: Resetting bearer [ 537.749175][T22045] netlink: 'syz.0.4428': attribute type 21 has an invalid length. [ 537.836615][T22002] tipc: Resetting bearer [ 537.930775][T22002] tipc: Disabling bearer [ 537.995397][T22053] netlink: 212152 bytes leftover after parsing attributes in process `syz.0.4430'. [ 538.216938][T22069] nbd: must specify an index to disconnect [ 538.415759][T22087] netlink: 'syz.4.4440': attribute type 2 has an invalid length. [ 538.450049][T22087] netlink: 'syz.4.4440': attribute type 1 has an invalid length. [ 538.516093][T22090] netlink: 'syz.3.4441': attribute type 1 has an invalid length. [ 538.539616][T22091] syzkaller0: mtu less than device minimum [ 538.549616][T22090] netlink: 'syz.3.4441': attribute type 2 has an invalid length. [ 538.656113][T22095] x_tables: duplicate underflow at hook 1 [ 538.708699][T22095] sctp: [Deprecated]: syz.4.4444 (pid 22095) Use of struct sctp_assoc_value in delayed_ack socket option. [ 538.708699][T22095] Use struct sctp_sack_info instead [ 538.788372][T22101] netlink: 'syz.2.4447': attribute type 1 has an invalid length. [ 538.935379][T22111] Cannot find del_set index 0 as target [ 538.943067][T22110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4450'. [ 538.985599][T22113] netlink: 'syz.0.4451': attribute type 4 has an invalid length. [ 538.994457][T22113] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4451'. [ 539.145444][T22117] netlink: 'syz.3.4452': attribute type 12 has an invalid length. [ 539.163413][T22120] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4453'. [ 540.026573][T22159] lo: entered allmulticast mode [ 540.048701][T22159] tunl0: entered allmulticast mode [ 540.144834][T22159] gre0: entered allmulticast mode [ 540.315002][T22159] bridge0: port 3(gretap0) entered disabled state [ 540.334562][T22159] erspan0: entered allmulticast mode [ 540.369412][T22159] ip_vti0: entered allmulticast mode [ 540.398989][T22159] ip6_vti0: entered allmulticast mode [ 540.437558][T22159] sit0: entered allmulticast mode [ 540.447489][T22159] ip6tnl0: entered allmulticast mode [ 540.491329][T22159] ip6gre0: entered allmulticast mode [ 540.501103][T22159] syz_tun: entered allmulticast mode [ 540.510568][T22159] ip6gretap0: entered allmulticast mode [ 540.519385][T22159] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.527307][T22159] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.537207][T22159] bridge0: entered allmulticast mode [ 540.548475][T22159] vcan0: entered allmulticast mode [ 540.555089][T22159] bond0: entered allmulticast mode [ 540.560214][T22159] bond_slave_0: entered allmulticast mode [ 540.581461][T22159] bond_slave_1: entered allmulticast mode [ 540.602064][T22159] team0: entered allmulticast mode [ 540.607205][T22159] team_slave_0: entered allmulticast mode [ 540.612931][T22159] team_slave_1: entered allmulticast mode [ 540.621930][T22159] dummy0: entered allmulticast mode [ 540.630172][T22159] nlmon0: entered allmulticast mode [ 540.637166][T22159] batadv0: entered allmulticast mode [ 540.646150][T22159] veth0: entered allmulticast mode [ 540.654361][T22159] veth1: entered allmulticast mode [ 540.698742][T22159] wg0: entered allmulticast mode [ 540.706680][T22159] wg1: entered allmulticast mode [ 540.749061][T22159] wg2: entered allmulticast mode [ 540.756329][T22159] veth0_to_bridge: entered allmulticast mode [ 540.768206][T22159] veth1_to_bridge: entered allmulticast mode [ 540.782010][T22159] veth0_to_bond: entered allmulticast mode [ 540.832045][T22159] veth1_to_bond: entered allmulticast mode [ 540.848563][T22159] veth0_to_team: entered allmulticast mode [ 540.871360][T22159] veth1_to_team: entered allmulticast mode [ 540.893579][T22159] veth0_to_batadv: entered allmulticast mode [ 540.907124][T22159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.920327][T22159] batadv_slave_0: entered allmulticast mode [ 540.931668][T22159] veth1_to_batadv: entered allmulticast mode [ 540.940754][T22159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.948168][T22159] batadv_slave_1: entered allmulticast mode [ 540.957191][T22159] xfrm0: entered allmulticast mode [ 540.965285][T22159] veth0_to_hsr: entered allmulticast mode [ 540.973981][T22159] hsr_slave_0: entered allmulticast mode [ 540.981924][T22159] veth1_to_hsr: entered allmulticast mode [ 540.990642][T22159] hsr_slave_1: entered allmulticast mode [ 540.999178][T22159] hsr0: entered allmulticast mode [ 541.007319][T22159] veth1_virt_wifi: entered allmulticast mode [ 541.054477][T22159] veth0_virt_wifi: entered allmulticast mode [ 541.063421][T22159] virt_wifi0: entered allmulticast mode [ 541.069288][T22159] veth1_vlan: entered allmulticast mode [ 541.086743][T22159] vlan0: entered allmulticast mode [ 541.092028][T22159] vlan1: entered allmulticast mode [ 541.097497][T22159] macvlan0: entered allmulticast mode [ 541.105858][T22159] macvlan1: entered allmulticast mode [ 541.114220][T22159] ipvlan1: entered allmulticast mode [ 541.119797][T22159] veth1_macvtap: entered allmulticast mode [ 541.145825][T22159] veth0_macvtap: entered allmulticast mode [ 541.155301][T22159] macvtap0: entered allmulticast mode [ 541.163650][T22159] macsec0: entered allmulticast mode [ 541.172033][T22159] geneve0: entered allmulticast mode [ 541.180615][T22159] geneve1: entered allmulticast mode [ 541.195037][T22159] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 541.206468][T22159] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 541.216434][T22159] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 541.225884][T22159] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 541.232666][T22159] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 541.254022][T22159] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 541.261308][T22159] mac80211_hwsim hwsim38 wlan2: entered allmulticast mode [ 541.268583][T22159] gretap1: entered allmulticast mode [ 541.274045][T22159] vti0: entered allmulticast mode [ 541.279883][T22159] bond1: entered allmulticast mode [ 541.286758][T22159] geneve2: entered allmulticast mode [ 541.292195][T22159] syztnl0: entered allmulticast mode [ 541.298488][T22159] bond2: entered allmulticast mode [ 541.304657][T22159] bond3: entered allmulticast mode [ 541.309898][T22159] gretap2: entered allmulticast mode [ 541.315288][T22159] bridge1: entered allmulticast mode [ 541.320882][T22159] ipip0: entered allmulticast mode [ 541.327254][T22159] sit1: entered allmulticast mode [ 541.372648][T22159] gre1: entered allmulticast mode [ 541.404046][T22159] bond4: entered allmulticast mode [ 541.409201][T22159] bridge2: entered allmulticast mode [ 541.416289][T22159] geneve3: entered allmulticast mode [ 541.421750][T22159] vlan2: left promiscuous mode [ 541.426523][T22159] bridge0: left promiscuous mode [ 541.431592][T22159] vlan2: entered allmulticast mode [ 541.437240][T22159] bond5: left promiscuous mode [ 541.442014][T22159] bond5: entered allmulticast mode [ 541.448143][T22159] veth2: entered allmulticast mode [ 541.453409][T22159] veth3: entered allmulticast mode [ 541.537856][T22190] veth0_to_hsr: entered promiscuous mode [ 541.550003][T22190] veth0_to_hsr: left promiscuous mode [ 541.613728][T22204] xt_nat: multiple ranges no longer supported [ 541.619964][T22191] hsr_slave_0 (unregistering): left promiscuous mode [ 541.622566][T22204] __nla_validate_parse: 7 callbacks suppressed [ 541.622587][T22204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4471'. [ 541.642212][ T1174] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.651737][ T1174] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.660624][ T1174] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.669490][ T1174] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.745771][T22204] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4471'. [ 541.754783][T22207] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4472'. [ 541.970516][T22209] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 541.987482][ T7154] IPVS: starting estimator thread 0... [ 541.994772][T22210] tipc: Enabling of bearer rejected, failed to enable media [ 542.028344][T22214] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4474'. [ 542.037401][T22214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4474'. [ 542.090046][T22216] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4477'. [ 542.267821][T22212] IPVS: using max 31 ests per chain, 74400 per kthread [ 542.372010][T22235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.788930][ T47] tipc: Subscription rejected, illegal request [ 542.840119][T22254] validate_nla: 5 callbacks suppressed [ 542.840137][T22254] netlink: 'syz.0.4486': attribute type 1 has an invalid length. [ 542.882693][T22257] Can't find ip_set type hash:net,œet [ 542.890747][T22254] 8021q: adding VLAN 0 to HW filter on device bond7 [ 542.900056][T22265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4488'. [ 542.945795][T22265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4488'. [ 542.969887][T22268] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4490'. [ 543.043414][T22260] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4489'. [ 543.870562][T22306] openvswitch: netlink: IP tunnel dst address not specified [ 543.914934][T22309] syzkaller1: entered promiscuous mode [ 543.920437][T22309] syzkaller1: entered allmulticast mode [ 544.220094][T22320] netlink: 'syz.3.4509': attribute type 2 has an invalid length. [ 544.375905][T22333] netlink: 'syz.3.4513': attribute type 1 has an invalid length. [ 545.400651][T22373] netem: change failed [ 545.430692][T22374] xt_hl: Unknown Hop Limit match mode: 206 [ 545.923251][T22402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.096102][T22417] netlink: 'syz.3.4539': attribute type 5 has an invalid length. [ 546.272346][T22417] geneve3: entered promiscuous mode [ 546.277596][T22417] geneve3: entered allmulticast mode [ 546.289557][ T1174] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 546.319473][ T1174] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 546.338630][ T142] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 546.356727][ T142] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 546.643032][T22438] __nla_validate_parse: 12 callbacks suppressed [ 546.643067][T22438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4543'. [ 547.060993][T22465] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4552'. [ 547.123784][T22452] block nbd1: server does not support multiple connections per device. [ 547.134316][T22452] block nbd1: shutting down sockets [ 547.245014][T22474] syzkaller1: entered promiscuous mode [ 547.250530][T22474] syzkaller1: entered allmulticast mode [ 547.441221][T22451] block nbd2: server does not support multiple connections per device. [ 547.452352][T22451] block nbd2: shutting down sockets [ 547.532081][T22473] netlink: 'syz.1.4554': attribute type 3 has an invalid length. [ 547.559643][T22473] netlink: 'syz.1.4554': attribute type 1 has an invalid length. [ 547.587180][T22473] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4554'. [ 547.807769][T22486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4556'. [ 548.019719][T22494] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4558'. [ 548.030898][T22494] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4558'. [ 548.035084][T22495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4559'. [ 548.218234][T22491] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.259152][T22503] bond0: Error: Cannot enslave bond to itself. [ 548.269257][T22504] bond0: Error: Cannot enslave bond to itself. [ 548.375466][T22511] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4565'. [ 548.395356][T22513] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4565'. [ 548.453887][T22491] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.489266][ T7154] IPVS: starting estimator thread 0... [ 548.519677][T22514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4564'. [ 548.584234][T15034] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.596712][T15034] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.653876][T22516] IPVS: using max 29 ests per chain, 69600 per kthread [ 548.667852][T22491] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.719441][T15034] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.728354][T15034] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.744836][T22519] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 548.809130][T22525] netem: change failed [ 549.104389][T22535] xt_ecn: cannot match TCP bits for non-tcp packets [ 549.111775][T22491] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.125299][T22535] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 549.180298][T22527] bridge0: entered allmulticast mode [ 549.221770][T22532] pim6reg: entered allmulticast mode [ 549.673896][ T142] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.690004][T22570] dummy0: left allmulticast mode [ 549.698182][T22570] batman_adv: batadv0: Adding interface: dummy0 [ 549.704446][T22570] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 549.729631][T22570] batman_adv: batadv0: Interface activated: dummy0 [ 549.833910][ T142] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.856388][T22570] batadv0: mtu less than device minimum [ 549.874967][T22570] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.886914][T22570] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.898573][T22570] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.910249][T22570] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.921957][T22570] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.933678][T22570] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.945325][T22570] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.957011][T22570] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.968739][T22570] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 550.053561][T15034] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.151930][ T142] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.215730][T22590] netlink: 'syz.0.4584': attribute type 1 has an invalid length. [ 550.223503][T22590] netlink: 'syz.0.4584': attribute type 1 has an invalid length. [ 550.301752][T22596] mac80211_hwsim hwsim41 syzkaller0: left promiscuous mode [ 551.054033][T22629] netlink: 'syz.0.4598': attribute type 1 has an invalid length. [ 551.298753][T22640] netlink: 'syz.1.4602': attribute type 1 has an invalid length. [ 551.386494][T22640] bond7: entered promiscuous mode [ 551.394661][T22640] 8021q: adding VLAN 0 to HW filter on device bond7 [ 551.443890][T22643] bond7: (slave bridge3): making interface the new active one [ 551.451388][T22643] bridge3: entered promiscuous mode [ 551.457960][T22643] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 552.072464][T22676] __nla_validate_parse: 15 callbacks suppressed [ 552.072482][T22676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4611'. [ 552.326516][T22693] team0: left allmulticast mode [ 552.338411][T22693] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.439665][T22695] geneve1: entered promiscuous mode [ 552.444905][T22695] geneve1: entered allmulticast mode [ 552.470485][T22696] sctp: [Deprecated]: syz.3.4618 (pid 22696) Use of int in max_burst socket option deprecated. [ 552.470485][T22696] Use struct sctp_assoc_value instead [ 552.553778][T22697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 552.707913][T22711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4622'. [ 552.953488][T22721] netlink: 'syz.3.4625': attribute type 39 has an invalid length. [ 553.014198][T22724] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4626'. [ 553.264706][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4629'. [ 553.274848][T22736] netlink: 'syz.4.4629': attribute type 3 has an invalid length. [ 553.283595][T22736] netlink: 'syz.4.4629': attribute type 1 has an invalid length. [ 553.291327][T22736] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4629'. [ 553.300353][T22736] NCSI netlink: No device for ifindex 813332851 [ 553.515966][T22744] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4633'. [ 553.556346][T22747] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4633'. [ 557.321391][T22830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4655'. [ 557.668948][T22844] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4659'. [ 557.731947][T22847] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4661'. [ 558.037769][T22855] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4660'. [ 558.178742][T22868] tipc: New replicast peer: 255.255.255.255 [ 558.214234][T22868] tipc: Enabled bearer , priority 10 [ 558.268621][T22877] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4668'. [ 558.306498][T22871] tipc: Enabled bearer , priority 0 [ 558.388866][T22870] tipc: Disabling bearer [ 559.019033][T22909] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.385386][T22918] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4680'. [ 559.689894][T22934] pimreg3: entered allmulticast mode [ 559.696460][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4684'. [ 560.536187][T22989] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4699'. [ 560.656153][T23001] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4701'. [ 560.682383][T23001] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4701'. [ 560.759438][T23001] veth3: entered promiscuous mode [ 561.297324][T23042] nft_compat: unsupported protocol 0 [ 561.309430][ T35] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x17 [ 561.648465][T23061] netlink: 'syz.1.4716': attribute type 1 has an invalid length. [ 562.424648][T23090] netlink: 'syz.2.4726': attribute type 1 has an invalid length. [ 562.432417][T23090] __nla_validate_parse: 7 callbacks suppressed [ 562.432432][T23090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4726'. [ 562.489427][T23101] netlink: 'syz.1.4731': attribute type 1 has an invalid length. [ 562.497654][T23101] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4731'. [ 562.644158][T23099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.662723][T23099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 562.673147][T23099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 562.691761][T23099] veth1_macvtap: entered promiscuous mode [ 562.715078][T23099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 562.753572][T23099] net_ratelimit: 12 callbacks suppressed [ 562.753606][T23099] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 562.884969][T23118] batadv1: entered allmulticast mode [ 563.141093][T23125] netlink: 'syz.2.4738': attribute type 11 has an invalid length. [ 563.276069][T23127] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 563.283804][T23127] syzkaller1: Linktype set failed because interface is up [ 563.295491][ T7157] syzkaller1: tun_net_xmit 90 [ 563.894626][T23162] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 563.902200][T23162] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 564.019662][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4748'. [ 564.032619][T23166] netlink: 'syz.2.4748': attribute type 4 has an invalid length. [ 564.041499][T23166] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4748'. [ 564.338217][T23173] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.4750'. [ 564.363993][T23177] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4749'. [ 564.441009][T23177] netlink: 'syz.4.4749': attribute type 1 has an invalid length. [ 564.541325][T23177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 564.593887][T23181] bond4: (slave gretap1): making interface the new active one [ 564.634485][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4753'. [ 564.646809][T23188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4754'. [ 564.655843][T23188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4754'. [ 564.667866][T23181] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 564.802878][T23195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4755'. [ 565.494639][T23231] netlink: 'syz.2.4768': attribute type 62 has an invalid length. [ 565.812610][T23246] mac80211_hwsim hwsim46 syzkaller0: left promiscuous mode [ 565.836684][T23246] mac80211_hwsim hwsim46 syzkaller0: left allmulticast mode [ 565.856642][T23246] gretap0: entered allmulticast mode [ 567.876156][T15034] veth1_to_bridge: left promiscuous mode [ 567.883106][T15034] bridge0: port 1(veth1_to_bridge) entered disabled state [ 568.046955][T15034] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 568.081493][T15034] bond8 (unregistering): (slave ip6gretap2): Releasing active interface [ 568.301258][T15034] bond1 (unregistering): (slave geneve3): Releasing active interface [ 568.388213][T23225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 568.805331][T23295] __nla_validate_parse: 4 callbacks suppressed [ 568.805374][T23295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4784'. [ 569.164919][T15034] bond1 (unregistering): Released all slaves [ 569.191165][T15034] bond0 (unregistering): Released all slaves [ 569.214976][T15034] bond2 (unregistering): Released all slaves [ 569.233395][T15034] bond3 (unregistering): Released all slaves [ 569.272073][T15034] bond4 (unregistering): Released all slaves [ 569.294603][T15034] bond5 (unregistering): Released all slaves [ 569.312760][T15034] bond6 (unregistering): Released all slaves [ 569.329514][T15034] bond7 (unregistering): Released all slaves [ 569.348182][T15034] bond8 (unregistering): Released all slaves [ 569.394805][ T142] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 569.402989][ T142] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 569.498026][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 569.521760][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 569.653062][T15034] tipc: Left network mode [ 569.684051][T23312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4786'. [ 569.820026][ T24] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 570.096395][T23332] netlink: 'syz.1.4792': attribute type 1 has an invalid length. [ 570.176023][T23332] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 570.401131][T23355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4799'. [ 570.429148][T23355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4799'. [ 570.450791][T23355] macsec0: entered promiscuous mode [ 570.461298][T23355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4799'. [ 570.554521][T23355] macsec0 (unregistering): left promiscuous mode [ 570.604456][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4799'. [ 571.081614][T23381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.110478][T23380] syzkaller0: entered promiscuous mode [ 571.115985][T23380] syzkaller0: entered allmulticast mode [ 571.126667][T23380] netlink: 'syz.0.4804': attribute type 1 has an invalid length. [ 571.337336][T23394] x_tables: duplicate underflow at hook 2 [ 571.463083][T23401] ip6gretap0: entered promiscuous mode [ 571.469492][T23401] ip6gretap0: entered allmulticast mode [ 571.549618][T23407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4813'. [ 571.881104][T23419] syzkaller1: entered promiscuous mode [ 571.902707][T23419] syzkaller1: entered allmulticast mode [ 571.957781][T23416] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 572.139260][T23431] FAULT_INJECTION: forcing a failure. [ 572.139260][T23431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.159976][T23431] CPU: 0 UID: 0 PID: 23431 Comm: syz.0.4820 Not tainted syzkaller #0 PREEMPT(full) [ 572.160006][T23431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 572.160017][T23431] Call Trace: [ 572.160025][T23431] [ 572.160033][T23431] dump_stack_lvl+0xe8/0x150 [ 572.160062][T23431] should_fail_ex+0x412/0x560 [ 572.160089][T23431] _copy_from_user+0x2d/0xb0 [ 572.160111][T23431] ___sys_sendmsg+0x1c6/0x360 [ 572.160131][T23431] ? __lock_acquire+0x6b5/0x2cf0 [ 572.160156][T23431] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.160208][T23431] ? __fget_files+0x2a/0x420 [ 572.160230][T23431] ? __fget_files+0x3a0/0x420 [ 572.160261][T23431] __x64_sys_sendmsg+0x1bd/0x2a0 [ 572.160283][T23431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.160310][T23431] ? __pfx_ksys_write+0x10/0x10 [ 572.160343][T23431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.160363][T23431] do_syscall_64+0x174/0x580 [ 572.160385][T23431] ? clear_bhb_loop+0x40/0x90 [ 572.160413][T23431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.160430][T23431] RIP: 0033:0x7fe61399ce59 [ 572.160448][T23431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.160464][T23431] RSP: 002b:00007fe61492d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.160484][T23431] RAX: ffffffffffffffda RBX: 00007fe613c15fa0 RCX: 00007fe61399ce59 [ 572.160497][T23431] RDX: 0000000004000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 572.160509][T23431] RBP: 00007fe61492d090 R08: 0000000000000000 R09: 0000000000000000 [ 572.160520][T23431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.160531][T23431] R13: 00007fe613c16038 R14: 00007fe613c15fa0 R15: 00007fff3acb29d8 [ 572.160561][T23431] [ 572.187330][T23435] netlink: 'syz.2.4822': attribute type 10 has an invalid length. [ 572.442430][T23435] ipvlan0: entered allmulticast mode [ 572.450146][T23435] team0: Device ipvlan0 failed to register rx_handler [ 572.924211][T15034] hsr_slave_0: left promiscuous mode [ 572.974398][T23470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4834'. [ 572.996116][T15034] hsr_slave_1: left promiscuous mode [ 573.051747][T15034] veth1_macvtap: left promiscuous mode [ 573.058316][T15034] veth0_macvtap: left promiscuous mode [ 573.072716][T15034] veth1_vlan: left promiscuous mode [ 573.077985][T15034] veth0_vlan: left promiscuous mode [ 573.122432][T23477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4830'. [ 573.139987][T23478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4832'. [ 573.356728][T11501] smbdirect: ib_dev[syz2] removed [ 573.456076][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 573.513464][ T7157] infiniband syz2: ib_query_port failed (-19) [ 573.820133][T23494] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 573.830115][T23495] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 574.051160][T15034] IPVS: stop unused estimator thread 0... [ 574.064766][T23510] netlink: 'syz.0.4841': attribute type 11 has an invalid length. [ 574.304763][T23532] netlink: 'syz.0.4841': attribute type 21 has an invalid length. [ 574.416445][T23540] IPVS: length: 179 != 8 [ 574.756880][T23554] __nla_validate_parse: 5 callbacks suppressed [ 574.756913][T23554] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4857'. [ 574.928161][T23564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4858'. [ 574.971327][T23564] macsec1: entered promiscuous mode [ 574.976575][T23564] bridge0: entered promiscuous mode [ 574.981939][T23564] macsec1: entered allmulticast mode [ 575.012748][T23564] bridge0: port 4(macsec1) entered blocking state [ 575.019397][T23564] bridge0: port 4(macsec1) entered disabled state [ 575.021491][T23569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4858'. [ 575.094567][T23564] bridge0: left promiscuous mode [ 575.166143][T23568] netlink: 'syz.0.4859': attribute type 83 has an invalid length. [ 575.316972][T23583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4866'. [ 575.365867][T23586] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 575.396105][T23586] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4862'. [ 575.405356][T23583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4866'. [ 575.424328][T23574] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4862'. [ 575.450881][T23584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4864'. [ 575.459855][T23584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4864'. [ 575.502985][T23583] netlink: 'syz.0.4866': attribute type 21 has an invalid length. [ 575.517942][T23584] tipc: Enabled bearer , priority 0 [ 575.535677][T23583] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4866'. [ 575.563063][T23581] tipc: Disabling bearer [ 575.942397][T23605] mac80211_hwsim hwsim46 syzkaller0: entered promiscuous mode [ 575.950464][T23605] mac80211_hwsim hwsim46 syzkaller0: entered allmulticast mode [ 576.147781][T23619] netlink: 'syz.2.4874': attribute type 7 has an invalid length. [ 576.155541][T23619] netlink: 'syz.2.4874': attribute type 8 has an invalid length. [ 576.476135][T23626] team0: Port device team_slave_0 removed [ 576.621637][T23644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.138877][T23668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.154007][T23668] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.242961][T23668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 577.253338][T23668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.268931][T23668] veth1_vlan: left promiscuous mode [ 577.275290][T23668] veth0_vlan: left promiscuous mode [ 577.281379][T23668] veth0_vlan: entered promiscuous mode [ 577.290037][T23668] veth1_vlan: entered promiscuous mode [ 577.300975][T23668] veth1_macvtap: left promiscuous mode [ 577.334768][T23668] veth0_macvtap: left promiscuous mode [ 577.341452][T23668] veth0_macvtap: entered promiscuous mode [ 577.353685][T23668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.361336][T23668] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 577.369174][T23668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.377419][T23668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.385537][T23668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 577.400524][T23668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.412858][T23668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 577.457180][T23668] bridge0: entered promiscuous mode [ 577.463879][T23668] 8021q: adding VLAN 0 to HW filter on device bond3 [ 577.500798][T11500] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 577.508603][T11500] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 577.519069][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.526205][ T12] bridge0: port 2(bridge_slave_1) entered listening state [ 577.548243][ T7156] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 577.622195][T11501] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.630923][T11501] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.639712][T11501] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.668249][T11501] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.742194][T11501] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.750926][T11501] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.793141][ T7154] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 577.803838][ T35] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 577.812870][ T35] bond3: (slave veth5): making interface the new active one [ 577.824260][ T35] bond3: active interface up! [ 577.895953][T11501] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 577.904686][T11501] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.000539][ T7156] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 578.223157][T15034] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 578.235868][ T7154] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 578.280599][T23717] netlink: 'syz.2.4895': attribute type 64 has an invalid length. [ 578.655991][ T7154] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 579.239281][T23752] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 579.337723][T11500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.345574][T11500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.359396][ T142] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 579.367645][ T142] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 579.594449][T23771] netlink: 'syz.1.4907': attribute type 61 has an invalid length. [ 580.007565][T23793] __nla_validate_parse: 9 callbacks suppressed [ 580.007601][T23793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4912'. [ 582.080200][T23756] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.340761][T23827] ipvlan0: left allmulticast mode [ 582.411462][T23833] rdma_op ffff888056a1a1f0 conn xmit_rdma 0000000000000000 [ 582.674426][T23841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'. [ 582.747674][T23846] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 582.971440][T23851] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 583.298195][T23866] IPVS: Scheduler module ip_vs_sip not found [ 583.603325][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 583.603342][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 583.732892][T23889] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4939'. [ 583.755110][T23884] syzkaller0: entered promiscuous mode [ 583.760607][T23884] syzkaller0: entered allmulticast mode [ 583.853881][T23891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4940'. [ 583.864636][T23891] veth0_macvtap: left promiscuous mode [ 583.988661][T23898] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4943'. [ 584.482657][T23918] netlink: 'syz.4.4949': attribute type 1 has an invalid length. [ 585.079996][T23943] tipc: Resetting bearer [ 585.490259][T23961] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 585.589684][T23985] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4962'. [ 585.592954][T23987] netlink: 'syz.1.4961': attribute type 1 has an invalid length. [ 585.610124][T23986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4966'. [ 585.635470][T23987] 8021q: adding VLAN 0 to HW filter on device bond9 [ 585.666827][T23986] team1: entered promiscuous mode [ 585.671886][T23986] team1: entered allmulticast mode [ 586.370001][T24001] netlink: 'syz.1.4971': attribute type 5 has an invalid length. [ 588.434465][T23967] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 588.592688][T24022] FAULT_INJECTION: forcing a failure. [ 588.592688][T24022] name failslab, interval 1, probability 0, space 0, times 0 [ 588.641619][T24022] CPU: 1 UID: 0 PID: 24022 Comm: syz.3.4978 Not tainted syzkaller #0 PREEMPT(full) [ 588.641644][T24022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 588.641655][T24022] Call Trace: [ 588.641662][T24022] [ 588.641669][T24022] dump_stack_lvl+0xe8/0x150 [ 588.641697][T24022] should_fail_ex+0x412/0x560 [ 588.641722][T24022] should_failslab+0xa8/0x100 [ 588.641744][T24022] __kmalloc_noprof+0xe8/0x760 [ 588.641770][T24022] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 588.641800][T24022] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 588.641830][T24022] genl_family_rcv_msg_doit+0xd9/0x330 [ 588.641857][T24022] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 588.641887][T24022] ? apparmor_capable+0x126/0x170 [ 588.641912][T24022] ? bpf_lsm_capable+0x9/0x20 [ 588.641930][T24022] ? security_capable+0x7e/0x2c0 [ 588.642042][T24022] genl_rcv_msg+0x61c/0x7a0 [ 588.642069][T24022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 588.642089][T24022] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 588.642114][T24022] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 588.642132][T24022] ? __pfx_nl80211_post_doit+0x10/0x10 [ 588.642157][T24022] ? __pfx_ref_tracker_free+0x10/0x10 [ 588.642190][T24022] netlink_rcv_skb+0x232/0x4b0 [ 588.642217][T24022] ? __pfx_genl_rcv_msg+0x10/0x10 [ 588.642239][T24022] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 588.642279][T24022] ? down_read+0x270/0x2e0 [ 588.642298][T24022] ? genl_rcv+0xd/0x40 [ 588.642320][T24022] genl_rcv+0x28/0x40 [ 588.642338][T24022] netlink_unicast+0x75c/0x8e0 [ 588.642373][T24022] netlink_sendmsg+0x813/0xb40 [ 588.642407][T24022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.642436][T24022] ? aa_sock_msg_perm+0xf1/0x1b0 [ 588.642462][T24022] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 588.642489][T24022] ____sys_sendmsg+0x972/0x9f0 [ 588.642507][T24022] ? __might_fault+0xaf/0x130 [ 588.642535][T24022] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.642562][T24022] ? import_iovec+0x73/0xa0 [ 588.642599][T24022] ___sys_sendmsg+0x2a5/0x360 [ 588.642616][T24022] ? __lock_acquire+0x6b5/0x2cf0 [ 588.642639][T24022] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.642692][T24022] ? __fget_files+0x2a/0x420 [ 588.642712][T24022] ? __fget_files+0x3a0/0x420 [ 588.642743][T24022] __x64_sys_sendmsg+0x1bd/0x2a0 [ 588.642765][T24022] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 588.642792][T24022] ? __pfx_ksys_write+0x10/0x10 [ 588.642826][T24022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.642847][T24022] do_syscall_64+0x174/0x580 [ 588.642864][T24022] ? trace_irq_disable+0x3b/0x140 [ 588.642889][T24022] ? clear_bhb_loop+0x40/0x90 [ 588.642912][T24022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.642929][T24022] RIP: 0033:0x7f34b8f9ce59 [ 588.642948][T24022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.642963][T24022] RSP: 002b:00007f34b71f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.642983][T24022] RAX: ffffffffffffffda RBX: 00007f34b9215fa0 RCX: 00007f34b8f9ce59 [ 588.642996][T24022] RDX: 0000000004000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 588.643008][T24022] RBP: 00007f34b71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 588.643019][T24022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.643030][T24022] R13: 00007f34b9216038 R14: 00007f34b9215fa0 R15: 00007ffe4cdb7e58 [ 588.643060][T24022] [ 589.006980][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 589.087607][T24031] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4980'. [ 589.131258][T24030] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4980'. [ 589.402275][T24052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4986'. [ 589.444792][T24053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4987'. [ 589.494348][T24052] hsr_slave_1 (unregistering): left promiscuous mode [ 589.528746][T24055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4988'. [ 589.581733][T24060] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4989'. [ 589.753014][T24055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4988'. [ 589.856174][T24069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4991'. [ 589.957599][T24071] FAULT_INJECTION: forcing a failure. [ 589.957599][T24071] name failslab, interval 1, probability 0, space 0, times 0 [ 589.970234][T24071] CPU: 1 UID: 0 PID: 24071 Comm: syz.3.4992 Not tainted syzkaller #0 PREEMPT(full) [ 589.970257][T24071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 589.970268][T24071] Call Trace: [ 589.970276][T24071] [ 589.970283][T24071] dump_stack_lvl+0xe8/0x150 [ 589.970310][T24071] should_fail_ex+0x412/0x560 [ 589.970335][T24071] should_failslab+0xa8/0x100 [ 589.970354][T24071] __kmalloc_noprof+0xe8/0x760 [ 589.970379][T24071] ? nl80211_trigger_scan+0x52f/0x1f50 [ 589.970399][T24071] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 589.970429][T24071] nl80211_trigger_scan+0x52f/0x1f50 [ 589.970463][T24071] genl_family_rcv_msg_doit+0x22a/0x330 [ 589.970499][T24071] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 589.970533][T24071] ? bpf_lsm_capable+0x9/0x20 [ 589.970550][T24071] ? security_capable+0x7e/0x2c0 [ 589.970580][T24071] genl_rcv_msg+0x61c/0x7a0 [ 589.970607][T24071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.970625][T24071] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 589.970647][T24071] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 589.970665][T24071] ? __pfx_nl80211_post_doit+0x10/0x10 [ 589.970690][T24071] ? __pfx_ref_tracker_free+0x10/0x10 [ 589.970720][T24071] netlink_rcv_skb+0x232/0x4b0 [ 589.970746][T24071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.970769][T24071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.970810][T24071] ? down_read+0x270/0x2e0 [ 589.970830][T24071] ? genl_rcv+0xd/0x40 [ 589.970851][T24071] genl_rcv+0x28/0x40 [ 589.970869][T24071] netlink_unicast+0x75c/0x8e0 [ 589.970904][T24071] netlink_sendmsg+0x813/0xb40 [ 589.970936][T24071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.970964][T24071] ? aa_sock_msg_perm+0xf1/0x1b0 [ 589.970989][T24071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 589.971016][T24071] ____sys_sendmsg+0x972/0x9f0 [ 589.971035][T24071] ? __might_fault+0xaf/0x130 [ 589.971064][T24071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.971092][T24071] ? import_iovec+0x73/0xa0 [ 589.971118][T24071] ___sys_sendmsg+0x2a5/0x360 [ 589.971135][T24071] ? __lock_acquire+0x6b5/0x2cf0 [ 589.971159][T24071] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.971212][T24071] ? __fget_files+0x2a/0x420 [ 589.971233][T24071] ? __fget_files+0x3a0/0x420 [ 589.971264][T24071] __x64_sys_sendmsg+0x1bd/0x2a0 [ 589.971285][T24071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 589.971311][T24071] ? __pfx_ksys_write+0x10/0x10 [ 589.971345][T24071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.971365][T24071] do_syscall_64+0x174/0x580 [ 589.971382][T24071] ? trace_irq_disable+0x3b/0x140 [ 589.971408][T24071] ? clear_bhb_loop+0x40/0x90 [ 589.971430][T24071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.971448][T24071] RIP: 0033:0x7f34b8f9ce59 [ 589.971466][T24071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.971489][T24071] RSP: 002b:00007f34b71f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.971509][T24071] RAX: ffffffffffffffda RBX: 00007f34b9215fa0 RCX: 00007f34b8f9ce59 [ 589.971522][T24071] RDX: 0000000004000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 589.971533][T24071] RBP: 00007f34b71f6090 R08: 0000000000000000 R09: 0000000000000000 [ 589.971544][T24071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.971555][T24071] R13: 00007f34b9216038 R14: 00007f34b9215fa0 R15: 00007ffe4cdb7e58 [ 589.971584][T24071] [ 590.710203][T24082] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 590.736569][T24082] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 590.754761][T24086] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 590.907679][T24086] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode [ 590.947875][T24086] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode [ 591.241366][T24107] netlink: 'syz.2.5000': attribute type 1 has an invalid length. [ 591.355035][T24116] ------------[ cut here ]------------ [ 591.361033][T24116] !ieee80211_prep_hw_scan(sdata) [ 591.361088][T24116] WARNING: net/mac80211/scan.c:879 at __ieee80211_start_scan+0x1336/0x1d40, CPU#0: syz.0.5003/24116 [ 591.378332][T24116] Modules linked in: [ 591.383214][T24116] CPU: 0 UID: 0 PID: 24116 Comm: syz.0.5003 Not tainted syzkaller #0 PREEMPT(full) [ 591.394619][T24116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.405525][T24116] RIP: 0010:__ieee80211_start_scan+0x1336/0x1d40 [ 591.412044][T24116] Code: 06 90 e8 bd 74 b0 f6 48 83 fd 09 0f 84 41 07 00 00 83 fd 03 0f 84 3f 07 00 00 e8 25 6f b0 f6 e9 d5 f2 ff ff e8 1b 6f b0 f6 90 <0f> 0b 90 e9 0d fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 53 fa [ 591.431660][T24116] RSP: 0018:ffffc9000674f170 EFLAGS: 00010293 [ 591.441182][T24116] RAX: ffffffff8b154795 RBX: ffff888053bf8e40 RCX: ffff888079661f00 [ 591.449171][T24116] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 591.457099][T24112] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5002'. [ 591.457140][T24116] RBP: ffff88804acc3024 R08: ffffffff903034f7 R09: 1ffffffff206069e [ 591.474023][T24108] bond3: (slave bridge3): making interface the new active one [ 591.476743][T24108] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 591.495257][T24116] R10: dffffc0000000000 R11: fffffbfff206069f R12: ffff88804acc3060 [ 591.505572][T24116] R13: dffffc0000000000 R14: ffff88805c5a0f20 R15: ffff88805c5a2a88 [ 591.517699][T24116] FS: 00007fe61492d6c0(0000) GS:ffff8881252a0000(0000) knlGS:0000000000000000 [ 591.532337][T24116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.538928][T24116] CR2: 00007fe613987cc0 CR3: 0000000075924000 CR4: 00000000003526f0 [ 591.546913][T24116] Call Trace: [ 591.550199][T24116] [ 591.558517][T24116] rdev_scan+0x147/0x300 [ 591.562859][T24116] nl80211_trigger_scan+0x1aa1/0x1f50 [ 591.568258][T24116] genl_family_rcv_msg_doit+0x22a/0x330 [ 591.573831][T24116] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 591.579923][T24116] ? bpf_lsm_capable+0x9/0x20 [ 591.584607][T24116] ? security_capable+0x7e/0x2c0 [ 591.593384][T24116] genl_rcv_msg+0x61c/0x7a0 [ 591.597908][T24116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 591.602948][T24116] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 591.608334][T24116] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 591.614064][T24116] ? __pfx_nl80211_post_doit+0x10/0x10 [ 591.623532][T24116] ? __pfx_ref_tracker_free+0x10/0x10 [ 591.628934][T24116] netlink_rcv_skb+0x232/0x4b0 [ 591.633715][T24116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 591.638756][T24116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 591.644349][T24116] ? down_read+0x270/0x2e0 [ 591.650015][T24116] ? genl_rcv+0xd/0x40 [ 591.658303][T24116] genl_rcv+0x28/0x40 [ 591.662395][T24116] netlink_unicast+0x75c/0x8e0 [ 591.667186][T24116] netlink_sendmsg+0x813/0xb40 [ 591.671969][T24116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.677271][T24116] ? aa_sock_msg_perm+0xf1/0x1b0 [ 591.682655][T24116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.691110][T24116] ____sys_sendmsg+0x972/0x9f0 [ 591.695894][T24116] ? __might_fault+0xaf/0x130 [ 591.700593][T24116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.705899][T24116] ? import_iovec+0x73/0xa0 [ 591.710421][T24116] ___sys_sendmsg+0x2a5/0x360 [ 591.715105][T24116] ? __lock_acquire+0x6b5/0x2cf0 [ 591.724652][T24116] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.729914][T24116] ? __fget_files+0x2a/0x420 [ 591.734517][T24116] ? __fget_files+0x3a0/0x420 [ 591.739219][T24116] __x64_sys_sendmsg+0x1bd/0x2a0 [ 591.744181][T24116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 591.749656][T24116] ? __pfx_ksys_write+0x10/0x10 [ 591.759366][T24116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.769401][T24116] do_syscall_64+0x174/0x580 [ 591.781453][T24116] ? trace_irq_disable+0x3b/0x140 [ 591.790758][T24116] ? clear_bhb_loop+0x40/0x90 [ 591.796064][T24116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.802651][T24116] RIP: 0033:0x7fe61399ce59 [ 591.807633][T24116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.829365][T24116] RSP: 002b:00007fe61492d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.837797][T24116] RAX: ffffffffffffffda RBX: 00007fe613c15fa0 RCX: 00007fe61399ce59 [ 591.845777][T24116] RDX: 0000000004000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 591.853754][T24116] RBP: 00007fe61492d090 R08: 0000000000000000 R09: 0000000000000000 [ 591.866063][T24116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.874052][T24116] R13: 00007fe613c16038 R14: 00007fe613c15fa0 R15: 00007fff3acb29d8 [ 591.882051][T24116] [ 591.885089][T24116] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 591.892364][T24116] CPU: 0 UID: 0 PID: 24116 Comm: syz.0.5003 Not tainted syzkaller #0 PREEMPT(full) [ 591.901729][T24116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.911769][T24116] Call Trace: [ 591.915035][T24116] [ 591.917954][T24116] vpanic+0x56c/0xa60 [ 591.921953][T24116] ? __pfx__printk+0x10/0x10 [ 591.926533][T24116] ? __pfx_vpanic+0x10/0x10 [ 591.931025][T24116] ? is_bpf_text_address+0x292/0x2b0 [ 591.936308][T24116] ? is_bpf_text_address+0x26/0x2b0 [ 591.941500][T24116] panic+0xc5/0xd0 [ 591.945222][T24116] ? __pfx_panic+0x10/0x10 [ 591.949651][T24116] __warn+0x315/0x4c0 [ 591.953630][T24116] ? __ieee80211_start_scan+0x1336/0x1d40 [ 591.959370][T24116] ? __ieee80211_start_scan+0x1336/0x1d40 [ 591.965081][T24116] __report_bug+0x29a/0x540 [ 591.969679][T24116] ? __ieee80211_start_scan+0x1336/0x1d40 [ 591.975396][T24116] ? __pfx___report_bug+0x10/0x10 [ 591.980410][T24116] ? irqentry_exit+0x218/0x8b0 [ 591.985163][T24116] ? trace_irq_disable+0x3b/0x140 [ 591.990194][T24116] ? __ieee80211_start_scan+0x1338/0x1d40 [ 591.995917][T24116] ? __ieee80211_start_scan+0x1336/0x1d40 [ 592.001652][T24116] ? __ieee80211_start_scan+0x1336/0x1d40 [ 592.007372][T24116] report_bug+0x16a/0x220 [ 592.011690][T24116] ? __ieee80211_start_scan+0x1336/0x1d40 [ 592.017396][T24116] ? __ieee80211_start_scan+0x1338/0x1d40 [ 592.023102][T24116] handle_bug+0x9c/0x200 [ 592.027334][T24116] exc_invalid_op+0x1a/0x50 [ 592.031823][T24116] asm_exc_invalid_op+0x1a/0x20 [ 592.036658][T24116] RIP: 0010:__ieee80211_start_scan+0x1336/0x1d40 [ 592.042981][T24116] Code: 06 90 e8 bd 74 b0 f6 48 83 fd 09 0f 84 41 07 00 00 83 fd 03 0f 84 3f 07 00 00 e8 25 6f b0 f6 e9 d5 f2 ff ff e8 1b 6f b0 f6 90 <0f> 0b 90 e9 0d fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 53 fa [ 592.062571][T24116] RSP: 0018:ffffc9000674f170 EFLAGS: 00010293 [ 592.068624][T24116] RAX: ffffffff8b154795 RBX: ffff888053bf8e40 RCX: ffff888079661f00 [ 592.076601][T24116] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 592.084566][T24116] RBP: ffff88804acc3024 R08: ffffffff903034f7 R09: 1ffffffff206069e [ 592.092526][T24116] R10: dffffc0000000000 R11: fffffbfff206069f R12: ffff88804acc3060 [ 592.100488][T24116] R13: dffffc0000000000 R14: ffff88805c5a0f20 R15: ffff88805c5a2a88 [ 592.108473][T24116] ? __ieee80211_start_scan+0x1335/0x1d40 [ 592.114250][T24116] rdev_scan+0x147/0x300 [ 592.118493][T24116] nl80211_trigger_scan+0x1aa1/0x1f50 [ 592.123862][T24116] genl_family_rcv_msg_doit+0x22a/0x330 [ 592.129405][T24116] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 592.135468][T24116] ? bpf_lsm_capable+0x9/0x20 [ 592.140137][T24116] ? security_capable+0x7e/0x2c0 [ 592.145091][T24116] genl_rcv_msg+0x61c/0x7a0 [ 592.149593][T24116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 592.154605][T24116] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 592.159989][T24116] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 592.165695][T24116] ? __pfx_nl80211_post_doit+0x10/0x10 [ 592.171148][T24116] ? __pfx_ref_tracker_free+0x10/0x10 [ 592.176518][T24116] netlink_rcv_skb+0x232/0x4b0 [ 592.181277][T24116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 592.186286][T24116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 592.191575][T24116] ? down_read+0x270/0x2e0 [ 592.195983][T24116] ? genl_rcv+0xd/0x40 [ 592.200057][T24116] genl_rcv+0x28/0x40 [ 592.204041][T24116] netlink_unicast+0x75c/0x8e0 [ 592.208816][T24116] netlink_sendmsg+0x813/0xb40 [ 592.213604][T24116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.218907][T24116] ? aa_sock_msg_perm+0xf1/0x1b0 [ 592.223862][T24116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 592.229164][T24116] ____sys_sendmsg+0x972/0x9f0 [ 592.233922][T24116] ? __might_fault+0xaf/0x130 [ 592.238596][T24116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.243872][T24116] ? import_iovec+0x73/0xa0 [ 592.248371][T24116] ___sys_sendmsg+0x2a5/0x360 [ 592.253032][T24116] ? __lock_acquire+0x6b5/0x2cf0 [ 592.258001][T24116] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.263214][T24116] ? __fget_files+0x2a/0x420 [ 592.267802][T24116] ? __fget_files+0x3a0/0x420 [ 592.272481][T24116] __x64_sys_sendmsg+0x1bd/0x2a0 [ 592.277409][T24116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 592.282859][T24116] ? __pfx_ksys_write+0x10/0x10 [ 592.287706][T24116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.293760][T24116] do_syscall_64+0x174/0x580 [ 592.298337][T24116] ? trace_irq_disable+0x3b/0x140 [ 592.303351][T24116] ? clear_bhb_loop+0x40/0x90 [ 592.308017][T24116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.313892][T24116] RIP: 0033:0x7fe61399ce59 [ 592.318296][T24116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.337888][T24116] RSP: 002b:00007fe61492d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.346295][T24116] RAX: ffffffffffffffda RBX: 00007fe613c15fa0 RCX: 00007fe61399ce59 [ 592.354252][T24116] RDX: 0000000004000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 592.362207][T24116] RBP: 00007fe61492d090 R08: 0000000000000000 R09: 0000000000000000 [ 592.370164][T24116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.378128][T24116] R13: 00007fe613c16038 R14: 00007fe613c15fa0 R15: 00007fff3acb29d8 [ 592.386109][T24116] [ 592.389395][T24116] Kernel Offset: disabled [ 592.393710][T24116] Rebooting in 86400 seconds..